last executing test programs: 5.952556051s ago: executing program 3 (id=6041): write(0xca, &(0x7f0000000040)="043bfdffffab3f6822a0d34810", 0xd) r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x8) accept4(r0, 0x0, 0x0, 0x0) socket(0x2, 0x3, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@restrict={0x0, 0x0, 0x0, 0xb, 0x3}, @func_proto, @func={0x4, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x61, 0x61, 0x2e]}}, 0x0, 0x44, 0x0, 0x1}, 0x28) socket(0x10, 0x803, 0x0) pipe(&(0x7f0000000000)) unshare(0x24060400) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 5.620248775s ago: executing program 3 (id=6044): r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGL2TPSTATS(r0, 0x400448dd, 0x0) 5.403501944s ago: executing program 3 (id=6048): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000680)=""/153, 0x99}, {&(0x7f0000004840)=""/4140, 0x102c}, {&(0x7f0000001a40)=""/185, 0xb9}, {&(0x7f0000000340)=""/122, 0x7a}, {&(0x7f0000001b00)=""/4107, 0x100b}, {&(0x7f0000000180)=""/80, 0x50}], 0x6}, 0x401}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x38000000}, {{0x0, 0x0, 0x0}, 0x4}], 0x4, 0x40000102, 0x0) 5.021750619s ago: executing program 2 (id=6057): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x3ffffffe, 0x0, 0x0, 0x0, 0x81}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @generic={0xc6, 0x8, 0x0, 0xffff, 0x102}, @initr0, @exit, @exit]}, &(0x7f0000000100)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x34, r2, 0x1, 0x70bd2e, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0xb0}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x25dfdbff, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0xfffffdce}}}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0) 4.902429365s ago: executing program 2 (id=6058): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) close(0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05000000020000000400000009"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000280)=0x2, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async, rerun: 32) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 32) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000030000080011000000000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x40054) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x6, 0xb, &(0x7f0000000000)=@raw=[@generic={0xbf, 0x2, 0xa}, @map_fd={0x18, 0x2, 0x1, 0x0, r0}, @generic={0xb7, 0x3, 0x0, 0x0, 0xc}, @generic={0xb7, 0x4}, @generic={0xb7, 0x5}, @generic={0x85, 0x0, 0x0, 0x0, 0x63}, @generic={0x15, 0x0, 0x0, 0x2}, @generic={0x81, 0x1, 0x0, 0xc}, @generic={0x85, 0x0, 0x0, 0x0, 0x56}, @generic={0x95}], &(0x7f00000011c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) (rerun: 64) 4.800881114s ago: executing program 4 (id=6060): mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x10, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x580d9462, 0x0, 0x0, 0x0, 0x58b}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x86}}, {}, [@jmp={0x5, 0x1, 0x7, 0xa, 0x0, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xaf}}}, &(0x7f0000000040)='GPL\x00', 0x9, 0xff1, &(0x7f0000001cc0)=""/4081, 0x41100, 0x22}, 0x94) (fail_nth: 20) 4.69714129s ago: executing program 1 (id=6061): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x34, &(0x7f00000007c0)=ANY=[@ANYBLOB="aaaaaaaaaaaad63b3210f2b5660600000000000008004529fd00260000000000119078000000000000000000004e2000129078000033a1a4af71b45fc1e17c833646a920f3f20e1227d4b8bc5d149de158fce994d1e947597d594cab388b57b0d148c94cfa31b7e764a249aa1b8e9629efebb86d68e5"], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="7800000018002507b9409b14ffff00000204be04020506050e0204094300080004000000040010000d0068d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff395954", 0x4d, 0x0, 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000640)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e21, @multicast1}, 0x4, 0x2, 0x4, 0x4}}, 0x26) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000000)="21000000470010aaaaaaaaaa0000000000000000000000000000000000030000000000000000000000000000000300"/72, 0x48) 4.611707331s ago: executing program 4 (id=6062): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) r1 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x1a0, 0x270, 0xffffffff, 0xffffffff, 0xd0, 0x1a0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x7, 0x5a0}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x6, @random="71fea4df7044"}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) write$tun(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) 4.41597083s ago: executing program 3 (id=6063): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB="5c0100001000010000000000fdffffffffffffff00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x15c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x800000000000, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x100}, {0x0, 0x8, 0x0, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@remote, 0x2, 0x2b}, 0x0, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x10, 0x5, 0x0, 0xb7, 0x0, 0x0, 0x1}}, 0xe8) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x8, 0x3, 0x348, 0x270, 0x1000000, 0xffffffff, 0x0, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@ip={@loopback, @private=0xa010100, 0x0, 0xff000000, 'bond_slave_1\x00', 'geneve1\x00', {}, {0xff}, 0x84, 0x0, 0x28}, 0x0, 0x1b8, 0x218, 0x0, {0x0, 0x1c8}, [@common=@inet=@sctp={{0x148}, {[0x4e24, 0x4e21], [0x4e24, 0x4e21], [0x101, 0x81c, 0x4, 0x3041800, 0x10000, 0x8, 0x7f, 0x3, 0x8000, 0xe4, 0x5e9c90b, 0x4b, 0x5, 0x2, 0x5, 0x6, 0x0, 0xea, 0x8001, 0x4, 0x6937, 0x7598, 0x4, 0x5, 0x1, 0x9, 0x7, 0x81, 0x0, 0xba11, 0x4, 0x2, 0x3d, 0x10001, 0x3ff, 0xffffffff, 0xffff, 0x8000, 0x1000, 0x0, 0x28, 0x800, 0x6, 0xfffffffa, 0xd721, 0x80000000, 0x0, 0xfff, 0x0, 0x10001, 0x2, 0x3, 0x7575bec7, 0x8cdf, 0x3, 0x4, 0x1000, 0x24, 0xd8e, 0x4, 0x8, 0x4, 0xe1, 0x8a], 0x0, [{0x80, 0xb}, {0xac, 0xc, 0x5}, {0x10, 0x4f, 0x4}, {0x4, 0x80, 0x4}], 0x4, 0x4, 0x4}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, 0x5, 0x0, [0x25, 0x5, 0x28, 0x23, 0x12, 0x34, 0x16, 0x3, 0x10, 0x39, 0x27, 0x2a, 0x6, 0xe, 0x36, 0x10], 0x27b02525726059f5, 0x7, 0x4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x3a8) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000300)='0', 0x1}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="7bbcd9a70db4c0c518000000000000000000000000000000611904000000000095000000000000007bfd6487726a5cb679d8c62abc4ea9f55efbc3094c29719349b2a82e0ca27dd5a430d0d4c8d33f4885b72b29dba8f9035ead1745f8e2e0a49e2303b1b2dc3281f54a56adb4baa22dc79ca1e0ea9f4e179b85fe83ef257e447cde240839a04d76e732697f59f0703a2a761e48347b588d0fd4d39a383d2a82c48efc261d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) recvmmsg(r0, &(0x7f00000013c0)=[{{0x0, 0x0, 0x0}, 0x43}], 0x1, 0x2b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000100)=0xe7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x2, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 4.3224899s ago: executing program 1 (id=6064): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={r4, @in6={{0xa, 0x4e22, 0x6, @empty, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f0000000000)={r4, @in={{0x2, 0x4e24, @empty}}, 0x5b, 0x8002}, 0x90) sendmsg$NLBL_CALIPSO_C_LISTALL(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x880) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000002c0)={r6, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x3, 0x8}, {0xffff, 0x6}, {0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x40480c0}, 0x0) socket$xdp(0x2c, 0x3, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) writev(r7, &(0x7f0000000400)=[{&(0x7f0000000300)="8507c870950afafdd70699bf3c4b4e7ffdbf1e20b75b2100a5f8d8aa6cef4d7a39420a785537cba3253c606bbba644930473c5317ffdeb2163bbf77ebf2f96f6f41e5bc724c298fd343d64fdb39aec7409bbc6151f2c38db14baf6cf4068980a0b06335c3f8e08a330ee7b753cdb7d70d654605190c7b9a805c330ade27ad62923d3580fc60dcb3022d86dbd9f7e513927c78006e83a14d0aa99e5871eb67320bcbc95a3f59e556d32c851b4b6659845332c725a96c0d36fdba6065570fd307baa28c2ed240130cd4813e0a82f1ff2ff0053d1588705e25ae00270f35f115bdda2fac9d63ab96d8977e7a66ab1239151426c4a", 0xf3}], 0x1) 4.131020949s ago: executing program 4 (id=6065): bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x4, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18110000ebf6ffff000000000a00000091115e0007bccf39fb236f8441"], &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) 3.808513289s ago: executing program 2 (id=6067): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x34, r1, 0x905, 0x0, 0x0, {0x24}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) close(0x3) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071127f000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x12, 0x0, 0x4, 0xff}, 0x48) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000007a2617132d41be988c7cc7ed26e29b4bd23e5a664419073431a896e5376180dbb66fc5c118918c61f3a690e9589fa9198cacace3782a3a4d00b90bd1909d5fdb3c87457fd217eb2ca2f1c2de3f5b38aedadb4938c7cc03e4b98b3b7f5baeed81ebddff21f67564e17ba4b375ba8b414eb4a6c95a465d17", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x34) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001840)={0xffffffffffffffff, 0x20, &(0x7f0000001800)={&(0x7f00000003c0)=""/140, 0x8c, 0x0, &(0x7f0000000800)=""/4096, 0x1000}}, 0x10) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "f8ca44dfaa00"}}, 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x8000) sendmsg$can_bcm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x6, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x3, 0x2}}, 0x48}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_SNDMTU(r7, 0x112, 0xc, 0x0, 0x0) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) r9 = socket$inet_sctp(0x2, 0x5, 0x84) listen(r9, 0x9) readv(r8, &(0x7f0000000680)=[{&(0x7f0000000780)=""/172, 0xac}, {&(0x7f0000000840)=""/152, 0x98}, {&(0x7f0000000980)=""/129, 0x81}, {0x0, 0x41}, {&(0x7f00000033c0)=""/4096, 0x1000}, {0x0}, {0x0}, {&(0x7f00000023c0)=""/4096, 0x1000}], 0x8) sendmsg$TCPDIAG_GETSOCK(r8, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000140011f225bd7000fddbcf250284", @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x4, &(0x7f0000000140)=@raw=[@btf_id={0x18, 0x0, 0x3, 0x0, 0x4}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffff9}], &(0x7f0000000100)='syzkaller\x00', 0x5, 0xe6, &(0x7f0000001900)=""/230, 0x0, 0x22, '\x00', r4, @fallback=0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x4, 0x8, 0x4}, 0x10, r5, r2, 0x4, &(0x7f0000001880)=[r3, r3, r3, r3], &(0x7f00000018c0)=[{0x2, 0x1, 0xd, 0x4}, {0x0, 0x4, 0x1, 0xc}, {0x4, 0x1, 0x5, 0x3}, {0x5, 0x4, 0x0, 0x5}], 0x10, 0x3}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r3, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 3.807696342s ago: executing program 4 (id=6068): socket(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x297, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x5, 0x23e, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x22a, 0x0, @wg=@cookie={0x3, 0x3, "9cbff63586f481b853526f1cad72c0f4b49d23554acc4455", "4e6e0d13cd33bd8bb44d5dda3c463ca64576989838e7de4f0182bddc54ae0d2c"}}}}}}, 0x0) readv(r0, &(0x7f0000004000)=[{&(0x7f0000002c40)=""/248, 0xf8}, {&(0x7f0000002f80)=""/4096, 0x1000}], 0x2) socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) pread64(r2, &(0x7f0000001840)=""/4096, 0x1000, 0x8) pread64(r2, &(0x7f0000000340)=""/69, 0x45, 0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f00000003c0)="6f11ba816056a1827a33ae059cf3", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r5], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r6, 0x50, 0x800}}}}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x35c, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x8000) sendmsg$inet(r8, 0x0, 0x0) 3.605965498s ago: executing program 1 (id=6070): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000340)=[{&(0x7f00000002c0)="89e7ee0c7cdad9b4b47380c988cafb", 0xf}, {&(0x7f0000000440)="448b7c0acf8bc0cefe8360fcbe079ca4e62ef0675c10631d0984e7e6db7f90c5b959a5231eb5d6615538d4", 0x2b}], 0x2) syz_genetlink_get_family_id$nfc(&(0x7f0000000300), 0xffffffffffffffff) 3.521555574s ago: executing program 2 (id=6071): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f076bbeef, 0x50, r0, 0x215eb000) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x40600, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x306) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = epoll_create1(0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r4, 0x6628) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000bc0), r5) sendmsg$IEEE802154_LLSEC_ADD_KEY(r5, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r6, 0x1, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8004000}, 0x80) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000a000000080000000100000f050000000100220005000000fbff00"/56], 0x0, 0x3a}, 0x28) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0xcc}}, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r9, @ANYBLOB="3ed5cc0198f0ffffff03000000120008000100677265001400028008000700ac14140006000300bf"], 0x40}}, 0x0) r10 = socket$kcm(0x2d, 0x2, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x13}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r10, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)="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", 0x118}], 0x1}, 0x0) 3.324960533s ago: executing program 3 (id=6072): socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x1c) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@delchain={0x17, 0x65, 0x100, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x1, 0x64181b046e585f2f}, {0x48cd5521565b8d04, 0xfff1}, {0xffff, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c0c0}, 0x20000000) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010003"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = socket(0x10, 0x803, 0x2) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff000000009cc7000000000000", @ANYRES32=0x0, @ANYBLOB="48310600003f000008000a00", @ANYRES32=r7, @ANYBLOB="140012800b00010062"], 0x3c}, 0x1, 0x0, 0x0, 0x20004081}, 0x40000) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$inet(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x200140, &(0x7f0000000040)={@align=0x8001, {0x8, 0x1, 0x2, 0x7}}, 0x42, &(0x7f0000000080), &(0x7f00000000c0)=0xffffffff}) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, r10}, 0x10) syz_emit_ethernet(0xd7f, &(0x7f00000011c0)={@multicast, @random="e130aeaaba30", @void, {@ipv6={0x86dd, @tcp={0xf, 0x6, "870600", 0xd49, 0x6, 0xff, @loopback, @remote, {[], {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x4, 0x0, 0x0, 0x4}, {"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"}}}}}}}, 0x0) 3.068694684s ago: executing program 0 (id=6073): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x36c}, 0x48) 3.023260583s ago: executing program 0 (id=6074): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x34, &(0x7f00000007c0)=ANY=[@ANYBLOB="aaaaaaaaaaaad63b3210f2b5660600000000000008004529fd00260000000000119078000000000000000000004e2000129078000033a1a4af71b45fc1e17c833646a920f3f20e1227d4b8bc5d149de158fce994d1e947597d594cab388b57b0d148c94cfa31b7e764a249aa1b8e9629efebb86d68e5"], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="7800000018002507b9409b14ffff00000204be04020506050e0204094300080004000000040010000d0068d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff395954", 0x4d, 0x0, 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000640)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e21, @multicast1}, 0x4, 0x2, 0x4, 0x4}}, 0x26) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000000)="21000000470010aaaaaaaaaa0000000000000000000000000000000000030000000000000000000000000000000300"/74, 0x4a) 2.978382342s ago: executing program 0 (id=6075): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) r1 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x1a0, 0x270, 0xffffffff, 0xffffffff, 0xd0, 0x1a0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x7, 0x5a0}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x6, @random="71fea4df7044"}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) write$tun(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) 2.780376376s ago: executing program 4 (id=6076): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000005b80)={@loopback={0xfec0ffffffffffff}, 0x32, r1}) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r2, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@generic={0x1, 0x6, "11b712", 0x0, 0x11, 0xff, @loopback, @mcast2}}}, 0xfdef) 438.495853ms ago: executing program 3 (id=6077): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x64}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x100, 0x50, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x20e6}}, 0x40) close(0x3) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b0000000500000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x2}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x921}) close(0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f00000006c0)=[@in6={0xa, 0x4e23, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}], 0x1c) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x5f, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000014000780080008400000000008001240ffffffe80500010006000000050005000200000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYRESHEX], &(0x7f00000001c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x118) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000580)={0x0, 0xffc7, 0x1}, 0x8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000340), &(0x7f0000000380)=0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8946, 0x0) 421.920091ms ago: executing program 1 (id=6078): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="50000000090601feffff7f0000006ce6016000000900020073797a31000000000500010007000000280007800c00018008000140640101010c00148008000140ac1414bb0c000280"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 332.587718ms ago: executing program 2 (id=6079): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0xf0e102ee04ecd5dd, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x0) (fail_nth: 2) 323.651276ms ago: executing program 0 (id=6080): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e25, 0xe5, @ipv4={'\x00', '\xff\xff', @local}, 0x12}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000580)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 323.119855ms ago: executing program 1 (id=6081): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8feffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x599, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608fffffff80000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8fffdffb702000008000000b50af8ff0000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r1, r2, 0x31, 0x0, @val=@target_btf_id=0xffffffffffffffff}, 0x14) 248.908848ms ago: executing program 4 (id=6082): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0xfffffffd) bind$netlink(r1, &(0x7f0000000a00)={0x10, 0x0, 0x25dfdbfc, 0x200}, 0xc) ioctl$FAT_IOCTL_GET_VOLUME_ID(r1, 0x80047213, &(0x7f0000000640)) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r3, &(0x7f0000001ac0)=[{{&(0x7f0000000500)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000002c0)=""/249, 0xf9}, {&(0x7f00000003c0)=""/197, 0xc5}, {&(0x7f0000000200)=""/106, 0x6a}, {&(0x7f0000000580)=""/75, 0x4b}], 0x4, &(0x7f0000000700)=""/115, 0x73}, 0x6}, {{&(0x7f0000000780)=@nfc_llcp, 0x80, &(0x7f0000001a80)=[{&(0x7f0000000800)=""/198, 0xc6}, {&(0x7f0000000900)=""/146, 0x92}, {&(0x7f0000001b40)=""/161, 0xa1}, {&(0x7f0000000a80)=""/4096, 0x1000}], 0x4}, 0x7}], 0x2, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nfc(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f0000001d40)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={&(0x7f0000001d80)=ANY=[@ANYBLOB="e0000000", @ANYRES16=0x0, @ANYBLOB="020025bd7000fedbdf251000fe0000080008000000000008000700018000005000018008000100", @ANYRESDEC=r4, @ANYBLOB="080003000100000008000300010000000800030003000000080003000000000008000100", @ANYRES32=r2, @ANYBLOB="140002007866726d30000000000000000000000008000300020000001400018008000100", @ANYRESHEX=r0, @ANYBLOB="08000300070000005000fab735018008000102b51e8cdfb526bd7fe0d713be59778fc1af2b7d378e01a7ed5d09d40ac49f0fcdb8a93348b88ecb0d8743553f4998f42b8bc4382f2bf708f698a33f52e30714dfe789c84e966ce417d8cc48ef4b98030db3576a16f53b87ea0a73bdd8e81bcde9", @ANYRES32=r2, @ANYBLOB="08000300020000000800030003000000080003000500000008000100", @ANYRES32=r2, @ANYBLOB="080003000000000014000200766c616e00000000000000088003a374df04000100000008000600010100000000000000"], 0xe0}, 0x1, 0x0, 0x0, 0x20000010}, 0xc000) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000) socket$kcm(0x23, 0x2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000100000000000000b8030000850000007a00000018000000060000000000000002f3000095"], &(0x7f0000000680)='GPL\x00'}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x0, 0xe, 0x0, &(0x7f0000000140)="5bd6bc1996ff006859a121fc0e0d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r7 = socket$packet(0x11, 0x2, 0x300) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000002900)=r8, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r9, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) r11 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r11, &(0x7f0000000040)={0xa, 0xe22, 0x2}, 0x1c) r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r11, 0x1, 0x2, &(0x7f00000002c0)=0xffff, 0x4) bind$inet6(r12, &(0x7f0000000040)={0xa, 0xe22, 0x8000, @empty}, 0x1c) sendmsg$tipc(r10, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 248.38333ms ago: executing program 1 (id=6083): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x215eb000) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r1, &(0x7f00000003c0), 0x0, 0x0, 0x0) 229.222714ms ago: executing program 2 (id=6084): syz_emit_ethernet(0x32, &(0x7f0000000640)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x7, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@rr={0x7, 0x3, 0xfd}, @ra={0x94, 0x4}]}}, @address_reply={0xd}}}}}, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_newnexthop={0x20, 0x68, 0x309, 0x2, 0xfffffffc, {0xa, 0x0, 0x0, 0x0, 0x4}, [@NHA_OIF={0x8}]}, 0x20}}, 0x4040) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r4) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r4) sendmsg$NLBL_MGMT_C_VERSION(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="030f000000000000000008000000150001"], 0x2c}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'lo\x00', 0x2000}) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01032757c38d085641a7260000000c000180080003"], 0x20}, 0x1, 0x0, 0x0, 0x24048055}, 0x0) 202.568902ms ago: executing program 0 (id=6085): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x34, &(0x7f00000007c0)=ANY=[@ANYBLOB="aaaaaaaaaaaad63b3210f2b5660600000000000008004529fd00260000000000119078000000000000000000004e2000129078000033a1a4af71b45fc1e17c833646a920f3f20e1227d4b8bc5d149de158fce994d1e947597d594cab388b57b0d148c94cfa31b7e764a249aa1b8e9629efebb86d68e5"], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="7800000018002507b9409b14ffff00000204be04020506050e0204094300080004000000040010000d0068d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff395954", 0x4d, 0x0, 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000640)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e21, @multicast1}, 0x4, 0x2, 0x4, 0x4}}, 0x26) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000000)="21000000470010aaaaaaaaaa0000000000000000000000000000000000030000000000000000000000000000000300"/74, 0x4a) 0s ago: executing program 0 (id=6086): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @private=0xa010102}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmsg$inet(r1, &(0x7f00000027c0)={&(0x7f0000002300)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000002640)=[{&(0x7f0000002340)='\r', 0x1}], 0x1}, 0x20000800) r3 = accept$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs, &(0x7f00000002c0)=0x6e) recvfrom$unix(r3, &(0x7f0000000400)=""/172, 0xac, 0x1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) syz_emit_ethernet(0x34, &(0x7f0000000080)=ANY=[@ANYBLOB="b2d8476ebab389fb835161cdeff64eaa2900aaaaaaaaaa000000000000080000260000000000119d78400000000000000000004e"], 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0x8, 0x0, 0x9, 0x3, 0x0, 0x9, 0x4, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x5dfdbff, {0x0, 0x0, 0x0, r7, {0x4, 0xa}, {}, {0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xb}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) r8 = socket(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f0000000000), 0x400000000000235, 0x0) recvfrom(r0, &(0x7f00000000c0)=""/10, 0xa, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 940.003544][T25376] RSP: 002b:00007f70fe415028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 940.003563][T25376] RAX: ffffffffffffffda RBX: 00007f70fd825fa0 RCX: 00007f70fd59e199 [ 940.003578][T25376] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 940.003591][T25376] RBP: 00007f70fe415090 R08: 0000000000000000 R09: 0000000000000000 [ 940.003603][T25376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 940.003615][T25376] R13: 00007f70fd826038 R14: 00007f70fd825fa0 R15: 00007ffe2b69d538 [ 940.003648][T25376] [ 940.003708][T25376] Mem-Info: [ 940.003719][T25376] active_anon:12576 inactive_anon:5 isolated_anon:0 [ 940.003719][T25376] active_file:61 inactive_file:43703 isolated_file:0 [ 940.003719][T25376] unevictable:0 dirty:396 writeback:0 [ 940.003719][T25376] slab_reclaimable:11749 slab_unreclaimable:105199 [ 940.003719][T25376] mapped:29684 shmem:523 pagetables:3491 [ 940.003719][T25376] sec_pagetables:0 bounce:0 [ 940.003719][T25376] kernel_misc_reclaimable:0 [ 940.003719][T25376] free:1308650 free_pcp:9772 free_cma:0 [ 940.003771][T25376] Node 0 active_anon:50304kB inactive_anon:20kB active_file:244kB inactive_file:174612kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118736kB dirty:1580kB writeback:0kB shmem:2092kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15436kB pagetables:13824kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 940.003826][T25376] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 940.003877][T25376] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 940.003932][T25376] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 940.003967][T25376] Node 0 DMA32 free:1282348kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:50304kB inactive_anon:20kB active_file:244kB inactive_file:174612kB unevictable:0kB writepending:1580kB zspages:0kB present:3129332kB managed:2547076kB mlocked:0kB bounce:0kB free_pcp:39088kB local_pcp:10084kB free_cma:0kB [ 940.008440][T25376] lowmem_reserve[]: 0 0 0 0 0 [ 940.008480][T25376] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 940.008535][T25376] lowmem_reserve[]: 0 0 0 0 0 [ 940.008567][T25376] Node 1 Normal free:3936892kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 940.008623][T25376] lowmem_reserve[]: 0 0 0 0 0 [ 940.008655][T25376] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 940.008762][T25376] Node 0 DMA32: 423*4kB (UE) 322*8kB (UME) 690*16kB (UE) 1159*32kB (UME) 796*64kB (UME) 501*128kB (UME) 358*256kB (UM) 243*512kB (UM) 194*1024kB (UME) 0*2048kB 171*4096kB (UM) = 1282604kB [ 940.008904][T25376] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 940.008996][T25376] Node 1 Normal: 3*4kB (UM) 2*8kB (UM) 8*16kB (UM) 7*32kB (UM) 10*64kB (UM) 3*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 1*2048kB (U) 959*4096kB (UM) = 3936892kB [ 940.009141][T25376] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 940.009158][T25376] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 940.009174][T25376] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 940.009190][T25376] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 940.009205][T25376] 44283 total pagecache pages [ 940.009213][T25376] 0 pages in swap cache [ 940.009220][T25376] Free swap = 124996kB [ 940.009228][T25376] Total swap = 124996kB [ 940.009236][T25376] 2097051 pages RAM [ 940.009243][T25376] 0 pages HighMem/MovableOnly [ 940.009266][T25376] 428666 pages reserved [ 940.009296][T25376] 0 pages cma reserved [ 940.435994][T25380] netlink: 'syz.1.5498': attribute type 12 has an invalid length. [ 941.108825][T25396] netlink: 176 bytes leftover after parsing attributes in process `syz.2.5502'. [ 941.143432][T25396] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5502'. [ 941.254227][T25396] netlink: 'syz.2.5502': attribute type 1 has an invalid length. [ 941.254252][T25396] netlink: 228 bytes leftover after parsing attributes in process `syz.2.5502'. [ 941.917040][T25406] netlink: 'syz.3.5507': attribute type 1 has an invalid length. [ 941.954798][T25406] 8021q: adding VLAN 0 to HW filter on device bond22 [ 941.981065][T25406] bond22: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 942.007824][T25406] bridge12: entered promiscuous mode [ 942.136772][T25416] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 942.257474][T25421] netlink: 'syz.4.5514': attribute type 12 has an invalid length. [ 942.531680][T25430] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5515'. [ 942.790459][T25442] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5518'. [ 942.830231][T25452] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5523'. [ 942.830255][T25452] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5523'. [ 942.852469][T25454] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 943.012838][T25461] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5528'. [ 943.303412][T25476] pimreg: entered allmulticast mode [ 943.329769][T25476] pimreg: left allmulticast mode [ 943.689884][T25495] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 945.368532][T25503] netlink: 'syz.1.5539': attribute type 1 has an invalid length. [ 945.425248][T25503] 8021q: adding VLAN 0 to HW filter on device bond21 [ 945.473455][T25506] bond21: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 945.484695][T25508] netlink: 'syz.0.5540': attribute type 1 has an invalid length. [ 945.566478][T25517] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5544'. [ 945.566521][T25517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5544'. [ 945.567876][T25517] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5544'. [ 945.574788][T25508] 8021q: adding VLAN 0 to HW filter on device bond15 [ 945.594545][T25510] netlink: 'syz.4.5542': attribute type 1 has an invalid length. [ 945.657911][T25508] bridge15: entered promiscuous mode [ 945.809399][T25531] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5549'. [ 945.809424][T25531] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5549'. [ 945.809576][T25529] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 945.868822][T25534] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5544'. [ 946.171496][T25547] netlink: 'syz.2.5553': attribute type 1 has an invalid length. [ 946.249708][T25547] 8021q: adding VLAN 0 to HW filter on device bond16 [ 946.279744][T25549] bond15: (slave veth0_to_bond): Releasing backup interface [ 946.316378][T25549] bond16: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 946.828135][T25569] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 946.863189][T25572] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5561'. [ 947.546044][T25601] netlink: 'syz.1.5568': attribute type 1 has an invalid length. [ 947.693993][T25601] 8021q: adding VLAN 0 to HW filter on device bond22 [ 947.756293][T25607] bond21: (slave veth0_to_bond): Releasing backup interface [ 947.818415][T25607] bond22: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 947.940658][T25615] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5569'. [ 948.417208][T25635] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 948.545054][T25636] netlink: 'syz.2.5573': attribute type 12 has an invalid length. [ 948.598793][T25638] tipc: Enabling of bearer rejected, already enabled [ 948.868400][T25655] netlink: 'syz.3.5581': attribute type 1 has an invalid length. [ 948.906676][T25655] 8021q: adding VLAN 0 to HW filter on device bond23 [ 948.916151][T25659] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5582'. [ 948.936828][T25655] bond22: (slave veth0_to_bond): Releasing backup interface [ 948.956380][T25655] bond23: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 949.077649][T25664] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5585'. [ 949.183427][T25668] bond23: (slave veth0_to_bond): Releasing backup interface [ 949.236834][T25666] bridge13: entered promiscuous mode [ 949.276221][T25672] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 949.431619][T25678] netlink: 'syz.3.5590': attribute type 4 has an invalid length. [ 949.466424][T25678] .`: renamed from bond0 (while UP) [ 949.686957][T25689] netlink: 'syz.2.5594': attribute type 1 has an invalid length. [ 949.688872][T25686] x_tables: duplicate underflow at hook 1 [ 949.736526][T25689] 8021q: adding VLAN 0 to HW filter on device bond17 [ 949.760437][T25689] bond16: (slave veth0_to_bond): Releasing backup interface [ 949.777376][T25689] bond17: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 950.060705][T25709] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 950.333329][T25719] Bluetooth: ISO socket layer initialized [ 950.741824][T25737] netlink: 'syz.0.5607': attribute type 1 has an invalid length. [ 950.775532][T25737] bond16: option mode: invalid value (10) [ 950.797615][T25737] bond16 (unregistering): Released all slaves [ 950.800654][T25740] netlink: 'syz.1.5608': attribute type 1 has an invalid length. [ 950.916612][T25740] 8021q: adding VLAN 0 to HW filter on device bond23 [ 950.951067][T25742] bond22: (slave veth0_to_bond): Releasing backup interface [ 950.976802][T25742] bond23: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 951.376333][T25756] netlink: 'syz.1.5613': attribute type 3 has an invalid length. [ 951.452628][T25759] FAULT_INJECTION: forcing a failure. [ 951.452628][T25759] name failslab, interval 1, probability 0, space 0, times 0 [ 951.452665][T25759] CPU: 1 UID: 0 PID: 25759 Comm: syz.4.5614 Not tainted syzkaller #0 PREEMPT(full) [ 951.452688][T25759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 951.452701][T25759] Call Trace: [ 951.452709][T25759] [ 951.452718][T25759] dump_stack_lvl+0xe8/0x150 [ 951.452752][T25759] should_fail_ex+0x410/0x560 [ 951.452780][T25759] should_failslab+0xa8/0x100 [ 951.452807][T25759] __kvmalloc_node_noprof+0x176/0x820 [ 951.452839][T25759] ? __kmalloc_cache_noprof+0x14d/0x600 [ 951.452858][T25759] ? bpf_diag_init+0x87/0x140 [ 951.452883][T25759] ? bpf_check+0x165e/0x2ef0 [ 951.452903][T25759] ? bpf_check+0x165e/0x2ef0 [ 951.452930][T25759] bpf_check+0x165e/0x2ef0 [ 951.452970][T25759] ? __pfx_bpf_check+0x10/0x10 [ 951.452996][T25759] ? bpf_obj_name_cpy+0x194/0x1e0 [ 951.453027][T25759] bpf_prog_load+0x14d6/0x1c20 [ 951.453061][T25759] ? __pfx_bpf_prog_load+0x10/0x10 [ 951.453107][T25759] __sys_bpf+0xd0d/0xd90 [ 951.453138][T25759] ? __pfx___sys_bpf+0x10/0x10 [ 951.453169][T25759] ? __fget_files+0x2a/0x420 [ 951.453217][T25759] ? ksys_write+0x242/0x270 [ 951.453249][T25759] ? __pfx_ksys_write+0x10/0x10 [ 951.453282][T25759] __x64_sys_bpf+0xba/0xd0 [ 951.453306][T25759] do_syscall_64+0x166/0x520 [ 951.453325][T25759] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.453345][T25759] ? clear_bhb_loop+0x70/0xc0 [ 951.453370][T25759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.453391][T25759] RIP: 0033:0x7f230259e199 [ 951.453410][T25759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 951.453428][T25759] RSP: 002b:00007f23034e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 951.453449][T25759] RAX: ffffffffffffffda RBX: 00007f2302825fa0 RCX: 00007f230259e199 [ 951.453464][T25759] RDX: 0000000000000094 RSI: 0000200000000980 RDI: 0000000000000005 [ 951.453478][T25759] RBP: 00007f23034e2090 R08: 0000000000000000 R09: 0000000000000000 [ 951.453491][T25759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 951.453503][T25759] R13: 00007f2302826038 R14: 00007f2302825fa0 R15: 00007ffe68fb5a28 [ 951.453533][T25759] [ 951.734801][T25764] __nla_validate_parse: 2 callbacks suppressed [ 951.734825][T25764] netlink: 988 bytes leftover after parsing attributes in process `syz.4.5616'. [ 951.875526][T25767] netlink: 'syz.0.5617': attribute type 1 has an invalid length. [ 951.948645][T25767] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5617'. [ 952.175998][T25787] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5623'. [ 952.361682][T25787] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5623'. [ 952.402022][T25794] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5626'. [ 952.443311][T25797] netlink: 880 bytes leftover after parsing attributes in process `syz.2.5628'. [ 952.443338][T25797] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 952.529212][T25799] netlink: 'syz.3.5627': attribute type 1 has an invalid length. [ 952.659375][T25799] bond0: option mode: invalid value (10) [ 952.677969][T25799] bond0 (unregistering): Released all slaves [ 952.747571][T25810] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5631'. [ 952.824220][T25810] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5631'. [ 953.146410][T25825] netlink: 988 bytes leftover after parsing attributes in process `syz.1.5636'. [ 953.362534][T25836] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5641'. [ 954.864527][T25903] FAULT_INJECTION: forcing a failure. [ 954.864527][T25903] name failslab, interval 1, probability 0, space 0, times 0 [ 954.864560][T25903] CPU: 0 UID: 0 PID: 25903 Comm: syz.4.5664 Not tainted syzkaller #0 PREEMPT(full) [ 954.864592][T25903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 954.864603][T25903] Call Trace: [ 954.864611][T25903] [ 954.864621][T25903] dump_stack_lvl+0xe8/0x150 [ 954.864653][T25903] should_fail_ex+0x410/0x560 [ 954.864682][T25903] should_failslab+0xa8/0x100 [ 954.864707][T25903] ? security_inode_alloc+0x39/0x310 [ 954.864737][T25903] kmem_cache_alloc_noprof+0xa1/0x600 [ 954.864786][T25903] ? __pfx_make_kgid+0x10/0x10 [ 954.864839][T25903] ? security_inode_alloc+0x39/0x310 [ 954.864868][T25903] security_inode_alloc+0x39/0x310 [ 954.864895][T25903] inode_init_always_gfp+0x97e/0xd30 [ 954.864923][T25903] ? __pfx_sock_alloc_inode+0x10/0x10 [ 954.864945][T25903] alloc_inode+0x82/0x1b0 [ 954.864970][T25903] __sock_create+0x12d/0x9d0 [ 954.864996][T25903] ? __pfx___se_sys_setns+0x10/0x10 [ 954.865025][T25903] __sys_socket+0xd6/0x1b0 [ 954.865048][T25903] __x64_sys_socket+0x7a/0x90 [ 954.865070][T25903] do_syscall_64+0x166/0x520 [ 954.865088][T25903] ? trace_irq_disable+0x3b/0x140 [ 954.865108][T25903] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 954.865127][T25903] ? clear_bhb_loop+0x70/0xc0 [ 954.865151][T25903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 954.865170][T25903] RIP: 0033:0x7f230259e199 [ 954.865190][T25903] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 954.865208][T25903] RSP: 002b:00007f23034e1fc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 954.865229][T25903] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f230259e199 [ 954.865243][T25903] RDX: 0000000000000002 RSI: 0000000000000005 RDI: 000000000000001f [ 954.865255][T25903] RBP: 00007f23034e2090 R08: 0000000000000000 R09: 0000000000000000 [ 954.865267][T25903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 954.865279][T25903] R13: 00007f2302826038 R14: 00007f2302825fa0 R15: 00007ffe68fb5a28 [ 954.865310][T25903] [ 954.865466][T25903] socket: no more sockets [ 955.446081][T25916] netlink: 'syz.0.5668': attribute type 1 has an invalid length. [ 955.446105][T25916] netlink: 'syz.0.5668': attribute type 2 has an invalid length. [ 955.582856][T25923] netlink: 'syz.2.5669': attribute type 1 has an invalid length. [ 955.631018][T25923] bond18: option mode: invalid value (10) [ 955.642709][T25923] bond18 (unregistering): Released all slaves [ 955.830219][T25939] netlink: 'syz.3.5676': attribute type 1 has an invalid length. [ 955.879335][T25941] openvswitch: netlink: Unknown key attributes 1 [ 955.970672][T25939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 955.991345][T25943] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 955.992938][T25951] FAULT_INJECTION: forcing a failure. [ 955.992938][T25951] name failslab, interval 1, probability 0, space 0, times 0 [ 955.992968][T25951] CPU: 1 UID: 0 PID: 25951 Comm: syz.0.5679 Not tainted syzkaller #0 PREEMPT(full) [ 955.992986][T25951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 955.992997][T25951] Call Trace: [ 955.993004][T25951] [ 955.993014][T25951] dump_stack_lvl+0xe8/0x150 [ 955.993045][T25951] should_fail_ex+0x410/0x560 [ 955.993073][T25951] should_failslab+0xa8/0x100 [ 955.993099][T25951] __kmalloc_node_track_caller_noprof+0xfb/0x720 [ 955.993122][T25951] ? kvrealloc_node_align_noprof+0x7b/0xf0 [ 955.993142][T25951] ? kvrealloc_node_align_noprof+0x7b/0xf0 [ 955.993168][T25951] ? kvrealloc_node_align_noprof+0x7b/0xf0 [ 955.993190][T25951] krealloc_node_align_noprof+0x19a/0x390 [ 955.993209][T25951] ? __kmalloc_cache_noprof+0x14d/0x600 [ 955.993227][T25951] ? bpf_diag_init+0x87/0x140 [ 955.993247][T25951] ? bpf_diag_init+0x87/0x140 [ 955.993272][T25951] kvrealloc_node_align_noprof+0x7b/0xf0 [ 955.993296][T25951] bpf_iarray_realloc+0x34/0xa0 [ 955.993316][T25951] bpf_check+0x148d/0x2ef0 [ 955.993353][T25951] ? __pfx_bpf_check+0x10/0x10 [ 955.993386][T25951] ? bpf_obj_name_cpy+0x194/0x1e0 [ 955.993416][T25951] bpf_prog_load+0x14d6/0x1c20 [ 955.993449][T25951] ? __pfx_bpf_prog_load+0x10/0x10 [ 955.993501][T25951] __sys_bpf+0xd0d/0xd90 [ 955.993529][T25951] ? __pfx___sys_bpf+0x10/0x10 [ 955.993559][T25951] ? __fget_files+0x2a/0x420 [ 955.993601][T25951] ? ksys_write+0x242/0x270 [ 955.993633][T25951] ? __pfx_ksys_write+0x10/0x10 [ 955.993667][T25951] __x64_sys_bpf+0xba/0xd0 [ 955.993689][T25951] do_syscall_64+0x166/0x520 [ 955.993708][T25951] ? trace_irq_disable+0x3b/0x140 [ 955.993729][T25951] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 955.993749][T25951] ? clear_bhb_loop+0x70/0xc0 [ 955.993774][T25951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 955.993794][T25951] RIP: 0033:0x7fbda9f9e199 [ 955.993813][T25951] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 955.993831][T25951] RSP: 002b:00007fbdaae92028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 955.993853][T25951] RAX: ffffffffffffffda RBX: 00007fbdaa225fa0 RCX: 00007fbda9f9e199 [ 955.993867][T25951] RDX: 0000000000000094 RSI: 0000200000000680 RDI: 0000000000000005 [ 955.993879][T25951] RBP: 00007fbdaae92090 R08: 0000000000000000 R09: 0000000000000000 [ 955.993890][T25951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 955.993900][T25951] R13: 00007fbdaa226038 R14: 00007fbdaa225fa0 R15: 00007fffae0477d8 [ 955.993923][T25951] [ 956.151494][T25947] bridge13: entered promiscuous mode [ 957.049064][T25976] __nla_validate_parse: 1 callbacks suppressed [ 957.049090][T25976] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5686'. [ 957.049108][T25976] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5686'. [ 957.049126][T25976] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5686'. [ 957.253154][T25984] FAULT_INJECTION: forcing a failure. [ 957.253154][T25984] name failslab, interval 1, probability 0, space 0, times 0 [ 957.253188][T25984] CPU: 0 UID: 0 PID: 25984 Comm: syz.0.5691 Not tainted syzkaller #0 PREEMPT(full) [ 957.253210][T25984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 957.253221][T25984] Call Trace: [ 957.253229][T25984] [ 957.253238][T25984] dump_stack_lvl+0xe8/0x150 [ 957.253276][T25984] should_fail_ex+0x410/0x560 [ 957.253305][T25984] should_failslab+0xa8/0x100 [ 957.253330][T25984] __kmalloc_noprof+0xfe/0x720 [ 957.253350][T25984] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 957.253386][T25984] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 957.253419][T25984] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 957.253456][T25984] genl_family_rcv_msg_doit+0xda/0x340 [ 957.253490][T25984] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 957.253521][T25984] ? apparmor_capable+0x126/0x170 [ 957.253549][T25984] ? bpf_lsm_capable+0x9/0x20 [ 957.253566][T25984] ? security_capable+0x7e/0x2c0 [ 957.253594][T25984] genl_rcv_msg+0x614/0x7a0 [ 957.253624][T25984] ? __pfx_genl_rcv_msg+0x10/0x10 [ 957.253647][T25984] ? __pfx_netlbl_unlabel_staticadd+0x10/0x10 [ 957.253820][T25984] netlink_rcv_skb+0x226/0x4a0 [ 957.253844][T25984] ? __pfx_genl_rcv_msg+0x10/0x10 [ 957.253871][T25984] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 957.253908][T25984] ? down_read+0x2be/0x330 [ 957.253932][T25984] genl_rcv+0x28/0x40 [ 957.253954][T25984] netlink_unicast+0x7bd/0x940 [ 957.253984][T25984] netlink_sendmsg+0x813/0xb40 [ 957.254015][T25984] ? __pfx_netlink_sendmsg+0x10/0x10 [ 957.254046][T25984] ? apparmor_socket_sendmsg+0x98/0x360 [ 957.254072][T25984] ? __pfx_netlink_sendmsg+0x10/0x10 [ 957.254094][T25984] sock_sendmsg_nosec+0x14e/0x190 [ 957.254120][T25984] ____sys_sendmsg+0x54e/0x850 [ 957.254155][T25984] ? __pfx_____sys_sendmsg+0x10/0x10 [ 957.254194][T25984] ? import_iovec+0x73/0xa0 [ 957.254223][T25984] ___sys_sendmsg+0x2a5/0x360 [ 957.254250][T25984] ? __lock_acquire+0x747/0x2de0 [ 957.254277][T25984] ? __pfx____sys_sendmsg+0x10/0x10 [ 957.254343][T25984] ? __fget_files+0x2a/0x420 [ 957.254379][T25984] ? __fget_files+0x3a2/0x420 [ 957.254417][T25984] __x64_sys_sendmsg+0x1b1/0x290 [ 957.254449][T25984] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 957.254501][T25984] do_syscall_64+0x166/0x520 [ 957.254519][T25984] ? trace_irq_disable+0x3b/0x140 [ 957.254540][T25984] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 957.254561][T25984] ? clear_bhb_loop+0x70/0xc0 [ 957.254586][T25984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 957.254606][T25984] RIP: 0033:0x7fbda9f9e199 [ 957.254625][T25984] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 957.254643][T25984] RSP: 002b:00007fbdaae92028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 957.254666][T25984] RAX: ffffffffffffffda RBX: 00007fbdaa225fa0 RCX: 00007fbda9f9e199 [ 957.254681][T25984] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 957.254695][T25984] RBP: 00007fbdaae92090 R08: 0000000000000000 R09: 0000000000000000 [ 957.254708][T25984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 957.254721][T25984] R13: 00007fbdaa226038 R14: 00007fbdaa225fa0 R15: 00007fffae0477d8 [ 957.254755][T25984] [ 957.377912][T25988] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5690'. [ 957.378028][T25988] netlink: 11 bytes leftover after parsing attributes in process `syz.1.5690'. [ 957.620431][T25990] netlink: 'syz.2.5692': attribute type 12 has an invalid length. [ 957.707273][T25994] ip_tables: iptables: counters copy to user failed while replacing table [ 958.118755][T26012] netlink: 'syz.4.5698': attribute type 12 has an invalid length. [ 958.255988][T26018] netlink: 'syz.2.5699': attribute type 10 has an invalid length. [ 958.428285][T26021] netlink: 'syz.3.5702': attribute type 1 has an invalid length. [ 958.485444][T26021] 8021q: adding VLAN 0 to HW filter on device bond24 [ 958.536782][T26024] bond0: (slave veth0_to_bond): Releasing backup interface [ 958.590555][T26024] bond24: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 958.723368][T26031] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5705'. [ 958.723479][T26031] netlink: 11 bytes leftover after parsing attributes in process `syz.4.5705'. [ 958.754443][T26034] netlink: zone id is out of range [ 958.754462][T26034] netlink: zone id is out of range [ 958.754472][T26034] netlink: zone id is out of range [ 958.754481][T26034] netlink: zone id is out of range [ 958.754490][T26034] netlink: zone id is out of range [ 958.754499][T26034] netlink: zone id is out of range [ 958.754588][T26034] netlink: zone id is out of range [ 958.831339][T26035] netlink: 'syz.3.5707': attribute type 83 has an invalid length. [ 958.842764][T26035] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5707'. [ 958.903863][T26041] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5708'. [ 958.979812][T26039] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5706'. [ 959.192938][T26054] FAULT_INJECTION: forcing a failure. [ 959.192938][T26054] name failslab, interval 1, probability 0, space 0, times 0 [ 959.192970][T26054] CPU: 1 UID: 0 PID: 26054 Comm: syz.2.5712 Not tainted syzkaller #0 PREEMPT(full) [ 959.192987][T26054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 959.192997][T26054] Call Trace: [ 959.193004][T26054] [ 959.193012][T26054] dump_stack_lvl+0xe8/0x150 [ 959.193040][T26054] should_fail_ex+0x410/0x560 [ 959.193063][T26054] should_failslab+0xa8/0x100 [ 959.193085][T26054] __kmalloc_cache_node_noprof+0xaa/0x620 [ 959.193101][T26054] ? unwind_get_return_address+0x4d/0x90 [ 959.193145][T26054] ? __get_vm_area_node+0x155/0x2f0 [ 959.193165][T26054] ? __get_vm_area_node+0x155/0x2f0 [ 959.193190][T26054] __get_vm_area_node+0x155/0x2f0 [ 959.193216][T26054] __vmalloc_node_range_noprof+0x343/0x1540 [ 959.193241][T26054] ? bpf_prog_calc_tag+0x51/0x370 [ 959.193263][T26054] ? format_decode+0xdc/0xda0 [ 959.193290][T26054] ? vsnprintf+0xe42/0xef0 [ 959.193318][T26054] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 959.193343][T26054] ? bpf_verifier_vlog+0x3d1/0x900 [ 959.193367][T26054] ? bpf_prog_calc_tag+0x51/0x370 [ 959.193384][T26054] __vmalloc_noprof+0xd2/0x120 [ 959.193410][T26054] ? bpf_prog_calc_tag+0x51/0x370 [ 959.193433][T26054] bpf_prog_calc_tag+0x51/0x370 [ 959.193456][T26054] check_and_resolve_insns+0xbb/0x21d0 [ 959.193479][T26054] ? add_subprog+0x2e2/0x3f0 [ 959.193501][T26054] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 959.193532][T26054] bpf_check+0x18f9/0x2ef0 [ 959.193566][T26054] ? __pfx_bpf_check+0x10/0x10 [ 959.193584][T26054] ? bpf_obj_name_cpy+0x194/0x1e0 [ 959.193608][T26054] bpf_prog_load+0x14d6/0x1c20 [ 959.193637][T26054] ? __pfx_bpf_prog_load+0x10/0x10 [ 959.193679][T26054] __sys_bpf+0xd0d/0xd90 [ 959.193702][T26054] ? __pfx___sys_bpf+0x10/0x10 [ 959.193742][T26054] ? __fget_files+0x2a/0x420 [ 959.193780][T26054] ? ksys_write+0x242/0x270 [ 959.193809][T26054] ? __pfx_ksys_write+0x10/0x10 [ 959.193837][T26054] __x64_sys_bpf+0xba/0xd0 [ 959.193856][T26054] do_syscall_64+0x166/0x520 [ 959.193872][T26054] ? trace_irq_disable+0x3b/0x140 [ 959.193889][T26054] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 959.193909][T26054] ? clear_bhb_loop+0x70/0xc0 [ 959.193929][T26054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 959.193947][T26054] RIP: 0033:0x7f093c59e199 [ 959.193966][T26054] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 959.193982][T26054] RSP: 002b:00007f093d38f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 959.194002][T26054] RAX: ffffffffffffffda RBX: 00007f093c825fa0 RCX: 00007f093c59e199 [ 959.194015][T26054] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 959.194028][T26054] RBP: 00007f093d38f090 R08: 0000000000000000 R09: 0000000000000000 [ 959.194039][T26054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 959.194050][T26054] R13: 00007f093c826038 R14: 00007f093c825fa0 R15: 00007ffd4d50ae78 [ 959.194079][T26054] [ 959.202286][T26054] syz.2.5712: vmalloc error: size 176, align 0x1, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 959.202353][T26054] CPU: 1 UID: 0 PID: 26054 Comm: syz.2.5712 Not tainted syzkaller #0 PREEMPT(full) [ 959.202375][T26054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 959.202387][T26054] Call Trace: [ 959.202395][T26054] [ 959.202404][T26054] dump_stack_lvl+0xe8/0x150 [ 959.202437][T26054] warn_alloc+0x24d/0x270 [ 959.202457][T26054] ? __kasan_kmalloc+0x22/0xb0 [ 959.202483][T26054] ? __pfx_warn_alloc+0x10/0x10 [ 959.202501][T26054] ? __get_vm_area_node+0x155/0x2f0 [ 959.202535][T26054] ? __get_vm_area_node+0x2a9/0x2f0 [ 959.202570][T26054] __vmalloc_node_range_noprof+0x36b/0x1540 [ 959.202604][T26054] ? format_decode+0xdc/0xda0 [ 959.202635][T26054] ? vsnprintf+0xe42/0xef0 [ 959.202672][T26054] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 959.202700][T26054] ? bpf_verifier_vlog+0x3d1/0x900 [ 959.202734][T26054] ? bpf_prog_calc_tag+0x51/0x370 [ 959.202756][T26054] __vmalloc_noprof+0xd2/0x120 [ 959.202785][T26054] ? bpf_prog_calc_tag+0x51/0x370 [ 959.202809][T26054] bpf_prog_calc_tag+0x51/0x370 [ 959.202837][T26054] check_and_resolve_insns+0xbb/0x21d0 [ 959.202865][T26054] ? add_subprog+0x2e2/0x3f0 [ 959.202891][T26054] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 959.202923][T26054] bpf_check+0x18f9/0x2ef0 [ 959.202962][T26054] ? __pfx_bpf_check+0x10/0x10 [ 959.202986][T26054] ? bpf_obj_name_cpy+0x194/0x1e0 [ 959.203016][T26054] bpf_prog_load+0x14d6/0x1c20 [ 959.203050][T26054] ? __pfx_bpf_prog_load+0x10/0x10 [ 959.203097][T26054] __sys_bpf+0xd0d/0xd90 [ 959.203126][T26054] ? __pfx___sys_bpf+0x10/0x10 [ 959.203158][T26054] ? __fget_files+0x2a/0x420 [ 959.203202][T26054] ? ksys_write+0x242/0x270 [ 959.203232][T26054] ? __pfx_ksys_write+0x10/0x10 [ 959.203266][T26054] __x64_sys_bpf+0xba/0xd0 [ 959.203288][T26054] do_syscall_64+0x166/0x520 [ 959.203307][T26054] ? trace_irq_disable+0x3b/0x140 [ 959.203325][T26054] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 959.203345][T26054] ? clear_bhb_loop+0x70/0xc0 [ 959.203369][T26054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 959.203388][T26054] RIP: 0033:0x7f093c59e199 [ 959.203407][T26054] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 959.203425][T26054] RSP: 002b:00007f093d38f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 959.203445][T26054] RAX: ffffffffffffffda RBX: 00007f093c825fa0 RCX: 00007f093c59e199 [ 959.203460][T26054] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 959.203473][T26054] RBP: 00007f093d38f090 R08: 0000000000000000 R09: 0000000000000000 [ 959.203486][T26054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 959.203498][T26054] R13: 00007f093c826038 R14: 00007f093c825fa0 R15: 00007ffd4d50ae78 [ 959.203529][T26054] [ 959.208283][T26054] Mem-Info: [ 959.208299][T26054] active_anon:6714 inactive_anon:5 isolated_anon:0 [ 959.208299][T26054] active_file:61 inactive_file:43711 isolated_file:0 [ 959.208299][T26054] unevictable:0 dirty:450 writeback:0 [ 959.208299][T26054] slab_reclaimable:11316 slab_unreclaimable:105392 [ 959.208299][T26054] mapped:29739 shmem:523 pagetables:3500 [ 959.208299][T26054] sec_pagetables:0 bounce:0 [ 959.208299][T26054] kernel_misc_reclaimable:0 [ 959.208299][T26054] free:1311439 free_pcp:13056 free_cma:0 [ 959.210117][T26054] Node 0 active_anon:26856kB inactive_anon:20kB active_file:244kB inactive_file:174644kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118956kB dirty:1800kB writeback:0kB shmem:2092kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15780kB pagetables:13860kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 959.210174][T26054] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 959.210224][T26054] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 959.210281][T26054] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 959.210315][T26054] Node 0 DMA32 free:1293504kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:26856kB inactive_anon:20kB active_file:244kB inactive_file:174644kB unevictable:0kB writepending:1800kB zspages:0kB present:3129332kB managed:2547076kB mlocked:0kB bounce:0kB free_pcp:52200kB local_pcp:23880kB free_cma:0kB [ 959.210386][T26054] lowmem_reserve[]: 0 0 0 0 0 [ 959.210418][T26054] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 959.210471][T26054] lowmem_reserve[]: 0 0 0 0 0 [ 959.210503][T26054] Node 1 Normal free:3936892kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 959.210560][T26054] lowmem_reserve[]: 0 0 0 0 0 [ 959.210591][T26054] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 959.210699][T26054] Node 0 DMA32: 2555*4kB (UME) 1216*8kB (UME) 623*16kB (UME) 933*32kB (UME) 800*64kB (UME) 512*128kB (UM) 357*256kB (UME) 245*512kB (UM) 195*1024kB (UME) 2*2048kB (M) 170*4096kB (UM) = 1293436kB [ 959.210853][T26054] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 959.210944][T26054] Node 1 Normal: 3*4kB (UM) 2*8kB (UM) 8*16kB (UM) 7*32kB (UM) 10*64kB (UM) 3*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 1*2048kB (U) 959*4096kB (UM) = 3936892kB [ 959.211089][T26054] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 959.211106][T26054] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 959.211121][T26054] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 959.211137][T26054] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 959.211153][T26054] 44291 total pagecache pages [ 959.211161][T26054] 0 pages in swap cache [ 959.211168][T26054] Free swap = 124996kB [ 959.211176][T26054] Total swap = 124996kB [ 959.211184][T26054] 2097051 pages RAM [ 959.211191][T26054] 0 pages HighMem/MovableOnly [ 959.211199][T26054] 428666 pages reserved [ 959.211206][T26054] 0 pages cma reserved [ 959.731913][T26065] netlink: 'syz.2.5717': attribute type 1 has an invalid length. [ 959.839584][T26065] 8021q: adding VLAN 0 to HW filter on device bond18 [ 960.137538][T26070] bond25: entered allmulticast mode [ 960.225720][T26068] bond17: (slave veth0_to_bond): Releasing backup interface [ 960.272477][T26068] bond18: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 960.272606][T26075] netlink: 'syz.4.5719': attribute type 12 has an invalid length. [ 960.669499][T26100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 960.680306][T26100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 960.701546][T26098] netlink: 'syz.0.5726': attribute type 12 has an invalid length. [ 961.505675][T26114] FAULT_INJECTION: forcing a failure. [ 961.505675][T26114] name failslab, interval 1, probability 0, space 0, times 0 [ 961.505710][T26114] CPU: 0 UID: 0 PID: 26114 Comm: syz.2.5732 Not tainted syzkaller #0 PREEMPT(full) [ 961.505733][T26114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 961.505746][T26114] Call Trace: [ 961.505755][T26114] [ 961.505764][T26114] dump_stack_lvl+0xe8/0x150 [ 961.505797][T26114] should_fail_ex+0x410/0x560 [ 961.505826][T26114] should_failslab+0xa8/0x100 [ 961.505854][T26114] __kvmalloc_node_noprof+0x176/0x820 [ 961.505875][T26114] ? __kmalloc_cache_noprof+0x14d/0x600 [ 961.505896][T26114] ? bpf_diag_init+0x87/0x140 [ 961.505920][T26114] ? bpf_check+0x165e/0x2ef0 [ 961.505940][T26114] ? bpf_check+0x165e/0x2ef0 [ 961.505968][T26114] bpf_check+0x165e/0x2ef0 [ 961.506005][T26114] ? __pfx_bpf_check+0x10/0x10 [ 961.506031][T26114] ? bpf_obj_name_cpy+0x194/0x1e0 [ 961.506063][T26114] bpf_prog_load+0x14d6/0x1c20 [ 961.506096][T26114] ? __pfx_bpf_prog_load+0x10/0x10 [ 961.506147][T26114] __sys_bpf+0xd0d/0xd90 [ 961.506177][T26114] ? __pfx___sys_bpf+0x10/0x10 [ 961.506207][T26114] ? __fget_files+0x2a/0x420 [ 961.506247][T26114] ? ksys_write+0x242/0x270 [ 961.506282][T26114] ? __pfx_ksys_write+0x10/0x10 [ 961.506315][T26114] __x64_sys_bpf+0xba/0xd0 [ 961.506338][T26114] do_syscall_64+0x166/0x520 [ 961.506356][T26114] ? trace_irq_disable+0x3b/0x140 [ 961.506376][T26114] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 961.506396][T26114] ? clear_bhb_loop+0x70/0xc0 [ 961.506420][T26114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 961.506439][T26114] RIP: 0033:0x7f093c59e199 [ 961.506458][T26114] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 961.506475][T26114] RSP: 002b:00007f093d38f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 961.506497][T26114] RAX: ffffffffffffffda RBX: 00007f093c825fa0 RCX: 00007f093c59e199 [ 961.506512][T26114] RDX: 0000000000000094 RSI: 0000200000000980 RDI: 0000000000000005 [ 961.506525][T26114] RBP: 00007f093d38f090 R08: 0000000000000000 R09: 0000000000000000 [ 961.506538][T26114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 961.506549][T26114] R13: 00007f093c826038 R14: 00007f093c825fa0 R15: 00007ffd4d50ae78 [ 961.506580][T26114] [ 961.766504][T26118] netlink: 'syz.1.5734': attribute type 1 has an invalid length. [ 961.803453][T26118] 8021q: adding VLAN 0 to HW filter on device bond24 [ 961.838288][T26118] bond23: (slave veth0_to_bond): Releasing backup interface [ 961.858713][T26118] bond24: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 962.170819][T26126] net_ratelimit: 1707 callbacks suppressed [ 962.170845][T26126] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 962.173059][T26125] netlink: 'syz.0.5736': attribute type 12 has an invalid length. [ 962.795926][T26150] FAULT_INJECTION: forcing a failure. [ 962.795926][T26150] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 962.795958][T26150] CPU: 1 UID: 0 PID: 26150 Comm: syz.4.5743 Not tainted syzkaller #0 PREEMPT(full) [ 962.795979][T26150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 962.795990][T26150] Call Trace: [ 962.795998][T26150] [ 962.796007][T26150] dump_stack_lvl+0xe8/0x150 [ 962.796040][T26150] should_fail_ex+0x410/0x560 [ 962.796068][T26150] _copy_from_user+0x2d/0xb0 [ 962.796094][T26150] __sys_bpf+0x2e7/0xd90 [ 962.796123][T26150] ? __pfx___sys_bpf+0x10/0x10 [ 962.796157][T26150] ? __fget_files+0x2a/0x420 [ 962.796197][T26150] ? ksys_write+0x242/0x270 [ 962.796226][T26150] ? __pfx_ksys_write+0x10/0x10 [ 962.796256][T26150] __x64_sys_bpf+0xba/0xd0 [ 962.796279][T26150] do_syscall_64+0x166/0x520 [ 962.796297][T26150] ? trace_irq_disable+0x3b/0x140 [ 962.796314][T26150] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 962.796342][T26150] ? clear_bhb_loop+0x70/0xc0 [ 962.796366][T26150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 962.796392][T26150] RIP: 0033:0x7f230259e199 [ 962.796411][T26150] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 962.796428][T26150] RSP: 002b:00007f23034e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 962.796449][T26150] RAX: ffffffffffffffda RBX: 00007f2302825fa0 RCX: 00007f230259e199 [ 962.796464][T26150] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 962.796478][T26150] RBP: 00007f23034e2090 R08: 0000000000000000 R09: 0000000000000000 [ 962.796492][T26150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 962.796504][T26150] R13: 00007f2302826038 R14: 00007f2302825fa0 R15: 00007ffe68fb5a28 [ 962.796540][T26150] [ 963.149534][T26166] netlink: 'syz.2.5747': attribute type 1 has an invalid length. [ 963.163353][T26157] __nla_validate_parse: 2 callbacks suppressed [ 963.163373][T26157] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5744'. [ 963.163391][T26157] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5744'. [ 963.163409][T26157] netlink: 1 bytes leftover after parsing attributes in process `syz.0.5744'. [ 963.260040][T26163] netlink: 'syz.4.5745': attribute type 21 has an invalid length. [ 963.260064][T26163] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5745'. [ 963.294666][T26166] 8021q: adding VLAN 0 to HW filter on device bond19 [ 963.421969][T26170] bond18: (slave veth0_to_bond): Releasing backup interface [ 963.461794][T26170] bond19: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 963.481117][T26163] netlink: 'syz.4.5745': attribute type 4 has an invalid length. [ 963.481139][T26163] netlink: 3 bytes leftover after parsing attributes in process `syz.4.5745'. [ 963.645070][T26175] 8021q: adding VLAN 0 to HW filter on device .` [ 963.667284][T26175] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 963.835906][T26177] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5749'. [ 963.932590][T26191] batman_adv: batadv0: Adding interface: gretap1 [ 963.932610][T26191] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 963.932641][T26191] batman_adv: batadv0: Interface activated: gretap1 [ 964.244999][T26204] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5757'. [ 964.245055][T26204] netlink: 11 bytes leftover after parsing attributes in process `syz.3.5757'. [ 964.367571][T26212] netlink: 'syz.3.5761': attribute type 1 has an invalid length. [ 964.444686][T26212] 8021q: adding VLAN 0 to HW filter on device bond26 [ 964.464725][T26221] bond24: (slave veth0_to_bond): Releasing backup interface [ 964.560682][T26221] bond26: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 964.666892][T26217] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 964.758929][T26228] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5763'. [ 964.895218][T26231] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 964.895636][T26231] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 964.926306][T26234] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5763'. [ 965.952522][T26266] netlink: 'syz.0.5776': attribute type 1 has an invalid length. [ 965.998050][T26266] 8021q: adding VLAN 0 to HW filter on device bond17 [ 966.175761][T26273] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 966.182156][T26273] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 966.212850][T26273] batman_adv: batadv0: Removing interface: gretap1 [ 966.222530][T26273] batman_adv: batadv0: Interface deactivated: gretap3 [ 966.222552][T26273] batman_adv: batadv0: Removing interface: gretap3 [ 966.228247][T26273] batman_adv: batadv0: Interface deactivated: gretap4 [ 966.228292][T26273] batman_adv: batadv0: Removing interface: gretap4 [ 966.695473][T26295] bridge16: entered promiscuous mode [ 966.695525][T26295] bridge16: entered allmulticast mode [ 966.823478][T26304] FAULT_INJECTION: forcing a failure. [ 966.823478][T26304] name failslab, interval 1, probability 0, space 0, times 0 [ 966.823517][T26304] CPU: 1 UID: 0 PID: 26304 Comm: syz.2.5786 Not tainted syzkaller #0 PREEMPT(full) [ 966.823537][T26304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 966.823549][T26304] Call Trace: [ 966.823563][T26304] [ 966.823572][T26304] dump_stack_lvl+0xe8/0x150 [ 966.823601][T26304] should_fail_ex+0x410/0x560 [ 966.823626][T26304] ? __alloc_skb+0x1db/0x7a0 [ 966.823650][T26304] should_failslab+0xa8/0x100 [ 966.823676][T26304] ? __alloc_skb+0x1db/0x7a0 [ 966.823699][T26304] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 966.823730][T26304] ? __alloc_skb+0x18d/0x7a0 [ 966.823754][T26304] ? __alloc_skb+0x1db/0x7a0 [ 966.823786][T26304] __alloc_skb+0x1db/0x7a0 [ 966.823816][T26304] netlink_sendmsg+0x5d4/0xb40 [ 966.823851][T26304] ? __pfx_netlink_sendmsg+0x10/0x10 [ 966.823882][T26304] ? apparmor_socket_sendmsg+0x98/0x360 [ 966.823909][T26304] ? __pfx_netlink_sendmsg+0x10/0x10 [ 966.823930][T26304] sock_sendmsg_nosec+0x14e/0x190 [ 966.823957][T26304] ____sys_sendmsg+0x54e/0x850 [ 966.823991][T26304] ? __pfx_____sys_sendmsg+0x10/0x10 [ 966.824030][T26304] ? import_iovec+0x73/0xa0 [ 966.824059][T26304] ___sys_sendmsg+0x2a5/0x360 [ 966.824087][T26304] ? __lock_acquire+0x747/0x2de0 [ 966.824113][T26304] ? __pfx____sys_sendmsg+0x10/0x10 [ 966.824179][T26304] ? __fget_files+0x2a/0x420 [ 966.824206][T26304] ? __fget_files+0x3a2/0x420 [ 966.824245][T26304] __x64_sys_sendmsg+0x1b1/0x290 [ 966.824275][T26304] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 966.824326][T26304] do_syscall_64+0x166/0x520 [ 966.824345][T26304] ? trace_irq_disable+0x3b/0x140 [ 966.824367][T26304] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 966.824388][T26304] ? clear_bhb_loop+0x70/0xc0 [ 966.824413][T26304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 966.824433][T26304] RIP: 0033:0x7f093c59e199 [ 966.824452][T26304] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 966.824470][T26304] RSP: 002b:00007f093d38f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 966.824493][T26304] RAX: ffffffffffffffda RBX: 00007f093c825fa0 RCX: 00007f093c59e199 [ 966.824508][T26304] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 966.824522][T26304] RBP: 00007f093d38f090 R08: 0000000000000000 R09: 0000000000000000 [ 966.824535][T26304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 966.824548][T26304] R13: 00007f093c826038 R14: 00007f093c825fa0 R15: 00007ffd4d50ae78 [ 966.824588][T26304] [ 966.906231][T26307] FAULT_INJECTION: forcing a failure. [ 966.906231][T26307] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 966.906287][T26307] CPU: 0 UID: 0 PID: 26307 Comm: syz.0.5788 Not tainted syzkaller #0 PREEMPT(full) [ 966.906309][T26307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 966.906322][T26307] Call Trace: [ 966.906330][T26307] [ 966.906339][T26307] dump_stack_lvl+0xe8/0x150 [ 966.906372][T26307] should_fail_ex+0x410/0x560 [ 966.906402][T26307] _copy_from_user+0x2d/0xb0 [ 966.906429][T26307] kstrtouint_from_user+0xd6/0x180 [ 966.906454][T26307] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 966.906485][T26307] ? lock_acquire+0x115/0x350 [ 966.906512][T26307] proc_fail_nth_write+0x8e/0x210 [ 966.906534][T26307] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 966.906562][T26307] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 966.906581][T26307] vfs_write+0x296/0xba0 [ 966.906620][T26307] ? __pfx_vfs_write+0x10/0x10 [ 966.906651][T26307] ? __fget_files+0x2a/0x420 [ 966.906682][T26307] ? __fget_files+0x3a2/0x420 [ 966.906707][T26307] ? __fget_files+0x2a/0x420 [ 966.906743][T26307] ksys_write+0x150/0x270 [ 966.906775][T26307] ? __pfx_ksys_write+0x10/0x10 [ 966.906816][T26307] do_syscall_64+0x166/0x520 [ 966.906834][T26307] ? trace_irq_disable+0x3b/0x140 [ 966.906854][T26307] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 966.906874][T26307] ? clear_bhb_loop+0x70/0xc0 [ 966.906898][T26307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 966.906918][T26307] RIP: 0033:0x7fbda9f5e9ce [ 966.906957][T26307] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 966.906974][T26307] RSP: 002b:00007fbdaae91fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 966.906995][T26307] RAX: ffffffffffffffda RBX: 00007fbdaae926c0 RCX: 00007fbda9f5e9ce [ 966.907010][T26307] RDX: 0000000000000001 RSI: 00007fbdaae920a0 RDI: 0000000000000004 [ 966.907022][T26307] RBP: 00007fbdaae92090 R08: 0000000000000000 R09: 0000000000000000 [ 966.907035][T26307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 966.907055][T26307] R13: 00007fbdaa226038 R14: 00007fbdaa225fa0 R15: 00007fffae0477d8 [ 966.907089][T26307] [ 967.469534][T26322] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 967.589119][T26328] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 967.617569][T26328] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 968.370187][T26368] __nla_validate_parse: 11 callbacks suppressed [ 968.370210][T26368] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5808'. [ 968.668210][T26373] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 969.131607][T26395] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5815'. [ 969.131720][T26395] netlink: 11 bytes leftover after parsing attributes in process `syz.1.5815'. [ 969.145990][T26396] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5814'. [ 970.203061][T26424] syzkaller0: entered promiscuous mode [ 970.203089][T26424] syzkaller0: entered allmulticast mode [ 970.772252][T26444] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5830'. [ 972.010423][ C1] vcan0: j1939_tp_rxtimer: 0xffff888028ead000: rx timeout, send abort [ 972.011090][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888028ead000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 973.882547][T26451] netlink: 'syz.4.5832': attribute type 12 has an invalid length. [ 973.991678][T26463] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5834'. [ 973.991737][T26463] netlink: 11 bytes leftover after parsing attributes in process `syz.0.5834'. [ 974.038597][T26468] FAULT_INJECTION: forcing a failure. [ 974.038597][T26468] name failslab, interval 1, probability 0, space 0, times 0 [ 974.038630][T26468] CPU: 0 UID: 0 PID: 26468 Comm: syz.2.5837 Not tainted syzkaller #0 PREEMPT(full) [ 974.038652][T26468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 974.038665][T26468] Call Trace: [ 974.038674][T26468] [ 974.038683][T26468] dump_stack_lvl+0xe8/0x150 [ 974.038715][T26468] should_fail_ex+0x410/0x560 [ 974.038744][T26468] should_failslab+0xa8/0x100 [ 974.038771][T26468] __kmalloc_cache_node_noprof+0xaa/0x620 [ 974.038792][T26468] ? unwind_get_return_address+0x4d/0x90 [ 974.038816][T26468] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 974.038837][T26468] ? __get_vm_area_node+0x155/0x2f0 [ 974.038864][T26468] ? __get_vm_area_node+0x155/0x2f0 [ 974.038898][T26468] __get_vm_area_node+0x155/0x2f0 [ 974.038932][T26468] __vmalloc_node_range_noprof+0x343/0x1540 [ 974.038964][T26468] ? bpf_prog_calc_tag+0x51/0x370 [ 974.038989][T26468] ? __x64_sys_bpf+0xba/0xd0 [ 974.039008][T26468] ? do_syscall_64+0x166/0x520 [ 974.039041][T26468] ? __kasan_kmalloc+0x93/0xb0 [ 974.039063][T26468] ? bpf_prog_load+0x14d6/0x1c20 [ 974.039083][T26468] ? __sys_bpf+0xd0d/0xd90 [ 974.039100][T26468] ? __x64_sys_bpf+0xba/0xd0 [ 974.039132][T26468] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 974.039174][T26468] ? bpf_prog_calc_tag+0x51/0x370 [ 974.039196][T26468] __vmalloc_noprof+0xd2/0x120 [ 974.039225][T26468] ? bpf_prog_calc_tag+0x51/0x370 [ 974.039254][T26468] bpf_prog_calc_tag+0x51/0x370 [ 974.039277][T26468] ? __pfx_cmp_subprogs+0x10/0x10 [ 974.039304][T26468] check_and_resolve_insns+0xbb/0x21d0 [ 974.039332][T26468] ? add_subprog+0x2e2/0x3f0 [ 974.039358][T26468] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 974.039392][T26468] bpf_check+0x18f9/0x2ef0 [ 974.039431][T26468] ? __pfx_bpf_check+0x10/0x10 [ 974.039456][T26468] ? bpf_obj_name_cpy+0x194/0x1e0 [ 974.039488][T26468] bpf_prog_load+0x14d6/0x1c20 [ 974.039523][T26468] ? __pfx_bpf_prog_load+0x10/0x10 [ 974.039572][T26468] __sys_bpf+0xd0d/0xd90 [ 974.039604][T26468] ? __pfx___sys_bpf+0x10/0x10 [ 974.039639][T26468] ? __fget_files+0x2a/0x420 [ 974.039681][T26468] ? ksys_write+0x242/0x270 [ 974.039713][T26468] ? __pfx_ksys_write+0x10/0x10 [ 974.039745][T26468] __x64_sys_bpf+0xba/0xd0 [ 974.039768][T26468] do_syscall_64+0x166/0x520 [ 974.039785][T26468] ? trace_irq_disable+0x3b/0x140 [ 974.039806][T26468] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 974.039825][T26468] ? clear_bhb_loop+0x70/0xc0 [ 974.039849][T26468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 974.039869][T26468] RIP: 0033:0x7f093c59e199 [ 974.039887][T26468] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 974.039905][T26468] RSP: 002b:00007f093d38f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 974.039926][T26468] RAX: ffffffffffffffda RBX: 00007f093c825fa0 RCX: 00007f093c59e199 [ 974.039940][T26468] RDX: 0000000000000070 RSI: 00002000000000c0 RDI: 0000000000000005 [ 974.039952][T26468] RBP: 00007f093d38f090 R08: 0000000000000000 R09: 0000000000000000 [ 974.039965][T26468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 974.039978][T26468] R13: 00007f093c826038 R14: 00007f093c825fa0 R15: 00007ffd4d50ae78 [ 974.040010][T26468] [ 974.040065][T26468] syz.2.5837: vmalloc error: size 32, align 0x1, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 974.040121][T26468] CPU: 0 UID: 0 PID: 26468 Comm: syz.2.5837 Not tainted syzkaller #0 PREEMPT(full) [ 974.040143][T26468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 974.040155][T26468] Call Trace: [ 974.040164][T26468] [ 974.040172][T26468] dump_stack_lvl+0xe8/0x150 [ 974.040202][T26468] warn_alloc+0x24d/0x270 [ 974.040221][T26468] ? __kasan_kmalloc+0x22/0xb0 [ 974.040248][T26468] ? __pfx_warn_alloc+0x10/0x10 [ 974.040270][T26468] ? __get_vm_area_node+0x155/0x2f0 [ 974.040304][T26468] ? __get_vm_area_node+0x2a9/0x2f0 [ 974.040339][T26468] __vmalloc_node_range_noprof+0x36b/0x1540 [ 974.040369][T26468] ? __x64_sys_bpf+0xba/0xd0 [ 974.040387][T26468] ? do_syscall_64+0x166/0x520 [ 974.040408][T26468] ? __kasan_kmalloc+0x93/0xb0 [ 974.040431][T26468] ? bpf_prog_load+0x14d6/0x1c20 [ 974.040453][T26468] ? __sys_bpf+0xd0d/0xd90 [ 974.040474][T26468] ? __x64_sys_bpf+0xba/0xd0 [ 974.040506][T26468] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 974.040546][T26468] ? bpf_prog_calc_tag+0x51/0x370 [ 974.040568][T26468] __vmalloc_noprof+0xd2/0x120 [ 974.040595][T26468] ? bpf_prog_calc_tag+0x51/0x370 [ 974.040621][T26468] bpf_prog_calc_tag+0x51/0x370 [ 974.040644][T26468] ? __pfx_cmp_subprogs+0x10/0x10 [ 974.040670][T26468] check_and_resolve_insns+0xbb/0x21d0 [ 974.040699][T26468] ? add_subprog+0x2e2/0x3f0 [ 974.040726][T26468] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 974.040757][T26468] bpf_check+0x18f9/0x2ef0 [ 974.040797][T26468] ? __pfx_bpf_check+0x10/0x10 [ 974.040822][T26468] ? bpf_obj_name_cpy+0x194/0x1e0 [ 974.040854][T26468] bpf_prog_load+0x14d6/0x1c20 [ 974.040888][T26468] ? __pfx_bpf_prog_load+0x10/0x10 [ 974.040934][T26468] __sys_bpf+0xd0d/0xd90 [ 974.040965][T26468] ? __pfx___sys_bpf+0x10/0x10 [ 974.040998][T26468] ? __fget_files+0x2a/0x420 [ 974.041048][T26468] ? ksys_write+0x242/0x270 [ 974.041081][T26468] ? __pfx_ksys_write+0x10/0x10 [ 974.041114][T26468] __x64_sys_bpf+0xba/0xd0 [ 974.041138][T26468] do_syscall_64+0x166/0x520 [ 974.041156][T26468] ? trace_irq_disable+0x3b/0x140 [ 974.041177][T26468] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 974.041198][T26468] ? clear_bhb_loop+0x70/0xc0 [ 974.041222][T26468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 974.041241][T26468] RIP: 0033:0x7f093c59e199 [ 974.041258][T26468] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 974.041274][T26468] RSP: 002b:00007f093d38f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 974.041294][T26468] RAX: ffffffffffffffda RBX: 00007f093c825fa0 RCX: 00007f093c59e199 [ 974.041310][T26468] RDX: 0000000000000070 RSI: 00002000000000c0 RDI: 0000000000000005 [ 974.041324][T26468] RBP: 00007f093d38f090 R08: 0000000000000000 R09: 0000000000000000 [ 974.041337][T26468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 974.041349][T26468] R13: 00007f093c826038 R14: 00007f093c825fa0 R15: 00007ffd4d50ae78 [ 974.041383][T26468] [ 974.041417][T26468] Mem-Info: [ 974.041427][T26468] active_anon:8875 inactive_anon:5 isolated_anon:0 [ 974.041427][T26468] active_file:61 inactive_file:43715 isolated_file:0 [ 974.041427][T26468] unevictable:0 dirty:391 writeback:0 [ 974.041427][T26468] slab_reclaimable:11844 slab_unreclaimable:107465 [ 974.041427][T26468] mapped:30692 shmem:541 pagetables:3463 [ 974.041427][T26468] sec_pagetables:0 bounce:0 [ 974.041427][T26468] kernel_misc_reclaimable:0 [ 974.041427][T26468] free:1304356 free_pcp:14997 free_cma:0 [ 974.041481][T26468] Node 0 active_anon:35500kB inactive_anon:20kB active_file:244kB inactive_file:174660kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:122768kB dirty:1564kB writeback:0kB shmem:2164kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15888kB pagetables:13712kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 974.041537][T26468] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 974.041589][T26468] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 974.041649][T26468] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 974.041685][T26468] Node 0 DMA32 free:1266232kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:35500kB inactive_anon:20kB active_file:244kB inactive_file:174660kB unevictable:0kB writepending:1564kB zspages:0kB present:3129332kB managed:2547076kB mlocked:0kB bounce:0kB free_pcp:58984kB local_pcp:27308kB free_cma:0kB [ 974.041743][T26468] lowmem_reserve[]: 0 0 0 0 0 [ 974.041775][T26468] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 974.041829][T26468] lowmem_reserve[]: 0 0 0 0 0 [ 974.041863][T26468] Node 1 Normal free:3935832kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:1004kB local_pcp:0kB free_cma:0kB [ 974.041922][T26468] lowmem_reserve[]: 0 0 0 0 0 [ 974.041955][T26468] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 974.042076][T26468] Node 0 DMA32: 100*4kB (ME) 315*8kB (UME) 291*16kB (UME) 925*32kB (UME) 869*64kB (UME) 499*128kB (UME) 324*256kB (UM) 249*512kB (UME) 194*1024kB (UM) 4*2048kB (UM) 169*4096kB (M) = 1266168kB [ 974.042232][T26468] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 974.042352][T26468] Node 1 Normal: 3*4kB (UM) 2*8kB (UM) 1*16kB (M) 1*32kB (M) 1*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 1*2048kB (U) 959*4096kB (UM) = 3935884kB [ 974.042581][T26468] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 974.042599][T26468] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 974.042616][T26468] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 974.042644][T26468] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 974.042660][T26468] 44315 total pagecache pages [ 974.042668][T26468] 0 pages in swap cache [ 974.042675][T26468] Free swap = 124996kB [ 974.042684][T26468] Total swap = 124996kB [ 974.042692][T26468] 2097051 pages RAM [ 974.042699][T26468] 0 pages HighMem/MovableOnly [ 974.042707][T26468] 428666 pages reserved [ 974.042714][T26468] 0 pages cma reserved [ 974.202935][T26469] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5836'. [ 974.203151][T26471] netlink: 324 bytes leftover after parsing attributes in process `syz.4.5835'. [ 974.299304][ T5731] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 974.334882][ T5731] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 974.554091][T26482] FAULT_INJECTION: forcing a failure. [ 974.554091][T26482] name failslab, interval 1, probability 0, space 0, times 0 [ 974.554124][T26482] CPU: 1 UID: 0 PID: 26482 Comm: syz.1.5839 Not tainted syzkaller #0 PREEMPT(full) [ 974.554147][T26482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 974.554158][T26482] Call Trace: [ 974.554166][T26482] [ 974.554175][T26482] dump_stack_lvl+0xe8/0x150 [ 974.554211][T26482] should_fail_ex+0x410/0x560 [ 974.554240][T26482] should_failslab+0xa8/0x100 [ 974.554266][T26482] __kmalloc_cache_node_noprof+0xaa/0x620 [ 974.554286][T26482] ? unwind_get_return_address+0x4d/0x90 [ 974.554311][T26482] ? __get_vm_area_node+0x155/0x2f0 [ 974.554337][T26482] ? __get_vm_area_node+0x155/0x2f0 [ 974.554369][T26482] __get_vm_area_node+0x155/0x2f0 [ 974.554402][T26482] __vmalloc_node_range_noprof+0x343/0x1540 [ 974.554431][T26482] ? bpf_prog_calc_tag+0x51/0x370 [ 974.554456][T26482] ? format_decode+0xdc/0xda0 [ 974.554493][T26482] ? vsnprintf+0xe42/0xef0 [ 974.554529][T26482] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 974.554559][T26482] ? bpf_verifier_vlog+0x3d1/0x900 [ 974.554586][T26482] ? bpf_prog_calc_tag+0x51/0x370 [ 974.554606][T26482] __vmalloc_noprof+0xd2/0x120 [ 974.554635][T26482] ? bpf_prog_calc_tag+0x51/0x370 [ 974.554660][T26482] bpf_prog_calc_tag+0x51/0x370 [ 974.554687][T26482] check_and_resolve_insns+0xbb/0x21d0 [ 974.554714][T26482] ? add_subprog+0x2e2/0x3f0 [ 974.554739][T26482] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 974.554773][T26482] bpf_check+0x18f9/0x2ef0 [ 974.554810][T26482] ? __pfx_bpf_check+0x10/0x10 [ 974.554834][T26482] ? bpf_obj_name_cpy+0x194/0x1e0 [ 974.554863][T26482] bpf_prog_load+0x14d6/0x1c20 [ 974.554897][T26482] ? __pfx_bpf_prog_load+0x10/0x10 [ 974.554940][T26482] __sys_bpf+0xd0d/0xd90 [ 974.554967][T26482] ? __pfx___sys_bpf+0x10/0x10 [ 974.554998][T26482] ? __fget_files+0x2a/0x420 [ 974.555040][T26482] ? ksys_write+0x242/0x270 [ 974.555072][T26482] ? __pfx_ksys_write+0x10/0x10 [ 974.555104][T26482] __x64_sys_bpf+0xba/0xd0 [ 974.555126][T26482] do_syscall_64+0x166/0x520 [ 974.555144][T26482] ? trace_irq_disable+0x3b/0x140 [ 974.555164][T26482] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 974.555184][T26482] ? clear_bhb_loop+0x70/0xc0 [ 974.555208][T26482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 974.555227][T26482] RIP: 0033:0x7f70fd59e199 [ 974.555245][T26482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 974.555262][T26482] RSP: 002b:00007f70fe415028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 974.555282][T26482] RAX: ffffffffffffffda RBX: 00007f70fd825fa0 RCX: 00007f70fd59e199 [ 974.555297][T26482] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 974.555310][T26482] RBP: 00007f70fe415090 R08: 0000000000000000 R09: 0000000000000000 [ 974.555322][T26482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 974.555335][T26482] R13: 00007f70fd826038 R14: 00007f70fd825fa0 R15: 00007ffe2b69d538 [ 974.555365][T26482] [ 974.703841][ T25] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 974.815037][ T25] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 975.165271][T26498] tipc: Enabling of bearer rejected, failed to enable media [ 975.627967][T26512] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5848'. [ 975.664691][T26514] netlink: 260 bytes leftover after parsing attributes in process `syz.0.5849'. [ 975.680806][T26512] netlink: 388 bytes leftover after parsing attributes in process `syz.2.5848'. [ 975.833257][T26526] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5848'. [ 975.992440][T26533] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 976.150185][T26540] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5853'. [ 976.150304][T26540] netlink: 11 bytes leftover after parsing attributes in process `syz.1.5853'. [ 976.170445][T26541] netlink: 'syz.2.5855': attribute type 12 has an invalid length. [ 976.421458][T26545] syzkaller0: left promiscuous mode [ 976.421473][T26545] syzkaller0: left allmulticast mode [ 976.552993][T26550] netlink: 'syz.0.5858': attribute type 12 has an invalid length. [ 976.727473][T26556] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 976.858668][T26558] netlink: 'syz.3.5860': attribute type 1 has an invalid length. [ 977.130495][T26574] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 977.292221][T26579] IPv6: NLM_F_CREATE should be specified when creating new route [ 977.292310][T26579] IPv6: Can't replace route, no match found [ 977.407919][T26583] IPv6: Can't replace route, no match found [ 978.071474][T26611] FAULT_INJECTION: forcing a failure. [ 978.071474][T26611] name failslab, interval 1, probability 0, space 0, times 0 [ 978.071508][T26611] CPU: 1 UID: 0 PID: 26611 Comm: syz.1.5878 Not tainted syzkaller #0 PREEMPT(full) [ 978.071530][T26611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 978.071542][T26611] Call Trace: [ 978.071550][T26611] [ 978.071560][T26611] dump_stack_lvl+0xe8/0x150 [ 978.071591][T26611] should_fail_ex+0x410/0x560 [ 978.071623][T26611] should_failslab+0xa8/0x100 [ 978.071650][T26611] __kmalloc_cache_noprof+0xa3/0x600 [ 978.071672][T26611] ? bpf_prog_alloc_no_stats+0xd8/0x560 [ 978.071695][T26611] ? bpf_prog_alloc_no_stats+0xd8/0x560 [ 978.071726][T26611] bpf_prog_alloc_no_stats+0xd8/0x560 [ 978.071746][T26611] ? bpf_prog_alloc+0x2a/0x1a0 [ 978.071770][T26611] bpf_prog_alloc+0x3c/0x1a0 [ 978.071794][T26611] bpf_prog_load+0x7f8/0x1c20 [ 978.071829][T26611] ? __pfx_bpf_prog_load+0x10/0x10 [ 978.071876][T26611] __sys_bpf+0xd0d/0xd90 [ 978.071907][T26611] ? __pfx___sys_bpf+0x10/0x10 [ 978.071941][T26611] ? __fget_files+0x2a/0x420 [ 978.071985][T26611] ? ksys_write+0x242/0x270 [ 978.072018][T26611] ? __pfx_ksys_write+0x10/0x10 [ 978.072052][T26611] __x64_sys_bpf+0xba/0xd0 [ 978.072075][T26611] do_syscall_64+0x166/0x520 [ 978.072102][T26611] ? trace_irq_disable+0x3b/0x140 [ 978.072121][T26611] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 978.072142][T26611] ? clear_bhb_loop+0x70/0xc0 [ 978.072167][T26611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 978.072186][T26611] RIP: 0033:0x7f70fd59e199 [ 978.072205][T26611] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 978.072223][T26611] RSP: 002b:00007f70fe415028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 978.072246][T26611] RAX: ffffffffffffffda RBX: 00007f70fd825fa0 RCX: 00007f70fd59e199 [ 978.072260][T26611] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 978.072274][T26611] RBP: 00007f70fe415090 R08: 0000000000000000 R09: 0000000000000000 [ 978.072287][T26611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 978.072299][T26611] R13: 00007f70fd826038 R14: 00007f70fd825fa0 R15: 00007ffe2b69d538 [ 978.072332][T26611] [ 978.316889][T26623] netlink: 'syz.4.5883': attribute type 1 has an invalid length. [ 978.799437][T26648] FAULT_INJECTION: forcing a failure. [ 978.799437][T26648] name failslab, interval 1, probability 0, space 0, times 0 [ 978.799472][T26648] CPU: 0 UID: 0 PID: 26648 Comm: syz.4.5892 Not tainted syzkaller #0 PREEMPT(full) [ 978.799493][T26648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 978.799504][T26648] Call Trace: [ 978.799513][T26648] [ 978.799530][T26648] dump_stack_lvl+0xe8/0x150 [ 978.799563][T26648] should_fail_ex+0x410/0x560 [ 978.799591][T26648] should_failslab+0xa8/0x100 [ 978.799619][T26648] __kmalloc_cache_node_noprof+0xaa/0x620 [ 978.799641][T26648] ? __get_vm_area_node+0x155/0x2f0 [ 978.799667][T26648] ? __get_vm_area_node+0x155/0x2f0 [ 978.799699][T26648] __get_vm_area_node+0x155/0x2f0 [ 978.799733][T26648] __vmalloc_node_range_noprof+0x343/0x1540 [ 978.799764][T26648] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 978.799787][T26648] ? __lock_acquire+0x747/0x2de0 [ 978.799832][T26648] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 978.799871][T26648] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 978.799893][T26648] __vmalloc_noprof+0xd2/0x120 [ 978.799922][T26648] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 978.799948][T26648] bpf_prog_alloc_no_stats+0x47/0x560 [ 978.799968][T26648] ? bpf_prog_alloc+0x2a/0x1a0 [ 978.799993][T26648] bpf_prog_alloc+0x3c/0x1a0 [ 978.800017][T26648] bpf_prog_load+0x7f8/0x1c20 [ 978.800051][T26648] ? __pfx_bpf_prog_load+0x10/0x10 [ 978.800099][T26648] __sys_bpf+0xd0d/0xd90 [ 978.800129][T26648] ? __pfx___sys_bpf+0x10/0x10 [ 978.800160][T26648] ? __fget_files+0x2a/0x420 [ 978.800203][T26648] ? ksys_write+0x242/0x270 [ 978.800239][T26648] ? __pfx_ksys_write+0x10/0x10 [ 978.800271][T26648] __x64_sys_bpf+0xba/0xd0 [ 978.800295][T26648] do_syscall_64+0x166/0x520 [ 978.800313][T26648] ? trace_irq_disable+0x3b/0x140 [ 978.800333][T26648] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 978.800354][T26648] ? clear_bhb_loop+0x70/0xc0 [ 978.800377][T26648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 978.800396][T26648] RIP: 0033:0x7f230259e199 [ 978.800414][T26648] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 978.800432][T26648] RSP: 002b:00007f23034e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 978.800454][T26648] RAX: ffffffffffffffda RBX: 00007f2302825fa0 RCX: 00007f230259e199 [ 978.800469][T26648] RDX: 0000000000000094 RSI: 00002000000004c0 RDI: 0000000000000005 [ 978.800482][T26648] RBP: 00007f23034e2090 R08: 0000000000000000 R09: 0000000000000000 [ 978.800495][T26648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 978.800508][T26648] R13: 00007f2302826038 R14: 00007f2302825fa0 R15: 00007ffe68fb5a28 [ 978.800547][T26648] [ 979.456876][T26652] 8021q: adding VLAN 0 to HW filter on device bond0 [ 979.482613][T26652] 8021q: adding VLAN 0 to HW filter on device team0 [ 979.615397][T26652] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 979.615423][T26652] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 979.620670][T26652] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 979.862611][T26675] netlink: 'syz.2.5900': attribute type 12 has an invalid length. [ 979.913447][T26677] netlink: 'syz.4.5901': attribute type 12 has an invalid length. [ 979.933200][T26679] __nla_validate_parse: 8 callbacks suppressed [ 979.933225][T26679] netlink: 988 bytes leftover after parsing attributes in process `syz.0.5902'. [ 980.159162][T26685] netlink: 324 bytes leftover after parsing attributes in process `syz.1.5905'. [ 980.361539][T26691] netlink: 'syz.0.5906': attribute type 12 has an invalid length. [ 980.412517][T26693] bond28: entered promiscuous mode [ 980.414185][T26693] 8021q: adding VLAN 0 to HW filter on device bond28 [ 980.425007][T26693] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5907'. [ 980.650721][T26703] netlink: 'syz.3.5911': attribute type 1 has an invalid length. [ 980.671795][T26704] netlink: 'syz.4.5910': attribute type 1 has an invalid length. [ 980.689433][T26703] 8021q: adding VLAN 0 to HW filter on device bond27 [ 980.748528][T26704] bond29: option mode: invalid value (10) [ 980.757207][T26704] bond29 (unregistering): Released all slaves [ 980.780307][T26710] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5911'. [ 980.850161][T26703] bond26: (slave veth0_to_bond): Releasing backup interface [ 980.868332][T26703] bond27: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 981.088516][T26727] batman_adv: batadv0: Adding interface: gretap2 [ 981.088536][T26727] batman_adv: batadv0: The MTU of interface gretap2 is too small (1242) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1312 would solve the problem. [ 981.088569][T26727] batman_adv: batadv0: Interface activated: gretap2 [ 981.719829][T26752] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 981.786712][T26755] netlink: 324 bytes leftover after parsing attributes in process `syz.2.5925'. [ 981.804992][T26757] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5926'. [ 982.214446][T26778] netlink: 'syz.4.5930': attribute type 1 has an invalid length. [ 982.252390][T26778] bond29: option mode: invalid value (10) [ 982.257084][T26778] bond29 (unregistering): Released all slaves [ 982.693325][T26797] netlink: 'syz.3.5937': attribute type 1 has an invalid length. [ 982.731486][T26797] 8021q: adding VLAN 0 to HW filter on device bond28 [ 982.758748][T26797] bond27: (slave veth0_to_bond): Releasing backup interface [ 982.769873][T26797] bond28: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 982.779393][T26797] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5937'. [ 983.203343][T26818] FAULT_INJECTION: forcing a failure. [ 983.203343][T26818] name failslab, interval 1, probability 0, space 0, times 0 [ 983.203379][T26818] CPU: 1 UID: 0 PID: 26818 Comm: syz.2.5945 Not tainted syzkaller #0 PREEMPT(full) [ 983.203401][T26818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 983.203413][T26818] Call Trace: [ 983.203421][T26818] [ 983.203431][T26818] dump_stack_lvl+0xe8/0x150 [ 983.203464][T26818] should_fail_ex+0x410/0x560 [ 983.203493][T26818] should_failslab+0xa8/0x100 [ 983.203521][T26818] __kmalloc_noprof+0xfe/0x720 [ 983.203539][T26818] ? __kmalloc_cache_noprof+0x14d/0x600 [ 983.203556][T26818] ? sctp_auth_set_key+0x295/0x950 [ 983.203703][T26818] ? sctp_auth_set_key+0x295/0x950 [ 983.203730][T26818] sctp_auth_set_key+0x295/0x950 [ 983.203748][T26818] ? __pfx_rwsem_set_nonspinnable+0x3/0x10 [ 983.203785][T26818] sctp_setsockopt_auth_key+0x212/0x630 [ 983.203871][T26818] sctp_setsockopt+0x52d/0x12c0 [ 983.203895][T26818] ? sock_common_setsockopt+0x36/0xc0 [ 983.203917][T26818] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 983.203941][T26818] do_sock_setsockopt+0x17c/0x1b0 [ 983.203969][T26818] __x64_sys_setsockopt+0x13d/0x1b0 [ 983.203999][T26818] do_syscall_64+0x166/0x520 [ 983.204017][T26818] ? trace_irq_disable+0x3b/0x140 [ 983.204036][T26818] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 983.204056][T26818] ? clear_bhb_loop+0x70/0xc0 [ 983.204081][T26818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 983.204099][T26818] RIP: 0033:0x7f093c59e199 [ 983.204117][T26818] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 983.204134][T26818] RSP: 002b:00007f093d38f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 983.204154][T26818] RAX: ffffffffffffffda RBX: 00007f093c825fa0 RCX: 00007f093c59e199 [ 983.204169][T26818] RDX: 0000000000000017 RSI: 0000000000000084 RDI: 0000000000000003 [ 983.204181][T26818] RBP: 00007f093d38f090 R08: 000000000000000b R09: 0000000000000000 [ 983.204194][T26818] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000001 [ 983.204207][T26818] R13: 00007f093c826038 R14: 00007f093c825fa0 R15: 00007ffd4d50ae78 [ 983.204234][T26818] [ 983.541404][T26824] netlink: 'syz.0.5946': attribute type 12 has an invalid length. [ 983.762190][T26831] ip_tables: iptables: counters copy to user failed while replacing table [ 983.890329][T26838] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5951'. [ 983.894844][T26837] netlink: 'syz.1.5950': attribute type 1 has an invalid length. [ 983.961641][T26843] netlink: 100 bytes leftover after parsing attributes in process `syz.4.5951'. [ 983.961752][T26843] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5951'. [ 984.048770][T26837] 8021q: adding VLAN 0 to HW filter on device bond25 [ 984.075377][T26841] bond24: (slave veth0_to_bond): Releasing backup interface [ 984.145424][T26841] bond25: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 984.178683][T26852] bond28: (slave veth0_to_bond): Releasing backup interface [ 984.228982][T26853] bridge13: entered promiscuous mode [ 984.297681][T26856] bridge15: entered promiscuous mode [ 984.391541][T26860] x_tables: duplicate underflow at hook 4 [ 984.407454][T26860] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 984.491051][T26862] netlink: 'syz.3.5957': attribute type 10 has an invalid length. [ 984.516784][T26862] geneve2: entered promiscuous mode [ 984.516809][T26862] geneve2: entered allmulticast mode [ 984.534653][T23354] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 38014 - 0 [ 984.534992][T23364] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 38014 - 0 [ 984.535030][T23364] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 38014 - 0 [ 984.535063][T23364] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 38014 - 0 [ 984.809864][T26879] FAULT_INJECTION: forcing a failure. [ 984.809864][T26879] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 984.809897][T26879] CPU: 0 UID: 0 PID: 26879 Comm: syz.2.5963 Not tainted syzkaller #0 PREEMPT(full) [ 984.809919][T26879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 984.809931][T26879] Call Trace: [ 984.809939][T26879] [ 984.809949][T26879] dump_stack_lvl+0xe8/0x150 [ 984.809982][T26879] should_fail_ex+0x410/0x560 [ 984.810012][T26879] prepare_alloc_pages+0x223/0x600 [ 984.810040][T26879] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 984.810067][T26879] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 984.810088][T26879] ? __alloc_frozen_pages_noprof+0x29e/0x5a0 [ 984.810115][T26879] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 984.810141][T26879] ? __pfx_policy_nodemask+0x10/0x10 [ 984.810165][T26879] ? __get_vm_area_node+0x155/0x2f0 [ 984.810195][T26879] ? __vmalloc_node_range_noprof+0x343/0x1540 [ 984.810224][T26879] ? __vmalloc_noprof+0xd2/0x120 [ 984.810255][T26879] __alloc_pages_noprof+0x10/0x100 [ 984.810279][T26879] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 984.810308][T26879] ? alloc_pages_noprof+0x140/0x2b0 [ 984.810338][T26879] __kasan_populate_vmalloc+0xb7/0x1c0 [ 984.810365][T26879] alloc_vmap_area+0xd1a/0x1420 [ 984.810408][T26879] ? __pfx_alloc_vmap_area+0x10/0x10 [ 984.810438][T26879] ? __kmalloc_cache_node_noprof+0x3d1/0x620 [ 984.810461][T26879] ? __kmalloc_cache_node_noprof+0x1f7/0x620 [ 984.810481][T26879] ? __get_vm_area_node+0x155/0x2f0 [ 984.810512][T26879] __get_vm_area_node+0x200/0x2f0 [ 984.810548][T26879] __vmalloc_node_range_noprof+0x343/0x1540 [ 984.810575][T26879] ? bpf_prog_calc_tag+0x51/0x370 [ 984.810599][T26879] ? __x64_sys_bpf+0xba/0xd0 [ 984.810617][T26879] ? do_syscall_64+0x166/0x520 [ 984.810638][T26879] ? __kasan_kmalloc+0x93/0xb0 [ 984.810659][T26879] ? bpf_prog_load+0x14d6/0x1c20 [ 984.810680][T26879] ? __sys_bpf+0xd0d/0xd90 [ 984.810699][T26879] ? __x64_sys_bpf+0xba/0xd0 [ 984.810730][T26879] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 984.810772][T26879] ? bpf_prog_calc_tag+0x51/0x370 [ 984.810794][T26879] __vmalloc_noprof+0xd2/0x120 [ 984.810823][T26879] ? bpf_prog_calc_tag+0x51/0x370 [ 984.810850][T26879] bpf_prog_calc_tag+0x51/0x370 [ 984.810873][T26879] ? __pfx_cmp_subprogs+0x10/0x10 [ 984.810901][T26879] check_and_resolve_insns+0xbb/0x21d0 [ 984.810930][T26879] ? add_subprog+0x2e2/0x3f0 [ 984.810957][T26879] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 984.810991][T26879] bpf_check+0x18f9/0x2ef0 [ 984.811032][T26879] ? __pfx_bpf_check+0x10/0x10 [ 984.811057][T26879] ? bpf_obj_name_cpy+0x194/0x1e0 [ 984.811089][T26879] bpf_prog_load+0x14d6/0x1c20 [ 984.811125][T26879] ? __pfx_bpf_prog_load+0x10/0x10 [ 984.811175][T26879] __sys_bpf+0xd0d/0xd90 [ 984.811207][T26879] ? __pfx___sys_bpf+0x10/0x10 [ 984.811242][T26879] ? __fget_files+0x2a/0x420 [ 984.811288][T26879] ? ksys_write+0x242/0x270 [ 984.811320][T26879] ? __pfx_ksys_write+0x10/0x10 [ 984.811356][T26879] __x64_sys_bpf+0xba/0xd0 [ 984.811380][T26879] do_syscall_64+0x166/0x520 [ 984.811399][T26879] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 984.811426][T26879] ? clear_bhb_loop+0x70/0xc0 [ 984.811451][T26879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 984.811471][T26879] RIP: 0033:0x7f093c59e199 [ 984.811491][T26879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 984.811509][T26879] RSP: 002b:00007f093d38f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 984.811532][T26879] RAX: ffffffffffffffda RBX: 00007f093c825fa0 RCX: 00007f093c59e199 [ 984.811548][T26879] RDX: 0000000000000094 RSI: 0000200000000680 RDI: 0000000000000005 [ 984.811562][T26879] RBP: 00007f093d38f090 R08: 0000000000000000 R09: 0000000000000000 [ 984.811575][T26879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 984.811589][T26879] R13: 00007f093c826038 R14: 00007f093c825fa0 R15: 00007ffd4d50ae78 [ 984.811623][T26879] [ 984.825286][T26879] warn_alloc: 2 callbacks suppressed [ 984.825306][T26879] syz.2.5963: vmalloc error: size 160, align 0x1, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 984.825367][T26879] CPU: 0 UID: 0 PID: 26879 Comm: syz.2.5963 Not tainted syzkaller #0 PREEMPT(full) [ 984.825389][T26879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 984.825426][T26879] Call Trace: [ 984.825434][T26879] [ 984.825444][T26879] dump_stack_lvl+0xe8/0x150 [ 984.825476][T26879] warn_alloc+0x24d/0x270 [ 984.825498][T26879] ? lockdep_hardirqs_on+0x7b/0x110 [ 984.825530][T26879] ? __pfx_warn_alloc+0x10/0x10 [ 984.825549][T26879] ? kfree+0x1c5/0x650 [ 984.825583][T26879] ? __get_vm_area_node+0x219/0x2f0 [ 984.825618][T26879] __vmalloc_node_range_noprof+0x36b/0x1540 [ 984.825648][T26879] ? __x64_sys_bpf+0xba/0xd0 [ 984.825666][T26879] ? do_syscall_64+0x166/0x520 [ 984.825689][T26879] ? __kasan_kmalloc+0x93/0xb0 [ 984.825712][T26879] ? bpf_prog_load+0x14d6/0x1c20 [ 984.825732][T26879] ? __sys_bpf+0xd0d/0xd90 [ 984.825750][T26879] ? __x64_sys_bpf+0xba/0xd0 [ 984.825782][T26879] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 984.825821][T26879] ? bpf_prog_calc_tag+0x51/0x370 [ 984.825843][T26879] __vmalloc_noprof+0xd2/0x120 [ 984.825871][T26879] ? bpf_prog_calc_tag+0x51/0x370 [ 984.825897][T26879] bpf_prog_calc_tag+0x51/0x370 [ 984.825918][T26879] ? __pfx_cmp_subprogs+0x10/0x10 [ 984.825945][T26879] check_and_resolve_insns+0xbb/0x21d0 [ 984.825972][T26879] ? add_subprog+0x2e2/0x3f0 [ 984.825998][T26879] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 984.826031][T26879] bpf_check+0x18f9/0x2ef0 [ 984.826069][T26879] ? __pfx_bpf_check+0x10/0x10 [ 984.826093][T26879] ? bpf_obj_name_cpy+0x194/0x1e0 [ 984.826127][T26879] bpf_prog_load+0x14d6/0x1c20 [ 984.826162][T26879] ? __pfx_bpf_prog_load+0x10/0x10 [ 984.826208][T26879] __sys_bpf+0xd0d/0xd90 [ 984.826238][T26879] ? __pfx___sys_bpf+0x10/0x10 [ 984.826272][T26879] ? __fget_files+0x2a/0x420 [ 984.826315][T26879] ? ksys_write+0x242/0x270 [ 984.826346][T26879] ? __pfx_ksys_write+0x10/0x10 [ 984.826380][T26879] __x64_sys_bpf+0xba/0xd0 [ 984.826402][T26879] do_syscall_64+0x166/0x520 [ 984.826426][T26879] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 984.826446][T26879] ? clear_bhb_loop+0x70/0xc0 [ 984.826471][T26879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 984.826490][T26879] RIP: 0033:0x7f093c59e199 [ 984.826509][T26879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 984.826527][T26879] RSP: 002b:00007f093d38f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 984.826547][T26879] RAX: ffffffffffffffda RBX: 00007f093c825fa0 RCX: 00007f093c59e199 [ 984.826562][T26879] RDX: 0000000000000094 RSI: 0000200000000680 RDI: 0000000000000005 [ 984.826575][T26879] RBP: 00007f093d38f090 R08: 0000000000000000 R09: 0000000000000000 [ 984.826588][T26879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 984.826600][T26879] R13: 00007f093c826038 R14: 00007f093c825fa0 R15: 00007ffd4d50ae78 [ 984.826631][T26879] [ 984.828244][T26879] Mem-Info: [ 984.828279][T26879] active_anon:7665 inactive_anon:5 isolated_anon:0 [ 984.828279][T26879] active_file:61 inactive_file:43721 isolated_file:0 [ 984.828279][T26879] unevictable:0 dirty:399 writeback:0 [ 984.828279][T26879] slab_reclaimable:11637 slab_unreclaimable:106728 [ 984.828279][T26879] mapped:29758 shmem:523 pagetables:3491 [ 984.828279][T26879] sec_pagetables:0 bounce:0 [ 984.828279][T26879] kernel_misc_reclaimable:0 [ 984.828279][T26879] free:1305058 free_pcp:16693 free_cma:0 [ 984.828331][T26879] Node 0 active_anon:30660kB inactive_anon:20kB active_file:244kB inactive_file:174684kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:119032kB dirty:1596kB writeback:0kB shmem:2092kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16272kB pagetables:13824kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 984.828385][T26879] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 984.828455][T26879] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 984.828512][T26879] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 984.828547][T26879] Node 0 DMA32 free:1268232kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:30660kB inactive_anon:20kB active_file:244kB inactive_file:174684kB unevictable:0kB writepending:1596kB zspages:0kB present:3129332kB managed:2547076kB mlocked:0kB bounce:0kB free_pcp:66524kB local_pcp:2528kB free_cma:0kB [ 984.829886][T26879] lowmem_reserve[]: 0 0 0 0 0 [ 984.829921][T26879] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 984.830037][T26879] lowmem_reserve[]: 0 0 0 0 0 [ 984.830071][T26879] Node 1 Normal free:3936640kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 984.830128][T26879] lowmem_reserve[]: 0 0 0 0 0 [ 984.830161][T26879] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 984.830291][T26879] Node 0 DMA32: 1500*4kB (UME) 1110*8kB (UME) 499*16kB (UME) 1237*32kB (UME) 405*64kB (UME) 506*128kB (UME) 347*256kB (UME) 248*512kB (UME) 194*1024kB (UM) 4*2048kB (UM) 169*4096kB (M) = 1268016kB [ 984.830770][T26879] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 984.830864][T26879] Node 1 Normal: 2*4kB (M) 1*8kB (M) 1*16kB (M) 3*32kB (UM) 10*64kB (UM) 3*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 1*2048kB (U) 959*4096kB (UM) = 3936640kB [ 984.831008][T26879] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 984.831024][T26879] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 984.831040][T26879] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 984.831056][T26879] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 984.832308][T26879] 44301 total pagecache pages [ 984.832319][T26879] 0 pages in swap cache [ 984.832327][T26879] Free swap = 124996kB [ 984.832334][T26879] Total swap = 124996kB [ 984.832343][T26879] 2097051 pages RAM [ 984.832350][T26879] 0 pages HighMem/MovableOnly [ 984.832357][T26879] 428666 pages reserved [ 984.832365][T26879] 0 pages cma reserved [ 985.735672][T26887] syzkaller0: entered promiscuous mode [ 985.735701][T26887] syzkaller0: entered allmulticast mode [ 986.030399][T26899] validate_nla: 1 callbacks suppressed [ 986.030503][T26899] netlink: 'syz.1.5966': attribute type 1 has an invalid length. [ 986.149893][T26903] __nla_validate_parse: 5 callbacks suppressed [ 986.149916][T26903] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5966'. [ 988.409211][T26895] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5965'. [ 988.409238][T26895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5965'. [ 988.409254][T26895] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5965'. [ 988.409267][T26895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5965'. [ 988.409283][T26895] netlink: 2 bytes leftover after parsing attributes in process `syz.3.5965'. [ 988.409401][T26895] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5965'. [ 988.409411][T26895] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5965'. [ 988.410346][T26899] workqueue: Failed to create a rescuer kthread for wq "bond26": -EINTR [ 988.469322][T26902] bond25: (slave veth0_to_bond): Releasing backup interface [ 988.567538][T26904] bridge17: entered promiscuous mode [ 988.784383][T26922] netlink: 'syz.3.5971': attribute type 12 has an invalid length. [ 989.035256][T26936] netlink: 'syz.0.5974': attribute type 1 has an invalid length. [ 989.091447][T26936] 8021q: adding VLAN 0 to HW filter on device bond19 [ 989.121680][T26936] bridge15: entered promiscuous mode [ 989.132016][T26936] bond19: (slave bridge15): Enslaving as an active interface with an up link [ 989.183010][T26934] netlink: 'syz.1.5975': attribute type 1 has an invalid length. [ 989.183038][T26934] netlink: 'syz.1.5975': attribute type 2 has an invalid length. [ 989.249135][T26949] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5976'. [ 989.296113][T26949] vlan2: entered allmulticast mode [ 989.296135][T26949] bond0: entered allmulticast mode [ 989.342626][T26957] syzkaller0: entered promiscuous mode [ 989.342649][T26957] syzkaller0: entered allmulticast mode [ 989.523987][T26962] netlink: 'syz.2.5982': attribute type 1 has an invalid length. [ 989.647998][T26969] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5982'. [ 989.680866][T26962] 8021q: adding VLAN 0 to HW filter on device bond20 [ 989.779137][T26966] bond19: (slave veth0_to_bond): Releasing backup interface [ 989.799788][T26966] bond20: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 989.832344][T26969] bridge8: entered promiscuous mode [ 989.849852][T26969] bond20: (slave bridge8): Enslaving as an active interface with an up link [ 989.892506][T26970] bridge13: entered promiscuous mode [ 990.101062][T26978] FAULT_INJECTION: forcing a failure. [ 990.101062][T26978] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 990.101094][T26978] CPU: 1 UID: 0 PID: 26978 Comm: syz.4.5985 Not tainted syzkaller #0 PREEMPT(full) [ 990.101115][T26978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 990.101126][T26978] Call Trace: [ 990.101135][T26978] [ 990.101144][T26978] dump_stack_lvl+0xe8/0x150 [ 990.101178][T26978] should_fail_ex+0x410/0x560 [ 990.101206][T26978] _copy_from_iter+0x1d3/0x1660 [ 990.101229][T26978] ? __alloc_skb+0x27a/0x7a0 [ 990.101255][T26978] ? __alloc_skb+0x27a/0x7a0 [ 990.101281][T26978] ? __alloc_skb+0x27a/0x7a0 [ 990.101304][T26978] ? __pfx__copy_from_iter+0x10/0x10 [ 990.101325][T26978] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 990.101355][T26978] ? __alloc_skb+0x27a/0x7a0 [ 990.101377][T26978] ? __alloc_skb+0x27a/0x7a0 [ 990.101406][T26978] ? netlink_sendmsg+0x650/0xb40 [ 990.101427][T26978] ? skb_put+0x112/0x210 [ 990.101455][T26978] netlink_sendmsg+0x6c0/0xb40 [ 990.101485][T26978] ? __pfx_netlink_sendmsg+0x10/0x10 [ 990.101513][T26978] ? apparmor_socket_sendmsg+0x18b/0x360 [ 990.101538][T26978] ? __pfx_netlink_sendmsg+0x10/0x10 [ 990.101558][T26978] sock_sendmsg_nosec+0x14e/0x190 [ 990.101583][T26978] ____sys_sendmsg+0x54e/0x850 [ 990.101618][T26978] ? __pfx_____sys_sendmsg+0x10/0x10 [ 990.101655][T26978] ? import_iovec+0x73/0xa0 [ 990.101684][T26978] ___sys_sendmsg+0x2a5/0x360 [ 990.101711][T26978] ? __lock_acquire+0x747/0x2de0 [ 990.101737][T26978] ? __pfx____sys_sendmsg+0x10/0x10 [ 990.101801][T26978] ? __fget_files+0x2a/0x420 [ 990.101828][T26978] ? __fget_files+0x3a2/0x420 [ 990.101866][T26978] __x64_sys_sendmsg+0x1b1/0x290 [ 990.101898][T26978] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 990.101947][T26978] do_syscall_64+0x166/0x520 [ 990.101967][T26978] ? trace_irq_disable+0x3b/0x140 [ 990.101987][T26978] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 990.102007][T26978] ? clear_bhb_loop+0x70/0xc0 [ 990.102032][T26978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 990.102059][T26978] RIP: 0033:0x7f230259e199 [ 990.102078][T26978] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 990.102096][T26978] RSP: 002b:00007f23034e2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 990.102119][T26978] RAX: ffffffffffffffda RBX: 00007f2302825fa0 RCX: 00007f230259e199 [ 990.102134][T26978] RDX: 0000000020000000 RSI: 0000200000000240 RDI: 0000000000000005 [ 990.102149][T26978] RBP: 00007f23034e2090 R08: 0000000000000000 R09: 0000000000000000 [ 990.102163][T26978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 990.102174][T26978] R13: 00007f2302826038 R14: 00007f2302825fa0 R15: 00007ffe68fb5a28 [ 990.102204][T26978] [ 990.258557][T26984] x_tables: duplicate underflow at hook 4 [ 990.261254][T26984] netlink: 'syz.4.5988': attribute type 2 has an invalid length. [ 990.263073][T26986] netlink: 'syz.4.5988': attribute type 2 has an invalid length. [ 990.436859][T26992] bond_slave_0: entered promiscuous mode [ 990.436882][T26992] bond_slave_0: entered allmulticast mode [ 990.441914][T26992] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 990.840297][T27008] bridge13: entered promiscuous mode [ 991.207297][T27023] __nla_validate_parse: 1 callbacks suppressed [ 991.207318][T27023] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6002'. [ 991.234512][T27023] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6002'. [ 991.244168][T23366] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 991.244520][T23359] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 991.244557][T23359] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 991.244590][T23359] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 991.417014][T27032] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6005'. [ 991.617230][T27041] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 991.702578][T27047] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6012'. [ 991.809910][T27053] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 991.899059][T27056] geneve5: entered promiscuous mode [ 991.899083][T27056] geneve5: entered allmulticast mode [ 992.007199][T27063] syzkaller0: left promiscuous mode [ 992.007225][T27063] syzkaller0: left allmulticast mode [ 992.010874][T27063] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6017'. [ 992.282522][T27070] batman_adv: batadv0: Adding interface: gretap4 [ 992.282543][T27070] batman_adv: batadv0: The MTU of interface gretap4 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 992.282576][T27070] batman_adv: batadv0: Interface activated: gretap4 [ 992.454468][T27079] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6023'. [ 992.454496][T27079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6023'. [ 992.551967][T27086] FAULT_INJECTION: forcing a failure. [ 992.551967][T27086] name failslab, interval 1, probability 0, space 0, times 0 [ 992.551998][T27086] CPU: 0 UID: 0 PID: 27086 Comm: syz.4.6024 Not tainted syzkaller #0 PREEMPT(full) [ 992.552018][T27086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 992.552030][T27086] Call Trace: [ 992.552037][T27086] [ 992.552045][T27086] dump_stack_lvl+0xe8/0x150 [ 992.552076][T27086] should_fail_ex+0x410/0x560 [ 992.552103][T27086] should_failslab+0xa8/0x100 [ 992.552130][T27086] __kmalloc_noprof+0xfe/0x720 [ 992.552147][T27086] ? rcu_is_watching+0x16/0xb0 [ 992.552173][T27086] ? tomoyo_realpath_from_path+0xef/0x640 [ 992.552200][T27086] ? tomoyo_realpath_from_path+0xef/0x640 [ 992.552235][T27086] tomoyo_realpath_from_path+0xef/0x640 [ 992.552273][T27086] ? tomoyo_path_number_perm+0x219/0x5f0 [ 992.552297][T27086] tomoyo_path_number_perm+0x246/0x5f0 [ 992.552323][T27086] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 992.552344][T27086] ? __lock_acquire+0x747/0x2de0 [ 992.552380][T27086] ? hook_file_ioctl+0x1f2/0x600 [ 992.552427][T27086] ? __fget_files+0x2a/0x420 [ 992.552458][T27086] ? __fget_files+0x2a/0x420 [ 992.552484][T27086] ? __fget_files+0x3a2/0x420 [ 992.552509][T27086] ? __fget_files+0x2a/0x420 [ 992.552541][T27086] security_file_ioctl+0xc3/0x2a0 [ 992.552565][T27086] __se_sys_ioctl+0x47/0x170 [ 992.552590][T27086] do_syscall_64+0x166/0x520 [ 992.552610][T27086] ? trace_irq_disable+0x3b/0x140 [ 992.552630][T27086] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 992.552651][T27086] ? clear_bhb_loop+0x70/0xc0 [ 992.552676][T27086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 992.552696][T27086] RIP: 0033:0x7f230259e199 [ 992.552714][T27086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 992.552731][T27086] RSP: 002b:00007f23034e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 992.552753][T27086] RAX: ffffffffffffffda RBX: 00007f2302825fa0 RCX: 00007f230259e199 [ 992.552768][T27086] RDX: 00002000000003c0 RSI: 0000000000008955 RDI: 0000000000000003 [ 992.552782][T27086] RBP: 00007f23034e2090 R08: 0000000000000000 R09: 0000000000000000 [ 992.552795][T27086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 992.552807][T27086] R13: 00007f2302826038 R14: 00007f2302825fa0 R15: 00007ffe68fb5a28 [ 992.552848][T27086] [ 992.552900][T27086] ERROR: Out of memory at tomoyo_realpath_from_path. [ 992.835597][T27097] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 992.966638][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.511740][ T5617] block nbd4: Receive control failed (result -22) [ 993.527519][T27113] nbd4: detected capacity change from 0 to 32 [ 993.552553][ T1998] block nbd4: Dead connection, failed to find a fallback [ 993.552582][ T1998] block nbd4: shutting down sockets [ 993.552841][ T1998] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 993.557739][ T1998] Buffer I/O error on dev nbd4, logical block 0, async page read [ 993.562807][ T1998] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 993.562841][ T1998] Buffer I/O error on dev nbd4, logical block 0, async page read [ 993.563320][ T1998] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 993.563356][ T1998] Buffer I/O error on dev nbd4, logical block 0, async page read [ 993.564381][ T1998] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 993.564409][ T1998] Buffer I/O error on dev nbd4, logical block 0, async page read [ 993.565420][ T1998] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 993.565447][ T1998] Buffer I/O error on dev nbd4, logical block 0, async page read [ 993.565743][ T1998] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 993.565768][ T1998] Buffer I/O error on dev nbd4, logical block 0, async page read [ 993.567410][ T1998] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 993.567438][ T1998] Buffer I/O error on dev nbd4, logical block 0, async page read [ 993.572034][ T1998] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 993.572068][ T1998] Buffer I/O error on dev nbd4, logical block 0, async page read [ 993.572130][T27085] ldm_validate_partition_table(): Disk read failed. [ 993.572299][ T1998] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 993.572323][ T1998] Buffer I/O error on dev nbd4, logical block 0, async page read [ 993.572471][ T1998] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 993.572495][ T1998] Buffer I/O error on dev nbd4, logical block 0, async page read [ 993.572727][T27085] Dev nbd4: unable to read RDB block 0 [ 993.574729][T27085] nbd4: unable to read partition table [ 993.589420][T27113] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6032'. [ 993.662889][T27085] ldm_validate_partition_table(): Disk read failed. [ 993.665181][T27085] Dev nbd4: unable to read RDB block 0 [ 993.666476][T27085] nbd4: unable to read partition table [ 993.950012][T27120] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 993.951175][T27121] netlink: 'syz.2.6035': attribute type 12 has an invalid length. [ 994.097407][T27124] FAULT_INJECTION: forcing a failure. [ 994.097407][T27124] name failslab, interval 1, probability 0, space 0, times 0 [ 994.097441][T27124] CPU: 1 UID: 0 PID: 27124 Comm: syz.4.6036 Not tainted syzkaller #0 PREEMPT(full) [ 994.097463][T27124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 994.097481][T27124] Call Trace: [ 994.097489][T27124] [ 994.097499][T27124] dump_stack_lvl+0xe8/0x150 [ 994.097532][T27124] should_fail_ex+0x410/0x560 [ 994.097561][T27124] should_failslab+0xa8/0x100 [ 994.097587][T27124] __kmalloc_noprof+0xfe/0x720 [ 994.097608][T27124] ? bpf_test_init+0x9f/0x150 [ 994.097702][T27124] ? bpf_test_init+0x9f/0x150 [ 994.097728][T27124] bpf_test_init+0x9f/0x150 [ 994.097754][T27124] bpf_prog_test_run_flow_dissector+0x209/0x610 [ 994.097788][T27124] ? lock_acquire+0x115/0x350 [ 994.097813][T27124] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 994.097840][T27124] ? __fget_files+0x2a/0x420 [ 994.097870][T27124] ? __fget_files+0x2a/0x420 [ 994.097896][T27124] ? __fget_files+0x3a2/0x420 [ 994.097922][T27124] ? __fget_files+0x2a/0x420 [ 994.097953][T27124] ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10 [ 994.097980][T27124] bpf_prog_test_run+0x2c5/0x340 [ 994.098008][T27124] __sys_bpf+0xa22/0xd90 [ 994.098040][T27124] ? __pfx___sys_bpf+0x10/0x10 [ 994.098074][T27124] ? __fget_files+0x2a/0x420 [ 994.098118][T27124] ? ksys_write+0x242/0x270 [ 994.098151][T27124] ? __pfx_ksys_write+0x10/0x10 [ 994.098185][T27124] __x64_sys_bpf+0xba/0xd0 [ 994.098217][T27124] do_syscall_64+0x166/0x520 [ 994.098235][T27124] ? trace_irq_disable+0x3b/0x140 [ 994.098255][T27124] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 994.098274][T27124] ? clear_bhb_loop+0x70/0xc0 [ 994.098298][T27124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 994.098319][T27124] RIP: 0033:0x7f230259e199 [ 994.098338][T27124] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 994.098354][T27124] RSP: 002b:00007f23034e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 994.098375][T27124] RAX: ffffffffffffffda RBX: 00007f2302825fa0 RCX: 00007f230259e199 [ 994.098389][T27124] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 994.098402][T27124] RBP: 00007f23034e2090 R08: 0000000000000000 R09: 0000000000000000 [ 994.098415][T27124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 994.098427][T27124] R13: 00007f2302826038 R14: 00007f2302825fa0 R15: 00007ffe68fb5a28 [ 994.098458][T27124] [ 994.420999][T27127] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 994.600388][T27139] FAULT_INJECTION: forcing a failure. [ 994.600388][T27139] name failslab, interval 1, probability 0, space 0, times 0 [ 994.600424][T27139] CPU: 1 UID: 0 PID: 27139 Comm: syz.1.6040 Not tainted syzkaller #0 PREEMPT(full) [ 994.600447][T27139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 994.600459][T27139] Call Trace: [ 994.600468][T27139] [ 994.600477][T27139] dump_stack_lvl+0xe8/0x150 [ 994.600511][T27139] should_fail_ex+0x410/0x560 [ 994.600541][T27139] should_failslab+0xa8/0x100 [ 994.600569][T27139] __kmalloc_node_noprof+0x100/0x720 [ 994.600589][T27139] ? __get_vm_area_node+0x200/0x2f0 [ 994.600617][T27139] ? __get_vm_area_node+0x283/0x2f0 [ 994.600643][T27139] ? __vmalloc_node_range_noprof+0x5b4/0x1540 [ 994.600670][T27139] ? __vmalloc_node_range_noprof+0x5b4/0x1540 [ 994.600710][T27139] __vmalloc_node_range_noprof+0x5b4/0x1540 [ 994.600742][T27139] ? __x64_sys_bpf+0xba/0xd0 [ 994.600771][T27139] ? bpf_prog_load+0x14d6/0x1c20 [ 994.600791][T27139] ? __sys_bpf+0xd0d/0xd90 [ 994.600824][T27139] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 994.600860][T27139] ? bpf_prog_calc_tag+0x51/0x370 [ 994.600882][T27139] __vmalloc_noprof+0xd2/0x120 [ 994.600912][T27139] ? bpf_prog_calc_tag+0x51/0x370 [ 994.600937][T27139] bpf_prog_calc_tag+0x51/0x370 [ 994.600960][T27139] ? __pfx_cmp_subprogs+0x10/0x10 [ 994.600988][T27139] check_and_resolve_insns+0xbb/0x21d0 [ 994.601017][T27139] ? add_subprog+0x2e2/0x3f0 [ 994.601044][T27139] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 994.601079][T27139] bpf_check+0x18f9/0x2ef0 [ 994.601120][T27139] ? __pfx_bpf_check+0x10/0x10 [ 994.601146][T27139] ? bpf_obj_name_cpy+0x194/0x1e0 [ 994.601185][T27139] bpf_prog_load+0x14d6/0x1c20 [ 994.601222][T27139] ? __pfx_bpf_prog_load+0x10/0x10 [ 994.601270][T27139] __sys_bpf+0xd0d/0xd90 [ 994.601302][T27139] ? __pfx___sys_bpf+0x10/0x10 [ 994.601337][T27139] ? __fget_files+0x2a/0x420 [ 994.601383][T27139] ? ksys_write+0x242/0x270 [ 994.601416][T27139] ? __pfx_ksys_write+0x10/0x10 [ 994.601453][T27139] __x64_sys_bpf+0xba/0xd0 [ 994.601476][T27139] do_syscall_64+0x166/0x520 [ 994.601496][T27139] ? trace_irq_disable+0x3b/0x140 [ 994.601516][T27139] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 994.601538][T27139] ? clear_bhb_loop+0x70/0xc0 [ 994.601564][T27139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 994.601584][T27139] RIP: 0033:0x7f70fd59e199 [ 994.601603][T27139] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 994.601621][T27139] RSP: 002b:00007f70fe415028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 994.601644][T27139] RAX: ffffffffffffffda RBX: 00007f70fd825fa0 RCX: 00007f70fd59e199 [ 994.601659][T27139] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 994.601673][T27139] RBP: 00007f70fe415090 R08: 0000000000000000 R09: 0000000000000000 [ 994.601687][T27139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 994.601699][T27139] R13: 00007f70fd826038 R14: 00007f70fd825fa0 R15: 00007ffe2b69d538 [ 994.601733][T27139] [ 994.959536][T27141] netlink: 988 bytes leftover after parsing attributes in process `syz.2.6042'. [ 995.128194][T27149] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6045'. [ 995.147989][T27154] batadv_slave_1: entered promiscuous mode [ 995.150185][T27152] batadv_slave_1: left promiscuous mode [ 995.257614][T27159] bridge17: entered promiscuous mode [ 995.293371][T27161] bridge16: entered promiscuous mode [ 995.759378][T27192] FAULT_INJECTION: forcing a failure. [ 995.759378][T27192] name failslab, interval 1, probability 0, space 0, times 0 [ 995.759412][T27192] CPU: 1 UID: 0 PID: 27192 Comm: syz.4.6060 Not tainted syzkaller #0 PREEMPT(full) [ 995.759435][T27192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 995.759448][T27192] Call Trace: [ 995.759456][T27192] [ 995.759466][T27192] dump_stack_lvl+0xe8/0x150 [ 995.759499][T27192] should_fail_ex+0x410/0x560 [ 995.759529][T27192] should_failslab+0xa8/0x100 [ 995.759560][T27192] __kmalloc_cache_node_noprof+0xaa/0x620 [ 995.759580][T27192] ? unwind_get_return_address+0x4d/0x90 [ 995.759604][T27192] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 995.759624][T27192] ? __get_vm_area_node+0x155/0x2f0 [ 995.759649][T27192] ? __get_vm_area_node+0x155/0x2f0 [ 995.759681][T27192] __get_vm_area_node+0x155/0x2f0 [ 995.759712][T27192] __vmalloc_node_range_noprof+0x343/0x1540 [ 995.759741][T27192] ? bpf_prog_calc_tag+0x51/0x370 [ 995.759764][T27192] ? __x64_sys_bpf+0xba/0xd0 [ 995.759781][T27192] ? do_syscall_64+0x166/0x520 [ 995.759805][T27192] ? __kasan_kmalloc+0x93/0xb0 [ 995.759827][T27192] ? bpf_prog_load+0x14d6/0x1c20 [ 995.759848][T27192] ? __sys_bpf+0xd0d/0xd90 [ 995.759866][T27192] ? __x64_sys_bpf+0xba/0xd0 [ 995.759895][T27192] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 995.759936][T27192] ? bpf_prog_calc_tag+0x51/0x370 [ 995.759958][T27192] __vmalloc_noprof+0xd2/0x120 [ 995.759985][T27192] ? bpf_prog_calc_tag+0x51/0x370 [ 995.760011][T27192] bpf_prog_calc_tag+0x51/0x370 [ 995.760032][T27192] ? __pfx_cmp_subprogs+0x10/0x10 [ 995.760059][T27192] check_and_resolve_insns+0xbb/0x21d0 [ 995.760094][T27192] ? add_subprog+0x2e2/0x3f0 [ 995.760120][T27192] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 995.760154][T27192] bpf_check+0x18f9/0x2ef0 [ 995.760195][T27192] ? __pfx_bpf_check+0x10/0x10 [ 995.760219][T27192] ? bpf_obj_name_cpy+0x194/0x1e0 [ 995.760250][T27192] bpf_prog_load+0x14d6/0x1c20 [ 995.760286][T27192] ? __pfx_bpf_prog_load+0x10/0x10 [ 995.760334][T27192] __sys_bpf+0xd0d/0xd90 [ 995.760366][T27192] ? __pfx___sys_bpf+0x10/0x10 [ 995.760399][T27192] ? __fget_files+0x2a/0x420 [ 995.760443][T27192] ? ksys_write+0x242/0x270 [ 995.760475][T27192] ? __pfx_ksys_write+0x10/0x10 [ 995.760508][T27192] __x64_sys_bpf+0xba/0xd0 [ 995.760531][T27192] do_syscall_64+0x166/0x520 [ 995.760549][T27192] ? trace_irq_disable+0x3b/0x140 [ 995.760567][T27192] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 995.760586][T27192] ? clear_bhb_loop+0x70/0xc0 [ 995.760610][T27192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 995.760630][T27192] RIP: 0033:0x7f230259e199 [ 995.760648][T27192] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 995.760665][T27192] RSP: 002b:00007f23034e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 995.760687][T27192] RAX: ffffffffffffffda RBX: 00007f2302825fa0 RCX: 00007f230259e199 [ 995.760701][T27192] RDX: 0000000000000094 RSI: 0000200000000680 RDI: 0000000000000005 [ 995.760714][T27192] RBP: 00007f23034e2090 R08: 0000000000000000 R09: 0000000000000000 [ 995.760727][T27192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 995.760739][T27192] R13: 00007f2302826038 R14: 00007f2302825fa0 R15: 00007ffe68fb5a28 [ 995.760770][T27192] [ 995.777485][T27192] warn_alloc: 1 callbacks suppressed [ 995.777506][T27192] syz.4.6060: vmalloc error: size 128, align 0x1, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 995.777566][T27192] CPU: 1 UID: 0 PID: 27192 Comm: syz.4.6060 Not tainted syzkaller #0 PREEMPT(full) [ 995.777588][T27192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 995.777601][T27192] Call Trace: [ 995.777609][T27192] [ 995.777618][T27192] dump_stack_lvl+0xe8/0x150 [ 995.777652][T27192] warn_alloc+0x24d/0x270 [ 995.777674][T27192] ? __kasan_kmalloc+0x22/0xb0 [ 995.777700][T27192] ? __pfx_warn_alloc+0x10/0x10 [ 995.777718][T27192] ? __get_vm_area_node+0x155/0x2f0 [ 995.777752][T27192] ? __get_vm_area_node+0x2a9/0x2f0 [ 995.777787][T27192] __vmalloc_node_range_noprof+0x36b/0x1540 [ 995.777818][T27192] ? __x64_sys_bpf+0xba/0xd0 [ 995.777835][T27192] ? do_syscall_64+0x166/0x520 [ 995.777860][T27192] ? __kasan_kmalloc+0x93/0xb0 [ 995.777882][T27192] ? bpf_prog_load+0x14d6/0x1c20 [ 995.777903][T27192] ? __sys_bpf+0xd0d/0xd90 [ 995.777921][T27192] ? __x64_sys_bpf+0xba/0xd0 [ 995.777953][T27192] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 995.777993][T27192] ? bpf_prog_calc_tag+0x51/0x370 [ 995.778015][T27192] __vmalloc_noprof+0xd2/0x120 [ 995.778043][T27192] ? bpf_prog_calc_tag+0x51/0x370 [ 995.778069][T27192] bpf_prog_calc_tag+0x51/0x370 [ 995.778098][T27192] ? __pfx_cmp_subprogs+0x10/0x10 [ 995.778126][T27192] check_and_resolve_insns+0xbb/0x21d0 [ 995.778153][T27192] ? add_subprog+0x2e2/0x3f0 [ 995.778179][T27192] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 995.778212][T27192] bpf_check+0x18f9/0x2ef0 [ 995.778250][T27192] ? __pfx_bpf_check+0x10/0x10 [ 995.778272][T27192] ? bpf_obj_name_cpy+0x194/0x1e0 [ 995.778300][T27192] bpf_prog_load+0x14d6/0x1c20 [ 995.778331][T27192] ? __pfx_bpf_prog_load+0x10/0x10 [ 995.778372][T27192] __sys_bpf+0xd0d/0xd90 [ 995.778400][T27192] ? __pfx___sys_bpf+0x10/0x10 [ 995.778435][T27192] ? __fget_files+0x2a/0x420 [ 995.778481][T27192] ? ksys_write+0x242/0x270 [ 995.778513][T27192] ? __pfx_ksys_write+0x10/0x10 [ 995.778544][T27192] __x64_sys_bpf+0xba/0xd0 [ 995.778564][T27192] do_syscall_64+0x166/0x520 [ 995.778581][T27192] ? trace_irq_disable+0x3b/0x140 [ 995.778600][T27192] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 995.778619][T27192] ? clear_bhb_loop+0x70/0xc0 [ 995.778641][T27192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 995.778659][T27192] RIP: 0033:0x7f230259e199 [ 995.778678][T27192] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 995.778693][T27192] RSP: 002b:00007f23034e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 995.778713][T27192] RAX: ffffffffffffffda RBX: 00007f2302825fa0 RCX: 00007f230259e199 [ 995.778727][T27192] RDX: 0000000000000094 RSI: 0000200000000680 RDI: 0000000000000005 [ 995.778739][T27192] RBP: 00007f23034e2090 R08: 0000000000000000 R09: 0000000000000000 [ 995.778751][T27192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 995.778761][T27192] R13: 00007f2302826038 R14: 00007f2302825fa0 R15: 00007ffe68fb5a28 [ 995.778788][T27192] [ 995.781900][T27192] Mem-Info: [ 995.781915][T27192] active_anon:6607 inactive_anon:5 isolated_anon:0 [ 995.781915][T27192] active_file:61 inactive_file:43725 isolated_file:0 [ 995.781915][T27192] unevictable:0 dirty:326 writeback:0 [ 995.781915][T27192] slab_reclaimable:11536 slab_unreclaimable:107674 [ 995.781915][T27192] mapped:30790 shmem:524 pagetables:3453 [ 995.781915][T27192] sec_pagetables:0 bounce:0 [ 995.781915][T27192] kernel_misc_reclaimable:0 [ 995.781915][T27192] free:1309472 free_pcp:12201 free_cma:0 [ 995.788040][T27192] Node 0 active_anon:26428kB inactive_anon:20kB active_file:244kB inactive_file:174700kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:123160kB dirty:1304kB writeback:0kB shmem:2096kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16356kB pagetables:13672kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 995.788108][T27192] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 995.788160][T27192] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 995.788218][T27192] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 995.788250][T27192] Node 0 DMA32 free:1285640kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:26428kB inactive_anon:20kB active_file:244kB inactive_file:174700kB unevictable:0kB writepending:1304kB zspages:0kB present:3129332kB managed:2547076kB mlocked:0kB bounce:0kB free_pcp:48808kB local_pcp:30572kB free_cma:0kB [ 995.788307][T27192] lowmem_reserve[]: 0 0 0 0 0 [ 995.788342][T27192] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 995.788395][T27192] lowmem_reserve[]: 0 0 0 0 0 [ 995.788425][T27192] Node 1 Normal free:3936888kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 995.788484][T27192] lowmem_reserve[]: 0 0 0 0 0 [ 995.788517][T27192] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 995.788631][T27192] Node 0 DMA32: 1600*4kB (UME) 1229*8kB (UME) 398*16kB (ME) 884*32kB (UME) 784*64kB (UME) 525*128kB (UME) 349*256kB (UME) 248*512kB (UME) 194*1024kB (UM) 5*2048kB (UM) 169*4096kB (M) = 1285704kB [ 995.788787][T27192] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 995.788883][T27192] Node 1 Normal: 2*4kB (M) 2*8kB (UM) 8*16kB (UM) 7*32kB (UM) 10*64kB (UM) 3*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 1*2048kB (U) 959*4096kB (UM) = 3936888kB [ 995.789038][T27192] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 995.789055][T27192] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 995.789081][T27192] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 995.789098][T27192] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 995.789115][T27192] 44306 total pagecache pages [ 995.789124][T27192] 0 pages in swap cache [ 995.789131][T27192] Free swap = 124996kB [ 995.789139][T27192] Total swap = 124996kB [ 995.789148][T27192] 2097051 pages RAM [ 995.789156][T27192] 0 pages HighMem/MovableOnly [ 995.789163][T27192] 428666 pages reserved [ 995.789171][T27192] 0 pages cma reserved [ 996.072279][T27198] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 996.293301][T27201] __nla_validate_parse: 5 callbacks suppressed [ 996.293323][T27201] netlink: 108 bytes leftover after parsing attributes in process `syz.3.6063'. [ 996.480785][T27205] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6064'. [ 996.942020][T27218] netlink: 'syz.4.6068': attribute type 1 has an invalid length. [ 997.019819][T27218] bond29: option mode: invalid value (9) [ 997.026384][T27218] bond29 (unregistering): Released all slaves [ 997.113151][T27221] tipc: Enabled bearer , priority 0 [ 997.225705][T27234] netlink: 'syz.3.6072': attribute type 1 has an invalid length. [ 997.236545][T27233] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6071'. [ 997.295468][T27226] syzkaller0: entered promiscuous mode [ 997.295497][T27226] syzkaller0: entered allmulticast mode [ 997.297244][T27226] tipc: Resetting bearer [ 997.343839][T27238] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6072'. [ 997.387505][T27234] 8021q: adding VLAN 0 to HW filter on device bond29 [ 997.395090][T27235] bond29: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 997.396851][T27219] tipc: Resetting bearer [ 997.581515][T27245] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1000.027805][T27219] tipc: Disabling bearer [ 1000.129363][T27258] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6078'. [ 1000.374461][T27274] lo speed is unknown, defaulting to 1000 [ 1000.414549][T27274] lo speed is unknown, defaulting to 1000 [ 1000.466096][T27274] lo speed is unknown, defaulting to 1000 [ 1000.467161][T27279] netlink: 'syz.2.6084': attribute type 1 has an invalid length. [ 1000.806162][ T9037] lo speed is unknown, defaulting to 1000 [ 1000.806227][ T9037] syz0: Port: 1 Link DOWN [ 1000.812738][T27274] infiniband syz0: set down [ 1000.812760][T27274] infiniband syz0: added lo [ 1000.854085][T27274] [ 1000.856468][T27274] ====================================================== [ 1000.863504][T27274] WARNING: possible circular locking dependency detected [ 1000.870659][T27274] syzkaller #0 Not tainted [ 1000.875068][T27274] ------------------------------------------------------ [ 1000.882113][T27274] syz.2.6084/27274 is trying to acquire lock: [ 1000.888165][T27274] ffffffff8ee90400 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_noprof+0xbc/0x720 [ 1000.896997][T27274] [ 1000.896997][T27274] but task is already holding lock: [ 1000.904343][T27274] ffffffff8ebf9100 (wq_pool_mutex){+.+.}-{4:4}, at: __alloc_workqueue+0xa4f/0x1fe0 [ 1000.913645][T27274] [ 1000.913645][T27274] which lock already depends on the new lock. [ 1000.913645][T27274] [ 1000.924058][T27274] [ 1000.924058][T27274] the existing dependency chain (in reverse order) is: [ 1000.933065][T27274] [ 1000.933065][T27274] -> #7 (wq_pool_mutex){+.+.}-{4:4}: [ 1000.940643][T27274] __mutex_lock+0x19d/0x1550 [ 1000.945754][T27274] __alloc_workqueue+0xa4f/0x1fe0 [ 1000.951327][T27274] alloc_workqueue_noprof+0xe3/0x210 [ 1000.957136][T27274] padata_alloc+0xbe/0x360 [ 1000.962090][T27274] pcrypt_init_padata+0x27/0x100 [ 1000.967598][T27274] pcrypt_init+0x60/0xc0 [ 1000.972460][T27274] do_one_initcall+0x250/0x870 [ 1000.977745][T27274] do_initcall_level+0x10a/0x1a0 [ 1000.983267][T27274] do_initcalls+0x59/0xa0 [ 1000.988400][T27274] kernel_init_freeable+0x29d/0x3e0 [ 1000.994123][T27274] kernel_init+0x22/0x1d0 [ 1000.998978][T27274] ret_from_fork+0x514/0xb70 [ 1001.004125][T27274] ret_from_fork_asm+0x1a/0x30 [ 1001.009415][T27274] [ 1001.009415][T27274] -> #6 (cpu_hotplug_lock){++++}-{0:0}: [ 1001.017138][T27274] cpus_read_lock+0x42/0x160 [ 1001.022356][T27274] static_key_slow_inc+0x12/0x30 [ 1001.027828][T27274] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 1001.034164][T27274] nbd_genl_foreach_sock+0x265/0x450 [ 1001.039965][T27274] nbd_genl_reconfigure+0xbbb/0x1040 [ 1001.045766][T27274] genl_family_rcv_msg_doit+0x233/0x340 [ 1001.051830][T27274] genl_rcv_msg+0x614/0x7a0 [ 1001.056847][T27274] netlink_rcv_skb+0x226/0x4a0 [ 1001.062122][T27274] genl_rcv+0x28/0x40 [ 1001.066619][T27274] netlink_unicast+0x7bd/0x940 [ 1001.071898][T27274] netlink_sendmsg+0x813/0xb40 [ 1001.077175][T27274] sock_sendmsg_nosec+0x14e/0x190 [ 1001.082712][T27274] ____sys_sendmsg+0x54e/0x850 [ 1001.087999][T27274] ___sys_sendmsg+0x2a5/0x360 [ 1001.093207][T27274] __x64_sys_sendmsg+0x1b1/0x290 [ 1001.098687][T27274] do_syscall_64+0x166/0x520 [ 1001.103796][T27274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1001.110204][T27274] [ 1001.110204][T27274] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 1001.117843][T27274] __mutex_lock+0x19d/0x1550 [ 1001.122948][T27274] nbd_queue_rq+0x373/0xff0 [ 1001.127962][T27274] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1001.134115][T27274] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1001.140993][T27274] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1001.147497][T27274] blk_mq_run_work_fn+0x16c/0x300 [ 1001.153039][T27274] process_scheduled_works+0xc3d/0x1630 [ 1001.159097][T27274] worker_thread+0xa47/0xfb0 [ 1001.164206][T27274] kthread+0x38b/0x480 [ 1001.168788][T27274] ret_from_fork+0x514/0xb70 [ 1001.173896][T27274] ret_from_fork_asm+0x1a/0x30 [ 1001.179176][T27274] [ 1001.179176][T27274] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 1001.186380][T27274] __mutex_lock+0x19d/0x1550 [ 1001.191656][T27274] nbd_queue_rq+0xc1/0xff0 [ 1001.196586][T27274] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1001.202649][T27274] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1001.209500][T27274] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1001.215998][T27274] blk_mq_run_work_fn+0x16c/0x300 [ 1001.221542][T27274] process_scheduled_works+0xc3d/0x1630 [ 1001.227604][T27274] worker_thread+0xa47/0xfb0 [ 1001.232712][T27274] kthread+0x38b/0x480 [ 1001.237293][T27274] ret_from_fork+0x514/0xb70 [ 1001.242405][T27274] ret_from_fork_asm+0x1a/0x30 [ 1001.247688][T27274] [ 1001.247688][T27274] -> #3 (set->srcu){.+.+}-{0:0}: [ 1001.254805][T27274] __synchronize_srcu+0xc9/0x2f0 [ 1001.260253][T27274] elevator_switch+0x1e8/0x7b0 [ 1001.265607][T27274] elevator_change+0x2fa/0x480 [ 1001.270888][T27274] elevator_set_default+0x375/0x440 [ 1001.276617][T27274] blk_register_queue+0x3f3/0x4e0 [ 1001.282271][T27274] __add_disk+0x6b8/0xdb0 [ 1001.287160][T27274] add_disk_fwnode+0x100/0x3a0 [ 1001.292443][T27274] nbd_dev_add+0x733/0xb60 [ 1001.297373][T27274] nbd_init+0x168/0x1f0 [ 1001.302116][T27274] do_one_initcall+0x250/0x870 [ 1001.307396][T27274] do_initcall_level+0x10a/0x1a0 [ 1001.312853][T27274] do_initcalls+0x59/0xa0 [ 1001.317703][T27274] kernel_init_freeable+0x29d/0x3e0 [ 1001.323437][T27274] kernel_init+0x22/0x1d0 [ 1001.328312][T27274] ret_from_fork+0x514/0xb70 [ 1001.333434][T27274] ret_from_fork_asm+0x1a/0x30 [ 1001.338726][T27274] [ 1001.338726][T27274] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 1001.346600][T27274] __mutex_lock+0x19d/0x1550 [ 1001.351704][T27274] elevator_change+0x1af/0x480 [ 1001.356979][T27274] elevator_set_none+0xb5/0x140 [ 1001.362342][T27274] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 1001.368663][T27274] nbd_start_device+0x189/0xb30 [ 1001.374036][T27274] nbd_genl_connect+0x167d/0x1cd0 [ 1001.379569][T27274] genl_family_rcv_msg_doit+0x233/0x340 [ 1001.385631][T27274] genl_rcv_msg+0x614/0x7a0 [ 1001.390660][T27274] netlink_rcv_skb+0x226/0x4a0 [ 1001.395937][T27274] genl_rcv+0x28/0x40 [ 1001.400431][T27274] netlink_unicast+0x7bd/0x940 [ 1001.405700][T27274] netlink_sendmsg+0x813/0xb40 [ 1001.410973][T27274] sock_sendmsg_nosec+0x14e/0x190 [ 1001.416507][T27274] ____sys_sendmsg+0x54e/0x850 [ 1001.421787][T27274] ___sys_sendmsg+0x2a5/0x360 [ 1001.426977][T27274] __x64_sys_sendmsg+0x1b1/0x290 [ 1001.432432][T27274] do_syscall_64+0x166/0x520 [ 1001.437532][T27274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1001.443936][T27274] [ 1001.443936][T27274] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 1001.452650][T27274] blk_alloc_queue+0x544/0x690 [ 1001.457930][T27274] __blk_mq_alloc_disk+0x194/0x390 [ 1001.463564][T27274] nbd_dev_add+0x494/0xb60 [ 1001.468496][T27274] nbd_init+0x168/0x1f0 [ 1001.473170][T27274] do_one_initcall+0x250/0x870 [ 1001.478447][T27274] do_initcall_level+0x10a/0x1a0 [ 1001.483899][T27274] do_initcalls+0x59/0xa0 [ 1001.488736][T27274] kernel_init_freeable+0x29d/0x3e0 [ 1001.494440][T27274] kernel_init+0x22/0x1d0 [ 1001.499284][T27274] ret_from_fork+0x514/0xb70 [ 1001.504390][T27274] ret_from_fork_asm+0x1a/0x30 [ 1001.509670][T27274] [ 1001.509670][T27274] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 1001.516871][T27274] __lock_acquire+0x164c/0x2de0 [ 1001.522233][T27274] lock_acquire+0x115/0x350 [ 1001.527242][T27274] fs_reclaim_acquire+0x71/0x100 [ 1001.532696][T27274] __kmalloc_noprof+0xbc/0x720 [ 1001.537967][T27274] apply_wqattrs_prepare+0xee/0xdc0 [ 1001.543680][T27274] __alloc_workqueue+0x11be/0x1fe0 [ 1001.549296][T27274] alloc_workqueue_noprof+0xe3/0x210 [ 1001.555095][T27274] ib_mad_init_device+0x993/0x2150 [ 1001.560800][T27274] add_client_context+0x37c/0x7b0 [ 1001.566400][T27274] enable_device_and_get+0x19c/0x3e0 [ 1001.572508][T27274] ib_register_device+0xdc8/0x1080 [ 1001.578433][T27274] rxe_register_device+0x1e3/0x350 [ 1001.584161][T27274] rxe_net_add+0x81/0x110 [ 1001.589048][T27274] rxe_newlink+0xf4/0x1c0 [ 1001.593943][T27274] nldev_newlink+0x5be/0x650 [ 1001.599081][T27274] rdma_nl_rcv+0x6ef/0xa40 [ 1001.604050][T27274] netlink_unicast+0x7bd/0x940 [ 1001.609323][T27274] netlink_sendmsg+0x813/0xb40 [ 1001.614599][T27274] sock_sendmsg_nosec+0x14e/0x190 [ 1001.620134][T27274] ____sys_sendmsg+0x54e/0x850 [ 1001.625424][T27274] ___sys_sendmsg+0x2a5/0x360 [ 1001.630618][T27274] __x64_sys_sendmsg+0x1b1/0x290 [ 1001.636072][T27274] do_syscall_64+0x166/0x520 [ 1001.641175][T27274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1001.647579][T27274] [ 1001.647579][T27274] other info that might help us debug this: [ 1001.647579][T27274] [ 1001.657791][T27274] Chain exists of: [ 1001.657791][T27274] fs_reclaim --> cpu_hotplug_lock --> wq_pool_mutex [ 1001.657791][T27274] [ 1001.670298][T27274] Possible unsafe locking scenario: [ 1001.670298][T27274] [ 1001.677813][T27274] CPU0 CPU1 [ 1001.683209][T27274] ---- ---- [ 1001.688560][T27274] lock(wq_pool_mutex); [ 1001.692795][T27274] lock(cpu_hotplug_lock); [ 1001.699805][T27274] lock(wq_pool_mutex); [ 1001.706572][T27274] lock(fs_reclaim); [ 1001.710569][T27274] [ 1001.710569][T27274] *** DEADLOCK *** [ 1001.710569][T27274] [ 1001.718699][T27274] locks held by syz.2.6084/27274: 6, last CPU#0: [ 1001.725095][T27274] #0: ffffffff9ad7fae8 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x33d/0xa40 [ 1001.735120][T27274] #1: ffffffff8ffb0828 (link_ops_rwsem){++++}-{4:4}, at: nldev_newlink+0x42b/0x650 [ 1001.744524][T27274] #2: ffffffff8ffa1948 (devices_rwsem){++++}-{4:4}, at: enable_device_and_get+0xff/0x3e0 [ 1001.754435][T27274] #3: ffffffff8ffa1c48 (clients_rwsem){++++}-{4:4}, at: enable_device_and_get+0x165/0x3e0 [ 1001.764463][T27274] #4: ffff88804ba80658 (&device->client_data_rwsem){++++}-{4:4}, at: add_client_context+0x33e/0x7b0 [ 1001.775352][T27274] #5: ffffffff8ebf9100 (wq_pool_mutex){+.+.}-{4:4}, at: __alloc_workqueue+0xa4f/0x1fe0 [ 1001.785094][T27274] [ 1001.785094][T27274] stack backtrace: [ 1001.790969][T27274] CPU: 0 UID: 0 PID: 27274 Comm: syz.2.6084 Not tainted syzkaller #0 PREEMPT(full) [ 1001.800325][T27274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1001.810375][T27274] Call Trace: [ 1001.813658][T27274] [ 1001.816588][T27274] dump_stack_lvl+0xe8/0x150 [ 1001.821203][T27274] print_circular_bug+0x2e2/0x300 [ 1001.826247][T27274] check_noncircular+0x12f/0x150 [ 1001.831195][T27274] __lock_acquire+0x164c/0x2de0 [ 1001.836058][T27274] ? check_path+0x21/0x40 [ 1001.840383][T27274] ? check_noncircular+0xdb/0x150 [ 1001.845405][T27274] ? lockdep_unlock+0x5c/0xd0 [ 1001.850080][T27274] lock_acquire+0x115/0x350 [ 1001.854575][T27274] ? __kmalloc_noprof+0xbc/0x720 [ 1001.859506][T27274] ? pcpu_alloc_noprof+0xde2/0x1900 [ 1001.864710][T27274] ? apply_wqattrs_prepare+0xee/0xdc0 [ 1001.870080][T27274] fs_reclaim_acquire+0x71/0x100 [ 1001.875008][T27274] ? __kmalloc_noprof+0xbc/0x720 [ 1001.879939][T27274] __kmalloc_noprof+0xbc/0x720 [ 1001.884696][T27274] ? apply_wqattrs_prepare+0xee/0xdc0 [ 1001.890060][T27274] ? apply_wqattrs_prepare+0xee/0xdc0 [ 1001.895517][T27274] apply_wqattrs_prepare+0xee/0xdc0 [ 1001.900709][T27274] ? pcpu_memcg_post_alloc_hook+0x8c/0x630 [ 1001.906520][T27274] ? pcpu_alloc_noprof+0x100f/0x1900 [ 1001.911803][T27274] ? pcpu_alloc_noprof+0x1036/0x1900 [ 1001.917087][T27274] __alloc_workqueue+0x11be/0x1fe0 [ 1001.922194][T27274] alloc_workqueue_noprof+0xe3/0x210 [ 1001.927478][T27274] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 1001.933370][T27274] ? __ib_alloc_pd+0x451/0x5c0 [ 1001.938204][T27274] ib_mad_init_device+0x993/0x2150 [ 1001.943322][T27274] ? __pfx_ib_mad_init_device+0x10/0x10 [ 1001.948951][T27274] ? do_raw_spin_unlock+0xf5/0x200 [ 1001.954063][T27274] ? _raw_spin_unlock+0x28/0x50 [ 1001.958921][T27274] add_client_context+0x37c/0x7b0 [ 1001.963956][T27274] ? __pfx_add_client_context+0x10/0x10 [ 1001.969491][T27274] ? xa_find+0x25b/0x2b0 [ 1001.973727][T27274] enable_device_and_get+0x19c/0x3e0 [ 1001.979006][T27274] ? __pfx_enable_device_and_get+0x10/0x10 [ 1001.984828][T27274] ? device_add+0x6f6/0xb80 [ 1001.989402][T27274] ib_register_device+0xdc8/0x1080 [ 1001.994511][T27274] ? __pfx_ib_register_device+0x10/0x10 [ 1002.000047][T27274] ? ib_device_set_netdev+0x5c9/0x6d0 [ 1002.005410][T27274] rxe_register_device+0x1e3/0x350 [ 1002.010517][T27274] rxe_net_add+0x81/0x110 [ 1002.014857][T27274] rxe_newlink+0xf4/0x1c0 [ 1002.019209][T27274] nldev_newlink+0x5be/0x650 [ 1002.023804][T27274] ? __pfx_nldev_newlink+0x10/0x10 [ 1002.028958][T27274] ? apparmor_capable+0x126/0x170 [ 1002.033996][T27274] ? security_capable+0x7e/0x2c0 [ 1002.038932][T27274] ? __pfx_nldev_newlink+0x10/0x10 [ 1002.044040][T27274] rdma_nl_rcv+0x6ef/0xa40 [ 1002.048458][T27274] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 1002.053401][T27274] ? netlink_deliver_tap+0x2e/0x1b0 [ 1002.058589][T27274] ? netlink_deliver_tap+0x2e/0x1b0 [ 1002.063781][T27274] netlink_unicast+0x7bd/0x940 [ 1002.068542][T27274] netlink_sendmsg+0x813/0xb40 [ 1002.073305][T27274] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1002.078586][T27274] ? apparmor_socket_sendmsg+0x98/0x360 [ 1002.084123][T27274] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1002.089399][T27274] sock_sendmsg_nosec+0x14e/0x190 [ 1002.094420][T27274] ____sys_sendmsg+0x54e/0x850 [ 1002.099185][T27274] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1002.104467][T27274] ? import_iovec+0x73/0xa0 [ 1002.108969][T27274] ___sys_sendmsg+0x2a5/0x360 [ 1002.113645][T27274] ? __lock_acquire+0x747/0x2de0 [ 1002.118578][T27274] ? __pfx____sys_sendmsg+0x10/0x10 [ 1002.123774][T27274] ? futex_wait+0x2a2/0x390 [ 1002.128283][T27274] ? __fget_files+0x2a/0x420 [ 1002.132869][T27274] ? __fget_files+0x3a2/0x420 [ 1002.137541][T27274] __x64_sys_sendmsg+0x1b1/0x290 [ 1002.142495][T27274] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1002.147958][T27274] do_syscall_64+0x166/0x520 [ 1002.152543][T27274] ? trace_irq_disable+0x3b/0x140 [ 1002.157557][T27274] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1002.163612][T27274] ? clear_bhb_loop+0x70/0xc0 [ 1002.168284][T27274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1002.174168][T27274] RIP: 0033:0x7f093c59e199 [ 1002.178574][T27274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1002.198171][T27274] RSP: 002b:00007f093d38f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1002.206594][T27274] RAX: ffffffffffffffda RBX: 00007f093c825fa0 RCX: 00007f093c59e199 [ 1002.214557][T27274] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000003 [ 1002.222540][T27274] RBP: 00007f093c6358e0 R08: 0000000000000000 R09: 0000000000000000 [ 1002.230502][T27274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1002.238475][T27274] R13: 00007f093c826038 R14: 00007f093c825fa0 R15: 00007ffd4d50ae78 [ 1002.246455][T27274] [ 1002.322368][T27274] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 1002.322411][T27274] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 1002.322454][T27274] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 1002.388095][T27274] RDS/IB: syz0: added [ 1002.388137][T27274] smc: adding ib device syz0 with port count 1 [ 1002.388155][T27274] smc: ib device syz0 port 1 has no pnetid [ 1002.388207][ T25] lo speed is unknown, defaulting to 1000 [ 1002.388716][T27274] lo speed is unknown, defaulting to 1000 [ 1002.518980][T27274] lo speed is unknown, defaulting to 1000 [ 1002.618159][T27274] lo speed is unknown, defaulting to 1000 [ 1002.682945][T27274] lo speed is unknown, defaulting to 1000 [ 1002.735561][T27274] lo speed is unknown, defaulting to 1000 [ 1003.204541][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!