last executing test programs: 3m52.513596455s ago: executing program 3 (id=18579): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x5, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd0ffffff, 0x0, 0x0, 0x0, 0xd0ffffff}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff0}, @ldst={0x6, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffe, 0xa000000}]}, &(0x7f0000000100)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x10b}, 0x94) 3m52.306296108s ago: executing program 3 (id=18582): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b80)=@bpf_ext={0x1c, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800ffff18110000000001000000000000000000fc2f38f28550f5965ce192aabbffe326d9fb1c71e2bc741f6d9582049927e24542fb22ba7e2a9b72178200000000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000300000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x52b2, 0xffffffffffffffff, 0x3e, 0x0, 0x0, 0x10, 0x3}, 0x6f) 3m51.988943113s ago: executing program 3 (id=18584): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000380)=[{&(0x7f00000003c0)="580000001500192340834b80040d8c560a067fbc45ff810540010000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) r2 = socket(0x2d, 0x2, 0x0) setsockopt(r2, 0x11d, 0x1, &(0x7f0000000000)="01000000", 0x4) sendmsg(r2, &(0x7f0000000040)={&(0x7f00000000c0)=@generic={0x2d, "00000000000008011800020000000400"}, 0x80, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="4000000010003b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000a8880000200012804b00010065727370616e0000100002800400120006000e00000000004c27cf97b29e4edc98e272bfac8c2ec9fa25cdb5"], 0x40}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f0000000200)=0x7ffffffe, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x310, 0x278, 0xb0, 0x148, 0x1e0, 0x278, 0x310, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000500)={'ip6_vti0\x00', &(0x7f0000000480)={'syztnl2\x00', 0x0, 0x2f, 0xb, 0x33, 0x8, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}, @private2, 0x8, 0x20, 0x5, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000b00)={'syztnl0\x00', &(0x7f0000000a40)={'erspan0\x00', 0x0, 0x10, 0x7800, 0x3, 0x80000001, {{0x20, 0x4, 0x3, 0x3d, 0x80, 0x66, 0x0, 0x4b, 0x4, 0x0, @multicast2, @rand_addr=0x64010101, {[@ra={0x94, 0x4}, @ssrr={0x89, 0x13, 0x6a, [@broadcast, @loopback, @dev={0xac, 0x14, 0x14, 0x16}, @rand_addr=0x64010101]}, @generic={0x86, 0x8, "4b3f460015df"}, @timestamp_addr={0x44, 0xc, 0x7e, 0x1, 0x8, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x101}]}, @end, @noop, @timestamp_addr={0x44, 0x3c, 0x9d, 0x1, 0x9, [{@remote}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@multicast2, 0x15}, {@local, 0xfffffff2}, {@empty, 0x4}, {@dev={0xac, 0x14, 0x14, 0x14}, 0x5}, {@rand_addr=0x64010101, 0x80000001}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000bc0)={'ip6tnl0\x00', &(0x7f0000000b40)={'ip6tnl0\x00', 0x0, 0x29, 0x53, 0xc, 0x4, 0x44, @ipv4={'\x00', '\xff\xff', @multicast2}, @private1, 0x7, 0x7800, 0x4, 0x8}}) sendmsg$nl_route(r1, &(0x7f0000000cc0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)=@mpls_newroute={0x68, 0x18, 0x200, 0x70bd27, 0x25dfdbfe, {0x1c, 0x14, 0x80, 0xb6, 0xfe, 0x0, 0xfd, 0xa, 0x1800}, [@RTA_TTL_PROPAGATE={0x5, 0x1a, 0x14}, @RTA_MULTIPATH={0xc, 0x9, {0x7, 0x10, 0x6, r4}}, @RTA_MULTIPATH={0xc, 0x9, {0x2e9, 0x2, 0x5, r5}}, @RTA_OIF={0x8, 0x4, r6}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x3}, @RTA_VIA={0x14, 0x12, {0x10, "de3d8efc4e8bc0d718f1079ec694"}}, @RTA_DST={0x8, 0x1, {0x1, 0x0, 0x1}}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x90, 0x1, 0x3, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4a08}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x6, 0x3}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0xba}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x6}}, @NFQA_EXP={0x50, 0xf, 0x0, 0x1, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x6}]}]}, 0x90}}, 0x40000) 3m51.206953082s ago: executing program 3 (id=18587): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001880)=@bpf_lsm={0xd, 0x5, &(0x7f0000001940)=@framed={{0x75, 0xa, 0x0, 0x0, 0x1, 0x61, 0x11, 0xa4}, [@initr0]}, &(0x7f0000001980)='GPL\x00', 0x0, 0x2000}, 0x94) 3m50.867175313s ago: executing program 3 (id=18590): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xd, &(0x7f0000000500)=ANY=[@ANYBLOB="1802000000000000000000080010000085100000010000009500000000000000180000000001000000000000002020207b1af8ff00000000bfa100000000000004010000f8fdffffb702000008000000b70300000000002885000000c700000095"], &(0x7f0000000000)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0xa}, 0x94) 3m50.36016583s ago: executing program 3 (id=18593): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000ac0)={0x18, 0x1404, 0x1, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x40080) (async, rerun: 32) ppoll(&(0x7f0000000000)=[{r0, 0x20a}, {r0, 0x1c}, {r0, 0x5242}, {r0, 0x2}, {r0, 0x2214}, {r0}, {r0, 0x10}, {r0, 0x20}, {r0, 0x7}, {r0, 0x1421}], 0xa, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x80000001]}, 0x8) (rerun: 32) 3m35.228419063s ago: executing program 32 (id=18593): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000ac0)={0x18, 0x1404, 0x1, 0x70bd27, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x40080) (async, rerun: 32) ppoll(&(0x7f0000000000)=[{r0, 0x20a}, {r0, 0x1c}, {r0, 0x5242}, {r0, 0x2}, {r0, 0x2214}, {r0}, {r0, 0x10}, {r0, 0x20}, {r0, 0x7}, {r0, 0x1421}], 0xa, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x80000001]}, 0x8) (rerun: 32) 17.25932139s ago: executing program 0 (id=21362): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000f6ffffffffffffff00a2015e0000000000950000000000000017b8159f243a85a996f14a4612b5162f0cd9152708d6160f"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={r0}, 0x4) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080), 0x6) ioctl$sock_bt_hci(r2, 0x400448e6, &(0x7f00000000c0)="fc") ioctl$sock_bt_hci(r2, 0x400448e6, &(0x7f0000000100)="d7") ioctl$sock_bt_hci(r2, 0x400448e7, &(0x7f0000000180)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYBLOB="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", @ANYBLOB="662700000000000024001280090001007866726d0000000014000280040003"], 0x44}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0xe8}}, 0x0) 17.129739396s ago: executing program 0 (id=21366): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) 16.875607133s ago: executing program 0 (id=21372): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e4ff00850000000c000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 16.752735334s ago: executing program 0 (id=21373): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x0, 0xe4}}, {{0x6, 0x0, 0x4, 0x9, 0x0, 0x1, 0xe7030000}, {0x16, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x24, 0x9, 0x0, 0x18fcffff}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 16.632413687s ago: executing program 0 (id=21376): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1e, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000400000200000000000000000850000002e0000001801400020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff85000000720000009500000000000000a15bdb292da7f9e880e3f0cbdb9994ee1ccdeafff8590dfce50bb453e163061fba289a24464ab8b0faccbdd064d1914dfa7d0136c3f71b2ec8de5bc73b9aac4e18580c2b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0x4fbee}, 0x13, 0x1, 0x3, 0x7, 0x10, 0x4, 0x1b, 0x18, 0x5, 0x402, {0x6, 0x8001, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'netdevsim0\x00', 0x0}) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)={0x30, 0x1411, 0x1, 0xfffffffc, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1000000}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32=r4, @ANYBLOB="050003"], 0x28}, 0x1, 0x0, 0x0, 0x841}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000028711095000000000095"], &(0x7f0000000480)='GPL\x00', 0x5}, 0x94) 16.219188502s ago: executing program 0 (id=21381): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000000)=@bpf_lsm={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000100)='GPL\x00'}, 0x80) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000140)={r1}, 0x8) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r3, @ANYBLOB="0100000002"], 0x40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r4}, &(0x7f0000000340), &(0x7f0000000380)='%+9llu \x00'}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000440), &(0x7f0000000480)='%+9llu \x00'}, 0x20) r6 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0), 0x0) close(r6) close(0x4) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f00000007c0)=@in6={0xa, 0x4e20, 0x0, @private0={0xfc, 0x0, '\x00', 0x6}, 0x6}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="10000000000000002900000005"], 0x10}, 0x20800) socket$kcm(0xa, 0x2, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000000)=@bpf_lsm={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000100)='GPL\x00'}, 0x80) (async) bpf$ITER_CREATE(0xb, &(0x7f0000000140)={r1}, 0x8) (async) close(r2) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r3, @ANYBLOB="0100000002"], 0x40) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r4}, &(0x7f0000000340), &(0x7f0000000380)='%+9llu \x00'}, 0x20) (async) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x40) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000440), &(0x7f0000000480)='%+9llu \x00'}, 0x20) (async) bpf$ITER_CREATE(0xb, &(0x7f00000004c0), 0x0) (async) close(r6) (async) close(0x4) (async) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f00000007c0)=@in6={0xa, 0x4e20, 0x0, @private0={0xfc, 0x0, '\x00', 0x6}, 0x6}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="10000000000000002900000005"], 0x10}, 0x20800) (async) 2.696974952s ago: executing program 5 (id=21497): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @alu={0x7}, @initr0, @exit]}, &(0x7f0000000740)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x301}, 0x94) 2.681841159s ago: executing program 2 (id=21498): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x1c, &(0x7f0000000280)=ANY=[@ANYBLOB="18080000e0000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400000077030000000000008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b9a", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007004000b70000000000000095"], &(0x7f0000000380)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) 2.454742147s ago: executing program 2 (id=21501): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000711063000000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000740)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000780)={0xa, 0x0, 0x7, @loopback, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000007c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000800)=0x1, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000800)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000840)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "ad8efa05fd9614ff"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000880)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) writev(r3, &(0x7f00000008c0)=[{&(0x7f0000000900)="8a3deb7cc711", 0x6}], 0x1) pipe(&(0x7f0000000940)) (async) pipe(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) r5 = socket$netlink(0x10, 0x3, 0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0), 0x200002, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r1, 0x0, 0xcd, 0x8c, &(0x7f0000000440)="1b508d2f58a22410e2a2794cfe4c73766b59edd9227d42919a3a9cda4e8edb40c6fc85c26c91395b1986dcda5e07d53ebafbb60485a6f2e363605b7f68d283f8f0dade6d90baa74c13dfc9be2afe3b6e9c5374d9330841e4d8d04ac62690b3d31935248fcae6bbdd3183321bf7c9b2ff59e6e93a50cc4327ccd9da132f25836eb5438b0e9e75558f1f1b6ace051fc5727a214a20a315a0b3ff19c7f546be43cd054cb5509130bc9b4ae94a466277eda5a885a12b66fa0e2228208a552051c6949129e75e2418d5525aaf03c455", &(0x7f0000000540)=""/140, 0x4, 0x0, 0x3d, 0x64, &(0x7f0000000600)="692c2e3da729d9d906186b3cd4464e82109e04e16bc908266a895e0e79ef2b034dc7b89c7c1978c77ce3d83326beca2f345b33c28697b95d0a9e354b1f", &(0x7f0000000640)="889774e75393ad3886496570dd7fc299be6595fc1af91cf78fce8719abaf1d16d3b12c1806b4572750578e9fa3bcacdeddb0b50b29815530568db3fe998a3419b5cef147787b98cd68e7a18052e2de45ada25b268a11598cd7cc1ae9432fe809fa630abd", 0x2, 0x0, 0x54}, 0x50) openat$cgroup_int(r6, &(0x7f0000000100)='blkio.throttle.read_bps_device\x00', 0x2, 0x0) (async) r7 = openat$cgroup_int(r6, &(0x7f0000000100)='blkio.throttle.read_bps_device\x00', 0x2, 0x0) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f00000000c0)={0x80000000, 0x0, 0x3}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f00000000c0)={0x80000000, 0x0, 0x3}, 0x10) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@mpls_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x14}, [@RTA_TTL_PROPAGATE={0x5, 0x13, 0x4}]}, 0x24}}, 0x0) pread64(r7, &(0x7f0000000140)=""/108, 0x6c, 0xff) (async) pread64(r7, &(0x7f0000000140)=""/108, 0x6c, 0xff) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x503, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, r2, 0x38018, 0x201a0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_BROADCAST={0xa, 0x2, @remote}]}, 0x48}}, 0x0) 2.440561954s ago: executing program 5 (id=21502): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket(0x2c, 0x3, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000500)={'syzkaller0\x00', 0x0}) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000800)={'veth0_to_batadv\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x11}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5, 0xf, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x170b923, 0x80000, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xb, 0xb}, {0xfff2, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x10, 0x7, 0x3d58, 0x1, 0x1, 0x3}}, {0x4}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) sendmsg$nl_route(r1, &(0x7f00000007c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x408000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=@newneigh={0x40, 0x1c, 0x2, 0x70bd28, 0x25dfdbff, {0x1c, 0x0, 0x0, r4, 0x8, 0x1}, [@NDA_LINK_NETNSID={0x8, 0xa, 0xec}, @NDA_PROTOCOL={0x5, 0xc, 0xf}, @NDA_LINK_NETNSID={0x8, 0xa, 0x8}, @NDA_DST_MAC={0xa, 0x1, @remote}]}, 0x40}}, 0x10) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @link_local}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) clock_gettime(0xaf098b49fff259ae, 0x0) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="70000000ffffffffffffaaaaaaaaaabb08"], 0x32) socketpair(0x1, 0x100000005, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000380)) sendmsg$IPSET_CMD_GET_BYINDEX(r9, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0xf, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}}, 0x60}, 0x1, 0x0, 0x0, 0x20008040}, 0x4004010) ioctl$sock_inet_SIOCSIFBRDADDR(r9, 0x891a, &(0x7f0000000440)={'tunl0\x00', {0x2, 0x4e23, @loopback}}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000071105d00000022009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90) 2.154830588s ago: executing program 2 (id=21505): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=@newsa={0x148, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@private=0xa010101, 0x0, 0x0, 0x4e21}, {@in=@broadcast, 0x0, 0x33}, @in6=@remote, {}, {0x60, 0x0, 0xfffffffffffffffc}, {0x0, 0x40000, 0x10000}, 0x0, 0x0, 0xa}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @XFRMA_SET_MARK={0x8}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x3}]}, 0x148}}, 0x0) 1.851326053s ago: executing program 2 (id=21508): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0xe00000, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'virt_wifi0\x00'}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000002100000129bd7000fddbdf2502000008000071803211299cee7a00ff7f0000ac1414bb0c000c4000000000001000090000000000001facef05000000"], 0x40}}, 0x40) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001a0001970000ff7f0000000080000000", @ANYRESDEC=r0], 0x24}}, 0x20004000) 1.633501233s ago: executing program 4 (id=21509): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000d7000000400000003500feff2000000095"], &(0x7f0000000480)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa000000, 0xffffffffffffffff, 0x67000000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xacf}, 0x94) 1.584226548s ago: executing program 4 (id=21510): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x1c, &(0x7f0000000280)=ANY=[@ANYBLOB="18080000e0000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400000077030000000000008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b9a", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007004000b70000000000000095"], &(0x7f0000000380)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) 1.52222393s ago: executing program 4 (id=21511): r0 = socket(0x1e, 0x80000, 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newtaction={0x6c, 0x30, 0x9, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x2}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xe1b}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$inet_tcp(0x2, 0x1, 0x0) close(0x3) r5 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(r5, 0x6, 0x1f, &(0x7f0000000800)='espintcp', 0x8) setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000000840)=0x7fffffff, 0x4) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x64, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x444e}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x7}, {0x8, 0xb, 0x7fff}}]}, 0x64}, 0x1, 0x0, 0x0, 0x804}, 0x4000000) sendmsg$AUDIT_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3e8, 0x200, 0x70bd29, 0x25dfdbff, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x4010) r6 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x4, 0x0, &(0x7f00000001c0)) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000400), r0) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x38, r7, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3c}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x40) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d40)={{r8}, &(0x7f0000000cc0), &(0x7f0000000d00)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r8}, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r9, 0x2f08, 0x10, 0x10, &(0x7f00000006c0)="0000000000000005", &(0x7f0000000700)=""/8, 0x447, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.441300258s ago: executing program 1 (id=21512): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="85110000", @ANYRES32=r0, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b70400000000000085000000a4000000b7000000000000009500000000000000b7000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf9, 0x0, 0x0, 0x0}, 0x80) 1.399872816s ago: executing program 1 (id=21513): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000011504000000002e"], 0x0, 0x37}, 0x20) 1.34414972s ago: executing program 1 (id=21514): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000380)=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @empty}}, 0x24) r1 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r1, &(0x7f0000000440)={&(0x7f0000000480)=@rxrpc=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000500)=[{0x18, 0x110, 0x1, "01"}], 0x18}, 0x0) recvmsg(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000000300)={'filter\x00', 0x4}, 0x68) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0xe}, 0x38) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400060000004b0401800000000000007a000000", @ANYRES32=0x0, @ANYBLOB="4800000000000000240012"], 0x44}, 0x1, 0x0, 0x0, 0x2400c891}, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x88000}, 0x20000000) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000600012800b00010067656e65766500005000028005000800000000000400380205000900010000000500"], 0x88}}, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'vxcan1\x00', &(0x7f0000000180)=@ethtool_dump={0x40, 0x7, 0x401, 0xfb, "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"}}) 1.237422139s ago: executing program 5 (id=21515): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001440)={'syzkaller1\x00', 0x5001}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000001480)=0xc) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x66, &(0x7f00000014c0)=0x1, 0x4) bind$inet6(r1, &(0x7f0000001500)={0xa, 0x20e6, 0x0, @empty}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000001540)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000001580)=ANY=[@ANYBLOB="010530000a00140006000000600000000030114020010000000000000000000000000001ff02008008000000000000000000000120e620e6"], 0x64) 1.235292577s ago: executing program 4 (id=21516): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x7, 0x1c, &(0x7f0000000580)=ANY=[@ANYBLOB="1808000000000102000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca9000000001455450902000003000085200000c34f0300b7020000000000007b9af0ff00000000c509000000010000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf8400000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.092372988s ago: executing program 2 (id=21517): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x4}, {}, {0xe, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdb01, {0x0, 0x0, 0x0, r4, {0x5, 0xc}, {0x0, 0xfff1}, {0xe, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0xc000000}, 0x4041080) ioctl$sock_bt_bnep_BNEPCONNDEL(r0, 0x400442c9, &(0x7f0000001380)={0x1000, @broadcast}) 983.443262ms ago: executing program 4 (id=21518): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x7, 0x1c, &(0x7f0000000580)=ANY=[@ANYBLOB="1808000000000102000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca9000000000000450902000003000085200000da4f0300b7020000000000007b9af0ff00000000c509000000010000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf8400000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (fail_nth: 45) 568.432421ms ago: executing program 5 (id=21519): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@can_delroute={0x24, 0x19, 0x103, 0x70bd2d, 0x25dfdbff, {0x1d, 0x1, 0x2}, [@CGW_SRC_IF={0x8}, @CGW_DST_IF={0x8}]}, 0x24}}, 0x4040000) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_int(r1, 0x0, 0x18, 0x0, &(0x7f0000000100)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x6, 0x7fe2, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r2, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x22}]}, &(0x7f0000000080)='GPL\x00'}, 0x90) 568.056059ms ago: executing program 1 (id=21520): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x1c, &(0x7f0000000280)=ANY=[@ANYBLOB="18080000e0000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400000077030000000000008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b9a", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007004000b70000000000000095"], &(0x7f0000000380)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) 566.165455ms ago: executing program 4 (id=21521): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f00000005c0)={'bridge0\x00', &(0x7f0000000600)=@ethtool_ringparam={0xd, 0x0, 0x1c004, 0x20000000, 0x80000001, 0x80090, 0x4, 0x2, 0x80}}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x1}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x3b}}}}]}]}, 0x68}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x1}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) r7 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x20000003, 0x6}, @empty, @private=0xa010101, 0xff000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r4, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0xfdef) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x4c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x4, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_ALL_TARGETS={0x8, 0x1e, 0x1}]}}}]}, 0x3c}, 0x1, 0x2000000000000000}, 0x0) 515.048035ms ago: executing program 2 (id=21522): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x12c, r1, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x12c}, 0x1, 0x0, 0x0, 0x8000}, 0x80) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"/2728], &(0x7f0000001140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000001180), 0xfffffedf, 0x10, &(0x7f00000011c0)}, 0x48) socketpair(0x22, 0x800, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f0000001300)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000012c0)={&(0x7f00000004c0)={0x28, 0x1402, 0x300, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r4}]}, 0x28}, 0x1, 0x0, 0x0, 0x851}, 0x4004891) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r2, 0x108, 0xe, 0x0, &(0x7f0000001280)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xf48f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f00000017c0)={&(0x7f0000001480)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e20, 0xfffffff2, @loopback, 0x1f09a084}}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001500)="65161fe64a7f5f1c0bfc699da322b4c56728ab9461161a9e7c2bcf2d119e083442ac95ca420595e08d6e50ef0198146c2ea46d8a7eee", 0x36}, {&(0x7f0000001540)="e6869e497ff226a028fba4c47339f379db9223fdaa2eb63eb19ec639e130ad1b79007f7500ed5726fd72ae14c024d765a93904df2532", 0x36}, {&(0x7f0000001580)}], 0x3, &(0x7f0000001600)=[{0xf0, 0x29, 0x2, "28a571c9c005fe957be0339de8baf750d1c474d75c25c9a5370656e4b2ea780df29e640c8af0cc30fb9976d759765877a97846d4ce5d8a83de2107ac40581cb92e5bfd55c6a367cc23b87d460f812c447a45c1d9459b9edd545ea8b5ef58cb955ff87b1b4b6a58123aa5fe0d02a7a3a6e35c1f9571f41262f8a89ab49d5042d99753ab165d7ad90873098166bf72fd1725d051adcf5f3854cad4655d2fd94161978f7f4a6d802c88aa9996b9eda6f90e30ca1154e22fa366870cb8f9bb7b51ece9c855abfb5acb8c24074a39fd66443cc8983444c708027ec097fa544ccb6c"}, {0x60, 0x10c, 0x1, "4720e2f6742567877adbac49cb2d7651db7d3805a99d909c14946e0c8f2f0a7cf20fefe1965b088c365c3a8f7e7ba82adf5de51387b17ca20f154508e99a62969f691c34c333adc3064847c64170"}, {0x50, 0x0, 0xd, "7c0394f0a797da1cb6fa89d6bc26b8580ece60ebe25a8596f10f3912e8f4ca653861fde807c311c21b2b61ace0e4ff7bca4207d85bcfcdd9d1b2b25fc1ce"}], 0x1a0}, 0x801) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x28, 0x1, 0x7, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xffffffdc}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xfffffff3}]}]}, 0x28}}, 0x24048000) socket$packet(0x11, 0x1, 0x300) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000001340), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000001380)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001440)={0x24, r8, 0x331, 0x70bd29, 0xfffffffb, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}, @BATADV_ATTR_HARD_IFINDEX={0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4050005}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newqdisc={0x150, 0x24, 0x605, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x20, 0x10, 0x80, 0x8, 0xe, 0x8, 0x2}}, @TCA_RED_STAB={0x104}, @TCA_RED_EARLY_DROP_BLOCK={0x8}]}}]}, 0x150}}, 0x0) 447.153475ms ago: executing program 1 (id=21523): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x0, 0x301}}, {{0x6, 0x0, 0x4, 0x9, 0x0, 0x1, 0xe7030000}, {0x16, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x24, 0x9, 0x0, 0x18fcffff}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 257.069362ms ago: executing program 5 (id=21524): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000001c0)=0x80000000001, 0x4) (async) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) sendmmsg$inet6(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)="144751ce153e0546f3902b33ea8420b16d802cd3aa5b0edb7482e5ccdcfdaf3109fc5353695c1f8808e31f5abdbb4cec0fd8830a2fbdf60c6a1184a4382e79edecb0b2227b211d3d7be257d154825d4d4afd00d248da817fbb92bf843e6a36543366002ba15aa941f0f1231a106c1e0e0a3962efa4f6f495e41fabde382e3fe2baf3141a76b8e931f73c057b3805d501902f9b8e3a655c0b67102561b9956b72623bcaceeea77b0a81219cd54a8fcac7b0fb2b962122061b3d03eaba2bd3", 0xbe}, {&(0x7f0000000500)='8', 0x1}], 0x2, 0x0, 0x40}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)="a62caebb8a9661074860032c88d15be8b7167ae8949390bb403659e79f4ce0b3ec31e1e5f7d12ae234af08e5d1054c5a8e845371c02ed4104d49166984459a895089d4428319da8a67a4b391d3c9e317ffdd0b4e1db2e367f6c5c26183ae5aabc092826901c292f1dd3a93a0228e6635b853b2d2cfc99a55ae167081c56fc9a586", 0x81}, {&(0x7f0000000640)="aad526bc169e3c63eaa06c1d6826883eafa13474e4539f57773c48eedf1eb93015fb4b68d1ee9854da212ae7c326d6ac3d189b0b1eefc2d384dc30da733505157d", 0x41}], 0x2}}], 0x2, 0x20) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000900)=ANY=[@ANYBLOB="240000001800010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB='\x00'/12], 0x24}}, 0x0) (async) sendto$inet6(r0, &(0x7f00000006c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) (async) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000240)=ANY=[], 0x8) bind$inet6(r3, &(0x7f0000000800)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) recvmmsg(r3, &(0x7f0000000840), 0x1, 0x2b, 0x0) (async) setsockopt$inet6_int(r3, 0x29, 0x4, &(0x7f0000000880)=0x1, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x7, 0x4, &(0x7f0000000a00)=@framed={{}, [@alu={0x4, 0x1, 0x9, 0x0, 0x0, 0x1}]}, &(0x7f0000000a40)='syzkaller\x00', 0x2}, 0x94) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b00)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0x1d0, 0x2a0, 0xffffffff, 0xffffffff, 0x100, 0x1d0, 0x2a0, 0xffffffff, 0xff03, 0x0, {[{{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000780)={&(0x7f0000ffc000/0x4000)=nil, 0xc00, 0x0, 0x0, 0x0, 0x0, 0x300, 0x1, 0x0}, &(0x7f00000007c0)=0x40) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4004004) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10010}, 0x0) (async) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_void(r5, 0x1, 0x0, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) socket$netlink(0x10, 0x3, 0x4) r6 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000a80), 0x80800) setsockopt$inet_mreqsrc(r6, 0x0, 0x28, &(0x7f0000000ac0)={@private=0xa010101, @remote, @private=0xa010102}, 0xc) 245.072619ms ago: executing program 1 (id=21525): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a0104009eff00000000000200000708000240000000020900010073797a31000000004c000000030a01040000000000000000020000070900010073797a31000000000900030073797a320000000014000480080001000000000308000200000000000b00070066696c746572000084000000060a01040000000000000000020000070900010073797a31000000000900020073797a320000000058000480540001800a0001006d61746368000000440002800b0001006e6661636374000008000200000000002c0003"], 0x120}}, 0x0) 0s ago: executing program 5 (id=21526): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x437, 0x1, 0x0, {0x0, 0x0, 0x0, r1, 0x50083, 0x2c01}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x40850) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket(0x10, 0x803, 0x2) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f00000005c0)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000600)=0x28) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x4076cbba9945d516, &(0x7f0000000400)={0x0, 0x14}}, 0x0) sendto$packet(r2, &(0x7f00000004c0)="280320000a0014000000fbf719143baa111f43c8", 0x14, 0x840, &(0x7f0000000500)={0x11, 0x18, 0x0, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2eaaaac15ca67ef2}}, 0x14) kernel console output (not intermixed with test programs): 804] RSP: 002b:00007f5052fc9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1814.685956][ T2804] RAX: ffffffffffffffda RBX: 00007f5052425fa0 RCX: 00007f505219f559 [ 1814.685971][ T2804] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 1814.685984][ T2804] RBP: 00007f5052fc9090 R08: 0000000000000000 R09: 0000000000000000 [ 1814.685997][ T2804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1814.686009][ T2804] R13: 00007f5052426038 R14: 00007f5052425fa0 R15: 00007ffcd68bd7a8 [ 1814.686041][ T2804] [ 1814.820247][T17445] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1814.820705][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1814.910202][ T2431] 8021q: adding VLAN 0 to HW filter on device team0 [ 1815.001537][T32688] bridge0: port 1(bridge_slave_0) entered blocking state [ 1815.001652][T32688] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1815.037523][T32688] bridge0: port 2(bridge_slave_1) entered blocking state [ 1815.037634][T32688] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1815.247480][T32688] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1815.256929][T17448] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1815.275399][T16930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1815.276115][ T5639] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1815.286449][ T2821] netlink: 14 bytes leftover after parsing attributes in process `syz.1.20715'. [ 1815.335207][ T2825] netlink: 14 bytes leftover after parsing attributes in process `syz.1.20715'. [ 1815.365716][T32688] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1815.368099][T29296] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1815.561867][ T2835] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20719'. [ 1815.729569][ T2844] netlink: 'syz.2.20721': attribute type 1 has an invalid length. [ 1815.730429][ T2844] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20721'. [ 1815.798579][ T2851] FAULT_INJECTION: forcing a failure. [ 1815.798579][ T2851] name failslab, interval 1, probability 0, space 0, times 0 [ 1815.798610][ T2851] CPU: 1 UID: 0 PID: 2851 Comm: syz.1.20723 Not tainted syzkaller #0 PREEMPT(full) [ 1815.798634][ T2851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1815.798646][ T2851] Call Trace: [ 1815.798654][ T2851] [ 1815.798663][ T2851] dump_stack_lvl+0xe8/0x150 [ 1815.798712][ T2851] should_fail_ex+0x3eb/0x540 [ 1815.798742][ T2851] should_failslab+0xa8/0x100 [ 1815.798775][ T2851] __kmalloc_cache_node_noprof+0xa5/0x620 [ 1815.798798][ T2849] netlink: 'syz.0.20722': attribute type 9 has an invalid length. [ 1815.798803][ T2851] ? __get_vm_area_node+0x155/0x2f0 [ 1815.798823][ T2851] ? __get_vm_area_node+0x155/0x2f0 [ 1815.798850][ T2851] __get_vm_area_node+0x155/0x2f0 [ 1815.798876][ T2851] __vmalloc_node_range_noprof+0x36e/0x16f0 [ 1815.798900][ T2851] ? bpf_check+0x14ae/0x34e0 [ 1815.798928][ T2851] ? lock_acquire+0x115/0x350 [ 1815.798958][ T2851] ? hook_capable+0x1c3/0x5e0 [ 1815.798986][ T2851] ? __pfx_hook_capable+0x10/0x10 [ 1815.799009][ T2851] ? rcu_is_watching+0x16/0xb0 [ 1815.799044][ T2851] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1815.799070][ T2851] ? apparmor_capable+0x126/0x170 [ 1815.799097][ T2851] ? bpf_lsm_capable+0x9/0x20 [ 1815.799115][ T2851] ? security_capable+0x7e/0x2c0 [ 1815.799150][ T2851] ? bpf_check+0x14ae/0x34e0 [ 1815.799169][ T2851] __vmalloc_noprof+0xd2/0x120 [ 1815.799191][ T2851] ? bpf_check+0x14ae/0x34e0 [ 1815.799214][ T2851] bpf_check+0x14ae/0x34e0 [ 1815.799250][ T2851] ? ktime_get_with_offset+0x93/0x2d0 [ 1815.799278][ T2851] ? ktime_get_with_offset+0x93/0x2d0 [ 1815.799306][ T2851] ? __pfx_bpf_check+0x10/0x10 [ 1815.799331][ T2851] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1815.799361][ T2851] bpf_prog_load+0x14da/0x1c60 [ 1815.799395][ T2851] ? __pfx_bpf_prog_load+0x10/0x10 [ 1815.799431][ T2851] ? __might_fault+0xaf/0x130 [ 1815.799459][ T2851] __sys_bpf+0xd86/0xe00 [ 1815.799497][ T2851] ? __pfx___sys_bpf+0x10/0x10 [ 1815.799528][ T2851] ? __fget_files+0x2a/0x420 [ 1815.799570][ T2851] ? ksys_write+0x242/0x270 [ 1815.799598][ T2851] ? __pfx_ksys_write+0x10/0x10 [ 1815.799629][ T2851] __x64_sys_bpf+0xba/0xd0 [ 1815.799659][ T2851] do_syscall_64+0x166/0x520 [ 1815.799682][ T2851] ? trace_irq_disable+0x3b/0x140 [ 1815.799715][ T2851] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1815.799735][ T2851] ? clear_bhb_loop+0x70/0xc0 [ 1815.799758][ T2851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1815.799777][ T2851] RIP: 0033:0x7fc3fcf9f559 [ 1815.799813][ T2851] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1815.799832][ T2851] RSP: 002b:00007fc3fde49028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1815.799855][ T2851] RAX: ffffffffffffffda RBX: 00007fc3fd225fa0 RCX: 00007fc3fcf9f559 [ 1815.799871][ T2851] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 1815.799885][ T2851] RBP: 00007fc3fde49090 R08: 0000000000000000 R09: 0000000000000000 [ 1815.799898][ T2851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1815.799912][ T2851] R13: 00007fc3fd226038 R14: 00007fc3fd225fa0 R15: 00007fff873b64c8 [ 1815.799946][ T2851] [ 1815.803044][ T2851] warn_alloc: 2 callbacks suppressed [ 1815.803058][ T2851] syz.1.20723: vmalloc error: size 5600, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1815.803295][ T2851] CPU: 1 UID: 0 PID: 2851 Comm: syz.1.20723 Not tainted syzkaller #0 PREEMPT(full) [ 1815.803362][ T2851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1815.803392][ T2851] Call Trace: [ 1815.803418][ T2851] [ 1815.803438][ T2851] dump_stack_lvl+0xe8/0x150 [ 1815.803526][ T2851] warn_alloc+0x24d/0x270 [ 1815.803585][ T2851] ? __kasan_kmalloc+0x22/0xb0 [ 1815.803663][ T2851] ? __pfx_warn_alloc+0x10/0x10 [ 1815.803745][ T2851] ? __get_vm_area_node+0x155/0x2f0 [ 1815.803814][ T2851] ? __get_vm_area_node+0x2a9/0x2f0 [ 1815.803889][ T2851] __vmalloc_node_range_noprof+0x396/0x16f0 [ 1815.803992][ T2851] ? lock_acquire+0x115/0x350 [ 1815.804072][ T2851] ? hook_capable+0x1c3/0x5e0 [ 1815.804152][ T2851] ? __pfx_hook_capable+0x10/0x10 [ 1815.804220][ T2851] ? rcu_is_watching+0x16/0xb0 [ 1815.804311][ T2851] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1815.804367][ T2851] ? apparmor_capable+0x126/0x170 [ 1815.804439][ T2851] ? bpf_lsm_capable+0x9/0x20 [ 1815.804490][ T2851] ? security_capable+0x7e/0x2c0 [ 1815.804547][ T2851] ? bpf_check+0x14ae/0x34e0 [ 1815.804598][ T2851] __vmalloc_noprof+0xd2/0x120 [ 1815.804666][ T2851] ? bpf_check+0x14ae/0x34e0 [ 1815.804742][ T2851] bpf_check+0x14ae/0x34e0 [ 1815.804832][ T2851] ? ktime_get_with_offset+0x93/0x2d0 [ 1815.804910][ T2851] ? ktime_get_with_offset+0x93/0x2d0 [ 1815.804982][ T2851] ? __pfx_bpf_check+0x10/0x10 [ 1815.805045][ T2851] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1815.805125][ T2851] bpf_prog_load+0x14da/0x1c60 [ 1815.805208][ T2851] ? __pfx_bpf_prog_load+0x10/0x10 [ 1815.805308][ T2851] ? __might_fault+0xaf/0x130 [ 1815.805381][ T2851] __sys_bpf+0xd86/0xe00 [ 1815.805460][ T2851] ? __pfx___sys_bpf+0x10/0x10 [ 1815.805560][ T2851] ? __fget_files+0x2a/0x420 [ 1815.805714][ T2851] ? ksys_write+0x242/0x270 [ 1815.805793][ T2851] ? __pfx_ksys_write+0x10/0x10 [ 1815.805881][ T2851] __x64_sys_bpf+0xba/0xd0 [ 1815.805961][ T2851] do_syscall_64+0x166/0x520 [ 1815.806035][ T2851] ? trace_irq_disable+0x3b/0x140 [ 1815.806130][ T2851] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1815.806196][ T2851] ? clear_bhb_loop+0x70/0xc0 [ 1815.806260][ T2851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1815.806307][ T2851] RIP: 0033:0x7fc3fcf9f559 [ 1815.806350][ T2851] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1815.806380][ T2851] RSP: 002b:00007fc3fde49028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1815.806437][ T2851] RAX: ffffffffffffffda RBX: 00007fc3fd225fa0 RCX: 00007fc3fcf9f559 [ 1815.806480][ T2851] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 1815.806505][ T2851] RBP: 00007fc3fde49090 R08: 0000000000000000 R09: 0000000000000000 [ 1815.806544][ T2851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1815.806575][ T2851] R13: 00007fc3fd226038 R14: 00007fc3fd225fa0 R15: 00007fff873b64c8 [ 1815.806657][ T2851] [ 1815.827049][ T2851] Mem-Info: [ 1815.827061][ T2851] active_anon:6184 inactive_anon:0 isolated_anon:0 [ 1815.827061][ T2851] active_file:384 inactive_file:44378 isolated_file:0 [ 1815.827061][ T2851] unevictable:0 dirty:54 writeback:0 [ 1815.827061][ T2851] slab_reclaimable:14157 slab_unreclaimable:150433 [ 1815.827061][ T2851] mapped:30015 shmem:534 pagetables:1403 [ 1815.827061][ T2851] sec_pagetables:0 bounce:0 [ 1815.827061][ T2851] kernel_misc_reclaimable:0 [ 1815.827061][ T2851] free:1257915 free_pcp:11935 free_cma:0 [ 1815.827115][ T2851] Node 0 active_anon:24736kB inactive_anon:0kB active_file:1536kB inactive_file:177300kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:120060kB dirty:216kB writeback:0kB shmem:2136kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:18488kB pagetables:5456kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1815.827171][ T2851] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1815.827353][ T2851] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1815.827507][ T2851] lowmem_reserve[]: 0 2463 2465 2465 2465 [ 1815.827609][ T2851] Node 0 DMA32 free:1092524kB boost:0kB min:33936kB low:42420kB high:50904kB reserved_highatomic:0kB free_highatomic:0kB active_anon:24736kB inactive_anon:0kB active_file:1536kB inactive_file:177300kB unevictable:0kB writepending:216kB zspages:0kB present:3129332kB managed:2523120kB mlocked:0kB bounce:0kB free_pcp:39928kB local_pcp:19164kB free_cma:0kB [ 1815.827754][ T2851] lowmem_reserve[]: 0 0 1 1 1 [ 1815.827839][ T2851] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1660kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 1815.827967][ T2851] lowmem_reserve[]: 0 0 0 0 0 [ 1815.828053][ T2851] Node 1 Normal free:3923776kB boost:0kB min:55940kB low:69924kB high:83908kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:7808kB local_pcp:7808kB free_cma:0kB [ 1815.828206][ T2851] lowmem_reserve[]: 0 0 0 0 0 [ 1815.828299][ T2851] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1815.828612][ T2851] Node 0 DMA32: 2721*4kB (UME) 1139*8kB (UME) 531*16kB (UME) 297*32kB (UME) 75*64kB (UME) 87*128kB (UME) 43*256kB (UME) 19*512kB (UME) 14*1024kB (UME) 14*2048kB (UM) 238*4096kB (UM) = 1092524kB [ 1815.835223][ T2851] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1815.835468][ T2851] Node 1 Normal: 3*4kB (UM) 1*8kB (M) 2*16kB (UM) 2*32kB (UM) 2*64kB (UM) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (UM) 0*2048kB 957*4096kB (UM) = 3923828kB [ 1815.835858][ T2851] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1815.835903][ T2851] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1815.835941][ T2851] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1815.835981][ T2851] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1815.836029][ T2851] 45292 total pagecache pages [ 1815.836048][ T2851] 0 pages in swap cache [ 1815.841005][ T2851] Free swap = 124996kB [ 1815.841039][ T2851] Total swap = 124996kB [ 1815.841072][ T2851] 2097051 pages RAM [ 1815.841097][ T2851] 0 pages HighMem/MovableOnly [ 1815.841116][ T2851] 434240 pages reserved [ 1815.841136][ T2851] 0 pages cma reserved [ 1816.590000][T24250] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1817.060301][ T2873] netlink: 40 bytes leftover after parsing attributes in process `syz.1.20725'. [ 1817.561837][ T2893] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1817.590689][ T2431] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1817.627585][ T2894] netlink: 4 bytes leftover after parsing attributes in process `syz.5.20729'. [ 1817.627610][ T2894] netlink: 4 bytes leftover after parsing attributes in process `syz.5.20729'. [ 1817.627642][ T2894] netlink: 'syz.5.20729': attribute type 3 has an invalid length. [ 1817.629289][ T2899] netlink: 4 bytes leftover after parsing attributes in process `syz.5.20729'. [ 1817.629312][ T2899] netlink: 4 bytes leftover after parsing attributes in process `syz.5.20729'. [ 1817.629345][ T2899] netlink: 'syz.5.20729': attribute type 3 has an invalid length. [ 1818.071404][ T2916] FAULT_INJECTION: forcing a failure. [ 1818.071404][ T2916] name failslab, interval 1, probability 0, space 0, times 0 [ 1818.071443][ T2916] CPU: 0 UID: 0 PID: 2916 Comm: syz.5.20737 Not tainted syzkaller #0 PREEMPT(full) [ 1818.071478][ T2916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1818.071493][ T2916] Call Trace: [ 1818.071502][ T2916] [ 1818.071513][ T2916] dump_stack_lvl+0xe8/0x150 [ 1818.071556][ T2916] should_fail_ex+0x3eb/0x540 [ 1818.071599][ T2916] should_failslab+0xa8/0x100 [ 1818.071635][ T2916] __kvmalloc_node_noprof+0x171/0x820 [ 1818.071667][ T2916] ? bpf_compute_postorder+0x87f/0x9a0 [ 1818.071702][ T2916] ? bpf_stack_liveness_init+0x29/0x90 [ 1818.071730][ T2916] ? bpf_stack_liveness_init+0x29/0x90 [ 1818.071767][ T2916] bpf_stack_liveness_init+0x29/0x90 [ 1818.071798][ T2916] bpf_check+0x29af/0x34e0 [ 1818.071837][ T2916] ? ktime_get_with_offset+0x93/0x2d0 [ 1818.071870][ T2916] ? ktime_get_with_offset+0x93/0x2d0 [ 1818.071903][ T2916] ? __pfx_bpf_check+0x10/0x10 [ 1818.071931][ T2916] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1818.071966][ T2916] bpf_prog_load+0x14da/0x1c60 [ 1818.072005][ T2916] ? __pfx_bpf_prog_load+0x10/0x10 [ 1818.072047][ T2916] ? __might_fault+0xaf/0x130 [ 1818.072080][ T2916] __sys_bpf+0xd86/0xe00 [ 1818.072112][ T2916] ? __pfx___sys_bpf+0x10/0x10 [ 1818.072148][ T2916] ? __fget_files+0x2a/0x420 [ 1818.072197][ T2916] ? ksys_write+0x242/0x270 [ 1818.072231][ T2916] ? __pfx_ksys_write+0x10/0x10 [ 1818.072268][ T2916] __x64_sys_bpf+0xba/0xd0 [ 1818.072304][ T2916] do_syscall_64+0x166/0x520 [ 1818.072330][ T2916] ? trace_irq_disable+0x3b/0x140 [ 1818.072362][ T2916] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1818.072386][ T2916] ? clear_bhb_loop+0x70/0xc0 [ 1818.072415][ T2916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1818.072438][ T2916] RIP: 0033:0x7f505219f559 [ 1818.072459][ T2916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1818.072478][ T2916] RSP: 002b:00007f5052fc9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1818.072503][ T2916] RAX: ffffffffffffffda RBX: 00007f5052425fa0 RCX: 00007f505219f559 [ 1818.072520][ T2916] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 1818.072534][ T2916] RBP: 00007f5052fc9090 R08: 0000000000000000 R09: 0000000000000000 [ 1818.072570][ T2916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1818.072583][ T2916] R13: 00007f5052426038 R14: 00007f5052425fa0 R15: 00007ffcd68bd7a8 [ 1818.072621][ T2916] [ 1818.319806][T16931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1818.417069][ T2431] veth0_vlan: entered promiscuous mode [ 1818.455431][ T2431] veth1_vlan: entered promiscuous mode [ 1818.514532][ T2923] xt_nfacct: accounting object `' does not exist [ 1818.537907][ T2431] veth0_macvtap: entered promiscuous mode [ 1818.564494][ T2431] veth1_macvtap: entered promiscuous mode [ 1818.648158][ T2431] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1818.688422][ T2431] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1818.876757][T17447] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1818.876865][T17447] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1818.876898][T17447] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1818.876930][T17447] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1818.985851][ T6539] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1818.985874][ T6539] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1819.055551][T17435] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1819.055571][T17435] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1819.239095][ T2952] netlink: 'syz.0.20747': attribute type 5 has an invalid length. [ 1819.240122][ T2947] xt_socket: unknown flags 0xc [ 1819.315383][ T2954] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1819.329226][ T2954] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1819.897014][ T2986] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20762'. [ 1820.551776][ T3016] netlink: 76 bytes leftover after parsing attributes in process `syz.1.20776'. [ 1820.561540][T17435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1820.562039][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1820.777276][ T3033] netlink: 'syz.5.20781': attribute type 1 has an invalid length. [ 1820.865090][ T3033] bond7: entered promiscuous mode [ 1820.866912][ T3033] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1820.928500][ T3032] bond7: (slave bridge2): making interface the new active one [ 1820.928524][ T3032] bridge2: entered promiscuous mode [ 1820.952027][ T3032] bond7: (slave bridge2): Enslaving as an active interface with an up link [ 1820.999921][ T3034] macvtap1: entered allmulticast mode [ 1821.079648][ T3041] netlink: 'syz.4.20784': attribute type 21 has an invalid length. [ 1821.096174][ T3041] netlink: 156 bytes leftover after parsing attributes in process `syz.4.20784'. [ 1821.272488][ T3053] netlink: 36 bytes leftover after parsing attributes in process `syz.0.20786'. [ 1821.356175][T16930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1821.842797][ T3078] FAULT_INJECTION: forcing a failure. [ 1821.842797][ T3078] name failslab, interval 1, probability 0, space 0, times 0 [ 1821.842825][ T3078] CPU: 0 UID: 0 PID: 3078 Comm: syz.5.20798 Not tainted syzkaller #0 PREEMPT(full) [ 1821.842847][ T3078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1821.842859][ T3078] Call Trace: [ 1821.842870][ T3078] [ 1821.842879][ T3078] dump_stack_lvl+0xe8/0x150 [ 1821.842914][ T3078] should_fail_ex+0x3eb/0x540 [ 1821.842943][ T3078] should_failslab+0xa8/0x100 [ 1821.842974][ T3078] __kvmalloc_node_noprof+0x171/0x820 [ 1821.843002][ T3078] ? __kvmalloc_node_noprof+0x340/0x820 [ 1821.843027][ T3078] ? bpf_check_cfg+0x1c4/0x4860 [ 1821.843052][ T3078] ? bpf_check_cfg+0x1c4/0x4860 [ 1821.843085][ T3078] bpf_check_cfg+0x1c4/0x4860 [ 1821.843145][ T3078] ? __pfx_bpf_check_cfg+0x10/0x10 [ 1821.843185][ T3078] ? fput+0xa0/0xd0 [ 1821.843222][ T3078] ? __pfx_resolve_func_ptrs+0x10/0x10 [ 1821.843248][ T3078] ? add_kfuncs+0x251/0x2e0 [ 1821.843274][ T3078] bpf_check+0x294f/0x34e0 [ 1821.843305][ T3078] ? ktime_get_with_offset+0x93/0x2d0 [ 1821.843333][ T3078] ? ktime_get_with_offset+0x93/0x2d0 [ 1821.843361][ T3078] ? __pfx_bpf_check+0x10/0x10 [ 1821.843384][ T3078] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1821.843419][ T3078] bpf_prog_load+0x14da/0x1c60 [ 1821.843452][ T3078] ? __pfx_bpf_prog_load+0x10/0x10 [ 1821.843487][ T3078] ? __might_fault+0xaf/0x130 [ 1821.843513][ T3078] __sys_bpf+0xd86/0xe00 [ 1821.843540][ T3078] ? __pfx___sys_bpf+0x10/0x10 [ 1821.843569][ T3078] ? __fget_files+0x2a/0x420 [ 1821.843628][ T3078] ? ksys_write+0x242/0x270 [ 1821.843658][ T3078] ? __pfx_ksys_write+0x10/0x10 [ 1821.843691][ T3078] __x64_sys_bpf+0xba/0xd0 [ 1821.843725][ T3078] do_syscall_64+0x166/0x520 [ 1821.843750][ T3078] ? trace_irq_disable+0x3b/0x140 [ 1821.843778][ T3078] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1821.843800][ T3078] ? clear_bhb_loop+0x70/0xc0 [ 1821.843826][ T3078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1821.843847][ T3078] RIP: 0033:0x7f505219f559 [ 1821.843866][ T3078] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1821.843884][ T3078] RSP: 002b:00007f5052fc9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1821.843908][ T3078] RAX: ffffffffffffffda RBX: 00007f5052425fa0 RCX: 00007f505219f559 [ 1821.843924][ T3078] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 1821.843938][ T3078] RBP: 00007f5052fc9090 R08: 0000000000000000 R09: 0000000000000000 [ 1821.843951][ T3078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1821.843964][ T3078] R13: 00007f5052426038 R14: 00007f5052425fa0 R15: 00007ffcd68bd7a8 [ 1821.843999][ T3078] [ 1823.064827][ T3141] xt_check_table_hooks: 23 callbacks suppressed [ 1823.064848][ T3141] x_tables: duplicate underflow at hook 2 [ 1823.140022][ T3140] can: request_module (can-proto-0) failed. [ 1823.320438][ T3154] netlink: 16 bytes leftover after parsing attributes in process `syz.1.20829'. [ 1823.335344][ T3154] netlink: 'syz.1.20829': attribute type 1 has an invalid length. [ 1823.379306][ T3156] sctp: [Deprecated]: syz.2.20832 (pid 3156) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1823.379306][ T3156] Use struct sctp_sack_info instead [ 1823.924944][ T3175] openvswitch: netlink: Multiple metadata blocks provided [ 1824.395809][T16930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1824.637744][ T3210] FAULT_INJECTION: forcing a failure. [ 1824.637744][ T3210] name failslab, interval 1, probability 0, space 0, times 0 [ 1824.637772][ T3210] CPU: 0 UID: 0 PID: 3210 Comm: syz.2.20855 Not tainted syzkaller #0 PREEMPT(full) [ 1824.637794][ T3210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1824.637806][ T3210] Call Trace: [ 1824.637814][ T3210] [ 1824.637822][ T3210] dump_stack_lvl+0xe8/0x150 [ 1824.637859][ T3210] should_fail_ex+0x3eb/0x540 [ 1824.637889][ T3210] should_failslab+0xa8/0x100 [ 1824.637921][ T3210] __kvmalloc_node_noprof+0x171/0x820 [ 1824.637949][ T3210] ? __kvmalloc_node_noprof+0x340/0x820 [ 1824.637975][ T3210] ? bpf_compute_loops+0x137/0x3e80 [ 1824.637994][ T3210] ? bpf_compute_loops+0x137/0x3e80 [ 1824.638022][ T3210] bpf_compute_loops+0x137/0x3e80 [ 1824.638042][ T3210] ? bpf_compute_idoms+0x18b5/0x1940 [ 1824.638084][ T3210] bpf_check+0x2ce7/0x34e0 [ 1824.638124][ T3210] ? ktime_get_with_offset+0x93/0x2d0 [ 1824.638152][ T3210] ? ktime_get_with_offset+0x93/0x2d0 [ 1824.638179][ T3210] ? __pfx_bpf_check+0x10/0x10 [ 1824.638202][ T3210] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1824.638231][ T3210] bpf_prog_load+0x14da/0x1c60 [ 1824.638262][ T3210] ? __pfx_bpf_prog_load+0x10/0x10 [ 1824.638315][ T3210] ? __might_fault+0xaf/0x130 [ 1824.638343][ T3210] __sys_bpf+0xd86/0xe00 [ 1824.638373][ T3210] ? __pfx___sys_bpf+0x10/0x10 [ 1824.638405][ T3210] ? __fget_files+0x2a/0x420 [ 1824.638449][ T3210] ? ksys_write+0x242/0x270 [ 1824.638479][ T3210] ? __pfx_ksys_write+0x10/0x10 [ 1824.638512][ T3210] __x64_sys_bpf+0xba/0xd0 [ 1824.638545][ T3210] do_syscall_64+0x166/0x520 [ 1824.638568][ T3210] ? trace_irq_disable+0x3b/0x140 [ 1824.638597][ T3210] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1824.638629][ T3210] ? clear_bhb_loop+0x70/0xc0 [ 1824.638653][ T3210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1824.638674][ T3210] RIP: 0033:0x7f801699f559 [ 1824.638693][ T3210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1824.638711][ T3210] RSP: 002b:00007f80177c2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1824.638733][ T3210] RAX: ffffffffffffffda RBX: 00007f8016c25fa0 RCX: 00007f801699f559 [ 1824.638748][ T3210] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 1824.638761][ T3210] RBP: 00007f80177c2090 R08: 0000000000000000 R09: 0000000000000000 [ 1824.638774][ T3210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1824.638787][ T3210] R13: 00007f8016c26038 R14: 00007f8016c25fa0 R15: 00007ffcc1ff98c8 [ 1824.638819][ T3210] [ 1824.857198][ T3213] netlink: 16 bytes leftover after parsing attributes in process `syz.4.20853'. [ 1824.857282][ T3213] netlink: 32 bytes leftover after parsing attributes in process `syz.4.20853'. [ 1824.945396][ T3213] gretap1: entered promiscuous mode [ 1824.945419][ T3213] gretap1: entered allmulticast mode [ 1825.216149][ T3241] FAULT_INJECTION: forcing a failure. [ 1825.216149][ T3241] name failslab, interval 1, probability 0, space 0, times 0 [ 1825.216187][ T3241] CPU: 1 UID: 0 PID: 3241 Comm: syz.1.20863 Not tainted syzkaller #0 PREEMPT(full) [ 1825.216210][ T3241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1825.216223][ T3241] Call Trace: [ 1825.216232][ T3241] [ 1825.216241][ T3241] dump_stack_lvl+0xe8/0x150 [ 1825.216280][ T3241] should_fail_ex+0x3eb/0x540 [ 1825.216311][ T3241] should_failslab+0xa8/0x100 [ 1825.216344][ T3241] __kvmalloc_node_noprof+0x171/0x820 [ 1825.216376][ T3241] ? bpf_compute_postorder+0x7f/0x9a0 [ 1825.216403][ T3241] ? bpf_compute_postorder+0x7f/0x9a0 [ 1825.216443][ T3241] bpf_compute_postorder+0x7f/0x9a0 [ 1825.216473][ T3241] ? __pfx_resolve_func_ptrs+0x10/0x10 [ 1825.216494][ T3241] ? check_unwind_insns+0x670/0x910 [ 1825.216528][ T3241] bpf_check+0x298f/0x34e0 [ 1825.216563][ T3241] ? ktime_get_with_offset+0x93/0x2d0 [ 1825.216596][ T3241] ? ktime_get_with_offset+0x93/0x2d0 [ 1825.216644][ T3241] ? __pfx_bpf_check+0x10/0x10 [ 1825.216689][ T3241] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1825.216723][ T3241] bpf_prog_load+0x14da/0x1c60 [ 1825.216763][ T3241] ? __pfx_bpf_prog_load+0x10/0x10 [ 1825.216805][ T3241] ? __might_fault+0xaf/0x130 [ 1825.216838][ T3241] __sys_bpf+0xd86/0xe00 [ 1825.216871][ T3241] ? __pfx___sys_bpf+0x10/0x10 [ 1825.216908][ T3241] ? __fget_files+0x2a/0x420 [ 1825.216957][ T3241] ? ksys_write+0x242/0x270 [ 1825.216990][ T3241] ? __pfx_ksys_write+0x10/0x10 [ 1825.217027][ T3241] __x64_sys_bpf+0xba/0xd0 [ 1825.217064][ T3241] do_syscall_64+0x166/0x520 [ 1825.217090][ T3241] ? trace_irq_disable+0x3b/0x140 [ 1825.217122][ T3241] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1825.217146][ T3241] ? clear_bhb_loop+0x70/0xc0 [ 1825.217183][ T3241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1825.217208][ T3241] RIP: 0033:0x7fc3fcf9f559 [ 1825.217229][ T3241] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1825.217250][ T3241] RSP: 002b:00007fc3fde49028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1825.217276][ T3241] RAX: ffffffffffffffda RBX: 00007fc3fd225fa0 RCX: 00007fc3fcf9f559 [ 1825.217294][ T3241] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 1825.217309][ T3241] RBP: 00007fc3fde49090 R08: 0000000000000000 R09: 0000000000000000 [ 1825.217324][ T3241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1825.217339][ T3241] R13: 00007fc3fd226038 R14: 00007fc3fd225fa0 R15: 00007fff873b64c8 [ 1825.217378][ T3241] [ 1826.071168][ T3281] netlink: 5 bytes leftover after parsing attributes in process `syz.0.20879'. [ 1826.071306][ T3281] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 1826.074317][ T3280] netlink: 9 bytes leftover after parsing attributes in process `syz.0.20879'. [ 1826.101602][ T3281] 1ªî{X¹¦: left promiscuous mode [ 1826.101622][ T3281] 1ªî{X¹¦: entered allmulticast mode [ 1826.117549][ T3281] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 1826.117781][ T3281] netlink: 5 bytes leftover after parsing attributes in process `syz.0.20879'. [ 1826.117781][ T3280] netlink: 9 bytes leftover after parsing attributes in process `syz.0.20879'. [ 1826.117884][ T3281] 0ªî{X¹¦: renamed from 31ªî{X¹¦ (while UP) [ 1826.117950][ T3280] netlink: 9 bytes leftover after parsing attributes in process `syz.0.20879'. [ 1826.122644][ T3281] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 1826.136824][ T3280] netlink: 9 bytes leftover after parsing attributes in process `syz.0.20879'. [ 1826.137343][ T3280] netlink: 9 bytes leftover after parsing attributes in process `syz.0.20879'. [ 1826.137738][ T3280] netlink: 9 bytes leftover after parsing attributes in process `syz.0.20879'. [ 1826.149722][ T3280] netlink: 9 bytes leftover after parsing attributes in process `syz.0.20879'. [ 1826.150067][ T3280] netlink: 9 bytes leftover after parsing attributes in process `syz.0.20879'. [ 1826.252752][ T3281] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 1826.265867][ T3281] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 1826.266814][ T3281] 0ªî{X¹¦: renamed from 31ªî{X¹¦ (while UP) [ 1826.271458][ T3281] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 1826.271778][ T3281] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 1826.328774][ T3281] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 1826.331433][ T3281] 0ªî{X¹¦: renamed from 31ªî{X¹¦ (while UP) [ 1826.380641][ T3281] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 1826.380942][ T3281] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 1826.410129][ T3281] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 1826.432773][ T3281] 0ªî{X¹¦: renamed from 31ªî{X¹¦ (while UP) [ 1826.457573][ T3281] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 1826.466150][ T3281] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 1826.493615][ T3281] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 1826.493901][ T3281] 0ªî{X¹¦: renamed from 31ªî{X¹¦ (while UP) [ 1826.539301][ T3281] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 1826.558640][ T3281] 0ªî{X¹¦: renamed from 31ªî{X¹¦ (while UP) [ 1826.585068][ T3281] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 1826.590323][ T3281] 0ªî{X¹¦: renamed from 31ªî{X¹¦ (while UP) [ 1826.621375][ T3281] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 1826.656337][ T3281] 0ªî{X¹¦: renamed from 31ªî{X¹¦ (while UP) [ 1826.671136][ T3281] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 1826.689614][ T3281] 0ªî{X¹¦: renamed from 31ªî{X¹¦ (while UP) [ 1826.705171][ T3281] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 1826.722631][ T3281] 0ªî{X¹¦: renamed from 31ªî{X¹¦ (while UP) [ 1826.739249][ T3281] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 1826.746755][ T3281] 0ªî{X¹¦: renamed from 31ªî{X¹¦ (while UP) [ 1826.771779][ T3281] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 1826.784623][ T3281] 0ªî{X¹¦: renamed from 31ªî{X¹¦ (while UP) [ 1826.789018][ T3281] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 1826.810596][ T3281] 0ªî{X¹¦: renamed from 31ªî{X¹¦ (while UP) [ 1826.822836][ T3281] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 1826.837899][ T3281] 0ªî{X¹¦: renamed from 31ªî{X¹¦ (while UP) [ 1826.841881][ T3281] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 1826.868832][ T3281] 0ªî{X¹¦: renamed from 31ªî{X¹¦ (while UP) [ 1826.881363][ T3281] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 1827.022241][ T3315] gretap0: entered promiscuous mode [ 1827.048625][ T3315] 0ªî{X¹¦: renamed from gretap0 [ 1827.061666][ T3315] 0ªî{X¹¦: left promiscuous mode [ 1827.061690][ T3315] 0ªî{X¹¦: entered allmulticast mode [ 1827.458479][ T3336] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 1827.626513][ T3343] bridge0: port 4(dummy0) entered blocking state [ 1827.626596][ T3343] bridge0: port 4(dummy0) entered disabled state [ 1827.626754][ T3343] dummy0: entered allmulticast mode [ 1827.636087][ T3343] dummy0: entered promiscuous mode [ 1827.708635][ T3343] bridge0: port 4(dummy0) entered blocking state [ 1827.708728][ T3343] bridge0: port 4(dummy0) entered forwarding state [ 1827.747736][ T3348] dummy0: left allmulticast mode [ 1827.757764][ T3348] dummy0: left promiscuous mode [ 1827.771284][ T3348] bridge0: port 4(dummy0) entered disabled state [ 1827.924651][ T3360] FAULT_INJECTION: forcing a failure. [ 1827.924651][ T3360] name failslab, interval 1, probability 0, space 0, times 0 [ 1827.924681][ T3360] CPU: 1 UID: 0 PID: 3360 Comm: syz.0.20912 Not tainted syzkaller #0 PREEMPT(full) [ 1827.924703][ T3360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1827.924714][ T3360] Call Trace: [ 1827.924722][ T3360] [ 1827.924731][ T3360] dump_stack_lvl+0xe8/0x150 [ 1827.924766][ T3360] should_fail_ex+0x3eb/0x540 [ 1827.924795][ T3360] should_failslab+0xa8/0x100 [ 1827.924845][ T3360] __kvmalloc_node_noprof+0x171/0x820 [ 1827.924873][ T3360] ? security_capable+0x7e/0x2c0 [ 1827.924905][ T3360] ? bpf_check+0x1934/0x34e0 [ 1827.924929][ T3360] ? bpf_check+0x1934/0x34e0 [ 1827.924967][ T3360] bpf_check+0x1934/0x34e0 [ 1827.924998][ T3360] ? ktime_get_with_offset+0x93/0x2d0 [ 1827.925024][ T3360] ? ktime_get_with_offset+0x93/0x2d0 [ 1827.925051][ T3360] ? __pfx_bpf_check+0x10/0x10 [ 1827.925074][ T3360] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1827.925102][ T3360] bpf_prog_load+0x14da/0x1c60 [ 1827.925133][ T3360] ? __pfx_bpf_prog_load+0x10/0x10 [ 1827.925166][ T3360] ? __might_fault+0xaf/0x130 [ 1827.925191][ T3360] __sys_bpf+0xd86/0xe00 [ 1827.925218][ T3360] ? __pfx___sys_bpf+0x10/0x10 [ 1827.925249][ T3360] ? __fget_files+0x2a/0x420 [ 1827.925290][ T3360] ? ksys_write+0x242/0x270 [ 1827.925317][ T3360] ? __pfx_ksys_write+0x10/0x10 [ 1827.925348][ T3360] __x64_sys_bpf+0xba/0xd0 [ 1827.925396][ T3360] do_syscall_64+0x166/0x520 [ 1827.925420][ T3360] ? trace_irq_disable+0x3b/0x140 [ 1827.925449][ T3360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1827.925479][ T3360] ? clear_bhb_loop+0x70/0xc0 [ 1827.925505][ T3360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1827.925526][ T3360] RIP: 0033:0x7fe0e539f559 [ 1827.925546][ T3360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1827.925565][ T3360] RSP: 002b:00007fe0e631f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1827.925587][ T3360] RAX: ffffffffffffffda RBX: 00007fe0e5625fa0 RCX: 00007fe0e539f559 [ 1827.925603][ T3360] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 1827.925617][ T3360] RBP: 00007fe0e631f090 R08: 0000000000000000 R09: 0000000000000000 [ 1827.925630][ T3360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1827.925644][ T3360] R13: 00007fe0e5626038 R14: 00007fe0e5625fa0 R15: 00007ffe86ae45d8 [ 1827.925679][ T3360] [ 1828.242784][ T3366] netlink: 'syz.1.20914': attribute type 20 has an invalid length. [ 1828.262727][ T3366] netlink: 'syz.1.20914': attribute type 20 has an invalid length. [ 1828.273481][ T6539] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1828.273524][ T6539] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1828.273557][ T6539] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1828.273589][ T6539] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1828.391084][ T3373] FAULT_INJECTION: forcing a failure. [ 1828.391084][ T3373] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1828.391113][ T3373] CPU: 1 UID: 0 PID: 3373 Comm: syz.1.20917 Not tainted syzkaller #0 PREEMPT(full) [ 1828.391135][ T3373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1828.391148][ T3373] Call Trace: [ 1828.391155][ T3373] [ 1828.391170][ T3373] dump_stack_lvl+0xe8/0x150 [ 1828.391224][ T3373] should_fail_ex+0x3eb/0x540 [ 1828.391258][ T3373] prepare_alloc_pages+0x21e/0x5f0 [ 1828.391313][ T3373] __alloc_frozen_pages_noprof+0x17c/0x410 [ 1828.391344][ T3373] ? __lock_acquire+0x747/0x2de0 [ 1828.391376][ T3373] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1828.391413][ T3373] ? __kmalloc_cache_node_noprof+0x3cc/0x620 [ 1828.391448][ T3373] ? __get_vm_area_node+0x155/0x2f0 [ 1828.391469][ T3373] ? __vmalloc_node_range_noprof+0x36e/0x16f0 [ 1828.391498][ T3373] ? policy_nodemask+0x31b/0x980 [ 1828.391530][ T3373] ? __sys_bpf+0xd86/0xe00 [ 1828.391551][ T3373] ? __x64_sys_bpf+0xba/0xd0 [ 1828.391581][ T3373] ? do_syscall_64+0x166/0x520 [ 1828.391606][ T3373] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1828.391636][ T3373] alloc_pages_mpol+0x21e/0x390 [ 1828.391681][ T3373] alloc_pages_noprof+0xb1/0x2b0 [ 1828.391719][ T3373] get_free_pages_noprof+0xf/0x80 [ 1828.391749][ T3373] __kasan_populate_vmalloc+0x38/0x1c0 [ 1828.391778][ T3373] ? do_raw_spin_unlock+0xf5/0x200 [ 1828.391807][ T3373] alloc_vmap_area+0xd10/0x1410 [ 1828.391860][ T3373] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1828.391882][ T3373] ? __kmalloc_cache_node_noprof+0x3cc/0x620 [ 1828.391912][ T3373] ? __kmalloc_cache_node_noprof+0x1f2/0x620 [ 1828.391941][ T3373] ? __get_vm_area_node+0x155/0x2f0 [ 1828.391971][ T3373] __get_vm_area_node+0x200/0x2f0 [ 1828.392004][ T3373] __vmalloc_node_range_noprof+0x36e/0x16f0 [ 1828.392032][ T3373] ? bpf_prog_calc_tag+0x51/0x370 [ 1828.392071][ T3373] ? kasan_save_track+0x4f/0x80 [ 1828.392099][ T3373] ? kasan_save_track+0x3e/0x80 [ 1828.392127][ T3373] ? __kvmalloc_node_noprof+0x50a/0x820 [ 1828.392161][ T3373] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1828.392199][ T3373] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1828.392238][ T3373] ? bpf_prog_calc_tag+0x51/0x370 [ 1828.392259][ T3373] __vmalloc_noprof+0xd2/0x120 [ 1828.392285][ T3373] ? bpf_prog_calc_tag+0x51/0x370 [ 1828.392312][ T3373] bpf_prog_calc_tag+0x51/0x370 [ 1828.392341][ T3373] check_and_resolve_insns+0xc0/0x28e0 [ 1828.392379][ T3373] ? __asan_memset+0x22/0x50 [ 1828.392407][ T3373] ? add_subprog+0x40b/0x550 [ 1828.392441][ T3373] ? bpf_check+0x1934/0x34e0 [ 1828.392466][ T3373] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 1828.392503][ T3373] ? check_subprogs+0x413/0x540 [ 1828.392535][ T3373] bpf_check+0x1c12/0x34e0 [ 1828.392569][ T3373] ? ktime_get_with_offset+0x93/0x2d0 [ 1828.392599][ T3373] ? ktime_get_with_offset+0x93/0x2d0 [ 1828.392628][ T3373] ? __pfx_bpf_check+0x10/0x10 [ 1828.392653][ T3373] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1828.392684][ T3373] bpf_prog_load+0x14da/0x1c60 [ 1828.392718][ T3373] ? __pfx_bpf_prog_load+0x10/0x10 [ 1828.392757][ T3373] ? __might_fault+0xaf/0x130 [ 1828.392785][ T3373] __sys_bpf+0xd86/0xe00 [ 1828.392815][ T3373] ? __pfx___sys_bpf+0x10/0x10 [ 1828.392847][ T3373] ? __fget_files+0x2a/0x420 [ 1828.392890][ T3373] ? ksys_write+0x242/0x270 [ 1828.392920][ T3373] ? __pfx_ksys_write+0x10/0x10 [ 1828.392953][ T3373] __x64_sys_bpf+0xba/0xd0 [ 1828.392986][ T3373] do_syscall_64+0x166/0x520 [ 1828.393021][ T3373] ? trace_irq_disable+0x3b/0x140 [ 1828.393048][ T3373] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1828.393068][ T3373] ? clear_bhb_loop+0x70/0xc0 [ 1828.393093][ T3373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1828.393113][ T3373] RIP: 0033:0x7fc3fcf9f559 [ 1828.393131][ T3373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1828.393148][ T3373] RSP: 002b:00007fc3fde49028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1828.393170][ T3373] RAX: ffffffffffffffda RBX: 00007fc3fd225fa0 RCX: 00007fc3fcf9f559 [ 1828.393184][ T3373] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 1828.393197][ T3373] RBP: 00007fc3fde49090 R08: 0000000000000000 R09: 0000000000000000 [ 1828.393210][ T3373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1828.393221][ T3373] R13: 00007fc3fd226038 R14: 00007fc3fd225fa0 R15: 00007fff873b64c8 [ 1828.393254][ T3373] [ 1828.507228][ T3373] syz.1.20917: vmalloc error: size 224, align 0x1, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1828.507400][ T3373] CPU: 0 UID: 0 PID: 3373 Comm: syz.1.20917 Not tainted syzkaller #0 PREEMPT(full) [ 1828.507449][ T3373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1828.507477][ T3373] Call Trace: [ 1828.507495][ T3373] [ 1828.507519][ T3373] dump_stack_lvl+0xe8/0x150 [ 1828.507602][ T3373] warn_alloc+0x24d/0x270 [ 1828.507663][ T3373] ? lockdep_hardirqs_on+0x7b/0x110 [ 1828.507725][ T3373] ? __pfx_warn_alloc+0x10/0x10 [ 1828.507779][ T3373] ? kfree+0x1c5/0x650 [ 1828.507846][ T3373] ? __get_vm_area_node+0x219/0x2f0 [ 1828.507941][ T3373] __vmalloc_node_range_noprof+0x396/0x16f0 [ 1828.508017][ T3373] ? kasan_save_track+0x4f/0x80 [ 1828.508082][ T3373] ? kasan_save_track+0x3e/0x80 [ 1828.508141][ T3373] ? __kvmalloc_node_noprof+0x50a/0x820 [ 1828.508221][ T3373] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1828.508308][ T3373] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1828.508392][ T3373] ? bpf_prog_calc_tag+0x51/0x370 [ 1828.508433][ T3373] __vmalloc_noprof+0xd2/0x120 [ 1828.508489][ T3373] ? bpf_prog_calc_tag+0x51/0x370 [ 1828.508557][ T3373] bpf_prog_calc_tag+0x51/0x370 [ 1828.508615][ T3373] check_and_resolve_insns+0xc0/0x28e0 [ 1828.508671][ T3373] ? __asan_memset+0x22/0x50 [ 1828.508735][ T3373] ? add_subprog+0x40b/0x550 [ 1828.508791][ T3373] ? bpf_check+0x1934/0x34e0 [ 1828.508847][ T3373] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 1828.508901][ T3373] ? check_subprogs+0x413/0x540 [ 1828.508987][ T3373] bpf_check+0x1c12/0x34e0 [ 1828.509078][ T3373] ? ktime_get_with_offset+0x93/0x2d0 [ 1828.509153][ T3373] ? ktime_get_with_offset+0x93/0x2d0 [ 1828.509215][ T3373] ? __pfx_bpf_check+0x10/0x10 [ 1828.509270][ T3373] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1828.509344][ T3373] bpf_prog_load+0x14da/0x1c60 [ 1828.509420][ T3373] ? __pfx_bpf_prog_load+0x10/0x10 [ 1828.509506][ T3373] ? __might_fault+0xaf/0x130 [ 1828.509572][ T3373] __sys_bpf+0xd86/0xe00 [ 1828.509638][ T3373] ? __pfx___sys_bpf+0x10/0x10 [ 1828.509718][ T3373] ? __fget_files+0x2a/0x420 [ 1828.509822][ T3373] ? ksys_write+0x242/0x270 [ 1828.509903][ T3373] ? __pfx_ksys_write+0x10/0x10 [ 1828.510004][ T3373] __x64_sys_bpf+0xba/0xd0 [ 1828.510081][ T3373] do_syscall_64+0x166/0x520 [ 1828.510137][ T3373] ? trace_irq_disable+0x3b/0x140 [ 1828.510202][ T3373] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1828.510258][ T3373] ? clear_bhb_loop+0x70/0xc0 [ 1828.510325][ T3373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1828.510389][ T3373] RIP: 0033:0x7fc3fcf9f559 [ 1828.510436][ T3373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1828.510472][ T3373] RSP: 002b:00007fc3fde49028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1828.510517][ T3373] RAX: ffffffffffffffda RBX: 00007fc3fd225fa0 RCX: 00007fc3fcf9f559 [ 1828.510552][ T3373] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 1828.510585][ T3373] RBP: 00007fc3fde49090 R08: 0000000000000000 R09: 0000000000000000 [ 1828.510613][ T3373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1828.510646][ T3373] R13: 00007fc3fd226038 R14: 00007fc3fd225fa0 R15: 00007fff873b64c8 [ 1828.510718][ T3373] [ 1828.579553][ T3373] Mem-Info: [ 1828.579601][ T3373] active_anon:6095 inactive_anon:0 isolated_anon:0 [ 1828.579601][ T3373] active_file:384 inactive_file:44385 isolated_file:0 [ 1828.579601][ T3373] unevictable:0 dirty:89 writeback:0 [ 1828.579601][ T3373] slab_reclaimable:14291 slab_unreclaimable:150888 [ 1828.579601][ T3373] mapped:29956 shmem:534 pagetables:1372 [ 1828.579601][ T3373] sec_pagetables:0 bounce:0 [ 1828.579601][ T3373] kernel_misc_reclaimable:0 [ 1828.579601][ T3373] free:1258616 free_pcp:10419 free_cma:0 [ 1828.579726][ T3373] Node 0 active_anon:24380kB inactive_anon:0kB active_file:1536kB inactive_file:177328kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:119824kB dirty:356kB writeback:0kB shmem:2136kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:18456kB pagetables:5332kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1828.579875][ T3373] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1828.580015][ T3373] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1828.580153][ T3373] lowmem_reserve[]: 0 2463 2465 2465 2465 [ 1828.580235][ T3373] Node 0 DMA32 free:1094268kB boost:0kB min:33936kB low:42420kB high:50904kB reserved_highatomic:0kB free_highatomic:0kB active_anon:24380kB inactive_anon:0kB active_file:1536kB inactive_file:177328kB unevictable:0kB writepending:356kB zspages:0kB present:3129332kB managed:2523120kB mlocked:0kB bounce:0kB free_pcp:34876kB local_pcp:20548kB free_cma:0kB [ 1828.580372][ T3373] lowmem_reserve[]: 0 0 1 1 1 [ 1828.580448][ T3373] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1660kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 1828.580577][ T3373] lowmem_reserve[]: 0 0 0 0 0 [ 1828.580664][ T3373] Node 1 Normal free:3924836kB boost:0kB min:55940kB low:69924kB high:83908kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:6796kB local_pcp:0kB free_cma:0kB [ 1828.580797][ T3373] lowmem_reserve[]: 0 0 0 0 0 [ 1828.580881][ T3373] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1828.581174][ T3373] Node 0 DMA32: 2580*4kB (UME) 1126*8kB (UME) 493*16kB (UME) 423*32kB (UME) 78*64kB (UME) 84*128kB (UME) 42*256kB (UME) 16*512kB (UME) 13*1024kB (UME) 15*2048kB (UM) 238*4096kB (UM) = 1094320kB [ 1828.615712][ T3373] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1828.615822][ T3373] Node 1 Normal: 3*4kB (UM) 1*8kB (M) 1*16kB (M) 2*32kB (UM) 2*64kB (UM) 1*128kB (M) 2*256kB (M) 2*512kB (M) 1*1024kB (M) 1*2048kB (U) 957*4096kB (UM) = 3924836kB [ 1828.616008][ T3373] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1828.616065][ T3373] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1828.616106][ T3373] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1828.616165][ T3373] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1828.616200][ T3373] 45299 total pagecache pages [ 1828.616282][ T3373] 0 pages in swap cache [ 1828.616309][ T3373] Free swap = 124996kB [ 1828.616330][ T3373] Total swap = 124996kB [ 1828.616351][ T3373] 2097051 pages RAM [ 1828.616372][ T3373] 0 pages HighMem/MovableOnly [ 1828.616392][ T3373] 434240 pages reserved [ 1828.616421][ T3373] 0 pages cma reserved [ 1830.379217][ T3428] xt_nfacct: accounting object `' does not exist [ 1830.475956][T16930] net_ratelimit: 24 callbacks suppressed [ 1830.475975][T16930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1830.581183][ T3440] FAULT_INJECTION: forcing a failure. [ 1830.581183][ T3440] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1830.581264][ T3440] CPU: 1 UID: 0 PID: 3440 Comm: syz.2.20939 Not tainted syzkaller #0 PREEMPT(full) [ 1830.581291][ T3440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1830.581306][ T3440] Call Trace: [ 1830.581316][ T3440] [ 1830.581326][ T3440] dump_stack_lvl+0xe8/0x150 [ 1830.581369][ T3440] should_fail_ex+0x3eb/0x540 [ 1830.581404][ T3440] prepare_alloc_pages+0x21e/0x5f0 [ 1830.581442][ T3440] __alloc_frozen_pages_noprof+0x17c/0x410 [ 1830.581479][ T3440] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1830.581509][ T3440] ? __alloc_frozen_pages_noprof+0x24c/0x410 [ 1830.581544][ T3440] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1830.581582][ T3440] ? __kmalloc_cache_node_noprof+0x3cc/0x620 [ 1830.581609][ T3440] ? __get_vm_area_node+0x155/0x2f0 [ 1830.581635][ T3440] __alloc_pages_noprof+0x10/0x100 [ 1830.581667][ T3440] alloc_pages_bulk_noprof+0x67a/0x8a0 [ 1830.581709][ T3440] ? alloc_pages_noprof+0x140/0x2b0 [ 1830.581750][ T3440] __kasan_populate_vmalloc+0xb7/0x1c0 [ 1830.581787][ T3440] alloc_vmap_area+0xd10/0x1410 [ 1830.581827][ T3440] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1830.581848][ T3440] ? __kmalloc_cache_node_noprof+0x3cc/0x620 [ 1830.581877][ T3440] ? __kmalloc_cache_node_noprof+0x1f2/0x620 [ 1830.581906][ T3440] ? __get_vm_area_node+0x155/0x2f0 [ 1830.581935][ T3440] __get_vm_area_node+0x200/0x2f0 [ 1830.581967][ T3440] __vmalloc_node_range_noprof+0x36e/0x16f0 [ 1830.581995][ T3440] ? bpf_prog_calc_tag+0x51/0x370 [ 1830.582025][ T3440] ? __sys_bpf+0xd81/0xe00 [ 1830.582045][ T3440] ? __x64_sys_bpf+0xba/0xd0 [ 1830.582075][ T3440] ? do_syscall_64+0x166/0x520 [ 1830.582106][ T3440] ? kasan_save_track+0x4f/0x80 [ 1830.582133][ T3440] ? kasan_save_track+0x3e/0x80 [ 1830.582161][ T3440] ? __kvmalloc_node_noprof+0x50a/0x820 [ 1830.582194][ T3440] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1830.582240][ T3440] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1830.582279][ T3440] ? bpf_prog_calc_tag+0x51/0x370 [ 1830.582299][ T3440] __vmalloc_noprof+0xd2/0x120 [ 1830.582324][ T3440] ? bpf_prog_calc_tag+0x51/0x370 [ 1830.582350][ T3440] bpf_prog_calc_tag+0x51/0x370 [ 1830.582379][ T3440] check_and_resolve_insns+0xc0/0x28e0 [ 1830.582418][ T3440] ? __asan_memset+0x22/0x50 [ 1830.582455][ T3440] ? add_subprog+0x40b/0x550 [ 1830.582480][ T3440] ? bpf_check+0x1934/0x34e0 [ 1830.582503][ T3440] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 1830.582525][ T3440] ? check_subprogs+0x413/0x540 [ 1830.582557][ T3440] bpf_check+0x1c12/0x34e0 [ 1830.582592][ T3440] ? ktime_get_with_offset+0x93/0x2d0 [ 1830.582621][ T3440] ? ktime_get_with_offset+0x93/0x2d0 [ 1830.582650][ T3440] ? __pfx_bpf_check+0x10/0x10 [ 1830.582674][ T3440] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1830.582705][ T3440] bpf_prog_load+0x14da/0x1c60 [ 1830.582739][ T3440] ? __pfx_bpf_prog_load+0x10/0x10 [ 1830.582777][ T3440] ? __might_fault+0xaf/0x130 [ 1830.582805][ T3440] __sys_bpf+0xd86/0xe00 [ 1830.582834][ T3440] ? __pfx___sys_bpf+0x10/0x10 [ 1830.582867][ T3440] ? __fget_files+0x2a/0x420 [ 1830.582912][ T3440] ? ksys_write+0x242/0x270 [ 1830.582941][ T3440] ? __pfx_ksys_write+0x10/0x10 [ 1830.582974][ T3440] __x64_sys_bpf+0xba/0xd0 [ 1830.583007][ T3440] do_syscall_64+0x166/0x520 [ 1830.583030][ T3440] ? trace_irq_disable+0x3b/0x140 [ 1830.583059][ T3440] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1830.583081][ T3440] ? clear_bhb_loop+0x70/0xc0 [ 1830.583107][ T3440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1830.583128][ T3440] RIP: 0033:0x7f801699f559 [ 1830.583148][ T3440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1830.583166][ T3440] RSP: 002b:00007f80177c2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1830.583189][ T3440] RAX: ffffffffffffffda RBX: 00007f8016c25fa0 RCX: 00007f801699f559 [ 1830.583206][ T3440] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 1830.583228][ T3440] RBP: 00007f80177c2090 R08: 0000000000000000 R09: 0000000000000000 [ 1830.583242][ T3440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1830.583255][ T3440] R13: 00007f8016c26038 R14: 00007f8016c25fa0 R15: 00007ffcc1ff98c8 [ 1830.583290][ T3440] [ 1831.431714][ T3468] netlink: 'syz.1.20951': attribute type 1 has an invalid length. [ 1831.477932][ T3469] __nla_validate_parse: 94 callbacks suppressed [ 1831.477951][ T3469] netlink: 8 bytes leftover after parsing attributes in process `syz.5.20950'. [ 1831.477967][ T3469] netlink: 4 bytes leftover after parsing attributes in process `syz.5.20950'. [ 1831.477992][ T3469] netlink: 'syz.5.20950': attribute type 15 has an invalid length. [ 1831.520882][ T3475] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20951'. [ 1831.546438][ T3468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1831.566575][ T6539] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 1831.566604][ T3469] netlink: 8 bytes leftover after parsing attributes in process `syz.5.20950'. [ 1831.566625][ T3469] netlink: 4 bytes leftover after parsing attributes in process `syz.5.20950'. [ 1831.566650][ T3469] netlink: 'syz.5.20950': attribute type 15 has an invalid length. [ 1831.604064][T32688] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 1831.604176][T32688] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 1831.699019][ T3477] netlink: 'syz.1.20951': attribute type 1 has an invalid length. [ 1831.710587][ T3475] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20951'. [ 1831.725482][ T3468] bond0: (slave bridge3): making interface the new active one [ 1831.748113][ T3468] bond0: (slave bridge3): Enslaving as an active interface with an up link [ 1831.806214][ T3482] bond0: (slave bridge4): Enslaving as an active interface with a down link [ 1832.320780][ T3512] netlink: 'syz.2.20963': attribute type 30 has an invalid length. [ 1832.804341][ T3521] netlink: 16 bytes leftover after parsing attributes in process `syz.4.20966'. [ 1832.804505][ T3521] netlink: 6 bytes leftover after parsing attributes in process `syz.4.20966'. [ 1833.075808][ T3536] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20972'. [ 1833.075947][ T3536] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1833.076695][ T3536] netlink: 152 bytes leftover after parsing attributes in process `syz.2.20972'. [ 1833.258543][ T3551] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20000 [ 1833.516933][ T5331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1833.576262][ T3545] xt_nfacct: accounting object `syz0' does not exist [ 1834.183118][ T3608] netlink: 'syz.4.20994': attribute type 2 has an invalid length. [ 1834.185101][ T3612] netlink: 'syz.4.20994': attribute type 2 has an invalid length. [ 1834.308773][ T3617] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1834.417753][ T3617] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1834.506132][ T3617] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1834.565858][ T3617] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1834.761650][T29296] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1834.764321][T29296] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1834.775482][ T6539] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1834.775789][ T6539] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1834.889036][ T3639] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1834.889053][ T3639] IPv6: NLM_F_CREATE should be set when creating new route [ 1834.912660][ T3640] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1835.146914][ T3645] bond0: entered promiscuous mode [ 1835.146938][ T3645] bond_slave_0: entered promiscuous mode [ 1835.147138][ T3645] bond_slave_1: entered promiscuous mode [ 1835.349518][ T3661] xt_NETMAP: bad rangesize 37. [ 1835.536021][ T5640] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1835.551203][ T5640] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1835.560362][ T5640] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1835.570848][ T5640] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1835.580368][ T5640] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1836.311266][ T3699] netlink: 'syz.5.21024': attribute type 2 has an invalid length. [ 1836.363807][ T3666] lo speed is unknown, defaulting to 1000 [ 1836.365488][ T3666] virt_wifi0 speed is unknown, defaulting to 1000 [ 1836.367145][ T3666] wg1 speed is unknown, defaulting to 1000 [ 1836.554627][T16931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1836.663912][ T3708] __nla_validate_parse: 7 callbacks suppressed [ 1836.663931][ T3708] netlink: 88 bytes leftover after parsing attributes in process `syz.4.21029'. [ 1836.773348][ T3666] rxe_eth0 speed is unknown, defaulting to 1000 [ 1837.090002][ T3718] xt_time: unknown flags 0x68 [ 1837.334634][ T3730] Bluetooth: MGMT ver 1.23 [ 1837.461293][T15079] Bluetooth: hci5: unexpected cc 0x1003 length: 67 > 9 [ 1837.461330][T15079] Bluetooth: hci5: unexpected event for opcode 0x1003 [ 1837.675045][T15079] Bluetooth: hci1: command tx timeout [ 1837.852023][ T3666] bridge0: port 1(bridge_slave_0) entered blocking state [ 1837.852221][ T3666] bridge0: port 1(bridge_slave_0) entered disabled state [ 1837.852376][ T3666] bridge_slave_0: entered allmulticast mode [ 1837.866208][ T3666] bridge_slave_0: entered promiscuous mode [ 1837.870270][ T3666] bridge0: port 2(bridge_slave_1) entered blocking state [ 1837.870625][ T3666] bridge0: port 2(bridge_slave_1) entered disabled state [ 1837.870999][ T3666] bridge_slave_1: entered allmulticast mode [ 1837.877824][ T3666] bridge_slave_1: entered promiscuous mode [ 1837.951623][ T3666] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1837.967178][ T3666] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1838.010017][ T3666] team0: Port device team_slave_0 added [ 1838.019079][ T3666] team0: Port device team_slave_1 added [ 1838.057926][ T3666] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1838.057943][ T3666] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1838.057971][ T3666] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1838.059764][ T3666] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1838.059779][ T3666] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1838.059806][ T3666] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1838.223353][ T3768] netlink: 'syz.2.21051': attribute type 1 has an invalid length. [ 1838.291155][ T3666] hsr_slave_0: entered promiscuous mode [ 1838.300757][ T3666] hsr_slave_1: entered promiscuous mode [ 1838.303229][ T3666] debugfs: 'hsr0' already exists in 'hsr' [ 1838.303250][ T3666] Cannot create hsr debugfs directory [ 1838.646963][ T3774] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1838.663461][ T3774] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1838.672472][ T3774] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1838.695800][ T3774] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1838.702874][ T3774] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1838.729048][ T3774] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1838.748313][ T3774] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1838.775725][ T3774] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1838.789850][ T3774] mac80211_hwsim hwsim167 wlan0: entered promiscuous mode [ 1838.856878][ T3774] 8021q: adding VLAN 0 to HW filter on device eth0 [ 1838.876660][ T3774] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1838.894251][ T3774] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1838.903949][ T3774] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1839.418333][T29296] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1839.419065][T29296] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1839.419099][T29296] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1839.419127][T29296] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1839.574950][ T3666] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1839.574987][ T3666] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1839.596296][T16931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1839.753700][T15079] Bluetooth: hci1: command tx timeout [ 1839.755146][T32688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1839.755350][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1839.901037][ T3666] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1839.901074][ T3666] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1840.139144][ T3666] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1840.145559][ T3666] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1840.312452][ T3666] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1840.312489][ T3666] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1840.697712][ T3869] netlink: 52 bytes leftover after parsing attributes in process `syz.4.21092'. [ 1841.010244][ T3888] netlink: 20 bytes leftover after parsing attributes in process `syz.5.21101'. [ 1841.430452][ T3906] xt_nfacct: accounting object `' does not exist [ 1841.650112][ T3915] netlink: 32 bytes leftover after parsing attributes in process `syz.2.21113'. [ 1841.835057][T15079] Bluetooth: hci1: command tx timeout [ 1842.635887][T16931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1843.110463][ T3845] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1843.137526][ T3914] netlink: 'syz.2.21113': attribute type 2 has an invalid length. [ 1843.137547][ T3914] netlink: 244 bytes leftover after parsing attributes in process `syz.2.21113'. [ 1843.166330][ T3666] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1843.191508][ T3666] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1843.192468][ T3666] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1843.223896][ T3666] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1843.226404][ T3666] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1843.257007][ T3666] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1843.266519][ T3666] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1843.305858][ T3666] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1843.658938][ T3666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1843.731379][ T3959] bond14: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 1843.746762][ T3959] bond14 (unregistering): Released all slaves [ 1843.748428][ T3963] netlink: 72 bytes leftover after parsing attributes in process `syz.0.21130'. [ 1843.748450][ T3963] netlink: 12 bytes leftover after parsing attributes in process `syz.0.21130'. [ 1843.748467][ T3963] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21130'. [ 1843.885766][ T3965] netlink: 40 bytes leftover after parsing attributes in process `syz.0.21130'. [ 1843.890610][ T3666] 8021q: adding VLAN 0 to HW filter on device team0 [ 1843.913899][T15079] Bluetooth: hci1: command tx timeout [ 1843.921636][T17448] bridge0: port 1(bridge_slave_0) entered blocking state [ 1843.921746][T17448] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1843.968500][T17448] bridge0: port 2(bridge_slave_1) entered blocking state [ 1843.968608][T17448] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1844.427663][ T3993] FAULT_INJECTION: forcing a failure. [ 1844.427663][ T3993] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1844.427696][ T3993] CPU: 0 UID: 0 PID: 3993 Comm: syz.5.21141 Not tainted syzkaller #0 PREEMPT(full) [ 1844.427722][ T3993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1844.427735][ T3993] Call Trace: [ 1844.427745][ T3993] [ 1844.427754][ T3993] dump_stack_lvl+0xe8/0x150 [ 1844.427795][ T3993] should_fail_ex+0x3eb/0x540 [ 1844.427832][ T3993] prepare_alloc_pages+0x21e/0x5f0 [ 1844.427870][ T3993] __alloc_frozen_pages_noprof+0x17c/0x410 [ 1844.427906][ T3993] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1844.427934][ T3993] ? __alloc_frozen_pages_noprof+0x24c/0x410 [ 1844.427968][ T3993] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1844.428002][ T3993] ? __kmalloc_cache_node_noprof+0x3cc/0x620 [ 1844.428040][ T3993] ? __get_vm_area_node+0x155/0x2f0 [ 1844.428064][ T3993] __alloc_pages_noprof+0x10/0x100 [ 1844.428092][ T3993] alloc_pages_bulk_noprof+0x67a/0x8a0 [ 1844.428130][ T3993] ? alloc_pages_noprof+0x140/0x2b0 [ 1844.428165][ T3993] __kasan_populate_vmalloc+0xb7/0x1c0 [ 1844.428199][ T3993] alloc_vmap_area+0xd10/0x1410 [ 1844.428236][ T3993] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1844.428254][ T3993] ? __kmalloc_cache_node_noprof+0x3cc/0x620 [ 1844.428281][ T3993] ? __kmalloc_cache_node_noprof+0x1f2/0x620 [ 1844.428307][ T3993] ? __get_vm_area_node+0x155/0x2f0 [ 1844.428333][ T3993] __get_vm_area_node+0x200/0x2f0 [ 1844.428362][ T3993] __vmalloc_node_range_noprof+0x36e/0x16f0 [ 1844.428386][ T3993] ? bpf_prog_alloc_no_stats+0x47/0x550 [ 1844.428408][ T3993] ? lock_acquire+0x115/0x350 [ 1844.428444][ T3993] ? __lock_acquire+0x747/0x2de0 [ 1844.428484][ T3993] ? hook_capable+0x1c3/0x5e0 [ 1844.428515][ T3993] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1844.428549][ T3993] ? bpf_prog_alloc_no_stats+0x47/0x550 [ 1844.428568][ T3993] __vmalloc_noprof+0xd2/0x120 [ 1844.428591][ T3993] ? bpf_prog_alloc_no_stats+0x47/0x550 [ 1844.428614][ T3993] bpf_prog_alloc_no_stats+0x47/0x550 [ 1844.428634][ T3993] ? bpf_prog_alloc+0x2a/0x1a0 [ 1844.428656][ T3993] bpf_prog_alloc+0x3c/0x1a0 [ 1844.428679][ T3993] bpf_prog_load+0x7f8/0x1c60 [ 1844.428713][ T3993] ? __pfx_bpf_prog_load+0x10/0x10 [ 1844.428750][ T3993] ? __might_fault+0xaf/0x130 [ 1844.428779][ T3993] __sys_bpf+0xd86/0xe00 [ 1844.428808][ T3993] ? __pfx___sys_bpf+0x10/0x10 [ 1844.428841][ T3993] ? __fget_files+0x2a/0x420 [ 1844.428886][ T3993] ? ksys_write+0x242/0x270 [ 1844.428916][ T3993] ? __pfx_ksys_write+0x10/0x10 [ 1844.428973][ T3993] __x64_sys_bpf+0xba/0xd0 [ 1844.429009][ T3993] do_syscall_64+0x166/0x520 [ 1844.429035][ T3993] ? trace_irq_disable+0x3b/0x140 [ 1844.429066][ T3993] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1844.429089][ T3993] ? clear_bhb_loop+0x70/0xc0 [ 1844.429117][ T3993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1844.429140][ T3993] RIP: 0033:0x7f505219f559 [ 1844.429162][ T3993] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1844.429181][ T3993] RSP: 002b:00007f5052fc9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1844.429206][ T3993] RAX: ffffffffffffffda RBX: 00007f5052425fa0 RCX: 00007f505219f559 [ 1844.429223][ T3993] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 1844.429238][ T3993] RBP: 00007f5052fc9090 R08: 0000000000000000 R09: 0000000000000000 [ 1844.429253][ T3993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1844.429267][ T3993] R13: 00007f5052426038 R14: 00007f5052425fa0 R15: 00007ffcd68bd7a8 [ 1844.429303][ T3993] [ 1844.431109][ T3993] warn_alloc: 1 callbacks suppressed [ 1844.431126][ T3993] syz.5.21141: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1844.431196][ T3993] CPU: 0 UID: 0 PID: 3993 Comm: syz.5.21141 Not tainted syzkaller #0 PREEMPT(full) [ 1844.431221][ T3993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1844.431235][ T3993] Call Trace: [ 1844.431244][ T3993] [ 1844.431254][ T3993] dump_stack_lvl+0xe8/0x150 [ 1844.431302][ T3993] warn_alloc+0x24d/0x270 [ 1844.431332][ T3993] ? lockdep_hardirqs_on+0x7b/0x110 [ 1844.431362][ T3993] ? __pfx_warn_alloc+0x10/0x10 [ 1844.431389][ T3993] ? kfree+0x1c5/0x650 [ 1844.431428][ T3993] ? __get_vm_area_node+0x219/0x2f0 [ 1844.431461][ T3993] __vmalloc_node_range_noprof+0x396/0x16f0 [ 1844.431489][ T3993] ? lock_acquire+0x115/0x350 [ 1844.431522][ T3993] ? __lock_acquire+0x747/0x2de0 [ 1844.431567][ T3993] ? hook_capable+0x1c3/0x5e0 [ 1844.431602][ T3993] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1844.431640][ T3993] ? bpf_prog_alloc_no_stats+0x47/0x550 [ 1844.431662][ T3993] __vmalloc_noprof+0xd2/0x120 [ 1844.431687][ T3993] ? bpf_prog_alloc_no_stats+0x47/0x550 [ 1844.431714][ T3993] bpf_prog_alloc_no_stats+0x47/0x550 [ 1844.431736][ T3993] ? bpf_prog_alloc+0x2a/0x1a0 [ 1844.431761][ T3993] bpf_prog_alloc+0x3c/0x1a0 [ 1844.431787][ T3993] bpf_prog_load+0x7f8/0x1c60 [ 1844.431825][ T3993] ? __pfx_bpf_prog_load+0x10/0x10 [ 1844.431868][ T3993] ? __might_fault+0xaf/0x130 [ 1844.431900][ T3993] __sys_bpf+0xd86/0xe00 [ 1844.431934][ T3993] ? __pfx___sys_bpf+0x10/0x10 [ 1844.431970][ T3993] ? __fget_files+0x2a/0x420 [ 1844.432020][ T3993] ? ksys_write+0x242/0x270 [ 1844.432053][ T3993] ? __pfx_ksys_write+0x10/0x10 [ 1844.432090][ T3993] __x64_sys_bpf+0xba/0xd0 [ 1844.432128][ T3993] do_syscall_64+0x166/0x520 [ 1844.432154][ T3993] ? trace_irq_disable+0x3b/0x140 [ 1844.432186][ T3993] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1844.432211][ T3993] ? clear_bhb_loop+0x70/0xc0 [ 1844.432241][ T3993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1844.432264][ T3993] RIP: 0033:0x7f505219f559 [ 1844.432286][ T3993] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1844.432307][ T3993] RSP: 002b:00007f5052fc9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1844.432331][ T3993] RAX: ffffffffffffffda RBX: 00007f5052425fa0 RCX: 00007f505219f559 [ 1844.432349][ T3993] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 1844.432364][ T3993] RBP: 00007f5052fc9090 R08: 0000000000000000 R09: 0000000000000000 [ 1844.432379][ T3993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1844.432393][ T3993] R13: 00007f5052426038 R14: 00007f5052425fa0 R15: 00007ffcd68bd7a8 [ 1844.432438][ T3993] [ 1844.432448][ T3993] Mem-Info: [ 1844.432458][ T3993] active_anon:6149 inactive_anon:0 isolated_anon:0 [ 1844.432458][ T3993] active_file:384 inactive_file:44392 isolated_file:0 [ 1844.432458][ T3993] unevictable:0 dirty:111 writeback:0 [ 1844.432458][ T3993] slab_reclaimable:14481 slab_unreclaimable:153598 [ 1844.432458][ T3993] mapped:29917 shmem:534 pagetables:1424 [ 1844.432458][ T3993] sec_pagetables:0 bounce:0 [ 1844.432458][ T3993] kernel_misc_reclaimable:0 [ 1844.432458][ T3993] free:1255753 free_pcp:9474 free_cma:0 [ 1844.432526][ T3993] Node 0 active_anon:24596kB inactive_anon:0kB active_file:1536kB inactive_file:177356kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:119668kB dirty:444kB writeback:0kB shmem:2136kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:19016kB pagetables:5540kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1844.432584][ T3993] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1844.432668][ T3993] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1844.432729][ T3993] lowmem_reserve[]: 0 2463 2465 2465 2465 [ 1844.432769][ T3993] Node 0 DMA32 free:1081556kB boost:0kB min:33936kB low:42420kB high:50904kB reserved_highatomic:0kB free_highatomic:0kB active_anon:24596kB inactive_anon:0kB active_file:1536kB inactive_file:177356kB unevictable:0kB writepending:444kB zspages:0kB present:3129332kB managed:2523120kB mlocked:0kB bounce:0kB free_pcp:32360kB local_pcp:17964kB free_cma:0kB [ 1844.432831][ T3993] lowmem_reserve[]: 0 0 1 1 1 [ 1844.541588][ T3993] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1660kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 1844.541653][ T3993] lowmem_reserve[]: 0 0 0 0 0 [ 1844.541692][ T3993] Node 1 Normal free:3926096kB boost:0kB min:55940kB low:69924kB high:83908kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:5532kB local_pcp:0kB free_cma:0kB [ 1844.541760][ T3993] lowmem_reserve[]: 0 0 0 0 0 [ 1844.541799][ T3993] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1844.541930][ T3993] Node 0 DMA32: 939*4kB (UME) 1105*8kB (UME) 478*16kB (UME) 284*32kB (UME) 73*64kB (UME) 80*128kB (UME) 40*256kB (UME) 16*512kB (UME) 13*1024kB (UME) 15*2048kB (UM) 238*4096kB (UM) = 1081556kB [ 1844.542107][ T3993] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1844.542218][ T3993] Node 1 Normal: 2*4kB (M) 1*8kB (M) 2*16kB (UM) 1*32kB (M) 2*64kB (UM) 1*128kB (M) 3*256kB (UM) 2*512kB (M) 2*1024kB (UM) 1*2048kB (U) 957*4096kB (UM) = 3926096kB [ 1844.542394][ T3993] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1844.542432][ T3993] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1844.542460][ T3993] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1844.542476][ T3993] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1844.542491][ T3993] 45306 total pagecache pages [ 1844.542499][ T3993] 0 pages in swap cache [ 1844.542506][ T3993] Free swap = 124996kB [ 1844.561022][ T3993] Total swap = 124996kB [ 1844.561075][ T3993] 2097051 pages RAM [ 1844.561089][ T3993] 0 pages HighMem/MovableOnly [ 1844.561101][ T3993] 434240 pages reserved [ 1844.561121][ T3993] 0 pages cma reserved [ 1844.786727][ T3995] netlink: 24 bytes leftover after parsing attributes in process `syz.2.21142'. [ 1844.886497][T25919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1844.887047][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1845.675233][T16930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1845.768797][ T4013] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 28 bytes [ 1845.797754][ T4013] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 28 bytes [ 1845.907760][ T4022] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21149'. [ 1846.257405][ T3666] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1846.337497][ T4046] FAULT_INJECTION: forcing a failure. [ 1846.337497][ T4046] name failslab, interval 1, probability 0, space 0, times 0 [ 1846.337528][ T4046] CPU: 0 UID: 0 PID: 4046 Comm: syz.0.21159 Not tainted syzkaller #0 PREEMPT(full) [ 1846.337550][ T4046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1846.337563][ T4046] Call Trace: [ 1846.337571][ T4046] [ 1846.337580][ T4046] dump_stack_lvl+0xe8/0x150 [ 1846.337619][ T4046] should_fail_ex+0x3eb/0x540 [ 1846.337650][ T4046] should_failslab+0xa8/0x100 [ 1846.337681][ T4046] __kmalloc_node_noprof+0xfb/0x720 [ 1846.337715][ T4046] ? __get_vm_area_node+0x200/0x2f0 [ 1846.337735][ T4046] ? __get_vm_area_node+0x283/0x2f0 [ 1846.337753][ T4046] ? __vmalloc_node_range_noprof+0x5d1/0x16f0 [ 1846.337774][ T4046] ? __vmalloc_node_range_noprof+0x5d1/0x16f0 [ 1846.337805][ T4046] __vmalloc_node_range_noprof+0x5d1/0x16f0 [ 1846.337845][ T4046] ? __lock_acquire+0x747/0x2de0 [ 1846.337883][ T4046] ? hook_capable+0x1c3/0x5e0 [ 1846.337913][ T4046] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1846.337945][ T4046] ? bpf_prog_alloc_no_stats+0x47/0x550 [ 1846.337963][ T4046] __vmalloc_noprof+0xd2/0x120 [ 1846.337984][ T4046] ? bpf_prog_alloc_no_stats+0x47/0x550 [ 1846.338006][ T4046] bpf_prog_alloc_no_stats+0x47/0x550 [ 1846.338023][ T4046] ? bpf_prog_alloc+0x2a/0x1a0 [ 1846.338044][ T4046] bpf_prog_alloc+0x3c/0x1a0 [ 1846.338065][ T4046] bpf_prog_load+0x7f8/0x1c60 [ 1846.338098][ T4046] ? __pfx_bpf_prog_load+0x10/0x10 [ 1846.338133][ T4046] ? __might_fault+0xaf/0x130 [ 1846.338159][ T4046] __sys_bpf+0xd86/0xe00 [ 1846.338186][ T4046] ? __pfx___sys_bpf+0x10/0x10 [ 1846.338217][ T4046] ? __fget_files+0x2a/0x420 [ 1846.338275][ T4046] ? ksys_write+0x242/0x270 [ 1846.338309][ T4046] ? __pfx_ksys_write+0x10/0x10 [ 1846.338342][ T4046] __x64_sys_bpf+0xba/0xd0 [ 1846.338375][ T4046] do_syscall_64+0x166/0x520 [ 1846.338399][ T4046] ? trace_irq_disable+0x3b/0x140 [ 1846.338428][ T4046] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1846.338450][ T4046] ? clear_bhb_loop+0x70/0xc0 [ 1846.338476][ T4046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1846.338497][ T4046] RIP: 0033:0x7fe0e539f559 [ 1846.338517][ T4046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1846.338534][ T4046] RSP: 002b:00007fe0e631f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1846.338556][ T4046] RAX: ffffffffffffffda RBX: 00007fe0e5625fa0 RCX: 00007fe0e539f559 [ 1846.338572][ T4046] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 1846.338586][ T4046] RBP: 00007fe0e631f090 R08: 0000000000000000 R09: 0000000000000000 [ 1846.338600][ T4046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1846.338613][ T4046] R13: 00007fe0e5626038 R14: 00007fe0e5625fa0 R15: 00007ffe86ae45d8 [ 1846.338647][ T4046] [ 1846.674297][ T3666] veth0_vlan: entered promiscuous mode [ 1846.720020][ T3666] veth1_vlan: entered promiscuous mode [ 1846.821054][ T3666] veth0_macvtap: entered promiscuous mode [ 1846.840976][ T3666] veth1_macvtap: entered promiscuous mode [ 1846.904894][ T3666] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1846.945860][ T3666] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1847.006297][ T6539] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1847.009949][T17437] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1847.009993][T17437] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1847.010030][T17437] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1847.076595][ T4055] netlink: 'syz.4.21164': attribute type 2 has an invalid length. [ 1847.328368][ T6539] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1847.328390][ T6539] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1847.427748][ T6539] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1847.427771][ T6539] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1847.785740][ T4089] FAULT_INJECTION: forcing a failure. [ 1847.785740][ T4089] name failslab, interval 1, probability 0, space 0, times 0 [ 1847.785775][ T4089] CPU: 1 UID: 0 PID: 4089 Comm: syz.1.21013 Not tainted syzkaller #0 PREEMPT(full) [ 1847.785801][ T4089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1847.785815][ T4089] Call Trace: [ 1847.785824][ T4089] [ 1847.785834][ T4089] dump_stack_lvl+0xe8/0x150 [ 1847.785875][ T4089] should_fail_ex+0x3eb/0x540 [ 1847.785909][ T4089] should_failslab+0xa8/0x100 [ 1847.785944][ T4089] __kvmalloc_node_noprof+0x171/0x820 [ 1847.785977][ T4089] ? __kvmalloc_node_noprof+0x340/0x820 [ 1847.786005][ T4089] ? sort_subprogs_topo+0xf4/0x1130 [ 1847.786029][ T4089] ? sort_subprogs_topo+0xf4/0x1130 [ 1847.786063][ T4089] sort_subprogs_topo+0xf4/0x1130 [ 1847.786086][ T4089] ? bpf_prune_dead_branches+0xb56/0xbc0 [ 1847.786143][ T4089] bpf_check+0x2c4c/0x34e0 [ 1847.786179][ T4089] ? ktime_get_with_offset+0x93/0x2d0 [ 1847.786211][ T4089] ? ktime_get_with_offset+0x93/0x2d0 [ 1847.786249][ T4089] ? __pfx_bpf_check+0x10/0x10 [ 1847.786282][ T4089] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1847.786316][ T4089] bpf_prog_load+0x14da/0x1c60 [ 1847.786353][ T4089] ? __pfx_bpf_prog_load+0x10/0x10 [ 1847.786395][ T4089] ? __might_fault+0xaf/0x130 [ 1847.786430][ T4089] __sys_bpf+0xd86/0xe00 [ 1847.786462][ T4089] ? __pfx___sys_bpf+0x10/0x10 [ 1847.786498][ T4089] ? __fget_files+0x2a/0x420 [ 1847.786547][ T4089] ? ksys_write+0x242/0x270 [ 1847.786580][ T4089] ? __pfx_ksys_write+0x10/0x10 [ 1847.786616][ T4089] __x64_sys_bpf+0xba/0xd0 [ 1847.786653][ T4089] do_syscall_64+0x166/0x520 [ 1847.786679][ T4089] ? trace_irq_disable+0x3b/0x140 [ 1847.786711][ T4089] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1847.786735][ T4089] ? clear_bhb_loop+0x70/0xc0 [ 1847.786763][ T4089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1847.786787][ T4089] RIP: 0033:0x7fe18fd9f559 [ 1847.786808][ T4089] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1847.786829][ T4089] RSP: 002b:00007fe190ca1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1847.786854][ T4089] RAX: ffffffffffffffda RBX: 00007fe190025fa0 RCX: 00007fe18fd9f559 [ 1847.786871][ T4089] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 1847.786886][ T4089] RBP: 00007fe190ca1090 R08: 0000000000000000 R09: 0000000000000000 [ 1847.786902][ T4089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1847.786916][ T4089] R13: 00007fe190026038 R14: 00007fe190025fa0 R15: 00007ffced8f8498 [ 1847.786955][ T4089] [ 1848.052509][ T4092] netlink: 'syz.5.21177': attribute type 1 has an invalid length. [ 1848.121147][ T4092] bond8: entered promiscuous mode [ 1848.121627][ T4092] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1848.145726][ T4094] vlan2: entered allmulticast mode [ 1848.145751][ T4094] bond8: entered allmulticast mode [ 1848.171854][ T4092] netlink: 'syz.5.21177': attribute type 1 has an invalid length. [ 1848.275401][ T4092] bond9 (unregistering): Released all slaves [ 1848.302340][ T4104] netlink: 28 bytes leftover after parsing attributes in process `syz.5.21177'. [ 1848.366904][ T4109] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 1848.679079][ T4123] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21187'. [ 1848.712597][ T4123] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21187'. [ 1848.734610][T16931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1848.903780][ T4137] netlink: 4 bytes leftover after parsing attributes in process `syz.5.21192'. [ 1848.970051][ T4143] netlink: 40 bytes leftover after parsing attributes in process `syz.4.21194'. [ 1848.989174][ T4143] ebt_among: dst integrity fail: 200 [ 1849.138887][ T4152] netlink: 'syz.1.21197': attribute type 2 has an invalid length. [ 1849.541488][ T4174] FAULT_INJECTION: forcing a failure. [ 1849.541488][ T4174] name failslab, interval 1, probability 0, space 0, times 0 [ 1849.541522][ T4174] CPU: 0 UID: 0 PID: 4174 Comm: syz.2.21209 Not tainted syzkaller #0 PREEMPT(full) [ 1849.541548][ T4174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1849.541563][ T4174] Call Trace: [ 1849.541572][ T4174] [ 1849.541582][ T4174] dump_stack_lvl+0xe8/0x150 [ 1849.541625][ T4174] should_fail_ex+0x3eb/0x540 [ 1849.541659][ T4174] should_failslab+0xa8/0x100 [ 1849.541695][ T4174] __kvmalloc_node_noprof+0x171/0x820 [ 1849.541729][ T4174] ? __kvmalloc_node_noprof+0x340/0x820 [ 1849.541762][ T4174] ? bpf_compute_postorder+0xd3/0x9a0 [ 1849.541792][ T4174] ? bpf_compute_postorder+0xd3/0x9a0 [ 1849.541832][ T4174] bpf_compute_postorder+0xd3/0x9a0 [ 1849.541865][ T4174] ? __pfx_resolve_func_ptrs+0x10/0x10 [ 1849.541889][ T4174] ? check_unwind_insns+0x670/0x910 [ 1849.541926][ T4174] bpf_check+0x298f/0x34e0 [ 1849.541964][ T4174] ? ktime_get_with_offset+0x93/0x2d0 [ 1849.541996][ T4174] ? ktime_get_with_offset+0x93/0x2d0 [ 1849.542028][ T4174] ? __pfx_bpf_check+0x10/0x10 [ 1849.542056][ T4174] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1849.542090][ T4174] bpf_prog_load+0x14da/0x1c60 [ 1849.542128][ T4174] ? __pfx_bpf_prog_load+0x10/0x10 [ 1849.542170][ T4174] ? __might_fault+0xaf/0x130 [ 1849.542202][ T4174] __sys_bpf+0xd86/0xe00 [ 1849.542234][ T4174] ? __pfx___sys_bpf+0x10/0x10 [ 1849.542270][ T4174] ? __fget_files+0x2a/0x420 [ 1849.542319][ T4174] ? ksys_write+0x242/0x270 [ 1849.542352][ T4174] ? __pfx_ksys_write+0x10/0x10 [ 1849.542389][ T4174] __x64_sys_bpf+0xba/0xd0 [ 1849.542425][ T4174] do_syscall_64+0x166/0x520 [ 1849.542470][ T4174] ? trace_irq_disable+0x3b/0x140 [ 1849.542511][ T4174] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1849.542534][ T4174] ? clear_bhb_loop+0x70/0xc0 [ 1849.542560][ T4174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1849.542581][ T4174] RIP: 0033:0x7f801699f559 [ 1849.542602][ T4174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1849.542620][ T4174] RSP: 002b:00007f80177c2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1849.542643][ T4174] RAX: ffffffffffffffda RBX: 00007f8016c25fa0 RCX: 00007f801699f559 [ 1849.542659][ T4174] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 1849.542674][ T4174] RBP: 00007f80177c2090 R08: 0000000000000000 R09: 0000000000000000 [ 1849.542688][ T4174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1849.542701][ T4174] R13: 00007f8016c26038 R14: 00007f8016c25fa0 R15: 00007ffcc1ff98c8 [ 1849.542735][ T4174] [ 1849.995653][ T6539] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1849.995873][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1850.155106][T15079] Bluetooth: hci5: command 0x0406 tx timeout [ 1850.464714][ T4218] xt_nfacct: accounting object `' does not exist [ 1850.596219][ T4226] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1850.596237][ T4226] IPv6: NLM_F_CREATE should be set when creating new route [ 1850.596278][ T4226] IPv6: NLM_F_CREATE should be set when creating new route [ 1850.596331][ T4226] IPv6: NLM_F_CREATE should be set when creating new route [ 1850.817613][ T4239] FAULT_INJECTION: forcing a failure. [ 1850.817613][ T4239] name failslab, interval 1, probability 0, space 0, times 0 [ 1850.817643][ T4239] CPU: 1 UID: 0 PID: 4239 Comm: syz.0.21232 Not tainted syzkaller #0 PREEMPT(full) [ 1850.817665][ T4239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1850.817679][ T4239] Call Trace: [ 1850.817686][ T4239] [ 1850.817695][ T4239] dump_stack_lvl+0xe8/0x150 [ 1850.817731][ T4239] should_fail_ex+0x3eb/0x540 [ 1850.817758][ T4239] should_failslab+0xa8/0x100 [ 1850.817789][ T4239] __kvmalloc_node_noprof+0x171/0x820 [ 1850.817814][ T4239] ? __pfx_bpf_compute_const_regs+0x10/0x10 [ 1850.817844][ T4239] ? sort_subprogs_topo+0xbe/0x1130 [ 1850.817865][ T4239] ? sort_subprogs_topo+0xbe/0x1130 [ 1850.817893][ T4239] sort_subprogs_topo+0xbe/0x1130 [ 1850.817913][ T4239] ? bpf_prune_dead_branches+0xb56/0xbc0 [ 1850.817960][ T4239] bpf_check+0x2c4c/0x34e0 [ 1850.817991][ T4239] ? ktime_get_with_offset+0x93/0x2d0 [ 1850.818018][ T4239] ? ktime_get_with_offset+0x93/0x2d0 [ 1850.818046][ T4239] ? __pfx_bpf_check+0x10/0x10 [ 1850.818069][ T4239] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1850.818097][ T4239] bpf_prog_load+0x14da/0x1c60 [ 1850.818129][ T4239] ? __pfx_bpf_prog_load+0x10/0x10 [ 1850.818165][ T4239] ? __might_fault+0xaf/0x130 [ 1850.818191][ T4239] __sys_bpf+0xd86/0xe00 [ 1850.818218][ T4239] ? __pfx___sys_bpf+0x10/0x10 [ 1850.818248][ T4239] ? __fget_files+0x2a/0x420 [ 1850.818289][ T4239] ? ksys_write+0x242/0x270 [ 1850.818317][ T4239] ? __pfx_ksys_write+0x10/0x10 [ 1850.818348][ T4239] __x64_sys_bpf+0xba/0xd0 [ 1850.818386][ T4239] do_syscall_64+0x166/0x520 [ 1850.818409][ T4239] ? trace_irq_disable+0x3b/0x140 [ 1850.818437][ T4239] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1850.818458][ T4239] ? clear_bhb_loop+0x70/0xc0 [ 1850.818482][ T4239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1850.818502][ T4239] RIP: 0033:0x7fe0e539f559 [ 1850.818520][ T4239] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1850.818539][ T4239] RSP: 002b:00007fe0e631f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1850.818561][ T4239] RAX: ffffffffffffffda RBX: 00007fe0e5625fa0 RCX: 00007fe0e539f559 [ 1850.818576][ T4239] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 1850.818589][ T4239] RBP: 00007fe0e631f090 R08: 0000000000000000 R09: 0000000000000000 [ 1850.818602][ T4239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1850.818615][ T4239] R13: 00007fe0e5626038 R14: 00007fe0e5625fa0 R15: 00007ffe86ae45d8 [ 1850.818647][ T4239] [ 1851.754986][T16931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1851.864408][ T4278] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1852.550233][ T4325] FAULT_INJECTION: forcing a failure. [ 1852.550233][ T4325] name failslab, interval 1, probability 0, space 0, times 0 [ 1852.550280][ T4325] CPU: 1 UID: 0 PID: 4325 Comm: syz.4.21262 Not tainted syzkaller #0 PREEMPT(full) [ 1852.550303][ T4325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1852.550316][ T4325] Call Trace: [ 1852.550325][ T4325] [ 1852.550334][ T4325] dump_stack_lvl+0xe8/0x150 [ 1852.550373][ T4325] should_fail_ex+0x3eb/0x540 [ 1852.550403][ T4325] should_failslab+0xa8/0x100 [ 1852.550440][ T4325] __kvmalloc_node_noprof+0x171/0x820 [ 1852.550478][ T4325] ? __kvmalloc_node_noprof+0x340/0x820 [ 1852.550505][ T4325] ? bpf_compute_postorder+0x179/0x9a0 [ 1852.550533][ T4325] ? bpf_compute_postorder+0x179/0x9a0 [ 1852.550569][ T4325] bpf_compute_postorder+0x179/0x9a0 [ 1852.550599][ T4325] ? __pfx_resolve_func_ptrs+0x10/0x10 [ 1852.550634][ T4325] bpf_check+0x298f/0x34e0 [ 1852.550668][ T4325] ? ktime_get_with_offset+0x93/0x2d0 [ 1852.550698][ T4325] ? ktime_get_with_offset+0x93/0x2d0 [ 1852.550727][ T4325] ? __pfx_bpf_check+0x10/0x10 [ 1852.550753][ T4325] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1852.550784][ T4325] bpf_prog_load+0x14da/0x1c60 [ 1852.550818][ T4325] ? __pfx_bpf_prog_load+0x10/0x10 [ 1852.550856][ T4325] ? __might_fault+0xaf/0x130 [ 1852.550885][ T4325] __sys_bpf+0xd86/0xe00 [ 1852.550914][ T4325] ? __pfx___sys_bpf+0x10/0x10 [ 1852.550946][ T4325] ? __fget_files+0x2a/0x420 [ 1852.550991][ T4325] ? ksys_write+0x242/0x270 [ 1852.551021][ T4325] ? __pfx_ksys_write+0x10/0x10 [ 1852.551054][ T4325] __x64_sys_bpf+0xba/0xd0 [ 1852.551087][ T4325] do_syscall_64+0x166/0x520 [ 1852.551111][ T4325] ? trace_irq_disable+0x3b/0x140 [ 1852.551139][ T4325] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1852.551161][ T4325] ? clear_bhb_loop+0x70/0xc0 [ 1852.551187][ T4325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1852.551208][ T4325] RIP: 0033:0x7fe0fb79f559 [ 1852.551246][ T4325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1852.551266][ T4325] RSP: 002b:00007fe0fc655028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1852.551291][ T4325] RAX: ffffffffffffffda RBX: 00007fe0fba25fa0 RCX: 00007fe0fb79f559 [ 1852.551309][ T4325] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 1852.551325][ T4325] RBP: 00007fe0fc655090 R08: 0000000000000000 R09: 0000000000000000 [ 1852.551340][ T4325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1852.551354][ T4325] R13: 00007fe0fba26038 R14: 00007fe0fba25fa0 R15: 00007ffd3c543b58 [ 1852.551393][ T4325] [ 1853.989264][ T4390] netlink: 24 bytes leftover after parsing attributes in process `syz.4.21286'. [ 1854.113749][ T4398] netlink: 'syz.5.21290': attribute type 12 has an invalid length. [ 1854.113773][ T4398] netlink: 'syz.5.21290': attribute type 29 has an invalid length. [ 1854.113787][ T4398] netlink: 148 bytes leftover after parsing attributes in process `syz.5.21290'. [ 1854.113805][ T4398] netlink: 59 bytes leftover after parsing attributes in process `syz.5.21290'. [ 1854.271928][ T4407] netlink: 28 bytes leftover after parsing attributes in process `syz.4.21294'. [ 1854.271967][ T4407] netlink: 'syz.4.21294': attribute type 7 has an invalid length. [ 1854.271983][ T4407] netlink: 'syz.4.21294': attribute type 8 has an invalid length. [ 1854.271998][ T4407] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21294'. [ 1854.393714][ T4412] netlink: 'syz.0.21295': attribute type 1 has an invalid length. [ 1854.797753][T16933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1855.398057][ T4473] FAULT_INJECTION: forcing a failure. [ 1855.398057][ T4473] name failslab, interval 1, probability 0, space 0, times 0 [ 1855.398081][ T4473] CPU: 1 UID: 0 PID: 4473 Comm: syz.5.21318 Not tainted syzkaller #0 PREEMPT(full) [ 1855.398097][ T4473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1855.398123][ T4473] Call Trace: [ 1855.398130][ T4473] [ 1855.398139][ T4473] dump_stack_lvl+0xe8/0x150 [ 1855.398174][ T4473] should_fail_ex+0x3eb/0x540 [ 1855.398203][ T4473] should_failslab+0xa8/0x100 [ 1855.398239][ T4473] __kvmalloc_node_noprof+0x171/0x820 [ 1855.398260][ T4473] ? __kvmalloc_node_noprof+0x340/0x820 [ 1855.398278][ T4473] ? bpf_compute_scc+0x120/0xdb0 [ 1855.398296][ T4473] ? bpf_compute_scc+0x120/0xdb0 [ 1855.398320][ T4473] bpf_compute_scc+0x120/0xdb0 [ 1855.398338][ T4473] ? sort_subprogs_topo+0xe5f/0x1130 [ 1855.398368][ T4473] bpf_check+0x2c70/0x34e0 [ 1855.398390][ T4473] ? ktime_get_with_offset+0x93/0x2d0 [ 1855.398428][ T4473] ? ktime_get_with_offset+0x93/0x2d0 [ 1855.398449][ T4473] ? __pfx_bpf_check+0x10/0x10 [ 1855.398467][ T4473] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1855.398488][ T4473] bpf_prog_load+0x14da/0x1c60 [ 1855.398512][ T4473] ? __pfx_bpf_prog_load+0x10/0x10 [ 1855.398537][ T4473] ? __might_fault+0xaf/0x130 [ 1855.398557][ T4473] __sys_bpf+0xd86/0xe00 [ 1855.398582][ T4473] ? __pfx___sys_bpf+0x10/0x10 [ 1855.398605][ T4473] ? __fget_files+0x2a/0x420 [ 1855.398635][ T4473] ? ksys_write+0x242/0x270 [ 1855.398659][ T4473] ? __pfx_ksys_write+0x10/0x10 [ 1855.398698][ T4473] __x64_sys_bpf+0xba/0xd0 [ 1855.398732][ T4473] do_syscall_64+0x166/0x520 [ 1855.398794][ T4473] ? trace_irq_disable+0x3b/0x140 [ 1855.398815][ T4473] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1855.398849][ T4473] ? clear_bhb_loop+0x70/0xc0 [ 1855.398868][ T4473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1855.398884][ T4473] RIP: 0033:0x7f505219f559 [ 1855.398906][ T4473] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1855.398920][ T4473] RSP: 002b:00007f5052fc9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1855.398937][ T4473] RAX: ffffffffffffffda RBX: 00007f5052425fa0 RCX: 00007f505219f559 [ 1855.398949][ T4473] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 1855.398978][ T4473] RBP: 00007f5052fc9090 R08: 0000000000000000 R09: 0000000000000000 [ 1855.398989][ T4473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1855.398999][ T4473] R13: 00007f5052426038 R14: 00007f5052425fa0 R15: 00007ffcd68bd7a8 [ 1855.399025][ T4473] [ 1855.758337][T17448] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1855.758587][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1855.886570][ T4492] netlink: 28 bytes leftover after parsing attributes in process `syz.2.21323'. [ 1856.164064][ T4505] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21327'. [ 1856.500456][ T4523] netlink: 24 bytes leftover after parsing attributes in process `syz.2.21335'. [ 1856.507094][ T4523] netlink: 44 bytes leftover after parsing attributes in process `syz.2.21335'. [ 1856.532316][ T4528] bond0: (slave dummy0): Error: Device can not be enslaved while up [ 1857.006904][ T4552] netlink: 'syz.4.21347': attribute type 1 has an invalid length. [ 1857.007166][ T4552] netlink: 'syz.4.21347': attribute type 1 has an invalid length. [ 1857.008966][ T4552] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21347'. [ 1857.118272][ T4558] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1857.835060][T16933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1857.926148][ T4595] xt_nfacct: accounting object `' does not exist [ 1858.032520][ T4601] xt_hashlimit: size too large, truncated to 1048576 [ 1858.114698][ T4603] xt_hashlimit: size too large, truncated to 1048576 [ 1858.541046][ T4628] netlink: 'syz.1.21375': attribute type 1 has an invalid length. [ 1859.095765][ T4652] __nla_validate_parse: 5 callbacks suppressed [ 1859.095786][ T4652] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21382'. [ 1859.204516][ T4668] xt_nfacct: accounting object `' does not exist [ 1859.655361][T15079] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1859.658001][T15079] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1859.662482][T15079] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1859.681792][T15079] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1859.691024][T15079] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1860.317601][ T6543] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1860.317656][ T6543] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1860.584580][ T6543] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1860.584619][ T6543] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1860.662047][ T4724] syzkaller1: entered promiscuous mode [ 1860.662072][ T4724] syzkaller1: entered allmulticast mode [ 1860.847676][ T6543] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1860.847714][ T6543] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1860.877810][T16931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1860.967119][ T4734] netlink: 12 bytes leftover after parsing attributes in process `syz.2.21409'. [ 1861.059556][ T6543] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1861.059611][ T6543] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1861.093452][ T4744] xt_nfacct: accounting object `' does not exist [ 1861.112271][ T4688] lo speed is unknown, defaulting to 1000 [ 1861.129381][ T4688] virt_wifi0 speed is unknown, defaulting to 1000 [ 1861.140081][ T4688] wg1 speed is unknown, defaulting to 1000 [ 1861.367082][ T4755] netlink: 56 bytes leftover after parsing attributes in process `syz.1.21416'. [ 1861.520884][T17435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1861.521061][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1861.595366][ T4746] syzkaller0: entered promiscuous mode [ 1861.595392][ T4746] syzkaller0: entered allmulticast mode [ 1861.640485][ T4761] gretap0: entered promiscuous mode [ 1861.640509][ T4761] gretap0: entered allmulticast mode [ 1861.754198][ T5640] Bluetooth: hci2: command tx timeout [ 1861.789156][ T4773] netlink: 65047 bytes leftover after parsing attributes in process `syz.5.21423'. [ 1863.839638][ T5640] Bluetooth: hci2: command tx timeout [ 1863.915684][T16933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1864.199859][ T4688] rxe_eth0 speed is unknown, defaulting to 1000 [ 1864.230472][ T4785] geneve2: entered promiscuous mode [ 1864.243408][T17435] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1864.253701][T32688] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1864.365034][T32688] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1864.439486][T25919] netdevsim netdevsim0 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 1864.485571][ T6543] bridge_slave_1: left allmulticast mode [ 1864.485597][ T6543] bridge_slave_1: left promiscuous mode [ 1864.485798][ T6543] bridge0: port 2(bridge_slave_1) entered disabled state [ 1864.526669][ T6543] bridge_slave_0: left allmulticast mode [ 1864.526697][ T6543] bridge_slave_0: left promiscuous mode [ 1864.526911][ T6543] bridge0: port 1(bridge_slave_0) entered disabled state [ 1864.985433][ T4827] netlink: ct family unspecified [ 1864.998560][ T4827] netlink: 8 bytes leftover after parsing attributes in process `syz.4.21443'. [ 1864.998644][ T4827] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1864.998656][ T4827] IPv6: NLM_F_CREATE should be set when creating new route [ 1864.998684][ T4827] IPv6: NLM_F_CREATE should be set when creating new route [ 1865.351068][ T6543] bond10 (unregistering): (slave xfrm1): Releasing backup interface [ 1865.351096][ T6543] xfrm1 (unregistering): left promiscuous mode [ 1865.504516][ T6543] bond11 (unregistering): (slave gretap0): Releasing backup interface [ 1865.555671][ T4815] netlink: 8 bytes leftover after parsing attributes in process `syz.5.21441'. [ 1865.581583][ T6543] bond13 (unregistering): (slave geneve2): Releasing active interface [ 1865.735268][ T6543] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1865.737795][ T6543] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1865.739365][ T6543] bond0 (unregistering): Released all slaves [ 1865.777545][ T6543] bond1 (unregistering): Released all slaves [ 1865.799513][ T6543] bond2 (unregistering): Released all slaves [ 1865.822118][ T6543] bond3 (unregistering): Released all slaves [ 1865.858306][ T6543] bond4 (unregistering): Released all slaves [ 1865.881113][ T6543] bond5 (unregistering): Released all slaves [ 1865.909631][ T6543] bond6 (unregistering): Released all slaves [ 1865.913606][ T5640] Bluetooth: hci2: command tx timeout [ 1865.945492][ T6543] bond7 (unregistering): Released all slaves [ 1865.966902][ T6543] bond8 (unregistering): Released all slaves [ 1865.992846][ T6543] bond9 (unregistering): Released all slaves [ 1866.026188][ T6543] bond10 (unregistering): Released all slaves [ 1866.049229][ T6543] bond11 (unregistering): (slave bond12): Releasing backup interface [ 1866.049998][ T6543] bond11 (unregistering): Released all slaves [ 1866.097438][ T6543] bond12 (unregistering): Released all slaves [ 1866.141219][ T6543] bond13 (unregistering): Released all slaves [ 1866.198933][ T4815] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1866.199628][ T4815] netlink: 152 bytes leftover after parsing attributes in process `syz.5.21441'. [ 1866.637866][ T6543] IPVS: stopping backup sync thread 29131 ... [ 1866.890797][ T4862] rdma_rxe: rxe_newlink: failed to add wg1 [ 1866.961345][T16931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1867.016012][ T4867] netlink: 'syz.5.21455': attribute type 1 has an invalid length. [ 1867.159282][ T4875] netlink: 'syz.5.21455': attribute type 10 has an invalid length. [ 1867.159309][ T4875] netlink: 40 bytes leftover after parsing attributes in process `syz.5.21455'. [ 1867.282863][T25919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1867.283508][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1867.567468][ T5299] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1867.816162][ T4894] bridge1: entered promiscuous mode [ 1867.816198][ T4894] bridge1: entered allmulticast mode [ 1867.993706][ T5640] Bluetooth: hci2: command tx timeout [ 1868.041895][ T4688] bridge0: port 1(bridge_slave_0) entered blocking state [ 1868.043486][ T4688] bridge0: port 1(bridge_slave_0) entered disabled state [ 1868.043924][ T4688] bridge_slave_0: entered allmulticast mode [ 1868.066251][ T4688] bridge_slave_0: entered promiscuous mode [ 1868.088374][ T4688] bridge0: port 2(bridge_slave_1) entered blocking state [ 1868.088475][ T4688] bridge0: port 2(bridge_slave_1) entered disabled state [ 1868.088637][ T4688] bridge_slave_1: entered allmulticast mode [ 1868.116431][ T4688] bridge_slave_1: entered promiscuous mode [ 1868.307540][ T4688] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1868.340157][ T4688] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1868.705815][ T4688] team0: Port device team_slave_0 added [ 1868.728617][ T4688] team0: Port device team_slave_1 added [ 1868.790293][ T4933] netlink: 'syz.1.21471': attribute type 28 has an invalid length. [ 1868.790327][ T4933] netlink: 'syz.1.21471': attribute type 3 has an invalid length. [ 1868.790341][ T4933] netlink: 132 bytes leftover after parsing attributes in process `syz.1.21471'. [ 1868.790636][ T4933] netlink: 'syz.1.21471': attribute type 28 has an invalid length. [ 1868.790650][ T4933] netlink: 'syz.1.21471': attribute type 3 has an invalid length. [ 1868.790663][ T4933] netlink: 132 bytes leftover after parsing attributes in process `syz.1.21471'. [ 1868.790880][ T4933] netlink: 'syz.1.21471': attribute type 28 has an invalid length. [ 1868.790908][ T4933] netlink: 'syz.1.21471': attribute type 3 has an invalid length. [ 1868.790921][ T4933] netlink: 132 bytes leftover after parsing attributes in process `syz.1.21471'. [ 1868.791136][ T4933] netlink: 'syz.1.21471': attribute type 28 has an invalid length. [ 1868.791150][ T4933] netlink: 'syz.1.21471': attribute type 3 has an invalid length. [ 1868.791169][ T4933] netlink: 132 bytes leftover after parsing attributes in process `syz.1.21471'. [ 1868.811118][ T4933] netlink: 132 bytes leftover after parsing attributes in process `syz.1.21471'. [ 1868.828754][ T4933] netlink: 132 bytes leftover after parsing attributes in process `syz.1.21471'. [ 1869.195385][ T4936] hsr_slave_1 (unregistering): left promiscuous mode [ 1869.242502][ T4688] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1869.242519][ T4688] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1869.242544][ T4688] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1869.647916][ T4688] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1869.647933][ T4688] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1869.647959][ T4688] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1869.998453][T16933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1870.028756][ T5299] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1870.068592][ T4688] hsr_slave_0: entered promiscuous mode [ 1870.071363][ T4688] hsr_slave_1: entered promiscuous mode [ 1870.096490][ T4688] debugfs: 'hsr0' already exists in 'hsr' [ 1870.096514][ T4688] Cannot create hsr debugfs directory [ 1870.134054][ T6543] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1870.134079][ T6543] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1870.135220][ T6543] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1870.135240][ T6543] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1870.139364][ T6543] batman_adv: batadv0: Interface deactivated: ipvlan3 [ 1870.139383][ T6543] batman_adv: batadv0: Removing interface: ipvlan3 [ 1870.196986][ T6543] veth1_macvtap: left promiscuous mode [ 1870.197032][ T6543] veth0_macvtap: left promiscuous mode [ 1870.199273][ T6543] veth1_vlan: left promiscuous mode [ 1870.199306][ T6543] veth0_vlan: left promiscuous mode [ 1870.329607][ T4972] FAULT_INJECTION: forcing a failure. [ 1870.329607][ T4972] name failslab, interval 1, probability 0, space 0, times 0 [ 1870.329641][ T4972] CPU: 0 UID: 0 PID: 4972 Comm: syz.5.21480 Not tainted syzkaller #0 PREEMPT(full) [ 1870.329667][ T4972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1870.329681][ T4972] Call Trace: [ 1870.329689][ T4972] [ 1870.329699][ T4972] dump_stack_lvl+0xe8/0x150 [ 1870.329742][ T4972] should_fail_ex+0x3eb/0x540 [ 1870.329774][ T4972] should_failslab+0xa8/0x100 [ 1870.329809][ T4972] __kvmalloc_node_noprof+0x171/0x820 [ 1870.329842][ T4972] ? __kvmalloc_node_noprof+0x340/0x820 [ 1870.329870][ T4972] ? bpf_compute_loops+0x11d/0x3e80 [ 1870.329894][ T4972] ? bpf_compute_loops+0x11d/0x3e80 [ 1870.329926][ T4972] bpf_compute_loops+0x11d/0x3e80 [ 1870.329949][ T4972] ? bpf_compute_idoms+0x18b5/0x1940 [ 1870.329998][ T4972] bpf_check+0x2ce7/0x34e0 [ 1870.330038][ T4972] ? ktime_get_with_offset+0x93/0x2d0 [ 1870.330070][ T4972] ? ktime_get_with_offset+0x93/0x2d0 [ 1870.330101][ T4972] ? __pfx_bpf_check+0x10/0x10 [ 1870.330135][ T4972] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1870.330168][ T4972] bpf_prog_load+0x14da/0x1c60 [ 1870.330205][ T4972] ? __pfx_bpf_prog_load+0x10/0x10 [ 1870.330244][ T4972] ? __might_fault+0xaf/0x130 [ 1870.330275][ T4972] __sys_bpf+0xd86/0xe00 [ 1870.330318][ T4972] ? __pfx___sys_bpf+0x10/0x10 [ 1870.330351][ T4972] ? __fget_files+0x2a/0x420 [ 1870.330395][ T4972] ? ksys_write+0x242/0x270 [ 1870.330426][ T4972] ? __pfx_ksys_write+0x10/0x10 [ 1870.330459][ T4972] __x64_sys_bpf+0xba/0xd0 [ 1870.330491][ T4972] do_syscall_64+0x166/0x520 [ 1870.330515][ T4972] ? trace_irq_disable+0x3b/0x140 [ 1870.330544][ T4972] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1870.330566][ T4972] ? clear_bhb_loop+0x70/0xc0 [ 1870.330592][ T4972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1870.330613][ T4972] RIP: 0033:0x7f505219f559 [ 1870.330657][ T4972] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1870.330678][ T4972] RSP: 002b:00007f5052fc9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1870.330702][ T4972] RAX: ffffffffffffffda RBX: 00007f5052425fa0 RCX: 00007f505219f559 [ 1870.330719][ T4972] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 1870.330740][ T4972] RBP: 00007f5052fc9090 R08: 0000000000000000 R09: 0000000000000000 [ 1870.330766][ T4972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1870.330780][ T4972] R13: 00007f5052426038 R14: 00007f5052425fa0 R15: 00007ffcd68bd7a8 [ 1870.330817][ T4972] [ 1871.167377][ T6543] team0 (unregistering): Port device team_slave_1 removed [ 1871.209461][ T6543] team0 (unregistering): Port device team_slave_0 removed [ 1871.482014][ T4984] syzkaller1: entered promiscuous mode [ 1871.482041][ T4984] syzkaller1: entered allmulticast mode [ 1872.037473][ T5018] __nla_validate_parse: 60 callbacks suppressed [ 1872.037495][ T5018] netlink: 256 bytes leftover after parsing attributes in process `syz.5.21493'. [ 1872.210940][ T4688] netdevsim netdevsim0 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1872.317471][ T4688] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1872.463991][ T4688] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1872.642683][ T4688] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1872.948777][ T5063] netlink: ct family unspecified [ 1873.030679][ T5071] validate_nla: 122 callbacks suppressed [ 1873.030697][ T5071] netlink: 'syz.4.21507': attribute type 1 has an invalid length. [ 1873.037681][ T6539] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1873.038148][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1873.082922][T16933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1873.240568][ T4688] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1873.267101][ T4688] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1873.268012][ T4688] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1873.293212][ T4688] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1873.295952][ T4688] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1873.326450][ T4688] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1873.327707][ T4688] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1873.385696][ T4688] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1873.564690][ T6543] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1873.796971][ T5112] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21514'. [ 1873.797006][ T5112] netlink: 48 bytes leftover after parsing attributes in process `syz.1.21514'. [ 1873.823947][ T4688] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1873.851090][ T5112] geneve2: entered promiscuous mode [ 1873.851115][ T5112] geneve2: entered allmulticast mode [ 1873.895625][ T4688] 8021q: adding VLAN 0 to HW filter on device team0 [ 1873.924879][T25919] bridge0: port 1(bridge_slave_0) entered blocking state [ 1873.924975][T25919] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1874.080495][ T6539] bridge0: port 2(bridge_slave_1) entered blocking state [ 1874.080595][ T6539] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1874.099025][ T5126] FAULT_INJECTION: forcing a failure. [ 1874.099025][ T5126] name failslab, interval 1, probability 0, space 0, times 0 [ 1874.099078][ T5126] CPU: 0 UID: 0 PID: 5126 Comm: syz.4.21518 Not tainted syzkaller #0 PREEMPT(full) [ 1874.099140][ T5126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1874.099173][ T5126] Call Trace: [ 1874.099192][ T5126] [ 1874.099221][ T5126] dump_stack_lvl+0xe8/0x150 [ 1874.099257][ T5126] should_fail_ex+0x3eb/0x540 [ 1874.099286][ T5126] should_failslab+0xa8/0x100 [ 1874.099318][ T5126] __kvmalloc_node_noprof+0x171/0x820 [ 1874.099347][ T5126] ? bpf_compute_idoms+0x307/0x1940 [ 1874.099368][ T5126] ? bpf_compute_idoms+0x307/0x1940 [ 1874.099395][ T5126] bpf_compute_idoms+0x307/0x1940 [ 1874.099425][ T5126] ? __pfx_bpf_compute_subprog_ret_regs+0x10/0x10 [ 1874.099449][ T5126] ? prepare_subprog_args+0x40f/0x450 [ 1874.099480][ T5126] bpf_check+0x2cc3/0x34e0 [ 1874.099512][ T5126] ? ktime_get_with_offset+0x93/0x2d0 [ 1874.099557][ T5126] ? ktime_get_with_offset+0x93/0x2d0 [ 1874.099587][ T5126] ? __pfx_bpf_check+0x10/0x10 [ 1874.099623][ T5126] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1874.099652][ T5126] bpf_prog_load+0x14da/0x1c60 [ 1874.099684][ T5126] ? __pfx_bpf_prog_load+0x10/0x10 [ 1874.099738][ T5126] ? __might_fault+0xaf/0x130 [ 1874.099767][ T5126] __sys_bpf+0xd86/0xe00 [ 1874.099795][ T5126] ? __pfx___sys_bpf+0x10/0x10 [ 1874.099833][ T5126] ? __fget_files+0x2a/0x420 [ 1874.099882][ T5126] ? ksys_write+0x242/0x270 [ 1874.099911][ T5126] ? __pfx_ksys_write+0x10/0x10 [ 1874.099943][ T5126] __x64_sys_bpf+0xba/0xd0 [ 1874.099975][ T5126] do_syscall_64+0x166/0x520 [ 1874.099999][ T5126] ? trace_irq_disable+0x3b/0x140 [ 1874.100026][ T5126] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1874.100048][ T5126] ? clear_bhb_loop+0x70/0xc0 [ 1874.100073][ T5126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1874.100094][ T5126] RIP: 0033:0x7fe0fb79f559 [ 1874.100114][ T5126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1874.100132][ T5126] RSP: 002b:00007fe0fc655028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1874.100155][ T5126] RAX: ffffffffffffffda RBX: 00007fe0fba25fa0 RCX: 00007fe0fb79f559 [ 1874.100170][ T5126] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 1874.100184][ T5126] RBP: 00007fe0fc655090 R08: 0000000000000000 R09: 0000000000000000 [ 1874.100199][ T5126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1874.100212][ T5126] R13: 00007fe0fba26038 R14: 00007fe0fba25fa0 R15: 00007ffd3c543b58 [ 1874.100247][ T5126] [ 1874.641449][ T5130] netlink: 'syz.4.21521': attribute type 30 has an invalid length. [ 1874.836107][ T5150] netlink: 8 bytes leftover after parsing attributes in process `syz.5.21524'. [ 1874.948658][ T5157] xt_nfacct: accounting object `' does not exist [ 1875.198506][ T5166] netlink: 'syz.4.21527': attribute type 1 has an invalid length. [ 1875.246175][ T5166] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1875.322618][ T5166] netlink: 'syz.4.21527': attribute type 1 has an invalid length. [ 1875.618326][ T5195] FAULT_INJECTION: forcing a failure. [ 1875.618326][ T5195] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1875.618360][ T5195] CPU: 0 UID: 0 PID: 5195 Comm: syz.4.21533 Not tainted syzkaller #0 PREEMPT(full) [ 1875.618385][ T5195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1875.618399][ T5195] Call Trace: [ 1875.618408][ T5195] [ 1875.618419][ T5195] dump_stack_lvl+0xe8/0x150 [ 1875.618460][ T5195] should_fail_ex+0x3eb/0x540 [ 1875.618493][ T5195] _copy_from_user+0x2d/0xb0 [ 1875.618535][ T5195] __sys_bpf+0x2e7/0xe00 [ 1875.618564][ T5195] ? __pfx___sys_bpf+0x10/0x10 [ 1875.618597][ T5195] ? __fget_files+0x2a/0x420 [ 1875.618640][ T5195] ? ksys_write+0x242/0x270 [ 1875.618670][ T5195] ? __pfx_ksys_write+0x10/0x10 [ 1875.618703][ T5195] __x64_sys_bpf+0xba/0xd0 [ 1875.618736][ T5195] do_syscall_64+0x166/0x520 [ 1875.618767][ T5195] ? trace_irq_disable+0x3b/0x140 [ 1875.618797][ T5195] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1875.618818][ T5195] ? clear_bhb_loop+0x70/0xc0 [ 1875.618845][ T5195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1875.618866][ T5195] RIP: 0033:0x7fe0fb79f559 [ 1875.618886][ T5195] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1875.618904][ T5195] RSP: 002b:00007fe0fc655028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1875.618926][ T5195] RAX: ffffffffffffffda RBX: 00007fe0fba25fa0 RCX: 00007fe0fb79f559 [ 1875.618942][ T5195] RDX: 0000000000000094 RSI: 0000200000000280 RDI: 0000000000000005 [ 1875.618956][ T5195] RBP: 00007fe0fc655090 R08: 0000000000000000 R09: 0000000000000000 [ 1875.618969][ T5195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1875.618982][ T5195] R13: 00007fe0fba26038 R14: 00007fe0fba25fa0 R15: 00007ffd3c543b58 [ 1875.619017][ T5195] [ 1876.015265][ T4688] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1876.076698][ T4688] veth0_vlan: entered promiscuous mode [ 1876.095668][ T4688] veth1_vlan: entered promiscuous mode [ 1876.138147][ T4688] veth0_macvtap: entered promiscuous mode [ 1876.149164][ T4688] veth1_macvtap: entered promiscuous mode [ 1876.156887][T16931] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1876.186549][ T4688] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1876.201976][ T4688] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1876.299490][ T6539] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1876.300036][ T6539] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1876.300079][ T6539] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1876.300117][ T6539] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1876.435272][T25919] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1876.435293][T25919] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1876.501051][T25919] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1876.501073][T25919] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1878.794952][T32688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1878.795151][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1879.197037][T16933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1882.235280][T10742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1883.915821][T25919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1883.916014][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1885.273878][ T5331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1888.315127][ T5331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1888.316673][T17435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1888.317504][ T5331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1888.319038][T10742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1889.676634][T17437] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1889.676834][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1891.354095][T16930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1894.393579][T16930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1895.435418][T25919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1895.435594][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1897.435326][T10742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1900.474330][T10742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1901.195257][T17435] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1901.195431][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1903.514970][ T5331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1906.558192][T10742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1906.955227][ T6539] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1906.955415][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1909.594480][T10742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1911.994212][ T6539] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1911.994439][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1912.637285][T16930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1915.674291][ T5331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1917.836204][T25919] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1917.836397][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1918.715310][ T5331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1921.753666][ T5331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1922.874696][T17437] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1922.874870][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1924.795065][ T5331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1926.953322][ T5640] Bluetooth: hci0: command 0x0405 tx timeout [ 1927.834741][T16930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1928.717093][T17447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1928.717332][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1930.873534][T16930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1933.913869][T10742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1934.474621][T17437] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1934.474794][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1936.954453][T16930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1939.995234][ T5331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1940.153885][ C1] [ 1940.156260][ C1] ================================ [ 1940.161362][ C1] WARNING: inconsistent lock state [ 1940.166476][ C1] syzkaller #0 Not tainted [ 1940.170878][ C1] -------------------------------- [ 1940.175980][ C1] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 1940.182813][ C1] kworker/1:4/5641 [HC0[0]:SC1[1]:HE1:SE0] takes: [ 1940.189246][ C1] ffff88802bc8a260 (sk_lock-AF_X25){+.?.}-{0:0}, at: x25_kill_by_neigh+0x10d/0x250 [ 1940.198644][ C1] {SOFTIRQ-ON-W} state was registered at: [ 1940.204363][ C1] lock_acquire+0x115/0x350 [ 1940.209024][ C1] lock_sock_nested+0x41/0x100 [ 1940.213880][ C1] x25_release+0xa0/0x3d0 [ 1940.218324][ C1] __sock_release+0xa0/0x1f0 [ 1940.223022][ C1] sock_close+0x1c/0x30 [ 1940.227311][ C1] __fput+0x408/0xa40 [ 1940.231408][ C1] fput_close_sync+0x11f/0x240 [ 1940.236277][ C1] filp_close_sync+0x6e/0xa0 [ 1940.240977][ C1] __se_sys_close_range+0xa77/0xef0 [ 1940.246284][ C1] do_syscall_64+0x166/0x520 [ 1940.246651][T17447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1940.246975][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1940.267102][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1940.273137][ C1] irq event stamp: 3919332 [ 1940.277570][ C1] hardirqs last enabled at (3919332): [] __local_bh_enable_ip+0xd6/0x140 [ 1940.287653][ C1] hardirqs last disabled at (3919331): [] __local_bh_enable_ip+0x72/0x140 [ 1940.297747][ C1] softirqs last enabled at (3919134): [] process_scheduled_works+0xc3d/0x1630 [ 1940.308289][ C1] softirqs last disabled at (3919135): [] do_softirq+0x77/0xd0 [ 1940.317418][ C1] [ 1940.317418][ C1] other info that might help us debug this: [ 1940.325485][ C1] Possible unsafe locking scenario: [ 1940.325485][ C1] [ 1940.332952][ C1] CPU0 [ 1940.336244][ C1] ---- [ 1940.339535][ C1] lock(sk_lock-AF_X25); [ 1940.343899][ C1] [ 1940.347399][ C1] lock(sk_lock-AF_X25); [ 1940.351918][ C1] [ 1940.351918][ C1] *** DEADLOCK *** [ 1940.351918][ C1] [ 1940.360070][ C1] locks held by kworker/1:4/5641: 3, last CPU#1: [ 1940.366405][ C1] #0: ffff88813ff49d48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1940.378791][ C1] #1: ffffc9000405fc40 ((work_completion)(&(&tbl->managed_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1940.391964][ C1] #2: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: netif_receive_skb_core+0x33/0x2b0 [ 1940.402021][ C1] [ 1940.402021][ C1] stack backtrace: [ 1940.407934][ C1] CPU: 1 UID: 0 PID: 5641 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT(full) [ 1940.417326][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1940.427402][ C1] Workqueue: events_power_efficient neigh_managed_work [ 1940.434275][ C1] Call Trace: [ 1940.437567][ C1] [ 1940.440454][ C1] dump_stack_lvl+0xe8/0x150 [ 1940.445091][ C1] print_usage_bug+0x28c/0x2e0 [ 1940.449899][ C1] valid_state+0xbe/0xf0 [ 1940.454154][ C1] mark_lock_irq+0x36/0x380 [ 1940.458676][ C1] mark_lock+0x117/0x190 [ 1940.462938][ C1] __lock_acquire+0x71e/0x2de0 [ 1940.467755][ C1] ? kasan_quarantine_put+0xbb/0x1f0 [ 1940.473059][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1940.478161][ C1] ? lock_acquire+0x115/0x350 [ 1940.482866][ C1] lock_acquire+0x115/0x350 [ 1940.487419][ C1] ? x25_kill_by_neigh+0x10d/0x250 [ 1940.492619][ C1] ? x25_kill_by_neigh+0x103/0x250 [ 1940.497748][ C1] lock_sock_nested+0x41/0x100 [ 1940.502530][ C1] ? x25_kill_by_neigh+0x10d/0x250 [ 1940.507657][ C1] x25_kill_by_neigh+0x10d/0x250 [ 1940.512674][ C1] x25_lapb_receive_frame+0x1b0/0xfb0 [ 1940.518090][ C1] ? netif_receive_skb_core+0x33/0x2b0 [ 1940.523561][ C1] ? netif_receive_skb_core+0x33/0x2b0 [ 1940.529043][ C1] ? __pfx_x25_lapb_receive_frame+0x10/0x10 [ 1940.534963][ C1] netif_receive_skb_core+0x2a6/0x2b0 [ 1940.540360][ C1] lapbeth_napi_poll+0x42/0x90 [ 1940.545249][ C1] __napi_poll+0xaa/0x330 [ 1940.549620][ C1] net_rx_action+0x61d/0xf50 [ 1940.554240][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 1940.559392][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 1940.564612][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 1940.569924][ C1] handle_softirqs+0x265/0x8d0 [ 1940.574715][ C1] ? process_scheduled_works+0x97a/0x1630 [ 1940.580480][ C1] ? process_scheduled_works+0xc3d/0x1630 [ 1940.586224][ C1] do_softirq+0x77/0xd0 [ 1940.590442][ C1] [ 1940.593399][ C1] [ 1940.596355][ C1] __local_bh_enable_ip+0x100/0x140 [ 1940.601582][ C1] process_scheduled_works+0xc3d/0x1630 [ 1940.607182][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1940.613202][ C1] ? assign_work+0x3cf/0x5d0 [ 1940.617822][ C1] worker_thread+0xa47/0xfb0 [ 1940.622451][ C1] ? __kthread_parkme+0x71/0x1f0 [ 1940.627423][ C1] kthread+0x38b/0x480 [ 1940.631553][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1940.636712][ C1] ? __pfx_kthread+0x10/0x10 [ 1940.641326][ C1] ret_from_fork+0x514/0xb70 [ 1940.645947][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1940.651092][ C1] ? __switch_to+0xc78/0x1410 [ 1940.655791][ C1] ? __pfx_kthread+0x10/0x10 [ 1940.660435][ C1] ret_from_fork_asm+0x1a/0x30 [ 1940.665220][ C1] [ 1940.668321][ C1] BUG: sleeping function called from invalid context at net/core/sock.c:3910 [ 1940.668340][ C1] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 5641, name: kworker/1:4 [ 1940.668359][ C1] preempt_count: 101, expected: 0 [ 1940.668370][ C1] RCU nest depth: 1, expected: 0 [ 1940.668381][ C1] INFO: lockdep is turned off. [ 1940.668388][ C1] Preemption disabled at: [ 1940.668395][ C1] [<0000000000000000>] 0x0 [ 1940.668420][ C1] CPU: 1 UID: 0 PID: 5641 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT(full) [ 1940.668445][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1940.668459][ C1] Workqueue: events_power_efficient neigh_managed_work [ 1940.668481][ C1] Call Trace: [ 1940.668488][ C1] [ 1940.668496][ C1] dump_stack_lvl+0xe8/0x150 [ 1940.668527][ C1] __might_resched+0x36a/0x4c0 [ 1940.668552][ C1] lock_sock_nested+0x56/0x100 [ 1940.668581][ C1] x25_kill_by_neigh+0x10d/0x250 [ 1940.668613][ C1] x25_lapb_receive_frame+0x1b0/0xfb0 [ 1940.668646][ C1] ? netif_receive_skb_core+0x33/0x2b0 [ 1940.668672][ C1] ? netif_receive_skb_core+0x33/0x2b0 [ 1940.668698][ C1] ? __pfx_x25_lapb_receive_frame+0x10/0x10 [ 1940.668730][ C1] netif_receive_skb_core+0x2a6/0x2b0 [ 1940.668761][ C1] lapbeth_napi_poll+0x42/0x90 [ 1940.668794][ C1] __napi_poll+0xaa/0x330 [ 1940.668821][ C1] net_rx_action+0x61d/0xf50 [ 1940.668862][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 1940.668892][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 1940.668919][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 1940.668952][ C1] handle_softirqs+0x265/0x8d0 [ 1940.668985][ C1] ? process_scheduled_works+0x97a/0x1630 [ 1940.669015][ C1] ? process_scheduled_works+0xc3d/0x1630 [ 1940.669044][ C1] do_softirq+0x77/0xd0 [ 1940.669070][ C1] [ 1940.669077][ C1] [ 1940.669085][ C1] __local_bh_enable_ip+0x100/0x140 [ 1940.669114][ C1] process_scheduled_works+0xc3d/0x1630 [ 1940.669160][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1940.669194][ C1] ? assign_work+0x3cf/0x5d0 [ 1940.669225][ C1] worker_thread+0xa47/0xfb0 [ 1940.669264][ C1] ? __kthread_parkme+0x71/0x1f0 [ 1940.669289][ C1] kthread+0x38b/0x480 [ 1940.669312][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1940.669342][ C1] ? __pfx_kthread+0x10/0x10 [ 1940.669365][ C1] ret_from_fork+0x514/0xb70 [ 1940.669389][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1940.669410][ C1] ? __switch_to+0xc78/0x1410 [ 1940.669443][ C1] ? __pfx_kthread+0x10/0x10 [ 1940.669466][ C1] ret_from_fork_asm+0x1a/0x30 [ 1940.669495][ C1] [ 1943.037581][T10742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1945.357752][ T6543] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1945.357908][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1946.074069][T10742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1949.114097][T10742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog