last executing test programs: 7.479384367s ago: executing program 3 (id=3998): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x4b}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (async) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="580000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000380012800b000100697036746e6c0000280002800500090000000000050004008000000014000300ff"], 0x58}}, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x7, [@null, @bcast, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) (async) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) (async) r5 = socket$kcm(0x10, 0x5, 0x4) sendmsg$kcm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000002600)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014006040400090000009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x50, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_INIT={0x18}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x7ff}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) read(0xffffffffffffffff, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r8, 0x4) (async) close(r7) (async) sendmmsg$inet6(r0, &(0x7f0000001340)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x8001, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7c}, 0x1c, &(0x7f0000001280)=[{&(0x7f0000000080)="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", 0x1000}, {&(0x7f0000001080)="c347f4e2bfad61ec483e9ce3409fdd6b2a4055f54049ff6345cddabedf8c03e853396c49930e1675c799c7ad146cf9d969a4a2a63f4b13ef49f96c874536fba5d1ba9267aae69f461bcec61f484c2c5ce1c16f175aade46c3eb2028cbbfe69107705cdd496860ee35246e63dc400e2e541910a8c3227a1df2e7b4f18c5f6a3951892fe551c175a134d96a672f1628298360749f881f77c188420d940a1f912c004c29c5d9ed119eb07afcaa344cabe0bf5c750c26d9991aab79a", 0xba}, {&(0x7f0000001140)="f3e88014c6e0072fb6605142281d68b0258b7fd5446c5359caad71327c3507561e98c85e24ca877d266dda17319b6656886d03d10d8b54d8ef42e2e3c06cd9f998c4d0cf19a131e6f6ab56d671fc5d92b1104ae3c539b5860cde1e100aa2591697062fd4b26ac1c4d892610f84b96c53df67c48ccf26469aa0e29f5890b67c1578404b0d747e69ced2520fca3406a8062b24da7d3fa8ce86cbe16f144b94215922afc1cd389414e2b7a64e61b7a8a1211d0854507be987ad3764ebc8852c4727ace6ca06547f6df400a33292ffb50d5bbf9f93", 0xd3}, {&(0x7f0000001240)="dc989f9baaa7928456946c1ae4f0e30ac61ff9c06d57071b2a7062fcabd1a4239b14f2", 0x23}], 0x4, &(0x7f00000012c0)=[@hopopts_2292={{0x48, 0x29, 0x36, {0x2, 0x6, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x18, 0x3, [0x438]}}, @jumbo={0xc2, 0x4, 0x7fffffff}, @jumbo={0xc2, 0x4, 0x78}, @hao={0xc9, 0x10, @mcast2}]}}}], 0x48}}], 0x1, 0x44000) 7.291291109s ago: executing program 3 (id=4002): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xce) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@default, @null, 0x5, [@default, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) 7.278511093s ago: executing program 3 (id=4003): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xb0, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x10000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x280000000000000}]}}]}, 0xb0}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt(r4, 0x84, 0x82, &(0x7f00000002c0)="1a00000002000000", 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'macsec0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r9 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r9, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) connect$inet(r9, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_QUANTUM={0x2, 0x2, 0x10270000}]}}]}, 0x48}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES32=r5], 0x54}}, 0x800) sendmsg$AUDIT_LIST_RULES(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f5, 0x2, 0x70bd2b, 0x25dfdbff, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x48090}, 0x4000) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r11, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r11, 0x84, 0x1e, &(0x7f0000000100), &(0x7f0000000140)=0x4) 6.839720885s ago: executing program 1 (id=4008): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6.828273301s ago: executing program 1 (id=4009): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000001f40)={0x0, @in6={{0xa, 0x0, 0x0, @mcast1}}}, &(0x7f00000002c0)=0x98) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000002440)={0x0, 0x0, 0x0}, 0x40001) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r2, 0x0, 0x14, &(0x7f0000000140)=0x80000001, 0x4) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_test={0x1a, 0x1, 0x10000, 0x5, [0x0, 0xff, 0x6, 0xdb70, 0x80000000]}}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00', 0x0}) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x75) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@deltfilter={0x10e4, 0x2d, 0x4, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x7, 0xd}, {0xfffc, 0xfff2}, {0xe, 0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0x10b4, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0x2}, @TCA_FLOW_POLICE={0x107c, 0xa, 0x0, 0x1, [@TCA_POLICE_RATE64={0xc, 0x8, 0xffffffffffffffff}, @TCA_POLICE_RESULT={0x8, 0x5, 0x800}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x4, 0xffff, 0x4, 0x9, {0xfe, 0x2, 0x3, 0xffff, 0x8000, 0xfffffff6}, {0x4, 0x2, 0x8, 0x0, 0x80, 0x1c00}, 0xfffffffc, 0xd460, 0xd0}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xd5f1}, @TCA_POLICE_RATE={0x404, 0x2, [0x7fff, 0x8, 0x2, 0x4, 0x2, 0xf, 0x7, 0x7, 0x400, 0x6, 0x7ff, 0x0, 0x7, 0xfffffffd, 0x6, 0x5, 0xa3, 0x3, 0xffffffff, 0x9732ced, 0x7, 0xf, 0x6, 0x7, 0x0, 0x1, 0x7f, 0xc82, 0x7, 0x3ff, 0x5, 0xfffffffa, 0x0, 0x2, 0x2, 0x1, 0xb81, 0x4, 0x8, 0x2, 0x8000, 0x6, 0x7ea000, 0xa4, 0x0, 0x3, 0x2, 0x7fff, 0x7, 0x4, 0xfffff001, 0xa, 0x1, 0xf, 0x4, 0x0, 0x8, 0x4e6, 0x1, 0x9, 0x8, 0xe77c, 0x5, 0x7, 0x80000000, 0x9, 0x8, 0xc6, 0x0, 0x401, 0x6, 0x80, 0x7, 0x7fffffff, 0x3, 0xfffffffa, 0xd, 0x8c, 0x2, 0xcb, 0x224f, 0x400, 0x0, 0xd7, 0x0, 0x80, 0x593, 0x6, 0x7f, 0x9, 0x9b0d, 0x800, 0x4, 0x9, 0x401, 0x3, 0x9, 0x2, 0x3, 0xfffffeaa, 0x4397, 0x3, 0x0, 0x66ef, 0x1, 0x5, 0xfffffff9, 0x1, 0x1, 0x80, 0x278, 0x4099, 0x5, 0xd29, 0x8001, 0x8, 0xc37, 0x5, 0xfffffffb, 0x81, 0x56, 0x7, 0xa2f, 0x8, 0x2, 0x7, 0xa, 0xd8, 0x7, 0x8e94, 0x4, 0x8, 0x0, 0xe9df, 0xfffff18c, 0x7, 0x0, 0x8, 0x2, 0x9, 0x6, 0x4, 0x1ff, 0xb8, 0x1, 0x10001, 0x6, 0x6, 0x5, 0x3, 0x2, 0x400, 0x2, 0xf2, 0x7, 0x2, 0x101, 0xffff0001, 0x0, 0x0, 0x2c8000, 0x7f000, 0xcf, 0x5, 0xe444, 0x3, 0x80, 0x7, 0x8, 0x4, 0xf2c, 0xaea, 0x1, 0x9, 0x7ff, 0x2f7, 0x1, 0x2, 0x6, 0xa, 0x101, 0x6, 0x5792, 0x1, 0x1, 0x3ff, 0xff, 0x1702, 0xfffffffc, 0x7, 0xfffffffe, 0x2, 0x3, 0x0, 0x3, 0xc, 0xffffffff, 0xfffffffd, 0x7, 0x8, 0x34, 0x8, 0x3, 0x101, 0x8, 0x7, 0x1, 0x9, 0x40, 0xffffff7f, 0x8, 0x6, 0xa6d7, 0x2, 0x40, 0x4, 0x6, 0x6, 0xbfe, 0x800, 0x7, 0x4, 0x9, 0x9, 0x8, 0x6, 0x6, 0x40, 0x9, 0x7fffffff, 0x0, 0x2, 0x3, 0x9, 0x6, 0x9, 0x5, 0x1, 0x81, 0x0, 0x8, 0xb, 0x6, 0xa34, 0xffff, 0xb, 0x0, 0x5, 0x200, 0x10000, 0x80, 0x2, 0x9, 0xa6, 0x9, 0x1]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x6, 0x1, 0x0, 0xfffffff9, 0x38, 0x3, 0x40, 0xe, 0x5, 0x3, 0x0, 0x8, 0x5, 0xc, 0x0, 0xf7, 0x10001, 0x0, 0x800, 0x6, 0x800, 0x2, 0xd, 0xd2c, 0x7fffffff, 0x80000001, 0x100, 0x800, 0x1, 0xba, 0x4, 0x80000001, 0x80000001, 0xc, 0x0, 0x8, 0x4, 0x81ed, 0xee68, 0x4, 0x6, 0xa, 0x3, 0x6, 0x0, 0x9, 0x9, 0x81, 0xfffffff9, 0x1d31, 0xc0000, 0x10001, 0x4, 0x6, 0x3, 0x3, 0x1000, 0x4, 0x1a7, 0x8, 0xc6e, 0xe, 0x6e55, 0x5e2a, 0x7, 0x1, 0x3, 0x0, 0x4, 0x9, 0x4, 0x3, 0x6, 0x1, 0x8, 0x5, 0x7f, 0x1000, 0x80000001, 0x6, 0x101, 0x7, 0x7, 0xffff, 0x7, 0x130c, 0x0, 0xfffffc00, 0xb2f9, 0x2, 0x0, 0x5, 0x4, 0x1000, 0x6, 0x5, 0x80, 0x1ff, 0x76fe2162, 0x9, 0x0, 0x7, 0x8fd1, 0x7, 0x8, 0x0, 0x2, 0xffffffff, 0x3, 0x3ff, 0x10, 0x6, 0x5, 0x800, 0x4, 0xfffffff7, 0x7, 0x0, 0x8, 0x1, 0x0, 0x40, 0xe, 0x6, 0xfffffeff, 0x3, 0x81, 0x8, 0x7, 0x7, 0xc617, 0x2f0d, 0x2, 0xdd8c, 0x2, 0x2, 0x1b687beb, 0x8000, 0x7, 0x0, 0x1, 0x2, 0x3, 0xffff, 0x24fa, 0x7fffffff, 0x0, 0x4c, 0xffff5a9d, 0x9, 0x2, 0x81, 0x1, 0x2, 0x8, 0xa110, 0x40, 0xa4cf, 0x4, 0x4, 0x200, 0x2, 0x3, 0x7f, 0x25, 0x7fff, 0x4, 0x7fffffff, 0x9, 0x6, 0xffff, 0x0, 0x9, 0x5, 0x1, 0xfff, 0x6, 0x2, 0x6, 0x9, 0xffff, 0x2b9e, 0x401, 0x55, 0x8, 0x3, 0x5, 0x8867, 0x1, 0x8, 0x5f, 0x3, 0xb, 0x4c7, 0x6, 0x8, 0x2, 0xffffff80, 0x8000, 0xc0000, 0xe41, 0x7ff, 0x0, 0x9, 0xfffffffc, 0x3ff, 0xffff7ffe, 0x7a17, 0x400, 0x1, 0xfffffe00, 0x989, 0xffffffff, 0x9, 0xc, 0x10, 0xfd, 0x6, 0x7, 0x0, 0x6, 0x1ff, 0xd6be, 0x5, 0xee9c, 0x3, 0x5, 0x1, 0xffff, 0x0, 0x7, 0x200, 0x8, 0xfffffffb, 0x2, 0x4, 0x4, 0x4, 0x8, 0x0, 0x6, 0xfffffff7, 0x407, 0x6, 0xb, 0x4, 0x8, 0x1, 0x6, 0x4, 0x216, 0x1, 0x2, 0x6cd290ab, 0x80]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x0, 0x847, 0x7, 0x396, 0x6, 0x6, 0xe98c, 0x3, 0xffffffec, 0x101, 0x4, 0x81, 0x3ff, 0x81, 0x0, 0x91, 0x10001, 0xea0a, 0x6, 0xffffffff, 0x5, 0x200, 0x5, 0x9, 0x8, 0x1, 0x800, 0x3, 0xffff, 0xfffffff7, 0x81, 0x4, 0x80000000, 0x7, 0x5, 0x7, 0x9, 0x3, 0x80000001, 0x4, 0x84, 0xfffffffd, 0x0, 0x4, 0x3, 0x7f, 0x1, 0x2, 0x1dc1, 0x3, 0x401, 0x5, 0xffff275d, 0x9, 0x4, 0x6, 0xb, 0x7f, 0x836d, 0x0, 0xfffffffd, 0x7ff, 0x6d7, 0x9, 0x1, 0x1, 0x7fffffff, 0x875, 0x7, 0x8, 0x23e, 0x3, 0x8, 0x8, 0x3, 0x5, 0x8001, 0x4, 0xb, 0x4, 0x3, 0x6, 0x81, 0x5, 0x6, 0x1, 0x0, 0x0, 0xffffac9c, 0x5, 0xaa, 0xfffffba2, 0x8, 0x67d, 0x1, 0x6, 0x7, 0x80, 0x900, 0x5bb, 0x81, 0x5, 0x9, 0x7da, 0x3, 0x2b0a73f5, 0x2, 0x6172, 0x2, 0x7, 0xffff7fff, 0x9, 0xf, 0xa, 0x0, 0xf, 0x101, 0x3, 0x0, 0x4, 0x2, 0x8, 0xb, 0x2, 0x7ff, 0x8000, 0x583ae57d, 0xffff, 0x0, 0x7, 0xffffff7f, 0x57, 0x4, 0xe, 0x80000000, 0x4, 0xc3, 0x9, 0x5, 0x8, 0x3, 0x1, 0xfffffff4, 0x3, 0x616, 0x7f, 0x4, 0xe, 0xff, 0x8, 0xc, 0x5, 0x1, 0xea, 0xfffff801, 0xd4b, 0x3, 0x1, 0x7ff, 0x6, 0x101, 0x80, 0x4, 0x2, 0x5, 0x0, 0xfce8c00e, 0x1, 0x5, 0x10000000, 0x0, 0xfffffffe, 0x4, 0x4, 0xc, 0x3, 0x9, 0x29, 0x2, 0xe, 0x4, 0x8, 0x5, 0x2, 0x3d7, 0x9, 0x8, 0xffff8390, 0xffffffff, 0x5, 0x80000000, 0x4, 0x5, 0xfffffffa, 0x6e0bce99, 0xffffff7f, 0x80000000, 0xa51b, 0x3, 0x80000001, 0x1000, 0x1, 0x7, 0x100, 0xffffffff, 0x7, 0x2, 0x3, 0x3, 0xc, 0x2, 0x3, 0xfffffff9, 0xa, 0xfffffff8, 0x0, 0x4, 0x3, 0x0, 0xffffffff, 0x6, 0x2, 0x2, 0xabc, 0x10000, 0x926, 0x5, 0x100, 0x1, 0x1, 0x7ff, 0x5, 0xfbb, 0x3, 0x3, 0x8000, 0x8001, 0x0, 0x2, 0xc, 0x80, 0x4, 0xffffff07, 0x3, 0x10000, 0x0, 0x7, 0x0, 0x3, 0x0, 0x7, 0x1, 0xffff, 0x9, 0xfffffff8]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x7, 0x90, 0x7, 0xe6, 0x80, 0x1000, 0x4, 0xc9b6, 0xfffffffe, 0xfffffaca, 0xfffffc01, 0x100, 0x8, 0x6b, 0x5, 0x8, 0x1, 0xc0b, 0x7fffffff, 0xf, 0xfffffffd, 0xf8, 0x5, 0xa5, 0x2, 0x1, 0x7, 0x6, 0x49df, 0x6, 0xe48, 0x935, 0x5, 0xfffffff8, 0x5, 0x3, 0x4, 0x101, 0x6, 0x7, 0x5, 0x1, 0x7, 0x9a8, 0x1, 0xc000, 0x9, 0x4, 0xffffffff, 0x6, 0x4, 0x9, 0x7, 0x2b, 0x9, 0x0, 0x5, 0x691, 0xf, 0xe, 0x80, 0x7ff, 0xffff8001, 0x7, 0xff, 0x4, 0x200, 0x9, 0x3, 0x9, 0x7, 0x1, 0x8, 0x4, 0x7, 0x0, 0xc5, 0x4, 0x48, 0x2e0b, 0x7, 0xfffffffc, 0xfffffff7, 0x7, 0x9, 0x2, 0x2, 0x6, 0xe, 0x0, 0x4, 0xe9b2, 0x4, 0x0, 0x1, 0x7ff, 0xcf8d, 0x3, 0x0, 0x7, 0x1, 0x64d, 0x6, 0x1, 0x9, 0x5, 0x10000, 0x7ff, 0x3, 0x4, 0x6, 0x2, 0x7ff, 0xfa4, 0x2, 0xfffffff1, 0xb1, 0xb, 0x2, 0x5, 0x1, 0x6, 0x1, 0x4, 0x3, 0x3f, 0x2, 0x1, 0x3, 0x2, 0x7fff, 0x401, 0x8, 0x9, 0x1, 0xbdc, 0x2, 0x4, 0x8, 0x1000, 0x7, 0x8, 0x3, 0xfffffff9, 0x8, 0x9, 0x0, 0xf19e, 0x2, 0x1ff, 0xe, 0x5, 0x7ff, 0x9, 0x7, 0x8, 0x4, 0xff, 0x1, 0x8, 0xff, 0xffffffff, 0x6, 0x6, 0x7, 0xc673, 0x0, 0x6, 0x9, 0x13c, 0xfc, 0xce, 0x2, 0xf9, 0xd, 0x9, 0x9ff, 0x0, 0x2, 0x7, 0x5, 0x3eda, 0x2, 0x1, 0x40, 0x3, 0x7, 0xe, 0x2, 0x3, 0x4, 0x7f, 0x9, 0x6, 0x1, 0x8932, 0x3, 0x4, 0x76fc, 0xfffffffe, 0x5, 0x5, 0x9, 0xa, 0x4, 0x8, 0x8, 0x0, 0x8, 0x8, 0x5, 0x7, 0x1, 0xfffffff8, 0x4, 0x4, 0x7, 0x4, 0x3ff, 0x80000001, 0xfd2, 0x0, 0x2, 0x800, 0x5, 0x800, 0x303, 0x3e, 0x9, 0x1, 0x2, 0x7, 0x4, 0x6, 0x0, 0x7, 0x398, 0x100000, 0x1, 0x2, 0xfffffffb, 0x7eb, 0x9, 0xff, 0x7, 0x3, 0x0, 0x0, 0x4, 0xfffffffc, 0x2, 0x1000, 0x8000, 0x2, 0x5]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x101}]}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x6, 0x5}}, @TCA_FLOW_EMATCHES={0x14, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x447}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}]}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x7}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x1}]}}]}, 0x10e4}, 0x1, 0x0, 0x0, 0x800}, 0x40000) 6.758086677s ago: executing program 3 (id=4010): r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={r0}) syz_emit_ethernet(0x56, &(0x7f00000004c0)=ANY=[@ANYBLOB="ffffffffffff0180c200000e000d010000001c000000ea21228e524abdb92c0a9c91408086f62cf79b485d4b5455debf7f2ff4c05512d7e979273f4c11bbc752788223521f18a4c6b2a324c05eb916e9e4104c8ab3dc"], 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000014000100000000000000000002000000", @ANYRES32=r4, @ANYBLOB="01040000"], 0x28}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="180800000000000000000000008e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000007000000aed240d8f6920c7903d20ffacbd798897ecd4981cd281db7d9b3d356fec5fdcafebd451da7a30de1f967db046b9bd64448ecf2b424d8b3567cab5644677653e910f5ac438291c68ae2d52da8263f23df26f9b24e4a80129488da3af192e6b7ff004f2665cc696312837fb75a061c7ddd1ec0b5719be6b0ecde48b768691af98f7081d8284253e1140b9e0ad39624f55249b72ad31d3e62779d0f"], &(0x7f00000000c0)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000040)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09", 0x18}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000180)={r0, r5}) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x364}}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r8, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x2c}}, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r11 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000050000000500000000000000", @ANYRES32=0x1, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000ec1bb3a3475950500000000018110000", @ANYRES64=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x18}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r12}, 0x10) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) close(r13) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) r14 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r14, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 6.629465292s ago: executing program 2 (id=4012): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000073014a00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x3, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xe, 0xffffffff}, 0x10}, 0x94) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) (async) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r3, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) (async, rerun: 64) close(r3) (rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140002"], 0x48}}, 0x0) (async) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) (async, rerun: 32) syz_init_net_socket$ax25(0x3, 0x5, 0xcf) (async, rerun: 32) ioctl$F2FS_IOC_GARBAGE_COLLECT(r3, 0x4004f506, &(0x7f0000000180)=0x1) (async) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) socketpair(0x21, 0x1, 0x2, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffe46, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYRES16=r5], 0xa0}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 6.509074396s ago: executing program 0 (id=4013): r0 = socket(0x10, 0x803, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f00000000c0)=0x5, 0x4) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x8}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x81}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x4c}}, 0x0) 6.375481979s ago: executing program 2 (id=4014): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001040)={0x20, 0x52, 0x1, 0x0, 0x0, {0x1c}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}]}, 0x20}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'tunl0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000000100003002abd70000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012800900010069706970000000001800028004001900080014000900000006000f"], 0x48}, 0x1, 0x2}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r1) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r4, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x401}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x24048890) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r6, &(0x7f0000000400)={0x0, 0xa7, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r5, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x8, 0x8e, 0x1}}]}, 0x4c}}, 0x0) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xd, 0x0, 0x703, 0x3, [@sadb_key={0x3, 0x9, 0x68, 0x0, "01d78771b90bd8a3b4914783c5"}, @sadb_address={0x3, 0x6, 0x0, 0x80, 0x0, @in={0x2, 0x3, @empty}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xfd, 0xd, 0x20000000}, @sadb_address={0x3, 0x5, 0x6c, 0x0, 0x0, @in={0x2, 0x2, @private=0xa010102}}]}, 0x68}, 0x1, 0x7}, 0x0) 1.532114506s ago: executing program 0 (id=4016): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="3000000000090500000000000000510003000009080005400000000008000340000000050900010073797a3100040000"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x20044081) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x1, 0x3, 0x801, 0x0, 0x0, {0x4, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x20008810) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000040000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800024000000000080001400000000084000000160a010100000000000000000100000058000380540003801400010067656e65766531000000000000000000140001006d6163736563300000000000c498d61050000100766574683100000000000000000000001400010073797a6b616c6c6572310000000000000900010073797a30000000000900020073797a30"], 0x10c}}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1400000013000104000000000000000003"], 0x14}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x6, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sched_kthread_stop\x00', r3}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0xb, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_COMPAT_NAME={0x7, 0x1, '+]\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x4000010) 1.470768298s ago: executing program 4 (id=4017): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x4, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5a}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x7}}, [], {{0x6, 0x1, 0x3, 0x8}, {0x6, 0x0, 0x2, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.469808957s ago: executing program 1 (id=4018): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000300)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, 'rose0\x00'}}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@RTM_DELMDB={0x38, 0x55, 0x32f, 0x0, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0x0, {@in6_addr=@empty}}}]}, 0x38}}, 0x0) socket$pppoe(0x18, 0x1, 0x0) (async) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) (async) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000300)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, 'rose0\x00'}}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@RTM_DELMDB={0x38, 0x55, 0x32f, 0x0, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0x0, {@in6_addr=@empty}}}]}, 0x38}}, 0x0) (async) 1.463383458s ago: executing program 2 (id=4019): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001cc0)=ANY=[], 0x0}, 0x94) (async, rerun: 32) r0 = socket$tipc(0x1e, 0x4, 0x0) (async, rerun: 32) pipe(&(0x7f0000000000)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) connect$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x5}}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x1c, 0xb, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x408c4}, 0x4000) (async) sendmmsg$inet(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f00000056c0)=[{&(0x7f0000001240)="80349c0d9e8fcc9f44658138dc4a3c4ad42f918348474a5bc38ff0e0571fc22c8eb5cb22fdf30ced1a4c1ccb5e5b35fed7db48c1a8a7132adc5623d146ddfe2254dd2579b4284b53d1cea6206864473d31bdb00c9d1462458b678827e80c94d88099e7471a58b1463086f9cdd1ccc19fa2fc4a9dd5a56fe782d15e66648c7630f1aaa7e9820460c46e292dbb8fa6f6701048ff17f46097b1ee0750ed038f18b81b2ba014bf866062c9a6f88b5d07e13b7eddd968ba9c7a53609c7b61471a51fd85bceebc0a92b2cd7c45a7f4571e693abebc3c5ff16c8128d92476", 0xdb}, {&(0x7f0000000280)="5b4ea50f20d7212327afde5e7a457cde2dff791c69fbc3", 0x17}, {&(0x7f00000002c0)="851d8a90d516f218f839a7c48edfe734b2490c90a2fbf5be3383f1c9f5be8e55148723ac0258ef4f8af1f5e0b0a86885f018523d60072c7d9c1568700b3abe208fbd5dad2daf18b5150a530d816bf4cc6e43da4f2793611b38009e8c0970268cf5836926fd1223f4f8bec6a4a68b2aaff7af151a661793a04cd9b936da8f53eae22356781c580df817f3168269eaeeae014fa9b1878bd89e2acb4853ffd7b9a06d7f5ff090c605f5d343e6d93c80d747365d21acea325c44fbb87f6271a2d9333e9b9dd1d36dfea61641d34fd54cd2970ac14acdadd04357bdd44bc926d0adef887b2e25c2f435ce79bac1d1f473c3a49a12aa5c5cfa4bfa4fd2470308ed259e62c218aee67006a3ca187c9aa13a806d99b2275341fd6022940537b1cb1fd2389f417ea92c6e77a09a9d09a98c4e2f0912d36b47588ff991aa98c3c650055bacb669aaf68dd4f8a7b43569c9af62e7cee6ba05278fe8642feafa5c436cb13fa45b3cdf750f8956c493acf7c561b12259331a363c74fb5f2947652ced415b0986b673680e8ad7bad823ff84c30681cbe45114510d9aa6f423f212bcdf1c244178ae31474d9f176707e9c481057f72d489372f7daeba51e3ea86895c8eed109566ad19f3957d0df21a671fce2d674c207d8643c85a018834f4e8e3992e6991d815", 0xeb}, {&(0x7f0000001440)="f0e266805aba28ca0c0d67b3479e1c7cb90d64b8ba8093c11696a92981d4fdd1f40043ce52efdea3f8d7b9ba23840df17c5a35207d6fc677263be310a063adb7b1528b8a04ec5b50d2cfa0df73c57f16a94941e8fb22f429a1f34b5b01514fefc4bd79a2cb936cf2eae82bd7b628431ae2d7b61059b35abc6ee24fd40e3c1bd6106af177bc4670395df7238a420fecf1e6ed3fe8906c3a2843215618fcb72ae77c6d36feefb4d45157e5d35fb4bf297d15ca042520f08e85ad2d7c5045fc7c4a2a8b6e149fc755d70437b3835083ee9fc662afbf840ab97f0adcdde20099bb22e909b937696e9d950ca0a361dfa8f5453454696927ae5a2401340264bdcdcd86941c18b536bdccb964461679d1b62855dadee9b66e5d494183283808c706247cdf83b45c44178775fc957483923b717724549dbe2f9a092fa07e93a7772d16bfbff9a0dd14d48d30b1e4f8206f92cf2fe08a7702f73404b79e77dec1b694e8a7c588a7bb2d770122291b10b456c4419dda49da0433a0aa5f0be221d29b45082b4f9521c2a1fbae507aa2652123619b78f340f01523bf9e6089e8e8186af2b85476d7059226f07467a6e036bf8808f2e9070b2a94ac1c64ec066def276c362a1d4a830edf754783f0a1e52e1adc4f6ca2d7200fd73b9cda79ccfcf57a27f60e184ebe12c4daeb214c2057b69719db280e0dcc2d10b085c7ab8e2394bae44893e3f335a3121bae3a33c32b004ab7bca48726029b77a6c784d2af3789fd520e37009d103c0a63598fa5857ee1b86a38a9feaf1d1f512d1884861c13d647d26888430e2f15e78cdd6a4c875e52de709dfdc4af4775ce03d7c8c3ff2b9fbae82dbabf11460bd1bc1ffe10c5062a265fd211a2b52a41613cc03917b8d34591885396369d1d172df31244a236c49d4457a936848684b59e326872d58c5db20684d1194ccb7ecbf5017f0f702f29c75cdeea09619db8bf00b41b1a165af13b3810d7f7b6a681aef628190f4fd53244a650b0500df500946792d003f2d2f0ba3c57f8257c0cc897cb1dabd63870ef86378a14e7f5068ea6a2311414656d766fb24e43c2a57b44cb1dc584d71e91628348790dc6a9adf85bc403a934e7603f7b45473407cf1395163b3efc9e880963bbd98140adfd624ccfc1141cd899826261e152265b9307695488c0cbad9027bf74b6f0c7adbc9878983d96e6026c818ac30fac3e2392e1c8fdab8ccf902d0915a471701083949efafc7a2e05608139fd0ef22d834ff02569878579c43635ad2d56d7cdfacaba8a3adc47c7fd42e521ca6b14726e68f67e2662c972bf9824ba847e22985400fad74280c22a0636aee80eeb7ef0c691cee94573ec78b53d43316ba691fd5274d1ff8085e297d2781a31f704dfeb58db9fa216c3356341207e953712de9ef27018bdfdddba8abc0c5f205908f12a42685ecc0c20cd92a57bba45a435f7bb412ccab1a6d877392971de8b808af07ea32b102dbcd7d00c869ad5cd8f5a5895b3d6dfef226d51d819756a85ffdde3d08f59fbbb7510a9ac3568f8f039fa7abc7b34685f3579050e88773cb4bb7958ff83aba1f23c8ab4ecd019c59781d47bcc50c64a957c3fa37311a240649313f77fa81020a5da0560d3bdabe6001ab6792ad782fe0e44bbb59efd4a524984742940563dd9e9a0226925324ac94373a9dcb16f32183ef3f465a13b83974f593e664f53131241e2133ce22917fbb412354a51026847f92aa7afadb1cdf51677fc2fe5938812ef17ae79f4db75afdfce3c5b8822dd612457b5f59dd616acdc473e97afb83f3c9789f3df399a2c3c89e8b5e6db33a306168b0cd4e8acbbd6ac81dd46cfb2f7d24b609d009049784611d027daa0cfb12111c1236aa010796cc687cbb151ba30e3a786ee8bfdae51e65a0c3667f7b8856089621742bdc19ad66f60eb48bd7f20b0ac2a523e89e6a7089e3704f266c52c58994e018e5d20b77a0413c71cafd420d9e0abb77e9f1199aca31f6d94372ca5736c749c197cac572e4962fc089f866a896763cd7b804c8e7211bd3a64f1ed12d65182deb850279ecb530683551bd50214e03b9f813431688dadf4caaf77d2e8b20d3e5c424243ab50f9c20462cea0f38eb080b02074e3e77a236d4ec929b04d134dcc5f767736c096794be3aec9f1195b87862128b436fbd0305a6ad6ebb0b2167e184c1de57048144b7567a6ad6c028c4b8a78858925f0ed415313da984484f753d14234d30964aa3d15af13337b6e5338d4f787abc18e0ea4d9656aa3c1d3eee0854078470a0e724062fd61a95f17516ca92faae8397ce07ba558a689ea49d25685a28c68fbc533892827829692d65a15711f0d14f7f685095f6c5dd085b30ffc4dfd9097157c1fab80023d24912861e87d1e484fe5a4476743dcb983d3eecabfe168db03f888432d8b1639e89c8f0513dc36ca8969ec364d28814fa6e21f979020df1292d772cd20c0eb4a5888f38d8d129e30ffee29ab6baf3b2f3a509e02d26b354f1ebe3531fe97968f1f678937b36f3684a8c100030a2328941dfc09574f7cebc26337cd4b2a6fc0b92affc3f3f892542e46fd6cfc2780c0b8a916b3fbb7f33a2537571b06643d82f86e2156740e024b360f48b844797971383610dc93abedc9945ec26d6a56e2701522e3fd6b77d4647a137346985af549d8944c652ddd797e1856a30f296258eb275981bc9432f38532d6e141d603b002c75247b3e71b39dbc01e8e64bc0cd510bd1700685a95ead8fb3fe8fbd72be2e8f9f5a9f1b2c400bfdc0aeabb14a7538c9a38a4839bf41120f2c2aa00277a327d7dff15f52854146a94ea41e4f14a15443124c6bcff43489e7e242c8315ed8d542377fefb6002292c1adc571c730d67b8dab5a4da06659fe7b69bac3147ef39fc877c323edbb9912886ab468c530a8d7844692010ea93effd20f4ccc47b3ff51f378c12b1d03155d49772f14d65bf2ce38f589ca4647b6713ae081fd13e74b307aba8bc34a4406d78c26ccfdf328f5c273b294f6c6419cc157eca59939ec4c0b95cc6d5f97c83c3f14aeb5b88910ec29cf64496d9b1b855fe073d4791507c7533846cdd7810667427583b3a8b7febb2c43643c09bebbb12c08781ac9d0995723fb47febef49e0d6631f054e5b3b3a284391590cfb5d5cf4aaa71586cb37b9fffa15848176da20969e88ed87dd8a4fa2b5140fd56f0a9973217f8ce0c6ee50b67214b6d7d6b84d41d83694a14b2e96f0cb79b49f5fe4dd21727c00819e83b6ea203bada46e9ae8ce7bebaf24f05fd20672e4230b3851b8f05bb2f0977dda7c8cdd1f2689b7a10a72018ff76699e53b2a3f77bf7fa03fe3cf85d4859c9db915fa5c1ddff79e77d0b1b6316d3e50d0d60a42271332f3e81376f120836cd3ea55b7f1453833a7bce0058f79b698a4bd0e857ae35b8ac8f20ed8f238475757af11ce7b450cf89191a4f27a365f594ef68efe6ea1a5c3518712b1aa37a1f47e05f85debfa461f5346d985a71e49ef17f4eb068862977d56671d445176934be6b5318300d7debf3ad8d7da0c014b25af2d8fa52753974116a8cea6c974692f5de03b526a075cc3bc8a4375333f0ef09dd3c361738a151f326ba3253c171f8f7876107eeac122a65124e59dfe7c66bb9546d6428559df314063ac08c03d96b04b6a91508371fa18348c65238546f3d489c7efc1bd01e6e389fbeaa8f125bc7b7c8673904eb676bbdfa3680fea612ba20fab20cdd411c2bafe0417b76852de9e863f09d291bf59510ead793cfd9d6710c0de77cefb5b65481d3aabde2683457b13e3b32ebc06f60d5afa47e36f652a95bd16dcf55dd3e1b05d0df9b8a183553097c2aa95aa175eda6792f58a74170781260e6120981549b3836d13ef037178dd8ddcb5a5624f3790f9d92b0f8f3cd11bddf478cd79456db871f32dd6e24948dd762ba2c22a94300f527c1df5ff05aef5ae4893ff88adc8f7af779d03fcb4ecabfa32460315f27505681242064541657acbb29f531043ce1d04ad189045140232f24f46d0580ada560c61fa4a90aec4743a9a0d466493476923cdff87a21127bac3da7d61d674d8bc9bd63cc3df85c707a912773e090256d5a0bdc5da8ceae2ca25c596410982b63055e6d292a31776cefe58457cb6b5cb92a2c69ed5eeed35e4ea3d6b54ee22e41dea28adac6e1eeadf604f0ef3a67c86974c3ecacdb7f502c74ed31138123dcb80282dbfb0ea0fc2a6016dccecbcbe4952c27b09e7abf784db6b7cc55366d048f16f6473a268b90a1c9b9c612f88bed9008308b11e47d79329cbefc3f313863eff4a16e6a70c41a296d3042a1164d0578297642ec82da1f92dfaa6a67ff9cfcd1b3e88fc442246a303a0e539ce65ad6fcb6d8657937cd88d4c30fd369f2bef0308f5db8824919139b25f82f56e24ef4cf1feda07c3bef9dd215575ed774dc05603f4664332c7b002c48d873bf1ebec930a273efc78dafe153f7eba9161002ca9a8fa855bc357f3a67810fc081b9ae9b4f69401ef93d039c7c1398fa8c9eeb1ce001e08e9231ce2c2beacdafe2955d4056e18d4d09ed22a996666d4df5ca91c37663bb54eb42fe39712736fa0e64ad4f8ca843fe52702c9ae48e60a3f5eac160f58ff3cb80684120845b9e34bc1aecb19662b1a429926ae351d004eca1d367fcb34facbeb2184716c5140a7e420c7f4379b0c43ce872b62723a587d9ad528c2aabf158cefa2df3422203b5cc73e9443825089527700b69a2331e0558a9b1e9d3e69a59896e6cf4df46b41a8cbb0e598a874fc23b16a6eda6eafde02451f0255ff9e6d1bd007c86dee8b6ae875752415b8057b916a3fe7b35cfcf7d38a50e461f1fc1d6a4541ba4079e1f21d0ea2a5ce4aad561215a1d75a2599c757cd6025753fc0578e4b7f4195ad025c46d50c5c351af1ce1e8f8c35439c8598293cd59d2e90a1445497b0249a314379dd13e95f00f2d8240190da9e12adbdd809b1a96900054db156d2893f7998aca02c86f61478a9b21e9e11a6f4b9f7f382243739e492e9048ed9c7b0b8118d966c0f41709abd171873c498a3168639bb2451e0f65e93755fc9cbf3b996ed0873a8256a579372146c3a1e749a9a640f8e9c01af2d0fdd34f2b5fcf4e0bac0b7becd41851359f89dc17156b6ddbd6377c05a059cde362397f28ae2cbbdac107142b40913aaf059d897039ce3fda8c29ae93210676e44f131f78e78d68d858bb7fde230a2f0fd542c5e8374fdc11a488da9de28bc3992a8d74089de36a732110c841bbdc5f24f71663d9a5f5209791fb7027749be23cdb3380f581151563d3707290cd31b28c13139b8e041cd72af3ad9b0fd0b3f131608a8ec5d80c4e7cd458abebae0244c921ef69a4ea0e9a2c2073bd13b49f574a7e278c7ba08c22d89b678a3cd814e8d0dea0101d95f789ada5178f46a4c6beb8dd12352cec179c886ae98ac2bc4382acb565df99eaff3f6824536ef7de884176ea3ca14a9f225f8ada2aac871e7c35df92943600cf7961b8eefdeb70d985fbc93252c978c5c773b4f2ab4b7683e2563d36ebfa4355969f6201e4bcac04ede3c6c9a18ed23f23ec331cbe2d645fa4ffcb2c742ba4905788c27a9bc97536dcbc08d3cbdd2f7195acc0f0eb3cf52aad9a1d23a1dd3633a49a482a1c1eb8761dcc7474f0fd4596a661b7668ab22ebecbfe33886b9b4a0c250380a9a34fefd9724ff89b32e5622258287b3281bcccd0bade4e260b6fefe73219c41f2de521587404ac1d2de4e2999202b3870099718115552aac2d446e649", 0xb82}, {&(0x7f0000002440)="253c10cd0a56ebbb9e8b465670109c340c95f1d27d36cbeb7fa948545e9b18da346b70b5dc6ea12ad1a30e4f7038336f1af1d61b04de988f1755e9b3ba9919b2a4952ceda920a7f0e22dd239d4a74f2d1c854bc64f09f979aa3e9f5c25ff8ec189e5d809483583f648cd8870291200e428", 0x71}, {&(0x7f00000024c0)="2ba671ae8107530b978dd82841597ed8f4275ed9e6b9f7b73ee6324ddf688ad9d88125b82afd2e28aef7183086ce0dd4ee880fc56a2ca8b52ef8f5b5f3e475f49b0bcd201fe612703d680fdd1151dd32535b04d4697d472c7750d6c4c197162e9f872253b611b1ca20e79dcf40d1faf58a453f8db9a03fdd351b54ad4e77fa0fda7990bb281079ae7ba3994aef7380e1d6342305e2d12c57379fd12e784f48e4e832171df4576c8724e3bfd70ebc92fc11914cd4", 0xb4}, {&(0x7f00000025c0)="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", 0xa9b}], 0x7}}], 0x300, 0x0) 1.462743173s ago: executing program 3 (id=4020): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x6) 1.250515446s ago: executing program 4 (id=4021): r0 = socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=ANY=[@ANYBLOB="340000b09000390429bd700000000000000000004c47574bc5802e493415624e35fd15e3005c9f5e9ed16426d814f8805060d82f26dc04b4e0109ecc0f8accbc2ae7f69d38383bf41a8752f2652901a7fc1d1a0f7b9cac9ab9c63c425c84084bda730cc17e8e22f13e035c792e3eae0b053b5a6af07ac4474d45e05ff2c08515c34f74e3eb85a69d2338edb19acb57d56e99ef22b8df68a88b1e8230381d4bcd203fd0b6494548dd92f4eab99940032b8bbff2418b32d8f3b6fd6a2dd2bed9b2d2a3f067fb78ee868e3d78f481f688d15bb22d6e53bc8373f860b8808de6914196c2edaf9b1f6ded", @ANYRES32=0x0, @ANYBLOB="0198000000000000140012800b000100697036677265000004000280"], 0x34}, 0x1, 0x0, 0x0, 0x20048001}, 0x4000004) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b40)=@delchain={0x104, 0x65, 0x2, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2, 0xa}, {0xfff2, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0xd0, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x5}, @TCA_BPF_ACT={0xb4, 0x1, [@m_ctinfo={0xb0, 0x1b, 0x0, 0x0, {{0xb}, {0xfffffffffffffc39, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x401}, @TCA_CTINFO_ACT={0x18, 0x3, {0xd, 0x6, 0x1, 0x101, 0x4}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x8, 0x8, 0x5, 0x0, 0x9}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x1, 0x4, 0x8, 0x8, 0x40}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x400}, @TCA_CTINFO_ACT={0x18, 0x3, {0x5, 0x1, 0x0, 0x371a7291, 0x6}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x3}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x5}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_FD={0x8}]}}]}, 0x104}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r1, 0x1, 0x19, 0x0, &(0x7f0000000280)) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000090a010400000000000000001000000008000a40000000000900010073797a30000000000900020073797a32000000000800054000000033080003400000001408000c40000000000800084040"], 0x7c}}, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000440)={'veth1_macvtap\x00', 0x102}) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x100, 0x6}, 0x4) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x64, 0x0, 0x0, 0xfffffffd}]}, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1a, 0xb}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0xfffffffffffffe56, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x2, 0x9, 0x5}, {0x12, 0x2, 0x3, 0x3, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8054}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffe0, 0xa}, {0xf, 0x3}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8855}, 0x4004040) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r8, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@generic={0xd4, 0x0, 0x0, 0x0, 0x10}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) ioctl$sock_netdev_private(r8, 0x89f8, &(0x7f0000000000)) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000540)={r10, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) 1.224710148s ago: executing program 3 (id=4022): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000380), &(0x7f00000003c0)=0x30) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r6) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48050}, 0x40004) recvmmsg(r9, &(0x7f0000005140)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f00000052c0)=""/235, 0xeb}, {&(0x7f0000003080)=""/4096, 0x1000}], 0x3}, 0x3}], 0x1b00, 0x0, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="500000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100030000000c0002001c0000000f49000008000500", @ANYRES32=r10], 0x50}}, 0xc0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 1.212720976s ago: executing program 1 (id=4023): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30de0006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) 1.043563783s ago: executing program 0 (id=4024): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000500)=[{&(0x7f0000000080)="580000001400add527323b472545b45602117f9affff81000000ff0000f03ac71002000000fffffffffeffffffffe7ee000000000000000002000000000000000000006587f7000000000000000000000000008000000000", 0x58}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a80)=@newqdisc={0x60, 0x24, 0xf0b, 0x4000, 0x25dfdbfc, {0x0, 0x0, 0x12, r1, {0x0, 0xfff2}, {0x6, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x30, 0x2, [@TCA_CAKE_OVERHEAD={0x8, 0x6, 0x11}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x8000}, @TCA_CAKE_ACK_FILTER={0x8}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x200}, @TCA_CAKE_ATM={0x8, 0x4, 0x2}]}}]}, 0x60}}, 0x48004) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0xffffffffffffffa6, 0x0, 0xffffffffffffffff, 0x60}, 0x48) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, ')\x00', 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ni={0x193, 0x0, 0x0, 0x1, 0x4, 0x3}}}}}}, 0x0) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000002020200090001007f"], 0x34}, 0x1, 0x40030000000000}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000b80)={@link_local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "2c96ed", 0x0, 0x3b, 0x0, @dev, @local}}}}, 0x0) 946.257272ms ago: executing program 1 (id=4025): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MFC(r1, 0x29, 0xcd, 0x0, 0x5c) sendmsg$AUDIT_TTY_GET(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x3f8, 0x300, 0x70bd26, 0x25dfdbfd, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x40010) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x800, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x8, 0x7}, {0xfff2, 0xfffa}, {0x6, 0x2}}, ["", ""]}, 0x24}}, 0x0) 811.952319ms ago: executing program 2 (id=4026): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0x20, &(0x7f0000000180)={@in={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}}}, 0x3, 0x0, 0x17, 0x0, "5e3b86774ed89ec669fabcaff49c2eeb8c1c0685564614c85bcf859a08695e2f3f309e196a0c67a7768e058e3008931c0870b2780eb77cbbee013423d43101cb8242bc42b8e0662749302c9ffcd1d119"}, 0xd8) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$kcm(0xa, 0x2, 0x88) (async) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x3e, &(0x7f00000000c0)=0x4000007, 0x4) (async) bind$llc(r4, &(0x7f0000000040), 0x10) sendmsg$inet(r3, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0x8000, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x34, {0x0, @local, @local}}}], 0x20}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c01000017000100000000000000000000000000000000000000ffffac1e00010000000000000000e0000002000000000000000000000000fe8000000000000000000000000000002001000000000000000000000000000200"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa0000000000000000000000002001000000000000000000000000000100000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000230bd506000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000008d8300000000000000000000440008"], 0x16c}}, 0x0) (async) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e26, @remote}}, 0x0, 0x0, 0x4e, 0x0, "25366c9c8467783835fb00d492c430c380e2a8b1ce8e820bc98bc75677ccedf1d307f2b62ed8335406ef1f5e68080b2f84c8e86a4487247a35151fbb0a3688cf394bd8d66dfeb454213e2000"}, 0xd8) (async) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async, rerun: 32) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (rerun: 32) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) writev(r5, &(0x7f00000036c0)=[{&(0x7f00000005c0)="8c", 0x1}, {&(0x7f0000000e80)="1e", 0x1}, {&(0x7f0000000080)="b7", 0x1}, {&(0x7f0000000c80)="aa", 0x1}, {&(0x7f0000000f80)="8949", 0x2}, {&(0x7f0000000d80)="06", 0x1}, {&(0x7f0000000f00)='b', 0x1}, {&(0x7f0000001100)="b6", 0x1}, {&(0x7f00000011c0)='n', 0x1}, {&(0x7f00000012c0)="ef", 0x1}, {&(0x7f0000001340)='y', 0x1}, {&(0x7f0000001440)="ec0d", 0x2}, {&(0x7f0000001500)='f', 0x1}, {&(0x7f00000016c0)="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", 0x941}, {&(0x7f00000015c0)="89", 0x1}, {&(0x7f00000026c0)="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", 0x941}], 0x10) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@ipv6_delroute={0x34, 0x19, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2200}, [@RTA_PRIORITY={0x8, 0x1e}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0xc, 0x1, {0x0, 0x8}}}]}, 0x34}}, 0x0) 703.702885ms ago: executing program 0 (id=4027): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x19}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x48}}, 0x400400c0) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) 702.519836ms ago: executing program 1 (id=4028): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r8, {}, {0x2, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x1}}]}}]}, 0x48}}, 0x4008000) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.time_recursive\x00', 0x0, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x10, &(0x7f0000002a00)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r10}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xe4, &(0x7f0000002b00)=""/228}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0x1, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r12}, &(0x7f0000000800), &(0x7f0000000840)=r13}, 0x20) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000640)={'syztnl1\x00', &(0x7f00000005c0)={'ip6tnl0\x00', r8, 0x2f, 0x6, 0x3, 0x1, 0x1, @dev={0xfe, 0x80, '\x00', 0xf}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x8000, 0x10, 0x8, 0x81}}) r15 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f00000009c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x70, 0x70, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x1, 0x5f}}, @volatile={0x4}, @typedef={0x3, 0x0, 0x0, 0x8, 0x1}, @var={0xa, 0x0, 0x0, 0xe, 0x4}, @const={0x2, 0x0, 0x0, 0xa, 0x5}, @type_tag={0x8, 0x0, 0x0, 0x12, 0x4}, @volatile={0xb, 0x0, 0x0, 0x9, 0x1}, @const={0x4, 0x0, 0x0, 0xa, 0x2}]}, {0x0, [0x30, 0x0, 0x61, 0x61, 0x2e, 0x61, 0x61]}}, &(0x7f00000006c0)=""/5, 0x91, 0x5, 0x1, 0x7, 0x10000}, 0x28) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000ac0)={0x1, 0xffffffffffffffff}, 0x4) r17 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x6, 0x4, 0x3, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r17, @ANYBLOB="0000000000000000b7080000000000007baaf8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x18, 0x3e, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ldst={0x1, 0x1, 0x3, 0x6, 0x6, 0xffffffffffffffff, 0x10}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x691}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r9}}, @ldst={0x0, 0x3, 0x4, 0x3, 0x5, 0x20, 0x10}, @tail_call={{0x18, 0x2, 0x1, 0x0, r10}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r11}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r12}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000003c0)='GPL\x00', 0xffffff70, 0xf5, &(0x7f00000004c0)=""/245, 0x40f00, 0x8, '\x00', r14, 0x0, r15, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a80)={0x2, 0x1, 0x4, 0x9}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000b00)=[r2, r16, r17], &(0x7f0000000b40)=[{0x5, 0x1, 0xf, 0x2}], 0x10, 0x7}, 0x94) 552.107404ms ago: executing program 2 (id=4029): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'lo\x00', &(0x7f0000000140)=@ethtool_per_queue_op={0x4b, 0xf, [0x2, 0x8, 0x10000, 0x7, 0x100, 0xfffffff9, 0xfffffffb, 0xb3, 0x3, 0x10001, 0x3107a6ef, 0xa889, 0xff, 0x401, 0x6, 0xfffffffd, 0xe03b, 0x2, 0x2, 0x2, 0x7f, 0x6, 0x7, 0x84, 0x0, 0x0, 0x9, 0x9, 0x1, 0x8, 0x0, 0xab, 0xb09, 0x1e, 0x2, 0xfffffffb, 0x10, 0x6, 0x0, 0x7, 0x5, 0xffff, 0x2, 0xf974, 0x45c, 0x0, 0x7e, 0x4, 0x0, 0xffffffff, 0x100, 0x1d65, 0x2, 0x4, 0x80e, 0x9, 0xffff0001, 0x1, 0x3, 0x10000, 0x100, 0xb12, 0x10001, 0x800, 0x1, 0x5, 0x4, 0x8, 0x2, 0xa, 0x10001, 0xffff, 0x2, 0x0, 0xb, 0x3ff, 0x8, 0x68, 0x800, 0x1000, 0xffffaa53, 0x1, 0x5a5, 0xd, 0x1, 0x1, 0x9, 0x52, 0x2, 0x2, 0x3, 0x2, 0x3, 0x7f, 0x10, 0x6, 0x9, 0x9, 0x3, 0x7fffffff, 0x400, 0x8, 0x4, 0x401, 0xfffffff9, 0x6867bc93, 0x8, 0x6, 0x10000, 0x834, 0x1, 0x1, 0xa021, 0xc, 0x3, 0x5b, 0x6, 0x2, 0x1, 0x4d51, 0x5, 0xc, 0x1a5, 0x1, 0x7, 0x8, 0x101, 0x3]}}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0xffffffe1}]}}}]}, 0x3c}}, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000c00)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r6, 0x80487436, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x9}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe4}, 0x1, 0x0, 0x0, 0x44000}, 0x0) listen(r4, 0xffffffff) r8 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r8, 0x84, 0x19, &(0x7f0000000200)={0x0, 0xfd8c}, 0x8) connect$pppl2tp(r8, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x3, 0x1, 0x3, 0x0, {0xa, 0x4e22, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}}}, 0x32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x36}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000040)="fbe65dc390da7ee179a4", 0xa}, {&(0x7f0000000700)="fdc913c5fb15c710950f8e561c846edc4223d841cad2a2154e3bad5fc74c8e5172171929da09a2e314c77de173e154838fc39c1684ea331216706f4d645dc0aea3d0e06b72545914394805a2513f1cc11bea6266382e51a10d7021329f79eb6067dfb71729c45f1c6833a0c39fab03fe8b0287fb43941b186dca8a2566859bd9d703269b72961338b8770982f94f867fb9cbdfbad33279788d610dc62ac87a843b674dcd97fd1ac6cb09047da172d781dd0a889441efaceaea", 0xb9}, {&(0x7f0000000f40)="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", 0x445}], 0x3}, 0x40080) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000380)={{0x2, 0x4e20, @remote}, {0x1, @local}, 0x8, {0x2, 0x4e24, @broadcast}, 'ip6gretap0\x00'}) 547.584168ms ago: executing program 0 (id=4030): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendto$x25(r0, 0x0, 0x0, 0x800, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x56}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb9}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc0}}, 0x0) 381.080262ms ago: executing program 4 (id=4031): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='k'], 0x8) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x32}, @in6=@mcast2, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000240)=ANY=[@ANYBLOB="05000000000000007b113400000000008510000002000000850000000000000095003300000000009500a5660e0000009f3be7f40752ed289350a3b5257dfc7e5429619ce459a63169ccb691d1a8f1ab83013d"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x9b}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071041b000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 358.79019ms ago: executing program 0 (id=4032): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)=0x3) (async, rerun: 32) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000300)="80fdc7000040", 0x6}], 0x1, 0x0, 0x0) (rerun: 32) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000840)={'ip6gre0\x00', &(0x7f00000007c0)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x1, 0xf, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x10, 0x3, 0x8e}}) 266.40661ms ago: executing program 4 (id=4033): r0 = socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x4e21, @private=0xa010100}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="a2f3622d205dccba53bea7c37b599967e5a60502510f28994961eb79f885a7335df243e02af6c09d6277d78748cdbb8776a94e5e904e37c4bb4aa29f1bfa70d6225ad712beae3550b1264231568b5e4d2f6f404f32eaeb9e5e2b20da9a854492c74546b8b96b1e57dc84cb23d7346a285272", 0x72}, {&(0x7f00000001c0)="68a2e138f08f7b51aadca231ca4d786cbe7fb27d6924bc0395e31e454c885d99151d6d5674a46d78c845bdddcc4b7ee4b8594c06eb2aaf567a31f664aec3a1bdb0030b88e1cff44d32cc2081c71d1f3b25bc0e2366a2ae113bdd921f031efb8c402a2fc3b57bb7a7761dcb45fe7a75dfdd100729d49b4d5851ceee3c4747ba5e5f135b439a6b14dcca752e5801b06bcd389d490beed443851390aa266a43b8957b0ebe02d90439545a705ec18b3883bdcfc9c2e2d1e4f027ed7f83c7aeecaf5aff9115b5", 0xc4}, {&(0x7f0000000540)="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", 0x1000}, {&(0x7f00000002c0)="4c1c108325c2cc4c518a5d3cfedb880b7fd80af0568e574ea2858ef57c9591fc93d18270cc56309d277f74198f82b210b166c1b5144b02e13005d034f71db35b7e13b1af824fffe1b27a2485d4f636af9936a4937670a5fe337ecd9586c4602aec9d7aa9e567a3bf5354023f108caf2c422d9cdadf047c3fee7bee14b18bef9e4e7fb52b87b1e4ff72100bb64609c3d9f5082f7f8e0464ece95f06254c19e95289c22e8cd8dc5dbba6a6dbf36fcfac0e521f93d8737373c54d32faf8a82131870e0a", 0xc2}], 0x4, &(0x7f0000001540)=[@ip_ttl={{0x14, 0x0, 0x2, 0x80}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffff001}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x200}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_ttl={{0x14, 0x0, 0x2, 0x10000}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x90}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000001600)=[{0x4, 0x5, 0xb, 0xb}, {0x2, 0x4, 0x5, 0xa}, {0x2, 0x1, 0x8, 0x3}, {0x1, 0x4, 0x4, 0xc}, {0x5, 0x5, 0xa, 0x7}, {0x5, 0x4, 0x0, 0x3}, {0x5, 0x2, 0xd, 0xa}, {0x4, 0x1, 0xe, 0x1}], 0x10, 0x8}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c00018006000600800a00000800028004007280080007"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 243.817929ms ago: executing program 2 (id=4034): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-des3_ede-asm\x00'}, 0x58) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0xfe3b) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newqdisc={0x4c, 0x24, 0xf0b, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xaa, 0xa, 0x10, 0x0, 0x1ff, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040081}, 0x4000004) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@delchain={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x6, 0xfff1}, {0xe, 0xd}}}, 0x24}}, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="674e6883a6537778de895c168af25e4293dad05de695165fdd", 0x19) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xe, 0x0, &(0x7f0000000280)="432275e2065074ef2415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket$igmp(0x2, 0x3, 0x2) bind$inet(r8, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0xc09, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50081}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}]}}}]}, 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$kcm(0x10, 0x2, 0x4) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r2, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-des3_ede-asm\x00'}, 0x58) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0xfe3b) (async) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newqdisc={0x4c, 0x24, 0xf0b, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xaa, 0xa, 0x10, 0x0, 0x1ff, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040081}, 0x4000004) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@delchain={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x6, 0xfff1}, {0xe, 0xd}}}, 0x24}}, 0x0) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="674e6883a6537778de895c168af25e4293dad05de695165fdd", 0x19) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xe, 0x0, &(0x7f0000000280)="432275e2065074ef2415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) socket$igmp(0x2, 0x3, 0x2) (async) bind$inet(r8, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) (async) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0xc09, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50081}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc}, @IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}]}}}]}, 0x48}}, 0x0) (async) 43.770406ms ago: executing program 4 (id=4035): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30f50006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) 0s ago: executing program 4 (id=4036): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xfd, 0x3, 0x0, @loopback}, 0x1c) r1 = socket(0x2, 0x3, 0xff) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r2 = socket(0x2, 0x3, 0xff) sendto$inet(r2, &(0x7f0000000040)="b401fcc8070000090000008e052af9c34b7d7494", 0xffffffe1, 0x4085, &(0x7f0000000000)={0x2, 0x4e21, @private=0xa010102}, 0x10) sendmsg$inet(r1, &(0x7f0000001480)={&(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f00000013c0)=[{&(0x7f0000000200)="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", 0x5dd}], 0x1}, 0x40800) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) close(r4) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$SIOCNRDECOBS(r5, 0x89e2) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000040)=0x9, 0x4) kernel console output (not intermixed with test programs): 488] bond16: entered promiscuous mode [ 357.571249][T16488] geneve4: entered promiscuous mode [ 357.581209][T16488] bond17: entered promiscuous mode [ 357.589810][T16488] bond19: entered promiscuous mode [ 357.596427][T16488] bond20: entered promiscuous mode [ 357.603071][T16488] bridge7: entered promiscuous mode [ 357.608690][T16488] bridge8: entered promiscuous mode [ 357.614915][T16488] bond21: entered promiscuous mode [ 357.621513][T16488] veth17: entered promiscuous mode [ 357.627259][T16488] veth18: entered promiscuous mode [ 357.635826][T16488] bond22: entered promiscuous mode [ 357.642564][T16488] veth19: entered promiscuous mode [ 357.649816][T16488] veth20: entered promiscuous mode [ 357.657886][T16488] vxcan0: entered promiscuous mode [ 357.664557][T16488] vxcan1: entered promiscuous mode [ 357.672447][T16488] bond24: entered promiscuous mode [ 357.681873][T16488] vlan0: entered promiscuous mode [ 357.688967][T16488] bond26: entered promiscuous mode [ 357.694952][T16488] veth21: entered promiscuous mode [ 357.700832][T16488] veth22: entered promiscuous mode [ 357.707558][T16488] bond27: entered promiscuous mode [ 357.714295][T16488] veth23: entered promiscuous mode [ 357.720390][T16488] veth24: entered promiscuous mode [ 357.732991][T16488] erspan0.0: entered promiscuous mode [ 357.739362][T16488] bridge9: entered promiscuous mode [ 357.746857][T16488] ip6erspan0: entered promiscuous mode [ 357.753961][T16488] bond30: entered promiscuous mode [ 357.760889][T16488] veth25: entered promiscuous mode [ 357.766722][T16488] veth26: entered promiscuous mode [ 357.773974][T16488] ip6erspan1: entered promiscuous mode [ 357.782079][T16488] gre3: entered promiscuous mode [ 357.788788][T16488] bond31: entered promiscuous mode [ 357.796504][T16488] bond32: entered promiscuous mode [ 357.802881][T16488] veth27: entered promiscuous mode [ 357.812691][T16488] veth28: entered promiscuous mode [ 357.819231][T16488] ip6tnl2: entered promiscuous mode [ 357.855717][ T5990] lo speed is unknown, defaulting to 1000 [ 357.891002][ T13] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 357.895565][T16502] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3215'. [ 357.907067][ T2154] lo speed is unknown, defaulting to 1000 [ 358.044364][ T13] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 358.056173][T16477] lo speed is unknown, defaulting to 1000 [ 358.098884][ T13] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 358.207112][ T13] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 358.228986][T16511] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3218'. [ 358.267381][T16517] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3220'. [ 358.341631][T16511] 8021q: adding VLAN 0 to HW filter on device bond12 [ 358.513480][T16526] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3221'. [ 358.713191][T16477] lo speed is unknown, defaulting to 1000 [ 358.748347][ T51] Bluetooth: hci0: command tx timeout [ 358.990903][T16538] sch_tbf: peakrate 7 is lower than or equals to rate 2147483647 ! [ 359.173521][T16541] netlink: 'syz.4.3227': attribute type 1 has an invalid length. [ 359.182090][T16543] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3228'. [ 359.200966][T16543] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3228'. [ 359.213665][T16543] netlink: 'syz.1.3228': attribute type 14 has an invalid length. [ 359.222145][T16543] netlink: 'syz.1.3228': attribute type 13 has an invalid length. [ 359.245608][T16374] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 359.264620][T16477] lo speed is unknown, defaulting to 1000 [ 359.265475][T16374] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 359.277895][T16541] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3227'. [ 359.292534][T16374] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 359.329559][T16541] 8021q: adding VLAN 0 to HW filter on device bond33 [ 359.339167][T16374] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 359.726909][T16557] 8021q: adding VLAN 0 to HW filter on device bond34 [ 359.831414][T16477] lo speed is unknown, defaulting to 1000 [ 359.949083][T16566] vlan2: entered promiscuous mode [ 359.964664][T16570] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 360.059728][T16374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.211954][T16374] 8021q: adding VLAN 0 to HW filter on device team0 [ 360.266132][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.273648][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.386774][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.394060][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 360.465270][T16477] lo speed is unknown, defaulting to 1000 [ 360.828728][ T51] Bluetooth: hci0: command tx timeout [ 360.896091][T16601] netlink: 'syz.1.3240': attribute type 4 has an invalid length. [ 361.035324][T16477] lo speed is unknown, defaulting to 1000 [ 361.061264][T16374] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 361.194192][T16374] veth0_vlan: entered promiscuous mode [ 361.251047][T16374] veth1_vlan: entered promiscuous mode [ 361.347247][T16374] veth0_macvtap: entered promiscuous mode [ 361.352068][T16611] netlink: 'syz.3.3245': attribute type 10 has an invalid length. [ 361.356242][T16610] netlink: 'syz.3.3245': attribute type 1 has an invalid length. [ 361.381806][T16374] veth1_macvtap: entered promiscuous mode [ 361.399672][T16610] netlink: 'syz.3.3245': attribute type 1 has an invalid length. [ 361.409904][T16611] veth0_vlan: entered allmulticast mode [ 361.422478][T16610] netlink: 'syz.3.3245': attribute type 1 has an invalid length. [ 361.452336][T16611] team0: Device veth0_vlan failed to register rx_handler [ 361.504187][T16611] team0: Device veth0_vlan failed to register rx_handler [ 361.529699][T16611] team0: Device veth0_vlan failed to register rx_handler [ 361.556066][T16477] lo speed is unknown, defaulting to 1000 [ 361.561375][T16611] team0: Device veth0_vlan failed to register rx_handler [ 361.623319][T16611] team0: Device veth0_vlan failed to register rx_handler [ 361.661005][T16611] team0: Device veth0_vlan failed to register rx_handler [ 361.678830][T16611] team0: Device veth0_vlan failed to register rx_handler [ 361.704293][T16611] team0: Device veth0_vlan failed to register rx_handler [ 361.719963][T16611] validate_nla: 69 callbacks suppressed [ 361.719983][T16611] netlink: 'syz.3.3245': attribute type 10 has an invalid length. [ 361.737339][T16374] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 361.775370][T16611] team0: Device veth0_vlan failed to register rx_handler [ 361.793604][T16611] netlink: 'syz.3.3245': attribute type 10 has an invalid length. [ 361.806070][T16611] team0: Device veth0_vlan failed to register rx_handler [ 361.827889][T16611] netlink: 'syz.3.3245': attribute type 10 has an invalid length. [ 361.840678][T16611] team0: Device veth0_vlan failed to register rx_handler [ 361.855641][T16611] netlink: 'syz.3.3245': attribute type 10 has an invalid length. [ 361.869674][T16374] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 361.885787][T16611] team0: Device veth0_vlan failed to register rx_handler [ 361.904934][T16611] netlink: 'syz.3.3245': attribute type 10 has an invalid length. [ 361.920367][ T2977] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.933554][ T2977] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.949788][T16611] team0: Device veth0_vlan failed to register rx_handler [ 361.964888][T16611] netlink: 'syz.3.3245': attribute type 10 has an invalid length. [ 361.977075][T16611] team0: Device veth0_vlan failed to register rx_handler [ 361.990176][T16611] netlink: 'syz.3.3245': attribute type 10 has an invalid length. [ 362.003053][T16611] team0: Device veth0_vlan failed to register rx_handler [ 362.019080][ T2977] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.029075][T16611] netlink: 'syz.3.3245': attribute type 10 has an invalid length. [ 362.049600][ T2977] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.069473][T16611] team0: Device veth0_vlan failed to register rx_handler [ 362.093566][T16611] netlink: 'syz.3.3245': attribute type 10 has an invalid length. [ 362.134952][T16611] team0: Device veth0_vlan failed to register rx_handler [ 362.171974][T16611] netlink: 'syz.3.3245': attribute type 10 has an invalid length. [ 362.221501][T16611] team0: Device veth0_vlan failed to register rx_handler [ 362.256207][T16477] lo speed is unknown, defaulting to 1000 [ 362.282851][T16625] __nla_validate_parse: 5 callbacks suppressed [ 362.282873][T16625] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3249'. [ 362.325378][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.340207][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.353349][T16628] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3250'. [ 362.394725][T16625] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3249'. [ 362.426191][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.437437][T16625] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3249'. [ 362.450128][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.690222][T16632] FAULT_INJECTION: forcing a failure. [ 362.690222][T16632] name failslab, interval 1, probability 0, space 0, times 0 [ 362.728779][T16632] CPU: 1 UID: 0 PID: 16632 Comm: syz.3.3252 Not tainted syzkaller #0 PREEMPT(full) [ 362.728826][T16632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 362.728849][T16632] Call Trace: [ 362.728858][T16632] [ 362.728869][T16632] dump_stack_lvl+0x189/0x250 [ 362.728911][T16632] ? __pfx____ratelimit+0x10/0x10 [ 362.728942][T16632] ? __pfx_dump_stack_lvl+0x10/0x10 [ 362.728968][T16632] ? __pfx__printk+0x10/0x10 [ 362.729006][T16632] ? __pfx___might_resched+0x10/0x10 [ 362.729025][T16632] ? fs_reclaim_acquire+0x7d/0x100 [ 362.729065][T16632] should_fail_ex+0x414/0x560 [ 362.729100][T16632] should_failslab+0xa8/0x100 [ 362.729134][T16632] kmem_cache_alloc_noprof+0x73/0x3c0 [ 362.729163][T16632] ? vm_area_dup+0x2b/0x680 [ 362.729200][T16632] vm_area_dup+0x2b/0x680 [ 362.729239][T16632] __split_vma+0x1a9/0xa00 [ 362.729277][T16632] ? __pfx___split_vma+0x10/0x10 [ 362.729315][T16632] ? can_vma_merge_left+0x11e/0x6b0 [ 362.729348][T16632] vma_modify+0x13b3/0x1970 [ 362.729395][T16632] vma_modify_flags+0x1e8/0x230 [ 362.729423][T16632] ? __pfx_vma_modify_flags+0x10/0x10 [ 362.729468][T16632] ? may_expand_vm+0x1b6/0x2f0 [ 362.729503][T16632] mprotect_fixup+0x407/0x9c0 [ 362.729535][T16632] ? __pfx_mprotect_fixup+0x10/0x10 [ 362.729569][T16632] do_mprotect_pkey+0x8cd/0xce0 [ 362.729608][T16632] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 362.729657][T16632] ? __pfx_mem_cgroup_handle_over_high+0x10/0x10 [ 362.729697][T16632] __x64_sys_mprotect+0x80/0x90 [ 362.729727][T16632] do_syscall_64+0xfa/0x3b0 [ 362.729776][T16632] ? lockdep_hardirqs_on+0x9c/0x150 [ 362.729805][T16632] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.729827][T16632] ? clear_bhb_loop+0x60/0xb0 [ 362.729855][T16632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.729881][T16632] RIP: 0033:0x7f659f98eca7 [ 362.729907][T16632] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 362.729926][T16632] RSP: 002b:00007f65a07d8bf8 EFLAGS: 00000217 ORIG_RAX: 000000000000000a [ 362.729950][T16632] RAX: ffffffffffffffda RBX: 00007f6598000000 RCX: 00007f659f98eca7 [ 362.729967][T16632] RDX: 0000000000000003 RSI: 0000000000021000 RDI: 00007f6598000000 [ 362.729981][T16632] RBP: 0000000004000000 R08: 00000000ffffffff R09: 0000000000000000 [ 362.729996][T16632] R10: 0000000000004022 R11: 0000000000000217 R12: 00007f659c000000 [ 362.730010][T16632] R13: 0000000000001000 R14: 0000000000021000 R15: 0000000002600000 [ 362.730046][T16632] [ 363.071890][T16641] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3253'. [ 363.143117][T16645] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 363.153396][T16645] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 363.225409][T16477] lo speed is unknown, defaulting to 1000 [ 363.476062][T16656] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3259'. [ 363.513641][T16656] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3259'. [ 364.081803][T16667] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3263'. [ 364.192948][T16673] 8021q: adding VLAN 0 to HW filter on device bond4 [ 364.257993][T16672] bond1: (slave gretap1): making interface the new active one [ 364.284362][T16672] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 364.378311][T16677] bond4: (slave veth5): Enslaving as an active interface with a down link [ 364.429590][T16667] 8021q: adding VLAN 0 to HW filter on device bond1 [ 364.461115][T16678] bond3: (slave veth0_to_bond): Releasing active interface [ 364.480800][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 364.496924][T16678] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 364.515172][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 364.533083][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 364.542553][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 364.550846][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 364.579794][ T5864] syz_tun (unregistering): left allmulticast mode [ 364.591110][ T5864] bridge0: port 4(syz_tun) entered disabled state [ 364.651731][T16686] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 364.677973][T16686] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 364.954328][T16702] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3276'. [ 364.966224][T16704] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3276'. [ 365.397828][T16684] lo speed is unknown, defaulting to 1000 [ 365.413687][T16689] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 365.420671][T16689] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 365.565887][T16721] bond2: (slave gretap1): making interface the new active one [ 365.579002][T16721] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 365.637872][T16719] 8021q: adding VLAN 0 to HW filter on device bond2 [ 365.656024][T16689] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 365.678542][T16689] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 366.139095][T16737] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 366.164258][T16737] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 366.241948][T16684] chnl_net:caif_netlink_parms(): no params data found [ 366.436683][T16741] 8021q: adding VLAN 0 to HW filter on device bond13 [ 366.579750][T16684] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.587149][T16684] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.595633][T16684] bridge_slave_0: entered allmulticast mode [ 366.606491][T16684] bridge_slave_0: entered promiscuous mode [ 366.652605][T16684] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.660210][T16684] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.667800][T16684] bridge_slave_1: entered allmulticast mode [ 366.676175][T16684] bridge_slave_1: entered promiscuous mode [ 366.816620][T16760] 8021q: adding VLAN 0 to HW filter on device bond2 [ 366.837397][T16764] validate_nla: 8 callbacks suppressed [ 366.837420][T16764] netlink: 'syz.2.3292': attribute type 30 has an invalid length. [ 366.859102][T16684] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 366.905886][T16684] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 366.973733][T16766] FAULT_INJECTION: forcing a failure. [ 366.973733][T16766] name failslab, interval 1, probability 0, space 0, times 0 [ 367.002739][T16766] CPU: 1 UID: 0 PID: 16766 Comm: syz.0.3293 Not tainted syzkaller #0 PREEMPT(full) [ 367.002773][T16766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 367.002792][T16766] Call Trace: [ 367.002803][T16766] [ 367.002815][T16766] dump_stack_lvl+0x189/0x250 [ 367.002850][T16766] ? __pfx____ratelimit+0x10/0x10 [ 367.002883][T16766] ? __pfx_dump_stack_lvl+0x10/0x10 [ 367.002911][T16766] ? __pfx__printk+0x10/0x10 [ 367.002951][T16766] ? __pfx___might_resched+0x10/0x10 [ 367.002980][T16766] should_fail_ex+0x414/0x560 [ 367.003017][T16766] should_failslab+0xa8/0x100 [ 367.003054][T16766] kmem_cache_alloc_noprof+0x73/0x3c0 [ 367.003084][T16766] ? ptlock_alloc+0x20/0x70 [ 367.003120][T16766] ptlock_alloc+0x20/0x70 [ 367.003150][T16766] pte_alloc_one+0x7d/0x170 [ 367.003183][T16766] __pte_alloc+0x25/0x1a0 [ 367.003210][T16766] __handle_mm_fault+0x49b3/0x5440 [ 367.003238][T16766] ? __lock_acquire+0xab9/0xd20 [ 367.003297][T16766] ? __pfx___handle_mm_fault+0x10/0x10 [ 367.003345][T16766] ? lock_vma_under_rcu+0xdf/0x3d0 [ 367.003377][T16766] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 367.003419][T16766] handle_mm_fault+0x40a/0x8e0 [ 367.003462][T16766] do_user_addr_fault+0xa81/0x1390 [ 367.003506][T16766] ? rcu_is_watching+0x15/0xb0 [ 367.003529][T16766] ? trace_page_fault_user+0x84/0x1e0 [ 367.003568][T16766] exc_page_fault+0x76/0xf0 [ 367.003602][T16766] asm_exc_page_fault+0x26/0x30 [ 367.003627][T16766] RIP: 0033:0x7fc1b614a4df [ 367.003648][T16766] Code: f6 48 89 df e8 e2 47 04 00 85 c0 0f 85 4a 01 00 00 48 8b 05 7b d7 23 00 48 83 e8 01 4c 39 f0 0f 82 c6 00 00 00 66 0f 6f 0c 24 <4c> 89 6b 20 0f 11 4b 10 48 83 c4 18 48 89 d8 5b 5d 41 5c 41 5d 41 [ 367.003667][T16766] RSP: 002b:00007fc1b6ffac00 EFLAGS: 00010286 [ 367.003688][T16766] RAX: ffffffffffffffff RBX: 00007fc1b0000000 RCX: 00007fc1b618eca7 [ 367.003705][T16766] RDX: 0000000000000003 RSI: 0000000000021000 RDI: 00007fc1b0000000 [ 367.003720][T16766] RBP: 0000000004000000 R08: 00000000ffffffff R09: 0000000000000000 [ 367.003734][T16766] R10: 0000000000004022 R11: 0000000000000217 R12: 00007fc1b4000000 [ 367.003749][T16766] R13: 0000000000001000 R14: 0000000000021000 R15: 0000000003e00000 [ 367.003786][T16766] [ 367.003941][T16766] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 367.362378][T16684] team0: Port device team_slave_0 added [ 367.375159][T16777] netlink: 'syz.0.3296': attribute type 1 has an invalid length. [ 367.377614][T16684] team0: Port device team_slave_1 added [ 367.411831][T16763] delete_channel: no stack [ 367.484010][T16684] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 367.513633][T16684] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.564303][T16684] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 367.635060][T16786] __nla_validate_parse: 136 callbacks suppressed [ 367.635093][T16786] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3297'. [ 367.683165][T16783] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 367.705622][T16783] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 367.790139][T16684] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 367.806676][T16684] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.846300][T16684] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 368.021702][T16684] hsr_slave_0: entered promiscuous mode [ 368.039541][T16684] hsr_slave_1: entered promiscuous mode [ 368.042977][T16795] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3301'. [ 368.049514][T16684] debugfs: 'hsr0' already exists in 'hsr' [ 368.083837][T16684] Cannot create hsr debugfs directory [ 368.093072][T16795] netlink: 'syz.1.3301': attribute type 4 has an invalid length. [ 368.150423][T16800] netlink: 'syz.2.3304': attribute type 1 has an invalid length. [ 368.153054][T16798] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3303'. [ 368.220807][T16802] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3304'. [ 368.260014][T16802] 8021q: adding VLAN 0 to HW filter on device bond5 [ 368.404883][T16806] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3306'. [ 368.805117][T16819] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3311'. [ 368.831926][T16833] FAULT_INJECTION: forcing a failure. [ 368.831926][T16833] name failslab, interval 1, probability 0, space 0, times 0 [ 368.859275][T16833] CPU: 0 UID: 0 PID: 16833 Comm: syz.1.3314 Not tainted syzkaller #0 PREEMPT(full) [ 368.859306][T16833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 368.859321][T16833] Call Trace: [ 368.859330][T16833] [ 368.859340][T16833] dump_stack_lvl+0x189/0x250 [ 368.859373][T16833] ? __pfx____ratelimit+0x10/0x10 [ 368.859404][T16833] ? __pfx_dump_stack_lvl+0x10/0x10 [ 368.859431][T16833] ? __pfx__printk+0x10/0x10 [ 368.859470][T16833] ? __pfx___might_resched+0x10/0x10 [ 368.859490][T16833] ? fs_reclaim_acquire+0x7d/0x100 [ 368.859531][T16833] should_fail_ex+0x414/0x560 [ 368.859567][T16833] should_failslab+0xa8/0x100 [ 368.859601][T16833] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 368.859632][T16833] ? __alloc_skb+0x112/0x2d0 [ 368.859671][T16833] __alloc_skb+0x112/0x2d0 [ 368.859715][T16833] netlink_ack+0x146/0xa50 [ 368.859744][T16833] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 368.859796][T16833] netlink_rcv_skb+0x28c/0x470 [ 368.859825][T16833] ? __lock_acquire+0xab9/0xd20 [ 368.859859][T16833] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 368.859894][T16833] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 368.859939][T16833] ? netlink_deliver_tap+0x2e/0x1b0 [ 368.859980][T16833] netlink_unicast+0x82c/0x9e0 [ 368.860020][T16833] ? __pfx_netlink_unicast+0x10/0x10 [ 368.860051][T16833] ? netlink_sendmsg+0x642/0xb30 [ 368.860088][T16833] ? skb_put+0x11b/0x210 [ 368.860126][T16833] netlink_sendmsg+0x805/0xb30 [ 368.860170][T16833] ? __pfx_netlink_sendmsg+0x10/0x10 [ 368.860207][T16833] ? aa_sock_msg_perm+0xf1/0x1d0 [ 368.860244][T16833] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 368.860269][T16833] ? __pfx_netlink_sendmsg+0x10/0x10 [ 368.860303][T16833] __sock_sendmsg+0x21c/0x270 [ 368.860335][T16833] ____sys_sendmsg+0x52d/0x830 [ 368.860363][T16833] ? __pfx_____sys_sendmsg+0x10/0x10 [ 368.860395][T16833] ? import_iovec+0x74/0xa0 [ 368.860425][T16833] ___sys_sendmsg+0x21f/0x2a0 [ 368.860450][T16833] ? __pfx____sys_sendmsg+0x10/0x10 [ 368.860514][T16833] ? __fget_files+0x2a/0x420 [ 368.860546][T16833] ? __fget_files+0x3a0/0x420 [ 368.860591][T16833] __sys_sendmmsg+0x227/0x430 [ 368.860622][T16833] ? __pfx___sys_sendmmsg+0x10/0x10 [ 368.860641][T16833] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 368.860704][T16833] ? ksys_write+0x22a/0x250 [ 368.860736][T16833] ? __pfx_ksys_write+0x10/0x10 [ 368.860762][T16833] ? rcu_is_watching+0x15/0xb0 [ 368.860792][T16833] __x64_sys_sendmmsg+0xa0/0xc0 [ 368.860818][T16833] do_syscall_64+0xfa/0x3b0 [ 368.860848][T16833] ? lockdep_hardirqs_on+0x9c/0x150 [ 368.860877][T16833] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.860899][T16833] ? clear_bhb_loop+0x60/0xb0 [ 368.860926][T16833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.860947][T16833] RIP: 0033:0x7f5d6598ebe9 [ 368.860968][T16833] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 368.860988][T16833] RSP: 002b:00007f5d667f9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 368.861011][T16833] RAX: ffffffffffffffda RBX: 00007f5d65bb6090 RCX: 00007f5d6598ebe9 [ 368.861028][T16833] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000008 [ 368.861043][T16833] RBP: 00007f5d667f9090 R08: 0000000000000000 R09: 0000000000000000 [ 368.861057][T16833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 368.861078][T16833] R13: 00007f5d65bb6128 R14: 00007f5d65bb6090 R15: 00007ffef8044b88 [ 368.861115][T16833] [ 368.861248][T16833] netlink: 'syz.1.3314': attribute type 30 has an invalid length. [ 368.874173][T16826] netlink: 'syz.2.3313': attribute type 1 has an invalid length. [ 368.951836][T16819] 8021q: adding VLAN 0 to HW filter on device bond1 [ 368.972969][T16826] netlink: 'syz.2.3313': attribute type 1 has an invalid length. [ 369.092576][T16839] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3315'. [ 369.346390][T16843] netlink: 'syz.0.3317': attribute type 1 has an invalid length. [ 369.376198][T16825] delete_channel: no stack [ 369.426016][T16847] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3317'. [ 369.566326][T16684] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 369.647144][T16684] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 369.684756][T16854] Bluetooth: MGMT ver 1.23 [ 369.710330][T16684] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 369.734836][T16855] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3321'. [ 369.760662][T16684] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 370.062360][T16875] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3326'. [ 370.165799][T16684] 8021q: adding VLAN 0 to HW filter on device bond0 [ 370.269401][T16684] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.307815][T16883] netlink: 'syz.3.3329': attribute type 1 has an invalid length. [ 370.326490][T16886] syzkaller1: entered promiscuous mode [ 370.332648][T16886] syzkaller1: entered allmulticast mode [ 370.350146][T16886] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 370.357492][ T3530] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.365336][ T3530] bridge0: port 1(bridge_slave_0) entered forwarding state [ 370.439627][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.446840][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 370.473841][T16888] 8021q: adding VLAN 0 to HW filter on device bond3 [ 370.636437][T16899] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 370.644296][T16899] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 371.028472][T16905] 8021q: adding VLAN 0 to HW filter on device bond3 [ 371.045334][T16919] netlink: 'syz.0.3342': attribute type 1 has an invalid length. [ 371.116490][T16919] 8021q: adding VLAN 0 to HW filter on device bond2 [ 371.205505][T16923] bond2: (slave veth3): Enslaving as an active interface with a down link [ 371.321347][T16919] bond2: (slave veth0_to_bond): making interface the new active one [ 371.339470][T16919] veth0_to_bond: entered promiscuous mode [ 371.346213][T16919] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 371.401902][T16933] lo: left promiscuous mode [ 371.414405][T16933] tunl0: left promiscuous mode [ 371.421432][T16933] gre0: left promiscuous mode [ 371.427313][T16933] gretap0: left promiscuous mode [ 371.433060][T16933] erspan0: left promiscuous mode [ 371.442868][T16933] ip_vti0: left promiscuous mode [ 371.448741][T16933] ip6_vti0: left promiscuous mode [ 371.454199][T16933] sit0: left promiscuous mode [ 371.464118][T16933] ip6tnl0: left promiscuous mode [ 371.473596][T16933] ip6gre0: left promiscuous mode [ 371.483954][T16933] syz_tun: left promiscuous mode [ 371.491590][T16933] ip6gretap0: left promiscuous mode [ 371.497061][T16933] vcan0: left promiscuous mode [ 371.507524][T16933] bond0: left promiscuous mode [ 371.516654][T16933] team0: left promiscuous mode [ 371.523777][T16933] dummy0: left promiscuous mode [ 371.529680][T16933] nlmon0: left promiscuous mode [ 371.534801][T16933] caif0: left promiscuous mode [ 371.540784][T16933] batadv0: left promiscuous mode [ 371.546075][T16933] vxcan0: left promiscuous mode [ 371.552788][T16933] vxcan1: left promiscuous mode [ 371.557761][T16933] veth0: left promiscuous mode [ 371.563001][T16933] veth1: left promiscuous mode [ 371.567917][T16933] wg0: left promiscuous mode [ 371.573424][T16933] wg1: left promiscuous mode [ 371.578361][T16933] wg2: left promiscuous mode [ 371.583157][T16933] veth0_to_bridge: left promiscuous mode [ 371.589325][T16933] bridge_slave_0: left promiscuous mode [ 371.595084][T16933] veth1_to_bridge: left promiscuous mode [ 371.602092][T16933] bridge_slave_1: left promiscuous mode [ 371.609652][T16933] bond_slave_0: left promiscuous mode [ 371.615720][T16933] veth1_to_bond: left promiscuous mode [ 371.624275][T16933] bond_slave_1: left promiscuous mode [ 371.631954][T16933] veth0_to_team: left promiscuous mode [ 371.637818][T16933] team_slave_0: left promiscuous mode [ 371.643863][T16933] veth1_to_team: left promiscuous mode [ 371.649979][T16933] team_slave_1: left promiscuous mode [ 371.655653][T16933] veth0_to_batadv: left promiscuous mode [ 371.662363][T16933] batadv_slave_0: left promiscuous mode [ 371.668316][T16933] veth1_to_batadv: left promiscuous mode [ 371.674134][T16933] batadv_slave_1: left promiscuous mode [ 371.680973][T16933] xfrm0: left promiscuous mode [ 371.685965][T16933] veth0_to_hsr: left promiscuous mode [ 371.692950][T16933] veth1_to_hsr: left promiscuous mode [ 371.699279][T16933] hsr0: left promiscuous mode [ 371.704435][T16933] veth1_virt_wifi: left promiscuous mode [ 371.711369][T16933] veth0_virt_wifi: left promiscuous mode [ 371.717360][T16933] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 371.724999][T16933] vlan0: left promiscuous mode [ 371.730948][T16933] vlan1: left promiscuous mode [ 371.736153][T16933] macvlan0: left promiscuous mode [ 371.741633][T16933] macvlan1: left promiscuous mode [ 371.746869][T16933] ipvlan0: left promiscuous mode [ 371.752185][T16933] ipvlan1: left promiscuous mode [ 371.757511][T16933] macvtap0: left promiscuous mode [ 371.763476][T16933] macsec0: left promiscuous mode [ 371.768862][T16933] geneve0: left promiscuous mode [ 371.773995][T16933] geneve1: left promiscuous mode [ 371.779219][T16933] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 371.786394][T16933] netdevsim netdevsim2 netdevsim1: left promiscuous mode [ 371.795206][T16933] netdevsim netdevsim2 netdevsim2: left promiscuous mode [ 371.802988][T16933] netdevsim netdevsim2 netdevsim3: left promiscuous mode [ 371.810442][T16933] mac80211_hwsim hwsim23 wlan0: left promiscuous mode [ 371.817503][T16933] bond1: left promiscuous mode [ 371.823039][T16933] gretap1: left promiscuous mode [ 371.828425][T16933] bond2: left promiscuous mode [ 372.011886][T16684] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 372.037119][T16947] bridge_slave_0: default FDB implementation only supports local addresses [ 372.122592][T16950] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 372.145041][T16950] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 372.281797][T16959] delete_channel: no stack [ 372.446624][T16966] validate_nla: 1 callbacks suppressed [ 372.446647][T16966] netlink: 'syz.1.3358': attribute type 1 has an invalid length. [ 372.614505][T16966] 8021q: adding VLAN 0 to HW filter on device bond4 [ 372.692728][T16972] netlink: 'syz.0.3360': attribute type 1 has an invalid length. [ 372.727877][T16972] __nla_validate_parse: 6 callbacks suppressed [ 372.727897][T16972] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3360'. [ 372.727912][T16981] veth5: entered allmulticast mode [ 372.771263][T16984] netdevsim netdevsim3 ÿÿÿÿÿÿ: renamed from netdevsim0 [ 372.972233][T16684] veth0_vlan: entered promiscuous mode [ 372.998636][T16684] veth1_vlan: entered promiscuous mode [ 373.115390][T16684] veth0_macvtap: entered promiscuous mode [ 373.159702][T16684] veth1_macvtap: entered promiscuous mode [ 373.234636][T16684] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 373.326865][T16684] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 373.370804][ T2977] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.426874][ T2977] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.462600][ T2977] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.504435][ T2977] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.518866][T17023] netlink: 'syz.2.3371': attribute type 1 has an invalid length. [ 373.594866][T17023] 8021q: adding VLAN 0 to HW filter on device bond6 [ 373.658773][T17028] bond6: (slave veth7): Enslaving as an active interface with a down link [ 373.671068][T17023] bond4: (slave veth0_to_bond): Releasing active interface [ 373.686127][T17029] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3372'. [ 373.697839][T17029] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3372'. [ 373.723674][T17023] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 373.965858][ T2977] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.991409][ T2977] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.015393][T17039] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3375'. [ 374.038196][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.065557][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.570959][T17070] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3380'. [ 374.619118][T17073] netlink: 'syz.3.3384': attribute type 1 has an invalid length. [ 374.808649][T17078] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 374.822383][T17086] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3384'. [ 374.877332][T17073] veth3: entered promiscuous mode [ 374.907820][T17073] bond4: (slave veth3): Enslaving as a backup interface with a down link [ 374.972907][T17090] team0: Cannot enslave team device to itself [ 374.998589][ T6016] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 375.021057][T17086] 8021q: adding VLAN 0 to HW filter on device bond4 [ 375.150953][ T2977] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 375.207708][T17099] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 375.227481][T17104] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 375.271286][T17104] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3394'. [ 375.282041][T17107] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3392'. [ 375.654935][T17123] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3398'. [ 375.783061][T17137] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3401'. [ 375.796251][T17138] netlink: 'syz.2.3402': attribute type 30 has an invalid length. [ 375.935516][T17134] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 376.013103][T17144] vlan2: entered promiscuous mode [ 376.035146][T17144] vlan2: entered allmulticast mode [ 376.055912][T17144] hsr_slave_1: entered allmulticast mode [ 376.214076][T17152] delete_channel: no stack [ 376.477128][T17166] netlink: 'syz.0.3413': attribute type 21 has an invalid length. [ 376.554524][T17128] delete_channel: no stack [ 376.740093][T17179] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 376.905107][T17195] bridge_slave_1: left allmulticast mode [ 376.913084][T17195] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.935667][T17195] bridge_slave_0: left allmulticast mode [ 376.947672][T17195] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.046630][T17196] bridge_slave_1: left allmulticast mode [ 377.060366][T17196] bridge_slave_1: left promiscuous mode [ 377.066317][T17196] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.082674][T17196] bridge_slave_0: left allmulticast mode [ 377.091604][T17196] bridge_slave_0: left promiscuous mode [ 377.097939][T17196] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.203565][T17209] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 377.480100][T17221] netlink: 'syz.2.3432': attribute type 30 has an invalid length. [ 377.513758][T17220] delete_channel: no stack [ 377.762465][T17235] bridge0: entered promiscuous mode [ 377.767966][T17235] bridge0: entered allmulticast mode [ 377.776329][T17233] veth0: entered promiscuous mode [ 377.797245][T17232] veth0: left promiscuous mode [ 378.153117][T17255] __nla_validate_parse: 9 callbacks suppressed [ 378.153140][T17255] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3443'. [ 378.189672][T17257] netlink: 'syz.4.3444': attribute type 1 has an invalid length. [ 378.482813][T17269] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 378.495462][T17269] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 378.607554][T17276] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3452'. [ 378.847572][T17293] netlink: 'syz.3.3458': attribute type 1 has an invalid length. [ 378.895174][T17293] 8021q: adding VLAN 0 to HW filter on device bond5 [ 379.014788][T17293] bond5: (slave veth5): Enslaving as an active interface with a down link [ 379.064350][T17307] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3462'. [ 379.073997][T17307] netlink: 272 bytes leftover after parsing attributes in process `syz.4.3462'. [ 379.084280][T17307] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3462'. [ 379.103336][T17304] veth0_to_bond: left promiscuous mode [ 379.115750][T17304] bond5: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 379.231200][T17310] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3463'. [ 379.324830][T17312] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 379.370345][T17312] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3465'. [ 379.398644][T17323] netlink: 'syz.2.3468': attribute type 30 has an invalid length. [ 379.590066][T17329] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 379.607638][T17329] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 379.608895][T17321] delete_channel: no stack [ 379.655357][T17318] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3466'. [ 379.981957][T17345] pim6reg1: entered promiscuous mode [ 379.987542][T17345] pim6reg1: entered allmulticast mode [ 379.994883][T17349] netlink: 'syz.4.3475': attribute type 1 has an invalid length. [ 380.171671][T17363] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3478'. [ 380.316176][T17367] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3481'. [ 380.336890][T17367] netdevsim netdevsim2 : renamed from netdevsim0 [ 380.363138][T17367] netdevsim netdevsim2 : left promiscuous mode [ 380.669804][T17388] netlink: 'syz.0.3490': attribute type 30 has an invalid length. [ 380.738803][T17394] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 380.746392][T17394] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 380.761789][T17387] delete_channel: no stack [ 380.912773][T17402] netlink: 'syz.4.3495': attribute type 1 has an invalid length. [ 380.986281][T17402] bridge1: port 1(veth3) entered blocking state [ 380.999625][T17402] bridge1: port 1(veth3) entered disabled state [ 381.006457][T17402] veth3: entered allmulticast mode [ 381.024061][T17402] veth3: entered promiscuous mode [ 381.042864][T17406] bridge1: port 2(veth0_to_bond) entered blocking state [ 381.051035][T17406] bridge1: port 2(veth0_to_bond) entered disabled state [ 381.077422][T17406] veth0_to_bond: entered allmulticast mode [ 381.094181][T17406] veth0_to_bond: entered promiscuous mode [ 381.220321][T17411] nbd0: detected capacity change from 0 to 549764202496 [ 381.231413][ T51] block nbd0: Receive control failed (result -32) [ 381.615468][T17431] netlink: 'syz.0.3508': attribute type 9 has an invalid length. [ 381.615651][T17433] netlink: 'syz.0.3508': attribute type 9 has an invalid length. [ 381.815476][T17429] syzkaller0: entered promiscuous mode [ 381.831159][T17429] syzkaller0: entered allmulticast mode [ 381.862156][T17441] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 381.882274][T17441] syzkaller0: Linktype set failed because interface is up [ 382.000871][T17454] netlink: 'syz.0.3512': attribute type 1 has an invalid length. [ 382.683389][T17460] netlink: 'syz.4.3514': attribute type 1 has an invalid length. [ 383.736367][T17454] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 383.788364][T17456] bond2: (slave veth0_to_bond): Releasing active interface [ 383.809619][T17456] veth0_to_bond: left promiscuous mode [ 383.873277][T17460] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 383.873880][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.899390][ T1302] clip:clip_start_xmit: skb_dst(skb) == NULL [ 384.081361][T17475] tipc: Started in network mode [ 384.086299][T17475] tipc: Node identity 9aa3a5d8a07c, cluster identity 4711 [ 384.111618][T17475] tipc: Enabled bearer , priority 0 [ 384.126077][T17475] syzkaller0: entered promiscuous mode [ 384.132847][T17475] syzkaller0: entered allmulticast mode [ 384.141800][T17479] netlink: 'syz.4.3521': attribute type 30 has an invalid length. [ 384.147731][T17475] tipc: Resetting bearer [ 384.284685][T17478] delete_channel: no stack [ 384.299860][T17475] veth0_macvtap: left promiscuous mode [ 384.321241][T17475] macvtap0: entered allmulticast mode [ 384.445801][T17473] tipc: Resetting bearer [ 384.463941][T17493] openvswitch: netlink: EtherType 257 is less than min 600 [ 384.483783][T17473] tipc: Disabling bearer [ 384.489208][T17496] netlink: 'syz.1.3527': attribute type 1 has an invalid length. [ 384.501051][T17494] openvswitch: netlink: EtherType 257 is less than min 600 [ 384.656474][T17496] 8021q: adding VLAN 0 to HW filter on device bond5 [ 384.773029][T17499] bond5: (slave veth1): Enslaving as an active interface with a down link [ 384.782345][T17503] veth0_to_bond: left promiscuous mode [ 384.815051][T17503] bond5: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 385.018546][T17518] nft_compat: unsupported protocol 0 [ 385.050654][T17518] nft_compat: unsupported protocol 0 [ 385.064711][T17518] nft_compat: unsupported protocol 0 [ 385.076907][T17518] nft_compat: unsupported protocol 0 [ 385.095336][T17518] nft_compat: unsupported protocol 0 [ 385.106087][T17521] tipc: Enabled bearer , priority 24 [ 385.109575][T17518] nft_compat: unsupported protocol 0 [ 385.154570][T17524] __nla_validate_parse: 7 callbacks suppressed [ 385.154593][T17524] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3535'. [ 385.158340][T17518] nft_compat: unsupported protocol 0 [ 385.248332][T17518] nft_compat: unsupported protocol 0 [ 385.253988][T17518] nft_compat: unsupported protocol 0 [ 385.290540][T17518] nft_compat: unsupported protocol 0 [ 385.319814][T17518] nft_compat: unsupported protocol 0 [ 385.360126][T17518] nft_compat: unsupported protocol 0 [ 385.391509][T17518] nft_compat: unsupported protocol 0 [ 385.403471][T17518] nft_compat: unsupported protocol 0 [ 385.467748][T17518] nft_compat: unsupported protocol 0 [ 385.499915][T17518] nft_compat: unsupported protocol 0 [ 385.505485][T17518] nft_compat: unsupported protocol 0 [ 385.543346][T17541] tipc: Enabled bearer , priority 0 [ 385.548929][T17518] nft_compat: unsupported protocol 0 [ 385.555510][T17518] nft_compat: unsupported protocol 0 [ 385.595749][T17518] nft_compat: unsupported protocol 0 [ 385.606618][T17518] nft_compat: unsupported protocol 0 [ 385.632664][T17518] nft_compat: unsupported protocol 0 [ 385.651141][T17518] nft_compat: unsupported protocol 0 [ 385.656852][T17518] nft_compat: unsupported protocol 0 [ 385.666399][T17518] nft_compat: unsupported protocol 0 [ 385.678398][T17518] nft_compat: unsupported protocol 0 [ 385.693905][T17518] nft_compat: unsupported protocol 0 [ 385.702778][T17544] macvlan2: entered promiscuous mode [ 385.715158][T17518] nft_compat: unsupported protocol 0 [ 385.721582][T17544] macvlan2: entered allmulticast mode [ 385.727322][T17518] nft_compat: unsupported protocol 0 [ 385.731573][T17546] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3541'. [ 385.749393][T17518] nft_compat: unsupported protocol 0 [ 385.761418][T17541] tipc: Disabling bearer [ 385.762161][T17518] nft_compat: unsupported protocol 0 [ 385.777673][T17544] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 385.796272][T17518] nft_compat: unsupported protocol 0 [ 385.904699][T17551] netlink: 'syz.0.3544': attribute type 1 has an invalid length. [ 385.985633][T17551] 8021q: adding VLAN 0 to HW filter on device bond3 [ 386.104911][T17558] bond3: (slave veth7): Enslaving as an active interface with a down link [ 386.154230][T17551] bond3: (slave veth0_to_bond): making interface the new active one [ 386.163002][T17568] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3549'. [ 386.184410][T17551] veth0_to_bond: entered promiscuous mode [ 386.192355][T17570] netlink: 'syz.1.3550': attribute type 11 has an invalid length. [ 386.194446][T17551] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 386.449061][T17582] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.3553'. [ 386.638189][ T9] tipc: Node number set to 3282578233 [ 386.930191][T17606] FAULT_INJECTION: forcing a failure. [ 386.930191][T17606] name failslab, interval 1, probability 0, space 0, times 0 [ 386.966482][T17608] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 386.978065][T17606] CPU: 1 UID: 0 PID: 17606 Comm: syz.4.3563 Not tainted syzkaller #0 PREEMPT(full) [ 386.978097][T17606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 386.978111][T17606] Call Trace: [ 386.978121][T17606] [ 386.978131][T17606] dump_stack_lvl+0x189/0x250 [ 386.978164][T17606] ? __pfx____ratelimit+0x10/0x10 [ 386.978196][T17606] ? __pfx_dump_stack_lvl+0x10/0x10 [ 386.978223][T17606] ? __pfx__printk+0x10/0x10 [ 386.978273][T17606] ? __pfx___might_resched+0x10/0x10 [ 386.978294][T17606] ? fs_reclaim_acquire+0x7d/0x100 [ 386.978332][T17606] should_fail_ex+0x414/0x560 [ 386.978367][T17606] should_failslab+0xa8/0x100 [ 386.978400][T17606] __kmalloc_noprof+0xcb/0x4f0 [ 386.978427][T17606] ? kfree+0x4d/0x440 [ 386.978450][T17606] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 386.978478][T17606] tomoyo_realpath_from_path+0xe3/0x5d0 [ 386.978503][T17606] ? tomoyo_domain+0xd9/0x130 [ 386.978532][T17606] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 386.978562][T17606] tomoyo_path_number_perm+0x1e8/0x5a0 [ 386.978594][T17606] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 386.978644][T17606] ? __lock_acquire+0xab9/0xd20 [ 386.978700][T17606] ? __fget_files+0x2a/0x420 [ 386.978735][T17606] ? __fget_files+0x2a/0x420 [ 386.978771][T17606] ? __fget_files+0x3a0/0x420 [ 386.978820][T17606] ? __fget_files+0x2a/0x420 [ 386.978858][T17606] security_file_ioctl+0xcb/0x2d0 [ 386.978890][T17606] __se_sys_ioctl+0x47/0x170 [ 386.978921][T17606] do_syscall_64+0xfa/0x3b0 [ 386.978951][T17606] ? lockdep_hardirqs_on+0x9c/0x150 [ 386.978980][T17606] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.979002][T17606] ? clear_bhb_loop+0x60/0xb0 [ 386.979030][T17606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.979051][T17606] RIP: 0033:0x7fa2d018ebe9 [ 386.979071][T17606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 386.979091][T17606] RSP: 002b:00007fa2d0fed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 386.979114][T17606] RAX: ffffffffffffffda RBX: 00007fa2d03b5fa0 RCX: 00007fa2d018ebe9 [ 386.979130][T17606] RDX: 0000200000000300 RSI: 000000000000890b RDI: 0000000000000004 [ 386.979145][T17606] RBP: 00007fa2d0fed090 R08: 0000000000000000 R09: 0000000000000000 [ 386.979158][T17606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 386.979172][T17606] R13: 00007fa2d03b6038 R14: 00007fa2d03b5fa0 R15: 00007fffa828f1c8 [ 386.979209][T17606] [ 386.979219][T17606] ERROR: Out of memory at tomoyo_realpath_from_path. [ 387.088455][T17615] netlink: 'syz.3.3565': attribute type 30 has an invalid length. [ 387.354248][T17622] netlink: 'syz.1.3567': attribute type 30 has an invalid length. [ 387.376669][T17612] delete_channel: no stack [ 387.517445][T17625] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3568'. [ 387.542553][T17625] bridge_slave_1: left allmulticast mode [ 387.542909][T17621] delete_channel: no stack [ 387.558657][T17625] bridge_slave_1: left promiscuous mode [ 387.570460][T17625] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.633336][T17625] bridge_slave_0: left allmulticast mode [ 387.668436][T17625] bridge_slave_0: left promiscuous mode [ 387.674306][T17625] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.699299][T17632] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3570'. [ 387.735567][T17632] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3570'. [ 387.869492][T17631] netlink: 'syz.3.3570': attribute type 3 has an invalid length. [ 387.918962][T17642] FAULT_INJECTION: forcing a failure. [ 387.918962][T17642] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 387.955417][T17642] CPU: 0 UID: 0 PID: 17642 Comm: syz.2.3572 Not tainted syzkaller #0 PREEMPT(full) [ 387.955448][T17642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 387.955463][T17642] Call Trace: [ 387.955473][T17642] [ 387.955483][T17642] dump_stack_lvl+0x189/0x250 [ 387.955515][T17642] ? __pfx____ratelimit+0x10/0x10 [ 387.955547][T17642] ? __pfx_dump_stack_lvl+0x10/0x10 [ 387.955574][T17642] ? __pfx__printk+0x10/0x10 [ 387.955606][T17642] ? __might_fault+0xb0/0x130 [ 387.955651][T17642] should_fail_ex+0x414/0x560 [ 387.955687][T17642] _copy_from_user+0x2d/0xb0 [ 387.955714][T17642] __sys_connect+0x123/0x440 [ 387.955746][T17642] ? __fget_files+0x3a0/0x420 [ 387.955781][T17642] ? __pfx___sys_connect+0x10/0x10 [ 387.955829][T17642] ? __pfx_ksys_write+0x10/0x10 [ 387.955856][T17642] ? rcu_is_watching+0x15/0xb0 [ 387.955888][T17642] __x64_sys_connect+0x7a/0x90 [ 387.955921][T17642] do_syscall_64+0xfa/0x3b0 [ 387.955952][T17642] ? lockdep_hardirqs_on+0x9c/0x150 [ 387.955981][T17642] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.956003][T17642] ? clear_bhb_loop+0x60/0xb0 [ 387.956030][T17642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.956051][T17642] RIP: 0033:0x7fe9f098ebe9 [ 387.956071][T17642] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 387.956091][T17642] RSP: 002b:00007fe9f1859038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 387.956115][T17642] RAX: ffffffffffffffda RBX: 00007fe9f0bb5fa0 RCX: 00007fe9f098ebe9 [ 387.956132][T17642] RDX: 000000000000001c RSI: 0000200000000040 RDI: 000000000000000a [ 387.956147][T17642] RBP: 00007fe9f1859090 R08: 0000000000000000 R09: 0000000000000000 [ 387.956161][T17642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 387.956174][T17642] R13: 00007fe9f0bb6038 R14: 00007fe9f0bb5fa0 R15: 00007fff12f03a98 [ 387.956210][T17642] [ 387.971074][T17644] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 388.215076][T17644] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 388.314704][T17652] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3578'. [ 388.445055][T17664] netlink: 'syz.2.3580': attribute type 3 has an invalid length. [ 388.467367][T17662] netlink: 176 bytes leftover after parsing attributes in process `syz.0.3579'. [ 388.494296][T17663] delete_channel: no stack [ 388.517299][T17667] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3581'. [ 388.712911][T17678] tipc: Started in network mode [ 388.733010][T17678] tipc: Node identity cabf7a6ae55b, cluster identity 4711 [ 388.750762][T17678] tipc: Enabled bearer , priority 0 [ 388.775753][T17684] syzkaller0: entered promiscuous mode [ 388.792218][T17684] syzkaller0: entered allmulticast mode [ 388.901087][T17684] tipc: Resetting bearer [ 388.960607][T17694] FAULT_INJECTION: forcing a failure. [ 388.960607][T17694] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 389.021477][T17694] CPU: 0 UID: 0 PID: 17694 Comm: syz.3.3591 Not tainted syzkaller #0 PREEMPT(full) [ 389.021510][T17694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 389.021532][T17694] Call Trace: [ 389.021541][T17694] [ 389.021552][T17694] dump_stack_lvl+0x189/0x250 [ 389.021585][T17694] ? __pfx____ratelimit+0x10/0x10 [ 389.021617][T17694] ? __pfx_dump_stack_lvl+0x10/0x10 [ 389.021644][T17694] ? __pfx__printk+0x10/0x10 [ 389.021691][T17694] should_fail_ex+0x414/0x560 [ 389.021727][T17694] _copy_to_user+0x31/0xb0 [ 389.021756][T17694] simple_read_from_buffer+0xe1/0x170 [ 389.021793][T17694] proc_fail_nth_read+0x1b3/0x220 [ 389.021823][T17694] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 389.021852][T17694] ? rw_verify_area+0x2a6/0x4d0 [ 389.021880][T17694] ? __lock_acquire+0xab9/0xd20 [ 389.021910][T17694] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 389.021938][T17694] vfs_read+0x200/0xa30 [ 389.021965][T17694] ? fdget_pos+0x247/0x320 [ 389.021991][T17694] ? __pfx___mutex_lock+0x10/0x10 [ 389.022024][T17694] ? __pfx_vfs_read+0x10/0x10 [ 389.022055][T17694] ? __fget_files+0x2a/0x420 [ 389.022093][T17694] ? __fget_files+0x3a0/0x420 [ 389.022125][T17694] ? __fget_files+0x2a/0x420 [ 389.022168][T17694] ksys_read+0x145/0x250 [ 389.022201][T17694] ? __pfx_ksys_read+0x10/0x10 [ 389.022226][T17694] ? rcu_is_watching+0x15/0xb0 [ 389.022255][T17694] ? do_syscall_64+0xbe/0x3b0 [ 389.022293][T17694] do_syscall_64+0xfa/0x3b0 [ 389.022323][T17694] ? lockdep_hardirqs_on+0x9c/0x150 [ 389.022364][T17694] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.022386][T17694] ? clear_bhb_loop+0x60/0xb0 [ 389.022414][T17694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.022436][T17694] RIP: 0033:0x7f659f98d5fc [ 389.022457][T17694] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 389.022478][T17694] RSP: 002b:00007f65a07da030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 389.022506][T17694] RAX: ffffffffffffffda RBX: 00007f659fbb5fa0 RCX: 00007f659f98d5fc [ 389.022528][T17694] RDX: 000000000000000f RSI: 00007f65a07da0a0 RDI: 0000000000000007 [ 389.022543][T17694] RBP: 00007f65a07da090 R08: 0000000000000000 R09: 0000000000000000 [ 389.022556][T17694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 389.022569][T17694] R13: 00007f659fbb6038 R14: 00007f659fbb5fa0 R15: 00007ffdaa392888 [ 389.022604][T17694] [ 389.322225][T17677] tipc: Resetting bearer [ 389.437885][T17677] tipc: Disabling bearer [ 389.480568][T14828] IPVS: starting estimator thread 0... [ 389.598449][T17708] IPVS: using max 24 ests per chain, 57600 per kthread [ 389.768840][T17721] FAULT_INJECTION: forcing a failure. [ 389.768840][T17721] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 389.819025][T17721] CPU: 1 UID: 0 PID: 17721 Comm: syz.0.3597 Not tainted syzkaller #0 PREEMPT(full) [ 389.819056][T17721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 389.819071][T17721] Call Trace: [ 389.819080][T17721] [ 389.819090][T17721] dump_stack_lvl+0x189/0x250 [ 389.819122][T17721] ? __pfx____ratelimit+0x10/0x10 [ 389.819153][T17721] ? __pfx_dump_stack_lvl+0x10/0x10 [ 389.819180][T17721] ? __pfx__printk+0x10/0x10 [ 389.819212][T17721] ? __might_fault+0xb0/0x130 [ 389.819257][T17721] should_fail_ex+0x414/0x560 [ 389.819291][T17721] _copy_from_user+0x2d/0xb0 [ 389.819319][T17721] nr_rt_ioctl+0x74f/0xd50 [ 389.819357][T17721] ? kasan_quarantine_put+0xdd/0x220 [ 389.819384][T17721] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 389.819422][T17721] ? apparmor_capable+0x137/0x1b0 [ 389.819457][T17721] ? capable+0x89/0xe0 [ 389.819487][T17721] ? nr_ioctl+0x1b1/0x3b0 [ 389.819512][T17721] sock_do_ioctl+0xd9/0x300 [ 389.819544][T17721] ? __pfx_sock_do_ioctl+0x10/0x10 [ 389.819569][T17721] ? __lock_acquire+0xab9/0xd20 [ 389.819620][T17721] sock_ioctl+0x576/0x790 [ 389.819649][T17721] ? __pfx_sock_ioctl+0x10/0x10 [ 389.819676][T17721] ? __fget_files+0x2a/0x420 [ 389.819709][T17721] ? __fget_files+0x3a0/0x420 [ 389.819747][T17721] ? __fget_files+0x2a/0x420 [ 389.819783][T17721] ? bpf_lsm_file_ioctl+0x9/0x20 [ 389.819811][T17721] ? __pfx_sock_ioctl+0x10/0x10 [ 389.819838][T17721] __se_sys_ioctl+0xfc/0x170 [ 389.819868][T17721] do_syscall_64+0xfa/0x3b0 [ 389.819898][T17721] ? lockdep_hardirqs_on+0x9c/0x150 [ 389.819928][T17721] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.819951][T17721] ? clear_bhb_loop+0x60/0xb0 [ 389.819979][T17721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.820005][T17721] RIP: 0033:0x7fc1b618ebe9 [ 389.820026][T17721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 389.820047][T17721] RSP: 002b:00007fc1b6ffc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 389.820071][T17721] RAX: ffffffffffffffda RBX: 00007fc1b63b5fa0 RCX: 00007fc1b618ebe9 [ 389.820088][T17721] RDX: 0000200000000300 RSI: 000000000000890b RDI: 0000000000000004 [ 389.820102][T17721] RBP: 00007fc1b6ffc090 R08: 0000000000000000 R09: 0000000000000000 [ 389.820117][T17721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 389.820130][T17721] R13: 00007fc1b63b6038 R14: 00007fc1b63b5fa0 R15: 00007ffe2836a538 [ 389.820165][T17721] [ 390.094138][T17731] netlink: 'syz.2.3598': attribute type 7 has an invalid length. [ 390.144901][T17709] 8021q: adding VLAN 0 to HW filter on device bond14 [ 390.152927][T17719] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 390.223459][T17731] : entered promiscuous mode [ 390.388715][T17743] __nla_validate_parse: 6 callbacks suppressed [ 390.388737][T17743] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3604'. [ 390.432955][T17741] netlink: 'syz.4.3605': attribute type 30 has an invalid length. [ 390.608746][T17740] delete_channel: no stack [ 390.796039][T17766] FAULT_INJECTION: forcing a failure. [ 390.796039][T17766] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 390.811651][T17762] netlink: 'syz.2.3610': attribute type 1 has an invalid length. [ 390.821322][T17766] CPU: 1 UID: 0 PID: 17766 Comm: syz.1.3612 Not tainted syzkaller #0 PREEMPT(full) [ 390.821359][T17766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 390.821374][T17766] Call Trace: [ 390.821384][T17766] [ 390.821394][T17766] dump_stack_lvl+0x189/0x250 [ 390.821428][T17766] ? __pfx____ratelimit+0x10/0x10 [ 390.821460][T17766] ? __pfx_dump_stack_lvl+0x10/0x10 [ 390.821487][T17766] ? __pfx__printk+0x10/0x10 [ 390.821533][T17766] should_fail_ex+0x414/0x560 [ 390.821568][T17766] _copy_to_user+0x31/0xb0 [ 390.821596][T17766] simple_read_from_buffer+0xe1/0x170 [ 390.821635][T17766] proc_fail_nth_read+0x1b3/0x220 [ 390.821665][T17766] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 390.821695][T17766] ? rw_verify_area+0x2a6/0x4d0 [ 390.821722][T17766] ? __lock_acquire+0xab9/0xd20 [ 390.821752][T17766] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 390.821780][T17766] vfs_read+0x200/0xa30 [ 390.821808][T17766] ? fdget_pos+0x247/0x320 [ 390.821833][T17766] ? __pfx___mutex_lock+0x10/0x10 [ 390.821866][T17766] ? __pfx_vfs_read+0x10/0x10 [ 390.821897][T17766] ? __fget_files+0x2a/0x420 [ 390.821936][T17766] ? __fget_files+0x3a0/0x420 [ 390.821969][T17766] ? __fget_files+0x2a/0x420 [ 390.822013][T17766] ksys_read+0x145/0x250 [ 390.822041][T17766] ? __fget_files+0x3a0/0x420 [ 390.822076][T17766] ? __pfx_ksys_read+0x10/0x10 [ 390.822112][T17766] ? do_syscall_64+0xbe/0x3b0 [ 390.822150][T17766] do_syscall_64+0xfa/0x3b0 [ 390.822180][T17766] ? lockdep_hardirqs_on+0x9c/0x150 [ 390.822209][T17766] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.822232][T17766] ? clear_bhb_loop+0x60/0xb0 [ 390.822259][T17766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.822281][T17766] RIP: 0033:0x7f5d6598d5fc [ 390.822302][T17766] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 390.822321][T17766] RSP: 002b:00007f5d6681a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 390.822350][T17766] RAX: ffffffffffffffda RBX: 00007f5d65bb5fa0 RCX: 00007f5d6598d5fc [ 390.822368][T17766] RDX: 000000000000000f RSI: 00007f5d6681a0a0 RDI: 0000000000000003 [ 390.822382][T17766] RBP: 00007f5d6681a090 R08: 0000000000000000 R09: 0000000000000000 [ 390.822396][T17766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 390.822410][T17766] R13: 00007f5d65bb6038 R14: 00007f5d65bb5fa0 R15: 00007ffef8044b88 [ 390.822446][T17766] [ 391.204606][T17774] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3616'. [ 391.221744][T17777] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3610'. [ 391.233887][T17777] 8021q: adding VLAN 0 to HW filter on device bond7 [ 391.430687][T17783] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3621'. [ 391.599718][T17795] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3624'. [ 391.631966][T17795] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3624'. [ 391.643822][T17795] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3624'. [ 391.676260][T17798] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 391.795315][T17797] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3623'. [ 391.806441][T17797] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3623'. [ 391.900725][T17817] FAULT_INJECTION: forcing a failure. [ 391.900725][T17817] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 391.929847][T17817] CPU: 1 UID: 0 PID: 17817 Comm: syz.4.3627 Not tainted syzkaller #0 PREEMPT(full) [ 391.929879][T17817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 391.929894][T17817] Call Trace: [ 391.929903][T17817] [ 391.929914][T17817] dump_stack_lvl+0x189/0x250 [ 391.929949][T17817] ? __pfx____ratelimit+0x10/0x10 [ 391.929980][T17817] ? __pfx_dump_stack_lvl+0x10/0x10 [ 391.930023][T17817] ? __pfx__printk+0x10/0x10 [ 391.930055][T17817] ? __might_fault+0xb0/0x130 [ 391.930099][T17817] should_fail_ex+0x414/0x560 [ 391.930135][T17817] _copy_from_user+0x2d/0xb0 [ 391.930162][T17817] ___sys_sendmsg+0x158/0x2a0 [ 391.930189][T17817] ? __pfx____sys_sendmsg+0x10/0x10 [ 391.930252][T17817] ? __fget_files+0x2a/0x420 [ 391.930285][T17817] ? __fget_files+0x3a0/0x420 [ 391.930331][T17817] __x64_sys_sendmsg+0x19b/0x260 [ 391.930358][T17817] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 391.930393][T17817] ? __pfx_ksys_write+0x10/0x10 [ 391.930420][T17817] ? rcu_is_watching+0x15/0xb0 [ 391.930449][T17817] ? do_syscall_64+0xbe/0x3b0 [ 391.930486][T17817] do_syscall_64+0xfa/0x3b0 [ 391.930517][T17817] ? lockdep_hardirqs_on+0x9c/0x150 [ 391.930548][T17817] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.930570][T17817] ? clear_bhb_loop+0x60/0xb0 [ 391.930598][T17817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.930619][T17817] RIP: 0033:0x7fa2d018ebe9 [ 391.930640][T17817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 391.930660][T17817] RSP: 002b:00007fa2d0fed038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 391.930685][T17817] RAX: ffffffffffffffda RBX: 00007fa2d03b5fa0 RCX: 00007fa2d018ebe9 [ 391.930702][T17817] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 391.930716][T17817] RBP: 00007fa2d0fed090 R08: 0000000000000000 R09: 0000000000000000 [ 391.930730][T17817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 391.930743][T17817] R13: 00007fa2d03b6038 R14: 00007fa2d03b5fa0 R15: 00007fffa828f1c8 [ 391.930778][T17817] [ 392.206597][T17819] FAULT_INJECTION: forcing a failure. [ 392.206597][T17819] name failslab, interval 1, probability 0, space 0, times 0 [ 392.220244][T17819] CPU: 1 UID: 0 PID: 17819 Comm: syz.1.3628 Not tainted syzkaller #0 PREEMPT(full) [ 392.220274][T17819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 392.220289][T17819] Call Trace: [ 392.220298][T17819] [ 392.220309][T17819] dump_stack_lvl+0x189/0x250 [ 392.220341][T17819] ? __pfx____ratelimit+0x10/0x10 [ 392.220372][T17819] ? __pfx_dump_stack_lvl+0x10/0x10 [ 392.220400][T17819] ? __pfx__printk+0x10/0x10 [ 392.220435][T17819] ? __pfx___might_resched+0x10/0x10 [ 392.220457][T17819] ? fs_reclaim_acquire+0x7d/0x100 [ 392.220499][T17819] should_fail_ex+0x414/0x560 [ 392.220534][T17819] should_failslab+0xa8/0x100 [ 392.220569][T17819] __kmalloc_noprof+0xcb/0x4f0 [ 392.220599][T17819] ? tomoyo_encode+0x28b/0x550 [ 392.220626][T17819] tomoyo_encode+0x28b/0x550 [ 392.220655][T17819] tomoyo_realpath_from_path+0x58d/0x5d0 [ 392.220679][T17819] ? tomoyo_domain+0xd9/0x130 [ 392.220709][T17819] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 392.220741][T17819] tomoyo_path_number_perm+0x1e8/0x5a0 [ 392.220775][T17819] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 392.220827][T17819] ? __lock_acquire+0xab9/0xd20 [ 392.220885][T17819] ? __fget_files+0x2a/0x420 [ 392.220922][T17819] ? __fget_files+0x2a/0x420 [ 392.220953][T17819] ? __fget_files+0x3a0/0x420 [ 392.221003][T17819] ? __fget_files+0x2a/0x420 [ 392.221041][T17819] security_file_ioctl+0xcb/0x2d0 [ 392.221071][T17819] __se_sys_ioctl+0x47/0x170 [ 392.221101][T17819] do_syscall_64+0xfa/0x3b0 [ 392.221130][T17819] ? lockdep_hardirqs_on+0x9c/0x150 [ 392.221159][T17819] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.221181][T17819] ? clear_bhb_loop+0x60/0xb0 [ 392.221207][T17819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.221229][T17819] RIP: 0033:0x7f5d6598ebe9 [ 392.221250][T17819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 392.221269][T17819] RSP: 002b:00007f5d6681a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 392.221291][T17819] RAX: ffffffffffffffda RBX: 00007f5d65bb5fa0 RCX: 00007f5d6598ebe9 [ 392.221307][T17819] RDX: 0000200000000300 RSI: 000000000000890b RDI: 0000000000000004 [ 392.221321][T17819] RBP: 00007f5d6681a090 R08: 0000000000000000 R09: 0000000000000000 [ 392.221335][T17819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 392.221347][T17819] R13: 00007f5d65bb6038 R14: 00007f5d65bb5fa0 R15: 00007ffef8044b88 [ 392.221383][T17819] [ 392.221405][T17819] ERROR: Out of memory at tomoyo_realpath_from_path. [ 392.631289][T17830] netlink: 'syz.4.3631': attribute type 1 has an invalid length. [ 392.723624][T17833] bond1: (slave gretap1): making interface the new active one [ 392.763939][T17830] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3631'. [ 392.782112][T17833] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 392.806794][T17830] 8021q: adding VLAN 0 to HW filter on device bond1 [ 392.811943][T17842] FAULT_INJECTION: forcing a failure. [ 392.811943][T17842] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 392.838997][T17842] CPU: 0 UID: 0 PID: 17842 Comm: syz.3.3636 Not tainted syzkaller #0 PREEMPT(full) [ 392.839027][T17842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 392.839041][T17842] Call Trace: [ 392.839050][T17842] [ 392.839060][T17842] dump_stack_lvl+0x189/0x250 [ 392.839093][T17842] ? __pfx____ratelimit+0x10/0x10 [ 392.839124][T17842] ? __pfx_dump_stack_lvl+0x10/0x10 [ 392.839150][T17842] ? __pfx__printk+0x10/0x10 [ 392.839181][T17842] ? __might_fault+0xb0/0x130 [ 392.839224][T17842] should_fail_ex+0x414/0x560 [ 392.839259][T17842] _copy_from_iter+0x1db/0x16f0 [ 392.839286][T17842] ? rcu_is_watching+0x15/0xb0 [ 392.839311][T17842] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 392.839344][T17842] ? __pfx__copy_from_iter+0x10/0x10 [ 392.839368][T17842] ? __build_skb_around+0x257/0x3e0 [ 392.839406][T17842] ? netlink_sendmsg+0x642/0xb30 [ 392.839436][T17842] ? skb_put+0x11b/0x210 [ 392.839474][T17842] netlink_sendmsg+0x6b2/0xb30 [ 392.839517][T17842] ? __pfx_netlink_sendmsg+0x10/0x10 [ 392.839553][T17842] ? aa_sock_msg_perm+0xf1/0x1d0 [ 392.839590][T17842] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 392.839615][T17842] ? __pfx_netlink_sendmsg+0x10/0x10 [ 392.839649][T17842] __sock_sendmsg+0x21c/0x270 [ 392.839682][T17842] ____sys_sendmsg+0x52d/0x830 [ 392.839712][T17842] ? __pfx_____sys_sendmsg+0x10/0x10 [ 392.839746][T17842] ? import_iovec+0x74/0xa0 [ 392.839776][T17842] ___sys_sendmsg+0x21f/0x2a0 [ 392.839801][T17842] ? __pfx____sys_sendmsg+0x10/0x10 [ 392.839868][T17842] ? __fget_files+0x2a/0x420 [ 392.839901][T17842] ? __fget_files+0x3a0/0x420 [ 392.839954][T17842] __sys_sendmmsg+0x227/0x430 [ 392.839984][T17842] ? __pfx___sys_sendmmsg+0x10/0x10 [ 392.840004][T17842] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 392.840069][T17842] ? ksys_write+0x22a/0x250 [ 392.840102][T17842] ? __pfx_ksys_write+0x10/0x10 [ 392.840127][T17842] ? rcu_is_watching+0x15/0xb0 [ 392.840158][T17842] __x64_sys_sendmmsg+0xa0/0xc0 [ 392.840182][T17842] do_syscall_64+0xfa/0x3b0 [ 392.840211][T17842] ? lockdep_hardirqs_on+0x9c/0x150 [ 392.840239][T17842] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.840261][T17842] ? clear_bhb_loop+0x60/0xb0 [ 392.840289][T17842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.840310][T17842] RIP: 0033:0x7f659f98ebe9 [ 392.840330][T17842] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 392.840349][T17842] RSP: 002b:00007f65a07da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 392.840373][T17842] RAX: ffffffffffffffda RBX: 00007f659fbb5fa0 RCX: 00007f659f98ebe9 [ 392.840390][T17842] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 392.840405][T17842] RBP: 00007f65a07da090 R08: 0000000000000000 R09: 0000000000000000 [ 392.840420][T17842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 392.840433][T17842] R13: 00007f659fbb6038 R14: 00007f659fbb5fa0 R15: 00007ffdaa392888 [ 392.840468][T17842] [ 393.290557][T17852] FAULT_INJECTION: forcing a failure. [ 393.290557][T17852] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 393.310070][T17852] CPU: 0 UID: 0 PID: 17852 Comm: syz.2.3640 Not tainted syzkaller #0 PREEMPT(full) [ 393.310101][T17852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 393.310115][T17852] Call Trace: [ 393.310124][T17852] [ 393.310134][T17852] dump_stack_lvl+0x189/0x250 [ 393.310166][T17852] ? __pfx____ratelimit+0x10/0x10 [ 393.310197][T17852] ? __pfx_dump_stack_lvl+0x10/0x10 [ 393.310225][T17852] ? __pfx__printk+0x10/0x10 [ 393.310271][T17852] should_fail_ex+0x414/0x560 [ 393.310306][T17852] _copy_to_user+0x31/0xb0 [ 393.310335][T17852] simple_read_from_buffer+0xe1/0x170 [ 393.310373][T17852] proc_fail_nth_read+0x1b3/0x220 [ 393.310403][T17852] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 393.310431][T17852] ? rw_verify_area+0x2a6/0x4d0 [ 393.310459][T17852] ? __lock_acquire+0xab9/0xd20 [ 393.310489][T17852] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 393.310516][T17852] vfs_read+0x200/0xa30 [ 393.310544][T17852] ? fdget_pos+0x247/0x320 [ 393.310568][T17852] ? __pfx___mutex_lock+0x10/0x10 [ 393.310601][T17852] ? __pfx_vfs_read+0x10/0x10 [ 393.310632][T17852] ? __fget_files+0x2a/0x420 [ 393.310670][T17852] ? __fget_files+0x3a0/0x420 [ 393.310701][T17852] ? __fget_files+0x2a/0x420 [ 393.310746][T17852] ksys_read+0x145/0x250 [ 393.310772][T17852] ? __fget_files+0x3a0/0x420 [ 393.310807][T17852] ? __pfx_ksys_read+0x10/0x10 [ 393.310842][T17852] ? do_syscall_64+0xbe/0x3b0 [ 393.310879][T17852] do_syscall_64+0xfa/0x3b0 [ 393.310908][T17852] ? lockdep_hardirqs_on+0x9c/0x150 [ 393.310937][T17852] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.310968][T17852] ? clear_bhb_loop+0x60/0xb0 [ 393.310995][T17852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.311016][T17852] RIP: 0033:0x7fe9f098d5fc [ 393.311036][T17852] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 393.311055][T17852] RSP: 002b:00007fe9f1859030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 393.311078][T17852] RAX: ffffffffffffffda RBX: 00007fe9f0bb5fa0 RCX: 00007fe9f098d5fc [ 393.311094][T17852] RDX: 000000000000000f RSI: 00007fe9f18590a0 RDI: 0000000000000003 [ 393.311108][T17852] RBP: 00007fe9f1859090 R08: 0000000000000000 R09: 0000000000000000 [ 393.311121][T17852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 393.311134][T17852] R13: 00007fe9f0bb6038 R14: 00007fe9f0bb5fa0 R15: 00007fff12f03a98 [ 393.311170][T17852] [ 394.136006][T17888] netlink: 'syz.2.3652': attribute type 2 has an invalid length. [ 394.353937][T17898] dvmrp1: entered allmulticast mode [ 394.589476][T17914] netlink: 'syz.0.3661': attribute type 30 has an invalid length. [ 394.615206][T17915] netlink: 'syz.1.3663': attribute type 11 has an invalid length. [ 394.786971][T17910] delete_channel: no stack [ 395.007916][T17932] IPVS: set_ctl: invalid protocol: 46 172.30.0.2:20002 [ 395.232130][T17944] syzkaller1: entered allmulticast mode [ 395.493171][T17951] delete_channel: no stack [ 395.635544][T17958] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 395.692266][T17963] __nla_validate_parse: 7 callbacks suppressed [ 395.692287][T17963] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3680'. [ 395.724917][T17962] delete_channel: no stack [ 396.349753][T17980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3684'. [ 396.486270][T17983] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3685'. [ 396.497284][T17975] lo speed is unknown, defaulting to 1000 [ 396.565147][T17983] 8021q: adding VLAN 0 to HW filter on device bond15 [ 396.587527][T17987] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 396.605747][T17987] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 396.802686][T17994] netlink: 'syz.1.3689': attribute type 30 has an invalid length. [ 396.834675][T17996] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3690'. [ 396.853725][T17996] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3690'. [ 396.896052][T17996] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3690'. [ 396.975025][T17993] delete_channel: no stack [ 397.104313][T18005] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 397.592704][T18024] netlink: 'syz.0.3700': attribute type 1 has an invalid length. [ 397.609600][T18024] netlink: 'syz.0.3700': attribute type 1 has an invalid length. [ 397.663421][T18019] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3698'. [ 397.700076][T18029] FAULT_INJECTION: forcing a failure. [ 397.700076][T18029] name failslab, interval 1, probability 0, space 0, times 0 [ 397.770060][T18029] CPU: 1 UID: 0 PID: 18029 Comm: syz.1.3701 Not tainted syzkaller #0 PREEMPT(full) [ 397.770092][T18029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 397.770107][T18029] Call Trace: [ 397.770116][T18029] [ 397.770126][T18029] dump_stack_lvl+0x189/0x250 [ 397.770166][T18029] ? __pfx____ratelimit+0x10/0x10 [ 397.770197][T18029] ? __pfx_dump_stack_lvl+0x10/0x10 [ 397.770225][T18029] ? __pfx__printk+0x10/0x10 [ 397.770263][T18029] ? __pfx___might_resched+0x10/0x10 [ 397.770291][T18029] should_fail_ex+0x414/0x560 [ 397.770327][T18029] should_failslab+0xa8/0x100 [ 397.770362][T18029] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 397.770394][T18029] ? __alloc_skb+0x112/0x2d0 [ 397.770432][T18029] __alloc_skb+0x112/0x2d0 [ 397.770470][T18029] pfkey_sendmsg+0xca5/0x1090 [ 397.770514][T18029] ? __lock_acquire+0xab9/0xd20 [ 397.770553][T18029] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 397.770622][T18029] ? aa_sock_msg_perm+0xf1/0x1d0 [ 397.770659][T18029] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 397.770684][T18029] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 397.770719][T18029] __sock_sendmsg+0x21c/0x270 [ 397.770757][T18029] ____sys_sendmsg+0x505/0x830 [ 397.770787][T18029] ? __pfx_____sys_sendmsg+0x10/0x10 [ 397.770821][T18029] ? import_iovec+0x74/0xa0 [ 397.770852][T18029] ___sys_sendmsg+0x21f/0x2a0 [ 397.770878][T18029] ? __pfx____sys_sendmsg+0x10/0x10 [ 397.770955][T18029] ? __fget_files+0x2a/0x420 [ 397.770987][T18029] ? __fget_files+0x3a0/0x420 [ 397.771031][T18029] __x64_sys_sendmsg+0x19b/0x260 [ 397.771057][T18029] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 397.771091][T18029] ? __pfx_ksys_write+0x10/0x10 [ 397.771117][T18029] ? rcu_is_watching+0x15/0xb0 [ 397.771145][T18029] ? do_syscall_64+0xbe/0x3b0 [ 397.771180][T18029] do_syscall_64+0xfa/0x3b0 [ 397.771210][T18029] ? lockdep_hardirqs_on+0x9c/0x150 [ 397.771239][T18029] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.771278][T18029] ? clear_bhb_loop+0x60/0xb0 [ 397.771306][T18029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.771328][T18029] RIP: 0033:0x7f5d6598ebe9 [ 397.771348][T18029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 397.771368][T18029] RSP: 002b:00007f5d6681a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 397.771392][T18029] RAX: ffffffffffffffda RBX: 00007f5d65bb5fa0 RCX: 00007f5d6598ebe9 [ 397.771409][T18029] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 397.771423][T18029] RBP: 00007f5d6681a090 R08: 0000000000000000 R09: 0000000000000000 [ 397.771436][T18029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 397.771450][T18029] R13: 00007f5d65bb6038 R14: 00007f5d65bb5fa0 R15: 00007ffef8044b88 [ 397.771485][T18029] [ 397.951388][T18019] 8021q: adding VLAN 0 to HW filter on device bond9 [ 398.114899][T18030] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 398.122735][T18030] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 398.232640][T18032] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3703'. [ 398.258139][T18032] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3703'. [ 398.388963][T18039] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3706'. [ 398.754683][T18055] veth0_to_bond: entered promiscuous mode [ 398.771621][T18055] veth0_vlan: left allmulticast mode [ 398.797624][T18055] macvlan0.3: entered promiscuous mode [ 398.853970][T18055] bond2: entered promiscuous mode [ 398.878166][T18055] gretap1: entered promiscuous mode [ 398.914451][T18055] macsec1: entered promiscuous mode [ 398.927244][T18055] bond3: entered promiscuous mode [ 398.944746][T18055] bond4: entered promiscuous mode [ 398.950473][T18055] ip6gretap1: entered promiscuous mode [ 398.965095][T18055] veth2: entered promiscuous mode [ 398.965311][T18067] netlink: 'syz.4.3713': attribute type 4 has an invalid length. [ 398.991798][T18055] syztnl0: entered promiscuous mode [ 399.002407][T18055] bond5: entered promiscuous mode [ 399.020066][T18055] veth4: entered promiscuous mode [ 399.037243][T18055] veth5: entered promiscuous mode [ 399.055653][T18055] bond6: entered promiscuous mode [ 399.069950][T18055] macvlan2: left allmulticast mode [ 399.079058][T18055] vlan3: entered promiscuous mode [ 399.090284][T18055] dvmrp1: entered promiscuous mode [ 399.178962][ T59] veth0_to_bond: left promiscuous mode [ 399.345065][T18081] netlink: 'syz.3.3718': attribute type 30 has an invalid length. [ 399.484697][T18077] 8021q: adding VLAN 0 to HW filter on device bond2 [ 399.506067][T18080] delete_channel: no stack [ 399.921429][T18108] FAULT_INJECTION: forcing a failure. [ 399.921429][T18108] name failslab, interval 1, probability 0, space 0, times 0 [ 400.003445][T18108] CPU: 0 UID: 0 PID: 18108 Comm: syz.3.3725 Not tainted syzkaller #0 PREEMPT(full) [ 400.003478][T18108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 400.003493][T18108] Call Trace: [ 400.003502][T18108] [ 400.003513][T18108] dump_stack_lvl+0x189/0x250 [ 400.003545][T18108] ? __pfx____ratelimit+0x10/0x10 [ 400.003575][T18108] ? __pfx_dump_stack_lvl+0x10/0x10 [ 400.003602][T18108] ? __pfx__printk+0x10/0x10 [ 400.003641][T18108] ? __pfx___might_resched+0x10/0x10 [ 400.003669][T18108] should_fail_ex+0x414/0x560 [ 400.003703][T18108] should_failslab+0xa8/0x100 [ 400.003738][T18108] kmem_cache_alloc_noprof+0x73/0x3c0 [ 400.003768][T18108] ? skb_clone+0x212/0x3a0 [ 400.003797][T18108] skb_clone+0x212/0x3a0 [ 400.003818][T18108] ? pfkey_broadcast_one+0x7d/0x360 [ 400.003853][T18108] pfkey_broadcast_one+0x9b/0x360 [ 400.003882][T18108] ? pfkey_broadcast+0x39c/0x3e0 [ 400.003916][T18108] pfkey_broadcast+0x3a9/0x3e0 [ 400.003948][T18108] ? pfkey_broadcast+0x48/0x3e0 [ 400.003983][T18108] pfkey_sendmsg+0xdd8/0x1090 [ 400.004026][T18108] ? __lock_acquire+0xab9/0xd20 [ 400.004068][T18108] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 400.004132][T18108] ? aa_sock_msg_perm+0xf1/0x1d0 [ 400.004169][T18108] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 400.004194][T18108] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 400.004228][T18108] __sock_sendmsg+0x21c/0x270 [ 400.004260][T18108] ____sys_sendmsg+0x505/0x830 [ 400.004289][T18108] ? __pfx_____sys_sendmsg+0x10/0x10 [ 400.004323][T18108] ? import_iovec+0x74/0xa0 [ 400.004361][T18108] ___sys_sendmsg+0x21f/0x2a0 [ 400.004387][T18108] ? __pfx____sys_sendmsg+0x10/0x10 [ 400.004453][T18108] ? __fget_files+0x2a/0x420 [ 400.004486][T18108] ? __fget_files+0x3a0/0x420 [ 400.004531][T18108] __x64_sys_sendmsg+0x19b/0x260 [ 400.004558][T18108] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 400.004592][T18108] ? __pfx_ksys_write+0x10/0x10 [ 400.004619][T18108] ? rcu_is_watching+0x15/0xb0 [ 400.004648][T18108] ? do_syscall_64+0xbe/0x3b0 [ 400.004685][T18108] do_syscall_64+0xfa/0x3b0 [ 400.004715][T18108] ? lockdep_hardirqs_on+0x9c/0x150 [ 400.004745][T18108] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.004767][T18108] ? clear_bhb_loop+0x60/0xb0 [ 400.004794][T18108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.004816][T18108] RIP: 0033:0x7f659f98ebe9 [ 400.004835][T18108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 400.004855][T18108] RSP: 002b:00007f65a07da038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 400.004879][T18108] RAX: ffffffffffffffda RBX: 00007f659fbb5fa0 RCX: 00007f659f98ebe9 [ 400.004895][T18108] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 400.004909][T18108] RBP: 00007f65a07da090 R08: 0000000000000000 R09: 0000000000000000 [ 400.004923][T18108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 400.004936][T18108] R13: 00007f659fbb6038 R14: 00007f659fbb5fa0 R15: 00007ffdaa392888 [ 400.004972][T18108] [ 400.422984][T18121] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 400.432972][T18121] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 400.961280][T18137] __nla_validate_parse: 9 callbacks suppressed [ 400.961303][T18137] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3734'. [ 400.994219][T18147] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3737'. [ 401.107118][T18157] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3737'. [ 401.115702][T18137] 8021q: adding VLAN 0 to HW filter on device bond4 [ 401.151870][T18156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3738'. [ 401.175524][T18156] dummy0: entered promiscuous mode [ 401.189639][T18156] batadv_slave_1: entered promiscuous mode [ 401.277719][T18159] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3739'. [ 401.287687][T18159] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3739'. [ 401.308672][T18159] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3739'. [ 401.332463][T18161] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3740'. [ 401.389147][T18163] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 401.409275][T18163] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 401.537881][T18170] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3743'. [ 401.619896][T18174] netlink: 'syz.4.3744': attribute type 1 has an invalid length. [ 401.803187][T18180] bond3: (slave bridge0): making interface the new active one [ 401.839550][T18180] bond3: (slave bridge0): Enslaving as an active interface with an up link [ 401.874200][T18187] lo: left promiscuous mode [ 401.882664][T18187] tunl0: left promiscuous mode [ 401.899429][T18187] gre0: left promiscuous mode [ 401.933965][T18187] gretap0: left promiscuous mode [ 401.968670][T18187] erspan0: left promiscuous mode [ 401.973824][T18187] ip_vti0: left promiscuous mode [ 401.998581][T18187] ip6_vti0: left promiscuous mode [ 402.003866][T18187] sit0: left promiscuous mode [ 402.030924][T18187] ip6tnl0: left promiscuous mode [ 402.037392][T18187] ip6gre0: left promiscuous mode [ 402.049656][T18187] syz_tun: left promiscuous mode [ 402.056586][T18187] ip6gretap0: left promiscuous mode [ 402.073597][T18187] vcan0: left promiscuous mode [ 402.084219][T18187] bond0: left promiscuous mode [ 402.092979][T18187] team0: left promiscuous mode [ 402.103272][T18187] dummy0: left promiscuous mode [ 402.116978][T18187] nlmon0: left promiscuous mode [ 402.126151][T18187] caif0: left promiscuous mode [ 402.134275][T18187] batadv0: left promiscuous mode [ 402.152104][T18187] vxcan0: left promiscuous mode [ 402.173995][T18187] vxcan1: left promiscuous mode [ 402.183045][T18187] wg0: left promiscuous mode [ 402.191795][T18187] wg1: left promiscuous mode [ 402.197061][T18187] wg2: left promiscuous mode [ 402.205795][T18187] veth0_to_bridge: left promiscuous mode [ 402.215280][T18187] bridge_slave_0: left promiscuous mode [ 402.224908][T18187] veth1_to_bridge: left promiscuous mode [ 402.235373][T18187] bridge_slave_1: left promiscuous mode [ 402.246838][T18187] bond_slave_0: left promiscuous mode [ 402.264880][T18187] veth1_to_bond: left promiscuous mode [ 402.274061][T18187] bond_slave_1: left promiscuous mode [ 402.285663][T18187] veth0_to_team: left promiscuous mode [ 402.293033][T18187] team_slave_0: left promiscuous mode [ 402.325086][T18187] veth1_to_team: left promiscuous mode [ 402.334769][T18187] team_slave_1: left promiscuous mode [ 402.349298][T18187] veth0_to_batadv: left promiscuous mode [ 402.356470][T18187] batadv_slave_0: left promiscuous mode [ 402.393474][T18187] veth1_to_batadv: left promiscuous mode [ 402.400007][T18187] batadv_slave_1: left promiscuous mode [ 402.407634][T18187] xfrm0: left promiscuous mode [ 402.417164][T18200] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3752'. [ 402.417462][T18187] veth0_to_hsr: left promiscuous mode [ 402.434158][T18187] veth1_to_hsr: left promiscuous mode [ 402.517837][T18200] 8021q: adding VLAN 0 to HW filter on device bond7 [ 402.732041][T18220] FAULT_INJECTION: forcing a failure. [ 402.732041][T18220] name failslab, interval 1, probability 0, space 0, times 0 [ 402.747536][T18220] CPU: 0 UID: 0 PID: 18220 Comm: syz.0.3758 Not tainted syzkaller #0 PREEMPT(full) [ 402.747565][T18220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 402.747579][T18220] Call Trace: [ 402.747589][T18220] [ 402.747599][T18220] dump_stack_lvl+0x189/0x250 [ 402.747633][T18220] ? __pfx____ratelimit+0x10/0x10 [ 402.747666][T18220] ? __pfx_dump_stack_lvl+0x10/0x10 [ 402.747693][T18220] ? __pfx__printk+0x10/0x10 [ 402.747731][T18220] ? __pfx___might_resched+0x10/0x10 [ 402.747752][T18220] ? fs_reclaim_acquire+0x7d/0x100 [ 402.747792][T18220] should_fail_ex+0x414/0x560 [ 402.747829][T18220] should_failslab+0xa8/0x100 [ 402.747863][T18220] __kmalloc_noprof+0xcb/0x4f0 [ 402.747892][T18220] ? kfree+0x4d/0x440 [ 402.747916][T18220] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 402.747946][T18220] tomoyo_realpath_from_path+0xe3/0x5d0 [ 402.747977][T18220] ? tomoyo_domain+0xd9/0x130 [ 402.748016][T18220] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 402.748047][T18220] tomoyo_path_number_perm+0x1e8/0x5a0 [ 402.748082][T18220] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 402.748133][T18220] ? __lock_acquire+0xab9/0xd20 [ 402.748189][T18220] ? __fget_files+0x2a/0x420 [ 402.748236][T18220] ? __fget_files+0x2a/0x420 [ 402.748268][T18220] ? __fget_files+0x3a0/0x420 [ 402.748300][T18220] ? __fget_files+0x2a/0x420 [ 402.748339][T18220] security_file_ioctl+0xcb/0x2d0 [ 402.748369][T18220] __se_sys_ioctl+0x47/0x170 [ 402.748399][T18220] do_syscall_64+0xfa/0x3b0 [ 402.748430][T18220] ? lockdep_hardirqs_on+0x9c/0x150 [ 402.748469][T18220] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.748492][T18220] ? clear_bhb_loop+0x60/0xb0 [ 402.748521][T18220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.748543][T18220] RIP: 0033:0x7fc1b618ebe9 [ 402.748563][T18220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 402.748583][T18220] RSP: 002b:00007fc1b6ffc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 402.748607][T18220] RAX: ffffffffffffffda RBX: 00007fc1b63b5fa0 RCX: 00007fc1b618ebe9 [ 402.748624][T18220] RDX: 0000200000000300 RSI: 000000000000890b RDI: 0000000000000004 [ 402.748640][T18220] RBP: 00007fc1b6ffc090 R08: 0000000000000000 R09: 0000000000000000 [ 402.748654][T18220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 402.748667][T18220] R13: 00007fc1b63b6038 R14: 00007fc1b63b5fa0 R15: 00007ffe2836a538 [ 402.748704][T18220] [ 403.018260][T18220] ERROR: Out of memory at tomoyo_realpath_from_path. [ 403.162277][T18233] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 403.376534][T18252] netlink: 'syz.1.3765': attribute type 10 has an invalid length. [ 403.804666][T18270] tunl0: entered promiscuous mode [ 403.812931][T18270] netlink: 'syz.4.3771': attribute type 3 has an invalid length. [ 404.305994][T18294] netlink: 'syz.1.3781': attribute type 10 has an invalid length. [ 404.603689][T18301] dummy0: entered promiscuous mode [ 404.615548][T18301] batadv_slave_1: entered promiscuous mode [ 404.634311][T18301] debugfs: 'hsr1' already exists in 'hsr' [ 404.652924][T18301] Cannot create hsr debugfs directory [ 404.835833][T18305] sctp: [Deprecated]: syz.4.3785 (pid 18305) Use of int in max_burst socket option deprecated. [ 404.835833][T18305] Use struct sctp_assoc_value instead [ 405.026138][T18308] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 405.197651][T18319] netlink: 'syz.2.3788': attribute type 1 has an invalid length. [ 405.282984][T18319] 8021q: adding VLAN 0 to HW filter on device bond10 [ 405.426041][T18319] bond10: (slave veth11): Enslaving as an active interface with a down link [ 405.438580][T18327] netlink: 'syz.4.3791': attribute type 30 has an invalid length. [ 405.517072][T18329] bond6: (slave veth0_to_bond): Releasing active interface [ 405.537824][T18329] bond10: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 405.565674][T18338] debugfs: 'hsr1' already exists in 'hsr' [ 405.574176][T18338] Cannot create hsr debugfs directory [ 405.581924][T18326] delete_channel: no stack [ 405.628538][T18342] tipc: Enabled bearer , priority 0 [ 405.643331][T18342] syzkaller0: entered promiscuous mode [ 405.673538][T18342] syzkaller0: entered allmulticast mode [ 406.087600][T18339] tipc: Resetting bearer [ 406.161160][T18339] tipc: Disabling bearer [ 406.430976][T18379] netlink: 'syz.3.3807': attribute type 30 has an invalid length. [ 406.431992][T18384] __nla_validate_parse: 26 callbacks suppressed [ 406.432016][T18384] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3808'. [ 406.587773][T18384] dummy0: entered promiscuous mode [ 406.605721][T18384] batadv_slave_1: entered promiscuous mode [ 406.626661][T18384] debugfs: 'hsr1' already exists in 'hsr' [ 406.637103][T18384] Cannot create hsr debugfs directory [ 406.663835][T18376] delete_channel: no stack [ 406.880140][T18409] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3816'. [ 406.904561][T18411] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3818'. [ 407.088937][T18422] netlink: 'syz.4.3822': attribute type 1 has an invalid length. [ 407.184102][T18422] 8021q: adding VLAN 0 to HW filter on device bond4 [ 407.251527][T18432] bond4: (slave veth5): Enslaving as an active interface with a down link [ 407.287042][T18436] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3826'. [ 407.299653][T18422] veth0_to_bond: left allmulticast mode [ 407.305282][T18422] veth0_to_bond: left promiscuous mode [ 407.358056][T18422] bridge1: port 2(veth0_to_bond) entered disabled state [ 407.391498][T18422] bond4: (slave veth0_to_bond): making interface the new active one [ 407.430364][T18422] veth0_to_bond: entered promiscuous mode [ 407.450695][T18422] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 407.496831][T18436] dummy0: entered promiscuous mode [ 407.512466][T18436] batadv_slave_1: entered promiscuous mode [ 407.522622][T18436] debugfs: 'hsr1' already exists in 'hsr' [ 407.540300][T18436] Cannot create hsr debugfs directory [ 407.731145][T18462] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3833'. [ 407.744693][T18463] netlink: 232 bytes leftover after parsing attributes in process `syz.1.3833'. [ 407.808397][T18458] 8021q: adding VLAN 0 to HW filter on device bond8 [ 407.816842][T18458] bond8: entered promiscuous mode [ 407.829463][T18458] team0: Port device bond8 added [ 407.915219][T18471] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 407.987520][T18473] lo speed is unknown, defaulting to 1000 [ 407.993648][T18473] lo speed is unknown, defaulting to 1000 [ 408.002081][T18473] lo speed is unknown, defaulting to 1000 [ 408.042869][T18473] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 408.066099][T18478] veth0: entered promiscuous mode [ 408.079519][T18478] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3838'. [ 408.116442][T18478] veth0 (unregistering): left promiscuous mode [ 408.123864][T18473] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 408.197277][T18478] bond5: (slave veth1): Releasing active interface [ 408.204420][T18478] bond5: (slave veth1): the permanent HWaddr of slave - e2:0f:25:e6:7f:55 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 408.226806][T18487] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3841'. [ 408.238352][T18473] lo speed is unknown, defaulting to 1000 [ 408.244823][T18483] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3841'. [ 408.263681][T18484] gre1: entered promiscuous mode [ 408.269850][T18484] gre1: entered allmulticast mode [ 408.284057][T18473] lo speed is unknown, defaulting to 1000 [ 408.300144][T18489] pim6reg: entered allmulticast mode [ 408.305778][T18473] lo speed is unknown, defaulting to 1000 [ 408.315577][T18473] lo speed is unknown, defaulting to 1000 [ 408.339562][T18473] lo speed is unknown, defaulting to 1000 [ 408.350016][T18478] netlink: 'syz.1.3838': attribute type 1 has an invalid length. [ 408.360147][T18473] lo speed is unknown, defaulting to 1000 [ 408.368454][T18478] netlink: 17 bytes leftover after parsing attributes in process `syz.1.3838'. [ 408.387470][T18473] lo speed is unknown, defaulting to 1000 [ 408.396830][T18473] lo speed is unknown, defaulting to 1000 [ 408.426557][T18473] lo speed is unknown, defaulting to 1000 [ 408.436224][T18473] lo speed is unknown, defaulting to 1000 [ 408.638612][T18499] netlink: 'syz.4.3845': attribute type 30 has an invalid length. [ 408.756299][T18495] delete_channel: no stack [ 408.905092][T18514] tipc: Started in network mode [ 408.914662][T18514] tipc: Node identity a67b60a7446b, cluster identity 4711 [ 408.925682][T18514] tipc: Enabled bearer , priority 0 [ 408.946655][T18514] syzkaller0: entered promiscuous mode [ 408.973372][T18514] syzkaller0: entered allmulticast mode [ 409.027917][T18514] tipc: Resetting bearer [ 409.037357][T18521] bond7: entered promiscuous mode [ 409.051765][T18521] hsr1: entered promiscuous mode [ 409.066085][T18513] tipc: Resetting bearer [ 409.136666][T18513] tipc: Disabling bearer [ 409.170130][T18527] netlink: 'syz.2.3855': attribute type 11 has an invalid length. [ 409.378607][ T30] audit: type=1800 audit(1755737820.690:4): pid=18515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3850" name="memory.events" dev="tmpfs" ino=835 res=0 errno=0 [ 409.536542][T18544] netlink: 'syz.4.3862': attribute type 30 has an invalid length. [ 409.701219][T18543] delete_channel: no stack [ 409.804872][T18554] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 409.846302][T18554] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 410.146076][T18572] netlink: 'syz.1.3872': attribute type 1 has an invalid length. [ 410.193168][T18562] 8021q: adding VLAN 0 to HW filter on device bond16 [ 410.291142][T18581] 8021q: adding VLAN 0 to HW filter on device bond9 [ 410.313479][T18580] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 410.361094][T18580] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 410.496043][T18592] netlink: 'syz.1.3878': attribute type 30 has an invalid length. [ 410.675969][T18595] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 410.685085][T18595] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 410.716614][T18590] delete_channel: no stack [ 410.726148][T18599] lo: entered promiscuous mode [ 410.731820][T18599] tunl0: entered promiscuous mode [ 410.737875][T18599] gre0: entered promiscuous mode [ 410.746674][T18599] gretap0: entered promiscuous mode [ 410.762954][T18599] erspan0: entered promiscuous mode [ 410.771563][T18599] ip_vti0: entered promiscuous mode [ 410.777169][T18599] ip6_vti0: entered promiscuous mode [ 410.794597][T18599] sit0: entered promiscuous mode [ 410.802483][T18599] ip6tnl0: entered promiscuous mode [ 410.811391][T18599] ip6gre0: entered promiscuous mode [ 410.821389][T18599] ip6gretap0: entered promiscuous mode [ 410.827799][T18599] vcan0: entered promiscuous mode [ 410.836757][T18599] bond0: entered promiscuous mode [ 410.844638][T18599] bond_slave_0: entered promiscuous mode [ 410.854140][T18599] bond_slave_1: entered promiscuous mode [ 410.863002][T18599] team0: entered promiscuous mode [ 410.871629][T18599] team_slave_0: entered promiscuous mode [ 410.877761][T18599] team_slave_1: entered promiscuous mode [ 410.890571][T18599] nlmon0: entered promiscuous mode [ 410.896105][T18599] caif0: entered promiscuous mode [ 410.910301][T18599] batadv0: entered promiscuous mode [ 410.916003][T18599] vxcan0: entered promiscuous mode [ 410.927444][T18599] vxcan1: entered promiscuous mode [ 410.936022][T18599] veth0: entered promiscuous mode [ 410.941912][T18599] veth1: entered promiscuous mode [ 410.947384][T18599] wg0: entered promiscuous mode [ 410.953428][T18599] wg1: entered promiscuous mode [ 410.958906][T18599] wg2: entered promiscuous mode [ 410.964137][T18599] veth0_to_bridge: entered promiscuous mode [ 410.970779][T18599] bridge_slave_0: entered promiscuous mode [ 410.976950][T18599] veth1_to_bridge: entered promiscuous mode [ 410.983974][T18599] bridge_slave_1: entered promiscuous mode [ 410.993231][T18599] veth0_to_bond: entered promiscuous mode [ 411.001381][T18599] veth1_to_bond: entered promiscuous mode [ 411.007665][T18599] veth0_to_team: entered promiscuous mode [ 411.017263][T18599] veth1_to_team: entered promiscuous mode [ 411.027638][T18599] veth0_to_batadv: entered promiscuous mode [ 411.034246][T18599] batadv_slave_0: entered promiscuous mode [ 411.041367][T18599] veth1_to_batadv: entered promiscuous mode [ 411.047813][T18599] xfrm0: entered promiscuous mode [ 411.053599][T18599] veth0_to_hsr: entered promiscuous mode [ 411.060482][T18599] veth1_to_hsr: entered promiscuous mode [ 411.069552][T18599] hsr0: entered promiscuous mode [ 411.074948][T18599] veth1_virt_wifi: entered promiscuous mode [ 411.081634][T18599] veth0_virt_wifi: entered promiscuous mode [ 411.087969][T18599] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 411.096236][T18599] vlan0: entered promiscuous mode [ 411.103417][T18599] vlan1: entered promiscuous mode [ 411.109465][T18599] macvlan0: entered promiscuous mode [ 411.115170][T18599] macvlan1: entered promiscuous mode [ 411.126458][T18599] ipvlan0: entered promiscuous mode [ 411.134515][T18599] ipvlan1: entered promiscuous mode [ 411.140888][T18599] macvtap0: entered promiscuous mode [ 411.146644][T18599] macsec0: entered promiscuous mode [ 411.153083][T18599] geneve0: entered promiscuous mode [ 411.159404][T18599] geneve1: entered promiscuous mode [ 411.167129][T18599] netdevsim netdevsim2 : entered promiscuous mode [ 411.175224][T18599] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 411.183306][T18599] netdevsim netdevsim2 netdevsim2: entered promiscuous mode [ 411.191845][T18599] netdevsim netdevsim2 netdevsim3: entered promiscuous mode [ 411.200064][T18599] mac80211_hwsim hwsim23 wlan0: entered promiscuous mode [ 411.207575][T18599] mac80211_hwsim hwsim24 wlan1: entered promiscuous mode [ 411.216372][T18599] bond1: entered promiscuous mode [ 411.222383][T18599] gretap1: entered promiscuous mode [ 411.234685][T18599] bond2: entered promiscuous mode [ 411.241695][T18599] bond3: entered promiscuous mode [ 411.247175][T18599] veth2: entered promiscuous mode [ 411.253573][T18599] veth3: entered promiscuous mode [ 411.259432][T18599] gre1: entered promiscuous mode [ 411.264759][T18599] bond4: entered promiscuous mode [ 411.270815][T18599] veth4: entered promiscuous mode [ 411.276257][T18599] veth5: entered promiscuous mode [ 411.282647][T18599] bond5: entered promiscuous mode [ 411.292626][T18599] bond6: entered promiscuous mode [ 411.299661][T18599] veth6: entered promiscuous mode [ 411.305843][T18599] veth7: entered promiscuous mode [ 411.314742][T18599] nicvf0: entered promiscuous mode [ 411.325050][T18599] bridge0: left allmulticast mode [ 411.334019][T18599] veth8: entered promiscuous mode [ 411.341094][T18599] veth9: entered promiscuous mode [ 411.347553][T18599] bond7: entered promiscuous mode [ 411.356692][T18599] bond8: entered promiscuous mode [ 411.363224][T18599] bond9: entered promiscuous mode [ 411.369960][T18599] hsr1: entered promiscuous mode [ 411.376192][T18599] bond10: entered promiscuous mode [ 411.382794][T18599] veth10: entered promiscuous mode [ 411.389607][T18599] veth11: entered promiscuous mode [ 411.490580][T18620] netlink: 'syz.2.3886': attribute type 1 has an invalid length. [ 411.532308][T18620] 8021q: adding VLAN 0 to HW filter on device bond11 [ 411.579646][T18620] bond11: (slave veth13): Enslaving as an active interface with a down link [ 411.616738][T18620] veth0_to_bond: left promiscuous mode [ 411.637506][T18620] bond10: (slave veth0_to_bond): Releasing active interface [ 411.651861][T18630] syz.1.3888: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 411.675192][T18630] CPU: 0 UID: 0 PID: 18630 Comm: syz.1.3888 Not tainted syzkaller #0 PREEMPT(full) [ 411.675224][T18630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 411.675238][T18630] Call Trace: [ 411.675248][T18630] [ 411.675259][T18630] dump_stack_lvl+0x189/0x250 [ 411.675294][T18630] ? __pfx_dump_stack_lvl+0x10/0x10 [ 411.675322][T18630] ? __pfx__printk+0x10/0x10 [ 411.675353][T18630] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 411.675379][T18630] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 411.675407][T18630] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 411.675433][T18630] warn_alloc+0x214/0x310 [ 411.675465][T18630] ? stack_depot_save_flags+0x40/0x860 [ 411.675494][T18630] ? __pfx_warn_alloc+0x10/0x10 [ 411.675535][T18630] ? kasan_save_track+0x4f/0x80 [ 411.675563][T18630] ? xskq_create+0x56/0x170 [ 411.675587][T18630] ? xsk_init_queue+0xb0/0x110 [ 411.675609][T18630] ? xsk_setsockopt+0x4dc/0x8d0 [ 411.675632][T18630] ? do_sock_setsockopt+0x17c/0x1b0 [ 411.675663][T18630] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 411.675680][T18630] ? do_syscall_64+0xfa/0x3b0 [ 411.675707][T18630] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.675736][T18630] __vmalloc_node_range_noprof+0x125/0x12f0 [ 411.675803][T18630] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 411.675836][T18630] ? xskq_create+0x56/0x170 [ 411.675868][T18630] ? __kasan_kmalloc+0x93/0xb0 [ 411.675901][T18630] vmalloc_user_noprof+0xad/0xf0 [ 411.675932][T18630] ? xskq_create+0xbf/0x170 [ 411.675961][T18630] xskq_create+0xbf/0x170 [ 411.675992][T18630] xsk_init_queue+0xb0/0x110 [ 411.676022][T18630] xsk_setsockopt+0x4dc/0x8d0 [ 411.676050][T18630] ? __pfx_xsk_setsockopt+0x10/0x10 [ 411.676075][T18630] ? __pfx_aa_sk_perm+0x10/0x10 [ 411.676110][T18630] ? aa_sock_opt_perm+0xff/0x1b0 [ 411.676140][T18630] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 411.676164][T18630] ? __pfx_xsk_setsockopt+0x10/0x10 [ 411.676193][T18630] do_sock_setsockopt+0x17c/0x1b0 [ 411.676230][T18630] __x64_sys_setsockopt+0x13f/0x1b0 [ 411.676257][T18630] do_syscall_64+0xfa/0x3b0 [ 411.676287][T18630] ? lockdep_hardirqs_on+0x9c/0x150 [ 411.676315][T18630] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.676337][T18630] ? clear_bhb_loop+0x60/0xb0 [ 411.676364][T18630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.676385][T18630] RIP: 0033:0x7f5d6598ebe9 [ 411.676405][T18630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 411.676425][T18630] RSP: 002b:00007f5d6681a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 411.676449][T18630] RAX: ffffffffffffffda RBX: 00007f5d65bb5fa0 RCX: 00007f5d6598ebe9 [ 411.676467][T18630] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 411.676480][T18630] RBP: 00007f5d65a11e19 R08: 0000000000000004 R09: 0000000000000000 [ 411.676494][T18630] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 411.676517][T18630] R13: 00007f5d65bb6038 R14: 00007f5d65bb5fa0 R15: 00007ffef8044b88 [ 411.676554][T18630] [ 411.676605][T18630] Mem-Info: [ 411.692446][T18620] bond11: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 411.706704][T18630] active_anon:3702 inactive_anon:0 isolated_anon:0 [ 411.706704][T18630] active_file:3788 inactive_file:39972 isolated_file:0 [ 411.706704][T18630] unevictable:768 dirty:187 writeback:0 [ 411.706704][T18630] slab_reclaimable:13513 slab_unreclaimable:163206 [ 411.706704][T18630] mapped:29630 shmem:1369 pagetables:1005 [ 411.706704][T18630] sec_pagetables:0 bounce:0 [ 411.706704][T18630] kernel_misc_reclaimable:0 [ 411.706704][T18630] free:1257195 free_pcp:17416 free_cma:0 [ 411.763322][T18631] __nla_validate_parse: 16 callbacks suppressed [ 411.763348][T18631] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3887'. [ 412.068787][T18630] Node 0 active_anon:14712kB inactive_anon:0kB active_file:15152kB inactive_file:159688kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118480kB dirty:756kB writeback:0kB shmem:3940kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:20380kB pagetables:4040kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 412.203634][T18631] 8021q: adding VLAN 0 to HW filter on device bond5 [ 412.209943][T18630] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:104kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 412.270479][T18638] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3888'. [ 412.293167][T18630] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 412.356719][T18630] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 412.364478][T18639] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3891'. [ 412.414796][T18630] Node 0 DMA32 free:1127384kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14584kB inactive_anon:0kB active_file:15152kB inactive_file:158120kB unevictable:1536kB writepending:796kB present:3129332kB managed:2557476kB mlocked:0kB bounce:0kB free_pcp:39016kB local_pcp:20360kB free_cma:0kB [ 412.453083][T18630] lowmem_reserve[]: 0 0 1 1 1 [ 412.459200][T18630] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1568kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 412.510956][T18630] lowmem_reserve[]: 0 0 0 0 0 [ 412.517072][T18630] Node 1 Normal free:3886116kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:28800kB local_pcp:13120kB free_cma:0kB [ 412.566060][T18651] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3895'. [ 412.597863][T18630] lowmem_reserve[]: 0 0 0 0 0 [ 412.602724][T18651] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3895'. [ 412.614146][T18651] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3895'. [ 412.632178][T18630] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 412.708081][T18630] Node 0 DMA32: 1334*4kB (ME) 708*8kB (ME) 382*16kB (UME) 212*32kB (ME) 70*64kB (UME) 26*128kB (UM) 16*256kB (UME) 4*512kB (UM) 2*1024kB (UM) 1*2048kB (M) 265*4096kB (UM) = 1127384kB [ 412.765253][T18658] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3897'. [ 412.776178][T18630] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 412.823757][T18630] Node 1 Normal: 3*4kB (UE) 5*8kB (UME) 13*16kB (UME) 5*32kB (UME) 8*64kB (UME) 5*128kB (ME) 2*256kB (M) 2*512kB (M) 2*1024kB (UM) 1*2048kB (U) 947*4096kB (M) = 3886116kB [ 412.845794][T18662] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3897'. [ 412.873116][T18630] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 412.904632][T18630] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 412.944245][T18630] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 413.001794][T18630] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 413.019977][T18668] netlink: 'syz.3.3900': attribute type 6 has an invalid length. [ 413.036367][T18630] 45126 total pagecache pages [ 413.036520][T18668] netlink: 'syz.3.3900': attribute type 1 has an invalid length. [ 413.062758][T18630] 0 pages in swap cache [ 413.077051][T18630] Free swap = 124996kB [ 413.078615][T18668] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.3900'. [ 413.100769][T18630] Total swap = 124996kB [ 413.110743][T18630] 2097051 pages RAM [ 413.131089][T18630] 0 pages HighMem/MovableOnly [ 413.148601][T18630] 425656 pages reserved [ 413.163211][T18630] 0 pages cma reserved [ 413.235618][T18678] netlink: 'syz.4.3903': attribute type 30 has an invalid length. [ 413.291270][T18681] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3903'. [ 413.470324][T18691] netlink: 'syz.0.3905': attribute type 10 has an invalid length. [ 413.512960][T18691] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 413.685640][T18694] bond6: entered allmulticast mode [ 413.693983][T18694] 8021q: adding VLAN 0 to HW filter on device bond6 [ 413.717721][T18694] bridge0: port 1(bond6) entered blocking state [ 413.728253][T18694] bridge0: port 1(bond6) entered disabled state [ 413.750818][T18694] bridge0: port 1(bond6) entered blocking state [ 413.757311][T18694] bridge0: port 1(bond6) entered forwarding state [ 413.862281][T18711] netlink: 'syz.0.3914': attribute type 1 has an invalid length. [ 413.998615][T18718] netlink: 'syz.1.3915': attribute type 1 has an invalid length. [ 414.018876][T18725] netlink: 'syz.4.3918': attribute type 1 has an invalid length. [ 414.024121][T18711] 8021q: adding VLAN 0 to HW filter on device bond6 [ 414.090785][T18716] 8021q: adding VLAN 0 to HW filter on device bond6 [ 414.109962][T18716] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address [ 414.122656][T18716] bond6: (slave vxcan1): Error -95 calling set_mac_address [ 414.254162][T18721] veth9: entered promiscuous mode [ 414.273176][T18721] bond6: (slave veth9): Enslaving as an active interface with a down link [ 414.348319][T18718] 8021q: adding VLAN 0 to HW filter on device bond10 [ 414.385945][T18728] bond10: (slave veth1): Enslaving as an active interface with a down link [ 414.396881][T18729] 8021q: adding VLAN 0 to HW filter on device bond7 [ 414.420826][T18711] vlan2: entered allmulticast mode [ 414.438130][T18711] bond6: entered allmulticast mode [ 414.501851][T18730] bond5: (slave veth0_to_bond): Releasing active interface [ 414.533689][T18730] bond10: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 414.677251][ T13] bridge0: port 1(bond6) entered disabled state [ 414.931060][T18751] bond7: entered allmulticast mode [ 414.962313][T18751] 8021q: adding VLAN 0 to HW filter on device bond7 [ 414.992432][T18751] bridge0: port 1(bond7) entered blocking state [ 415.030914][T18751] bridge0: port 1(bond7) entered disabled state [ 415.057886][T18751] bond7: entered promiscuous mode [ 415.830741][T18815] bond9: entered allmulticast mode [ 415.850357][T18815] 8021q: adding VLAN 0 to HW filter on device bond9 [ 415.858974][T18815] bridge0: port 1(bond9) entered blocking state [ 415.874390][T18815] bridge0: port 1(bond9) entered disabled state [ 415.889994][T18815] bond9: entered promiscuous mode [ 416.256976][T18843] netlink: 'syz.3.3951': attribute type 10 has an invalid length. [ 416.279551][T18843] bridge_slave_1: left promiscuous mode [ 416.315337][T18843] bridge_slave_1: entered promiscuous mode [ 416.341384][T18843] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 416.390703][T18852] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 416.400975][T18852] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 416.408283][T18852] IPv6: NLM_F_CREATE should be set when creating new route [ 416.415728][T18852] IPv6: NLM_F_CREATE should be set when creating new route [ 416.423063][T18852] IPv6: NLM_F_CREATE should be set when creating new route [ 416.446630][T18852] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 416.502427][T18852] netlink: 'syz.0.3955': attribute type 7 has an invalid length. [ 416.534171][T18852] netlink: 'syz.0.3955': attribute type 8 has an invalid length. [ 416.573468][T18865] netlink: 'syz.0.3955': attribute type 1 has an invalid length. [ 416.825297][T18865] 8021q: adding VLAN 0 to HW filter on device bond8 [ 416.904454][T18883] __nla_validate_parse: 13 callbacks suppressed [ 416.904476][T18883] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3962'. [ 417.074522][T18894] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3966'. [ 417.257225][T18901] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 417.271905][T18901] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 418.413614][T18961] bond11: entered allmulticast mode [ 418.456439][T18961] 8021q: adding VLAN 0 to HW filter on device bond11 [ 418.492465][T18961] bridge0: port 2(bond11) entered blocking state [ 418.526813][T18961] bridge0: port 2(bond11) entered disabled state [ 418.544259][T18961] bond11: entered promiscuous mode [ 418.635250][T18975] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3989'. [ 418.715031][T18979] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3991'. [ 418.933980][T18993] delete_channel: no stack [ 419.102288][T18998] tipc: Enabled bearer , priority 0 [ 419.123439][T18998] syzkaller0: entered promiscuous mode [ 419.131984][T18998] syzkaller0: entered allmulticast mode [ 419.135347][T19007] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4000'. [ 419.224721][T18998] tipc: Resetting bearer [ 419.298744][T19016] bond9: entered allmulticast mode [ 419.304393][T19016] 8021q: adding VLAN 0 to HW filter on device bond9 [ 419.313212][T19016] bridge0: port 2(bond9) entered blocking state [ 419.320124][T19016] bridge0: port 2(bond9) entered disabled state [ 419.331933][T19016] bond9: entered promiscuous mode [ 419.339331][T18996] tipc: Resetting bearer [ 419.357282][T18996] tipc: Disabling bearer [ 419.574056][T19035] ieee802154 phy0 wpan0: encryption failed: -22 [ 419.770864][ T13] bond29: left allmulticast mode [ 419.780585][ T13] bridge0: port 12(bond29) entered disabled state [ 419.823008][ T13] bond28: left allmulticast mode [ 419.834326][ T13] bridge0: port 11(bond28) entered disabled state [ 419.861524][ T13] bond25: left allmulticast mode [ 419.870989][ T13] bridge0: port 10(bond25) entered disabled state [ 419.918235][ T13] bond23: left allmulticast mode [ 419.924851][T19049] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4010'. [ 419.948752][ T13] bridge0: port 9(bond23) entered disabled state [ 419.962102][T19050] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4012'. [ 419.995296][ T13] bond18: left allmulticast mode [ 420.013701][ T13] bridge0: port 8(bond18) entered disabled state [ 420.050770][ T13] bond14: left allmulticast mode [ 420.056302][ T13] bridge0: port 7(bond14) entered disabled state [ 420.075837][ T13] bond12: left allmulticast mode [ 420.081445][ T13] bridge0: port 6(bond12) entered disabled state [ 420.112513][ T13] bond9: left allmulticast mode [ 420.122137][ T13] bridge0: port 5(bond9) entered disabled state [ 420.142404][ T13] bond5: left allmulticast mode [ 420.147587][ T13] bridge0: port 3(bond5) entered disabled state [ 420.166830][ T13] bond3: left allmulticast mode [ 420.176212][ T13] bridge0: port 2(bond3) entered disabled state [ 420.194112][ T13] bond2: left allmulticast mode [ 420.200669][ T13] bridge0: port 1(bond2) entered disabled state [ 420.497025][ T13] bond11 (unregistering): (slave gretap1): Releasing active interface [ 420.572285][ T13] bond16 (unregistering): (slave geneve4): Releasing active interface [ 421.205512][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 421.216035][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 421.227508][ T13] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 421.242685][ T13] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 421.253871][ T13] bond0 (unregistering): Released all slaves [ 421.361860][ T13] bond1 (unregistering): (slave veth3): Releasing active interface [ 421.371569][ T13] bond1 (unregistering): Released all slaves [ 421.484573][ T13] bond2 (unregistering): Released all slaves [ 421.593233][ T13] bond3 (unregistering): Released all slaves [ 421.700760][ T13] bond4 (unregistering): Released all slaves [ 421.808464][ T13] bond5 (unregistering): Released all slaves [ 421.916441][ T13] bond6 (unregistering): Released all slaves [ 422.017926][ T13] bond7 (unregistering): (slave veth12): Releasing active interface [ 422.027361][ T13] bond7 (unregistering): Released all slaves [ 422.133727][ T13] bond8 (unregistering): Released all slaves [ 422.236691][ T13] bond9 (unregistering): Released all slaves [ 422.347915][ T13] bond10 (unregistering): (slave veth14): Releasing active interface [ 422.357799][ T13] bond10 (unregistering): Released all slaves [ 422.375445][ T13] bond11 (unregistering): Released all slaves [ 422.489307][ T13] bond12 (unregistering): Released all slaves [ 422.597914][ T13] bond13 (unregistering): Released all slaves [ 422.706492][ T13] bond14 (unregistering): Released all slaves [ 422.814584][ T13] bond15 (unregistering): (slave veth16): Releasing active interface [ 422.824136][ T13] bond15 (unregistering): Released all slaves [ 422.841533][ T13] bond16 (unregistering): Released all slaves [ 422.961936][ T13] bond17 (unregistering): Released all slaves [ 423.067932][ T13] bond18 (unregistering): Released all slaves [ 423.178682][ T13] bond19 (unregistering): Released all slaves [ 423.289186][ T13] bond20 (unregistering): Released all slaves [ 423.399504][ T13] bond21 (unregistering): (slave veth18): Releasing active interface [ 423.408967][ T13] bond21 (unregistering): Released all slaves [ 423.516025][ T13] bond22 (unregistering): (slave veth20): Releasing active interface [ 423.525480][ T13] bond22 (unregistering): Released all slaves [ 423.631437][ T13] bond23 (unregistering): Released all slaves [ 423.732407][ T13] bond24 (unregistering): Released all slaves [ 423.841536][ T13] bond25 (unregistering): Released all slaves [ 423.945462][ T13] bond26 (unregistering): (slave veth22): Releasing active interface [ 423.956585][ T13] bond26 (unregistering): Released all slaves [ 424.062623][ T13] bond27 (unregistering): (slave veth24): Releasing active interface [ 424.072489][ T13] bond27 (unregistering): Released all slaves [ 424.174270][ T13] bond28 (unregistering): Released all slaves [ 424.282404][ T13] bond29 (unregistering): Released all slaves [ 424.384202][ T13] bond30 (unregistering): (slave veth26): Releasing active interface [ 424.395049][ T13] bond30 (unregistering): Released all slaves [ 424.496335][ T13] bond31 (unregistering): Released all slaves [ 424.597478][ T13] bond32 (unregistering): (slave veth28): Releasing active interface [ 424.607177][ T13] bond32 (unregistering): (slave veth0_to_bond): Releasing active interface [ 424.617109][ T13] bond32 (unregistering): Released all slaves [ 424.722542][ T13] bond33 (unregistering): Released all slaves [ 424.825495][ T13] bond34 (unregistering): Released all slaves [ 424.939525][ T6016] veth0_to_bond: left promiscuous mode [ 425.254320][ T13] tipc: Left network mode [ 425.566591][T19099] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4024'. [ 425.782599][T19092] syzkaller0: entered promiscuous mode [ 425.829543][T19092] syzkaller0: entered allmulticast mode [ 425.970602][T19092] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 425.978713][T19092] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 426.092736][T19119] tipc: Enabled bearer , priority 0 [ 426.121168][T19119] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 426.227470][T19122] tipc: Resetting bearer [ 426.339014][T19135] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4034'. [ 426.355689][T19136] openvswitch: netlink: Message has 4 unknown bytes. [ 426.520661][T19143] [ 426.523093][T19143] ====================================================== [ 426.530120][T19143] WARNING: possible circular locking dependency detected [ 426.537167][T19143] syzkaller #0 Not tainted [ 426.541587][T19143] ------------------------------------------------------ [ 426.548624][T19143] syz.4.4036/19143 is trying to acquire lock: [ 426.554703][T19143] ffffffff8f68d258 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x390/0xd50 [ 426.563870][T19143] [ 426.563870][T19143] but task is already holding lock: [ 426.571259][T19143] ffff888024c94770 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50 [ 426.580504][T19143] [ 426.580504][T19143] which lock already depends on the new lock. [ 426.580504][T19143] [ 426.590922][T19143] [ 426.590922][T19143] the existing dependency chain (in reverse order) is: [ 426.599944][T19143] [ 426.599944][T19143] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 426.607973][T19143] lock_acquire+0x120/0x360 [ 426.613219][T19143] _raw_spin_lock_bh+0x36/0x50 [ 426.620245][T19143] nr_rt_ioctl+0x193/0xd50 [ 426.625220][T19143] sock_do_ioctl+0xd9/0x300 [ 426.630284][T19143] sock_ioctl+0x576/0x790 [ 426.635243][T19143] __se_sys_ioctl+0xfc/0x170 [ 426.640414][T19143] do_syscall_64+0xfa/0x3b0 [ 426.645638][T19143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.652271][T19143] [ 426.652271][T19143] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 426.660213][T19143] lock_acquire+0x120/0x360 [ 426.665270][T19143] _raw_spin_lock_bh+0x36/0x50 [ 426.670581][T19143] nr_rt_device_down+0xa9/0x720 [ 426.675987][T19143] nr_device_event+0x137/0x150 [ 426.681290][T19143] notifier_call_chain+0x1b3/0x3e0 [ 426.686944][T19143] __dev_notify_flags+0x18d/0x2e0 [ 426.692542][T19143] netif_change_flags+0xe8/0x1a0 [ 426.698014][T19143] dev_change_flags+0x130/0x260 [ 426.703416][T19143] dev_ioctl+0x7b4/0x1150 [ 426.708301][T19143] sock_do_ioctl+0x22c/0x300 [ 426.713439][T19143] sock_ioctl+0x576/0x790 [ 426.718300][T19143] __se_sys_ioctl+0xfc/0x170 [ 426.723428][T19143] do_syscall_64+0xfa/0x3b0 [ 426.728468][T19143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.734892][T19143] [ 426.734892][T19143] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 426.742829][T19143] validate_chain+0xb9b/0x2140 [ 426.748160][T19143] __lock_acquire+0xab9/0xd20 [ 426.753435][T19143] lock_acquire+0x120/0x360 [ 426.758492][T19143] _raw_spin_lock_bh+0x36/0x50 [ 426.763802][T19143] nr_rt_ioctl+0x390/0xd50 [ 426.768765][T19143] sock_do_ioctl+0xd9/0x300 [ 426.773807][T19143] sock_ioctl+0x576/0x790 [ 426.778678][T19143] __se_sys_ioctl+0xfc/0x170 [ 426.783801][T19143] do_syscall_64+0xfa/0x3b0 [ 426.788860][T19143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.795292][T19143] [ 426.795292][T19143] other info that might help us debug this: [ 426.795292][T19143] [ 426.805538][T19143] Chain exists of: [ 426.805538][T19143] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 426.805538][T19143] [ 426.819395][T19143] Possible unsafe locking scenario: [ 426.819395][T19143] [ 426.826867][T19143] CPU0 CPU1 [ 426.832250][T19143] ---- ---- [ 426.837623][T19143] lock(&nr_node->node_lock); [ 426.842409][T19143] lock(nr_node_list_lock); [ 426.849546][T19143] lock(&nr_node->node_lock); [ 426.856858][T19143] lock(nr_neigh_list_lock); [ 426.861570][T19143] [ 426.861570][T19143] *** DEADLOCK *** [ 426.861570][T19143] [ 426.869806][T19143] 2 locks held by syz.4.4036/19143: [ 426.875019][T19143] #0: ffffffff8f68d2b8 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x104/0xd50 [ 426.884534][T19143] #1: ffff888024c94770 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x193/0xd50 [ 426.894310][T19143] [ 426.894310][T19143] stack backtrace: [ 426.900223][T19143] CPU: 1 UID: 0 PID: 19143 Comm: syz.4.4036 Not tainted syzkaller #0 PREEMPT(full) [ 426.900245][T19143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 426.900258][T19143] Call Trace: [ 426.900270][T19143] [ 426.900280][T19143] dump_stack_lvl+0x189/0x250 [ 426.900308][T19143] ? __pfx_dump_stack_lvl+0x10/0x10 [ 426.900331][T19143] ? __pfx__printk+0x10/0x10 [ 426.900356][T19143] ? stack_trace_save+0x9c/0xe0 [ 426.900385][T19143] print_circular_bug+0x2ee/0x310 [ 426.900407][T19143] check_noncircular+0x134/0x160 [ 426.900431][T19143] validate_chain+0xb9b/0x2140 [ 426.900460][T19143] __lock_acquire+0xab9/0xd20 [ 426.900489][T19143] ? nr_rt_ioctl+0x390/0xd50 [ 426.900509][T19143] lock_acquire+0x120/0x360 [ 426.900534][T19143] ? nr_rt_ioctl+0x390/0xd50 [ 426.900556][T19143] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 426.900580][T19143] ? nr_rt_ioctl+0x390/0xd50 [ 426.900600][T19143] _raw_spin_lock_bh+0x36/0x50 [ 426.900622][T19143] ? nr_rt_ioctl+0x390/0xd50 [ 426.900642][T19143] nr_rt_ioctl+0x390/0xd50 [ 426.900668][T19143] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 426.900695][T19143] ? apparmor_capable+0x137/0x1b0 [ 426.900748][T19143] ? capable+0x89/0xe0 [ 426.900766][T19143] ? nr_ioctl+0x1b1/0x3b0 [ 426.900785][T19143] sock_do_ioctl+0xd9/0x300 [ 426.900811][T19143] ? __pfx_sock_do_ioctl+0x10/0x10 [ 426.900837][T19143] ? __lock_acquire+0xab9/0xd20 [ 426.900870][T19143] sock_ioctl+0x576/0x790 [ 426.900891][T19143] ? __pfx_sock_ioctl+0x10/0x10 [ 426.900912][T19143] ? __fget_files+0x2a/0x420 [ 426.900940][T19143] ? __fget_files+0x3a0/0x420 [ 426.900966][T19143] ? __fget_files+0x2a/0x420 [ 426.900994][T19143] ? bpf_lsm_file_ioctl+0x9/0x20 [ 426.901017][T19143] ? __pfx_sock_ioctl+0x10/0x10 [ 426.901037][T19143] __se_sys_ioctl+0xfc/0x170 [ 426.901061][T19143] do_syscall_64+0xfa/0x3b0 [ 426.901088][T19143] ? lockdep_hardirqs_on+0x9c/0x150 [ 426.901112][T19143] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.901130][T19143] ? clear_bhb_loop+0x60/0xb0 [ 426.901151][T19143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.901170][T19143] RIP: 0033:0x7fa2d018ebe9 [ 426.901189][T19143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 426.901205][T19143] RSP: 002b:00007fa2d0fed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 426.901225][T19143] RAX: ffffffffffffffda RBX: 00007fa2d03b5fa0 RCX: 00007fa2d018ebe9 [ 426.901240][T19143] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000008 [ 426.901252][T19143] RBP: 00007fa2d0211e19 R08: 0000000000000000 R09: 0000000000000000 [ 426.901264][T19143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 426.901274][T19143] R13: 00007fa2d03b6038 R14: 00007fa2d03b5fa0 R15: 00007fffa828f1c8 [ 426.901296][T19143] [ 428.201765][T19118] tipc: Disabling bearer [ 428.384658][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 428.392445][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 428.789085][ T13] team0 (unregistering): Port device team_slave_1 removed [ 428.822369][ T13] team0 (unregistering): Port device team_slave_0 removed