last executing test programs: 10.70892485s ago: executing program 3 (id=5577): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000100000001800018014000200776c616e31000000000000000000000008000600000000000800070000deff"], 0x3c}}, 0x24008080) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r3) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x9000}, 0x3548, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0xb, 0x8, 0x0, {0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x3}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[], 0x13c}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, 0x0, 0x250) r6 = socket(0x10, 0x803, 0x0) sendto(r6, &(0x7f0000000740)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001dc0)={0xb, 0x4, &(0x7f0000001e80)=ANY=[@ANYBLOB="18000000080000000000"], &(0x7f0000001ec0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001f00), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x5, 0x0) listen(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000001f40)={0x8, 0x4, 0xf84, 0x6, 0xfffffffffffffbfa, 0x1, 0x4, 0x3}, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001f80)={0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000002040)={'syz_tun\x00'}) socket$netlink(0x10, 0x3, 0x14) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_generic(r9, &(0x7f0000002080)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f0000002100)={0x18, 0x31, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x1d, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0x0, 0x46854}, 0x4) sendmsg$NL80211_CMD_SET_COALESCE(r8, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002180)={&(0x7f00000021c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100feffffff00000000020000000c0099"], 0x38}, 0x1, 0x0, 0x0, 0x8844}, 0x4800) 9.406165409s ago: executing program 0 (id=5583): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x28}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f00000001c0)='GPL\x00'}, 0x94) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_opts(r2, 0x29, 0x37, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x0, 0xe, 0x0, &(0x7f0000000380)="e0b9547ed387dbd8abc89b6f59ec", 0x0, 0x1ffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c00000002060104000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000000c0007800800064001"], 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 9.401090457s ago: executing program 3 (id=5585): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000234308000000000000000000850000004100000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000640)={r1, r2, 0x25, 0x4, @void}, 0x10) syz_emit_ethernet(0x1a, &(0x7f0000000680)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @broadcast, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@mpls_uc={0x8847, {[], @llc={@snap={0x0, 0x0, "ee", "b271b3", 0x10}}}}}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2c, 0x3, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x81}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0xa0}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x0) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'bridge0\x00', 0x0}) syz_init_net_socket$bt_l2cap(0x1f, 0x6, 0x0) sendmsg$nl_route(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000005400019b4abd70010000000007000000", @ANYRES32=r8, @ANYBLOB="20000100", @ANYRES32=r8, @ANYBLOB="000002000000000000000000000000000000000186dd"], 0x38}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f0000000480), 0x40000000000009f, 0x0) r10 = socket$phonet_pipe(0x23, 0x5, 0x2) accept4$phonet_pipe(r10, 0x0, &(0x7f0000000000), 0x800) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r4, &(0x7f00000002c0)=[{{0x0, 0xfffffffffffffd0f, &(0x7f0000000700)=[{&(0x7f0000000540)="050000eb3a49a8d125", 0x9}], 0x1}}], 0xfffffffffffffd9e, 0x4000041) sendmsg$nl_route_sched(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newtfilter={0x2c, 0x11, 0x400, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r5, {0xffe0, 0xe}, {0xf, 0xa}, {0x1, 0x5}}, [@TCA_RATE={0x6, 0x5, {0xf, 0xe4}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x2004c016}, 0x0) 8.891253146s ago: executing program 3 (id=5588): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000009c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)={0x1c, r0, 0x303, 0x0, 0xdfffffff, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x20040890) 8.582101048s ago: executing program 3 (id=5589): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x850}, 0x40) ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000002c0)={'ip_vti0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="15010000dfa4b2a3bcb867e26b8e003617d84d3ea026ad75eb5068792b81f3686e1484f6b9878159c856950a25b485ca8c9207c626a31c617e210a34983cebd3267b6c22a13ce934dd59c476103c64fb858460dbb3d0c0422a95595ccbe2b66876b59a5e7672952cb6d57768cf96662f8639b44749fcd4f6f30eba49cd864bb6b37d1a6f2c09bf3a29db41cc336df4dce4e09eec65cf5b353d08759efe677060e822bdc5f2444b5e", @ANYRES16=0x0, @ANYBLOB="000225bd7000fddbdf254b0000000c00a600060000000000000008000300010000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000f00a9007365636f6e646e616d6500000f00a9007365636f6e646e616d6500000400a9007d00a900f064ac21737dea8738a10ad101d1064f3a26689445566176c3bfdbdc0af37199445548c2acf5c430d519e52cb3fa204a46b77b1fcac348908e37be3020457cd2902b1cdfb2749bc274ab79cf773b7f580793df94879f1711b2a35e196c9188b88de5a1180c4f63b4790d61f18717739d7d7495693c46ff21ec0000000e00a90066697273746e616d650000000c00a60002000000000000000c00a6000900000000000000"], 0x114}, 0x1, 0x0, 0x0, 0x40}, 0x600090c0) connect$netlink(r0, &(0x7f00000000c0)=@unspec, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="1400000004080101001600000000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x4840}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000b00)) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000b40)=ANY=[@ANYBLOB="0a00000016000000001e00007f"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b80)={r5, &(0x7f0000000bc0), 0x0}, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000c00), r2) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/268], 0x154}}, 0x4000000) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000e40)={0x2, 0x0, @local}, 0x16) connect$inet(r7, &(0x7f0000000e80)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000ec0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x44}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x5, 0x0, 0x0, 0x4, 0xffff, 0xfffffffffffffffd, 0x2}, {0x4e, 0x0, 0x400000000}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) write(r7, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000fc0)) unshare(0x6a040000) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r8, 0x8982, &(0x7f0000001000)={0x8, 'veth0_to_bridge\x00', {'veth0_vlan\x00'}, 0x9}) socket$nl_generic(0x10, 0x3, 0x10) 8.104821974s ago: executing program 4 (id=5594): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x29, 0x0, &(0x7f0000000340)="3cd211b45a78529c72481426b639", 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000028000480240001800b00010072656a6563740000140002800800014000000000050002000000000008000b40000000000900010073797a300000000014000000110001"], 0xd8}}, 0x0) syz_emit_ethernet(0x1270, &(0x7f0000001b80)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd656be34c123a2f"], 0x0) 7.71242065s ago: executing program 4 (id=5596): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) ioctl$SIOCGSKNS(r1, 0x894c, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000002100)="240000005a001f001007f4f9002304000a04f51108000500020100020800038005000000", 0x24) setsockopt(r0, 0x84, 0x81, &(0x7f0000000080)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000100), 0x1) sendto$inet6(r0, &(0x7f0000000140)='l', 0x1, 0x0, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001ac0)) sendto$inet6(r0, &(0x7f00000001c0)='|', 0x1, 0x4010, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000200)="87", 0xffa0, 0x20004000, 0x0, 0x0) sendmmsg(r0, &(0x7f0000001a80)=[{{&(0x7f0000000240)=@phonet={0x23, 0x7c, 0xe, 0x8}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000380)="99a96fdb4f076a8cad5172b01e58ac2d8cfe494ec57f38955c1e7f50028c014669d96d1c1e1a4433a71e279ea59a5860c62702365d69e9af8f50bd309adc1b8887ce37bf86b8d6920472b18267dd4540dd0eb2ddc0bdeb10f7a9ce1cf8eb5148667f425d134baf182a4f17b2181b6ce394b7a88172ecb9747c4c1eb2ddc36abe6f5b5e54ad72fda65f78e927beb2c8cafe1b8765032fc4e9cfb4ccfcab", 0x9d}, {&(0x7f0000000440)="a567d204af19631672f48af32e0033ea4c586ee256717e1c5473a6377dd55b06380536b0636c1bd297e724fb587ca7a20956d662d924a991ff0c28cd77a489cb0e756e99651ce694733b8a9b6e4b24147ef2c7d634533c98d2265dced14c5af27d7356a557e874daf4c678835587a8536c889018bf13edf4ea05", 0x7a}, {&(0x7f00000004c0)="d2918fa4446f4ddfc96600c0e80c47b5ad2ee0d708abd0cea1dcea1d5985619a2140ef0eab085c4e4b2384afe9b56adc5f1dce2793740c9782443ecca285612fefa41cd94eb43fde9996e972a9c2c7f73b879a0368782eeff11ad22d69bb7f17776981a071d3ac24046d9b6e121d6ac51846643e5d8ef49c8a388d26dfe3da3ddc9345a2c1d61b4d65cd00185c69d031f2b89f7e876e0400a37a3893ca238798d3e524e42dc9b4cf141d350f33010549acc3678b37f170d17fa011579ad326707ad231a4eb026b5c0b1625f8c61c288a51b10b6c5f8e4b66e28c26f389af309be82bd4aaceaf287a605e344f025c5c9e1c", 0xf1}, {&(0x7f00000005c0)="8abe95bfc8cb8e64c7b2517d4c5e87855487326186037eb87f361017e5a67e16f06c0268c1d2c8a12156efd4f27569f12db1464f06a995095be69752dadd92d8e73df84005225d076d75d4e309fdb678976fc313020ef18f3f53a4badc1d", 0x5e}], 0x4, &(0x7f0000000680)=[{0x20, 0x10d, 0x1ff, "b3fdec2b43b846e1a0ce32761c"}, {0x80, 0xff, 0x60e, "53549f97d93976c4a9e77962bb823a1e1fc1e5824fb0bca587ab7d3ba205b77adc8cae3ca089899a822ee6dec8b36b33c3ea8b9fe3ce26008a41c291d93845d14c2c51059b20f5e6d9c4c2c82242cb57723e633e64c9f8fe1b7e7cde31ced3782d19b00699f97db2a8f639da31fa228f"}, {0x1010, 0x101, 0x2, "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"}, {0x88, 0x1, 0x800, "0308e7aa866bbfa3fbe11be7302cd54239028119f0db91e05bb6eed5b2cfeb7577dc477c52b54971166b2523ee971c024431270bc02b263ece23717c291b153e311f8df06c791f7f302c71ac104da8a10c56306a64af521e3b0563e9326f0116821fab89843fcd92d85750ab2cf95d5a4892c49ce0b3"}, {0x38, 0x10d, 0xca6, "787d0bb5664532b9940a245e59a05da3ab4795af54f5ce235929c7a822949a82443fe5"}, {0x100, 0x29, 0x3, "2631cd45737752f369a8162f4c94721d3b38810acb5b1bd07e2c6846f879746b2149f8131b7733dd839e87611cf0ed16096e40609af391a8e21fd3c74f48a103d5eef16c22b3d81ef38bfa1ffb7ef9c9c6bf6f2f48d9fb66246c614f1f9df27ca50a2305e2f49a557c34193a9c7796d8ee1d8d4a9f35129b21739c401850c76307c4964d1371cf5263a946c9926f69f77ba60d8424682da021728b37b472ba3b32586e69cc0d33e7047a7ab441ea77b4c25177166384cba27eb70da55439de2b526cbed4430b398b1727604870ead8640fd5337f43a16a349808d63535143b0fd6ce1e321094c6b83f646fbcecf8fa"}, {0x88, 0x108, 0x101, "4a3a41ba67d8a7ac5a23f5512fd8a35ab0b981d7393fa80c92c99df55306eddf7adbb1a0460db900350c2f4e37a8894d3d70e1be24c66eed063e02395ea819603ce2677fc9e2ccfb8db47018946a46afd933bbeaa5672fe5679a0bebed034fd4d6cb150f04109920b4e321584d8f2e1b8f40"}, {0x50, 0x10c, 0x8000, "612ff79a7deb94a0b0eb4e8a398a9ba66bc50bed3936460f2a9faad11f4241623de9e23ac74df0721ffbe9e0837d0ca25b73a21964e8bd431903f5d4"}, {0x50, 0x318, 0x8, "ae55089ae8108a8c7c50f63c4a4fdf8ded1d9536e0f3ab6adf38580a8500514b536d2f63bf8aab3014f7e4b0118009959a077a8a41cbe60a39ad3e3ebfa5ba3b"}, {0x40, 0x117, 0x3, "86294f86aa16dc20cc0344ed45ca71af2892acd0a6b199824d31317d41c1969369611d5761ce3b5f82"}], 0x13d8}}], 0x1, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000002140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000002180)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002200)={0x1c, r5, 0x331, 0x2000, 0x40080000, {0x8}, [@BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c01c}, 0x0) r6 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r6, &(0x7f00000002c0)={&(0x7f0000000300)={0xa, 0xa, 0x81, @mcast2}, 0x1c, &(0x7f0000001cc0)=[{&(0x7f0000001d00)='\x00\x00\x00\x00\x00\x00\x00', 0x7}, {&(0x7f0000001d40)="9e91d93a92dc7c8fff658bb539e2a1485d4c9223a7dfe538a2e2fea2", 0x1c}, {&(0x7f0000001d80)="000000b814", 0x5}], 0x3}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000001dc0)={'bridge0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000001f80)={0x1, 0x4, &(0x7f0000002040)=ANY=[@ANYBLOB="18000000000810000000000000004000630162000000000095"], &(0x7f0000002080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r7, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001e40)={&(0x7f0000001e80)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, r9, 0x0, 0x11203}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000001f40)={'syztnl1\x00', &(0x7f0000001ec0)={'tunl0\x00', r9, 0x7800, 0x20, 0x66d7, 0x2, {{0x9, 0x4, 0x1, 0x2a, 0x24, 0x68, 0x0, 0x1, 0x2f, 0x0, @remote, @local, {[@timestamp_prespec={0x44, 0xc, 0x53, 0x3, 0x1, [{@broadcast, 0x101}]}, @end, @end]}}}}}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x44b, 0xfffffffc, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x2}]}}}]}, 0x3c}}, 0x4) 7.425616345s ago: executing program 0 (id=5598): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000234308000000000000000000850000004100000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000640)={r1, r2, 0x25, 0x4, @void}, 0x10) syz_emit_ethernet(0x1a, &(0x7f0000000680)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @broadcast, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@mpls_uc={0x8847, {[], @llc={@snap={0x0, 0x0, "ee", "b271b3", 0x10}}}}}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2c, 0x3, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x81}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0xa0}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x0) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'bridge0\x00', 0x0}) syz_init_net_socket$bt_l2cap(0x1f, 0x6, 0x0) sendmsg$nl_route(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000005400019b4abd70010000000007000000", @ANYRES32=r8, @ANYBLOB="20000100", @ANYRES32=r8, @ANYBLOB="000002000000000000000000000000000000000186dd"], 0x38}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f0000000480), 0x40000000000009f, 0x0) r10 = socket$phonet_pipe(0x23, 0x5, 0x2) accept4$phonet_pipe(r10, 0x0, &(0x7f0000000000), 0x800) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r4, &(0x7f00000002c0)=[{{0x0, 0xfffffffffffffd0f, &(0x7f0000000700)=[{&(0x7f0000000540)="050000eb3a49a8d125", 0x9}], 0x1}}], 0xfffffffffffffd9e, 0x4000041) sendmsg$nl_route_sched(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newtfilter={0x2c, 0x11, 0x400, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r5, {0xffe0, 0xe}, {0xf, 0xa}, {0x1, 0x5}}, [@TCA_RATE={0x6, 0x5, {0xf, 0xe4}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x2004c016}, 0x0) 7.020415229s ago: executing program 1 (id=5600): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x25, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e21, 0x8000008, @empty, 0x28f9fed5}}, 0xfffe}, 0x90) r4 = socket$tipc(0x1e, 0x2, 0x0) recvfrom(r4, &(0x7f0000000340), 0x0, 0x40000020, &(0x7f0000000380)=@ieee802154={0x24, @short={0x2, 0x3, 0xfffe}}, 0x80) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x32, 0xffffffffffffffff, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000340)={0x2, 0x1234, @loopback}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xf, 0x4, 0x4, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000480)={r6, &(0x7f00000004c0), &(0x7f0000000500)=@udp=r5}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1e, 0x11, &(0x7f0000000600)=ANY=[@ANYBLOB="bf16000000000000620afcff00000000bfa200000000000007020000fcffffff1851000000000000000000000000000085000000010000001500070000000000bf07000000000000bf61000000000000bf72000000000000b703000000000000850000007c000000bf710000000000008500000056000000b70000000100000095"], &(0x7f00000006c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[r6], 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xd, 0x0, &(0x7f00000007c0)="00000000000000000a00000011", 0x0}, 0x50) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40018160, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CQM={0x8, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x4}]}]}, 0x24}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a00000006d0000042abd7400fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="6448000001000600140035007465616d300000000000000000000000180034801400350076657468315f766c616e000000000000140003007767310000000000000000000000000040003480140035006d6163766c616e3000000000000000001400350076657468305f6d616376746170000000140035007465616d5f736c6176655f3100000000"], 0xa0}}, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x25, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e21, 0x8000008, @empty, 0x28f9fed5}}, 0xfffe}, 0x90) (async) socket$tipc(0x1e, 0x2, 0x0) (async) recvfrom(r4, &(0x7f0000000340), 0x0, 0x40000020, &(0x7f0000000380)=@ieee802154={0x24, @short={0x2, 0x3, 0xfffe}}, 0x80) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x32, 0xffffffffffffffff, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) bind$inet(r5, &(0x7f0000000340)={0x2, 0x1234, @loopback}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xf, 0x4, 0x4, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x5}, 0x50) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000480)={r6, &(0x7f00000004c0), &(0x7f0000000500)=@udp=r5}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1e, 0x11, &(0x7f0000000600)=ANY=[@ANYBLOB="bf16000000000000620afcff00000000bfa200000000000007020000fcffffff1851000000000000000000000000000085000000010000001500070000000000bf07000000000000bf61000000000000bf72000000000000b703000000000000850000007c000000bf710000000000008500000056000000b70000000100000095"], &(0x7f00000006c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[r6], 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xd, 0x0, &(0x7f00000007c0)="00000000000000000a00000011", 0x0}, 0x50) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40018160, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CQM={0x8, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x4}]}]}, 0x24}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a00000006d0000042abd7400fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="6448000001000600140035007465616d300000000000000000000000180034801400350076657468315f766c616e000000000000140003007767310000000000000000000000000040003480140035006d6163766c616e3000000000000000001400350076657468305f6d616376746170000000140035007465616d5f736c6176655f3100000000"], 0xa0}}, 0x4000) (async) 6.815456882s ago: executing program 4 (id=5602): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0900000004000000040000000001"], 0x50) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000240)={0x1, 0xf1}, &(0x7f0000000280)=0x8) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000140)={0x802}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="180000005a00010029bd98f8000000001c00030000000175d3f649c0db63f61bbd88392711b961e5fd9b84c6de2fe61a84cf0b9ddd9c0ba3a9c445c5572baeeb0f5b32a20a85611dfbe0e2730865bfda3dec6a73b9da6221f397190c57e54f9d464bec7cd706f96ace67fa734548d09eb1f4f71500000000000000"], 0x18}, 0x1, 0x0, 0x0, 0x40040d1}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x8001, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c000000130001000400"/20, @ANYRES32=0x0, @ANYRESDEC=r1, @ANYRESHEX=r5], 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x20000051) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x16c}}, 0x40000) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000540)={'dummy0\x00'}) sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0xff00, &(0x7f00000005c0)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dc6e48aa31086b8703130000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000004) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e21, @broadcast}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_delrule={0x1c, 0x18, 0x1, 0x0, 0x25dfdbfc, {0xa, 0x80, 0x0, 0x0, 0xff, 0x0, 0x0, 0x7}}, 0x1c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x10, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000009eb8cd4410f0972dbf121732210e5f0000000000000000000071"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000200)) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x2, 0xc, &(0x7f0000000a00)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000000a80)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.275585045s ago: executing program 4 (id=5604): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000640)={0xffffffffffffffff, r1, 0x25, 0x4, @void}, 0x10) syz_emit_ethernet(0x1a, &(0x7f0000000680)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @broadcast, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@mpls_uc={0x8847, {[], @llc={@snap={0x0, 0x0, "ee", "b271b3", 0x10}}}}}}, 0x0) 6.217575659s ago: executing program 1 (id=5605): mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x181802, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x28, 0x1, 0x7, 0xffeff038}, {0x6, 0x0, 0x0, 0xfffffffc}]}) ioctl$TUNGETVNETLE(r0, 0x40107446, &(0x7f0000000100)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x5, &(0x7f0000000280)=0xfff, 0x4) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6) write$cgroup_type(r2, &(0x7f0000000180), 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18080000000010c3004a290003000000851000000600000018007f1626a96d4455a7060000", @ANYRES32, @ANYBLOB="00000000000000116608000000000100180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8feffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000740)='GPL\x00', 0xa, 0xde, &(0x7f0000000780)=""/222, 0x0, 0x40}, 0x94) 6.000753354s ago: executing program 3 (id=5607): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32, @ANYBLOB="0000800000000000180034"], 0x38}, 0x1, 0x300}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f00000004c0), 0x4924b68, 0x0) sendmmsg$alg(r1, &(0x7f0000000b00)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000780)="bfc85fa15ee3aaf053720f466bf565858b5d4412f7c35b6ea8d2b3cf2b9e01c05e9fca3a0530354e4e376933ba1910bb96c9e37c554492c25e19ca14b54e2253db87d0f41072e9b2966a9822b11ad19259bdc04085d405a2c22812c96de0c0d3a09d688f4cb962bfc04c97b152b048c6b1aac7c33265956242d2104b5c02553ee8827189fae47e9c0dbbb79193876585cfdea430f1b8c712b4239cdbd6d4d58ee3d0cc3a50e4db87ae608f0b80c7f4f2affbc9843aea808940d6305fabfef9ec92069baf7f4437539027ee169bfc5ad223019a88b62a6c6b819f602a03cf2f3e92083447e9bad8c6d0f8552fe325a67039677a18e4bf", 0xf6}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x240, 0x4004}], 0x1, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="0a012a20", @ANYRES16=0x0, @ANYBLOB="e60f000901008b00005d33cdc96be58bd5b3274e000f", @ANYRES32, @ANYBLOB="0c001a8048000300"], 0x2c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000740)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) r3 = socket$kcm(0x2, 0x3, 0x2) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e21, @private=0xa010102}}, [0x1000000000000, 0x1fe000, 0x2, 0x9, 0x7365, 0x7f, 0x2, 0x5, 0x5, 0x240000000, 0x4, 0x2, 0x6, 0xdf, 0x7]}, &(0x7f0000000440)=0x100) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @broadcast}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'syzkaller1\x00', 0x0}) mmap(&(0x7f0000ffc000/0x1000)=nil, 0xfffffffffffff002, 0x0, 0x32, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) write$tun(r0, &(0x7f0000000140)={@val={0x8, 0x800}, @val={0x5, 0x0, 0x6, 0x0, 0x14, 0xf}, @ipv4=@tcp={{0x5, 0x4, 0x3, 0x2f, 0x28, 0x64, 0x0, 0x8, 0x6, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x3e}}, {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0x101, 0x0, 0x411}}}}, 0xfdef) 5.912355171s ago: executing program 1 (id=5608): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x8, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0xb, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4, 0x0, 0x0, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000640)='\x00'/14, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a700000003164d329838ed738ab0e060a01040000000000000000016400000900010073799430000000000900020073797a300000000044000480400001800e000100627974656f7264650d080002400000000908000340000000010800044000000002080005400000000214000000110001000000"], 0x98}}, 0x0) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000100)=0xe, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) close(0x3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="0900000004000000060000000b000000000000fcf97a8f8b93a9b0fd64c08d8fc2abcbd3cdb6b1cf94cd10b73d3b825ee77b25f985225ce327437aa55f62fc2b", @ANYRES32, @ANYRESHEX, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x12, 0xd, &(0x7f0000000e80)=ANY=[@ANYBLOB="180100001700020000000000ef000000850000006d000000fa100000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000300000095"], &(0x7f0000000e00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000e40)={r8}, 0xc) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000940)={r5, &(0x7f0000000980)="c861", &(0x7f00000009c0)=""/3, 0x2}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000bc0)={r9}, 0xc) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r11 = bpf$ITER_CREATE(0xb, &(0x7f00000006c0), 0x0) close(r11) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xf, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x1c, &(0x7f0000000f00)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @generic={0x9, 0x6, 0x1, 0x5, 0x1}, @map_fd={0x18, 0xa, 0x1, 0x0, r10}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0xc}, @call={0x85, 0x0, 0x0, 0x52}], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r12, 0x29, 0xb, 0x0, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r13, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r13, &(0x7f0000000140)={0xa, 0x4e1f, 0x4, @remote, 0xb}, 0x1c) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e200e22"], 0x0) 5.90295745s ago: executing program 4 (id=5609): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket(0x2, 0x80805, 0x0) close(0x3) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001900), 0x82c03, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000001940)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000001980), 0x0, 0x0) close(r3) socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000019c0)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}], 0x20) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, &(0x7f0000000180)=0xfffffffc, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001a00)={'syzkaller0\x00', 0x0}) socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f0000001a40)={&(0x7f0000001a80)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000001b00)=[{&(0x7f0000001b40)="27030200dc0f14000e0003004024c1020000ff8407c2fb7fe0400018534b4f6b3d327db412f40000", 0x28}], 0x1}, 0x20040000) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000740)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000017c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) r7 = socket(0x2, 0x80805, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) shutdown(r8, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x7a, &(0x7f0000000200)={r9, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, &(0x7f00000002c0)=0x84) sendmmsg$inet_sctp(r7, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x492492492492775, 0x0) ioctl$NILFS_IOCTL_GET_CPINFO(r7, 0x80186e82, &(0x7f0000000480)={&(0x7f00000003c0)=[{0x2, 0x0, 0xef, 0xe96a, 0x7, 0x9, 0x4, 0x10}, {0x3, 0x0, 0x3, 0x1, 0x46ec, 0xffffffffffffc883, 0xffff, 0x2}, {0x1, 0x0, 0x890, 0x441d, 0x9039, 0xffff, 0x5, 0x5}], 0x3, 0x38, 0x0, 0x3}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000380)={0x0, 0x5}, 0x8) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) 5.681589612s ago: executing program 2 (id=5610): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000009c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)={0x1c, r0, 0x303, 0x0, 0xdfffffff, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x20040890) 5.612828675s ago: executing program 1 (id=5611): r0 = socket(0x0, 0x2, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x59, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x24, 0x14, 0xf0b, 0x4, 0x0, {0x2, 0x0, 0x0, 0x0, {0xc}, {0xb, 0x1}, {0x0, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c012}, 0x44040) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b80)=@mangle={'mangle\x00', 0x64, 0x6, 0x518, 0x378, 0xd0, 0x2a8, 0x2a8, 0x0, 0x448, 0x448, 0x448, 0x448, 0x448, 0x6, 0x0, {[{{@ipv6={@loopback, @mcast1, [0xff000000, 0x0, 0xffffff00, 0xff], [0xff, 0xffffff00, 0xffffff00, 0xff000000], 'team_slave_0\x00', 'macvtap0\x00', {}, {0xff}, 0x11, 0xb, 0x7, 0x68}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x7e, 0x80}}}, {{@ipv6={@mcast1, @local, [0xffff00, 0x0, 0xffffff00], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11, 0x0, 0x2}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast, 0x3}}}, {{@ipv6={@empty, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@empty, 'macvtap0\x00', {0xffffffffffffffff}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0xfd}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x2f}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x578) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, r2) sendmsg$TIPC_NL_KEY_SET(r2, 0x0, 0x0) r3 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f00000001c0)=[{0x50, 0x0, 0x0, 0xffe00001}, {0x16, 0x0, 0x0, 0xfffffffc}]}, 0x10) sendto$inet6(r3, &(0x7f0000000780)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x8050, 0x0, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x1010, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000004000000040000000001000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000f927732d2ee1b16eec7b7e177f15eb"], 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000004000000040000000001000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES16=r1], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x15, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000007a0af8ff0000000018110000", @ANYRES32=r5, @ANYBLOB="000000000000000015010200e9ffffff18110000", @ANYRES32=r6, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000300000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[@ANYRESDEC=r0, @ANYBLOB="38596b26b92ef9d0557c9ab815976a6b4ac4306ab7e613edbe94b64216dab071e57a57fd438e5990a1c5b6b17a3927826f390249f475deadf77f93397d7dcd73370afc5cde96682792c40ca3fb0c6c486529549363ebb2bce4ffc9fa206908760c8cee02f5f33bc1468ffa5f5595a656c40270129b9a46", @ANYRES32=r2, @ANYRES8, @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYBLOB="e4b5d8b983f4ff05b1549275430cc40148f16beaad7216d1848b04139faf3bde62d29e2f8697359383fcab780ac52936fb4faf3873aeea06dc6a279f3e76552bd9448528b4faa9272abc9d4bf68b425efabd000fa669a12f2cc18fa22c0ca82bb66582514bd5f21908c47c4b7b58d8f79eb80e41368cfab0d1d7d6e3f2f2dbdbb5851634bfabb22d2cbc7ad9c4cfd314a9be0d27d94dd8bd983f768c8e1093b20b32822bd69885e35c2cf9d7392b41adfbf2d2e53350a957a3aa6583f558e50fc00971e6478dd360ca77ca6027fce4a4a9d61fa49106892c70faafed8b155bbfdb93de424fc36e13c4b2", @ANYRES16=r4], 0xfdef) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000016c0)=@bpf_lsm={0x1d, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000008000000000000f16affff85200000050000001800000009000000000000000e000000c575f8ff040000001831000004000000000000000000000061e5150f0010000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702009d64001e3259ee780009000000aca5200008000000950000"], &(0x7f0000000940)='GPL\x00', 0x0, 0x7a, &(0x7f0000000980)=""/122, 0x40f00, 0x40, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001240)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000001280)={0x3, 0x2, 0x0, 0xf22}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000001600)=[r5, 0xffffffffffffffff, r6, r5, r7], &(0x7f0000001640)=[{0x2, 0x4, 0x1, 0x8}, {0x4, 0x2, 0xa, 0x5}, {0x3, 0x5, 0xa, 0x6}, {0x5, 0x1, 0x4, 0x2}, {0x4, 0x5, 0x1, 0xc}, {0x3, 0x1001, 0x4, 0xc}], 0x10, 0x200}, 0x94) sendmmsg$unix(r8, &(0x7f0000000800), 0x318, 0x0) connect$unix(r8, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e22}, 0x6e) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001100)=ANY=[], 0x98}], 0x1}, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000b80)=0x14) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x48800}, 0x0) 5.573601898s ago: executing program 0 (id=5612): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000017c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001800)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001900)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="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", @ANYBLOB="11042abd7000fddbdf251400000008000300", @ANYRES32=r2, @ANYBLOB="08001d00", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40000) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000001780)=ANY=[@ANYBLOB="240000000198bcc1f3610000000000000007000030b1"], 0x24}, 0x1, 0x0, 0x0, 0x4008004}, 0x44000000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, 0x0, 0x60044084) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f0000000140)=[{{&(0x7f0000000180)={0xa, 0x4e23, 0x3, @local, 0x1}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000200)="641fac673eac2d", 0x7}], 0x1, &(0x7f0000000000)}}], 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000300)=0x2, 0x4) connect$inet6(r6, &(0x7f0000000340)={0xa, 0x0, 0x7, @mcast1, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000380), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f00000003c0)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000400)=@ccm_128={{0x303}, "63a7d38a4937c1fc", "5f90d5f023d7bd5bd799356c95abffc8", "09fe0891", "0aa3b9dd5fe7a771"}, 0x28) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r7, &(0x7f0000000480)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0) recvfrom$inet6(r6, &(0x7f00000004c0)=""/248, 0xffffff1f, 0x40010002, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f00000005c0)=@ccm_128={{0x303}, "b421eba833d4b156", "56df2295bfda5c4f9fecff61beaa8bb4", "808065e3", "7f1f1c2ab4421d27"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(r6, &(0x7f0000000600)=[{&(0x7f0000000680)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000740)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x9f}, {&(0x7f0000000800)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f00000008c0)="de21cff472aa580c2ee9f858", 0xc}, {&(0x7f0000000900)="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", 0xded}], 0x5) setsockopt$sock_int(r6, 0x1, 0x7, &(0x7f0000001700)=0xffff1884, 0x4) shutdown(r5, 0x1) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x82, &(0x7f0000000280)=@assoc_value, &(0x7f00000000c0)=0x8) 5.332777362s ago: executing program 2 (id=5613): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000008100000008000300", @ANYRES32=r3, @ANYBLOB="04006700060066008e8800000a000600ffffffffffff0000220033"], 0x58}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRES16=r0, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000000008000200000000000800030000000000040004"], 0x7c}}, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r4) 4.989108149s ago: executing program 2 (id=5614): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0900000004000000040000000001"], 0x50) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000240)={0x1, 0xf1}, &(0x7f0000000280)=0x8) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000140)={0x802}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="180000005a00010029bd98f8000000001c00030000000175d3f649c0db63f61bbd88392711b961e5fd9b84c6de2fe61a84cf0b9ddd9c0ba3a9c445c5572baeeb0f5b32a20a85611dfbe0e2730865bfda3dec6a73b9da6221f397190c57e54f9d464bec7cd706f96ace67fa734548d09eb1f4f71500000000000000"], 0x18}, 0x1, 0x0, 0x0, 0x40040d1}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x8001, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c000000130001000400"/20, @ANYRES32=0x0, @ANYRESDEC=r1, @ANYRESHEX=r5], 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x20000051) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x16c}}, 0x40000) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000540)={'dummy0\x00'}) sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0xff00, &(0x7f00000005c0)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dc6e48aa31086b8703130000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000004) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e21, @broadcast}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_delrule={0x1c, 0x18, 0x1, 0x0, 0x25dfdbfc, {0xa, 0x80, 0x0, 0x0, 0xff, 0x0, 0x0, 0x7}}, 0x1c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x10, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000009eb8cd4410f0972dbf121732210e5f0000000000000000000071"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000200)) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x2, 0xc, &(0x7f0000000a00)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000000a80)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.662692398s ago: executing program 0 (id=5615): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0xc90454e631f5f796, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x82, {0x0, 0x0, 0x0, r2, {}, {0xb, 0x9}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x0, 0x3}, [@TCA_NETEM_RATE={0x14, 0xe}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x0) 598.453071ms ago: executing program 1 (id=5616): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x80000000000000a, 0x1, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x0, {{0xa, 0xfffc, 0x0, @mcast1={0xff, 0x7}, 0x3}}, {{0xa, 0x0, 0x6c, @mcast1}}}, 0x108) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB="380500001a0001000000000000e1ffff80809085bc5d57eeb01921ce90061c8000000000000000000014000101fc0000", @ANYRESOCT=r2, @ANYRES32=r0, @ANYRES32=r2, @ANYRES64=r0, @ANYRES8=r0, @ANYRESOCT=r2], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000814) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0xed, &(0x7f00000009c0)=ANY=[@ANYBLOB="bbbbb1bbbbbbffffffffffff86dd60122d9200b73afffe8000000000000000000000000000bbff0200000000000000000000000000019600907800ff0bdb0100000000000000180aa78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af03021f0afe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a0000"], 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000ac0), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=@newlink={0x68, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbbb, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x51a23}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x30}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_LOCAL={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}]}, 0x68}, 0x1, 0x20000, 0x0, 0x240440d5}, 0x9080) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000cc0)={0x24, r4, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x5}]}, 0x24}}, 0x4040800) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d00)={&(0x7f0000000d40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@struct={0x8, 0x0, 0x0, 0xf, 0x0, 0x10005}, @func={0x4, 0x0, 0x0, 0xc, 0x5}]}, {0x0, [0x30, 0x0, 0x0, 0xcf, 0x0, 0x0, 0x0, 0x2e]}}, &(0x7f0000000d80)=""/257, 0x3a, 0x101, 0x6}, 0x28) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket(0x2, 0x80805, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000f40)=@newlink={0x53, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x42, 0x2021}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x4}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @broadcast}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000fc0)=@assoc_value={0x0}, &(0x7f0000001000)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r6, 0x84, 0x79, &(0x7f0000001040)={r8, 0x9, 0x7}, 0x8) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001100)=@bridge_getneigh={0x34, 0x1e, 0x1, 0x70bd26, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x0, 0x2000a}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x0, 0x200}}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008451}, 0x20000800) r10 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001140)=@base={0x19, 0x4, 0x4, 0x2}, 0x50) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000001200)={r11, &(0x7f0000001240), &(0x7f0000001280)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000012c0)={r11, &(0x7f0000001300), &(0x7f0000001340)=""/6, 0x2}, 0x20) sendmsg$kcm(r10, &(0x7f0000001380)={0x0, 0x2000, &(0x7f00000013c0)=[{&(0x7f0000001400)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IPSET_CMD_GET_BYNAME(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f00000008c0)=ANY=[@ANYBLOB="200000000e0601010000000400000000050000000900020073797a3200000000da73b9958bb1290dccfe91f1db63b380d7f449270af32329615d5375facee06b7b67a0ca108eb707e13f9450b2b41e5c50884d113d"], 0x20}, 0x1, 0x0, 0x0, 0x20004801}, 0x40000) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="14f45187886d000000100001000000000a000000000000080000000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000002380000000e0a01020000000000000000010000000000010000000000000000000c00038008000080040001800900010073797a3000000000140000001000010000000000000000f18da139d3443d19240ca05436c9e532dfeec13debeda4ec6a9338f9a6"], 0xbc}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000001980)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xfc}}, 0x0) socket$can_raw(0x1d, 0x3, 0x1) 580.755365ms ago: executing program 4 (id=5617): r0 = socket(0x2, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(r0, 0x84, 0x7a, &(0x7f00000001c0)={0x2, 0xffffffffffffffff}, &(0x7f0000000200)=0xc) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000240)={0x1, [0x0]}, &(0x7f0000000280)=0x8) sendmmsg$inet(r0, &(0x7f0000000000)=[{{&(0x7f0000000040)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000000080)=[{&(0x7f00000000c0)='\f', 0x1}], 0x1}}], 0x1, 0x4000800) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000180)={r2, 0x8ec6, 0x10}, 0xc) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000300)={0x18, 0x0, {0x4001, @broadcast, 'vlan1\x00'}}, 0x1e) sendmmsg(r3, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 467.292131ms ago: executing program 0 (id=5618): r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f00000002c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000300)={&(0x7f00000003c0)=@tipc=@nameseq={0x1e, 0x1, 0x2, {0x40, 0x2, 0xffffffff}}, 0x80, 0x0, 0x0, 0x0, 0x5aa}, 0x0) 447.066431ms ago: executing program 2 (id=5619): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@empty, 0x0, 0xffff, 0x0, 0x0, 0x2, 0x0, 0x20, 0x8}, {0x0, 0x1, 0x800000000, 0x0, 0x0, 0x0, 0x8, 0x1d}, {0x0, 0x0, 0x0, 0x2dd}, 0x0, 0x0, 0x1, 0x1}, [@tmpl={0x144, 0x5, [{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x510d3f49}, {{@in6=@loopback, 0x4d2, 0x2b}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x0, 0x1, 0x3, 0x0, 0x0, 0x2cd6}, {{@in6=@mcast2, 0x4d2, 0x3c}, 0x2, @in=@remote, 0x0, 0x2, 0x0, 0x0, 0x1, 0x3}, {{@in=@rand_addr=0x64010100, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x1, 0x2, 0x80, 0x0, 0x2}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x60004000}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="997425bd7000fbdbdf25150000004c0001800d0001007564703a73797a3200000000380004"], 0x60}, 0x1, 0x0, 0x0, 0x24000884}, 0x2400c000) 380.547999ms ago: executing program 3 (id=5620): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000c80), 0x40241, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=@newpolicy={0xb8, 0x13, 0x101, 0x0, 0x0, {{@in=@rand_addr=0x64010102, @in=@rand_addr=0x64010102, 0x100, 0xd, 0x400, 0x9, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0x0, 0x800000000, 0xffffffffffffffff, 0x0, 0x3, 0xfffffffffffffffe, 0x8}, {0x0, 0x1, 0x0, 0x100}, 0xfffffffe}}, 0xb8}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000f00)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000f40)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000f80)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 177.685333ms ago: executing program 2 (id=5621): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x3, 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB="18020000010c000000000000000000008500000087000000850000005000000095"], &(0x7f0000000ac0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r0, 0x0, 0xe, 0x0, &(0x7f0000000b80)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 153.990697ms ago: executing program 0 (id=5622): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000234308000000000000000000850000004100000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000640)={r1, r2, 0x25, 0x4, @void}, 0x10) syz_emit_ethernet(0x1a, &(0x7f0000000680)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @broadcast, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@mpls_uc={0x8847, {[], @llc={@snap={0x0, 0x0, "ee", "b271b3", 0x10}}}}}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2c, 0x3, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x81}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0xa0}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x0) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'bridge0\x00', 0x0}) syz_init_net_socket$bt_l2cap(0x1f, 0x6, 0x0) sendmsg$nl_route(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000005400019b4abd70010000000007000000", @ANYRES32=r8, @ANYBLOB="20000100", @ANYRES32=r8, @ANYBLOB="000002000000000000000000000000000000000186dd"], 0x38}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f0000000480), 0x40000000000009f, 0x0) r10 = socket$phonet_pipe(0x23, 0x5, 0x2) accept4$phonet_pipe(r10, 0x0, &(0x7f0000000000), 0x800) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) sendmmsg(r4, &(0x7f00000002c0)=[{{0x0, 0xfffffffffffffd0f, &(0x7f0000000700)=[{&(0x7f0000000540)="050000eb3a49a8d125", 0x9}], 0x1}}], 0xfffffffffffffd9e, 0x4000041) sendmsg$nl_route_sched(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newtfilter={0x2c, 0x11, 0x400, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r5, {0xffe0, 0xe}, {0xf, 0xa}, {0x1, 0x5}}, [@TCA_RATE={0x6, 0x5, {0xf, 0xe4}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x2004c016}, 0x0) 84.639124ms ago: executing program 1 (id=5623): r0 = socket$tipc(0x1e, 0x2, 0x0) getpeername$packet(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x4) r3 = socket(0x10, 0x803, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x439, 0x70bd2c, 0xfffbffea, {0x0, 0x0, 0xe403, 0x0, 0x5000b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r5}, @IFLA_GRE_REMOTE={0x8, 0x7, @loopback}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000540)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=@getchain={0x24, 0x11, 0x1, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x5}, {0xfff3}}}, 0x24}}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000680)={@private1, 0x0}, &(0x7f00000006c0)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000740)=0x14) socket$inet(0x2, 0x3, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000780)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000007c0)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000800)={'batadv_slave_1\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000840)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0x601, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r15, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x26000000) sendmsg$nl_route_sched(r13, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=@newtfilter={0x90, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r15, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0xd, 0x9, 0xffffffffffffffff, 0x6, 0x588}, 0x2}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x1fc16}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x90}}, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x13c, r1, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4d4d6b81945c4918}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @HEADER={0x4}]}, 0x13c}, 0x1, 0x0, 0x0, 0x802}, 0x8000) r16 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r16, 0x0, 0x40, &(0x7f0000000200)=@filter={'filter\x00', 0xe, 0x4, 0x2b0, 0xffffffff, 0x0, 0x180, 0x218, 0xffffffff, 0xffffffff, 0xe8, 0x180, 0x218, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0x1, [0x50]}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x310) syz_emit_ethernet(0x36, &(0x7f0000000600)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 0s ago: executing program 2 (id=5624): r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000010025bd70000000040000000000", @ANYRES32=0x0, @ANYBLOB="a428040000000000140035006261746164763000000000000000000008000a00", @ANYRES32=r2], 0x3c}}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) (fail_nth: 4) kernel console output (not intermixed with test programs): u (65589) ! [ 532.170387][T21076] syzkaller1: entered promiscuous mode [ 532.170410][T21076] syzkaller1: entered allmulticast mode [ 532.231062][ T5630] Bluetooth: hci3: unexpected event for opcode 0x2035 [ 532.399400][T21099] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4957'. [ 532.401872][T21099] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4957'. [ 532.489097][T21106] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4959'. [ 532.707873][T21117] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4964'. [ 533.139609][T21136] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4970'. [ 533.298621][T21140] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 533.468322][T21148] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 533.487787][T21154] netlink: zone id is out of range [ 533.487803][T21154] netlink: zone id is out of range [ 533.487812][T21154] netlink: zone id is out of range [ 533.487820][T21154] netlink: zone id is out of range [ 533.487828][T21154] netlink: zone id is out of range [ 533.487836][T21154] netlink: zone id is out of range [ 533.573772][T21156] netlink: 'syz.1.4975': attribute type 1 has an invalid length. [ 533.816728][T21156] 8021q: adding VLAN 0 to HW filter on device bond7 [ 533.862855][T21160] macvlan0: entered promiscuous mode [ 533.862878][T21160] macvlan0: entered allmulticast mode [ 533.866687][T21160] bond7: entered allmulticast mode [ 533.866761][T21160] bond7: entered promiscuous mode [ 533.869404][T21160] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 533.896025][ T5630] Bluetooth: hci3: unexpected event for opcode 0x2035 [ 533.898378][T21160] team0: Port device macvlan0 added [ 533.930637][T21168] bond7: (slave ip6gretap1): making interface the new active one [ 533.930661][T21168] ip6gretap1: entered promiscuous mode [ 533.930888][T21168] ip6gretap1: entered allmulticast mode [ 533.932472][T21168] bond7: (slave ip6gretap1): Enslaving as an active interface with an up link [ 534.019923][T21175] xt_CT: No such helper "snmp_trap" [ 534.475929][T21207] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4985'. [ 534.815600][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 535.482962][T21246] __nla_validate_parse: 2 callbacks suppressed [ 535.482984][T21246] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4998'. [ 535.505691][T21246] sctp: [Deprecated]: syz.4.4998 (pid 21246) Use of struct sctp_assoc_value in delayed_ack socket option. [ 535.505691][T21246] Use struct sctp_sack_info instead [ 535.505857][T21246] sctp: [Deprecated]: syz.4.4998 (pid 21246) Use of struct sctp_assoc_value in delayed_ack socket option. [ 535.505857][T21246] Use struct sctp_sack_info instead [ 535.607358][T21255] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5001'. [ 535.672168][T21261] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5001'. [ 535.687636][T21249] net_ratelimit: 1712 callbacks suppressed [ 535.687659][T21249] netlink: NAT attribute has 8 unknown bytes [ 535.687686][T21249] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 535.746465][T21249] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 535.773381][T21266] FAULT_INJECTION: forcing a failure. [ 535.773381][T21266] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 535.773414][T21266] CPU: 1 UID: 0 PID: 21266 Comm: syz.4.5004 Not tainted syzkaller #0 PREEMPT(full) [ 535.773441][T21266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 535.773452][T21266] Call Trace: [ 535.773461][T21266] [ 535.773470][T21266] dump_stack_lvl+0xe8/0x150 [ 535.773501][T21266] should_fail_ex+0x410/0x560 [ 535.773532][T21266] _copy_from_iter+0x3b0/0x1660 [ 535.773570][T21266] ? __pfx__copy_from_iter+0x10/0x10 [ 535.773599][T21266] ? __pfx__copy_from_iter+0x10/0x10 [ 535.773630][T21266] copy_page_from_iter+0x219/0x2d0 [ 535.773659][T21266] skb_copy_datagram_from_iter+0x2f4/0x720 [ 535.773696][T21266] packet_sendmsg+0x37c7/0x51b0 [ 535.773730][T21266] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 535.773765][T21266] ? __lock_acquire+0x747/0x2de0 [ 535.773797][T21266] ? lock_acquire+0x115/0x350 [ 535.773817][T21266] ? __lock_acquire+0x747/0x2de0 [ 535.773841][T21266] ? __pfx_packet_sendmsg+0x10/0x10 [ 535.773862][T21266] ? aa_sk_perm+0x713/0x900 [ 535.773883][T21266] ? __lock_acquire+0x747/0x2de0 [ 535.773907][T21266] ? __up_read+0x2e0/0x930 [ 535.773930][T21266] ? __pfx_aa_sk_perm+0x10/0x10 [ 535.773954][T21266] ? aa_sock_msg_perm+0x144/0x210 [ 535.773984][T21266] ? apparmor_socket_sendmsg+0x98/0x360 [ 535.774009][T21266] ? __pfx_packet_sendmsg+0x10/0x10 [ 535.774033][T21266] sock_sendmsg_nosec+0x14e/0x190 [ 535.774056][T21266] ____sys_sendmsg+0x54e/0x850 [ 535.774084][T21266] ? __pfx_____sys_sendmsg+0x10/0x10 [ 535.774116][T21266] ? import_iovec+0x73/0xa0 [ 535.774146][T21266] ___sys_sendmsg+0x2a5/0x360 [ 535.774169][T21266] ? __lock_acquire+0x747/0x2de0 [ 535.774197][T21266] ? __pfx____sys_sendmsg+0x10/0x10 [ 535.774251][T21266] ? __fget_files+0x2a/0x420 [ 535.774275][T21266] ? __fget_files+0x3a2/0x420 [ 535.774310][T21266] __x64_sys_sendmsg+0x1b1/0x290 [ 535.774340][T21266] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 535.774385][T21266] do_syscall_64+0x166/0x520 [ 535.774409][T21266] ? trace_irq_disable+0x3b/0x140 [ 535.774429][T21266] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.774448][T21266] ? clear_bhb_loop+0x70/0xc0 [ 535.774472][T21266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.774490][T21266] RIP: 0033:0x7f7d9e19f559 [ 535.774509][T21266] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 535.774525][T21266] RSP: 002b:00007f7d9f10a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 535.774546][T21266] RAX: ffffffffffffffda RBX: 00007f7d9e425fa0 RCX: 00007f7d9e19f559 [ 535.774560][T21266] RDX: 0000000000000000 RSI: 0000200000001440 RDI: 0000000000000003 [ 535.774572][T21266] RBP: 00007f7d9f10a090 R08: 0000000000000000 R09: 0000000000000000 [ 535.774583][T21266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 535.774593][T21266] R13: 00007f7d9e426038 R14: 00007f7d9e425fa0 R15: 00007fff0f2ea808 [ 535.774621][T21266] [ 536.056433][T21271] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5006'. [ 536.123750][T21268] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 536.660921][T21296] bridge3: entered allmulticast mode [ 536.823426][T21320] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5019'. [ 536.900684][T21322] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5021'. [ 536.900718][T21322] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5021'. [ 537.099904][T21322] gretap1: entered allmulticast mode [ 537.856490][T21366] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5034'. [ 537.919275][T21368] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5034'. [ 538.188355][T21385] ip_tables: iptables: counters copy to user failed while replacing table [ 538.249810][T21385] ip_tables: iptables: counters copy to user failed while replacing table [ 538.823091][T21417] netlink: 'syz.3.5047': attribute type 29 has an invalid length. [ 538.823108][T21417] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5047'. [ 538.824893][T21417] netlink: 'syz.3.5047': attribute type 29 has an invalid length. [ 539.073131][T21431] ip_tables: iptables: counters copy to user failed while replacing table [ 539.183624][T21434] FAULT_INJECTION: forcing a failure. [ 539.183624][T21434] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 539.183658][T21434] CPU: 0 UID: 0 PID: 21434 Comm: syz.4.5051 Not tainted syzkaller #0 PREEMPT(full) [ 539.183680][T21434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 539.183691][T21434] Call Trace: [ 539.183698][T21434] [ 539.183707][T21434] dump_stack_lvl+0xe8/0x150 [ 539.183739][T21434] should_fail_ex+0x410/0x560 [ 539.183770][T21434] _copy_from_iter+0x1d3/0x1660 [ 539.183795][T21434] ? __alloc_skb+0x27a/0x7a0 [ 539.183820][T21434] ? __alloc_skb+0x27a/0x7a0 [ 539.183843][T21434] ? __alloc_skb+0x27a/0x7a0 [ 539.183866][T21434] ? __pfx__copy_from_iter+0x10/0x10 [ 539.183889][T21434] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 539.183909][T21434] ? __alloc_skb+0x27a/0x7a0 [ 539.183930][T21434] ? __alloc_skb+0x27a/0x7a0 [ 539.183957][T21434] ? netlink_sendmsg+0x650/0xb40 [ 539.183978][T21434] ? skb_put+0x112/0x210 [ 539.184004][T21434] netlink_sendmsg+0x6c0/0xb40 [ 539.184035][T21434] ? __pfx_netlink_sendmsg+0x10/0x10 [ 539.184065][T21434] ? apparmor_socket_sendmsg+0x98/0x360 [ 539.184093][T21434] ? __pfx_netlink_sendmsg+0x10/0x10 [ 539.184112][T21434] sock_sendmsg_nosec+0x14e/0x190 [ 539.184135][T21434] ____sys_sendmsg+0x54e/0x850 [ 539.184165][T21434] ? __pfx_____sys_sendmsg+0x10/0x10 [ 539.184198][T21434] ? import_iovec+0x73/0xa0 [ 539.184228][T21434] ___sys_sendmsg+0x2a5/0x360 [ 539.184252][T21434] ? __lock_acquire+0x747/0x2de0 [ 539.184277][T21434] ? __pfx____sys_sendmsg+0x10/0x10 [ 539.184339][T21434] ? __fget_files+0x2a/0x420 [ 539.184365][T21434] ? __fget_files+0x3a2/0x420 [ 539.184400][T21434] __x64_sys_sendmsg+0x1b1/0x290 [ 539.184427][T21434] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 539.184472][T21434] do_syscall_64+0x166/0x520 [ 539.184528][T21434] ? trace_irq_disable+0x3b/0x140 [ 539.184548][T21434] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.184568][T21434] ? clear_bhb_loop+0x70/0xc0 [ 539.184591][T21434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.184609][T21434] RIP: 0033:0x7f7d9e19f559 [ 539.184627][T21434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 539.184642][T21434] RSP: 002b:00007f7d9f0e9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 539.184665][T21434] RAX: ffffffffffffffda RBX: 00007f7d9e426090 RCX: 00007f7d9e19f559 [ 539.184678][T21434] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 539.184691][T21434] RBP: 00007f7d9f0e9090 R08: 0000000000000000 R09: 0000000000000000 [ 539.184703][T21434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 539.184715][T21434] R13: 00007f7d9e426128 R14: 00007f7d9e426090 R15: 00007fff0f2ea808 [ 539.184746][T21434] [ 539.444521][T21442] ip_tables: iptables: counters copy to user failed while replacing table [ 539.516074][T21442] ip_tables: iptables: counters copy to user failed while replacing table [ 539.608770][T21446] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 540.524544][T21483] veth0: entered allmulticast mode [ 540.753511][T21493] net_ratelimit: 4 callbacks suppressed [ 540.753532][T21493] ip_tables: iptables: counters copy to user failed while replacing table [ 540.806335][T21493] ip_tables: iptables: counters copy to user failed while replacing table [ 541.129780][T21506] bridge0: entered promiscuous mode [ 541.134131][T21508] __nla_validate_parse: 6 callbacks suppressed [ 541.134149][T21508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5075'. [ 541.313196][T21516] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5076'. [ 541.340708][T21516] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5076'. [ 541.483038][T21521] @0Ù: renamed from bond_slave_1 (while UP) [ 541.580245][T21506] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 541.642249][T21529] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5080'. [ 541.789166][T21536] netlink: 'syz.1.5081': attribute type 10 has an invalid length. [ 541.789193][T21536] openvswitch: netlink: Flow actions attr not present in new flow. [ 541.853714][T21541] ip_tables: iptables: counters copy to user failed while replacing table [ 541.878070][T21541] ip_tables: iptables: counters copy to user failed while replacing table [ 541.930962][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 542.983959][T21593] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5095'. [ 543.034116][T21598] xt_hashlimit: size too large, truncated to 1048576 [ 543.178358][T21589] syzkaller0: renamed from gre1 [ 543.267276][T21609] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 543.342417][T21614] ip_tables: iptables: counters copy to user failed while replacing table [ 543.427110][T21614] ip_tables: iptables: counters copy to user failed while replacing table [ 544.178512][T21637] bond6: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 544.384799][T21657] ip_tables: iptables: counters copy to user failed while replacing table [ 544.653939][T21663] ip_tables: iptables: counters copy to user failed while replacing table [ 545.033254][T21637] bond6 (unregistering): Released all slaves [ 545.419205][T21676] netlink: 100 bytes leftover after parsing attributes in process `syz.0.5115'. [ 545.807521][T21691] Bluetooth: ISO socket layer initialized [ 546.090279][T21702] ip6gre0: entered allmulticast mode [ 546.282735][T21680] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 546.472608][T21716] net_ratelimit: 1 callbacks suppressed [ 546.472629][T21716] openvswitch: netlink: Port 14942209 exceeds max allowable 65535 [ 546.606229][T21721] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 547.166513][T21756] netlink: 112 bytes leftover after parsing attributes in process `syz.4.5141'. [ 547.174959][T21756] netlink: 'syz.4.5141': attribute type 1 has an invalid length. [ 547.314157][T21767] ip_tables: iptables: counters copy to user failed while replacing table [ 547.436063][T21774] ip_tables: iptables: counters copy to user failed while replacing table [ 547.461330][T21774] ip_tables: iptables: counters copy to user failed while replacing table [ 547.657794][T21779] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5148'. [ 547.731880][ T86] pimreg: left allmulticast mode [ 548.180331][T21793] ip_tables: iptables: counters copy to user failed while replacing table [ 548.467847][ T86] bond0 (unregistering): Released all slaves [ 548.514472][ T86] bond1 (unregistering): Released all slaves [ 548.547196][ T86] bond2 (unregistering): Released all slaves [ 548.580256][ T86] bond3 (unregistering): Released all slaves [ 548.614453][ T86] bond4 (unregistering): Released all slaves [ 548.658299][T21781] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 548.878566][T21812] vxcan1: entered promiscuous mode [ 548.897803][ T86] tipc: Disabling bearer [ 548.907024][ T86] tipc: Left network mode [ 548.990302][T21823] FAULT_INJECTION: forcing a failure. [ 548.990302][T21823] name failslab, interval 1, probability 0, space 0, times 0 [ 548.990325][T21823] CPU: 0 UID: 0 PID: 21823 Comm: syz.2.5161 Not tainted syzkaller #0 PREEMPT(full) [ 548.990347][T21823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 548.990353][T21823] Call Trace: [ 548.990358][T21823] [ 548.990364][T21823] dump_stack_lvl+0xe8/0x150 [ 548.990382][T21823] should_fail_ex+0x410/0x560 [ 548.990399][T21823] should_failslab+0xa8/0x100 [ 548.990415][T21823] __kvmalloc_node_noprof+0x176/0x820 [ 548.990428][T21823] ? security_capable+0x7e/0x2c0 [ 548.990443][T21823] ? bpf_check+0x165c/0x2ef0 [ 548.990454][T21823] ? bpf_check+0x165c/0x2ef0 [ 548.990468][T21823] bpf_check+0x165c/0x2ef0 [ 548.990488][T21823] ? __pfx_bpf_check+0x10/0x10 [ 548.990501][T21823] ? bpf_obj_name_cpy+0x194/0x1e0 [ 548.990519][T21823] bpf_prog_load+0x14d6/0x1c20 [ 548.990537][T21823] ? __pfx_bpf_prog_load+0x10/0x10 [ 548.990562][T21823] __sys_bpf+0xd0d/0xd90 [ 548.990578][T21823] ? __pfx___sys_bpf+0x10/0x10 [ 548.990595][T21823] ? __fget_files+0x2a/0x420 [ 548.990618][T21823] ? ksys_write+0x242/0x270 [ 548.990630][T21823] ? __pfx_ksys_write+0x10/0x10 [ 548.990643][T21823] __x64_sys_bpf+0xba/0xd0 [ 548.990655][T21823] do_syscall_64+0x166/0x520 [ 548.990669][T21823] ? trace_irq_disable+0x3b/0x140 [ 548.990679][T21823] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.990690][T21823] ? clear_bhb_loop+0x70/0xc0 [ 548.990703][T21823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.990713][T21823] RIP: 0033:0x7fca3dd9f559 [ 548.990724][T21823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 548.990733][T21823] RSP: 002b:00007fca3eb9f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 548.990745][T21823] RAX: ffffffffffffffda RBX: 00007fca3e025fa0 RCX: 00007fca3dd9f559 [ 548.990753][T21823] RDX: 0000000000000094 RSI: 00002000000001c0 RDI: 0000000000000005 [ 548.990760][T21823] RBP: 00007fca3eb9f090 R08: 0000000000000000 R09: 0000000000000000 [ 548.990766][T21823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 548.990772][T21823] R13: 00007fca3e026038 R14: 00007fca3e025fa0 R15: 00007ffc0874f1b8 [ 548.990789][T21823] [ 549.298067][T21831] syzkaller1: entered promiscuous mode [ 549.298092][T21831] syzkaller1: entered allmulticast mode [ 549.972947][ T86] hsr_slave_0: left promiscuous mode [ 549.982220][ T86] hsr_slave_1: left promiscuous mode [ 550.081021][ T86] veth1_macvtap: left promiscuous mode [ 550.081063][ T86] veth0_macvtap: left promiscuous mode [ 550.081181][ T86] veth1_vlan: left promiscuous mode [ 550.081247][ T86] veth0_vlan: left promiscuous mode [ 550.134229][T21866] FAULT_INJECTION: forcing a failure. [ 550.134229][T21866] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 550.134262][T21866] CPU: 1 UID: 0 PID: 21866 Comm: syz.3.5172 Not tainted syzkaller #0 PREEMPT(full) [ 550.134283][T21866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 550.134293][T21866] Call Trace: [ 550.134301][T21866] [ 550.134310][T21866] dump_stack_lvl+0xe8/0x150 [ 550.134340][T21866] should_fail_ex+0x410/0x560 [ 550.134370][T21866] _copy_from_user+0x2d/0xb0 [ 550.134398][T21866] ___sys_sendmsg+0x1c6/0x360 [ 550.134421][T21866] ? __lock_acquire+0x747/0x2de0 [ 550.134448][T21866] ? __pfx____sys_sendmsg+0x10/0x10 [ 550.134505][T21866] ? __fget_files+0x2a/0x420 [ 550.134530][T21866] ? __fget_files+0x3a2/0x420 [ 550.134564][T21866] __x64_sys_sendmsg+0x1b1/0x290 [ 550.134593][T21866] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 550.134634][T21866] do_syscall_64+0x166/0x520 [ 550.134712][T21866] ? trace_irq_disable+0x3b/0x140 [ 550.134731][T21866] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.134749][T21866] ? clear_bhb_loop+0x70/0xc0 [ 550.134772][T21866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.134790][T21866] RIP: 0033:0x7feef979f559 [ 550.134807][T21866] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 550.134821][T21866] RSP: 002b:00007feef79f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 550.134839][T21866] RAX: ffffffffffffffda RBX: 00007feef9a26090 RCX: 00007feef979f559 [ 550.134852][T21866] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000003 [ 550.134863][T21866] RBP: 00007feef79f6090 R08: 0000000000000000 R09: 0000000000000000 [ 550.134875][T21866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 550.134886][T21866] R13: 00007feef9a26128 R14: 00007feef9a26090 R15: 00007ffd40ce2818 [ 550.134915][T21866] [ 550.491606][T21879] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5176'. [ 550.491646][T21879] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5176'. [ 550.567341][T21882] netlink: 516 bytes leftover after parsing attributes in process `syz.3.5177'. [ 550.568067][T21882] netlink: Conntrack attr type has unexpected length (type=0, length=5, expected=0) [ 550.568145][T21882] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 550.836763][T21867] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5171'. [ 551.017437][T21882] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 551.017473][T21882] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 551.017509][T21882] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 551.209153][ T5630] Bluetooth: hci3: unexpected event for opcode 0x100c [ 551.553860][ T86] IPVS: stop unused estimator thread 0... [ 551.682795][T21916] netlink: 'syz.3.5189': attribute type 1 has an invalid length. [ 551.760381][T21923] atomic_op ffff8880557ab9e0 conn xmit_atomic 0000000000000000 [ 551.823105][T21924] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5189'. [ 551.823128][T21924] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5189'. [ 551.903575][T21926] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5193'. [ 551.919252][ T25] dummy0: entered promiscuous mode [ 551.920279][T21924] macvtap1: entered allmulticast mode [ 551.920296][T21924] dummy0: entered allmulticast mode [ 552.282427][T21944] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5195'. [ 552.725251][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 552.841436][T21964] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5201'. [ 552.858633][T21966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5202'. [ 553.054532][T21945] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 553.064187][ T61] IPVS: starting estimator thread 0... [ 553.168444][T21977] IPVS: using max 37 ests per chain, 88800 per kthread [ 553.576522][ T5855] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:0c to non-existent VLAN 257 [ 553.576842][ T5855] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 553.677596][T21989] vxcan1: left promiscuous mode [ 553.782031][ T25] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 553.856430][T22011] netlink: 'syz.4.5212': attribute type 8 has an invalid length. [ 554.592986][T22045] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5218'. [ 554.593014][T22045] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5218'. [ 554.781431][T22056] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5219'. [ 554.834282][T22056] netlink: 'syz.1.5219': attribute type 10 has an invalid length. [ 554.834304][T22056] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5219'. [ 554.860518][T22056] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 555.174141][T22071] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5223'. [ 555.199993][T22069] netlink: 'syz.4.5222': attribute type 1 has an invalid length. [ 555.200015][T22069] netlink: 'syz.4.5222': attribute type 2 has an invalid length. [ 555.200028][T22069] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5222'. [ 555.233415][T22069] netlink: 'syz.4.5222': attribute type 1 has an invalid length. [ 555.233441][T22069] netlink: 'syz.4.5222': attribute type 2 has an invalid length. [ 555.233452][T22069] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5222'. [ 555.275834][T22069] netlink: 'syz.4.5222': attribute type 1 has an invalid length. [ 555.275857][T22069] netlink: 'syz.4.5222': attribute type 2 has an invalid length. [ 555.333539][T22069] netlink: 'syz.4.5222': attribute type 1 has an invalid length. [ 555.333561][T22069] netlink: 'syz.4.5222': attribute type 2 has an invalid length. [ 555.811503][T22098] 8021q: adding VLAN 0 to HW filter on device bond8 [ 556.284450][T22122] TC_ACT_REPEAT abuse ? [ 556.418929][T22129] FAULT_INJECTION: forcing a failure. [ 556.418929][T22129] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 556.418962][T22129] CPU: 0 UID: 0 PID: 22129 Comm: syz.4.5234 Not tainted syzkaller #0 PREEMPT(full) [ 556.418983][T22129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 556.418994][T22129] Call Trace: [ 556.419002][T22129] [ 556.419011][T22129] dump_stack_lvl+0xe8/0x150 [ 556.419043][T22129] should_fail_ex+0x410/0x560 [ 556.419072][T22129] prepare_alloc_pages+0x223/0x600 [ 556.419098][T22129] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 556.419124][T22129] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 556.419147][T22129] ? __pfx_policy_nodemask+0x10/0x10 [ 556.419167][T22129] ? __get_vm_area_node+0x155/0x2f0 [ 556.419199][T22129] ? __vmalloc_node_range_noprof+0x343/0x1540 [ 556.419215][T22129] ? __vmalloc_noprof+0xd2/0x120 [ 556.419230][T22129] ? bpf_prog_calc_tag+0x51/0x370 [ 556.419250][T22129] ? check_and_resolve_insns+0xbb/0x21d0 [ 556.419272][T22129] ? bpf_prog_load+0x14d6/0x1c20 [ 556.419291][T22129] ? __sys_bpf+0xd0d/0xd90 [ 556.419309][T22129] ? __x64_sys_bpf+0xba/0xd0 [ 556.419327][T22129] ? do_syscall_64+0x166/0x520 [ 556.419351][T22129] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.419374][T22129] alloc_pages_mpol+0x21e/0x390 [ 556.419404][T22129] alloc_pages_noprof+0xb1/0x2b0 [ 556.419431][T22129] get_free_pages_noprof+0xf/0x80 [ 556.419454][T22129] __kasan_populate_vmalloc+0x38/0x1c0 [ 556.419476][T22129] ? do_raw_spin_unlock+0xf5/0x200 [ 556.419508][T22129] alloc_vmap_area+0xd1a/0x1420 [ 556.419550][T22129] ? __pfx_alloc_vmap_area+0x10/0x10 [ 556.419575][T22129] ? __kmalloc_cache_node_noprof+0x3d1/0x620 [ 556.419601][T22129] ? __kmalloc_cache_node_noprof+0x1f7/0x620 [ 556.419621][T22129] ? __get_vm_area_node+0x155/0x2f0 [ 556.419653][T22129] __get_vm_area_node+0x200/0x2f0 [ 556.419685][T22129] __vmalloc_node_range_noprof+0x343/0x1540 [ 556.419705][T22129] ? bpf_prog_calc_tag+0x51/0x370 [ 556.419728][T22129] ? __x64_sys_bpf+0xba/0xd0 [ 556.419746][T22129] ? do_syscall_64+0x166/0x520 [ 556.419775][T22129] ? __kasan_kmalloc+0x93/0xb0 [ 556.419798][T22129] ? bpf_prog_load+0x14d6/0x1c20 [ 556.419819][T22129] ? __sys_bpf+0xd0d/0xd90 [ 556.419837][T22129] ? __x64_sys_bpf+0xba/0xd0 [ 556.419869][T22129] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 556.419900][T22129] ? bpf_prog_calc_tag+0x51/0x370 [ 556.419921][T22129] __vmalloc_noprof+0xd2/0x120 [ 556.419940][T22129] ? bpf_prog_calc_tag+0x51/0x370 [ 556.419965][T22129] bpf_prog_calc_tag+0x51/0x370 [ 556.419987][T22129] ? __pfx_cmp_subprogs+0x10/0x10 [ 556.420014][T22129] check_and_resolve_insns+0xbb/0x21d0 [ 556.420041][T22129] ? add_subprog+0x2e2/0x3f0 [ 556.420067][T22129] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 556.420100][T22129] bpf_check+0x18f7/0x2ef0 [ 556.420140][T22129] ? __pfx_bpf_check+0x10/0x10 [ 556.420164][T22129] ? bpf_obj_name_cpy+0x194/0x1e0 [ 556.420202][T22129] bpf_prog_load+0x14d6/0x1c20 [ 556.420236][T22129] ? __pfx_bpf_prog_load+0x10/0x10 [ 556.420284][T22129] __sys_bpf+0xd0d/0xd90 [ 556.420314][T22129] ? __pfx___sys_bpf+0x10/0x10 [ 556.420347][T22129] ? __fget_files+0x2a/0x420 [ 556.420390][T22129] ? ksys_write+0x242/0x270 [ 556.420410][T22129] ? __pfx_ksys_write+0x10/0x10 [ 556.420433][T22129] __x64_sys_bpf+0xba/0xd0 [ 556.420455][T22129] do_syscall_64+0x166/0x520 [ 556.420477][T22129] ? trace_irq_disable+0x3b/0x140 [ 556.420495][T22129] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.420513][T22129] ? clear_bhb_loop+0x70/0xc0 [ 556.420534][T22129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.420553][T22129] RIP: 0033:0x7f7d9e19f559 [ 556.420571][T22129] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 556.420586][T22129] RSP: 002b:00007f7d9f10a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 556.420605][T22129] RAX: ffffffffffffffda RBX: 00007f7d9e425fa0 RCX: 00007f7d9e19f559 [ 556.420616][T22129] RDX: 0000000000000094 RSI: 0000200000000d00 RDI: 0000000000000005 [ 556.420626][T22129] RBP: 00007f7d9f10a090 R08: 0000000000000000 R09: 0000000000000000 [ 556.420637][T22129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 556.420647][T22129] R13: 00007f7d9e426038 R14: 00007f7d9e425fa0 R15: 00007fff0f2ea808 [ 556.420674][T22129] [ 556.480939][T22129] syz.4.5234: vmalloc error: size 32, align 0x1, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 556.481003][T22129] CPU: 1 UID: 0 PID: 22129 Comm: syz.4.5234 Not tainted syzkaller #0 PREEMPT(full) [ 556.481024][T22129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 556.481036][T22129] Call Trace: [ 556.481043][T22129] [ 556.481051][T22129] dump_stack_lvl+0xe8/0x150 [ 556.481082][T22129] warn_alloc+0x24d/0x270 [ 556.481106][T22129] ? lockdep_hardirqs_on+0x7b/0x110 [ 556.481132][T22129] ? __pfx_warn_alloc+0x10/0x10 [ 556.481151][T22129] ? kfree+0x1c5/0x650 [ 556.481174][T22129] ? __get_vm_area_node+0x219/0x2f0 [ 556.481209][T22129] __vmalloc_node_range_noprof+0x36b/0x1540 [ 556.481228][T22129] ? __x64_sys_bpf+0xba/0xd0 [ 556.481246][T22129] ? do_syscall_64+0x166/0x520 [ 556.481275][T22129] ? __kasan_kmalloc+0x93/0xb0 [ 556.481298][T22129] ? bpf_prog_load+0x14d6/0x1c20 [ 556.481318][T22129] ? __sys_bpf+0xd0d/0xd90 [ 556.481336][T22129] ? __x64_sys_bpf+0xba/0xd0 [ 556.481366][T22129] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 556.481396][T22129] ? bpf_prog_calc_tag+0x51/0x370 [ 556.481417][T22129] __vmalloc_noprof+0xd2/0x120 [ 556.481434][T22129] ? bpf_prog_calc_tag+0x51/0x370 [ 556.481459][T22129] bpf_prog_calc_tag+0x51/0x370 [ 556.481480][T22129] ? __pfx_cmp_subprogs+0x10/0x10 [ 556.481506][T22129] check_and_resolve_insns+0xbb/0x21d0 [ 556.481532][T22129] ? add_subprog+0x2e2/0x3f0 [ 556.481556][T22129] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 556.481589][T22129] bpf_check+0x18f7/0x2ef0 [ 556.481627][T22129] ? __pfx_bpf_check+0x10/0x10 [ 556.481650][T22129] ? bpf_obj_name_cpy+0x194/0x1e0 [ 556.481680][T22129] bpf_prog_load+0x14d6/0x1c20 [ 556.481720][T22129] ? __pfx_bpf_prog_load+0x10/0x10 [ 556.481766][T22129] __sys_bpf+0xd0d/0xd90 [ 556.481795][T22129] ? __pfx___sys_bpf+0x10/0x10 [ 556.481826][T22129] ? __fget_files+0x2a/0x420 [ 556.481869][T22129] ? ksys_write+0x242/0x270 [ 556.481890][T22129] ? __pfx_ksys_write+0x10/0x10 [ 556.481913][T22129] __x64_sys_bpf+0xba/0xd0 [ 556.481937][T22129] do_syscall_64+0x166/0x520 [ 556.481960][T22129] ? trace_irq_disable+0x3b/0x140 [ 556.481979][T22129] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.481998][T22129] ? clear_bhb_loop+0x70/0xc0 [ 556.482020][T22129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.482038][T22129] RIP: 0033:0x7f7d9e19f559 [ 556.482056][T22129] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 556.482071][T22129] RSP: 002b:00007f7d9f10a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 556.482088][T22129] RAX: ffffffffffffffda RBX: 00007f7d9e425fa0 RCX: 00007f7d9e19f559 [ 556.482101][T22129] RDX: 0000000000000094 RSI: 0000200000000d00 RDI: 0000000000000005 [ 556.482113][T22129] RBP: 00007f7d9f10a090 R08: 0000000000000000 R09: 0000000000000000 [ 556.482123][T22129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 556.482132][T22129] R13: 00007f7d9e426038 R14: 00007f7d9e425fa0 R15: 00007fff0f2ea808 [ 556.482159][T22129] [ 556.482190][T22129] Mem-Info: [ 556.482200][T22129] active_anon:5675 inactive_anon:0 isolated_anon:0 [ 556.482200][T22129] active_file:0 inactive_file:44069 isolated_file:0 [ 556.482200][T22129] unevictable:0 dirty:325 writeback:0 [ 556.482200][T22129] slab_reclaimable:11696 slab_unreclaimable:120349 [ 556.482200][T22129] mapped:30125 shmem:525 pagetables:1187 [ 556.482200][T22129] sec_pagetables:0 bounce:0 [ 556.482200][T22129] kernel_misc_reclaimable:0 [ 556.482200][T22129] free:1256019 free_pcp:12675 free_cma:0 [ 556.482249][T22129] Node 0 active_anon:22700kB inactive_anon:0kB active_file:0kB inactive_file:176080kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:120500kB dirty:1296kB writeback:0kB shmem:2100kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15100kB pagetables:4592kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 556.482299][T22129] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 556.482346][T22129] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 556.482398][T22129] lowmem_reserve[]: 0 2468 2468 2468 2468 [ 556.482453][T22129] Node 0 DMA32 free:1062156kB boost:0kB min:33984kB low:42480kB high:50976kB reserved_highatomic:0kB free_highatomic:0kB active_anon:22700kB inactive_anon:0kB active_file:0kB inactive_file:176080kB unevictable:0kB writepending:1296kB zspages:0kB present:3129332kB managed:2527372kB mlocked:0kB bounce:0kB free_pcp:47932kB local_pcp:26184kB free_cma:0kB [ 556.482509][T22129] lowmem_reserve[]: 0 0 0 0 0 [ 556.482547][T22129] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 556.482597][T22129] lowmem_reserve[]: 0 0 0 0 0 [ 556.482629][T22129] Node 1 Normal free:3946560kB boost:0kB min:55916kB low:69892kB high:83868kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:2768kB local_pcp:2768kB free_cma:0kB [ 556.482688][T22129] lowmem_reserve[]: 0 0 0 0 0 [ 556.482720][T22129] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 556.482827][T22129] Node 0 DMA32: 583*4kB (ME) 1210*8kB (UME) 344*16kB (UME) 2351*32kB (UME) 724*64kB (UME) 331*128kB (UME) 134*256kB (UME) 49*512kB (UM) 16*1024kB (UE) 11*2048kB (UME) 191*4096kB (UM) = 1062092kB [ 556.482974][T22129] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 556.483066][T22129] Node 1 Normal: 1*4kB (M) 2*8kB (UM) 2*16kB (UM) 2*32kB (UM) 2*64kB (UM) 3*128kB (UM) 4*256kB (UM) 3*512kB (UM) 1*1024kB (M) 1*2048kB (U) 962*4096kB (M) = 3946612kB [ 556.483208][T22129] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 556.483223][T22129] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 556.483238][T22129] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 556.483253][T22129] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 556.483268][T22129] 44590 total pagecache pages [ 556.483276][T22129] 0 pages in swap cache [ 556.483283][T22129] Free swap = 124996kB [ 556.483290][T22129] Total swap = 124996kB [ 556.483298][T22129] 2097051 pages RAM [ 556.483305][T22129] 0 pages HighMem/MovableOnly [ 556.483311][T22129] 433592 pages reserved [ 556.483319][T22129] 0 pages cma reserved [ 556.539500][T22131] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 556.928178][T22139] ip6tnl1: entered allmulticast mode [ 557.351219][T22140] digital: digital_start_poll: Unknown protocol [ 557.387387][T22136] __nla_validate_parse: 37 callbacks suppressed [ 557.387410][T22136] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5236'. [ 557.470685][T22160] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5238'. [ 557.470713][T22160] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5238'. [ 557.470727][T22160] netlink: 572 bytes leftover after parsing attributes in process `syz.2.5238'. [ 557.585439][T22154] team0 (unregistering): Port device bond0 removed [ 558.842469][T22218] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5248'. [ 558.844784][T22218] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 558.901474][T22213] syzkaller0: entered promiscuous mode [ 558.901503][T22213] syzkaller0: entered allmulticast mode [ 559.104612][T22226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5251'. [ 559.104637][T22226] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5251'. [ 559.104838][T22225] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5251'. [ 559.104854][T22225] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5251'. [ 559.160823][T22225] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5251'. [ 559.925309][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 560.967953][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 561.131721][T22184] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 561.905245][T22287] validate_nla: 60 callbacks suppressed [ 561.905266][T22287] netlink: 'syz.1.5262': attribute type 49 has an invalid length. [ 564.573047][T22302] __nla_validate_parse: 1 callbacks suppressed [ 564.573067][T22302] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5265'. [ 564.608411][T22287] ip6gretap0: entered promiscuous mode [ 564.608432][T22287] ip6gretap0: entered allmulticast mode [ 564.672430][T22306] netlink: 'syz.4.5265': attribute type 10 has an invalid length. [ 564.672451][T22306] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5265'. [ 564.678309][T22306] bridge0: port 1(batadv0) entered blocking state [ 564.678464][T22306] bridge0: port 1(batadv0) entered disabled state [ 564.695774][ T161] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 564.695794][ T161] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 564.737345][T22306] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 565.163728][T22335] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5273'. [ 565.525622][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 566.074224][T22379] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5280'. [ 566.131781][T22380] netlink: NAT attribute has 8 unknown bytes [ 566.131819][T22380] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 566.173484][T22380] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 566.241421][T22387] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5283'. [ 566.298388][T22391] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 566.386609][T22379] ip6gretap1: entered allmulticast mode [ 566.412781][T22379] batman_adv: batadv0: Adding interface: ip6gretap1 [ 566.412801][T22379] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 566.413089][T22379] batman_adv: batadv0: Interface activated: ip6gretap1 [ 566.499977][T22398] FAULT_INJECTION: forcing a failure. [ 566.499977][T22398] name failslab, interval 1, probability 0, space 0, times 0 [ 566.500010][T22398] CPU: 1 UID: 0 PID: 22398 Comm: syz.3.5285 Not tainted syzkaller #0 PREEMPT(full) [ 566.500031][T22398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 566.500052][T22398] Call Trace: [ 566.500060][T22398] [ 566.500067][T22398] dump_stack_lvl+0xe8/0x150 [ 566.500097][T22398] should_fail_ex+0x410/0x560 [ 566.500129][T22398] should_failslab+0xa8/0x100 [ 566.500156][T22398] __kmalloc_cache_node_noprof+0xaa/0x620 [ 566.500177][T22398] ? unwind_get_return_address+0x4d/0x90 [ 566.500199][T22398] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 566.500221][T22398] ? __get_vm_area_node+0x155/0x2f0 [ 566.500247][T22398] ? __get_vm_area_node+0x155/0x2f0 [ 566.500282][T22398] __get_vm_area_node+0x155/0x2f0 [ 566.500317][T22398] __vmalloc_node_range_noprof+0x343/0x1540 [ 566.500338][T22398] ? bpf_prog_calc_tag+0x51/0x370 [ 566.500364][T22398] ? __x64_sys_bpf+0xba/0xd0 [ 566.500382][T22398] ? do_syscall_64+0x166/0x520 [ 566.500414][T22398] ? __kasan_kmalloc+0x93/0xb0 [ 566.500438][T22398] ? bpf_prog_load+0x14d6/0x1c20 [ 566.500460][T22398] ? __sys_bpf+0xd0d/0xd90 [ 566.500479][T22398] ? __x64_sys_bpf+0xba/0xd0 [ 566.500510][T22398] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 566.500541][T22398] ? bpf_prog_calc_tag+0x51/0x370 [ 566.500562][T22398] __vmalloc_noprof+0xd2/0x120 [ 566.500583][T22398] ? bpf_prog_calc_tag+0x51/0x370 [ 566.500609][T22398] bpf_prog_calc_tag+0x51/0x370 [ 566.500632][T22398] ? __pfx_cmp_subprogs+0x10/0x10 [ 566.500660][T22398] check_and_resolve_insns+0xbb/0x21d0 [ 566.500687][T22398] ? add_subprog+0x2e2/0x3f0 [ 566.500712][T22398] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 566.500746][T22398] bpf_check+0x18f7/0x2ef0 [ 566.500785][T22398] ? __pfx_bpf_check+0x10/0x10 [ 566.500810][T22398] ? bpf_obj_name_cpy+0x194/0x1e0 [ 566.500841][T22398] bpf_prog_load+0x14d6/0x1c20 [ 566.500875][T22398] ? __pfx_bpf_prog_load+0x10/0x10 [ 566.500923][T22398] __sys_bpf+0xd0d/0xd90 [ 566.500954][T22398] ? __pfx___sys_bpf+0x10/0x10 [ 566.500988][T22398] ? __fget_files+0x2a/0x420 [ 566.501032][T22398] ? ksys_write+0x242/0x270 [ 566.501062][T22398] ? __pfx_ksys_write+0x10/0x10 [ 566.501090][T22398] __x64_sys_bpf+0xba/0xd0 [ 566.501113][T22398] do_syscall_64+0x166/0x520 [ 566.501137][T22398] ? trace_irq_disable+0x3b/0x140 [ 566.501156][T22398] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.501175][T22398] ? clear_bhb_loop+0x70/0xc0 [ 566.501199][T22398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.501217][T22398] RIP: 0033:0x7feef979f559 [ 566.501235][T22398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 566.501251][T22398] RSP: 002b:00007feefa58a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 566.501271][T22398] RAX: ffffffffffffffda RBX: 00007feef9a25fa0 RCX: 00007feef979f559 [ 566.501285][T22398] RDX: 0000000000000094 RSI: 0000200000000cc0 RDI: 0000000000000005 [ 566.501297][T22398] RBP: 00007feefa58a090 R08: 0000000000000000 R09: 0000000000000000 [ 566.501308][T22398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 566.501320][T22398] R13: 00007feef9a26038 R14: 00007feef9a25fa0 R15: 00007ffd40ce2818 [ 566.501351][T22398] [ 566.527167][T22398] syz.3.5285: vmalloc error: size 120, align 0x1, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 566.527251][T22398] CPU: 1 UID: 0 PID: 22398 Comm: syz.3.5285 Not tainted syzkaller #0 PREEMPT(full) [ 566.527272][T22398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 566.527284][T22398] Call Trace: [ 566.527292][T22398] [ 566.527299][T22398] dump_stack_lvl+0xe8/0x150 [ 566.527331][T22398] warn_alloc+0x24d/0x270 [ 566.527353][T22398] ? __kasan_kmalloc+0x22/0xb0 [ 566.527379][T22398] ? __pfx_warn_alloc+0x10/0x10 [ 566.527398][T22398] ? __get_vm_area_node+0x155/0x2f0 [ 566.527431][T22398] ? __get_vm_area_node+0x2a9/0x2f0 [ 566.527468][T22398] __vmalloc_node_range_noprof+0x36b/0x1540 [ 566.527489][T22398] ? __x64_sys_bpf+0xba/0xd0 [ 566.527507][T22398] ? do_syscall_64+0x166/0x520 [ 566.527536][T22398] ? __kasan_kmalloc+0x93/0xb0 [ 566.527558][T22398] ? bpf_prog_load+0x14d6/0x1c20 [ 566.527578][T22398] ? __sys_bpf+0xd0d/0xd90 [ 566.527597][T22398] ? __x64_sys_bpf+0xba/0xd0 [ 566.527627][T22398] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 566.527656][T22398] ? bpf_prog_calc_tag+0x51/0x370 [ 566.527677][T22398] __vmalloc_noprof+0xd2/0x120 [ 566.527695][T22398] ? bpf_prog_calc_tag+0x51/0x370 [ 566.527720][T22398] bpf_prog_calc_tag+0x51/0x370 [ 566.527741][T22398] ? __pfx_cmp_subprogs+0x10/0x10 [ 566.527766][T22398] check_and_resolve_insns+0xbb/0x21d0 [ 566.527793][T22398] ? add_subprog+0x2e2/0x3f0 [ 566.527818][T22398] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 566.527851][T22398] bpf_check+0x18f7/0x2ef0 [ 566.527889][T22398] ? __pfx_bpf_check+0x10/0x10 [ 566.527913][T22398] ? bpf_obj_name_cpy+0x194/0x1e0 [ 566.527943][T22398] bpf_prog_load+0x14d6/0x1c20 [ 566.527977][T22398] ? __pfx_bpf_prog_load+0x10/0x10 [ 566.528023][T22398] __sys_bpf+0xd0d/0xd90 [ 566.528061][T22398] ? __pfx___sys_bpf+0x10/0x10 [ 566.528092][T22398] ? __fget_files+0x2a/0x420 [ 566.528135][T22398] ? ksys_write+0x242/0x270 [ 566.528158][T22398] ? __pfx_ksys_write+0x10/0x10 [ 566.528206][T22398] __x64_sys_bpf+0xba/0xd0 [ 566.528230][T22398] do_syscall_64+0x166/0x520 [ 566.528254][T22398] ? trace_irq_disable+0x3b/0x140 [ 566.528273][T22398] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.528292][T22398] ? clear_bhb_loop+0x70/0xc0 [ 566.528315][T22398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.528333][T22398] RIP: 0033:0x7feef979f559 [ 566.528351][T22398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 566.528366][T22398] RSP: 002b:00007feefa58a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 566.528384][T22398] RAX: ffffffffffffffda RBX: 00007feef9a25fa0 RCX: 00007feef979f559 [ 566.528397][T22398] RDX: 0000000000000094 RSI: 0000200000000cc0 RDI: 0000000000000005 [ 566.528409][T22398] RBP: 00007feefa58a090 R08: 0000000000000000 R09: 0000000000000000 [ 566.528421][T22398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 566.528432][T22398] R13: 00007feef9a26038 R14: 00007feef9a25fa0 R15: 00007ffd40ce2818 [ 566.528462][T22398] [ 566.529659][T22398] Mem-Info: [ 566.529671][T22398] active_anon:6175 inactive_anon:0 isolated_anon:0 [ 566.529671][T22398] active_file:0 inactive_file:44071 isolated_file:0 [ 566.529671][T22398] unevictable:0 dirty:181 writeback:0 [ 566.529671][T22398] slab_reclaimable:11805 slab_unreclaimable:121201 [ 566.529671][T22398] mapped:30477 shmem:877 pagetables:1267 [ 566.529671][T22398] sec_pagetables:0 bounce:0 [ 566.529671][T22398] kernel_misc_reclaimable:0 [ 566.529671][T22398] free:1260207 free_pcp:10218 free_cma:0 [ 566.538737][T22398] Node 0 active_anon:24800kB inactive_anon:0kB active_file:0kB inactive_file:176088kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:122008kB dirty:724kB writeback:0kB shmem:3608kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15316kB pagetables:4912kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 566.538796][T22398] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 566.538843][T22398] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 566.538895][T22398] lowmem_reserve[]: 0 2468 2468 2468 2468 [ 566.538928][T22398] Node 0 DMA32 free:1078100kB boost:0kB min:33984kB low:42480kB high:50976kB reserved_highatomic:0kB free_highatomic:0kB active_anon:24800kB inactive_anon:0kB active_file:0kB inactive_file:176088kB unevictable:0kB writepending:724kB zspages:0kB present:3129332kB managed:2527372kB mlocked:0kB bounce:0kB free_pcp:38736kB local_pcp:18360kB free_cma:0kB [ 566.538981][T22398] lowmem_reserve[]: 0 0 0 0 0 [ 566.539011][T22398] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 566.539064][T22398] lowmem_reserve[]: 0 0 0 0 0 [ 566.539094][T22398] Node 1 Normal free:3947368kB boost:0kB min:55916kB low:69892kB high:83868kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:2012kB local_pcp:2012kB free_cma:0kB [ 566.539145][T22398] lowmem_reserve[]: 0 0 0 0 0 [ 566.539175][T22398] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 566.539275][T22398] Node 0 DMA32: 1586*4kB (UME) 637*8kB (UME) 329*16kB (UME) 2393*32kB (UME) 766*64kB (UME) 344*128kB (UME) 143*256kB (UME) 50*512kB (UM) 16*1024kB (UE) 11*2048kB (UME) 193*4096kB (UM) = 1077984kB [ 566.539401][T22398] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 566.539479][T22398] Node 1 Normal: 2*4kB (UM) 2*8kB (UM) 1*16kB (M) 2*32kB (UM) 2*64kB (UM) 3*128kB (UM) 3*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 962*4096kB (M) = 3947368kB [ 566.539600][T22398] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 566.539613][T22398] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 566.539627][T22398] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 566.539641][T22398] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 566.539652][T22398] 44969 total pagecache pages [ 566.539659][T22398] 0 pages in swap cache [ 566.539664][T22398] Free swap = 124996kB [ 566.539670][T22398] Total swap = 124996kB [ 566.539676][T22398] 2097051 pages RAM [ 566.539682][T22398] 0 pages HighMem/MovableOnly [ 566.539688][T22398] 433592 pages reserved [ 566.539694][T22398] 0 pages cma reserved [ 567.252657][T22415] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5287'. [ 568.113822][T22391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5284'. [ 568.113858][T22391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5284'. [ 568.348050][T22442] ip_tables: iptables: counters copy to user failed while replacing table [ 568.629300][T22450] FAULT_INJECTION: forcing a failure. [ 568.629300][T22450] name failslab, interval 1, probability 0, space 0, times 0 [ 568.629335][T22450] CPU: 1 UID: 0 PID: 22450 Comm: syz.2.5294 Not tainted syzkaller #0 PREEMPT(full) [ 568.629357][T22450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 568.629369][T22450] Call Trace: [ 568.629377][T22450] [ 568.629386][T22450] dump_stack_lvl+0xe8/0x150 [ 568.629418][T22450] should_fail_ex+0x410/0x560 [ 568.629448][T22450] should_failslab+0xa8/0x100 [ 568.629476][T22450] __kvmalloc_node_noprof+0x176/0x820 [ 568.629502][T22450] ? __nf_hook_entries_try_shrink+0x34e/0x720 [ 568.629526][T22450] ? __nf_hook_entries_try_shrink+0x34e/0x720 [ 568.629557][T22450] __nf_hook_entries_try_shrink+0x34e/0x720 [ 568.629595][T22450] __nf_unregister_net_hook+0x4c3/0x770 [ 568.629628][T22450] nf_tables_abort+0x6a8f/0x8bb0 [ 568.629670][T22450] ? __pfx_nf_tables_abort+0x10/0x10 [ 568.629705][T22450] ? rcu_is_watching+0x16/0xb0 [ 568.629738][T22450] ? __kmalloc_cache_noprof+0x14d/0x600 [ 568.629757][T22450] ? nfnetlink_rcv+0x1021/0x28c0 [ 568.629777][T22450] ? nfnetlink_rcv+0x1021/0x28c0 [ 568.629810][T22450] nfnetlink_rcv+0x1f30/0x28c0 [ 568.629864][T22450] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 568.629933][T22450] ? lock_acquire+0x115/0x350 [ 568.629963][T22450] ? netlink_deliver_tap+0x2e/0x1b0 [ 568.629985][T22450] ? netlink_deliver_tap+0x2e/0x1b0 [ 568.630011][T22450] netlink_unicast+0x8ef/0xa80 [ 568.630048][T22450] netlink_sendmsg+0x813/0xb40 [ 568.630079][T22450] ? __pfx_netlink_sendmsg+0x10/0x10 [ 568.630109][T22450] ? apparmor_socket_sendmsg+0x98/0x360 [ 568.630137][T22450] ? __pfx_netlink_sendmsg+0x10/0x10 [ 568.630156][T22450] sock_sendmsg_nosec+0x14e/0x190 [ 568.630180][T22450] ____sys_sendmsg+0x54e/0x850 [ 568.630213][T22450] ? __pfx_____sys_sendmsg+0x10/0x10 [ 568.630248][T22450] ? import_iovec+0x73/0xa0 [ 568.630279][T22450] ___sys_sendmsg+0x2a5/0x360 [ 568.630303][T22450] ? __lock_acquire+0x747/0x2de0 [ 568.630327][T22450] ? __pfx____sys_sendmsg+0x10/0x10 [ 568.630389][T22450] ? __fget_files+0x2a/0x420 [ 568.630415][T22450] ? __fget_files+0x3a2/0x420 [ 568.630452][T22450] __x64_sys_sendmsg+0x1b1/0x290 [ 568.630481][T22450] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 568.630529][T22450] do_syscall_64+0x166/0x520 [ 568.630554][T22450] ? trace_irq_disable+0x3b/0x140 [ 568.630574][T22450] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.630593][T22450] ? clear_bhb_loop+0x70/0xc0 [ 568.630617][T22450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.630636][T22450] RIP: 0033:0x7fca3dd9f559 [ 568.630654][T22450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 568.630670][T22450] RSP: 002b:00007fca3eb9f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 568.630691][T22450] RAX: ffffffffffffffda RBX: 00007fca3e025fa0 RCX: 00007fca3dd9f559 [ 568.630706][T22450] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 568.630718][T22450] RBP: 00007fca3eb9f090 R08: 0000000000000000 R09: 0000000000000000 [ 568.630730][T22450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 568.630741][T22450] R13: 00007fca3e026038 R14: 00007fca3e025fa0 R15: 00007ffc0874f1b8 [ 568.630771][T22450] [ 569.188842][T22458] IPVS: Scheduler module ip_vs_mh not found [ 569.290620][T22469] ip_tables: iptables: counters copy to user failed while replacing table [ 569.493732][T22467] bond11: invalid NS target :: specified for addition [ 569.493761][T22467] bond11: option ns_ip6_target: invalid value (18446744073709551615) [ 569.504671][T22467] bond11 (unregistering): Released all slaves [ 569.701615][T22480] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5301'. [ 569.777721][T22484] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5302'. [ 569.863875][T22484] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 570.308677][T22512] netlink: 'syz.4.5309': attribute type 61 has an invalid length. [ 570.551313][ T5630] Bluetooth: hci2: unexpected event for opcode 0x100c [ 570.885166][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 571.936445][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 573.413676][T22539] netlink: 'syz.3.5314': attribute type 1 has an invalid length. [ 573.662010][T22556] tipc: Failed to remove unknown binding: 66,0,0/4226000000:2216978755/2216978756 [ 573.674300][T22556] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5316'. [ 573.684927][T22539] 8021q: adding VLAN 0 to HW filter on device bond7 [ 573.696815][T22556] tipc: Failed to remove unknown binding: 66,0,0/4226000000:2216978755/2216978756 [ 573.702609][T22554] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5314'. [ 573.931343][T22544] macvlan2: entered promiscuous mode [ 573.931367][T22544] macvlan2: entered allmulticast mode [ 573.939674][T22544] bond7: entered allmulticast mode [ 573.939767][T22544] bond7: entered promiscuous mode [ 573.952306][T22544] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 573.964433][T22544] team0: Port device macvlan2 added [ 574.121589][T22577] netlink: 'syz.4.5322': attribute type 10 has an invalid length. [ 574.151273][T22554] bond7: (slave ip6gretap1): making interface the new active one [ 574.151298][T22554] ip6gretap1: entered promiscuous mode [ 574.151449][T22554] ip6gretap1: entered allmulticast mode [ 574.169188][T22554] bond7: (slave ip6gretap1): Enslaving as an active interface with an up link [ 574.312729][T22583] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 574.498370][T22588] bond9: entered allmulticast mode [ 574.504302][T22588] 8021q: adding VLAN 0 to HW filter on device bond9 [ 574.658816][T22591] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 574.680372][T22591] macvlan1: entered allmulticast mode [ 574.680395][T22591] bond0: entered allmulticast mode [ 574.680408][T22591] bond_slave_0: entered allmulticast mode [ 574.680426][T22591] bond_slave_1: entered allmulticast mode [ 574.682161][T22591] bond_slave_0: entered promiscuous mode [ 574.682205][T22591] bond_slave_1: entered promiscuous mode [ 574.720841][T22591] bond9: (slave macvlan1): Enslaving as an active interface with an up link [ 574.739103][T22605] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5327'. [ 574.783697][T22591] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5324'. [ 574.838571][T22588] ip6gretap0: entered allmulticast mode [ 574.839201][T22588] bond9: (slave ip6gretap0): Enslaving as a backup interface with an up link [ 574.882784][T22605] vlan2: entered promiscuous mode [ 574.882809][T22605] bridge0: entered promiscuous mode [ 574.903646][T22591] bond_slave_0: left promiscuous mode [ 574.903682][T22591] bond_slave_1: left promiscuous mode [ 574.999793][T22591] bond0 (unregistering): left allmulticast mode [ 574.999821][T22591] bond_slave_0: left allmulticast mode [ 574.999840][T22591] bond_slave_1: left allmulticast mode [ 575.058800][T22611] ip_tables: iptables: counters copy to user failed while replacing table [ 575.061884][T22591] bond9: (slave macvlan1): Removing an active aggregator [ 575.061926][T22591] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 575.078582][T22591] bond9: (slave macvlan1): Releasing backup interface [ 575.078605][T22591] bond9: (slave macvlan1): the permanent HWaddr of slave - ca:b8:6a:4f:f4:45 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 575.117446][T22591] macvlan1 (unregistering): left allmulticast mode [ 575.186150][T22591] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 575.210366][T22618] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5332'. [ 575.214180][T22591] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 575.229517][T22591] bond0 (unregistering): Released all slaves [ 575.297517][T22618] netlink: 'syz.3.5332': attribute type 10 has an invalid length. [ 575.297539][T22618] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5332'. [ 575.311054][T22618] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 575.478299][T22612] syzkaller0: entered promiscuous mode [ 575.478328][T22612] syzkaller0: entered allmulticast mode [ 575.689025][T22639] netlink: 'syz.4.5338': attribute type 10 has an invalid length. [ 575.823793][T22639] bond0: (slave team0): Enslaving as an active interface with an up link [ 575.839210][ T12] bond1: (slave vlan2): failed to get link speed/duplex [ 575.950361][ T1431] bond1: (slave vlan2): failed to get link speed/duplex [ 576.056857][ T12] bond1: (slave vlan2): failed to get link speed/duplex [ 576.094011][T22660] smc: smcd device lo applied user defined pnetid SYZ0 [ 576.165867][ T12] bond1: (slave vlan2): failed to get link speed/duplex [ 576.276632][ T1396] bond1: (slave vlan2): failed to get link speed/duplex [ 576.291673][T22664] FAULT_INJECTION: forcing a failure. [ 576.291673][T22664] name failslab, interval 1, probability 0, space 0, times 0 [ 576.291705][T22664] CPU: 1 UID: 0 PID: 22664 Comm: syz.0.5343 Not tainted syzkaller #0 PREEMPT(full) [ 576.291725][T22664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 576.291737][T22664] Call Trace: [ 576.291752][T22664] [ 576.291761][T22664] dump_stack_lvl+0xe8/0x150 [ 576.291792][T22664] should_fail_ex+0x410/0x560 [ 576.291821][T22664] should_failslab+0xa8/0x100 [ 576.291848][T22664] __kmalloc_noprof+0xfe/0x720 [ 576.291866][T22664] ? rcu_is_watching+0x16/0xb0 [ 576.291890][T22664] ? tomoyo_realpath_from_path+0xef/0x640 [ 576.291919][T22664] ? tomoyo_realpath_from_path+0xef/0x640 [ 576.291954][T22664] tomoyo_realpath_from_path+0xef/0x640 [ 576.291990][T22664] ? tomoyo_path_number_perm+0x219/0x5f0 [ 576.292014][T22664] tomoyo_path_number_perm+0x246/0x5f0 [ 576.292041][T22664] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 576.292063][T22664] ? __lock_acquire+0x747/0x2de0 [ 576.292097][T22664] ? hook_file_ioctl+0x1f2/0x600 [ 576.292142][T22664] ? __fget_files+0x2a/0x420 [ 576.292171][T22664] ? __fget_files+0x2a/0x420 [ 576.292195][T22664] ? __fget_files+0x3a2/0x420 [ 576.292219][T22664] ? __fget_files+0x2a/0x420 [ 576.292247][T22664] security_file_ioctl+0xc3/0x2a0 [ 576.292272][T22664] __se_sys_ioctl+0x47/0x170 [ 576.292297][T22664] do_syscall_64+0x166/0x520 [ 576.292318][T22664] ? trace_irq_disable+0x3b/0x140 [ 576.292336][T22664] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.292353][T22664] ? clear_bhb_loop+0x70/0xc0 [ 576.292374][T22664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.292391][T22664] RIP: 0033:0x7fbf6139f559 [ 576.292408][T22664] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 576.292422][T22664] RSP: 002b:00007fbf62300028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 576.292442][T22664] RAX: ffffffffffffffda RBX: 00007fbf61625fa0 RCX: 00007fbf6139f559 [ 576.292454][T22664] RDX: 0000200000000e40 RSI: 0000000000008946 RDI: 0000000000000003 [ 576.292466][T22664] RBP: 00007fbf62300090 R08: 0000000000000000 R09: 0000000000000000 [ 576.292478][T22664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 576.292488][T22664] R13: 00007fbf61626038 R14: 00007fbf61625fa0 R15: 00007ffef38f1ea8 [ 576.292519][T22664] [ 576.300463][T22664] ERROR: Out of memory at tomoyo_realpath_from_path. [ 576.395572][ T1396] bond1: (slave vlan2): failed to get link speed/duplex [ 576.521098][ T61] bond1: (slave vlan2): failed to get link speed/duplex [ 576.558979][T22670] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5346'. [ 576.630045][T22676] netlink: 'syz.4.5346': attribute type 10 has an invalid length. [ 576.630066][T22676] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5346'. [ 576.664515][T22676] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 576.884382][T22674] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5344'. [ 577.014844][T22686] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5347'. [ 577.081868][T22693] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5349'. [ 577.116754][T22686] hsr_slave_1 (unregistering): left promiscuous mode [ 577.319811][T22690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5350'. [ 577.405617][T22690] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 577.787964][T22716] batadv0: left allmulticast mode [ 577.787992][T22716] batadv0: left promiscuous mode [ 577.788224][T22716] bridge0: port 1(batadv0) entered disabled state [ 577.917247][T22729] xt_bpf: check failed: parse error [ 578.197953][T22735] bond11: option resend_igmp: invalid value (2878) [ 578.197975][T22735] bond11: option resend_igmp: allowed values 0 - 255 [ 578.221630][T22735] bond11 (unregistering): Released all slaves [ 578.274351][T22743] netlink: 'syz.1.5359': attribute type 10 has an invalid length. [ 578.348500][T22739] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 578.386976][T22745] IPVS: sync thread started: state = BACKUP, mcast_ifn = macsec0, syncid = 3, id = 0 [ 579.061296][T22783] x_tables: duplicate underflow at hook 1 [ 579.385370][ T61] net_ratelimit: 21 callbacks suppressed [ 579.385392][ T61] bond1: (slave vlan2): failed to get link speed/duplex [ 579.599655][ T1396] bond1: (slave vlan2): failed to get link speed/duplex [ 579.718008][ T1431] bond1: (slave vlan2): failed to get link speed/duplex [ 579.827488][ T1431] bond1: (slave vlan2): failed to get link speed/duplex [ 580.099572][T22818] syzkaller0: entered promiscuous mode [ 580.099595][T22818] syzkaller0: entered allmulticast mode [ 580.216636][ T12] bond1: (slave vlan2): failed to get link speed/duplex [ 580.347526][ T1499] bond1: (slave vlan2): failed to get link speed/duplex [ 580.536615][ T61] bond1: (slave vlan2): failed to get link speed/duplex [ 580.743396][T22838] bond11: entered allmulticast mode [ 580.788306][T22851] __nla_validate_parse: 6 callbacks suppressed [ 580.788329][T22851] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5384'. [ 580.832095][T22847] bond11: (slave wireguard0): The slave device specified does not support setting the MAC address [ 580.832944][T22847] bond11: (slave wireguard0): Error -95 calling set_mac_address [ 580.879473][T22861] netlink: 'syz.4.5384': attribute type 2 has an invalid length. [ 581.055174][ T1431] bond1: (slave vlan2): failed to get link speed/duplex [ 581.275784][T22873] netlink: 1700 bytes leftover after parsing attributes in process `syz.4.5387'. [ 581.277927][T22873] netlink: 'syz.4.5387': attribute type 3 has an invalid length. [ 581.586927][ T61] bond1: (slave vlan2): failed to get link speed/duplex [ 581.696447][ T61] bond1: (slave vlan2): failed to get link speed/duplex [ 581.720414][T22882] netlink: 3560 bytes leftover after parsing attributes in process `syz.3.5389'. [ 581.753319][T22882] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5389'. [ 581.936189][T22890] syzkaller1: entered promiscuous mode [ 581.936211][T22890] syzkaller1: entered allmulticast mode [ 581.941546][T22890] netlink: 'syz.4.5393': attribute type 10 has an invalid length. [ 581.941570][T22890] netlink: 55 bytes leftover after parsing attributes in process `syz.4.5393'. [ 582.407331][T22912] netlink: 'syz.1.5400': attribute type 1 has an invalid length. [ 582.441678][T22912] 8021q: adding VLAN 0 to HW filter on device bond0 [ 582.471236][T22912] bond0: (slave gretap1): making interface the new active one [ 582.472524][T22912] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 583.233588][T22936] netlink: 'syz.1.5408': attribute type 4 has an invalid length. [ 584.208148][T22972] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5420'. [ 584.486413][ T61] net_ratelimit: 22 callbacks suppressed [ 584.486436][ T61] bond1: (slave vlan2): failed to get link speed/duplex [ 584.506725][T22984] x_tables: duplicate underflow at hook 1 [ 584.597359][ T1396] bond1: (slave vlan2): failed to get link speed/duplex [ 584.708176][ T1396] bond1: (slave vlan2): failed to get link speed/duplex [ 584.828077][ T1419] bond1: (slave vlan2): failed to get link speed/duplex [ 584.893990][T22994] FAULT_INJECTION: forcing a failure. [ 584.893990][T22994] name failslab, interval 1, probability 0, space 0, times 0 [ 584.895238][T22994] CPU: 1 UID: 0 PID: 22994 Comm: syz.1.5426 Not tainted syzkaller #0 PREEMPT(full) [ 584.895257][T22994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 584.895266][T22994] Call Trace: [ 584.895273][T22994] [ 584.895281][T22994] dump_stack_lvl+0xe8/0x150 [ 584.895312][T22994] should_fail_ex+0x410/0x560 [ 584.895347][T22994] should_failslab+0xa8/0x100 [ 584.895374][T22994] __kmalloc_cache_node_noprof+0xaa/0x620 [ 584.895394][T22994] ? unwind_get_return_address+0x4d/0x90 [ 584.895416][T22994] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 584.895436][T22994] ? __get_vm_area_node+0x155/0x2f0 [ 584.895462][T22994] ? __get_vm_area_node+0x155/0x2f0 [ 584.895494][T22994] __get_vm_area_node+0x155/0x2f0 [ 584.895526][T22994] __vmalloc_node_range_noprof+0x343/0x1540 [ 584.895546][T22994] ? bpf_prog_calc_tag+0x51/0x370 [ 584.895570][T22994] ? __x64_sys_bpf+0xba/0xd0 [ 584.895586][T22994] ? do_syscall_64+0x166/0x520 [ 584.895624][T22994] ? __kasan_kmalloc+0x93/0xb0 [ 584.895646][T22994] ? bpf_prog_load+0x14d6/0x1c20 [ 584.895665][T22994] ? __sys_bpf+0xd0d/0xd90 [ 584.895684][T22994] ? __x64_sys_bpf+0xba/0xd0 [ 584.895715][T22994] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 584.895744][T22994] ? bpf_prog_calc_tag+0x51/0x370 [ 584.895767][T22994] __vmalloc_noprof+0xd2/0x120 [ 584.895786][T22994] ? bpf_prog_calc_tag+0x51/0x370 [ 584.895810][T22994] bpf_prog_calc_tag+0x51/0x370 [ 584.895832][T22994] ? __pfx_cmp_subprogs+0x10/0x10 [ 584.895857][T22994] check_and_resolve_insns+0xbb/0x21d0 [ 584.895884][T22994] ? add_subprog+0x2e2/0x3f0 [ 584.895909][T22994] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 584.895940][T22994] bpf_check+0x18f7/0x2ef0 [ 584.895978][T22994] ? __pfx_bpf_check+0x10/0x10 [ 584.896001][T22994] ? bpf_obj_name_cpy+0x194/0x1e0 [ 584.896031][T22994] bpf_prog_load+0x14d6/0x1c20 [ 584.896063][T22994] ? __pfx_bpf_prog_load+0x10/0x10 [ 584.896108][T22994] __sys_bpf+0xd0d/0xd90 [ 584.896137][T22994] ? __pfx___sys_bpf+0x10/0x10 [ 584.896168][T22994] ? __fget_files+0x2a/0x420 [ 584.896232][T22994] ? ksys_write+0x242/0x270 [ 584.896253][T22994] ? __pfx_ksys_write+0x10/0x10 [ 584.896276][T22994] __x64_sys_bpf+0xba/0xd0 [ 584.896298][T22994] do_syscall_64+0x166/0x520 [ 584.896321][T22994] ? trace_irq_disable+0x3b/0x140 [ 584.896340][T22994] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.896358][T22994] ? clear_bhb_loop+0x70/0xc0 [ 584.896380][T22994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.896398][T22994] RIP: 0033:0x7fd3d299f559 [ 584.896414][T22994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 584.896429][T22994] RSP: 002b:00007fd3d3874028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 584.896449][T22994] RAX: ffffffffffffffda RBX: 00007fd3d2c25fa0 RCX: 00007fd3d299f559 [ 584.896462][T22994] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 584.896474][T22994] RBP: 00007fd3d3874090 R08: 0000000000000000 R09: 0000000000000000 [ 584.896485][T22994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 584.896495][T22994] R13: 00007fd3d2c26038 R14: 00007fd3d2c25fa0 R15: 00007fff67061e48 [ 584.896524][T22994] [ 584.899273][T22994] syz.1.5426: vmalloc error: size 80, align 0x1, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 584.899333][T22994] CPU: 1 UID: 0 PID: 22994 Comm: syz.1.5426 Not tainted syzkaller #0 PREEMPT(full) [ 584.899353][T22994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 584.899364][T22994] Call Trace: [ 584.899372][T22994] [ 584.899380][T22994] dump_stack_lvl+0xe8/0x150 [ 584.899411][T22994] warn_alloc+0x24d/0x270 [ 584.899432][T22994] ? __kasan_kmalloc+0x22/0xb0 [ 584.899459][T22994] ? __pfx_warn_alloc+0x10/0x10 [ 584.899477][T22994] ? __get_vm_area_node+0x155/0x2f0 [ 584.899511][T22994] ? __get_vm_area_node+0x2a9/0x2f0 [ 584.899544][T22994] __vmalloc_node_range_noprof+0x36b/0x1540 [ 584.899564][T22994] ? __x64_sys_bpf+0xba/0xd0 [ 584.899582][T22994] ? do_syscall_64+0x166/0x520 [ 584.899619][T22994] ? __kasan_kmalloc+0x93/0xb0 [ 584.899641][T22994] ? bpf_prog_load+0x14d6/0x1c20 [ 584.899660][T22994] ? __sys_bpf+0xd0d/0xd90 [ 584.899679][T22994] ? __x64_sys_bpf+0xba/0xd0 [ 584.899709][T22994] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 584.899739][T22994] ? bpf_prog_calc_tag+0x51/0x370 [ 584.899759][T22994] __vmalloc_noprof+0xd2/0x120 [ 584.899777][T22994] ? bpf_prog_calc_tag+0x51/0x370 [ 584.899802][T22994] bpf_prog_calc_tag+0x51/0x370 [ 584.899824][T22994] ? __pfx_cmp_subprogs+0x10/0x10 [ 584.899850][T22994] check_and_resolve_insns+0xbb/0x21d0 [ 584.899876][T22994] ? add_subprog+0x2e2/0x3f0 [ 584.899903][T22994] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 584.899935][T22994] bpf_check+0x18f7/0x2ef0 [ 584.899973][T22994] ? __pfx_bpf_check+0x10/0x10 [ 584.899996][T22994] ? bpf_obj_name_cpy+0x194/0x1e0 [ 584.900025][T22994] bpf_prog_load+0x14d6/0x1c20 [ 584.900059][T22994] ? __pfx_bpf_prog_load+0x10/0x10 [ 584.900103][T22994] __sys_bpf+0xd0d/0xd90 [ 584.900132][T22994] ? __pfx___sys_bpf+0x10/0x10 [ 584.900164][T22994] ? __fget_files+0x2a/0x420 [ 584.900205][T22994] ? ksys_write+0x242/0x270 [ 584.900225][T22994] ? __pfx_ksys_write+0x10/0x10 [ 584.900249][T22994] __x64_sys_bpf+0xba/0xd0 [ 584.900271][T22994] do_syscall_64+0x166/0x520 [ 584.900294][T22994] ? trace_irq_disable+0x3b/0x140 [ 584.900312][T22994] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.900330][T22994] ? clear_bhb_loop+0x70/0xc0 [ 584.900352][T22994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.900371][T22994] RIP: 0033:0x7fd3d299f559 [ 584.900388][T22994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 584.900403][T22994] RSP: 002b:00007fd3d3874028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 584.900421][T22994] RAX: ffffffffffffffda RBX: 00007fd3d2c25fa0 RCX: 00007fd3d299f559 [ 584.900435][T22994] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 584.900447][T22994] RBP: 00007fd3d3874090 R08: 0000000000000000 R09: 0000000000000000 [ 584.900458][T22994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 584.900469][T22994] R13: 00007fd3d2c26038 R14: 00007fd3d2c25fa0 R15: 00007fff67061e48 [ 584.900499][T22994] [ 584.903953][T22994] Mem-Info: [ 584.903967][T22994] active_anon:5616 inactive_anon:0 isolated_anon:0 [ 584.903967][T22994] active_file:0 inactive_file:44079 isolated_file:0 [ 584.903967][T22994] unevictable:0 dirty:296 writeback:0 [ 584.903967][T22994] slab_reclaimable:11551 slab_unreclaimable:122161 [ 584.903967][T22994] mapped:30031 shmem:517 pagetables:1123 [ 584.903967][T22994] sec_pagetables:0 bounce:0 [ 584.903967][T22994] kernel_misc_reclaimable:0 [ 584.903967][T22994] free:1257499 free_pcp:11648 free_cma:0 [ 584.904018][T22994] Node 0 active_anon:22464kB inactive_anon:0kB active_file:0kB inactive_file:176120kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:120124kB dirty:1184kB writeback:0kB shmem:2068kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15068kB pagetables:4336kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 584.904068][T22994] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 584.904716][T22994] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 584.904771][T22994] lowmem_reserve[]: 0 2468 2468 2468 2468 [ 584.904804][T22994] Node 0 DMA32 free:1065756kB boost:0kB min:33984kB low:42480kB high:50976kB reserved_highatomic:0kB free_highatomic:0kB active_anon:22464kB inactive_anon:0kB active_file:0kB inactive_file:176120kB unevictable:0kB writepending:1184kB zspages:0kB present:3129332kB managed:2527372kB mlocked:0kB bounce:0kB free_pcp:46080kB local_pcp:22784kB free_cma:0kB [ 584.904857][T22994] lowmem_reserve[]: 0 0 0 0 0 [ 584.904887][T22994] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 584.904933][T22994] lowmem_reserve[]: 0 0 0 0 0 [ 584.904968][T22994] Node 1 Normal free:3948880kB boost:0kB min:55916kB low:69892kB high:83868kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:500kB local_pcp:500kB free_cma:0kB [ 584.906964][T22994] lowmem_reserve[]: 0 0 0 0 0 [ 584.906996][T22994] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 584.907096][T22994] Node 0 DMA32: 439*4kB (UME) 966*8kB (UME) 455*16kB (UME) 1519*32kB (UME) 859*64kB (UME) 386*128kB (UME) 168*256kB (UME) 48*512kB (UM) 15*1024kB (UE) 11*2048kB (UME) 193*4096kB (UM) = 1065756kB [ 584.907240][T22994] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 584.907325][T22994] Node 1 Normal: 2*4kB (UM) 1*8kB (M) 2*16kB (UM) 3*32kB (UM) 3*64kB (UM) 8*128kB (UM) 4*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 962*4096kB (M) = 3948880kB [ 584.907460][T22994] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 584.907475][T22994] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 584.907489][T22994] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 584.907503][T22994] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 584.907518][T22994] 44592 total pagecache pages [ 584.907525][T22994] 0 pages in swap cache [ 584.907531][T22994] Free swap = 124996kB [ 584.907538][T22994] Total swap = 124996kB [ 584.907546][T22994] 2097051 pages RAM [ 584.907553][T22994] 0 pages HighMem/MovableOnly [ 584.907559][T22994] 433592 pages reserved [ 584.907566][T22994] 0 pages cma reserved [ 584.948466][ T1419] bond1: (slave vlan2): failed to get link speed/duplex [ 585.061168][ T1419] bond1: (slave vlan2): failed to get link speed/duplex [ 585.103830][T22999] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5429'. [ 585.187114][ T161] bond1: (slave vlan2): failed to get link speed/duplex [ 585.303048][ T161] bond1: (slave vlan2): failed to get link speed/duplex [ 585.317389][T23000] netlink: 'syz.2.5429': attribute type 10 has an invalid length. [ 585.317409][T23000] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5429'. [ 585.340640][T23000] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 585.427383][ T1396] bond1: (slave vlan2): failed to get link speed/duplex [ 585.542076][ T1396] bond1: (slave vlan2): failed to get link speed/duplex [ 585.546367][ T1419] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 585.546388][ T1419] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 585.620849][T23010] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5432'. [ 586.284615][T23032] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5436'. [ 586.396963][T23035] netlink: 'syz.4.5436': attribute type 10 has an invalid length. [ 586.396985][T23035] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5436'. [ 586.423331][T23035] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 586.514494][T23041] FAULT_INJECTION: forcing a failure. [ 586.514494][T23041] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 586.514541][T23041] CPU: 0 UID: 0 PID: 23041 Comm: syz.0.5439 Not tainted syzkaller #0 PREEMPT(full) [ 586.514562][T23041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 586.514573][T23041] Call Trace: [ 586.514581][T23041] [ 586.514590][T23041] dump_stack_lvl+0xe8/0x150 [ 586.514621][T23041] should_fail_ex+0x410/0x560 [ 586.514652][T23041] prepare_alloc_pages+0x223/0x600 [ 586.514686][T23041] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 586.514714][T23041] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 586.514737][T23041] ? __alloc_frozen_pages_noprof+0x29e/0x5a0 [ 586.514759][T23041] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 586.514785][T23041] ? __pfx_policy_nodemask+0x10/0x10 [ 586.514809][T23041] ? __get_vm_area_node+0x155/0x2f0 [ 586.514835][T23041] ? __vmalloc_node_range_noprof+0x343/0x1540 [ 586.514853][T23041] ? __vmalloc_noprof+0xd2/0x120 [ 586.514875][T23041] __alloc_pages_noprof+0x10/0x100 [ 586.514899][T23041] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 586.514930][T23041] ? alloc_pages_noprof+0x140/0x2b0 [ 586.514960][T23041] __kasan_populate_vmalloc+0xb7/0x1c0 [ 586.514989][T23041] alloc_vmap_area+0xd1a/0x1420 [ 586.515025][T23041] ? __pfx_alloc_vmap_area+0x10/0x10 [ 586.515047][T23041] ? __kmalloc_cache_node_noprof+0x3d1/0x620 [ 586.515076][T23041] ? __kmalloc_cache_node_noprof+0x1f7/0x620 [ 586.515095][T23041] ? __get_vm_area_node+0x155/0x2f0 [ 586.515126][T23041] __get_vm_area_node+0x200/0x2f0 [ 586.515160][T23041] __vmalloc_node_range_noprof+0x343/0x1540 [ 586.515180][T23041] ? bpf_prog_calc_tag+0x51/0x370 [ 586.515204][T23041] ? __x64_sys_bpf+0xba/0xd0 [ 586.515221][T23041] ? do_syscall_64+0x166/0x520 [ 586.515250][T23041] ? __kasan_kmalloc+0x93/0xb0 [ 586.515273][T23041] ? bpf_prog_load+0x14d6/0x1c20 [ 586.515292][T23041] ? __sys_bpf+0xd0d/0xd90 [ 586.515311][T23041] ? __x64_sys_bpf+0xba/0xd0 [ 586.515341][T23041] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 586.515371][T23041] ? bpf_prog_calc_tag+0x51/0x370 [ 586.515391][T23041] __vmalloc_noprof+0xd2/0x120 [ 586.515410][T23041] ? bpf_prog_calc_tag+0x51/0x370 [ 586.515435][T23041] bpf_prog_calc_tag+0x51/0x370 [ 586.515456][T23041] ? __pfx_cmp_subprogs+0x10/0x10 [ 586.515483][T23041] check_and_resolve_insns+0xbb/0x21d0 [ 586.515511][T23041] ? add_subprog+0x2e2/0x3f0 [ 586.515536][T23041] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 586.515567][T23041] bpf_check+0x18f7/0x2ef0 [ 586.515607][T23041] ? __pfx_bpf_check+0x10/0x10 [ 586.515631][T23041] ? bpf_obj_name_cpy+0x194/0x1e0 [ 586.515660][T23041] bpf_prog_load+0x14d6/0x1c20 [ 586.515695][T23041] ? __pfx_bpf_prog_load+0x10/0x10 [ 586.515742][T23041] __sys_bpf+0xd0d/0xd90 [ 586.515772][T23041] ? __pfx___sys_bpf+0x10/0x10 [ 586.515805][T23041] ? __fget_files+0x2a/0x420 [ 586.515849][T23041] ? ksys_write+0x242/0x270 [ 586.515871][T23041] ? __pfx_ksys_write+0x10/0x10 [ 586.515895][T23041] __x64_sys_bpf+0xba/0xd0 [ 586.515918][T23041] do_syscall_64+0x166/0x520 [ 586.515941][T23041] ? trace_irq_disable+0x3b/0x140 [ 586.515959][T23041] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.515976][T23041] ? clear_bhb_loop+0x70/0xc0 [ 586.515996][T23041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.516013][T23041] RIP: 0033:0x7fbf6139f559 [ 586.516030][T23041] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 586.516044][T23041] RSP: 002b:00007fbf62300028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 586.516070][T23041] RAX: ffffffffffffffda RBX: 00007fbf61625fa0 RCX: 00007fbf6139f559 [ 586.516084][T23041] RDX: 0000000000000094 RSI: 0000200000000cc0 RDI: 0000000000000005 [ 586.516095][T23041] RBP: 00007fbf62300090 R08: 0000000000000000 R09: 0000000000000000 [ 586.516106][T23041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 586.516116][T23041] R13: 00007fbf61626038 R14: 00007fbf61625fa0 R15: 00007ffef38f1ea8 [ 586.516146][T23041] [ 587.227728][T23069] FAULT_INJECTION: forcing a failure. [ 587.227728][T23069] name failslab, interval 1, probability 0, space 0, times 0 [ 587.227761][T23069] CPU: 1 UID: 0 PID: 23069 Comm: syz.2.5447 Not tainted syzkaller #0 PREEMPT(full) [ 587.227783][T23069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 587.227794][T23069] Call Trace: [ 587.227802][T23069] [ 587.227810][T23069] dump_stack_lvl+0xe8/0x150 [ 587.227842][T23069] should_fail_ex+0x410/0x560 [ 587.227872][T23069] ? __alloc_skb+0x1db/0x7a0 [ 587.227895][T23069] should_failslab+0xa8/0x100 [ 587.227921][T23069] ? __alloc_skb+0x1db/0x7a0 [ 587.227942][T23069] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 587.227963][T23069] ? __alloc_skb+0x18d/0x7a0 [ 587.227987][T23069] ? __alloc_skb+0x1db/0x7a0 [ 587.228017][T23069] __alloc_skb+0x1db/0x7a0 [ 587.228044][T23069] tipc_nl_compat_doit+0x18a/0x650 [ 587.228072][T23069] ? __pfx_tipc_nl_compat_doit+0x10/0x10 [ 587.228099][T23069] ? apparmor_capable+0x126/0x170 [ 587.228120][T23069] ? bpf_lsm_capable+0x9/0x20 [ 587.228138][T23069] ? security_capable+0x7e/0x2c0 [ 587.228171][T23069] tipc_nl_compat_recv+0x8d3/0xcf0 [ 587.228194][T23069] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 587.228214][T23069] ? __mutex_trylock_common+0x15f/0x270 [ 587.228240][T23069] ? __pfx___tipc_nl_net_set+0x10/0x10 [ 587.228255][T23069] ? __pfx_tipc_nl_compat_net_set+0x10/0x10 [ 587.228271][T23069] ? __pfx___mutex_trylock_common+0x10/0x10 [ 587.228299][T23069] ? trace_contention_end+0x3d/0x140 [ 587.228320][T23069] ? genl_family_rcv_msg_attrs_parse+0xe9/0x2f0 [ 587.228358][T23069] genl_family_rcv_msg_doit+0x233/0x340 [ 587.228391][T23069] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 587.228425][T23069] ? __lock_acquire+0x747/0x2de0 [ 587.228452][T23069] genl_rcv_msg+0x614/0x7a0 [ 587.228482][T23069] ? __pfx_genl_rcv_msg+0x10/0x10 [ 587.228505][T23069] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 587.228536][T23069] netlink_rcv_skb+0x226/0x4a0 [ 587.228558][T23069] ? __pfx_genl_rcv_msg+0x10/0x10 [ 587.228592][T23069] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 587.228627][T23069] ? down_read+0x2be/0x330 [ 587.228658][T23069] genl_rcv+0x28/0x40 [ 587.228678][T23069] netlink_unicast+0x8ef/0xa80 [ 587.228709][T23069] netlink_sendmsg+0x813/0xb40 [ 587.228737][T23069] ? __pfx_netlink_sendmsg+0x10/0x10 [ 587.228766][T23069] ? apparmor_socket_sendmsg+0x98/0x360 [ 587.228793][T23069] ? __pfx_netlink_sendmsg+0x10/0x10 [ 587.228813][T23069] sock_sendmsg_nosec+0x14e/0x190 [ 587.228837][T23069] ____sys_sendmsg+0x54e/0x850 [ 587.228870][T23069] ? __pfx_____sys_sendmsg+0x10/0x10 [ 587.228905][T23069] ? import_iovec+0x73/0xa0 [ 587.228936][T23069] ___sys_sendmsg+0x2a5/0x360 [ 587.228959][T23069] ? __lock_acquire+0x747/0x2de0 [ 587.228984][T23069] ? __pfx____sys_sendmsg+0x10/0x10 [ 587.229048][T23069] ? __fget_files+0x2a/0x420 [ 587.229074][T23069] ? __fget_files+0x3a2/0x420 [ 587.229109][T23069] __x64_sys_sendmsg+0x1b1/0x290 [ 587.229136][T23069] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 587.229181][T23069] do_syscall_64+0x166/0x520 [ 587.229207][T23069] ? trace_irq_disable+0x3b/0x140 [ 587.229226][T23069] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.229246][T23069] ? clear_bhb_loop+0x70/0xc0 [ 587.229270][T23069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.229289][T23069] RIP: 0033:0x7fca3dd9f559 [ 587.229308][T23069] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 587.229323][T23069] RSP: 002b:00007fca3eb9f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 587.229344][T23069] RAX: ffffffffffffffda RBX: 00007fca3e025fa0 RCX: 00007fca3dd9f559 [ 587.229357][T23069] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 587.229367][T23069] RBP: 00007fca3eb9f090 R08: 0000000000000000 R09: 0000000000000000 [ 587.229378][T23069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 587.229389][T23069] R13: 00007fca3e026038 R14: 00007fca3e025fa0 R15: 00007ffc0874f1b8 [ 587.229421][T23069] [ 587.500252][T23074] geneve1: entered promiscuous mode [ 587.651311][T23080] FAULT_INJECTION: forcing a failure. [ 587.651311][T23080] name failslab, interval 1, probability 0, space 0, times 0 [ 587.651342][T23080] CPU: 0 UID: 0 PID: 23080 Comm: syz.3.5453 Not tainted syzkaller #0 PREEMPT(full) [ 587.651362][T23080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 587.651371][T23080] Call Trace: [ 587.651377][T23080] [ 587.651385][T23080] dump_stack_lvl+0xe8/0x150 [ 587.651416][T23080] should_fail_ex+0x410/0x560 [ 587.651446][T23080] should_failslab+0xa8/0x100 [ 587.651477][T23080] __kmalloc_node_noprof+0x100/0x720 [ 587.651498][T23080] ? __get_vm_area_node+0x200/0x2f0 [ 587.651525][T23080] ? __get_vm_area_node+0x283/0x2f0 [ 587.651549][T23080] ? __vmalloc_node_range_noprof+0x5b4/0x1540 [ 587.651567][T23080] ? __vmalloc_node_range_noprof+0x5b4/0x1540 [ 587.651589][T23080] __vmalloc_node_range_noprof+0x5b4/0x1540 [ 587.651608][T23080] ? __x64_sys_bpf+0xba/0xd0 [ 587.651635][T23080] ? bpf_prog_load+0x14d6/0x1c20 [ 587.651656][T23080] ? __sys_bpf+0xd0d/0xd90 [ 587.651684][T23080] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 587.651710][T23080] ? bpf_prog_calc_tag+0x51/0x370 [ 587.651730][T23080] __vmalloc_noprof+0xd2/0x120 [ 587.651747][T23080] ? bpf_prog_calc_tag+0x51/0x370 [ 587.651773][T23080] bpf_prog_calc_tag+0x51/0x370 [ 587.651794][T23080] ? __pfx_cmp_subprogs+0x10/0x10 [ 587.651821][T23080] check_and_resolve_insns+0xbb/0x21d0 [ 587.651849][T23080] ? add_subprog+0x2e2/0x3f0 [ 587.651874][T23080] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 587.651909][T23080] bpf_check+0x18f7/0x2ef0 [ 587.651949][T23080] ? __pfx_bpf_check+0x10/0x10 [ 587.651974][T23080] ? bpf_obj_name_cpy+0x194/0x1e0 [ 587.652005][T23080] bpf_prog_load+0x14d6/0x1c20 [ 587.652047][T23080] ? __pfx_bpf_prog_load+0x10/0x10 [ 587.652095][T23080] __sys_bpf+0xd0d/0xd90 [ 587.652123][T23080] ? __pfx___sys_bpf+0x10/0x10 [ 587.652156][T23080] ? __fget_files+0x2a/0x420 [ 587.652198][T23080] ? ksys_write+0x242/0x270 [ 587.652219][T23080] ? __pfx_ksys_write+0x10/0x10 [ 587.652241][T23080] __x64_sys_bpf+0xba/0xd0 [ 587.652262][T23080] do_syscall_64+0x166/0x520 [ 587.652285][T23080] ? trace_irq_disable+0x3b/0x140 [ 587.652304][T23080] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.652322][T23080] ? clear_bhb_loop+0x70/0xc0 [ 587.652343][T23080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.652360][T23080] RIP: 0033:0x7feef979f559 [ 587.652377][T23080] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 587.652392][T23080] RSP: 002b:00007feefa58a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 587.652412][T23080] RAX: ffffffffffffffda RBX: 00007feef9a25fa0 RCX: 00007feef979f559 [ 587.652425][T23080] RDX: 0000000000000094 RSI: 0000200000000240 RDI: 0000000000000005 [ 587.652438][T23080] RBP: 00007feefa58a090 R08: 0000000000000000 R09: 0000000000000000 [ 587.652449][T23080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 587.652458][T23080] R13: 00007feef9a26038 R14: 00007feef9a25fa0 R15: 00007ffd40ce2818 [ 587.652488][T23080] [ 587.679073][T23077] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5451'. [ 588.065267][T23094] xt_hashlimit: size too large, truncated to 1048576 [ 588.858788][T23136] sctp: [Deprecated]: syz.3.5466 (pid 23136) Use of int in max_burst socket option deprecated. [ 588.858788][T23136] Use struct sctp_assoc_value instead [ 589.596213][T22358] net_ratelimit: 37 callbacks suppressed [ 589.596247][T22358] bond1: (slave vlan2): failed to get link speed/duplex [ 589.691098][T23148] syzkaller1: entered promiscuous mode [ 589.691122][T23148] syzkaller1: entered allmulticast mode [ 589.696065][T23148] syzkaller1: left promiscuous mode [ 589.707549][T22358] bond1: (slave vlan2): failed to get link speed/duplex [ 589.927021][T22358] bond1: (slave vlan2): failed to get link speed/duplex [ 590.035143][ T1431] bond1: (slave vlan2): failed to get link speed/duplex [ 590.060277][T23152] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5471'. [ 590.145970][ T1431] bond1: (slave vlan2): failed to get link speed/duplex [ 590.148410][T23157] netlink: 'syz.2.5471': attribute type 10 has an invalid length. [ 590.148431][T23157] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5471'. [ 590.152366][T23157] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 590.265409][ T1431] bond1: (slave vlan2): failed to get link speed/duplex [ 590.375327][ T1431] bond1: (slave vlan2): failed to get link speed/duplex [ 590.497150][ T12] bond1: (slave vlan2): failed to get link speed/duplex [ 590.615329][ T1431] bond1: (slave vlan2): failed to get link speed/duplex [ 590.735509][T22358] bond1: (slave vlan2): failed to get link speed/duplex [ 591.014758][T23097] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 591.324062][T23186] netlink: 'syz.2.5474': attribute type 11 has an invalid length. [ 591.421648][T23192] batadv_slave_1: entered promiscuous mode [ 591.571317][T23177] batadv_slave_1: left promiscuous mode [ 591.792126][T23212] netlink: 10 bytes leftover after parsing attributes in process `syz.1.5481'. [ 592.127136][T23231] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5485'. [ 592.153937][T23231] netlink: 'syz.0.5485': attribute type 10 has an invalid length. [ 592.153958][T23231] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5485'. [ 592.153985][T23231] batadv0: entered promiscuous mode [ 592.154001][T23231] batadv0: entered allmulticast mode [ 592.154744][T23231] bridge0: port 1(batadv0) entered blocking state [ 592.159096][T23231] bridge0: port 1(batadv0) entered disabled state [ 592.163922][T23231] bridge0: port 1(batadv0) entered blocking state [ 592.164038][T23231] bridge0: port 1(batadv0) entered forwarding state [ 592.174957][T23231] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 592.175004][T23231] IPv6: NLM_F_CREATE should be set when creating new route [ 592.175044][T23231] IPv6: NLM_F_CREATE should be set when creating new route [ 592.383306][T23237] netlink: 'syz.1.5486': attribute type 2 has an invalid length. [ 592.383331][T23237] nbd: illegal input index -2130444284 [ 592.437273][ T12] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 592.437294][ T12] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 592.663466][T23253] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5490'. [ 592.839793][T23259] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5493'. [ 592.839819][T23259] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5493'. [ 593.076519][T23273] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5496'. [ 593.682399][T23300] netlink: 'syz.3.5502': attribute type 1 has an invalid length. [ 593.756176][T23300] 8021q: adding VLAN 0 to HW filter on device bond8 [ 593.888300][T23316] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5504'. [ 593.961568][T23309] bond9: option mode: invalid value (7) [ 593.977042][T23309] bond9 (unregistering): Released all slaves [ 594.113595][T23321] bond8: (slave geneve2): making interface the new active one [ 594.132521][T23321] bond8: (slave geneve2): Enslaving as an active interface with an up link [ 594.400977][T23332] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5510'. [ 594.498828][T23337] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5507'. [ 594.526602][T23332] bond0 (unregistering): Released all slaves [ 594.554008][T23336] bond9: option mode: unable to set because the bond device has slaves [ 594.586462][ T1499] smbdirect: ib_dev[syz1] removed [ 594.701056][T23344] net_ratelimit: 37 callbacks suppressed [ 594.701078][T23344] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 594.768839][T23336] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 594.787767][T23336] macvlan1: entered allmulticast mode [ 594.787791][T23336] bond0: entered allmulticast mode [ 594.787805][T23336] gretap1: entered allmulticast mode [ 594.789167][T23336] gretap1: entered promiscuous mode [ 594.819267][T23336] bond9: (slave macvlan1): Enslaving as a backup interface with an up link [ 594.838929][ T12] bond9: (slave macvlan1): link status up again after 0 ms [ 594.856957][ T12] bond9: (slave macvlan1): failed to get link speed/duplex [ 594.875741][ T161] bond1: (slave vlan2): failed to get link speed/duplex [ 594.967860][ T1499] bond9: (slave macvlan1): failed to get link speed/duplex [ 594.987021][ T161] bond1: (slave vlan2): failed to get link speed/duplex [ 595.075219][ T161] bond9: (slave macvlan1): failed to get link speed/duplex [ 595.095328][ T161] bond1: (slave vlan2): failed to get link speed/duplex [ 595.205817][ T1499] bond9: (slave macvlan1): failed to get link speed/duplex [ 595.207695][ T1431] bond1: (slave vlan2): failed to get link speed/duplex [ 595.429663][T23365] syzkaller0: entered promiscuous mode [ 595.429687][T23365] syzkaller0: entered allmulticast mode [ 595.433714][T23367] sctp: [Deprecated]: syz.4.5518 (pid 23367) Use of int in max_burst socket option deprecated. [ 595.433714][T23367] Use struct sctp_assoc_value instead [ 595.434957][T23365] tipc: Enabled bearer , priority 0 [ 595.664079][T23377] netlink: 'syz.4.5524': attribute type 1 has an invalid length. [ 595.702394][T23377] 8021q: adding VLAN 0 to HW filter on device bond8 [ 595.743048][T23380] bond0: entered allmulticast mode [ 595.743426][T23380] 8021q: adding VLAN 0 to HW filter on device bond0 [ 595.767379][T23377] bond8: (slave veth0_to_bond): making interface the new active one [ 595.768953][T23377] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 595.801393][T23377] bond8: entered promiscuous mode [ 595.801419][T23377] veth0_to_bond: entered promiscuous mode [ 595.801610][T23377] bond8: entered allmulticast mode [ 595.801623][T23377] veth0_to_bond: entered allmulticast mode [ 595.830627][T23380] bond0: (slave macvlan3): Opening slave failed [ 595.881718][T23377] macvlan0: entered promiscuous mode [ 595.881742][T23377] macvlan0: entered allmulticast mode [ 596.203913][T23363] tipc: Resetting bearer [ 596.262969][T23363] tipc: Disabling bearer [ 596.528457][T23412] FAULT_INJECTION: forcing a failure. [ 596.528457][T23412] name failslab, interval 1, probability 0, space 0, times 0 [ 596.528491][T23412] CPU: 1 UID: 0 PID: 23412 Comm: syz.4.5533 Not tainted syzkaller #0 PREEMPT(full) [ 596.528511][T23412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 596.528522][T23412] Call Trace: [ 596.528530][T23412] [ 596.528538][T23412] dump_stack_lvl+0xe8/0x150 [ 596.528571][T23412] should_fail_ex+0x410/0x560 [ 596.528600][T23412] should_failslab+0xa8/0x100 [ 596.528627][T23412] __kmalloc_node_noprof+0x100/0x720 [ 596.528647][T23412] ? __get_vm_area_node+0x200/0x2f0 [ 596.528673][T23412] ? __get_vm_area_node+0x283/0x2f0 [ 596.528697][T23412] ? __vmalloc_node_range_noprof+0x5b4/0x1540 [ 596.528714][T23412] ? __vmalloc_node_range_noprof+0x5b4/0x1540 [ 596.528740][T23412] __vmalloc_node_range_noprof+0x5b4/0x1540 [ 596.528761][T23412] ? __x64_sys_bpf+0xba/0xd0 [ 596.528798][T23412] ? bpf_prog_load+0x14d6/0x1c20 [ 596.528818][T23412] ? __sys_bpf+0xd0d/0xd90 [ 596.528852][T23412] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 596.528882][T23412] ? bpf_prog_calc_tag+0x51/0x370 [ 596.528903][T23412] __vmalloc_noprof+0xd2/0x120 [ 596.528922][T23412] ? bpf_prog_calc_tag+0x51/0x370 [ 596.528948][T23412] bpf_prog_calc_tag+0x51/0x370 [ 596.528969][T23412] ? __pfx_cmp_subprogs+0x10/0x10 [ 596.528997][T23412] check_and_resolve_insns+0xbb/0x21d0 [ 596.529024][T23412] ? add_subprog+0x2e2/0x3f0 [ 596.529049][T23412] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 596.529085][T23412] bpf_check+0x18f7/0x2ef0 [ 596.529125][T23412] ? __pfx_bpf_check+0x10/0x10 [ 596.529149][T23412] ? bpf_obj_name_cpy+0x194/0x1e0 [ 596.529179][T23412] bpf_prog_load+0x14d6/0x1c20 [ 596.529214][T23412] ? __pfx_bpf_prog_load+0x10/0x10 [ 596.529263][T23412] __sys_bpf+0xd0d/0xd90 [ 596.529291][T23412] ? __pfx___sys_bpf+0x10/0x10 [ 596.529324][T23412] ? __fget_files+0x2a/0x420 [ 596.529367][T23412] ? ksys_write+0x242/0x270 [ 596.529389][T23412] ? __pfx_ksys_write+0x10/0x10 [ 596.529413][T23412] __x64_sys_bpf+0xba/0xd0 [ 596.529436][T23412] do_syscall_64+0x166/0x520 [ 596.529461][T23412] ? trace_irq_disable+0x3b/0x140 [ 596.529480][T23412] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.529500][T23412] ? clear_bhb_loop+0x70/0xc0 [ 596.529523][T23412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.529541][T23412] RIP: 0033:0x7f7d9e19f559 [ 596.529559][T23412] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 596.529575][T23412] RSP: 002b:00007f7d9f10a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 596.529600][T23412] RAX: ffffffffffffffda RBX: 00007f7d9e425fa0 RCX: 00007f7d9e19f559 [ 596.529613][T23412] RDX: 0000000000000094 RSI: 0000200000000d00 RDI: 0000000000000005 [ 596.529629][T23412] RBP: 00007f7d9f10a090 R08: 0000000000000000 R09: 0000000000000000 [ 596.529640][T23412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 596.529651][T23412] R13: 00007f7d9e426038 R14: 00007f7d9e425fa0 R15: 00007fff0f2ea808 [ 596.529683][T23412] [ 596.531711][T23412] warn_alloc: 2 callbacks suppressed [ 596.531726][T23412] syz.4.5533: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x400cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 596.531788][T23412] CPU: 1 UID: 0 PID: 23412 Comm: syz.4.5533 Not tainted syzkaller #0 PREEMPT(full) [ 596.531808][T23412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 596.531819][T23412] Call Trace: [ 596.531826][T23412] [ 596.531834][T23412] dump_stack_lvl+0xe8/0x150 [ 596.531862][T23412] warn_alloc+0x24d/0x270 [ 596.531887][T23412] ? __pfx_warn_alloc+0x10/0x10 [ 596.531912][T23412] ? __kmalloc_node_noprof+0x4d7/0x720 [ 596.531930][T23412] ? __get_vm_area_node+0x200/0x2f0 [ 596.531957][T23412] ? __get_vm_area_node+0x283/0x2f0 [ 596.531981][T23412] ? __vmalloc_node_range_noprof+0x5b4/0x1540 [ 596.531997][T23412] ? __vmalloc_node_range_noprof+0x5b4/0x1540 [ 596.532021][T23412] __vmalloc_node_range_noprof+0x969/0x1540 [ 596.532042][T23412] ? __x64_sys_bpf+0xba/0xd0 [ 596.532069][T23412] ? __sys_bpf+0xd0d/0xd90 [ 596.532104][T23412] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 596.532137][T23412] ? bpf_prog_calc_tag+0x51/0x370 [ 596.532158][T23412] __vmalloc_noprof+0xd2/0x120 [ 596.532177][T23412] ? bpf_prog_calc_tag+0x51/0x370 [ 596.532203][T23412] bpf_prog_calc_tag+0x51/0x370 [ 596.532226][T23412] ? __pfx_cmp_subprogs+0x10/0x10 [ 596.532253][T23412] check_and_resolve_insns+0xbb/0x21d0 [ 596.532279][T23412] ? add_subprog+0x2e2/0x3f0 [ 596.532305][T23412] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 596.532338][T23412] bpf_check+0x18f7/0x2ef0 [ 596.532377][T23412] ? __pfx_bpf_check+0x10/0x10 [ 596.532401][T23412] ? bpf_obj_name_cpy+0x194/0x1e0 [ 596.532434][T23412] bpf_prog_load+0x14d6/0x1c20 [ 596.532469][T23412] ? __pfx_bpf_prog_load+0x10/0x10 [ 596.532518][T23412] __sys_bpf+0xd0d/0xd90 [ 596.532548][T23412] ? __pfx___sys_bpf+0x10/0x10 [ 596.532584][T23412] ? __fget_files+0x2a/0x420 [ 596.532627][T23412] ? ksys_write+0x242/0x270 [ 596.532649][T23412] ? __pfx_ksys_write+0x10/0x10 [ 596.532673][T23412] __x64_sys_bpf+0xba/0xd0 [ 596.532698][T23412] do_syscall_64+0x166/0x520 [ 596.532724][T23412] ? trace_irq_disable+0x3b/0x140 [ 596.532744][T23412] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.532763][T23412] ? clear_bhb_loop+0x70/0xc0 [ 596.532794][T23412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.532813][T23412] RIP: 0033:0x7f7d9e19f559 [ 596.532831][T23412] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 596.532847][T23412] RSP: 002b:00007f7d9f10a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 596.532867][T23412] RAX: ffffffffffffffda RBX: 00007f7d9e425fa0 RCX: 00007f7d9e19f559 [ 596.532880][T23412] RDX: 0000000000000094 RSI: 0000200000000d00 RDI: 0000000000000005 [ 596.532893][T23412] RBP: 00007f7d9f10a090 R08: 0000000000000000 R09: 0000000000000000 [ 596.532905][T23412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 596.532916][T23412] R13: 00007f7d9e426038 R14: 00007f7d9e425fa0 R15: 00007fff0f2ea808 [ 596.532949][T23412] [ 596.536583][T23412] Mem-Info: [ 596.536596][T23412] active_anon:5740 inactive_anon:0 isolated_anon:0 [ 596.536596][T23412] active_file:0 inactive_file:44083 isolated_file:0 [ 596.536596][T23412] unevictable:0 dirty:197 writeback:0 [ 596.536596][T23412] slab_reclaimable:11826 slab_unreclaimable:120879 [ 596.536596][T23412] mapped:30059 shmem:526 pagetables:1211 [ 596.536596][T23412] sec_pagetables:0 bounce:0 [ 596.536596][T23412] kernel_misc_reclaimable:0 [ 596.536596][T23412] free:1260641 free_pcp:10476 free_cma:0 [ 596.536644][T23412] Node 0 active_anon:22960kB inactive_anon:0kB active_file:0kB inactive_file:176136kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:120236kB dirty:788kB writeback:0kB shmem:2104kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15360kB pagetables:4688kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 596.537139][T23412] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 596.537187][T23412] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 596.537238][T23412] lowmem_reserve[]: 0 2468 2468 2468 2468 [ 596.537272][T23412] Node 0 DMA32 free:1077824kB boost:0kB min:33984kB low:42480kB high:50976kB reserved_highatomic:0kB free_highatomic:0kB active_anon:22960kB inactive_anon:0kB active_file:0kB inactive_file:176136kB unevictable:0kB writepending:788kB zspages:0kB present:3129332kB managed:2527372kB mlocked:0kB bounce:0kB free_pcp:41888kB local_pcp:20816kB free_cma:0kB [ 596.537325][T23412] lowmem_reserve[]: 0 0 0 0 0 [ 596.537356][T23412] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 596.537402][T23412] lowmem_reserve[]: 0 0 0 0 0 [ 596.537432][T23412] Node 1 Normal free:3949380kB boost:0kB min:55916kB low:69892kB high:83868kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 596.537483][T23412] lowmem_reserve[]: 0 0 0 0 0 [ 596.537514][T23412] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 596.537614][T23412] Node 0 DMA32: 2626*4kB (UME) 1049*8kB (UME) 882*16kB (UM) 1092*32kB (UM) 851*64kB (UME) 399*128kB (UME) 168*256kB (UME) 50*512kB (UM) 16*1024kB (UE) 10*2048kB (UME) 195*4096kB (UM) = 1077680kB [ 596.537755][T23412] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 596.537849][T23412] Node 1 Normal: 1*4kB (M) 2*8kB (UM) 7*16kB (UM) 8*32kB (UM) 7*64kB (UM) 8*128kB (UM) 4*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 962*4096kB (M) = 3949380kB [ 596.537991][T23412] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 596.538007][T23412] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 596.538022][T23412] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 596.538037][T23412] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 596.538052][T23412] 44605 total pagecache pages [ 596.538060][T23412] 0 pages in swap cache [ 596.538067][T23412] Free swap = 124996kB [ 596.538075][T23412] Total swap = 124996kB [ 596.538083][T23412] 2097051 pages RAM [ 596.538090][T23412] 0 pages HighMem/MovableOnly [ 596.538097][T23412] 433592 pages reserved [ 596.538104][T23412] 0 pages cma reserved [ 597.023631][T23420] bond9: option mode: unable to set because the bond device has slaves [ 597.024269][T23421] syzkaller0: left promiscuous mode [ 597.024286][T23421] syzkaller0: left allmulticast mode [ 597.143605][T23420] bond9: (slave macvlan2): Error -98 calling set_mac_address [ 597.176136][T23424] __nla_validate_parse: 71 callbacks suppressed [ 597.176158][T23424] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5537'. [ 597.238037][T23421] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 598.242877][T23463] xt_hashlimit: max too large, truncated to 1048576 [ 598.263420][T23462] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5547'. [ 598.263895][T23462] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5547'. [ 598.603099][T23475] syzkaller0: entered promiscuous mode [ 598.603130][T23475] syzkaller0: entered allmulticast mode [ 598.914012][T23491] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5554'. [ 599.042450][T23499] netlink: 'syz.1.5557': attribute type 1 has an invalid length. [ 599.629430][T23517] syzkaller0: entered promiscuous mode [ 599.629454][T23517] syzkaller0: entered allmulticast mode [ 599.651574][T23521] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5562'. [ 599.651603][T23521] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5562'. [ 599.681403][T23517] bridge_slave_0: entered promiscuous mode [ 599.825393][ T13] net_ratelimit: 57 callbacks suppressed [ 599.825414][ T13] bond1: (slave vlan2): failed to get link speed/duplex [ 599.825454][ T13] bond9: (slave macvlan1): failed to get link speed/duplex [ 599.946998][ T1396] bond9: (slave macvlan1): failed to get link speed/duplex [ 599.965202][ T1396] bond1: (slave vlan2): failed to get link speed/duplex [ 600.067337][ T13] bond9: (slave macvlan1): failed to get link speed/duplex [ 600.075495][ T1431] bond1: (slave vlan2): failed to get link speed/duplex [ 600.082303][T23537] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5566'. [ 600.151459][T23540] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 600.176106][ T1499] bond9: (slave macvlan1): failed to get link speed/duplex [ 600.185281][ T1396] bond1: (slave vlan2): failed to get link speed/duplex [ 600.277268][T23546] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5570'. [ 600.287689][ T1431] bond9: (slave macvlan1): failed to get link speed/duplex [ 600.948434][T23574] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 600.949772][T23572] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5577'. [ 600.950952][T23544] lo: entered promiscuous mode [ 600.950973][T23544] lo: entered allmulticast mode [ 600.953158][T23544] tunl0: entered promiscuous mode [ 600.953177][T23544] tunl0: entered allmulticast mode [ 600.953502][T23572] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5577'. [ 600.957030][T23544] gre0: entered promiscuous mode [ 600.957048][T23544] gre0: entered allmulticast mode [ 600.961881][T23544] gretap0: entered promiscuous mode [ 600.961900][T23544] gretap0: entered allmulticast mode [ 600.964310][T23544] erspan0: entered promiscuous mode [ 600.964327][T23544] erspan0: entered allmulticast mode [ 600.964953][T23544] ip_vti0: entered promiscuous mode [ 600.969530][T23544] ip_vti0: entered allmulticast mode [ 600.970456][T23544] ip6_vti0: entered promiscuous mode [ 600.970471][T23544] ip6_vti0: entered allmulticast mode [ 600.983039][T23544] sit0: entered promiscuous mode [ 600.983059][T23544] sit0: entered allmulticast mode [ 600.983994][T23544] ip6tnl0: entered promiscuous mode [ 600.984011][T23544] ip6tnl0: entered allmulticast mode [ 600.993342][T23544] ip6gre0: entered promiscuous mode [ 600.993364][T23544] ip6gre0: entered allmulticast mode [ 601.001957][T23544] syz_tun: entered promiscuous mode [ 601.014128][T23544] bridge0: entered promiscuous mode [ 601.014175][T23544] bridge0: entered allmulticast mode [ 601.034523][T23544] vcan0: entered promiscuous mode [ 601.034556][T23544] vcan0: entered allmulticast mode [ 601.038662][T23544] team0: entered promiscuous mode [ 601.038682][T23544] team_slave_1: entered promiscuous mode [ 601.044523][T23544] team0: entered allmulticast mode [ 601.044550][T23544] team_slave_1: entered allmulticast mode [ 601.059769][T23544] dummy0: entered promiscuous mode [ 601.059792][T23544] dummy0: entered allmulticast mode [ 601.060314][T23544] nlmon0: entered promiscuous mode [ 601.060329][T23544] nlmon0: entered allmulticast mode [ 601.075685][T23544] veth0: entered promiscuous mode [ 601.076484][T23544] veth1: entered promiscuous mode [ 601.076499][T23544] veth1: entered allmulticast mode [ 601.082505][T23544] wg0: entered promiscuous mode [ 601.082526][T23544] wg0: entered allmulticast mode [ 601.083344][T23544] wg1: entered promiscuous mode [ 601.083360][T23544] wg1: entered allmulticast mode [ 601.096968][T23544] wg2: entered promiscuous mode [ 601.096991][T23544] wg2: entered allmulticast mode [ 601.099639][T23544] veth0_to_bridge: entered promiscuous mode [ 601.099659][T23544] veth0_to_bridge: entered allmulticast mode [ 601.122605][T23544] bridge_slave_0: entered allmulticast mode [ 601.140760][T23544] veth1_to_bridge: entered promiscuous mode [ 601.140781][T23544] veth1_to_bridge: entered allmulticast mode [ 601.155652][T23544] veth0_to_bond: entered promiscuous mode [ 601.155676][T23544] veth0_to_bond: entered allmulticast mode [ 601.156522][T23544] bond_slave_0: entered promiscuous mode [ 601.156549][T23544] bond_slave_0: entered allmulticast mode [ 601.161390][T23544] veth1_to_bond: entered promiscuous mode [ 601.161409][T23544] veth1_to_bond: entered allmulticast mode [ 601.162046][T23544] bond_slave_1: entered promiscuous mode [ 601.162061][T23544] bond_slave_1: entered allmulticast mode [ 601.169723][T23544] veth1_to_team: entered promiscuous mode [ 601.169744][T23544] veth1_to_team: entered allmulticast mode [ 601.178552][T23544] veth0_to_batadv: entered promiscuous mode [ 601.178573][T23544] veth0_to_batadv: entered allmulticast mode [ 601.184369][T23544] batadv_slave_0: entered promiscuous mode [ 601.184391][T23544] batadv_slave_0: entered allmulticast mode [ 601.188138][T23544] veth1_to_batadv: entered promiscuous mode [ 601.188156][T23544] veth1_to_batadv: entered allmulticast mode [ 601.192109][T23544] batadv_slave_1: entered promiscuous mode [ 601.192128][T23544] batadv_slave_1: entered allmulticast mode [ 601.192798][T23544] xfrm0: entered promiscuous mode [ 601.192811][T23544] xfrm0: entered allmulticast mode [ 601.201223][T23544] veth1_virt_wifi: entered promiscuous mode [ 601.201245][T23544] veth1_virt_wifi: entered allmulticast mode [ 601.201962][T23544] veth0_virt_wifi: entered promiscuous mode [ 601.201977][T23544] veth0_virt_wifi: entered allmulticast mode [ 601.219084][T23544] virt_wifi0: entered promiscuous mode [ 601.219106][T23544] virt_wifi0: entered allmulticast mode [ 601.219614][T23544] veth1_macvtap: entered allmulticast mode [ 601.252208][T23544] veth0_macvtap: entered allmulticast mode [ 601.253355][T23544] macvtap0: entered promiscuous mode [ 601.253507][T23544] macvtap0: entered allmulticast mode [ 601.257988][T23544] macsec0: entered promiscuous mode [ 601.258150][T23544] macsec0: entered allmulticast mode [ 601.262202][T23544] geneve0: entered promiscuous mode [ 601.262222][T23544] geneve0: entered allmulticast mode [ 601.262923][T23544] geneve1: entered promiscuous mode [ 601.262938][T23544] geneve1: entered allmulticast mode [ 601.268713][T23544] mac80211_hwsim hwsim22 wlan0: entered promiscuous mode [ 601.268736][T23544] mac80211_hwsim hwsim22 wlan0: entered allmulticast mode [ 601.269413][T23544] nr0: entered promiscuous mode [ 601.269428][T23544] nr0: entered allmulticast mode [ 601.272642][T23544] bridge0.257: entered promiscuous mode [ 601.272835][T23544] bridge0.257: entered allmulticast mode [ 601.273403][T23544] syztnl0: entered promiscuous mode [ 601.273416][T23544] syztnl0: entered allmulticast mode [ 601.280289][T23544] ´: entered allmulticast mode [ 601.287763][T23544] bond1: entered promiscuous mode [ 601.287784][T23544] geneve2: entered promiscuous mode [ 601.287965][T23544] bond1: entered allmulticast mode [ 601.287977][T23544] geneve2: entered allmulticast mode [ 601.293442][T23544] 8021q: adding VLAN 0 to HW filter on device bond1 [ 601.307990][T23544] pim6reg: entered promiscuous mode [ 601.325490][T23544] ip6erspan0: entered promiscuous mode [ 601.325511][T23544] ip6erspan0: entered allmulticast mode [ 601.326273][T23544] gre1: entered allmulticast mode [ 601.342052][T23544] bridge1: entered promiscuous mode [ 601.342076][T23544] bridge1: entered allmulticast mode [ 601.355396][T23544] mac80211_hwsim hwsim28 wlan2: entered promiscuous mode [ 601.355425][T23544] mac80211_hwsim hwsim28 wlan2: entered allmulticast mode [ 601.383059][T23544] netdevsim netdevsim1 eth0: entered promiscuous mode [ 601.383086][T23544] netdevsim netdevsim1 eth0: entered allmulticast mode [ 601.383493][T23544] 8021q: adding VLAN 0 to HW filter on device eth0 [ 601.390899][T23544] netdevsim netdevsim1 eth1: entered promiscuous mode [ 601.390925][T23544] netdevsim netdevsim1 eth1: entered allmulticast mode [ 601.403719][T23544] 8021q: adding VLAN 0 to HW filter on device eth1 [ 601.418105][T23544] netdevsim netdevsim1 eth2: entered promiscuous mode [ 601.418135][T23544] netdevsim netdevsim1 eth2: entered allmulticast mode [ 601.418529][T23544] 8021q: adding VLAN 0 to HW filter on device eth2 [ 601.424842][T23544] netdevsim netdevsim1 eth3: entered promiscuous mode [ 601.424868][T23544] netdevsim netdevsim1 eth3: entered allmulticast mode [ 601.428844][T23544] 8021q: adding VLAN 0 to HW filter on device eth3 [ 601.436566][T23544] ip6gre1: entered promiscuous mode [ 601.436587][T23544] ip6gre1: entered allmulticast mode [ 601.444068][T23544] bond2: entered promiscuous mode [ 601.444094][T23544] bond2: entered allmulticast mode [ 601.450716][T23544] 8021q: adding VLAN 0 to HW filter on device bond2 [ 601.458194][T23544] bond3: entered promiscuous mode [ 601.458222][T23544] bond3: entered allmulticast mode [ 601.462129][T23544] 8021q: adding VLAN 0 to HW filter on device bond3 [ 601.468231][T23544] veth2: entered promiscuous mode [ 601.468252][T23544] veth2: entered allmulticast mode [ 601.479473][T23544] veth3: entered promiscuous mode [ 601.479496][T23544] veth3: entered allmulticast mode [ 601.486710][T23544] ipip0: entered promiscuous mode [ 601.486731][T23544] ipip0: entered allmulticast mode [ 601.491296][T23544] bond4: entered promiscuous mode [ 601.491318][T23544] bond4: entered allmulticast mode [ 601.537772][T23544] bond5: entered promiscuous mode [ 601.537798][T23544] bond5: entered allmulticast mode [ 601.542084][T23544] veth4: entered promiscuous mode [ 601.542106][T23544] veth4: entered allmulticast mode [ 601.549627][T23544] veth5: entered promiscuous mode [ 601.549650][T23544] veth5: entered allmulticast mode [ 601.552008][T23544] pim6reg99999999: entered promiscuous mode [ 601.554166][T23544] ip6gre2: entered promiscuous mode [ 601.554183][T23544] ip6gre2: entered allmulticast mode [ 601.554671][T23544] bond6: entered allmulticast mode [ 601.561181][T23544] veth6: entered promiscuous mode [ 601.561201][T23544] veth6: entered allmulticast mode [ 601.568761][T23544] ip6tnl1: entered promiscuous mode [ 601.568782][T23544] ip6tnl1: entered allmulticast mode [ 601.573912][T23544] bridge2: entered allmulticast mode [ 601.583106][T23594] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20000 [ 601.594663][T23544] bridge3: entered promiscuous mode [ 601.603155][T23544] bond8: entered promiscuous mode [ 601.603180][T23544] bond8: entered allmulticast mode [ 601.612529][T23544] geneve3: entered promiscuous mode [ 601.613091][T23544] geneve3: entered allmulticast mode [ 601.631855][T23544] bond9: entered promiscuous mode [ 601.631879][T23544] ip6gretap0: entered promiscuous mode [ 601.632045][T23544] macvlan1: entered promiscuous mode [ 601.632057][T23544] bond0: entered promiscuous mode [ 601.861205][T23584] netlink: 'syz.4.5580': attribute type 14 has an invalid length. [ 602.473354][T23607] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 602.616620][T23619] __nla_validate_parse: 1 callbacks suppressed [ 602.616642][T23619] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5586'. [ 602.823655][T23623] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5587'. [ 603.011882][T23625] netlink: 'syz.2.5587': attribute type 10 has an invalid length. [ 603.011905][T23625] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5587'. [ 603.054021][T23625] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 603.396503][T23637] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 604.134028][T23634] wg2 speed is unknown, defaulting to 1000 [ 604.295965][T23654] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5597'. [ 604.296037][T23654] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5597'. [ 604.647999][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888066f34800: rx timeout, send abort [ 604.843271][ T1431] net_ratelimit: 102 callbacks suppressed [ 604.843301][ T1431] bond1: (slave vlan2): failed to get link speed/duplex [ 604.937296][T22358] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 604.937326][T22358] bond9: (slave macvlan1): failed to get link speed/duplex [ 604.945755][ T13] bond1: (slave vlan2): failed to get link speed/duplex [ 605.008896][T23685] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5602'. [ 605.046529][ T1396] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 605.046554][ T1396] bond9: (slave macvlan1): failed to get link speed/duplex [ 605.055711][ T1499] bond1: (slave vlan2): failed to get link speed/duplex [ 605.141180][T23689] netlink: 'syz.4.5602': attribute type 10 has an invalid length. [ 605.141202][T23689] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5602'. [ 605.148054][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888066f34800: abort rx timeout. Force session deactivation [ 605.150757][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888066f34400: rx timeout, send abort [ 605.156641][ T1499] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 605.156668][ T1499] bond9: (slave macvlan1): failed to get link speed/duplex [ 605.165762][ C0] vxcan1: j1939_xtp_rx_rts_session_active: 0xffff888066f34400: connection exists (fe ff). last cmd: 20 [ 605.165973][T22358] bond1: (slave vlan2): failed to get link speed/duplex [ 605.181800][T23689] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 605.415726][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888079233400: rx timeout, send abort [ 605.750803][T23705] netlink: 'syz.3.5607': attribute type 16 has an invalid length. [ 605.750826][T23705] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.5607'. [ 605.916236][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888079233400: abort rx timeout. Force session deactivation [ 606.003351][T23707] syzkaller0: entered promiscuous mode [ 606.003379][T23707] syzkaller0: entered allmulticast mode [ 606.676136][T23732] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5614'. [ 606.766805][T23734] netlink: 'syz.2.5614': attribute type 10 has an invalid length. [ 606.766829][T23734] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5614'. [ 606.832787][T23735] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 610.940939][T23705] syzkaller1: entered promiscuous mode [ 610.940963][T23705] syzkaller1: entered allmulticast mode [ 611.069573][T23742] ip6erspan1: entered allmulticast mode [ 611.081643][ T13] net_ratelimit: 14 callbacks suppressed [ 611.081676][ T13] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 611.081696][ T13] bond9: (slave macvlan1): failed to get link speed/duplex [ 611.081728][ T13] bond1: (slave vlan2): failed to get link speed/duplex [ 611.096252][T23742] netlink: 'syz.1.5616': attribute type 5 has an invalid length. [ 611.103041][T23742] netlink: 'syz.1.5616': attribute type 39 has an invalid length. [ 611.245564][ T1431] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 611.245594][ T1431] bond9: (slave macvlan1): failed to get link speed/duplex [ 611.245627][ T1431] bond1: (slave vlan2): failed to get link speed/duplex [ 611.370467][ T1431] bond1: (slave vlan2): failed to get link speed/duplex [ 611.370508][ T1431] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 611.370525][ T1431] bond9: (slave macvlan1): failed to get link speed/duplex [ 611.614330][T23760] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5623'. [ 611.639395][ T86] ------------[ cut here ]------------ [ 611.639410][ T86] conntrack cleanup blocked for 60s [ 611.639421][ T86] WARNING: net/netfilter/nf_conntrack_core.c:2504 at nf_conntrack_cleanup_net_list+0x21f/0x370, CPU#1: kworker/u8:5/86 [ 611.665803][ T86] Modules linked in: [ 611.671530][ T86] CPU: 1 UID: 0 PID: 86 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 611.681553][ T86] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 611.692852][ T86] Workqueue: netns cleanup_net [ 611.697751][ T86] RIP: 0010:nf_conntrack_cleanup_net_list+0x21f/0x370 [ 611.704580][ T86] Code: 4c 89 ef e8 63 5b 35 f8 4d 8b 7d 00 4d 39 ef 74 69 e8 15 7b c4 f7 45 31 e4 e9 a5 fe ff ff e8 08 7b c4 f7 48 8d 3d a1 60 86 07 <67> 48 0f b9 3a eb c0 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c da fe ff [ 611.720134][T23767] netlink: 'syz.2.5624': attribute type 1 has an invalid length. [ 611.734101][ T86] RSP: 0018:ffffc9000205f8b0 EFLAGS: 00010293 [ 611.740667][ T86] RAX: ffffffff8a03a578 RBX: dffffc0000000000 RCX: ffff88801ef30000 [ 611.749910][ T86] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: ffffffff918a0620 [ 611.758141][ T86] RBP: 0000000000000001 R08: ffff888057179c03 R09: 1ffff1100ae2f380 [ 611.766268][ T86] R10: dffffc0000000000 R11: ffffed100ae2f381 R12: 0000000100007902 [ 611.774423][ T86] R13: ffffc9000205fa50 R14: ffffc9000205fa50 R15: 0000000100007903 [ 611.776711][T23769] FAULT_INJECTION: forcing a failure. [ 611.776711][T23769] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 611.776743][T23769] CPU: 0 UID: 0 PID: 23769 Comm: syz.2.5624 Not tainted syzkaller #0 PREEMPT(full) [ 611.776764][T23769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 611.776776][T23769] Call Trace: [ 611.776783][T23769] [ 611.776798][T23769] dump_stack_lvl+0xe8/0x150 [ 611.776829][T23769] should_fail_ex+0x410/0x560 [ 611.776858][T23769] _copy_from_iter+0x1d3/0x1660 [ 611.776884][T23769] ? __alloc_skb+0x27a/0x7a0 [ 611.776908][T23769] ? __alloc_skb+0x27a/0x7a0 [ 611.776932][T23769] ? __alloc_skb+0x27a/0x7a0 [ 611.776953][T23769] ? __pfx__copy_from_iter+0x10/0x10 [ 611.776975][T23769] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 611.776995][T23769] ? __alloc_skb+0x27a/0x7a0 [ 611.777015][T23769] ? __alloc_skb+0x27a/0x7a0 [ 611.777042][T23769] ? netlink_sendmsg+0x650/0xb40 [ 611.777062][T23769] ? skb_put+0x112/0x210 [ 611.777087][T23769] netlink_sendmsg+0x6c0/0xb40 [ 611.777116][T23769] ? __pfx_netlink_sendmsg+0x10/0x10 [ 611.777145][T23769] ? apparmor_socket_sendmsg+0x98/0x360 [ 611.777172][T23769] ? __pfx_netlink_sendmsg+0x10/0x10 [ 611.777191][T23769] sock_sendmsg_nosec+0x14e/0x190 [ 611.777213][T23769] ____sys_sendmsg+0x54e/0x850 [ 611.777244][T23769] ? __pfx_____sys_sendmsg+0x10/0x10 [ 611.777283][T23769] ? import_iovec+0x73/0xa0 [ 611.777308][T23769] ___sys_sendmsg+0x2a5/0x360 [ 611.777332][T23769] ? __lock_acquire+0x747/0x2de0 [ 611.777359][T23769] ? __pfx____sys_sendmsg+0x10/0x10 [ 611.777417][T23769] ? __fget_files+0x2a/0x420 [ 611.777442][T23769] ? __fget_files+0x3a2/0x420 [ 611.777478][T23769] __x64_sys_sendmsg+0x1b1/0x290 [ 611.777506][T23769] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 611.777551][T23769] do_syscall_64+0x166/0x520 [ 611.777576][T23769] ? trace_irq_disable+0x3b/0x140 [ 611.777594][T23769] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.777613][T23769] ? clear_bhb_loop+0x70/0xc0 [ 611.777635][T23769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.777653][T23769] RIP: 0033:0x7fca3dd9f559 [ 611.777671][T23769] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 611.777686][T23769] RSP: 002b:00007fca3eb7e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 611.777705][T23769] RAX: ffffffffffffffda RBX: 00007fca3e026090 RCX: 00007fca3dd9f559 [ 611.777718][T23769] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000006 [ 611.777729][T23769] RBP: 00007fca3eb7e090 R08: 0000000000000000 R09: 0000000000000000 [ 611.777741][T23769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 611.777752][T23769] R13: 00007fca3e026128 R14: 00007fca3e026090 R15: 00007ffc0874f1b8 [ 611.777782][T23769] [ 611.974257][T23765] ip_tables: iptables: counters copy to user failed while replacing table [ 612.071844][ T86] FS: 0000000000000000(0000) GS:ffff888123bba000(0000) knlGS:0000000000000000 [ 612.081355][ T86] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 612.088092][ T86] CR2: 00007f29c3c7c8e6 CR3: 000000000fb48000 CR4: 00000000003526f0 [ 612.096184][ T86] Call Trace: [ 612.099492][ T86] [ 612.102449][ T86] ? __pfx_nf_conntrack_pernet_exit+0x10/0x10 [ 612.109093][ T86] ops_undo_list+0x4b4/0x8d0 [ 612.113728][ T86] ? __pfx_ops_undo_list+0x10/0x10 [ 612.118939][ T86] ? idr_destroy+0x218/0x290 [ 612.123551][ T86] ? do_raw_spin_unlock+0xf5/0x200 [ 612.128779][ T86] cleanup_net+0x572/0x810 [ 612.133224][ T86] ? __pfx_cleanup_net+0x10/0x10 [ 612.138617][ T86] ? rcu_is_watching+0x16/0xb0 [ 612.143397][ T86] ? process_scheduled_works+0x97a/0x1630 [ 612.149213][ T86] process_scheduled_works+0xc3d/0x1630 [ 612.154830][ T86] ? __pfx_process_scheduled_works+0x10/0x10 [ 612.160946][ T86] ? assign_work+0x3cf/0x5d0 [ 612.166449][ T86] worker_thread+0xa47/0xfb0 [ 612.171117][ T86] kthread+0x38b/0x480 [ 612.175254][ T86] ? __pfx_worker_thread+0x10/0x10 [ 612.180387][ T86] ? __pfx_kthread+0x10/0x10 [ 612.185186][ T86] ret_from_fork+0x514/0xb70 [ 612.189812][ T86] ? __pfx_ret_from_fork+0x10/0x10 [ 612.194924][ T86] ? __switch_to+0xc89/0x1420 [ 612.200225][ T86] ? __pfx_kthread+0x10/0x10 [ 612.204832][ T86] ret_from_fork_asm+0x1a/0x30 [ 612.209693][ T86] [ 612.212730][ T86] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 612.220006][ T86] CPU: 1 UID: 0 PID: 86 Comm: kworker/u8:5 Not tainted syzkaller #0 PREEMPT(full) [ 612.229294][ T86] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 612.239357][ T86] Workqueue: netns cleanup_net [ 612.244143][ T86] Call Trace: [ 612.247430][ T86] [ 612.250366][ T86] vpanic+0x56d/0xa60 [ 612.254363][ T86] ? __pfx__printk+0x10/0x10 [ 612.258961][ T86] ? __pfx_vpanic+0x10/0x10 [ 612.263494][ T86] ? is_bpf_text_address+0x292/0x2b0 [ 612.268798][ T86] ? is_bpf_text_address+0x26/0x2b0 [ 612.274015][ T86] panic+0xc5/0xd0 [ 612.277747][ T86] ? __pfx_panic+0x10/0x10 [ 612.282178][ T86] ? ret_from_fork_asm+0x1a/0x30 [ 612.287132][ T86] __warn+0x315/0x4c0 [ 612.291127][ T86] ? nf_conntrack_cleanup_net_list+0x21f/0x370 [ 612.297295][ T86] ? nf_conntrack_cleanup_net_list+0x21f/0x370 [ 612.303458][ T86] __report_bug+0x276/0x570 [ 612.307989][ T86] ? nf_conntrack_cleanup_net_list+0x21f/0x370 [ 612.314165][ T86] ? __pfx___report_bug+0x10/0x10 [ 612.319206][ T86] ? nf_conntrack_cleanup_net_list+0x224/0x370 [ 612.325365][ T86] ? nf_conntrack_cleanup_net_list+0x21f/0x370 [ 612.331538][ T86] ? pt_regs_val+0xc/0x70 [ 612.335902][ T86] report_bug_entry+0x19b/0x290 [ 612.340766][ T86] ? nf_conntrack_cleanup_net_list+0x21f/0x370 [ 612.346925][ T86] ? nf_conntrack_cleanup_net_list+0x224/0x370 [ 612.353085][ T86] handle_bug+0xce/0x200 [ 612.357339][ T86] exc_invalid_op+0x1a/0x50 [ 612.361846][ T86] asm_exc_invalid_op+0x1a/0x20 [ 612.366700][ T86] RIP: 0010:nf_conntrack_cleanup_net_list+0x21f/0x370 [ 612.373484][ T86] Code: 4c 89 ef e8 63 5b 35 f8 4d 8b 7d 00 4d 39 ef 74 69 e8 15 7b c4 f7 45 31 e4 e9 a5 fe ff ff e8 08 7b c4 f7 48 8d 3d a1 60 86 07 <67> 48 0f b9 3a eb c0 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c da fe ff [ 612.393099][ T86] RSP: 0018:ffffc9000205f8b0 EFLAGS: 00010293 [ 612.399180][ T86] RAX: ffffffff8a03a578 RBX: dffffc0000000000 RCX: ffff88801ef30000 [ 612.407161][ T86] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: ffffffff918a0620 [ 612.415149][ T86] RBP: 0000000000000001 R08: ffff888057179c03 R09: 1ffff1100ae2f380 [ 612.423136][ T86] R10: dffffc0000000000 R11: ffffed100ae2f381 R12: 0000000100007902 [ 612.431126][ T86] R13: ffffc9000205fa50 R14: ffffc9000205fa50 R15: 0000000100007903 [ 612.439126][ T86] ? nf_conntrack_cleanup_net_list+0x218/0x370 [ 612.445307][ T86] ? __pfx_nf_conntrack_pernet_exit+0x10/0x10 [ 612.451382][ T86] ops_undo_list+0x4b4/0x8d0 [ 612.455983][ T86] ? __pfx_ops_undo_list+0x10/0x10 [ 612.461099][ T86] ? idr_destroy+0x218/0x290 [ 612.465694][ T86] ? do_raw_spin_unlock+0xf5/0x200 [ 612.470829][ T86] cleanup_net+0x572/0x810 [ 612.475254][ T86] ? __pfx_cleanup_net+0x10/0x10 [ 612.480221][ T86] ? rcu_is_watching+0x16/0xb0 [ 612.485012][ T86] ? process_scheduled_works+0x97a/0x1630 [ 612.490787][ T86] process_scheduled_works+0xc3d/0x1630 [ 612.496379][ T86] ? __pfx_process_scheduled_works+0x10/0x10 [ 612.502374][ T86] ? assign_work+0x3cf/0x5d0 [ 612.506978][ T86] worker_thread+0xa47/0xfb0 [ 612.511603][ T86] kthread+0x38b/0x480 [ 612.515769][ T86] ? __pfx_worker_thread+0x10/0x10 [ 612.520893][ T86] ? __pfx_kthread+0x10/0x10 [ 612.525495][ T86] ret_from_fork+0x514/0xb70 [ 612.530112][ T86] ? __pfx_ret_from_fork+0x10/0x10 [ 612.535233][ T86] ? __switch_to+0xc89/0x1420 [ 612.539915][ T86] ? __pfx_kthread+0x10/0x10 [ 612.544514][ T86] ret_from_fork_asm+0x1a/0x30 [ 612.549300][ T86] [ 612.552606][ T86] Kernel Offset: disabled [ 612.556941][ T86] Rebooting in 86400 seconds..