last executing test programs: 5.760436854s ago: executing program 4 (id=2140): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x18, r1, 0x1, 0xffffffff, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x18}}, 0x48080) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = accept$inet6(r3, &(0x7f0000000300)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000440)=0x1c) setsockopt$inet6_tcp_int(r4, 0x6, 0x18, &(0x7f0000000480)=0x100000001, 0x4) connect$inet6(r3, &(0x7f00000004c0)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000540)={0x200000000000001, 0x2}, 0x38) connect$inet6(r5, &(0x7f0000000580)={0xa, 0x4e0a, 0xb, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r5, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000600), 0x171}}], 0x400000000000172, 0x4000000) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00759a3e5da9b872cc53eb01ba00000000"], 0x48) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000840)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f0000000880)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x10, &(0x7f0000000980)=ANY=[@ANYBLOB="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"/314, @ANYRES32=r6, @ANYBLOB="0000000002000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000b00)='GPL\x00', 0x5, 0xff8, &(0x7f0000000b40)=""/4088, 0x0, 0x0, '\x00', 0x0, 0x0, r7}, 0x94) sendmmsg$inet(r5, &(0x7f0000001b40), 0x4000000000000e7, 0x2400c8c4) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r8, &(0x7f0000001b80)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000001bc0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000001c00)=0x2, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000001c40)=@gcm_256={{0x304}, "ca191b2a0104b6a9", "404322cba02335d4c6d2d4fb43583cbce8ed367085d85317964322238ef204b2", "0ecc07cb", "4e0eac216e798a00"}, 0x38) syz_genetlink_get_family_id$ethtool(&(0x7f0000001c80), r3) sendmsg$nl_route(r2, &(0x7f0000001cc0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001d40)={0x0}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) recvfrom$inet6(r3, 0x0, 0x0, 0x40000000, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 5.578942618s ago: executing program 4 (id=2141): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x34, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@deltfilter={0x24, 0x2d, 0x3f, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0x4}, {0xfff1, 0xffff}, {0x8, 0x1}}}, 0x24}}, 0xffffffffffff0000) 5.259885951s ago: executing program 4 (id=2144): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000200)=0x200000, 0x4) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000240)=0x80, 0x4) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000280), &(0x7f00000002c0)=0x30) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0x44, 0x30, 0xffffffffffffffff, 0x0, 0x40002, {}, [{0x30, 0x1, [@m_bpf={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000300)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000340)="110000001000ffffff97000000000000000097000000", 0x16) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001d000100000c00000000000007000000", @ANYRES32=r4, @ANYBLOB="400096fb090002"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 4.405881083s ago: executing program 1 (id=2152): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x4, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x8, &(0x7f00000004c0)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x8}, @generic={0xbf, 0x4, 0xa}, @generic={0x7, 0x4, 0x0, 0x0, 0xfffffff8}, @generic={0xb7, 0x5}, @generic={0x85, 0x0, 0x0, 0x0, 0x19}, @generic={0x95}], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000540)={r1, r0}, 0xc) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000000000)=@base={0x4, 0x4, 0x4, 0x40007, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x5, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x87}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000080)='GPL\x00', 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb8604000000bc", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.154179507s ago: executing program 1 (id=2154): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x2) getsockopt(r0, 0xff, 0x1, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0600000004000000040000000e00000000000000", @ANYRES32, @ANYBLOB="030000000000200000f300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x14, &(0x7f0000000b40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000c40)={r2}, 0xc) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x8, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x12}, @local, {[@routing={0x32, 0x0, 0x2, 0x4}]}}}}}, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="3c000000120069b17a4ceecc537e00000700", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r6, &(0x7f00000005c0)={&(0x7f00000007c0)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000840)='\b\x00', 0x2}, {&(0x7f0000000880)="962b07a3f9c8", 0x6}], 0x2, &(0x7f00000008c0)=[@ip_tos_u8={{0x11, 0x0, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @local}}}], 0x38}, 0x42090) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={@map=r5, 0x35, 0x0, 0x1, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000200)={0x7, 0x0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)={@cgroup=r5, 0xffffffffffffffff, 0x34, 0x2029, r5, @void, @void, @value=r8, @void, r7}, 0x20) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r3, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x9, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe3, &(0x7f00000004c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x1000066, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)={@cgroup=r9, r3, 0x37, 0x38, 0x0, @void, @void, @void, @value=r10, r7}, 0x20) 4.045680251s ago: executing program 4 (id=2156): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xa, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xa, &(0x7f0000000380)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r1, 0x0, 0xe, 0x0, &(0x7f0000000500)='\x00'/14, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3.895632035s ago: executing program 4 (id=2157): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6(0x2d, 0x2, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000a40)={0x1d8, 0x26, 0x1, 0x0, 0x4, "", [@nested={0x1c6, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}, @typed={0x8, 0xc, 0x0, 0x0, @u32=0xf}, @generic="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"]}]}, 0x1d8}], 0x1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb0100180000000000000014000000140000000b000000090000000100000604000000010000e4f6000000005f4f30612e5f00002e"], 0x0, 0x37}, 0x28) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="034886dd010000000000140000006000000040087300fe88a43de1a400000000000000027d01ff020000000000000000000000000001"], 0xfdef) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0xffff}], 0x1, 0x40, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000006800010000000000000000000a000000000000000c00088008000300ac1e000108000600f200000008000500", @ANYRES32, @ANYBLOB="06000700"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="010000"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r6, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x19, &(0x7f00000007c0)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000000300000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000008c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) r10 = socket$unix(0x1, 0x2, 0x0) bind$unix(r10, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r9, &(0x7f0000000940)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000900)={r8}, 0xc) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket(0x23, 0x803, 0x4) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x54, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r13, {0x0, 0x6}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xff}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0xe6a7}, "f1fe"}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) 3.578595726s ago: executing program 3 (id=2158): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x74}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xd9}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0xa4}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x40, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0xc, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "1dd0"}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x114}}, 0x40000) 3.381201638s ago: executing program 3 (id=2159): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="140100003c00010040000000fcdbdf250301f2800c00180007ac0f0000000000140001"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (fail_nth: 5) 3.056507328s ago: executing program 3 (id=2160): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2.899407289s ago: executing program 1 (id=2161): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000) socket$kcm(0x23, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000002900)=r2, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) socket$inet6(0xa, 0x2, 0x0) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) socket$key(0xf, 0x3, 0x2) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000640)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) connect$inet(r6, &(0x7f0000000680)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r6, &(0x7f0000000800), 0x800001d, 0x0) 2.82556033s ago: executing program 3 (id=2163): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000001000030425bd70000000200000000300", @ANYRES32=0x0, @ANYBLOB="032e0000030000004c0012800e0001006970366772657461700000003800028014000700feffffc7b9000000000000000000000108000c0000000000060011004e24000008000c0007000000080015000e1f030008000d000008000008000a00", @ANYRES32], 0x7c}}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x150}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4040080) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xa000000) 2.782419501s ago: executing program 2 (id=2164): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000001300)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmsg$kcm(r0, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000001400)="7c1d27b9c7979255acaf6e8daa67f2bc20025eafc3adc26d21a5", 0x1a}, {&(0x7f0000001680)="0eb01579ab4d780f692c6569612944d90e176701255edea47e08b59408044d9140de519fea0e117eb9bfd192152f411f0144eb88d7ec6c67d590100760583c1c2ab4020f87a2ffff5d0c33a1359ce57614312fe1da827599558d5f48ef5ec9035ce36d3fc664fed8ce6f471be63323c2b70000000000", 0x76}, {&(0x7f0000001700)="82f1027893cacd7e75725286f49824079f4e60ea26a9971d14805f93a3fa98fc24c42f98d899df329aa37b8c224e80cbc901f850c3396159eb34e35a5e12564becfc75d988c84994ae89bb56d04f83bae7e37bca96beeac9395290d11009041c8077353e02e4c49042c644deac49e4c3c81730b18c26415eb55c42ae541c190aaf3de517ac98dd529ece9a257695d95a61fff905ad57bbbfce0b8a00f2c40a172a055cc92f24b0b0346a2d76f22781a2bbb514c205953ea15e2c697da381ad76508336cc3ffe2ed9670486e353b8e96f56cf2b8f253495d03426b8a89604db8287b325d9bd2160b0eb65ec", 0xeb}, {&(0x7f0000001800)="9be50d4dc79e414b6cff40bccbb9df869b24a7b3d3718b86510315c5f245bc2af095bd8c1f98946dcffa611c2bb4bbe0f5c5a7c302dedcb247b99ed3be22b816978777484389b71c129e01faf7417fa17c39ef26c49746a6e60be766823bc80c3da04cfa435ee99dd2f81353a2e22052e1c8f35c444356d4ada7a421990dd04b0d6741e1", 0x84}, {&(0x7f00000018c0)="aa7f6a272eeda24142511433077ddbb8229670cfa3d766ee4f9fdbe00c8ab1d8e23f6140c369dac9c3b135f4272de0f9d74560a6e1b5769a9967ba9baf64c7f673c0ce38eba5cfb5a25b1cbb0da01116e8f15abbdb4a91366b193fcbfc33a45ae96621958706e5931665abdc78757de39b4346e5aed10521c2d096dd68c38f06228bc1d92f3ffb650686c043ecf245a7f6df75038e4e0b9831258533b8328c305c18663357e57e89a8b3c78229f4", 0xae}, {&(0x7f0000001980)="742f539e385668bdf07d68407f5feb0f547d558449d353e8f7710aece29916176401fdcbfd5324ede1439eedff92078dc1cd3f0a283a00a6f7c0924f73d629b71b476b66da977a4459811754476aededf2c22803b53c076948322b707a9ef68edc1a0da3bb10f0c20e1a152c5840141a7b82a4b2fe3579449a8bd755e513792277eeebfb19392a4c7d991970f2c39fe3a17eb337b3c57f9eb5e832d1ee66abba0302947d", 0xa4}, {&(0x7f0000001a40)="9a662333ecbf2d385747a7b7fe899eae5076c97db014df3d37", 0x19}, {&(0x7f0000001a80)="30ad7d7b6c71c6abd67d22d59e5b12516fafc4ca2cdafa9c3932f3b3b6d3bf2c07a63122e6a8427657aff7dae5983da26c0cf18c45a776096a85728b5f35806aba3a383772170a97aeb91a29be74a9550b47cf5a444078308e193c814bbf3fe242d2e958efcd04bfd18a24e48316a5bdc885dcd9bf1288f6715e8a195891d7923250e564f03cb44db1e70743f8b27d63971a9577700a01451932231d34a79096e6266e539ef0bf7b6ffa31bb092dde1405e43bb16cfbfd40d9c39ee7fb2662e826eec642b7e5e7851bb4cfb04c1b8a418ede3a8c0c1471f55eb348974d8b46a04c4483108d06f7caf82f9c112b252b", 0xef}], 0x8, &(0x7f0000001c00)=[{0x28, 0x1, 0xfffffffd, "4a8e6577ee4d2c56d50762ecc27d997dc8590a76402d"}, {0x18, 0x109, 0x4, "f3"}, {0x78, 0x103, 0x1, "74840cabd1d75cd47e03644f1669c5dfcc405418ecfe435da68573733c0edf5cf180cb07719fce4f9c1ef4820d2b9cb56d055a57271168922ada1de0f31d205f0d0d996f223d37efdfaf10f1b116311bc3f91a330bd31d0eff45454129fd8fe732bfc52e78b1"}, {0xc0, 0x10a, 0x3, "b728051b9ced825268ed7241c4791d3371b1fd15e0ba7a564b10faac5d0811491f0a2aa91159092893af9aeb406ccb2ca8c8666d1061ef6c39777736f9f2de87cc9387f11c25597ee58d2cc53dc8a136890fb34956894bec59c031684497252bee4533cfec920fcea284c4c683f1dc91ca516cc949c3debc88d804acbb1bdc0f3a6b8479e19335c3bec6bcd5e09b565a9c99b238a6cc66e8131a18479867ace2697619897622f0f73aa23650"}, {0xa8, 0x102, 0x26, "d36f0223871c4c1699f570fbb5ee1a3ac063c9ca0030013a107f57ca07ebdb956c25775712e6d1d632cc39a01653601e97212568a0a9f117b3019b873ffd6063b6764eafc69c89ee1cb22a7f69b0e84ca522506c975bcfcf20607e10626b48c692e01e005b01fbf4a77c3f0c19a757123f1269f272943fe8c91369244fcfcb3782ed9460c5c8f22fee33c93a1ba60b4aca370d"}, {0xe0, 0x29, 0x94d, "89e7d245f760e5d5dd1aa59a70c4dceadd193ba16276522e58cc5938b327447ccaa0c59d8922d8d7b82d3993b70f0695a2705d20608bcc282bc4ad12581c1f41d730bb1a892933a3e5e23aff7d2addf4ee0ae411763478d70895a79ba882b65ba5d4cde718869271e43dbf85b71979f9bf2a450a8674dec9af17bdc9052b2e47dd2552a181772a1c3912735eb051490d7ce2cf78583a4d455b3f780a787327de21fc713cd16588be5807198885825a06e829e98bbea6f87a6ee8ba9b1f37ff856a9aa45d9833113dd4"}], 0x300}, 0x20048000) 2.78144618s ago: executing program 4 (id=2165): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0xe501, 0x7fffffe, 0x258, 0xb8, 0xa, 0x1000000, 0x0, 0x0, 0x1c0, 0x230, 0x230, 0x1c0, 0x223, 0x3, 0x0, {[{{@ip={@multicast1, @empty, 0xff, 0xffffffff, 'nr0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x2f, 0x0, 0x2}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3b9, 'syz1\x00'}}}, {{@uncond, 0x0, 0xc0, 0x108, 0x0, {}, [@common=@inet=@socket1={{0x28}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3c0, 'syz0\x00', {0xffffffffffffffff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) 2.495557165s ago: executing program 3 (id=2167): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xa, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xa, &(0x7f0000000380)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r1, 0x0, 0xe, 0x0, &(0x7f0000000500)='\x00'/14, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.32354962s ago: executing program 3 (id=2168): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="005b3d0000007f38e369da000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x6, 0x8, &(0x7f0000001040)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffbffffa, 0x0, 0x0, 0x0, 0x40}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000001080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000010c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000001140)="6f11ba816056a1827a33ae059cf3", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)=ANY=[@ANYBLOB="7000000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="a4000600400000003c0012800c0001006d6163766c616e002c000280060002000100000008000100100000000800030003000000100025800a000400aaaaaaaaaaaa0000140035006d6163766c616e30"], 0x70}, 0x1, 0x0, 0x0, 0x8840}, 0x8000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000d40)=ANY=[@ANYBLOB="3c00000010000500"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r6, @ANYRES16], 0x3c}}, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000bc0)={r4, &(0x7f0000000740)='\',,%-\x00', 0x8000, &(0x7f0000000780)={@_ha_fsid={[0x7, 0x298]}, {0x5, 0x6, 0x0, 0x5}}, 0xb0, &(0x7f0000000a40)={@_ha_fsid}, &(0x7f0000000b80)=0x106}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010000006100000008000000000000000000000604000000040000000000000204000000b00100000000000004000000100000000400000f01000000050000000300000008000000040000004b6900109b04000003000000020000000700000001000000b00c000001000000ac00000000302e42615f00"/132], &(0x7f0000000640)=""/148, 0x84, 0x94, 0x1, 0xff, 0x10000, @value=r7}, 0x28) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000001180)={r8}) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, r11, 0x0, 0xf3a, 0x0) splice(r9, 0x0, r11, 0x0, 0x9, 0x4) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1c, 0xc, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0xc, &(0x7f0000001900)=ANY=[@ANYRESDEC=r13, @ANYRES16=r6], &(0x7f0000000a80)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r15 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r15, 0x29, 0x40, &(0x7f00000011c0)=@mangle={'mangle\x00', 0x10, 0x6, 0x6c0, 0x0, 0x3f0, 0x1e8, 0x1e8, 0x500, 0x5f0, 0x5f0, 0x5f0, 0x5f0, 0x5f0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x0, {0x7a00000000000000}}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private0, @ipv4=@empty, 0xe, 0x3f}}}, {{@ipv6={@dev, @loopback, [0x0, 0x0, 0xffffffff, 0xff], [], 'pimreg0\x00', 'veth1_macvtap\x00', {0xff}}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x0, [0x0, 0x922], 0x0, 0x20, 0x0, [@empty, @private2, @loopback, @mcast2, @local, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, @mcast1, @mcast2, @empty, @private1, @local, @loopback, @loopback]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0xa, 0x2, {0x8}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@empty, 0x0, 0x29}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x720) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r16, 0x1, 0x32, &(0x7f0000000b00)=r14, 0x4) sendmsg$inet(r17, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x13}, 0x20048080) r18 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@arena={0x21, 0x0, 0x0, 0x31, 0x20800, r11, 0x80b, '\x00', r6, r10, 0x0, 0x1}, 0x50) r19 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x6, &(0x7f0000000300)=ANY=[@ANYBLOB="18110000", @ANYRES32=r18, @ANYBLOB="00000000000000000000b70300000000000085000000330000009500"/40], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000380)={r19, 0x0, 0xe, 0x0, &(0x7f0000000400)="00112233445566778899aabbccdd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2000003}, 0x17) getsockopt$IP_VS_SO_GET_SERVICES(r17, 0x0, 0x482, &(0x7f0000000e80)=""/157, &(0x7f0000000f40)=0x9d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000001ffff008500000095000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x3}, 0x94) 2.072991935s ago: executing program 0 (id=2170): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[@ANYBLOB="c4000000190001000000000000004000e000000200"/56], 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0xaf, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 1.845617773s ago: executing program 0 (id=2171): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r1, 0x4000000, 0xe, 0x0, &(0x7f0000000040)="976d9023d56482cd284a63da5397", 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c5645", 0x0, 0x8000}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r0}) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000001800dd8d000000000000000002000000000000050000000006001500050000002800"], 0x4c}}, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x2000) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x5, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000880)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000900), 0x17a, 0x0) recvmmsg(r4, &(0x7f0000000980), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000a00)={0x20000014}) epoll_wait(r3, &(0x7f0000000a40)=[{}], 0x1, 0x400) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) unshare(0x26020480) pwritev(0xffffffffffffffff, 0x0, 0x0, 0xee, 0x4000004) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r6, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a8c"], 0xb4}}, 0x10800) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ac0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d000000000000000000000010040000000000000000000009030000000000000061"], 0x0, 0x52}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b80)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="012000000300f4ffffff00000000000000000000000000000000000075d394417e9540348bec143ccf8afe47f6d40ed4cefa0dc38081df871f06f9f9c0aa5393d9f06444a1643f54f8"], 0x5f) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000cc0)={0x6, 0x5, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, &(0x7f0000000e00)}, 0x9a) recvmsg$can_raw(r0, &(0x7f0000000840)={&(0x7f00000002c0)=@tipc, 0x80, &(0x7f0000000680)=[{&(0x7f00000004c0)=""/37, 0x25}, {&(0x7f0000000500)=""/77, 0x4d}, {0x0}], 0x3, &(0x7f00000006c0)=""/146, 0x92}, 0x40) 1.744477972s ago: executing program 2 (id=2172): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="50000000120010002abd7000fbdbdf25ff020000000000000000000000000001000004d30a00330028001a000000000000000000000000000000000187c414bb0000000000000000000000000a000209"], 0x50}, 0x1, 0x0, 0x0, 0xc091}, 0x4004010) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="50000000120010002abd7000fbdbdf25ff020000000000000000000000000001000004d30a00330028001a000000000000000000000000000000000187c414bb0000000000000000000000000a000209"], 0x50}, 0x1, 0x0, 0x0, 0xc091}, 0x4004010) (async) 1.585339313s ago: executing program 2 (id=2173): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.47934769s ago: executing program 2 (id=2174): socket$rxrpc(0x21, 0x2, 0xa) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x10, 0x803, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000080)=0x400000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) sendmmsg(r2, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000180)}}], 0x1, 0x400c011) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004084}, 0x480c4) r5 = socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newtfilter={0x60, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x3}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x34, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x0, 0x4}}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x1, 0x206, 0x7}]}}, @TCA_U32_POLICE={0x4}]}}]}, 0x60}}, 0x24040084) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x4}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xfff1}}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x6, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x4, 0x206, 0x4}]}}]}}]}, 0x5c}}, 0x24040084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000500)={0x0, 0x1c, &(0x7f0000000540)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000580)=0x10) unshare(0x2a060400) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) connect$unix(r8, 0x0, 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xd, &(0x7f0000000600)=@assoc_value, &(0x7f0000000640)=0x8) 1.445560978s ago: executing program 1 (id=2175): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x11, r0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000440)=0x1000004, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000910095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@mpls_delroute={0x1c, 0x18, 0x9, 0x70bd2d, 0xfffffffe, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1, 0x2000}}, 0x1c}}, 0x4800) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000640)='cgroup.freeze\x00', 0x275a, 0x0) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000680)={{r3}, 0x1, 0x9, 0x3}) openat$nci(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) r4 = socket(0x2d, 0x2, 0x0) setsockopt(r4, 0x11d, 0x1, &(0x7f0000000700)="01000000", 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0x5, &(0x7f0000000780)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000007c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r8, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r7, 0x0) r9 = socket$rds(0x15, 0x5, 0x0) bind$rds(r9, &(0x7f0000000800)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r9, &(0x7f0000000840)={&(0x7f0000000880)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f0000000940)=[{&(0x7f0000000980)=""/44, 0x410200}], 0x1, 0x1000000000000}}], 0x48}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000009c0), r6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000a00)={'batadv0\x00', 0x0}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)={0x14, 0x1a, 0x229, 0x80, 0x25dfdbfc, {0xa}}, 0x14}}, 0x8000) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)={0x40, 0x0, 0x209, 0x70bd28, 0x25dfdbfe, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback={0xff00000000000000}}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_IFINDEX={0x8, 0xb, r10}]}, 0x40}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 1.135938439s ago: executing program 1 (id=2176): r0 = socket$kcm(0xf, 0x3, 0x2) ioctl$OCFS2_IOC_GROUP_ADD(r0, 0x40186f02, &(0x7f0000000140)={0x8, 0x2, 0x0, 0x3ecc}) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000340)='ns/pid\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$kcm(0x2a, 0x2, 0x0) r3 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x40088d5) socket(0x2b, 0x1, 0xb1ad) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000280)=ANY=[@ANYBLOB="020000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000002"], 0x20000) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="220000000400000010000000", @ANYRES64=r1], 0x48) r6 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000400)={'macsec0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newlink={0x3c, 0x10, 0x1, 0x10, 0x25dfdbff, {0x0, 0x0, 0x0, r8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5, 0xf, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4090}, 0x20000040) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000001c0)=r5}, 0x20) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000740)={@private0={0xfc, 0x0, '\x00', 0x1}, @private2, @loopback, 0x7, 0x6, 0x100, 0xd00, 0xe9f, 0x100, r8}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r5}, 0x4) sendmsg$NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x4000) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x48, 0x0, 0x562e351245413955, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x48}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c150000410007012cbd7000fadbdf25037c00000400c280341501802d15108004000b8014000c"], 0x154c}, 0x1, 0x0, 0x0, 0x4c084}, 0xc000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="180703400000455f7faafe3abdb618110000", @ANYRES32=r9, @ANYBLOB="00000000000000009500007b0000000085000000130000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94) 457.114995ms ago: executing program 2 (id=2177): unshare(0x28000600) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ppoll(&(0x7f0000000280)=[{r0, 0x40}], 0x20000000000000fc, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000007cc38af8ffe1000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000b00000095"], &(0x7f00000008c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f00000000c0)=0x40, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000100)=0x800001, 0x4) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r4, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x4e22, @multicast2}, 0x10) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f00000003c0)={r3, &(0x7f00000002c0)='&\'+.\x00', 0x22c0, &(0x7f0000000300)={@align=0x7ff, {0x97, 0x9, 0x1, 0x309}}, 0x7, &(0x7f0000000340), &(0x7f0000000380)=0xeba8}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r4, 0xc0385868, &(0x7f0000000a00)={r2, &(0x7f0000000900)='%!::]\x00', 0x381000, &(0x7f0000000940)={@_ha_fsid={[0x2bd, 0xe3c]}, {0xf, 0x2, 0x7, 0xa}}, 0x0, &(0x7f0000000980)={@_ha_fsid}, &(0x7f00000009c0)=0x5}) connect$l2tp(r6, &(0x7f0000000a40)={0x2, 0x0, @loopback, 0x4}, 0x10) sendmsg$kcm(r5, &(0x7f0000000700)={&(0x7f0000000400)=@ethernet={0x6, @random="d05ff3607cf7"}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000480)="bfd46829d3b3b0412f99d3f39857c016416154920add68d1a6a2bea6e49f525eb766ebfb5f92b630ecf0ed5d364b0b65a04624aebe341be7632ea637a7be31fa4466bac4e4562770", 0x48}, {&(0x7f0000000500)="b2a0272c9c4774ba9ee01d44e94454", 0xf}], 0x2, &(0x7f0000000580)=[{0x58, 0x84, 0x1, "02f9b2674af1a5b4c495887662d08a492172b34e212f63a5484e0f92c3a08e658243b447da40554414da4a2c6464f40041c3e45242daee8d898ae3c1d712a1f1beb8914917"}, {0x100, 0x104, 0x8, "e97defa99e8d40bd891f264c7a8592c55f8da5dc5ea85318aeedefa83ec21d7c813b125d16a42b3660a00a865a40c256a01abf93e7995f04742b9c36f6ef1a4ceeb641a7c4157c5cc75809278f5af51fb351d62cb15d10421d549e91594ef317637a41e9bac47decb73c9cb84609dbee3928f901f815abc73034b6da96c341542bd79b284948bae77ff0f2797c3942e8719b564f8b94225f9a3809d64e675d16628f5e59b32344697e023510e592c28476cca7484ab9515f8c53bad5d61bfd6a43eb93e5e793ff082cecb4dc65f14bee4d55bc4c78c2d4446f22ee97f8225819fed48869abec4f51e6eccc"}], 0x158}, 0x40050) listen(r3, 0x0) close(0x3) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4e20, @empty}, 0x10) ioctl$int_out(r3, 0x5460, &(0x7f0000000200)) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000080)=0x6, 0x4) bind$inet6(r7, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000a80)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000ac0)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f0000000c40)={r9, @in6={{0xa, 0x4e21, 0xfffffff5, @empty, 0x9}}, 0x3, 0x7}, &(0x7f0000000d00)=0x90) 327.64552ms ago: executing program 0 (id=2178): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xa, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xa, &(0x7f0000000380)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0xb7, 0x4, 0x0, 0x0, 0x6}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r1, 0x0, 0xe, 0x0, &(0x7f0000000500)='\x00'/14, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 264.947224ms ago: executing program 2 (id=2179): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x122, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000003340)={0x3, 0x24, &(0x7f0000003400)=ANY=[@ANYBLOB="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"], &(0x7f0000003540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000003580), 0x0) close(r2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000035c0)='ns/net\x00') r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000003600)=@bpf_lsm={0x1e, 0x3, &(0x7f00000036c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000003700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000003740)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000037c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000003840)='\x00'/14, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, 0x0, 0x40) listen(0xffffffffffffffff, 0x5) write$tun(r0, &(0x7f0000000180)=ANY=[], 0x4a) socket$nl_netfilter(0x10, 0x3, 0xc) 160.691355ms ago: executing program 0 (id=2180): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={0x0}, 0x1, 0x0, 0x0, 0x4c084}, 0xc000) 157.207344ms ago: executing program 1 (id=2181): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x1, 0x0, &(0x7f00000002c0)=0x60) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x308) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xe, 0x200000000000020a, &(0x7f0000000400)=ANY=[@ANYRESHEX=r1], 0x0, 0x6, 0x0, 0x0, 0x0, 0x53, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r3, 0x0, 0x4000000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f4, &(0x7f0000000440)={'syztnl0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x0, 0xc, &(0x7f0000000540)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@base={0x9, 0x4, 0x6, 0xff, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0), &(0x7f0000000c00), 0x602, r4}, 0x38) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={0x0, 0x38}}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d40)={0x0}, 0x1, 0x0, 0x0, 0x4050}, 0x40) r5 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f0000000d80)={0x1}, 0x4) openat$nci(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@empty, @in6=@mcast2, 0x0, 0x1, 0x1000, 0xfffe, 0xa}, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, {0x0, 0xfffffffffffffffd, 0xb5, 0x1}, 0x800, 0x0, 0x1, 0x1}, {{@in=@remote, 0x0, 0x32}, 0x2, @in=@private=0xa010102, 0x0, 0x2, 0x3, 0x0, 0x6}}, 0xe8) close(r6) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r6, 0x84, 0x21, &(0x7f0000000280)=0xf, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0xfffffffffffffc34) 33.95266ms ago: executing program 0 (id=2182): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a40)={&(0x7f0000000a80)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x3, &(0x7f0000000b80)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000bc0)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000c00)={0x0, 0x1}, 0x1}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c40)=@bpf_ext={0x1a, 0xf, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000092870000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400a400b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b7000000"], &(0x7f0000000d80)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000e00)={r3, 0xffffffffffffffff, 0x3c, 0x4001, @val=@tracing={0x0, 0xfffffffffffffff8}}, 0x20) 0s ago: executing program 0 (id=2183): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xe, 0x4, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000d80)='GPL\x00', 0x4, 0xfd90, &(0x7f0000000dc0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000ec0), 0x366, 0x10, &(0x7f0000000f00), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000f80)={r0, r1, 0x26, 0x0, @val=@kprobe_multi=@addrs={0x0, 0x0, 0x0, 0x0, 0x3}}, 0x30) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000fc0)={r2, r0, 0x4, r0}, 0x10) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0xf0ffffffffffff, 0x0, 0x60001d0}, 0xc084) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x10, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x66, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f00000006c0)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000700)=@req={0x3fc}, 0x10) read$alg(r6, &(0x7f0000000740)=""/24, 0x18) write(r5, &(0x7f0000000640)="e9ff3e0104a50c00000000", 0x58) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000580)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r9, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3e0, 0x110, 0x110, 0x210, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@uncond, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "716ebd2e1aa0cc683e62f312359594df00da56317f76121697127951fdba"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x9, [@enum={0x4, 0x4, 0x0, 0x6, 0x4, [{0x4, 0x7}, {0x2, 0x4}, {0x4, 0xfffffffc}, {0x8, 0x7}]}]}, {0x0, [0x2e, 0x71, 0x30, 0x61, 0x30, 0x2e, 0x5f]}}, &(0x7f00000001c0)=""/95, 0x4d, 0x5f, 0x1, 0x80000001}, 0x28) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) r13 = socket(0x2d, 0x2, 0x0) connect$netlink(r13, &(0x7f0000000680)=@unspec, 0xc) sendmsg$IPVS_CMD_NEW_DAEMON(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01000400000001000000090000003c0003"], 0x50}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) r14 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="230000000800000002000000ffff000001"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0xbffffffe, r14, 0xffffffff00000000}, 0x38) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0xc, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8058}]}}]}, 0x60}}, 0x44080) kernel console output (not intermixed with test programs): tainted syzkaller #0 PREEMPT(full) [ 299.496929][T11739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 299.496944][T11739] Call Trace: [ 299.496953][T11739] [ 299.496964][T11739] dump_stack_lvl+0xe8/0x150 [ 299.497001][T11739] should_fail_ex+0x410/0x560 [ 299.497037][T11739] should_failslab+0xa8/0x100 [ 299.497071][T11739] __kmalloc_cache_noprof+0xa3/0x600 [ 299.497099][T11739] ? bpf_copy_verifier_state+0xb1f/0x1170 [ 299.497122][T11739] ? bpf_copy_verifier_state+0xb1f/0x1170 [ 299.497151][T11739] bpf_copy_verifier_state+0xb1f/0x1170 [ 299.497186][T11739] bpf_is_state_visited+0x385b/0x48b0 [ 299.497224][T11739] ? verbose+0x11d/0x1a0 [ 299.497252][T11739] ? __pfx_bpf_verifier_log_write+0x10/0x10 [ 299.497285][T11739] ? bpf_vlog_reset+0x1db/0x340 [ 299.497318][T11739] do_check_common+0x229d/0x5610 [ 299.497391][T11739] ? __pfx_do_check_common+0x10/0x10 [ 299.497423][T11739] ? __pfx_verbose+0x10/0x10 [ 299.497443][T11739] ? __pfx_bpf_disasm_kfunc_name+0x10/0x10 [ 299.497482][T11739] do_check_main+0xa2/0x1f0 [ 299.497514][T11739] bpf_check+0x2775/0x2ef0 [ 299.497563][T11739] ? __pfx_bpf_check+0x10/0x10 [ 299.497594][T11739] ? bpf_obj_name_cpy+0x194/0x1e0 [ 299.497633][T11739] bpf_prog_load+0x14d6/0x1c20 [ 299.497686][T11739] ? __pfx_bpf_prog_load+0x10/0x10 [ 299.497745][T11739] __sys_bpf+0xd0d/0xd90 [ 299.497782][T11739] ? __pfx___sys_bpf+0x10/0x10 [ 299.497823][T11739] ? __fget_files+0x2a/0x420 [ 299.497878][T11739] ? ksys_write+0x242/0x270 [ 299.497904][T11739] ? __pfx_ksys_write+0x10/0x10 [ 299.497933][T11739] __x64_sys_bpf+0xba/0xd0 [ 299.497961][T11739] do_syscall_64+0x166/0x520 [ 299.497991][T11739] ? trace_irq_disable+0x3b/0x140 [ 299.498013][T11739] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.498037][T11739] ? clear_bhb_loop+0x70/0xc0 [ 299.498065][T11739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.498088][T11739] RIP: 0033:0x7f3e3139e1d9 [ 299.498109][T11739] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.498130][T11739] RSP: 002b:00007f3e3231d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 299.498155][T11739] RAX: ffffffffffffffda RBX: 00007f3e31625fa0 RCX: 00007f3e3139e1d9 [ 299.498172][T11739] RDX: 0000000000000094 RSI: 0000200000000240 RDI: 0000000000000005 [ 299.498187][T11739] RBP: 00007f3e3231d090 R08: 0000000000000000 R09: 0000000000000000 [ 299.498201][T11739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 299.498270][T11739] R13: 00007f3e31626038 R14: 00007f3e31625fa0 R15: 00007ffeba07da18 [ 299.498372][T11739] [ 299.825775][T11744] ip6_vti0: left promiscuous mode [ 299.834131][T11744] netlink: 976 bytes leftover after parsing attributes in process `syz.4.1679'. [ 299.834162][T11744] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 302.166913][T11722] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 302.181294][T11710] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 302.403718][T11757] FAULT_INJECTION: forcing a failure. [ 302.403718][T11757] name failslab, interval 1, probability 0, space 0, times 0 [ 302.403758][T11757] CPU: 0 UID: 0 PID: 11757 Comm: syz.1.1684 Not tainted syzkaller #0 PREEMPT(full) [ 302.403784][T11757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 302.403799][T11757] Call Trace: [ 302.403814][T11757] [ 302.403825][T11757] dump_stack_lvl+0xe8/0x150 [ 302.403862][T11757] should_fail_ex+0x410/0x560 [ 302.403901][T11757] should_failslab+0xa8/0x100 [ 302.403935][T11757] __kmalloc_cache_noprof+0xa3/0x600 [ 302.403962][T11757] ? __skb_clone+0x449/0x6c0 [ 302.403986][T11757] ? addr_event+0xc3/0x470 [ 302.404010][T11757] ? addr_event+0xc3/0x470 [ 302.404043][T11757] addr_event+0xc3/0x470 [ 302.404075][T11757] inetaddr_event+0xef/0x150 [ 302.404101][T11757] ? __pfx_inetaddr_event+0x10/0x10 [ 302.404145][T11757] notifier_call_chain+0x1a5/0x3d0 [ 302.404193][T11757] blocking_notifier_call_chain+0x6a/0x90 [ 302.404234][T11757] __inet_insert_ifa+0x9ef/0xbc0 [ 302.404285][T11757] ? __pfx___inet_insert_ifa+0x10/0x10 [ 302.404335][T11757] inet_rtm_newaddr+0x1039/0x19f0 [ 302.404383][T11757] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 302.404443][T11757] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 302.404484][T11757] rtnetlink_rcv_msg+0x802/0xc00 [ 302.404526][T11757] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 302.404562][T11757] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 302.404601][T11757] ? __copy_skb_header+0xa3/0x4a0 [ 302.404640][T11757] netlink_rcv_skb+0x226/0x4a0 [ 302.404673][T11757] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 302.404711][T11757] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 302.404757][T11757] ? netlink_deliver_tap+0x2e/0x1b0 [ 302.404789][T11757] ? netlink_deliver_tap+0x2e/0x1b0 [ 302.404827][T11757] netlink_unicast+0x7bd/0x940 [ 302.404869][T11757] netlink_sendmsg+0x813/0xb40 [ 302.404912][T11757] ? __pfx_netlink_sendmsg+0x10/0x10 [ 302.404952][T11757] ? apparmor_socket_sendmsg+0x98/0x360 [ 302.404986][T11757] ? __pfx_netlink_sendmsg+0x10/0x10 [ 302.405016][T11757] sock_sendmsg_nosec+0x14e/0x190 [ 302.405050][T11757] ____sys_sendmsg+0x54e/0x850 [ 302.405082][T11757] ? __pfx_____sys_sendmsg+0x10/0x10 [ 302.405119][T11757] ? import_iovec+0x73/0xa0 [ 302.405158][T11757] ___sys_sendmsg+0x2a5/0x360 [ 302.405182][T11757] ? __lock_acquire+0x747/0x2de0 [ 302.405213][T11757] ? __pfx____sys_sendmsg+0x10/0x10 [ 302.405282][T11757] ? __fget_files+0x2a/0x420 [ 302.405316][T11757] ? __fget_files+0x3a2/0x420 [ 302.405363][T11757] __x64_sys_sendmsg+0x1b1/0x290 [ 302.405393][T11757] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 302.405445][T11757] do_syscall_64+0x166/0x520 [ 302.405483][T11757] ? trace_irq_disable+0x3b/0x140 [ 302.405508][T11757] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.405533][T11757] ? clear_bhb_loop+0x70/0xc0 [ 302.405562][T11757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.405586][T11757] RIP: 0033:0x7f806199e1d9 [ 302.405608][T11757] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 302.405629][T11757] RSP: 002b:00007f8062839028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 302.405655][T11757] RAX: ffffffffffffffda RBX: 00007f8061c25fa0 RCX: 00007f806199e1d9 [ 302.405673][T11757] RDX: 0000000000000000 RSI: 0000200000000840 RDI: 0000000000000009 [ 302.405688][T11757] RBP: 00007f8062839090 R08: 0000000000000000 R09: 0000000000000000 [ 302.405704][T11757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 302.405718][T11757] R13: 00007f8061c26038 R14: 00007f8061c25fa0 R15: 00007fff1a14ee48 [ 302.405758][T11757] [ 302.456589][T11759] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1683'. [ 302.521936][T11757] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1684'. [ 302.522316][T11757] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 302.869687][T11757] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 302.997568][T11773] ip6tnl1: entered allmulticast mode [ 303.006153][ T984] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 303.012461][ T984] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 303.029054][ T5975] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 303.178396][ T5742] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 303.551004][T11794] FAULT_INJECTION: forcing a failure. [ 303.551004][T11794] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 303.551041][T11794] CPU: 1 UID: 0 PID: 11794 Comm: syz.4.1697 Not tainted syzkaller #0 PREEMPT(full) [ 303.551068][T11794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 303.551083][T11794] Call Trace: [ 303.551093][T11794] [ 303.551104][T11794] dump_stack_lvl+0xe8/0x150 [ 303.551142][T11794] should_fail_ex+0x410/0x560 [ 303.551180][T11794] _copy_to_user+0x31/0xb0 [ 303.551217][T11794] simple_read_from_buffer+0xe1/0x170 [ 303.551259][T11794] proc_fail_nth_read+0x1bb/0x230 [ 303.551284][T11794] ? common_file_perm+0x20e/0x2b0 [ 303.551320][T11794] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 303.551350][T11794] ? rw_verify_area+0x24a/0x4c0 [ 303.551384][T11794] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 303.551409][T11794] vfs_read+0x213/0xa80 [ 303.551437][T11794] ? __pfx___mutex_lock+0x10/0x10 [ 303.551470][T11794] ? __pfx_vfs_read+0x10/0x10 [ 303.551496][T11794] ? __fget_files+0x2a/0x420 [ 303.551540][T11794] ? __fget_files+0x3a2/0x420 [ 303.551573][T11794] ? __fget_files+0x2a/0x420 [ 303.551623][T11794] ksys_read+0x150/0x270 [ 303.551655][T11794] ? __pfx_ksys_read+0x10/0x10 [ 303.551692][T11794] do_syscall_64+0x166/0x520 [ 303.551722][T11794] ? trace_irq_disable+0x3b/0x140 [ 303.551746][T11794] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.551770][T11794] ? clear_bhb_loop+0x70/0xc0 [ 303.551800][T11794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.551823][T11794] RIP: 0033:0x7f3e3135ea0e [ 303.551844][T11794] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 303.551864][T11794] RSP: 002b:00007f3e3231cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 303.551889][T11794] RAX: ffffffffffffffda RBX: 00007f3e3231d6c0 RCX: 00007f3e3135ea0e [ 303.551906][T11794] RDX: 000000000000000f RSI: 00007f3e3231d0a0 RDI: 0000000000000004 [ 303.551922][T11794] RBP: 00007f3e3231d090 R08: 0000000000000000 R09: 0000000000000000 [ 303.551937][T11794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 303.551950][T11794] R13: 00007f3e31626038 R14: 00007f3e31625fa0 R15: 00007ffeba07da18 [ 303.551990][T11794] [ 303.867085][T11791] sctp: [Deprecated]: syz.0.1695 (pid 11791) Use of int in max_burst socket option deprecated. [ 303.867085][T11791] Use struct sctp_assoc_value instead [ 303.931983][T11791] syzkaller0: entered promiscuous mode [ 303.932009][T11791] syzkaller0: entered allmulticast mode [ 304.026942][ T5975] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 304.461136][T11831] netlink: 'syz.4.1707': attribute type 27 has an invalid length. [ 304.859010][T11842] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1710'. [ 304.908470][T11845] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 305.194370][T11854] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1713'. [ 305.365073][T11862] FAULT_INJECTION: forcing a failure. [ 305.365073][T11862] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 305.365116][T11862] CPU: 0 UID: 0 PID: 11862 Comm: syz.0.1717 Not tainted syzkaller #0 PREEMPT(full) [ 305.365142][T11862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 305.365156][T11862] Call Trace: [ 305.365166][T11862] [ 305.365177][T11862] dump_stack_lvl+0xe8/0x150 [ 305.365215][T11862] should_fail_ex+0x410/0x560 [ 305.365253][T11862] prepare_alloc_pages+0x223/0x600 [ 305.365289][T11862] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 305.365324][T11862] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 305.365357][T11862] ? __pfx_policy_nodemask+0x10/0x10 [ 305.365400][T11862] alloc_pages_mpol+0x21e/0x390 [ 305.365438][T11862] alloc_pages_noprof+0xb1/0x2b0 [ 305.365472][T11862] get_free_pages_noprof+0xf/0x80 [ 305.365500][T11862] __kasan_populate_vmalloc+0x38/0x1c0 [ 305.365527][T11862] ? do_raw_spin_unlock+0xf5/0x200 [ 305.365565][T11862] alloc_vmap_area+0xd1a/0x1420 [ 305.365615][T11862] ? __pfx_alloc_vmap_area+0x10/0x10 [ 305.365657][T11862] ? __kmalloc_cache_node_noprof+0x3d1/0x620 [ 305.365684][T11862] ? __kmalloc_cache_node_noprof+0x1f7/0x620 [ 305.365708][T11862] ? __get_vm_area_node+0x155/0x2f0 [ 305.365746][T11862] __get_vm_area_node+0x200/0x2f0 [ 305.365787][T11862] __vmalloc_node_range_noprof+0x343/0x1540 [ 305.365811][T11862] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 305.365840][T11862] ? __lock_acquire+0x747/0x2de0 [ 305.365891][T11862] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 305.365926][T11862] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 305.365952][T11862] __vmalloc_noprof+0xd2/0x120 [ 305.365975][T11862] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 305.366005][T11862] bpf_prog_alloc_no_stats+0x47/0x560 [ 305.366031][T11862] ? bpf_prog_alloc+0x2a/0x1a0 [ 305.366060][T11862] bpf_prog_alloc+0x3c/0x1a0 [ 305.366089][T11862] bpf_prog_load+0x7f8/0x1c20 [ 305.366132][T11862] ? __pfx_bpf_prog_load+0x10/0x10 [ 305.366187][T11862] __sys_bpf+0xd0d/0xd90 [ 305.366224][T11862] ? __pfx___sys_bpf+0x10/0x10 [ 305.366264][T11862] ? __fget_files+0x2a/0x420 [ 305.366318][T11862] ? ksys_write+0x242/0x270 [ 305.366344][T11862] ? __pfx_ksys_write+0x10/0x10 [ 305.366374][T11862] __x64_sys_bpf+0xba/0xd0 [ 305.366401][T11862] do_syscall_64+0x166/0x520 [ 305.366432][T11862] ? trace_irq_disable+0x3b/0x140 [ 305.366456][T11862] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.366481][T11862] ? clear_bhb_loop+0x70/0xc0 [ 305.366509][T11862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.366531][T11862] RIP: 0033:0x7f5f24f9e1d9 [ 305.366577][T11862] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 305.366597][T11862] RSP: 002b:00007f5f25ee3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 305.366622][T11862] RAX: ffffffffffffffda RBX: 00007f5f25225fa0 RCX: 00007f5f24f9e1d9 [ 305.366640][T11862] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 305.366696][T11862] RBP: 00007f5f25ee3090 R08: 0000000000000000 R09: 0000000000000000 [ 305.366711][T11862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 305.366725][T11862] R13: 00007f5f25226038 R14: 00007f5f25225fa0 R15: 00007ffe362a2688 [ 305.366762][T11862] [ 305.366937][T11862] warn_alloc: 1 callbacks suppressed [ 305.366953][T11862] syz.0.1717: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 305.367020][T11862] CPU: 0 UID: 0 PID: 11862 Comm: syz.0.1717 Not tainted syzkaller #0 PREEMPT(full) [ 305.367044][T11862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 305.367057][T11862] Call Trace: [ 305.367066][T11862] [ 305.367076][T11862] dump_stack_lvl+0xe8/0x150 [ 305.367110][T11862] warn_alloc+0x24d/0x270 [ 305.367137][T11862] ? lockdep_hardirqs_on+0x7b/0x110 [ 305.367171][T11862] ? __pfx_warn_alloc+0x10/0x10 [ 305.367195][T11862] ? kfree+0x1c5/0x650 [ 305.367224][T11862] ? __get_vm_area_node+0x219/0x2f0 [ 305.367269][T11862] __vmalloc_node_range_noprof+0x36b/0x1540 [ 305.367293][T11862] ? __lock_acquire+0x747/0x2de0 [ 305.367345][T11862] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 305.367380][T11862] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 305.367407][T11862] __vmalloc_noprof+0xd2/0x120 [ 305.367430][T11862] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 305.367462][T11862] bpf_prog_alloc_no_stats+0x47/0x560 [ 305.367489][T11862] ? bpf_prog_alloc+0x2a/0x1a0 [ 305.367518][T11862] bpf_prog_alloc+0x3c/0x1a0 [ 305.367547][T11862] bpf_prog_load+0x7f8/0x1c20 [ 305.367588][T11862] ? __pfx_bpf_prog_load+0x10/0x10 [ 305.367645][T11862] __sys_bpf+0xd0d/0xd90 [ 305.367692][T11862] ? __pfx___sys_bpf+0x10/0x10 [ 305.367731][T11862] ? __fget_files+0x2a/0x420 [ 305.367784][T11862] ? ksys_write+0x242/0x270 [ 305.367809][T11862] ? __pfx_ksys_write+0x10/0x10 [ 305.367838][T11862] __x64_sys_bpf+0xba/0xd0 [ 305.367866][T11862] do_syscall_64+0x166/0x520 [ 305.367895][T11862] ? trace_irq_disable+0x3b/0x140 [ 305.367918][T11862] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.367941][T11862] ? clear_bhb_loop+0x70/0xc0 [ 305.367969][T11862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.367994][T11862] RIP: 0033:0x7f5f24f9e1d9 [ 305.368014][T11862] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 305.368033][T11862] RSP: 002b:00007f5f25ee3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 305.368055][T11862] RAX: ffffffffffffffda RBX: 00007f5f25225fa0 RCX: 00007f5f24f9e1d9 [ 305.368071][T11862] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 305.368086][T11862] RBP: 00007f5f25ee3090 R08: 0000000000000000 R09: 0000000000000000 [ 305.368100][T11862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 305.368114][T11862] R13: 00007f5f25226038 R14: 00007f5f25225fa0 R15: 00007ffe362a2688 [ 305.368151][T11862] [ 305.378352][T11862] Mem-Info: [ 305.378406][T11862] active_anon:5265 inactive_anon:0 isolated_anon:0 [ 305.378406][T11862] active_file:0 inactive_file:44231 isolated_file:0 [ 305.378406][T11862] unevictable:0 dirty:203 writeback:0 [ 305.378406][T11862] slab_reclaimable:11047 slab_unreclaimable:116190 [ 305.378406][T11862] mapped:30214 shmem:577 pagetables:1166 [ 305.378406][T11862] sec_pagetables:0 bounce:0 [ 305.378406][T11862] kernel_misc_reclaimable:0 [ 305.378406][T11862] free:1303397 free_pcp:9442 free_cma:0 [ 305.378560][T11862] Node 0 active_anon:21060kB inactive_anon:0kB active_file:0kB inactive_file:176720kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:120856kB dirty:812kB writeback:0kB shmem:2308kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13372kB pagetables:4548kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 305.378733][T11862] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 305.378876][T11862] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 305.379048][T11862] lowmem_reserve[]: 0 2468 2468 2468 2468 [ 305.379135][T11862] Node 0 DMA32 free:1255804kB boost:0kB min:33984kB low:42480kB high:50976kB reserved_highatomic:0kB free_highatomic:0kB active_anon:21060kB inactive_anon:0kB active_file:0kB inactive_file:176720kB unevictable:0kB writepending:812kB zspages:0kB present:3129332kB managed:2527708kB mlocked:0kB bounce:0kB free_pcp:37768kB local_pcp:21456kB free_cma:0kB [ 305.379301][T11862] lowmem_reserve[]: 0 0 0 0 0 [ 305.379424][T11862] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 305.379589][T11862] lowmem_reserve[]: 0 0 0 0 0 [ 305.379698][T11862] Node 1 Normal free:3942424kB boost:0kB min:55916kB low:69892kB high:83868kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 305.379862][T11862] lowmem_reserve[]: 0 0 0 0 0 [ 305.379954][T11862] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 305.383975][T11862] Node 0 DMA32: 1109*4kB (UME) 817*8kB (UM) 201*16kB (UME) 417*32kB (UM) 97*64kB (UM) 30*128kB (UME) 7*256kB (ME) 4*512kB (UME) 2*1024kB (U) 8*2048kB (UME) 292*4096kB (UM) = 1255884kB [ 305.384466][T11862] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 305.384786][T11862] Node 1 Normal: 4*4kB (UM) 3*8kB (UM) 5*16kB (UM) 9*32kB (UM) 6*64kB (UM) 4*128kB (UM) 5*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 0*2048kB 961*4096kB (M) = 3942424kB [ 305.385243][T11862] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 305.400330][T11862] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 305.400415][T11862] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 305.400465][T11862] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 305.400523][T11862] 44804 total pagecache pages [ 305.400550][T11862] 0 pages in swap cache [ 305.400585][T11862] Free swap = 124996kB [ 305.400610][T11862] Total swap = 124996kB [ 305.400646][T11862] 2097051 pages RAM [ 305.400671][T11862] 0 pages HighMem/MovableOnly [ 305.400696][T11862] 433508 pages reserved [ 305.400713][T11862] 0 pages cma reserved [ 306.143666][T11865] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1718'. [ 306.194460][T11865] IPv6: Can't replace route, no match found [ 306.428795][T11872] syzkaller0: entered promiscuous mode [ 306.428822][T11872] syzkaller0: entered allmulticast mode [ 306.445358][T11872] tipc: Started in network mode [ 306.445496][T11872] tipc: Node identity 824262927ace, cluster identity 4711 [ 306.469825][T11872] tipc: Enabled bearer , priority 0 [ 306.765604][T11868] tipc: Resetting bearer [ 306.850817][T11868] tipc: Disabling bearer [ 306.889911][T11885] ÿ: renamed from bond_slave_0 (while UP) [ 306.948624][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 307.566003][T11905] netlink: 'syz.4.1729': attribute type 1 has an invalid length. [ 307.652703][T11905] bond5: entered promiscuous mode [ 307.654784][T11905] 8021q: adding VLAN 0 to HW filter on device bond5 [ 307.679695][T11912] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1729'. [ 307.739591][T11916] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1730'. [ 307.759866][T11912] 8021q: adding VLAN 0 to HW filter on device bond5 [ 307.760323][T11912] bond5: (slave wireguard0): The slave device specified does not support setting the MAC address [ 307.760346][T11912] bond5: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 307.861862][T11912] bond5: (slave wireguard0): making interface the new active one [ 307.861892][T11912] wireguard0: entered promiscuous mode [ 307.865128][T11912] bond5: (slave wireguard0): Enslaving as an active interface with an up link [ 307.866815][T11909] syz_tun: left promiscuous mode [ 307.915604][T11918] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1732'. [ 307.915784][T11918] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1732'. [ 307.998223][T11918] ieee802154 phy0 wpan0: encryption failed: -22 [ 308.256500][T11931] FAULT_INJECTION: forcing a failure. [ 308.256500][T11931] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 308.256535][T11931] CPU: 1 UID: 0 PID: 11931 Comm: syz.4.1735 Not tainted syzkaller #0 PREEMPT(full) [ 308.256558][T11931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 308.256571][T11931] Call Trace: [ 308.256579][T11931] [ 308.256588][T11931] dump_stack_lvl+0xe8/0x150 [ 308.256621][T11931] should_fail_ex+0x410/0x560 [ 308.256654][T11931] _copy_from_user+0x2d/0xb0 [ 308.256684][T11931] ___sys_sendmsg+0x1c6/0x360 [ 308.256705][T11931] ? __lock_acquire+0x747/0x2de0 [ 308.256731][T11931] ? __pfx____sys_sendmsg+0x10/0x10 [ 308.256786][T11931] ? __fget_files+0x2a/0x420 [ 308.256815][T11931] ? __fget_files+0x3a2/0x420 [ 308.256854][T11931] __x64_sys_sendmsg+0x1b1/0x290 [ 308.256878][T11931] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 308.256931][T11931] do_syscall_64+0x166/0x520 [ 308.256957][T11931] ? trace_irq_disable+0x3b/0x140 [ 308.256978][T11931] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.256999][T11931] ? clear_bhb_loop+0x70/0xc0 [ 308.257023][T11931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.257042][T11931] RIP: 0033:0x7f3e3139e1d9 [ 308.257061][T11931] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 308.257078][T11931] RSP: 002b:00007f3e3231d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 308.257099][T11931] RAX: ffffffffffffffda RBX: 00007f3e31625fa0 RCX: 00007f3e3139e1d9 [ 308.257113][T11931] RDX: 0000000004008054 RSI: 0000200000000200 RDI: 0000000000000005 [ 308.257127][T11931] RBP: 00007f3e3231d090 R08: 0000000000000000 R09: 0000000000000000 [ 308.257139][T11931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.257151][T11931] R13: 00007f3e31626038 R14: 00007f3e31625fa0 R15: 00007ffeba07da18 [ 308.257183][T11931] [ 309.057012][T11963] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 309.479239][T11983] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1746'. [ 309.571328][T11985] netlink: 'syz.1.1749': attribute type 30 has an invalid length. [ 309.571365][T11985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1749'. [ 309.571395][T11985] bond0: option arp_missed_max: invalid value (0) [ 309.571415][T11985] bond0: option arp_missed_max: allowed values 1 - 255 [ 309.756354][T11993] netlink: 'syz.2.1751': attribute type 1 has an invalid length. [ 309.756382][T11993] netlink: 'syz.2.1751': attribute type 2 has an invalid length. [ 309.923654][T11989] wg0 speed is unknown, defaulting to 1000 [ 312.896092][T12005] wg0 speed is unknown, defaulting to 1000 [ 313.045720][T12005] wg0 speed is unknown, defaulting to 1000 [ 313.046655][T12005] wg0 speed is unknown, defaulting to 1000 [ 313.083395][T12024] netlink: Only one type of NAT may be specified [ 313.083431][T12024] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 313.394207][T12029] FAULT_INJECTION: forcing a failure. [ 313.394207][T12029] name failslab, interval 1, probability 0, space 0, times 0 [ 313.394244][T12029] CPU: 0 UID: 0 PID: 12029 Comm: syz.2.1760 Not tainted syzkaller #0 PREEMPT(full) [ 313.394270][T12029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 313.394286][T12029] Call Trace: [ 313.394296][T12029] [ 313.394307][T12029] dump_stack_lvl+0xe8/0x150 [ 313.394345][T12029] should_fail_ex+0x410/0x560 [ 313.394381][T12029] should_failslab+0xa8/0x100 [ 313.394412][T12029] ? alloc_vfsmnt+0x23/0x410 [ 313.394440][T12029] kmem_cache_alloc_noprof+0xa1/0x600 [ 313.394468][T12029] ? alloc_vfsmnt+0x23/0x410 [ 313.394495][T12029] ? lock_acquire+0x115/0x350 [ 313.394523][T12029] alloc_vfsmnt+0x23/0x410 [ 313.394554][T12029] clone_mnt+0x4b/0x9b0 [ 313.394587][T12029] copy_tree+0x3d8/0x940 [ 313.394630][T12029] copy_mnt_ns+0x3de/0xcc0 [ 313.394668][T12029] ? rcu_is_watching+0x16/0xb0 [ 313.394700][T12029] ? __pfx_copy_mnt_ns+0x10/0x10 [ 313.394731][T12029] ? kmem_cache_alloc_noprof+0x31f/0x600 [ 313.394769][T12029] create_new_namespaces+0xcf/0x6b0 [ 313.394806][T12029] ? bpf_lsm_capable+0x9/0x20 [ 313.394829][T12029] ? security_capable+0x7e/0x2c0 [ 313.394869][T12029] unshare_nsproxy_namespaces+0x149/0x190 [ 313.394904][T12029] ksys_unshare+0x5a7/0x950 [ 313.394945][T12029] ? __pfx_ksys_unshare+0x10/0x10 [ 313.394978][T12029] ? __pfx_ksys_write+0x10/0x10 [ 313.395014][T12029] __x64_sys_unshare+0x38/0x50 [ 313.395045][T12029] do_syscall_64+0x166/0x520 [ 313.395077][T12029] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.395101][T12029] ? clear_bhb_loop+0x70/0xc0 [ 313.395129][T12029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.395160][T12029] RIP: 0033:0x7f67d039e1d9 [ 313.395182][T12029] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 313.395203][T12029] RSP: 002b:00007f67d1280028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 313.395228][T12029] RAX: ffffffffffffffda RBX: 00007f67d0626090 RCX: 00007f67d039e1d9 [ 313.395246][T12029] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020000 [ 313.395260][T12029] RBP: 00007f67d1280090 R08: 0000000000000000 R09: 0000000000000000 [ 313.395275][T12029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 313.395288][T12029] R13: 00007f67d0626128 R14: 00007f67d0626090 R15: 00007ffce0bcb4f8 [ 313.395324][T12029] [ 314.238817][T12051] ip6tnl0: Caught tx_queue_len zero misconfig [ 314.257687][T12005] infiniband syz1: set active [ 314.257706][T12005] infiniband syz1: added wg0 [ 314.270199][T12005] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 314.274344][T12005] infiniband syz1: Couldn't open port 1 [ 314.274540][T12005] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 314.274566][T12005] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 314.274597][T12005] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 314.279812][ T8558] wg0 speed is unknown, defaulting to 1000 [ 314.327856][T12050] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1765'. [ 314.352655][T12050] FAULT_INJECTION: forcing a failure. [ 314.352655][T12050] name failslab, interval 1, probability 0, space 0, times 0 [ 314.352693][T12050] CPU: 1 UID: 0 PID: 12050 Comm: syz.3.1765 Not tainted syzkaller #0 PREEMPT(full) [ 314.352719][T12050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 314.352734][T12050] Call Trace: [ 314.352744][T12050] [ 314.352754][T12050] dump_stack_lvl+0xe8/0x150 [ 314.352787][T12050] should_fail_ex+0x410/0x560 [ 314.352818][T12050] should_failslab+0xa8/0x100 [ 314.352848][T12050] __kmalloc_noprof+0xfe/0x720 [ 314.352872][T12050] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 314.352896][T12050] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 314.352930][T12050] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 314.352964][T12050] genl_family_rcv_msg_doit+0xda/0x340 [ 314.352996][T12050] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 314.353025][T12050] ? __pfx_genl_get_cmd+0x10/0x10 [ 314.353057][T12050] ? __dev_queue_xmit+0x29b/0x3920 [ 314.353102][T12050] genl_rcv_msg+0x614/0x7a0 [ 314.353138][T12050] ? __pfx_genl_rcv_msg+0x10/0x10 [ 314.353160][T12050] ? __pfx_ctrl_getfamily+0x10/0x10 [ 314.353212][T12050] netlink_rcv_skb+0x226/0x4a0 [ 314.353243][T12050] ? __pfx_genl_rcv_msg+0x10/0x10 [ 314.353268][T12050] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 314.353320][T12050] ? down_read+0x2be/0x330 [ 314.353356][T12050] genl_rcv+0x28/0x40 [ 314.353376][T12050] netlink_unicast+0x7bd/0x940 [ 314.353416][T12050] netlink_sendmsg+0x813/0xb40 [ 314.353462][T12050] ? __pfx_netlink_sendmsg+0x10/0x10 [ 314.353503][T12050] ? apparmor_socket_sendmsg+0x98/0x360 [ 314.353542][T12050] ? __pfx_netlink_sendmsg+0x10/0x10 [ 314.353573][T12050] sock_sendmsg_nosec+0x14e/0x190 [ 314.353607][T12050] __sys_sendto+0x408/0x5a0 [ 314.353648][T12050] ? __pfx___sys_sendto+0x10/0x10 [ 314.353680][T12050] ? errseq_sample+0x40/0x70 [ 314.353743][T12050] ? fd_install+0x94/0x3d0 [ 314.353775][T12050] ? fd_install+0x309/0x3d0 [ 314.353828][T12050] __x64_sys_sendto+0xde/0x100 [ 314.353868][T12050] do_syscall_64+0x166/0x520 [ 314.353898][T12050] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.353927][T12050] ? clear_bhb_loop+0x70/0xc0 [ 314.353968][T12050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.354021][T12050] RIP: 0033:0x7f5a8575ea0e [ 314.354072][T12050] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 314.354092][T12050] RSP: 002b:00007f5a865fce88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 314.354117][T12050] RAX: ffffffffffffffda RBX: 00007f5a865fe6c0 RCX: 00007f5a8575ea0e [ 314.354134][T12050] RDX: 0000000000000024 RSI: 00007f5a865fd000 RDI: 000000000000000a [ 314.354150][T12050] RBP: 0000000000000000 R08: 00007f5a865fcf04 R09: 000000000000000c [ 314.354163][T12050] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 314.354176][T12050] R13: 00007f5a865fcf58 R14: 00007f5a865fd000 R15: 0000000000000000 [ 314.354206][T12050] [ 314.728774][T12005] RDS/IB: syz1: added [ 314.728853][T12005] smc: adding ib device syz1 with port count 1 [ 314.728876][T12005] smc: ib device syz1 port 1 has no pnetid [ 314.728948][ T5950] wg0 speed is unknown, defaulting to 1000 [ 314.737361][T12005] wg0 speed is unknown, defaulting to 1000 [ 314.788212][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 315.101345][T12075] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1769'. [ 315.127373][T12075] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.127493][T12075] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.127810][T12075] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.127947][T12075] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.182657][ T5943] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 315.221392][ T5943] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 315.272109][T12078] ip_tables: iptables: counters copy to user failed while replacing table [ 315.309913][T12075] veth1_vlan: left promiscuous mode [ 315.311364][T12075] veth0_vlan: left promiscuous mode [ 315.313289][T12075] veth0_vlan: entered promiscuous mode [ 315.316065][T12075] veth1_vlan: entered promiscuous mode [ 315.346598][T12075] veth1_macvtap: left promiscuous mode [ 315.359006][T12075] veth0_macvtap: left promiscuous mode [ 315.362908][T12075] veth0_macvtap: entered promiscuous mode [ 315.364183][T12075] veth1_macvtap: entered promiscuous mode [ 315.411042][T12075] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 315.417125][T12075] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 315.442881][T12075] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 315.514662][T12075] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 315.650083][T12075] 8021q: adding VLAN 0 to HW filter on device bond1 [ 315.689286][ T5975] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 315.778309][ T5975] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 315.806071][T12005] wg0 speed is unknown, defaulting to 1000 [ 315.822627][ T85] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 315.822859][ T85] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 315.853487][ T85] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 315.853527][ T85] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.853742][ T85] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 315.853772][ T85] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.853985][ T85] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 315.854015][ T85] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.864676][ T30] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 315.940980][ T85] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 315.941132][ T85] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.109648][ T30] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 316.157042][T12089] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 316.160666][T12089] syzkaller0: entered promiscuous mode [ 316.160732][T12089] syzkaller0: entered allmulticast mode [ 316.331987][T12097] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 316.366228][T12005] wg0 speed is unknown, defaulting to 1000 [ 316.502273][ T5943] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 316.624399][T12005] wg0 speed is unknown, defaulting to 1000 [ 316.991863][T12005] wg0 speed is unknown, defaulting to 1000 [ 317.351252][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.517537][T12121] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1787'. [ 317.680855][T12121] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1787'. [ 317.680890][T12121] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1787'. [ 318.329086][T12145] xt_hashlimit: size too large, truncated to 1048576 [ 319.073750][T12167] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1798'. [ 319.118583][T12168] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1798'. [ 319.251634][T12174] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1801'. [ 319.297583][T12171] netlink: 'syz.1.1799': attribute type 18 has an invalid length. [ 319.797760][T12193] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1808'. [ 320.389771][T12211] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1816'. [ 320.390112][T12212] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1816'. [ 320.419562][T12214] FAULT_INJECTION: forcing a failure. [ 320.419562][T12214] name failslab, interval 1, probability 0, space 0, times 0 [ 320.419600][T12214] CPU: 1 UID: 0 PID: 12214 Comm: syz.0.1817 Not tainted syzkaller #0 PREEMPT(full) [ 320.419626][T12214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 320.419641][T12214] Call Trace: [ 320.419651][T12214] [ 320.419661][T12214] dump_stack_lvl+0xe8/0x150 [ 320.419701][T12214] should_fail_ex+0x410/0x560 [ 320.419741][T12214] should_failslab+0xa8/0x100 [ 320.419777][T12214] __kmalloc_noprof+0xfe/0x720 [ 320.419802][T12214] ? __kmalloc_cache_noprof+0x14d/0x600 [ 320.419827][T12214] ? nsim_fib_event_nb+0x283/0x11d0 [ 320.419854][T12214] ? nsim_fib_event_nb+0x283/0x11d0 [ 320.419890][T12214] nsim_fib_event_nb+0x283/0x11d0 [ 320.419922][T12214] ? lock_acquire+0x115/0x350 [ 320.419953][T12214] notifier_call_chain+0x1a5/0x3d0 [ 320.419994][T12214] ? atomic_notifier_call_chain+0x26/0x180 [ 320.420034][T12214] atomic_notifier_call_chain+0xda/0x180 [ 320.420074][T12214] call_fib_notifiers+0x31/0x60 [ 320.420101][T12214] call_fib6_multipath_entry_notifiers+0xf5/0x160 [ 320.420133][T12214] ? __pfx_call_fib6_multipath_entry_notifiers+0x10/0x10 [ 320.420169][T12214] ? inet6_rtm_newroute+0x1005/0x1a30 [ 320.420211][T12214] inet6_rtm_newroute+0x14f5/0x1a30 [ 320.420248][T12214] ? inet6_rtm_newroute+0x1005/0x1a30 [ 320.420293][T12214] ? kasan_quarantine_put+0xbb/0x1f0 [ 320.420322][T12214] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 320.420360][T12214] ? nlmon_xmit+0xb0/0x100 [ 320.420413][T12214] ? __dev_queue_xmit+0x29b/0x3920 [ 320.420479][T12214] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 320.420523][T12214] rtnetlink_rcv_msg+0x802/0xc00 [ 320.420564][T12214] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 320.420598][T12214] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 320.420638][T12214] ? __copy_skb_header+0xa3/0x4a0 [ 320.420676][T12214] netlink_rcv_skb+0x226/0x4a0 [ 320.420708][T12214] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 320.420748][T12214] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 320.420792][T12214] ? netlink_deliver_tap+0x2e/0x1b0 [ 320.420823][T12214] ? netlink_deliver_tap+0x2e/0x1b0 [ 320.420859][T12214] netlink_unicast+0x7bd/0x940 [ 320.420900][T12214] netlink_sendmsg+0x813/0xb40 [ 320.420941][T12214] ? __pfx_netlink_sendmsg+0x10/0x10 [ 320.420982][T12214] ? apparmor_socket_sendmsg+0x98/0x360 [ 320.421016][T12214] ? __pfx_netlink_sendmsg+0x10/0x10 [ 320.421046][T12214] sock_sendmsg_nosec+0x14e/0x190 [ 320.421080][T12214] ____sys_sendmsg+0x54e/0x850 [ 320.421110][T12214] ? __pfx_____sys_sendmsg+0x10/0x10 [ 320.421146][T12214] ? import_iovec+0x73/0xa0 [ 320.421184][T12214] ___sys_sendmsg+0x2a5/0x360 [ 320.421206][T12214] ? __lock_acquire+0x747/0x2de0 [ 320.421236][T12214] ? __pfx____sys_sendmsg+0x10/0x10 [ 320.421267][T12214] ? kstrtouint+0x6e/0xe0 [ 320.421324][T12214] ? __fget_files+0x2a/0x420 [ 320.421358][T12214] ? __fget_files+0x3a2/0x420 [ 320.421404][T12214] __sys_sendmmsg+0x273/0x4d0 [ 320.421436][T12214] ? __pfx___sys_sendmmsg+0x10/0x10 [ 320.421471][T12214] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 320.421537][T12214] ? ksys_write+0x242/0x270 [ 320.421564][T12214] ? __pfx_ksys_write+0x10/0x10 [ 320.421595][T12214] __x64_sys_sendmmsg+0xa0/0xc0 [ 320.421623][T12214] do_syscall_64+0x166/0x520 [ 320.421653][T12214] ? trace_irq_disable+0x3b/0x140 [ 320.421678][T12214] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.421702][T12214] ? clear_bhb_loop+0x70/0xc0 [ 320.421730][T12214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.421754][T12214] RIP: 0033:0x7f5f24f9e1d9 [ 320.421775][T12214] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 320.421795][T12214] RSP: 002b:00007f5f25ee3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 320.421820][T12214] RAX: ffffffffffffffda RBX: 00007f5f25225fa0 RCX: 00007f5f24f9e1d9 [ 320.421837][T12214] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000003 [ 320.421853][T12214] RBP: 00007f5f25ee3090 R08: 0000000000000000 R09: 0000000000000000 [ 320.421868][T12214] R10: 00000000000000fc R11: 0000000000000246 R12: 0000000000000002 [ 320.421882][T12214] R13: 00007f5f25226038 R14: 00007f5f25225fa0 R15: 00007ffe362a2688 [ 320.421920][T12214] [ 320.899496][T12216] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1819'. [ 321.064109][T12224] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1820'. [ 321.220906][T12232] FAULT_INJECTION: forcing a failure. [ 321.220906][T12232] name failslab, interval 1, probability 0, space 0, times 0 [ 321.220943][T12232] CPU: 1 UID: 0 PID: 12232 Comm: syz.0.1822 Not tainted syzkaller #0 PREEMPT(full) [ 321.220968][T12232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 321.220983][T12232] Call Trace: [ 321.221002][T12232] [ 321.221013][T12232] dump_stack_lvl+0xe8/0x150 [ 321.221051][T12232] should_fail_ex+0x410/0x560 [ 321.221087][T12232] ? __alloc_skb+0x1db/0x7a0 [ 321.221125][T12232] should_failslab+0xa8/0x100 [ 321.221158][T12232] ? __alloc_skb+0x1db/0x7a0 [ 321.221190][T12232] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 321.221216][T12232] ? __alloc_skb+0x18d/0x7a0 [ 321.221250][T12232] ? __alloc_skb+0x1db/0x7a0 [ 321.221291][T12232] __alloc_skb+0x1db/0x7a0 [ 321.221331][T12232] netlink_dump+0x1e7/0xee0 [ 321.221360][T12232] ? __netlink_lookup+0xc6/0x8b0 [ 321.221403][T12232] ? __pfx_netlink_dump+0x10/0x10 [ 321.221445][T12232] ? netlink_lookup+0x30/0x200 [ 321.221473][T12232] ? netlink_lookup+0x30/0x200 [ 321.221510][T12232] __netlink_dump_start+0x589/0x7b0 [ 321.221547][T12232] rtnetlink_rcv_msg+0xa48/0xc00 [ 321.221586][T12232] ? __pfx_tc_dump_action+0x10/0x10 [ 321.221610][T12232] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 321.221645][T12232] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 321.221682][T12232] ? __pfx_rtnl_dumpit+0x10/0x10 [ 321.221717][T12232] ? __pfx_tc_dump_action+0x10/0x10 [ 321.221754][T12232] netlink_rcv_skb+0x226/0x4a0 [ 321.221785][T12232] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 321.221823][T12232] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 321.221868][T12232] ? netlink_deliver_tap+0x2e/0x1b0 [ 321.221899][T12232] ? netlink_deliver_tap+0x2e/0x1b0 [ 321.221935][T12232] netlink_unicast+0x7bd/0x940 [ 321.221976][T12232] netlink_sendmsg+0x813/0xb40 [ 321.222025][T12232] ? __pfx_netlink_sendmsg+0x10/0x10 [ 321.222066][T12232] ? apparmor_socket_sendmsg+0x98/0x360 [ 321.222099][T12232] ? __pfx_netlink_sendmsg+0x10/0x10 [ 321.222128][T12232] sock_sendmsg_nosec+0x14e/0x190 [ 321.222162][T12232] ____sys_sendmsg+0x54e/0x850 [ 321.222193][T12232] ? __pfx_____sys_sendmsg+0x10/0x10 [ 321.222229][T12232] ? import_iovec+0x73/0xa0 [ 321.222267][T12232] ___sys_sendmsg+0x2a5/0x360 [ 321.222290][T12232] ? __lock_acquire+0x747/0x2de0 [ 321.222321][T12232] ? __pfx____sys_sendmsg+0x10/0x10 [ 321.222388][T12232] ? __fget_files+0x2a/0x420 [ 321.222421][T12232] ? __fget_files+0x3a2/0x420 [ 321.222468][T12232] __x64_sys_sendmsg+0x1b1/0x290 [ 321.222495][T12232] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 321.222546][T12232] do_syscall_64+0x166/0x520 [ 321.222577][T12232] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.222601][T12232] ? clear_bhb_loop+0x70/0xc0 [ 321.222629][T12232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.222653][T12232] RIP: 0033:0x7f5f24f9e1d9 [ 321.222674][T12232] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 321.222695][T12232] RSP: 002b:00007f5f25ec2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 321.222719][T12232] RAX: ffffffffffffffda RBX: 00007f5f25226090 RCX: 00007f5f24f9e1d9 [ 321.222737][T12232] RDX: 0000000010000084 RSI: 00002000000002c0 RDI: 0000000000000008 [ 321.222753][T12232] RBP: 00007f5f25ec2090 R08: 0000000000000000 R09: 0000000000000000 [ 321.222768][T12232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 321.222783][T12232] R13: 00007f5f25226128 R14: 00007f5f25226090 R15: 00007ffe362a2688 [ 321.222820][T12232] [ 322.195581][T12255] syzkaller0: entered promiscuous mode [ 322.195608][T12255] syzkaller0: entered allmulticast mode [ 322.223241][T12255] tipc: Enabled bearer , priority 0 [ 322.242135][T12253] tipc: Resetting bearer [ 322.342672][T12253] tipc: Disabling bearer [ 322.364978][T12259] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1829'. [ 322.377097][T12259] syzkaller0: entered promiscuous mode [ 322.377125][T12259] syzkaller0: entered allmulticast mode [ 322.430705][T12262] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 322.531429][T12265] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1831'. [ 322.636566][ T984] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.636592][ T984] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.849816][T12276] ip_vti0: left promiscuous mode [ 323.187624][T12286] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1837'. [ 323.375107][T12295] digital: digital_start_poll: Unknown protocol [ 324.346380][T12321] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1849'. [ 324.396717][T12327] ip_tables: iptables: counters copy to user failed while replacing table [ 324.536775][T12332] netlink: 'syz.4.1851': attribute type 4 has an invalid length. [ 324.536804][T12332] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1851'. [ 324.570081][T12332] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 324.798163][T12344] netlink: 'syz.4.1857': attribute type 32 has an invalid length. [ 324.798190][T12344] __nla_validate_parse: 1 callbacks suppressed [ 324.798204][T12344] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1857'. [ 324.890770][T12344] bond6: option coupled_control: invalid value (10) [ 325.596177][T12344] bond6 (unregistering): Released all slaves [ 325.789524][T12361] x_tables: duplicate underflow at hook 2 [ 325.986506][T12367] FAULT_INJECTION: forcing a failure. [ 325.986506][T12367] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 325.986543][T12367] CPU: 1 UID: 0 PID: 12367 Comm: syz.2.1864 Not tainted syzkaller #0 PREEMPT(full) [ 325.986569][T12367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 325.986584][T12367] Call Trace: [ 325.986593][T12367] [ 325.986604][T12367] dump_stack_lvl+0xe8/0x150 [ 325.986652][T12367] should_fail_ex+0x410/0x560 [ 325.986691][T12367] prepare_alloc_pages+0x223/0x600 [ 325.986727][T12367] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 325.986762][T12367] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 325.986796][T12367] ? __pfx_policy_nodemask+0x10/0x10 [ 325.986824][T12367] ? __update_page_owner_handle+0x512/0x580 [ 325.986859][T12367] ? __lock_acquire+0x747/0x2de0 [ 325.986887][T12367] alloc_pages_mpol+0x21e/0x390 [ 325.986925][T12367] folio_alloc_mpol_noprof+0x39/0x160 [ 325.986961][T12367] vma_alloc_folio_noprof+0xe1/0x1e0 [ 325.986997][T12367] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 325.987035][T12367] ? lock_acquire+0x115/0x350 [ 325.987068][T12367] do_pte_missing+0x173a/0x34b0 [ 325.987115][T12367] handle_mm_fault+0x1a53/0x3750 [ 325.987160][T12367] ? handle_mm_fault+0xf1/0x3750 [ 325.987207][T12367] ? __pfx_handle_mm_fault+0x10/0x10 [ 325.987257][T12367] ? __lock_acquire+0x747/0x2de0 [ 325.987287][T12367] ? lock_mm_and_find_vma+0xa7/0x340 [ 325.987316][T12367] do_user_addr_fault+0x746/0x1340 [ 325.987359][T12367] exc_page_fault+0x6a/0xc0 [ 325.987392][T12367] asm_exc_page_fault+0x26/0x30 [ 325.987414][T12367] RIP: 0010:rep_movs_alternative+0x33/0xa0 [ 325.987440][T12367] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 3d 68 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 325.987460][T12367] RSP: 0018:ffffc9000532f6d8 EFLAGS: 00050216 [ 325.987482][T12367] RAX: 74756f20706d756a RBX: 0000000000000026 RCX: 0000000000000026 [ 325.987498][T12367] RDX: 0000000000000000 RSI: ffff888051a308ac RDI: 0000200000001f80 [ 325.987514][T12367] RBP: dffffc0000000000 R08: ffff888051a308d1 R09: 1ffff1100a34611a [ 325.987532][T12367] R10: dffffc0000000000 R11: ffffed100a34611b R12: 0000200000001fa6 [ 325.987549][T12367] R13: 00007ffffffff000 R14: ffff888051a308ac R15: 0000200000001f80 [ 325.987587][T12367] _copy_to_user+0x8a/0xb0 [ 325.987626][T12367] bpf_verifier_vlog+0x3a2/0x900 [ 325.987674][T12367] verbose+0x11d/0x1a0 [ 325.987704][T12367] ? __pfx_verbose+0x10/0x10 [ 325.987724][T12367] ? bpf_prepare_btf_info+0x829/0x1260 [ 325.987767][T12367] check_subprogs+0x6dc/0x770 [ 325.987808][T12367] bpf_check+0x18a1/0x2ef0 [ 325.987857][T12367] ? __pfx_bpf_check+0x10/0x10 [ 325.987888][T12367] ? bpf_obj_name_cpy+0x194/0x1e0 [ 325.987928][T12367] bpf_prog_load+0x14d6/0x1c20 [ 325.987971][T12367] ? __pfx_bpf_prog_load+0x10/0x10 [ 325.988025][T12367] __sys_bpf+0xd0d/0xd90 [ 325.988063][T12367] ? __pfx___sys_bpf+0x10/0x10 [ 325.988103][T12367] ? __fget_files+0x2a/0x420 [ 325.988158][T12367] ? ksys_write+0x242/0x270 [ 325.988184][T12367] ? __pfx_ksys_write+0x10/0x10 [ 325.988215][T12367] __x64_sys_bpf+0xba/0xd0 [ 325.988244][T12367] do_syscall_64+0x166/0x520 [ 325.988272][T12367] ? trace_irq_disable+0x3b/0x140 [ 325.988296][T12367] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.988319][T12367] ? clear_bhb_loop+0x70/0xc0 [ 325.988347][T12367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.988369][T12367] RIP: 0033:0x7f67d039e1d9 [ 325.988388][T12367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 325.988407][T12367] RSP: 002b:00007f67d12a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 325.988429][T12367] RAX: ffffffffffffffda RBX: 00007f67d0625fa0 RCX: 00007f67d039e1d9 [ 325.988445][T12367] RDX: 0000000000000094 RSI: 0000200000000340 RDI: 0000000000000005 [ 325.988460][T12367] RBP: 00007f67d12a1090 R08: 0000000000000000 R09: 0000000000000000 [ 325.988474][T12367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 325.988488][T12367] R13: 00007f67d0626038 R14: 00007f67d0625fa0 R15: 00007ffce0bcb4f8 [ 325.988524][T12367] [ 326.146938][T12365] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 326.175949][T12365] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1862'. [ 326.237632][T12368] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1862'. [ 326.453923][T12369] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1862'. [ 326.503554][T12376] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1867'. [ 326.626885][T12377] syzkaller1: entered promiscuous mode [ 326.626913][T12377] syzkaller1: entered allmulticast mode [ 327.489196][T12415] FAULT_INJECTION: forcing a failure. [ 327.489196][T12415] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 327.489236][T12415] CPU: 0 UID: 0 PID: 12415 Comm: syz.3.1875 Not tainted syzkaller #0 PREEMPT(full) [ 327.489262][T12415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 327.489277][T12415] Call Trace: [ 327.489287][T12415] [ 327.489298][T12415] dump_stack_lvl+0xe8/0x150 [ 327.489336][T12415] should_fail_ex+0x410/0x560 [ 327.489372][T12415] _copy_from_user+0x2d/0xb0 [ 327.489406][T12415] ___sys_recvmsg+0x173/0x5a0 [ 327.489440][T12415] ? __pfx____sys_recvmsg+0x10/0x10 [ 327.489473][T12415] ? lock_acquire+0x115/0x350 [ 327.489532][T12415] do_recvmmsg+0x31a/0x7f0 [ 327.489567][T12415] ? __pfx_do_recvmmsg+0x10/0x10 [ 327.489606][T12415] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 327.489640][T12415] ? __fget_files+0x3a2/0x420 [ 327.489688][T12415] __x64_sys_recvmmsg+0x198/0x250 [ 327.489721][T12415] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 327.489762][T12415] do_syscall_64+0x166/0x520 [ 327.489791][T12415] ? trace_irq_disable+0x3b/0x140 [ 327.489815][T12415] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.489838][T12415] ? clear_bhb_loop+0x70/0xc0 [ 327.489866][T12415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.489889][T12415] RIP: 0033:0x7f5a8579e1d9 [ 327.489912][T12415] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 327.489930][T12415] RSP: 002b:00007f5a865dd028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 327.489953][T12415] RAX: ffffffffffffffda RBX: 00007f5a85a26090 RCX: 00007f5a8579e1d9 [ 327.489970][T12415] RDX: 0000000000000a0d RSI: 00002000000066c0 RDI: 0000000000000004 [ 327.489986][T12415] RBP: 00007f5a865dd090 R08: 0000000000000000 R09: 0000000000000000 [ 327.490000][T12415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 327.490013][T12415] R13: 00007f5a85a26128 R14: 00007f5a85a26090 R15: 00007fff114a0578 [ 327.490050][T12415] [ 327.550186][T12416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1876'. [ 327.550253][T12416] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1876'. [ 327.593423][ C1] ip6_tnl_xmit_ctl: 1 callbacks suppressed [ 327.593449][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 327.759358][T12409] 8021q: adding VLAN 0 to HW filter on device bond3 [ 327.833711][T12416] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.863910][T12416] bond3: (slave bond0): making interface the new active one [ 327.891171][T12416] bond3: (slave bond0): Enslaving as an active interface with an up link [ 327.898373][T12419] netlink: 'syz.2.1876': attribute type 2 has an invalid length. [ 327.898444][T12419] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1876'. [ 328.033330][T12419] : entered promiscuous mode [ 328.051209][T12424] rdma_rxe: rxe_newlink: failed to add wg0 [ 328.090620][T12409] bond3 (unregistering): (slave bond0): Releasing active interface [ 328.096126][T12409] bond3 (unregistering): Released all slaves [ 328.228674][ C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 328.326293][T12435] tunl0: Caught tx_queue_len zero misconfig [ 328.345368][T12435] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1882'. [ 328.694555][T12453] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1887'. [ 328.694600][T12453] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 328.924644][T12453] syzkaller1: entered promiscuous mode [ 328.924671][T12453] syzkaller1: entered allmulticast mode [ 329.183107][ T984] tipc: Subscription rejected, illegal request [ 331.341957][T12450] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 331.346290][T12437] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 331.438244][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 331.664648][T12495] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1899'. [ 331.772323][T12502] syzkaller0: entered promiscuous mode [ 331.772350][T12502] syzkaller0: entered allmulticast mode [ 331.823840][T12500] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 332.293844][T12519] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1908'. [ 332.293873][T12519] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1908'. [ 332.293892][T12519] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1908'. [ 332.754267][T12544] syzkaller0: entered promiscuous mode [ 332.754296][T12544] syzkaller0: entered allmulticast mode [ 333.211104][T12561] netlink: 'syz.4.1919': attribute type 10 has an invalid length. [ 335.789996][T12561] bond0: (slave netdevsim1): Releasing backup interface [ 335.790608][T12561] netdevsim netdevsim4 netdevsim1: left promiscuous mode [ 335.792479][T12561] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 335.793314][T12561] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 335.797432][T12561] team0: Port device netdevsim1 added [ 335.797780][T12569] syzkaller0: entered promiscuous mode [ 335.797800][T12569] syzkaller0: entered allmulticast mode [ 336.046457][T12597] netlink: 'syz.1.1926': attribute type 61 has an invalid length. [ 336.046487][T12597] netlink: 'syz.1.1926': attribute type 268 has an invalid length. [ 336.226577][T12603] FAULT_INJECTION: forcing a failure. [ 336.226577][T12603] name failslab, interval 1, probability 0, space 0, times 0 [ 336.226615][T12603] CPU: 0 UID: 0 PID: 12603 Comm: syz.3.1928 Not tainted syzkaller #0 PREEMPT(full) [ 336.226642][T12603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 336.226658][T12603] Call Trace: [ 336.226667][T12603] [ 336.226677][T12603] dump_stack_lvl+0xe8/0x150 [ 336.226718][T12603] should_fail_ex+0x410/0x560 [ 336.226755][T12603] should_failslab+0xa8/0x100 [ 336.226790][T12603] __kmalloc_noprof+0xfe/0x720 [ 336.226818][T12603] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 336.226844][T12603] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 336.226879][T12603] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 336.226914][T12603] genl_family_rcv_msg_doit+0xda/0x340 [ 336.226956][T12603] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 336.226986][T12603] ? __pfx_genl_get_cmd+0x10/0x10 [ 336.227019][T12603] ? __dev_queue_xmit+0x29b/0x3920 [ 336.227066][T12603] genl_rcv_msg+0x614/0x7a0 [ 336.227098][T12603] ? __pfx_genl_rcv_msg+0x10/0x10 [ 336.227121][T12603] ? __pfx_ctrl_getfamily+0x10/0x10 [ 336.227174][T12603] netlink_rcv_skb+0x226/0x4a0 [ 336.227205][T12603] ? __pfx_genl_rcv_msg+0x10/0x10 [ 336.227231][T12603] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 336.227283][T12603] ? down_read+0x2be/0x330 [ 336.227323][T12603] genl_rcv+0x28/0x40 [ 336.227343][T12603] netlink_unicast+0x7bd/0x940 [ 336.227385][T12603] netlink_sendmsg+0x813/0xb40 [ 336.227428][T12603] ? __pfx_netlink_sendmsg+0x10/0x10 [ 336.227464][T12603] ? apparmor_socket_sendmsg+0x98/0x360 [ 336.227498][T12603] ? __pfx_netlink_sendmsg+0x10/0x10 [ 336.227528][T12603] sock_sendmsg_nosec+0x14e/0x190 [ 336.227563][T12603] __sys_sendto+0x408/0x5a0 [ 336.227605][T12603] ? __pfx___sys_sendto+0x10/0x10 [ 336.227676][T12603] ? do_user_addr_fault+0xc4c/0x1340 [ 336.227706][T12603] __x64_sys_sendto+0xde/0x100 [ 336.227746][T12603] do_syscall_64+0x166/0x520 [ 336.227777][T12603] ? trace_irq_disable+0x3b/0x140 [ 336.227801][T12603] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.227827][T12603] ? clear_bhb_loop+0x70/0xc0 [ 336.227855][T12603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.227879][T12603] RIP: 0033:0x7f5a8575ea0e [ 336.227901][T12603] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 336.227921][T12603] RSP: 002b:00007f5a865fce88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 336.227955][T12603] RAX: ffffffffffffffda RBX: 00007f5a865fe6c0 RCX: 00007f5a8575ea0e [ 336.227973][T12603] RDX: 0000000000000020 RSI: 00007f5a865fd000 RDI: 0000000000000007 [ 336.227987][T12603] RBP: 0000000000000000 R08: 00007f5a865fcf04 R09: 000000000000000c [ 336.228000][T12603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 336.228014][T12603] R13: 00007f5a865fcf58 R14: 00007f5a865fd000 R15: 0000000000000000 [ 336.228050][T12603] [ 337.308655][T12607] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.910627][T12650] FAULT_INJECTION: forcing a failure. [ 337.910627][T12650] name failslab, interval 1, probability 0, space 0, times 0 [ 337.912486][T12650] CPU: 1 UID: 0 PID: 12650 Comm: syz.0.1944 Not tainted syzkaller #0 PREEMPT(full) [ 337.912517][T12650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 337.912531][T12650] Call Trace: [ 337.912541][T12650] [ 337.912551][T12650] dump_stack_lvl+0xe8/0x150 [ 337.912590][T12650] should_fail_ex+0x410/0x560 [ 337.912627][T12650] should_failslab+0xa8/0x100 [ 337.912661][T12650] __kmalloc_node_noprof+0x100/0x720 [ 337.912687][T12650] ? __get_vm_area_node+0x200/0x2f0 [ 337.912723][T12650] ? __get_vm_area_node+0x283/0x2f0 [ 337.912754][T12650] ? __vmalloc_node_range_noprof+0x5b4/0x1540 [ 337.912777][T12650] ? __vmalloc_node_range_noprof+0x5b4/0x1540 [ 337.912810][T12650] __vmalloc_node_range_noprof+0x5b4/0x1540 [ 337.912865][T12650] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 337.912890][T12650] ? __kasan_kmalloc+0x93/0xb0 [ 337.912921][T12650] ? __kmalloc_cache_noprof+0x321/0x600 [ 337.912947][T12650] ? __kmalloc_cache_noprof+0x14d/0x600 [ 337.912970][T12650] ? bpf_diag_init+0x87/0x140 [ 337.912998][T12650] ? bpf_diag_init+0x87/0x140 [ 337.913029][T12650] ? bpf_check+0x115b/0x2ef0 [ 337.913055][T12650] __vmalloc_noprof+0xd2/0x120 [ 337.913078][T12650] ? bpf_check+0x115b/0x2ef0 [ 337.913107][T12650] bpf_check+0x115b/0x2ef0 [ 337.913155][T12650] ? __pfx_bpf_check+0x10/0x10 [ 337.913185][T12650] ? bpf_obj_name_cpy+0x194/0x1e0 [ 337.913223][T12650] bpf_prog_load+0x14d6/0x1c20 [ 337.913274][T12650] ? __pfx_bpf_prog_load+0x10/0x10 [ 337.913333][T12650] __sys_bpf+0xd0d/0xd90 [ 337.913370][T12650] ? __pfx___sys_bpf+0x10/0x10 [ 337.913410][T12650] ? __fget_files+0x2a/0x420 [ 337.913464][T12650] ? ksys_write+0x242/0x270 [ 337.913490][T12650] ? __pfx_ksys_write+0x10/0x10 [ 337.913524][T12650] __x64_sys_bpf+0xba/0xd0 [ 337.913552][T12650] do_syscall_64+0x166/0x520 [ 337.913581][T12650] ? trace_irq_disable+0x3b/0x140 [ 337.913605][T12650] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.913629][T12650] ? clear_bhb_loop+0x70/0xc0 [ 337.913657][T12650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.913679][T12650] RIP: 0033:0x7f5f24f9e1d9 [ 337.913701][T12650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 337.913721][T12650] RSP: 002b:00007f5f25ee3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 337.913747][T12650] RAX: ffffffffffffffda RBX: 00007f5f25225fa0 RCX: 00007f5f24f9e1d9 [ 337.913764][T12650] RDX: 0000000000000094 RSI: 0000200000000d80 RDI: 0000000000000005 [ 337.913780][T12650] RBP: 00007f5f25ee3090 R08: 0000000000000000 R09: 0000000000000000 [ 337.913795][T12650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 337.913809][T12650] R13: 00007f5f25226038 R14: 00007f5f25225fa0 R15: 00007ffe362a2688 [ 337.913846][T12650] [ 337.914368][T12650] syz.0.1944: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 337.914437][T12650] CPU: 1 UID: 0 PID: 12650 Comm: syz.0.1944 Not tainted syzkaller #0 PREEMPT(full) [ 337.914463][T12650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 337.914477][T12650] Call Trace: [ 337.914487][T12650] [ 337.914497][T12650] dump_stack_lvl+0xe8/0x150 [ 337.914532][T12650] warn_alloc+0x24d/0x270 [ 337.914564][T12650] ? __pfx_warn_alloc+0x10/0x10 [ 337.914597][T12650] ? __kmalloc_node_noprof+0x4d7/0x720 [ 337.914621][T12650] ? __get_vm_area_node+0x200/0x2f0 [ 337.914656][T12650] ? __get_vm_area_node+0x283/0x2f0 [ 337.914689][T12650] ? __vmalloc_node_range_noprof+0x5b4/0x1540 [ 337.914712][T12650] ? __vmalloc_node_range_noprof+0x5b4/0x1540 [ 337.914744][T12650] __vmalloc_node_range_noprof+0x969/0x1540 [ 337.914801][T12650] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 337.914825][T12650] ? __kasan_kmalloc+0x93/0xb0 [ 337.914856][T12650] ? __kmalloc_cache_noprof+0x321/0x600 [ 337.914882][T12650] ? __kmalloc_cache_noprof+0x14d/0x600 [ 337.914907][T12650] ? bpf_diag_init+0x87/0x140 [ 337.914934][T12650] ? bpf_diag_init+0x87/0x140 [ 337.914969][T12650] ? bpf_check+0x115b/0x2ef0 [ 337.914994][T12650] __vmalloc_noprof+0xd2/0x120 [ 337.915017][T12650] ? bpf_check+0x115b/0x2ef0 [ 337.915047][T12650] bpf_check+0x115b/0x2ef0 [ 337.915093][T12650] ? __pfx_bpf_check+0x10/0x10 [ 337.915124][T12650] ? bpf_obj_name_cpy+0x194/0x1e0 [ 337.915162][T12650] bpf_prog_load+0x14d6/0x1c20 [ 337.915203][T12650] ? __pfx_bpf_prog_load+0x10/0x10 [ 337.915268][T12650] __sys_bpf+0xd0d/0xd90 [ 337.915307][T12650] ? __pfx___sys_bpf+0x10/0x10 [ 337.915347][T12650] ? __fget_files+0x2a/0x420 [ 337.915401][T12650] ? ksys_write+0x242/0x270 [ 337.915426][T12650] ? __pfx_ksys_write+0x10/0x10 [ 337.915455][T12650] __x64_sys_bpf+0xba/0xd0 [ 337.915484][T12650] do_syscall_64+0x166/0x520 [ 337.915514][T12650] ? trace_irq_disable+0x3b/0x140 [ 337.915538][T12650] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.915563][T12650] ? clear_bhb_loop+0x70/0xc0 [ 337.915591][T12650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.915614][T12650] RIP: 0033:0x7f5f24f9e1d9 [ 337.915635][T12650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 337.915655][T12650] RSP: 002b:00007f5f25ee3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 337.915679][T12650] RAX: ffffffffffffffda RBX: 00007f5f25225fa0 RCX: 00007f5f24f9e1d9 [ 337.915696][T12650] RDX: 0000000000000094 RSI: 0000200000000d80 RDI: 0000000000000005 [ 337.915712][T12650] RBP: 00007f5f25ee3090 R08: 0000000000000000 R09: 0000000000000000 [ 337.915728][T12650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 337.915742][T12650] R13: 00007f5f25226038 R14: 00007f5f25225fa0 R15: 00007ffe362a2688 [ 337.915779][T12650] [ 337.916981][T12650] Mem-Info: [ 337.916994][T12650] active_anon:5027 inactive_anon:0 isolated_anon:0 [ 337.916994][T12650] active_file:0 inactive_file:44243 isolated_file:0 [ 337.916994][T12650] unevictable:0 dirty:320 writeback:0 [ 337.916994][T12650] slab_reclaimable:11005 slab_unreclaimable:119011 [ 337.916994][T12650] mapped:30205 shmem:562 pagetables:1144 [ 337.916994][T12650] sec_pagetables:0 bounce:0 [ 337.916994][T12650] kernel_misc_reclaimable:0 [ 337.916994][T12650] free:1278500 free_pcp:13109 free_cma:0 [ 337.917052][T12650] Node 0 active_anon:20108kB inactive_anon:0kB active_file:0kB inactive_file:176768kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:120820kB dirty:1280kB writeback:0kB shmem:2248kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13400kB pagetables:4460kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 337.917112][T12650] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 337.917170][T12650] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 337.917235][T12650] lowmem_reserve[]: 0 2468 2468 2468 2468 [ 337.917288][T12650] Node 0 DMA32 free:1156216kB boost:0kB min:33984kB low:42480kB high:50976kB reserved_highatomic:0kB free_highatomic:0kB active_anon:20108kB inactive_anon:0kB active_file:0kB inactive_file:176768kB unevictable:0kB writepending:1280kB zspages:0kB present:3129332kB managed:2527708kB mlocked:0kB bounce:0kB free_pcp:52436kB local_pcp:25460kB free_cma:0kB [ 337.917355][T12650] lowmem_reserve[]: 0 0 0 0 0 [ 337.917394][T12650] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 337.917472][T12650] lowmem_reserve[]: 0 0 0 0 0 [ 337.917515][T12650] Node 1 Normal free:3942424kB boost:0kB min:55916kB low:69892kB high:83868kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 337.917579][T12650] lowmem_reserve[]: 0 0 0 0 0 [ 337.917619][T12650] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 337.917752][T12650] Node 0 DMA32: 2172*4kB (UM) 584*8kB (UM) 326*16kB (UME) 207*32kB (UM) 85*64kB (UME) 39*128kB (UME) 11*256kB (UM) 7*512kB (M) 2*1024kB (M) 7*2048kB (UME) 268*4096kB (UM) = 1156144kB [ 337.917934][T12650] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 337.923725][T12650] Node 1 Normal: 4*4kB (UM) 3*8kB (UM) 5*16kB (UM) 9*32kB (UM) 6*64kB (UM) 4*128kB (UM) 5*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 0*2048kB 961*4096kB (M) = 3942424kB [ 337.929546][T12650] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 337.929601][T12650] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 337.929645][T12650] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 337.929697][T12650] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 337.929748][T12650] 44801 total pagecache pages [ 337.929764][T12650] 0 pages in swap cache [ 337.929785][T12650] Free swap = 124996kB [ 337.929807][T12650] Total swap = 124996kB [ 337.929832][T12650] 2097051 pages RAM [ 337.929861][T12650] 0 pages HighMem/MovableOnly [ 337.929882][T12650] 433508 pages reserved [ 337.929904][T12650] 0 pages cma reserved [ 339.021536][T12661] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1946'. [ 339.021567][T12661] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1946'. [ 339.104660][T12665] FAULT_INJECTION: forcing a failure. [ 339.104660][T12665] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 339.104697][T12665] CPU: 1 UID: 0 PID: 12665 Comm: syz.3.1949 Not tainted syzkaller #0 PREEMPT(full) [ 339.104723][T12665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 339.104738][T12665] Call Trace: [ 339.104748][T12665] [ 339.104758][T12665] dump_stack_lvl+0xe8/0x150 [ 339.104797][T12665] should_fail_ex+0x410/0x560 [ 339.104834][T12665] _copy_to_user+0x31/0xb0 [ 339.104873][T12665] simple_read_from_buffer+0xe1/0x170 [ 339.104917][T12665] proc_fail_nth_read+0x1bb/0x230 [ 339.104942][T12665] ? common_file_perm+0x20e/0x2b0 [ 339.104978][T12665] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 339.105008][T12665] ? rw_verify_area+0x24a/0x4c0 [ 339.105034][T12665] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 339.105059][T12665] vfs_read+0x213/0xa80 [ 339.105089][T12665] ? __pfx___mutex_lock+0x10/0x10 [ 339.105122][T12665] ? __pfx_vfs_read+0x10/0x10 [ 339.105146][T12665] ? __fget_files+0x2a/0x420 [ 339.105185][T12665] ? __fget_files+0x3a2/0x420 [ 339.105218][T12665] ? __fget_files+0x2a/0x420 [ 339.105263][T12665] ksys_read+0x150/0x270 [ 339.105290][T12665] ? __pfx_ksys_read+0x10/0x10 [ 339.105328][T12665] do_syscall_64+0x166/0x520 [ 339.105359][T12665] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.105387][T12665] ? clear_bhb_loop+0x70/0xc0 [ 339.105417][T12665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.105440][T12665] RIP: 0033:0x7f5a8575ea0e [ 339.105461][T12665] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 339.105481][T12665] RSP: 002b:00007f5a865fdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 339.105505][T12665] RAX: ffffffffffffffda RBX: 00007f5a865fe6c0 RCX: 00007f5a8575ea0e [ 339.105524][T12665] RDX: 000000000000000f RSI: 00007f5a865fe0a0 RDI: 0000000000000003 [ 339.105539][T12665] RBP: 00007f5a865fe090 R08: 0000000000000000 R09: 0000000000000000 [ 339.105554][T12665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.105569][T12665] R13: 00007f5a85a26038 R14: 00007f5a85a25fa0 R15: 00007fff114a0578 [ 339.105608][T12665] [ 339.474694][T12659] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 339.847128][T12684] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1955'. [ 339.876816][T12660] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.907661][T12660] bridge_slave_0 (unregistering): left allmulticast mode [ 339.907690][T12660] bridge_slave_0 (unregistering): left promiscuous mode [ 339.907770][T12660] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.949413][T12714] FAULT_INJECTION: forcing a failure. [ 340.949413][T12714] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 340.949450][T12714] CPU: 1 UID: 0 PID: 12714 Comm: syz.3.1962 Not tainted syzkaller #0 PREEMPT(full) [ 340.949477][T12714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 340.949491][T12714] Call Trace: [ 340.949501][T12714] [ 340.949512][T12714] dump_stack_lvl+0xe8/0x150 [ 340.949555][T12714] should_fail_ex+0x410/0x560 [ 340.949592][T12714] prepare_alloc_pages+0x223/0x600 [ 340.949627][T12714] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 340.949661][T12714] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 340.949688][T12714] ? __alloc_frozen_pages_noprof+0x29e/0x5a0 [ 340.949720][T12714] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 340.949753][T12714] ? __pfx_policy_nodemask+0x10/0x10 [ 340.949783][T12714] ? __get_vm_area_node+0x155/0x2f0 [ 340.949815][T12714] ? __vmalloc_node_range_noprof+0x343/0x1540 [ 340.949837][T12714] ? __vmalloc_noprof+0xd2/0x120 [ 340.949863][T12714] __alloc_pages_noprof+0x10/0x100 [ 340.949892][T12714] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 340.949930][T12714] ? alloc_pages_noprof+0x140/0x2b0 [ 340.949967][T12714] __kasan_populate_vmalloc+0xb7/0x1c0 [ 340.950001][T12714] alloc_vmap_area+0xd1a/0x1420 [ 340.950053][T12714] ? __pfx_alloc_vmap_area+0x10/0x10 [ 340.950086][T12714] ? __kmalloc_cache_node_noprof+0x3d1/0x620 [ 340.950120][T12714] ? __kmalloc_cache_node_noprof+0x1f7/0x620 [ 340.950147][T12714] ? __get_vm_area_node+0x155/0x2f0 [ 340.950188][T12714] __get_vm_area_node+0x200/0x2f0 [ 340.950232][T12714] __vmalloc_node_range_noprof+0x343/0x1540 [ 340.950257][T12714] ? bpf_check+0x115b/0x2ef0 [ 340.950316][T12714] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 340.950339][T12714] ? __kasan_kmalloc+0x93/0xb0 [ 340.950369][T12714] ? __kmalloc_cache_noprof+0x321/0x600 [ 340.950395][T12714] ? __kmalloc_cache_noprof+0x14d/0x600 [ 340.950419][T12714] ? bpf_diag_init+0x87/0x140 [ 340.950447][T12714] ? bpf_diag_init+0x87/0x140 [ 340.950477][T12714] ? bpf_check+0x115b/0x2ef0 [ 340.950501][T12714] __vmalloc_noprof+0xd2/0x120 [ 340.950523][T12714] ? bpf_check+0x115b/0x2ef0 [ 340.950553][T12714] bpf_check+0x115b/0x2ef0 [ 340.950599][T12714] ? __pfx_bpf_check+0x10/0x10 [ 340.950630][T12714] ? bpf_obj_name_cpy+0x194/0x1e0 [ 340.950669][T12714] bpf_prog_load+0x14d6/0x1c20 [ 340.950711][T12714] ? __pfx_bpf_prog_load+0x10/0x10 [ 340.950768][T12714] __sys_bpf+0xd0d/0xd90 [ 340.950805][T12714] ? __pfx___sys_bpf+0x10/0x10 [ 340.950845][T12714] ? __fget_files+0x2a/0x420 [ 340.950900][T12714] ? ksys_write+0x242/0x270 [ 340.950927][T12714] ? __pfx_ksys_write+0x10/0x10 [ 340.950957][T12714] __x64_sys_bpf+0xba/0xd0 [ 340.950985][T12714] do_syscall_64+0x166/0x520 [ 340.951015][T12714] ? trace_irq_disable+0x3b/0x140 [ 340.951040][T12714] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.951063][T12714] ? clear_bhb_loop+0x70/0xc0 [ 340.951092][T12714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.951122][T12714] RIP: 0033:0x7f5a8579e1d9 [ 340.951144][T12714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 340.951165][T12714] RSP: 002b:00007f5a865fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 340.951190][T12714] RAX: ffffffffffffffda RBX: 00007f5a85a25fa0 RCX: 00007f5a8579e1d9 [ 340.951208][T12714] RDX: 0000000000000094 RSI: 0000200000000d80 RDI: 0000000000000005 [ 340.951223][T12714] RBP: 00007f5a865fe090 R08: 0000000000000000 R09: 0000000000000000 [ 340.951238][T12714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 340.951252][T12714] R13: 00007f5a85a26038 R14: 00007f5a85a25fa0 R15: 00007fff114a0578 [ 340.951288][T12714] [ 341.855780][T12746] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1970'. [ 342.299201][T12766] syzkaller1: entered promiscuous mode [ 342.299230][T12766] syzkaller1: entered allmulticast mode [ 342.436912][T12775] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1980'. [ 342.455257][T12775] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1980'. [ 342.457872][T12775] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1980'. [ 343.074876][T12801] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1988'. [ 343.135031][T12803] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1988'. [ 343.287605][T12806] FAULT_INJECTION: forcing a failure. [ 343.287605][T12806] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 343.287643][T12806] CPU: 0 UID: 0 PID: 12806 Comm: syz.0.1989 Not tainted syzkaller #0 PREEMPT(full) [ 343.287669][T12806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 343.287684][T12806] Call Trace: [ 343.287693][T12806] [ 343.287705][T12806] dump_stack_lvl+0xe8/0x150 [ 343.287745][T12806] should_fail_ex+0x410/0x560 [ 343.287782][T12806] _copy_from_user+0x2d/0xb0 [ 343.287818][T12806] ___sys_sendmsg+0x1c6/0x360 [ 343.287842][T12806] ? __lock_acquire+0x747/0x2de0 [ 343.287873][T12806] ? __pfx____sys_sendmsg+0x10/0x10 [ 343.287939][T12806] ? __fget_files+0x2a/0x420 [ 343.287972][T12806] ? __fget_files+0x3a2/0x420 [ 343.288015][T12806] __x64_sys_sendmsg+0x1b1/0x290 [ 343.288042][T12806] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 343.288092][T12806] do_syscall_64+0x166/0x520 [ 343.288121][T12806] ? trace_irq_disable+0x3b/0x140 [ 343.288145][T12806] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.288168][T12806] ? clear_bhb_loop+0x70/0xc0 [ 343.288197][T12806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.288220][T12806] RIP: 0033:0x7f5f24f9e1d9 [ 343.288240][T12806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 343.288261][T12806] RSP: 002b:00007f5f25ee3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 343.288285][T12806] RAX: ffffffffffffffda RBX: 00007f5f25225fa0 RCX: 00007f5f24f9e1d9 [ 343.288303][T12806] RDX: 0000000000000010 RSI: 0000200000000740 RDI: 0000000000000005 [ 343.288318][T12806] RBP: 00007f5f25ee3090 R08: 0000000000000000 R09: 0000000000000000 [ 343.288333][T12806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 343.288356][T12806] R13: 00007f5f25226038 R14: 00007f5f25225fa0 R15: 00007ffe362a2688 [ 343.288392][T12806] [ 343.476523][T12809] netlink: 'syz.4.1991': attribute type 267 has an invalid length. [ 343.588389][ C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 343.667601][T12812] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1992'. [ 343.767670][T12817] bridge0: port 3(veth0) entered blocking state [ 343.768888][T12817] bridge0: port 3(veth0) entered disabled state [ 343.769101][T12817] veth0: entered allmulticast mode [ 343.776982][T12817] veth0: entered promiscuous mode [ 343.883361][T12817] netlink: 'syz.1.1993': attribute type 1 has an invalid length. [ 344.162381][T12839] netlink: 'syz.2.2001': attribute type 1 has an invalid length. [ 344.180053][T12840] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0100:0000:00bb with DS=0x1a [ 344.318726][T12833] __nla_validate_parse: 1 callbacks suppressed [ 344.318749][T12833] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2001'. [ 344.319137][T12836] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2002'. [ 347.680364][T12858] syzkaller0: entered promiscuous mode [ 347.680387][T12858] syzkaller0: entered allmulticast mode [ 348.231092][T12937] IPv6: NLM_F_CREATE should be specified when creating new route [ 348.246178][T12937] FAULT_INJECTION: forcing a failure. [ 348.246178][T12937] name failslab, interval 1, probability 0, space 0, times 0 [ 348.246212][T12937] CPU: 0 UID: 0 PID: 12937 Comm: syz.2.2024 Not tainted syzkaller #0 PREEMPT(full) [ 348.246233][T12937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 348.246246][T12937] Call Trace: [ 348.246254][T12937] [ 348.246263][T12937] dump_stack_lvl+0xe8/0x150 [ 348.246297][T12937] should_fail_ex+0x410/0x560 [ 348.246328][T12937] should_failslab+0xa8/0x100 [ 348.246358][T12937] __kmalloc_cache_noprof+0xa3/0x600 [ 348.246381][T12937] ? ip_fib_metrics_init+0xbe/0x6f0 [ 348.246405][T12937] ? ip_fib_metrics_init+0xbe/0x6f0 [ 348.246434][T12937] ip_fib_metrics_init+0xbe/0x6f0 [ 348.246464][T12937] ? __pfx_ip_fib_metrics_init+0x10/0x10 [ 348.246485][T12937] ? __kmalloc_noprof+0x38c/0x720 [ 348.246507][T12937] ? __kmalloc_noprof+0x1ab/0x720 [ 348.246525][T12937] ? fib6_info_alloc+0x30/0xf0 [ 348.246543][T12937] ? fib6_info_alloc+0x30/0xf0 [ 348.246565][T12937] ? __asan_memset+0x22/0x50 [ 348.246590][T12937] ip6_route_info_create+0x19e/0x890 [ 348.246619][T12937] inet6_rtm_newroute+0x580/0x1a30 [ 348.246671][T12937] ? kasan_quarantine_put+0xbb/0x1f0 [ 348.246694][T12937] ? lockdep_hardirqs_on+0x7b/0x110 [ 348.246721][T12937] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 348.246753][T12937] ? nlmon_xmit+0xb0/0x100 [ 348.246798][T12937] ? __dev_queue_xmit+0x29b/0x3920 [ 348.246856][T12937] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 348.246886][T12937] rtnetlink_rcv_msg+0x802/0xc00 [ 348.246922][T12937] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 348.246952][T12937] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 348.246985][T12937] ? __copy_skb_header+0xa3/0x4a0 [ 348.247018][T12937] netlink_rcv_skb+0x226/0x4a0 [ 348.247046][T12937] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 348.247079][T12937] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 348.247118][T12937] ? netlink_deliver_tap+0x2e/0x1b0 [ 348.247145][T12937] ? netlink_deliver_tap+0x2e/0x1b0 [ 348.247177][T12937] netlink_unicast+0x7bd/0x940 [ 348.247212][T12937] netlink_sendmsg+0x813/0xb40 [ 348.247249][T12937] ? __pfx_netlink_sendmsg+0x10/0x10 [ 348.247284][T12937] ? apparmor_socket_sendmsg+0x18b/0x360 [ 348.247313][T12937] ? __pfx_netlink_sendmsg+0x10/0x10 [ 348.247339][T12937] sock_sendmsg_nosec+0x14e/0x190 [ 348.247368][T12937] ____sys_sendmsg+0x54e/0x850 [ 348.247395][T12937] ? __pfx_____sys_sendmsg+0x10/0x10 [ 348.247425][T12937] ? import_iovec+0x73/0xa0 [ 348.247458][T12937] ___sys_sendmsg+0x2a5/0x360 [ 348.247478][T12937] ? __lock_acquire+0x747/0x2de0 [ 348.247504][T12937] ? __pfx____sys_sendmsg+0x10/0x10 [ 348.247561][T12937] ? __fget_files+0x2a/0x420 [ 348.247591][T12937] ? __fget_files+0x3a2/0x420 [ 348.247643][T12937] __x64_sys_sendmsg+0x1b1/0x290 [ 348.247668][T12937] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 348.247712][T12937] do_syscall_64+0x166/0x520 [ 348.247738][T12937] ? trace_irq_disable+0x3b/0x140 [ 348.247760][T12937] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.247780][T12937] ? clear_bhb_loop+0x70/0xc0 [ 348.247805][T12937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.247825][T12937] RIP: 0033:0x7f67d039e1d9 [ 348.247845][T12937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 348.247862][T12937] RSP: 002b:00007f67d12a1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 348.247883][T12937] RAX: ffffffffffffffda RBX: 00007f67d0625fa0 RCX: 00007f67d039e1d9 [ 348.247898][T12937] RDX: 0000000024040804 RSI: 0000200000000340 RDI: 0000000000000003 [ 348.247912][T12937] RBP: 00007f67d12a1090 R08: 0000000000000000 R09: 0000000000000000 [ 348.247924][T12937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 348.247936][T12937] R13: 00007f67d0626038 R14: 00007f67d0625fa0 R15: 00007ffce0bcb4f8 [ 348.247970][T12937] [ 350.794274][ T5636] Bluetooth: hci4: command 0x0405 tx timeout [ 350.949470][T12914] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.954154][T12914] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.976489][T12914] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.034101][T12914] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 351.047673][T12914] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 351.148324][T12977] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2035'. [ 351.203784][T12980] FAULT_INJECTION: forcing a failure. [ 351.203784][T12980] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 351.203829][T12980] CPU: 0 UID: 0 PID: 12980 Comm: syz.1.2036 Not tainted syzkaller #0 PREEMPT(full) [ 351.203854][T12980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 351.203867][T12980] Call Trace: [ 351.203875][T12980] [ 351.203885][T12980] dump_stack_lvl+0xe8/0x150 [ 351.203922][T12980] should_fail_ex+0x410/0x560 [ 351.203958][T12980] prepare_alloc_pages+0x223/0x600 [ 351.203992][T12980] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 351.204024][T12980] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 351.204056][T12980] ? __pfx_policy_nodemask+0x10/0x10 [ 351.204084][T12980] ? __get_vm_area_node+0x155/0x2f0 [ 351.204116][T12980] ? __vmalloc_node_range_noprof+0x343/0x1540 [ 351.204138][T12980] ? __vmalloc_noprof+0xd2/0x120 [ 351.204158][T12980] ? bpf_check+0x115b/0x2ef0 [ 351.204183][T12980] ? bpf_prog_load+0x14d6/0x1c20 [ 351.204209][T12980] ? __x64_sys_bpf+0xba/0xd0 [ 351.204229][T12980] ? do_syscall_64+0x166/0x520 [ 351.204260][T12980] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.204287][T12980] alloc_pages_mpol+0x21e/0x390 [ 351.204325][T12980] alloc_pages_noprof+0xb1/0x2b0 [ 351.204360][T12980] get_free_pages_noprof+0xf/0x80 [ 351.204387][T12980] __kasan_populate_vmalloc+0x38/0x1c0 [ 351.204411][T12980] ? do_raw_spin_unlock+0xf5/0x200 [ 351.204449][T12980] alloc_vmap_area+0xd1a/0x1420 [ 351.204502][T12980] ? __pfx_alloc_vmap_area+0x10/0x10 [ 351.204533][T12980] ? __kmalloc_cache_node_noprof+0x3d1/0x620 [ 351.204562][T12980] ? __kmalloc_cache_node_noprof+0x1f7/0x620 [ 351.204586][T12980] ? __get_vm_area_node+0x155/0x2f0 [ 351.204625][T12980] __get_vm_area_node+0x200/0x2f0 [ 351.204668][T12980] __vmalloc_node_range_noprof+0x343/0x1540 [ 351.204692][T12980] ? bpf_check+0x115b/0x2ef0 [ 351.204731][T12980] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 351.204767][T12980] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 351.204821][T12980] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 351.204847][T12980] ? apparmor_capable+0x126/0x170 [ 351.204874][T12980] ? bpf_lsm_capable+0x9/0x20 [ 351.204895][T12980] ? security_capable+0x7e/0x2c0 [ 351.204927][T12980] ? bpf_check+0x115b/0x2ef0 [ 351.204949][T12980] __vmalloc_noprof+0xd2/0x120 [ 351.204971][T12980] ? bpf_check+0x115b/0x2ef0 [ 351.204998][T12980] bpf_check+0x115b/0x2ef0 [ 351.205044][T12980] ? __pfx_bpf_check+0x10/0x10 [ 351.205074][T12980] ? bpf_obj_name_cpy+0x194/0x1e0 [ 351.205112][T12980] bpf_prog_load+0x14d6/0x1c20 [ 351.205154][T12980] ? __pfx_bpf_prog_load+0x10/0x10 [ 351.205210][T12980] __sys_bpf+0xd0d/0xd90 [ 351.205246][T12980] ? __pfx___sys_bpf+0x10/0x10 [ 351.205287][T12980] ? __fget_files+0x2a/0x420 [ 351.205340][T12980] ? ksys_write+0x242/0x270 [ 351.205366][T12980] ? __pfx_ksys_write+0x10/0x10 [ 351.205395][T12980] __x64_sys_bpf+0xba/0xd0 [ 351.205423][T12980] do_syscall_64+0x166/0x520 [ 351.205452][T12980] ? trace_irq_disable+0x3b/0x140 [ 351.205476][T12980] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.205500][T12980] ? clear_bhb_loop+0x70/0xc0 [ 351.205528][T12980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.205551][T12980] RIP: 0033:0x7f806199e1d9 [ 351.205573][T12980] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 351.205592][T12980] RSP: 002b:00007f8062839028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 351.205618][T12980] RAX: ffffffffffffffda RBX: 00007f8061c25fa0 RCX: 00007f806199e1d9 [ 351.205636][T12980] RDX: 0000000000000094 RSI: 0000200000000000 RDI: 0000000000000005 [ 351.205652][T12980] RBP: 00007f8062839090 R08: 0000000000000000 R09: 0000000000000000 [ 351.205667][T12980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 351.205681][T12980] R13: 00007f8061c26038 R14: 00007f8061c25fa0 R15: 00007fff1a14ee48 [ 351.205719][T12980] [ 351.205964][T12980] warn_alloc: 1 callbacks suppressed [ 351.205978][T12980] syz.1.2036: vmalloc error: size 1632, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 351.206042][T12980] CPU: 0 UID: 0 PID: 12980 Comm: syz.1.2036 Not tainted syzkaller #0 PREEMPT(full) [ 351.206068][T12980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 351.206082][T12980] Call Trace: [ 351.206090][T12980] [ 351.206098][T12980] dump_stack_lvl+0xe8/0x150 [ 351.206140][T12980] warn_alloc+0x24d/0x270 [ 351.206168][T12980] ? lockdep_hardirqs_on+0x7b/0x110 [ 351.206197][T12980] ? __pfx_warn_alloc+0x10/0x10 [ 351.206219][T12980] ? kfree+0x1c5/0x650 [ 351.206248][T12980] ? __get_vm_area_node+0x219/0x2f0 [ 351.206300][T12980] __vmalloc_node_range_noprof+0x36b/0x1540 [ 351.206339][T12980] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 351.206376][T12980] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 351.206425][T12980] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 351.206453][T12980] ? apparmor_capable+0x126/0x170 [ 351.206482][T12980] ? bpf_lsm_capable+0x9/0x20 [ 351.206505][T12980] ? security_capable+0x7e/0x2c0 [ 351.206551][T12980] ? bpf_check+0x115b/0x2ef0 [ 351.206574][T12980] __vmalloc_noprof+0xd2/0x120 [ 351.206598][T12980] ? bpf_check+0x115b/0x2ef0 [ 351.206627][T12980] bpf_check+0x115b/0x2ef0 [ 351.206668][T12980] ? __pfx_bpf_check+0x10/0x10 [ 351.206697][T12980] ? bpf_obj_name_cpy+0x194/0x1e0 [ 351.206736][T12980] bpf_prog_load+0x14d6/0x1c20 [ 351.206780][T12980] ? __pfx_bpf_prog_load+0x10/0x10 [ 351.206843][T12980] __sys_bpf+0xd0d/0xd90 [ 351.206877][T12980] ? __pfx___sys_bpf+0x10/0x10 [ 351.206914][T12980] ? __fget_files+0x2a/0x420 [ 351.206968][T12980] ? ksys_write+0x242/0x270 [ 351.206994][T12980] ? __pfx_ksys_write+0x10/0x10 [ 351.207022][T12980] __x64_sys_bpf+0xba/0xd0 [ 351.207050][T12980] do_syscall_64+0x166/0x520 [ 351.207079][T12980] ? trace_irq_disable+0x3b/0x140 [ 351.207102][T12980] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.207125][T12980] ? clear_bhb_loop+0x70/0xc0 [ 351.207152][T12980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.207171][T12980] RIP: 0033:0x7f806199e1d9 [ 351.207191][T12980] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 351.207209][T12980] RSP: 002b:00007f8062839028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 351.207231][T12980] RAX: ffffffffffffffda RBX: 00007f8061c25fa0 RCX: 00007f806199e1d9 [ 351.207248][T12980] RDX: 0000000000000094 RSI: 0000200000000000 RDI: 0000000000000005 [ 351.207262][T12980] RBP: 00007f8062839090 R08: 0000000000000000 R09: 0000000000000000 [ 351.207280][T12980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 351.207293][T12980] R13: 00007f8061c26038 R14: 00007f8061c25fa0 R15: 00007fff1a14ee48 [ 351.207328][T12980] [ 351.207361][T12980] Mem-Info: [ 351.207372][T12980] active_anon:5126 inactive_anon:0 isolated_anon:0 [ 351.207372][T12980] active_file:0 inactive_file:44249 isolated_file:0 [ 351.207372][T12980] unevictable:0 dirty:254 writeback:0 [ 351.207372][T12980] slab_reclaimable:10982 slab_unreclaimable:118529 [ 351.207372][T12980] mapped:34289 shmem:525 pagetables:1177 [ 351.207372][T12980] sec_pagetables:0 bounce:0 [ 351.207372][T12980] kernel_misc_reclaimable:0 [ 351.207372][T12980] free:1279317 free_pcp:12319 free_cma:0 [ 351.207428][T12980] Node 0 active_anon:20504kB inactive_anon:0kB active_file:0kB inactive_file:176792kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:137156kB dirty:1016kB writeback:0kB shmem:2100kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13572kB pagetables:4592kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 351.207487][T12980] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 351.207542][T12980] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 351.207603][T12980] lowmem_reserve[]: 0 2468 2468 2468 2468 [ 351.207644][T12980] Node 0 DMA32 free:1159484kB boost:0kB min:33984kB low:42480kB high:50976kB reserved_highatomic:0kB free_highatomic:0kB active_anon:20504kB inactive_anon:0kB active_file:0kB inactive_file:176792kB unevictable:0kB writepending:1016kB zspages:0kB present:3129332kB managed:2527708kB mlocked:0kB bounce:0kB free_pcp:49276kB local_pcp:28164kB free_cma:0kB [ 351.207709][T12980] lowmem_reserve[]: 0 0 0 0 0 [ 351.207747][T12980] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 351.207817][T12980] lowmem_reserve[]: 0 0 0 0 0 [ 351.207857][T12980] Node 1 Normal free:3942424kB boost:0kB min:55916kB low:69892kB high:83868kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 351.207919][T12980] lowmem_reserve[]: 0 0 0 0 0 [ 351.207961][T12980] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 351.260061][T12980] Node 0 DMA32: 2639*4kB (UME) 1036*8kB (UME) 504*16kB (UME) 54*32kB (UME) 73*64kB (UME) 37*128kB (UME) 13*256kB (UME) 8*512kB (M) 2*1024kB (M) 7*2048kB (UME) 268*4096kB (UM) = 1159580kB [ 351.262650][T12980] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 351.263421][T12980] Node 1 Normal: 4*4kB (UM) 3*8kB (UM) 5*16kB (UM) 9*32kB (UM) 6*64kB (UM) 4*128kB (UM) 5*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 0*2048kB 961*4096kB (M) = 3942424kB [ 351.263937][T12980] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 351.263982][T12980] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 351.264033][T12980] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 351.264077][T12980] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 351.264130][T12980] 44770 total pagecache pages [ 351.264153][T12980] 0 pages in swap cache [ 351.264175][T12980] Free swap = 124996kB [ 351.264197][T12980] Total swap = 124996kB [ 351.264228][T12980] 2097051 pages RAM [ 351.264251][T12980] 0 pages HighMem/MovableOnly [ 351.264283][T12980] 433508 pages reserved [ 351.264305][T12980] 0 pages cma reserved [ 351.346091][T12977] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.557299][T12983] netlink: 'syz.4.2037': attribute type 1 has an invalid length. [ 351.557366][T12983] netlink: 576 bytes leftover after parsing attributes in process `syz.4.2037'. [ 352.485236][T13001] netlink: 'syz.0.2040': attribute type 1 has an invalid length. [ 352.519061][T12994] openvswitch: netlink: IPv4 frag type 228 is out of range max 2 [ 352.600530][T13005] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2040'. [ 352.656608][T13001] bond3: entered promiscuous mode [ 352.659777][T13001] 8021q: adding VLAN 0 to HW filter on device bond3 [ 352.824365][T13017] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2044'. [ 352.885285][T13005] 8021q: adding VLAN 0 to HW filter on device bond3 [ 352.896885][T13005] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 352.896914][T13005] bond3: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 352.968433][T13005] bond3: (slave wireguard0): making interface the new active one [ 352.968461][T13005] wireguard0: entered promiscuous mode [ 352.989849][T13005] bond3: (slave wireguard0): Enslaving as an active interface with an up link [ 353.195417][T13024] ovs-s: entered promiscuous mode [ 353.341445][T13020] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2045'. [ 353.341477][T13020] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2045'. [ 353.954905][T13066] netlink: 280 bytes leftover after parsing attributes in process `syz.3.2057'. [ 354.356244][T13080] netlink: 120 bytes leftover after parsing attributes in process `syz.4.2063'. [ 354.383821][T13084] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 354.426284][T13087] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2062'. [ 354.795472][T13104] FAULT_INJECTION: forcing a failure. [ 354.795472][T13104] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 354.795511][T13104] CPU: 0 UID: 0 PID: 13104 Comm: syz.1.2070 Not tainted syzkaller #0 PREEMPT(full) [ 354.795536][T13104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 354.795550][T13104] Call Trace: [ 354.795559][T13104] [ 354.795569][T13104] dump_stack_lvl+0xe8/0x150 [ 354.795606][T13104] should_fail_ex+0x410/0x560 [ 354.795644][T13104] prepare_alloc_pages+0x223/0x600 [ 354.795677][T13104] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 354.795709][T13104] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 354.795735][T13104] ? __alloc_frozen_pages_noprof+0x29e/0x5a0 [ 354.795767][T13104] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 354.795800][T13104] ? __pfx_policy_nodemask+0x10/0x10 [ 354.795835][T13104] __alloc_pages_noprof+0x10/0x100 [ 354.795864][T13104] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 354.795900][T13104] ? alloc_pages_noprof+0x140/0x2b0 [ 354.795937][T13104] __kasan_populate_vmalloc+0xb7/0x1c0 [ 354.795971][T13104] alloc_vmap_area+0xd1a/0x1420 [ 354.796024][T13104] ? __pfx_alloc_vmap_area+0x10/0x10 [ 354.796070][T13104] ? __kmalloc_cache_node_noprof+0x3d1/0x620 [ 354.796096][T13104] ? __kmalloc_cache_node_noprof+0x1f7/0x620 [ 354.796122][T13104] ? __get_vm_area_node+0x155/0x2f0 [ 354.796163][T13104] __get_vm_area_node+0x200/0x2f0 [ 354.796206][T13104] __vmalloc_node_range_noprof+0x343/0x1540 [ 354.796230][T13104] ? bpf_check+0x115b/0x2ef0 [ 354.796269][T13104] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 354.796306][T13104] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 354.796353][T13104] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 354.796380][T13104] ? apparmor_capable+0x126/0x170 [ 354.796407][T13104] ? bpf_lsm_capable+0x9/0x20 [ 354.796430][T13104] ? security_capable+0x7e/0x2c0 [ 354.796463][T13104] ? bpf_check+0x115b/0x2ef0 [ 354.796486][T13104] __vmalloc_noprof+0xd2/0x120 [ 354.796509][T13104] ? bpf_check+0x115b/0x2ef0 [ 354.796537][T13104] bpf_check+0x115b/0x2ef0 [ 354.796581][T13104] ? __pfx_bpf_check+0x10/0x10 [ 354.796612][T13104] ? bpf_obj_name_cpy+0x194/0x1e0 [ 354.796651][T13104] bpf_prog_load+0x14d6/0x1c20 [ 354.796694][T13104] ? __pfx_bpf_prog_load+0x10/0x10 [ 354.796751][T13104] __sys_bpf+0xd0d/0xd90 [ 354.796786][T13104] ? __pfx___sys_bpf+0x10/0x10 [ 354.796827][T13104] ? __fget_files+0x2a/0x420 [ 354.796880][T13104] ? ksys_write+0x242/0x270 [ 354.796906][T13104] ? __pfx_ksys_write+0x10/0x10 [ 354.796936][T13104] __x64_sys_bpf+0xba/0xd0 [ 354.796964][T13104] do_syscall_64+0x166/0x520 [ 354.796995][T13104] ? trace_irq_disable+0x3b/0x140 [ 354.797018][T13104] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.797050][T13104] ? clear_bhb_loop+0x70/0xc0 [ 354.797080][T13104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.797103][T13104] RIP: 0033:0x7f806199e1d9 [ 354.797124][T13104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 354.797144][T13104] RSP: 002b:00007f8062839028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 354.797167][T13104] RAX: ffffffffffffffda RBX: 00007f8061c25fa0 RCX: 00007f806199e1d9 [ 354.797183][T13104] RDX: 0000000000000094 RSI: 0000200000000100 RDI: 0000000000000005 [ 354.797198][T13104] RBP: 00007f8062839090 R08: 0000000000000000 R09: 0000000000000000 [ 354.797212][T13104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 354.797225][T13104] R13: 00007f8061c26038 R14: 00007f8061c25fa0 R15: 00007fff1a14ee48 [ 354.797259][T13104] [ 355.216052][T13112] pimreg: entered allmulticast mode [ 355.241259][T13112] pimreg: left allmulticast mode [ 355.416541][T13122] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2077'. [ 355.473188][T13122] bond0: entered promiscuous mode [ 355.473216][T13122] bond_slave_0: entered promiscuous mode [ 355.473449][T13122] bond_slave_1: entered promiscuous mode [ 355.510581][T13122] ip6gretap0: entered promiscuous mode [ 356.238992][T13160] __nla_validate_parse: 3 callbacks suppressed [ 356.239018][T13160] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2088'. [ 356.298569][T13160] netlink: 'syz.1.2088': attribute type 11 has an invalid length. [ 356.618737][T13176] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2095'. [ 356.769107][T13176] ip6t_rt: too many addresses specified [ 356.775219][T13176] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2095'. [ 356.832440][T13183] lo: Caught tx_queue_len zero misconfig [ 356.849219][T13183] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2097'. [ 356.925666][T13182] trusted_key: syz.2.2097 sent an empty control message without MSG_MORE. [ 356.994954][T13189] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2099'. [ 357.105729][T13193] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2099'. [ 357.105759][T13193] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2099'. [ 357.177161][T13197] FAULT_INJECTION: forcing a failure. [ 357.177161][T13197] name failslab, interval 1, probability 0, space 0, times 0 [ 357.177222][T13197] CPU: 0 UID: 0 PID: 13197 Comm: syz.2.2101 Not tainted syzkaller #0 PREEMPT(full) [ 357.177249][T13197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 357.177269][T13197] Call Trace: [ 357.177278][T13197] [ 357.177293][T13197] dump_stack_lvl+0xe8/0x150 [ 357.177334][T13197] should_fail_ex+0x410/0x560 [ 357.177371][T13197] should_failslab+0xa8/0x100 [ 357.177404][T13197] ? __kernfs_new_node+0xe6/0x980 [ 357.177431][T13197] kmem_cache_alloc_noprof+0xa1/0x600 [ 357.177459][T13197] ? __kernfs_new_node+0xe6/0x980 [ 357.177493][T13197] __kernfs_new_node+0xe6/0x980 [ 357.177531][T13197] ? __pfx___kernfs_new_node+0x10/0x10 [ 357.177558][T13197] ? kernfs_root+0x1c/0x230 [ 357.177590][T13197] ? kernfs_root+0x1c/0x230 [ 357.177613][T13197] ? kernfs_root+0x1c/0x230 [ 357.177635][T13197] ? kernfs_root+0x1c/0x230 [ 357.177663][T13197] kernfs_new_node+0xea/0x140 [ 357.177696][T13197] __kernfs_create_file+0x4b/0x2e0 [ 357.177732][T13197] sysfs_add_file_mode_ns+0x237/0x300 [ 357.177777][T13197] internal_create_group+0x679/0x1180 [ 357.177826][T13197] ? __pfx_internal_create_group+0x10/0x10 [ 357.177857][T13197] ? up_write+0x19d/0x4a0 [ 357.177894][T13197] sysfs_create_groups+0x59/0x120 [ 357.177923][T13197] device_add_attrs+0x1b1/0x600 [ 357.177964][T13197] ? __pfx_device_add_attrs+0x10/0x10 [ 357.177989][T13197] ? kobject_put+0x50f/0x550 [ 357.178030][T13197] ? device_add_class_symlinks+0x21f/0x240 [ 357.178063][T13197] device_add+0x488/0xb80 [ 357.178095][T13197] wakeup_source_sysfs_add+0x1d3/0x2c0 [ 357.178134][T13197] wakeup_source_register+0x17f/0x380 [ 357.178166][T13197] ep_insert+0xfaf/0x1af0 [ 357.178223][T13197] ? __pfx_ep_insert+0x10/0x10 [ 357.178263][T13197] ? bpf_lsm_capable+0x9/0x20 [ 357.178287][T13197] ? security_capable+0x7e/0x2c0 [ 357.178325][T13197] do_epoll_ctl_file+0x8c2/0xee0 [ 357.178363][T13197] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 357.178392][T13197] ? __fget_files+0x3a2/0x420 [ 357.178425][T13197] ? __fget_files+0x2a/0x420 [ 357.178469][T13197] __se_sys_epoll_ctl+0x162/0x230 [ 357.178500][T13197] ? __pfx___se_sys_epoll_ctl+0x10/0x10 [ 357.178542][T13197] do_syscall_64+0x166/0x520 [ 357.178572][T13197] ? trace_irq_disable+0x3b/0x140 [ 357.178596][T13197] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.178620][T13197] ? clear_bhb_loop+0x70/0xc0 [ 357.178649][T13197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.178672][T13197] RIP: 0033:0x7f67d039e1d9 [ 357.178694][T13197] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 357.178714][T13197] RSP: 002b:00007f67d12a1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 357.178739][T13197] RAX: ffffffffffffffda RBX: 00007f67d0625fa0 RCX: 00007f67d039e1d9 [ 357.178756][T13197] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 357.178770][T13197] RBP: 00007f67d12a1090 R08: 0000000000000000 R09: 0000000000000000 [ 357.178785][T13197] R10: 0000200000000800 R11: 0000000000000246 R12: 0000000000000002 [ 357.178799][T13197] R13: 00007f67d0626038 R14: 00007f67d0625fa0 R15: 00007ffce0bcb4f8 [ 357.178837][T13197] [ 357.821397][T13211] FAULT_INJECTION: forcing a failure. [ 357.821397][T13211] name failslab, interval 1, probability 0, space 0, times 0 [ 357.821445][T13211] CPU: 1 UID: 0 PID: 13211 Comm: syz.4.2108 Not tainted syzkaller #0 PREEMPT(full) [ 357.821471][T13211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 357.821487][T13211] Call Trace: [ 357.821496][T13211] [ 357.821507][T13211] dump_stack_lvl+0xe8/0x150 [ 357.821545][T13211] should_fail_ex+0x410/0x560 [ 357.821581][T13211] should_failslab+0xa8/0x100 [ 357.821615][T13211] __kvmalloc_node_noprof+0x176/0x820 [ 357.821647][T13211] ? __kvmalloc_node_noprof+0x345/0x820 [ 357.821674][T13211] ? hhf_init+0x64d/0x9c0 [ 357.821695][T13211] ? hhf_init+0x64d/0x9c0 [ 357.821724][T13211] hhf_init+0x64d/0x9c0 [ 357.821744][T13211] ? __pfx_hhf_init+0x10/0x10 [ 357.821769][T13211] qdisc_create+0xc23/0x1450 [ 357.821794][T13211] ? lockdep_rtnl_is_held+0x26/0x40 [ 357.821822][T13211] ? qdisc_lookup+0x364/0x6c0 [ 357.821856][T13211] tc_modify_qdisc+0x17af/0x2390 [ 357.821907][T13211] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 357.821942][T13211] ? __local_bh_enable_ip+0xd6/0x140 [ 357.822009][T13211] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 357.822044][T13211] rtnetlink_rcv_msg+0x7b9/0xc00 [ 357.822085][T13211] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 357.822120][T13211] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 357.822158][T13211] ? __copy_skb_header+0xa3/0x4a0 [ 357.822197][T13211] netlink_rcv_skb+0x226/0x4a0 [ 357.822227][T13211] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 357.822263][T13211] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 357.822305][T13211] ? netlink_deliver_tap+0x2e/0x1b0 [ 357.822333][T13211] ? netlink_deliver_tap+0x2e/0x1b0 [ 357.822368][T13211] netlink_unicast+0x7bd/0x940 [ 357.822407][T13211] netlink_sendmsg+0x813/0xb40 [ 357.822456][T13211] ? __pfx_netlink_sendmsg+0x10/0x10 [ 357.822497][T13211] ? apparmor_socket_sendmsg+0x98/0x360 [ 357.822529][T13211] ? __pfx_netlink_sendmsg+0x10/0x10 [ 357.822560][T13211] sock_sendmsg_nosec+0x14e/0x190 [ 357.822595][T13211] ____sys_sendmsg+0x54e/0x850 [ 357.822624][T13211] ? __pfx_____sys_sendmsg+0x10/0x10 [ 357.822659][T13211] ? import_iovec+0x73/0xa0 [ 357.822695][T13211] ___sys_sendmsg+0x2a5/0x360 [ 357.822718][T13211] ? __lock_acquire+0x747/0x2de0 [ 357.822747][T13211] ? __pfx____sys_sendmsg+0x10/0x10 [ 357.822831][T13211] ? __fget_files+0x2a/0x420 [ 357.822869][T13211] ? __fget_files+0x3a2/0x420 [ 357.822913][T13211] __x64_sys_sendmsg+0x1b1/0x290 [ 357.822943][T13211] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 357.822994][T13211] do_syscall_64+0x166/0x520 [ 357.823025][T13211] ? trace_irq_disable+0x3b/0x140 [ 357.823049][T13211] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.823074][T13211] ? clear_bhb_loop+0x70/0xc0 [ 357.823104][T13211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.823128][T13211] RIP: 0033:0x7f3e3139e1d9 [ 357.823149][T13211] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 357.823171][T13211] RSP: 002b:00007f3e3231d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 357.823196][T13211] RAX: ffffffffffffffda RBX: 00007f3e31625fa0 RCX: 00007f3e3139e1d9 [ 357.823213][T13211] RDX: 0000000004008000 RSI: 00002000000003c0 RDI: 0000000000000006 [ 357.823230][T13211] RBP: 00007f3e3231d090 R08: 0000000000000000 R09: 0000000000000000 [ 357.823244][T13211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 357.823258][T13211] R13: 00007f3e31626038 R14: 00007f3e31625fa0 R15: 00007ffeba07da18 [ 357.823295][T13211] [ 358.018410][T13217] veth1_macvtap: Caught tx_queue_len zero misconfig [ 358.216782][T13218] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2107'. [ 358.529701][T13223] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2110'. [ 358.595719][T13237] FAULT_INJECTION: forcing a failure. [ 358.595719][T13237] name failslab, interval 1, probability 0, space 0, times 0 [ 358.595754][T13237] CPU: 1 UID: 0 PID: 13237 Comm: syz.0.2114 Not tainted syzkaller #0 PREEMPT(full) [ 358.595778][T13237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 358.595792][T13237] Call Trace: [ 358.595801][T13237] [ 358.595811][T13237] dump_stack_lvl+0xe8/0x150 [ 358.595846][T13237] should_fail_ex+0x410/0x560 [ 358.595880][T13237] ? __alloc_skb+0x1db/0x7a0 [ 358.595923][T13237] should_failslab+0xa8/0x100 [ 358.595955][T13237] ? __alloc_skb+0x1db/0x7a0 [ 358.595985][T13237] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 358.596010][T13237] ? __alloc_skb+0x18d/0x7a0 [ 358.596045][T13237] ? __alloc_skb+0x1db/0x7a0 [ 358.596086][T13237] __alloc_skb+0x1db/0x7a0 [ 358.596124][T13237] __ip_append_data+0x2aa9/0x3cf0 [ 358.596182][T13237] ? __pfx_raw_getfrag+0x10/0x10 [ 358.596227][T13237] ? rcu_is_watching+0x16/0xb0 [ 358.596265][T13237] ? __kmalloc_cache_noprof+0x321/0x600 [ 358.596291][T13237] ? __kmalloc_cache_noprof+0x14d/0x600 [ 358.596318][T13237] ? __pfx___ip_append_data+0x10/0x10 [ 358.596351][T13237] ? ip_setup_cork+0x2c0/0x920 [ 358.596390][T13237] ? ip_setup_cork+0x512/0x920 [ 358.596426][T13237] ip_append_data+0x10d/0x190 [ 358.596465][T13237] ? __pfx_raw_getfrag+0x10/0x10 [ 358.596499][T13237] raw_sendmsg+0x1406/0x1a20 [ 358.596550][T13237] ? __pfx_raw_sendmsg+0x10/0x10 [ 358.596580][T13237] ? __lock_acquire+0x747/0x2de0 [ 358.596646][T13237] ? aa_sock_msg_perm+0xfc/0x210 [ 358.596678][T13237] ? sock_rps_record_flow+0x19/0x350 [ 358.596715][T13237] ? inet_sendmsg+0x298/0x320 [ 358.596744][T13237] ? apparmor_socket_sendmsg+0x274/0x360 [ 358.596774][T13237] ? __pfx_inet_sendmsg+0x10/0x10 [ 358.596805][T13237] sock_sendmsg_nosec+0x10f/0x190 [ 358.596837][T13237] ____sys_sendmsg+0x54e/0x850 [ 358.596867][T13237] ? __pfx_____sys_sendmsg+0x10/0x10 [ 358.596902][T13237] ? import_iovec+0x73/0xa0 [ 358.596947][T13237] ___sys_sendmsg+0x2a5/0x360 [ 358.596971][T13237] ? __lock_acquire+0x747/0x2de0 [ 358.596999][T13237] ? __pfx____sys_sendmsg+0x10/0x10 [ 358.597062][T13237] ? __fget_files+0x2a/0x420 [ 358.597096][T13237] ? __fget_files+0x3a2/0x420 [ 358.597141][T13237] __x64_sys_sendmsg+0x1b1/0x290 [ 358.597170][T13237] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 358.597219][T13237] do_syscall_64+0x166/0x520 [ 358.597250][T13237] ? trace_irq_disable+0x3b/0x140 [ 358.597274][T13237] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.597300][T13237] ? clear_bhb_loop+0x70/0xc0 [ 358.597329][T13237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.597353][T13237] RIP: 0033:0x7f5f24f9e1d9 [ 358.597375][T13237] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 358.597396][T13237] RSP: 002b:00007f5f25ee3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 358.597421][T13237] RAX: ffffffffffffffda RBX: 00007f5f25225fa0 RCX: 00007f5f24f9e1d9 [ 358.597440][T13237] RDX: 00000000200040c4 RSI: 0000200000000040 RDI: 0000000000000003 [ 358.597456][T13237] RBP: 00007f5f25ee3090 R08: 0000000000000000 R09: 0000000000000000 [ 358.597471][T13237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 358.597486][T13237] R13: 00007f5f25226038 R14: 00007f5f25225fa0 R15: 00007ffe362a2688 [ 358.597523][T13237] [ 359.045935][T13242] syz_tun: entered allmulticast mode [ 359.055651][T13241] syz_tun: left allmulticast mode [ 359.244142][T13249] wg0 speed is unknown, defaulting to 1000 [ 359.467921][T13260] FAULT_INJECTION: forcing a failure. [ 359.467921][T13260] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 359.467964][T13260] CPU: 1 UID: 0 PID: 13260 Comm: syz.4.2125 Not tainted syzkaller #0 PREEMPT(full) [ 359.467988][T13260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 359.468002][T13260] Call Trace: [ 359.468012][T13260] [ 359.468023][T13260] dump_stack_lvl+0xe8/0x150 [ 359.468060][T13260] should_fail_ex+0x410/0x560 [ 359.468098][T13260] _copy_from_iter+0x1d3/0x1660 [ 359.468128][T13260] ? __alloc_skb+0x27a/0x7a0 [ 359.468163][T13260] ? __alloc_skb+0x27a/0x7a0 [ 359.468198][T13260] ? __alloc_skb+0x27a/0x7a0 [ 359.468231][T13260] ? __pfx__copy_from_iter+0x10/0x10 [ 359.468260][T13260] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 359.468285][T13260] ? __alloc_skb+0x27a/0x7a0 [ 359.468316][T13260] ? __alloc_skb+0x27a/0x7a0 [ 359.468356][T13260] ? netlink_sendmsg+0x650/0xb40 [ 359.468386][T13260] ? skb_put+0x112/0x210 [ 359.468410][T13260] netlink_sendmsg+0x6c0/0xb40 [ 359.468448][T13260] ? __pfx_netlink_sendmsg+0x10/0x10 [ 359.468487][T13260] ? apparmor_socket_sendmsg+0x98/0x360 [ 359.468520][T13260] ? __pfx_netlink_sendmsg+0x10/0x10 [ 359.468549][T13260] sock_sendmsg_nosec+0x14e/0x190 [ 359.468581][T13260] ____sys_sendmsg+0x54e/0x850 [ 359.468611][T13260] ? __pfx_____sys_sendmsg+0x10/0x10 [ 359.468646][T13260] ? import_iovec+0x73/0xa0 [ 359.468684][T13260] ___sys_sendmsg+0x2a5/0x360 [ 359.468706][T13260] ? __lock_acquire+0x747/0x2de0 [ 359.468744][T13260] ? __pfx____sys_sendmsg+0x10/0x10 [ 359.468814][T13260] ? __fget_files+0x2a/0x420 [ 359.468846][T13260] ? __fget_files+0x3a2/0x420 [ 359.468889][T13260] __x64_sys_sendmsg+0x1b1/0x290 [ 359.468918][T13260] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 359.468964][T13260] do_syscall_64+0x166/0x520 [ 359.468995][T13260] ? trace_irq_disable+0x3b/0x140 [ 359.469020][T13260] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.469045][T13260] ? clear_bhb_loop+0x70/0xc0 [ 359.469071][T13260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.469095][T13260] RIP: 0033:0x7f3e3139e1d9 [ 359.469116][T13260] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 359.469135][T13260] RSP: 002b:00007f3e3231d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 359.469160][T13260] RAX: ffffffffffffffda RBX: 00007f3e31625fa0 RCX: 00007f3e3139e1d9 [ 359.469177][T13260] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 359.469191][T13260] RBP: 00007f3e3231d090 R08: 0000000000000000 R09: 0000000000000000 [ 359.469205][T13260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 359.469217][T13260] R13: 00007f3e31626038 R14: 00007f3e31625fa0 R15: 00007ffeba07da18 [ 359.469253][T13260] [ 359.826492][T13249] wg0 speed is unknown, defaulting to 1000 [ 360.017518][T13267] gretap2: entered promiscuous mode [ 360.075996][T13267] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2127'. [ 360.443629][T13290] netlink: 'syz.1.2136': attribute type 12 has an invalid length. [ 360.542640][T13292] pimreg: entered allmulticast mode [ 360.574079][T13292] pimreg: left allmulticast mode [ 361.460372][T13326] netlink: 'syz.0.2146': attribute type 4 has an invalid length. [ 361.460400][T13326] __nla_validate_parse: 3 callbacks suppressed [ 361.460415][T13326] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2146'. [ 361.536389][T13326] .`: renamed from bond0 (while UP) [ 361.614331][T13326] lo: Caught tx_queue_len zero misconfig [ 361.676879][T13330] FAULT_INJECTION: forcing a failure. [ 361.676879][T13330] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 361.676918][T13330] CPU: 1 UID: 0 PID: 13330 Comm: syz.2.2147 Not tainted syzkaller #0 PREEMPT(full) [ 361.676944][T13330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 361.676958][T13330] Call Trace: [ 361.676967][T13330] [ 361.676978][T13330] dump_stack_lvl+0xe8/0x150 [ 361.677016][T13330] should_fail_ex+0x410/0x560 [ 361.677054][T13330] core_sys_select+0x8be/0xb40 [ 361.677085][T13330] ? get_pid_task+0x20/0x1f0 [ 361.677134][T13330] ? __pfx_core_sys_select+0x10/0x10 [ 361.677193][T13330] ? __pfx_set_user_sigmask+0x10/0x10 [ 361.677222][T13330] ? kmem_cache_free+0x182/0x650 [ 361.677260][T13330] __se_sys_pselect6+0x267/0x320 [ 361.677299][T13330] ? __pfx___se_sys_pselect6+0x10/0x10 [ 361.677331][T13330] ? __pfx_ksys_write+0x10/0x10 [ 361.677361][T13330] ? __x64_sys_pselect6+0x21/0xf0 [ 361.677396][T13330] do_syscall_64+0x166/0x520 [ 361.677426][T13330] ? trace_irq_disable+0x3b/0x140 [ 361.677449][T13330] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.677472][T13330] ? clear_bhb_loop+0x70/0xc0 [ 361.677504][T13330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.677527][T13330] RIP: 0033:0x7f67d039e1d9 [ 361.677548][T13330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 361.677569][T13330] RSP: 002b:00007f67d12a1028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 361.677595][T13330] RAX: ffffffffffffffda RBX: 00007f67d0625fa0 RCX: 00007f67d039e1d9 [ 361.677613][T13330] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000040 [ 361.677628][T13330] RBP: 00007f67d12a1090 R08: 0000000000000000 R09: 0000000000000000 [ 361.677644][T13330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 361.677658][T13330] R13: 00007f67d0626038 R14: 00007f67d0625fa0 R15: 00007ffce0bcb4f8 [ 361.677692][T13330] [ 362.200607][T13339] bond0: entered promiscuous mode [ 362.201110][T13339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 362.203770][T13345] ip6tnl0: Caught tx_queue_len zero misconfig [ 362.203797][T13345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2153'. [ 362.789142][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 362.997231][T13367] FAULT_INJECTION: forcing a failure. [ 362.997231][T13367] name failslab, interval 1, probability 0, space 0, times 0 [ 362.997270][T13367] CPU: 0 UID: 0 PID: 13367 Comm: syz.3.2159 Not tainted syzkaller #0 PREEMPT(full) [ 362.997297][T13367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 362.997312][T13367] Call Trace: [ 362.997321][T13367] [ 362.997332][T13367] dump_stack_lvl+0xe8/0x150 [ 362.997371][T13367] should_fail_ex+0x410/0x560 [ 362.997409][T13367] should_failslab+0xa8/0x100 [ 362.997443][T13367] __kmalloc_noprof+0xfe/0x720 [ 362.997471][T13367] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 362.997496][T13367] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 362.997530][T13367] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 362.997573][T13367] genl_family_rcv_msg_doit+0xda/0x340 [ 362.997606][T13367] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 362.997639][T13367] ? apparmor_capable+0x126/0x170 [ 362.997666][T13367] ? bpf_lsm_capable+0x9/0x20 [ 362.997690][T13367] ? security_capable+0x7e/0x2c0 [ 362.997729][T13367] genl_rcv_msg+0x614/0x7a0 [ 362.997761][T13367] ? __pfx_genl_rcv_msg+0x10/0x10 [ 362.997784][T13367] ? __pfx_smc_pnet_del+0x10/0x10 [ 362.997836][T13367] netlink_rcv_skb+0x226/0x4a0 [ 362.997868][T13367] ? __pfx_genl_rcv_msg+0x10/0x10 [ 362.997894][T13367] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 362.997943][T13367] ? down_read+0x2be/0x330 [ 362.997989][T13367] genl_rcv+0x28/0x40 [ 362.998009][T13367] netlink_unicast+0x7bd/0x940 [ 362.998052][T13367] netlink_sendmsg+0x813/0xb40 [ 362.998094][T13367] ? __pfx_netlink_sendmsg+0x10/0x10 [ 362.998136][T13367] ? apparmor_socket_sendmsg+0x98/0x360 [ 362.998170][T13367] ? __pfx_netlink_sendmsg+0x10/0x10 [ 362.998206][T13367] sock_sendmsg_nosec+0x14e/0x190 [ 362.998240][T13367] ____sys_sendmsg+0x54e/0x850 [ 362.998272][T13367] ? __pfx_____sys_sendmsg+0x10/0x10 [ 362.998309][T13367] ? import_iovec+0x73/0xa0 [ 362.998346][T13367] ___sys_sendmsg+0x2a5/0x360 [ 362.998369][T13367] ? __lock_acquire+0x747/0x2de0 [ 362.998399][T13367] ? __pfx____sys_sendmsg+0x10/0x10 [ 362.998467][T13367] ? __fget_files+0x2a/0x420 [ 362.998501][T13367] ? __fget_files+0x3a2/0x420 [ 362.998548][T13367] __x64_sys_sendmsg+0x1b1/0x290 [ 362.998584][T13367] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 362.998636][T13367] do_syscall_64+0x166/0x520 [ 362.998667][T13367] ? trace_irq_disable+0x3b/0x140 [ 362.998692][T13367] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.998715][T13367] ? clear_bhb_loop+0x70/0xc0 [ 362.998744][T13367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.998768][T13367] RIP: 0033:0x7f5a8579e1d9 [ 362.998790][T13367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 362.998810][T13367] RSP: 002b:00007f5a865fe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 362.998836][T13367] RAX: ffffffffffffffda RBX: 00007f5a85a25fa0 RCX: 00007f5a8579e1d9 [ 362.998854][T13367] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000004 [ 362.998869][T13367] RBP: 00007f5a865fe090 R08: 0000000000000000 R09: 0000000000000000 [ 362.998885][T13367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 362.998899][T13367] R13: 00007f5a85a26038 R14: 00007f5a85a25fa0 R15: 00007fff114a0578 [ 362.998938][T13367] [ 363.440640][T13351] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2154'. [ 363.755711][T13373] xt_CT: No such helper "syz0" [ 364.365111][T13395] ip6t_rt: address list match requested but addrnr is 0 [ 364.439071][T13397] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2170'. [ 364.444468][T13397] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2170'. [ 365.151718][T13411] team_slave_1: Caught tx_queue_len zero misconfig [ 365.916490][T13419] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 366.525644][T13443] ------------[ cut here ]------------ [ 366.525662][T13443] current_phy->suspended [ 366.525678][T13443] WARNING: drivers/net/ieee802154/mac802154_hwsim.c:266 at hwsim_hw_xmit+0x15f4/0x1620, CPU#0: syz.0.2183/13443 [ 366.548994][T13443] Modules linked in: [ 366.552959][T13443] CPU: 0 UID: 0 PID: 13443 Comm: syz.0.2183 Not tainted syzkaller #0 PREEMPT(full) [ 366.562443][T13443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 366.572691][T13443] RIP: 0010:hwsim_hw_xmit+0x15f4/0x1620 [ 366.578362][T13443] Code: c6 05 cb 8a 21 0a 01 48 c7 c7 40 a5 be 8c be 0d 01 00 00 48 c7 c2 e0 a5 be 8c e8 67 2d 62 fa e9 f4 eb ff ff e8 dd 89 86 fa 90 <0f> 0b 90 e9 e1 ea ff ff 89 d9 80 e1 07 38 c1 0f 8c c6 ea ff ff 48 [ 366.598058][T13443] RSP: 0018:ffffc9000721f400 EFLAGS: 00010283 [ 366.604179][T13443] RAX: ffffffff87419563 RBX: ffff888029fe8d78 RCX: 0000000000080000 [ 366.612274][T13443] RDX: ffffc90004491000 RSI: 0000000000000151 RDI: 0000000000000152 [ 366.620354][T13443] RBP: ffffc9000721f578 R08: ffff888029fe86ab R09: 1ffff110053fd0d5 [ 366.628421][T13443] R10: dffffc0000000000 R11: ffffffff87417f70 R12: dffffc0000000000 [ 366.636445][T13443] R13: ffff888029fe8760 R14: ffff888029fe8d20 R15: 1ffff110053fd0ec [ 366.644556][T13443] FS: 00007f5f25ee36c0(0000) GS:ffff888123ad0000(0000) knlGS:0000000000000000 [ 366.653589][T13443] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 366.660282][T13443] CR2: 000000110c371c46 CR3: 00000000799bc000 CR4: 00000000003526f0 [ 366.668353][T13443] Call Trace: [ 366.671673][T13443] [ 366.674678][T13443] ? ieee802154_hold_queue+0xd1/0x3a0 [ 366.680165][T13443] ? __pfx_hwsim_hw_xmit+0x10/0x10 [ 366.685373][T13443] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 366.691318][T13443] ieee802154_tx+0x26d/0x510 [ 366.695985][T13443] ieee802154_subif_start_xmit+0x110/0x190 [ 366.701900][T13443] dev_hard_start_xmit+0x2cd/0x830 [ 366.707096][T13443] sch_direct_xmit+0x257/0x4c0 [ 366.711974][T13443] ? __pfx_sch_direct_xmit+0x10/0x10 [ 366.717327][T13443] ? kmem_cache_alloc_node_noprof+0x3a0/0x610 [ 366.723526][T13443] __dev_queue_xmit+0x179a/0x3920 [ 366.728644][T13443] ? __dev_queue_xmit+0x29b/0x3920 [ 366.733831][T13443] ? __pfx___dev_queue_xmit+0x10/0x10 [ 366.739301][T13443] ? _copy_from_iter+0x21b/0x1660 [ 366.744422][T13443] ? raw_sendmsg+0x1a2/0x9c0 [ 366.749134][T13443] ? raw_sendmsg+0x1a2/0x9c0 [ 366.753786][T13443] ? __local_bh_enable_ip+0xd6/0x140 [ 366.759163][T13443] ? skb_put+0x112/0x210 [ 366.763450][T13443] raw_sendmsg+0x4a2/0x9c0 [ 366.768014][T13443] ? __pfx_raw_sendmsg+0x10/0x10 [ 366.773017][T13443] ? apparmor_socket_sendmsg+0x98/0x360 [ 366.778661][T13443] ? __pfx_ieee802154_sock_sendmsg+0x10/0x10 [ 366.784836][T13443] sock_sendmsg_nosec+0x14e/0x190 [ 366.789992][T13443] sock_write_iter+0x2de/0x3e0 [ 366.794830][T13443] ? __pfx_sock_write_iter+0x10/0x10 [ 366.800222][T13443] ? bpf_lsm_file_permission+0x9/0x20 [ 366.805665][T13443] ? security_file_permission+0x75/0x260 [ 366.811398][T13443] vfs_write+0x612/0xba0 [ 366.815710][T13443] ? __pfx_vfs_write+0x10/0x10 [ 366.820578][T13443] ? __fget_files+0x2a/0x420 [ 366.825262][T13443] ksys_write+0x150/0x270 [ 366.829695][T13443] ? __pfx_ksys_write+0x10/0x10 [ 366.834658][T13443] do_syscall_64+0x166/0x520 [ 366.839351][T13443] ? trace_irq_disable+0x3b/0x140 [ 366.844432][T13443] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.850596][T13443] ? clear_bhb_loop+0x70/0xc0 [ 366.855330][T13443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.861321][T13443] RIP: 0033:0x7f5f24f9e1d9 [ 366.865782][T13443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 366.885479][T13443] RSP: 002b:00007f5f25ee3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 366.894262][T13443] RAX: ffffffffffffffda RBX: 00007f5f25225fa0 RCX: 00007f5f24f9e1d9 [ 366.902378][T13443] RDX: 0000000000000058 RSI: 0000200000000640 RDI: 000000000000000a [ 366.910467][T13443] RBP: 00007f5f25035888 R08: 0000000000000000 R09: 0000000000000000 [ 366.918626][T13443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 366.926683][T13443] R13: 00007f5f25226038 R14: 00007f5f25225fa0 R15: 00007ffe362a2688 [ 366.934786][T13443] [ 366.937903][T13443] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 366.945264][T13443] CPU: 0 UID: 0 PID: 13443 Comm: syz.0.2183 Not tainted syzkaller #0 PREEMPT(full) [ 366.954696][T13443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 366.964797][T13443] Call Trace: [ 366.968113][T13443] [ 366.971085][T13443] vpanic+0x56d/0xa60 [ 366.975166][T13443] ? __pfx__printk+0x10/0x10 [ 366.979796][T13443] ? __pfx_vpanic+0x10/0x10 [ 366.984338][T13443] ? is_bpf_text_address+0x292/0x2b0 [ 366.989659][T13443] ? is_bpf_text_address+0x26/0x2b0 [ 366.994924][T13443] panic+0xc5/0xd0 [ 366.998685][T13443] ? __pfx_panic+0x10/0x10 [ 367.003183][T13443] __warn+0x315/0x4c0 [ 367.007200][T13443] ? hwsim_hw_xmit+0x15f4/0x1620 [ 367.012159][T13443] ? hwsim_hw_xmit+0x15f4/0x1620 [ 367.017117][T13443] __report_bug+0x276/0x570 [ 367.021653][T13443] ? hwsim_hw_xmit+0x15f4/0x1620 [ 367.026616][T13443] ? __pfx___report_bug+0x10/0x10 [ 367.031712][T13443] ? lock_acquire+0x115/0x350 [ 367.036438][T13443] ? __lock_acquire+0x747/0x2de0 [ 367.041408][T13443] ? hwsim_hw_xmit+0x15f4/0x1620 [ 367.046367][T13443] report_bug+0x16b/0x220 [ 367.050739][T13443] ? hwsim_hw_xmit+0x15f4/0x1620 [ 367.055703][T13443] ? hwsim_hw_xmit+0x15f6/0x1620 [ 367.060667][T13443] handle_bug+0x9c/0x200 [ 367.064948][T13443] exc_invalid_op+0x1a/0x50 [ 367.069480][T13443] asm_exc_invalid_op+0x1a/0x20 [ 367.074355][T13443] RIP: 0010:hwsim_hw_xmit+0x15f4/0x1620 [ 367.079934][T13443] Code: c6 05 cb 8a 21 0a 01 48 c7 c7 40 a5 be 8c be 0d 01 00 00 48 c7 c2 e0 a5 be 8c e8 67 2d 62 fa e9 f4 eb ff ff e8 dd 89 86 fa 90 <0f> 0b 90 e9 e1 ea ff ff 89 d9 80 e1 07 38 c1 0f 8c c6 ea ff ff 48 [ 367.099603][T13443] RSP: 0018:ffffc9000721f400 EFLAGS: 00010283 [ 367.105710][T13443] RAX: ffffffff87419563 RBX: ffff888029fe8d78 RCX: 0000000000080000 [ 367.113710][T13443] RDX: ffffc90004491000 RSI: 0000000000000151 RDI: 0000000000000152 [ 367.121716][T13443] RBP: ffffc9000721f578 R08: ffff888029fe86ab R09: 1ffff110053fd0d5 [ 367.129724][T13443] R10: dffffc0000000000 R11: ffffffff87417f70 R12: dffffc0000000000 [ 367.137764][T13443] R13: ffff888029fe8760 R14: ffff888029fe8d20 R15: 1ffff110053fd0ec [ 367.145772][T13443] ? __pfx_hwsim_hw_xmit+0x10/0x10 [ 367.150920][T13443] ? hwsim_hw_xmit+0x15f3/0x1620 [ 367.155935][T13443] ? ieee802154_hold_queue+0xd1/0x3a0 [ 367.161345][T13443] ? __pfx_hwsim_hw_xmit+0x10/0x10 [ 367.166488][T13443] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 367.172357][T13443] ieee802154_tx+0x26d/0x510 [ 367.176986][T13443] ieee802154_subif_start_xmit+0x110/0x190 [ 367.182823][T13443] dev_hard_start_xmit+0x2cd/0x830 [ 367.187987][T13443] sch_direct_xmit+0x257/0x4c0 [ 367.192823][T13443] ? __pfx_sch_direct_xmit+0x10/0x10 [ 367.198142][T13443] ? kmem_cache_alloc_node_noprof+0x3a0/0x610 [ 367.204256][T13443] __dev_queue_xmit+0x179a/0x3920 [ 367.209311][T13443] ? __dev_queue_xmit+0x29b/0x3920 [ 367.214469][T13443] ? __pfx___dev_queue_xmit+0x10/0x10 [ 367.219915][T13443] ? _copy_from_iter+0x21b/0x1660 [ 367.224993][T13443] ? raw_sendmsg+0x1a2/0x9c0 [ 367.229619][T13443] ? raw_sendmsg+0x1a2/0x9c0 [ 367.234269][T13443] ? __local_bh_enable_ip+0xd6/0x140 [ 367.239591][T13443] ? skb_put+0x112/0x210 [ 367.243867][T13443] raw_sendmsg+0x4a2/0x9c0 [ 367.248328][T13443] ? __pfx_raw_sendmsg+0x10/0x10 [ 367.253305][T13443] ? apparmor_socket_sendmsg+0x98/0x360 [ 367.258878][T13443] ? __pfx_ieee802154_sock_sendmsg+0x10/0x10 [ 367.264894][T13443] sock_sendmsg_nosec+0x14e/0x190 [ 367.269962][T13443] sock_write_iter+0x2de/0x3e0 [ 367.274767][T13443] ? __pfx_sock_write_iter+0x10/0x10 [ 367.280093][T13443] ? bpf_lsm_file_permission+0x9/0x20 [ 367.285510][T13443] ? security_file_permission+0x75/0x260 [ 367.291196][T13443] vfs_write+0x612/0xba0 [ 367.295484][T13443] ? __pfx_vfs_write+0x10/0x10 [ 367.300292][T13443] ? __fget_files+0x2a/0x420 [ 367.304927][T13443] ksys_write+0x150/0x270 [ 367.309294][T13443] ? __pfx_ksys_write+0x10/0x10 [ 367.314206][T13443] do_syscall_64+0x166/0x520 [ 367.318829][T13443] ? trace_irq_disable+0x3b/0x140 [ 367.323922][T13443] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.330026][T13443] ? clear_bhb_loop+0x70/0xc0 [ 367.334741][T13443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.340706][T13443] RIP: 0033:0x7f5f24f9e1d9 [ 367.345161][T13443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 367.364800][T13443] RSP: 002b:00007f5f25ee3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 367.373254][T13443] RAX: ffffffffffffffda RBX: 00007f5f25225fa0 RCX: 00007f5f24f9e1d9 [ 367.381256][T13443] RDX: 0000000000000058 RSI: 0000200000000640 RDI: 000000000000000a [ 367.389260][T13443] RBP: 00007f5f25035888 R08: 0000000000000000 R09: 0000000000000000 [ 367.397286][T13443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 367.405286][T13443] R13: 00007f5f25226038 R14: 00007f5f25225fa0 R15: 00007ffe362a2688 [ 367.413308][T13443] [ 367.416994][T13443] Kernel Offset: disabled [ 367.421388][T13443] Rebooting in 86400 seconds..