last executing test programs: 2.281614226s ago: executing program 0 (id=1580): socket(0x29, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001000ffff27bd7000fbdbdf25a1000000", @ANYRES32=0x0, @ANYBLOB="fda65f05000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r3, 0x0, 0x20, &(0x7f0000000040)={@empty, @empty}, 0x8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.idle_time\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000100)=r4, 0x4) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000240), &(0x7f0000000280)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x3e, 0x0, 0x60}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r5, @ANYBLOB="01000000910600000100"/28], 0x50) 2.026157393s ago: executing program 3 (id=1582): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0x4, 0x0, &(0x7f00000000c0)) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) unshare(0x20020400) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r3) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x24, r4, 0x1, 0x4000000, 0x0, {}, [@TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'eth', 0x3a, 'lo\x00'}}]}]}, 0x24}}, 0x4000000) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0xa4, r4, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}]}]}, 0xa4}}, 0x88b0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r1, 0x847b0dac5bec178f, &(0x7f00000000c0)}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000002ec0)={'netdevsim0\x00', &(0x7f0000002e40)=@ethtool_coalesce={0x4b, 0x3169, 0xd, 0x1, 0x6, 0x9, 0x7, 0x2, 0xfff, 0x10400, 0x4, 0x6, 0x4, 0x5, 0x4, 0x1, 0x5, 0x1, 0x2400, 0x2, 0x9, 0xede, 0x80000000}}) 2.014639116s ago: executing program 0 (id=1583): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000000c0)="634958e36ec6803b8c4067bf866b5d8a6ea55b81d1a93ad48c921bc68c35980d052d3aa94d9d543cd3cc04834b23fd950d946b5e03731a1bf87e48bb15ba2e49516757ba07ec9778209324c8663ef0bb40fbb3aeab8f08", 0x57) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvmsg(r0, &(0x7f0000001a40)={0x0, 0xfffffe68, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/35}]}, 0x2) connect$packet(r3, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x82}, 0x14) shutdown(r3, 0x1) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x141100, 0x0) close(r4) r5 = openat$cgroup_ro(r1, &(0x7f0000000300)='blkio.throttle.io_serviced\x00', 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) sendmsg$NL80211_CMD_STOP_AP(r5, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0xffffffffffffff7e, r6, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x78}}}}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0xc800}, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r7, 0x84, 0x4, 0x0, &(0x7f0000000180)) r8 = socket$kcm(0x29, 0x7, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000007c0)={0x2, 0xf, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@multicast2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}]}, 0xa0}}, 0x0) listen(r8, 0x3) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002e00010000000000000000000401ff800c0000000800000000000000140001000100000000000000000000000000000150bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1609a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce"], 0x114}], 0x1, 0x0, 0x0, 0xffffbf6d}, 0x0) 1.8953018s ago: executing program 3 (id=1585): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000440)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000480)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000200), &(0x7f0000000280)=0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}}, 0x80}}, 0x40000) 1.846114636s ago: executing program 2 (id=1587): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000c0000000000000000000008500000050000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.710591343s ago: executing program 2 (id=1589): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$inet6(0xa, 0x800, 0x200) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="0c00990000000000000000000800a102ffff0000080026008d03000008009f"], 0x40}}, 0x0) (async) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000000), 0x4) (async) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRESHEX, @ANYRESHEX=r0, @ANYBLOB="00000000195000001c0012800c0001006d6163766c616e000c0002800600020001000000140035006d6163766c616e30", @ANYRESOCT=r1, @ANYRESOCT=r0], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.54464262s ago: executing program 2 (id=1591): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000240)='yeah\x00', 0x5) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004a80)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000007c0)="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", 0x1f8}], 0x1}}], 0x2, 0x400c0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000200"/31], 0x0, 0x26}, 0x28) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1c, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000002ff0100000000000000000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r4, r3}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32], 0x50) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) preadv(r6, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/56, 0x38}], 0x1, 0x8, 0x0) pread64(r6, &(0x7f0000000200)=""/166, 0xa6, 0x8) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000009c0)={{}, &(0x7f00000008c0), &(0x7f0000000980)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={0x1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0x15, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd182}}, @ldst={0x2, 0x2, 0x4, 0x4, 0x7, 0x2, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x68}, @tail_call, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4af}]}, &(0x7f0000000000)='syzkaller\x00', 0x8f51, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x1, 0xf, 0x100, 0x7}, 0x10, r4, r0, 0x5, &(0x7f0000000480)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r7, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000680)=[{0x4, 0x3, 0xc, 0xc}, {0x0, 0x4, 0x6, 0x5}, {0x0, 0x3, 0x4, 0x4}, {0x4, 0x3, 0x2, 0xc}, {0x2, 0x4, 0x0, 0x1}], 0x10, 0x7fff}, 0x94) 1.443663534s ago: executing program 2 (id=1594): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c0000001e00010000000000000000e34a1394e4353fd259f4fdd89f33404600020000000100000700000000c56aa9aa93f94ddb95bbd74278f41c93e12c6559d9595dee8806efa7c632d8af919c51f11b92793432018bb5e2dd9f53ebed33860dd79ae23c2a87a24b885aab654d75027fffeeef28e78da4bfe7f73ab83035927c98609414c0d091668234a12b019c31b338a48552ce9d7ae932ba8ab501fb9fa925f8ad1f95ce10decc44a635029c85b0f4a4c67127f04249c4166f1272ee0258a6ffcdad64b5467405"], 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x8a, &(0x7f00000005c0)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x2a, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}, @timestamp={0x44, 0x4}]}}, "a815a23da43974ff"}}}}}, 0x0) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xbe, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c20000030000000000000800450000b000000000fb019078ac1e0001ac1414aa03019078032400004500000000010000000100097f000001ac1414aa8677ffffffff000c0800b28c5903000000520509020007651442eb000e7434954373561de584b703c80009e706d30bd224f80207cfa11cab1a00108475be675de608000000dc91e5c6070a0000000000800000001273bc95a70000ffa30900a301c84600000012c8f46976e79ea788f03d9d3205927e3d860600000022000000"], 0x0) r2 = socket$netlink(0x10, 0x3, 0x5) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)={0x3c, r4, 0x1, 0x0, 0x0, {0x34}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x4c, r4, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4044084}, 0x4000000) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) 1.363968609s ago: executing program 1 (id=1595): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xfd, 0x3, 0x0, @loopback}, 0x1c) r1 = socket(0x2, 0x3, 0xff) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r2 = socket(0x2, 0x3, 0xff) sendto$inet(r2, &(0x7f0000000040)="b401fcc8070000090000008e052af9c34b7d7494", 0xffffffe1, 0x4085, &(0x7f0000000000)={0x2, 0x4e21, @private=0xa010102}, 0x10) sendmsg$inet(r1, &(0x7f0000001480)={&(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f00000013c0)=[{&(0x7f0000000200)="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", 0x5dd}], 0x1}, 0x40800) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) close(r4) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$SIOCNRDECOBS(r5, 0x89e2) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000040)=0x9, 0x4) 1.278811655s ago: executing program 2 (id=1596): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) r1 = socket(0x10, 0x803, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000200)) write$rfkill(r2, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r4, 0x29, 0x7, 0x0, &(0x7f0000000180)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000000000000000000030000000003000000020000000200000000000000000000010500000010000000010000000000001101000000000000000061"], 0x0, 0x53}, 0x20) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000068000010090a010400000000000000000700000308000a40080000000900020073797a30000000000900010073797a3000000000080005400000000d24001280200001800e000100636f6e6e6c696d69740000000c00028013130f269f194ea8c07238dc00000120140000001000010000000000000000000084000a"], 0xb0}}, 0x20050800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$BTRFS_IOC_DEFRAG(r2, 0x50009402, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0x2c, 0x2c, 0xd27, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xe, 0x7}, {}, {0x7}}, [@TCA_CHAIN={0x8, 0xb, 0x85}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) 1.259786533s ago: executing program 1 (id=1597): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008506000042000000000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) 1.117114383s ago: executing program 0 (id=1599): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r1, 0x44, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) sendfile(0xffffffffffffffff, r4, 0x0, 0x7) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0x372a922c, '\x00', r2, 0xffffffffffffffff, 0x2, 0x2, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x7, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xe}, [@exit, @ldst={0x0, 0x2, 0x4, 0x1, 0x2, 0x0, 0xfffffffffffffffc}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000180)='syzkaller\x00', 0x7, 0x0, &(0x7f00000001c0), 0x81e00, 0x2, '\x00', r2, 0x25, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000280)=[r4, 0x1, r5], &(0x7f00000002c0)=[{0x3, 0x5, 0x8, 0x8}, {0x0, 0x1, 0x7, 0x8}, {0x4, 0x2, 0xc, 0x9}, {0x3, 0x1, 0x5, 0x3}, {0x3, 0x5, 0xb, 0x9}, {0x4, 0x3, 0x3, 0x6}], 0x10, 0x8}, 0x94) 1.063001967s ago: executing program 4 (id=1600): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000d0000000000000000000008500000050000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.00909581s ago: executing program 4 (id=1601): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, 0x0, &(0x7f0000001800)) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000009b40)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @mcast2}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) 958.62535ms ago: executing program 3 (id=1602): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000040), 0x4) sendmsg$tipc(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}, 0x8820) socketpair(0x1d, 0x2, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r0) socket$tipc(0x1e, 0x5, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) (async) socket$tipc(0x1e, 0x2, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000040), 0x4) (async) sendmsg$tipc(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}, 0x8820) (async) socketpair(0x1d, 0x2, 0x0, &(0x7f0000000000)={0x0, 0x0}) (async) close(r0) (async) 818.586308ms ago: executing program 0 (id=1603): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x44}, 0x10011, 0x2, 0x2, 0x5, 0xc}, 0x20) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r0, 0x8b32, &(0x7f0000000040)) socket$kcm(0x10, 0x2, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4a24, @dev={0xac, 0x14, 0x14, 0x12}}, {0x2, 0x4e21, @empty}, 0x4, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200001, 0x1ff, 0x9}) write$tun(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f0000000580)=0x4, 0x4) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=ANY=[@ANYBLOB="38000000031401000000000000000000280002"], 0x38}}, 0x0) sendmsg$netlink(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="1300000042000106"], 0x1c}], 0x1}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), r3) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000001680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001640)={&(0x7f00000015c0)={0x58, r6, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x801, 0x0, 0x9, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x58}}, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e24}, 0x6e) close(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r8, 0x0, 0xe1, 0x1000, &(0x7f0000000380)="12a8c8cce3099391d07d6f7952658cfaf3c6f4a705e1403fca44eed6263fa4cd4ddfcb0e7cccb5a063d9e2592fc6859262c2c0af95fffb52f7393b4b8f73d5ff19f1798444cf136e7accb6d501ef1c85dd87e4c8c5cb553ff51bddddd57bdfcaf306aa1754157cc5b8acfd0c5a4cff196f6fe2fcfc1cf0eca54e2bed22451f2b2ae67e058c9875f7b58cd8d14756921b4835454d6c9a218f4102ae3190d064da8aac2b1e350ed5d9cca77d1912441f2c1a93127728ce6d4e7fdd19bd6f0778d091c766150ea996c787a1ad71dff359953168aca3c4831a65dfd51699969f80c9d2", &(0x7f00000005c0)=""/4096, 0x40, 0x0, 0x39, 0x47, &(0x7f0000000280)="a1939dfbd1dba8a450cb20a4de07144fbb4338e2ede4008501caf0c8f9ee9d17fdc90e402ee65092d9bc5f7654cdfbb3b4516a7a14c8d5d29c", &(0x7f00000002c0)="f787791ace538d412c155da2f54fe6f958db7293c9fb5153e28d5a525a6950435701446aa7c071a352aa52b0367ef4d1ad3b32b0bc86386eecb69938a2c1589545142c7d4eb892", 0x2, 0x0, 0x6}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002900)={r8, 0x0, 0xc9, 0x28, &(0x7f00000016c0)="ffc695a6c4a346831394be9f5ed737f664b8b83f321ffd4d769bdf3cdc57343cd1a882c161cee627082ba703124268836190b6fd2049a96ca6f1695ecc71749ac3cfe639cdd2ad835838b252c5ca9289d31a6b1f8d5b43c84f7141268d983cb77afe6294bb7b79e18b9d841c3a6c221c0671e79f4f21b9827ab1dbc208e96fe9715b134254db5dd1ea478a992414df026ae6332dd579790e26238eb54b3633e48bd8f01407eb65ef191eed06fbf23a3c0e4c9afe7dd55028339dd5b50d50e12dc1a69eb9bc506d291e", &(0x7f00000017c0)=""/40, 0x6, 0x0, 0x1000, 0xe7, &(0x7f0000001800)="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", &(0x7f0000002800)="f05823dea90461252e6c8e79d4344afa5c8e7547daddc545dc205d7d75c5e9c0596d8eeea91270d9b7f037270197a8a7908d01562fd55f163e226d8b7cdb5d727592dad178c6294642a18ef69b25786c9670d01ccf29f89873a52a37b8bc44575f1f78f8c6afc78007da61494fb93fa0ecf56bc984198d708ab3e533b218ab71852004758d744559ac94c4285dddf5974cf4b241da86f42f577cb1cda02f1c94944482066f870d0dc4503df56da7d1be75956d0a36671231ab72f9451a94d15f888aea8367715ffe613e0de64390d5503f59a7cabb7f66c6bf67607de259bf5679763895fa511f", 0x7, 0x0, 0x3}, 0x50) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000203270200040000000000000300000408a4021b0000080340fffffffa00000000e4ff00a7e68b3ef200000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x20000840}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x53}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 672.270521ms ago: executing program 4 (id=1604): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c5860cc2c775ee0f4e20000000201010000000000000000000a0000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000091}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c5860cc2c775ee0f4e20000000201010000000000000000000a0000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000091}, 0x50) (async) 671.375681ms ago: executing program 1 (id=1605): socket(0x29, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001000ffff27bd7000fbdbdf25e4000000", @ANYRES32=0x0, @ANYBLOB="fda65f05000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r3, 0x0, 0x20, &(0x7f0000000040)={@empty, @empty}, 0x8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.idle_time\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000100)=r4, 0x4) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000240), &(0x7f0000000280)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x3e, 0x0, 0x60}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r5, @ANYBLOB="01000000910600000100"/28], 0x50) 670.86216ms ago: executing program 3 (id=1606): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20020000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x5c, r0, 0x800, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="8f9d0e021413"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004040}, 0x8081) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00'], 0x38}}, 0x0) (async, rerun: 32) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) (async, rerun: 32) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000380)={0x2, [0x0, 0x0]}, &(0x7f00000003c0)=0xc) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a000000000000000000000000000008000a40000000000900020073797a31000000000900010073797a310000000308000540000000000800084000000000140000001100010000000000000000000084000a"], 0x6c}}, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10) (async, rerun: 64) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$inet6(0x10, 0x2, 0x6) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xbfeffffc}, {0x16}]}, 0x10) (async) sendto$inet6(r5, &(0x7f00000002c0)="100000001200050f0c1000000049b23e", 0x10, 0x0, 0x0, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0xfff0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a09000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a400000e6ff0900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) 564.759833ms ago: executing program 4 (id=1607): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ppoll(&(0x7f0000000080)=[{r1, 0x409c}], 0x1, 0x0, 0x0, 0x0) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0xc) (async) r3 = socket(0x10, 0x3, 0x0) (async, rerun: 64) sendmmsg$sock(r0, &(0x7f0000000b80)=[{{&(0x7f0000000300)=@isdn={0x22, 0xff, 0x81, 0x9, 0x67}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000280)="ae058909de055121afbce34a01f3c667ce2957bb23ff94b84701a22766d3a709b104a46a31", 0x25}, {&(0x7f0000000a80)="fe4e666516c6e834e064b0e9cd91430e7e3dcee50510c05cd057283118ab7c6733f17d6cdc1ae4f3054e6e69e3aa48ef944e5bc485f64698ec696112b60b775e445da3b50760262254fb5bf52ce9d0bc057bbd3c1b3e48b1ad68037815d677f04261bf2ca7d75ce90ca602af5bd320817c801fae438d0c96df9de41f16f55ba9c60a5052ba6177ae442ea3067e38726eadc016937f1cfa25b9ea57098c19a46efc08f1ccda4c265bee63aaf418f853226f8d96e71b5574a39a1f83b5cac0892197acf8247d06ca68", 0xc8}, {&(0x7f0000000380)="b3c4a139be2b078fda00e888c7999b85b71ccbb14079544fecfc3a83c4", 0x1d}, {&(0x7f0000000c00)="4baf73bf5feea71f5ad748e77ad40ee34f189e101794d8216e1b18dbcddac9201b11e05529a9643f783277e8aa759d19b8ce661b86410b78205094a7a6023803ff1be3fea6aacafeb80bf7a18ece87de15aa019f11a330f5a6281595cea2", 0x5e}, {&(0x7f0000000c80)="06b608509ed3569a45a44d59ad63f434a7597e8d32ff1fc932da10407f2d4e332bec77c5e92a62c0ab2553046108bc60db0009653b193e1560ef7da8b1deacd366240e6a25900880763e8d62d63433bb433a6c8a6d433d5281bf4b4d32b81d430377ed61836c48261f02811f7e", 0x6d}, {&(0x7f0000000d00)="e139eb604daa6122d57b2ba58899f451d7379a1d7160039b93546e76d3286d2caaeffa5fb97bea16f7ccde1b121265c8344f1c37c1ea069ca87fdc9404cb1e046ce2df4be00a5d24a99b4690530a843b32d484776d8a3d8ff90f25e5561cd62ce04645b5bfedb688486631", 0x6b}, {&(0x7f0000000d80)="ad67ca6d73082a8f3826f229ba55ab8b42e2046c04ad628d15ffacd25e6fb7254201153eb9e71245575b79cf1e46d24733622c367f079e04396d602ed92ebe5e4cc1c6ea", 0x44}], 0x7}}], 0x1, 0x5800) (rerun: 64) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000bc0)=0xc) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x4f, 0x1, 0x0, 0x0, {}, [@typed={0x8, 0x1, 0x0, 0x0, @uid=r4}]}, 0x1c}}, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)={0x608, 0x3d, 0x10, 0x70bd2a, 0x25dfdbfd, {0x14}, [@nested={0xf0, 0x7f, 0x0, 0x1, [@typed={0x8, 0x33, 0x0, 0x0, @ipv4=@multicast1}, @typed={0x8, 0xfb, 0x0, 0x0, @pid=r2}, @generic="7c8ac56578c4efeca6167632eb1c6848a046b5ef2d507d520347d3540710c27bd33aedd64aa7de385776233b9c88940b0bad7abf71b48d3801aca4d569abc6c2177e5de640bc74502b7b3da039ebd4cee91aa0e53323715bbb8be292983dd34d78df6f0e135188327ae5dc73a60a1b9a36c0decc51e873f170df1f9a3eb384058a5105a0959b97ddaf233a062138641b7d2a5f566872e20b60d879627e7f1c13e4940ca03dc4e8347e303d9d473fc758819ec0a5bf751309e89f4c2c1863249749fe059e1e257c981f4edef6f0fef33cc33b124a21ffdfa7", @nested={0x4, 0x16}]}, @nested={0x280, 0x30, 0x0, 0x1, [@generic="9fa21941b8bbb2e6a7a44384bb40fac9b645265479579fa7891e67ed48bdec6180f7d012a301e341be44902545c40e4ee96ef1788d388a98109e0f675eaab27fefb31e874a99ce3e1112ffebf45a841d52fba8cacf9c3bf62ef1c834e65040c222c7891b61703113e527474ce380e5dbb60cc961c29a76523a86f3447c4c0e268b6d6799d57ee2cc9520ba8cacacca1cdf907df7225dc818e6ed56eec6e51818c7fe19fe1a7e3487dc7ebf02459a02e15dc686eaca5ab40ea67262a493e8397a9af3b1c74fc457e7c3bb98f94cc1d4da59ef079432", @generic="e0384a31dae18bb0a29cd7c5b9e640ed0dca21d4454b400329f239c0382417a1da719e314dee49b8a7b9fb4d948d89fe75f1e5df0acad7714c130f0996d950c9de4e3a0eb77cdb7927e0136c9b26845baf89588454655b05fa074724a2134fbb6c34d723359f0bedce8e5abeeab00559ada9f371d58c066f50a5ee886d4aa03546e478e9a60d5915bcc4f9862aa70e4e88a3639a38db29bd4de72c01e0515cd8295c5932684bc986216cfbf6b23fed7a9a0ddbfb553fc7e2617843b240b3b63943b85b561440b7d5c95950eeacb095c9c48bc2c0998ca8309724e559bb8fce5f031a1ef9ed1a68ebfbfeacb90e3bb6709a8905fae1", @generic="5a0902c418d7f7d1cd9f2f3e03685b0a9b38bc587da56ee1d4ffd388e45fe61502a73c6c6050c3f01148d0430caa67be2e8949a1331b2f777953d41db069012d4cb45939117dc1082fb28e2c1ed22358100cb8cf7ea9e239682a7b5371dc1425782d7f319217bea3aa8e7f498248a11f400d52692482bb4f968bc6efc70a96611a22fd1a1ed3ab0988d3b2d2c0cb62a61269e6a7431f3048da8968332aa0d7105ae21873deca4f986cef91ac57253da9b51d"]}, @typed={0x5, 0x1e, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0xca}, @nested={0xd0, 0x5c, 0x0, 0x1, [@typed={0x8, 0x21, 0x0, 0x0, @ipv4=@broadcast}, @generic="bb8dbfa911d94fcaf7204046caeda3b4874a670179d3f51ff8c55f6e53858ef0f68dcd8246f08ec020c2a2d743fba48cf1872bdbeace843a9a1830dfb645be55ce2bee996efc77ae141ba657ea95d8a06ed04b15dd0f8bc484b47413fbe829d6e9dcf76806eae49c21fd7ba8fe696585c4c7abdbedf3ac7d4818a1eb4df09ec371b35b5534fd8db7c14ff33918d305cc6ecc62c495c34bcb117acd8a8d3b2395c035bc13de10c23d1a166f92a8a7d120fb6eb2bd9d983daeb922737c8093e80e96159720"]}, @typed={0x8, 0x11b, 0x0, 0x0, @fd=r0}, @nested={0xc, 0xcf, 0x0, 0x1, [@typed={0x8, 0x105, 0x0, 0x0, @uid=r4}]}, @nested={0x8, 0xc9, 0x0, 0x1, [@nested={0x4, 0x124}]}, @nested={0x18c, 0x3f, 0x0, 0x1, [@typed={0x8, 0xf4, 0x0, 0x0, @str='-{/\x00'}, @nested={0x4, 0x7}, @nested={0x4, 0x13c}, @nested={0x4, 0xb9}, @nested={0x4, 0xb}, @typed={0x4, 0x81}, @generic="086cff204127393ced75008964be09d7db813858d1297b44549b1b439b94dd58c3580d90c1d7273cab82715a27ff69d84b5269c67c", @typed={0x8, 0xdc, 0x0, 0x0, @u32=0xffffffff}, @generic="45a22e18993e746db69471b7957489c6a7f996ae9fb994de816fe80c7d9fa16c66ab9dcf8cb0eb78d459c2a594ba0eccf863778c47f3b46c3fb9f85c7a1083db9120cbf4b10826d0171c77a6ae96f9e165f112cd6022c140bcb507e5998943328c3b526a8e97e6a568abd6eaca522942960d3a9f1b86a9da828fa7411ef5c8b49ca64b648f9e880adcc70cf400fdd93f8ff8f68f9ced328b0ef8d9b22d94bd75f9a40bf5bed1f7cd7fe630b2d7a04df9e8", @generic="7d7ba777fb165d2ba53644ba9dbef6b1abef9c1bff0eef460d180e7ccafe2f24842cea28f005173dbc3317fe967c3ced402e530cfe32ebf9ebd3bd14703f34532834f82256d1c0ec21f30c2a3bd38bee60d631e4fed5cd226cd99450c956a26ed768ac6aadad0ff72a5825fa4fe3871cccf6924a79ca427d3250858071b2"]}]}, 0x608}, 0x1, 0x0, 0x0, 0x20010080}, 0x90) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 410.952402ms ago: executing program 1 (id=1608): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$caif_stream(0x25, 0x1, 0x5) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xc) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r1, &(0x7f0000000000)=[{{&(0x7f0000000140)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000080)="b9cd14c222ee3c0cb001829a0d9c2235a634e084e8944cc43b686236af751d09fe593f830ba141b567b561ebbf5333ccc7d9de1957475293ff6bb4ae4c2ff5a230", 0x41}], 0x1, 0x0, 0xfffffe74}}], 0x1, 0x20048c05) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000001cc0)=@gcm_128={{0x304}, "c0a4997f901e2b1e", "7b06ae90b3ce53ef8e7981f5e2eb1d30", "e03d8a1f", "9d8aeac12036cd5f"}, 0x28) 410.633985ms ago: executing program 3 (id=1609): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r0, @ANYRES16=r1, @ANYRES32=r1], 0x2c}, 0x1, 0x0, 0x0, 0x4004041}, 0x4) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$isdn(0x22, 0x2, 0x11) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], 0x78}}, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0xff000000) 317.416098ms ago: executing program 4 (id=1610): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x109001, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000002c0)={@val={0x0, 0x88b5}, @void, @eth={@broadcast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0xe000, 0x0, 0x2f, 0x0, @private=0x1fe1, @local}, {0xa000, 0x86dd, 0x8}}}}}}, 0x2e) ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, &(0x7f0000000640)={{'\x00', 0x3}, {0x7}, 0x176, 0x0, 0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)="417fb9d57f97f14c69c62392c19ea1633d1abafb15e0b94ea1b1176d899fe5f9af155cc898a520e250b688c4d397ff27908fc2da8a4fbe7e32fb528a6c56ce4107d8ff7a250a8194e1f776fdc23f7870548a61a5496d8417e65271b60c794eafab6afc564050faa0b78a2d8b6b3e5b901b37b4755dd3f08b431ce96316bdf70081ea90f8ddce640d518901ab3fd79b4cebfc608069d15d1b893bf1dd58a6f046f9e1570d80fc1b66a9f7350a0e3aaf590c08720c0815a83281b465aeea12ad4905602589eb37e385982d8b267cf02dd62a1e489a7a71d914a4a8aa1eb2bf6dc799a276ddcc9abff3fed37b04f5bdb6fcc60cb350316a0266b97fe8e5f0d6c5e5a3d23badfb5eb23abff6ef2009ba341905ae3077a50a7e60928e593c0d45792423dd5a25a21acf7bbdb5ecedc653cc447622d723e779569ac033bf27893c2dcbb83e", 0x142, 0x0, &(0x7f00000004c0)={0x2, 0x103, {0x0, 0xc, 0xaa, "955a6bea4a9328813b8860d3c49719d69d731d650e46e846ee11b1e1a0f3ca61d980f990b676134730f0a10e495362339e45f1e7275f6d8bcf5a696f67ce6263e64980de3e5b61b774d12ae536e33cce0a1d96b97a31516c7fff05f6aa0b6e8a0236da33f36c876f77aad68d31394af181fe171524916baea6406de30217f64bfaa77a3321f9e17f2f37347c875011abd09cbdf993eebe437d63dd52cc903bf2c807281f2df5a48e68c3", 0x4c, "fc1ff689e43f08b18c16dbec7bd2e6a9fc1def848ce873beaa870d880f69ddf7c83e9d14239294790667f13e29ae05b508f4549717b3cb4f5cb9b64dd57d53dbd12900fd09d603beb09e1584"}, 0x4f, "b6337c7b4dd9825c3145a9da3633434194270606d5055d182e7e438bd4a83a1108f7c51100dff93034bc0671840201e927929aee957b79460a9975b02528a3f989472e2ba319bc631888e74eeffc4d"}, 0x15e}) r3 = socket$netlink(0x10, 0x3, 0xa) writev(r3, &(0x7f0000000080)=[{&(0x7f00000000c0)="480000001500257f09004b01fcfc8c860a881300f217e0060000e3323909b8f8896e33719fe3bb036e0bc90900000000000000000000ffff5bf1090000d0bd5e000000006203005b", 0x48}], 0x1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="14de23d8b9b147a36c96a249cc5f7e007a3636c7", @ANYRES16=0x0, @ANYRES32=r1], 0x14}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0x3}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x84}, 0x8000) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r4) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r4) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r5, 0xb6c91f939c8321d, 0x0, 0x0, {0x10}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0xf, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x8}]}, 0x30}}, 0x0) 281.124811ms ago: executing program 1 (id=1611): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000e4000000000000000000008500000050000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 218.298494ms ago: executing program 2 (id=1612): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c00000010000304000000210000000000000000", @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) 217.214535ms ago: executing program 3 (id=1613): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f00000001c0)={0x28, 0x0, 0x0, @host}, 0x10) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x2711, @local}, 0x10) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, &(0x7f0000000040)={0x0, 0xea60}, 0x10) connect$unix(r0, 0x0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x15, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="f458be39bf84e8e916c47c540d7c65bec4be77f5b1169983a74fe007cb19ebc14d724a589df39a8af9358ca1387f95ab81c670d7fe05c59af1f1f84b6372053e1fbec82114876159339019add6cc991179f6b57888da43de4482cf858f00b5712892d13f1a973d82ab00c84f4951df31a75c5de981db97e4104136e343855d1a86f64e125e85e660863034020cc7f54195e193b5a71cdbe7656be50734e2efecd6d7c41f91e22aa0f44a7573677a039c1ecbff6fe82a0949ee8d8f4beb3c69d44d0ed2d4b68a9fec3b8f7a8eb808c3f67ac5656c333cde56e876cac00033", @ANYRES16=r2, @ANYRES8=r1, @ANYRESOCT=0x0, @ANYRESOCT=r0, @ANYRES8=r2, @ANYRESHEX], &(0x7f0000000380)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2}, 0x94) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b0000000000000000000000ffffff7f00000000", @ANYRES32, @ANYRESHEX=r4, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000050000000000000000001400"/28], 0x50) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000640)={0x0, @empty, @loopback}, &(0x7f0000000680)=0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r8, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r9, 0xff07, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000740)={0x1, 0xffffffffffffffff}, 0x4) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x1}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r13}, &(0x7f00000006c0), &(0x7f0000000700)=r12}, 0x20) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\t\x00'/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000017c0)={r14, &(0x7f0000001700), &(0x7f0000001780), 0x3}, 0x20) r15 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000840)=@generic={&(0x7f0000000800)='./file0\x00'}, 0x18) r16 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0xf}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES16=r3, @ANYRES32=r0], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x2c7c, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000900)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a00)=@bpf_ext={0x1c, 0x1c, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000050000000000000078c3000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000008000007b8af8ff00000000b7080000e0faffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a5000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x3, 0x9b, &(0x7f00000003c0)=""/155, 0x40f00, 0x4, '\x00', r7, 0x0, r9, 0x8, &(0x7f00000006c0)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000700)={0x0, 0x2, 0x8, 0xa}, 0x10, 0x3d84, 0xffffffffffffffff, 0x5, &(0x7f0000000940)=[r10, r11, r15, r14, r15, r16, r13, r17], &(0x7f0000000980)=[{0x4, 0x2, 0xf}, {0x1, 0x1, 0xfffffffe, 0x7}, {0x5, 0x3, 0x2, 0xa}, {0x0, 0x1, 0x1}, {0x2, 0x5, 0xd, 0xc}], 0x10, 0x53}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) connect$unix(r1, &(0x7f0000000080)=@file={0x32ade34e96ebb534, './file0\x00'}, 0x6e) 157.403705ms ago: executing program 1 (id=1614): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x2a, 0x2, 0x0, &(0x7f00000001c0)) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400ff001000010000000000000000000000000a140000001100010000000000000000000000000a"], 0x28}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c000000020601000000000300000000000000000c000300686173683a69700005000400010000000900020073797a3000000000050001000700000005000500000000000500010006"], 0x4c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000100)=@bridge_getneigh={0x20, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x10004}}, 0x20}}, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x80, 0x30, 0xb, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_ct={0x68, 0x1, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_MARK={0x8}, @TCA_CT_LABELS={0x14, 0x7, "4614c334e344ae535af2f0a70ddeb37f"}, @TCA_CT_MARK_MASK={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r6, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(r6, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) sendmsg$nl_route(r6, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="a000000000012bbd70008a75df25", @ANYRES32=r7, @ANYBLOB="0000040002010400680034801400350070696d36726567310000000000000000140035006261746164765f736c6176655f30000014003500626f6e645f736c6176655f3100000000140035007465616d5f736c6176655f300000000014003500776c616e3100000000000000000000000800280083f700"], 0xa0}, 0x1, 0x0, 0x0, 0x41}, 0x0) 106.900776ms ago: executing program 0 (id=1615): unshare(0x6020400) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c00078008000640000007010500050002000000050004000000000016000300686173683a6e65742c706f7274"], 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e220000060005"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r2 = gettid() syz_open_procfs$namespace(r2, &(0x7f0000000040)='ns/cgroup\x00') unshare(0x2020000) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b400000000000000791048000000000071041d0000000000950000009d762caa7a161512c3937289d9ed16dc26ad6b1059519a5cb459582eeeff49c77d771505611beb4d7bf6350d96f9011df2f47c6fa6c0189cd5ce4ee384d8127da3b005cb92a0e7cff5d8e4507f9af2f2a7dbd31b96373256af5eb69de8b5f530ac88cd691cb580a191f6c93c6b9bed43be4cff70"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) 2.971071ms ago: executing program 4 (id=1616): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000c3000000000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) 0s ago: executing program 0 (id=1617): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'lo\x00', &(0x7f0000000140)=@ethtool_per_queue_op={0x4b, 0xf, [0x2, 0x8, 0x10000, 0x7, 0x100, 0xfffffff9, 0xfffffffb, 0xb3, 0x3, 0x10001, 0x3107a6ef, 0xa889, 0xff, 0x401, 0x6, 0xfffffffd, 0xe03b, 0x2, 0x2, 0x2, 0x7f, 0x6, 0x7, 0x84, 0x0, 0x0, 0x9, 0x9, 0x1, 0x8, 0x0, 0xab, 0xb09, 0x1e, 0x2, 0xfffffffb, 0x10, 0x6, 0x0, 0x7, 0x5, 0xffff, 0x2, 0xf974, 0x45c, 0x0, 0x7e, 0x4, 0x0, 0xffffffff, 0x100, 0x1d65, 0x2, 0x4, 0x80e, 0x9, 0xffff0001, 0x1, 0x3, 0x10000, 0x100, 0xb12, 0x10001, 0x800, 0x1, 0x5, 0x4, 0x8, 0x2, 0xa, 0x10001, 0xffff, 0x2, 0x0, 0xb, 0x3ff, 0x8, 0x68, 0x800, 0x1000, 0xffffaa53, 0x1, 0x5a5, 0xd, 0x1, 0x1, 0x9, 0x52, 0x2, 0x2, 0x3, 0x2, 0x3, 0x7f, 0x10, 0x6, 0x9, 0x9, 0x3, 0x7fffffff, 0x400, 0x8, 0x4, 0x401, 0xfffffff9, 0x6867bc93, 0x8, 0x6, 0x10000, 0x834, 0x1, 0x1, 0xa021, 0xc, 0x3, 0x5b, 0x6, 0x2, 0x1, 0x4d51, 0x5, 0xc, 0x1a5, 0x1, 0x7, 0x8, 0x101, 0x3]}}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0xffffffe1}]}}}]}, 0x3c}}, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000c00)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r6, 0x80487436, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x9}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe4}, 0x1, 0x0, 0x0, 0x44000}, 0x0) listen(r4, 0xffffffff) r8 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r8, 0x84, 0x19, &(0x7f0000000200)={0x0, 0xfd8c}, 0x8) connect$pppl2tp(r8, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x3, 0x1, 0x3, 0x0, {0xa, 0x4e22, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}}}, 0x32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x36}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000040)="fbe65dc390da7ee179a4", 0xa}, {&(0x7f0000000700)="fdc913c5fb15c710950f8e561c846edc4223d841cad2a2154e3bad5fc74c8e5172171929da09a2e314c77de173e154838fc39c1684ea331216706f4d645dc0aea3d0e06b72545914394805a2513f1cc11bea6266382e51a10d7021329f79eb6067dfb71729c45f1c6833a0c39fab03fe8b0287fb43941b186dca8a2566859bd9d703269b72961338b8770982f94f867fb9cbdfbad33279788d610dc62ac87a843b674dcd97fd1ac6cb09047da172d781dd0a889441efaceaea", 0xb9}, {&(0x7f0000000f40)="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", 0x445}], 0x3}, 0x40080) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000380)={{0x2, 0x4e20, @remote}, {0x1, @local}, 0x8, {0x2, 0x4e24, @broadcast}, 'ip6gretap0\x00'}) kernel console output (not intermixed with test programs): /0x430 [ 155.659919][ T8399] ? __pfx___sys_sendmmsg+0x10/0x10 [ 155.659938][ T8399] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 155.660006][ T8399] ? ksys_write+0x22a/0x250 [ 155.660038][ T8399] ? __pfx_ksys_write+0x10/0x10 [ 155.660064][ T8399] ? rcu_is_watching+0x15/0xb0 [ 155.660094][ T8399] __x64_sys_sendmmsg+0xa0/0xc0 [ 155.660119][ T8399] do_syscall_64+0xfa/0x3b0 [ 155.660149][ T8399] ? lockdep_hardirqs_on+0x9c/0x150 [ 155.660185][ T8399] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.660206][ T8399] ? clear_bhb_loop+0x60/0xb0 [ 155.660232][ T8399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.660253][ T8399] RIP: 0033:0x7f074cb8ebe9 [ 155.660272][ T8399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.660291][ T8399] RSP: 002b:00007f074dad4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 155.660313][ T8399] RAX: ffffffffffffffda RBX: 00007f074cdb5fa0 RCX: 00007f074cb8ebe9 [ 155.660330][ T8399] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000008 [ 155.660343][ T8399] RBP: 00007f074dad4090 R08: 0000000000000000 R09: 0000000000000000 [ 155.660357][ T8399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.660369][ T8399] R13: 00007f074cdb6038 R14: 00007f074cdb5fa0 R15: 00007ffeddd0a118 [ 155.660404][ T8399] [ 155.897577][ T8398] delete_channel: no stack [ 156.144889][ T8418] netlink: 4 bytes leftover after parsing attributes in process `syz.4.728'. [ 156.147057][ T8412] netlink: 'syz.2.723': attribute type 30 has an invalid length. [ 156.259601][ T8420] lo: entered promiscuous mode [ 156.264904][ T8420] tunl0: entered promiscuous mode [ 156.288434][ T8420] gre0: entered promiscuous mode [ 156.307461][ T8402] delete_channel: no stack [ 156.365389][ T8420] gretap0: entered promiscuous mode [ 156.404069][ T8420] erspan0: entered promiscuous mode [ 156.429639][ T8420] ip_vti0: entered promiscuous mode [ 156.458206][ T8420] ip6_vti0: entered promiscuous mode [ 156.477128][ T8420] sit0: entered promiscuous mode [ 156.524313][ T8420] ip6tnl0: entered promiscuous mode [ 156.547023][ T8420] ip6gre0: entered promiscuous mode [ 156.571094][ T8420] syz_tun: entered promiscuous mode [ 156.596779][ T8420] ip6gretap0: entered promiscuous mode [ 156.603074][ T8438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.734'. [ 156.613947][ T8438] netlink: 4 bytes leftover after parsing attributes in process `syz.2.734'. [ 156.629986][ T8438] netlink: 'syz.2.734': attribute type 14 has an invalid length. [ 156.631015][ T8420] vcan0: entered promiscuous mode [ 156.644287][ T8438] netlink: 'syz.2.734': attribute type 13 has an invalid length. [ 156.665887][ T8420] team0: entered promiscuous mode [ 156.671880][ T8420] team_slave_0: entered promiscuous mode [ 156.683534][ T8420] team_slave_1: entered promiscuous mode [ 156.713977][ T8420] dummy0: entered promiscuous mode [ 156.734297][ T8420] nlmon0: entered promiscuous mode [ 156.748063][ T8420] caif0: entered promiscuous mode [ 156.753708][ T8420] batadv0: entered promiscuous mode [ 156.765013][ T8420] vxcan0: entered promiscuous mode [ 156.770837][ T8420] vxcan1: entered promiscuous mode [ 156.776481][ T8420] veth0: entered promiscuous mode [ 156.787038][ T8420] veth1: entered promiscuous mode [ 156.802592][ T8420] wg0: entered promiscuous mode [ 156.808013][ T8420] wg1: entered promiscuous mode [ 156.813175][ T8420] wg2: entered promiscuous mode [ 156.818525][ T8420] veth0_to_bridge: entered promiscuous mode [ 156.824714][ T8420] : entered promiscuous mode [ 156.829835][ T8420] veth1_to_bridge: entered promiscuous mode [ 156.836015][ T8420] bridge_slave_1: entered promiscuous mode [ 156.842500][ T8420] veth0_to_bond: entered promiscuous mode [ 156.852203][ T8420] bond_slave_0: entered promiscuous mode [ 156.861107][ T8420] veth1_to_bond: entered promiscuous mode [ 156.885902][ T8420] bond_slave_1: entered promiscuous mode [ 156.896031][ T8420] veth0_to_team: entered promiscuous mode [ 156.928127][ T8420] veth1_to_team: entered promiscuous mode [ 156.952828][ T8420] veth0_to_batadv: entered promiscuous mode [ 156.969789][ T8420] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.978200][ T8420] batadv_slave_0: entered promiscuous mode [ 156.989289][ T8420] veth1_to_batadv: entered promiscuous mode [ 157.003980][ T8420] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.017838][ T8420] batadv_slave_1: entered promiscuous mode [ 157.039894][ T8420] xfrm0: entered promiscuous mode [ 157.067486][ T8420] veth0_to_hsr: entered promiscuous mode [ 157.096881][ T8420] veth1_to_hsr: entered promiscuous mode [ 157.124313][ T8420] hsr0: entered promiscuous mode [ 157.139787][ T8420] veth1_virt_wifi: entered promiscuous mode [ 157.153803][ T8420] veth0_virt_wifi: entered promiscuous mode [ 157.164709][ T8420] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 157.194159][ T8420] vlan0: entered promiscuous mode [ 157.199805][ T8420] vlan1: entered promiscuous mode [ 157.206403][ T8420] macvlan0: entered promiscuous mode [ 157.223758][ T8420] macvlan1: entered promiscuous mode [ 157.233437][ T8420] ipvlan0: entered promiscuous mode [ 157.242781][ T8420] ipvlan1: entered promiscuous mode [ 157.265141][ T8420] macvtap0: entered promiscuous mode [ 157.277582][ T8420] macsec0: entered promiscuous mode [ 157.289487][ T8420] geneve0: entered promiscuous mode [ 157.302645][ T8420] geneve1: entered promiscuous mode [ 157.313460][ T8420] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 157.329039][ T8420] netdevsim netdevsim1 netdevsim2: entered promiscuous mode [ 157.345234][ T8420] netdevsim netdevsim1 netdevsim3: entered promiscuous mode [ 157.363487][ T8420] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 157.371808][ T8420] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 157.383084][ T8420] bond1: entered promiscuous mode [ 157.392116][ T8420] veth2: entered promiscuous mode [ 157.398194][ T8420] veth3: entered promiscuous mode [ 157.405304][ T8420] bond2: entered promiscuous mode [ 157.423237][ T8420] bond3: entered promiscuous mode [ 157.430650][ T8420] veth4: entered promiscuous mode [ 157.437807][ T8420] veth5: entered promiscuous mode [ 157.447133][ T8420] bond4: entered promiscuous mode [ 157.456923][ T8420] veth6: entered promiscuous mode [ 157.462987][ T8420] veth7: entered promiscuous mode [ 157.473863][ T8420] bridge0: entered promiscuous mode [ 157.487019][ T8420] bond5: entered promiscuous mode [ 157.492236][ T8420] gretap1: entered promiscuous mode [ 157.502471][ T8420] ipvlan2: entered promiscuous mode [ 157.511554][ T8420] bond6: entered promiscuous mode [ 157.519041][ T8420] bond7: entered promiscuous mode [ 157.529043][ T8420] bond8: entered promiscuous mode [ 157.537873][ T8420] ip6erspan0: entered promiscuous mode [ 157.547679][ T8420] bond0: entered promiscuous mode [ 157.594392][ T1092] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.642617][ T1092] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.681113][ T1092] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.726691][ T1092] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.830014][ T8466] netlink: 4 bytes leftover after parsing attributes in process `syz.4.736'. [ 158.011500][ T8475] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.742'. [ 158.369610][ T8495] veth2: entered promiscuous mode [ 158.380691][ T8495] veth3: entered promiscuous mode [ 158.391896][ T8495] macsec1: entered promiscuous mode [ 158.404256][ T8495] veth4: entered promiscuous mode [ 158.541192][ T8495] veth5: entered promiscuous mode [ 158.566894][ T8495] veth5: left allmulticast mode [ 158.587870][ T8495] veth6: entered promiscuous mode [ 158.608153][ T8495] veth7: entered promiscuous mode [ 158.613345][ T8495] veth7: left allmulticast mode [ 158.728353][ T8503] FAULT_INJECTION: forcing a failure. [ 158.728353][ T8503] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 158.743350][ T8506] netlink: 'syz.1.755': attribute type 1 has an invalid length. [ 158.744691][ T8507] netlink: 'syz.3.756': attribute type 1 has an invalid length. [ 158.765743][ T8503] CPU: 0 UID: 0 PID: 8503 Comm: syz.2.754 Not tainted syzkaller #0 PREEMPT(full) [ 158.765776][ T8503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 158.765790][ T8503] Call Trace: [ 158.765800][ T8503] [ 158.765809][ T8503] dump_stack_lvl+0x189/0x250 [ 158.765843][ T8503] ? __pfx____ratelimit+0x10/0x10 [ 158.765873][ T8503] ? __pfx_dump_stack_lvl+0x10/0x10 [ 158.765899][ T8503] ? __pfx__printk+0x10/0x10 [ 158.765930][ T8503] ? __might_fault+0xb0/0x130 [ 158.765973][ T8503] should_fail_ex+0x414/0x560 [ 158.766008][ T8503] _copy_from_iter+0x1db/0x16f0 [ 158.766035][ T8503] ? rcu_is_watching+0x15/0xb0 [ 158.766071][ T8503] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 158.766104][ T8503] ? __pfx__copy_from_iter+0x10/0x10 [ 158.766127][ T8503] ? __build_skb_around+0x257/0x3e0 [ 158.766165][ T8503] ? netlink_sendmsg+0x642/0xb30 [ 158.766194][ T8503] ? skb_put+0x11b/0x210 [ 158.766232][ T8503] netlink_sendmsg+0x6b2/0xb30 [ 158.766275][ T8503] ? __pfx_netlink_sendmsg+0x10/0x10 [ 158.766311][ T8503] ? aa_sock_msg_perm+0xf1/0x1d0 [ 158.766347][ T8503] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 158.766371][ T8503] ? __pfx_netlink_sendmsg+0x10/0x10 [ 158.766404][ T8503] __sock_sendmsg+0x21c/0x270 [ 158.766435][ T8503] ____sys_sendmsg+0x52d/0x830 [ 158.766464][ T8503] ? __pfx_____sys_sendmsg+0x10/0x10 [ 158.766496][ T8503] ? import_iovec+0x74/0xa0 [ 158.766524][ T8503] ___sys_sendmsg+0x21f/0x2a0 [ 158.766554][ T8503] ? __pfx____sys_sendmsg+0x10/0x10 [ 158.766613][ T8503] ? __fget_files+0x2a/0x420 [ 158.766645][ T8503] ? __fget_files+0x3a0/0x420 [ 158.766689][ T8503] __sys_sendmmsg+0x227/0x430 [ 158.766718][ T8503] ? __pfx___sys_sendmmsg+0x10/0x10 [ 158.766737][ T8503] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 158.766798][ T8503] ? ksys_write+0x22a/0x250 [ 158.766830][ T8503] ? __pfx_ksys_write+0x10/0x10 [ 158.766855][ T8503] ? rcu_is_watching+0x15/0xb0 [ 158.766884][ T8503] __x64_sys_sendmmsg+0xa0/0xc0 [ 158.766908][ T8503] do_syscall_64+0xfa/0x3b0 [ 158.766938][ T8503] ? lockdep_hardirqs_on+0x9c/0x150 [ 158.766967][ T8503] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.766988][ T8503] ? clear_bhb_loop+0x60/0xb0 [ 158.767014][ T8503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.767035][ T8503] RIP: 0033:0x7f884078ebe9 [ 158.767062][ T8503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.767081][ T8503] RSP: 002b:00007f8841624038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 158.767104][ T8503] RAX: ffffffffffffffda RBX: 00007f88409b5fa0 RCX: 00007f884078ebe9 [ 158.767121][ T8503] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000008 [ 158.767136][ T8503] RBP: 00007f8841624090 R08: 0000000000000000 R09: 0000000000000000 [ 158.767149][ T8503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.767162][ T8503] R13: 00007f88409b6038 R14: 00007f88409b5fa0 R15: 00007ffe1ae92fb8 [ 158.767197][ T8503] [ 159.072423][ T8506] 8021q: adding VLAN 0 to HW filter on device bond9 [ 159.083443][ T8501] delete_channel: no stack [ 159.149160][ T8507] 8021q: adding VLAN 0 to HW filter on device bond6 [ 159.230995][ T8508] 8021q: adding VLAN 0 to HW filter on device bond9 [ 159.251461][ T8508] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address [ 159.265229][ T8519] FAULT_INJECTION: forcing a failure. [ 159.265229][ T8519] name failslab, interval 1, probability 0, space 0, times 0 [ 159.277892][ T8508] bond9: (slave vxcan3): Error -95 calling set_mac_address [ 159.312590][ T8519] CPU: 0 UID: 0 PID: 8519 Comm: syz.2.759 Not tainted syzkaller #0 PREEMPT(full) [ 159.312622][ T8519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 159.312635][ T8519] Call Trace: [ 159.312644][ T8519] [ 159.312654][ T8519] dump_stack_lvl+0x189/0x250 [ 159.312684][ T8519] ? __pfx____ratelimit+0x10/0x10 [ 159.312714][ T8519] ? __pfx_dump_stack_lvl+0x10/0x10 [ 159.312739][ T8519] ? __pfx__printk+0x10/0x10 [ 159.312782][ T8519] ? __pfx___might_resched+0x10/0x10 [ 159.312802][ T8519] ? fs_reclaim_acquire+0x7d/0x100 [ 159.312837][ T8519] should_fail_ex+0x414/0x560 [ 159.312869][ T8519] should_failslab+0xa8/0x100 [ 159.312902][ T8519] kmem_cache_alloc_noprof+0x73/0x3c0 [ 159.312931][ T8519] ? __anon_vma_prepare+0xcb/0x4a0 [ 159.312967][ T8519] __anon_vma_prepare+0xcb/0x4a0 [ 159.313004][ T8519] __handle_mm_fault+0x4b2d/0x5440 [ 159.313031][ T8519] ? __lock_acquire+0xab9/0xd20 [ 159.313081][ T8519] ? __pfx___handle_mm_fault+0x10/0x10 [ 159.313125][ T8519] ? lock_vma_under_rcu+0xdf/0x3d0 [ 159.313156][ T8519] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 159.313196][ T8519] handle_mm_fault+0x40a/0x8e0 [ 159.313237][ T8519] do_user_addr_fault+0xa81/0x1390 [ 159.313280][ T8519] ? rcu_is_watching+0x15/0xb0 [ 159.313302][ T8519] ? trace_page_fault_user+0x84/0x1e0 [ 159.313338][ T8519] exc_page_fault+0x76/0xf0 [ 159.313370][ T8519] asm_exc_page_fault+0x26/0x30 [ 159.313390][ T8519] RIP: 0033:0x7f884074a4df [ 159.313410][ T8519] Code: f6 48 89 df e8 e2 47 04 00 85 c0 0f 85 4a 01 00 00 48 8b 05 7b d7 23 00 48 83 e8 01 4c 39 f0 0f 82 c6 00 00 00 66 0f 6f 0c 24 <4c> 89 6b 20 0f 11 4b 10 48 83 c4 18 48 89 d8 5b 5d 41 5c 41 5d 41 [ 159.313429][ T8519] RSP: 002b:00007f8841622c00 EFLAGS: 00010286 [ 159.313449][ T8519] RAX: ffffffffffffffff RBX: 00007f8838000000 RCX: 00007f884078eca7 [ 159.313465][ T8519] RDX: 0000000000000003 RSI: 0000000000021000 RDI: 00007f8838000000 [ 159.313479][ T8519] RBP: 0000000004000000 R08: 00000000ffffffff R09: 0000000000000000 [ 159.313493][ T8519] R10: 0000000000004022 R11: 0000000000000217 R12: 00007f883c000000 [ 159.313508][ T8519] R13: 0000000000001000 R14: 0000000000021000 R15: 0000000001800000 [ 159.313543][ T8519] [ 159.313565][ T8519] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 159.544891][ T8510] bond6: (slave geneve2): making interface the new active one [ 159.554833][ T8510] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 159.623191][ T8526] vlan2: entered allmulticast mode [ 159.637396][ T8526] gretap0: entered allmulticast mode [ 159.747341][ T8533] delete_channel: no stack [ 159.753240][ T8539] sctp: [Deprecated]: syz.2.761 (pid 8539) Use of int in max_burst socket option deprecated. [ 159.753240][ T8539] Use struct sctp_assoc_value instead [ 159.827770][ T8542] netlink: 'syz.0.765': attribute type 11 has an invalid length. [ 159.860157][ T8542] netlink: 'syz.0.765': attribute type 11 has an invalid length. [ 160.148778][ T8555] team0: Device gtp0 is of different type [ 160.183116][ T8559] bond9: entered promiscuous mode [ 160.421485][ T8570] netlink: 'syz.3.776': attribute type 30 has an invalid length. [ 160.530984][ T8580] __nla_validate_parse: 3 callbacks suppressed [ 160.531001][ T8580] netlink: 244 bytes leftover after parsing attributes in process `syz.1.778'. [ 160.563382][ T8568] delete_channel: no stack [ 160.683748][ T8586] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 160.691719][ T8586] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 160.763840][ T8590] netlink: 12 bytes leftover after parsing attributes in process `syz.0.781'. [ 160.779131][ T8590] netlink: 12 bytes leftover after parsing attributes in process `syz.0.781'. [ 160.893934][ T8594] lo: entered promiscuous mode [ 160.903709][ T8594] tunl0: entered promiscuous mode [ 160.915053][ T8594] gre0: entered promiscuous mode [ 160.927731][ T8594] gretap0: entered promiscuous mode [ 160.936514][ T8594] erspan0: entered promiscuous mode [ 160.942313][ T8594] ip_vti0: entered promiscuous mode [ 160.950189][ T8594] ip6_vti0: entered promiscuous mode [ 160.959429][ T8594] sit0: entered promiscuous mode [ 160.970025][ T8594] ip6tnl0: entered promiscuous mode [ 160.985105][ T8594] ip6gre0: entered promiscuous mode [ 160.997325][ T8594] syz_tun: entered promiscuous mode [ 161.012936][ T8594] ip6gretap0: entered promiscuous mode [ 161.054542][ T8594] bond0: entered promiscuous mode [ 161.067114][ T8594] bond_slave_0: entered promiscuous mode [ 161.073247][ T8594] bond_slave_1: entered promiscuous mode [ 161.079996][ T8594] bridge_slave_1: entered promiscuous mode [ 161.086484][ T8598] netlink: 4 bytes leftover after parsing attributes in process `syz.0.782'. [ 161.103014][ T8594] team0: entered promiscuous mode [ 161.109313][ T8594] team_slave_0: entered promiscuous mode [ 161.115370][ T8594] team_slave_1: entered promiscuous mode [ 161.130438][ T8594] dummy0: entered promiscuous mode [ 161.148215][ T8594] nlmon0: entered promiscuous mode [ 161.155163][ T8594] caif0: entered promiscuous mode [ 161.162316][ T8594] batadv0: entered promiscuous mode [ 161.171256][ T8594] vxcan0: entered promiscuous mode [ 161.178098][ T8594] vxcan1: entered promiscuous mode [ 161.184603][ T8594] veth0: entered promiscuous mode [ 161.193597][ T8594] veth1: entered promiscuous mode [ 161.205084][ T8594] wg0: entered promiscuous mode [ 161.212711][ T8594] wg1: entered promiscuous mode [ 161.222150][ T8594] wg2: entered promiscuous mode [ 161.230856][ T8594] veth0_to_bridge: entered promiscuous mode [ 161.241131][ T8594] bridge_slave_0: entered promiscuous mode [ 161.250970][ T8594] veth1_to_bridge: entered promiscuous mode [ 161.262603][ T8594] veth0_to_bond: entered promiscuous mode [ 161.271008][ T8594] veth1_to_bond: entered promiscuous mode [ 161.282463][ T8594] veth0_to_team: entered promiscuous mode [ 161.294211][ T8594] veth1_to_team: entered promiscuous mode [ 161.305557][ T8594] veth0_to_batadv: entered promiscuous mode [ 161.314773][ T8594] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.325197][ T8594] batadv_slave_0: entered promiscuous mode [ 161.339280][ T8594] veth1_to_batadv: entered promiscuous mode [ 161.349567][ T8594] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.358105][ T8594] batadv_slave_1: entered promiscuous mode [ 161.371260][ T8594] xfrm0: entered promiscuous mode [ 161.386414][ T8594] veth0_to_hsr: entered promiscuous mode [ 161.411067][ T8594] veth1_to_hsr: entered promiscuous mode [ 161.431342][ T8594] hsr0: entered promiscuous mode [ 161.440534][ T8594] veth1_virt_wifi: entered promiscuous mode [ 161.451380][ T8594] veth0_virt_wifi: entered promiscuous mode [ 161.461293][ T8594] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 161.484563][ T8594] vlan0: entered promiscuous mode [ 161.490537][ T8594] vlan1: entered promiscuous mode [ 161.497170][ T8594] macvlan0: entered promiscuous mode [ 161.506295][ T8594] macvlan1: entered promiscuous mode [ 161.515823][ T8594] ipvlan0: entered promiscuous mode [ 161.529456][ T8594] macvtap0: entered promiscuous mode [ 161.538909][ T8594] macsec0: entered promiscuous mode [ 161.549374][ T8594] geneve0: entered promiscuous mode [ 161.562112][ T8594] geneve1: entered promiscuous mode [ 161.572955][ T8594] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 161.583301][ T8594] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 161.594581][ T8594] netdevsim netdevsim3 netdevsim2: entered promiscuous mode [ 161.605246][ T8594] netdevsim netdevsim3 netdevsim3: entered promiscuous mode [ 161.617706][ T8594] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 161.625211][ T8594] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 161.633244][ T8594] bond1: entered promiscuous mode [ 161.638763][ T8594] bond1: left allmulticast mode [ 161.644871][ T8594] bond2: entered promiscuous mode [ 161.652783][ T8594] veth2: entered promiscuous mode [ 161.658676][ T8594] veth3: entered promiscuous mode [ 161.664572][ T8594] batadv1: entered promiscuous mode [ 161.671075][ T8594] bond3: entered promiscuous mode [ 161.682292][ T8594] veth4: entered promiscuous mode [ 161.688888][ T8594] veth5: entered promiscuous mode [ 161.690024][ T8613] netlink: 28 bytes leftover after parsing attributes in process `syz.1.786'. [ 161.699876][ T8594] bond4: entered promiscuous mode [ 161.710341][ T8613] netlink: 'syz.1.786': attribute type 7 has an invalid length. [ 161.712272][ T8594] veth6: entered promiscuous mode [ 161.725086][ T8594] veth7: entered promiscuous mode [ 161.726493][ T8613] netlink: 20 bytes leftover after parsing attributes in process `syz.1.786'. [ 161.739905][ T8594] bond5: entered promiscuous mode [ 161.745110][ T8594] gretap1: entered promiscuous mode [ 161.758438][ T8594] veth8: entered promiscuous mode [ 161.763939][ T8594] veth9: entered promiscuous mode [ 161.774428][ T8594] bond6: entered promiscuous mode [ 161.779894][ T8594] geneve2: entered promiscuous mode [ 161.792828][ T8597] tipc: Enabled bearer , priority 12 [ 161.894817][ T36] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.915305][ T8616] netlink: 8 bytes leftover after parsing attributes in process `syz.2.787'. [ 161.925314][ T36] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.935754][ T8616] netlink: 'syz.2.787': attribute type 30 has an invalid length. [ 161.947134][ T36] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.956168][ T36] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.006462][ T8620] netlink: 'syz.4.789': attribute type 30 has an invalid length. [ 162.041844][ T8615] delete_channel: no stack [ 162.118570][ T8618] delete_channel: no stack [ 162.165781][ T8628] netlink: 44 bytes leftover after parsing attributes in process `syz.0.793'. [ 162.445620][ T8633] FAULT_INJECTION: forcing a failure. [ 162.445620][ T8633] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 162.463298][ T8633] CPU: 1 UID: 0 PID: 8633 Comm: syz.3.795 Not tainted syzkaller #0 PREEMPT(full) [ 162.463329][ T8633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 162.463343][ T8633] Call Trace: [ 162.463351][ T8633] [ 162.463361][ T8633] dump_stack_lvl+0x189/0x250 [ 162.463394][ T8633] ? __pfx____ratelimit+0x10/0x10 [ 162.463424][ T8633] ? __pfx_dump_stack_lvl+0x10/0x10 [ 162.463451][ T8633] ? __pfx__printk+0x10/0x10 [ 162.463496][ T8633] should_fail_ex+0x414/0x560 [ 162.463531][ T8633] _copy_to_user+0x31/0xb0 [ 162.463558][ T8633] simple_read_from_buffer+0xe1/0x170 [ 162.463596][ T8633] proc_fail_nth_read+0x1b3/0x220 [ 162.463626][ T8633] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 162.463654][ T8633] ? rw_verify_area+0x2a6/0x4d0 [ 162.463681][ T8633] ? __lock_acquire+0xab9/0xd20 [ 162.463710][ T8633] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 162.463737][ T8633] vfs_read+0x200/0xa30 [ 162.463763][ T8633] ? fdget_pos+0x247/0x320 [ 162.463788][ T8633] ? __pfx___mutex_lock+0x10/0x10 [ 162.463830][ T8633] ? __pfx_vfs_read+0x10/0x10 [ 162.463860][ T8633] ? __fget_files+0x2a/0x420 [ 162.463898][ T8633] ? __fget_files+0x3a0/0x420 [ 162.463929][ T8633] ? __fget_files+0x2a/0x420 [ 162.463973][ T8633] ksys_read+0x145/0x250 [ 162.464005][ T8633] ? __pfx_ksys_read+0x10/0x10 [ 162.464039][ T8633] ? do_syscall_64+0xbe/0x3b0 [ 162.464075][ T8633] do_syscall_64+0xfa/0x3b0 [ 162.464109][ T8633] ? lockdep_hardirqs_on+0x9c/0x150 [ 162.464137][ T8633] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.464159][ T8633] ? clear_bhb_loop+0x60/0xb0 [ 162.464186][ T8633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.464207][ T8633] RIP: 0033:0x7f074cb8d5fc [ 162.464226][ T8633] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 162.464245][ T8633] RSP: 002b:00007f074dad4030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 162.464268][ T8633] RAX: ffffffffffffffda RBX: 00007f074cdb5fa0 RCX: 00007f074cb8d5fc [ 162.464284][ T8633] RDX: 000000000000000f RSI: 00007f074dad40a0 RDI: 0000000000000006 [ 162.464297][ T8633] RBP: 00007f074dad4090 R08: 0000000000000000 R09: 00007f0744000b70 [ 162.464311][ T8633] R10: 4df3d4e932cb6736 R11: 0000000000000246 R12: 0000000000000002 [ 162.464324][ T8633] R13: 00007f074cdb6038 R14: 00007f074cdb5fa0 R15: 00007ffeddd0a118 [ 162.464359][ T8633] [ 162.710368][ T8646] netlink: 12 bytes leftover after parsing attributes in process `syz.0.796'. [ 162.735061][ T8646] netlink: 12 bytes leftover after parsing attributes in process `syz.0.796'. [ 163.123675][ T8662] netlink: 'syz.3.801': attribute type 30 has an invalid length. [ 163.172978][ T8657] 8021q: adding VLAN 0 to HW filter on device bond7 [ 163.245263][ T8674] netlink: 'syz.2.804': attribute type 15 has an invalid length. [ 163.257455][ T8674] openvswitch: netlink: IPv6 tunnel dst address is zero [ 163.269591][ T8671] netlink: 'syz.0.806': attribute type 1 has an invalid length. [ 163.308007][ T8661] delete_channel: no stack [ 163.883146][ T8707] delete_channel: no stack [ 164.064891][ T8705] 8021q: adding VLAN 0 to HW filter on device bond1 [ 164.088670][ T8717] 8021q: adding VLAN 0 to HW filter on device ipvlan1 [ 164.116966][ T8717] bond0: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 164.165739][ T8720] netlink: 'syz.0.822': attribute type 30 has an invalid length. [ 164.364690][ T8712] delete_channel: no stack [ 164.527967][ T8741] netlink: 'syz.4.832': attribute type 30 has an invalid length. [ 164.642710][ T8738] delete_channel: no stack [ 164.704519][ T8749] bond10: entered allmulticast mode [ 164.729332][ T8749] 8021q: adding VLAN 0 to HW filter on device bond10 [ 164.754649][ T8749] bridge0: port 1(bond10) entered blocking state [ 164.774805][ T8749] bridge0: port 1(bond10) entered disabled state [ 164.784302][ T8749] bond10: entered promiscuous mode [ 164.793059][ T8759] bridge0: entered promiscuous mode [ 164.799060][ T8759] bridge1: entered promiscuous mode [ 164.943512][ T8767] 8021q: adding VLAN 0 to HW filter on device ipvlan1 [ 164.951703][ T8767] bond0: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 165.174926][ T8781] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 165.215531][ T8782] delete_channel: no stack [ 165.336421][ T8789] netlink: 'syz.3.849': attribute type 1 has an invalid length. [ 165.401006][ T8789] 8021q: adding VLAN 0 to HW filter on device bond7 [ 165.498714][ T8791] bond7: (slave veth11): Enslaving as an active interface with a down link [ 165.512841][ T8789] bond4: (slave veth0_to_bond): Releasing active interface [ 165.515255][ T8798] netlink: 'syz.1.852': attribute type 1 has an invalid length. [ 165.523216][ T8789] veth0_to_bond: left promiscuous mode [ 165.543507][ T8789] bond7: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 165.609429][ T8803] __nla_validate_parse: 7 callbacks suppressed [ 165.609518][ T8803] netlink: 8 bytes leftover after parsing attributes in process `syz.2.851'. [ 165.645861][ T8806] netlink: 28 bytes leftover after parsing attributes in process `syz.1.852'. [ 165.667409][ T8803] netlink: 24 bytes leftover after parsing attributes in process `syz.2.851'. [ 165.732224][ T8806] 8021q: adding VLAN 0 to HW filter on device bond11 [ 165.870184][ T8817] netlink: 44 bytes leftover after parsing attributes in process `syz.0.856'. [ 165.945121][ T8819] FAULT_INJECTION: forcing a failure. [ 165.945121][ T8819] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 165.969178][ T8819] CPU: 0 UID: 0 PID: 8819 Comm: syz.1.858 Not tainted syzkaller #0 PREEMPT(full) [ 165.969210][ T8819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 165.969224][ T8819] Call Trace: [ 165.969232][ T8819] [ 165.969241][ T8819] dump_stack_lvl+0x189/0x250 [ 165.969273][ T8819] ? __pfx____ratelimit+0x10/0x10 [ 165.969304][ T8819] ? __pfx_dump_stack_lvl+0x10/0x10 [ 165.969331][ T8819] ? __pfx__printk+0x10/0x10 [ 165.969361][ T8819] ? __might_fault+0xb0/0x130 [ 165.969409][ T8819] should_fail_ex+0x414/0x560 [ 165.969444][ T8819] _copy_from_iter+0x1db/0x16f0 [ 165.969470][ T8819] ? rcu_is_watching+0x15/0xb0 [ 165.969494][ T8819] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 165.969525][ T8819] ? __pfx__copy_from_iter+0x10/0x10 [ 165.969548][ T8819] ? __build_skb_around+0x257/0x3e0 [ 165.969584][ T8819] ? netlink_sendmsg+0x642/0xb30 [ 165.969619][ T8819] ? skb_put+0x11b/0x210 [ 165.969654][ T8819] netlink_sendmsg+0x6b2/0xb30 [ 165.969695][ T8819] ? __pfx_netlink_sendmsg+0x10/0x10 [ 165.969729][ T8819] ? aa_sock_msg_perm+0xf1/0x1d0 [ 165.969762][ T8819] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 165.969785][ T8819] ? __pfx_netlink_sendmsg+0x10/0x10 [ 165.969817][ T8819] __sock_sendmsg+0x21c/0x270 [ 165.969848][ T8819] ____sys_sendmsg+0x52d/0x830 [ 165.969876][ T8819] ? __pfx_____sys_sendmsg+0x10/0x10 [ 165.969908][ T8819] ? import_iovec+0x74/0xa0 [ 165.969936][ T8819] ___sys_sendmsg+0x21f/0x2a0 [ 165.969960][ T8819] ? __pfx____sys_sendmsg+0x10/0x10 [ 165.970026][ T8819] ? __might_fault+0xb0/0x130 [ 165.970059][ T8819] __sys_sendmmsg+0x227/0x430 [ 165.970089][ T8819] ? __pfx___sys_sendmmsg+0x10/0x10 [ 165.970108][ T8819] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 165.970169][ T8819] ? ksys_write+0x22a/0x250 [ 165.970202][ T8819] ? __pfx_ksys_write+0x10/0x10 [ 165.970227][ T8819] ? rcu_is_watching+0x15/0xb0 [ 165.970257][ T8819] __x64_sys_sendmmsg+0xa0/0xc0 [ 165.970282][ T8819] do_syscall_64+0xfa/0x3b0 [ 165.970312][ T8819] ? lockdep_hardirqs_on+0x9c/0x150 [ 165.970340][ T8819] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.970362][ T8819] ? clear_bhb_loop+0x60/0xb0 [ 165.970389][ T8819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.970410][ T8819] RIP: 0033:0x7fe33598ebe9 [ 165.970430][ T8819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.970449][ T8819] RSP: 002b:00007fe33675c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 165.970472][ T8819] RAX: ffffffffffffffda RBX: 00007fe335bb5fa0 RCX: 00007fe33598ebe9 [ 165.970488][ T8819] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000008 [ 165.970503][ T8819] RBP: 00007fe33675c090 R08: 0000000000000000 R09: 0000000000000000 [ 165.970516][ T8819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 165.970529][ T8819] R13: 00007fe335bb6038 R14: 00007fe335bb5fa0 R15: 00007ffc545d3378 [ 165.970563][ T8819] [ 166.005619][ T8818] delete_channel: no stack [ 166.552891][ T8834] 8021q: adding VLAN 0 to HW filter on device bond4 [ 166.710787][ T8840] bond4: (slave veth11): Enslaving as an active interface with a down link [ 166.764366][ T8846] validate_nla: 3 callbacks suppressed [ 166.764388][ T8846] netlink: 'syz.1.868': attribute type 13 has an invalid length. [ 166.767472][ T8848] netlink: 'syz.3.869': attribute type 1 has an invalid length. [ 166.785128][ T8834] bond4: (slave veth0_to_bond): making interface the new active one [ 166.813922][ T8834] veth0_to_bond: entered promiscuous mode [ 166.822899][ T8834] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 166.906131][ T8855] netlink: 28 bytes leftover after parsing attributes in process `syz.3.869'. [ 167.000292][ T8855] 8021q: adding VLAN 0 to HW filter on device bond8 [ 167.365867][ T8881] xt_socket: unknown flags 0x50 [ 167.395147][ T8881] netlink: 36 bytes leftover after parsing attributes in process `syz.0.879'. [ 167.416782][ T8885] lo: entered promiscuous mode [ 167.426630][ T8885] tunl0: entered promiscuous mode [ 167.435491][ T8885] gre0: entered promiscuous mode [ 167.465826][ T8885] gretap0: entered promiscuous mode [ 167.489528][ T8885] erspan0: entered promiscuous mode [ 167.520020][ T8885] ip_vti0: entered promiscuous mode [ 167.534150][ T8885] ip6_vti0: entered promiscuous mode [ 167.550577][ T8885] sit0: entered promiscuous mode [ 167.573225][ T8885] ip6tnl0: entered promiscuous mode [ 167.585455][ T8891] netlink: 'syz.4.884': attribute type 1 has an invalid length. [ 167.596419][ T8885] ip6gre0: entered promiscuous mode [ 167.616223][ T8885] syz_tun: entered promiscuous mode [ 167.629444][ T8885] ip6gretap0: entered promiscuous mode [ 167.641383][ T8885] vcan0: entered promiscuous mode [ 167.652308][ T8885] bond0: entered promiscuous mode [ 167.658047][ T8885] bond_slave_0: entered promiscuous mode [ 167.663982][ T8885] bond_slave_1: entered promiscuous mode [ 167.679946][ T8885] team0: entered promiscuous mode [ 167.685213][ T8885] team_slave_0: entered promiscuous mode [ 167.693584][ T8896] netlink: 28 bytes leftover after parsing attributes in process `syz.4.884'. [ 167.693851][ T8885] team_slave_1: entered promiscuous mode [ 167.719256][ T8885] dummy0: entered promiscuous mode [ 167.734191][ T8885] nlmon0: entered promiscuous mode [ 167.741963][ T8885] caif0: entered promiscuous mode [ 167.753610][ T8885] batadv0: entered promiscuous mode [ 167.764908][ T8885] vxcan0: entered promiscuous mode [ 167.778876][ T8885] vxcan1: entered promiscuous mode [ 167.786272][ T8885] veth0: entered promiscuous mode [ 167.802080][ T8885] veth1: entered promiscuous mode [ 167.818509][ T8885] wg0: entered promiscuous mode [ 167.827712][ T8885] wg1: left allmulticast mode [ 167.837878][ T8885] wg2: entered promiscuous mode [ 167.846440][ T8885] veth0_to_bridge: entered promiscuous mode [ 167.858923][ T8885] bridge_slave_0: entered promiscuous mode [ 167.868878][ T8885] veth1_to_bridge: entered promiscuous mode [ 167.890189][ T8885] bridge_slave_1: entered promiscuous mode [ 167.902374][ T8885] veth1_to_bond: entered promiscuous mode [ 167.913074][ T8885] veth0_to_team: entered promiscuous mode [ 167.927863][ T8885] veth1_to_team: entered promiscuous mode [ 167.941322][ T8885] veth0_to_batadv: entered promiscuous mode [ 167.951838][ T8885] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.960674][ T8885] batadv_slave_0: entered promiscuous mode [ 167.971046][ T8885] xfrm0: entered promiscuous mode [ 167.981024][ T8885] veth0_to_hsr: entered promiscuous mode [ 167.993068][ T8885] veth1_to_hsr: entered promiscuous mode [ 168.005974][ T8885] hsr0: entered promiscuous mode [ 168.014220][ T8885] veth1_virt_wifi: entered promiscuous mode [ 168.024551][ T8885] veth0_virt_wifi: entered promiscuous mode [ 168.033166][ T8885] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 168.049563][ T8885] tipc: Resetting bearer [ 168.064134][ T8885] vlan0: entered promiscuous mode [ 168.069889][ T8885] vlan1: entered promiscuous mode [ 168.076018][ T8885] macvlan0: entered promiscuous mode [ 168.085785][ T8885] macvlan1: entered promiscuous mode [ 168.094178][ T8885] ipvlan0: entered promiscuous mode [ 168.100129][ T8885] ipvlan1: entered promiscuous mode [ 168.114696][ T8885] macvtap0: entered promiscuous mode [ 168.123553][ T8885] macsec0: entered promiscuous mode [ 168.133517][ T8885] geneve0: entered promiscuous mode [ 168.144276][ T8885] geneve1: entered promiscuous mode [ 168.153768][ T8885] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 168.165209][ T8885] netdevsim netdevsim2 netdevsim2: entered promiscuous mode [ 168.178370][ T8885] netdevsim netdevsim2 netdevsim3: entered promiscuous mode [ 168.187837][ T8885] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 168.195114][ T8885] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 168.202975][ T8885] bond1: entered promiscuous mode [ 168.208667][ T8885] bond1: left allmulticast mode [ 168.214397][ T8885] veth2: entered promiscuous mode [ 168.220605][ T8885] veth3: entered promiscuous mode [ 168.225699][ T8885] veth3: left allmulticast mode [ 168.231835][ T8885] mac80211_hwsim hwsim12 wlan2: entered promiscuous mode [ 168.239516][ T8885] bridge1: entered promiscuous mode [ 168.246280][ T8885] vxlan0: entered promiscuous mode [ 168.255232][ T8885] sit1: entered promiscuous mode [ 168.290785][ T8885] bond2: entered promiscuous mode [ 168.296005][ T8885] gretap1: entered promiscuous mode [ 168.305410][ T8885] bond3: entered promiscuous mode [ 168.311604][ T8885] veth4: entered promiscuous mode [ 168.316895][ T8885] veth5: entered promiscuous mode [ 168.322112][ T8885] veth6: entered promiscuous mode [ 168.327635][ T8885] veth7: entered promiscuous mode [ 168.332884][ T8885] vxlan1: entered promiscuous mode [ 168.339123][ T8885] veth8: entered promiscuous mode [ 168.344519][ T8885] veth9: entered promiscuous mode [ 168.353924][ T8885] bond4: entered promiscuous mode [ 168.362482][ T8885] veth10: entered promiscuous mode [ 168.368701][ T8885] veth11: entered promiscuous mode [ 168.374803][ T1213] lo speed is unknown, defaulting to 1000 [ 168.382627][ T1213] syz0: Port: 1 Link DOWN [ 168.394004][ T8891] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 168.414948][ T8894] 8021q: adding VLAN 0 to HW filter on device ipvlan1 [ 168.440598][ T8894] bond0: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 168.560888][ T36] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.587002][ T36] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.623536][ T36] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.637821][ T36] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.678828][ T8904] netlink: 'syz.2.887': attribute type 30 has an invalid length. [ 168.695592][ T1213] lo speed is unknown, defaulting to 1000 [ 168.766446][ T8911] netlink: 28 bytes leftover after parsing attributes in process `syz.1.891'. [ 168.789176][ T8911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.891'. [ 168.795652][ T8912] netlink: 'syz.3.890': attribute type 1 has an invalid length. [ 168.806080][ T8911] netlink: 12 bytes leftover after parsing attributes in process `syz.1.891'. [ 168.815923][ T8911] netlink: 'syz.1.891': attribute type 7 has an invalid length. [ 168.857720][ T36] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.875857][ T36] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.885507][ T36] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.902012][ T36] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.973268][ T8903] delete_channel: no stack [ 169.027869][ T8927] ip6gre1: entered allmulticast mode [ 169.185592][ T8935] 8021q: adding VLAN 0 to HW filter on device ipvlan1 [ 169.335743][ T8945] netlink: 'syz.2.899': attribute type 1 has an invalid length. [ 169.461858][ T8945] 8021q: adding VLAN 0 to HW filter on device bond5 [ 169.722948][ T8967] netlink: 'syz.3.907': attribute type 30 has an invalid length. [ 169.749286][ T8967] FAULT_INJECTION: forcing a failure. [ 169.749286][ T8967] name failslab, interval 1, probability 0, space 0, times 0 [ 169.779768][ T8967] CPU: 1 UID: 0 PID: 8967 Comm: syz.3.907 Not tainted syzkaller #0 PREEMPT(full) [ 169.779800][ T8967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 169.779814][ T8967] Call Trace: [ 169.779822][ T8967] [ 169.779832][ T8967] dump_stack_lvl+0x189/0x250 [ 169.779864][ T8967] ? __pfx____ratelimit+0x10/0x10 [ 169.779894][ T8967] ? __pfx_dump_stack_lvl+0x10/0x10 [ 169.779920][ T8967] ? __pfx__printk+0x10/0x10 [ 169.779958][ T8967] ? __pfx___might_resched+0x10/0x10 [ 169.779977][ T8967] ? fs_reclaim_acquire+0x7d/0x100 [ 169.780017][ T8967] should_fail_ex+0x414/0x560 [ 169.780052][ T8967] should_failslab+0xa8/0x100 [ 169.780086][ T8967] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 169.780115][ T8967] ? __d_alloc+0x36/0x7a0 [ 169.780144][ T8967] __d_alloc+0x36/0x7a0 [ 169.780174][ T8967] d_alloc_parallel+0xe5/0x15e0 [ 169.780226][ T8967] ? __lock_acquire+0xab9/0xd20 [ 169.780266][ T8967] ? __pfx_d_alloc_parallel+0x10/0x10 [ 169.780297][ T8967] ? __raw_spin_lock_init+0x45/0x100 [ 169.780325][ T8967] ? __init_waitqueue_head+0xa9/0x150 [ 169.780358][ T8967] __lookup_slow+0x116/0x3d0 [ 169.780386][ T8967] ? __pfx___lookup_slow+0x10/0x10 [ 169.780429][ T8967] ? d_lookup+0x8a/0xa0 [ 169.780453][ T8967] ? lookup_noperm+0x112/0x220 [ 169.780482][ T8967] simple_start_creating+0xfd/0x1e0 [ 169.780517][ T8967] ? __pfx_simple_start_creating+0x10/0x10 [ 169.780566][ T8967] start_creating+0x10f/0x180 [ 169.780600][ T8967] __debugfs_create_file+0x79/0x4f0 [ 169.780637][ T8967] debugfs_create_file_full+0x3f/0x60 [ 169.780674][ T8967] ref_tracker_dir_debugfs+0x14e/0x270 [ 169.780705][ T8967] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 169.780769][ T8967] ? rcu_is_watching+0x15/0xb0 [ 169.780789][ T8967] ? alloc_netdev_mqs+0xa3/0x11b0 [ 169.780821][ T8967] ? __raw_spin_lock_init+0x45/0x100 [ 169.780858][ T8967] alloc_netdev_mqs+0x26f/0x11b0 [ 169.780882][ T8967] ? __pfx_vxlan_setup+0x10/0x10 [ 169.780913][ T8967] rtnl_create_link+0x31f/0xd10 [ 169.780948][ T8967] rtnl_newlink_create+0x25c/0xb00 [ 169.780995][ T8967] ? __pfx___nla_validate_parse+0x10/0x10 [ 169.781031][ T8967] ? __lock_acquire+0xab9/0xd20 [ 169.781069][ T8967] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 169.781095][ T8967] ? __pfx___mutex_lock+0x10/0x10 [ 169.781139][ T8967] ? ns_capable+0x8a/0xf0 [ 169.781166][ T8967] rtnl_newlink+0x16d6/0x1c70 [ 169.781217][ T8967] ? __pfx_rtnl_newlink+0x10/0x10 [ 169.781259][ T8967] ? __lock_acquire+0xab9/0xd20 [ 169.781297][ T8967] ? __lock_acquire+0xab9/0xd20 [ 169.781342][ T8967] ? __lock_acquire+0xab9/0xd20 [ 169.781395][ T8967] ? is_bpf_text_address+0x26/0x2b0 [ 169.781440][ T8967] ? is_bpf_text_address+0x292/0x2b0 [ 169.781471][ T8967] ? is_bpf_text_address+0x26/0x2b0 [ 169.781513][ T8967] ? __lock_acquire+0xab9/0xd20 [ 169.781575][ T8967] ? __pfx_rtnl_newlink+0x10/0x10 [ 169.781605][ T8967] rtnetlink_rcv_msg+0x7cc/0xb70 [ 169.781635][ T8967] ? __lock_acquire+0xab9/0xd20 [ 169.781669][ T8967] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 169.781698][ T8967] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 169.781751][ T8967] netlink_rcv_skb+0x208/0x470 [ 169.781779][ T8967] ? __lock_acquire+0xab9/0xd20 [ 169.781810][ T8967] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 169.781844][ T8967] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 169.781889][ T8967] ? netlink_deliver_tap+0x2e/0x1b0 [ 169.781931][ T8967] netlink_unicast+0x82c/0x9e0 [ 169.781970][ T8967] ? __pfx_netlink_unicast+0x10/0x10 [ 169.782001][ T8967] ? netlink_sendmsg+0x642/0xb30 [ 169.782030][ T8967] ? skb_put+0x11b/0x210 [ 169.782066][ T8967] netlink_sendmsg+0x805/0xb30 [ 169.782109][ T8967] ? __pfx_netlink_sendmsg+0x10/0x10 [ 169.782146][ T8967] ? aa_sock_msg_perm+0xf1/0x1d0 [ 169.782184][ T8967] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 169.782207][ T8967] ? __pfx_netlink_sendmsg+0x10/0x10 [ 169.782241][ T8967] __sock_sendmsg+0x21c/0x270 [ 169.782273][ T8967] ____sys_sendmsg+0x52d/0x830 [ 169.782303][ T8967] ? __pfx_____sys_sendmsg+0x10/0x10 [ 169.782338][ T8967] ? import_iovec+0x74/0xa0 [ 169.782368][ T8967] ___sys_sendmsg+0x21f/0x2a0 [ 169.782394][ T8967] ? __pfx____sys_sendmsg+0x10/0x10 [ 169.782480][ T8967] ? __might_fault+0xb0/0x130 [ 169.782516][ T8967] __sys_sendmmsg+0x227/0x430 [ 169.782546][ T8967] ? __pfx___sys_sendmmsg+0x10/0x10 [ 169.782566][ T8967] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 169.782632][ T8967] ? ksys_write+0x22a/0x250 [ 169.782664][ T8967] ? __pfx_ksys_write+0x10/0x10 [ 169.782690][ T8967] ? rcu_is_watching+0x15/0xb0 [ 169.782721][ T8967] __x64_sys_sendmmsg+0xa0/0xc0 [ 169.782747][ T8967] do_syscall_64+0xfa/0x3b0 [ 169.782778][ T8967] ? lockdep_hardirqs_on+0x9c/0x150 [ 169.782808][ T8967] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.782830][ T8967] ? clear_bhb_loop+0x60/0xb0 [ 169.782857][ T8967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.782878][ T8967] RIP: 0033:0x7f074cb8ebe9 [ 169.782898][ T8967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.782918][ T8967] RSP: 002b:00007f074dad4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 169.782974][ T8967] RAX: ffffffffffffffda RBX: 00007f074cdb5fa0 RCX: 00007f074cb8ebe9 [ 169.782990][ T8967] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000008 [ 169.783005][ T8967] RBP: 00007f074dad4090 R08: 0000000000000000 R09: 0000000000000000 [ 169.783018][ T8967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 169.783030][ T8967] R13: 00007f074cdb6038 R14: 00007f074cdb5fa0 R15: 00007ffeddd0a118 [ 169.783067][ T8967] [ 170.418358][ T8970] C: renamed from team_slave_0 [ 170.426469][ T8970] netlink: 'syz.1.909': attribute type 1 has an invalid length. [ 170.440210][ T8970] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 170.461484][ T8964] delete_channel: no stack [ 170.788027][ T9003] __nla_validate_parse: 9 callbacks suppressed [ 170.788048][ T9003] netlink: 8 bytes leftover after parsing attributes in process `syz.3.920'. [ 171.018227][ T9013] netlink: 28 bytes leftover after parsing attributes in process `syz.3.924'. [ 171.027790][ T9013] netlink: 'syz.3.924': attribute type 7 has an invalid length. [ 171.035632][ T9013] netlink: 4 bytes leftover after parsing attributes in process `syz.3.924'. [ 171.099919][ T9010] netlink: 12 bytes leftover after parsing attributes in process `syz.4.923'. [ 171.230045][ T9010] 8021q: adding VLAN 0 to HW filter on device bond8 [ 171.328344][ T9031] netlink: 4 bytes leftover after parsing attributes in process `syz.3.927'. [ 171.343827][ T9034] sit1: entered promiscuous mode [ 171.354143][ T9030] delete_channel: no stack [ 171.360394][ T9031] netlink: 4 bytes leftover after parsing attributes in process `syz.3.927'. [ 171.510635][ T9039] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 171.539999][ T9039] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 171.569808][ T9045] IPv6: NLM_F_CREATE should be specified when creating new route [ 171.589487][ T9045] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 171.596825][ T9045] IPv6: NLM_F_CREATE should be set when creating new route [ 171.604260][ T9045] IPv6: NLM_F_CREATE should be set when creating new route [ 171.611565][ T9045] IPv6: NLM_F_CREATE should be set when creating new route [ 171.689394][ T9052] netlink: 40 bytes leftover after parsing attributes in process `syz.1.937'. [ 171.920897][ T9064] netlink: 4 bytes leftover after parsing attributes in process `syz.2.939'. [ 172.001097][ T9067] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 172.033512][ T9069] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 172.261298][ T9085] netlink: 8 bytes leftover after parsing attributes in process `syz.4.946'. [ 172.282517][ T9085] netlink: 12 bytes leftover after parsing attributes in process `syz.4.946'. [ 172.305673][ T9085] validate_nla: 3 callbacks suppressed [ 172.305689][ T9085] netlink: 'syz.4.946': attribute type 20 has an invalid length. [ 172.339144][ T9085] netlink: 'syz.4.946': attribute type 20 has an invalid length. [ 172.380519][ T9094] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 172.388316][ T9094] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 172.493823][ T9098] netlink: 'syz.4.951': attribute type 1 has an invalid length. [ 172.504137][ T9098] netlink: 'syz.4.951': attribute type 1 has an invalid length. [ 172.633160][ T9097] netlink: 'syz.0.950': attribute type 30 has an invalid length. [ 172.653461][ T9097] netlink: 'syz.0.950': attribute type 30 has an invalid length. [ 172.668652][ T6783] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.695820][ T6783] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.751647][ T9095] delete_channel: no stack [ 172.758179][ T6783] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.793071][ T6783] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 173.052424][ T9126] team_slave_0: entered allmulticast mode [ 173.135371][ T9130] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 173.155802][ T9130] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 173.387496][ T9146] netlink: 'syz.2.967': attribute type 2 has an invalid length. [ 173.416538][ T9146] netlink: 'syz.2.967': attribute type 1 has an invalid length. [ 173.601002][ T9165] netlink: 'syz.0.973': attribute type 1 has an invalid length. [ 173.613806][ T9167] netlink: 'syz.0.973': attribute type 1 has an invalid length. [ 173.843461][ T9160] 8021q: adding VLAN 0 to HW filter on device bond9 [ 174.052133][ T9196] openvswitch: netlink: IPv4 tun info is not correct [ 174.576042][ T9232] openvswitch: netlink: Flow key attr not present in new flow. [ 174.635332][ T9234] syzkaller1: entered promiscuous mode [ 174.641087][ T9234] syzkaller1: entered allmulticast mode [ 174.692577][ T9236] 8021q: adding VLAN 0 to HW filter on device bond12 [ 174.920489][ T9247] IPv6: NLM_F_REPLACE set, but no existing node found! [ 175.319241][ T9267] netdevsim netdevsim3: Firmware load for '..' refused, path contains '..' component [ 175.524454][ T9279] tipc: Started in network mode [ 175.534518][ T9279] tipc: Node identity 123d5201c97a, cluster identity 4711 [ 175.557719][ T9279] tipc: Enabled bearer , priority 0 [ 175.724048][ T9278] tipc: Disabling bearer [ 175.808055][ T9295] __nla_validate_parse: 18 callbacks suppressed [ 175.808077][ T9295] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1016'. [ 175.873273][ T9294] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1017'. [ 175.889244][ T9290] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1016'. [ 175.898515][ T9290] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1016'. [ 175.968135][ T9288] delete_channel: no stack [ 176.013713][ T9305] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1020'. [ 176.119398][ T9312] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 176.195876][ T9313] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 176.346305][ T9310] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1023'. [ 176.453320][ T9310] 8021q: adding VLAN 0 to HW filter on device bond9 [ 176.751441][ T9355] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1034'. [ 176.792672][ T9352] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 176.832047][ T9357] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1033'. [ 176.841737][ T9357] macvlan0: left promiscuous mode [ 176.905311][ T9360] 0ªî{X¹¦: entered promiscuous mode [ 176.937861][ T9360] 0ªî{X¹¦: left allmulticast mode [ 176.969317][ T9360] vlan2: entered promiscuous mode [ 176.999629][ T9360] bond6: entered promiscuous mode [ 177.012745][ T9360] gretap1: entered promiscuous mode [ 177.046259][ T9360] xfrm1: entered promiscuous mode [ 177.063039][ T9360] veth8: entered promiscuous mode [ 177.072673][ T9360] veth9: entered promiscuous mode [ 177.082540][ T9360] bond7: entered promiscuous mode [ 177.102653][ T9360] ipvlan1: entered promiscuous mode [ 177.144022][ T9360] bond8: entered promiscuous mode [ 177.197171][ T9360] bond9: entered promiscuous mode [ 177.265008][ T9373] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1040'. [ 177.385820][ T9373] 8021q: adding VLAN 0 to HW filter on device bond2 [ 177.636124][ T9394] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 177.656915][ T9394] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 177.671305][ T9402] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1046'. [ 177.865291][ T9409] team_slave_0: mtu greater than device maximum [ 178.010953][ T9415] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 178.241892][ T9417] 8021q: adding VLAN 0 to HW filter on device bond3 [ 178.321449][ T9438] validate_nla: 10 callbacks suppressed [ 178.321471][ T9438] netlink: 'syz.4.1060': attribute type 1 has an invalid length. [ 178.470216][ T9444] 8021q: adding VLAN 0 to HW filter on device bond10 [ 178.837080][ T9465] FAULT_INJECTION: forcing a failure. [ 178.837080][ T9465] name failslab, interval 1, probability 0, space 0, times 0 [ 178.881708][ T9470] tipc: Started in network mode [ 178.891429][ T9465] CPU: 1 UID: 0 PID: 9465 Comm: syz.2.1070 Not tainted syzkaller #0 PREEMPT(full) [ 178.891460][ T9465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 178.891473][ T9465] Call Trace: [ 178.891482][ T9465] [ 178.891491][ T9465] dump_stack_lvl+0x189/0x250 [ 178.891534][ T9465] ? __pfx____ratelimit+0x10/0x10 [ 178.891572][ T9465] ? __pfx_dump_stack_lvl+0x10/0x10 [ 178.891599][ T9465] ? __pfx__printk+0x10/0x10 [ 178.891633][ T9465] ? __pfx___might_resched+0x10/0x10 [ 178.891655][ T9465] ? fs_reclaim_acquire+0x7d/0x100 [ 178.891696][ T9465] should_fail_ex+0x414/0x560 [ 178.891731][ T9465] should_failslab+0xa8/0x100 [ 178.891766][ T9465] __kmalloc_noprof+0xcb/0x4f0 [ 178.891795][ T9465] ? tomoyo_encode+0x28b/0x550 [ 178.891822][ T9465] tomoyo_encode+0x28b/0x550 [ 178.891850][ T9465] tomoyo_realpath_from_path+0x58d/0x5d0 [ 178.891875][ T9465] ? tomoyo_domain+0xd9/0x130 [ 178.891904][ T9465] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 178.891935][ T9465] tomoyo_path_number_perm+0x1e8/0x5a0 [ 178.891969][ T9465] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 178.892021][ T9465] ? __lock_acquire+0xab9/0xd20 [ 178.892079][ T9465] ? __fget_files+0x2a/0x420 [ 178.892114][ T9465] ? __fget_files+0x2a/0x420 [ 178.892144][ T9465] ? __fget_files+0x3a0/0x420 [ 178.892176][ T9465] ? __fget_files+0x2a/0x420 [ 178.892214][ T9465] security_file_ioctl+0xcb/0x2d0 [ 178.892244][ T9465] __se_sys_ioctl+0x47/0x170 [ 178.892275][ T9465] do_syscall_64+0xfa/0x3b0 [ 178.892305][ T9465] ? lockdep_hardirqs_on+0x9c/0x150 [ 178.892333][ T9465] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.892355][ T9465] ? clear_bhb_loop+0x60/0xb0 [ 178.892381][ T9465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.892401][ T9465] RIP: 0033:0x7f884078ebe9 [ 178.892420][ T9465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.892438][ T9465] RSP: 002b:00007f8841624038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 178.892461][ T9465] RAX: ffffffffffffffda RBX: 00007f88409b5fa0 RCX: 00007f884078ebe9 [ 178.892476][ T9465] RDX: 0000200000000300 RSI: 000000000000890b RDI: 0000000000000004 [ 178.892489][ T9465] RBP: 00007f8841624090 R08: 0000000000000000 R09: 0000000000000000 [ 178.892502][ T9465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.892514][ T9465] R13: 00007f88409b6038 R14: 00007f88409b5fa0 R15: 00007ffe1ae92fb8 [ 178.892556][ T9465] [ 178.892578][ T9465] ERROR: Out of memory at tomoyo_realpath_from_path. [ 178.917561][ T9470] tipc: Node identity e65e14cd40db, cluster identity 4711 [ 179.167049][ T9470] tipc: Enabled bearer , priority 0 [ 179.205393][ T9473] syzkaller0: entered promiscuous mode [ 179.215368][ T9473] syzkaller0: entered allmulticast mode [ 179.307350][ T9467] 8021q: adding VLAN 0 to HW filter on device bond11 [ 179.347202][ T9473] tipc: Resetting bearer [ 179.359655][ T9468] tipc: Resetting bearer [ 179.385723][ T9468] tipc: Disabling bearer [ 179.475371][ T9496] netlink: 'syz.2.1078': attribute type 1 has an invalid length. [ 179.514990][ T9496] 8021q: adding VLAN 0 to HW filter on device bond6 [ 179.868130][ T9518] bond10: entered promiscuous mode [ 179.933106][ T9518] bond11: entered promiscuous mode [ 180.248653][ T9540] netlink: 'syz.4.1090': attribute type 10 has an invalid length. [ 180.262393][ T9534] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 180.308505][ T9534] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 180.379704][ T9544] netlink: 'syz.2.1091': attribute type 1 has an invalid length. [ 180.407248][ T9540] team0: Device hsr_slave_0 failed to register rx_handler [ 180.417809][ T9541] netlink: 'syz.4.1090': attribute type 30 has an invalid length. [ 180.563811][ T1003] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.582074][ T1003] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.589762][ T9536] delete_channel: no stack [ 180.702351][ T1003] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.741334][ T1003] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.783600][ T9558] FAULT_INJECTION: forcing a failure. [ 180.783600][ T9558] name failslab, interval 1, probability 0, space 0, times 0 [ 180.810377][ T9558] CPU: 0 UID: 0 PID: 9558 Comm: syz.2.1095 Not tainted syzkaller #0 PREEMPT(full) [ 180.810417][ T9558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 180.810436][ T9558] Call Trace: [ 180.810445][ T9558] [ 180.810454][ T9558] dump_stack_lvl+0x189/0x250 [ 180.810487][ T9558] ? __pfx____ratelimit+0x10/0x10 [ 180.810517][ T9558] ? __pfx_dump_stack_lvl+0x10/0x10 [ 180.810544][ T9558] ? __pfx__printk+0x10/0x10 [ 180.810582][ T9558] ? __pfx___might_resched+0x10/0x10 [ 180.810602][ T9558] ? fs_reclaim_acquire+0x7d/0x100 [ 180.810642][ T9558] should_fail_ex+0x414/0x560 [ 180.810677][ T9558] should_failslab+0xa8/0x100 [ 180.810711][ T9558] __kmalloc_noprof+0xcb/0x4f0 [ 180.810738][ T9558] ? kfree+0x4d/0x440 [ 180.810762][ T9558] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 180.810790][ T9558] tomoyo_realpath_from_path+0xe3/0x5d0 [ 180.810814][ T9558] ? tomoyo_domain+0xd9/0x130 [ 180.810844][ T9558] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 180.810874][ T9558] tomoyo_path_number_perm+0x1e8/0x5a0 [ 180.810909][ T9558] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 180.810960][ T9558] ? __lock_acquire+0xab9/0xd20 [ 180.811018][ T9558] ? __fget_files+0x2a/0x420 [ 180.811055][ T9558] ? __fget_files+0x2a/0x420 [ 180.811084][ T9558] ? __fget_files+0x3a0/0x420 [ 180.811114][ T9558] ? __fget_files+0x2a/0x420 [ 180.811149][ T9558] security_file_ioctl+0xcb/0x2d0 [ 180.811179][ T9558] __se_sys_ioctl+0x47/0x170 [ 180.811209][ T9558] do_syscall_64+0xfa/0x3b0 [ 180.811241][ T9558] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.811262][ T9558] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 180.811283][ T9558] ? clear_bhb_loop+0x60/0xb0 [ 180.811311][ T9558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.811332][ T9558] RIP: 0033:0x7f884078ebe9 [ 180.811368][ T9558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.811397][ T9558] RSP: 002b:00007f8841624038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 180.811420][ T9558] RAX: ffffffffffffffda RBX: 00007f88409b5fa0 RCX: 00007f884078ebe9 [ 180.811436][ T9558] RDX: 0000200000000300 RSI: 000000000000890b RDI: 0000000000000004 [ 180.811450][ T9558] RBP: 00007f8841624090 R08: 0000000000000000 R09: 0000000000000000 [ 180.811463][ T9558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.811475][ T9558] R13: 00007f88409b6038 R14: 00007f88409b5fa0 R15: 00007ffe1ae92fb8 [ 180.811512][ T9558] [ 180.812631][ T9558] ERROR: Out of memory at tomoyo_realpath_from_path. [ 181.215087][ T9576] macsec1: entered promiscuous mode [ 181.265624][ T9576] bond11: entered promiscuous mode [ 181.269083][ T9581] netlink: 'syz.2.1104': attribute type 1 has an invalid length. [ 181.287794][ T9581] __nla_validate_parse: 10 callbacks suppressed [ 181.287815][ T9581] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1104'. [ 181.306196][ T9576] vxlan0: entered promiscuous mode [ 181.322668][ T9584] netlink: 'syz.2.1104': attribute type 11 has an invalid length. [ 181.335189][ T9576] bond12: entered promiscuous mode [ 181.341427][ T9576] vlan2: entered promiscuous mode [ 181.384175][ T9578] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1104'. [ 181.412965][ T9589] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1100'. [ 181.431951][ T9578] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1104'. [ 181.698551][ T9598] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 181.969293][ T9611] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 182.189148][ T9619] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1117'. [ 182.530972][ T9636] tipc: Enabling of bearer rejected, failed to enable media [ 182.679379][ T9643] netlink: 'syz.0.1126': attribute type 1 has an invalid length. [ 182.680227][ T9641] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 182.707478][ T9641] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 182.828406][ T9643] 8021q: adding VLAN 0 to HW filter on device bond4 [ 182.921710][ T9646] bond4: (slave veth9): Enslaving as an active interface with a down link [ 182.930517][ T9650] veth0_to_bond: left promiscuous mode [ 182.941355][ T9653] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 182.952327][ T9650] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 182.966039][ T9653] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1129'. [ 183.063170][ T9654] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1130'. [ 183.148357][ T9654] 8021q: adding VLAN 0 to HW filter on device bond4 [ 183.185129][ T9667] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1133'. [ 183.501964][ T9683] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 183.595763][ T9689] netlink: 'syz.3.1143': attribute type 1 has an invalid length. [ 183.679085][ T9689] 8021q: adding VLAN 0 to HW filter on device bond10 [ 183.742615][ T9693] bond10: (slave veth15): Enslaving as an active interface with a down link [ 183.754756][ T9701] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1144'. [ 183.785434][ T9701] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1144'. [ 183.814228][ T9689] bond7: (slave veth0_to_bond): Releasing active interface [ 183.867567][ T9689] bond10: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 184.184530][ T9711] netlink: 'syz.3.1148': attribute type 30 has an invalid length. [ 184.213709][ T9716] vlan2: entered allmulticast mode [ 184.233119][ T9716] bridge0: entered allmulticast mode [ 184.363061][ T9710] delete_channel: no stack [ 184.447444][ T9728] FAULT_INJECTION: forcing a failure. [ 184.447444][ T9728] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 184.455194][ T9727] netlink: 'syz.2.1154': attribute type 5 has an invalid length. [ 184.490282][ T9728] CPU: 1 UID: 0 PID: 9728 Comm: syz.1.1153 Not tainted syzkaller #0 PREEMPT(full) [ 184.490313][ T9728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 184.490327][ T9728] Call Trace: [ 184.490335][ T9728] [ 184.490345][ T9728] dump_stack_lvl+0x189/0x250 [ 184.490377][ T9728] ? __pfx____ratelimit+0x10/0x10 [ 184.490406][ T9728] ? __pfx_dump_stack_lvl+0x10/0x10 [ 184.490454][ T9728] ? __pfx__printk+0x10/0x10 [ 184.490485][ T9728] ? __might_fault+0xb0/0x130 [ 184.490528][ T9728] should_fail_ex+0x414/0x560 [ 184.490563][ T9728] _copy_from_user+0x2d/0xb0 [ 184.490589][ T9728] nr_rt_ioctl+0x74f/0xd50 [ 184.490626][ T9728] ? kasan_quarantine_put+0xdd/0x220 [ 184.490654][ T9728] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 184.490692][ T9728] ? apparmor_capable+0x137/0x1b0 [ 184.490727][ T9728] ? capable+0x89/0xe0 [ 184.490750][ T9728] ? nr_ioctl+0x1b1/0x3b0 [ 184.490774][ T9728] sock_do_ioctl+0xd9/0x300 [ 184.490805][ T9728] ? __pfx_sock_do_ioctl+0x10/0x10 [ 184.490829][ T9728] ? __lock_acquire+0xab9/0xd20 [ 184.490880][ T9728] sock_ioctl+0x576/0x790 [ 184.490909][ T9728] ? __pfx_sock_ioctl+0x10/0x10 [ 184.490936][ T9728] ? __fget_files+0x2a/0x420 [ 184.490968][ T9728] ? __fget_files+0x3a0/0x420 [ 184.490999][ T9728] ? __fget_files+0x2a/0x420 [ 184.491036][ T9728] ? bpf_lsm_file_ioctl+0x9/0x20 [ 184.491064][ T9728] ? __pfx_sock_ioctl+0x10/0x10 [ 184.491090][ T9728] __se_sys_ioctl+0xfc/0x170 [ 184.491120][ T9728] do_syscall_64+0xfa/0x3b0 [ 184.491153][ T9728] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.491174][ T9728] ? asm_common_interrupt+0x26/0x40 [ 184.491194][ T9728] ? clear_bhb_loop+0x60/0xb0 [ 184.491221][ T9728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.491240][ T9728] RIP: 0033:0x7fe33598ebe9 [ 184.491266][ T9728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.491286][ T9728] RSP: 002b:00007fe33675c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 184.491309][ T9728] RAX: ffffffffffffffda RBX: 00007fe335bb5fa0 RCX: 00007fe33598ebe9 [ 184.491326][ T9728] RDX: 0000200000000300 RSI: 000000000000890b RDI: 0000000000000004 [ 184.491340][ T9728] RBP: 00007fe33675c090 R08: 0000000000000000 R09: 0000000000000000 [ 184.491353][ T9728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.491366][ T9728] R13: 00007fe335bb6038 R14: 00007fe335bb5fa0 R15: 00007ffc545d3378 [ 184.491401][ T9728] [ 184.814103][ T9736] delete_channel: no stack [ 184.963027][ T9743] netlink: 'syz.2.1159': attribute type 1 has an invalid length. [ 185.041301][ T9752] openvswitch: netlink: Message has -1 unknown bytes. [ 185.066360][ T9743] 8021q: adding VLAN 0 to HW filter on device bond8 [ 185.070127][ T9749] netlink: 'syz.3.1161': attribute type 1 has an invalid length. [ 185.191874][ T9753] bond8: (slave veth13): Enslaving as an active interface with a down link [ 185.280091][ T9743] bond4: (slave veth0_to_bond): Releasing active interface [ 185.296402][ T9743] veth0_to_bond: left promiscuous mode [ 185.314971][ T9743] bond8: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 185.343775][ T9749] 8021q: adding VLAN 0 to HW filter on device bond11 [ 185.458758][ T9770] FAULT_INJECTION: forcing a failure. [ 185.458758][ T9770] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 185.505890][ T9770] CPU: 0 UID: 0 PID: 9770 Comm: syz.2.1169 Not tainted syzkaller #0 PREEMPT(full) [ 185.505921][ T9770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 185.505935][ T9770] Call Trace: [ 185.505944][ T9770] [ 185.505954][ T9770] dump_stack_lvl+0x189/0x250 [ 185.505986][ T9770] ? __pfx____ratelimit+0x10/0x10 [ 185.506017][ T9770] ? __pfx_dump_stack_lvl+0x10/0x10 [ 185.506044][ T9770] ? __pfx__printk+0x10/0x10 [ 185.506090][ T9770] should_fail_ex+0x414/0x560 [ 185.506133][ T9770] _copy_to_user+0x31/0xb0 [ 185.506162][ T9770] simple_read_from_buffer+0xe1/0x170 [ 185.506200][ T9770] proc_fail_nth_read+0x1b3/0x220 [ 185.506230][ T9770] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 185.506260][ T9770] ? rw_verify_area+0x2a6/0x4d0 [ 185.506285][ T9770] ? __lock_acquire+0xab9/0xd20 [ 185.506316][ T9770] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 185.506343][ T9770] vfs_read+0x200/0xa30 [ 185.506370][ T9770] ? fdget_pos+0x247/0x320 [ 185.506395][ T9770] ? __pfx___mutex_lock+0x10/0x10 [ 185.506427][ T9770] ? __pfx_vfs_read+0x10/0x10 [ 185.506458][ T9770] ? __fget_files+0x2a/0x420 [ 185.506497][ T9770] ? __fget_files+0x3a0/0x420 [ 185.506528][ T9770] ? __fget_files+0x2a/0x420 [ 185.506576][ T9770] ksys_read+0x145/0x250 [ 185.506603][ T9770] ? __fget_files+0x3a0/0x420 [ 185.506636][ T9770] ? __pfx_ksys_read+0x10/0x10 [ 185.506671][ T9770] ? do_syscall_64+0xbe/0x3b0 [ 185.506707][ T9770] do_syscall_64+0xfa/0x3b0 [ 185.506736][ T9770] ? lockdep_hardirqs_on+0x9c/0x150 [ 185.506765][ T9770] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.506787][ T9770] ? clear_bhb_loop+0x60/0xb0 [ 185.506814][ T9770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.506835][ T9770] RIP: 0033:0x7f884078d5fc [ 185.506855][ T9770] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 185.506874][ T9770] RSP: 002b:00007f8841624030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 185.506897][ T9770] RAX: ffffffffffffffda RBX: 00007f88409b5fa0 RCX: 00007f884078d5fc [ 185.506913][ T9770] RDX: 000000000000000f RSI: 00007f88416240a0 RDI: 0000000000000003 [ 185.506926][ T9770] RBP: 00007f8841624090 R08: 0000000000000000 R09: 0000000000000000 [ 185.506939][ T9770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.506952][ T9770] R13: 00007f88409b6038 R14: 00007f88409b5fa0 R15: 00007ffe1ae92fb8 [ 185.506986][ T9770] [ 186.083050][ T9786] FAULT_INJECTION: forcing a failure. [ 186.083050][ T9786] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.096499][ T9786] CPU: 0 UID: 0 PID: 9786 Comm: syz.2.1174 Not tainted syzkaller #0 PREEMPT(full) [ 186.096529][ T9786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 186.096547][ T9786] Call Trace: [ 186.096555][ T9786] [ 186.096564][ T9786] dump_stack_lvl+0x189/0x250 [ 186.096596][ T9786] ? __pfx____ratelimit+0x10/0x10 [ 186.096626][ T9786] ? __pfx_dump_stack_lvl+0x10/0x10 [ 186.096652][ T9786] ? __pfx__printk+0x10/0x10 [ 186.096683][ T9786] ? __might_fault+0xb0/0x130 [ 186.096726][ T9786] should_fail_ex+0x414/0x560 [ 186.096760][ T9786] _copy_from_iter+0x1db/0x16f0 [ 186.096788][ T9786] ? rcu_is_watching+0x15/0xb0 [ 186.096811][ T9786] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 186.096843][ T9786] ? __pfx__copy_from_iter+0x10/0x10 [ 186.096866][ T9786] ? __build_skb_around+0x257/0x3e0 [ 186.096904][ T9786] ? skb_put+0x11b/0x210 [ 186.096940][ T9786] pfkey_sendmsg+0x230/0x1090 [ 186.096981][ T9786] ? __pfx___might_resched+0x10/0x10 [ 186.096999][ T9786] ? __lock_acquire+0xab9/0xd20 [ 186.097037][ T9786] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 186.097079][ T9786] ? aa_sk_perm+0x81e/0x950 [ 186.097117][ T9786] ? __pfx_aa_sk_perm+0x10/0x10 [ 186.097145][ T9786] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 186.097175][ T9786] ? aa_sock_msg_perm+0xf1/0x1d0 [ 186.097211][ T9786] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 186.097233][ T9786] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 186.097267][ T9786] __sock_sendmsg+0x21c/0x270 [ 186.097306][ T9786] ____sys_sendmsg+0x505/0x830 [ 186.097335][ T9786] ? __pfx_____sys_sendmsg+0x10/0x10 [ 186.097368][ T9786] ? import_iovec+0x74/0xa0 [ 186.097397][ T9786] ___sys_sendmsg+0x21f/0x2a0 [ 186.097420][ T9786] ? __pfx____sys_sendmsg+0x10/0x10 [ 186.097482][ T9786] ? __fget_files+0x2a/0x420 [ 186.097512][ T9786] ? __fget_files+0x3a0/0x420 [ 186.097556][ T9786] __x64_sys_sendmsg+0x19b/0x260 [ 186.097580][ T9786] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 186.097615][ T9786] ? __pfx_ksys_write+0x10/0x10 [ 186.097640][ T9786] ? rcu_is_watching+0x15/0xb0 [ 186.097667][ T9786] ? do_syscall_64+0xbe/0x3b0 [ 186.097699][ T9786] do_syscall_64+0xfa/0x3b0 [ 186.097723][ T9786] ? lockdep_hardirqs_on+0x9c/0x150 [ 186.097747][ T9786] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.097765][ T9786] ? clear_bhb_loop+0x60/0xb0 [ 186.097786][ T9786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.097803][ T9786] RIP: 0033:0x7f884078ebe9 [ 186.097819][ T9786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.097835][ T9786] RSP: 002b:00007f8841624038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 186.097854][ T9786] RAX: ffffffffffffffda RBX: 00007f88409b5fa0 RCX: 00007f884078ebe9 [ 186.097867][ T9786] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 186.097878][ T9786] RBP: 00007f8841624090 R08: 0000000000000000 R09: 0000000000000000 [ 186.097889][ T9786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.097899][ T9786] R13: 00007f88409b6038 R14: 00007f88409b5fa0 R15: 00007ffe1ae92fb8 [ 186.097927][ T9786] [ 186.821524][ T9796] openvswitch: netlink: Key type 29 is not supported [ 186.995577][ T9808] __nla_validate_parse: 8 callbacks suppressed [ 186.995599][ T9808] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1180'. [ 187.209564][ T9818] veth0_to_bond: entered promiscuous mode [ 187.220287][ T9818] macvlan0: entered promiscuous mode [ 187.248832][ T9818] bond5: entered promiscuous mode [ 187.269716][ T9824] netlink: 'syz.3.1188': attribute type 1 has an invalid length. [ 187.283221][ T9818] bond6: entered promiscuous mode [ 187.308017][ T9818] bond7: entered promiscuous mode [ 187.322257][ T9818] bridge0: entered promiscuous mode [ 187.344084][ T9818] bond8: entered promiscuous mode [ 187.361440][ T9818] veth12: entered promiscuous mode [ 187.379802][ T9818] veth13: entered promiscuous mode [ 187.506181][ T9824] 8021q: adding VLAN 0 to HW filter on device bond12 [ 187.530046][ T9837] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1194'. [ 187.586257][ T9828] bond12: (slave veth17): Enslaving as an active interface with a down link [ 187.610850][ T9832] bond10: (slave veth0_to_bond): Releasing active interface [ 187.633311][ T9832] bond12: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 187.645041][ T9835] FAULT_INJECTION: forcing a failure. [ 187.645041][ T9835] name failslab, interval 1, probability 0, space 0, times 0 [ 187.678500][ T9841] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.685816][ T9835] CPU: 0 UID: 0 PID: 9835 Comm: syz.1.1192 Not tainted syzkaller #0 PREEMPT(full) [ 187.685847][ T9835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 187.685860][ T9835] Call Trace: [ 187.685869][ T9835] [ 187.685879][ T9835] dump_stack_lvl+0x189/0x250 [ 187.685911][ T9835] ? __pfx____ratelimit+0x10/0x10 [ 187.685942][ T9835] ? __pfx_dump_stack_lvl+0x10/0x10 [ 187.685969][ T9835] ? __pfx__printk+0x10/0x10 [ 187.686013][ T9835] ? __pfx___might_resched+0x10/0x10 [ 187.686040][ T9835] should_fail_ex+0x414/0x560 [ 187.686075][ T9835] should_failslab+0xa8/0x100 [ 187.686108][ T9835] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 187.686140][ T9835] ? __alloc_skb+0x112/0x2d0 [ 187.686170][ T9835] ? __pfx_netlink_unicast+0x10/0x10 [ 187.686201][ T9835] __alloc_skb+0x112/0x2d0 [ 187.686235][ T9835] netlink_sendmsg+0x5c6/0xb30 [ 187.686277][ T9835] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.686313][ T9835] ? aa_sock_msg_perm+0xf1/0x1d0 [ 187.686347][ T9835] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 187.686370][ T9835] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.686403][ T9835] __sock_sendmsg+0x21c/0x270 [ 187.686435][ T9835] ____sys_sendmsg+0x52d/0x830 [ 187.686463][ T9835] ? __pfx_____sys_sendmsg+0x10/0x10 [ 187.686496][ T9835] ? import_iovec+0x74/0xa0 [ 187.686525][ T9835] ___sys_sendmsg+0x21f/0x2a0 [ 187.686553][ T9835] ? __pfx____sys_sendmsg+0x10/0x10 [ 187.686626][ T9835] ? __might_fault+0xb0/0x130 [ 187.686662][ T9835] __sys_sendmmsg+0x227/0x430 [ 187.686691][ T9835] ? __pfx___sys_sendmmsg+0x10/0x10 [ 187.686710][ T9835] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 187.686772][ T9835] ? ksys_write+0x22a/0x250 [ 187.686799][ T9835] ? __pfx_ksys_write+0x10/0x10 [ 187.686820][ T9835] ? rcu_is_watching+0x15/0xb0 [ 187.686844][ T9835] __x64_sys_sendmmsg+0xa0/0xc0 [ 187.686863][ T9835] do_syscall_64+0xfa/0x3b0 [ 187.686889][ T9835] ? lockdep_hardirqs_on+0x9c/0x150 [ 187.686913][ T9835] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.686930][ T9835] ? clear_bhb_loop+0x60/0xb0 [ 187.686953][ T9835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.686970][ T9835] RIP: 0033:0x7fe33598ebe9 [ 187.686992][ T9835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.687008][ T9835] RSP: 002b:00007fe33675c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 187.687026][ T9835] RAX: ffffffffffffffda RBX: 00007fe335bb5fa0 RCX: 00007fe33598ebe9 [ 187.687040][ T9835] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 187.687052][ T9835] RBP: 00007fe33675c090 R08: 0000000000000000 R09: 0000000000000000 [ 187.687063][ T9835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.687074][ T9835] R13: 00007fe335bb6038 R14: 00007fe335bb5fa0 R15: 00007ffc545d3378 [ 187.687102][ T9835] [ 188.030305][ T9841] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.087486][ T9849] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1196'. [ 188.145856][ T9851] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1197'. [ 188.187400][ T9853] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1198'. [ 188.298409][ T9855] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1200'. [ 188.653408][ T9869] netlink: 'syz.2.1205': attribute type 1 has an invalid length. [ 188.918738][ T9869] 8021q: adding VLAN 0 to HW filter on device bond9 [ 189.258934][ T9873] bond9: (slave veth15): Enslaving as an active interface with a down link [ 189.269122][ T9878] veth0_to_bond: left promiscuous mode [ 189.355095][ T9878] bond8: (slave veth0_to_bond): Releasing active interface [ 189.415829][ T9878] bond9: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 189.495313][ T9892] netlink: 'syz.0.1212': attribute type 10 has an invalid length. [ 189.964913][ T9912] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 189.973831][ T9912] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 190.154233][ T9923] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1223'. [ 190.170715][ T9926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1224'. [ 190.189511][ T9925] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1222'. [ 190.198293][ T9926] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1224'. [ 190.245258][ T9928] netlink: 'syz.0.1225': attribute type 4 has an invalid length. [ 190.524268][ T9946] nbd: socks must be embedded in a SOCK_ITEM attr [ 190.618239][ T9947] lo speed is unknown, defaulting to 1000 [ 190.791474][ T9959] veth0_to_bond: entered promiscuous mode [ 190.820945][ T9959] team_slave_0: left allmulticast mode [ 190.836273][ T9959] bond7: entered promiscuous mode [ 190.852995][ T9959] veth10: entered promiscuous mode [ 190.859804][ T9959] veth11: entered promiscuous mode [ 190.871162][ T9959] bond8: entered promiscuous mode [ 190.892079][ T9959] ip6gre1: entered promiscuous mode [ 190.907549][ T9959] ip6gre1: left allmulticast mode [ 190.926193][ T9959] vlan0.0: entered promiscuous mode [ 190.951481][ T9959] bond9: entered promiscuous mode [ 190.967604][ T9959] veth12: entered promiscuous mode [ 190.973119][ T9959] veth13: entered promiscuous mode [ 190.990257][ T9959] bond10: entered promiscuous mode [ 190.996525][ T9959] veth14: entered promiscuous mode [ 191.003912][ T9959] veth15: entered promiscuous mode [ 191.015783][ T9959] bond11: entered promiscuous mode [ 191.024399][ T9959] bond12: entered promiscuous mode [ 191.030730][ T9959] veth16: entered promiscuous mode [ 191.042740][ T9959] veth17: entered promiscuous mode [ 191.051420][ T9959] veth18: entered promiscuous mode [ 191.063730][ T9959] veth19: entered promiscuous mode [ 191.337581][ T9986] netlink: 'syz.2.1242': attribute type 17 has an invalid length. [ 191.489945][ T9991] netlink: 'syz.1.1243': attribute type 30 has an invalid length. [ 191.530822][ T9999] netlink: 'syz.4.1246': attribute type 1 has an invalid length. [ 191.625829][ T9987] delete_channel: no stack [ 191.650617][ T9999] 8021q: adding VLAN 0 to HW filter on device bond12 [ 191.804264][T10003] bond12: (slave veth11): Enslaving as an active interface with a down link [ 191.819973][T10009] bond5: (slave veth0_to_bond): Releasing active interface [ 191.832462][T10009] veth0_to_bond: left promiscuous mode [ 191.857183][T10009] bond12: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 192.063773][T10028] FAULT_INJECTION: forcing a failure. [ 192.063773][T10028] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.106680][T10028] CPU: 1 UID: 0 PID: 10028 Comm: syz.3.1254 Not tainted syzkaller #0 PREEMPT(full) [ 192.106712][T10028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 192.106726][T10028] Call Trace: [ 192.106734][T10028] [ 192.106744][T10028] dump_stack_lvl+0x189/0x250 [ 192.106777][T10028] ? __pfx____ratelimit+0x10/0x10 [ 192.106807][T10028] ? __pfx_dump_stack_lvl+0x10/0x10 [ 192.106833][T10028] ? __pfx__printk+0x10/0x10 [ 192.106879][T10028] should_fail_ex+0x414/0x560 [ 192.106914][T10028] _copy_to_user+0x31/0xb0 [ 192.106942][T10028] simple_read_from_buffer+0xe1/0x170 [ 192.106980][T10028] proc_fail_nth_read+0x1b3/0x220 [ 192.107008][T10028] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 192.107045][T10028] ? rw_verify_area+0x2a6/0x4d0 [ 192.107071][T10028] ? __lock_acquire+0xab9/0xd20 [ 192.107101][T10028] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 192.107128][T10028] vfs_read+0x200/0xa30 [ 192.107155][T10028] ? fdget_pos+0x247/0x320 [ 192.107180][T10028] ? __pfx___mutex_lock+0x10/0x10 [ 192.107212][T10028] ? __pfx_vfs_read+0x10/0x10 [ 192.107242][T10028] ? __fget_files+0x2a/0x420 [ 192.107279][T10028] ? __fget_files+0x3a0/0x420 [ 192.107310][T10028] ? __fget_files+0x2a/0x420 [ 192.107354][T10028] ksys_read+0x145/0x250 [ 192.107386][T10028] ? __pfx_ksys_read+0x10/0x10 [ 192.107411][T10028] ? rcu_is_watching+0x15/0xb0 [ 192.107440][T10028] ? do_syscall_64+0xbe/0x3b0 [ 192.107476][T10028] do_syscall_64+0xfa/0x3b0 [ 192.107506][T10028] ? lockdep_hardirqs_on+0x9c/0x150 [ 192.107535][T10028] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.107557][T10028] ? clear_bhb_loop+0x60/0xb0 [ 192.107584][T10028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.107605][T10028] RIP: 0033:0x7f074cb8d5fc [ 192.107626][T10028] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 192.107644][T10028] RSP: 002b:00007f074dad4030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 192.107666][T10028] RAX: ffffffffffffffda RBX: 00007f074cdb5fa0 RCX: 00007f074cb8d5fc [ 192.107682][T10028] RDX: 000000000000000f RSI: 00007f074dad40a0 RDI: 0000000000000004 [ 192.107696][T10028] RBP: 00007f074dad4090 R08: 0000000000000000 R09: 0000000000000000 [ 192.107709][T10028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.107722][T10028] R13: 00007f074cdb6038 R14: 00007f074cdb5fa0 R15: 00007ffeddd0a118 [ 192.107759][T10028] [ 192.403482][T10039] __nla_validate_parse: 10 callbacks suppressed [ 192.403503][T10039] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1258'. [ 192.736786][T10058] netlink: 'syz.3.1264': attribute type 1 has an invalid length. [ 192.745268][T10056] veth0_to_bond: entered promiscuous mode [ 192.769276][T10056] bond9: entered promiscuous mode [ 192.776043][T10056] veth14: entered promiscuous mode [ 192.790657][T10056] veth15: entered promiscuous mode [ 192.807858][T10056] nicvf0: entered promiscuous mode [ 192.891572][T10058] 8021q: adding VLAN 0 to HW filter on device bond13 [ 192.967441][T10061] bond13: (slave veth21): Enslaving as an active interface with a down link [ 192.985411][T10065] veth0_to_bond: left promiscuous mode [ 192.999923][T10065] bond12: (slave veth0_to_bond): Releasing active interface [ 193.018325][T10065] bond13: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 193.085315][T10077] tipc: Started in network mode [ 193.096205][T10076] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 193.102645][T10077] tipc: Node identity e2bc9101ea4a, cluster identity 4711 [ 193.121332][T10077] tipc: Enabled bearer , priority 0 [ 193.211033][T10067] syzkaller0: entered promiscuous mode [ 193.218191][T10067] syzkaller0: entered allmulticast mode [ 193.276101][T10086] 8021q: adding VLAN 0 to HW filter on device ipvlan1 [ 193.297008][T10086] bond0: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 193.331990][T10066] tipc: Resetting bearer [ 193.364677][T10066] tipc: Disabling bearer [ 193.438308][T10088] syzkaller1: entered promiscuous mode [ 193.443937][T10088] syzkaller1: entered allmulticast mode [ 193.486983][T10099] netlink: 288 bytes leftover after parsing attributes in process `syz.2.1277'. [ 193.761829][T10114] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1282'. [ 193.806145][T10116] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 193.832415][T10118] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1283'. [ 194.026114][T10127] netlink: 'syz.0.1287': attribute type 10 has an invalid length. [ 194.053446][T10126] 8021q: adding VLAN 0 to HW filter on device ipvlan1 [ 194.068706][T10126] bond0: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 194.315435][T10141] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1292'. [ 194.324944][T10141] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1292'. [ 194.334941][T10141] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1292'. [ 194.499145][T10147] sock: sock_set_timeout: `syz.2.1295' (pid 10147) tries to set negative timeout [ 194.525144][T10149] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1296'. [ 194.693508][T10158] FAULT_INJECTION: forcing a failure. [ 194.693508][T10158] name failslab, interval 1, probability 0, space 0, times 0 [ 194.715686][T10158] CPU: 0 UID: 0 PID: 10158 Comm: syz.2.1299 Not tainted syzkaller #0 PREEMPT(full) [ 194.715758][T10158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 194.715773][T10158] Call Trace: [ 194.715782][T10158] [ 194.715792][T10158] dump_stack_lvl+0x189/0x250 [ 194.715824][T10158] ? __pfx____ratelimit+0x10/0x10 [ 194.715855][T10158] ? __pfx_dump_stack_lvl+0x10/0x10 [ 194.715881][T10158] ? __pfx__printk+0x10/0x10 [ 194.715916][T10158] ? __pfx___might_resched+0x10/0x10 [ 194.715937][T10158] ? fs_reclaim_acquire+0x7d/0x100 [ 194.715977][T10158] should_fail_ex+0x414/0x560 [ 194.716013][T10158] should_failslab+0xa8/0x100 [ 194.716047][T10158] __kmalloc_noprof+0xcb/0x4f0 [ 194.716075][T10158] ? tomoyo_encode+0x28b/0x550 [ 194.716102][T10158] tomoyo_encode+0x28b/0x550 [ 194.716131][T10158] tomoyo_realpath_from_path+0x58d/0x5d0 [ 194.716156][T10158] ? tomoyo_domain+0xd9/0x130 [ 194.716185][T10158] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 194.716215][T10158] tomoyo_path_number_perm+0x1e8/0x5a0 [ 194.716249][T10158] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 194.716301][T10158] ? __lock_acquire+0xab9/0xd20 [ 194.716359][T10158] ? __fget_files+0x2a/0x420 [ 194.716395][T10158] ? __fget_files+0x2a/0x420 [ 194.716426][T10158] ? __fget_files+0x3a0/0x420 [ 194.716457][T10158] ? __fget_files+0x2a/0x420 [ 194.716505][T10158] security_file_ioctl+0xcb/0x2d0 [ 194.716541][T10158] __se_sys_ioctl+0x47/0x170 [ 194.716570][T10158] do_syscall_64+0xfa/0x3b0 [ 194.716600][T10158] ? lockdep_hardirqs_on+0x9c/0x150 [ 194.716629][T10158] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.716650][T10158] ? clear_bhb_loop+0x60/0xb0 [ 194.716677][T10158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.716698][T10158] RIP: 0033:0x7f884078ebe9 [ 194.716718][T10158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.716737][T10158] RSP: 002b:00007f8841624038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 194.716761][T10158] RAX: ffffffffffffffda RBX: 00007f88409b5fa0 RCX: 00007f884078ebe9 [ 194.716777][T10158] RDX: 0000200000000300 RSI: 000000000000890b RDI: 0000000000000004 [ 194.716791][T10158] RBP: 00007f8841624090 R08: 0000000000000000 R09: 0000000000000000 [ 194.716804][T10158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.716817][T10158] R13: 00007f88409b6038 R14: 00007f88409b5fa0 R15: 00007ffe1ae92fb8 [ 194.716853][T10158] [ 194.991103][T10164] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1303'. [ 195.000292][T10164] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1303'. [ 195.010763][T10164] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (3) [ 195.078362][T10158] ERROR: Out of memory at tomoyo_realpath_from_path. [ 195.216663][T10173] netlink: 'syz.1.1308': attribute type 1 has an invalid length. [ 195.330536][T10173] 8021q: adding VLAN 0 to HW filter on device bond13 [ 195.652325][T10206] netlink: 'syz.4.1316': attribute type 16 has an invalid length. [ 195.660026][T10205] lo: left promiscuous mode [ 195.671500][T10205] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 195.703243][T10206] netlink: 'syz.4.1316': attribute type 17 has an invalid length. [ 195.711833][T10206] lo: left promiscuous mode [ 195.719720][T10206] tunl0: left promiscuous mode [ 195.728978][T10206] gre0: left promiscuous mode [ 195.743415][T10206] 0ªî{X¹¦: left promiscuous mode [ 195.752627][T10206] erspan0: left promiscuous mode [ 195.763282][T10206] ip_vti0: left promiscuous mode [ 195.770619][T10206] ip6_vti0: left promiscuous mode [ 195.780438][T10206] sit0: left promiscuous mode [ 195.793023][T10206] ip6tnl0: left promiscuous mode [ 195.801024][T10206] ip6gre0: left promiscuous mode [ 195.812211][T10206] syz_tun: left promiscuous mode [ 195.824524][T10206] ip6gretap0: left promiscuous mode [ 195.832517][T10206] vcan0: left promiscuous mode [ 195.839783][T10206] bond0: left promiscuous mode [ 195.846861][T10206] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.854793][T10206] team0: left promiscuous mode [ 195.867563][T10206] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.883849][T10206] nlmon0: left promiscuous mode [ 195.891790][T10206] caif0: left promiscuous mode [ 195.899618][T10206] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 196.062616][T10231] netlink: 'syz.4.1322': attribute type 1 has an invalid length. [ 196.128277][T10230] IPVS: length: 180 != 1031688 [ 196.143234][T10231] 8021q: adding VLAN 0 to HW filter on device bond13 [ 196.966389][T10287] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 196.978898][T10287] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 197.059844][T10293] netlink: 'syz.3.1342': attribute type 1 has an invalid length. [ 197.151822][T10293] 8021q: adding VLAN 0 to HW filter on device bond14 [ 197.275225][T10300] bond14: (slave veth23): Enslaving as an active interface with a down link [ 197.291956][T10293] bond13: (slave veth0_to_bond): Releasing active interface [ 197.311825][T10293] bond14: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 197.362271][T10302] 8021q: adding VLAN 0 to HW filter on device bond5 [ 197.600528][T10322] __nla_validate_parse: 15 callbacks suppressed [ 197.600561][T10322] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1352'. [ 197.701026][T10322] netlink: 'syz.1.1352': attribute type 3 has an invalid length. [ 197.777187][T10327] netlink: 'syz.3.1353': attribute type 3 has an invalid length. [ 197.827636][T10327] netlink: 'syz.3.1353': attribute type 1 has an invalid length. [ 197.849563][T10327] netlink: 'syz.3.1353': attribute type 1 has an invalid length. [ 197.850149][T10337] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 197.866678][T10327] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1353'. [ 197.914102][T10340] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1360'. [ 197.939267][T10341] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 198.139942][T10356] FAULT_INJECTION: forcing a failure. [ 198.139942][T10356] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 198.174752][T10356] CPU: 1 UID: 0 PID: 10356 Comm: syz.1.1365 Not tainted syzkaller #0 PREEMPT(full) [ 198.174784][T10356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 198.174798][T10356] Call Trace: [ 198.174807][T10356] [ 198.174817][T10356] dump_stack_lvl+0x189/0x250 [ 198.174849][T10356] ? __pfx____ratelimit+0x10/0x10 [ 198.174879][T10356] ? __pfx_dump_stack_lvl+0x10/0x10 [ 198.174906][T10356] ? __pfx__printk+0x10/0x10 [ 198.174938][T10356] ? __might_fault+0xb0/0x130 [ 198.174982][T10356] should_fail_ex+0x414/0x560 [ 198.175017][T10356] _copy_from_user+0x2d/0xb0 [ 198.175044][T10356] kstrtouint_from_user+0xc4/0x170 [ 198.175082][T10356] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 198.175158][T10356] proc_fail_nth_write+0x88/0x200 [ 198.175184][T10356] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 198.175217][T10356] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 198.175244][T10356] vfs_write+0x27b/0xb30 [ 198.175285][T10356] ? __pfx_vfs_write+0x10/0x10 [ 198.175316][T10356] ? __fget_files+0x2a/0x420 [ 198.175354][T10356] ? __fget_files+0x3a0/0x420 [ 198.175386][T10356] ? __fget_files+0x2a/0x420 [ 198.175431][T10356] ksys_write+0x145/0x250 [ 198.175458][T10356] ? __fget_files+0x3a0/0x420 [ 198.175492][T10356] ? __pfx_ksys_write+0x10/0x10 [ 198.175528][T10356] ? do_syscall_64+0xbe/0x3b0 [ 198.175570][T10356] do_syscall_64+0xfa/0x3b0 [ 198.175600][T10356] ? lockdep_hardirqs_on+0x9c/0x150 [ 198.175629][T10356] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.175651][T10356] ? clear_bhb_loop+0x60/0xb0 [ 198.175678][T10356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.175699][T10356] RIP: 0033:0x7fe33598d69f [ 198.175719][T10356] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 198.175738][T10356] RSP: 002b:00007fe33675c030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 198.175761][T10356] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe33598d69f [ 198.175776][T10356] RDX: 0000000000000001 RSI: 00007fe33675c0a0 RDI: 0000000000000003 [ 198.175789][T10356] RBP: 00007fe33675c090 R08: 0000000000000000 R09: 0000000000000000 [ 198.175803][T10356] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 198.175815][T10356] R13: 00007fe335bb6038 R14: 00007fe335bb5fa0 R15: 00007ffc545d3378 [ 198.175852][T10356] [ 198.584351][T10362] 8021q: adding VLAN 0 to HW filter on device bond5 [ 198.642196][T10357] delete_channel: no stack [ 198.731020][T10377] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1374'. [ 198.766113][T10382] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1372'. [ 198.856234][T10386] bond9: (slave veth0_to_bond): Releasing active interface [ 198.881231][T10386] bond0: (slave bond_slave_0): Releasing backup interface [ 198.903934][T10386] bond0: (slave bond_slave_1): Releasing backup interface [ 198.925649][T10386] team0: Port device team_slave_0 removed [ 198.939315][T10386] team0: Port device team_slave_1 removed [ 198.945724][T10386] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.956135][T10386] bond2: (slave gretap1): Releasing active interface [ 198.968315][T10386] bond4: (slave veth11): Releasing active interface [ 198.979509][T10386] bond8: (slave veth13): Releasing active interface [ 198.990551][T10386] bond9: (slave veth15): Releasing active interface [ 199.031789][T10397] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1378'. [ 199.033108][T10390] team0: Mode changed to "broadcast" [ 199.058376][T10397] 8021q: adding VLAN 0 to HW filter on device bond14 [ 199.321690][T10410] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1381'. [ 199.365130][T10410] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1381'. [ 199.425688][T10421] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1383'. [ 199.506689][T10421] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1383'. [ 199.517550][T10414] lo speed is unknown, defaulting to 1000 [ 199.573247][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.741150][T10429] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 199.776774][T10429] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 199.831999][T10434] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 199.911723][T10439] validate_nla: 3 callbacks suppressed [ 199.911750][T10439] netlink: 'syz.1.1387': attribute type 1 has an invalid length. [ 200.131135][T10454] netlink: 'syz.1.1391': attribute type 1 has an invalid length. [ 200.228840][T10454] 8021q: adding VLAN 0 to HW filter on device bond15 [ 200.284568][T10457] bond14: entered allmulticast mode [ 200.292021][T10457] 8021q: adding VLAN 0 to HW filter on device bond14 [ 200.300383][T10457] bridge0: port 1(bond14) entered blocking state [ 200.310453][T10457] bridge0: port 1(bond14) entered disabled state [ 200.322046][T10457] bond14: entered promiscuous mode [ 201.086023][T10485] netlink: 'syz.0.1400': attribute type 4 has an invalid length. [ 201.608453][T10495] syzkaller0: entered promiscuous mode [ 201.614211][T10495] syzkaller0: entered allmulticast mode [ 202.867004][T10542] __nla_validate_parse: 9 callbacks suppressed [ 202.867027][T10542] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1414'. [ 203.384373][T10545] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1415'. [ 203.400340][T10547] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1415'. [ 203.523684][T10553] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1418'. [ 203.623350][T10559] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1419'. [ 203.774319][T10559] vlan0: entered allmulticast mode [ 203.779661][T10559] bridge0: entered allmulticast mode [ 203.797106][T10559] bridge1: port 1(vlan0) entered blocking state [ 203.803989][T10559] bridge1: port 1(vlan0) entered disabled state [ 203.833278][T10559] vlan0: entered promiscuous mode [ 204.099464][T10589] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1430'. [ 204.102584][T10591] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1430'. [ 204.113047][T10592] netlink: 'syz.0.1429': attribute type 1 has an invalid length. [ 204.165863][T10592] 8021q: adding VLAN 0 to HW filter on device bond6 [ 204.229027][T10586] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1429'. [ 204.285626][T10598] netlink: 'syz.3.1431': attribute type 1 has an invalid length. [ 204.330986][T10598] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1431'. [ 204.346699][T10598] 8021q: adding VLAN 0 to HW filter on device bond15 [ 204.587231][T10610] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1436'. [ 204.730242][T10620] syz.3.1441: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 204.757050][T10620] CPU: 0 UID: 0 PID: 10620 Comm: syz.3.1441 Not tainted syzkaller #0 PREEMPT(full) [ 204.757081][T10620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 204.757095][T10620] Call Trace: [ 204.757103][T10620] [ 204.757113][T10620] dump_stack_lvl+0x189/0x250 [ 204.757149][T10620] ? __pfx_dump_stack_lvl+0x10/0x10 [ 204.757185][T10620] ? __pfx__printk+0x10/0x10 [ 204.757216][T10620] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 204.757242][T10620] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 204.757269][T10620] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 204.757295][T10620] warn_alloc+0x214/0x310 [ 204.757325][T10620] ? stack_depot_save_flags+0x40/0x860 [ 204.757357][T10620] ? __pfx_warn_alloc+0x10/0x10 [ 204.757393][T10620] ? kasan_save_track+0x4f/0x80 [ 204.757421][T10620] ? xskq_create+0x56/0x170 [ 204.757447][T10620] ? xsk_init_queue+0xb0/0x110 [ 204.757471][T10620] ? xsk_setsockopt+0x4dc/0x8d0 [ 204.757495][T10620] ? do_sock_setsockopt+0x17c/0x1b0 [ 204.757528][T10620] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 204.757547][T10620] ? do_syscall_64+0xfa/0x3b0 [ 204.757576][T10620] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.757608][T10620] __vmalloc_node_range_noprof+0x125/0x12f0 [ 204.757673][T10620] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 204.757707][T10620] ? xskq_create+0x56/0x170 [ 204.757736][T10620] ? __kasan_kmalloc+0x93/0xb0 [ 204.757770][T10620] vmalloc_user_noprof+0xad/0xf0 [ 204.757800][T10620] ? xskq_create+0xbf/0x170 [ 204.757830][T10620] xskq_create+0xbf/0x170 [ 204.757862][T10620] xsk_init_queue+0xb0/0x110 [ 204.757894][T10620] xsk_setsockopt+0x4dc/0x8d0 [ 204.757923][T10620] ? __pfx_xsk_setsockopt+0x10/0x10 [ 204.757950][T10620] ? __pfx_aa_sk_perm+0x10/0x10 [ 204.757986][T10620] ? aa_sock_opt_perm+0xff/0x1b0 [ 204.758010][T10620] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 204.758050][T10620] ? __pfx_xsk_setsockopt+0x10/0x10 [ 204.758080][T10620] do_sock_setsockopt+0x17c/0x1b0 [ 204.758120][T10620] __x64_sys_setsockopt+0x13f/0x1b0 [ 204.758148][T10620] do_syscall_64+0xfa/0x3b0 [ 204.758185][T10620] ? lockdep_hardirqs_on+0x9c/0x150 [ 204.758215][T10620] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.758239][T10620] ? clear_bhb_loop+0x60/0xb0 [ 204.758266][T10620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.758287][T10620] RIP: 0033:0x7f074cb8ebe9 [ 204.758307][T10620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.758325][T10620] RSP: 002b:00007f074dad4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 204.758348][T10620] RAX: ffffffffffffffda RBX: 00007f074cdb5fa0 RCX: 00007f074cb8ebe9 [ 204.758364][T10620] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 204.758377][T10620] RBP: 00007f074cc11e19 R08: 0000000000000004 R09: 0000000000000000 [ 204.758391][T10620] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 204.758404][T10620] R13: 00007f074cdb6038 R14: 00007f074cdb5fa0 R15: 00007ffeddd0a118 [ 204.758440][T10620] [ 204.758842][T10620] Mem-Info: [ 205.070108][T10620] active_anon:3613 inactive_anon:0 isolated_anon:0 [ 205.070108][T10620] active_file:3558 inactive_file:39873 isolated_file:0 [ 205.070108][T10620] unevictable:768 dirty:228 writeback:0 [ 205.070108][T10620] slab_reclaimable:12278 slab_unreclaimable:111836 [ 205.070108][T10620] mapped:29353 shmem:1358 pagetables:988 [ 205.070108][T10620] sec_pagetables:0 bounce:0 [ 205.070108][T10620] kernel_misc_reclaimable:0 [ 205.070108][T10620] free:1311595 free_pcp:12374 free_cma:0 [ 205.163323][T10620] Node 0 active_anon:14320kB inactive_anon:0kB active_file:14232kB inactive_file:159292kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117356kB dirty:916kB writeback:0kB shmem:3892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14120kB pagetables:3696kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 205.264945][T10639] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 205.269390][T10620] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 205.379486][T10620] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 205.473323][T10620] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 205.488122][T10620] Node 0 DMA32 free:1344160kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17672kB inactive_anon:0kB active_file:14232kB inactive_file:157724kB unevictable:1536kB writepending:916kB present:3129332kB managed:2557476kB mlocked:0kB bounce:0kB free_pcp:26080kB local_pcp:13412kB free_cma:0kB [ 205.603756][T10620] lowmem_reserve[]: 0 0 1 1 1 [ 205.666096][T10620] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1568kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 205.744523][T10654] bond13: entered promiscuous mode [ 205.767203][T10654] macsec2: entered promiscuous mode [ 205.786306][T10654] bond14: entered promiscuous mode [ 205.812824][T10620] lowmem_reserve[]: 0 0 0 0 0 [ 205.821130][T10654] bond15: entered promiscuous mode [ 205.838347][T10654] mac80211_hwsim hwsim15 wlan2: entered promiscuous mode [ 205.848301][T10620] Node 1 Normal free:3886848kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20840kB local_pcp:8352kB free_cma:0kB [ 205.886890][T10654] batadv0.5: entered promiscuous mode [ 205.903900][T10654] bridge1: entered promiscuous mode [ 206.020773][T10620] lowmem_reserve[]: 0 0 0 0 0 [ 206.046824][T10620] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 206.081334][T10620] Node 0 DMA32: 1*4kB (E) 224*8kB (UM) 262*16kB (UM) 467*32kB (UME) 99*64kB (UME) 57*128kB (UM) 15*256kB (UME) 16*512kB (UM) 9*1024kB (UME) 2*2048kB (UE) 312*4096kB (UM) = 1337860kB [ 206.126616][T10620] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 206.155454][T10620] Node 1 Normal: 194*4kB (UME) 61*8kB (UME) 47*16kB (UME) 59*32kB (UME) 31*64kB (UME) 10*128kB (UME) 5*256kB (UME) 5*512kB (UME) 1*1024kB (M) 2*2048kB (UE) 945*4096kB (M) = 3886848kB [ 206.181739][T10620] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 206.191708][T10620] Node 0 hugepages_total=3 hugepages_free=0 hugepages_surp=1 hugepages_size=2048kB [ 206.236653][T10620] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 206.256696][T10620] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 206.266058][T10620] 46827 total pagecache pages [ 206.305252][T10620] 0 pages in swap cache [ 206.316629][T10620] Free swap = 124996kB [ 206.321280][T10620] Total swap = 124996kB [ 206.325473][T10620] 2097051 pages RAM [ 206.332150][T10678] netlink: 'syz.2.1460': attribute type 1 has an invalid length. [ 206.342743][T10620] 0 pages HighMem/MovableOnly [ 206.357395][T10620] 425656 pages reserved [ 206.366851][T10620] 0 pages cma reserved [ 206.415479][T10678] 8021q: adding VLAN 0 to HW filter on device bond10 [ 206.448086][T10680] bond10: (slave veth19): Enslaving as an active interface with a down link [ 206.468685][T10678] veth0_to_bond: left promiscuous mode [ 206.478067][T10678] bond10: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 207.522780][T10691] lo: entered promiscuous mode [ 207.559948][T10691] tunl0: entered promiscuous mode [ 207.583267][T10691] gre0: entered promiscuous mode [ 207.607609][T10691] 0ªî{X¹¦: entered promiscuous mode [ 207.631025][T10691] erspan0: entered promiscuous mode [ 207.658035][T10691] ip_vti0: entered promiscuous mode [ 207.665082][T10691] ip6_vti0: entered promiscuous mode [ 207.683631][T10691] sit0: entered promiscuous mode [ 207.694567][T10691] ip6tnl0: entered promiscuous mode [ 207.708926][T10691] ip6gre0: entered promiscuous mode [ 207.741852][T10691] syz_tun: entered promiscuous mode [ 207.754360][T10691] ip6gretap0: entered promiscuous mode [ 207.763049][T10691] vcan0: entered promiscuous mode [ 207.774256][T10691] bond0: entered promiscuous mode [ 207.805891][T10691] team0: entered promiscuous mode [ 207.851779][T10691] nlmon0: entered promiscuous mode [ 207.870396][T10691] caif0: entered promiscuous mode [ 207.889669][T10691] veth0_to_bond: entered promiscuous mode [ 207.915232][T10691] vxlan0: entered promiscuous mode [ 207.950002][T10691] hsr1: entered promiscuous mode [ 207.956131][T10691] gre1: entered promiscuous mode [ 207.978278][T10691] bond12: entered promiscuous mode [ 207.986706][T10691] veth10: entered promiscuous mode [ 207.998988][T10691] veth11: entered promiscuous mode [ 208.016383][T10691] bond13: entered promiscuous mode [ 208.032635][T10687] syzkaller0: entered promiscuous mode [ 208.046946][T10687] syzkaller0: entered allmulticast mode [ 208.150787][T10704] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.162059][T10704] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.208693][T10704] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.221062][T10704] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.310793][T10725] __nla_validate_parse: 5 callbacks suppressed [ 208.310815][T10725] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1470'. [ 208.435476][T10733] netlink: 'syz.2.1473': attribute type 1 has an invalid length. [ 208.461400][T10732] sctp: [Deprecated]: syz.4.1474 (pid 10732) Use of int in maxseg socket option. [ 208.461400][T10732] Use struct sctp_assoc_value instead [ 208.677897][T10733] 8021q: adding VLAN 0 to HW filter on device bond11 [ 208.736327][T10743] bond11: (slave veth21): Enslaving as an active interface with a down link [ 208.754081][T10746] bond10: (slave veth0_to_bond): Releasing active interface [ 208.792334][T10746] bond11: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 208.835000][T10755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1478'. [ 208.857230][T10755] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1478'. [ 208.917728][ T1003] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.937310][T10706] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.977448][T10706] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.004902][T10706] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.042898][T10772] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1482'. [ 209.096974][T10776] vxlan1: entered promiscuous mode [ 209.131024][T10704] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.157973][T10704] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.199889][T10777] 8021q: adding VLAN 0 to HW filter on device ipvlan1 [ 209.221290][T10704] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.231905][ T65] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 209.278915][T10784] FAULT_INJECTION: forcing a failure. [ 209.278915][T10784] name failslab, interval 1, probability 0, space 0, times 0 [ 209.295842][T10784] CPU: 1 UID: 0 PID: 10784 Comm: syz.1.1485 Not tainted syzkaller #0 PREEMPT(full) [ 209.295874][T10784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 209.295888][T10784] Call Trace: [ 209.295897][T10784] [ 209.295907][T10784] dump_stack_lvl+0x189/0x250 [ 209.295939][T10784] ? __pfx____ratelimit+0x10/0x10 [ 209.295970][T10784] ? __pfx_dump_stack_lvl+0x10/0x10 [ 209.295996][T10784] ? __pfx__printk+0x10/0x10 [ 209.296035][T10784] ? __pfx___might_resched+0x10/0x10 [ 209.296055][T10784] ? fs_reclaim_acquire+0x7d/0x100 [ 209.296095][T10784] should_fail_ex+0x414/0x560 [ 209.296130][T10784] should_failslab+0xa8/0x100 [ 209.296163][T10784] __kmalloc_noprof+0xcb/0x4f0 [ 209.296191][T10784] ? kfree+0x4d/0x440 [ 209.296214][T10784] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 209.296242][T10784] tomoyo_realpath_from_path+0xe3/0x5d0 [ 209.296267][T10784] ? tomoyo_domain+0xd9/0x130 [ 209.296295][T10784] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 209.296326][T10784] tomoyo_path_number_perm+0x1e8/0x5a0 [ 209.296359][T10784] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 209.296410][T10784] ? __lock_acquire+0xab9/0xd20 [ 209.296467][T10784] ? __fget_files+0x2a/0x420 [ 209.296504][T10784] ? __fget_files+0x2a/0x420 [ 209.296540][T10784] ? __fget_files+0x3a0/0x420 [ 209.296571][T10784] ? __fget_files+0x2a/0x420 [ 209.296607][T10784] security_file_ioctl+0xcb/0x2d0 [ 209.296644][T10784] __se_sys_ioctl+0x47/0x170 [ 209.296675][T10784] do_syscall_64+0xfa/0x3b0 [ 209.296706][T10784] ? lockdep_hardirqs_on+0x9c/0x150 [ 209.296735][T10784] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.296757][T10784] ? clear_bhb_loop+0x60/0xb0 [ 209.296783][T10784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.296804][T10784] RIP: 0033:0x7fe33598ebe9 [ 209.296825][T10784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 209.296843][T10784] RSP: 002b:00007fe33675c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 209.296866][T10784] RAX: ffffffffffffffda RBX: 00007fe335bb5fa0 RCX: 00007fe33598ebe9 [ 209.296882][T10784] RDX: 00002000000000c0 RSI: 000000000000890b RDI: 0000000000000004 [ 209.296896][T10784] RBP: 00007fe33675c090 R08: 0000000000000000 R09: 0000000000000000 [ 209.296909][T10784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.296921][T10784] R13: 00007fe335bb6038 R14: 00007fe335bb5fa0 R15: 00007ffc545d3378 [ 209.296957][T10784] [ 209.543546][T10784] ERROR: Out of memory at tomoyo_realpath_from_path. [ 209.790486][T10802] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1490'. [ 210.361411][T10825] lo: left promiscuous mode [ 210.375132][T10825] tunl0: left promiscuous mode [ 210.395904][T10825] gre0: left promiscuous mode [ 210.416932][T10825] gretap0: left promiscuous mode [ 210.427307][T10825] erspan0: left promiscuous mode [ 210.442491][T10825] ip_vti0: left promiscuous mode [ 210.448096][T10825] ip6_vti0: left promiscuous mode [ 210.453624][T10825] sit0: left promiscuous mode [ 210.458721][T10825] ip6tnl0: left promiscuous mode [ 210.464083][T10825] ip6gre0: left promiscuous mode [ 210.469514][T10825] syz_tun: left promiscuous mode [ 210.474902][T10825] ip6gretap0: left promiscuous mode [ 210.480557][T10825] vcan0: left promiscuous mode [ 210.485771][T10825] bond0: left promiscuous mode [ 210.492374][T10825] team0: left promiscuous mode [ 210.507357][T10825] dummy0: left promiscuous mode [ 210.512682][T10825] nlmon0: left promiscuous mode [ 210.522047][T10825] caif0: left promiscuous mode [ 210.527369][T10825] vxcan0: left promiscuous mode [ 210.532729][T10825] vxcan1: left promiscuous mode [ 210.548054][T10825] veth0: left promiscuous mode [ 210.559017][T10825] veth1: left promiscuous mode [ 210.569941][T10825] wg0: left promiscuous mode [ 210.582853][T10825] wg1: left promiscuous mode [ 210.598084][T10825] wg2: left promiscuous mode [ 210.611082][T10825] veth0_to_bridge: left promiscuous mode [ 210.624413][T10825] bridge_slave_0: left promiscuous mode [ 210.658717][T10825] veth1_to_bridge: left promiscuous mode [ 210.664710][T10825] bridge_slave_1: left promiscuous mode [ 210.678105][T10825] bond_slave_0: left promiscuous mode [ 210.683841][T10825] veth1_to_bond: left promiscuous mode [ 210.690038][T10825] bond_slave_1: left promiscuous mode [ 210.695827][T10825] veth0_to_team: left promiscuous mode [ 210.702005][T10825] team_slave_0: left promiscuous mode [ 210.708709][T10825] veth1_to_team: left promiscuous mode [ 210.714554][T10825] team_slave_1: left promiscuous mode [ 210.720423][T10825] veth0_to_batadv: left promiscuous mode [ 210.726423][T10825] batadv_slave_0: left promiscuous mode [ 210.732428][T10825] veth1_to_batadv: left promiscuous mode [ 210.739166][T10825] batadv_slave_1: left promiscuous mode [ 210.745083][T10825] xfrm0: left promiscuous mode [ 210.750272][T10825] veth0_to_hsr: left promiscuous mode [ 210.756176][T10825] veth1_to_hsr: left promiscuous mode [ 210.762093][T10825] hsr0: left promiscuous mode [ 210.771043][T10825] veth1_virt_wifi: left promiscuous mode [ 210.777118][T10825] veth0_virt_wifi: left promiscuous mode [ 210.783191][T10825] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 210.791065][T10825] vlan0: left promiscuous mode [ 210.796359][T10825] vlan1: left promiscuous mode [ 210.802378][T10825] macvlan0: left promiscuous mode [ 210.807830][T10825] macvlan1: left promiscuous mode [ 210.814018][T10825] ipvlan0: left promiscuous mode [ 210.820001][T10825] ipvlan1: left promiscuous mode [ 210.825570][T10825] macvtap0: left promiscuous mode [ 210.831667][T10825] geneve0: left promiscuous mode [ 210.836961][T10825] geneve1: left promiscuous mode [ 210.842289][T10825] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 210.849867][T10825] netdevsim netdevsim0 netdevsim1: left promiscuous mode [ 210.858049][T10825] netdevsim netdevsim0 netdevsim2: left promiscuous mode [ 210.865388][T10825] netdevsim netdevsim0 netdevsim3: left promiscuous mode [ 210.872843][T10825] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 210.880356][T10825] bond1: left promiscuous mode [ 210.885512][T10825] vxlan0: left promiscuous mode [ 210.891305][T10825] bond2: left promiscuous mode [ 210.896345][T10825] bond3: left promiscuous mode [ 210.901410][T10825] veth2: left promiscuous mode [ 210.906478][T10825] veth3: left promiscuous mode [ 210.911660][T10825] macsec1: left promiscuous mode [ 210.917593][T10825] veth4: left promiscuous mode [ 210.922573][T10825] veth5: left promiscuous mode [ 210.929200][T10825] veth6: left promiscuous mode [ 210.934422][T10825] veth7: left promiscuous mode [ 210.939779][T10825] bridge0: left promiscuous mode [ 210.944981][T10825] bridge1: left promiscuous mode [ 210.950139][T10825] sit1: left promiscuous mode [ 211.004972][T10704] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.020443][T10704] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.056998][T10706] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.065951][T10706] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.223640][T10846] netlink: 'syz.4.1506': attribute type 1 has an invalid length. [ 211.349300][T10846] 8021q: adding VLAN 0 to HW filter on device bond15 [ 211.386766][T10852] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1507'. [ 211.395781][T10852] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1507'. [ 211.425036][T10860] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1509'. [ 211.450304][T10861] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1508'. [ 211.479860][T10851] bond15: (slave veth13): Enslaving as an active interface with a down link [ 211.518644][T10861] team0: Unable to change to the same mode the team is in [ 212.033037][T10885] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1520'. [ 212.206475][T10904] tipc: Enabled bearer , priority 0 [ 212.223197][T10904] tipc: Resetting bearer [ 212.252444][T10902] tipc: Disabling bearer [ 212.515629][T10921] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 212.838042][T10936] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 212.945488][T10948] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 213.038302][T10950] netlink: 'syz.0.1536': attribute type 1 has an invalid length. [ 213.150379][T10956] netlink: 'syz.4.1539': attribute type 1 has an invalid length. [ 213.194164][T10956] ip6erspan0: entered promiscuous mode [ 213.227661][T10956] ip6erspan0: entered allmulticast mode [ 213.381084][T10961] __nla_validate_parse: 8 callbacks suppressed [ 213.381105][T10961] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1542'. [ 213.449806][T10961] 8021q: adding VLAN 0 to HW filter on device bond8 [ 213.750140][T10991] bond16: entered allmulticast mode [ 213.768451][T10991] 8021q: adding VLAN 0 to HW filter on device bond16 [ 213.922892][T10991] bond16 (unregistering): Released all slaves [ 214.094252][T10984] syz.1.1547 (10984) used greatest stack depth: 17640 bytes left [ 214.109472][T11005] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1554'. [ 214.150458][T11009] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 214.151973][T11008] netlink: 'syz.0.1553': attribute type 1 has an invalid length. [ 214.237463][T11008] 8021q: adding VLAN 0 to HW filter on device bond9 [ 214.287807][T11014] bond9: (slave veth11): Enslaving as an active interface with a down link [ 214.347711][T11008] bond4: (slave veth0_to_bond): Releasing active interface [ 214.410719][T11008] bond9: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 214.639323][T11031] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1562'. [ 214.645069][T11022] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1560'. [ 214.666665][T11031] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1562'. [ 214.675760][T11031] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1562'. [ 214.783438][T11022] 8021q: adding VLAN 0 to HW filter on device bond16 [ 214.885004][T11055] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1568'. [ 214.907855][T11050] bond10: entered allmulticast mode [ 214.913684][T11050] 8021q: adding VLAN 0 to HW filter on device bond10 [ 214.923640][T11050] bridge0: port 1(bond10) entered blocking state [ 214.938570][T11050] bridge0: port 1(bond10) entered disabled state [ 214.954445][T11050] bond10: entered promiscuous mode [ 214.984654][T11059] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1567'. [ 215.130467][T11068] netlink: 'syz.2.1571': attribute type 4 has an invalid length. [ 215.314503][T11080] netlink: 'syz.0.1574': attribute type 1 has an invalid length. [ 215.356987][T11080] 8021q: adding VLAN 0 to HW filter on device bond11 [ 215.400091][T11080] bond11: (slave veth13): Enslaving as an active interface with a down link [ 215.445198][T11080] bond9: (slave veth0_to_bond): Releasing active interface [ 215.468120][T11080] bond11: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 215.554123][T11089] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1578'. [ 215.566256][T11087] delete_channel: no stack [ 215.585182][T11089] debugfs: 'hsr1' already exists in 'hsr' [ 215.600908][T11089] Cannot create hsr debugfs directory [ 215.671796][T11090] bond12: entered allmulticast mode [ 215.677592][T11090] 8021q: adding VLAN 0 to HW filter on device bond12 [ 215.685383][T11090] bridge0: port 2(bond12) entered blocking state [ 215.697057][T11090] bridge0: port 2(bond12) entered disabled state [ 215.706938][T11090] bond12: entered promiscuous mode [ 215.757232][T11093] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1579'. [ 215.793290][T11102] lo: MTU too low for tipc bearer [ 215.798639][T11102] tipc: Enabling of bearer rejected, failed to enable media [ 215.884367][T11093] 8021q: adding VLAN 0 to HW filter on device bond12 [ 216.133955][T11125] vlan1: entered allmulticast mode [ 216.140289][T11125] erspan0: entered allmulticast mode [ 216.158535][T11122] unknown channel width for channel at 909000KHz? [ 216.169399][T11122] unknown channel width for channel at 909000KHz? [ 216.181042][T11132] netlink: 'syz.1.1588': attribute type 2 has an invalid length. [ 216.190433][T11122] unknown channel width for channel at 909000KHz? [ 216.347332][T11139] bond17: entered allmulticast mode [ 216.353245][T11139] 8021q: adding VLAN 0 to HW filter on device bond17 [ 216.361325][T11139] bridge0: port 2(bond17) entered blocking state [ 216.369574][T11139] bridge0: port 2(bond17) entered disabled state [ 216.380988][T11139] bond17: entered promiscuous mode [ 216.882386][T11154] 8021q: adding VLAN 0 to HW filter on device bond6 [ 217.000246][T11168] can: request_module (can-proto-0) failed. [ 217.134115][T11175] bond18: entered allmulticast mode [ 217.143650][T11175] 8021q: adding VLAN 0 to HW filter on device bond18 [ 217.165363][T11175] bridge0: port 3(bond18) entered blocking state [ 217.204047][T11175] bridge0: port 3(bond18) entered disabled state [ 217.219337][T11175] bond18: entered promiscuous mode [ 217.430418][T11188] syzkaller1: entered promiscuous mode [ 217.436037][T11188] syzkaller1: entered allmulticast mode [ 217.471973][T11200] delete_channel: no stack [ 217.617705][T11207] netlink: 'syz.2.1612': attribute type 1 has an invalid length. [ 217.705059][T11207] 8021q: adding VLAN 0 to HW filter on device bond13 [ 217.794036][T11212] bond13: (slave veth23): Enslaving as an active interface with a down link [ 217.817461][T11207] bond11: (slave veth0_to_bond): Releasing active interface [ 217.848674][T11207] bond13: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 217.863312][T11217] [ 217.865693][T11217] ====================================================== [ 217.872739][T11217] WARNING: possible circular locking dependency detected [ 217.879776][T11217] syzkaller #0 Not tainted [ 217.884193][T11217] ------------------------------------------------------ [ 217.891209][T11217] syz.1.1614/11217 is trying to acquire lock: [ 217.897362][T11217] ffffffff8f68d2b8 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xa9/0x720 [ 217.906868][T11217] [ 217.906868][T11217] but task is already holding lock: [ 217.914244][T11217] ffffffff8f68d258 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720 [ 217.923841][T11217] [ 217.923841][T11217] which lock already depends on the new lock. [ 217.923841][T11217] [ 217.934245][T11217] [ 217.934245][T11217] the existing dependency chain (in reverse order) is: [ 217.943265][T11217] [ 217.943265][T11217] -> #2 (nr_neigh_list_lock){+...}-{3:3}: [ 217.951190][T11217] lock_acquire+0x120/0x360 [ 217.956234][T11217] _raw_spin_lock_bh+0x36/0x50 [ 217.961537][T11217] nr_rt_ioctl+0x390/0xd50 [ 217.966485][T11217] sock_do_ioctl+0xd9/0x300 [ 217.971524][T11217] sock_ioctl+0x576/0x790 [ 217.976406][T11217] __se_sys_ioctl+0xfc/0x170 [ 217.981527][T11217] do_syscall_64+0xfa/0x3b0 [ 217.986569][T11217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.992989][T11217] [ 217.992989][T11217] -> #1 (&nr_node->node_lock){+...}-{3:3}: [ 218.000994][T11217] lock_acquire+0x120/0x360 [ 218.006138][T11217] _raw_spin_lock_bh+0x36/0x50 [ 218.011447][T11217] nr_rt_ioctl+0x193/0xd50 [ 218.016405][T11217] sock_do_ioctl+0xd9/0x300 [ 218.021541][T11217] sock_ioctl+0x576/0x790 [ 218.026408][T11217] __se_sys_ioctl+0xfc/0x170 [ 218.031880][T11217] do_syscall_64+0xfa/0x3b0 [ 218.036932][T11217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.043374][T11217] [ 218.043374][T11217] -> #0 (nr_node_list_lock){+...}-{3:3}: [ 218.051209][T11217] validate_chain+0xb9b/0x2140 [ 218.056509][T11217] __lock_acquire+0xab9/0xd20 [ 218.061747][T11217] lock_acquire+0x120/0x360 [ 218.066788][T11217] _raw_spin_lock_bh+0x36/0x50 [ 218.072083][T11217] nr_rt_device_down+0xa9/0x720 [ 218.077462][T11217] nr_device_event+0x137/0x150 [ 218.082754][T11217] notifier_call_chain+0x1b3/0x3e0 [ 218.088391][T11217] __dev_notify_flags+0x18d/0x2e0 [ 218.093950][T11217] netif_change_flags+0xe8/0x1a0 [ 218.099415][T11217] dev_change_flags+0x130/0x260 [ 218.104801][T11217] dev_ioctl+0x7b4/0x1150 [ 218.109666][T11217] sock_do_ioctl+0x22c/0x300 [ 218.114788][T11217] sock_ioctl+0x576/0x790 [ 218.119649][T11217] __se_sys_ioctl+0xfc/0x170 [ 218.124771][T11217] do_syscall_64+0xfa/0x3b0 [ 218.129809][T11217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.136228][T11217] [ 218.136228][T11217] other info that might help us debug this: [ 218.136228][T11217] [ 218.146484][T11217] Chain exists of: [ 218.146484][T11217] nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock [ 218.146484][T11217] [ 218.160325][T11217] Possible unsafe locking scenario: [ 218.160325][T11217] [ 218.167780][T11217] CPU0 CPU1 [ 218.173148][T11217] ---- ---- [ 218.178514][T11217] lock(nr_neigh_list_lock); [ 218.183221][T11217] lock(&nr_node->node_lock); [ 218.190620][T11217] lock(nr_neigh_list_lock); [ 218.197833][T11217] lock(nr_node_list_lock); [ 218.202536][T11217] [ 218.202536][T11217] *** DEADLOCK *** [ 218.202536][T11217] [ 218.210676][T11217] 2 locks held by syz.1.1614/11217: [ 218.215870][T11217] #0: ffffffff8f537c08 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 218.224685][T11217] #1: ffffffff8f68d258 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720 [ 218.234716][T11217] [ 218.234716][T11217] stack backtrace: [ 218.240609][T11217] CPU: 1 UID: 0 PID: 11217 Comm: syz.1.1614 Not tainted syzkaller #0 PREEMPT(full) [ 218.240632][T11217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 218.240644][T11217] Call Trace: [ 218.240652][T11217] [ 218.240662][T11217] dump_stack_lvl+0x189/0x250 [ 218.240688][T11217] ? __pfx_dump_stack_lvl+0x10/0x10 [ 218.240710][T11217] ? __pfx__printk+0x10/0x10 [ 218.240737][T11217] ? print_lock_name+0xde/0x100 [ 218.240763][T11217] print_circular_bug+0x2ee/0x310 [ 218.240785][T11217] check_noncircular+0x134/0x160 [ 218.240808][T11217] validate_chain+0xb9b/0x2140 [ 218.240828][T11217] ? rt6_disable_ip+0x6b3/0x720 [ 218.240851][T11217] ? __queue_work+0xc56/0xfb0 [ 218.240872][T11217] ? __lock_acquire+0xab9/0xd20 [ 218.240899][T11217] __lock_acquire+0xab9/0xd20 [ 218.240927][T11217] ? nr_rt_device_down+0xa9/0x720 [ 218.240947][T11217] lock_acquire+0x120/0x360 [ 218.240971][T11217] ? nr_rt_device_down+0xa9/0x720 [ 218.240998][T11217] ? nr_rt_device_down+0xa9/0x720 [ 218.241017][T11217] _raw_spin_lock_bh+0x36/0x50 [ 218.241039][T11217] ? nr_rt_device_down+0xa9/0x720 [ 218.241058][T11217] nr_rt_device_down+0xa9/0x720 [ 218.241079][T11217] ? do_raw_spin_unlock+0x122/0x240 [ 218.241104][T11217] nr_device_event+0x137/0x150 [ 218.241123][T11217] notifier_call_chain+0x1b3/0x3e0 [ 218.241145][T11217] __dev_notify_flags+0x18d/0x2e0 [ 218.241175][T11217] ? __pfx___dev_notify_flags+0x10/0x10 [ 218.241202][T11217] ? __dev_change_flags+0x4cc/0x6d0 [ 218.241220][T11217] ? __pfx___dev_change_flags+0x10/0x10 [ 218.241243][T11217] ? full_name_hash+0x92/0xe0 [ 218.241264][T11217] netif_change_flags+0xe8/0x1a0 [ 218.241282][T11217] dev_change_flags+0x130/0x260 [ 218.241311][T11217] dev_ioctl+0x7b4/0x1150 [ 218.241337][T11217] sock_do_ioctl+0x22c/0x300 [ 218.241360][T11217] ? __pfx_sock_do_ioctl+0x10/0x10 [ 218.241379][T11217] ? __lock_acquire+0xab9/0xd20 [ 218.241412][T11217] sock_ioctl+0x576/0x790 [ 218.241433][T11217] ? __pfx_sock_ioctl+0x10/0x10 [ 218.241452][T11217] ? __fget_files+0x2a/0x420 [ 218.241479][T11217] ? __fget_files+0x3a0/0x420 [ 218.241505][T11217] ? __fget_files+0x2a/0x420 [ 218.241531][T11217] ? bpf_lsm_file_ioctl+0x9/0x20 [ 218.241553][T11217] ? __pfx_sock_ioctl+0x10/0x10 [ 218.241572][T11217] __se_sys_ioctl+0xfc/0x170 [ 218.241594][T11217] do_syscall_64+0xfa/0x3b0 [ 218.241620][T11217] ? lockdep_hardirqs_on+0x9c/0x150 [ 218.241643][T11217] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.241660][T11217] ? clear_bhb_loop+0x60/0xb0 [ 218.241680][T11217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.241697][T11217] RIP: 0033:0x7fe33598ebe9 [ 218.241714][T11217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 218.241730][T11217] RSP: 002b:00007fe33675c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 218.241750][T11217] RAX: ffffffffffffffda RBX: 00007fe335bb5fa0 RCX: 00007fe33598ebe9 [ 218.241763][T11217] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000007 [ 218.241775][T11217] RBP: 00007fe335a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 218.241787][T11217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 218.241797][T11217] R13: 00007fe335bb6038 R14: 00007fe335bb5fa0 R15: 00007ffc545d3378 [ 218.241819][T11217] [ 218.600524][T11222] __nla_validate_parse: 4 callbacks suppressed [ 218.600547][T11222] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1616'. [ 218.656193][T11222] 8021q: adding VLAN 0 to HW filter on device bond16