last executing test programs: 7.408346963s ago: executing program 1 (id=2611): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac0000000000000000000000000000000000000000000000040000000000"], 0xc4}}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x40241, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="bc010000130001010000000000000000fc0100000000000000000000000000001d8a00000000000000000000000000bb4e20000d040000090a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000000000000000000000000000000000000000000000000000000000006000000000000000300000000000000050000000000000008000000000000001000000000000000010000000000000000000000000000000001000000000000080000000000000000000000000000000401050020010000000000000000000000000002000004d22b0000000a000000000000000000000000000000000000000000000001010100050000000200000009000080ff010000000000000000000000000001000004d5320000000a000000000000000000000000000000000000000200000000024800040000000080000005000000fe880000000000000000000000000001000004d42b0000000a000000fe8000000000000000000000000000bb0000000005020300000000000200000006000000e0000002000000000000000000000000000004d42b0000000a00000064010100"/356], 0x1bc}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000005c0)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000600)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 7.131433804s ago: executing program 1 (id=2618): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x40008c0) write$nci(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="510302"], 0xc) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.942195716s ago: executing program 0 (id=2621): r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1) recvmmsg(r1, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000b80)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0) (async) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001c00)=ANY=[@ANYBLOB="1801"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x20, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x30, r0, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=@newsa={0x140, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in, 0x0, 0x6c}, @in=@remote, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @extra_flags={0x8, 0x18, 0x8}]}, 0x140}}, 0x0) (async) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r3) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, r5, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4000080) 4.561876791s ago: executing program 4 (id=2638): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="7a0af8ff75257000bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000b25952850a84a70002b2ab3d6ffaa6ead0169191d54f8196217fc563e2fc91f6da4dad4fdc2eb1b5986fc44bc25fb591cf77b9dfb379a3f611dbc2a364916f098dab10b1a297cf528666d1ddd73f30f2382f6cda4bfdd45be583823c0f092248a57d48621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000800db583620ce7243d1aebdb638d91dbef6619358399aa9c2acd068c03efefd8bc77edf2d34b12cd48a1b20fb7dd843267e0331759f4ec6b5b0af58e604f494eff289026d5045ef08000000000000007718a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc76be40d435aa8b5202db761014b1b999a12df6bee431a6681000000263b6233e1c0fe30e384c3cb07b74a72291a1a2b523dd81b6651b1ee48e999bb004823ebcd8c65743f31f84b263ab9b3426692d01ad194f302d7a658e9e54687d3c56d7bedb6b2f25ddb8c640bb321a402058c9221b6870814cf4ee23ddb79fff5eb156e0a000000000000f2bd1d4a178d86d6935eb8b75bc4eb680d10e8b6a54c6c8674"], &(0x7f0000000a40)='GPL\x00'}, 0x94) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000ac0)=r0, 0x4) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000b00), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000b40)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) socket(0x40000000015, 0x5, 0x0) 3.92530367s ago: executing program 0 (id=2639): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f00000003c0)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000500)="ee", 0xfffffe5e}], 0x1, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x588) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 3.912888726s ago: executing program 1 (id=2641): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0xfff1, 0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newtfilter={0xd4, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x300, 0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xa8, 0x2, [@TCA_U32_SEL={0xa4, 0x5, {0x8, 0x6, 0x9, 0x8, 0x4c16, 0x8, 0x7ff, 0x5, [{0x1000, 0x1000009, 0xffdfffff}, {0x3ff, 0x0, 0xfffffff7, 0x81}, {0xffff, 0x9, 0xe6f, 0x5}, {0x8001, 0xfb86, 0xffffffff, 0x7}, {0x6, 0x9, 0x2, 0x9}, {0x400, 0x5, 0xa, 0x1}, {0x80000000, 0xfffffffc, 0x1, 0xab95}, {0x81, 0x5, 0x9, 0x4}, {0x6, 0x2, 0x8, 0x8000}]}}]}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x24044081}, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000680)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000700)=ANY=[], 0x26) 3.854504746s ago: executing program 4 (id=2643): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0xfff1, 0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newtfilter={0xd4, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x300, 0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xa8, 0x2, [@TCA_U32_SEL={0xa4, 0x5, {0x8, 0x6, 0x9, 0x8, 0x4c16, 0x8, 0x7ff, 0x5, [{0x1000, 0x1000009, 0xffdfffff}, {0x3ff, 0x0, 0xfffffff7, 0x81}, {0xffff, 0x9, 0xe6f, 0x5}, {0x8001, 0xfb86, 0xffffffff, 0x7}, {0x6, 0x9, 0x2, 0x9}, {0x400, 0x5, 0xa, 0x1}, {0x80000000, 0xfffffffc, 0x1, 0xab95}, {0x81, 0x5, 0x9, 0x4}, {0x6, 0x2, 0x8, 0x8000}]}}]}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x24044081}, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000680)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000700)=ANY=[], 0x26) (fail_nth: 3) 3.8147765s ago: executing program 0 (id=2644): bpf$MAP_CREATE(0x0, 0x0, 0x50) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, &(0x7f0000000280)) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x8001, 0x100, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@newlink={0x34, 0x10, 0x1, 0x70bd2d, 0x800, {0x0, 0x0, 0x0, 0x0, 0x10040}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x50) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c000000130001000400"/20, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r3, @ANYBLOB="1400350064756d6d79"], 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000540)={'dummy0\x00'}) 3.459864109s ago: executing program 4 (id=2646): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000002e00)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002120207b1a00fe00000000bfa10000000000000701000078ffffffb702000008000000b70300000000000085000000c700000095"], &(0x7f0000000040)='syzkaller\x00', 0x9}, 0x90) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendto(r2, &(0x7f0000000700)="a8000000410001000300000000000000030100002a0000003200010000112233445566778899aabb88a8450005a8aaaa40004011b778c0a80101c0a8010204d2162e000c00007465737400004c00020008000300010000001000040066778899aabb001122334455060006000800000010000700c0a80101c0a801021100400008000a0004d2162e08001600010000000600170000000000100003000c000c000600020000000000", 0xa8, 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), r1) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x28, r3, 0x601, 0xfffffffc, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0xdac6aed5933c7caa}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x800) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb0100180000000000004a9dc0e7cf067d8cc4b9b9b7163835b4a1000c0000000c00000002000000000074e43d901036010000040000055627f3f8507c519518"], 0x0, 0x26}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000500)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000000104010200000000000000000000000108000340000000080a000200000000030000000005000100020000000500010001000000"], 0x38}, 0x1, 0x0, 0x0, 0x4004001}, 0xc010) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000009c0)="a1", 0x1}], 0x1, &(0x7f0000000a00)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r8, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r9], 0x30, 0x40400d1}}], 0x1, 0x10) pipe(&(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r10, 0x0, 0x400000, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffef, 0xd}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x34, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x2}, @TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0xf}, @TCA_FQ_RATE_ENABLE={0x8}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x8000}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0xfffffff8}]}}]}, 0x60}}, 0x20008000) getsockopt$SO_NETNS_COOKIE(r4, 0x1, 0x47, &(0x7f0000000280), &(0x7f00000002c0)=0x8) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={@private2, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0xc3, 0x1, 0x400, 0x0, 0x40000040, r6}) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a80)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) close(r11) r12 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r12, 0x6, 0x13, &(0x7f0000000ac0)=0x1, 0x4) connect$inet(r12, &(0x7f0000000b00)={0x2, 0x4e24, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r12, 0x6, 0x13, &(0x7f0000000b40)=0xffffffffffffffff, 0x4) writev(r11, &(0x7f0000000b80)=[{&(0x7f0000000bc0)="5cdfad1adce674dd1285a83dd8e5ff1a05f327930c2debb0abc6", 0x1a}, {&(0x7f0000000c00)="9e3f75eecff4eb1035fb52cd8671e0552dbe3cfb4f5ea279f859b07b2b0de4a125d2a81401bad258a571bcf7280925fea374422ea9e018d6c1b116", 0x3b}, {&(0x7f0000000c40)="c5203acfa43454646e0ef4f1fb9652665e6996", 0x13}, {&(0x7f0000000c80)="744769ee594e5f2e52ed3998e7e9", 0xe}], 0x4) syz_emit_ethernet(0x52, 0x0, 0x0) sendmmsg(r12, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000d40)="1f", 0x1}], 0x1}}], 0x1, 0x4000045) pipe(&(0x7f0000000300)) 3.30635383s ago: executing program 1 (id=2647): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) (async) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f0000000040)={0x2, 0x4e20}, 0x10) (async) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000001680)={0xffffffffffffffff}) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000001780)={0x0, r0}, 0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r2) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000017c0)={r2, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x50) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=@bloom_filter={0x1e, 0xa, 0x1008ee, 0x4fea3a91, 0x304c8, r2, 0xa5d, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x2, 0x4, @void, @value, @value=r1}, 0x50) (async) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000340)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) r5 = socket$unix(0x1, 0x2, 0x0) connect$unix(r5, &(0x7f0000001500)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async, rerun: 64) sendmmsg(r5, &(0x7f0000001580), 0x307017fdb7a66cb, 0x0) (rerun: 64) r6 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r6, &(0x7f00000015c0)={&(0x7f0000001600)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001680)=ANY=[], 0xa, 0x45}, 0x0) (async, rerun: 64) close(0x3) (async, rerun: 64) r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x6, &(0x7f0000000300)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r7}, @call={0x85, 0x0, 0x0, 0x26}]}, &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)={@map=r3, r8, 0x5}, 0x10) (async, rerun: 32) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r3, &(0x7f0000000480), &(0x7f00000004c0)=@tcp=r0}, 0x20) (async, rerun: 32) shutdown(r0, 0x1) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r10, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r9, 0x6, 0x14, &(0x7f00000001c0)=0x1, 0x4) recvfrom$inet(r0, &(0x7f0000000500)=""/4096, 0x1000, 0x0, 0x0, 0x0) 3.192269881s ago: executing program 0 (id=2648): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="b8000000190001000000000000000000e000000200"/51], 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 3.109049078s ago: executing program 4 (id=2650): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000d00)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0x100, 0x1d0, 0xffffffff, 0xffffffff, 0x100, 0x1d0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x3f3], 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x3d0) syz_emit_ethernet(0x42, &(0x7f0000001100)=ANY=[@ANYBLOB="33330000000100000000000086dd6000000000072c40fe800000000000000000000000000001ff020000000000000300000000000001"], 0x0) 3.058595498s ago: executing program 0 (id=2651): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000f000000003000000030000000020000000000000001000004080000000000000002000000200000000000000000000095"], 0x0, 0x4a}, 0x28) 3.02594983s ago: executing program 4 (id=2652): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000b00), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000b40)) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100"], 0x1c}}, 0x4008054) socket(0x40000000015, 0x5, 0x0) 2.965114311s ago: executing program 0 (id=2653): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000a40)='GPL\x00'}, 0x94) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000ac0)=r0, 0x4) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000b00), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000b40)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) socket(0x40000000015, 0x5, 0x0) 2.868287036s ago: executing program 4 (id=2655): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newqdisc={0x154, 0x24, 0x605, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}, {0xfff3, 0xa}}, [@qdisc_kind_options=@q_red={{0x8}, {0x128, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x20, 0x10, 0x80, 0x8, 0xe, 0x8, 0x8}}, @TCA_RED_STAB={0x104}, @TCA_RED_FLAGS={0xc, 0x4, {0x8, 0xf}}]}}]}, 0x154}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$unix(0x1, 0x2, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x4c, r3, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x8, 0x8e}}]}, 0x4c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000340)={'syzkaller1\x00', 0x1}) r5 = socket(0xa, 0x2, 0x0) close(r5) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x21, 0x0, &(0x7f0000000140)) write$tun(r1, &(0x7f00000001c0)=ANY=[@ANYRESOCT], 0x3a) 2.352334719s ago: executing program 1 (id=2664): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1a, 0x4, &(0x7f0000000500)=@framed={{0x18, 0x2, 0x0, 0x0, 0xb2b3, 0x0, 0x0, 0x0, 0x9}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x350db}]}, &(0x7f0000000540)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x3d}, 0x94) (fail_nth: 47) 2.179627135s ago: executing program 1 (id=2665): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000b00), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000b40)) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100"], 0x1c}}, 0x4008054) socket(0x40000000015, 0x5, 0x0) 1.464446574s ago: executing program 3 (id=2672): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000480)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000004c0)={'syzkaller1\x00', @link_local}) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000500)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfffffffe, 0x0, 0x6}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) write$tun(r0, 0x0, 0x2a4) 1.197197578s ago: executing program 3 (id=2673): syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210106, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x20, 0x8000}}}}}}, 0x0) 1.166783873s ago: executing program 3 (id=2674): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1a, 0x4, &(0x7f0000000500)=@framed={{0x18, 0x2, 0x0, 0x157, 0xb2b3, 0x0, 0x0, 0x0, 0x9}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x350db}]}, &(0x7f0000000540)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x3d}, 0x94) 1.133631957s ago: executing program 3 (id=2675): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001280)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001340)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001400)=@newtfilter={0x44, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {0xfff2, 0xffff}, {0x300}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x5b7b}]}}]}, 0x44}}, 0x4044004) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000001480)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000002680)={@val={0x0, 0x88f5}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @multicast, @val={@val, {0x8100, 0x0, 0x0, 0x22}}, {@x25={0x812, {0x1, 0xdf, 0xb}}}}}, 0x1d) 1.01760026s ago: executing program 3 (id=2676): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x4}, &(0x7f0000000140)=0x90) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x5, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x1}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000500)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000540)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_ext={0x1a, 0xf, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000006c0)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r5, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x20, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffff8}, @jmp={0x5, 0x0, 0x5, 0xb, 0x3, 0xc}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0xa}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffb}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) 977.513456ms ago: executing program 3 (id=2677): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x14, 0x29, 0x301, 0x2, 0x0, {0x1, 0x1}}, 0x14}}, 0x80) (async) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000000)={0x3, 0x1, 0xfc000000, 0xbf1, 0x1}) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$binder_nlctrl_getfamily(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x10, 0x1, 0x0, 0x0, {}, {0xb}}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) 622.293579ms ago: executing program 2 (id=2682): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028008001400ffffffff0fdec073b4b7b4987c212d7775c7e06a3349ad3b"], 0x3c}}, 0x0) 473.994288ms ago: executing program 2 (id=2683): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000480)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000004c0)={'syzkaller1\x00', @link_local}) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000500)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfffffffe, 0x0, 0x6}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) write$tun(r0, &(0x7f0000000000)=ANY=[], 0x2a4) 377.200568ms ago: executing program 2 (id=2684): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1a, 0x4, &(0x7f0000000500)=@framed={{0x18, 0x2, 0x0, 0x0, 0xb2b3, 0x0, 0x0, 0x0, 0x9}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x350db}]}, &(0x7f0000000540)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, 0x3d}, 0x94) (fail_nth: 49) 324.417671ms ago: executing program 2 (id=2685): r0 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20044804}, 0x4000000) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000380)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="1100b13550ee8827d34d6a543a6145e46351f72241eb3389513ff946b86b02080cf4bd44d302457303dedb", @ANYRES32=r2, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48844) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x158, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x6, 0x4}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002}}, @TCA_STAB={0x4}, @TCA_STAB={0x118, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x3, 0x0, 0xffff, 0x2, 0xffffffff, 0x0, 0x2}}, {0x8, 0x2, [0xb7, 0x5]}}, {{0x1c, 0x1, {0xfc, 0x7, 0x7, 0x5, 0x1, 0x2, 0xfff, 0x9}}, {0x16, 0x2, [0x94a, 0x8, 0x8, 0x41a2, 0xf, 0xfff, 0xc2f0, 0x7, 0x0]}}, {{0xfffffffffffffc59, 0x1, {0x7, 0x8, 0x3, 0x1, 0x2, 0x800, 0x6, 0x8}}, {0x14, 0x2, [0x8, 0x3, 0x7, 0x5, 0x5, 0x2, 0x0, 0x2]}}, {{0x1c, 0x1, {0x8, 0x35, 0x2, 0x6, 0x0, 0x9, 0x388c}}, {0x4}}, {{0x1c, 0x1, {0xc, 0x54, 0xffff, 0x6, 0x1, 0x3, 0x6, 0x4}}, {0xc, 0x2, [0x8, 0xff1d, 0x420, 0x6]}}, {{0x1c, 0x1, {0x40, 0x5, 0x8, 0x4f3, 0x0, 0x6, 0x3}}, {0x4}}, {{0x1c, 0x1, {0x75, 0x78, 0x1, 0x3, 0x0, 0x3, 0x3, 0x1}}, {0x6, 0x2, [0x8]}}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x20048882}, 0x2000400c) write$nci(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="400101"], 0x4) 207.147084ms ago: executing program 2 (id=2686): r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@ipv4={""/10, ""/2, @remote}, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@private0}}, &(0x7f0000000280)=0xe8) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)={0x1c, 0x11, 0xa8e1de361b15f141, 0x0, 0x25dfdbff, "", [@nested={0xc, 0x0, 0x0, 0x0, [@typed={0x8, 0x2d, 0x0, 0x0, @uid=r1}]}]}, 0x1c}], 0x1, 0x0, 0x0, 0x4004080}, 0x6404c0d1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [""]}, 0x1c}}, 0x11) 0s ago: executing program 2 (id=2687): bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0xe, 0xa, &(0x7f0000000780)=@raw=[@btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @map_val={0x18, 0x9}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @jmp={0x5, 0x0, 0x8, 0x1, 0x7, 0xfffffffffffffff4, 0x1}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x5}], &(0x7f0000000cc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0xffffffffffffffd1) sendmmsg(r1, &(0x7f0000000080), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000000c0)={0x100000011, @multicast2, 0x0, 0x0, 'lc\x00', 0x28, 0x5, 0x6b}, 0x2c) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a78000000060a010400000000000000000a0000010900010073797a31000000004c0004802800018007000100637400001c0002000500030001000000080001400000001308000240000000152000018007000100637400001400028008000240000000"], 0xa0}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000340)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000400)={0x34, r2, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2b}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010100}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2c}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000d00)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000d80)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000dc0)=[{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000e40)="7db49fdb07ac1af786f979a7c4c98f4a30507687a32c16c61e034cb67357e38da3fbe77aa31c827b802222469f1809decbb3a12e1757d1ac4ca0cfbbc289bc69b43b1b7d2e896183837a7224005c40412d2937969050f4a048a1af3723b7dc", 0x5f}, {&(0x7f0000000ec0)="a55b2c8f73dfa037f58774af75d97ac0c02173e2c7efc30f342a5e29dfdc47280776b0deecfb7e4911e4dd33096e8823fb8ba706e431aa", 0x37}], 0x2, &(0x7f0000000f00)=[@assoc={0x18, 0x117, 0x4, 0x86}], 0x18, 0xc840}], 0x1, 0x84) recvmsg$can_raw(r5, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000fc0)=""/35, 0x23}, {&(0x7f0000001000)=""/172, 0xac}], 0x2}, 0x62) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x18, 0x40, 0x109, 0xfffffffe, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x142}]}, 0x18}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000500), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000540)) ioctl$PPPIOCSCOMPRESS(r6, 0x4010744d) socket$kcm(0x10, 0x7, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0xfc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x3, 0x4, &(0x7f00000008c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2d}]}, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000900)='cgroup.controllers\x00', 0x275a, 0x0) recvfrom$binder_report(r0, &(0x7f0000000700), 0x80, 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): 07fdd210be090 R08: 0000000000000000 R09: 0000000000000000 [ 270.991916][T12906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 270.991927][T12906] R13: 00007fdd20426038 R14: 00007fdd20425fa0 R15: 00007fffa0d95578 [ 270.991953][T12906] [ 270.992039][T12906] syzkaller0: refused to change device tx_queue_len [ 272.964560][T12852] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 273.200840][T12929] netlink: 'syz.0.2091': attribute type 12 has an invalid length. [ 273.246580][T12932] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2092'. [ 273.288190][T12932] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 273.293189][T12932] batman_adv: batadv0: Removing interface: gretap1 [ 273.306858][T12932] batman_adv: batadv0: Removing interface: dummy0 [ 273.409911][T12932] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2092'. [ 273.409938][T12932] openvswitch: netlink: Key type 12351 is out of range max 32 [ 273.789811][T12978] netlink: 'syz.2.2104': attribute type 12 has an invalid length. [ 276.412221][T12945] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 276.599039][T12999] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2111'. [ 276.698416][T13003] netlink: 'syz.4.2115': attribute type 12 has an invalid length. [ 279.839261][T13014] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 279.967839][T13041] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2126'. [ 280.033380][T13047] netlink: 'syz.3.2128': attribute type 12 has an invalid length. [ 280.425449][T13073] tipc: Resetting bearer [ 280.501982][T13076] netlink: 'syz.2.2137': attribute type 29 has an invalid length. [ 280.532130][T13084] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2140'. [ 280.642259][T13094] netlink: 'syz.2.2142': attribute type 12 has an invalid length. [ 281.073336][T13119] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2151'. [ 283.494153][T13079] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 283.668614][T13126] netlink: 'syz.4.2154': attribute type 12 has an invalid length. [ 283.729779][T13131] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2153'. [ 283.963297][T13147] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2162'. [ 284.037295][T13155] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 284.755427][T13170] netlink: 'syz.3.2168': attribute type 12 has an invalid length. [ 284.835335][T13174] FAULT_INJECTION: forcing a failure. [ 284.835335][T13174] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 284.835356][T13174] CPU: 1 UID: 0 PID: 13174 Comm: syz.3.2170 Not tainted syzkaller #0 PREEMPT(full) [ 284.835368][T13174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 284.835374][T13174] Call Trace: [ 284.835379][T13174] [ 284.835384][T13174] dump_stack_lvl+0xe8/0x150 [ 284.835419][T13174] should_fail_ex+0x3eb/0x540 [ 284.835435][T13174] _copy_from_user+0x2d/0xb0 [ 284.835450][T13174] sctp_setsockopt+0x1c4/0x12c0 [ 284.835466][T13174] ? sock_common_setsockopt+0x36/0xc0 [ 284.835482][T13174] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 284.835497][T13174] do_sock_setsockopt+0x17c/0x1b0 [ 284.835511][T13174] __x64_sys_setsockopt+0x13d/0x1b0 [ 284.835524][T13174] do_syscall_64+0x166/0x520 [ 284.835538][T13174] ? trace_irq_disable+0x3b/0x140 [ 284.835551][T13174] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.835562][T13174] ? clear_bhb_loop+0x70/0xc0 [ 284.835574][T13174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.835584][T13174] RIP: 0033:0x7f08c47a8f19 [ 284.835595][T13174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 284.835603][T13174] RSP: 002b:00007f08c5723028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 284.835615][T13174] RAX: ffffffffffffffda RBX: 00007f08c4a25fa0 RCX: 00007f08c47a8f19 [ 284.835623][T13174] RDX: 0000000000000076 RSI: 0000000000000084 RDI: 0000000000000003 [ 284.835629][T13174] RBP: 00007f08c5723090 R08: 0000000000000008 R09: 0000000000000000 [ 284.835635][T13174] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000001 [ 284.835641][T13174] R13: 00007f08c4a26038 R14: 00007f08c4a25fa0 R15: 00007ffce6296808 [ 284.835658][T13174] [ 285.331054][T13186] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2176'. [ 286.947390][T13148] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 287.104388][T13194] netlink: 'syz.3.2179': attribute type 12 has an invalid length. [ 287.333841][T13209] : entered promiscuous mode [ 287.348861][T13211] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2187'. [ 287.578454][T13228] netlink: 'syz.2.2193': attribute type 12 has an invalid length. [ 287.822454][T13238] FAULT_INJECTION: forcing a failure. [ 287.822454][T13238] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 287.822485][T13238] CPU: 0 UID: 0 PID: 13238 Comm: syz.2.2198 Not tainted syzkaller #0 PREEMPT(full) [ 287.822507][T13238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 287.822518][T13238] Call Trace: [ 287.822524][T13238] [ 287.822532][T13238] dump_stack_lvl+0xe8/0x150 [ 287.822567][T13238] should_fail_ex+0x3eb/0x540 [ 287.822584][T13238] prepare_alloc_pages+0x21e/0x5f0 [ 287.822614][T13238] __alloc_frozen_pages_noprof+0x17c/0x410 [ 287.822642][T13238] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 287.822666][T13238] ? __alloc_frozen_pages_noprof+0x24c/0x410 [ 287.822686][T13238] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 287.822705][T13238] __alloc_pages_noprof+0x10/0x100 [ 287.822719][T13238] alloc_pages_bulk_noprof+0x67a/0x8a0 [ 287.822738][T13238] ? alloc_pages_noprof+0x140/0x2b0 [ 287.822750][T13238] __kasan_populate_vmalloc+0xb7/0x1c0 [ 287.822767][T13238] alloc_vmap_area+0xd10/0x1410 [ 287.822786][T13238] ? __pfx_alloc_vmap_area+0x10/0x10 [ 287.822796][T13238] ? __kmalloc_cache_node_noprof+0x3cc/0x620 [ 287.822810][T13238] ? __kmalloc_cache_node_noprof+0x1f2/0x620 [ 287.822822][T13238] ? __get_vm_area_node+0x155/0x2f0 [ 287.822835][T13238] __get_vm_area_node+0x200/0x2f0 [ 287.822849][T13238] __vmalloc_node_range_noprof+0x36e/0x16f0 [ 287.822861][T13238] ? bpf_check+0x14ae/0x34e0 [ 287.822891][T13238] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 287.822902][T13238] ? __kasan_kmalloc+0x93/0xb0 [ 287.822917][T13238] ? __kmalloc_cache_noprof+0x31c/0x600 [ 287.822929][T13238] ? __kmalloc_cache_noprof+0x148/0x600 [ 287.822941][T13238] ? bpf_diag_init+0x87/0x140 [ 287.822954][T13238] ? bpf_diag_init+0x87/0x140 [ 287.822968][T13238] ? bpf_check+0x14ae/0x34e0 [ 287.822977][T13238] __vmalloc_noprof+0xd2/0x120 [ 287.822989][T13238] ? bpf_check+0x14ae/0x34e0 [ 287.823000][T13238] bpf_check+0x14ae/0x34e0 [ 287.823016][T13238] ? ktime_get_with_offset+0x93/0x2d0 [ 287.823031][T13238] ? ktime_get_with_offset+0x93/0x2d0 [ 287.823052][T13238] ? __pfx_bpf_check+0x10/0x10 [ 287.823064][T13238] ? bpf_obj_name_cpy+0x194/0x1e0 [ 287.823079][T13238] bpf_prog_load+0x14da/0x1c60 [ 287.823096][T13238] ? __pfx_bpf_prog_load+0x10/0x10 [ 287.823114][T13238] ? __might_fault+0xaf/0x130 [ 287.823129][T13238] __sys_bpf+0xd86/0xe00 [ 287.823143][T13238] ? __pfx___sys_bpf+0x10/0x10 [ 287.823159][T13238] ? __fget_files+0x2a/0x420 [ 287.823181][T13238] ? ksys_write+0x242/0x270 [ 287.823196][T13238] ? __pfx_ksys_write+0x10/0x10 [ 287.823213][T13238] __x64_sys_bpf+0xba/0xd0 [ 287.823228][T13238] do_syscall_64+0x166/0x520 [ 287.823242][T13238] ? trace_irq_disable+0x3b/0x140 [ 287.823255][T13238] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.823265][T13238] ? clear_bhb_loop+0x70/0xc0 [ 287.823278][T13238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.823287][T13238] RIP: 0033:0x7f300eba8f19 [ 287.823298][T13238] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.823307][T13238] RSP: 002b:00007f300fa01028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 287.823319][T13238] RAX: ffffffffffffffda RBX: 00007f300ee25fa0 RCX: 00007f300eba8f19 [ 287.823326][T13238] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 287.823333][T13238] RBP: 00007f300fa01090 R08: 0000000000000000 R09: 0000000000000000 [ 287.823339][T13238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 287.823345][T13238] R13: 00007f300ee26038 R14: 00007f300ee25fa0 R15: 00007ffd7a53fee8 [ 287.823362][T13238] [ 287.823511][T13238] syz.2.2198: vmalloc error: size 800, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 287.823561][T13238] CPU: 0 UID: 0 PID: 13238 Comm: syz.2.2198 Not tainted syzkaller #0 PREEMPT(full) [ 287.823580][T13238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 287.823590][T13238] Call Trace: [ 287.823597][T13238] [ 287.823603][T13238] dump_stack_lvl+0xe8/0x150 [ 287.823634][T13238] warn_alloc+0x24d/0x270 [ 287.823658][T13238] ? lockdep_hardirqs_on+0x7b/0x110 [ 287.823682][T13238] ? __pfx_warn_alloc+0x10/0x10 [ 287.823701][T13238] ? kfree+0x1c5/0x650 [ 287.823726][T13238] ? __get_vm_area_node+0x219/0x2f0 [ 287.823754][T13238] __vmalloc_node_range_noprof+0x396/0x16f0 [ 287.823799][T13238] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 287.823812][T13238] ? __kasan_kmalloc+0x93/0xb0 [ 287.823827][T13238] ? __kmalloc_cache_noprof+0x31c/0x600 [ 287.823840][T13238] ? __kmalloc_cache_noprof+0x148/0x600 [ 287.823852][T13238] ? bpf_diag_init+0x87/0x140 [ 287.823865][T13238] ? bpf_diag_init+0x87/0x140 [ 287.823879][T13238] ? bpf_check+0x14ae/0x34e0 [ 287.823888][T13238] __vmalloc_noprof+0xd2/0x120 [ 287.823899][T13238] ? bpf_check+0x14ae/0x34e0 [ 287.823911][T13238] bpf_check+0x14ae/0x34e0 [ 287.823928][T13238] ? ktime_get_with_offset+0x93/0x2d0 [ 287.823942][T13238] ? ktime_get_with_offset+0x93/0x2d0 [ 287.823956][T13238] ? __pfx_bpf_check+0x10/0x10 [ 287.823968][T13238] ? bpf_obj_name_cpy+0x194/0x1e0 [ 287.823982][T13238] bpf_prog_load+0x14da/0x1c60 [ 287.823999][T13238] ? __pfx_bpf_prog_load+0x10/0x10 [ 287.824017][T13238] ? __might_fault+0xaf/0x130 [ 287.824031][T13238] __sys_bpf+0xd86/0xe00 [ 287.824055][T13238] ? __pfx___sys_bpf+0x10/0x10 [ 287.824071][T13238] ? __fget_files+0x2a/0x420 [ 287.824092][T13238] ? ksys_write+0x242/0x270 [ 287.824108][T13238] ? __pfx_ksys_write+0x10/0x10 [ 287.824124][T13238] __x64_sys_bpf+0xba/0xd0 [ 287.824140][T13238] do_syscall_64+0x166/0x520 [ 287.824152][T13238] ? trace_irq_disable+0x3b/0x140 [ 287.824165][T13238] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.824175][T13238] ? clear_bhb_loop+0x70/0xc0 [ 287.824188][T13238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.824197][T13238] RIP: 0033:0x7f300eba8f19 [ 287.824208][T13238] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.824217][T13238] RSP: 002b:00007f300fa01028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 287.824228][T13238] RAX: ffffffffffffffda RBX: 00007f300ee25fa0 RCX: 00007f300eba8f19 [ 287.824236][T13238] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 287.824243][T13238] RBP: 00007f300fa01090 R08: 0000000000000000 R09: 0000000000000000 [ 287.824249][T13238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 287.824255][T13238] R13: 00007f300ee26038 R14: 00007f300ee25fa0 R15: 00007ffd7a53fee8 [ 287.824271][T13238] [ 287.824305][T13238] Mem-Info: [ 287.824315][T13238] active_anon:5795 inactive_anon:0 isolated_anon:0 [ 287.824315][T13238] active_file:0 inactive_file:43540 isolated_file:0 [ 287.824315][T13238] unevictable:0 dirty:88 writeback:0 [ 287.824315][T13238] slab_reclaimable:11062 slab_unreclaimable:105851 [ 287.824315][T13238] mapped:29636 shmem:522 pagetables:1358 [ 287.824315][T13238] sec_pagetables:0 bounce:0 [ 287.824315][T13238] kernel_misc_reclaimable:0 [ 287.824315][T13238] free:1309144 free_pcp:11398 free_cma:0 [ 287.824361][T13238] Node 0 active_anon:23180kB inactive_anon:0kB active_file:0kB inactive_file:173952kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118544kB dirty:352kB writeback:0kB shmem:2088kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13576kB pagetables:5300kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 287.824417][T13238] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 287.824463][T13238] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 287.824509][T13238] lowmem_reserve[]: 0 2463 2465 2465 2465 [ 287.824527][T13238] Node 0 DMA32 free:1276036kB boost:0kB min:33920kB low:42400kB high:50880kB reserved_highatomic:0kB free_highatomic:0kB active_anon:23180kB inactive_anon:0kB active_file:0kB inactive_file:173952kB unevictable:0kB writepending:352kB zspages:0kB present:3129332kB managed:2522820kB mlocked:0kB bounce:0kB free_pcp:44336kB local_pcp:22016kB free_cma:0kB [ 287.824559][T13238] lowmem_reserve[]: 0 0 1 1 1 [ 287.824576][T13238] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1392kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 287.824603][T13238] lowmem_reserve[]: 0 0 0 0 0 [ 287.824619][T13238] Node 1 Normal free:3945180kB boost:0kB min:55960kB low:69948kB high:83936kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:1256kB local_pcp:1256kB free_cma:0kB [ 287.824648][T13238] lowmem_reserve[]: 0 0 0 0 0 [ 287.824673][T13238] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 287.824796][T13238] Node 0 DMA32: 2626*4kB (UME) 1405*8kB (UM) 902*16kB (UM) 220*32kB (UM) 114*64kB (UME) 90*128kB (UME) 84*256kB (UME) 19*512kB (UM) 13*1024kB (UME) 11*2048kB (UM) 280*4096kB (UM) = 1275984kB [ 287.824921][T13238] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 287.824987][T13238] Node 1 Normal: 3*4kB (UM) 2*8kB (UM) 2*16kB (UM) 1*32kB (M) 2*64kB (UM) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 0*2048kB 962*4096kB (UM) = 3945180kB [ 287.825066][T13238] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 287.825075][T13238] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 287.825083][T13238] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 287.825091][T13238] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 287.825099][T13238] 44058 total pagecache pages [ 287.825103][T13238] 0 pages in swap cache [ 287.825106][T13238] Free swap = 124996kB [ 287.825111][T13238] Total swap = 124996kB [ 287.825114][T13238] 2097051 pages RAM [ 287.825118][T13238] 0 pages HighMem/MovableOnly [ 287.825121][T13238] 434382 pages reserved [ 287.825125][T13238] 0 pages cma reserved [ 287.927674][T13240] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2199'. [ 288.249334][T13246] netlink: ct family unspecified [ 288.422636][T13252] netlink: 'syz.1.2204': attribute type 12 has an invalid length. [ 289.210044][T13274] FAULT_INJECTION: forcing a failure. [ 289.210044][T13274] name failslab, interval 1, probability 0, space 0, times 0 [ 289.210074][T13274] CPU: 1 UID: 0 PID: 13274 Comm: syz.1.2212 Not tainted syzkaller #0 PREEMPT(full) [ 289.210098][T13274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 289.210109][T13274] Call Trace: [ 289.210116][T13274] [ 289.210124][T13274] dump_stack_lvl+0xe8/0x150 [ 289.210158][T13274] should_fail_ex+0x3eb/0x540 [ 289.210187][T13274] should_failslab+0xa8/0x100 [ 289.210218][T13274] __kmalloc_node_noprof+0xfb/0x720 [ 289.210242][T13274] ? __pfx___up_read+0x10/0x10 [ 289.210269][T13274] ? crypto_create_tfm_node+0x81/0x3c0 [ 289.210295][T13274] ? crypto_create_tfm_node+0x81/0x3c0 [ 289.210321][T13274] ? crypto_spawn_alg+0x8b/0x1a0 [ 289.210347][T13274] crypto_create_tfm_node+0x81/0x3c0 [ 289.210378][T13274] crypto_spawn_tfm2+0x5c/0x90 [ 289.210401][T13274] aead_init_geniv+0xa1/0x170 [ 289.210430][T13274] crypto_create_tfm_node+0x143/0x3c0 [ 289.210461][T13274] crypto_alloc_tfm_node+0x169/0x3e0 [ 289.210497][T13274] esp_init_state+0x3b6/0x1220 [ 289.210523][T13274] ? do_syscall_64+0x166/0x520 [ 289.210546][T13274] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.210570][T13274] ? __lock_acquire+0x747/0x2de0 [ 289.210596][T13274] ? __pfx_esp_init_state+0x10/0x10 [ 289.210658][T13274] ? __xfrm_init_state+0x745/0x1320 [ 289.210689][T13274] __xfrm_init_state+0x9dd/0x1320 [ 289.210712][T13274] ? __xfrm_init_state+0x745/0x1320 [ 289.210739][T13274] xfrm_add_sa+0x2bcf/0x3c30 [ 289.210773][T13274] ? __pfx_xfrm_add_sa+0x10/0x10 [ 289.210794][T13274] ? apparmor_capable+0x126/0x170 [ 289.210823][T13274] ? __nla_parse+0x40/0x60 [ 289.210852][T13274] xfrm_user_rcv_msg+0x7a8/0xf30 [ 289.210880][T13274] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 289.210938][T13274] ? __mutex_trylock_common+0x15f/0x270 [ 289.210969][T13274] ? __pfx___mutex_trylock_common+0x10/0x10 [ 289.211005][T13274] ? rcu_is_watching+0x16/0xb0 [ 289.211033][T13274] ? trace_contention_end+0x3d/0x140 [ 289.211069][T13274] netlink_rcv_skb+0x226/0x4a0 [ 289.211097][T13274] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 289.211123][T13274] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 289.211168][T13274] ? netlink_deliver_tap+0x2e/0x1b0 [ 289.211195][T13274] ? netlink_deliver_tap+0x2e/0x1b0 [ 289.211225][T13274] xfrm_netlink_rcv+0x79/0x90 [ 289.211248][T13274] netlink_unicast+0x8ef/0xa80 [ 289.211292][T13274] netlink_sendmsg+0x7f0/0xb20 [ 289.211326][T13274] ? __pfx_netlink_sendmsg+0x10/0x10 [ 289.211357][T13274] ? aa_sock_msg_perm+0x144/0x210 [ 289.211391][T13274] ? apparmor_socket_sendmsg+0x98/0x360 [ 289.211419][T13274] ? __pfx_netlink_sendmsg+0x10/0x10 [ 289.211445][T13274] sock_sendmsg_nosec+0x14e/0x190 [ 289.211475][T13274] ____sys_sendmsg+0x54e/0x850 [ 289.211502][T13274] ? __pfx_____sys_sendmsg+0x10/0x10 [ 289.211534][T13274] ? import_iovec+0x73/0xa0 [ 289.211562][T13274] ___sys_sendmsg+0x2a5/0x360 [ 289.211582][T13274] ? __lock_acquire+0x747/0x2de0 [ 289.211611][T13274] ? __pfx____sys_sendmsg+0x10/0x10 [ 289.211674][T13274] ? __fget_files+0x3a2/0x420 [ 289.211696][T13274] ? __fget_files+0x2a/0x420 [ 289.211730][T13274] __x64_sys_sendmsg+0x1b1/0x290 [ 289.211754][T13274] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 289.211799][T13274] do_syscall_64+0x166/0x520 [ 289.211822][T13274] ? trace_irq_disable+0x3b/0x140 [ 289.211847][T13274] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.211866][T13274] ? clear_bhb_loop+0x70/0xc0 [ 289.211911][T13274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.211931][T13274] RIP: 0033:0x7fdd201a8f19 [ 289.211949][T13274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 289.211965][T13274] RSP: 002b:00007fdd210be028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 289.211992][T13274] RAX: ffffffffffffffda RBX: 00007fdd20425fa0 RCX: 00007fdd201a8f19 [ 289.212006][T13274] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 289.212017][T13274] RBP: 00007fdd210be090 R08: 0000000000000000 R09: 0000000000000000 [ 289.212027][T13274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.212039][T13274] R13: 00007fdd20426038 R14: 00007fdd20425fa0 R15: 00007fffa0d95578 [ 289.212072][T13274] [ 289.315300][T13276] netlink: 'syz.4.2213': attribute type 1 has an invalid length. [ 289.315378][T13276] openvswitch: netlink: Actions may not be safe on all matching packets [ 289.676537][T13284] netlink: 'syz.4.2216': attribute type 12 has an invalid length. [ 289.791117][T13293] FAULT_INJECTION: forcing a failure. [ 289.791117][T13293] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 289.791139][T13293] CPU: 1 UID: 0 PID: 13293 Comm: syz.1.2221 Not tainted syzkaller #0 PREEMPT(full) [ 289.791151][T13293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 289.791157][T13293] Call Trace: [ 289.791162][T13293] [ 289.791167][T13293] dump_stack_lvl+0xe8/0x150 [ 289.791188][T13293] should_fail_ex+0x3eb/0x540 [ 289.791206][T13293] prepare_alloc_pages+0x21e/0x5f0 [ 289.791224][T13293] __alloc_frozen_pages_noprof+0x17c/0x410 [ 289.791240][T13293] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 289.791253][T13293] ? __alloc_frozen_pages_noprof+0x24c/0x410 [ 289.791268][T13293] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 289.791287][T13293] __alloc_pages_noprof+0x10/0x100 [ 289.791301][T13293] alloc_pages_bulk_noprof+0x67a/0x8a0 [ 289.791319][T13293] ? alloc_pages_noprof+0x140/0x2b0 [ 289.791332][T13293] __kasan_populate_vmalloc+0xb7/0x1c0 [ 289.791350][T13293] alloc_vmap_area+0xd10/0x1410 [ 289.791368][T13293] ? __pfx_alloc_vmap_area+0x10/0x10 [ 289.791377][T13293] ? __kmalloc_cache_node_noprof+0x3cc/0x620 [ 289.791391][T13293] ? __kmalloc_cache_node_noprof+0x1f2/0x620 [ 289.791403][T13293] ? __get_vm_area_node+0x155/0x2f0 [ 289.791416][T13293] __get_vm_area_node+0x200/0x2f0 [ 289.791438][T13293] __vmalloc_node_range_noprof+0x36e/0x16f0 [ 289.791457][T13293] ? bpf_check+0x14ae/0x34e0 [ 289.791506][T13293] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 289.791527][T13293] ? __kasan_kmalloc+0x93/0xb0 [ 289.791543][T13293] ? __kmalloc_cache_noprof+0x31c/0x600 [ 289.791555][T13293] ? __kmalloc_cache_noprof+0x148/0x600 [ 289.791567][T13293] ? bpf_diag_init+0x87/0x140 [ 289.791581][T13293] ? bpf_diag_init+0x87/0x140 [ 289.791595][T13293] ? bpf_check+0x14ae/0x34e0 [ 289.791604][T13293] __vmalloc_noprof+0xd2/0x120 [ 289.791615][T13293] ? bpf_check+0x14ae/0x34e0 [ 289.791627][T13293] bpf_check+0x14ae/0x34e0 [ 289.791643][T13293] ? ktime_get_with_offset+0x93/0x2d0 [ 289.791658][T13293] ? ktime_get_with_offset+0x93/0x2d0 [ 289.791671][T13293] ? __pfx_bpf_check+0x10/0x10 [ 289.791683][T13293] ? bpf_obj_name_cpy+0x194/0x1e0 [ 289.791707][T13293] bpf_prog_load+0x14da/0x1c60 [ 289.791738][T13293] ? __pfx_bpf_prog_load+0x10/0x10 [ 289.791759][T13293] ? __might_fault+0xaf/0x130 [ 289.791774][T13293] __sys_bpf+0xd86/0xe00 [ 289.791788][T13293] ? __pfx___sys_bpf+0x10/0x10 [ 289.791804][T13293] ? __fget_files+0x2a/0x420 [ 289.791825][T13293] ? ksys_write+0x242/0x270 [ 289.791841][T13293] ? __pfx_ksys_write+0x10/0x10 [ 289.791874][T13293] __x64_sys_bpf+0xba/0xd0 [ 289.791890][T13293] do_syscall_64+0x166/0x520 [ 289.791903][T13293] ? trace_irq_disable+0x3b/0x140 [ 289.791917][T13293] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.791927][T13293] ? clear_bhb_loop+0x70/0xc0 [ 289.791940][T13293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.791949][T13293] RIP: 0033:0x7fdd201a8f19 [ 289.791965][T13293] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 289.791975][T13293] RSP: 002b:00007fdd210be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 289.791987][T13293] RAX: ffffffffffffffda RBX: 00007fdd20425fa0 RCX: 00007fdd201a8f19 [ 289.791994][T13293] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 289.792001][T13293] RBP: 00007fdd210be090 R08: 0000000000000000 R09: 0000000000000000 [ 289.792007][T13293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 289.792013][T13293] R13: 00007fdd20426038 R14: 00007fdd20425fa0 R15: 00007fffa0d95578 [ 289.792029][T13293] [ 290.423514][T13215] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 290.451112][T13302] netlink: 'syz.2.2225': attribute type 4 has an invalid length. [ 290.835846][T13313] FAULT_INJECTION: forcing a failure. [ 290.835846][T13313] name failslab, interval 1, probability 0, space 0, times 0 [ 290.835876][T13313] CPU: 0 UID: 0 PID: 13313 Comm: syz.4.2229 Not tainted syzkaller #0 PREEMPT(full) [ 290.835897][T13313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 290.835913][T13313] Call Trace: [ 290.835921][T13313] [ 290.835930][T13313] dump_stack_lvl+0xe8/0x150 [ 290.835964][T13313] should_fail_ex+0x3eb/0x540 [ 290.835993][T13313] should_failslab+0xa8/0x100 [ 290.836024][T13313] __kmalloc_noprof+0xf9/0x710 [ 290.836047][T13313] ? fib_create_info+0x16fe/0x3170 [ 290.836070][T13313] ? fib_create_info+0x16fe/0x3170 [ 290.836101][T13313] fib_create_info+0x16fe/0x3170 [ 290.836128][T13313] ? rcu_is_watching+0x16/0xb0 [ 290.836156][T13313] ? trace_contention_end+0x3d/0x140 [ 290.836185][T13313] ? __mutex_lock+0x305/0x15a0 [ 290.836214][T13313] ? lockdep_hardirqs_on+0x7b/0x110 [ 290.836243][T13313] fib_table_insert+0xcb/0x1b10 [ 290.836271][T13313] ? __pfx___mutex_lock+0x10/0x10 [ 290.836307][T13313] ? fib_new_table+0x14b/0x3f0 [ 290.836333][T13313] inet_rtm_newroute+0x14f/0x250 [ 290.836355][T13313] ? lockdep_hardirqs_on+0x7b/0x110 [ 290.836388][T13313] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 290.836433][T13313] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 290.836454][T13313] rtnetlink_rcv_msg+0x802/0xc00 [ 290.836480][T13313] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 290.836500][T13313] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 290.836523][T13313] ? __copy_skb_header+0xa3/0x4a0 [ 290.836555][T13313] netlink_rcv_skb+0x226/0x4a0 [ 290.836584][T13313] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 290.836605][T13313] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 290.836650][T13313] ? netlink_deliver_tap+0x2e/0x1b0 [ 290.836676][T13313] ? netlink_deliver_tap+0x2e/0x1b0 [ 290.836708][T13313] netlink_unicast+0x8ef/0xa80 [ 290.836748][T13313] netlink_sendmsg+0x7f0/0xb20 [ 290.836779][T13313] ? __pfx_netlink_sendmsg+0x10/0x10 [ 290.836806][T13313] ? aa_sock_msg_perm+0x144/0x210 [ 290.836837][T13313] ? apparmor_socket_sendmsg+0x98/0x360 [ 290.836863][T13313] ? __pfx_netlink_sendmsg+0x10/0x10 [ 290.836888][T13313] sock_sendmsg_nosec+0x14e/0x190 [ 290.836913][T13313] ____sys_sendmsg+0x54e/0x850 [ 290.836939][T13313] ? __pfx_____sys_sendmsg+0x10/0x10 [ 290.836969][T13313] ? import_iovec+0x73/0xa0 [ 290.836996][T13313] ___sys_sendmsg+0x2a5/0x360 [ 290.837014][T13313] ? __lock_acquire+0x747/0x2de0 [ 290.837042][T13313] ? __pfx____sys_sendmsg+0x10/0x10 [ 290.837102][T13313] ? __fget_files+0x3a2/0x420 [ 290.837121][T13313] ? __fget_files+0x2a/0x420 [ 290.837149][T13313] __x64_sys_sendmsg+0x1b1/0x290 [ 290.837171][T13313] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 290.837211][T13313] do_syscall_64+0x166/0x520 [ 290.837234][T13313] ? trace_irq_disable+0x3b/0x140 [ 290.837259][T13313] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.837277][T13313] ? clear_bhb_loop+0x70/0xc0 [ 290.837298][T13313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.837315][T13313] RIP: 0033:0x7f19aada8f19 [ 290.837332][T13313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 290.837347][T13313] RSP: 002b:00007f19abc30028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 290.837366][T13313] RAX: ffffffffffffffda RBX: 00007f19ab025fa0 RCX: 00007f19aada8f19 [ 290.837387][T13313] RDX: 0000000000008040 RSI: 0000200000000100 RDI: 0000000000000003 [ 290.837397][T13313] RBP: 00007f19abc30090 R08: 0000000000000000 R09: 0000000000000000 [ 290.837407][T13313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 290.837417][T13313] R13: 00007f19ab026038 R14: 00007f19ab025fa0 R15: 00007fff070319c8 [ 290.837444][T13313] [ 290.936508][T13315] ip_tables: iptables: counters copy to user failed while replacing table [ 291.170300][T13321] netlink: 'syz.4.2230': attribute type 4 has an invalid length. [ 291.210957][T13320] netlink: 'syz.3.2232': attribute type 12 has an invalid length. [ 291.231971][T13321] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2230'. [ 291.307723][T13321] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2230'. [ 291.314672][T13326] netlink: 'syz.4.2230': attribute type 4 has an invalid length. [ 291.688202][T13359] ip_tables: iptables: counters copy to user failed while replacing table [ 292.043358][T13378] netlink: 'syz.4.2249': attribute type 1 has an invalid length. [ 292.043399][T13378] openvswitch: netlink: Actions may not be safe on all matching packets [ 292.224102][T13392] FAULT_INJECTION: forcing a failure. [ 292.224102][T13392] name failslab, interval 1, probability 0, space 0, times 0 [ 292.224133][T13392] CPU: 1 UID: 0 PID: 13392 Comm: syz.3.2255 Not tainted syzkaller #0 PREEMPT(full) [ 292.224154][T13392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 292.224165][T13392] Call Trace: [ 292.224171][T13392] [ 292.224180][T13392] dump_stack_lvl+0xe8/0x150 [ 292.224212][T13392] should_fail_ex+0x3eb/0x540 [ 292.224238][T13392] should_failslab+0xa8/0x100 [ 292.224268][T13392] __kmalloc_node_noprof+0xfb/0x720 [ 292.224299][T13392] ? __get_vm_area_node+0x200/0x2f0 [ 292.224318][T13392] ? __get_vm_area_node+0x283/0x2f0 [ 292.224335][T13392] ? __vmalloc_node_range_noprof+0x5d1/0x16f0 [ 292.224354][T13392] ? __vmalloc_node_range_noprof+0x5d1/0x16f0 [ 292.224383][T13392] __vmalloc_node_range_noprof+0x5d1/0x16f0 [ 292.224435][T13392] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 292.224454][T13392] ? __kasan_kmalloc+0x93/0xb0 [ 292.224479][T13392] ? __kmalloc_cache_noprof+0x31c/0x600 [ 292.224502][T13392] ? __kmalloc_cache_noprof+0x148/0x600 [ 292.224526][T13392] ? bpf_diag_init+0x87/0x140 [ 292.224550][T13392] ? bpf_diag_init+0x87/0x140 [ 292.224574][T13392] ? bpf_check+0x14ae/0x34e0 [ 292.224591][T13392] __vmalloc_noprof+0xd2/0x120 [ 292.224611][T13392] ? bpf_check+0x14ae/0x34e0 [ 292.224629][T13392] bpf_check+0x14ae/0x34e0 [ 292.224657][T13392] ? ktime_get_with_offset+0x93/0x2d0 [ 292.224680][T13392] ? ktime_get_with_offset+0x93/0x2d0 [ 292.224703][T13392] ? __pfx_bpf_check+0x10/0x10 [ 292.224722][T13392] ? bpf_obj_name_cpy+0x194/0x1e0 [ 292.224748][T13392] bpf_prog_load+0x14da/0x1c60 [ 292.224779][T13392] ? __pfx_bpf_prog_load+0x10/0x10 [ 292.224812][T13392] ? __might_fault+0xaf/0x130 [ 292.224838][T13392] __sys_bpf+0xd86/0xe00 [ 292.224865][T13392] ? __pfx___sys_bpf+0x10/0x10 [ 292.224895][T13392] ? __fget_files+0x2a/0x420 [ 292.224936][T13392] ? ksys_write+0x242/0x270 [ 292.224962][T13392] ? __pfx_ksys_write+0x10/0x10 [ 292.224991][T13392] __x64_sys_bpf+0xba/0xd0 [ 292.225020][T13392] do_syscall_64+0x166/0x520 [ 292.225043][T13392] ? trace_irq_disable+0x3b/0x140 [ 292.225067][T13392] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.225084][T13392] ? clear_bhb_loop+0x70/0xc0 [ 292.225106][T13392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.225128][T13392] RIP: 0033:0x7f08c47a8f19 [ 292.225145][T13392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 292.225161][T13392] RSP: 002b:00007f08c5723028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 292.225181][T13392] RAX: ffffffffffffffda RBX: 00007f08c4a25fa0 RCX: 00007f08c47a8f19 [ 292.225194][T13392] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 292.225206][T13392] RBP: 00007f08c5723090 R08: 0000000000000000 R09: 0000000000000000 [ 292.225217][T13392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 292.225227][T13392] R13: 00007f08c4a26038 R14: 00007f08c4a25fa0 R15: 00007ffce6296808 [ 292.225258][T13392] [ 292.551330][T13398] FAULT_INJECTION: forcing a failure. [ 292.551330][T13398] name failslab, interval 1, probability 0, space 0, times 0 [ 292.551358][T13398] CPU: 1 UID: 0 PID: 13398 Comm: syz.4.2257 Not tainted syzkaller #0 PREEMPT(full) [ 292.551380][T13398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 292.551391][T13398] Call Trace: [ 292.551399][T13398] [ 292.551406][T13398] dump_stack_lvl+0xe8/0x150 [ 292.551441][T13398] should_fail_ex+0x3eb/0x540 [ 292.551468][T13398] should_failslab+0xa8/0x100 [ 292.551495][T13398] ? skb_clone+0x212/0x3a0 [ 292.551516][T13398] kmem_cache_alloc_noprof+0x9c/0x600 [ 292.551542][T13398] ? skb_clone+0x212/0x3a0 [ 292.551569][T13398] skb_clone+0x212/0x3a0 [ 292.551594][T13398] __netlink_deliver_tap+0x355/0x6e0 [ 292.551631][T13398] ? netlink_deliver_tap+0x2e/0x1b0 [ 292.551682][T13398] netlink_deliver_tap+0x19c/0x1b0 [ 292.551709][T13398] netlink_sendskb+0x68/0x140 [ 292.551735][T13398] netlink_rcv_skb+0x2a4/0x4a0 [ 292.551763][T13398] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 292.551785][T13398] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 292.551822][T13398] ? netlink_deliver_tap+0x2e/0x1b0 [ 292.551854][T13398] ? netlink_deliver_tap+0x2e/0x1b0 [ 292.551887][T13398] netlink_unicast+0x8ef/0xa80 [ 292.551927][T13398] netlink_sendmsg+0x7f0/0xb20 [ 292.551960][T13398] ? __pfx_netlink_sendmsg+0x10/0x10 [ 292.551991][T13398] ? aa_sock_msg_perm+0x144/0x210 [ 292.552025][T13398] ? apparmor_socket_sendmsg+0x98/0x360 [ 292.552053][T13398] ? __pfx_netlink_sendmsg+0x10/0x10 [ 292.552078][T13398] sock_sendmsg_nosec+0x14e/0x190 [ 292.552108][T13398] ____sys_sendmsg+0x54e/0x850 [ 292.552134][T13398] ? __pfx_____sys_sendmsg+0x10/0x10 [ 292.552165][T13398] ? import_iovec+0x73/0xa0 [ 292.552191][T13398] ___sys_sendmsg+0x2a5/0x360 [ 292.552209][T13398] ? __lock_acquire+0x747/0x2de0 [ 292.552239][T13398] ? __pfx____sys_sendmsg+0x10/0x10 [ 292.552300][T13398] ? __fget_files+0x3a2/0x420 [ 292.552322][T13398] ? __fget_files+0x2a/0x420 [ 292.552353][T13398] __x64_sys_sendmsg+0x1b1/0x290 [ 292.552378][T13398] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 292.552423][T13398] do_syscall_64+0x166/0x520 [ 292.552446][T13398] ? trace_irq_disable+0x3b/0x140 [ 292.552471][T13398] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.552489][T13398] ? clear_bhb_loop+0x70/0xc0 [ 292.552510][T13398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.552528][T13398] RIP: 0033:0x7f19aada8f19 [ 292.552545][T13398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 292.552561][T13398] RSP: 002b:00007f19abc30028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 292.552580][T13398] RAX: ffffffffffffffda RBX: 00007f19ab025fa0 RCX: 00007f19aada8f19 [ 292.552594][T13398] RDX: 0000000000008040 RSI: 0000200000000100 RDI: 0000000000000003 [ 292.552606][T13398] RBP: 00007f19abc30090 R08: 0000000000000000 R09: 0000000000000000 [ 292.552618][T13398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 292.552629][T13398] R13: 00007f19ab026038 R14: 00007f19ab025fa0 R15: 00007fff070319c8 [ 292.552661][T13398] [ 292.728243][T13408] FAULT_INJECTION: forcing a failure. [ 292.728243][T13408] name failslab, interval 1, probability 0, space 0, times 0 [ 292.728276][T13408] CPU: 0 UID: 0 PID: 13408 Comm: syz.2.2262 Not tainted syzkaller #0 PREEMPT(full) [ 292.728297][T13408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 292.728308][T13408] Call Trace: [ 292.728315][T13408] [ 292.728323][T13408] dump_stack_lvl+0xe8/0x150 [ 292.728356][T13408] should_fail_ex+0x3eb/0x540 [ 292.728383][T13408] should_failslab+0xa8/0x100 [ 292.728413][T13408] __kmalloc_node_noprof+0xfb/0x720 [ 292.728435][T13408] ? __get_vm_area_node+0x200/0x2f0 [ 292.728454][T13408] ? __get_vm_area_node+0x283/0x2f0 [ 292.728474][T13408] ? __vmalloc_node_range_noprof+0x5d1/0x16f0 [ 292.728493][T13408] ? __vmalloc_node_range_noprof+0x5d1/0x16f0 [ 292.728521][T13408] __vmalloc_node_range_noprof+0x5d1/0x16f0 [ 292.728576][T13408] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 292.728596][T13408] ? __kasan_kmalloc+0x93/0xb0 [ 292.728622][T13408] ? __kmalloc_cache_noprof+0x31c/0x600 [ 292.728645][T13408] ? __kmalloc_cache_noprof+0x148/0x600 [ 292.728665][T13408] ? bpf_diag_init+0x87/0x140 [ 292.728689][T13408] ? bpf_diag_init+0x87/0x140 [ 292.728715][T13408] ? bpf_check+0x14ae/0x34e0 [ 292.728732][T13408] __vmalloc_noprof+0xd2/0x120 [ 292.728759][T13408] ? bpf_check+0x14ae/0x34e0 [ 292.728780][T13408] bpf_check+0x14ae/0x34e0 [ 292.728810][T13408] ? ktime_get_with_offset+0x93/0x2d0 [ 292.728835][T13408] ? ktime_get_with_offset+0x93/0x2d0 [ 292.728859][T13408] ? __pfx_bpf_check+0x10/0x10 [ 292.728881][T13408] ? bpf_obj_name_cpy+0x194/0x1e0 [ 292.728911][T13408] bpf_prog_load+0x14da/0x1c60 [ 292.728942][T13408] ? __pfx_bpf_prog_load+0x10/0x10 [ 292.728975][T13408] ? __might_fault+0xaf/0x130 [ 292.729000][T13408] __sys_bpf+0xd86/0xe00 [ 292.729026][T13408] ? __pfx___sys_bpf+0x10/0x10 [ 292.729054][T13408] ? __fget_files+0x2a/0x420 [ 292.729093][T13408] ? ksys_write+0x242/0x270 [ 292.729119][T13408] ? __pfx_ksys_write+0x10/0x10 [ 292.729148][T13408] __x64_sys_bpf+0xba/0xd0 [ 292.729177][T13408] do_syscall_64+0x166/0x520 [ 292.729199][T13408] ? trace_irq_disable+0x3b/0x140 [ 292.729223][T13408] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.729241][T13408] ? clear_bhb_loop+0x70/0xc0 [ 292.729263][T13408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.729280][T13408] RIP: 0033:0x7f300eba8f19 [ 292.729297][T13408] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 292.729312][T13408] RSP: 002b:00007f300fa01028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 292.729332][T13408] RAX: ffffffffffffffda RBX: 00007f300ee25fa0 RCX: 00007f300eba8f19 [ 292.729346][T13408] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 292.729358][T13408] RBP: 00007f300fa01090 R08: 0000000000000000 R09: 0000000000000000 [ 292.729369][T13408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 292.729380][T13408] R13: 00007f300ee26038 R14: 00007f300ee25fa0 R15: 00007ffd7a53fee8 [ 292.729410][T13408] [ 292.874661][T13410] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2261'. [ 292.987489][T13410] bond5: entered promiscuous mode [ 292.989822][T13410] 8021q: adding VLAN 0 to HW filter on device bond5 [ 293.011644][T13418] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2263'. [ 293.015038][T13410] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2261'. [ 293.017988][T13410] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2261'. [ 293.091373][T13410] 8021q: adding VLAN 0 to HW filter on device bond5 [ 293.091972][T13410] bond5: (slave sit1): The slave device specified does not support setting the MAC address [ 293.095522][T13410] bond5: (slave sit1): Error -95 calling set_mac_address [ 293.302938][T13425] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2267'. [ 293.302963][T13425] openvswitch: netlink: Flow key attr not present in new flow. [ 294.383620][T13444] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 294.485026][T13451] netlink: 'syz.2.2277': attribute type 1 has an invalid length. [ 294.485063][T13451] openvswitch: netlink: Actions may not be safe on all matching packets [ 295.205601][T13387] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 295.674958][T13485] FAULT_INJECTION: forcing a failure. [ 295.674958][T13485] name failslab, interval 1, probability 0, space 0, times 0 [ 295.674998][T13485] CPU: 1 UID: 0 PID: 13485 Comm: syz.0.2289 Not tainted syzkaller #0 PREEMPT(full) [ 295.675019][T13485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 295.675031][T13485] Call Trace: [ 295.675038][T13485] [ 295.675046][T13485] dump_stack_lvl+0xe8/0x150 [ 295.675081][T13485] should_fail_ex+0x3eb/0x540 [ 295.675108][T13485] should_failslab+0xa8/0x100 [ 295.675137][T13485] __kmalloc_cache_node_noprof+0xa5/0x620 [ 295.675162][T13485] ? kernel_text_address+0xa5/0xe0 [ 295.675183][T13485] ? __get_vm_area_node+0x155/0x2f0 [ 295.675203][T13485] ? __get_vm_area_node+0x155/0x2f0 [ 295.675227][T13485] __get_vm_area_node+0x155/0x2f0 [ 295.675252][T13485] __vmalloc_node_range_noprof+0x36e/0x16f0 [ 295.675275][T13485] ? bpf_prog_calc_tag+0x51/0x370 [ 295.675301][T13485] ? format_decode+0xdc/0xda0 [ 295.675323][T13485] ? __asan_memcpy+0x40/0x70 [ 295.675363][T13485] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 295.675385][T13485] ? bpf_verifier_vlog+0x3c7/0x900 [ 295.675412][T13485] ? bpf_prog_calc_tag+0x51/0x370 [ 295.675427][T13485] __vmalloc_noprof+0xd2/0x120 [ 295.675446][T13485] ? bpf_prog_calc_tag+0x51/0x370 [ 295.675464][T13485] bpf_prog_calc_tag+0x51/0x370 [ 295.675485][T13485] check_and_resolve_insns+0xc0/0x28e0 [ 295.675505][T13485] ? __asan_memset+0x22/0x50 [ 295.675525][T13485] ? add_subprog+0x40b/0x550 [ 295.675544][T13485] ? bpf_check+0x1934/0x34e0 [ 295.675563][T13485] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 295.675582][T13485] ? check_subprogs+0x413/0x540 [ 295.675612][T13485] bpf_check+0x1c12/0x34e0 [ 295.675650][T13485] ? ktime_get_with_offset+0x93/0x2d0 [ 295.675676][T13485] ? ktime_get_with_offset+0x93/0x2d0 [ 295.675700][T13485] ? __pfx_bpf_check+0x10/0x10 [ 295.675721][T13485] ? bpf_obj_name_cpy+0x194/0x1e0 [ 295.675747][T13485] bpf_prog_load+0x14da/0x1c60 [ 295.675775][T13485] ? __pfx_bpf_prog_load+0x10/0x10 [ 295.675810][T13485] ? __might_fault+0xaf/0x130 [ 295.675837][T13485] __sys_bpf+0xd86/0xe00 [ 295.675870][T13485] ? __pfx___sys_bpf+0x10/0x10 [ 295.675899][T13485] ? __fget_files+0x2a/0x420 [ 295.675939][T13485] ? ksys_write+0x242/0x270 [ 295.675967][T13485] ? __pfx_ksys_write+0x10/0x10 [ 295.676005][T13485] __x64_sys_bpf+0xba/0xd0 [ 295.676036][T13485] do_syscall_64+0x166/0x520 [ 295.676059][T13485] ? trace_irq_disable+0x3b/0x140 [ 295.676084][T13485] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.676104][T13485] ? clear_bhb_loop+0x70/0xc0 [ 295.676127][T13485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.676146][T13485] RIP: 0033:0x7fb1449a8f19 [ 295.676165][T13485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 295.676181][T13485] RSP: 002b:00007fb14582c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 295.676202][T13485] RAX: ffffffffffffffda RBX: 00007fb144c25fa0 RCX: 00007fb1449a8f19 [ 295.676216][T13485] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 295.676228][T13485] RBP: 00007fb14582c090 R08: 0000000000000000 R09: 0000000000000000 [ 295.676240][T13485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 295.676251][T13485] R13: 00007fb144c26038 R14: 00007fb144c25fa0 R15: 00007ffdd69f1a88 [ 295.676281][T13485] [ 298.672175][T13487] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 298.966291][T13551] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2310'. [ 299.115104][T13561] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2314'. [ 299.115131][T13561] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2314'. [ 299.158581][T13560] 8021q: adding VLAN 0 to HW filter on device bond4 [ 299.163061][T13561] bond0: left allmulticast mode [ 299.853632][T13590] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 300.193477][T13599] openvswitch: netlink: Missing valid actions attribute. [ 300.193512][T13599] openvswitch: netlink: Actions may not be safe on all matching packets [ 300.206004][T13601] openvswitch: netlink: Missing valid actions attribute. [ 300.206039][T13601] openvswitch: netlink: Actions may not be safe on all matching packets [ 302.124822][T13570] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 303.360394][T13665] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2346'. [ 303.361586][T13665] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2346'. [ 304.182605][T13679] netlink: 'syz.3.2350': attribute type 25 has an invalid length. [ 304.187630][T13678] tipc: Resetting bearer [ 304.187881][T13678] tipc: Resetting bearer [ 304.282564][T13683] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 305.207610][T13693] FAULT_INJECTION: forcing a failure. [ 305.207610][T13693] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 305.207633][T13693] CPU: 0 UID: 0 PID: 13693 Comm: syz.3.2354 Not tainted syzkaller #0 PREEMPT(full) [ 305.207654][T13693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 305.207677][T13693] Call Trace: [ 305.207682][T13693] [ 305.207689][T13693] dump_stack_lvl+0xe8/0x150 [ 305.207711][T13693] should_fail_ex+0x3eb/0x540 [ 305.207728][T13693] _copy_from_user+0x2d/0xb0 [ 305.207743][T13693] kstrtouint_from_user+0xd6/0x180 [ 305.207756][T13693] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 305.207771][T13693] ? lock_acquire+0x115/0x350 [ 305.207787][T13693] proc_fail_nth_write+0x8e/0x210 [ 305.207798][T13693] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 305.207813][T13693] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 305.207823][T13693] vfs_write+0x296/0xba0 [ 305.207843][T13693] ? __pfx_vfs_write+0x10/0x10 [ 305.207857][T13693] ? __fget_files+0x2a/0x420 [ 305.207878][T13693] ? __fget_files+0x3a2/0x420 [ 305.207896][T13693] ? __fget_files+0x2a/0x420 [ 305.207922][T13693] ? fdget+0x1ac/0x250 [ 305.207953][T13693] ksys_write+0x150/0x270 [ 305.207971][T13693] ? __pfx_ksys_write+0x10/0x10 [ 305.207995][T13693] do_syscall_64+0x166/0x520 [ 305.208008][T13693] ? trace_irq_disable+0x3b/0x140 [ 305.208021][T13693] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.208031][T13693] ? clear_bhb_loop+0x70/0xc0 [ 305.208044][T13693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.208054][T13693] RIP: 0033:0x7f08c476974e [ 305.208065][T13693] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 305.208074][T13693] RSP: 002b:00007f08c5722fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 305.208086][T13693] RAX: ffffffffffffffda RBX: 00007f08c57236c0 RCX: 00007f08c476974e [ 305.208093][T13693] RDX: 0000000000000001 RSI: 00007f08c57230a0 RDI: 0000000000000007 [ 305.208099][T13693] RBP: 00007f08c5723090 R08: 0000000000000000 R09: 0000000000000000 [ 305.208106][T13693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 305.208112][T13693] R13: 00007f08c4a26038 R14: 00007f08c4a25fa0 R15: 00007ffce6296808 [ 305.208129][T13693] [ 305.471561][T13698] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2356'. [ 305.524318][T13636] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 305.809697][T13714] FAULT_INJECTION: forcing a failure. [ 305.809697][T13714] name failslab, interval 1, probability 0, space 0, times 0 [ 305.809728][T13714] CPU: 1 UID: 0 PID: 13714 Comm: syz.4.2363 Not tainted syzkaller #0 PREEMPT(full) [ 305.809749][T13714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 305.809761][T13714] Call Trace: [ 305.809768][T13714] [ 305.809777][T13714] dump_stack_lvl+0xe8/0x150 [ 305.809812][T13714] should_fail_ex+0x3eb/0x540 [ 305.809840][T13714] should_failslab+0xa8/0x100 [ 305.809871][T13714] __kvmalloc_node_noprof+0x171/0x820 [ 305.809897][T13714] ? kasan_save_track+0x3e/0x80 [ 305.809920][T13714] ? kasan_save_free_info+0x40/0x50 [ 305.809939][T13714] ? __kasan_slab_free+0x5c/0x80 [ 305.809963][T13714] ? bpf_check_cfg+0x14f/0x4860 [ 305.809987][T13714] ? bpf_check_cfg+0x14f/0x4860 [ 305.810011][T13714] ? __x64_sys_bpf+0xba/0xd0 [ 305.810039][T13714] bpf_check_cfg+0x14f/0x4860 [ 305.810097][T13714] ? __pfx_bpf_check_cfg+0x10/0x10 [ 305.810122][T13714] ? lockdep_hardirqs_on+0x7b/0x110 [ 305.810151][T13714] ? kfree+0x1c5/0x650 [ 305.810169][T13714] ? bpf_prog_calc_tag+0x310/0x370 [ 305.810189][T13714] ? vfree+0x426/0x490 [ 305.810212][T13714] ? bpf_prog_calc_tag+0x310/0x370 [ 305.810228][T13714] ? resolve_func_ptrs+0xc7c/0xe50 [ 305.810253][T13714] ? check_and_resolve_insns+0x231a/0x28e0 [ 305.810290][T13714] ? __pfx_resolve_func_ptrs+0x10/0x10 [ 305.810309][T13714] ? check_subprogs+0x413/0x540 [ 305.810331][T13714] ? add_kfuncs+0x251/0x2e0 [ 305.810356][T13714] bpf_check+0x294f/0x34e0 [ 305.810387][T13714] ? ktime_get_with_offset+0x93/0x2d0 [ 305.810414][T13714] ? ktime_get_with_offset+0x93/0x2d0 [ 305.810439][T13714] ? __pfx_bpf_check+0x10/0x10 [ 305.810462][T13714] ? bpf_obj_name_cpy+0x194/0x1e0 [ 305.810489][T13714] bpf_prog_load+0x14da/0x1c60 [ 305.810521][T13714] ? __pfx_bpf_prog_load+0x10/0x10 [ 305.810555][T13714] ? __might_fault+0xaf/0x130 [ 305.810579][T13714] __sys_bpf+0xd86/0xe00 [ 305.810602][T13714] ? __pfx___sys_bpf+0x10/0x10 [ 305.810631][T13714] ? __fget_files+0x2a/0x420 [ 305.810672][T13714] ? ksys_write+0x242/0x270 [ 305.810722][T13714] ? __pfx_ksys_write+0x10/0x10 [ 305.810754][T13714] __x64_sys_bpf+0xba/0xd0 [ 305.810782][T13714] do_syscall_64+0x166/0x520 [ 305.810805][T13714] ? trace_irq_disable+0x3b/0x140 [ 305.810829][T13714] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.810848][T13714] ? clear_bhb_loop+0x70/0xc0 [ 305.810869][T13714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.810888][T13714] RIP: 0033:0x7f19aada8f19 [ 305.810906][T13714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 305.810922][T13714] RSP: 002b:00007f19abc30028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 305.810942][T13714] RAX: ffffffffffffffda RBX: 00007f19ab025fa0 RCX: 00007f19aada8f19 [ 305.810956][T13714] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 305.810973][T13714] RBP: 00007f19abc30090 R08: 0000000000000000 R09: 0000000000000000 [ 305.810985][T13714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 305.810996][T13714] R13: 00007f19ab026038 R14: 00007f19ab025fa0 R15: 00007fff070319c8 [ 305.811028][T13714] [ 306.117406][T13728] FAULT_INJECTION: forcing a failure. [ 306.117406][T13728] name failslab, interval 1, probability 0, space 0, times 0 [ 306.117437][T13728] CPU: 0 UID: 0 PID: 13728 Comm: syz.4.2369 Not tainted syzkaller #0 PREEMPT(full) [ 306.117458][T13728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 306.117469][T13728] Call Trace: [ 306.117476][T13728] [ 306.117484][T13728] dump_stack_lvl+0xe8/0x150 [ 306.117523][T13728] should_fail_ex+0x3eb/0x540 [ 306.117550][T13728] should_failslab+0xa8/0x100 [ 306.117588][T13728] __kmalloc_cache_noprof+0x9e/0x600 [ 306.117615][T13728] ? rtnl_newlink+0x147/0x1c30 [ 306.117633][T13728] ? rtnl_newlink+0x147/0x1c30 [ 306.117659][T13728] rtnl_newlink+0x147/0x1c30 [ 306.117688][T13728] ? lock_acquire+0x115/0x350 [ 306.117721][T13728] ? __pfx_rtnl_newlink+0x10/0x10 [ 306.117746][T13728] ? finish_task_switch+0x40e/0xc60 [ 306.117771][T13728] ? lockdep_hardirqs_on+0x7b/0x110 [ 306.117800][T13728] ? rcu_is_watching+0x16/0xb0 [ 306.117829][T13728] ? trace_sched_exit_tp+0x3a/0x130 [ 306.117856][T13728] ? __schedule+0x17f3/0x5830 [ 306.117896][T13728] ? kasan_quarantine_put+0xbb/0x1f0 [ 306.117925][T13728] ? __pfx___schedule+0x10/0x10 [ 306.117944][T13728] ? nlmon_xmit+0xb0/0x100 [ 306.117976][T13728] ? __lock_acquire+0x747/0x2de0 [ 306.118010][T13728] ? __pfx_hook_capable+0x10/0x10 [ 306.118027][T13728] ? __dev_queue_xmit+0x29b/0x3920 [ 306.118049][T13728] ? preempt_schedule_thunk+0x16/0x40 [ 306.118073][T13728] ? __pfx_hook_capable+0x10/0x10 [ 306.118101][T13728] ? lock_acquire+0x115/0x350 [ 306.118122][T13728] ? __pfx_rtnl_newlink+0x10/0x10 [ 306.118153][T13728] ? __pfx_rtnl_newlink+0x10/0x10 [ 306.118171][T13728] rtnetlink_rcv_msg+0x802/0xc00 [ 306.118194][T13728] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 306.118212][T13728] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 306.118232][T13728] ? __copy_skb_header+0xa3/0x4a0 [ 306.118260][T13728] netlink_rcv_skb+0x226/0x4a0 [ 306.118287][T13728] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 306.118306][T13728] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 306.118352][T13728] netlink_unicast+0x8ef/0xa80 [ 306.118393][T13728] netlink_sendmsg+0x7f0/0xb20 [ 306.118426][T13728] ? __pfx_netlink_sendmsg+0x10/0x10 [ 306.118456][T13728] ? aa_sock_msg_perm+0x144/0x210 [ 306.118488][T13728] ? apparmor_socket_sendmsg+0x98/0x360 [ 306.118515][T13728] ? __pfx_netlink_sendmsg+0x10/0x10 [ 306.118541][T13728] sock_sendmsg_nosec+0x14e/0x190 [ 306.118569][T13728] ____sys_sendmsg+0x54e/0x850 [ 306.118594][T13728] ? __pfx_____sys_sendmsg+0x10/0x10 [ 306.118622][T13728] ? import_iovec+0x73/0xa0 [ 306.118649][T13728] ___sys_sendmsg+0x2a5/0x360 [ 306.118667][T13728] ? __lock_acquire+0x747/0x2de0 [ 306.118694][T13728] ? __pfx____sys_sendmsg+0x10/0x10 [ 306.118729][T13728] ? kstrtouint+0x6e/0xe0 [ 306.118773][T13728] ? __fget_files+0x3a2/0x420 [ 306.118794][T13728] ? __fget_files+0x2a/0x420 [ 306.118825][T13728] __sys_sendmmsg+0x273/0x4e0 [ 306.118851][T13728] ? __pfx___sys_sendmmsg+0x10/0x10 [ 306.118881][T13728] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 306.118919][T13728] ? ksys_write+0x242/0x270 [ 306.118945][T13728] ? __pfx_ksys_write+0x10/0x10 [ 306.118976][T13728] __x64_sys_sendmmsg+0xa0/0xc0 [ 306.118998][T13728] do_syscall_64+0x166/0x520 [ 306.119020][T13728] ? trace_irq_disable+0x3b/0x140 [ 306.119045][T13728] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.119063][T13728] ? clear_bhb_loop+0x70/0xc0 [ 306.119085][T13728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.119102][T13728] RIP: 0033:0x7f19aada8f19 [ 306.119120][T13728] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 306.119136][T13728] RSP: 002b:00007f19abc30028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 306.119155][T13728] RAX: ffffffffffffffda RBX: 00007f19ab025fa0 RCX: 00007f19aada8f19 [ 306.119168][T13728] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000004 [ 306.119181][T13728] RBP: 00007f19abc30090 R08: 0000000000000000 R09: 0000000000000000 [ 306.119191][T13728] R10: 000000000000fff0 R11: 0000000000000246 R12: 0000000000000001 [ 306.119202][T13728] R13: 00007f19ab026038 R14: 00007f19ab025fa0 R15: 00007fff070319c8 [ 306.119232][T13728] [ 307.178175][T13775] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 307.253557][T13779] netlink: 'syz.1.2381': attribute type 9 has an invalid length. [ 307.482948][T13789] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 308.444734][T13794] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 308.444790][T13794] FAULT_INJECTION: forcing a failure. [ 308.444790][T13794] name failslab, interval 1, probability 0, space 0, times 0 [ 308.444804][T13794] CPU: 1 UID: 0 PID: 13794 Comm: syz.1.2386 Not tainted syzkaller #0 PREEMPT(full) [ 308.444816][T13794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 308.444823][T13794] Call Trace: [ 308.444827][T13794] [ 308.444832][T13794] dump_stack_lvl+0xe8/0x150 [ 308.444854][T13794] should_fail_ex+0x3eb/0x540 [ 308.444870][T13794] should_failslab+0xa8/0x100 [ 308.444887][T13794] ? skb_clone+0x212/0x3a0 [ 308.444899][T13794] kmem_cache_alloc_noprof+0x9c/0x600 [ 308.444913][T13794] ? skb_clone+0x212/0x3a0 [ 308.444928][T13794] skb_clone+0x212/0x3a0 [ 308.444942][T13794] __netlink_deliver_tap+0x355/0x6e0 [ 308.444963][T13794] ? netlink_deliver_tap+0x2e/0x1b0 [ 308.444978][T13794] netlink_deliver_tap+0x19c/0x1b0 [ 308.444993][T13794] netlink_sendskb+0x68/0x140 [ 308.445008][T13794] netlink_rcv_skb+0x2a4/0x4a0 [ 308.445033][T13794] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 308.445046][T13794] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 308.445068][T13794] ? netlink_deliver_tap+0x2e/0x1b0 [ 308.445082][T13794] ? netlink_deliver_tap+0x2e/0x1b0 [ 308.445099][T13794] netlink_unicast+0x8ef/0xa80 [ 308.445121][T13794] netlink_sendmsg+0x7f0/0xb20 [ 308.445140][T13794] ? __pfx_netlink_sendmsg+0x10/0x10 [ 308.445156][T13794] ? aa_sock_msg_perm+0x144/0x210 [ 308.445175][T13794] ? apparmor_socket_sendmsg+0x98/0x360 [ 308.445190][T13794] ? __pfx_netlink_sendmsg+0x10/0x10 [ 308.445204][T13794] sock_sendmsg_nosec+0x14e/0x190 [ 308.445220][T13794] ____sys_sendmsg+0x54e/0x850 [ 308.445234][T13794] ? __pfx_____sys_sendmsg+0x10/0x10 [ 308.445250][T13794] ? import_iovec+0x73/0xa0 [ 308.445265][T13794] ___sys_sendmsg+0x2a5/0x360 [ 308.445275][T13794] ? __lock_acquire+0x747/0x2de0 [ 308.445291][T13794] ? __pfx____sys_sendmsg+0x10/0x10 [ 308.445305][T13794] ? kstrtouint+0x6e/0xe0 [ 308.445329][T13794] ? __fget_files+0x3a2/0x420 [ 308.445342][T13794] ? __fget_files+0x2a/0x420 [ 308.445359][T13794] __sys_sendmmsg+0x273/0x4e0 [ 308.445373][T13794] ? __pfx___sys_sendmmsg+0x10/0x10 [ 308.445389][T13794] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 308.445411][T13794] ? ksys_write+0x242/0x270 [ 308.445425][T13794] ? __pfx_ksys_write+0x10/0x10 [ 308.445442][T13794] __x64_sys_sendmmsg+0xa0/0xc0 [ 308.445455][T13794] do_syscall_64+0x166/0x520 [ 308.445467][T13794] ? trace_irq_disable+0x3b/0x140 [ 308.445481][T13794] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.445491][T13794] ? clear_bhb_loop+0x70/0xc0 [ 308.445504][T13794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.445514][T13794] RIP: 0033:0x7fdd201a8f19 [ 308.445526][T13794] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 308.445535][T13794] RSP: 002b:00007fdd210be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 308.445547][T13794] RAX: ffffffffffffffda RBX: 00007fdd20425fa0 RCX: 00007fdd201a8f19 [ 308.445554][T13794] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000004 [ 308.445561][T13794] RBP: 00007fdd210be090 R08: 0000000000000000 R09: 0000000000000000 [ 308.445568][T13794] R10: 000000000000fff0 R11: 0000000000000246 R12: 0000000000000001 [ 308.445574][T13794] R13: 00007fdd20426038 R14: 00007fdd20425fa0 R15: 00007fffa0d95578 [ 308.445591][T13794] [ 308.614866][T13800] FAULT_INJECTION: forcing a failure. [ 308.614866][T13800] name failslab, interval 1, probability 0, space 0, times 0 [ 308.614895][T13800] CPU: 0 UID: 0 PID: 13800 Comm: syz.1.2389 Not tainted syzkaller #0 PREEMPT(full) [ 308.614916][T13800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 308.614927][T13800] Call Trace: [ 308.614935][T13800] [ 308.614942][T13800] dump_stack_lvl+0xe8/0x150 [ 308.614976][T13800] should_fail_ex+0x3eb/0x540 [ 308.615002][T13800] should_failslab+0xa8/0x100 [ 308.615033][T13800] __kmalloc_cache_noprof+0x9e/0x600 [ 308.615056][T13800] ? stack_trace_save+0xa9/0x100 [ 308.615078][T13800] ? bpf_add_kfunc_call+0x78b/0x1040 [ 308.615102][T13800] ? bpf_add_kfunc_call+0x78b/0x1040 [ 308.615134][T13800] bpf_add_kfunc_call+0x78b/0x1040 [ 308.615169][T13800] ? kasan_save_free_info+0x40/0x50 [ 308.615193][T13800] ? __pfx_bpf_add_kfunc_call+0x10/0x10 [ 308.615216][T13800] ? __x64_sys_bpf+0xba/0xd0 [ 308.615238][T13800] ? do_syscall_64+0x166/0x520 [ 308.615261][T13800] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.615355][T13800] ? __pfx_resolve_func_ptrs+0x10/0x10 [ 308.615378][T13800] add_kfuncs+0x176/0x2e0 [ 308.615403][T13800] bpf_check+0x1c5a/0x34e0 [ 308.615433][T13800] ? ktime_get_with_offset+0x93/0x2d0 [ 308.615457][T13800] ? ktime_get_with_offset+0x93/0x2d0 [ 308.615482][T13800] ? __pfx_bpf_check+0x10/0x10 [ 308.615504][T13800] ? bpf_obj_name_cpy+0x194/0x1e0 [ 308.615529][T13800] bpf_prog_load+0x14da/0x1c60 [ 308.615564][T13800] ? __pfx_bpf_prog_load+0x10/0x10 [ 308.615598][T13800] ? __might_fault+0xaf/0x130 [ 308.615623][T13800] __sys_bpf+0xd86/0xe00 [ 308.615649][T13800] ? __pfx___sys_bpf+0x10/0x10 [ 308.615678][T13800] ? __fget_files+0x2a/0x420 [ 308.615720][T13800] ? ksys_write+0x242/0x270 [ 308.615747][T13800] ? __pfx_ksys_write+0x10/0x10 [ 308.615776][T13800] __x64_sys_bpf+0xba/0xd0 [ 308.615804][T13800] do_syscall_64+0x166/0x520 [ 308.615825][T13800] ? trace_irq_disable+0x3b/0x140 [ 308.615849][T13800] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.615867][T13800] ? clear_bhb_loop+0x70/0xc0 [ 308.615890][T13800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.615908][T13800] RIP: 0033:0x7fdd201a8f19 [ 308.615924][T13800] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 308.615940][T13800] RSP: 002b:00007fdd210be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 308.615959][T13800] RAX: ffffffffffffffda RBX: 00007fdd20425fa0 RCX: 00007fdd201a8f19 [ 308.615973][T13800] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 308.615984][T13800] RBP: 00007fdd210be090 R08: 0000000000000000 R09: 0000000000000000 [ 308.615996][T13800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 308.616007][T13800] R13: 00007fdd20426038 R14: 00007fdd20425fa0 R15: 00007fffa0d95578 [ 308.616036][T13800] [ 309.259289][T13733] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 309.527797][T13809] 0ªî{X¹¦: left allmulticast mode [ 309.620812][T13824] tipc: Cannot configure node identity twice [ 309.630669][T13824] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 309.636963][T13824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2397'. [ 309.655953][T13824] macsec1: entered allmulticast mode [ 309.805727][T13831] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 310.011289][T13842] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 310.074807][T13846] netlink: 'syz.4.2406': attribute type 12 has an invalid length. [ 310.122903][T13849] FAULT_INJECTION: forcing a failure. [ 310.122903][T13849] name failslab, interval 1, probability 0, space 0, times 0 [ 310.122924][T13849] CPU: 0 UID: 0 PID: 13849 Comm: syz.4.2407 Not tainted syzkaller #0 PREEMPT(full) [ 310.122936][T13849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 310.122942][T13849] Call Trace: [ 310.122947][T13849] [ 310.122952][T13849] dump_stack_lvl+0xe8/0x150 [ 310.122975][T13849] should_fail_ex+0x3eb/0x540 [ 310.122990][T13849] ? __alloc_skb+0x1db/0x7a0 [ 310.123002][T13849] should_failslab+0xa8/0x100 [ 310.123019][T13849] ? __alloc_skb+0x1db/0x7a0 [ 310.123033][T13849] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 310.123054][T13849] ? __alloc_skb+0x18d/0x7a0 [ 310.123072][T13849] ? __alloc_skb+0x1db/0x7a0 [ 310.123106][T13849] __alloc_skb+0x1db/0x7a0 [ 310.123128][T13849] xfrm_send_policy_notify+0x2a0/0x1c00 [ 310.123162][T13849] ? __pfx_xfrm_send_policy_notify+0x10/0x10 [ 310.123180][T13849] ? lock_acquire+0x115/0x350 [ 310.123197][T13849] ? lockdep_hardirqs_on+0x7b/0x110 [ 310.123211][T13849] ? __local_bh_enable_ip+0xd6/0x140 [ 310.123225][T13849] ? km_policy_notify+0x28/0x200 [ 310.123239][T13849] ? __pfx_xfrm_send_policy_notify+0x10/0x10 [ 310.123251][T13849] km_policy_notify+0x121/0x200 [ 310.123263][T13849] ? km_policy_notify+0x28/0x200 [ 310.123276][T13849] xfrm_add_policy+0x573/0x760 [ 310.123292][T13849] ? __pfx_xfrm_add_policy+0x10/0x10 [ 310.123304][T13849] ? apparmor_capable+0x126/0x170 [ 310.123320][T13849] ? __nla_parse+0x40/0x60 [ 310.123336][T13849] xfrm_user_rcv_msg+0x7a8/0xf30 [ 310.123352][T13849] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 310.123382][T13849] ? __mutex_trylock_common+0x15f/0x270 [ 310.123400][T13849] ? __pfx___mutex_trylock_common+0x10/0x10 [ 310.123416][T13849] ? rcu_is_watching+0x16/0xb0 [ 310.123432][T13849] ? trace_contention_end+0x3d/0x140 [ 310.123451][T13849] netlink_rcv_skb+0x226/0x4a0 [ 310.123467][T13849] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 310.123481][T13849] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 310.123504][T13849] ? netlink_deliver_tap+0x2e/0x1b0 [ 310.123518][T13849] ? netlink_deliver_tap+0x2e/0x1b0 [ 310.123534][T13849] xfrm_netlink_rcv+0x79/0x90 [ 310.123550][T13849] netlink_unicast+0x8ef/0xa80 [ 310.123590][T13849] netlink_sendmsg+0x7f0/0xb20 [ 310.123624][T13849] ? __pfx_netlink_sendmsg+0x10/0x10 [ 310.123651][T13849] ? aa_sock_msg_perm+0x144/0x210 [ 310.123687][T13849] ? apparmor_socket_sendmsg+0x18b/0x360 [ 310.123705][T13849] ? __pfx_netlink_sendmsg+0x10/0x10 [ 310.123720][T13849] sock_sendmsg_nosec+0x14e/0x190 [ 310.123737][T13849] ____sys_sendmsg+0x54e/0x850 [ 310.123762][T13849] ? __pfx_____sys_sendmsg+0x10/0x10 [ 310.123791][T13849] ? import_iovec+0x73/0xa0 [ 310.123819][T13849] ___sys_sendmsg+0x2a5/0x360 [ 310.123836][T13849] ? __lock_acquire+0x747/0x2de0 [ 310.123852][T13849] ? __pfx____sys_sendmsg+0x10/0x10 [ 310.123883][T13849] ? __fget_files+0x3a2/0x420 [ 310.123896][T13849] ? __fget_files+0x2a/0x420 [ 310.123914][T13849] __x64_sys_sendmsg+0x1b1/0x290 [ 310.123926][T13849] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 310.123950][T13849] do_syscall_64+0x166/0x520 [ 310.123963][T13849] ? trace_irq_disable+0x3b/0x140 [ 310.123977][T13849] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.123987][T13849] ? clear_bhb_loop+0x70/0xc0 [ 310.123999][T13849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.124010][T13849] RIP: 0033:0x7f19aada8f19 [ 310.124021][T13849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 310.124030][T13849] RSP: 002b:00007f19abc30028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 310.124042][T13849] RAX: ffffffffffffffda RBX: 00007f19ab025fa0 RCX: 00007f19aada8f19 [ 310.124050][T13849] RDX: 000000002c000010 RSI: 00002000000001c0 RDI: 0000000000000004 [ 310.124056][T13849] RBP: 00007f19abc30090 R08: 0000000000000000 R09: 0000000000000000 [ 310.124063][T13849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 310.124068][T13849] R13: 00007f19ab026038 R14: 00007f19ab025fa0 R15: 00007fff070319c8 [ 310.124145][T13849] [ 310.983844][T13877] FAULT_INJECTION: forcing a failure. [ 310.983844][T13877] name failslab, interval 1, probability 0, space 0, times 0 [ 310.983882][T13877] CPU: 1 UID: 0 PID: 13877 Comm: syz.0.2415 Not tainted syzkaller #0 PREEMPT(full) [ 310.983904][T13877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 310.983915][T13877] Call Trace: [ 310.983922][T13877] [ 310.983931][T13877] dump_stack_lvl+0xe8/0x150 [ 310.983964][T13877] should_fail_ex+0x3eb/0x540 [ 310.983994][T13877] should_failslab+0xa8/0x100 [ 310.984025][T13877] __kvmalloc_node_noprof+0x171/0x820 [ 310.984053][T13877] ? __kvmalloc_node_noprof+0x340/0x820 [ 310.984078][T13877] ? bpf_compute_postorder+0xd3/0x9a0 [ 310.984102][T13877] ? bpf_compute_postorder+0xd3/0x9a0 [ 310.984134][T13877] bpf_compute_postorder+0xd3/0x9a0 [ 310.984161][T13877] ? __pfx_resolve_func_ptrs+0x10/0x10 [ 310.984181][T13877] ? check_unwind_insns+0x670/0x910 [ 310.984212][T13877] bpf_check+0x298f/0x34e0 [ 310.984244][T13877] ? ktime_get_with_offset+0x93/0x2d0 [ 310.984269][T13877] ? ktime_get_with_offset+0x93/0x2d0 [ 310.984295][T13877] ? __pfx_bpf_check+0x10/0x10 [ 310.984318][T13877] ? bpf_obj_name_cpy+0x194/0x1e0 [ 310.984345][T13877] bpf_prog_load+0x14da/0x1c60 [ 310.984375][T13877] ? __pfx_bpf_prog_load+0x10/0x10 [ 310.984410][T13877] ? __might_fault+0xaf/0x130 [ 310.984437][T13877] __sys_bpf+0xd86/0xe00 [ 310.984463][T13877] ? __pfx___sys_bpf+0x10/0x10 [ 310.984493][T13877] ? __fget_files+0x2a/0x420 [ 310.984531][T13877] ? ksys_write+0x242/0x270 [ 310.984558][T13877] ? __pfx_ksys_write+0x10/0x10 [ 310.984586][T13877] __x64_sys_bpf+0xba/0xd0 [ 310.984614][T13877] do_syscall_64+0x166/0x520 [ 310.984635][T13877] ? trace_irq_disable+0x3b/0x140 [ 310.984659][T13877] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.984678][T13877] ? clear_bhb_loop+0x70/0xc0 [ 310.984700][T13877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.984718][T13877] RIP: 0033:0x7fb1449a8f19 [ 310.984734][T13877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 310.984749][T13877] RSP: 002b:00007fb14582c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 310.984769][T13877] RAX: ffffffffffffffda RBX: 00007fb144c25fa0 RCX: 00007fb1449a8f19 [ 310.984781][T13877] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 310.984793][T13877] RBP: 00007fb14582c090 R08: 0000000000000000 R09: 0000000000000000 [ 310.984805][T13877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 310.984817][T13877] R13: 00007fb144c26038 R14: 00007fb144c25fa0 R15: 00007ffdd69f1a88 [ 310.984849][T13877] [ 311.193491][T13881] netlink: 'syz.3.2417': attribute type 12 has an invalid length. [ 311.293671][T13884] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 311.463353][T13892] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 311.463413][T13892] FAULT_INJECTION: forcing a failure. [ 311.463413][T13892] name failslab, interval 1, probability 0, space 0, times 0 [ 311.463427][T13892] CPU: 0 UID: 0 PID: 13892 Comm: syz.3.2422 Not tainted syzkaller #0 PREEMPT(full) [ 311.463439][T13892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 311.463445][T13892] Call Trace: [ 311.463449][T13892] [ 311.463454][T13892] dump_stack_lvl+0xe8/0x150 [ 311.463476][T13892] should_fail_ex+0x3eb/0x540 [ 311.463492][T13892] should_failslab+0xa8/0x100 [ 311.463509][T13892] ? skb_clone+0x212/0x3a0 [ 311.463522][T13892] kmem_cache_alloc_noprof+0x9c/0x600 [ 311.463537][T13892] ? skb_clone+0x212/0x3a0 [ 311.463551][T13892] skb_clone+0x212/0x3a0 [ 311.463565][T13892] __netlink_deliver_tap+0x355/0x6e0 [ 311.463586][T13892] ? netlink_deliver_tap+0x2e/0x1b0 [ 311.463601][T13892] netlink_deliver_tap+0x19c/0x1b0 [ 311.463616][T13892] netlink_sendskb+0x68/0x140 [ 311.463631][T13892] netlink_rcv_skb+0x2a4/0x4a0 [ 311.463646][T13892] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 311.463659][T13892] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 311.463680][T13892] ? netlink_deliver_tap+0x2e/0x1b0 [ 311.463698][T13892] ? netlink_deliver_tap+0x2e/0x1b0 [ 311.463715][T13892] netlink_unicast+0x8ef/0xa80 [ 311.463737][T13892] netlink_sendmsg+0x7f0/0xb20 [ 311.463755][T13892] ? __pfx_netlink_sendmsg+0x10/0x10 [ 311.463771][T13892] ? aa_sock_msg_perm+0x144/0x210 [ 311.463790][T13892] ? apparmor_socket_sendmsg+0x98/0x360 [ 311.463805][T13892] ? __pfx_netlink_sendmsg+0x10/0x10 [ 311.463819][T13892] sock_sendmsg_nosec+0x14e/0x190 [ 311.463835][T13892] ____sys_sendmsg+0x54e/0x850 [ 311.463849][T13892] ? __pfx_____sys_sendmsg+0x10/0x10 [ 311.463870][T13892] ? import_iovec+0x73/0xa0 [ 311.463893][T13892] ___sys_sendmsg+0x2a5/0x360 [ 311.463910][T13892] ? __lock_acquire+0x747/0x2de0 [ 311.463936][T13892] ? __pfx____sys_sendmsg+0x10/0x10 [ 311.463961][T13892] ? kstrtouint+0x6e/0xe0 [ 311.464003][T13892] ? __fget_files+0x3a2/0x420 [ 311.464016][T13892] ? __fget_files+0x2a/0x420 [ 311.464034][T13892] __sys_sendmmsg+0x273/0x4e0 [ 311.464048][T13892] ? __pfx___sys_sendmmsg+0x10/0x10 [ 311.464064][T13892] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 311.464086][T13892] ? ksys_write+0x242/0x270 [ 311.464102][T13892] ? __pfx_ksys_write+0x10/0x10 [ 311.464119][T13892] __x64_sys_sendmmsg+0xa0/0xc0 [ 311.464132][T13892] do_syscall_64+0x166/0x520 [ 311.464145][T13892] ? trace_irq_disable+0x3b/0x140 [ 311.464159][T13892] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.464169][T13892] ? clear_bhb_loop+0x70/0xc0 [ 311.464181][T13892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.464191][T13892] RIP: 0033:0x7f08c47a8f19 [ 311.464202][T13892] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 311.464211][T13892] RSP: 002b:00007f08c5723028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 311.464223][T13892] RAX: ffffffffffffffda RBX: 00007f08c4a25fa0 RCX: 00007f08c47a8f19 [ 311.464230][T13892] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000004 [ 311.464237][T13892] RBP: 00007f08c5723090 R08: 0000000000000000 R09: 0000000000000000 [ 311.464243][T13892] R10: 000000000000fff0 R11: 0000000000000246 R12: 0000000000000001 [ 311.464249][T13892] R13: 00007f08c4a26038 R14: 00007f08c4a25fa0 R15: 00007ffce6296808 [ 311.464266][T13892] [ 312.264013][T13908] IPVS: sh: UDP 0.0.0.0:0 - no destination available [ 312.995510][T13839] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 313.268402][T13923] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 313.341834][T13924] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0xc9 [ 313.354947][T13924] sch_tbf: burst 19872 is lower than device lo mtu (32783) ! [ 313.486249][T13937] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2441'. [ 316.454351][T13936] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 316.457567][T13954] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2447'. [ 316.996453][T13998] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2460'. [ 317.095364][T14007] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 317.602694][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.024270][T14040] FAULT_INJECTION: forcing a failure. [ 318.024270][T14040] name failslab, interval 1, probability 0, space 0, times 0 [ 318.024300][T14040] CPU: 1 UID: 0 PID: 14040 Comm: syz.2.2471 Not tainted syzkaller #0 PREEMPT(full) [ 318.024322][T14040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 318.024343][T14040] Call Trace: [ 318.024351][T14040] [ 318.024359][T14040] dump_stack_lvl+0xe8/0x150 [ 318.024394][T14040] should_fail_ex+0x3eb/0x540 [ 318.024422][T14040] should_failslab+0xa8/0x100 [ 318.024453][T14040] __kvmalloc_node_noprof+0x171/0x820 [ 318.024480][T14040] ? __kvmalloc_node_noprof+0x340/0x820 [ 318.024504][T14040] ? bpf_compute_postorder+0xd3/0x9a0 [ 318.024529][T14040] ? bpf_compute_postorder+0xd3/0x9a0 [ 318.024561][T14040] bpf_compute_postorder+0xd3/0x9a0 [ 318.024587][T14040] ? __pfx_resolve_func_ptrs+0x10/0x10 [ 318.024606][T14040] ? check_unwind_insns+0x670/0x910 [ 318.024636][T14040] bpf_check+0x298f/0x34e0 [ 318.024667][T14040] ? ktime_get_with_offset+0x93/0x2d0 [ 318.024692][T14040] ? ktime_get_with_offset+0x93/0x2d0 [ 318.024716][T14040] ? __pfx_bpf_check+0x10/0x10 [ 318.024738][T14040] ? bpf_obj_name_cpy+0x194/0x1e0 [ 318.024766][T14040] bpf_prog_load+0x14da/0x1c60 [ 318.024797][T14040] ? __pfx_bpf_prog_load+0x10/0x10 [ 318.024831][T14040] ? __might_fault+0xaf/0x130 [ 318.024858][T14040] __sys_bpf+0xd86/0xe00 [ 318.024885][T14040] ? __pfx___sys_bpf+0x10/0x10 [ 318.024915][T14040] ? __fget_files+0x2a/0x420 [ 318.024956][T14040] ? ksys_write+0x242/0x270 [ 318.024984][T14040] ? __pfx_ksys_write+0x10/0x10 [ 318.025014][T14040] __x64_sys_bpf+0xba/0xd0 [ 318.025043][T14040] do_syscall_64+0x166/0x520 [ 318.025063][T14040] ? trace_irq_disable+0x3b/0x140 [ 318.025086][T14040] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.025105][T14040] ? clear_bhb_loop+0x70/0xc0 [ 318.025128][T14040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.025146][T14040] RIP: 0033:0x7f300eba8f19 [ 318.025165][T14040] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 318.025179][T14040] RSP: 002b:00007f300fa01028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 318.025198][T14040] RAX: ffffffffffffffda RBX: 00007f300ee25fa0 RCX: 00007f300eba8f19 [ 318.025211][T14040] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 318.025222][T14040] RBP: 00007f300fa01090 R08: 0000000000000000 R09: 0000000000000000 [ 318.025232][T14040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 318.025241][T14040] R13: 00007f300ee26038 R14: 00007f300ee25fa0 R15: 00007ffd7a53fee8 [ 318.025267][T14040] [ 318.135308][T14042] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2472'. [ 318.315734][T14044] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 318.316827][T14044] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2473'. [ 319.989381][T13999] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 319.990356][T14028] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2467'. [ 320.286725][T14071] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2483'. [ 320.360153][T14073] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 320.360179][T14073] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 320.364822][T14073] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 320.364845][T14073] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 320.922169][T14108] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2489'. [ 321.465519][T14139] ip6t_srh: unknown srh match flags 4000 [ 322.880106][T14105] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 324.077809][T14121] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 324.322097][T14156] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2499'. [ 324.861234][T14199] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2509'. [ 324.958664][T14207] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2511'. [ 325.019770][T14195] netlink: 'syz.0.2507': attribute type 21 has an invalid length. [ 325.019796][T14195] IPv6: NLM_F_CREATE should be specified when creating new route [ 325.019872][T14195] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 325.019878][T14195] IPv6: NLM_F_CREATE should be set when creating new route [ 325.019912][T14195] IPv6: NLM_F_CREATE should be set when creating new route [ 325.019926][T14195] IPv6: NLM_F_CREATE should be set when creating new route [ 325.370938][T14212] openvswitch: netlink: Duplicate or invalid key (type 0). [ 325.370962][T14212] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 325.535424][T14215] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2512'. [ 325.535490][T14215] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2512'. [ 325.594436][T14216] bond5 (unregistering): Released all slaves [ 327.654339][T14182] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 327.672429][T14212] netlink: 'syz.3.2512': attribute type 9 has an invalid length. [ 327.892325][T14223] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2514'. [ 328.050116][T14236] FAULT_INJECTION: forcing a failure. [ 328.050116][T14236] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 328.050147][T14236] CPU: 0 UID: 0 PID: 14236 Comm: syz.3.2520 Not tainted syzkaller #0 PREEMPT(full) [ 328.050175][T14236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 328.050186][T14236] Call Trace: [ 328.050194][T14236] [ 328.050203][T14236] dump_stack_lvl+0xe8/0x150 [ 328.050238][T14236] should_fail_ex+0x3eb/0x540 [ 328.050267][T14236] _copy_from_user+0x2d/0xb0 [ 328.050292][T14236] ___sys_sendmsg+0x1c6/0x360 [ 328.050313][T14236] ? __lock_acquire+0x747/0x2de0 [ 328.050342][T14236] ? __pfx____sys_sendmsg+0x10/0x10 [ 328.050401][T14236] ? __fget_files+0x3a2/0x420 [ 328.050424][T14236] ? __fget_files+0x2a/0x420 [ 328.050457][T14236] __x64_sys_sendmsg+0x1b1/0x290 [ 328.050482][T14236] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 328.050525][T14236] do_syscall_64+0x166/0x520 [ 328.050550][T14236] ? trace_irq_disable+0x3b/0x140 [ 328.050575][T14236] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.050594][T14236] ? clear_bhb_loop+0x70/0xc0 [ 328.050617][T14236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.050636][T14236] RIP: 0033:0x7f08c47a8f19 [ 328.050653][T14236] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 328.050666][T14236] RSP: 002b:00007f08c5723028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 328.050685][T14236] RAX: ffffffffffffffda RBX: 00007f08c4a25fa0 RCX: 00007f08c47a8f19 [ 328.050696][T14236] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 328.050708][T14236] RBP: 00007f08c5723090 R08: 0000000000000000 R09: 0000000000000000 [ 328.050720][T14236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 328.050732][T14236] R13: 00007f08c4a26038 R14: 00007f08c4a25fa0 R15: 00007ffce6296808 [ 328.050764][T14236] [ 328.488803][T14250] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 328.567395][T14241] syz.3.2522 (14241) used greatest stack depth: 19264 bytes left [ 328.909778][T14276] FAULT_INJECTION: forcing a failure. [ 328.909778][T14276] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 328.909810][T14276] CPU: 1 UID: 0 PID: 14276 Comm: syz.3.2532 Not tainted syzkaller #0 PREEMPT(full) [ 328.909831][T14276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 328.909841][T14276] Call Trace: [ 328.909849][T14276] [ 328.909857][T14276] dump_stack_lvl+0xe8/0x150 [ 328.909890][T14276] should_fail_ex+0x3eb/0x540 [ 328.909917][T14276] prepare_alloc_pages+0x21e/0x5f0 [ 328.909946][T14276] __alloc_frozen_pages_noprof+0x17c/0x410 [ 328.909974][T14276] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 328.910008][T14276] ? policy_nodemask+0x31b/0x980 [ 328.910034][T14276] alloc_pages_mpol+0x21e/0x390 [ 328.910059][T14276] alloc_pages_noprof+0xb1/0x2b0 [ 328.910080][T14276] bpf_prog_test_run_skb+0x14ae/0x22e0 [ 328.910149][T14276] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 328.910177][T14276] bpf_prog_test_run+0x2c5/0x340 [ 328.910202][T14276] __sys_bpf+0xb1e/0xe00 [ 328.910230][T14276] ? __pfx___sys_bpf+0x10/0x10 [ 328.910261][T14276] ? __fget_files+0x2a/0x420 [ 328.910302][T14276] ? ksys_write+0x242/0x270 [ 328.910328][T14276] ? __pfx_ksys_write+0x10/0x10 [ 328.910355][T14276] __x64_sys_bpf+0xba/0xd0 [ 328.910382][T14276] do_syscall_64+0x166/0x520 [ 328.910405][T14276] ? trace_irq_disable+0x3b/0x140 [ 328.910428][T14276] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.910445][T14276] ? clear_bhb_loop+0x70/0xc0 [ 328.910465][T14276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.910484][T14276] RIP: 0033:0x7f08c47a8f19 [ 328.910500][T14276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 328.910515][T14276] RSP: 002b:00007f08c5723028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 328.910533][T14276] RAX: ffffffffffffffda RBX: 00007f08c4a25fa0 RCX: 00007f08c47a8f19 [ 328.910546][T14276] RDX: 0000000000000050 RSI: 0000200000002b80 RDI: 000000000000000a [ 328.910557][T14276] RBP: 00007f08c5723090 R08: 0000000000000000 R09: 0000000000000000 [ 328.910569][T14276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 328.910578][T14276] R13: 00007f08c4a26038 R14: 00007f08c4a25fa0 R15: 00007ffce6296808 [ 328.910607][T14276] [ 329.007839][T14284] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2533'. [ 329.020169][T14282] batadv0: mtu less than device minimum [ 329.021635][T14282] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (0) [ 329.023146][T14282] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (0) [ 329.024547][T14282] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (0) [ 329.025925][T14282] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (0) [ 329.027324][T14282] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (0) [ 329.028724][T14282] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (0) [ 329.030238][T14282] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum table response size (0) [ 329.319773][T14291] FAULT_INJECTION: forcing a failure. [ 329.319773][T14291] name failslab, interval 1, probability 0, space 0, times 0 [ 329.319803][T14291] CPU: 0 UID: 0 PID: 14291 Comm: syz.3.2537 Not tainted syzkaller #0 PREEMPT(full) [ 329.319824][T14291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 329.319836][T14291] Call Trace: [ 329.319843][T14291] [ 329.319852][T14291] dump_stack_lvl+0xe8/0x150 [ 329.319885][T14291] should_fail_ex+0x3eb/0x540 [ 329.319914][T14291] should_failslab+0xa8/0x100 [ 329.319945][T14291] __kvmalloc_node_noprof+0x171/0x820 [ 329.319973][T14291] ? __kvmalloc_node_noprof+0x340/0x820 [ 329.319998][T14291] ? bpf_compute_scc+0x106/0xdb0 [ 329.320023][T14291] ? bpf_compute_scc+0x106/0xdb0 [ 329.320054][T14291] bpf_compute_scc+0x106/0xdb0 [ 329.320087][T14291] ? sort_subprogs_topo+0xe5f/0x1130 [ 329.320130][T14291] bpf_check+0x2c70/0x34e0 [ 329.320161][T14291] ? ktime_get_with_offset+0x93/0x2d0 [ 329.320187][T14291] ? ktime_get_with_offset+0x93/0x2d0 [ 329.320213][T14291] ? __pfx_bpf_check+0x10/0x10 [ 329.320235][T14291] ? bpf_obj_name_cpy+0x194/0x1e0 [ 329.320262][T14291] bpf_prog_load+0x14da/0x1c60 [ 329.320292][T14291] ? __pfx_bpf_prog_load+0x10/0x10 [ 329.320321][T14291] ? __might_fault+0xaf/0x130 [ 329.320346][T14291] __sys_bpf+0xd86/0xe00 [ 329.320372][T14291] ? __pfx___sys_bpf+0x10/0x10 [ 329.320400][T14291] ? __fget_files+0x2a/0x420 [ 329.320438][T14291] ? ksys_write+0x242/0x270 [ 329.320463][T14291] ? __pfx_ksys_write+0x10/0x10 [ 329.320491][T14291] __x64_sys_bpf+0xba/0xd0 [ 329.320517][T14291] do_syscall_64+0x166/0x520 [ 329.320538][T14291] ? trace_irq_disable+0x3b/0x140 [ 329.320561][T14291] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.320580][T14291] ? clear_bhb_loop+0x70/0xc0 [ 329.320602][T14291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.320621][T14291] RIP: 0033:0x7f08c47a8f19 [ 329.320637][T14291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 329.320652][T14291] RSP: 002b:00007f08c5723028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 329.320669][T14291] RAX: ffffffffffffffda RBX: 00007f08c4a25fa0 RCX: 00007f08c47a8f19 [ 329.320685][T14291] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 329.320697][T14291] RBP: 00007f08c5723090 R08: 0000000000000000 R09: 0000000000000000 [ 329.320708][T14291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 329.320719][T14291] R13: 00007f08c4a26038 R14: 00007f08c4a25fa0 R15: 00007ffce6296808 [ 329.320750][T14291] [ 329.457954][T14293] sctp: [Deprecated]: syz.4.2538 (pid 14293) Use of struct sctp_assoc_value in delayed_ack socket option. [ 329.457954][T14293] Use struct sctp_sack_info instead [ 329.510279][T14297] tunl0 speed is unknown, defaulting to 1000 [ 329.514581][T14297] tunl0 speed is unknown, defaulting to 1000 [ 329.517474][T14297] tunl0 speed is unknown, defaulting to 1000 [ 329.631947][T14301] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2540'. [ 329.712967][T14305] FAULT_INJECTION: forcing a failure. [ 329.712967][T14305] name failslab, interval 1, probability 0, space 0, times 0 [ 329.712999][T14305] CPU: 1 UID: 0 PID: 14305 Comm: syz.3.2542 Not tainted syzkaller #0 PREEMPT(full) [ 329.713021][T14305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 329.713032][T14305] Call Trace: [ 329.713040][T14305] [ 329.713049][T14305] dump_stack_lvl+0xe8/0x150 [ 329.713083][T14305] should_fail_ex+0x3eb/0x540 [ 329.713111][T14305] should_failslab+0xa8/0x100 [ 329.713142][T14305] __kvmalloc_node_noprof+0x171/0x820 [ 329.713181][T14305] ? __kvmalloc_node_noprof+0x340/0x820 [ 329.713205][T14305] ? bpf_compute_scc+0x120/0xdb0 [ 329.713230][T14305] ? bpf_compute_scc+0x120/0xdb0 [ 329.713261][T14305] bpf_compute_scc+0x120/0xdb0 [ 329.713286][T14305] ? sort_subprogs_topo+0xe5f/0x1130 [ 329.713333][T14305] bpf_check+0x2c70/0x34e0 [ 329.713365][T14305] ? ktime_get_with_offset+0x93/0x2d0 [ 329.713390][T14305] ? ktime_get_with_offset+0x93/0x2d0 [ 329.713416][T14305] ? __pfx_bpf_check+0x10/0x10 [ 329.713439][T14305] ? bpf_obj_name_cpy+0x194/0x1e0 [ 329.713466][T14305] bpf_prog_load+0x14da/0x1c60 [ 329.713498][T14305] ? __pfx_bpf_prog_load+0x10/0x10 [ 329.713533][T14305] ? __might_fault+0xaf/0x130 [ 329.713560][T14305] __sys_bpf+0xd86/0xe00 [ 329.713596][T14305] ? __pfx___sys_bpf+0x10/0x10 [ 329.713626][T14305] ? __fget_files+0x2a/0x420 [ 329.713678][T14305] ? ksys_write+0x242/0x270 [ 329.713705][T14305] ? __pfx_ksys_write+0x10/0x10 [ 329.713735][T14305] __x64_sys_bpf+0xba/0xd0 [ 329.713765][T14305] do_syscall_64+0x166/0x520 [ 329.713789][T14305] ? trace_irq_disable+0x3b/0x140 [ 329.713814][T14305] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.713833][T14305] ? clear_bhb_loop+0x70/0xc0 [ 329.713856][T14305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.713874][T14305] RIP: 0033:0x7f08c47a8f19 [ 329.713893][T14305] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 329.713909][T14305] RSP: 002b:00007f08c5723028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 329.713930][T14305] RAX: ffffffffffffffda RBX: 00007f08c4a25fa0 RCX: 00007f08c47a8f19 [ 329.713944][T14305] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 329.713956][T14305] RBP: 00007f08c5723090 R08: 0000000000000000 R09: 0000000000000000 [ 329.713968][T14305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 329.713979][T14305] R13: 00007f08c4a26038 R14: 00007f08c4a25fa0 R15: 00007ffce6296808 [ 329.714011][T14305] [ 329.954607][T14297] infiniband syz1: set active [ 329.954673][T12632] tunl0 speed is unknown, defaulting to 1000 [ 329.954741][T14297] infiniband syz1: added tunl0 [ 329.989409][T14297] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 329.989449][T14297] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 329.989486][T14297] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 330.052136][T14297] RDS/IB: syz1: added [ 330.052191][T14297] smc: adding ib device syz1 with port count 1 [ 330.052210][T14297] smc: ib device syz1 port 1 has no pnetid [ 330.052294][T12632] tunl0 speed is unknown, defaulting to 1000 [ 330.055867][T14297] tunl0 speed is unknown, defaulting to 1000 [ 330.203102][T14297] tunl0 speed is unknown, defaulting to 1000 [ 330.407336][T14297] tunl0 speed is unknown, defaulting to 1000 [ 330.462817][T14319] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2546'. [ 330.625815][T14323] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2548'. [ 330.668222][T14297] tunl0 speed is unknown, defaulting to 1000 [ 330.864484][T14297] tunl0 speed is unknown, defaulting to 1000 [ 331.516031][T14254] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 331.605727][T14348] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2559'. [ 331.801846][T14358] Bluetooth: hci0: unsupported parameter 5135 [ 331.801870][T14358] Bluetooth: hci0: unsupported parameter 8192 [ 331.801883][T14358] Bluetooth: hci0: unsupported parameter 5135 [ 331.801894][T14358] Bluetooth: hci0: unsupported parameter 8192 [ 331.803037][T14358] xt_hashlimit: size too large, truncated to 1048576 [ 331.936772][T14366] syzkaller0: left allmulticast mode [ 331.949386][ T150] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.949433][ T150] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.949464][ T150] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.016198][T14369] FAULT_INJECTION: forcing a failure. [ 332.016198][T14369] name failslab, interval 1, probability 0, space 0, times 0 [ 332.016227][T14369] CPU: 0 UID: 0 PID: 14369 Comm: syz.3.2567 Not tainted syzkaller #0 PREEMPT(full) [ 332.016247][T14369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 332.016258][T14369] Call Trace: [ 332.016264][T14369] [ 332.016272][T14369] dump_stack_lvl+0xe8/0x150 [ 332.016305][T14369] should_fail_ex+0x3eb/0x540 [ 332.016333][T14369] should_failslab+0xa8/0x100 [ 332.016362][T14369] __kvmalloc_node_noprof+0x171/0x820 [ 332.016397][T14369] ? __kvmalloc_node_noprof+0x340/0x820 [ 332.016418][T14369] ? bpf_compute_scc+0xec/0xdb0 [ 332.016440][T14369] ? bpf_compute_scc+0xec/0xdb0 [ 332.016468][T14369] bpf_compute_scc+0xec/0xdb0 [ 332.016490][T14369] ? sort_subprogs_topo+0xe5f/0x1130 [ 332.016529][T14369] bpf_check+0x2c70/0x34e0 [ 332.016559][T14369] ? ktime_get_with_offset+0x93/0x2d0 [ 332.016584][T14369] ? ktime_get_with_offset+0x93/0x2d0 [ 332.016608][T14369] ? __pfx_bpf_check+0x10/0x10 [ 332.016630][T14369] ? bpf_obj_name_cpy+0x194/0x1e0 [ 332.016656][T14369] bpf_prog_load+0x14da/0x1c60 [ 332.016687][T14369] ? __pfx_bpf_prog_load+0x10/0x10 [ 332.016721][T14369] ? __might_fault+0xaf/0x130 [ 332.016747][T14369] __sys_bpf+0xd86/0xe00 [ 332.016771][T14369] ? __pfx___sys_bpf+0x10/0x10 [ 332.016797][T14369] ? __fget_files+0x2a/0x420 [ 332.016837][T14369] ? ksys_write+0x242/0x270 [ 332.016864][T14369] ? __pfx_ksys_write+0x10/0x10 [ 332.016893][T14369] __x64_sys_bpf+0xba/0xd0 [ 332.016922][T14369] do_syscall_64+0x166/0x520 [ 332.016945][T14369] ? trace_irq_disable+0x3b/0x140 [ 332.016969][T14369] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.016986][T14369] ? clear_bhb_loop+0x70/0xc0 [ 332.017009][T14369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.017028][T14369] RIP: 0033:0x7f08c47a8f19 [ 332.017079][T14369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 332.017097][T14369] RSP: 002b:00007f08c5723028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 332.017117][T14369] RAX: ffffffffffffffda RBX: 00007f08c4a25fa0 RCX: 00007f08c47a8f19 [ 332.017130][T14369] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 332.017142][T14369] RBP: 00007f08c5723090 R08: 0000000000000000 R09: 0000000000000000 [ 332.017154][T14369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 332.017165][T14369] R13: 00007f08c4a26038 R14: 00007f08c4a25fa0 R15: 00007ffce6296808 [ 332.017197][T14369] [ 332.606739][T14391] netlink: 'syz.3.2573': attribute type 10 has an invalid length. [ 332.606764][T14391] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2573'. [ 332.607350][T14391] batman_adv: batadv0: Interface deactivated: dummy0 [ 332.607370][T14391] batman_adv: batadv0: Removing interface: dummy0 [ 332.610179][T14391] bridge0: port 1(dummy0) entered blocking state [ 332.610364][T14391] bridge0: port 1(dummy0) entered disabled state [ 332.610498][T14391] dummy0: entered allmulticast mode [ 332.612595][T14391] dummy0: entered promiscuous mode [ 332.614298][T14391] bridge0: port 1(dummy0) entered blocking state [ 332.614421][T14391] bridge0: port 1(dummy0) entered forwarding state [ 332.690849][T14393] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2575'. [ 333.387294][T14415] FAULT_INJECTION: forcing a failure. [ 333.387294][T14415] name failslab, interval 1, probability 0, space 0, times 0 [ 333.387323][T14415] CPU: 0 UID: 0 PID: 14415 Comm: syz.1.2582 Not tainted syzkaller #0 PREEMPT(full) [ 333.387345][T14415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 333.387356][T14415] Call Trace: [ 333.387364][T14415] [ 333.387373][T14415] dump_stack_lvl+0xe8/0x150 [ 333.387407][T14415] should_fail_ex+0x3eb/0x540 [ 333.387436][T14415] should_failslab+0xa8/0x100 [ 333.387467][T14415] __kvmalloc_node_noprof+0x171/0x820 [ 333.387495][T14415] ? __kvmalloc_node_noprof+0x340/0x820 [ 333.387518][T14415] ? bpf_compute_scc+0x13a/0xdb0 [ 333.387542][T14415] ? bpf_compute_scc+0x13a/0xdb0 [ 333.387576][T14415] bpf_compute_scc+0x13a/0xdb0 [ 333.387605][T14415] ? sort_subprogs_topo+0xe5f/0x1130 [ 333.387649][T14415] bpf_check+0x2c70/0x34e0 [ 333.387680][T14415] ? ktime_get_with_offset+0x93/0x2d0 [ 333.387709][T14415] ? ktime_get_with_offset+0x93/0x2d0 [ 333.387739][T14415] ? __pfx_bpf_check+0x10/0x10 [ 333.387762][T14415] ? bpf_obj_name_cpy+0x194/0x1e0 [ 333.387790][T14415] bpf_prog_load+0x14da/0x1c60 [ 333.387829][T14415] ? __pfx_bpf_prog_load+0x10/0x10 [ 333.387864][T14415] ? __might_fault+0xaf/0x130 [ 333.387892][T14415] __sys_bpf+0xd86/0xe00 [ 333.387917][T14415] ? __pfx___sys_bpf+0x10/0x10 [ 333.387946][T14415] ? __fget_files+0x2a/0x420 [ 333.387985][T14415] ? ksys_write+0x242/0x270 [ 333.388014][T14415] ? __pfx_ksys_write+0x10/0x10 [ 333.388045][T14415] __x64_sys_bpf+0xba/0xd0 [ 333.388074][T14415] do_syscall_64+0x166/0x520 [ 333.388097][T14415] ? trace_irq_disable+0x3b/0x140 [ 333.388119][T14415] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.388138][T14415] ? clear_bhb_loop+0x70/0xc0 [ 333.388161][T14415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.388179][T14415] RIP: 0033:0x7fdd201a8f19 [ 333.388197][T14415] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 333.388214][T14415] RSP: 002b:00007fdd210be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 333.388235][T14415] RAX: ffffffffffffffda RBX: 00007fdd20425fa0 RCX: 00007fdd201a8f19 [ 333.388248][T14415] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 333.388260][T14415] RBP: 00007fdd210be090 R08: 0000000000000000 R09: 0000000000000000 [ 333.388272][T14415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 333.388283][T14415] R13: 00007fdd20426038 R14: 00007fdd20425fa0 R15: 00007fffa0d95578 [ 333.388403][T14415] [ 333.776590][T14425] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2587'. [ 334.043565][T14436] net_ratelimit: 12 callbacks suppressed [ 334.043581][T14436] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 334.067551][T14438] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2593'. [ 334.390107][T14451] FAULT_INJECTION: forcing a failure. [ 334.390107][T14451] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 334.390137][T14451] CPU: 0 UID: 0 PID: 14451 Comm: syz.3.2598 Not tainted syzkaller #0 PREEMPT(full) [ 334.390156][T14451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 334.390162][T14451] Call Trace: [ 334.390167][T14451] [ 334.390172][T14451] dump_stack_lvl+0xe8/0x150 [ 334.390194][T14451] should_fail_ex+0x3eb/0x540 [ 334.390209][T14451] _copy_from_user+0x2d/0xb0 [ 334.390224][T14451] bpf_prog_test_run_skb+0x1861/0x22e0 [ 334.390255][T14451] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 334.390271][T14451] bpf_prog_test_run+0x2c5/0x340 [ 334.390284][T14451] __sys_bpf+0xb1e/0xe00 [ 334.390299][T14451] ? __pfx___sys_bpf+0x10/0x10 [ 334.390314][T14451] ? __fget_files+0x2a/0x420 [ 334.390336][T14451] ? ksys_write+0x242/0x270 [ 334.390352][T14451] ? __pfx_ksys_write+0x10/0x10 [ 334.390377][T14451] __x64_sys_bpf+0xba/0xd0 [ 334.390393][T14451] do_syscall_64+0x166/0x520 [ 334.390407][T14451] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.390418][T14451] ? clear_bhb_loop+0x70/0xc0 [ 334.390430][T14451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.390440][T14451] RIP: 0033:0x7f08c47a8f19 [ 334.390451][T14451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 334.390460][T14451] RSP: 002b:00007f08c5723028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 334.390472][T14451] RAX: ffffffffffffffda RBX: 00007f08c4a25fa0 RCX: 00007f08c47a8f19 [ 334.390479][T14451] RDX: 0000000000000050 RSI: 0000200000002b80 RDI: 000000000000000a [ 334.390486][T14451] RBP: 00007f08c5723090 R08: 0000000000000000 R09: 0000000000000000 [ 334.390492][T14451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 334.390498][T14451] R13: 00007f08c4a26038 R14: 00007f08c4a25fa0 R15: 00007ffce6296808 [ 334.390515][T14451] [ 334.530169][T14456] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2600'. [ 334.682215][T14458] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2601'. [ 334.853585][T14465] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 335.079906][T14470] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2605'. [ 335.098335][T14373] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 335.450036][T14489] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 335.480745][T14491] openvswitch: netlink: Actions may not be safe on all matching packets [ 335.543126][T14493] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2611'. [ 335.660181][T14502] FAULT_INJECTION: forcing a failure. [ 335.660181][T14502] name failslab, interval 1, probability 0, space 0, times 0 [ 335.660210][T14502] CPU: 1 UID: 0 PID: 14502 Comm: syz.4.2615 Not tainted syzkaller #0 PREEMPT(full) [ 335.660232][T14502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 335.660242][T14502] Call Trace: [ 335.660249][T14502] [ 335.660258][T14502] dump_stack_lvl+0xe8/0x150 [ 335.660292][T14502] should_fail_ex+0x3eb/0x540 [ 335.660320][T14502] should_failslab+0xa8/0x100 [ 335.660351][T14502] __kvmalloc_node_noprof+0x171/0x820 [ 335.660378][T14502] ? __kvmalloc_node_noprof+0x340/0x820 [ 335.660403][T14502] ? bpf_compute_scc+0x13a/0xdb0 [ 335.660427][T14502] ? bpf_compute_scc+0x13a/0xdb0 [ 335.660459][T14502] bpf_compute_scc+0x13a/0xdb0 [ 335.660484][T14502] ? sort_subprogs_topo+0xe5f/0x1130 [ 335.660531][T14502] bpf_check+0x2c70/0x34e0 [ 335.660561][T14502] ? ktime_get_with_offset+0x93/0x2d0 [ 335.660587][T14502] ? ktime_get_with_offset+0x93/0x2d0 [ 335.660613][T14502] ? __pfx_bpf_check+0x10/0x10 [ 335.660636][T14502] ? bpf_obj_name_cpy+0x194/0x1e0 [ 335.660716][T14502] bpf_prog_load+0x14da/0x1c60 [ 335.660749][T14502] ? __pfx_bpf_prog_load+0x10/0x10 [ 335.660784][T14502] ? __might_fault+0xaf/0x130 [ 335.660812][T14502] __sys_bpf+0xd86/0xe00 [ 335.660839][T14502] ? __pfx___sys_bpf+0x10/0x10 [ 335.660870][T14502] ? __fget_files+0x2a/0x420 [ 335.660912][T14502] ? ksys_write+0x242/0x270 [ 335.660940][T14502] ? __pfx_ksys_write+0x10/0x10 [ 335.660970][T14502] __x64_sys_bpf+0xba/0xd0 [ 335.661000][T14502] do_syscall_64+0x166/0x520 [ 335.661023][T14502] ? trace_irq_disable+0x3b/0x140 [ 335.661047][T14502] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.661065][T14502] ? clear_bhb_loop+0x70/0xc0 [ 335.661086][T14502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.661104][T14502] RIP: 0033:0x7f19aada8f19 [ 335.661121][T14502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 335.661138][T14502] RSP: 002b:00007f19abc30028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 335.661158][T14502] RAX: ffffffffffffffda RBX: 00007f19ab025fa0 RCX: 00007f19aada8f19 [ 335.661172][T14502] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 335.661184][T14502] RBP: 00007f19abc30090 R08: 0000000000000000 R09: 0000000000000000 [ 335.661196][T14502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 335.661208][T14502] R13: 00007f19ab026038 R14: 00007f19ab025fa0 R15: 00007fff070319c8 [ 335.661238][T14502] [ 335.970791][T14510] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2619'. [ 336.131888][T14529] FAULT_INJECTION: forcing a failure. [ 336.131888][T14529] name failslab, interval 1, probability 0, space 0, times 0 [ 336.131909][T14529] CPU: 1 UID: 0 PID: 14529 Comm: syz.3.2625 Not tainted syzkaller #0 PREEMPT(full) [ 336.131921][T14529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 336.131927][T14529] Call Trace: [ 336.131932][T14529] [ 336.131937][T14529] dump_stack_lvl+0xe8/0x150 [ 336.131959][T14529] should_fail_ex+0x3eb/0x540 [ 336.131975][T14529] should_failslab+0xa8/0x100 [ 336.131992][T14529] ? skb_clone+0x212/0x3a0 [ 336.132005][T14529] kmem_cache_alloc_noprof+0x9c/0x600 [ 336.132019][T14529] ? skb_clone+0x212/0x3a0 [ 336.132034][T14529] skb_clone+0x212/0x3a0 [ 336.132048][T14529] __netlink_deliver_tap+0x355/0x6e0 [ 336.132077][T14529] ? netlink_deliver_tap+0x2e/0x1b0 [ 336.132093][T14529] netlink_deliver_tap+0x19c/0x1b0 [ 336.132108][T14529] netlink_unicast+0x8c1/0xa80 [ 336.132131][T14529] netlink_sendmsg+0x7f0/0xb20 [ 336.132149][T14529] ? __pfx_netlink_sendmsg+0x10/0x10 [ 336.132166][T14529] ? aa_sock_msg_perm+0x144/0x210 [ 336.132185][T14529] ? apparmor_socket_sendmsg+0x98/0x360 [ 336.132200][T14529] ? __pfx_netlink_sendmsg+0x10/0x10 [ 336.132214][T14529] sock_sendmsg_nosec+0x14e/0x190 [ 336.132230][T14529] ____sys_sendmsg+0x54e/0x850 [ 336.132244][T14529] ? __pfx_____sys_sendmsg+0x10/0x10 [ 336.132260][T14529] ? import_iovec+0x73/0xa0 [ 336.132275][T14529] ___sys_sendmsg+0x2a5/0x360 [ 336.132285][T14529] ? __lock_acquire+0x747/0x2de0 [ 336.132304][T14529] ? __pfx____sys_sendmsg+0x10/0x10 [ 336.132334][T14529] ? __fget_files+0x3a2/0x420 [ 336.132349][T14529] ? __fget_files+0x2a/0x420 [ 336.132378][T14529] __x64_sys_sendmsg+0x1b1/0x290 [ 336.132402][T14529] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 336.132439][T14529] do_syscall_64+0x166/0x520 [ 336.132462][T14529] ? trace_irq_disable+0x3b/0x140 [ 336.132483][T14529] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.132494][T14529] ? clear_bhb_loop+0x70/0xc0 [ 336.132506][T14529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.132516][T14529] RIP: 0033:0x7f08c47a8f19 [ 336.132527][T14529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 336.132536][T14529] RSP: 002b:00007f08c5723028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 336.132548][T14529] RAX: ffffffffffffffda RBX: 00007f08c4a25fa0 RCX: 00007f08c47a8f19 [ 336.132555][T14529] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 336.132562][T14529] RBP: 00007f08c5723090 R08: 0000000000000000 R09: 0000000000000000 [ 336.132571][T14529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 336.132577][T14529] R13: 00007f08c4a26038 R14: 00007f08c4a25fa0 R15: 00007ffce6296808 [ 336.132593][T14529] [ 336.135275][T14530] FAULT_INJECTION: forcing a failure. [ 336.135275][T14530] name failslab, interval 1, probability 0, space 0, times 0 [ 336.135304][T14530] CPU: 0 UID: 0 PID: 14530 Comm: syz.4.2624 Not tainted syzkaller #0 PREEMPT(full) [ 336.135326][T14530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 336.135338][T14530] Call Trace: [ 336.135345][T14530] [ 336.135353][T14530] dump_stack_lvl+0xe8/0x150 [ 336.135387][T14530] should_fail_ex+0x3eb/0x540 [ 336.135415][T14530] should_failslab+0xa8/0x100 [ 336.135446][T14530] __kvmalloc_node_noprof+0x171/0x820 [ 336.135484][T14530] ? bpf_compute_idoms+0x307/0x1940 [ 336.135504][T14530] ? bpf_compute_idoms+0x307/0x1940 [ 336.135530][T14530] bpf_compute_idoms+0x307/0x1940 [ 336.135558][T14530] ? __pfx_bpf_compute_subprog_ret_regs+0x10/0x10 [ 336.135589][T14530] ? prepare_subprog_args+0x412/0x450 [ 336.135619][T14530] bpf_check+0x2cc3/0x34e0 [ 336.135650][T14530] ? ktime_get_with_offset+0x93/0x2d0 [ 336.135677][T14530] ? ktime_get_with_offset+0x93/0x2d0 [ 336.135705][T14530] ? __pfx_bpf_check+0x10/0x10 [ 336.135729][T14530] ? bpf_obj_name_cpy+0x194/0x1e0 [ 336.135756][T14530] bpf_prog_load+0x14da/0x1c60 [ 336.135789][T14530] ? __pfx_bpf_prog_load+0x10/0x10 [ 336.135824][T14530] ? __might_fault+0xaf/0x130 [ 336.135853][T14530] __sys_bpf+0xd86/0xe00 [ 336.135879][T14530] ? __pfx___sys_bpf+0x10/0x10 [ 336.135907][T14530] ? __fget_files+0x2a/0x420 [ 336.135943][T14530] ? ksys_write+0x242/0x270 [ 336.135968][T14530] ? __pfx_ksys_write+0x10/0x10 [ 336.135999][T14530] __x64_sys_bpf+0xba/0xd0 [ 336.136026][T14530] do_syscall_64+0x166/0x520 [ 336.136047][T14530] ? trace_irq_disable+0x3b/0x140 [ 336.136069][T14530] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.136086][T14530] ? clear_bhb_loop+0x70/0xc0 [ 336.136107][T14530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.136124][T14530] RIP: 0033:0x7f19aada8f19 [ 336.136141][T14530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 336.136156][T14530] RSP: 002b:00007f19abc30028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 336.136174][T14530] RAX: ffffffffffffffda RBX: 00007f19ab025fa0 RCX: 00007f19aada8f19 [ 336.136188][T14530] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 336.136199][T14530] RBP: 00007f19abc30090 R08: 0000000000000000 R09: 0000000000000000 [ 336.136210][T14530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 336.136222][T14530] R13: 00007f19ab026038 R14: 00007f19ab025fa0 R15: 00007fff070319c8 [ 336.136253][T14530] [ 337.314060][T14560] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2633'. [ 338.241173][T14565] netdevsim netdevsim4: Firmware load for './file0/file0/..' refused, path contains '..' component [ 338.282464][T14567] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 338.904746][T14508] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 339.142568][T14582] FAULT_INJECTION: forcing a failure. [ 339.142568][T14582] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 339.142600][T14582] CPU: 1 UID: 0 PID: 14582 Comm: syz.2.2640 Not tainted syzkaller #0 PREEMPT(full) [ 339.142621][T14582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 339.142633][T14582] Call Trace: [ 339.142640][T14582] [ 339.142649][T14582] dump_stack_lvl+0xe8/0x150 [ 339.142682][T14582] should_fail_ex+0x3eb/0x540 [ 339.142709][T14582] _copy_from_user+0x2d/0xb0 [ 339.142734][T14582] bpf_prog_test_run_skb+0x1861/0x22e0 [ 339.142793][T14582] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 339.142822][T14582] bpf_prog_test_run+0x2c5/0x340 [ 339.142845][T14582] __sys_bpf+0xb1e/0xe00 [ 339.142882][T14582] ? __pfx___sys_bpf+0x10/0x10 [ 339.142909][T14582] ? __fget_files+0x2a/0x420 [ 339.142948][T14582] ? ksys_write+0x242/0x270 [ 339.142972][T14582] ? __pfx_ksys_write+0x10/0x10 [ 339.143000][T14582] __x64_sys_bpf+0xba/0xd0 [ 339.143027][T14582] do_syscall_64+0x166/0x520 [ 339.143049][T14582] ? trace_irq_disable+0x3b/0x140 [ 339.143073][T14582] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.143090][T14582] ? clear_bhb_loop+0x70/0xc0 [ 339.143113][T14582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.143131][T14582] RIP: 0033:0x7f300eba8f19 [ 339.143150][T14582] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 339.143165][T14582] RSP: 002b:00007f300fa01028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 339.143186][T14582] RAX: ffffffffffffffda RBX: 00007f300ee25fa0 RCX: 00007f300eba8f19 [ 339.143200][T14582] RDX: 0000000000000050 RSI: 0000200000002b80 RDI: 000000000000000a [ 339.143213][T14582] RBP: 00007f300fa01090 R08: 0000000000000000 R09: 0000000000000000 [ 339.143225][T14582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 339.143236][T14582] R13: 00007f300ee26038 R14: 00007f300ee25fa0 R15: 00007ffd7a53fee8 [ 339.143268][T14582] [ 339.463001][T14601] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2644'. [ 339.634077][T14605] netlink: ct family unspecified [ 339.658485][T14605] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2646'. [ 339.854861][T14621] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 340.213275][T14646] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2658'. [ 340.327264][T14650] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2660'. [ 340.327398][T14650] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2660'. [ 340.332144][T14650] netlink: 'syz.3.2660': attribute type 1 has an invalid length. [ 340.333282][T14650] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2660'. [ 340.447941][T14657] FAULT_INJECTION: forcing a failure. [ 340.447941][T14657] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 340.447970][T14657] CPU: 0 UID: 0 PID: 14657 Comm: syz.2.2662 Not tainted syzkaller #0 PREEMPT(full) [ 340.447995][T14657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 340.448006][T14657] Call Trace: [ 340.448013][T14657] [ 340.448022][T14657] dump_stack_lvl+0xe8/0x150 [ 340.448056][T14657] should_fail_ex+0x3eb/0x540 [ 340.448087][T14657] _copy_to_user+0x31/0xb0 [ 340.448112][T14657] simple_read_from_buffer+0xe1/0x170 [ 340.448141][T14657] proc_fail_nth_read+0x1bb/0x230 [ 340.448163][T14657] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 340.448208][T14657] ? rw_verify_area+0x24a/0x4c0 [ 340.448234][T14657] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 340.448251][T14657] vfs_read+0x213/0xa80 [ 340.448279][T14657] ? __pfx___mutex_lock+0x10/0x10 [ 340.448302][T14657] ? __pfx_vfs_read+0x10/0x10 [ 340.448326][T14657] ? __fget_files+0x2a/0x420 [ 340.448346][T14657] ? __fget_files+0x3a2/0x420 [ 340.448366][T14657] ? __fget_files+0x2a/0x420 [ 340.448393][T14657] ? fdget+0x1ac/0x250 [ 340.448422][T14657] ksys_read+0x150/0x270 [ 340.448449][T14657] ? __pfx_ksys_read+0x10/0x10 [ 340.448487][T14657] do_syscall_64+0x166/0x520 [ 340.448509][T14657] ? trace_irq_disable+0x3b/0x140 [ 340.448533][T14657] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.448552][T14657] ? clear_bhb_loop+0x70/0xc0 [ 340.448576][T14657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.448593][T14657] RIP: 0033:0x7f300eb6974e [ 340.448611][T14657] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 340.448627][T14657] RSP: 002b:00007f300fa00fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 340.448646][T14657] RAX: ffffffffffffffda RBX: 00007f300fa016c0 RCX: 00007f300eb6974e [ 340.448659][T14657] RDX: 000000000000000f RSI: 00007f300fa010a0 RDI: 0000000000000007 [ 340.448670][T14657] RBP: 00007f300fa01090 R08: 0000000000000000 R09: 0000000000000000 [ 340.448681][T14657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 340.448692][T14657] R13: 00007f300ee26038 R14: 00007f300ee25fa0 R15: 00007ffd7a53fee8 [ 340.448725][T14657] [ 340.676979][T14661] FAULT_INJECTION: forcing a failure. [ 340.676979][T14661] name failslab, interval 1, probability 0, space 0, times 0 [ 340.677233][T14661] CPU: 0 UID: 0 PID: 14661 Comm: syz.1.2664 Not tainted syzkaller #0 PREEMPT(full) [ 340.677255][T14661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 340.677266][T14661] Call Trace: [ 340.677274][T14661] [ 340.677281][T14661] dump_stack_lvl+0xe8/0x150 [ 340.677316][T14661] should_fail_ex+0x3eb/0x540 [ 340.677353][T14661] should_failslab+0xa8/0x100 [ 340.677383][T14661] __kvmalloc_node_noprof+0x171/0x820 [ 340.677410][T14661] ? lockdep_hardirqs_on+0x7b/0x110 [ 340.677436][T14661] ? bpf_compute_loops+0x103/0x3e80 [ 340.677454][T14661] ? bpf_compute_loops+0x103/0x3e80 [ 340.677474][T14661] ? bpf_compute_idoms+0x18b5/0x1940 [ 340.677498][T14661] bpf_compute_loops+0x103/0x3e80 [ 340.677516][T14661] ? bpf_compute_idoms+0x18b5/0x1940 [ 340.677557][T14661] bpf_check+0x2ce7/0x34e0 [ 340.677587][T14661] ? ktime_get_with_offset+0x93/0x2d0 [ 340.677613][T14661] ? ktime_get_with_offset+0x93/0x2d0 [ 340.677638][T14661] ? __pfx_bpf_check+0x10/0x10 [ 340.677659][T14661] ? bpf_obj_name_cpy+0x194/0x1e0 [ 340.677685][T14661] bpf_prog_load+0x14da/0x1c60 [ 340.677716][T14661] ? __pfx_bpf_prog_load+0x10/0x10 [ 340.677750][T14661] ? __might_fault+0xaf/0x130 [ 340.677776][T14661] __sys_bpf+0xd86/0xe00 [ 340.677802][T14661] ? __pfx___sys_bpf+0x10/0x10 [ 340.677830][T14661] ? __fget_files+0x2a/0x420 [ 340.677870][T14661] ? ksys_write+0x242/0x270 [ 340.677897][T14661] ? __pfx_ksys_write+0x10/0x10 [ 340.677926][T14661] __x64_sys_bpf+0xba/0xd0 [ 340.677955][T14661] do_syscall_64+0x166/0x520 [ 340.677976][T14661] ? trace_irq_disable+0x3b/0x140 [ 340.678000][T14661] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.678018][T14661] ? clear_bhb_loop+0x70/0xc0 [ 340.678040][T14661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.678058][T14661] RIP: 0033:0x7fdd201a8f19 [ 340.678075][T14661] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 340.678090][T14661] RSP: 002b:00007fdd210be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 340.678114][T14661] RAX: ffffffffffffffda RBX: 00007fdd20425fa0 RCX: 00007fdd201a8f19 [ 340.678127][T14661] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 340.678139][T14661] RBP: 00007fdd210be090 R08: 0000000000000000 R09: 0000000000000000 [ 340.678149][T14661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 340.678159][T14661] R13: 00007fdd20426038 R14: 00007fdd20425fa0 R15: 00007fffa0d95578 [ 340.678185][T14661] [ 340.688427][T14659] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2663'. [ 341.234260][T14677] x_tables: duplicate underflow at hook 1 [ 341.238295][T14677] pim6reg: entered allmulticast mode [ 341.334944][T14681] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2670'. [ 341.393471][T14683] FAULT_INJECTION: forcing a failure. [ 341.393471][T14683] name failslab, interval 1, probability 0, space 0, times 0 [ 341.393498][T14683] CPU: 1 UID: 0 PID: 14683 Comm: syz.3.2671 Not tainted syzkaller #0 PREEMPT(full) [ 341.393512][T14683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 341.393519][T14683] Call Trace: [ 341.393524][T14683] [ 341.393530][T14683] dump_stack_lvl+0xe8/0x150 [ 341.393557][T14683] should_fail_ex+0x3eb/0x540 [ 341.393575][T14683] should_failslab+0xa8/0x100 [ 341.393722][T14683] __kvmalloc_node_noprof+0x171/0x820 [ 341.393771][T14683] ? bpf_compute_idoms+0x307/0x1940 [ 341.393788][T14683] ? bpf_compute_idoms+0x307/0x1940 [ 341.393807][T14683] bpf_compute_idoms+0x307/0x1940 [ 341.393825][T14683] ? __pfx_bpf_compute_subprog_ret_regs+0x10/0x10 [ 341.393839][T14683] ? prepare_subprog_args+0x40b/0x450 [ 341.393854][T14683] bpf_check+0x2cc3/0x34e0 [ 341.393872][T14683] ? ktime_get_with_offset+0x93/0x2d0 [ 341.393886][T14683] ? ktime_get_with_offset+0x93/0x2d0 [ 341.393900][T14683] ? __pfx_bpf_check+0x10/0x10 [ 341.393912][T14683] ? bpf_obj_name_cpy+0x194/0x1e0 [ 341.393926][T14683] bpf_prog_load+0x14da/0x1c60 [ 341.393943][T14683] ? __pfx_bpf_prog_load+0x10/0x10 [ 341.393962][T14683] ? __might_fault+0xaf/0x130 [ 341.393976][T14683] __sys_bpf+0xd86/0xe00 [ 341.393991][T14683] ? __pfx___sys_bpf+0x10/0x10 [ 341.394006][T14683] ? __fget_files+0x2a/0x420 [ 341.394028][T14683] ? ksys_write+0x242/0x270 [ 341.394043][T14683] ? __pfx_ksys_write+0x10/0x10 [ 341.394059][T14683] __x64_sys_bpf+0xba/0xd0 [ 341.394075][T14683] do_syscall_64+0x166/0x520 [ 341.394090][T14683] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.394101][T14683] ? clear_bhb_loop+0x70/0xc0 [ 341.394113][T14683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.394123][T14683] RIP: 0033:0x7f08c47a8f19 [ 341.394142][T14683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 341.394155][T14683] RSP: 002b:00007f08c5723028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 341.394173][T14683] RAX: ffffffffffffffda RBX: 00007f08c4a25fa0 RCX: 00007f08c47a8f19 [ 341.394184][T14683] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 341.394194][T14683] RBP: 00007f08c5723090 R08: 0000000000000000 R09: 0000000000000000 [ 341.394203][T14683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 341.394211][T14683] R13: 00007f08c4a26038 R14: 00007f08c4a25fa0 R15: 00007ffce6296808 [ 341.394239][T14683] [ 342.252128][T14706] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2681'. [ 342.349360][T14710] bond5: option packets_per_slave: invalid value (18446744073709551615) [ 342.349387][T14710] bond5: option packets_per_slave: allowed values 0 - 65535 [ 342.353021][T14710] bond5 (unregistering): Released all slaves [ 342.549742][T14715] FAULT_INJECTION: forcing a failure. [ 342.549742][T14715] name failslab, interval 1, probability 0, space 0, times 0 [ 342.549761][T14715] CPU: 0 UID: 0 PID: 14715 Comm: syz.2.2684 Not tainted syzkaller #0 PREEMPT(full) [ 342.549775][T14715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 342.549785][T14715] Call Trace: [ 342.549792][T14715] [ 342.549799][T14715] dump_stack_lvl+0xe8/0x150 [ 342.549833][T14715] should_fail_ex+0x3eb/0x540 [ 342.549862][T14715] should_failslab+0xa8/0x100 [ 342.549885][T14715] __kvmalloc_node_noprof+0x171/0x820 [ 342.549900][T14715] ? __kvmalloc_node_noprof+0x340/0x820 [ 342.549914][T14715] ? bpf_compute_loops+0x137/0x3e80 [ 342.549924][T14715] ? bpf_compute_loops+0x137/0x3e80 [ 342.549938][T14715] bpf_compute_loops+0x137/0x3e80 [ 342.549948][T14715] ? bpf_compute_idoms+0x18b5/0x1940 [ 342.549969][T14715] bpf_check+0x2ce7/0x34e0 [ 342.549986][T14715] ? ktime_get_with_offset+0x93/0x2d0 [ 342.550000][T14715] ? ktime_get_with_offset+0x93/0x2d0 [ 342.550014][T14715] ? __pfx_bpf_check+0x10/0x10 [ 342.550025][T14715] ? bpf_obj_name_cpy+0x194/0x1e0 [ 342.550040][T14715] bpf_prog_load+0x14da/0x1c60 [ 342.550056][T14715] ? __pfx_bpf_prog_load+0x10/0x10 [ 342.550074][T14715] ? __might_fault+0xaf/0x130 [ 342.550089][T14715] __sys_bpf+0xd86/0xe00 [ 342.550105][T14715] ? __pfx___sys_bpf+0x10/0x10 [ 342.550121][T14715] ? __fget_files+0x2a/0x420 [ 342.550143][T14715] ? ksys_write+0x242/0x270 [ 342.550158][T14715] ? __pfx_ksys_write+0x10/0x10 [ 342.550174][T14715] __x64_sys_bpf+0xba/0xd0 [ 342.550190][T14715] do_syscall_64+0x166/0x520 [ 342.550203][T14715] ? trace_irq_disable+0x3b/0x140 [ 342.550217][T14715] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.550227][T14715] ? clear_bhb_loop+0x70/0xc0 [ 342.550239][T14715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.550249][T14715] RIP: 0033:0x7f300eba8f19 [ 342.550261][T14715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 342.550270][T14715] RSP: 002b:00007f300fa01028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 342.550282][T14715] RAX: ffffffffffffffda RBX: 00007f300ee25fa0 RCX: 00007f300eba8f19 [ 342.550289][T14715] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 342.550295][T14715] RBP: 0000 ** replaying previous printk message ** [ 342.550295][T14715] RBP: 00007f300fa01090 R08: 0000000000000000 R09: 0000000000000000 [ 342.550301][T14715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 342.550307][T14715] R13: 00007f300ee26038 R14: 00007f300ee25fa0 R15: 00007ffd7a53fee8 [ 342.550323][T14715] [ 342.651887][T14717] netlink: 196 bytes leftover after parsing attributes in process `syz.2.2685'. [ 342.802770][ C0] ------------[ cut here ]------------ [ 342.802787][ C0] !rcu_read_lock_held() [ 342.802800][ C0] WARNING: ./include/net/dst.h:326 at xfrm_output_resume+0x41d9/0x64e0, CPU#0: ksoftirqd/0/15 [ 342.863447][ C0] Modules linked in: [ 342.867392][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) [ 342.876717][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 342.887012][ C0] RIP: 0010:xfrm_output_resume+0x41d9/0x64e0 [ 342.893119][ C0] Code: be b5 01 00 00 48 c7 c2 c0 fa 53 8d e8 40 1b 07 f7 e9 aa fc ff ff e8 96 c9 2b f7 90 0f 0b 90 e9 7e ed ff ff e8 88 c9 2b f7 90 <0f> 0b 90 e9 44 e0 ff ff 48 89 df e8 87 25 52 fa 84 c0 0f 84 e1 00 [ 342.913038][ C0] RSP: 0018:ffffc90000147660 EFLAGS: 00010246 [ 342.919935][ C0] RAX: ffffffff8a9d47e8 RBX: 0000000000000000 RCX: ffff88801f299f40 [ 342.927990][ C0] RDX: 8000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 [ 342.936085][ C0] RBP: ffffc900001478f0 R08: 0000000000000100 R09: 1ffffffff237bf97 [ 342.944179][ C0] R10: dffffc0000000000 R11: fffffbfff237bf98 R12: dffffc0000000000 [ 342.952278][ C0] R13: ffff888074737058 R14: ffff888053aed890 R15: ffff888054d7dc80 [ 342.960311][ C0] FS: 0000000000000000(0000) GS:ffff888123409000(0000) knlGS:0000000000000000 [ 342.969317][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 342.976031][ C0] CR2: 00007f354dc17e9c CR3: 000000006036c000 CR4: 00000000003526f0 [ 342.984130][ C0] Call Trace: [ 342.987474][ C0] [ 342.990603][ C0] ? __pfx_xfrm_output_resume+0x10/0x10 [ 342.992686][T14728] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2687'. [ 343.005809][ C0] ? iptfs_get_inner_mtu+0xa0/0x210 [ 343.011087][ C0] ? __asan_memset+0x22/0x50 [ 343.015711][ C0] ? xfrm_output+0xa03/0x1ca0 [ 343.020537][ C0] iptfs_delay_timer+0x3803/0x4310 [ 343.025788][ C0] ? ktime_get+0x45/0x220 [ 343.028992][T14630] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 343.039108][ C0] ? __pfx_clockevents_program_event+0x10/0x10 [ 343.045373][ C0] ? __pfx_iptfs_delay_timer+0x10/0x10 [ 343.050947][ C0] ? irqentry_exit+0x2a0/0x9b0 [ 343.055797][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 343.061109][ C0] ? irqentry_exit+0x2a0/0x9b0 [ 343.065957][ C0] ? trace_irq_disable+0x3b/0x140 [ 343.071114][ C0] ? __pfx_iptfs_delay_timer+0x10/0x10 [ 343.076642][ C0] ? __pfx_iptfs_delay_timer+0x10/0x10 [ 343.082242][ C0] ? __pfx_iptfs_delay_timer+0x10/0x10 [ 343.087763][ C0] __hrtimer_run_queues+0x3bc/0xa10 [ 343.093199][ C0] hrtimer_run_softirq+0x1e3/0x2e0 [ 343.098375][ C0] handle_softirqs+0x265/0x8d0 [ 343.103264][ C0] run_ksoftirqd+0x36/0x60 [ 343.107743][ C0] smpboot_thread_fn+0x5f8/0xb30 [ 343.112792][ C0] ? smpboot_thread_fn+0x4e/0xb30 [ 343.117908][ C0] kthread+0x38b/0x480 [ 343.122114][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 343.127710][ C0] ? __pfx_kthread+0x10/0x10 [ 343.132411][ C0] ret_from_fork+0x514/0xb70 [ 343.137213][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 343.142529][ C0] ? __switch_to+0xc78/0x1410 [ 343.147290][ C0] ? __pfx_kthread+0x10/0x10 [ 343.151980][ C0] ret_from_fork_asm+0x1a/0x30 [ 343.156830][ C0] [ 343.159926][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 343.167235][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) [ 343.176451][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 343.186511][ C0] Call Trace: [ 343.189799][ C0] [ 343.192739][ C0] vpanic+0x26f/0x710 [ 343.196733][ C0] panic+0xc5/0xd0 [ 343.200456][ C0] ? __pfx_panic+0x10/0x10 [ 343.204881][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 343.209885][ C0] __warn+0x315/0x4c0 [ 343.213910][ C0] ? xfrm_output_resume+0x41d9/0x64e0 [ 343.219320][ C0] ? xfrm_output_resume+0x41d9/0x64e0 [ 343.224717][ C0] __report_bug+0x276/0x570 [ 343.229244][ C0] ? xfrm_output_resume+0x41d9/0x64e0 [ 343.235225][ C0] ? __pfx___report_bug+0x10/0x10 [ 343.240561][ C0] ? lock_acquire+0x115/0x350 [ 343.245268][ C0] ? netlink_has_listeners+0x77/0x3f0 [ 343.250683][ C0] ? xfrm_aevent_is_on+0x18/0x230 [ 343.255739][ C0] ? xfrm_output_resume+0x41d9/0x64e0 [ 343.261118][ C0] report_bug+0x16b/0x220 [ 343.265483][ C0] ? xfrm_output_resume+0x41d9/0x64e0 [ 343.270875][ C0] ? xfrm_output_resume+0x41db/0x64e0 [ 343.276269][ C0] handle_bug+0x9c/0x200 [ 343.280524][ C0] exc_invalid_op+0x1a/0x50 [ 343.285034][ C0] asm_exc_invalid_op+0x1a/0x20 [ 343.289928][ C0] RIP: 0010:xfrm_output_resume+0x41d9/0x64e0 [ 343.295930][ C0] Code: be b5 01 00 00 48 c7 c2 c0 fa 53 8d e8 40 1b 07 f7 e9 aa fc ff ff e8 96 c9 2b f7 90 0f 0b 90 e9 7e ed ff ff e8 88 c9 2b f7 90 <0f> 0b 90 e9 44 e0 ff ff 48 89 df e8 87 25 52 fa 84 c0 0f 84 e1 00 [ 343.315645][ C0] RSP: 0018:ffffc90000147660 EFLAGS: 00010246 [ 343.321725][ C0] RAX: ffffffff8a9d47e8 RBX: 0000000000000000 RCX: ffff88801f299f40 [ 343.329702][ C0] RDX: 8000000000000100 RSI: 0000000000000100 RDI: 0000000000000000 [ 343.337672][ C0] RBP: ffffc900001478f0 R08: 0000000000000100 R09: 1ffffffff237bf97 [ 343.345644][ C0] R10: dffffc0000000000 R11: fffffbfff237bf98 R12: dffffc0000000000 [ 343.353711][ C0] R13: ffff888074737058 R14: ffff888053aed890 R15: ffff888054d7dc80 [ 343.361723][ C0] ? xfrm_output_resume+0x41d8/0x64e0 [ 343.367149][ C0] ? __pfx_xfrm_output_resume+0x10/0x10 [ 343.372786][ C0] ? iptfs_get_inner_mtu+0xa0/0x210 [ 343.378002][ C0] ? __asan_memset+0x22/0x50 [ 343.382614][ C0] ? xfrm_output+0xa03/0x1ca0 [ 343.387944][ C0] iptfs_delay_timer+0x3803/0x4310 [ 343.393086][ C0] ? ktime_get+0x45/0x220 [ 343.397432][ C0] ? __pfx_clockevents_program_event+0x10/0x10 [ 343.403591][ C0] ? __pfx_iptfs_delay_timer+0x10/0x10 [ 343.409068][ C0] ? irqentry_exit+0x2a0/0x9b0 [ 343.413838][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 343.419038][ C0] ? irqentry_exit+0x2a0/0x9b0 [ 343.423806][ C0] ? trace_irq_disable+0x3b/0x140 [ 343.428841][ C0] ? __pfx_iptfs_delay_timer+0x10/0x10 [ 343.434314][ C0] ? __pfx_iptfs_delay_timer+0x10/0x10 [ 343.439786][ C0] ? __pfx_iptfs_delay_timer+0x10/0x10 [ 343.445257][ C0] __hrtimer_run_queues+0x3bc/0xa10 [ 343.450656][ C0] hrtimer_run_softirq+0x1e3/0x2e0 [ 343.455773][ C0] handle_softirqs+0x265/0x8d0 [ 343.460548][ C0] run_ksoftirqd+0x36/0x60 [ 343.465077][ C0] smpboot_thread_fn+0x5f8/0xb30 [ 343.470319][ C0] ? smpboot_thread_fn+0x4e/0xb30 [ 343.475367][ C0] kthread+0x38b/0x480 [ 343.479876][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 343.485345][ C0] ? __pfx_kthread+0x10/0x10 [ 343.489963][ C0] ret_from_fork+0x514/0xb70 [ 343.494585][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 343.499705][ C0] ? __switch_to+0xc78/0x1410 [ 343.504438][ C0] ? __pfx_kthread+0x10/0x10 [ 343.509120][ C0] ret_from_fork_asm+0x1a/0x30 [ 343.513903][ C0] [ 343.517375][ C0] Kernel Offset: disabled [ 343.521741][ C0] Rebooting in 86400 seconds..