last executing test programs: 17.904635974s ago: executing program 3 (id=2839): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000080)={@private=0xe1010203, @empty, 0x1}, 0xc) socket$packet(0x11, 0x2, 0x300) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) ioctl$XFS_IOC_ERROR_INJECTION(r0, 0x40085874, &(0x7f00000004c0)={r1, 0x2}) connect$nfc_raw(0xffffffffffffffff, &(0x7f0000000040)={0x27, 0x0, 0xffffffffffffffff, 0x5}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x1}) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000240)={'rose0\x00', 0x400}) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x20000003}, @empty, @private=0xa010101, 0xff000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r2, &(0x7f0000000480)=ANY=[], 0x20) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000000)={0x84, @rand_addr=0x64010102, 0x4e21, 0x3, 'dh\x00', 0xb, 0xa88, 0x8}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000100)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@remote, 0x4e23, 0x4, 0x1c8, 0x12d63, 0x6}}, 0x44) r7 = socket$nl_route(0x10, 0x3, 0x0) sendto(r7, &(0x7f00000000c0)="340000001a00010001000000000000000220000000000000000000000800030001000000080025560101010108000100e1010203", 0x34, 0x20000810, 0x0, 0x0) 17.293903248s ago: executing program 3 (id=2845): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_ENCODED_READ(r0, 0x80809440, &(0x7f0000000800)={&(0x7f0000000780)=[{&(0x7f0000000340)="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", 0xfe}, {&(0x7f0000000440)="c4e0b1c7bf507d433c72858fae50fcb9497c8e098715413c9b4c3c5892fbe03c2ab42ef853c30247dced54e3071bb5bf41ba565c238e493e29576328ca02bf3561ce09fc0c28f2fad06df08f0457ec420e4420f709a7ceff0e638d7d66c73b9033154c5b9d94582a3ae83f61734ac99e13dc244ce993cf5a365d6fc8e06031f51e25985abca48b480c34ff5ca7ac481695940a3070f308b78d6bfc508a04ed0976db9e006ce9aaca8e3f", 0xaa}, {&(0x7f0000000500)="cf06332697c76fa8903829902634828ebb26c19431aa280405fa292bc27ef1347430a6122ccaffe0432fef01c910a9cd34985ea76f1b6ff541e29369cd0c1d57438956c44725afc9b63b344ceeb89f6e84ebcbf61bc1a53946029673c219a9c86af9f5c556f1fdf54396d1e781c3758c30def51a6b355abbb848b84ecf599f60c48c34a42eea1daa3a423cbd33a29be2a902d7f7b1e251fa7f4b92b8fab38beeb0b46e797e7641631874bb1a1c34290002872a7ac023b7fabfecf4", 0xbb}, {&(0x7f00000005c0)="c04113955a578a12581a52c68a5c239903e6fbab9f9d58d78440beffde277842a9dda8404588ada19d289cc7000dd4d35b", 0x31}, {&(0x7f0000000600)="b03ccf719ed744f104a3935746862de22c877ca44c5d24229ce49ec017c60204ca73d40dd1e835d16267e830305dca312e47a7915f27f4af566ac4ed7dcef9c6ce3ae862f4e8b492954dd29cbdc1fb0761c8e3ac2fc0459119b96e5b53a92b28fe743acafe239943e58a8f41a5bfaae578bbc365e705ee74b93c8781853778e2557ade9f52", 0x85}, {&(0x7f00000006c0)="ca28f40545c3c72f593a33d1d2f290dd2b3908e409b52b697f68a21a539a61300fe9eb34f6c339db3266b7e20ac90826c83f3877ae13a75a784e2b453591e15cb12e9fabe37afcbbd1a708caabcc3bfc8740c746c3bc224fbf0e8582651c1c99a378b006a01e9cbaed59f3b5fa1389fc28368aa10dac9ddea11392aaadc61b97986efe64d8b21b2493f55dc67a46a543ff683010bd0dc1be1541d4d841e1b64f5d8524", 0xa3}], 0x6, 0x5, 0x0, 0x401, 0xb00, 0xfffffffffffffff8, 0x5}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000280)=r3, 0x4) sendmsg$unix(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x8040) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, &(0x7f0000000300)={0x0, 0x0, 0x7}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000ffff26bd7000fddbdf4300000000", @ANYRES32=0x0, @ANYBLOB="100a050023000000240012800b000100627269646765000014000280080003000a040000080004000e000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$BTRFS_IOC_ENCODED_READ(r0, 0x80809440, &(0x7f0000000800)={&(0x7f0000000780)=[{&(0x7f0000000340)="303d37b1df9702b644268cdfce33c4accd1fc656fc0cbeb5323131e8b1c4858861d5ff45fa5ff4d46b0ecc42e53a15c8df13938f7c05cedf2375c5c89f5bd23ad8682639dc93a7d4fdfcec05eb4935a2dd3e7e06c9ae5db839f11a0f81ab754735c440ae760a798c41293e5709fcdb3b760785135fb4fef0aa5c41982bfeddc4519e93d53629e9d34e655ed1d3ad182dd3c9693b3d14514f503725048e478cd3e4751e7582d973d08daa564353ec1f3b608defcc492560b42db7a613be6c8db0785c8419486134ec6034570c84814e3aff7b4419659d97d524e280ba15b016caa4f233fdeb687cb6f5cdad2d01532756312f8fc03128780ea67dad807cfa", 0xfe}, {&(0x7f0000000440)="c4e0b1c7bf507d433c72858fae50fcb9497c8e098715413c9b4c3c5892fbe03c2ab42ef853c30247dced54e3071bb5bf41ba565c238e493e29576328ca02bf3561ce09fc0c28f2fad06df08f0457ec420e4420f709a7ceff0e638d7d66c73b9033154c5b9d94582a3ae83f61734ac99e13dc244ce993cf5a365d6fc8e06031f51e25985abca48b480c34ff5ca7ac481695940a3070f308b78d6bfc508a04ed0976db9e006ce9aaca8e3f", 0xaa}, {&(0x7f0000000500)="cf06332697c76fa8903829902634828ebb26c19431aa280405fa292bc27ef1347430a6122ccaffe0432fef01c910a9cd34985ea76f1b6ff541e29369cd0c1d57438956c44725afc9b63b344ceeb89f6e84ebcbf61bc1a53946029673c219a9c86af9f5c556f1fdf54396d1e781c3758c30def51a6b355abbb848b84ecf599f60c48c34a42eea1daa3a423cbd33a29be2a902d7f7b1e251fa7f4b92b8fab38beeb0b46e797e7641631874bb1a1c34290002872a7ac023b7fabfecf4", 0xbb}, {&(0x7f00000005c0)="c04113955a578a12581a52c68a5c239903e6fbab9f9d58d78440beffde277842a9dda8404588ada19d289cc7000dd4d35b", 0x31}, {&(0x7f0000000600)="b03ccf719ed744f104a3935746862de22c877ca44c5d24229ce49ec017c60204ca73d40dd1e835d16267e830305dca312e47a7915f27f4af566ac4ed7dcef9c6ce3ae862f4e8b492954dd29cbdc1fb0761c8e3ac2fc0459119b96e5b53a92b28fe743acafe239943e58a8f41a5bfaae578bbc365e705ee74b93c8781853778e2557ade9f52", 0x85}, {&(0x7f00000006c0)="ca28f40545c3c72f593a33d1d2f290dd2b3908e409b52b697f68a21a539a61300fe9eb34f6c339db3266b7e20ac90826c83f3877ae13a75a784e2b453591e15cb12e9fabe37afcbbd1a708caabcc3bfc8740c746c3bc224fbf0e8582651c1c99a378b006a01e9cbaed59f3b5fa1389fc28368aa10dac9ddea11392aaadc61b97986efe64d8b21b2493f55dc67a46a543ff683010bd0dc1be1541d4d841e1b64f5d8524", 0xa3}], 0x6, 0x5, 0x0, 0x401, 0xb00, 0xfffffffffffffff8, 0x5}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000280)=r3, 0x4) (async) sendmsg$unix(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x8040) (async) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, &(0x7f0000000300)={0x0, 0x0, 0x7}) (async) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000ffff26bd7000fddbdf4300000000", @ANYRES32=0x0, @ANYBLOB="100a050023000000240012800b000100627269646765000014000280080003000a040000080004000e000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) (async) 16.769031031s ago: executing program 3 (id=2850): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r2 = socket$kcm(0x29, 0x5, 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000040), 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000300)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000340)={0x0, 0x1}, 0x1}, 0x94) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000380), 0x0) close(r7) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001f00)={0x1, 0x5, &(0x7f0000001fc0)=ANY=[@ANYBLOB="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"], &(0x7f00000029c0)='GPL\x00'}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000002a00)={r8, 0xffffffffffffffff, 0x32, 0x0, @void}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_ext={0x1a, 0xf, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000540)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r6, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000580)={r7, r7, 0x19, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x9f1e}}, 0x40) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r3, r3, 0x19, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x9f1e}}, 0x40) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xffe4, &(0x7f0000000640)=[{&(0x7f0000000680)="b6bd7e4983a45b31f79d80060400000000000000a33734d88229acf96457ad59d0b87f8659b614043e3d21a7cacecab8bbd26251b93b28b4d83e618673f9c74d0a28a5146c5511549fa617e908352c87d8ddff2ce042a1e58eb7b63759cab3526dd8ae1566ddcfb5fa83e8b2940b3ed1b8", 0x71}, {&(0x7f0000000700)="3aa854", 0x3}, {&(0x7f0000000740)="746b9120a32aaf78043a9b07000000000000003c44", 0xfffffe16}], 0x3}, 0xc854) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x2c, 0x2, 0x8, 0x0, 0x0, 0x0, {0x5, 0x0, 0x6}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4050}, 0x4004842) setsockopt$sock_int(r2, 0x1, 0x1b, &(0x7f0000000780)=0x4c, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000007c0)={r1}, 0x4) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001940), r10) sendmsg$NL802154_CMD_SET_TX_POWER(r10, &(0x7f0000001980)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000001a00)={0x1c, r11, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x40) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001a40)={'wpan1\x00', 0x0}) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000001d40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001e00)={&(0x7f0000001e40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0x3) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r9, &(0x7f0000001a80)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0xa000488}, 0xc, &(0x7f0000001b00)={&(0x7f0000001b40)={0x174, r11, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_DEVKEY={0x3c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x2c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8000}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}]}, @NL802154_ATTR_SEC_DEVKEY={0x28, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}]}, @NL802154_ATTR_SEC_DEVKEY={0xe8, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x34, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}]}, @NL802154_DEVKEY_ATTR_ID={0x2c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}]}, @NL802154_DEVKEY_ATTR_ID={0x18, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x40, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x10001}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xa}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x38b33e86}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x840}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000001a0001002dbd7000010000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000008001f00c0000000140002"], 0x38}, 0x1, 0x0, 0x0, 0x404c055}, 0x0) 15.31070029s ago: executing program 3 (id=2856): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001440)={{r4}, &(0x7f0000001480), &(0x7f00000014c0)='%pi6 \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001500)={{r1}, &(0x7f0000001540), &(0x7f0000001580)='%pS \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000015c0)={r3, &(0x7f0000001600)}, 0x20) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x10, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@jmp={0x5, 0x1, 0x1, 0xa, 0xa, 0xfffffffffffffff5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000003c0)='GPL\x00', 0xb, 0x100a, &(0x7f0000000400)=""/4106, 0x41100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) 14.993933732s ago: executing program 3 (id=2860): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000000)={0xffffffffffffffff, 0x4, 0x1, 0x0, @vifc_lcl_addr=@broadcast, @rand_addr=0x64010102}, 0x10) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='team_slave_0\x00', 0x10) (async) ioctl$NILFS_IOCTL_GET_VINFO(r0, 0xc0186e86, &(0x7f00000000c0)={&(0x7f0000000080)=[{0x6d2, 0x81, 0x8f3c, 0xd}], 0x1, 0x20, 0x10, 0x67}) (async) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000100)={{r0}, "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"}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000001140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000001240)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x1c, r2, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000810) socket$igmp(0x2, 0x3, 0x2) (async) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x64, r2, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1000}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1000}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000080}, 0x44000) (async) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001400), r1) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r1, &(0x7f00000014c0)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x34, r4, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfffffb1d}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40020}, 0x20000001) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000001500), 0x88800, 0x0) write$tun(r5, &(0x7f0000001540)={@val={0x0, 0x88e7}, @val={0x2, 0x3, 0x7ff, 0x7, 0xffff, 0x5a}, @ipv6=@dccp_packet={0x3, 0x6, "ba57e2", 0xb2, 0x21, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, {[@routing={0x1, 0x4, 0x1, 0x8, 0x0, [@dev={0xfe, 0x80, '\x00', 0x16}, @mcast1]}], {{0x4e21, 0x4e24, 0x4, 0x1, 0x4, 0x0, 0x0, 0x3, 0x1, "ef69b7", 0x2, "a79194"}, "1c7e9e94d3dadd119c8c4eacde0ea020b01cf32eb50801899fec00008c35d1d31aaf85c53b85147208194351be5d5aa0cd7b712b71a4174f4605302e8bebf1fea878750de146b15c372f3214fb2d7bfca94457ac4d67c5ed8730716b86debb9f1f5e099c9e74c1e994e3388bebcd061f51cb62c38c7296ddc692"}}}}, 0xe8) (async) socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r6, 0x84, 0xc, &(0x7f0000001640), &(0x7f0000001680)=0x4) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f00000016c0)={0x1, 0x59}, &(0x7f0000001700)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f0000001740)={r7, 0x9, 0x95, "60d3a7108b8459a36fd8086da251a61f083b6149a4c134c0a2a112b7b6dea97f52e17992dcbb2ea73c938ba9ac0b6dd4b75bf36b4097e487475090161c6a19c3bb918aa8917cf5328a0fca6f213c39ad0577b1ad1aa873664c3623e768a864a00ceb88c6766b04c3362cbe27b7d596d0e90c4c453681602d1f6f37747bdc6aa8267bc9601958d341735813e86bf2121eac8c093531"}, 0x9d) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001800)='./cgroup.cpu/syz1\x00', 0x1ff) writev(r5, &(0x7f0000001940)=[{&(0x7f0000001840)="418b7758499aa17396b56820cf43e8c4c43a90843fa79cb57a000926407c63ce7eaf336596c130700b74bcf23d13e4db344b490ce5d114639f36a8d38adc67ebfaa9dc39f235ff99", 0x48}, {&(0x7f00000018c0)="0b2e5a89893926b85c94e81c0e5332e774cd43b3c0f1d6335f65b70ba0c0a4e034ce7bd39f9884b014ca90da5255f5f65aa9818893e2b9d8a940f100c052b8de187fdc940d0c039a790c67634f391335ed7b8189b384592b66ce", 0x5a}], 0x2) (async) ioctl$sock_inet_SIOCGIFBRDADDR(r6, 0x8919, &(0x7f0000001980)={'bridge0\x00', {0x2, 0x0, @multicast2}}) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f00000019c0)={'veth1_to_hsr\x00', @broadcast}) (async) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r8, 0x6, 0x21, &(0x7f0000001a00)="94f8eaee6752870fd8efa04454b99efc", 0x10) getsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f0000001a40)={{{@in6=@dev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@broadcast}}, &(0x7f0000001b40)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r8, 0x0, 0x10, &(0x7f0000001b80)={{{@in6=@private0, @in6=@loopback, 0x4e22, 0x1ff, 0x4e24, 0xffff, 0x2, 0x80, 0x80, 0x16, 0x0, r9}, {0x0, 0x8001, 0x9, 0x7, 0x5, 0x0, 0x8, 0x1}, {0x100, 0x7, 0x7, 0x8}, 0x6, 0x6e6bbe, 0x1, 0x0, 0x1, 0x3}, {{@in=@multicast2, 0x4d6}, 0xa, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3501, 0x2, 0x3, 0x2, 0x3, 0x80000000, 0x6}}, 0xe8) (async) socket$nl_route(0x10, 0x3, 0x0) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000001d80)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001d00)={0x40, 0x0, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDR6={0x14, 0xb, @private2}]}, 0x40}, 0x1, 0x0, 0x0, 0x841}, 0x40895) 14.707872074s ago: executing program 3 (id=2861): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000000c0)={0x0, 0xa1ff, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01fffff0000000000000200100000c000280080002006c6f0000180003800400010008000200200000000800040076"], 0x38}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@bridge_delneigh={0x24, 0x1e, 0x400, 0x70bd2d, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x0, 0x0, 0x64f0b58b7749250e}, [@NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x24}}, 0x20000004) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f00000001c0), 0x806000) (async) connect$bt_l2cap(r3, &(0x7f0000000200)={0x1f, 0x3, @any, 0x6, 0x1}, 0xe) 5.058239411s ago: executing program 1 (id=2900): r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="340000001a000100000000000000000002202000000000000000000008000100e001020308000200ac1414bb0800050001000000", 0x34) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="68000000000905040000000000000000020000000900010073797a3000000000140002800600010000020000050002000600000008000500000000002c0004800800010000000001200002800c000100706f6c696379301c0800020000000043950003000000001e", 0x68}], 0x1}, 0x0) 4.869914032s ago: executing program 4 (id=2901): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000026c0)={0x16, 0xc, &(0x7f0000002780)=ANY=[], &(0x7f00000027c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002800)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000002880)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000028c0)=ANY=[@ANYRESDEC=0x0, @ANYBLOB="f84b0b1d50955c4cb7c9020428e378f37f4492fde24cdc240bedeecec118ae0258b687faaf2621c285820a67091dc5bd9e23feac54da792849aa016d36e0c86a238f84fd4138ed53c8562ca410157e0184632c11be55687d63b0d8651f4a48059650564587a38f77c2efd51f6cd7dfb8bad161937d41ab3d505aa74222f0d7261c5c67f73f1f96f675bb1339b847c66cf42ae1cc4f869fe8542212369ffa99b86fd98d1da7f75996fe108799ab3851b8972468fbba85ea", @ANYRES8=r0, @ANYBLOB="4ebfe555e82e3390f4f31e2ec3fddc8939b75e37d8120a723561a8a6f732a2a7d9442f3647844d2ccd435a603376decb3a5e08c8a6a2a45273247b4fe60d8dbb2137f07bebbbe34fcb39d6f71e5f45f5793f8fdaacc9695f65c5a5d47e6fcae4ff233f587cffcc4cf0128576c82f3a3d697b71826766ba67a96307765eb9f6ee4d29f8d15e70d2229a371939d5fcba4760c81b0952945911ac94b21582f7142a9d4fb7986c5adc354f5a467478126bd3c45fe9082192693797e77d819b8ce2799a5e03ecfb5e35ba789c0717a104e7d3ed66fe59a93fa1e2b10a750c93db5908d3685e99203cc8d127c65e", @ANYRESOCT=r0, @ANYRESHEX=r0, @ANYBLOB="661692db644701ec153111adb0eed7cf7c00490cd5fa70a6f4e87e06a98227b02b41f2a568eb9ca40d84c447ae306360d768f45a971b0dcfae972e060ab046f100f63f03c2b8596081300d908ad487c3786d2fc85840bed9c720d4afa25e93ad13237db112158e5a078bb1c4bb6b0a", @ANYRESOCT=r0], 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xc, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000001280)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000012c0)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001340)="5aee41dea43e63a3f7fb7f110000", 0x0, 0xf004, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000002580)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000002600)=ANY=[@ANYBLOB="b8000000190001000000000000000100e00000020000000000000000000000006401010100000000000000000000000000000000000000000a00000029000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0800000000000000000000000000000001000000010000000000000000000000000000000000000073b4ffffffffffffffffffffffffffff0000000000000000000000001000000000000000000000200000000000000000ffffff3a7f45ed755ed5a894ffffffffff"], 0xb8}}, 0x4004) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000000240)={"687ac13d1698104fb5279d7b9de0cc77", 0x0, 0x0, {0xb048, 0x2}, {0x7fffffffffffffff, 0x1}, 0x8, [0x8000000000000001, 0x3ff, 0x1, 0x202, 0x7, 0x800, 0x3, 0x3ff, 0x8, 0x3a, 0x2, 0x8, 0xc54a, 0x0, 0x400, 0x6e]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000001400)={{r5}, r6, 0x1e, @inherit={0x50, &(0x7f0000002c80)=ANY=[@ANYBLOB="0100000400000000000000000000040000800000000020030000000000000008008000000000f9ffffffffffffffff00000000000500000000000000000000ff000000000000e89f84c4a0453733322d46ec8a7e4b1606f2ce0ae96d18a9e8fd9780e60074a971336647ae61a769a0ce6532a274a129b7e792f6f3aed3370bab4239b8ffd7c6e3366cd98690974b5efb98800d170578f5cd92bfae17f4b935a768858b7f0d983babf8c3083c0403df46d5570d73d4531f53317390778de3c6fbed6bb94d9df79881cbb31127aa842a3548fef1183b5188bf377030a58bf28486be4619190b226f88b37cdc46b371a530435258e415ea7b19a3e239f8e56924c7dc8d1e4ce38cf259ccb5f080bb703d54c4eba2a64029f085416ababb6c5f"]}, @name="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"}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r5}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x19, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000002009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf980000000000000d"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r8, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0xc, &(0x7f00000001c0)=@assoc_value={0x0}, &(0x7f0000002400)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000002440)=@assoc_value={r10, 0x2}, 0x8) r11 = socket$kcm(0x29, 0x2, 0x0) sendmsg$sock(r11, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000002b80)="a253c364", 0x4}], 0x1}, 0x1080) sendmmsg$inet(r11, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002c40)="03362a", 0x3}], 0x1}}], 0x1, 0x40) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r7, 0x84, 0x6c, &(0x7f0000002480)={r10, 0xe1, "1052162e420cb6f49d636d6076ec29688f1d029f7caf8dd0143f9822a6f4f8c211190d99b218430791eafa2eadc06a28efeb2410a7a35bdffce53a23f6a8a67a9d6692ba78d46801da2be3934f129ae76f1398741b14d2eb8c293827ed202c58a0fbbb87e4a92826ce23a162811a5f77a26b7592e8432fd36348b2182d99226ad560c74250683fa10e9d68cac7ceb7864cb595bb5f0377895a4b657a5339b163ac12a37a20007374a225f51ad04de0c6a479cdd373a342a7ff0d504d769c7663534483122208d70b568c5b7bd0e5f74b97ca2ebe6d892d3eb199de877420c130b4"}, 0xfffffffffffffffd) 4.827696876s ago: executing program 1 (id=2902): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00'}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000000)={0x7, &(0x7f0000000040)=[{0x5}, {}, {0xffff, 0x0, 0x6}, {}, {0x6, 0x0, 0x0, 0x1}, {0x0, 0x7}, {0x0, 0x0, 0x1, 0x420008}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0d0000000a000000040004000100"], 0x48) r1 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f00000000c0)) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890c, &(0x7f0000000100)) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_BINDTODEVICE_wg(r6, 0x1, 0x19, 0x0, 0x18) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="190000000400"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r8, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)=r9}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r10}, &(0x7f0000000680)=0x20000, &(0x7f00000006c0)=r9}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, r8, 0xced, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x5}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000780)={r10, &(0x7f00000007c0)}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000800)={'wlan1\x00', 0x0}) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r12, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)={0x28, r7, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000940)={'wlan1\x00', 0x0}) r16 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r16, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)={0x20, r14, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r15}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x48000) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)={0x1c, r4, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.338442163s ago: executing program 4 (id=2907): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x16, 0xa, &(0x7f0000000100)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xbf, 0x2, 0xa}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4, 0x0, 0x0, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x37}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000080100000014000200776731000000000000000000000011001400020077673200000000000000000000000000300008802c0000800800030007000000200001"], 0x6c}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f00000002c0)={r0, &(0x7f00000001c0)='!@.\x00', 0x400402, &(0x7f0000000200)={@align=0x5, {0xfff9, 0xfffe, 0x0, 0x80}}, 0x5, &(0x7f0000000240), &(0x7f0000000280)=0xfffffffd}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x28000600) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1005c, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x43) sendmsg$IPSET_CMD_TEST(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x2c, 0xb, 0x6, 0x801, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008041}, 0x24008084) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) connect$unix(r5, &(0x7f0000000540)=@abs={0x1, 0x0, 0x4e24}, 0x6e) sendmsg$nl_route_sched(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@getchain={0x4c, 0x66, 0x4, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff1}, {0xe, 0xffe0}, {0x1, 0x9}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x7fffffff}, {0x8, 0xb, 0x8}]}, 0x4c}}, 0x20000010) bind$can_j1939(r3, &(0x7f0000000500)={0x1d, 0x0, 0x1, {0x1, 0xff, 0x2}, 0xff}, 0x18) 4.287816608s ago: executing program 2 (id=2908): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x2}, {}, {0xfff2, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x20, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0x5, 0xe}, {0xffeb, 0xf}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040090}, 0x20028041) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x4, 0xff, 0x53, 0x20000003, 0x50, @empty, @mcast2={0xff, 0x5}, 0x80, 0x40, 0xe3e1, 0xcff}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.142534521s ago: executing program 1 (id=2909): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x0, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc0}, 0x890) r3 = socket$unix(0x1, 0x0, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000200)={0x1, 0xc}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f0000000280)={r5, 0x3}, 0x8) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r4, 0xc0385868, &(0x7f00000003c0)={r0, &(0x7f00000002c0)='wlan0\x00', 0x60002, &(0x7f0000000300)={@_ha_fsid={[0x8, 0x9]}, {0x10, 0x4, 0x3ff, 0xfffffffffffffff7}}, 0x556, &(0x7f0000000340)={@_ha_fsid}, &(0x7f0000000380)=0x3}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000400), &(0x7f0000000440)=0x4) getsockopt$packet_buf(r6, 0x107, 0x1, &(0x7f0000000480)=""/147, &(0x7f0000000540)=0x93) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup/syz0\x00', 0x1ff) ioctl$NILFS_IOCTL_GET_CPSTAT(r3, 0x80186e83, &(0x7f00000005c0)) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r6, 0x84, 0x78, &(0x7f0000000600)=r5, 0x4) ioctl$XFS_IOC_FD_TO_HANDLE(r4, 0xc038586a, &(0x7f0000000740)={r0, &(0x7f0000000640)='\x00', 0x400000, &(0x7f0000000680)={@_ha_fsid={[0xb, 0x5]}, {0x3, 0x3, 0x9, 0x4d9d}}, 0x80000000, &(0x7f00000006c0), &(0x7f0000000700)=0xf}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@arena={0x21, 0x0, 0x0, 0x16, 0x20800, r6, 0xfffffffb, '\x00', 0x0, r7, 0x0, 0x1, 0x2}, 0x50) r9 = syz_genetlink_get_family_id$smc(&(0x7f0000000840), r7) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x6c, r9, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6_vti0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_team\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc8c1}, 0x40040) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f00000009c0), r6) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000b40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0x100, r10, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0xec, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}]}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'netdevsim0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x7fff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e24, @rand_addr=0x64010101}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x67}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe11}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x5, @private0, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1, @remote, 0xfffffff8}}}}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) getsockname$packet(r6, &(0x7f0000000cc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000d00)=0x14) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000d80)={0xf4, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x5, 0x4, &(0x7f0000000b80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000bc0)='GPL\x00', 0x4, 0xc0, &(0x7f0000000c00)=""/192, 0x41100, 0x32, '\x00', r11, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000d40)={0x5, 0x3, 0x984620e, 0x9}, 0x10, r12, r7, 0x4, &(0x7f0000000dc0)=[r6], &(0x7f0000000e00)=[{0x0, 0x1, 0xe, 0x3}, {0x3, 0x3, 0xa, 0xa}, {0x0, 0x1, 0x6, 0x4}, {0x0, 0x3, 0x2, 0x2}], 0x10, 0x67}, 0x94) bind$alg(r6, &(0x7f0000000f00)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-avx2\x00'}, 0x58) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000f80)) bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@arena={0x21, 0x0, 0x0, 0x1c, 0x40000, r8, 0xff, '\x00', 0x0, r6, 0x2, 0x80000000, 0x5}, 0x50) pipe(&(0x7f0000001040)={0xffffffffffffffff}) setsockopt$MRT_INIT(r13, 0x0, 0xc8, &(0x7f0000001080), 0x4) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001200)={&(0x7f0000001100)={0xe8, r10, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0xb8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x10, 0x3, "cb9dac550fed4fab1e32ec96"}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "583ba11cd18734c59df563371781954a3972c7627a67545035789ba5163232f3798d"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2d}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "f149437a3f6f0a89d036bcbf36494387a1c5a5714c73a5c6"}}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x8000}, 0x4004041) 3.058552414s ago: executing program 2 (id=2910): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="280018000301030b033b7055"], 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x5}]}, 0x44}}, 0x0) 3.056666231s ago: executing program 4 (id=2911): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001900)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001980)=@base={0xd, 0x6, 0x4, 0x2001, 0x81, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x50) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000000), 0x10) close(r2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001a00)={{r1}, &(0x7f0000001a40), &(0x7f0000001a80)=r0}, 0x20) close(r0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001ac0)={r1, &(0x7f0000001b00)}, 0x20) 2.501398097s ago: executing program 2 (id=2913): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x18, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x0, 0xb, 0x0, 0x0, 0x4}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80005}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000300)='GPL\x00', 0x6, 0x1001, &(0x7f0000000340)=""/4097, 0x41100, 0x2d}, 0x94) (fail_nth: 45) 2.495325306s ago: executing program 4 (id=2914): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x5001}) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x24, {{0xa, 0x0, 0x1, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0xfffffc05, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000700)={0x0, {{0xa, 0x5, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}, {0xfff1, 0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)=@newtfilter={0xd4, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}, {0x300, 0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xa8, 0x2, [@TCA_U32_SEL={0xa4, 0x5, {0x8, 0x6, 0x9, 0xc000, 0x4c16, 0x8, 0x7ff, 0x5, [{0x1000, 0x9, 0x4}, {0x3ff, 0x0, 0xfffffff7, 0x81}, {0xffff, 0x9, 0xe6f, 0x5}, {0x8001, 0xfb86, 0xffffffff, 0x1ff}, {0x6, 0x9, 0x2, 0x9}, {0x400, 0x5, 0xe, 0x1}, {0x80000000, 0xfffffffc, 0x1, 0x7f}, {0x81, 0x5, 0x9, 0x4}, {0x6, 0x2, 0x8, 0x3}]}}]}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000600)={'syzkaller1\x00', 0x0}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r8, 0x18000000000002a0, 0xce8, 0x0, &(0x7f00000008c0)="8d50895c4c690dea156e85f7db65", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff}, 0x50) sendmsg$nl_route_sched(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newtfilter={0x24, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0xfff1, 0xffff}, {0x300, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) 2.378685691s ago: executing program 1 (id=2915): r0 = socket(0x23, 0x5, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x10000008}) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x8}, 0x8, 0x10, &(0x7f0000000000)={0x3, 0x10}, 0x10}, 0x94) 2.223283583s ago: executing program 1 (id=2916): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x1ac, 0x9, 0x6, 0xa01, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x7}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x65}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}, @IPSET_ATTR_IFACE={0x14, 0x17, 'vxcan1\x00'}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0xffffffff}]}, @IPSET_ATTR_ADT={0x84, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @remote}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private1}}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'ip_vti0\x00'}}]}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010102}}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_COMMENT={0x5, 0x1a, '\x00'}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}]}, @IPSET_ATTR_ADT={0x90, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x4}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x80}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x401}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x72}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4}]}, 0x1ac}}, 0x4c000) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000000)={0x6, 'wg0\x00', {0x2}, 0x108}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@deltclass={0x38, 0x29, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x4, 0x7}, {0x4, 0x7}, {0xfff2, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x29, 0x80}}, @tclass_kind_options=@c_multiq={0xb}]}, 0x38}}, 0x4008001) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000080)={0x0, 'bridge_slave_0\x00', {0x4}, 0xf1ee}) 2.132323317s ago: executing program 2 (id=2917): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)={0x578, 0x26, 0x1, 0x0, 0x4, "", [@nested={0x567, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}, @generic="971ed308218750518325cac8c266a8c6efe4fbf992916db05a05ae089f966b16abb07a8f70b234f5fec1d34930936f49dfdd8557c4137d225914bb402fb719c9ab65dae93b236b", @nested={0x50d, 0x53, 0x0, 0x1, [@nested={0x341, 0xa1, 0x0, 0x1, [@typed={0x8, 0x37, 0x0, 0x0, @fd}, @nested={0x4, 0x8}, @nested={0x18c, 0x159, 0x0, 0x1, [@nested={0x185, 0xbf, 0x0, 0x1, [@generic="201f1c4f9cbb5059e2af1cd475304dc44e575932d0f44e295b17ad64596912bb755ec1cff201a7ed6f6bcd509f103bf472db0f9e99571eeda30e59f253e18a7964cbe209365d12db948738b52a2bb79ce24cf84ac76a3a6635a1631755a776c572335a2ba969aa261943b04f599551c1abf473919794b9e84155191a0a6de820a2db0605b8b7651d36aa37a444d037d6e365e082fe02307c02f5de1b9aefafec1df6a0f3d488de0cdc32169706e7a17fd97d4af6cc984f2045e4514474f4761f90e0548e397985b8de87e39c871a61c5a5cdf48074259344c8efb011edcd93a155e29e8bee148cd3c3cbaa30e698351b", @typed={0x14, 0x66, 0x0, 0x0, @ipv6=@loopback}, @nested={0x4, 0x164}, @typed={0x2d, 0x8, 0x0, 0x0, @binary="553295681f915005eabd0a04846893601feb1a6b9a1948fc64208ba5269375fe27a9fa7c92ee8dbf26"}, @typed={0xc, 0x68, 0x0, 0x0, @u64=0xfffffffffffffffe}, @nested={0x4, 0xd4}, @nested={0x4, 0x73}, @generic="d38d396b7e000bd7e4f853e80af53261abf09a3c06f88301ada63168cd6ab0f65d6514332803aa8a82e18cfe6a738f3e45260b7614"]}]}, @nested={0x4, 0x3a}, @generic="fc5043a0a36c5159202932748e8e035970d331a25cfd4652e385a1564becc72900cb58235836176154967f4a7f6f7cc63d64af918c4052fc5239e50509aed2deb4d9c73350c66bd3c12a9a620385ea406be654303fbb35d42162fb44017cf778067fddc1a7d830e9ebb844209f76256c1df734f92cfd5d4243b5af3416724157ee3dbb810e57ec533ed96737d9d9d9b81d498d77d4f070636a81e59c2b7879b80ec7a090349e649a3131ce3e81d4510bfa66dfcffcfb0378a5d1e8bb82c0c41f907a93c28ac2d56cbaef76bbb9e1e6f533bb12f4d021d874aed32dc19472249f", @generic="87fb6cb18d07965800db759099ce10a76f0e476e7efaf095c695faac8fba8a87b62df6ebab20c4dcc7531634ed7333ad1f80d7d1f896b4e01065bda2ccdc25dfb28e3232a152f02e65cd88a3911229bbfcbda8def59f4bf3f54393070a24566925761381dd9c3a4fa5c6c9d46bac197109d3e0dfbcd7d1c72dc66089ac881df477999a409a31cc4bf9b1cca7c9de40c804ea65358ac29afe9eede9523d893ee2c9a217201b1831ff3175d9ec47a8ce4d41", @typed={0x8, 0x32, 0x0, 0x0, @ipv4=@empty}, @typed={0x4, 0x17}, @nested={0x4, 0xde}]}, @generic="d8a8f50b13e191de5f49eba9fb5063180a46a5fb943291af0a8c76fbe3b7a499ca5fa16861cd261aeadf6f79ad05197e06f69d6459", @typed={0xc, 0x61, 0x0, 0x0, @u64=0xffffffffffffedfa}, @nested={0x181, 0xb9, 0x0, 0x1, [@generic="3e317a10dc2ca9b5e9fd43759ba64dd1177ad912ffe80617b880c1c33d60419dce1cc496de634e7ed187b97e391d9cea220ef1f2fa181915c56fbab8cf6be63dfe66f0cdbb4da2775e31fff7a950b7135f029e3f232e94b53ee97a668181b38edf50cd6009dbf02f075b7c0e0a1c0941e847921b973cefac9a71a9e6e6b65b329bd398beaacbb4f76ef26a9a1a816964155c346d9eaa4c5ae970cd9761d68c1ab4a3ece6f3eda8fac6e5aded7fdf748beb3b389e81499d462e4e3cb0f0c2dd17225095e0564c688dbcec198d15e69c409a6dfb96295cde64280291585e6d", @typed={0x8, 0x81, 0x0, 0x0, @pid}, @generic="9d7b38729520c6bdcf9ec1564000bee62170f76e48c137c294c5eee4ff2833f0bcdd4acbd55b6b3105e348c8c1af5f554acb6ca907a746fd126638c3f07c004f19837c3dd5e25a90e0453482e459e5b65fbca7a0f774616cca66ee4d54638c598251f8a4c0c4e42da9952b2f248d982759ec1341302d97", @typed={0xc, 0xe8, 0x0, 0x0, @u64=0x6}, @generic="0216c77976a8f67cb427f0c553c2f81ce9bb0239"]}]}]}]}, 0x578}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0x4, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000d100000000000000000000730141000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xcb, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.837932136s ago: executing program 0 (id=2918): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 64) r2 = socket$unix(0x1, 0x1, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newtfilter={0x48, 0x2c, 0xd2f, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {}, {}, {0x8, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'netdevsim0\x00'}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000) (async) sendmsg$nl_crypto(r1, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)=@del={0x108, 0x11, 0x800, 0x70bd25, 0x25dfdbfc, {{'xts-camellia-aesni\x00'}, '\x00', '\x00', 0x0, 0x400}, [{0x8, 0x1, 0x62}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0xd6}, {0x8, 0x1, 0x9}, {0x8, 0x1, 0xc}]}, 0x108}, 0x1, 0x0, 0x0, 0x40040d8}, 0x810) (async, rerun: 32) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x5, 0xa, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6}]}]}, 0x54}}, 0x0) (rerun: 32) 1.762783942s ago: executing program 2 (id=2919): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000400)='devices.deny\x00', 0x2, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000640), 0x11000) writev(r3, &(0x7f0000000740)=[{&(0x7f0000000780)="4fefa495d0", 0x5}], 0x1) (async) writev(r3, &(0x7f0000000740)=[{&(0x7f0000000780)="4fefa495d0", 0x5}], 0x1) vmsplice(r2, &(0x7f00000007c0)=[{&(0x7f0000000800), 0x3528a9c0}], 0x1, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001740)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) (async) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001740)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001780)={0x11, 0x13, &(0x7f0000002cc0)=ANY=[@ANYBLOB="180800000000000000008510000006000000184931e3e64d5bf81e127e201000004217400d665d0e66ccba490367a959173f6d2aecdd41218d2e8703a82bff59d53a3df2f421b62c54b6f84bd7933329d5f01c6f9e", @ANYRES32=r4, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000001900)='GPL\x00', 0x2, 0xff5c, &(0x7f0000002a00)=""/222}, 0x78) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000002b00)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f0000002b40), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000002b40), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000002b80)={0x0, 0x0, &(0x7f0000002bc0)={&(0x7f0000002c00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a809000008000b000000000006000100070000000c000f00"], 0x48}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f0000002c40)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x32) sendmmsg(r9, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) write$cgroup_devices(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="62a02a3a3409776d0a89"], 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r10 = socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x400000002, 0x0) (async) r12 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r12, &(0x7f0000000640)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r12, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000019c0)=""/4145, 0x1031}], 0x1}, 0x0) (async) recvmsg(r12, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000019c0)=""/4145, 0x1031}], 0x1}, 0x0) ioctl$XFS_IOC_DIOINFO(r10, 0x800c581e, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56741, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r13, {0x0, 0xffec}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x21, 0x0, 0xfffffffe}}]}}]}, 0x48}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f00000015c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000001600), 0xfffffedf, 0x10, &(0x7f0000001640)}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b702000010000000bfa300000000000007030000f0feffff7a0af0ff0000000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87867c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b2314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f86bb47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8dd63d4b77b206000000000000e254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad91935a6ddfa8f90e79321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f3813e2c25a61ec45c3af9948f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469600241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c12e28ef97d9ebd9c77f1774cf4683c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f011000000f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497a6103876843ee04ed9ff002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd1304202274f20675eb781925440578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e9338c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b96508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e25c89b552d7fcd116bce9c764c714c9402c21d1aac59efb28d4f91652f6000000000000000320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a575939206d0c0f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000ff0ffd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536607a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8000000edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a996d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db76cf059f40fa2640b6bfb74dd35391b8fa18479da9f4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847db97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ccfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000000000000000000003ba34b611569a451564d3a5400f9097ffe7a37e765be352be71ee24250d6828562c7e24cb763062d6000c409de6a6135eae8a00000000008d797190a26c933f933aff5c521eeb7a84a62d148a846e74e76b515b6b8be29e8b69310fa130cf6d6b74f33205d3cc218ca554ed8085ae044f5bf2e89a0000bde05c114e7a020fc1a5fd3eeeb822008b2d7d1cc062b51b0aca4956b557e51a1385cc572b0074b0950fb1437de2590bf99ec7ceb69e1fe2465fce099c992d57b804a22e148ae3411523814aee03ee2df877edfabf4aa94f07c6fdd127e57a8bf7975f2e606c25a299980a6e52fcf7849d45bb38573fbba8afef1aa7a24c805f7aee3e39a3000000000000000000000000000000000000878f88c4742ac490951c36c610a0d266588ec6a0bd300cf160b5a5d9e9fafa49ecc8430832d795e727b7fc2b76e7fc4141fdbb82f45d3cdd3fb8d4b443ab4954fdf5c1b9a6ab3e457f098329307ccb0a1989b6c37509692e952e7244f48bc12569ff8eb30d0f887b85b5ef44fb9a7571319190be0c226ed72f346cc4aa071ae0c72fa8bd00d5590c4f4ba65d0c8e1f4870fe3c414681e41b40163eb1aa2a7429a2208cd6e69c7d959e87da3fd0101159a03ab7fe78881ee7a1ee7a2edff75fb18a181e0c54352be2b7a5b5273198291c28d9141deeb3cdba5d414ae4b0000000000000000000000000009eacd83458d8a606be71970497a4fd4ca3b48ca482ab3804e2fac216b3ba613608b1a465456a33fd08491d337d7344c01cfc9e73"], &(0x7f00000015c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000001600), 0xfffffedf, 0x10, &(0x7f0000001640)}, 0x48) 1.721724139s ago: executing program 1 (id=2920): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000005c0)=0x200000, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x8, r2, 0x3}, 0x10) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000180), &(0x7f00000001c0)=0x30) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000040)={'ip6erspan0\x00', @remote}) 1.497522948s ago: executing program 4 (id=2921): bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4002, 0xaad, @loopback}, 0x1c) r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)=@in={0x2, 0x4e24, @loopback}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000200)="fc", 0x1}], 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000984f5000000800000d1a00e000107ffff"], 0x18}], 0x1, 0x4000004) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x98}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, &(0x7f0000000280)) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000880)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="210128bd700000f4ff002b00000008000300", @ANYRES32=r5, @ANYBLOB="040046000a003400020202020202000004005180"], 0x30}, 0x1, 0x0, 0x0, 0xf040}, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x290, 0xf0, 0x18c, 0x203, 0x0, 0x19030000, 0x1c0, 0x2e0, 0x2e0, 0x1c0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0xf0, 0x7000000, {0xf0ffff}}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x100002, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xf0}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) setsockopt$inet6_int(r6, 0x29, 0x16, &(0x7f0000000480), 0x4) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x48, &(0x7f0000000040)=ANY=[], 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ce0}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x15}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.348726545s ago: executing program 0 (id=2922): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x5}]}, 0x44}}, 0x0) 965.392846ms ago: executing program 0 (id=2923): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000040)={r0}) socket$unix(0x1, 0x2, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f00000000c0)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000180)='pids.max\x00', 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x2c, r5, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x152bef0f23a2bb19}]}]}]}, 0x2c}}, 0x14) write$cgroup_subtree(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='-', @ANYRESDEC=r1], 0x5e) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) preadv(r7, &(0x7f0000000040), 0x0, 0x6, 0x80000000) 964.239494ms ago: executing program 4 (id=2924): r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000340)) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'veth1_to_hsr\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x4a88, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0xfffc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000400a8000600200003400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffbffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x10, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x62}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x4880) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x10, &(0x7f0000000880)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x20008c, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x86}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {}, [@jmp={0x5, 0x1, 0xc, 0x9, 0x9, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000480)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8ff}, 0x94) 890.625779ms ago: executing program 2 (id=2925): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xd, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0xc1}]}, &(0x7f0000000100)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0xb1) sendmsg$nl_route_sched(r0, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000003c40)=@newtaction={0x90, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_connmark={0x34, 0x2, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) 816.184484ms ago: executing program 0 (id=2926): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x18, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x0, 0xb, 0x0, 0x0, 0x4}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80005}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000300)='GPL\x00', 0x6, 0x1001, &(0x7f0000000340)=""/4097, 0x41100, 0x2d}, 0x94) (fail_nth: 46) 631.515799ms ago: executing program 0 (id=2927): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r1) (async) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r1) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r2, 0x1, 0x70bd2a, 0x25dfdbfc}, 0x14}}, 0x4040) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)={0x20, 0x26, 0x29, 0x70bd2d, 0xfffffff9, {0x10}, [@typed={0xa, 0x15e, 0x0, 0x0, @binary="8bf58987f7ff"}]}, 0x20}, 0x1, 0x0, 0x0, 0x8c811}, 0x48054) 0s ago: executing program 0 (id=2928): r0 = socket(0x10, 0x803, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') ioctl$BTRFS_IOC_QUOTA_RESCAN(r1, 0x4040942c, &(0x7f0000000100)={0x0, 0xf9, [0x5, 0xa52, 0x8, 0x85fd, 0x4000005, 0x4deba524]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r2, 0x215eb000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r3, 0x0, 0x41, &(0x7f0000000000)={'nat\x00', 0x4, "99161d83"}, &(0x7f0000000080)=0x2c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x200c4094) socket$netlink(0x10, 0x3, 0x12) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000000c0)="3638412c0107cc651c69315bb104e4f1", 0x10) recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) kernel console output (not intermixed with test programs): ? clear_bhb_loop+0x70/0xc0 [ 553.557452][T16708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.557472][T16708] RIP: 0033:0x7ff5c819f559 [ 553.557490][T16708] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 553.557507][T16708] RSP: 002b:00007ff5c9033028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 553.557528][T16708] RAX: ffffffffffffffda RBX: 00007ff5c8425fa0 RCX: 00007ff5c819f559 [ 553.557543][T16708] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 553.557555][T16708] RBP: 00007ff5c8236b20 R08: 0000000000000004 R09: 0000000000000000 [ 553.557567][T16708] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 553.557580][T16708] R13: 00007ff5c8426038 R14: 00007ff5c8425fa0 R15: 00007ffe9abd1b18 [ 553.557614][T16708] [ 553.557622][T16708] Mem-Info: [ 553.557632][T16708] active_anon:7021 inactive_anon:1 isolated_anon:0 [ 553.557632][T16708] active_file:7 inactive_file:43742 isolated_file:0 [ 553.557632][T16708] unevictable:0 dirty:111 writeback:0 [ 553.557632][T16708] slab_reclaimable:12387 slab_unreclaimable:113079 [ 553.557632][T16708] mapped:29590 shmem:529 pagetables:3353 [ 553.557632][T16708] sec_pagetables:0 bounce:0 [ 553.557632][T16708] kernel_misc_reclaimable:0 [ 553.557632][T16708] free:1300176 free_pcp:11020 free_cma:0 [ 553.557684][T16708] Node 0 active_anon:28084kB inactive_anon:4kB active_file:28kB inactive_file:174764kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118360kB dirty:444kB writeback:0kB shmem:2116kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14880kB pagetables:13272kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 553.557739][T16708] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 553.557791][T16708] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 554.025752][T16708] lowmem_reserve[]: 0 2467 2467 2467 2467 [ 554.025800][T16708] Node 0 DMA32 free:1246684kB boost:0kB min:33980kB low:42472kB high:50964kB reserved_highatomic:0kB free_highatomic:0kB active_anon:28192kB inactive_anon:4kB active_file:28kB inactive_file:174764kB unevictable:0kB writepending:456kB zspages:0kB present:3129332kB managed:2526416kB mlocked:0kB bounce:0kB free_pcp:38588kB local_pcp:18056kB free_cma:0kB [ 554.025862][T16708] lowmem_reserve[]: 0 0 0 0 0 [ 554.025897][T16708] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 554.025952][T16708] lowmem_reserve[]: 0 0 0 0 0 [ 554.025986][T16708] Node 1 Normal free:3938924kB boost:0kB min:55920kB low:69900kB high:83880kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:4776kB local_pcp:1760kB free_cma:0kB [ 554.026044][T16708] lowmem_reserve[]: 0 0 0 0 0 [ 554.026078][T16708] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 554.026193][T16708] Node 0 DMA32: 1841*4kB (UME) 1355*8kB (UM) 368*16kB (UME) 1532*32kB (UM) 527*64kB (UME) 609*128kB (UME) 412*256kB (UME) 236*512kB (UME) 106*1024kB (UME) 7*2048kB (UM) 174*4096kB (UM) = 1246684kB [ 554.026358][T16708] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 554.026455][T16708] Node 1 Normal: 4*4kB (UM) 2*8kB (UM) 2*16kB (UM) 1*32kB (M) 3*64kB (UM) 3*128kB (UM) 2*256kB (M) 5*512kB (UM) 3*1024kB (UM) 0*2048kB 960*4096kB (UM) = 3938976kB [ 554.071954][T16708] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 554.071973][T16708] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 554.071989][T16708] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 554.072005][T16708] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 554.072022][T16708] 44273 total pagecache pages [ 554.072029][T16708] 0 pages in swap cache [ 554.072036][T16708] Free swap = 124996kB [ 554.072044][T16708] Total swap = 124996kB [ 554.072054][T16708] 2097051 pages RAM [ 554.072061][T16708] 0 pages HighMem/MovableOnly [ 554.072068][T16708] 433831 pages reserved [ 554.072075][T16708] 0 pages cma reserved [ 554.848756][T16746] netlink: 'syz.0.2483': attribute type 16 has an invalid length. [ 554.944376][T16754] @ÿ: renamed from veth0_vlan (while UP) [ 555.166701][T16761] FAULT_INJECTION: forcing a failure. [ 555.166701][T16761] name failslab, interval 1, probability 0, space 0, times 0 [ 555.166734][T16761] CPU: 0 UID: 0 PID: 16761 Comm: syz.0.2486 Not tainted syzkaller #0 PREEMPT(full) [ 555.166755][T16761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 555.166767][T16761] Call Trace: [ 555.166775][T16761] [ 555.166783][T16761] dump_stack_lvl+0xe8/0x150 [ 555.166818][T16761] should_fail_ex+0x410/0x560 [ 555.166854][T16761] should_failslab+0xa8/0x100 [ 555.166884][T16761] __kmalloc_cache_node_noprof+0xa5/0x620 [ 555.166909][T16761] ? kasan_save_track+0x4f/0x80 [ 555.166931][T16761] ? kasan_save_track+0x3e/0x80 [ 555.166953][T16761] ? __kasan_kmalloc+0x93/0xb0 [ 555.166977][T16761] ? __get_vm_area_node+0x155/0x2f0 [ 555.166995][T16761] ? __get_vm_area_node+0x155/0x2f0 [ 555.167015][T16761] ? __x64_sys_bpf+0xba/0xd0 [ 555.167041][T16761] __get_vm_area_node+0x155/0x2f0 [ 555.167067][T16761] __vmalloc_node_range_noprof+0x343/0x1540 [ 555.167090][T16761] ? bpf_check+0x115b/0x2ef0 [ 555.167142][T16761] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 555.167163][T16761] ? __kasan_kmalloc+0x93/0xb0 [ 555.167189][T16761] ? __kmalloc_cache_noprof+0x31c/0x600 [ 555.167213][T16761] ? __kmalloc_cache_noprof+0x148/0x600 [ 555.167234][T16761] ? bpf_diag_init+0x87/0x140 [ 555.167259][T16761] ? bpf_diag_init+0x87/0x140 [ 555.167286][T16761] ? bpf_check+0x115b/0x2ef0 [ 555.167306][T16761] __vmalloc_noprof+0xd2/0x120 [ 555.167334][T16761] ? bpf_check+0x115b/0x2ef0 [ 555.167360][T16761] bpf_check+0x115b/0x2ef0 [ 555.167403][T16761] ? __pfx_bpf_check+0x10/0x10 [ 555.167429][T16761] ? bpf_obj_name_cpy+0x194/0x1e0 [ 555.167452][T16761] bpf_prog_load+0x14d1/0x1c20 [ 555.167489][T16761] ? __pfx_bpf_prog_load+0x10/0x10 [ 555.167540][T16761] __sys_bpf+0xd0d/0xd90 [ 555.167572][T16761] ? __pfx___sys_bpf+0x10/0x10 [ 555.167608][T16761] ? __fget_files+0x2a/0x420 [ 555.167647][T16761] ? ksys_write+0x242/0x270 [ 555.167672][T16761] ? __pfx_ksys_write+0x10/0x10 [ 555.167699][T16761] __x64_sys_bpf+0xba/0xd0 [ 555.167724][T16761] do_syscall_64+0x166/0x520 [ 555.167743][T16761] ? trace_irq_disable+0x3b/0x140 [ 555.167765][T16761] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.167784][T16761] ? clear_bhb_loop+0x70/0xc0 [ 555.167805][T16761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.167821][T16761] RIP: 0033:0x7f628459f559 [ 555.167837][T16761] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 555.167852][T16761] RSP: 002b:00007f6285546028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 555.167870][T16761] RAX: ffffffffffffffda RBX: 00007f6284825fa0 RCX: 00007f628459f559 [ 555.167883][T16761] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005 [ 555.167893][T16761] RBP: 00007f6285546090 R08: 0000000000000000 R09: 0000000000000000 [ 555.167904][T16761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 555.167914][T16761] R13: 00007f6284826038 R14: 00007f6284825fa0 R15: 00007ffe86904728 [ 555.167945][T16761] [ 555.494917][T16765] netlink: 'syz.3.2488': attribute type 1 has an invalid length. [ 555.540595][T16765] bond11: entered promiscuous mode [ 555.540998][T16765] 8021q: adding VLAN 0 to HW filter on device bond11 [ 555.564486][T16765] ipvlan6: entered allmulticast mode [ 555.564506][T16765] bond11: entered allmulticast mode [ 555.585958][T16765] ipvlan7: entered allmulticast mode [ 555.744034][T16766] bond11: (slave bridge6): making interface the new active one [ 555.744057][T16766] bridge6: entered promiscuous mode [ 555.758316][T16766] bridge6: entered allmulticast mode [ 555.831883][T16766] bond11: (slave bridge6): Enslaving as an active interface with an up link [ 555.912474][T16765] bond11: (slave bridge7): Enslaving as a backup interface with an up link [ 555.915322][T16769] batadv_slave_0: entered promiscuous mode [ 556.221998][T16796] __nla_validate_parse: 2 callbacks suppressed [ 556.222017][T16796] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2498'. [ 556.425624][T16768] batadv_slave_0: left promiscuous mode [ 556.426352][T16785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2496'. [ 556.484457][T16788] vlan0: entered promiscuous mode [ 556.564556][T16797] bond9 (unregistering): Released all slaves [ 556.726969][T16803] vlan3: left allmulticast mode [ 556.726991][T16803] bridge_slave_0: left allmulticast mode [ 556.727068][T16803] vlan3: left promiscuous mode [ 556.727079][T16803] bridge_slave_0: left promiscuous mode [ 556.729483][T16803] bridge0: port 3(vlan3) entered disabled state [ 556.783962][T16808] FAULT_INJECTION: forcing a failure. [ 556.783962][T16808] name failslab, interval 1, probability 0, space 0, times 0 [ 556.783984][T16808] CPU: 1 UID: 0 PID: 16808 Comm: syz.1.2501 Not tainted syzkaller #0 PREEMPT(full) [ 556.783997][T16808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 556.784004][T16808] Call Trace: [ 556.784008][T16808] [ 556.784013][T16808] dump_stack_lvl+0xe8/0x150 [ 556.784034][T16808] should_fail_ex+0x410/0x560 [ 556.784053][T16808] should_failslab+0xa8/0x100 [ 556.784070][T16808] __kmalloc_cache_node_noprof+0xa5/0x620 [ 556.784084][T16808] ? kasan_save_track+0x4f/0x80 [ 556.784102][T16808] ? kasan_save_track+0x3e/0x80 [ 556.784114][T16808] ? __kasan_kmalloc+0x93/0xb0 [ 556.784126][T16808] ? __get_vm_area_node+0x155/0x2f0 [ 556.784136][T16808] ? __get_vm_area_node+0x155/0x2f0 [ 556.784147][T16808] ? __x64_sys_bpf+0xba/0xd0 [ 556.784162][T16808] __get_vm_area_node+0x155/0x2f0 [ 556.784176][T16808] __vmalloc_node_range_noprof+0x343/0x1540 [ 556.784188][T16808] ? bpf_check+0x115b/0x2ef0 [ 556.784217][T16808] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 556.784230][T16808] ? __kasan_kmalloc+0x93/0xb0 [ 556.784244][T16808] ? __kmalloc_cache_noprof+0x31c/0x600 [ 556.784257][T16808] ? __kmalloc_cache_noprof+0x148/0x600 [ 556.784269][T16808] ? bpf_diag_init+0x87/0x140 [ 556.784282][T16808] ? bpf_diag_init+0x87/0x140 [ 556.784296][T16808] ? bpf_check+0x115b/0x2ef0 [ 556.784308][T16808] __vmalloc_noprof+0xd2/0x120 [ 556.784319][T16808] ? bpf_check+0x115b/0x2ef0 [ 556.784333][T16808] bpf_check+0x115b/0x2ef0 [ 556.784355][T16808] ? __pfx_bpf_check+0x10/0x10 [ 556.784369][T16808] ? bpf_obj_name_cpy+0x194/0x1e0 [ 556.784382][T16808] bpf_prog_load+0x14d1/0x1c20 [ 556.784402][T16808] ? __pfx_bpf_prog_load+0x10/0x10 [ 556.784428][T16808] __sys_bpf+0xd0d/0xd90 [ 556.784447][T16808] ? __pfx___sys_bpf+0x10/0x10 [ 556.784475][T16808] ? __fget_files+0x2a/0x420 [ 556.784508][T16808] ? ksys_write+0x242/0x270 [ 556.784530][T16808] ? __pfx_ksys_write+0x10/0x10 [ 556.784554][T16808] __x64_sys_bpf+0xba/0xd0 [ 556.784578][T16808] do_syscall_64+0x166/0x520 [ 556.784589][T16808] ? trace_irq_disable+0x3b/0x140 [ 556.784601][T16808] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.784611][T16808] ? clear_bhb_loop+0x70/0xc0 [ 556.784623][T16808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.784633][T16808] RIP: 0033:0x7ff5c819f559 [ 556.784644][T16808] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 556.784653][T16808] RSP: 002b:00007ff5c9033028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 556.784665][T16808] RAX: ffffffffffffffda RBX: 00007ff5c8425fa0 RCX: 00007ff5c819f559 [ 556.784672][T16808] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005 [ 556.784679][T16808] RBP: 00007ff5c9033090 R08: 0000000000000000 R09: 0000000000000000 [ 556.784686][T16808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 556.784692][T16808] R13: 00007ff5c8426038 R14: 00007ff5c8425fa0 R15: 00007ffe9abd1b18 [ 556.784709][T16808] [ 556.830201][T16809] netlink: 276 bytes leftover after parsing attributes in process `syz.0.2499'. [ 557.210088][T16813] wlan1: mtu greater than device maximum [ 557.279146][T16823] wlan1: mtu greater than device maximum [ 557.399558][T16830] netlink: 'syz.3.2504': attribute type 1 has an invalid length. [ 557.634459][T16830] bond12: entered promiscuous mode [ 557.637540][T16830] 8021q: adding VLAN 0 to HW filter on device bond12 [ 557.886277][T16848] 8021q: adding VLAN 0 to HW filter on device bond12 [ 557.886731][T16848] bond12: (slave xfrm1): The slave device specified does not support setting the MAC address [ 557.886750][T16848] bond12: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 557.928233][T16848] bond12: (slave xfrm1): making interface the new active one [ 557.928259][T16848] xfrm1: entered promiscuous mode [ 557.932649][T16848] bond12: (slave xfrm1): Enslaving as an active interface with an up link [ 558.020576][T16851] syzkaller0: entered promiscuous mode [ 558.020602][T16851] syzkaller0: entered allmulticast mode [ 558.049904][T16844] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2506'. [ 558.447273][T16864] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2508'. [ 558.610326][T16855] tipc: Enabling of bearer rejected, failed to enable media [ 558.779954][T16869] netdevsim netdevsim2 €Â: renamed from netdevsim0 [ 558.940163][T16873] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2513'. [ 558.973614][T16878] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2512'. [ 559.114305][T16880] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2514'. [ 559.386684][T16894] netlink: 'syz.3.2516': attribute type 1 has an invalid length. [ 559.633046][T16898] veth5: entered allmulticast mode [ 559.689713][T16898] bond13: (slave veth5): Enslaving as an active interface with a down link [ 559.755086][T16910] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2521'. [ 559.774966][T16906] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2521'. [ 559.811612][T16911] tipc: Failed to remove unknown binding: 66,0,0/4:947076092/947076094 [ 559.811644][T16911] tipc: Failed to remove unknown binding: 66,0,0/4:947076092/947076093 [ 559.814998][T16894] macvlan2: entered promiscuous mode [ 559.815019][T16894] macvlan2: entered allmulticast mode [ 559.817493][T16894] bond13: entered promiscuous mode [ 559.878216][T16894] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 559.881984][T16894] bond13: left promiscuous mode [ 559.931303][T16899] syzkaller1: entered allmulticast mode [ 560.350181][T16927] netlink: 'syz.3.2527': attribute type 13 has an invalid length. [ 560.358074][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 560.603561][T16927] geneve3: entered promiscuous mode [ 560.603585][T16927] geneve3: entered allmulticast mode [ 561.164797][T16943] syzkaller0: entered promiscuous mode [ 561.164819][T16943] syzkaller0: entered allmulticast mode [ 561.427147][T16955] __nla_validate_parse: 2 callbacks suppressed [ 561.427166][T16955] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2533'. [ 561.976120][T16970] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 562.215885][T16980] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 562.215885][T16980] Please contact the netfilter-devel mailing list or update your nftables rules. [ 562.241574][T16977] tipc: Enabled bearer , priority 0 [ 562.257079][T16977] syzkaller0: entered promiscuous mode [ 562.257101][T16977] syzkaller0: entered allmulticast mode [ 562.278419][T16977] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 562.325579][T16977] tipc: Resetting bearer [ 562.340762][T16976] tipc: Resetting bearer [ 562.381892][T16976] tipc: Disabling bearer [ 562.743028][T16996] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 562.920004][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.018691][T17014] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2544'. [ 563.066494][T17016] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 564.239804][T17007] bridge0: entered promiscuous mode [ 564.239991][T17007] bridge0: entered allmulticast mode [ 564.256717][T17007] team0: Port device bridge0 added [ 564.558642][T17051] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2552'. [ 564.558665][T17051] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2552'. [ 564.558678][T17051] tc_dump_action: action bad kind [ 564.937396][T17054] bond15: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 565.416979][T17054] bond15 (unregistering): Released all slaves [ 565.878986][T17085] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2559'. [ 565.910290][T17085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2559'. [ 565.993341][T17085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2559'. [ 566.082868][T17088] ip_tables: iptables: counters copy to user failed while replacing table [ 566.138265][T17088] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2560'. [ 566.176837][T17088] pimreg0: tun_chr_ioctl cmd 1074025677 [ 566.176952][T17088] pimreg0: linktype set to 1 [ 566.818083][T17110] geneve5: entered promiscuous mode [ 566.834520][ T8118] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.887995][ T8118] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.888039][ T8118] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.888248][ T8118] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.229806][T17129] netlink: 'syz.4.2570': attribute type 83 has an invalid length. [ 567.771101][T17155] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2576'. [ 567.822705][T17155] ifb0: entered allmulticast mode [ 568.326000][T17187] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2581'. [ 568.533214][T17197] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 568.917506][T17207] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2585'. [ 568.937610][T17208] netlink: 266 bytes leftover after parsing attributes in process `syz.4.2586'. [ 568.937693][T17208] geneve0: Caught tx_queue_len zero misconfig [ 568.970896][T17207] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.974566][T17207] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2585'. [ 569.019571][T17207] macsec1: entered promiscuous mode [ 569.020321][T17207] macsec1: entered allmulticast mode [ 569.026508][T17207] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 569.054230][T17211] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 569.076227][T17210] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2587'. [ 569.287223][T17220] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2590'. [ 570.333240][T17252] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2599'. [ 570.822222][T17267] ip_tables: iptables: counters copy to user failed while replacing table [ 571.109171][T17271] ipvlan2: entered promiscuous mode [ 571.135567][T17271] team0: Device ipvlan2 failed to register rx_handler [ 571.502513][T17287] ip_tables: iptables: counters copy to user failed while replacing table [ 571.538194][T17295] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 571.968761][T17315] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2616'. [ 572.330771][T17332] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2620'. [ 572.825415][T17355] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 572.825535][T17357] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2627'. [ 572.889448][ T8107] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 572.889496][ T8107] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 572.889529][ T8107] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 572.890741][ T8107] netdevsim netdevsim0 €Â: set [1, 0] type 2 family 0 port 20004 - 0 [ 573.580097][T17367] bond15: entered promiscuous mode [ 573.580534][T17367] 8021q: adding VLAN 0 to HW filter on device bond15 [ 573.956565][T17384] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2634'. [ 574.071795][T17362] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2629'. [ 574.106777][T17362] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2629'. [ 574.767073][T17407] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 575.001392][T17416] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2642'. [ 575.391165][T17429] A link change request failed with some changes committed already. Interface 26±ÿ may have been left with an inconsistent configuration, please check. [ 576.105637][T17454] netlink: 'syz.0.2656': attribute type 25 has an invalid length. [ 576.105659][T17454] netlink: 'syz.0.2656': attribute type 3 has an invalid length. [ 576.105671][T17454] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2656'. [ 576.120472][T17453] syzkaller0: entered promiscuous mode [ 576.120495][T17453] syzkaller0: entered allmulticast mode [ 576.333162][T17446] xt_CT: No such helper "snmp_trap" [ 576.725970][T17480] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2661'. [ 576.752070][T17481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2661'. [ 576.998096][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 577.062708][T17495] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2664'. [ 577.577279][T17509] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 577.577392][T17509] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 577.577414][T17509] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 577.577435][T17509] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 577.577455][T17509] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 577.577473][T17509] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 577.577490][T17509] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 577.577509][T17509] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 577.577529][T17509] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 577.577548][T17509] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 577.577580][T17509] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 577.577600][T17509] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 577.577620][T17509] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 577.577640][T17509] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 577.577658][T17509] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 577.577677][T17509] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 577.577697][T17509] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 577.577717][T17509] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 577.577738][T17509] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 577.577757][T17509] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 577.577775][T17509] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 577.662534][T17514] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 577.669150][T17514] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 577.677656][T17514] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 577.681596][T17514] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 577.711484][T17514] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 577.712972][T17514] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 577.715334][T17514] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 577.718893][T17509] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 577.719239][T17509] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 577.719548][T17509] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 577.719886][T17509] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 577.720215][T17509] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 577.720544][T17509] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 577.721959][T17509] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 577.722300][T17509] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 577.722630][T17509] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 577.728087][T17509] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 577.728433][T17509] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 577.728701][T17509] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 577.729033][T17509] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 577.729771][T17509] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 577.730107][T17509] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 577.731416][T17509] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 577.734685][T17509] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 577.734983][T17509] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 577.735266][T17509] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 577.735409][T17509] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 577.738259][T17514] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 577.747776][T17509] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 577.748761][T17509] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 577.749094][T17509] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 577.749420][T17509] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 577.749757][T17509] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 577.750037][T17509] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 577.750367][T17509] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 577.750703][T17509] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 577.751033][T17509] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 577.751361][T17509] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 577.751709][T17509] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 577.752058][T17509] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 577.752267][T17509] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 577.752598][T17509] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 577.752950][T17509] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 577.753279][T17509] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 577.753606][T17509] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 577.753941][T17509] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 577.760923][T17509] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 577.761280][T17509] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 577.761612][T17509] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 577.761948][T17509] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 577.762277][T17509] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 577.762643][T17509] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 577.850666][T17516] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2671'. [ 578.715317][T17538] syzkaller0: entered promiscuous mode [ 578.715502][T17538] syzkaller0: entered allmulticast mode [ 578.822864][T17542] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2679'. [ 578.997100][T17546] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 579.391780][T17556] FAULT_INJECTION: forcing a failure. [ 579.391780][T17556] name failslab, interval 1, probability 0, space 0, times 0 [ 579.391813][T17556] CPU: 0 UID: 0 PID: 17556 Comm: syz.3.2682 Not tainted syzkaller #0 PREEMPT(full) [ 579.391853][T17556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 579.391865][T17556] Call Trace: [ 579.391872][T17556] [ 579.391881][T17556] dump_stack_lvl+0xe8/0x150 [ 579.391915][T17556] should_fail_ex+0x410/0x560 [ 579.391949][T17556] should_failslab+0xa8/0x100 [ 579.391979][T17556] __kmalloc_node_noprof+0xfb/0x720 [ 579.392000][T17556] ? __get_vm_area_node+0x200/0x2f0 [ 579.392019][T17556] ? __get_vm_area_node+0x283/0x2f0 [ 579.392036][T17556] ? __vmalloc_node_range_noprof+0x5b4/0x1540 [ 579.392055][T17556] ? __vmalloc_node_range_noprof+0x5b4/0x1540 [ 579.392088][T17556] __vmalloc_node_range_noprof+0x5b4/0x1540 [ 579.392111][T17556] ? lock_acquire+0x115/0x350 [ 579.392156][T17556] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 579.392178][T17556] ? bpf_verifier_vlog+0x58d/0x900 [ 579.392208][T17556] ? bpf_prog_calc_tag+0x51/0x370 [ 579.392232][T17556] __vmalloc_noprof+0xd2/0x120 [ 579.392252][T17556] ? bpf_prog_calc_tag+0x51/0x370 [ 579.392278][T17556] bpf_prog_calc_tag+0x51/0x370 [ 579.392305][T17556] check_and_resolve_insns+0xbb/0x21d0 [ 579.392339][T17556] ? add_subprog+0x2e2/0x3f0 [ 579.392375][T17556] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 579.392408][T17556] bpf_check+0x18f7/0x2ef0 [ 579.392448][T17556] ? __pfx_bpf_check+0x10/0x10 [ 579.392474][T17556] ? bpf_obj_name_cpy+0x194/0x1e0 [ 579.392498][T17556] bpf_prog_load+0x14d1/0x1c20 [ 579.392536][T17556] ? __pfx_bpf_prog_load+0x10/0x10 [ 579.392587][T17556] __sys_bpf+0xd0d/0xd90 [ 579.392620][T17556] ? __pfx___sys_bpf+0x10/0x10 [ 579.392655][T17556] ? __fget_files+0x2a/0x420 [ 579.392694][T17556] ? ksys_write+0x242/0x270 [ 579.392718][T17556] ? __pfx_ksys_write+0x10/0x10 [ 579.392746][T17556] __x64_sys_bpf+0xba/0xd0 [ 579.392771][T17556] do_syscall_64+0x166/0x520 [ 579.392792][T17556] ? trace_irq_disable+0x3b/0x140 [ 579.392813][T17556] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.392834][T17556] ? clear_bhb_loop+0x70/0xc0 [ 579.392857][T17556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.392876][T17556] RIP: 0033:0x7f134399f559 [ 579.392894][T17556] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 579.392911][T17556] RSP: 002b:00007f13448ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 579.392931][T17556] RAX: ffffffffffffffda RBX: 00007f1343c25fa0 RCX: 00007f134399f559 [ 579.392946][T17556] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005 [ 579.392958][T17556] RBP: 00007f13448ad090 R08: 0000000000000000 R09: 0000000000000000 [ 579.392970][T17556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 579.392981][T17556] R13: 00007f1343c26038 R14: 00007f1343c25fa0 R15: 00007ffc602ba988 [ 579.393013][T17556] [ 579.394683][T17556] warn_alloc: 2 callbacks suppressed [ 579.394696][T17556] syz.3.2682: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x400cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 579.394752][T17556] CPU: 0 UID: 0 PID: 17556 Comm: syz.3.2682 Not tainted syzkaller #0 PREEMPT(full) [ 579.394771][T17556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 579.394782][T17556] Call Trace: [ 579.394789][T17556] [ 579.394797][T17556] dump_stack_lvl+0xe8/0x150 [ 579.394827][T17556] warn_alloc+0x24d/0x270 [ 579.394855][T17556] ? __pfx_warn_alloc+0x10/0x10 [ 579.394884][T17556] ? __kmalloc_node_noprof+0x4d2/0x720 [ 579.394905][T17556] ? __get_vm_area_node+0x200/0x2f0 [ 579.394924][T17556] ? __get_vm_area_node+0x283/0x2f0 [ 579.394941][T17556] ? __vmalloc_node_range_noprof+0x5b4/0x1540 [ 579.394961][T17556] ? __vmalloc_node_range_noprof+0x5b4/0x1540 [ 579.394989][T17556] __vmalloc_node_range_noprof+0x969/0x1540 [ 579.395012][T17556] ? lock_acquire+0x115/0x350 [ 579.395058][T17556] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 579.395080][T17556] ? bpf_verifier_vlog+0x58d/0x900 [ 579.395110][T17556] ? bpf_prog_calc_tag+0x51/0x370 [ 579.395132][T17556] __vmalloc_noprof+0xd2/0x120 [ 579.395153][T17556] ? bpf_prog_calc_tag+0x51/0x370 [ 579.395180][T17556] bpf_prog_calc_tag+0x51/0x370 [ 579.395209][T17556] check_and_resolve_insns+0xbb/0x21d0 [ 579.395239][T17556] ? add_subprog+0x2e2/0x3f0 [ 579.395265][T17556] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 579.395301][T17556] bpf_check+0x18f7/0x2ef0 [ 579.395343][T17556] ? __pfx_bpf_check+0x10/0x10 [ 579.395376][T17556] ? bpf_obj_name_cpy+0x194/0x1e0 [ 579.395399][T17556] bpf_prog_load+0x14d1/0x1c20 [ 579.395437][T17556] ? __pfx_bpf_prog_load+0x10/0x10 [ 579.395487][T17556] __sys_bpf+0xd0d/0xd90 [ 579.395519][T17556] ? __pfx___sys_bpf+0x10/0x10 [ 579.395555][T17556] ? __fget_files+0x2a/0x420 [ 579.395593][T17556] ? ksys_write+0x242/0x270 [ 579.395617][T17556] ? __pfx_ksys_write+0x10/0x10 [ 579.395643][T17556] __x64_sys_bpf+0xba/0xd0 [ 579.395668][T17556] do_syscall_64+0x166/0x520 [ 579.395686][T17556] ? trace_irq_disable+0x3b/0x140 [ 579.395707][T17556] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.395728][T17556] ? clear_bhb_loop+0x70/0xc0 [ 579.395751][T17556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.395769][T17556] RIP: 0033:0x7f134399f559 [ 579.395786][T17556] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 579.395801][T17556] RSP: 002b:00007f13448ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 579.395820][T17556] RAX: ffffffffffffffda RBX: 00007f1343c25fa0 RCX: 00007f134399f559 [ 579.395833][T17556] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005 [ 579.395845][T17556] RBP: 00007f13448ad090 R08: 0000000000000000 R09: 0000000000000000 [ 579.395857][T17556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 579.395867][T17556] R13: 00007f1343c26038 R14: 00007f1343c25fa0 R15: 00007ffc602ba988 [ 579.395899][T17556] [ 579.397537][T17556] Mem-Info: [ 579.397549][T17556] active_anon:9960 inactive_anon:1 isolated_anon:0 [ 579.397549][T17556] active_file:7 inactive_file:43822 isolated_file:0 [ 579.397549][T17556] unevictable:14 dirty:143 writeback:0 [ 579.397549][T17556] slab_reclaimable:12745 slab_unreclaimable:113447 [ 579.397549][T17556] mapped:29620 shmem:2063 pagetables:3268 [ 579.397549][T17556] sec_pagetables:0 bounce:0 [ 579.397549][T17556] kernel_misc_reclaimable:0 [ 579.397549][T17556] free:1295002 free_pcp:12292 free_cma:0 [ 579.397598][T17556] Node 0 active_anon:39840kB inactive_anon:4kB active_file:28kB inactive_file:175084kB unevictable:56kB isolated(anon):0kB isolated(file):0kB mapped:118480kB dirty:572kB writeback:0kB shmem:8252kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14720kB pagetables:12932kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 579.397648][T17556] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 579.397721][T17556] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 579.397775][T17556] lowmem_reserve[]: 0 2467 2467 2467 2467 [ 579.433722][T17556] Node 0 DMA32 free:1221696kB boost:0kB min:33980kB low:42472kB high:50964kB reserved_highatomic:0kB free_highatomic:0kB active_anon:40240kB inactive_anon:4kB active_file:28kB inactive_file:175084kB unevictable:56kB writepending:572kB zspages:0kB present:3129332kB managed:2526416kB mlocked:60kB bounce:0kB free_pcp:48084kB local_pcp:36384kB free_cma:0kB [ 579.433780][T17556] lowmem_reserve[]: 0 0 0 0 0 [ 579.433810][T17556] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 579.433857][T17556] lowmem_reserve[]: 0 0 0 0 0 [ 579.433887][T17556] Node 1 Normal free:3942752kB boost:0kB min:55920kB low:69900kB high:83880kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:996kB local_pcp:0kB free_cma:0kB [ 579.433935][T17556] lowmem_reserve[]: 0 0 0 0 0 [ 579.433964][T17556] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 579.434063][T17556] Node 0 DMA32: 2293*4kB (U) 1174*8kB (UE) 837*16kB (UME) 1207*32kB (UME) 465*64kB (UME) 576*128kB (U) 400*256kB (UE) 230*512kB (UE) 104*1024kB (UM) 6*2048kB (UM) 173*4096kB (UME) = 1221620kB [ 579.434203][T17556] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 579.434293][T17556] Node 1 Normal: 2*4kB (M) 3*8kB (UM) 2*16kB (UM) 3*32kB (UM) 3*64kB (UM) 2*128kB (UM) 3*256kB (UM) 4*512kB (UM) 3*1024kB (UM) 2*2048kB (U) 960*4096kB (UM) = 3942752kB [ 579.434436][T17556] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 579.434452][T17556] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 579.434467][T17556] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 579.434488][T17556] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 579.434504][T17556] 46013 total pagecache pages [ 579.434512][T17556] 0 pages in swap cache [ 579.434518][T17556] Free swap = 124996kB [ 579.434525][T17556] Total swap = 124996kB [ 579.434532][T17556] 2097051 pages RAM [ 579.434539][T17556] 0 pages HighMem/MovableOnly [ 579.434546][T17556] 433831 pages reserved [ 579.434552][T17556] 0 pages cma reserved [ 580.283115][T17566] net_ratelimit: 57 callbacks suppressed [ 580.283136][T17566] TC_ACT_REPEAT abuse ? [ 580.737494][T17580] netlink: 'syz.4.2690': attribute type 7 has an invalid length. [ 581.539788][T17602] FAULT_INJECTION: forcing a failure. [ 581.539788][T17602] name failslab, interval 1, probability 0, space 0, times 0 [ 581.539822][T17602] CPU: 0 UID: 0 PID: 17602 Comm: syz.1.2696 Not tainted syzkaller #0 PREEMPT(full) [ 581.539844][T17602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 581.539856][T17602] Call Trace: [ 581.539864][T17602] [ 581.539872][T17602] dump_stack_lvl+0xe8/0x150 [ 581.539907][T17602] should_fail_ex+0x410/0x560 [ 581.539939][T17602] should_failslab+0xa8/0x100 [ 581.539969][T17602] __kmalloc_node_noprof+0xfb/0x720 [ 581.539993][T17602] ? __get_vm_area_node+0x200/0x2f0 [ 581.540013][T17602] ? __get_vm_area_node+0x283/0x2f0 [ 581.540031][T17602] ? __vmalloc_node_range_noprof+0x5b4/0x1540 [ 581.540052][T17602] ? __vmalloc_node_range_noprof+0x5b4/0x1540 [ 581.540081][T17602] __vmalloc_node_range_noprof+0x5b4/0x1540 [ 581.540104][T17602] ? lock_acquire+0x115/0x350 [ 581.540149][T17602] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 581.540169][T17602] ? bpf_verifier_vlog+0x58d/0x900 [ 581.540197][T17602] ? bpf_prog_calc_tag+0x51/0x370 [ 581.540220][T17602] __vmalloc_noprof+0xd2/0x120 [ 581.540240][T17602] ? bpf_prog_calc_tag+0x51/0x370 [ 581.540267][T17602] bpf_prog_calc_tag+0x51/0x370 [ 581.540296][T17602] check_and_resolve_insns+0xbb/0x21d0 [ 581.540327][T17602] ? add_subprog+0x2e2/0x3f0 [ 581.540355][T17602] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 581.540391][T17602] bpf_check+0x18f7/0x2ef0 [ 581.540433][T17602] ? __pfx_bpf_check+0x10/0x10 [ 581.540460][T17602] ? bpf_obj_name_cpy+0x194/0x1e0 [ 581.540483][T17602] bpf_prog_load+0x14d1/0x1c20 [ 581.540521][T17602] ? __pfx_bpf_prog_load+0x10/0x10 [ 581.540572][T17602] __sys_bpf+0xd0d/0xd90 [ 581.540605][T17602] ? __pfx___sys_bpf+0x10/0x10 [ 581.540640][T17602] ? __fget_files+0x2a/0x420 [ 581.540679][T17602] ? ksys_write+0x242/0x270 [ 581.540712][T17602] ? __pfx_ksys_write+0x10/0x10 [ 581.540739][T17602] __x64_sys_bpf+0xba/0xd0 [ 581.540765][T17602] do_syscall_64+0x166/0x520 [ 581.540784][T17602] ? trace_irq_disable+0x3b/0x140 [ 581.540805][T17602] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.540824][T17602] ? clear_bhb_loop+0x70/0xc0 [ 581.540848][T17602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.540867][T17602] RIP: 0033:0x7ff5c819f559 [ 581.540885][T17602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 581.540901][T17602] RSP: 002b:00007ff5c9033028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 581.540922][T17602] RAX: ffffffffffffffda RBX: 00007ff5c8425fa0 RCX: 00007ff5c819f559 [ 581.540935][T17602] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005 [ 581.540948][T17602] RBP: 00007ff5c9033090 R08: 0000000000000000 R09: 0000000000000000 [ 581.540960][T17602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 581.540971][T17602] R13: 00007ff5c8426038 R14: 00007ff5c8425fa0 R15: 00007ffe9abd1b18 [ 581.541003][T17602] [ 581.830945][T17610] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2700'. [ 581.831221][T17610] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2700'. [ 582.091676][T17597] tipc: Resetting bearer [ 582.423169][T17633] FAULT_INJECTION: forcing a failure. [ 582.423169][T17633] name failslab, interval 1, probability 0, space 0, times 0 [ 582.423215][T17633] CPU: 0 UID: 0 PID: 17633 Comm: syz.3.2707 Not tainted syzkaller #0 PREEMPT(full) [ 582.423237][T17633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 582.423249][T17633] Call Trace: [ 582.423257][T17633] [ 582.423266][T17633] dump_stack_lvl+0xe8/0x150 [ 582.423301][T17633] should_fail_ex+0x410/0x560 [ 582.423334][T17633] should_failslab+0xa8/0x100 [ 582.423364][T17633] __kvmalloc_node_noprof+0x171/0x820 [ 582.423392][T17633] ? bpf_check_cfg+0x13f/0x3840 [ 582.423412][T17633] ? bpf_check_cfg+0x13f/0x3840 [ 582.423440][T17633] bpf_check_cfg+0x13f/0x3840 [ 582.423483][T17633] ? __fget_files+0x2a/0x420 [ 582.423511][T17633] ? __pfx_bpf_check_cfg+0x10/0x10 [ 582.423537][T17633] ? fput+0xa0/0xd0 [ 582.423565][T17633] ? add_used_map+0xff/0x110 [ 582.423593][T17633] ? check_and_resolve_insns+0x1d54/0x21d0 [ 582.423628][T17633] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 582.423656][T17633] ? add_kfuncs+0x251/0x2e0 [ 582.423684][T17633] bpf_check+0x25fb/0x2ef0 [ 582.423713][T17633] ? trace_irq_disable+0x3b/0x140 [ 582.423754][T17633] ? __pfx_bpf_check+0x10/0x10 [ 582.423780][T17633] ? bpf_obj_name_cpy+0x194/0x1e0 [ 582.423803][T17633] bpf_prog_load+0x14d1/0x1c20 [ 582.423845][T17633] ? __pfx_bpf_prog_load+0x10/0x10 [ 582.423895][T17633] __sys_bpf+0xd0d/0xd90 [ 582.423927][T17633] ? __pfx___sys_bpf+0x10/0x10 [ 582.423962][T17633] ? __fget_files+0x2a/0x420 [ 582.424008][T17633] ? ksys_write+0x242/0x270 [ 582.424032][T17633] ? __pfx_ksys_write+0x10/0x10 [ 582.424060][T17633] __x64_sys_bpf+0xba/0xd0 [ 582.424085][T17633] do_syscall_64+0x166/0x520 [ 582.424103][T17633] ? trace_irq_disable+0x3b/0x140 [ 582.424123][T17633] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.424142][T17633] ? clear_bhb_loop+0x70/0xc0 [ 582.424168][T17633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.424187][T17633] RIP: 0033:0x7f134399f559 [ 582.424206][T17633] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 582.424222][T17633] RSP: 002b:00007f13448ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 582.424243][T17633] RAX: ffffffffffffffda RBX: 00007f1343c25fa0 RCX: 00007f134399f559 [ 582.424257][T17633] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005 [ 582.424269][T17633] RBP: 00007f13448ad090 R08: 0000000000000000 R09: 0000000000000000 [ 582.424281][T17633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 582.424292][T17633] R13: 00007f1343c26038 R14: 00007f1343c25fa0 R15: 00007ffc602ba988 [ 582.424324][T17633] [ 582.707243][T17644] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2705'. [ 583.058280][T17655] netlink: 'syz.0.2710': attribute type 5 has an invalid length. [ 583.367404][T17673] FAULT_INJECTION: forcing a failure. [ 583.367404][T17673] name failslab, interval 1, probability 0, space 0, times 0 [ 583.367436][T17673] CPU: 0 UID: 0 PID: 17673 Comm: syz.2.2719 Not tainted syzkaller #0 PREEMPT(full) [ 583.367457][T17673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 583.367468][T17673] Call Trace: [ 583.367476][T17673] [ 583.367484][T17673] dump_stack_lvl+0xe8/0x150 [ 583.367518][T17673] should_fail_ex+0x410/0x560 [ 583.367556][T17673] should_failslab+0xa8/0x100 [ 583.367586][T17673] __kvmalloc_node_noprof+0x171/0x820 [ 583.367614][T17673] ? bpf_check_cfg+0x13f/0x3840 [ 583.367635][T17673] ? bpf_check_cfg+0x13f/0x3840 [ 583.367662][T17673] bpf_check_cfg+0x13f/0x3840 [ 583.367703][T17673] ? __fget_files+0x2a/0x420 [ 583.367730][T17673] ? __pfx_bpf_check_cfg+0x10/0x10 [ 583.367762][T17673] ? fput+0xa0/0xd0 [ 583.367789][T17673] ? add_used_map+0xff/0x110 [ 583.367813][T17673] ? check_and_resolve_insns+0x1d54/0x21d0 [ 583.367843][T17673] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 583.367868][T17673] ? add_kfuncs+0x251/0x2e0 [ 583.367895][T17673] bpf_check+0x25fb/0x2ef0 [ 583.367933][T17673] ? __pfx_bpf_check+0x10/0x10 [ 583.367959][T17673] ? bpf_obj_name_cpy+0x194/0x1e0 [ 583.367981][T17673] bpf_prog_load+0x14d1/0x1c20 [ 583.368016][T17673] ? __pfx_bpf_prog_load+0x10/0x10 [ 583.368062][T17673] __sys_bpf+0xd0d/0xd90 [ 583.368094][T17673] ? __pfx___sys_bpf+0x10/0x10 [ 583.368130][T17673] ? __fget_files+0x2a/0x420 [ 583.368168][T17673] ? ksys_write+0x242/0x270 [ 583.368192][T17673] ? __pfx_ksys_write+0x10/0x10 [ 583.368219][T17673] __x64_sys_bpf+0xba/0xd0 [ 583.368244][T17673] do_syscall_64+0x166/0x520 [ 583.368263][T17673] ? trace_irq_disable+0x3b/0x140 [ 583.368284][T17673] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.368303][T17673] ? clear_bhb_loop+0x70/0xc0 [ 583.368326][T17673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.368344][T17673] RIP: 0033:0x7fc00df9f559 [ 583.368363][T17673] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 583.368380][T17673] RSP: 002b:00007fc00eeba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 583.368400][T17673] RAX: ffffffffffffffda RBX: 00007fc00e225fa0 RCX: 00007fc00df9f559 [ 583.368414][T17673] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005 [ 583.368425][T17673] RBP: 00007fc00eeba090 R08: 0000000000000000 R09: 0000000000000000 [ 583.368436][T17673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 583.368446][T17673] R13: 00007fc00e226038 R14: 00007fc00e225fa0 R15: 00007ffcbb610788 [ 583.368476][T17673] [ 583.486666][T17677] FAULT_INJECTION: forcing a failure. [ 583.486666][T17677] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 583.486698][T17677] CPU: 0 UID: 0 PID: 17677 Comm: syz.4.2720 Not tainted syzkaller #0 PREEMPT(full) [ 583.486725][T17677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 583.486737][T17677] Call Trace: [ 583.486744][T17677] [ 583.486752][T17677] dump_stack_lvl+0xe8/0x150 [ 583.486785][T17677] should_fail_ex+0x410/0x560 [ 583.486815][T17677] _copy_to_user+0x31/0xb0 [ 583.486843][T17677] bpf_verifier_vlog+0x3a2/0x900 [ 583.486876][T17677] bpf_verifier_log_write+0x11d/0x1a0 [ 583.486904][T17677] ? __pfx_bpf_verifier_log_write+0x10/0x10 [ 583.486928][T17677] ? record_arg_access+0x148/0x970 [ 583.486959][T17677] analyze_subprog+0x5d93/0x9df0 [ 583.486982][T17677] ? bpf_prog_kallsyms_add+0x61f/0x640 [ 583.487057][T17677] ? __pfx_analyze_subprog+0x10/0x10 [ 583.487078][T17677] ? __x64_sys_bpf+0xba/0xd0 [ 583.487096][T17677] ? xs_reset_transport+0x172/0x630 [ 583.487123][T17677] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.487177][T17677] ? call_instance+0x263/0x560 [ 583.487199][T17677] ? rcu_is_watching+0x16/0xb0 [ 583.487223][T17677] ? call_instance+0x263/0x560 [ 583.487243][T17677] ? trace_kmalloc+0x2a/0xf0 [ 583.487267][T17677] ? call_instance+0x263/0x560 [ 583.487288][T17677] ? __kvmalloc_node_noprof+0x52a/0x820 [ 583.487313][T17677] ? __kvmalloc_node_noprof+0x340/0x820 [ 583.487336][T17677] ? call_instance+0x263/0x560 [ 583.487356][T17677] ? call_instance+0x263/0x560 [ 583.487395][T17677] bpf_compute_subprog_arg_access+0x2c9/0x14d0 [ 583.487419][T17677] ? bpf_tracing_func_proto+0x72/0x180 [ 583.487469][T17677] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 583.487498][T17677] ? __kvmalloc_node_noprof+0x340/0x820 [ 583.487521][T17677] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 583.487543][T17677] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 583.487574][T17677] bpf_compute_live_registers+0x8d3/0x1ff0 [ 583.487615][T17677] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 583.487649][T17677] bpf_check+0x2744/0x2ef0 [ 583.487669][T17677] ? trace_irq_disable+0x3b/0x140 [ 583.487711][T17677] ? __pfx_bpf_check+0x10/0x10 [ 583.487735][T17677] ? bpf_obj_name_cpy+0x194/0x1e0 [ 583.487756][T17677] bpf_prog_load+0x14d1/0x1c20 [ 583.487793][T17677] ? __pfx_bpf_prog_load+0x10/0x10 [ 583.487842][T17677] __sys_bpf+0xd0d/0xd90 [ 583.487873][T17677] ? __pfx___sys_bpf+0x10/0x10 [ 583.487906][T17677] ? __fget_files+0x2a/0x420 [ 583.487942][T17677] ? ksys_write+0x242/0x270 [ 583.487965][T17677] ? __pfx_ksys_write+0x10/0x10 [ 583.487990][T17677] __x64_sys_bpf+0xba/0xd0 [ 583.488014][T17677] do_syscall_64+0x166/0x520 [ 583.488032][T17677] ? trace_irq_disable+0x3b/0x140 [ 583.488052][T17677] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.488070][T17677] ? clear_bhb_loop+0x70/0xc0 [ 583.488091][T17677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.488109][T17677] RIP: 0033:0x7f95d819f559 [ 583.488127][T17677] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 583.488141][T17677] RSP: 002b:00007f95d911a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 583.488161][T17677] RAX: ffffffffffffffda RBX: 00007f95d8425fa0 RCX: 00007f95d819f559 [ 583.488173][T17677] RDX: 0000000000000094 RSI: 0000200000000280 RDI: 0000000000000005 [ 583.488185][T17677] RBP: 00007f95d911a090 R08: 0000000000000000 R09: 0000000000000000 [ 583.488196][T17677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 583.488206][T17677] R13: 00007f95d8426038 R14: 00007f95d8425fa0 R15: 00007fff333dc8d8 [ 583.488237][T17677] [ 583.797055][T17687] netlink: 220 bytes leftover after parsing attributes in process `syz.4.2723'. [ 583.797077][T17687] tc_dump_action: action bad kind [ 584.030454][T17689] bridge8: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 584.034319][T17689] 8021q: VLANs not supported on ip6_vti0 [ 584.627568][T17709] FAULT_INJECTION: forcing a failure. [ 584.627568][T17709] name failslab, interval 1, probability 0, space 0, times 0 [ 584.627600][T17709] CPU: 0 UID: 0 PID: 17709 Comm: syz.1.2732 Not tainted syzkaller #0 PREEMPT(full) [ 584.627616][T17709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 584.627624][T17709] Call Trace: [ 584.627630][T17709] [ 584.627636][T17709] dump_stack_lvl+0xe8/0x150 [ 584.627663][T17709] should_fail_ex+0x410/0x560 [ 584.627687][T17709] should_failslab+0xa8/0x100 [ 584.627709][T17709] __kvmalloc_node_noprof+0x171/0x820 [ 584.627730][T17709] ? bpf_compute_postorder+0x83/0x970 [ 584.627746][T17709] ? bpf_compute_postorder+0x83/0x970 [ 584.627769][T17709] bpf_compute_postorder+0x83/0x970 [ 584.627786][T17709] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 584.627814][T17709] ? add_kfuncs+0x251/0x2e0 [ 584.627834][T17709] bpf_check+0x261d/0x2ef0 [ 584.627865][T17709] ? __pfx_bpf_check+0x10/0x10 [ 584.627885][T17709] ? bpf_obj_name_cpy+0x194/0x1e0 [ 584.627903][T17709] bpf_prog_load+0x14d1/0x1c20 [ 584.627932][T17709] ? __pfx_bpf_prog_load+0x10/0x10 [ 584.627972][T17709] __sys_bpf+0xd0d/0xd90 [ 584.627998][T17709] ? __pfx___sys_bpf+0x10/0x10 [ 584.628023][T17709] ? __fget_files+0x2a/0x420 [ 584.628051][T17709] ? ksys_write+0x242/0x270 [ 584.628069][T17709] ? __pfx_ksys_write+0x10/0x10 [ 584.628089][T17709] __x64_sys_bpf+0xba/0xd0 [ 584.628107][T17709] do_syscall_64+0x166/0x520 [ 584.628120][T17709] ? trace_irq_disable+0x3b/0x140 [ 584.628134][T17709] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.628148][T17709] ? clear_bhb_loop+0x70/0xc0 [ 584.628165][T17709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.628178][T17709] RIP: 0033:0x7ff5c819f559 [ 584.628194][T17709] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 584.628207][T17709] RSP: 002b:00007ff5c9033028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 584.628224][T17709] RAX: ffffffffffffffda RBX: 00007ff5c8425fa0 RCX: 00007ff5c819f559 [ 584.628234][T17709] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005 [ 584.628243][T17709] RBP: 00007ff5c9033090 R08: 0000000000000000 R09: 0000000000000000 [ 584.628252][T17709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 584.628260][T17709] R13: 00007ff5c8426038 R14: 00007ff5c8425fa0 R15: 00007ffe9abd1b18 [ 584.628285][T17709] [ 584.777267][T17716] FAULT_INJECTION: forcing a failure. [ 584.777267][T17716] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 584.777298][T17716] CPU: 0 UID: 0 PID: 17716 Comm: syz.2.2733 Not tainted syzkaller #0 PREEMPT(full) [ 584.777319][T17716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 584.777331][T17716] Call Trace: [ 584.777338][T17716] [ 584.777346][T17716] dump_stack_lvl+0xe8/0x150 [ 584.777378][T17716] should_fail_ex+0x410/0x560 [ 584.777410][T17716] _copy_to_user+0x31/0xb0 [ 584.777438][T17716] bpf_verifier_vlog+0x3a2/0x900 [ 584.777480][T17716] bpf_verifier_log_write+0x11d/0x1a0 [ 584.777508][T17716] ? __pfx_bpf_verifier_log_write+0x10/0x10 [ 584.777532][T17716] ? record_arg_access+0x148/0x970 [ 584.777564][T17716] analyze_subprog+0x5d77/0x9df0 [ 584.777586][T17716] ? bpf_prog_kallsyms_add+0x61f/0x640 [ 584.777664][T17716] ? __pfx_analyze_subprog+0x10/0x10 [ 584.777687][T17716] ? __x64_sys_bpf+0xba/0xd0 [ 584.777706][T17716] ? xs_reset_transport+0x172/0x630 [ 584.777731][T17716] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.777786][T17716] ? call_instance+0x263/0x560 [ 584.777808][T17716] ? rcu_is_watching+0x16/0xb0 [ 584.777831][T17716] ? call_instance+0x263/0x560 [ 584.777851][T17716] ? trace_kmalloc+0x2a/0xf0 [ 584.777875][T17716] ? call_instance+0x263/0x560 [ 584.777896][T17716] ? __kvmalloc_node_noprof+0x52a/0x820 [ 584.777922][T17716] ? __kvmalloc_node_noprof+0x340/0x820 [ 584.777944][T17716] ? call_instance+0x263/0x560 [ 584.777965][T17716] ? call_instance+0x263/0x560 [ 584.778003][T17716] bpf_compute_subprog_arg_access+0x2c9/0x14d0 [ 584.778028][T17716] ? bpf_tracing_func_proto+0x72/0x180 [ 584.778078][T17716] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 584.778108][T17716] ? __kvmalloc_node_noprof+0x340/0x820 [ 584.778131][T17716] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 584.778153][T17716] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 584.778182][T17716] bpf_compute_live_registers+0x8d3/0x1ff0 [ 584.778226][T17716] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 584.778261][T17716] bpf_check+0x2744/0x2ef0 [ 584.778301][T17716] ? __pfx_bpf_check+0x10/0x10 [ 584.778327][T17716] ? bpf_obj_name_cpy+0x194/0x1e0 [ 584.778349][T17716] bpf_prog_load+0x14d1/0x1c20 [ 584.778385][T17716] ? __pfx_bpf_prog_load+0x10/0x10 [ 584.778434][T17716] __sys_bpf+0xd0d/0xd90 [ 584.778472][T17716] ? __pfx___sys_bpf+0x10/0x10 [ 584.778503][T17716] ? __fget_files+0x2a/0x420 [ 584.778539][T17716] ? ksys_write+0x242/0x270 [ 584.778562][T17716] ? __pfx_ksys_write+0x10/0x10 [ 584.778589][T17716] __x64_sys_bpf+0xba/0xd0 [ 584.778612][T17716] do_syscall_64+0x166/0x520 [ 584.778630][T17716] ? trace_irq_disable+0x3b/0x140 [ 584.778650][T17716] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.778668][T17716] ? clear_bhb_loop+0x70/0xc0 [ 584.778690][T17716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.778707][T17716] RIP: 0033:0x7fc00df9f559 [ 584.778724][T17716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 584.778739][T17716] RSP: 002b:00007fc00eeba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 584.778760][T17716] RAX: ffffffffffffffda RBX: 00007fc00e225fa0 RCX: 00007fc00df9f559 [ 584.778773][T17716] RDX: 0000000000000094 RSI: 0000200000000280 RDI: 0000000000000005 [ 584.778784][T17716] RBP: 00007fc00eeba090 R08: 0000000000000000 R09: 0000000000000000 [ 584.778796][T17716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 584.778806][T17716] R13: 00007fc00e226038 R14: 00007fc00e225fa0 R15: 00007ffcbb610788 [ 584.778837][T17716] [ 585.424321][T17745] xt_hashlimit: size too large, truncated to 1048576 [ 585.864259][T17765] FAULT_INJECTION: forcing a failure. [ 585.864259][T17765] name failslab, interval 1, probability 0, space 0, times 0 [ 585.864296][T17765] CPU: 0 UID: 0 PID: 17765 Comm: syz.0.2744 Not tainted syzkaller #0 PREEMPT(full) [ 585.864318][T17765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 585.864329][T17765] Call Trace: [ 585.864337][T17765] [ 585.864346][T17765] dump_stack_lvl+0xe8/0x150 [ 585.864379][T17765] should_fail_ex+0x410/0x560 [ 585.864411][T17765] should_failslab+0xa8/0x100 [ 585.864442][T17765] __kvmalloc_node_noprof+0x171/0x820 [ 585.864471][T17765] ? bpf_compute_postorder+0x83/0x970 [ 585.864501][T17765] ? bpf_compute_postorder+0x83/0x970 [ 585.864531][T17765] bpf_compute_postorder+0x83/0x970 [ 585.864554][T17765] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 585.864583][T17765] ? add_kfuncs+0x251/0x2e0 [ 585.864612][T17765] bpf_check+0x261d/0x2ef0 [ 585.864654][T17765] ? __pfx_bpf_check+0x10/0x10 [ 585.864681][T17765] ? bpf_obj_name_cpy+0x194/0x1e0 [ 585.864705][T17765] bpf_prog_load+0x14d1/0x1c20 [ 585.864743][T17765] ? __pfx_bpf_prog_load+0x10/0x10 [ 585.864795][T17765] __sys_bpf+0xd0d/0xd90 [ 585.864828][T17765] ? __pfx___sys_bpf+0x10/0x10 [ 585.864864][T17765] ? __fget_files+0x2a/0x420 [ 585.864902][T17765] ? ksys_write+0x242/0x270 [ 585.864927][T17765] ? __pfx_ksys_write+0x10/0x10 [ 585.864955][T17765] __x64_sys_bpf+0xba/0xd0 [ 585.864980][T17765] do_syscall_64+0x166/0x520 [ 585.864997][T17765] ? trace_irq_disable+0x3b/0x140 [ 585.865018][T17765] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.865037][T17765] ? clear_bhb_loop+0x70/0xc0 [ 585.865060][T17765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.865079][T17765] RIP: 0033:0x7f628459f559 [ 585.865097][T17765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 585.865112][T17765] RSP: 002b:00007f6285546028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 585.865133][T17765] RAX: ffffffffffffffda RBX: 00007f6284825fa0 RCX: 00007f628459f559 [ 585.865147][T17765] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005 [ 585.865159][T17765] RBP: 00007f6285546090 R08: 0000000000000000 R09: 0000000000000000 [ 585.865171][T17765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 585.865183][T17765] R13: 00007f6284826038 R14: 00007f6284825fa0 R15: 00007ffe86904728 [ 585.865215][T17765] [ 585.964791][T17767] netlink: 'syz.1.2746': attribute type 1 has an invalid length. [ 586.215482][T17767] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2746'. [ 586.245575][T17767] 8021q: adding VLAN 0 to HW filter on device bond16 [ 586.344541][T17777] syzkaller0: entered promiscuous mode [ 586.344564][T17777] syzkaller0: entered allmulticast mode [ 586.373527][T17777] tc mirred: Loop (syzkaller0:egress --> syzkaller0:egress) [ 586.989993][T17811] ip_tables: iptables: counters copy to user failed while replacing table [ 587.177559][ T30] audit: type=1800 audit(1792886057.510:18): pid=17814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2759" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2859 res=0 errno=-22 [ 587.652722][T17811] bond0: left promiscuous mode [ 587.652745][T17811] bond_slave_0: left promiscuous mode [ 587.652951][T17811] bond_slave_1: left promiscuous mode [ 587.653123][T17811] batadv0: left promiscuous mode [ 587.776972][T17825] FAULT_INJECTION: forcing a failure. [ 587.776972][T17825] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 587.777005][T17825] CPU: 0 UID: 0 PID: 17825 Comm: syz.4.2763 Not tainted syzkaller #0 PREEMPT(full) [ 587.777026][T17825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 587.777037][T17825] Call Trace: [ 587.777048][T17825] [ 587.777057][T17825] dump_stack_lvl+0xe8/0x150 [ 587.777092][T17825] should_fail_ex+0x410/0x560 [ 587.777125][T17825] _copy_to_user+0x31/0xb0 [ 587.777155][T17825] bpf_verifier_vlog+0x3a2/0x900 [ 587.777190][T17825] bpf_verifier_log_write+0x11d/0x1a0 [ 587.777219][T17825] ? __pfx_bpf_verifier_log_write+0x10/0x10 [ 587.777240][T17825] ? __kvmalloc_node_noprof+0x52a/0x820 [ 587.777268][T17825] ? record_arg_access+0x148/0x970 [ 587.777309][T17825] analyze_subprog+0x5d93/0x9df0 [ 587.777333][T17825] ? bpf_prog_kallsyms_add+0x61f/0x640 [ 587.777412][T17825] ? __pfx_analyze_subprog+0x10/0x10 [ 587.777435][T17825] ? __x64_sys_bpf+0xba/0xd0 [ 587.777455][T17825] ? xs_reset_transport+0x172/0x630 [ 587.777480][T17825] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.777538][T17825] ? call_instance+0x263/0x560 [ 587.777562][T17825] ? rcu_is_watching+0x16/0xb0 [ 587.777586][T17825] ? call_instance+0x263/0x560 [ 587.777608][T17825] ? trace_kmalloc+0x2a/0xf0 [ 587.777632][T17825] ? call_instance+0x263/0x560 [ 587.777655][T17825] ? __kvmalloc_node_noprof+0x52a/0x820 [ 587.777681][T17825] ? __kvmalloc_node_noprof+0x340/0x820 [ 587.777704][T17825] ? call_instance+0x263/0x560 [ 587.777725][T17825] ? call_instance+0x263/0x560 [ 587.777764][T17825] bpf_compute_subprog_arg_access+0x2c9/0x14d0 [ 587.777790][T17825] ? bpf_tracing_func_proto+0x72/0x180 [ 587.777834][T17825] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 587.777863][T17825] ? __kvmalloc_node_noprof+0x340/0x820 [ 587.777886][T17825] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 587.777910][T17825] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 587.777942][T17825] bpf_compute_live_registers+0x8d3/0x1ff0 [ 587.777987][T17825] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 587.778024][T17825] bpf_check+0x2744/0x2ef0 [ 587.778066][T17825] ? __pfx_bpf_check+0x10/0x10 [ 587.778093][T17825] ? bpf_obj_name_cpy+0x194/0x1e0 [ 587.778116][T17825] bpf_prog_load+0x14d1/0x1c20 [ 587.778154][T17825] ? __pfx_bpf_prog_load+0x10/0x10 [ 587.778205][T17825] __sys_bpf+0xd0d/0xd90 [ 587.778238][T17825] ? __pfx___sys_bpf+0x10/0x10 [ 587.778273][T17825] ? __fget_files+0x2a/0x420 [ 587.778318][T17825] ? ksys_write+0x242/0x270 [ 587.778342][T17825] ? __pfx_ksys_write+0x10/0x10 [ 587.778369][T17825] __x64_sys_bpf+0xba/0xd0 [ 587.778395][T17825] do_syscall_64+0x166/0x520 [ 587.778414][T17825] ? trace_irq_disable+0x3b/0x140 [ 587.778435][T17825] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.778453][T17825] ? clear_bhb_loop+0x70/0xc0 [ 587.778476][T17825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.778495][T17825] RIP: 0033:0x7f95d819f559 [ 587.778514][T17825] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 587.778530][T17825] RSP: 002b:00007f95d911a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 587.778552][T17825] RAX: ffffffffffffffda RBX: 00007f95d8425fa0 RCX: 00007f95d819f559 [ 587.778565][T17825] RDX: 0000000000000094 RSI: 0000200000000280 RDI: 0000000000000005 [ 587.778577][T17825] RBP: 00007f95d911a090 R08: 0000000000000000 R09: 0000000000000000 [ 587.778589][T17825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 587.778601][T17825] R13: 00007f95d8426038 R14: 00007f95d8425fa0 R15: 00007fff333dc8d8 [ 587.778633][T17825] [ 587.826823][T17811] batman_adv: batadv0: Interface deactivated: veth0 [ 588.314337][T17830] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2765'. [ 588.572782][T17836] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2767'. [ 588.594469][T17811] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 588.736015][T17839] netlink: 'syz.4.2768': attribute type 1 has an invalid length. [ 588.796452][T17811] macvlan1: left allmulticast mode [ 588.822329][T17811] bond4: left allmulticast mode [ 588.822768][T17811] ip6gretap1: left allmulticast mode [ 588.825854][T17811] veth3: left allmulticast mode [ 589.000660][T17836] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2767'. [ 589.000917][T17837] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2767'. [ 589.364711][T17856] FAULT_INJECTION: forcing a failure. [ 589.364711][T17856] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 589.364743][T17856] CPU: 1 UID: 0 PID: 17856 Comm: syz.3.2774 Not tainted syzkaller #0 PREEMPT(full) [ 589.364763][T17856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 589.364776][T17856] Call Trace: [ 589.364784][T17856] [ 589.364793][T17856] dump_stack_lvl+0xe8/0x150 [ 589.364827][T17856] should_fail_ex+0x410/0x560 [ 589.364865][T17856] _copy_to_user+0x31/0xb0 [ 589.364894][T17856] bpf_verifier_vlog+0x3a2/0x900 [ 589.364930][T17856] bpf_verifier_log_write+0x11d/0x1a0 [ 589.364958][T17856] ? __pfx_bpf_verifier_log_write+0x10/0x10 [ 589.364978][T17856] ? __kvmalloc_node_noprof+0x52a/0x820 [ 589.365006][T17856] ? record_arg_access+0x148/0x970 [ 589.365039][T17856] analyze_subprog+0x5d77/0x9df0 [ 589.365063][T17856] ? bpf_prog_kallsyms_add+0x61f/0x640 [ 589.365138][T17856] ? __pfx_analyze_subprog+0x10/0x10 [ 589.365160][T17856] ? __x64_sys_bpf+0xba/0xd0 [ 589.365178][T17856] ? xs_reset_transport+0x172/0x630 [ 589.365202][T17856] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.365258][T17856] ? call_instance+0x263/0x560 [ 589.365280][T17856] ? rcu_is_watching+0x16/0xb0 [ 589.365304][T17856] ? call_instance+0x263/0x560 [ 589.365326][T17856] ? trace_kmalloc+0x2a/0xf0 [ 589.365350][T17856] ? call_instance+0x263/0x560 [ 589.365373][T17856] ? __kvmalloc_node_noprof+0x52a/0x820 [ 589.365399][T17856] ? __kvmalloc_node_noprof+0x340/0x820 [ 589.365422][T17856] ? call_instance+0x263/0x560 [ 589.365444][T17856] ? call_instance+0x263/0x560 [ 589.365486][T17856] bpf_compute_subprog_arg_access+0x2c9/0x14d0 [ 589.365511][T17856] ? bpf_tracing_func_proto+0x72/0x180 [ 589.365565][T17856] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 589.365596][T17856] ? __kvmalloc_node_noprof+0x340/0x820 [ 589.365627][T17856] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 589.365651][T17856] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 589.365683][T17856] bpf_compute_live_registers+0x8d3/0x1ff0 [ 589.365725][T17856] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 589.365760][T17856] bpf_check+0x2744/0x2ef0 [ 589.365802][T17856] ? __pfx_bpf_check+0x10/0x10 [ 589.365828][T17856] ? bpf_obj_name_cpy+0x194/0x1e0 [ 589.365851][T17856] bpf_prog_load+0x14d1/0x1c20 [ 589.365888][T17856] ? __pfx_bpf_prog_load+0x10/0x10 [ 589.365939][T17856] __sys_bpf+0xd0d/0xd90 [ 589.365972][T17856] ? __pfx___sys_bpf+0x10/0x10 [ 589.366007][T17856] ? __fget_files+0x2a/0x420 [ 589.366046][T17856] ? ksys_write+0x242/0x270 [ 589.366071][T17856] ? __pfx_ksys_write+0x10/0x10 [ 589.366098][T17856] __x64_sys_bpf+0xba/0xd0 [ 589.366123][T17856] do_syscall_64+0x166/0x520 [ 589.366141][T17856] ? trace_irq_disable+0x3b/0x140 [ 589.366161][T17856] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.366180][T17856] ? clear_bhb_loop+0x70/0xc0 [ 589.366203][T17856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.366221][T17856] RIP: 0033:0x7f134399f559 [ 589.366240][T17856] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 589.366255][T17856] RSP: 002b:00007f13448ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 589.366277][T17856] RAX: ffffffffffffffda RBX: 00007f1343c25fa0 RCX: 00007f134399f559 [ 589.366291][T17856] RDX: 0000000000000094 RSI: 0000200000000280 RDI: 0000000000000005 [ 589.366303][T17856] RBP: 00007f13448ad090 R08: 0000000000000000 R09: 0000000000000000 [ 589.366314][T17856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 589.366325][T17856] R13: 00007f1343c26038 R14: 00007f1343c25fa0 R15: 00007ffc602ba988 [ 589.366357][T17856] [ 589.415199][T17858] FAULT_INJECTION: forcing a failure. [ 589.415199][T17858] name failslab, interval 1, probability 0, space 0, times 0 [ 589.415230][T17858] CPU: 0 UID: 0 PID: 17858 Comm: syz.4.2775 Not tainted syzkaller #0 PREEMPT(full) [ 589.415250][T17858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 589.415264][T17858] Call Trace: [ 589.415272][T17858] [ 589.415279][T17858] dump_stack_lvl+0xe8/0x150 [ 589.415313][T17858] should_fail_ex+0x410/0x560 [ 589.415346][T17858] should_failslab+0xa8/0x100 [ 589.415374][T17858] __kmalloc_cache_noprof+0x9e/0x600 [ 589.415399][T17858] ? bpf_prog_alloc_no_stats+0xd8/0x560 [ 589.415422][T17858] ? bpf_prog_alloc_no_stats+0xd8/0x560 [ 589.415453][T17858] bpf_prog_alloc_no_stats+0xd8/0x560 [ 589.415475][T17858] ? bpf_prog_alloc+0x2a/0x1a0 [ 589.415501][T17858] bpf_prog_alloc+0x3c/0x1a0 [ 589.415526][T17858] bpf_prog_load+0x7f8/0x1c20 [ 589.415562][T17858] ? __pfx_bpf_prog_load+0x10/0x10 [ 589.415612][T17858] __sys_bpf+0xd0d/0xd90 [ 589.415642][T17858] ? __pfx___sys_bpf+0x10/0x10 [ 589.415676][T17858] ? __fget_files+0x2a/0x420 [ 589.415713][T17858] ? ksys_write+0x242/0x270 [ 589.415736][T17858] ? __pfx_ksys_write+0x10/0x10 [ 589.415762][T17858] __x64_sys_bpf+0xba/0xd0 [ 589.415787][T17858] do_syscall_64+0x166/0x520 [ 589.415805][T17858] ? trace_irq_disable+0x3b/0x140 [ 589.415828][T17858] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.415847][T17858] ? clear_bhb_loop+0x70/0xc0 [ 589.415869][T17858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.415887][T17858] RIP: 0033:0x7f95d819f559 [ 589.415904][T17858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 589.415918][T17858] RSP: 002b:00007f95d911a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 589.415938][T17858] RAX: ffffffffffffffda RBX: 00007f95d8425fa0 RCX: 00007f95d819f559 [ 589.415951][T17858] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005 [ 589.415963][T17858] RBP: 00007f95d911a090 R08: 0000000000000000 R09: 0000000000000000 [ 589.415975][T17858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 589.415985][T17858] R13: 00007f95d8426038 R14: 00007f95d8425fa0 R15: 00007fff333dc8d8 [ 589.416016][T17858] [ 589.576349][T17861] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2776'. [ 589.614030][T17863] netlink: 'syz.3.2777': attribute type 5 has an invalid length. [ 590.824203][T17893] FAULT_INJECTION: forcing a failure. [ 590.824203][T17893] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 590.824235][T17893] CPU: 0 UID: 0 PID: 17893 Comm: syz.3.2786 Not tainted syzkaller #0 PREEMPT(full) [ 590.824256][T17893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 590.824269][T17893] Call Trace: [ 590.824276][T17893] [ 590.824285][T17893] dump_stack_lvl+0xe8/0x150 [ 590.824319][T17893] should_fail_ex+0x410/0x560 [ 590.824351][T17893] _copy_from_user+0x2d/0xb0 [ 590.824379][T17893] copy_from_bpfptr+0x5c/0x90 [ 590.824407][T17893] bpf_prog_load+0xcd6/0x1c20 [ 590.824445][T17893] ? __pfx_bpf_prog_load+0x10/0x10 [ 590.824505][T17893] __sys_bpf+0xd0d/0xd90 [ 590.824541][T17893] ? __pfx___sys_bpf+0x10/0x10 [ 590.824577][T17893] ? __fget_files+0x2a/0x420 [ 590.824616][T17893] ? ksys_write+0x242/0x270 [ 590.824643][T17893] ? __pfx_ksys_write+0x10/0x10 [ 590.824670][T17893] __x64_sys_bpf+0xba/0xd0 [ 590.824696][T17893] do_syscall_64+0x166/0x520 [ 590.824715][T17893] ? trace_irq_disable+0x3b/0x140 [ 590.824736][T17893] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.824756][T17893] ? clear_bhb_loop+0x70/0xc0 [ 590.824779][T17893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.824798][T17893] RIP: 0033:0x7f134399f559 [ 590.824816][T17893] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 590.824833][T17893] RSP: 002b:00007f13448ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 590.824853][T17893] RAX: ffffffffffffffda RBX: 00007f1343c25fa0 RCX: 00007f134399f559 [ 590.824868][T17893] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005 [ 590.824880][T17893] RBP: 00007f13448ad090 R08: 0000000000000000 R09: 0000000000000000 [ 590.824892][T17893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 590.824904][T17893] R13: 00007f1343c26038 R14: 00007f1343c25fa0 R15: 00007ffc602ba988 [ 590.824936][T17893] [ 591.334728][T17899] FAULT_INJECTION: forcing a failure. [ 591.334728][T17899] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 591.334762][T17899] CPU: 0 UID: 0 PID: 17899 Comm: syz.3.2787 Not tainted syzkaller #0 PREEMPT(full) [ 591.334784][T17899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 591.334797][T17899] Call Trace: [ 591.334804][T17899] [ 591.334814][T17899] dump_stack_lvl+0xe8/0x150 [ 591.334848][T17899] should_fail_ex+0x410/0x560 [ 591.334882][T17899] _copy_to_user+0x31/0xb0 [ 591.334911][T17899] bpf_verifier_vlog+0x3a2/0x900 [ 591.334947][T17899] bpf_verifier_log_write+0x11d/0x1a0 [ 591.334976][T17899] ? __pfx_bpf_verifier_log_write+0x10/0x10 [ 591.335000][T17899] ? __kvmalloc_node_noprof+0x52a/0x820 [ 591.335029][T17899] ? record_arg_access+0x148/0x970 [ 591.335065][T17899] analyze_subprog+0x5d93/0x9df0 [ 591.335088][T17899] ? bpf_prog_kallsyms_add+0x61f/0x640 [ 591.335168][T17899] ? __pfx_analyze_subprog+0x10/0x10 [ 591.335191][T17899] ? __x64_sys_bpf+0xba/0xd0 [ 591.335211][T17899] ? xs_reset_transport+0x172/0x630 [ 591.335236][T17899] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.335304][T17899] ? call_instance+0x263/0x560 [ 591.335327][T17899] ? rcu_is_watching+0x16/0xb0 [ 591.335352][T17899] ? call_instance+0x263/0x560 [ 591.335374][T17899] ? trace_kmalloc+0x2a/0xf0 [ 591.335398][T17899] ? call_instance+0x263/0x560 [ 591.335421][T17899] ? __kvmalloc_node_noprof+0x52a/0x820 [ 591.335448][T17899] ? __kvmalloc_node_noprof+0x340/0x820 [ 591.335472][T17899] ? call_instance+0x263/0x560 [ 591.335505][T17899] ? call_instance+0x263/0x560 [ 591.335556][T17899] bpf_compute_subprog_arg_access+0x2c9/0x14d0 [ 591.335582][T17899] ? bpf_tracing_func_proto+0x72/0x180 [ 591.335637][T17899] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 591.335669][T17899] ? __kvmalloc_node_noprof+0x340/0x820 [ 591.335692][T17899] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 591.335716][T17899] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 591.335748][T17899] bpf_compute_live_registers+0x8d3/0x1ff0 [ 591.335795][T17899] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 591.335831][T17899] bpf_check+0x2744/0x2ef0 [ 591.335876][T17899] ? __pfx_bpf_check+0x10/0x10 [ 591.335903][T17899] ? bpf_obj_name_cpy+0x194/0x1e0 [ 591.335926][T17899] bpf_prog_load+0x14d1/0x1c20 [ 591.335964][T17899] ? __pfx_bpf_prog_load+0x10/0x10 [ 591.336017][T17899] __sys_bpf+0xd0d/0xd90 [ 591.336049][T17899] ? __pfx___sys_bpf+0x10/0x10 [ 591.336085][T17899] ? __fget_files+0x2a/0x420 [ 591.336122][T17899] ? ksys_write+0x242/0x270 [ 591.336144][T17899] ? __pfx_ksys_write+0x10/0x10 [ 591.336172][T17899] __x64_sys_bpf+0xba/0xd0 [ 591.336195][T17899] do_syscall_64+0x166/0x520 [ 591.336212][T17899] ? trace_irq_disable+0x3b/0x140 [ 591.336232][T17899] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.336248][T17899] ? clear_bhb_loop+0x70/0xc0 [ 591.336269][T17899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.336287][T17899] RIP: 0033:0x7f134399f559 [ 591.336304][T17899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 591.336319][T17899] RSP: 002b:00007f13448ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 591.336338][T17899] RAX: ffffffffffffffda RBX: 00007f1343c25fa0 RCX: 00007f134399f559 [ 591.336350][T17899] RDX: 0000000000000094 RSI: 0000200000000280 RDI: 0000000000000005 [ 591.336361][T17899] RBP: 00007f13448ad090 R08: 0000000000000000 R09: 0000000000000000 [ 591.336372][T17899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 591.336382][T17899] R13: 00007f1343c26038 R14: 00007f1343c25fa0 R15: 00007ffc602ba988 [ 591.336412][T17899] [ 591.751705][T17907] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2789'. [ 591.751731][T17907] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2789'. [ 592.780945][T17930] netlink: 'syz.2.2796': attribute type 1 has an invalid length. [ 592.780970][T17930] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2796'. [ 592.831917][T17932] FAULT_INJECTION: forcing a failure. [ 592.831917][T17932] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 592.831951][T17932] CPU: 0 UID: 0 PID: 17932 Comm: syz.0.2797 Not tainted syzkaller #0 PREEMPT(full) [ 592.831972][T17932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 592.831984][T17932] Call Trace: [ 592.831991][T17932] [ 592.831998][T17932] dump_stack_lvl+0xe8/0x150 [ 592.832031][T17932] should_fail_ex+0x410/0x560 [ 592.832061][T17932] strncpy_from_user+0x36/0x2c0 [ 592.832092][T17932] bpf_prog_load+0xdea/0x1c20 [ 592.832128][T17932] ? __pfx_bpf_prog_load+0x10/0x10 [ 592.832177][T17932] __sys_bpf+0xd0d/0xd90 [ 592.832209][T17932] ? __pfx___sys_bpf+0x10/0x10 [ 592.832250][T17932] ? __fget_files+0x2a/0x420 [ 592.832288][T17932] ? ksys_write+0x242/0x270 [ 592.832314][T17932] ? __pfx_ksys_write+0x10/0x10 [ 592.832339][T17932] __x64_sys_bpf+0xba/0xd0 [ 592.832363][T17932] do_syscall_64+0x166/0x520 [ 592.832380][T17932] ? trace_irq_disable+0x3b/0x140 [ 592.832404][T17932] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.832423][T17932] ? clear_bhb_loop+0x70/0xc0 [ 592.832446][T17932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.832469][T17932] RIP: 0033:0x7f628459f559 [ 592.832487][T17932] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 592.832503][T17932] RSP: 002b:00007f6285546028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 592.832524][T17932] RAX: ffffffffffffffda RBX: 00007f6284825fa0 RCX: 00007f628459f559 [ 592.832538][T17932] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005 [ 592.832550][T17932] RBP: 00007f6285546090 R08: 0000000000000000 R09: 0000000000000000 [ 592.832562][T17932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 592.832573][T17932] R13: 00007f6284826038 R14: 00007f6284825fa0 R15: 00007ffe86904728 [ 592.832606][T17932] [ 593.140804][T17935] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2798'. [ 593.186295][T17944] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 593.203608][T17944] netlink: 868 bytes leftover after parsing attributes in process `syz.1.2802'. [ 593.214607][T17940] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2801'. [ 593.363915][T17952] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2803'. [ 593.363946][T17952] netlink: 'syz.2.2803': attribute type 1 has an invalid length. [ 593.530124][T17958] FAULT_INJECTION: forcing a failure. [ 593.530124][T17958] name failslab, interval 1, probability 0, space 0, times 0 [ 593.530159][T17958] CPU: 0 UID: 0 PID: 17958 Comm: syz.4.2805 Not tainted syzkaller #0 PREEMPT(full) [ 593.530181][T17958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 593.530193][T17958] Call Trace: [ 593.530201][T17958] [ 593.530210][T17958] dump_stack_lvl+0xe8/0x150 [ 593.530243][T17958] should_fail_ex+0x410/0x560 [ 593.530275][T17958] should_failslab+0xa8/0x100 [ 593.530305][T17958] __kvmalloc_node_noprof+0x171/0x820 [ 593.530330][T17958] ? __pfx_bpf_compute_const_regs+0x10/0x10 [ 593.530359][T17958] ? sort_subprogs_topo+0xbf/0xf20 [ 593.530383][T17958] ? sort_subprogs_topo+0xbf/0xf20 [ 593.530413][T17958] sort_subprogs_topo+0xbf/0xf20 [ 593.530439][T17958] ? bpf_prune_dead_branches+0xa3b/0xab0 [ 593.530484][T17958] bpf_check+0x26f8/0x2ef0 [ 593.530527][T17958] ? __pfx_bpf_check+0x10/0x10 [ 593.530553][T17958] ? bpf_obj_name_cpy+0x194/0x1e0 [ 593.530577][T17958] bpf_prog_load+0x14d1/0x1c20 [ 593.530614][T17958] ? __pfx_bpf_prog_load+0x10/0x10 [ 593.530663][T17958] __sys_bpf+0xd0d/0xd90 [ 593.530696][T17958] ? __pfx___sys_bpf+0x10/0x10 [ 593.530733][T17958] ? __fget_files+0x2a/0x420 [ 593.530793][T17958] ? ksys_write+0x242/0x270 [ 593.530821][T17958] ? __pfx_ksys_write+0x10/0x10 [ 593.530849][T17958] __x64_sys_bpf+0xba/0xd0 [ 593.530875][T17958] do_syscall_64+0x166/0x520 [ 593.530893][T17958] ? trace_irq_disable+0x3b/0x140 [ 593.530915][T17958] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.530934][T17958] ? clear_bhb_loop+0x70/0xc0 [ 593.530957][T17958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.530975][T17958] RIP: 0033:0x7f95d819f559 [ 593.530993][T17958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 593.531009][T17958] RSP: 002b:00007f95d911a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 593.531029][T17958] RAX: ffffffffffffffda RBX: 00007f95d8425fa0 RCX: 00007f95d819f559 [ 593.531043][T17958] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005 [ 593.531055][T17958] RBP: 00007f95d911a090 R08: 0000000000000000 R09: 0000000000000000 [ 593.531067][T17958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 593.531078][T17958] R13: 00007f95d8426038 R14: 00007f95d8425fa0 R15: 00007fff333dc8d8 [ 593.531110][T17958] [ 594.117613][T17973] netlink: 480 bytes leftover after parsing attributes in process `syz.1.2808'. [ 594.117694][T17973] netlink: 480 bytes leftover after parsing attributes in process `syz.1.2808'. [ 594.173499][T17975] netlink: 6032 bytes leftover after parsing attributes in process `syz.3.2810'. [ 594.214160][T17977] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2811'. [ 594.307016][T17983] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2811'. [ 594.561447][T18001] FAULT_INJECTION: forcing a failure. [ 594.561447][T18001] name failslab, interval 1, probability 0, space 0, times 0 [ 594.561508][T18001] CPU: 0 UID: 0 PID: 18001 Comm: syz.1.2816 Not tainted syzkaller #0 PREEMPT(full) [ 594.561530][T18001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 594.561543][T18001] Call Trace: [ 594.561550][T18001] [ 594.561559][T18001] dump_stack_lvl+0xe8/0x150 [ 594.561593][T18001] should_fail_ex+0x410/0x560 [ 594.561626][T18001] should_failslab+0xa8/0x100 [ 594.561656][T18001] __kvmalloc_node_noprof+0x171/0x820 [ 594.561680][T18001] ? __pfx_bpf_compute_const_regs+0x10/0x10 [ 594.561711][T18001] ? sort_subprogs_topo+0xbf/0xf20 [ 594.561733][T18001] ? sort_subprogs_topo+0xbf/0xf20 [ 594.561763][T18001] sort_subprogs_topo+0xbf/0xf20 [ 594.561787][T18001] ? bpf_prune_dead_branches+0xa3b/0xab0 [ 594.561827][T18001] bpf_check+0x26f8/0x2ef0 [ 594.561868][T18001] ? __pfx_bpf_check+0x10/0x10 [ 594.561891][T18001] ? bpf_obj_name_cpy+0x194/0x1e0 [ 594.561912][T18001] bpf_prog_load+0x14d1/0x1c20 [ 594.561946][T18001] ? __pfx_bpf_prog_load+0x10/0x10 [ 594.561996][T18001] __sys_bpf+0xd0d/0xd90 [ 594.562028][T18001] ? __pfx___sys_bpf+0x10/0x10 [ 594.562061][T18001] ? __fget_files+0x2a/0x420 [ 594.562096][T18001] ? ksys_write+0x242/0x270 [ 594.562118][T18001] ? __pfx_ksys_write+0x10/0x10 [ 594.562146][T18001] __x64_sys_bpf+0xba/0xd0 [ 594.562179][T18001] do_syscall_64+0x166/0x520 [ 594.562198][T18001] ? trace_irq_disable+0x3b/0x140 [ 594.562225][T18001] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.562245][T18001] ? clear_bhb_loop+0x70/0xc0 [ 594.562268][T18001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.562286][T18001] RIP: 0033:0x7ff5c819f559 [ 594.562302][T18001] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 594.562315][T18001] RSP: 002b:00007ff5c9033028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 594.562333][T18001] RAX: ffffffffffffffda RBX: 00007ff5c8425fa0 RCX: 00007ff5c819f559 [ 594.562346][T18001] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005 [ 594.562356][T18001] RBP: 00007ff5c9033090 R08: 0000000000000000 R09: 0000000000000000 [ 594.562366][T18001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 594.562377][T18001] R13: 00007ff5c8426038 R14: 00007ff5c8425fa0 R15: 00007ffe9abd1b18 [ 594.562407][T18001] [ 594.752078][T18011] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 594.820504][T18013] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 595.143048][T18022] ip_tables: iptables: counters copy to user failed while replacing table [ 595.270597][T18029] netlink: 'syz.0.2819': attribute type 16 has an invalid length. [ 595.270636][T18029] netlink: 'syz.0.2819': attribute type 17 has an invalid length. [ 595.534977][T18039] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2823'. [ 595.534999][T18039] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2823'. [ 595.535022][T18039] netlink: 'syz.4.2823': attribute type 18 has an invalid length. [ 595.584056][T18029] erspan0: left promiscuous mode [ 595.620193][T18029] bridge0: port 3(syz_tun) entered blocking state [ 595.620323][T18029] bridge0: port 3(syz_tun) entered forwarding state [ 595.625341][T18029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 595.627118][T18029] 8021q: adding VLAN 0 to HW filter on device team0 [ 595.684238][T18029] veth0_to_bridge: left promiscuous mode [ 595.726831][T18029] veth1_vlan: left promiscuous mode [ 595.734085][T18029] veth0_vlan: left promiscuous mode [ 595.736438][T18029] veth0_vlan: entered promiscuous mode [ 595.737837][T18029] veth1_vlan: entered promiscuous mode [ 595.763517][T18029] veth1_macvtap: left promiscuous mode [ 595.764823][T18029] veth0_macvtap: left promiscuous mode [ 595.766063][T18029] veth0_macvtap: entered promiscuous mode [ 595.787609][T18029] veth1_macvtap: entered promiscuous mode [ 595.851271][T18029] 8021q: adding VLAN 0 to HW filter on device €Â [ 595.858441][T18029] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 595.880396][T18029] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 595.891270][T18029] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 595.891948][T18029] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 595.891969][T18029] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 595.893587][T18034] vlan1: entered promiscuous mode [ 595.893778][T18034] vlan1: entered allmulticast mode [ 595.893791][T18034] veth0_vlan: entered allmulticast mode [ 595.925575][T18030] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 596.027360][ T8124] bridge0: port 1(1¾x9ÿ) entered blocking state [ 596.027486][ T8124] bridge0: port 1(1¾x9ÿ) entered forwarding state [ 596.047507][ T8124] bridge0: port 2(bridge_slave_1) entered blocking state [ 596.047626][ T8124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 596.268326][T12802] wg2 speed is unknown, defaulting to 1000 [ 596.268386][T12802] syz2: Port: 1 Link ACTIVE [ 596.268476][ T8124] netdevsim netdevsim4 eth3: set [0, 1] type 1 family 0 port 4352 - 0 [ 596.268611][ T8124] netdevsim netdevsim4 eth2: set [0, 1] type 1 family 0 port 4352 - 0 [ 596.268694][ T8124] netdevsim netdevsim4 eth1: set [0, 1] type 1 family 0 port 4352 - 0 [ 596.268728][ T8124] netdevsim netdevsim4 eth0: set [0, 1] type 1 family 0 port 4352 - 0 [ 596.268763][ T8124] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 596.268796][ T8124] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 596.268830][ T8124] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 596.268864][ T8124] netdevsim netdevsim0 €Â: set [1, 1] type 2 family 0 port 6081 - 0 [ 596.654208][T18062] FAULT_INJECTION: forcing a failure. [ 596.654208][T18062] name failslab, interval 1, probability 0, space 0, times 0 [ 596.654240][T18062] CPU: 0 UID: 0 PID: 18062 Comm: syz.2.2832 Not tainted syzkaller #0 PREEMPT(full) [ 596.654261][T18062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 596.654272][T18062] Call Trace: [ 596.654279][T18062] [ 596.654287][T18062] dump_stack_lvl+0xe8/0x150 [ 596.654320][T18062] should_fail_ex+0x410/0x560 [ 596.654353][T18062] should_failslab+0xa8/0x100 [ 596.654383][T18062] __kmalloc_cache_noprof+0x9e/0x600 [ 596.654409][T18062] ? bpf_diag_init+0x87/0x140 [ 596.654435][T18062] ? bpf_diag_init+0x87/0x140 [ 596.654467][T18062] bpf_diag_init+0x87/0x140 [ 596.654497][T18062] bpf_check+0x5dc/0x2ef0 [ 596.654540][T18062] ? __pfx_bpf_check+0x10/0x10 [ 596.654567][T18062] ? bpf_obj_name_cpy+0x194/0x1e0 [ 596.654592][T18062] bpf_prog_load+0x14d1/0x1c20 [ 596.654629][T18062] ? __pfx_bpf_prog_load+0x10/0x10 [ 596.654681][T18062] __sys_bpf+0xd0d/0xd90 [ 596.654714][T18062] ? __pfx___sys_bpf+0x10/0x10 [ 596.654750][T18062] ? __fget_files+0x2a/0x420 [ 596.654790][T18062] ? ksys_write+0x242/0x270 [ 596.654814][T18062] ? __pfx_ksys_write+0x10/0x10 [ 596.654842][T18062] __x64_sys_bpf+0xba/0xd0 [ 596.654868][T18062] do_syscall_64+0x166/0x520 [ 596.654886][T18062] ? trace_irq_disable+0x3b/0x140 [ 596.654908][T18062] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.654926][T18062] ? clear_bhb_loop+0x70/0xc0 [ 596.654950][T18062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.654969][T18062] RIP: 0033:0x7fc00df9f559 [ 596.654987][T18062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 596.655003][T18062] RSP: 002b:00007fc00eeba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 596.655023][T18062] RAX: ffffffffffffffda RBX: 00007fc00e225fa0 RCX: 00007fc00df9f559 [ 596.655045][T18062] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005 [ 596.655057][T18062] RBP: 00007fc00eeba090 R08: 0000000000000000 R09: 0000000000000000 [ 596.655070][T18062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 596.655081][T18062] R13: 00007fc00e226038 R14: 00007fc00e225fa0 R15: 00007ffcbb610788 [ 596.655113][T18062] [ 596.917403][T18073] FAULT_INJECTION: forcing a failure. [ 596.917403][T18073] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 596.917436][T18073] CPU: 0 UID: 0 PID: 18073 Comm: syz.4.2835 Not tainted syzkaller #0 PREEMPT(full) [ 596.917458][T18073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 596.917470][T18073] Call Trace: [ 596.917478][T18073] [ 596.917487][T18073] dump_stack_lvl+0xe8/0x150 [ 596.917520][T18073] should_fail_ex+0x410/0x560 [ 596.917554][T18073] _copy_to_user+0x31/0xb0 [ 596.917583][T18073] bpf_verifier_vlog+0x3a2/0x900 [ 596.917619][T18073] bpf_verifier_log_write+0x11d/0x1a0 [ 596.917648][T18073] ? __pfx_bpf_verifier_log_write+0x10/0x10 [ 596.917681][T18073] ? __pfx_cmp_instances+0x10/0x10 [ 596.917706][T18073] ? bpf_compute_subprog_arg_access+0x509/0x14d0 [ 596.917730][T18073] ? bpf_compute_subprog_arg_access+0x509/0x14d0 [ 596.917763][T18073] bpf_compute_subprog_arg_access+0x8b7/0x14d0 [ 596.917789][T18073] ? bpf_tracing_func_proto+0x72/0x180 [ 596.917836][T18073] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 596.917863][T18073] ? __kvmalloc_node_noprof+0x340/0x820 [ 596.917887][T18073] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 596.917909][T18073] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 596.917941][T18073] bpf_compute_live_registers+0x8d3/0x1ff0 [ 596.917986][T18073] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 596.918022][T18073] bpf_check+0x2744/0x2ef0 [ 596.918065][T18073] ? __pfx_bpf_check+0x10/0x10 [ 596.918092][T18073] ? bpf_obj_name_cpy+0x194/0x1e0 [ 596.918117][T18073] bpf_prog_load+0x14d1/0x1c20 [ 596.918154][T18073] ? __pfx_bpf_prog_load+0x10/0x10 [ 596.918206][T18073] __sys_bpf+0xd0d/0xd90 [ 596.918239][T18073] ? __pfx___sys_bpf+0x10/0x10 [ 596.918275][T18073] ? __fget_files+0x2a/0x420 [ 596.918315][T18073] ? ksys_write+0x242/0x270 [ 596.918340][T18073] ? __pfx_ksys_write+0x10/0x10 [ 596.918367][T18073] __x64_sys_bpf+0xba/0xd0 [ 596.918393][T18073] do_syscall_64+0x166/0x520 [ 596.918411][T18073] ? trace_irq_disable+0x3b/0x140 [ 596.918433][T18073] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.918452][T18073] ? clear_bhb_loop+0x70/0xc0 [ 596.918476][T18073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.918495][T18073] RIP: 0033:0x7f95d819f559 [ 596.918513][T18073] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 596.918528][T18073] RSP: 002b:00007f95d911a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 596.918550][T18073] RAX: ffffffffffffffda RBX: 00007f95d8425fa0 RCX: 00007f95d819f559 [ 596.918564][T18073] RDX: 0000000000000094 RSI: 0000200000000280 RDI: 0000000000000005 [ 596.918576][T18073] RBP: 00007f95d911a090 R08: 0000000000000000 R09: 0000000000000000 [ 596.918587][T18073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 596.918604][T18073] R13: 00007f95d8426038 R14: 00007f95d8425fa0 R15: 00007fff333dc8d8 [ 596.918636][T18073] [ 597.153980][T18075] netlink: 'syz.2.2836': attribute type 1 has an invalid length. [ 597.929686][T18102] bond_slave_0: entered promiscuous mode [ 597.929866][T18102] bond_slave_0: entered allmulticast mode [ 597.947367][T18102] bond0: (slave bond_slave_0): Releasing backup interface [ 598.013410][T18104] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2843'. [ 598.017966][T18104] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2843'. [ 598.031349][T18104] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2843'. [ 598.295044][T18115] FAULT_INJECTION: forcing a failure. [ 598.295044][T18115] name failslab, interval 1, probability 0, space 0, times 0 [ 598.295077][T18115] CPU: 0 UID: 0 PID: 18115 Comm: syz.2.2846 Not tainted syzkaller #0 PREEMPT(full) [ 598.295130][T18115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 598.295142][T18115] Call Trace: [ 598.295150][T18115] [ 598.295159][T18115] dump_stack_lvl+0xe8/0x150 [ 598.295193][T18115] should_fail_ex+0x410/0x560 [ 598.295225][T18115] should_failslab+0xa8/0x100 [ 598.295254][T18115] __kmalloc_cache_node_noprof+0xa5/0x620 [ 598.295279][T18115] ? kasan_save_track+0x4f/0x80 [ 598.295301][T18115] ? kasan_save_track+0x3e/0x80 [ 598.295323][T18115] ? __kasan_kmalloc+0x93/0xb0 [ 598.295346][T18115] ? __get_vm_area_node+0x155/0x2f0 [ 598.295364][T18115] ? __get_vm_area_node+0x155/0x2f0 [ 598.295384][T18115] ? __x64_sys_bpf+0xba/0xd0 [ 598.295410][T18115] __get_vm_area_node+0x155/0x2f0 [ 598.295435][T18115] __vmalloc_node_range_noprof+0x343/0x1540 [ 598.295458][T18115] ? bpf_check+0x115b/0x2ef0 [ 598.295513][T18115] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 598.295534][T18115] ? __kasan_kmalloc+0x93/0xb0 [ 598.295560][T18115] ? __kmalloc_cache_noprof+0x31c/0x600 [ 598.295583][T18115] ? __kmalloc_cache_noprof+0x148/0x600 [ 598.295604][T18115] ? bpf_diag_init+0x87/0x140 [ 598.295628][T18115] ? bpf_diag_init+0x87/0x140 [ 598.295654][T18115] ? bpf_check+0x115b/0x2ef0 [ 598.295675][T18115] __vmalloc_noprof+0xd2/0x120 [ 598.295695][T18115] ? bpf_check+0x115b/0x2ef0 [ 598.295719][T18115] bpf_check+0x115b/0x2ef0 [ 598.295758][T18115] ? __pfx_bpf_check+0x10/0x10 [ 598.295783][T18115] ? bpf_obj_name_cpy+0x194/0x1e0 [ 598.295807][T18115] bpf_prog_load+0x14d1/0x1c20 [ 598.295847][T18115] ? __pfx_bpf_prog_load+0x10/0x10 [ 598.295898][T18115] __sys_bpf+0xd0d/0xd90 [ 598.295931][T18115] ? __pfx___sys_bpf+0x10/0x10 [ 598.295974][T18115] ? __fget_files+0x2a/0x420 [ 598.296013][T18115] ? ksys_write+0x242/0x270 [ 598.296037][T18115] ? __pfx_ksys_write+0x10/0x10 [ 598.296065][T18115] __x64_sys_bpf+0xba/0xd0 [ 598.296099][T18115] do_syscall_64+0x166/0x520 [ 598.296118][T18115] ? trace_irq_disable+0x3b/0x140 [ 598.296139][T18115] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.296159][T18115] ? clear_bhb_loop+0x70/0xc0 [ 598.296182][T18115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.296201][T18115] RIP: 0033:0x7fc00df9f559 [ 598.296219][T18115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 598.296236][T18115] RSP: 002b:00007fc00eeba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 598.296257][T18115] RAX: ffffffffffffffda RBX: 00007fc00e225fa0 RCX: 00007fc00df9f559 [ 598.296271][T18115] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005 [ 598.296283][T18115] RBP: 00007fc00eeba090 R08: 0000000000000000 R09: 0000000000000000 [ 598.296295][T18115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 598.296306][T18115] R13: 00007fc00e226038 R14: 00007fc00e225fa0 R15: 00007ffcbb610788 [ 598.296338][T18115] [ 598.310218][T18115] warn_alloc: 1 callbacks suppressed [ 598.310235][T18115] syz.2.2846: vmalloc error: size 2176, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 598.310295][T18115] CPU: 0 UID: 0 PID: 18115 Comm: syz.2.2846 Not tainted syzkaller #0 PREEMPT(full) [ 598.310316][T18115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 598.310327][T18115] Call Trace: [ 598.310334][T18115] [ 598.310341][T18115] dump_stack_lvl+0xe8/0x150 [ 598.310391][T18115] warn_alloc+0x24d/0x270 [ 598.310414][T18115] ? __kasan_kmalloc+0x22/0xb0 [ 598.310443][T18115] ? __pfx_warn_alloc+0x10/0x10 [ 598.310461][T18115] ? __kasan_kmalloc+0x93/0xb0 [ 598.310484][T18115] ? __get_vm_area_node+0x155/0x2f0 [ 598.310503][T18115] ? __x64_sys_bpf+0xba/0xd0 [ 598.310527][T18115] ? __get_vm_area_node+0x2a9/0x2f0 [ 598.310553][T18115] __vmalloc_node_range_noprof+0x36b/0x1540 [ 598.310612][T18115] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 598.310632][T18115] ? __kasan_kmalloc+0x93/0xb0 [ 598.310657][T18115] ? __kmalloc_cache_noprof+0x31c/0x600 [ 598.310682][T18115] ? __kmalloc_cache_noprof+0x148/0x600 [ 598.310702][T18115] ? bpf_diag_init+0x87/0x140 [ 598.310725][T18115] ? bpf_diag_init+0x87/0x140 [ 598.310750][T18115] ? bpf_check+0x115b/0x2ef0 [ 598.310770][T18115] __vmalloc_noprof+0xd2/0x120 [ 598.310790][T18115] ? bpf_check+0x115b/0x2ef0 [ 598.310815][T18115] bpf_check+0x115b/0x2ef0 [ 598.310855][T18115] ? __pfx_bpf_check+0x10/0x10 [ 598.310880][T18115] ? bpf_obj_name_cpy+0x194/0x1e0 [ 598.310901][T18115] bpf_prog_load+0x14d1/0x1c20 [ 598.310936][T18115] ? __pfx_bpf_prog_load+0x10/0x10 [ 598.310984][T18115] __sys_bpf+0xd0d/0xd90 [ 598.311014][T18115] ? __pfx___sys_bpf+0x10/0x10 [ 598.311044][T18115] ? __fget_files+0x2a/0x420 [ 598.311079][T18115] ? ksys_write+0x242/0x270 [ 598.311101][T18115] ? __pfx_ksys_write+0x10/0x10 [ 598.311125][T18115] __x64_sys_bpf+0xba/0xd0 [ 598.311145][T18115] do_syscall_64+0x166/0x520 [ 598.311162][T18115] ? trace_irq_disable+0x3b/0x140 [ 598.311182][T18115] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.311199][T18115] ? clear_bhb_loop+0x70/0xc0 [ 598.311220][T18115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.311237][T18115] RIP: 0033:0x7fc00df9f559 [ 598.311255][T18115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 598.311270][T18115] RSP: 002b:00007fc00eeba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 598.311289][T18115] RAX: ffffffffffffffda RBX: 00007fc00e225fa0 RCX: 00007fc00df9f559 [ 598.311301][T18115] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005 [ 598.311313][T18115] RBP: 00007fc00eeba090 R08: 0000000000000000 R09: 0000000000000000 [ 598.311323][T18115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 598.311333][T18115] R13: 00007fc00e226038 R14: 00007fc00e225fa0 R15: 00007ffcbb610788 [ 598.311364][T18115] [ 598.311382][T18115] Mem-Info: [ 598.311391][T18115] active_anon:9281 inactive_anon:1 isolated_anon:0 [ 598.311391][T18115] active_file:7 inactive_file:43830 isolated_file:0 [ 598.311391][T18115] unevictable:0 dirty:173 writeback:0 [ 598.311391][T18115] slab_reclaimable:12819 slab_unreclaimable:114955 [ 598.311391][T18115] mapped:30619 shmem:528 pagetables:3298 [ 598.311391][T18115] sec_pagetables:0 bounce:0 [ 598.311391][T18115] kernel_misc_reclaimable:0 [ 598.311391][T18115] free:1295630 free_pcp:10685 free_cma:0 [ 598.311445][T18115] Node 0 active_anon:37124kB inactive_anon:4kB active_file:28kB inactive_file:175116kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:122476kB dirty:692kB writeback:0kB shmem:2112kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14724kB pagetables:13052kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 598.311494][T18115] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 598.311541][T18115] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 598.311592][T18115] lowmem_reserve[]: 0 2467 2467 2467 2467 [ 598.311624][T18115] Node 0 DMA32 free:1223412kB boost:0kB min:33980kB low:42472kB high:50964kB reserved_highatomic:0kB free_highatomic:0kB active_anon:37124kB inactive_anon:4kB active_file:28kB inactive_file:175116kB unevictable:0kB writepending:692kB zspages:0kB present:3129332kB managed:2526416kB mlocked:0kB bounce:0kB free_pcp:42740kB local_pcp:22896kB free_cma:0kB [ 598.311678][T18115] lowmem_reserve[]: 0 0 0 0 0 [ 598.311707][T18115] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 598.311756][T18115] lowmem_reserve[]: 0 0 0 0 0 [ 598.319835][T18115] Node 1 Normal free:3943748kB boost:0kB min:55920kB low:69900kB high:83880kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 598.319892][T18115] lowmem_reserve[]: 0 0 0 0 0 [ 598.319922][T18115] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 598.320032][T18115] Node 0 DMA32: 807*4kB (UE) 1485*8kB (UME) 1065*16kB (UME) 979*32kB (UME) 516*64kB (UME) 584*128kB (UM) 408*256kB (UM) 227*512kB (UM) 106*1024kB (UM) 5*2048kB (UM) 174*4096kB (UME) = 1223412kB [ 598.320173][T18115] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 598.320259][T18115] Node 1 Normal: 3*4kB (UM) 3*8kB (UM) 10*16kB (UM) 10*32kB (UM) 9*64kB (UM) 4*128kB (UM) 3*256kB (UM) 4*512kB (UM) 3*1024kB (UM) 2*2048kB (U) 960*4096kB (UM) = 3943748kB [ 598.320398][T18115] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 598.320414][T18115] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 598.320427][T18115] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 598.320441][T18115] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 598.320456][T18115] 44361 total pagecache pages [ 598.320462][T18115] 0 pages in swap cache [ 598.320468][T18115] Free swap = 124996kB [ 598.320475][T18115] Total swap = 124996kB [ 598.320482][T18115] 2097051 pages RAM [ 598.320488][T18115] 0 pages HighMem/MovableOnly [ 598.320494][T18115] 433831 pages reserved [ 598.320500][T18115] 0 pages cma reserved [ 598.355809][T18116] netlink: 'syz.1.2847': attribute type 1 has an invalid length. [ 598.766404][T18124] bond17: (slave geneve3): making interface the new active one [ 598.833109][T18124] bond17: (slave geneve3): Enslaving as an active interface with an up link [ 599.048221][T18125] bond18: (slave bond_slave_0): Device is not our slave [ 599.048244][T18125] bond18: option active_slave: invalid value (bond_slave_0) [ 599.454034][T18125] bond18 (unregistering): Released all slaves [ 599.783036][ T8124] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 599.783361][ T8124] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 599.783397][ T8124] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 599.783430][ T8124] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 599.897673][T18154] __nla_validate_parse: 2 callbacks suppressed [ 599.897694][T18154] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2855'. [ 599.897710][T18154] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2855'. [ 600.389700][T18176] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 600.426827][T18179] IPVS: set_ctl: invalid protocol: 44 255.255.255.255:20003 [ 600.673632][T18186] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2862'. [ 601.181935][ T5631] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 601.202096][ T5631] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 601.203792][ T5631] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 601.222095][ T5631] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 601.226763][ T5631] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 601.271925][ T53] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 601.273907][ T53] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 601.274303][ T53] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 601.275233][ T53] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 601.311640][ T53] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 601.922337][T18205] bond0: entered promiscuous mode [ 601.922364][T18205] bond_slave_1: entered promiscuous mode [ 601.923257][T18205] batadv0: entered promiscuous mode [ 602.291385][ T8136] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 602.291426][ T8136] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 602.291451][ T8136] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 602.474103][T18221] netlink: 'syz.1.2869': attribute type 1 has an invalid length. [ 602.497203][T18225] xt_time: unknown flags 0x4 [ 602.508536][T18221] batman_adv: batadv0: Interface deactivated: dummy0 [ 602.522013][T18221] batman_adv: batadv0: Removing interface: dummy0 [ 602.755933][ T8136] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 602.755973][ T8136] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 602.756007][ T8136] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 602.986868][ T8136] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 602.986900][ T8136] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 602.986922][ T8136] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 603.043015][T18237] ip_tables: iptables: counters copy to user failed while replacing table [ 603.064701][T18236] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2871'. [ 603.064742][T18236] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2871'. [ 603.262149][ T8136] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 603.262184][ T8136] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 603.262207][ T8136] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 603.304816][T18241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2871'. [ 603.400196][ T53] Bluetooth: hci5: command tx timeout [ 603.448579][ T8118] netdevsim netdevsim0 €Â: set [0, 0] type 1 family 0 port 8472 - 0 [ 603.448851][ T8118] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 603.448886][ T8118] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 603.448917][ T8118] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 603.576481][T18192] rxe_eth0 speed is unknown, defaulting to 1000 [ 604.406094][T18269] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 604.529151][T18269] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input6 [ 605.478124][ T53] Bluetooth: hci5: command tx timeout [ 605.515360][T18293] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2880'. [ 605.540097][ T8136] team0: Port device xfrm0 removed [ 605.589372][ T8136] bond12 (unregistering): (slave xfrm1): Releasing backup interface [ 605.589464][ T8136] xfrm1 (unregistering): left promiscuous mode [ 606.030761][ T8136] bond2 (unregistering): (slave gretap1): Releasing active interface [ 606.086064][T18303] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2881'. [ 606.259768][ T8136] bond5 (unregistering): (slave bridge2): Releasing active interface [ 606.307563][ T8136] bond11 (unregistering): (slave bridge6): Releasing backup interface [ 606.307588][ T8136] bond11 (unregistering): (slave bridge6): the permanent HWaddr of slave - 0e:8c:8a:e6:4f:8e - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 606.307613][ T8136] bridge6 (unregistering): left promiscuous mode [ 606.307631][ T8136] bridge6 (unregistering): left allmulticast mode [ 606.307648][ T8136] bond11 (unregistering): (slave bridge7): making interface the new active one [ 606.307662][ T8136] bridge7 (unregistering): entered promiscuous mode [ 606.307695][ T8136] bridge7 (unregistering): entered allmulticast mode [ 606.349503][ T8136] bond11 (unregistering): (slave bridge7): Releasing backup interface [ 606.349529][ T8136] bridge7 (unregistering): left promiscuous mode [ 606.349547][ T8136] bridge7 (unregistering): left allmulticast mode [ 606.423364][ T8136]  (unregistering): Released all slaves [ 606.437484][ T8136] bond1 (unregistering): Released all slaves [ 606.472390][ T8136] bond2 (unregistering): Released all slaves [ 606.493727][ T8136] bond3 (unregistering): Released all slaves [ 606.523172][ T8136] bond4 (unregistering): Released all slaves [ 606.545298][ T8136] bond5 (unregistering): Released all slaves [ 606.577388][ T8136] bond6 (unregistering): Released all slaves [ 606.600379][ T8136] bond7 (unregistering): Released all slaves [ 606.635457][ T8136] bond8 (unregistering): Released all slaves [ 606.664483][ T8136] bond0 (unregistering): Released all slaves [ 606.699895][ T8136] bond9 (unregistering): Released all slaves [ 606.725236][ T8136] bond10 (unregistering): Released all slaves [ 606.780732][ T8136] bond11 (unregistering): Released all slaves [ 606.806542][ T8136] bond12 (unregistering): Released all slaves [ 606.833325][ T8136] bond13 (unregistering): (slave veth5): Releasing active interface [ 606.835320][ T8136] bond13 (unregistering): Released all slaves [ 606.992741][T18303] bond12: (slave dummy0): Releasing active interface [ 607.065504][ T5295] 8021q: adding VLAN 0 to HW filter on device eth1 [ 607.067574][T18304] bond0: Caught tx_queue_len zero misconfig [ 607.192196][T18192] wg2 speed is unknown, defaulting to 1000 [ 607.197493][T18192] virt_wifi0 speed is unknown, defaulting to 1000 [ 607.209416][ T8136] : left promiscuous mode [ 607.452881][ T8136] tipc: Disabling bearer [ 607.467163][ T8136] tipc: Left network mode [ 607.467465][T18309] syzkaller1: entered promiscuous mode [ 607.467485][T18309] syzkaller1: entered allmulticast mode [ 607.559285][ T53] Bluetooth: hci5: command tx timeout [ 607.625604][ T8136] IPVS: stopping backup sync thread 15426 ... [ 608.613352][T18332] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2888'. [ 608.958158][T18349] netlink: 'syz.2.2890': attribute type 10 has an invalid length. [ 608.958181][T18349] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2890'. [ 609.424580][T18370] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2895'. [ 609.639472][ T53] Bluetooth: hci5: command tx timeout [ 609.659589][T18384] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2897'. [ 610.053989][T18393] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2899'. [ 610.192643][T18192] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.193410][T18192] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.193585][T18192] bridge_slave_0: entered allmulticast mode [ 610.209906][T18192] bridge_slave_0: entered promiscuous mode [ 610.219404][T18385] netlink: 'syz.0.2897': attribute type 322 has an invalid length. [ 610.221057][ T5295] 8021q: adding VLAN 0 to HW filter on device eth2 [ 610.283835][T18192] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.284414][T18192] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.286064][T18192] bridge_slave_1: entered allmulticast mode [ 610.316292][T18192] bridge_slave_1: entered promiscuous mode [ 610.806820][ T8136] hsr_slave_0: left promiscuous mode [ 610.817021][ T8136] hsr_slave_1: left promiscuous mode [ 610.856243][T18409] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 610.858855][T18410] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 610.899015][ T8136] veth1_vlan: left promiscuous mode [ 610.899186][ T8136] @ÿ: left promiscuous mode [ 611.027455][T18418] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2908'. [ 611.027478][T18418] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2908'. [ 611.027629][T18418] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2908'. [ 611.027648][T18418] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2908'. [ 611.577883][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 612.033096][T18192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 612.057165][T18192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 612.163265][T18192] team0: Port device team_slave_0 added [ 612.199612][T18192] team0: Port device team_slave_1 added [ 612.275025][T18192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 612.275042][T18192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 612.275064][T18192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 612.331498][T18192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 612.331516][T18192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 612.331535][T18192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 612.467018][T18192] hsr_slave_0: entered promiscuous mode [ 612.476359][T18192] hsr_slave_1: entered promiscuous mode [ 612.477107][T18192] debugfs: 'hsr0' already exists in 'hsr' [ 612.477125][T18192] Cannot create hsr debugfs directory [ 612.532225][T18433] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2910'. [ 613.261941][T18463] netlink: 'syz.2.2917': attribute type 1 has an invalid length. [ 613.262107][T18463] netlink: 1368 bytes leftover after parsing attributes in process `syz.2.2917'. [ 613.665026][ T8136] IPVS: stop unused estimator thread 0... [ 613.762158][T18472] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2919'. [ 614.088439][T18487] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2921'. [ 614.434888][T18497] netlink: 'syz.4.2924': attribute type 21 has an invalid length. [ 614.434913][T18497] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2924'. [ 614.478606][T18499] FAULT_INJECTION: forcing a failure. [ 614.478606][T18499] name failslab, interval 1, probability 0, space 0, times 0 [ 614.478638][T18499] CPU: 0 UID: 0 PID: 18499 Comm: syz.0.2926 Not tainted syzkaller #0 PREEMPT(full) [ 614.478658][T18499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 614.478670][T18499] Call Trace: [ 614.478677][T18499] [ 614.478685][T18499] dump_stack_lvl+0xe8/0x150 [ 614.478718][T18499] should_fail_ex+0x410/0x560 [ 614.478757][T18499] should_failslab+0xa8/0x100 [ 614.478787][T18499] __kvmalloc_node_noprof+0x171/0x820 [ 614.478814][T18499] ? __kvmalloc_node_noprof+0x340/0x820 [ 614.478838][T18499] ? analyze_subprog+0x8a7/0x9df0 [ 614.478861][T18499] ? analyze_subprog+0x8a7/0x9df0 [ 614.478893][T18499] analyze_subprog+0x8a7/0x9df0 [ 614.478917][T18499] ? is_bpf_text_address+0x292/0x2b0 [ 614.478949][T18499] ? kernel_text_address+0xa5/0xe0 [ 614.479031][T18499] ? __pfx_stack_trace_save+0x10/0x10 [ 614.479075][T18499] ? call_instance+0x263/0x560 [ 614.479097][T18499] ? bpf_compute_subprog_arg_access+0x2a3/0x14d0 [ 614.479121][T18499] ? bpf_compute_live_registers+0x8d3/0x1ff0 [ 614.479147][T18499] ? __pfx_analyze_subprog+0x10/0x10 [ 614.479169][T18499] ? __x64_sys_bpf+0xba/0xd0 [ 614.479188][T18499] ? do_syscall_64+0x166/0x520 [ 614.479206][T18499] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.479261][T18499] ? call_instance+0x263/0x560 [ 614.479283][T18499] ? rcu_is_watching+0x16/0xb0 [ 614.479306][T18499] ? call_instance+0x263/0x560 [ 614.479328][T18499] ? trace_kmalloc+0x2a/0xf0 [ 614.479352][T18499] ? call_instance+0x263/0x560 [ 614.479373][T18499] ? __kvmalloc_node_noprof+0x52a/0x820 [ 614.479399][T18499] ? __kvmalloc_node_noprof+0x340/0x820 [ 614.479423][T18499] ? call_instance+0x263/0x560 [ 614.479444][T18499] ? call_instance+0x263/0x560 [ 614.479473][T18499] ? call_instance+0x42e/0x560 [ 614.479504][T18499] bpf_compute_subprog_arg_access+0x2c9/0x14d0 [ 614.479527][T18499] ? bpf_tracing_func_proto+0x72/0x180 [ 614.479589][T18499] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 614.479625][T18499] ? __kvmalloc_node_noprof+0x340/0x820 [ 614.479648][T18499] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 614.479671][T18499] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 614.479703][T18499] bpf_compute_live_registers+0x8d3/0x1ff0 [ 614.479752][T18499] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 614.479787][T18499] bpf_check+0x2744/0x2ef0 [ 614.479826][T18499] ? __pfx_bpf_check+0x10/0x10 [ 614.479853][T18499] ? bpf_obj_name_cpy+0x194/0x1e0 [ 614.479877][T18499] bpf_prog_load+0x14d1/0x1c20 [ 614.479914][T18499] ? __pfx_bpf_prog_load+0x10/0x10 [ 614.479966][T18499] __sys_bpf+0xd0d/0xd90 [ 614.479998][T18499] ? __pfx___sys_bpf+0x10/0x10 [ 614.480034][T18499] ? __fget_files+0x2a/0x420 [ 614.480072][T18499] ? ksys_write+0x242/0x270 [ 614.480096][T18499] ? __pfx_ksys_write+0x10/0x10 [ 614.480124][T18499] __x64_sys_bpf+0xba/0xd0 [ 614.480149][T18499] do_syscall_64+0x166/0x520 [ 614.480167][T18499] ? trace_irq_disable+0x3b/0x140 [ 614.480188][T18499] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.480207][T18499] ? clear_bhb_loop+0x70/0xc0 [ 614.480230][T18499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.480249][T18499] RIP: 0033:0x7f628459f559 [ 614.480267][T18499] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 614.480283][T18499] RSP: 002b:00007f6285546028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 614.480304][T18499] RAX: ffffffffffffffda RBX: 00007f6284825fa0 RCX: 00007f628459f559 [ 614.480318][T18499] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005 [ 614.480330][T18499] RBP: 00007f6285546090 R08: 0000000000000000 R09: 0000000000000000 [ 614.480342][T18499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 614.480354][T18499] R13: 00007f6284826038 R14: 00007f6284825fa0 R15: 00007ffe86904728 [ 614.480386][T18499] [ 614.989514][T18495] veth1_to_hsr: Caught tx_queue_len zero misconfig [ 615.006115][T18497] netlink: 'syz.4.2924': attribute type 4 has an invalid length. [ 615.006138][T18497] netlink: 'syz.4.2924': attribute type 3 has an invalid length. [ 615.006150][T18497] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2924'. [ 624.359384][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 651.640573][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 680.688683][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 756.537744][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 756.558431][ C0] rcu: 1-...!: (1 GPs behind) idle=1904/1/0x4000000000000000 softirq=63445/63446 fqs=1 [ 756.568160][ C0] rcu: (detected by 0, t=10503 jiffies, g=91413, q=457 ncpus=2) [ 756.575902][ C0] Sending NMI from CPU 0 to CPUs 1: [ 756.581121][ C1] NMI backtrace for cpu 1 [ 756.581139][ C1] CPU: 1 UID: 0 PID: 5623 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 756.581162][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 756.581175][ C1] RIP: 0010:memset_orig+0x15/0xb0 [ 756.581207][ C1] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 49 89 fa 40 0f b6 ce 48 b8 01 01 01 01 01 01 01 01 48 0f af c1 <41> 89 f9 41 83 e1 07 75 74 48 89 d1 48 c1 e9 06 74 39 66 0f 1f 84 [ 756.581223][ C1] RSP: 0018:ffffc90000a08d38 EFLAGS: 00000006 [ 756.581241][ C1] RAX: 0000000000000000 RBX: ffff8880b8528818 RCX: 0000000000000000 [ 756.581254][ C1] RDX: 0000000000000010 RSI: 0000000000000000 RDI: ffff88807aaf3308 [ 756.581267][ C1] RBP: dffffc0000000000 R08: ffff88807aaf3317 R09: 1ffff1100f55e662 [ 756.581283][ C1] R10: ffff88807aaf3308 R11: ffffed100f55e663 R12: 1ffff110170a50f8 [ 756.581298][ C1] R13: ffff88807aaf3300 R14: 0000000000000000 R15: ffff8880b8528818 [ 756.581312][ C1] FS: 0000000000000000(0000) GS:ffff888123b6b000(0000) knlGS:0000000000000000 [ 756.581328][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 756.581342][ C1] CR2: 0000559ac3962078 CR3: 000000000fb48000 CR4: 00000000003526f0 [ 756.581360][ C1] Call Trace: [ 756.581369][ C1] [ 756.581377][ C1] timerqueue_linked_add+0x23f/0x2e0 [ 756.581507][ C1] ? trace_hrtimer_start+0x82/0x200 [ 756.581533][ C1] enqueue_hrtimer+0x18e/0x2c0 [ 756.581554][ C1] __hrtimer_run_queues+0x4ce/0xa10 [ 756.581583][ C1] hrtimer_interrupt+0x4cd/0xaa0 [ 756.581630][ C1] __sysvec_apic_timer_interrupt+0x102/0x430 [ 756.581670][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 756.581701][ C1] [ 756.581707][ C1] [ 756.581715][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 756.581738][ C1] RIP: 0010:lock_acquire+0x232/0x350 [ 756.581760][ C1] Code: ff ff ff e8 e0 ca 50 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 e2 d4 f7 12 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 7f d2 53 0a cc 48 8d 3d c7 d3 db [ 756.581776][ C1] RSP: 0018:ffffc90003f9f2d8 EFLAGS: 00000286 [ 756.581793][ C1] RAX: 2f76e388bb999f00 RBX: 0000000000000000 RCX: 8000000000000002 [ 756.581808][ C1] RDX: 0000000035fe998a RSI: ffffffff8e70fdbb RDI: ffffffff8c6e1780 [ 756.581822][ C1] RBP: ffff88807f1bbe80 R08: ffffffff8245587a R09: 0000000000000000 [ 756.581836][ C1] R10: dffffc0000000000 R11: fffff940002e54f1 R12: ffffffff8fd59d60 [ 756.581851][ C1] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 756.581867][ C1] ? pfn_valid+0xba/0x490 [ 756.581900][ C1] ? pfn_valid+0xba/0x490 [ 756.581927][ C1] pfn_valid+0xd6/0x490 [ 756.581952][ C1] ? pfn_valid+0xba/0x490 [ 756.581979][ C1] page_table_check_clear+0x21/0x500 [ 756.582006][ C1] ? vm_normal_page+0x13c/0x2b0 [ 756.582040][ C1] __zap_vma_range+0x3a12/0x4f70 [ 756.582095][ C1] ? __pfx___zap_vma_range+0x10/0x10 [ 756.582128][ C1] ? mas_find+0x6d6/0xcb0 [ 756.582149][ C1] unmap_vmas+0x38b/0x550 [ 756.582179][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 756.582202][ C1] ? mas_next_slot+0xc91/0xd70 [ 756.582236][ C1] exit_mmap+0x293/0x9f0 [ 756.582258][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 756.582293][ C1] ? __pfx_exit_aio+0x10/0x10 [ 756.582330][ C1] ? uprobe_clear_state+0x2a4/0x3d0 [ 756.582354][ C1] __mmput+0x118/0x420 [ 756.582386][ C1] exit_mm+0x18e/0x240 [ 756.582417][ C1] do_exit+0x6a8/0x2360 [ 756.582450][ C1] ? __pfx_do_exit+0x10/0x10 [ 756.582481][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 756.582515][ C1] do_group_exit+0x22d/0x2f0 [ 756.582531][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 756.582587][ C1] get_signal+0x1216/0x12c0 [ 756.582622][ C1] arch_do_signal_or_restart+0xbb/0x860 [ 756.582664][ C1] ? __pfx___x64_sys_wait4+0x10/0x10 [ 756.582682][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 756.582708][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 756.582749][ C1] exit_to_user_mode_loop+0x10e/0x770 [ 756.582773][ C1] ? rcu_is_watching+0x16/0xb0 [ 756.582802][ C1] do_syscall_64+0x328/0x520 [ 756.582821][ C1] ? trace_irq_disable+0x3b/0x140 [ 756.582846][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.582865][ C1] ? clear_bhb_loop+0x70/0xc0 [ 756.582887][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.582907][ C1] RIP: 0033:0x7f628455a6d7 [ 756.582923][ C1] Code: Unable to access opcode bytes at 0x7f628455a6ad. [ 756.582965][ C1] RSP: 002b:00007ffe86904c10 EFLAGS: 00000202 ORIG_RAX: 000000000000003d [ 756.582985][ C1] RAX: fffffffffffffe00 RBX: 000055556c6ed500 RCX: 00007f628455a6d7 [ 756.582999][ C1] RDX: 0000000040000000 RSI: 00007ffe86904c6c RDI: ffffffffffffffff [ 756.583014][ C1] RBP: 00007ffe86904c6c R08: 0000000000000000 R09: 0000000000000000 [ 756.583026][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 756.583038][ C1] R13: 0000000000000003 R14: 00007ffe86904ec8 R15: 0000000000000000 [ 756.583061][ C1] [ 757.059190][ C0] rcu: rcu_preempt kthread starved for 10491 jiffies! g91413 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=0 [ 757.070228][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 757.080195][ C0] rcu: RCU grace-period kthread stack dump: [ 757.086091][ C0] task:rcu_preempt state:R running task stack:28104 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 757.099595][ C0] Call Trace: [ 757.102874][ C0] [ 757.105809][ C0] __schedule+0x17dd/0x5820 [ 757.110340][ C0] ? __lock_acquire+0x747/0x2de0 [ 757.115300][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 757.120435][ C0] ? __pfx___schedule+0x10/0x10 [ 757.125289][ C0] ? lock_acquire+0x115/0x350 [ 757.129976][ C0] ? schedule+0x90/0x2b0 [ 757.134241][ C0] schedule+0x164/0x2b0 [ 757.138408][ C0] schedule_timeout+0x152/0x2c0 [ 757.143264][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 757.148645][ C0] ? __pfx_process_timeout+0x10/0x10 [ 757.153936][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 757.159753][ C0] ? prepare_to_swait_event+0x220/0x3e0 [ 757.165304][ C0] ? prepare_to_swait_event+0x35e/0x3e0 [ 757.170868][ C0] rcu_gp_fqs_loop+0x30c/0x1230 [ 757.175740][ C0] ? __pfx_rcu_watching_snap_save+0x10/0x10 [ 757.181727][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 757.187013][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 757.192234][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 757.198055][ C0] rcu_gp_kthread+0x9c/0x340 [ 757.202656][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 757.207864][ C0] ? __kthread_parkme+0x71/0x1f0 [ 757.212811][ C0] ? __kthread_parkme+0x199/0x1f0 [ 757.217850][ C0] kthread+0x38b/0x480 [ 757.221919][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 757.227119][ C0] ? __pfx_kthread+0x10/0x10 [ 757.231710][ C0] ret_from_fork+0x514/0xb70 [ 757.236304][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 757.241416][ C0] ? __switch_to+0xc78/0x1410 [ 757.246104][ C0] ? __pfx_kthread+0x10/0x10 [ 757.250694][ C0] ret_from_fork_asm+0x1a/0x30 [ 757.255477][ C0] [ 757.258492][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 757.265864][ C0] CPU: 0 UID: 0 PID: 8118 Comm: kworker/u8:25 Not tainted syzkaller #0 PREEMPT(full) [ 757.275417][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 757.285569][ C0] Workqueue: writeback wb_workfn (flush-8:0) [ 757.291653][ C0] RIP: 0010:smp_call_function_many_cond+0x62d/0x1500 [ 757.298380][ C0] Code: 89 fe 83 e6 01 31 ff e8 71 71 0c 00 41 83 e7 01 75 07 e8 66 6c 0c 00 eb 3f f3 90 48 b8 00 00 00 00 00 fc ff df 41 0f b6 04 04 <84> c0 75 0f f7 03 01 00 00 00 74 1d e8 42 6c 0c 00 eb dc 89 d9 80 [ 757.318081][ C0] RSP: 0018:ffffc9000d6ee120 EFLAGS: 00000293 [ 757.324155][ C0] RAX: 0000000000000000 RBX: ffff8880b85418c8 RCX: ffff888034d48000 [ 757.332199][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 757.340167][ C0] RBP: ffffc9000d6ee270 R08: ffff888034d4959f R09: 1ffff110069a92b3 [ 757.348145][ C0] R10: dffffc0000000000 R11: ffffffff817a5570 R12: 1ffff110170a8319 [ 757.356123][ C0] R13: 0000000000000001 R14: ffff8880b85418c0 R15: 0000000000000001 [ 757.364092][ C0] FS: 0000000000000000(0000) GS:ffff888123a6b000(0000) knlGS:0000000000000000 [ 757.373016][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 757.379598][ C0] CR2: 000055b3ac89e2b0 CR3: 0000000034af6000 CR4: 00000000003526f0 [ 757.387570][ C0] Call Trace: [ 757.390848][ C0] [ 757.393787][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 757.399001][ C0] ? __pfx_should_flush_tlb+0x10/0x10 [ 757.404383][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 757.410717][ C0] ? rcu_is_watching+0x16/0xb0 [ 757.415488][ C0] ? trace_tlb_flush+0x3c/0x160 [ 757.420360][ C0] flush_tlb_mm_range+0x910/0x10b0 [ 757.425481][ C0] ? check_pte+0x2c1/0x380 [ 757.429920][ C0] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 757.435474][ C0] ? lock_acquire+0x115/0x350 [ 757.440161][ C0] ? page_table_check_clear+0x124/0x500 [ 757.445723][ C0] ? page_table_check_clear+0x124/0x500 [ 757.451278][ C0] ? page_table_check_clear+0x49d/0x500 [ 757.456832][ C0] ? page_table_check_clear+0x124/0x500 [ 757.462392][ C0] ptep_clear_flush+0x120/0x170 [ 757.467250][ C0] page_vma_mkclean_one+0x4b4/0x830 [ 757.472469][ C0] ? __pfx_page_vma_mkclean_one+0x10/0x10 [ 757.478222][ C0] ? __lock_acquire+0x747/0x2de0 [ 757.483174][ C0] ? lock_acquire+0x115/0x350 [ 757.487857][ C0] page_mkclean_one+0x20c/0x2e0 [ 757.492720][ C0] ? __pfx_page_mkclean_one+0x10/0x10 [ 757.498117][ C0] ? __pfx_page_mkclean_one+0x10/0x10 [ 757.503507][ C0] __rmap_walk_file+0x4c8/0x6a0 [ 757.508384][ C0] folio_mkclean+0x2d5/0x3f0 [ 757.512978][ C0] ? __pfx_folio_mkclean+0x10/0x10 [ 757.518097][ C0] ? __pfx_page_mkclean_one+0x10/0x10 [ 757.523474][ C0] ? __pfx_invalid_mkclean_vma+0x10/0x10 [ 757.529112][ C0] ? folio_mapping+0x16f/0x1f0 [ 757.533894][ C0] folio_clear_dirty_for_io+0x190/0x820 [ 757.539481][ C0] ? filemap_get_folios_tag+0x118/0x720 [ 757.545115][ C0] mpage_submit_folio+0x83/0x2a0 [ 757.550189][ C0] mpage_process_page_bufs+0x6bd/0x8a0 [ 757.555673][ C0] mpage_prepare_extent_to_map+0xf8d/0x1880 [ 757.561575][ C0] ? process_scheduled_works+0xc3d/0x1630 [ 757.567325][ C0] ? __pfx_mpage_prepare_extent_to_map+0x10/0x10 [ 757.573700][ C0] ? kmem_cache_alloc_noprof+0x31a/0x600 [ 757.579354][ C0] ? ext4_init_io_end+0x29/0x130 [ 757.584427][ C0] ? kmem_cache_alloc_noprof+0x151/0x600 [ 757.590072][ C0] ? ext4_init_io_end+0x29/0x130 [ 757.595038][ C0] ext4_do_writepages+0xb8a/0x4770 [ 757.600204][ C0] ? __pfx_ext4_do_writepages+0x10/0x10 [ 757.605747][ C0] ? __lock_acquire+0x747/0x2de0 [ 757.610707][ C0] ? __lock_acquire+0x747/0x2de0 [ 757.615652][ C0] ? trace_fib6_table_lookup+0x87/0x1f0 [ 757.621292][ C0] ? lock_acquire+0x115/0x350 [ 757.625997][ C0] ext4_writepages+0x1fe/0x4e0 [ 757.630865][ C0] ? __pfx_ext4_writepages+0x10/0x10 [ 757.636178][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 757.641306][ C0] ? __pfx_ext4_writepages+0x10/0x10 [ 757.646605][ C0] do_writepages+0x338/0x560 [ 757.651203][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 757.656240][ C0] ? reacquire_held_locks+0x117/0x1a0 [ 757.661617][ C0] ? writeback_sb_inodes+0x450/0x1af0 [ 757.666993][ C0] __writeback_single_inode+0x136/0x1220 [ 757.672631][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 757.677762][ C0] writeback_sb_inodes+0x9de/0x1af0 [ 757.682991][ C0] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 757.688660][ C0] ? __pfx_down_read_trylock+0x10/0x10 [ 757.694149][ C0] __writeback_inodes_wb+0x114/0x240 [ 757.699445][ C0] wb_writeback+0x42f/0xad0 [ 757.703952][ C0] ? queue_io+0x231/0x470 [ 757.708288][ C0] ? __pfx_wb_writeback+0x10/0x10 [ 757.713331][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 757.718381][ C0] wb_workfn+0xc92/0x10f0 [ 757.722739][ C0] ? __pfx_wb_workfn+0x10/0x10 [ 757.727625][ C0] ? lock_acquire+0x115/0x350 [ 757.732320][ C0] ? rcu_is_watching+0x16/0xb0 [ 757.737090][ C0] ? process_scheduled_works+0x97a/0x1630 [ 757.742816][ C0] process_scheduled_works+0xc3d/0x1630 [ 757.748410][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 757.754403][ C0] ? assign_work+0x3cf/0x5d0 [ 757.759005][ C0] worker_thread+0xa47/0xfb0 [ 757.763631][ C0] kthread+0x38b/0x480 [ 757.767704][ C0] ? __pfx_worker_thread+0x10/0x10 [ 757.772817][ C0] ? __pfx_kthread+0x10/0x10 [ 757.777409][ C0] ret_from_fork+0x514/0xb70 [ 757.782004][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 757.787114][ C0] ? __switch_to+0xc78/0x1410 [ 757.791803][ C0] ? __pfx_kthread+0x10/0x10 [ 757.796394][ C0] ret_from_fork_asm+0x1a/0x30 [ 757.801177][ C0]