last executing test programs: 10.471962917s ago: executing program 2 (id=3689): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000025, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='cubic', 0x4) sendmmsg$inet(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000dc0)="5c5eafd3ae55a7", 0x7}], 0x1}}], 0x1, 0x0) 9.480738025s ago: executing program 2 (id=3698): r0 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40088a01, &(0x7f0000000000)=0x100) r1 = socket(0x10, 0x803, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0x2}) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r4 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r4], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000003480)={{{@in6=@private0, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@initdev}}, &(0x7f0000003580)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000035c0)={0x0, 0x0, 0x0}, &(0x7f0000003600)=0xc) r7 = gettid() r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r8, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x3c, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r10}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x18, 0x1, 0x0, 0x1, [@nested={0x11, 0x10d, 0x0, 0x1, [@generic="905176c518740da397a9423603"]}]}]}, 0x3c}], 0x1}, 0x0) r11 = getgid() r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r14 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r14], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000003700)=0x0) r16 = getgid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000003740)={0x0}, &(0x7f0000003780)=0xc) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000037c0)=0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000003800)={0x0, 0x0, 0x0}, &(0x7f0000003840)=0xc) sendmmsg$unix(r1, &(0x7f0000003900)=[{{&(0x7f0000000180)=@file={0x1, '.\x00'}, 0x6e, &(0x7f0000000580)=[{&(0x7f0000000300)="ca546b47998faef2983ac6e52838e2788aed7fd005e1c5c373697893dc39b59a979c83193dfe7825d5a10909e5d7dea41cab47870d3d8dd1689eb598def801fc6b0058b23910c77fce2710", 0x4b}, {&(0x7f0000000380)="d960e476a028df6c0079b37c277f242ec7f69e6fb29164a59bff641fb3bf1e63f96e8e27cab00c55dbc06077ce6da0beb6b4601e18f53185a3df03bd1eba0c58561d2bbfe4407bc16c856553ae9d8a8aa6341efed7f577b7f78c1524cacd76a37d2f9b46b88973a185d70ea02fea11d10a8fe46b5f6679fb55d055a3e8da0ce12784109bee6c6b35bbe9de235cef4bacead637b0f9c9e37bbe5235398e95d6d163e9b2bf78343cf21d6de4336a5985339dcca67610232c4fda9d654a8bc2cd7ebb055a4600c9b64ac183e0433a0956dc781928cd34d4b25920ec17c7333ed56c19ca699b", 0xe4}, {&(0x7f0000000640)="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", 0x1000}, {&(0x7f0000000480)}, {&(0x7f0000001640)="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", 0x1000}, {&(0x7f00000004c0)="9b32fc20d899ced6d3065734181d52e6eff985e206c8daa7dfb3dd3d17c78ea0ee40204b7a2bdfbb77f7a92744f87a86484f8a299860fe7f8380369fc3b2f573b610b6c590c6971e91200c8329aeb8638f54a4bdd37e0cfdf67114eb60f245323a97e415b72d", 0x66}, {&(0x7f0000000540)="dea3", 0x2}, {&(0x7f0000002640)="54ad2beda1233e30f7ca932cd28e062a37f2f1952e03ef68580fc976a3df1f53d4bd7f58ee09eab3e482f7f6aa83f4a6b25d53276744ee7471a89497dbc2cfd7e06db430bb395787f58c49635335c3079c42d186c5871f8578af2594dc3d09bf481f3628a54d1dc91ec4c616664f3b6eed892a7953c5a59d4d30a47cba9cb773612efd01d80722e8a00cc6c2cfc218ec9df5b254af1aae4501cc7552cda9b0a76f34c87e64ae2639978566a2d1452ad11bec0e9c9c24f9a80d8877e4e5e57c402f6bd989b2085e68ef9417", 0xcb}], 0x8, 0x0, 0x0, 0x40}}, {{&(0x7f0000002740)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000002ac0)=[{&(0x7f00000027c0)="e0984dee7c913dee1900d908438548bca4d880dc141896679d3e2e7626c65350d79d1fd7e61c2cbbfdd35a528564f58952d8b9786f35840e9e5f243a3dfa3d66ce3dd22aedd94da8a0b56d464a4fd2356385e654cf3a033bde4c7fa7581e4e821f73ec560be22790bebc7b2ae1dd0a403497eaeebde36f499e85a22c219db06f3516c9d4dc3147554e1885a37329b50ea4ab1f3516c394cc2aa8cdea3468a71f49d17761e621", 0xa6}, {&(0x7f0000002880)="ddf7dd7590511182c8cffd4713a38b92f5c68096c3e57655d42a32cc789aa12d98cd9190dba6a876789cac5c42f3fc42e7db820a2842adfebcbb36933597c2c97e682c59cc61da1fb2d86071b575b6ef9157d338aa9acd179975f78140da0d5e95911f56c591217e7a67", 0x6a}, {&(0x7f0000002900)="e872063653c0f83c0a2bc36db228bbc7f6d47e64cdcf6567e69fcb037cdb4eddc55300f54ee09bd5ef1f22b3d738fcef6c24d2515597f04db103f795d5f0bb0ee5d0d24f6dd1d69ef49009e191e34a414eef9cd091b1e2f00364394cc86c58ea85d1968a102955cf7f2d7f658eb581e9b6fe4fc8bc941eb6cbb45e9d6ed99d53d526", 0x82}, {&(0x7f00000029c0)="4223cb18bef85790a12d0c6e17c0d05a2a3d5ccfeb0dbe4320f57dfd2d9141bd6591a54b8a6809bd5c47ab66d94f9a9108511d886c96db4dd9576054d7abece0edc7b980f3c64096607373a84237b0d564ad837b08539c09ecdb10f0337a3ce096295ba469fc0853e526348538cedc2f4d868c5ab57b5d9b416dd40e83be0504c5e7d52a4047b811ec8a64532d9dd7513fcf94d92f246b7a3b9f9faddb50bf9438a8ee1aeffd34f311f230a87ac80fef2b35880e9fb9273a5f16ca29289b8b0de82df1f4919b44835181f9fcffd1ac58b0561f5b98698abea6fce1a8eb2dcb46b8773540da025924af8984a682", 0xed}], 0x4, 0x0, 0x0, 0x881}}, {{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002b00)="f98f", 0x2}, {&(0x7f0000002b40)="f230c75cb2eafc75dce2e73892f6017b44deac60dc31484c633f78b3498cdeee5efa144f021d0ebcea0c6b9f439be6802253f77a40b7f5045ef1c7b2a5028dbe835faf2a0b9fb6a2f0309053177cc8249fe576ac24073fd3ea049a09cc54a2c5d9cbfdef0e46d15a10711955267b6c2631cc069bf8cabf182d945cc6106b03af89a68f67ba07763c1c8c9695a08d7ea1b8e3656e2f7e60951578", 0x9a}], 0x2, &(0x7f0000002c40)=ANY=[@ANYBLOB="28000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="232ad26c"], 0x40, 0x8044}}, {{&(0x7f0000002c80)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000003080)=[{&(0x7f0000002d00)="45d36a6b0236256d50ed614a1e051bb2796df2b52750fb9aab205dd50cde7f34728d4ed8a678f3d1776b7d6a7b85dd71dbed5629caa7b40cf347405e1430c721836a98bbcfc54ab3bdd686870b5dd6c2f6a12a20e41cf5f15aa34df1173b27666c3987efa546fa36", 0x68}, {&(0x7f0000002d80)="c965e5b1087964f6b544cd1a86e56971b6ec5bf1394d7de0c52a43dd73b41f2f3bc07c3087a3b9931e00a3452fd7659b40b0831debf36d0b74629cced7abfb7206d52fef284d465fa30fb2bf9daee499d8998bd77fe7c80fde2129fc795e4f218144e14f44d8e1d8c09846ebdd07dfe31a9674f6cc7d1e616adcb33a4f1549a873c543f5babb994ba0b4743b6d69b43085d183d4708b90ae74968dc3f29239d8ff592b1eeff3aa279808da87643de4c6906f8a805752181acd05e6e433429a3a4cd2", 0xc2}, {&(0x7f0000002e80)="27a235c9a1b5671f0700791c23a2bf3c87a5167fc555b49c39e53cd2fa59b418a27c67978d7b1dfa09dc321ff0951b7cbed749164eaf63ad6890e327f3715fd6eff1df0a94962391c40cc794cf9ec4aff37e5c4b14b9d0141541870ca81c234eeb387a56a10c2b1505aa21ab7f9f289064d401df82401bf87964438a9faa976cee107cc75e6f086d1a47e1f22828276a", 0x90}, {&(0x7f0000002f40)="640201797243b071575bf93a018b867eb1cf51b94f90db1746212a57fc69df21abab9de0f4a95c81a8f46172e6dbc4f0bc7b4ecc8f7691b5cfa591", 0x3b}, {&(0x7f0000002f80)="855963ce49d0017ed5b8e00f77133b2b9206ea902324599320b779b73d908c1f720abdad8134e3cc4f279e7d4f2c8ec88a7a9127bed2d2384c6374eea7d436578f88cdd4c1998ff6d755a05552c17bdc787e9e3df1ff184af9f7aedefdc2faec0de869ceb2e96de86a2751250c4895e9b18c7166494a0fcdc665ef0672a6d2643eca858287679bfc41764219ac0f9f9d49a826f2c8c6c45c56a09b3d6f3ea7b883f4491cecbfe8ec8c312c0956621f328ef4e6", 0xb3}, {&(0x7f0000003040)="759bc6555bc6c61104a575ff210e59a5c9dbdc1046d8da31a0cf5ebb80311d885edcb5665db34d32877f6c4ba8f5adc46e", 0x31}], 0x6, &(0x7f0000003180)=[@rights={{0x20, 0x1, 0x1, [r0, r1, r0, r0]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r1, r1, r1, r1]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [r0, r0, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @rights={{0x1c, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0xc8, 0x40000}}, {{&(0x7f0000003280)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000033c0)=[{0x0}], 0x1, &(0x7f0000003640)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r4, r5, r6}}}], 0x60, 0x80}}, {{0x0, 0x0, &(0x7f00000036c0), 0x0, &(0x7f0000003880)=[@cred={{0x1c, 0x1, 0x2, {r7, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r14, r15, r16}}}, @cred={{0x1c, 0x1, 0x2, {r17, r18, r19}}}, @rights={{0x18, 0x1, 0x1, [r0, r1]}}], 0x78, 0x20000045}}], 0x6, 0x40001) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="20000000170a01"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) r20 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r20, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000003b80)=[{&(0x7f0000000000)="9307514c9111bdeb29c97fad03777fc128ff78489c93ea3b5342b26cc8cfb06d6f7ff5ed3da2e6872398904b3d0474a253c4f3fc8f40086c2b1cc6fd4d3849eaaf44c18d1db69973aef1ab9c51e0f9e4e12e7574b675a722b20f67e237306d0e6fa2a1019ce5201f80446ca57f65e4a8ef263a556cb07c040d660d3298bd116c126c947e269d2f5dbdac742ac22c326818d5e44de878f26f281a4fb32da8e90e7cab5e6fb131d4ee", 0xa8}, {&(0x7f0000003100)="71b43f37af424654e2533f265454c9c54290df15cf0397be840284b773ad764104568e4512562df6c5000d471dc33c54ed566fab1981276ab2228887846d202db2d688", 0x43}, {&(0x7f0000000240)="8181d8a6ae4a840952a7fce9629872135e043847e97bd302f2e75259c3bcba0010e5c01eadc3ee0caef590947d9de41e020100a86ab4aba7a852b03ed9152f71cd14854cf470ca7795fb59fc20726f803fda0cd13b0fcb127cbbfb6ce694c25fc0c3c903754e04eef2ba3f349ef5197ce8e910f5c76adc079f8f866cbd4f654a8e8d0f0dd5302b278830150d3e4ca1c07cab13027a28b784a9f9ad06795645e6b19773c8e629a9", 0xa7}, {&(0x7f0000003a80)="ef3e9680f29735278c31590a81f6af60413f1e7c134af31952db9b19a940f98f3c401561c0ff88ba804def0dc1375c316344115c8bd9f600b86da59dd2d480a6948534afe5d6829c7d2f88f1cd05465aa0242c6a28d88776cc6c92e8020d38accafee6b352e3b53f546a7eb290192c2cd0acebf31d1c184a27204c5c8f5493f3e3530a5357cd7ad173175102343ece8e01e12980254fa6cbc8d0eab098edf0ad07c4ab3ed62b6aa3be068c2e2065b43cde6a201c94a02daf4308a63d9197610bf6e0334d5046", 0xc6}, {&(0x7f0000000480)='N', 0x1}, {&(0x7f0000003400)="a6cff8df7c29712e59aac13670efcfa87fe12b0316dec84488ff2ba28b92e1401f3dae38f488", 0x26}], 0x6}, 0x0) 9.301068681s ago: executing program 2 (id=3702): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x50483}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000000}, 0x4000000) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 9.055108222s ago: executing program 2 (id=3705): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='htcp', 0x4) sendmmsg$inet(r0, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000380)="27c051140ce966c729205e1f42bda4d4bfa0d04ea0f3aca34a12be", 0x1b}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000740)="38e5ff7d", 0x4}], 0x1}}], 0x2, 0x0) sendto$inet(r0, &(0x7f0000000280)="10ae3ea130d5f2547dc37b1a4486ff24fc8f721e14e11211a56f41173008cdc29703f9e1662ef2e504496b5286293e92a68920741a3e3b3a8b801f6220ee55b52335ce9bb7198cb2834ee363eaf564373c08c3cfabfaefd2709e1b55312889e4cff9dcbc53b439347d11d9ca420e3ab8ac299c49c8bb1004a148f6b00804ffaac8d9ce4b32678d9dc0d30d2cd93046c400f4a34fdcf47fbde49f39c00e1a05e215a6d8f3cc19230a3656c1866885854b46c78474acf8568a973a08d45190fae792f7d773a2dd511adfde1448597e4e39221434216c38f714154bfbb2ab39", 0xde, 0x20000000, 0x0, 0x0) 8.05792861s ago: executing program 2 (id=3717): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000d80)=@delchain={0x160, 0x65, 0x2, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xa}, {0xfff2}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x12c, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}, @TCA_BPF_ACT={0x120, 0x1, [@m_skbmod={0x11c, 0x10, 0x0, 0x0, {{0xb}, {0xac, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xfc3c, 0x5, 0x20000000, 0xffffff57, 0x5}, 0x9}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x49, 0x100, 0x20000000, 0x7f, 0x4}, 0xc}}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x6, 0x2, 0x6, 0xfffffffa, 0x7}, 0x1}}]}, {0x45, 0x6, "7a47669728dce6acf31d40cc7d7616f977a7ee969d04ff66cf038816e0e106584bcac02b05f5b6b8a59657b9c8097d1eee7f99524eff4c436b1270d95b23625996"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0x160}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)={0x14, 0x0, 0xb, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20004014}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 7.80146754s ago: executing program 2 (id=3719): r0 = socket$inet6(0xa, 0x3, 0x5) r1 = socket(0x10, 0x3, 0x0) getsockopt$netlink(r1, 0x10e, 0x4, &(0x7f0000000080)=""/124, &(0x7f0000000040)=0x7c) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80003, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x4, &(0x7f0000000380)=@framed={{}, [@ldst={0x0, 0x0, 0x1, 0x0, 0x7}]}, &(0x7f0000000480)='GPL\x00'}, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001580)=ANY=[@ANYBLOB="d41100003c0007010000000000400000107c00000400fc80a8010180a4010600c80a57c058c884ddee1b23f2bca17d92eac922292f49d3bd69668d0100000000000000e1e092d039e8b52673d498ca05593d0679cac91c7cdc8cb96f84ae42264487e66d8c651ac5306d04ae3dde02ea0871cc8efc5c52a6dcc54ac823c2a2bd59fb34f1d1324d142863feacdc440414b229faefa4f965a2f4f0ac02072d8a3805b84fd688cb4be3dba2b180e9356e9d06706ca26768639a20a6b0ee6bf5b59630e42f03f562beb2ffc458578ac27bb01b27a18ca1cefb4f9ed2e92f028939682317f0dfd6381280843768ab71387c67265d119d24be3710b41faf9245452aa81a0000bbd23c512ca84b98a24dd139b89858b110a3a4bacbdd0541dd51356922296818b16ce9e3b49a39bd42ca1696f42735b4cb97d1824a17453578ae737f34589c3f6c0f88ae2e1228dac06ba3fcb38d4a5f5120b3f836cec10a36bb5e194ec03ccca954422a5a26ebc3be6f3a6fdba2529edfe695c7d991914e465c351de2df7645dd5402f6c4d365d90317b2cb42d88becf1c1b1c46a33973858bb0095702c0442539c8876136a8c4370a0ec72da298bd826a44328abfca1fbff6f08eb65158674df2fecba1a685eb7f539063021de181e8d53c5576f93acb381ff6235ac6b4fa5f3890ca7455d9cccf734aa3dc191f1a60c541a58d41e8c1194bc24267530eb0815ed77abff92fd6f928eb9b493242fe3b41afb6e769f6181ddbc750250bf51b4ff0718e22fd4c21fd7881fc553756379731c77b32b49fbe8934a893688e22801ecd1f743ec0204acfb480266d958fd7ce55f9205dd0c21f77aba0b4b3de362f613e79d2bae58ef9b11e4a8ed11b5e5e89f8343990cb82c9d3a31e105b0c00a822c78a515fa7427bde7d330ad888c4dd8b07cd09c169166bc8acd4146bf50a8dc6a43bbb5b4eab0df02a33c43d891f2ad7eee5de29b5867220095ce88c2ecc32332aaa9bf6adb566ff7d3ae336176c263b9e4439fe3145703b15adbfb20cde01f4b188bca10be6a347fcde33dd85deb39db62271217b20003345bcfcae3717f5d9bc1ea4a3c04218274536f23eace8876ca909e93d3a01e9e3d8ede58877d53316dee831e85667f38b9f03dfa39b86bc3ed7b6f3e3f4172e7dd0e99d3e40308a8be9dc592b42c05cd24e5763181218475d325898f9c9d13a750b513e06b1a354eb14e82bc6df5be8de13de7592ef27d9bb456b2b3c2a3802550dc7b79705bcc9b9bb3faef306477d9b38e89263a296f7d0261d141546684af6c16e5598849f7f0d4640a1bfc68b119b4c19c0250f50c07f6b803f8825e3ff2095dca280797002d1d5a91af817b3efde9da2760d70848f940148a1f0447305966bca7140c648e742efcbdcf8bd5d508c71b8d73347989e1b4bc458f0d645bf3ab9338708148fdd7abb68cb2eb3d56442ce05870c6e3e18748003091b0dac9a71c7e50e739714368a5b74ab8fb315814d844beff369f9be1853345f2b2321a01371b26e965885d5f4cf922b59cdc0d6a1b884b5b64d6a914fcd9f69ab1413d9a8a480bec626d2999634bd18821990da6360a6aa7049afeea69adbcf85ccf779b4a573f371980a67ca3cc38e18884c257ad6fa1cfeed3d440b8136726392b4c0b233cc41209632b5b4ffaa4bd4458137ff76f7cbfb185c5dd506769e8281d5f2cd4bf0dd9e5b3ec20ef93e4b25172f950d6b14adbdded7fa0b060f39d68ad18792fcbdfd821e18b7472e62985942b05182c976930a05a3c3ef1ff98d360f19160d608624dc4dc56f3257072f97abd435e96e7d7100273f67bc60999270a525f56d9fb691a5c8a061332f2bf9a6d064ac17bcab1b25dfbd4fc4ce9562ecc5335096eb43fdfcd17bfe7f911fd56b11d6699ce1b59fe4651c139c1730b3a679cdf42c6ea522fcde43344d5e624329ed2c3b1edf96cf6bbeae3f32a01dea52940384b341463f22458cc6bd8eccc425edb07308b875179ef844393f8130b7823fb6b9f66474386d3f67b93dd7da61b523ff870f09a6d45338ed8fe81d889405b570064350b4fe8d9e7d4772bd224d7dde6ab416abb193ccc634ea076a147a655d1974a2c522bba37aa891b53ab502302df86cc07b8f11a01905f8ed543287eeb18db712e12f0f179984a11a2fb1a943b110b4622720bb343d0e44cac2968f457bab04dbb6010dea802a013d558b81aa249504931015c4023a5844727bc11c4e29d60b17d22debe16eb7003f809b8e204a25bfc25fb28735857f973a43ea00bba0d10122d068cda4743296def4d26f677bee00c231e5b1913ae6c7c450678d40d677adf303ee0a667fe5288ab75badad68154118ff3149a92c039519f1edf7f7479dd3f4cb171b6014de3908c1bc9a75431668727b2a3a75c7c0b776dd417575c90d983b9fb86cfb25d283c495361abda68fd366e9fb25483d8d23d25e8ca80a65481f698a9f233bc73e0f26daf83d02b182945b9ce21198d0cea412ebad18a4f4eeaaa08cbcbfb7d2cecae887a006cd7ff98d2e1abd1a2773f759b790be342b29b3ee0062f4bf1662ff0d3e090dbb966510a87ff053ceecc27a35174c9f620c8bbc37f1410d97d22ae19f62e5041a6f0e7b58c48e6527f18532a610291dd18d4950231058748ec50ae4b1ee416381bc9fe6ba6fa04178e4d3dbfef7688753149d715ba088c38b8a31ac19f6e05a0e5db5828f5aae2f03ea13cfb9f7201a3862d0b8bc2c5cfd2e2b151a733629c75909cdb13ab5ba6b0b707c387a5049855304334732c727ae2708c90c1e05e9106b6292041c67d26f142ba9650523d28f88beb12b3324ad192d6ad4f43aa2af12b295cae850d7ee922e2b80007d8067827a6cb96b78f8cfc54f410089fc8bfd5d624c947bfdb447611ff89562b6d8712ba5bc4d763cddd3093ab8a4bb7a16e9de2c1295edda89b1f6b1854b4d067752737318afd9b37d92abf73985543f7fcc5edf8ff4e87cb38062bdb0d813dee3956cf2dbfcb59e49f39d8cc176365cc5c1d26192adfdc25a3103a8bbc35faf7474c0b90d5794b26070ae3bf91ee5194472fa3187b9a2146bb64cd5b5d2761e85c80c982823b09a61789a1062a113ff4a92ae4a7288808b0beed422a39aac54c7203a8309eacee40b2e780f7fb303176f22a8fccee2440964acd94f61ff80c07dcd665141ea30072045dcc58400d1ffcc7f802cf0d402343255f6b2496e7a1e2c909709fa239edd2bfefa024309b9094f4cf207bd8311edf4230a4b1711b7f0c9cd72c32b4a2cb78d6cb46c45cb19275c1e9bd95c4c20dd26d8f8516835c89dc89381d8916aa5575518e53288b34a73e16f8f76249b3435506fb444d7f839772b1ce4f3c46eaf890970401a807f930c6693ac3a62d579d3a8f70dc4f0b8dfeded8405fd9b568bfe254ef01a0bbad08da88230572e1e0014b2c43f9b0e7343fc65e3e4f6bd33e19365695e1ef0a761e8f399e27ba6a38c8528c6908b95a547342858643b83d2bba0e3807da93d984c8a963ab1e722e0953e845ca76ce35ba20a8ff675cd8a404de482382863810e0987b0c87bc406c4799aa54f49c6e953bac91fe6b7e2fdb9803e912f8411d753e1a037f3f990d7bb5e549786fa7a8e8b741952c490063af4b5e905a25a0304133fcde9ea38d5652f668489fc80d005aad03d09db974a9a778f458a3ff663266d707b3ceb46279379bb8d35f74710b28920daeb63d9fc3f90143d0515bf055551f4c564787f2188406c63d06a8038bfe3367b7d82496877d90257b6b231b669ac32e6c7bbb01883792105b7e02bf5490707d18db75ebb791052a2b3c8b4b364fba5b0a513c8270ee71486557e608cbe685c31d678c65351f1dbf20cf5faca06d9719505e1e729297c8d37c10f66f3bf4ec7a305af2288908bd864f68d7a37fd772c54a9aadf0dee36071c9f4fcd60a3e7c76edb033f5fbc680d43056bbe213a7b8e449c2d755227ac73b8b8d07286f37b969f59831f967a3d91a2e33bfbb16ef87f0e2a85eee1bbf294e3ae3b403b7abfa52686da66b214e0e79a9cbc8a08882e9cbbb1ab70f23fd1907aad0bc3f5404b3256e77c3ff99a2a7b926027dd6b877f517e18600f50c6170d52ce82d73baa7ba4f7f9d084c6d603c91a828a195b95a4a8b62920bf03a9fc3249fb8a5994417338c0761ea55e8938bfdca2b77fa229e44b3d21ed6ba3837159c9cdd0ada877d3ab3eba1553e2a78e8a10ecf91a9aff93e23fdadd768b441ad1c9df810bf8555d557fca54e20134e44d1ae0433fbe11dd5edc55c9eecd8713dfc4dada6270e53168cfba1308edfe95a7e0103922390757744c87a1a3baf551af317b6dcff9a51d373f281c9b1e8fbff90e5ee38269a9d410d513a62a7c89c5dfac22e9a1b94bbf36639052be4262ba0c2c9476b704424f393fdbd6242d9b68abb0ba73747d0641aedb4ce12f82d993b340b2a0f564cd0ba986fe7e76ba8815ae84e524b7e3a68c353a83caba1264e956db3ca8cbbc90d9d23981e65164dc80d406145e2153e60d33fe306927122a066cad76e6d08127cb3ec6067d65b60112698ab806817bd1ba088832479c60f8e5661f3e365fdf20c8300f0f24a59c929ab5059e6f328302d89639e68d0f3cf4f04db8918b41148bde7e5b3fe65567668da594fb0c4888c519bedc83b48567dde9c6939d8f8dd76c9ae20de3823a07d5031c0d5e70c5e09163894ac54df505bcc143bc276627c6c326b24d211f45c48b0cf7ba0db5d741a861771684463ecb08523ac629ad11af307803d00e6f609c8869d6ab6c61d76afc19ae04430b25d08598bba11c78a4bee894864af8c233573f4d5c7c112527f8e0639b030a0e14f0e819b881b0e0e626dc258a6fc062bc760509ccf5168ce4467c35f05913e8986645b42b70b2ae66a97282c8e599b16b56f3ca7119b93adc20dc5a2216323676ffe07cb4c9b2957218eb333820e831a86288063834a205720a4ad5c029df93fb8b905bb5478fa7bac827ab8ecf5aa590a939273a4942eb1f8297b4aef479d534ee90265a484c6aae727d1046d0c9ff5818d937b394644b2805ab17c9ac133774d1966f23f8f6790bb574739364184bd949109e8b234d335e7d2428967ca203107aa8d817e80d4d73e91f074ddcd06303c5ded82705909c2e06d09937cdf3075d5f323059e6d48e9aeeb2705625b5e6c62b3234ca270eec6249cc2fc3ae5793d0b317385bab5fa38ed1ccf148beb9248a9eb6b7b5eb7b62aa21d612991ab27eb52f201126616bdd913685a575cc2f381633def174d5f4371b6ceb216e05d6c94434fab70b23baaeafa92c75e11084b8e0ff058ef1a9fe6a792895206dbbeba2441d4bdee174dd6db212d41d1f42003108d80c7461c9a5a10ba0d56b99cf2871c7cabf95c4a120137c475dc68aa561ef9b4600f9b1125ecdd6802c75988918565050fe4f56e1dac41a58cddb26c8d0b8d4077c5b64b26828fc1e8e0aad89f12778ce396e572cbe8e47ea4b9283d652f76a86f84e6d02f455c63902cdd3c18165dae1afa56bc4952e638a91c2971b402d1f22624e3da8679a6f3c424bcb2b73aafc82ec75e0f19d36b325608e6ce4bd9d585bc01ef2695136e537434417cd04e7ff82f0f18def989d01da99e9f2978a231b3d98f6bc92c343488d4023b9b8d75508abdc8a92814e98e5f401616c56c81a20838257232c58e2a7801cb788eb2ea9a9c908ce00b29ae491554e2f802e2e9818591718d3f7f1b1a43e58d476333aa8975e8c27f514680c5a8e239e51338093d8bb8530af7dec0c3448a18fecbcebd8df7bb2b5c363a7c0e6c1b3649680bac0b8e8573673f8f74cce653e8e04f66ccc34746321a2f45a12f123ca1cda082f81d0a1e563a79a07de10dfaefa870dbb97e60abd5296b97da2c8334959ae9db0e97ea4296339d00fbd241ea26b6eba52c50eb58186473421734fd3bfe5bfd3674ce40d1177a92e24fba3d75e06fb1ef7de080123d7f70fa6c52ff43e8110f83018bdde5b28071e8bb6a3e273d1a7e5aed7724d6de2ed81116e220b0d96496f9fad703ad0a6b1a16da0e2b223c51fc3faa8dd37bbddf282cfd7c464815576321fa9386080ceb98c2535066777e74a42acd3b7487a4d7a4fd582e839d3cea0a56b40ec764ff10df95b737945bf81a4280cc4c8d36290646a2c8bb550ce92a07175ccc7e4fab46fc1ce20f97bf2212082230ede04c738ab4166b96fa2825dd00537659440f8c4fb48a565c3c68f63ec0289e75c8047ba14d7bd84156e96299fe8ed46dde7046e64e5775422f4b8e1d2c6f4113a6ce3705504942a15e1e9c9343f6326cc7b10f648af6d2d91ddee6d6fb10ae00b2d7b689457bc7cd5ff69d1ed5e066265005f90eafb557d0e22c21252a25e0afa6d73c6e1400d90000000000000000000000ffff6401010200000000000000"], 0x11d4}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 2.061491424s ago: executing program 1 (id=3765): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x8a}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000)={0xffffff90}, 0x1dd}, 0x48) 2.034384788s ago: executing program 4 (id=3766): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_audit(0x10, 0x3, 0x9) bind$netlink(r3, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbff}, 0xc) bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbff, 0x2000}, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c00000000080104000000000000000007000007140004800800024000000009080001000000fa2e050003002f00000006000240080500000600024008050000090001"], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x4040) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x1e, 0x2, @TCA_ETF_PARMS={0x10}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x64}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) socket(0x25, 0x80000, 0x8) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="12008864"], 0xfce) 1.942422436s ago: executing program 1 (id=3767): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg2\x00', 0x0}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 1.888473873s ago: executing program 1 (id=3768): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x4, 0x40, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x58}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000280)="6e2e80cf70f09b40739bafdab1d4b1e0b0f143efd7ebd10cc3071b4e5588b020b2acc5f9aaf14921f8280ae12e4cf6cddbed04fc25dfd1ac291ce3e246e1dd042c220fa8c7fe56d50a9b0622b7f55aaeac3b0db60650667ec5f6faeda2a142d3fd1637425d3025b150cc253d3b21912a91e728cb2ab800a20cc5d3187a5f52bcf565d2bb935ca0e4dcd050dd12cdb3d21801ba1ac509afe77bfb984f3dfc929da4e1d3f6d7197856036d6aa22c7c7642", &(0x7f00000000c0)=""/167}, 0x6a) r1 = socket$netlink(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$inet(0x2, 0x3, 0x2) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097fa7059ae08060c040002ff0f0200000000000001870182fa73a69d35b5cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000469e", 0x4c}], 0x1}, 0x0) sendmsg$nl_generic(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)={0x14, 0x2a, 0x229, 0x70bd2b, 0x0, {0xa}}, 0x14}}, 0x0) 1.787663464s ago: executing program 1 (id=3769): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x400000}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c0000001600010000000000fcffffff0a000000", @ANYRES32=0x0, @ANYBLOB="140007"], 0x2c}, 0x1, 0xf0ffffffffffffff}, 0x0) 1.702413797s ago: executing program 4 (id=3770): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='htcp', 0x4) sendmmsg$inet(r0, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000380)="27c051140ce966c729205e1f42bda4d4bfa0d04ea0f3aca34a12be", 0x1b}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000740)="38e5ff7d", 0x4}], 0x1}}], 0x2, 0x0) sendto$inet(r0, &(0x7f0000000280)="10ae3ea130d5f2547dc37b1a4486ff24fc8f721e14e11211a56f41173008cdc29703f9e1662ef2e504496b5286293e92a68920741a3e3b3a8b801f6220ee55b52335ce9bb7198cb2834ee363eaf564373c08c3cfabfaefd2709e1b55312889e4cff9dcbc53b439347d11d9ca420e3ab8ac299c49c8bb1004a148f6b00804ffaac8d9ce4b32678d9dc0d30d2cd93046c400f4a34fdcf47fbde49f39c00e1a05e215a6d8f3cc19230a3656c1866885854b46c78474acf8568a973a08d45190fae792f7d773a2dd511adfde1448597e4e39221434216c38f714154bfbb2ab39f3841d", 0xe1, 0x20000000, 0x0, 0x0) 1.651623779s ago: executing program 1 (id=3773): socket$unix(0x1, 0x1, 0x0) (async) r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETGROUP(r1, 0x400454ce, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r3, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x7ffffffe, 0x600, 0x1}}, 0x20) getsockopt$bt_hci(r2, 0x84, 0x80, &(0x7f0000002100)=""/4127, &(0x7f0000000000)=0x101f) ioctl$sock_proto_private(r0, 0x8b15, &(0x7f00000000c0)="2d78556308be71b17a1cbfe34667b4cac9c485ceca9690e41905791e030d59419dd906923878edb32edcc115eebb62ad049a8e4dee666130737cd74d36a22d3eda9a42e7db1d043d2ffda9f1176bdcada52f4056c0a27609946901d756d02ee864196c8642dacd34551c9151c72ddce08a00e166cda15a8455f48cf58f680e9b13e0895f626901448faee2246d564e48acfccbfabbee3d68ca10691e2c6e48bfffa6dc21d25c30818c38f192587e818b7a3534a9a97452a56a8541e146c49e1f128e8cbee6fed2e04ab03a0b8f6748839126dd54b597e2c22b872fff4d6a10f9c7b75ff37ced48e1769deba12b8524d93a44d1bca52700") 1.583083139s ago: executing program 0 (id=3774): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x44) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100), 0x48) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x400448c9, &(0x7f00000000c0)={'wlan0\x00', 0x1}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) syz_emit_ethernet(0x7e, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3f, 0x70, 0x65, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, @dest_unreach={0x3, 0xd, 0x0, 0x0, 0x7, 0x9, {0x15, 0x4, 0x0, 0x6, 0x65, 0x64, 0x4, 0x9, 0x84, 0x80, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x14, 0x21, 0x0, 0x0, [0x4, 0x0, 0x8, 0x7]}, @rr={0x7, 0xb, 0x11, [@private=0xa010100, @rand_addr=0x64010101]}, @lsrr={0x83, 0xb, 0x88, [@empty, @dev={0xac, 0x14, 0x14, 0x2e}]}, @timestamp={0x44, 0x10, 0xfc, 0x0, 0x0, [0x2, 0x4, 0x0]}]}}}}}}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'lo\x00', &(0x7f0000000000)=@ethtool_cmd={0x4e, 0x6f8, 0x898c, 0x80, 0x6, 0x4, 0x9c, 0xb, 0x3, 0x1, 0xed, 0xfffffff9, 0x66a, 0x4, 0x8, 0x8, [0x7f, 0x6]}}) connect$can_bcm(r2, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000400)=ANY=[@ANYBLOB="05000000010500"/16, @ANYRES64=0x0, @ANYRES64=r2, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="0100006001"], 0x48}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x200000000000025f, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000000095000077facc4611"], &(0x7f0000000640)='GPL\x00', 0x7, 0xf9, &(0x7f0000000080)=""/249, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}, 0x94) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08001a00", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYBLOB="08001b"], 0x18c0}}, 0x0) r6 = accept4$rose(r5, &(0x7f0000000040)=@short={0xb, @dev, @remote, 0x1, @rose}, &(0x7f0000000180)=0x1c, 0x80800) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'geneve1\x00'}) 1.244456403s ago: executing program 1 (id=3776): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040057}, 0x240008c4) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x1c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004055}, 0x48000) 1.198299786s ago: executing program 0 (id=3777): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0xfffffffe, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f0000000140)=0x9, 0x4) sendto$inet6(r0, &(0x7f0000000040)='H', 0x34000, 0xe0ff, &(0x7f0000000100)={0xa, 0x4e23, 0x9, @loopback}, 0x1c) 1.086548039s ago: executing program 0 (id=3778): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) 1.083872792s ago: executing program 3 (id=3779): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000c80)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000002000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1e0001000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000007f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x590) setsockopt$inet_group_source_req(r2, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0427ffe690343438e964d4e195a5bb7a15c0d7b0c1442b3deb1042299c5ee4c27ee6e6211b58054c1b4016bf44589cba88250c40b107803ed85a32d04c9c1ba479491b490400817c82219455c63b390ca304153156e0e7484febc073", @ANYRES16=r1, @ANYRES64], 0xa4}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 1.006261272s ago: executing program 0 (id=3780): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x24044844}, 0x0) (async) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x1, 0x0, {0xa}}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r5) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b0c0000000000000000020000002800048024000180090001006d6574610000000014000280080002400000000308000140000000000900010073797a30000000000900020073797a32"], 0x7c}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0xcc, r2, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4000000}, 0x4020000) (async) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r4, 0x800, 0x55007}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x9}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x1}, @IFLA_BR_NF_CALL_IPTABLES={0x5, 0x24, 0x1}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x44040) (async) r9 = socket(0x400000000010, 0x3, 0x0) (async) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x2, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x7, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1ff}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x10) (async) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {}, {0x9, 0xffff}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x3, 0x8, 0x2}, {0x0, 0x3}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x14004880}, 0x2000d8d0) (async) r12 = socket(0x2a, 0x2, 0x0) getsockname$packet(r12, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=@newtfilter={0x3c, 0x2c, 0x605, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0xffe0}, {}, {0x5, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x38, 0x3}}, @filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x3c}}, 0x20004084) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_virt_wifi\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'gretap0\x00', 0x0, 0x20, 0x10, 0x8000, 0x7, {{0x9, 0x4, 0x3, 0xd, 0x24, 0x66, 0x0, 0xb, 0x29, 0x0, @private=0xa010101, @private=0xa010101, {[@noop, @ra={0x94, 0x4}, @lsrr={0x83, 0xb, 0xe2, [@dev={0xac, 0x14, 0x14, 0x12}, @empty]}]}}}}}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0xb0, r2, 0x0, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4884}, 0x4000) (async) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000680), &(0x7f00000006c0)=0xc) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x4c, 0x3e, 0x107, 0xfffffffe, 0xfffffffc, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x30, 0x1, 0x0, 0x1, [@nested={0x2c, 0x1b, 0x0, 0x1, [@typed={0x14, 0x46, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @nested={0x9, 0x69, 0x0, 0x1, [@generic='\x00\x00\x00@\x00']}, @typed={0x8, 0xba, 0x0, 0x0, @uid}]}]}, @nested={0x4, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000c000}, 0xa000) 874.559625ms ago: executing program 0 (id=3781): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x7, @none, 0x7, 0x1}, 0xe) shutdown(r0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000002c0)=@o_path={&(0x7f0000000640)='./file0\x00', r2}, 0x18) close(r0) 829.507008ms ago: executing program 3 (id=3782): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x400000}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c0000001600010000000000fcffffff0a000000", @ANYRES32=0x0, @ANYBLOB="140007"], 0x2c}, 0x1, 0xffffff7f00000000}, 0x0) 828.759256ms ago: executing program 4 (id=3783): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) write$tun(r1, &(0x7f0000000000)={@val={0x0, 0x80f3}, @val={0x3, 0x0, 0xc, 0x0, 0x76, 0xf}, @mpls={[{0x2, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x100, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x3}], @llc={@snap={0x0, 0x1, "8f86", "972f65", 0x9082, "eaf33550f2200e5c66"}}}}, 0x38) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 678.493668ms ago: executing program 0 (id=3784): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000180)=0xfff, 0x4) 674.497775ms ago: executing program 3 (id=3785): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmmsg(r0, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000440)}}], 0x1, 0x20000080) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x500, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x49920d862a92153b, 0xc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90c1, 0x5c81}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @private0={0xfc, 0x0, '\x00', 0x3}}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x50}}, 0x48010) 539.568065ms ago: executing program 4 (id=3786): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000d80)=@delchain={0x14c, 0x65, 0x2, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xa}, {0xfff2}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x118, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}, @TCA_BPF_ACT={0x10c, 0x1, [@m_skbmod={0x108, 0x10, 0x0, 0x0, {{0xb}, {0xb8, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xfc3c, 0x5, 0x20000000, 0xffffff57, 0x5}, 0x9}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x49, 0x100, 0x20000000, 0x7f, 0x4}, 0xc}}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x6, 0x2, 0x6, 0xfffffffa, 0x7}, 0x1}}]}, {0x25, 0x6, "7a47669728dce6acf31d40cc7d7616f977a7ee969d04ff66cf038816e0e106584b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)={0x14, 0x0, 0xb, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20004014}, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)={0x50, 0x0, 0x101, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x1000, 0x0, 0x1, 0x0, {0x100, 0x5, 0x0, 0x2, 0x0, 0x1, 0x1, 0x2, 0x1}, 0x6, 0x5, 0x5}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4010}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 344.661369ms ago: executing program 3 (id=3787): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newtaction={0x60, 0x30, 0x3, 0x0, 0x2000000, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x6, 0x4, 0xffffffffffffffff, 0x12, 0xe}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x48, r3, 0xe096044a3fc9e6f1, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x4}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0xdf}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xe, 0xa}}]}, 0x48}, 0x1, 0x0, 0x0, 0x200000d0}, 0x8050) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)={0x44, r6, 0x1, 0x0, 0x0, {0x2c}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x80000002}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}]}, 0x44}}, 0x0) r7 = socket(0x2a, 0x2, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r8) sendmsg$NLBL_MGMT_C_LISTDEF(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, r9, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_FAMILY={0x335f983d5ce7ffa0, 0xb, 0x2c}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200448c4}, 0x850) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, 0x0) r10 = socket$l2tp6(0xa, 0x2, 0x73) getsockname$l2tp6(r10, 0x0, &(0x7f0000005e00)) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x4f, 0x1, 0x0, 0x25dfdbfc, {}, [@typed={0x8, 0x1, 0x0, 0x0, @uid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r11, 0x84, 0x74, &(0x7f0000000040)=""/73, &(0x7f00000000c0)=0x49) 343.024951ms ago: executing program 4 (id=3788): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="ef", @ANYRES16=r1, @ANYBLOB="01032abd7000fedbdf250b000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000090}, 0x20000080) 150.368018ms ago: executing program 3 (id=3789): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000d80)=@delchain={0x160, 0x65, 0x2, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xa}, {0xfff2}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x12c, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}, @TCA_BPF_ACT={0x120, 0x1, [@m_skbmod={0x11c, 0x10, 0x0, 0x0, {{0xb}, {0xac, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xfc3c, 0x5, 0x20000000, 0xffffff57, 0x5}, 0x9}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x49, 0x100, 0x20000000, 0x7f, 0x4}, 0xc}}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x6, 0x2, 0x6, 0xfffffffa, 0x7}, 0x1}}]}, {0x45, 0x6, "7a47669728dce6acf31d40cc7d7616f977a7ee969d04ff66cf038816e0e106584bcac02b05f5b6b8a59657b9c8097d1eee7f99524eff4c436b1270d95b23625996"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0x160}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)={0x14, 0x0, 0xb, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20004014}, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 132.230422ms ago: executing program 4 (id=3790): socket$pppoe(0x18, 0x1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = socket$packet(0x11, 0x2, 0x300) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c000000031900040900010073797a31000000000c00046acfe50b2fd8514200434f13f3c2b2f1209a72e0628ed458f7551470e2bc4c5e09f9cf734c7a83a7b1643eca6007f72d526c95af9c7311703464d0de4a07bd8b75563d22cb76fa840ba871"], 0x2c}, 0x1, 0x0, 0x0, 0x200000c1}, 0x10) 0s ago: executing program 3 (id=3791): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x4}, @IFLA_BOND_USE_CARRIER={0x5}]}}}]}, 0x44}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) kernel console output (not intermixed with test programs): 00345][T14506] ? __fget_files+0x3a0/0x420 [ 280.900372][T14506] __x64_sys_sendmsg+0x19b/0x260 [ 280.900397][T14506] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 280.900429][T14506] ? __pfx_ksys_write+0x10/0x10 [ 280.900458][T14506] ? rcu_is_watching+0x15/0xb0 [ 280.900482][T14506] ? do_syscall_64+0xbe/0x3b0 [ 280.900505][T14506] do_syscall_64+0xfa/0x3b0 [ 280.900523][T14506] ? lockdep_hardirqs_on+0x9c/0x150 [ 280.900540][T14506] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.900557][T14506] ? clear_bhb_loop+0x60/0xb0 [ 280.900578][T14506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.900595][T14506] RIP: 0033:0x7f138558eec9 [ 280.900612][T14506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 280.900627][T14506] RSP: 002b:00007f13864da038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 280.900647][T14506] RAX: ffffffffffffffda RBX: 00007f13857e5fa0 RCX: 00007f138558eec9 [ 280.900659][T14506] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 280.900671][T14506] RBP: 00007f13864da090 R08: 0000000000000000 R09: 0000000000000000 [ 280.900682][T14506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 280.900693][T14506] R13: 00007f13857e6038 R14: 00007f13857e5fa0 R15: 00007ffd6a6d7ff8 [ 280.900724][T14506] [ 281.648133][T14531] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2706'. [ 281.764760][T14545] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2711'. [ 282.038307][T14565] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2713'. [ 282.233765][T14571] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 282.418626][T14584] netlink: 'syz.0.2720': attribute type 6 has an invalid length. [ 282.581518][T14595] syzkaller0: entered promiscuous mode [ 282.592180][T14595] syzkaller0: entered allmulticast mode [ 282.600841][T14594] tipc: Enabled bearer , priority 0 [ 282.609301][T14594] tipc: Enabling of bearer rejected, already enabled [ 282.629695][T14594] tipc: Enabling of bearer rejected, already enabled [ 282.695366][T14594] tipc: Enabling of bearer rejected, already enabled [ 282.759126][T14594] tipc: Resetting bearer [ 282.821160][T14594] tipc: Disabling bearer [ 283.208599][T14645] netlink: 'syz.4.2736': attribute type 10 has an invalid length. [ 283.220089][T14642] team0: Device ip6gre1 is of different type [ 283.281334][T14651] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 283.322906][T14651] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2737'. [ 283.413988][T14655] netlink: 340 bytes leftover after parsing attributes in process `syz.4.2738'. [ 283.513283][T14666] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2738'. [ 283.804804][T14676] geneve3: entered promiscuous mode [ 283.813558][T14676] geneve3: entered allmulticast mode [ 283.826955][ T36] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 19999 - 0 [ 283.868068][ T36] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 19999 - 0 [ 283.885069][T14683] bond0: Error: Cannot enslave bond to itself. [ 283.914424][T14676] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.959802][ T36] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 19999 - 0 [ 284.768573][T14730] netlink: 'syz.1.2761': attribute type 1 has an invalid length. [ 284.813137][T14730] bond4: (slave bridge3): making interface the new active one [ 284.821920][T14730] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 285.012490][T14748] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2765'. [ 285.176531][T14756] netlink: 'syz.0.2769': attribute type 5 has an invalid length. [ 285.341420][T14762] delete_channel: no stack [ 285.344776][T14766] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2773'. [ 285.359440][T14676] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.397276][T14676] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 285.479847][T14676] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.507223][T14676] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 285.513594][T14777] sctp: [Deprecated]: syz.3.2777 (pid 14777) Use of struct sctp_assoc_value in delayed_ack socket option. [ 285.513594][T14777] Use struct sctp_sack_info instead [ 285.619641][T14780] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2778'. [ 285.642927][T14676] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.656699][T14676] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 285.700374][T14784] netlink: 'syz.0.2780': attribute type 9 has an invalid length. [ 285.862243][ T9557] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 285.896501][ T9557] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 285.908479][T14793] __nla_validate_parse: 1 callbacks suppressed [ 285.908497][T14793] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2783'. [ 286.004546][ T9557] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 286.015955][ T9557] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 286.042221][ T9557] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 286.054515][ T9557] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 286.074622][ T9557] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 286.113670][ T9557] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 286.241521][T14804] FAULT_INJECTION: forcing a failure. [ 286.241521][T14804] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 286.307446][T14804] CPU: 1 UID: 0 PID: 14804 Comm: syz.1.2789 Not tainted syzkaller #0 PREEMPT(full) [ 286.307471][T14804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 286.307481][T14804] Call Trace: [ 286.307489][T14804] [ 286.307497][T14804] dump_stack_lvl+0x189/0x250 [ 286.307522][T14804] ? __pfx____ratelimit+0x10/0x10 [ 286.307541][T14804] ? __pfx_dump_stack_lvl+0x10/0x10 [ 286.307560][T14804] ? __pfx__printk+0x10/0x10 [ 286.307581][T14804] ? __might_fault+0xb0/0x130 [ 286.307613][T14804] should_fail_ex+0x414/0x560 [ 286.307641][T14804] _copy_from_user+0x2d/0xb0 [ 286.307661][T14804] ___sys_sendmsg+0x158/0x2a0 [ 286.307685][T14804] ? __pfx____sys_sendmsg+0x10/0x10 [ 286.307745][T14804] ? __might_fault+0xb0/0x130 [ 286.307774][T14804] __sys_sendmmsg+0x227/0x430 [ 286.307799][T14804] ? __pfx___sys_sendmmsg+0x10/0x10 [ 286.307817][T14804] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 286.307865][T14804] ? ksys_write+0x22a/0x250 [ 286.307889][T14804] ? __pfx_ksys_write+0x10/0x10 [ 286.307907][T14804] ? rcu_is_watching+0x15/0xb0 [ 286.307931][T14804] __x64_sys_sendmmsg+0xa0/0xc0 [ 286.307953][T14804] do_syscall_64+0xfa/0x3b0 [ 286.307971][T14804] ? lockdep_hardirqs_on+0x9c/0x150 [ 286.307989][T14804] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.308005][T14804] ? clear_bhb_loop+0x60/0xb0 [ 286.308026][T14804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.308042][T14804] RIP: 0033:0x7f138558eec9 [ 286.308059][T14804] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.308074][T14804] RSP: 002b:00007f13864da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 286.308093][T14804] RAX: ffffffffffffffda RBX: 00007f13857e5fa0 RCX: 00007f138558eec9 [ 286.308130][T14804] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000004 [ 286.308143][T14804] RBP: 00007f13864da090 R08: 0000000000000000 R09: 0000000000000000 [ 286.308154][T14804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.308165][T14804] R13: 00007f13857e6038 R14: 00007f13857e5fa0 R15: 00007ffd6a6d7ff8 [ 286.308196][T14804] [ 286.549018][T14813] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2791'. [ 286.705700][T14819] netlink: 13 bytes leftover after parsing attributes in process `syz.3.2795'. [ 286.981668][T14836] FAULT_INJECTION: forcing a failure. [ 286.981668][T14836] name failslab, interval 1, probability 0, space 0, times 0 [ 287.005186][T14836] CPU: 0 UID: 0 PID: 14836 Comm: syz.0.2799 Not tainted syzkaller #0 PREEMPT(full) [ 287.005213][T14836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 287.005224][T14836] Call Trace: [ 287.005232][T14836] [ 287.005241][T14836] dump_stack_lvl+0x189/0x250 [ 287.005266][T14836] ? __pfx____ratelimit+0x10/0x10 [ 287.005286][T14836] ? __pfx_dump_stack_lvl+0x10/0x10 [ 287.005306][T14836] ? __pfx__printk+0x10/0x10 [ 287.005349][T14836] should_fail_ex+0x414/0x560 [ 287.005379][T14836] should_failslab+0xa8/0x100 [ 287.005404][T14836] kmem_cache_alloc_noprof+0x73/0x3c0 [ 287.005433][T14836] ? skb_clone+0x212/0x3a0 [ 287.005459][T14836] skb_clone+0x212/0x3a0 [ 287.005484][T14836] __netlink_deliver_tap+0x404/0x850 [ 287.005518][T14836] ? netlink_deliver_tap+0x2e/0x1b0 [ 287.005539][T14836] netlink_deliver_tap+0x19c/0x1b0 [ 287.005560][T14836] netlink_dump+0x92b/0xe90 [ 287.005592][T14836] ? __pfx_netlink_dump+0x10/0x10 [ 287.005608][T14836] ? __kasan_kmalloc+0x93/0xb0 [ 287.005648][T14836] ? genl_start+0x581/0x6c0 [ 287.005679][T14836] __netlink_dump_start+0x5cb/0x7e0 [ 287.005707][T14836] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 287.005734][T14836] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 287.005755][T14836] ? genl_get_cmd+0x67f/0x910 [ 287.005783][T14836] ? __pfx_genl_start+0x10/0x10 [ 287.005801][T14836] ? __pfx_genl_dumpit+0x10/0x10 [ 287.005820][T14836] ? __pfx_genl_done+0x10/0x10 [ 287.005858][T14836] genl_rcv_msg+0x5da/0x790 [ 287.005887][T14836] ? __pfx_genl_rcv_msg+0x10/0x10 [ 287.005908][T14836] ? __pfx_ethnl_tsinfo_start+0x10/0x10 [ 287.005925][T14836] ? __pfx_ethnl_tsinfo_dumpit+0x10/0x10 [ 287.005942][T14836] ? __pfx_ethnl_tsinfo_done+0x10/0x10 [ 287.005963][T14836] ? __asan_memcpy+0x40/0x70 [ 287.005982][T14836] ? __pfx_ref_tracker_free+0x10/0x10 [ 287.006006][T14836] netlink_rcv_skb+0x205/0x470 [ 287.006022][T14836] ? __lock_acquire+0xab9/0xd20 [ 287.006046][T14836] ? __pfx_genl_rcv_msg+0x10/0x10 [ 287.006069][T14836] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 287.006110][T14836] ? down_read+0x1ad/0x2e0 [ 287.006133][T14836] genl_rcv+0x28/0x40 [ 287.006153][T14836] netlink_unicast+0x82f/0x9e0 [ 287.006186][T14836] ? __pfx_netlink_unicast+0x10/0x10 [ 287.006213][T14836] ? netlink_sendmsg+0x642/0xb30 [ 287.006229][T14836] ? skb_put+0x11b/0x210 [ 287.006253][T14836] netlink_sendmsg+0x805/0xb30 [ 287.006283][T14836] ? __pfx_netlink_sendmsg+0x10/0x10 [ 287.006306][T14836] ? aa_sock_msg_perm+0xf1/0x1d0 [ 287.006327][T14836] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 287.006346][T14836] ? __pfx_netlink_sendmsg+0x10/0x10 [ 287.006366][T14836] __sock_sendmsg+0x219/0x270 [ 287.006394][T14836] ____sys_sendmsg+0x505/0x830 [ 287.006428][T14836] ? __pfx_____sys_sendmsg+0x10/0x10 [ 287.006460][T14836] ? import_iovec+0x74/0xa0 [ 287.006486][T14836] ___sys_sendmsg+0x21f/0x2a0 [ 287.006510][T14836] ? __pfx____sys_sendmsg+0x10/0x10 [ 287.006574][T14836] ? __fget_files+0x2a/0x420 [ 287.006594][T14836] ? __fget_files+0x3a0/0x420 [ 287.006622][T14836] __x64_sys_sendmsg+0x19b/0x260 [ 287.006647][T14836] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 287.006680][T14836] ? __pfx_ksys_write+0x10/0x10 [ 287.006699][T14836] ? rcu_is_watching+0x15/0xb0 [ 287.006724][T14836] ? do_syscall_64+0xbe/0x3b0 [ 287.006749][T14836] do_syscall_64+0xfa/0x3b0 [ 287.006767][T14836] ? lockdep_hardirqs_on+0x9c/0x150 [ 287.006785][T14836] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.006803][T14836] ? clear_bhb_loop+0x60/0xb0 [ 287.006825][T14836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.006842][T14836] RIP: 0033:0x7f9b54f8eec9 [ 287.006859][T14836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.006875][T14836] RSP: 002b:00007f9b55dc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 287.006895][T14836] RAX: ffffffffffffffda RBX: 00007f9b551e5fa0 RCX: 00007f9b54f8eec9 [ 287.006909][T14836] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 287.006921][T14836] RBP: 00007f9b55dc7090 R08: 0000000000000000 R09: 0000000000000000 [ 287.006932][T14836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 287.006943][T14836] R13: 00007f9b551e6038 R14: 00007f9b551e5fa0 R15: 00007ffe197f1cd8 [ 287.006975][T14836] [ 287.009551][T14839] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2798'. [ 287.202014][T14842] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2801'. [ 287.694032][T14857] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2805'. [ 287.871090][T14861] tipc: Enabled bearer , priority 0 [ 288.032676][T14861] syzkaller0: entered promiscuous mode [ 288.042878][T14861] syzkaller0: entered allmulticast mode [ 288.056476][T14861] tipc: Resetting bearer [ 288.123171][T14858] tipc: Resetting bearer [ 288.991417][ T9] tipc: Node number set to 1085316064 [ 289.396987][T14858] tipc: Disabling bearer [ 289.406827][T14877] tipc: Enabled bearer , priority 0 [ 289.414142][T14882] syzkaller0: entered promiscuous mode [ 289.427861][T14882] syzkaller0: entered allmulticast mode [ 289.558819][T14882] tipc: Resetting bearer [ 289.606848][T14882] tipc: Disabling bearer [ 289.772643][T14910] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 289.905448][ T2982] tipc: Subscription rejected, illegal request [ 290.453495][T14954] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2839'. [ 290.856887][T14973] sctp: [Deprecated]: syz.0.2846 (pid 14973) Use of struct sctp_assoc_value in delayed_ack socket option. [ 290.856887][T14973] Use struct sctp_sack_info instead [ 290.886427][T14976] netlink: 'syz.2.2848': attribute type 1 has an invalid length. [ 290.922505][T14980] sctp: [Deprecated]: syz.0.2846 (pid 14980) Use of struct sctp_assoc_value in delayed_ack socket option. [ 290.922505][T14980] Use struct sctp_sack_info instead [ 291.108521][T14986] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2852'. [ 291.321198][T15006] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2855'. [ 291.357206][T15006] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2855'. [ 291.366845][T15011] netlink: 'syz.3.2852': attribute type 3 has an invalid length. [ 292.323883][ T36] tipc: Subscription rejected, illegal request [ 292.554066][T15076] nbd: illegal input index -1 [ 292.624866][T15078] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2876'. [ 292.653980][T15081] team0: Device ip6gre1 is up. Set it down before adding it as a team port [ 292.714505][T15086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2876'. [ 293.041525][T15101] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2882'. [ 293.104014][T15103] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 293.245838][T15111] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2887'. [ 293.628785][T15130] vlan2: entered promiscuous mode [ 293.634085][T15130] bridge0: entered promiscuous mode [ 293.653578][T15125] netlink: 'syz.4.2893': attribute type 1 has an invalid length. [ 293.663756][T15132] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2896'. [ 293.673087][T15132] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2896'. [ 293.721675][T15125] 8021q: adding VLAN 0 to HW filter on device bond6 [ 293.882228][T15139] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2898'. [ 294.409995][T15161] syz.0.2905: vmalloc error: size 8392704, failed to allocated page array size 16392, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 294.488524][T15161] CPU: 1 UID: 0 PID: 15161 Comm: syz.0.2905 Not tainted syzkaller #0 PREEMPT(full) [ 294.488551][T15161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 294.488562][T15161] Call Trace: [ 294.488571][T15161] [ 294.488579][T15161] dump_stack_lvl+0x189/0x250 [ 294.488609][T15161] ? __pfx_dump_stack_lvl+0x10/0x10 [ 294.488630][T15161] ? __pfx__printk+0x10/0x10 [ 294.488653][T15161] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 294.488674][T15161] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 294.488696][T15161] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 294.488720][T15161] warn_alloc+0x214/0x310 [ 294.488751][T15161] ? __pfx_warn_alloc+0x10/0x10 [ 294.488784][T15161] ? __get_vm_area_node+0x28f/0x300 [ 294.488807][T15161] ? xskq_create+0xbf/0x170 [ 294.488830][T15161] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 294.488885][T15161] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 294.488915][T15161] ? __kasan_kmalloc+0x93/0xb0 [ 294.488940][T15161] vmalloc_user_noprof+0xad/0xf0 [ 294.488963][T15161] ? xskq_create+0xbf/0x170 [ 294.488982][T15161] xskq_create+0xbf/0x170 [ 294.489003][T15161] xsk_init_queue+0xb0/0x110 [ 294.489024][T15161] xsk_setsockopt+0x4dc/0x8d0 [ 294.489051][T15161] ? __pfx_xsk_setsockopt+0x10/0x10 [ 294.489073][T15161] ? __pfx_aa_sk_perm+0x10/0x10 [ 294.489099][T15161] ? aa_sock_opt_perm+0xff/0x1b0 [ 294.489118][T15161] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 294.489136][T15161] ? __pfx_xsk_setsockopt+0x10/0x10 [ 294.489158][T15161] do_sock_setsockopt+0x17c/0x1b0 [ 294.489181][T15161] __x64_sys_setsockopt+0x13f/0x1b0 [ 294.489205][T15161] do_syscall_64+0xfa/0x3b0 [ 294.489221][T15161] ? lockdep_hardirqs_on+0x9c/0x150 [ 294.489238][T15161] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.489255][T15161] ? clear_bhb_loop+0x60/0xb0 [ 294.489275][T15161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.489290][T15161] RIP: 0033:0x7f9b54f8eec9 [ 294.489306][T15161] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.489318][T15161] RSP: 002b:00007f9b55da6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 294.489333][T15161] RAX: ffffffffffffffda RBX: 00007f9b551e6090 RCX: 00007f9b54f8eec9 [ 294.489344][T15161] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 294.489353][T15161] RBP: 00007f9b55011f91 R08: 0000000000000004 R09: 0000000000000000 [ 294.489364][T15161] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 294.489385][T15161] R13: 00007f9b551e6128 R14: 00007f9b551e6090 R15: 00007ffe197f1cd8 [ 294.489413][T15161] [ 294.489434][T15161] Mem-Info: [ 294.780370][T15161] active_anon:5973 inactive_anon:0 isolated_anon:0 [ 294.780370][T15161] active_file:3410 inactive_file:39961 isolated_file:0 [ 294.780370][T15161] unevictable:768 dirty:141 writeback:25 [ 294.780370][T15161] slab_reclaimable:11355 slab_unreclaimable:103427 [ 294.780370][T15161] mapped:29809 shmem:1364 pagetables:1315 [ 294.780370][T15161] sec_pagetables:0 bounce:0 [ 294.780370][T15161] kernel_misc_reclaimable:0 [ 294.780370][T15161] free:1321299 free_pcp:14417 free_cma:0 [ 294.866324][T15161] Node 0 active_anon:23924kB inactive_anon:0kB active_file:13640kB inactive_file:159640kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119236kB dirty:468kB writeback:196kB shmem:3920kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13432kB pagetables:4748kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 294.901881][T15161] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 294.935878][T15161] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 294.967190][T15161] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 294.978451][T15161] Node 0 DMA32 free:1390632kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24048kB inactive_anon:0kB active_file:13640kB inactive_file:158072kB unevictable:1536kB writepending:472kB present:3129332kB managed:2557412kB mlocked:0kB bounce:0kB free_pcp:36864kB local_pcp:19712kB free_cma:0kB [ 295.017513][T15161] lowmem_reserve[]: 0 0 1 1 1 [ 295.022345][T15161] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1568kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 295.052502][T15161] lowmem_reserve[]: 0 0 0 0 0 [ 295.057580][T15161] Node 1 Normal free:3879244kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:21576kB local_pcp:9888kB free_cma:0kB [ 295.137390][T15161] lowmem_reserve[]: 0 0 0 0 0 [ 295.143964][T15161] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 295.192539][T15161] Node 0 DMA32: 342*4kB (UME) 362*8kB (UM) 520*16kB (UME) 424*32kB (UME) 192*64kB (UME) 88*128kB (UME) 48*256kB (UME) 19*512kB (UME) 6*1024kB (UM) 7*2048kB (UME) 317*4096kB (M) = 1390632kB [ 295.241958][T15161] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 295.299521][T15161] Node 1 Normal: 239*4kB (UE) 58*8kB (UME) 46*16kB (UME) 63*32kB (UME) 26*64kB (UME) 9*128kB (UME) 2*256kB (M) 2*512kB (M) 2*1024kB (UM) 1*2048kB (E) 944*4096kB (M) = 3879244kB [ 295.340272][T15161] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 295.360733][T15196] sctp: [Deprecated]: syz.1.2915 (pid 15196) Use of struct sctp_assoc_value in delayed_ack socket option. [ 295.360733][T15196] Use struct sctp_sack_info instead [ 295.387545][T15161] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 295.396878][T15161] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 295.411219][ T97] block nbd3: Possible stuck request ffff888025200000: control (read@0,1024B). Runtime 210 seconds [ 295.417506][T15200] sctp: [Deprecated]: syz.1.2915 (pid 15200) Use of struct sctp_assoc_value in delayed_ack socket option. [ 295.417506][T15200] Use struct sctp_sack_info instead [ 295.423096][ T97] block nbd3: Possible stuck request ffff8880252001c0: control (read@1024,1024B). Runtime 210 seconds [ 295.450035][ T97] block nbd3: Possible stuck request ffff888025200380: control (read@2048,1024B). Runtime 210 seconds [ 295.451296][T15161] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 295.461061][ T97] block nbd3: Possible stuck request ffff888025200540: control (read@3072,1024B). Runtime 210 seconds [ 295.513580][T15205] netlink: 'syz.3.2918': attribute type 29 has an invalid length. [ 295.592748][T15161] 44733 total pagecache pages [ 295.625097][T15161] 0 pages in swap cache [ 295.647866][T15161] Free swap = 124996kB [ 295.675162][T15161] Total swap = 124996kB [ 295.694073][T15161] 2097051 pages RAM [ 295.699751][T15219] netlink: 'syz.3.2922': attribute type 1 has an invalid length. [ 295.707410][T15161] 0 pages HighMem/MovableOnly [ 295.712599][T15161] 425672 pages reserved [ 295.716820][T15161] 0 pages cma reserved [ 295.854457][T15219] 8021q: adding VLAN 0 to HW filter on device bond6 [ 295.901108][T15232] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 296.281514][T15258] tipc: Enabling of bearer rejected, failed to enable media [ 296.294842][T15258] syzkaller0: entered promiscuous mode [ 296.311582][T15258] syzkaller0: entered allmulticast mode [ 296.337915][T15261] netlink: 'syz.4.2936': attribute type 11 has an invalid length. [ 296.364503][T15258] netlink: 'syz.3.2935': attribute type 21 has an invalid length. [ 296.372645][T15258] netlink: 'syz.3.2935': attribute type 22 has an invalid length. [ 296.380921][T15258] netlink: 'syz.3.2935': attribute type 23 has an invalid length. [ 296.389340][T15258] netlink: 'syz.3.2935': attribute type 25 has an invalid length. [ 296.397914][T15258] __nla_validate_parse: 3 callbacks suppressed [ 296.397932][T15258] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2935'. [ 296.681906][T15277] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2941'. [ 296.787689][T15284] netlink: 165 bytes leftover after parsing attributes in process `syz.3.2941'. [ 296.805216][T15284] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2941'. [ 297.345281][T15305] team0: Device ip6gre1 is up. Set it down before adding it as a team port [ 297.675883][T15324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2956'. [ 297.695356][T15322] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 297.743164][T15324] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2956'. [ 298.005804][T15342] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2963'. [ 298.173200][T15353] netlink: 'syz.4.2967': attribute type 1 has an invalid length. [ 298.371386][T15358] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2967'. [ 298.391450][T15357] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2969'. [ 298.494627][T15361] tap0: tun_chr_ioctl cmd 1074025677 [ 298.503083][T15361] tap0: linktype set to 65534 [ 298.774287][T15381] netlink: 3648 bytes leftover after parsing attributes in process `syz.4.2977'. [ 298.879557][T15387] tls_set_device_offload: netdev not found [ 299.867493][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 300.455205][T15461] openvswitch: netlink: Actions may not be safe on all matching packets [ 300.594213][T15472] tipc: Enabled bearer , priority 0 [ 300.604245][T15472] syzkaller0: entered promiscuous mode [ 300.614083][T15472] syzkaller0: entered allmulticast mode [ 300.625083][T15472] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 300.704200][T15472] tipc: Resetting bearer [ 300.759427][T15478] netlink: 'syz.0.3007': attribute type 33 has an invalid length. [ 300.774516][T15478] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 300.790682][T15471] tipc: Resetting bearer [ 300.846843][T15471] tipc: Disabling bearer [ 300.948351][T15480] raw_sendmsg: syz.0.3008 forgot to set AF_INET. Fix it! [ 301.592725][T15522] __nla_validate_parse: 15 callbacks suppressed [ 301.592828][T15522] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3021'. [ 301.625469][T15522] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3021'. [ 301.769933][T15522] lo speed is unknown, defaulting to 1000 [ 301.802120][T15522] lo speed is unknown, defaulting to 1000 [ 301.818317][T15522] lo speed is unknown, defaulting to 1000 [ 301.845019][T15522] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 301.864327][T15522] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 301.924754][T15522] lo speed is unknown, defaulting to 1000 [ 301.933503][T15522] lo speed is unknown, defaulting to 1000 [ 301.942637][T15522] lo speed is unknown, defaulting to 1000 [ 301.952225][T15522] lo speed is unknown, defaulting to 1000 [ 301.960520][T15522] lo speed is unknown, defaulting to 1000 [ 303.034852][T15599] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3039'. [ 303.395084][T15614] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3045'. [ 303.662117][T15586] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 303.733359][T15580] lo speed is unknown, defaulting to 1000 [ 303.781125][T15625] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 304.377011][T15643] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3054'. [ 304.890396][T15667] netlink: 'syz.4.3062': attribute type 10 has an invalid length. [ 304.909004][T15667] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 305.185999][T15687] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3069'. [ 305.200748][T15687] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3069'. [ 305.503710][T15705] macvtap1: entered allmulticast mode [ 305.512789][T15705] veth0_macvtap: entered allmulticast mode [ 305.643665][T15712] FAULT_INJECTION: forcing a failure. [ 305.643665][T15712] name failslab, interval 1, probability 0, space 0, times 0 [ 305.660693][T15712] CPU: 0 UID: 0 PID: 15712 Comm: syz.0.3074 Not tainted syzkaller #0 PREEMPT(full) [ 305.660720][T15712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 305.660731][T15712] Call Trace: [ 305.660739][T15712] [ 305.660748][T15712] dump_stack_lvl+0x189/0x250 [ 305.660772][T15712] ? __pfx____ratelimit+0x10/0x10 [ 305.660792][T15712] ? __pfx_dump_stack_lvl+0x10/0x10 [ 305.660813][T15712] ? __pfx__printk+0x10/0x10 [ 305.660842][T15712] ? __pfx___might_resched+0x10/0x10 [ 305.660865][T15712] should_fail_ex+0x414/0x560 [ 305.660895][T15712] should_failslab+0xa8/0x100 [ 305.660926][T15712] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 305.660949][T15712] ? __alloc_skb+0x112/0x2d0 [ 305.660974][T15712] __alloc_skb+0x112/0x2d0 [ 305.660998][T15712] netlink_sendmsg+0x5c6/0xb30 [ 305.661028][T15712] ? __pfx_netlink_sendmsg+0x10/0x10 [ 305.661050][T15712] ? aa_sock_msg_perm+0xf1/0x1d0 [ 305.661070][T15712] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 305.661089][T15712] ? __pfx_netlink_sendmsg+0x10/0x10 [ 305.661109][T15712] __sock_sendmsg+0x219/0x270 [ 305.661138][T15712] ____sys_sendmsg+0x505/0x830 [ 305.661165][T15712] ? __pfx_____sys_sendmsg+0x10/0x10 [ 305.661197][T15712] ? import_iovec+0x74/0xa0 [ 305.661221][T15712] ___sys_sendmsg+0x21f/0x2a0 [ 305.661245][T15712] ? __pfx____sys_sendmsg+0x10/0x10 [ 305.661303][T15712] ? __fget_files+0x2a/0x420 [ 305.661319][T15712] ? __fget_files+0x3a0/0x420 [ 305.661347][T15712] __x64_sys_sendmsg+0x19b/0x260 [ 305.661370][T15712] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 305.661402][T15712] ? __pfx_ksys_write+0x10/0x10 [ 305.661423][T15712] ? rcu_is_watching+0x15/0xb0 [ 305.661446][T15712] ? do_syscall_64+0xbe/0x3b0 [ 305.661469][T15712] do_syscall_64+0xfa/0x3b0 [ 305.661487][T15712] ? lockdep_hardirqs_on+0x9c/0x150 [ 305.661511][T15712] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.661533][T15712] ? clear_bhb_loop+0x60/0xb0 [ 305.661555][T15712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.661572][T15712] RIP: 0033:0x7f9b54f8eec9 [ 305.661589][T15712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 305.661605][T15712] RSP: 002b:00007f9b55dc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 305.661625][T15712] RAX: ffffffffffffffda RBX: 00007f9b551e5fa0 RCX: 00007f9b54f8eec9 [ 305.661637][T15712] RDX: 00000000040440d0 RSI: 0000200000001240 RDI: 0000000000000004 [ 305.661649][T15712] RBP: 00007f9b55dc7090 R08: 0000000000000000 R09: 0000000000000000 [ 305.661659][T15712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 305.661670][T15712] R13: 00007f9b551e6038 R14: 00007f9b551e5fa0 R15: 00007ffe197f1cd8 [ 305.661697][T15712] [ 306.320061][T15734] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3081'. [ 306.375542][T15734] tipc: Enabled bearer , priority 0 [ 306.405180][T15742] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3084'. [ 306.509204][T15732] tipc: Disabling bearer [ 306.892589][T15767] netlink: 'syz.2.3091': attribute type 16 has an invalid length. [ 306.998850][T15767] netlink: 'syz.2.3091': attribute type 17 has an invalid length. [ 307.170517][T15767] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 307.843331][T15809] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3099'. [ 308.039997][T15816] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3102'. [ 308.074146][T15816] IPVS: Unknown mcast interface: vcan0 [ 308.375482][T15828] netlink: 'syz.3.3106': attribute type 10 has an invalid length. [ 308.399377][T15828] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3106'. [ 308.415702][T15828] dummy0: entered promiscuous mode [ 308.424275][T15828] bridge0: port 1(dummy0) entered blocking state [ 308.454579][T15828] bridge0: port 1(dummy0) entered disabled state [ 308.467658][T15828] dummy0: entered allmulticast mode [ 308.491462][T15828] dummy0: left allmulticast mode [ 308.522530][T15828] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 309.098411][T15862] netlink: 'syz.1.3116': attribute type 1 has an invalid length. [ 309.213861][T15866] bond5: (slave geneve3): making interface the new active one [ 309.293743][T15866] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 309.380375][ T2982] netdevsim netdevsim1 netdevsim0: set [1, 2] type 2 family 0 port 20004 - 0 [ 309.396777][ T2982] netdevsim netdevsim1 netdevsim1: set [1, 2] type 2 family 0 port 20004 - 0 [ 309.433313][ T2982] netdevsim netdevsim1 netdevsim2: set [1, 2] type 2 family 0 port 20004 - 0 [ 309.456094][ T2982] netdevsim netdevsim1 netdevsim3: set [1, 2] type 2 family 0 port 20004 - 0 [ 309.580189][T15879] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 309.637540][T15881] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3122'. [ 309.696961][T15881] syzkaller1: entered promiscuous mode [ 309.715310][T15881] syzkaller1: entered allmulticast mode [ 310.143134][T15912] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3130'. [ 310.154863][T15912] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3130'. [ 310.190328][T15912] lo speed is unknown, defaulting to 1000 [ 310.196370][T15912] lo speed is unknown, defaulting to 1000 [ 310.204910][T15912] lo speed is unknown, defaulting to 1000 [ 310.230723][T15912] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 310.269666][T15912] lo speed is unknown, defaulting to 1000 [ 310.281944][T15912] lo speed is unknown, defaulting to 1000 [ 310.294844][T15912] lo speed is unknown, defaulting to 1000 [ 310.306570][T15912] lo speed is unknown, defaulting to 1000 [ 310.315216][T15912] lo speed is unknown, defaulting to 1000 [ 310.392584][T15918] openvswitch: netlink: EtherType 50a is less than min 600 [ 310.543001][T15926] FAULT_INJECTION: forcing a failure. [ 310.543001][T15926] name failslab, interval 1, probability 0, space 0, times 0 [ 310.591800][T15926] CPU: 1 UID: 0 PID: 15926 Comm: syz.4.3134 Not tainted syzkaller #0 PREEMPT(full) [ 310.591825][T15926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 310.591836][T15926] Call Trace: [ 310.591844][T15926] [ 310.591852][T15926] dump_stack_lvl+0x189/0x250 [ 310.591876][T15926] ? __pfx____ratelimit+0x10/0x10 [ 310.591894][T15926] ? __pfx_dump_stack_lvl+0x10/0x10 [ 310.591915][T15926] ? __pfx__printk+0x10/0x10 [ 310.591945][T15926] ? __pfx___might_resched+0x10/0x10 [ 310.591960][T15926] ? fs_reclaim_acquire+0x7d/0x100 [ 310.591980][T15926] should_fail_ex+0x414/0x560 [ 310.592006][T15926] should_failslab+0xa8/0x100 [ 310.592030][T15926] __kmalloc_noprof+0xcb/0x4f0 [ 310.592058][T15926] ? tomoyo_encode+0x28b/0x550 [ 310.592080][T15926] tomoyo_encode+0x28b/0x550 [ 310.592103][T15926] tomoyo_realpath_from_path+0x58d/0x5d0 [ 310.592124][T15926] ? tomoyo_domain+0xd9/0x130 [ 310.592148][T15926] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 310.592171][T15926] tomoyo_path_number_perm+0x1e8/0x5a0 [ 310.592202][T15926] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 310.592243][T15926] ? __lock_acquire+0xab9/0xd20 [ 310.592287][T15926] ? __fget_files+0x2a/0x420 [ 310.592307][T15926] ? __fget_files+0x2a/0x420 [ 310.592320][T15926] ? __fget_files+0x3a0/0x420 [ 310.592335][T15926] ? __fget_files+0x2a/0x420 [ 310.592355][T15926] security_file_ioctl+0xcb/0x2d0 [ 310.592378][T15926] __se_sys_ioctl+0x47/0x170 [ 310.592399][T15926] do_syscall_64+0xfa/0x3b0 [ 310.592416][T15926] ? lockdep_hardirqs_on+0x9c/0x150 [ 310.592438][T15926] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.592455][T15926] ? clear_bhb_loop+0x60/0xb0 [ 310.592476][T15926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.592492][T15926] RIP: 0033:0x7fd99ff8eec9 [ 310.592508][T15926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 310.592524][T15926] RSP: 002b:00007fd9a0e19038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 310.592542][T15926] RAX: ffffffffffffffda RBX: 00007fd9a01e5fa0 RCX: 00007fd99ff8eec9 [ 310.592554][T15926] RDX: 0000200000000000 RSI: 00000000000089ea RDI: 0000000000000004 [ 310.592566][T15926] RBP: 00007fd9a0e19090 R08: 0000000000000000 R09: 0000000000000000 [ 310.592577][T15926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 310.592588][T15926] R13: 00007fd9a01e6038 R14: 00007fd9a01e5fa0 R15: 00007ffcddc38b68 [ 310.592618][T15926] [ 310.592639][T15926] ERROR: Out of memory at tomoyo_realpath_from_path. [ 311.031502][T15947] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3142'. [ 311.220230][T15959] FAULT_INJECTION: forcing a failure. [ 311.220230][T15959] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 311.235457][T15959] CPU: 1 UID: 0 PID: 15959 Comm: syz.0.3145 Not tainted syzkaller #0 PREEMPT(full) [ 311.235485][T15959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 311.235497][T15959] Call Trace: [ 311.235504][T15959] [ 311.235513][T15959] dump_stack_lvl+0x189/0x250 [ 311.235537][T15959] ? __pfx____ratelimit+0x10/0x10 [ 311.235556][T15959] ? __pfx_dump_stack_lvl+0x10/0x10 [ 311.235575][T15959] ? __pfx__printk+0x10/0x10 [ 311.235598][T15959] ? __might_fault+0xb0/0x130 [ 311.235632][T15959] should_fail_ex+0x414/0x560 [ 311.235660][T15959] _copy_from_iter+0x1de/0x1790 [ 311.235686][T15959] ? rcu_is_watching+0x15/0xb0 [ 311.235706][T15959] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 311.235730][T15959] ? __pfx__copy_from_iter+0x10/0x10 [ 311.235753][T15959] ? __build_skb_around+0x257/0x3e0 [ 311.235777][T15959] ? netlink_sendmsg+0x642/0xb30 [ 311.235795][T15959] ? skb_put+0x11b/0x210 [ 311.235818][T15959] netlink_sendmsg+0x6b2/0xb30 [ 311.235845][T15959] ? __pfx_netlink_sendmsg+0x10/0x10 [ 311.235874][T15959] ? aa_sock_msg_perm+0xf1/0x1d0 [ 311.235892][T15959] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 311.235909][T15959] ? __pfx_netlink_sendmsg+0x10/0x10 [ 311.235928][T15959] __sock_sendmsg+0x219/0x270 [ 311.235955][T15959] ____sys_sendmsg+0x505/0x830 [ 311.235980][T15959] ? __pfx_____sys_sendmsg+0x10/0x10 [ 311.236011][T15959] ? import_iovec+0x74/0xa0 [ 311.236033][T15959] ___sys_sendmsg+0x21f/0x2a0 [ 311.236056][T15959] ? __pfx____sys_sendmsg+0x10/0x10 [ 311.236109][T15959] ? __fget_files+0x2a/0x420 [ 311.236125][T15959] ? __fget_files+0x3a0/0x420 [ 311.236151][T15959] __x64_sys_sendmsg+0x19b/0x260 [ 311.236173][T15959] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 311.236202][T15959] ? __pfx_ksys_write+0x10/0x10 [ 311.236221][T15959] ? rcu_is_watching+0x15/0xb0 [ 311.236244][T15959] ? do_syscall_64+0xbe/0x3b0 [ 311.236265][T15959] do_syscall_64+0xfa/0x3b0 [ 311.236282][T15959] ? lockdep_hardirqs_on+0x9c/0x150 [ 311.236299][T15959] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.236316][T15959] ? clear_bhb_loop+0x60/0xb0 [ 311.236336][T15959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.236353][T15959] RIP: 0033:0x7f9b54f8eec9 [ 311.236370][T15959] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 311.236386][T15959] RSP: 002b:00007f9b55dc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 311.236405][T15959] RAX: ffffffffffffffda RBX: 00007f9b551e5fa0 RCX: 00007f9b54f8eec9 [ 311.236419][T15959] RDX: 0000000024000018 RSI: 00002000000005c0 RDI: 0000000000000009 [ 311.236431][T15959] RBP: 00007f9b55dc7090 R08: 0000000000000000 R09: 0000000000000000 [ 311.236441][T15959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 311.236450][T15959] R13: 00007f9b551e6038 R14: 00007f9b551e5fa0 R15: 00007ffe197f1cd8 [ 311.236478][T15959] [ 311.890615][T15969] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3147'. [ 312.034792][T15974] FAULT_INJECTION: forcing a failure. [ 312.034792][T15974] name failslab, interval 1, probability 0, space 0, times 0 [ 312.104190][T15974] CPU: 1 UID: 0 PID: 15974 Comm: syz.1.3149 Not tainted syzkaller #0 PREEMPT(full) [ 312.104216][T15974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 312.104228][T15974] Call Trace: [ 312.104236][T15974] [ 312.104244][T15974] dump_stack_lvl+0x189/0x250 [ 312.104269][T15974] ? __pfx____ratelimit+0x10/0x10 [ 312.104288][T15974] ? __pfx_dump_stack_lvl+0x10/0x10 [ 312.104308][T15974] ? __pfx__printk+0x10/0x10 [ 312.104330][T15974] ? __lock_acquire+0xab9/0xd20 [ 312.104363][T15974] should_fail_ex+0x414/0x560 [ 312.104393][T15974] should_failslab+0xa8/0x100 [ 312.104419][T15974] kmem_cache_alloc_noprof+0x73/0x3c0 [ 312.104441][T15974] ? skb_clone+0x212/0x3a0 [ 312.104467][T15974] skb_clone+0x212/0x3a0 [ 312.104491][T15974] __netlink_deliver_tap+0x404/0x850 [ 312.104530][T15974] ? netlink_deliver_tap+0x2e/0x1b0 [ 312.104551][T15974] netlink_deliver_tap+0x19c/0x1b0 [ 312.104571][T15974] netlink_unicast+0x7fa/0x9e0 [ 312.104603][T15974] ? __pfx_netlink_unicast+0x10/0x10 [ 312.104629][T15974] ? netlink_sendmsg+0x642/0xb30 [ 312.104645][T15974] ? skb_put+0x11b/0x210 [ 312.104669][T15974] netlink_sendmsg+0x805/0xb30 [ 312.104698][T15974] ? __pfx_netlink_sendmsg+0x10/0x10 [ 312.104721][T15974] ? aa_sock_msg_perm+0xf1/0x1d0 [ 312.104741][T15974] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 312.104760][T15974] ? __pfx_netlink_sendmsg+0x10/0x10 [ 312.104780][T15974] __sock_sendmsg+0x219/0x270 [ 312.104807][T15974] ____sys_sendmsg+0x505/0x830 [ 312.104841][T15974] ? __pfx_____sys_sendmsg+0x10/0x10 [ 312.104872][T15974] ? import_iovec+0x74/0xa0 [ 312.104898][T15974] ___sys_sendmsg+0x21f/0x2a0 [ 312.104926][T15974] ? __pfx____sys_sendmsg+0x10/0x10 [ 312.104985][T15974] ? __fget_files+0x2a/0x420 [ 312.105001][T15974] ? __fget_files+0x3a0/0x420 [ 312.105030][T15974] __x64_sys_sendmsg+0x19b/0x260 [ 312.105053][T15974] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 312.105083][T15974] ? __pfx_ksys_write+0x10/0x10 [ 312.105103][T15974] ? rcu_is_watching+0x15/0xb0 [ 312.105127][T15974] ? do_syscall_64+0xbe/0x3b0 [ 312.105150][T15974] do_syscall_64+0xfa/0x3b0 [ 312.105167][T15974] ? lockdep_hardirqs_on+0x9c/0x150 [ 312.105184][T15974] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.105202][T15974] ? clear_bhb_loop+0x60/0xb0 [ 312.105227][T15974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.105244][T15974] RIP: 0033:0x7f138558eec9 [ 312.105260][T15974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.105273][T15974] RSP: 002b:00007f13864da038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 312.105291][T15974] RAX: ffffffffffffffda RBX: 00007f13857e5fa0 RCX: 00007f138558eec9 [ 312.105304][T15974] RDX: 0000000000000000 RSI: 0000200000000800 RDI: 0000000000000004 [ 312.105314][T15974] RBP: 00007f13864da090 R08: 0000000000000000 R09: 0000000000000000 [ 312.105325][T15974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.105335][T15974] R13: 00007f13857e6038 R14: 00007f13857e5fa0 R15: 00007ffd6a6d7ff8 [ 312.105361][T15974] [ 312.428931][T15986] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3151'. [ 312.504416][T15986] netlink: 'syz.2.3151': attribute type 5 has an invalid length. [ 312.512715][T15986] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3151'. [ 312.684735][T15991] syzkaller1: entered promiscuous mode [ 312.708400][T15991] syzkaller1: entered allmulticast mode [ 312.930424][T16005] FAULT_INJECTION: forcing a failure. [ 312.930424][T16005] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 312.965187][T16004] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3157'. [ 312.986347][T16005] CPU: 0 UID: 0 PID: 16005 Comm: syz.2.3158 Not tainted syzkaller #0 PREEMPT(full) [ 312.986375][T16005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 312.986386][T16005] Call Trace: [ 312.986394][T16005] [ 312.986403][T16005] dump_stack_lvl+0x189/0x250 [ 312.986429][T16005] ? __pfx____ratelimit+0x10/0x10 [ 312.986450][T16005] ? __pfx_dump_stack_lvl+0x10/0x10 [ 312.986469][T16005] ? __pfx__printk+0x10/0x10 [ 312.986520][T16005] should_fail_ex+0x414/0x560 [ 312.986549][T16005] _copy_to_user+0x31/0xb0 [ 312.986574][T16005] simple_read_from_buffer+0xe1/0x170 [ 312.986603][T16005] proc_fail_nth_read+0x1b3/0x220 [ 312.986625][T16005] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 312.986647][T16005] ? rw_verify_area+0x2a6/0x4d0 [ 312.986667][T16005] ? __lock_acquire+0xab9/0xd20 [ 312.986689][T16005] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 312.986710][T16005] vfs_read+0x200/0xa30 [ 312.986730][T16005] ? fdget_pos+0x247/0x320 [ 312.986750][T16005] ? __pfx___mutex_lock+0x10/0x10 [ 312.986770][T16005] ? __pfx_vfs_read+0x10/0x10 [ 312.986793][T16005] ? __fget_files+0x2a/0x420 [ 312.986813][T16005] ? __fget_files+0x3a0/0x420 [ 312.986828][T16005] ? __fget_files+0x2a/0x420 [ 312.986854][T16005] ksys_read+0x145/0x250 [ 312.986874][T16005] ? __fget_files+0x3a0/0x420 [ 312.986891][T16005] ? __pfx_ksys_read+0x10/0x10 [ 312.986918][T16005] ? do_syscall_64+0xbe/0x3b0 [ 312.986941][T16005] do_syscall_64+0xfa/0x3b0 [ 312.986958][T16005] ? lockdep_hardirqs_on+0x9c/0x150 [ 312.986976][T16005] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.986993][T16005] ? clear_bhb_loop+0x60/0xb0 [ 312.987014][T16005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.987036][T16005] RIP: 0033:0x7fe72f38d8dc [ 312.987051][T16005] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 312.987065][T16005] RSP: 002b:00007fe7302b5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 312.987084][T16005] RAX: ffffffffffffffda RBX: 00007fe72f5e5fa0 RCX: 00007fe72f38d8dc [ 312.987097][T16005] RDX: 000000000000000f RSI: 00007fe7302b50a0 RDI: 0000000000000003 [ 312.987108][T16005] RBP: 00007fe7302b5090 R08: 0000000000000000 R09: 0000000000000000 [ 312.987120][T16005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.987131][T16005] R13: 00007fe72f5e6038 R14: 00007fe72f5e5fa0 R15: 00007ffdf5c4b318 [ 312.987162][T16005] [ 313.722795][T16028] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3165'. [ 313.752929][T16028] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3165'. [ 313.789863][T16028] netlink: 'syz.4.3165': attribute type 3 has an invalid length. [ 314.395882][T16059] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 314.460191][T16066] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3178'. [ 314.719215][T16080] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3181'. [ 314.913102][T16091] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3184'. [ 314.963035][T16091] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3184'. [ 315.016743][T16091] netlink: 6 bytes leftover after parsing attributes in process `syz.2.3184'. [ 315.191950][T16108] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3190'. [ 315.387587][T16113] netlink: 'syz.3.3192': attribute type 10 has an invalid length. [ 315.678317][T16131] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3199'. [ 316.229433][T16159] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 316.338086][T16167] openvswitch: netlink: IP tunnel dst address not specified [ 316.414330][T16171] IPVS: Unknown mcast interface: vcan0 [ 316.796271][T16196] siw: device registration error -23 [ 316.885454][T16205] netlink: 'syz.2.3228': attribute type 1 has an invalid length. [ 316.942783][T16205] 8021q: adding VLAN 0 to HW filter on device bond7 [ 316.969714][T16205] bond7: (slave geneve4): making interface the new active one [ 316.978982][T16205] bond7: (slave geneve4): Enslaving as an active interface with an up link [ 317.556492][T16239] siw: device registration error -23 [ 317.808825][T16254] bond8: entered promiscuous mode [ 317.814010][T16254] bond8: entered allmulticast mode [ 317.820753][T16254] 8021q: adding VLAN 0 to HW filter on device bond8 [ 317.829362][T16250] syzkaller1: entered promiscuous mode [ 317.835019][T16250] syzkaller1: entered allmulticast mode [ 318.066521][T16270] FAULT_INJECTION: forcing a failure. [ 318.066521][T16270] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 318.105399][T16270] CPU: 0 UID: 0 PID: 16270 Comm: syz.2.3250 Not tainted syzkaller #0 PREEMPT(full) [ 318.105425][T16270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 318.105436][T16270] Call Trace: [ 318.105443][T16270] [ 318.105460][T16270] dump_stack_lvl+0x189/0x250 [ 318.105486][T16270] ? __pfx____ratelimit+0x10/0x10 [ 318.105505][T16270] ? __pfx_dump_stack_lvl+0x10/0x10 [ 318.105525][T16270] ? __pfx__printk+0x10/0x10 [ 318.105559][T16270] should_fail_ex+0x414/0x560 [ 318.105589][T16270] _copy_to_user+0x31/0xb0 [ 318.105612][T16270] simple_read_from_buffer+0xe1/0x170 [ 318.105642][T16270] proc_fail_nth_read+0x1b3/0x220 [ 318.105665][T16270] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 318.105689][T16270] ? rw_verify_area+0x2a6/0x4d0 [ 318.105709][T16270] ? __lock_acquire+0xab9/0xd20 [ 318.105729][T16270] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 318.105749][T16270] vfs_read+0x200/0xa30 [ 318.105770][T16270] ? fdget_pos+0x247/0x320 [ 318.105790][T16270] ? __pfx___mutex_lock+0x10/0x10 [ 318.105810][T16270] ? __pfx_vfs_read+0x10/0x10 [ 318.105832][T16270] ? __fget_files+0x2a/0x420 [ 318.105853][T16270] ? __fget_files+0x3a0/0x420 [ 318.105868][T16270] ? __fget_files+0x2a/0x420 [ 318.105894][T16270] ksys_read+0x145/0x250 [ 318.105917][T16270] ? __pfx_ksys_read+0x10/0x10 [ 318.105945][T16270] ? do_syscall_64+0xbe/0x3b0 [ 318.105968][T16270] do_syscall_64+0xfa/0x3b0 [ 318.105992][T16270] ? lockdep_hardirqs_on+0x9c/0x150 [ 318.106011][T16270] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.106029][T16270] ? clear_bhb_loop+0x60/0xb0 [ 318.106050][T16270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.106066][T16270] RIP: 0033:0x7fe72f38d8dc [ 318.106082][T16270] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 318.106097][T16270] RSP: 002b:00007fe7302b5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 318.106116][T16270] RAX: ffffffffffffffda RBX: 00007fe72f5e5fa0 RCX: 00007fe72f38d8dc [ 318.106130][T16270] RDX: 000000000000000f RSI: 00007fe7302b50a0 RDI: 0000000000000004 [ 318.106141][T16270] RBP: 00007fe7302b5090 R08: 0000000000000000 R09: 0000000000000000 [ 318.106153][T16270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 318.106164][T16270] R13: 00007fe72f5e6038 R14: 00007fe72f5e5fa0 R15: 00007ffdf5c4b318 [ 318.106194][T16270] [ 318.119534][T16271] netdevsim netdevsim4: Direct firmware load for /.€ failed with error -2 [ 318.303367][T16278] __nla_validate_parse: 11 callbacks suppressed [ 318.303387][T16278] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3252'. [ 318.374960][T16271] netdevsim netdevsim4: Falling back to sysfs fallback for: /.€ [ 318.413097][T16284] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3252'. [ 318.480352][T16285] siw: device registration error -23 [ 318.710545][T16294] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3256'. [ 318.723197][T16294] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3256'. [ 319.310699][T16323] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3265'. [ 319.317411][T16324] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3264'. [ 319.421057][T16326] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3266'. [ 319.436356][T16326] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3266'. [ 319.451215][T16330] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3268'. [ 319.472501][T16330] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3268'. [ 319.643167][T16338] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 319.650869][T16338] IPv6: NLM_F_CREATE should be set when creating new route [ 319.658165][T16338] IPv6: NLM_F_CREATE should be set when creating new route [ 319.678089][T16338] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 320.425319][T16363] siw: device registration error -23 [ 320.436231][T16371] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 321.614831][T16423] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 322.130193][T16451] netlink: 'syz.4.3305': attribute type 10 has an invalid length. [ 322.222669][T16469] netlink: 'syz.0.3309': attribute type 3 has an invalid length. [ 322.231754][T16469] netlink: 'syz.0.3309': attribute type 1 has an invalid length. [ 322.494470][T16499] netlink: 'syz.0.3311': attribute type 21 has an invalid length. [ 322.504842][T16499] netlink: 'syz.0.3311': attribute type 22 has an invalid length. [ 322.516169][T16499] netlink: 'syz.0.3311': attribute type 23 has an invalid length. [ 322.528538][T16499] netlink: 'syz.0.3311': attribute type 25 has an invalid length. [ 324.137964][T16588] lo speed is unknown, defaulting to 1000 [ 324.184119][T16620] FAULT_INJECTION: forcing a failure. [ 324.184119][T16620] name failslab, interval 1, probability 0, space 0, times 0 [ 324.220309][T16620] CPU: 0 UID: 0 PID: 16620 Comm: syz.0.3333 Not tainted syzkaller #0 PREEMPT(full) [ 324.220335][T16620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 324.220345][T16620] Call Trace: [ 324.220353][T16620] [ 324.220361][T16620] dump_stack_lvl+0x189/0x250 [ 324.220387][T16620] ? __pfx____ratelimit+0x10/0x10 [ 324.220407][T16620] ? __pfx_dump_stack_lvl+0x10/0x10 [ 324.220427][T16620] ? __pfx__printk+0x10/0x10 [ 324.220456][T16620] ? __pfx___might_resched+0x10/0x10 [ 324.220472][T16620] ? fs_reclaim_acquire+0x7d/0x100 [ 324.220495][T16620] should_fail_ex+0x414/0x560 [ 324.220524][T16620] should_failslab+0xa8/0x100 [ 324.220554][T16620] __kmalloc_noprof+0xcb/0x4f0 [ 324.220574][T16620] ? kfree+0x4d/0x440 [ 324.220591][T16620] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 324.220616][T16620] tomoyo_realpath_from_path+0xe3/0x5d0 [ 324.220637][T16620] ? tomoyo_domain+0xd9/0x130 [ 324.220662][T16620] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 324.220685][T16620] tomoyo_path_number_perm+0x1e8/0x5a0 [ 324.220711][T16620] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 324.220753][T16620] ? __lock_acquire+0xab9/0xd20 [ 324.220798][T16620] ? __fget_files+0x2a/0x420 [ 324.220818][T16620] ? __fget_files+0x2a/0x420 [ 324.220833][T16620] ? __fget_files+0x3a0/0x420 [ 324.220848][T16620] ? __fget_files+0x2a/0x420 [ 324.220869][T16620] security_file_ioctl+0xcb/0x2d0 [ 324.220893][T16620] __se_sys_ioctl+0x47/0x170 [ 324.220917][T16620] do_syscall_64+0xfa/0x3b0 [ 324.220935][T16620] ? lockdep_hardirqs_on+0x9c/0x150 [ 324.220953][T16620] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.220971][T16620] ? clear_bhb_loop+0x60/0xb0 [ 324.220992][T16620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.221009][T16620] RIP: 0033:0x7f9b54f8eec9 [ 324.221026][T16620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 324.221040][T16620] RSP: 002b:00007f9b55dc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 324.221059][T16620] RAX: ffffffffffffffda RBX: 00007f9b551e5fa0 RCX: 00007f9b54f8eec9 [ 324.221072][T16620] RDX: 0000200000000040 RSI: 00000000000089eb RDI: 0000000000000004 [ 324.221084][T16620] RBP: 00007f9b55dc7090 R08: 0000000000000000 R09: 0000000000000000 [ 324.221096][T16620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 324.221107][T16620] R13: 00007f9b551e6038 R14: 00007f9b551e5fa0 R15: 00007ffe197f1cd8 [ 324.221139][T16620] [ 324.221147][T16620] ERROR: Out of memory at tomoyo_realpath_from_path. [ 324.654933][T16635] netlink: 'syz.0.3336': attribute type 10 has an invalid length. [ 324.856832][T16635] team0: Device veth0_vlan failed to register rx_handler [ 325.131713][T16652] __nla_validate_parse: 39 callbacks suppressed [ 325.131733][T16652] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3341'. [ 325.189756][ T10] IPVS: starting estimator thread 0... [ 325.260678][T16657] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3341'. [ 325.270573][T16655] netlink: 'syz.3.3343': attribute type 23 has an invalid length. [ 325.280702][T16654] IPVS: using max 30 ests per chain, 72000 per kthread [ 325.400673][T16659] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3345'. [ 325.419060][T16659] netlink: 'syz.0.3345': attribute type 9 has an invalid length. [ 325.437731][T16667] FAULT_INJECTION: forcing a failure. [ 325.437731][T16667] name failslab, interval 1, probability 0, space 0, times 0 [ 325.444817][T16659] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3345'. [ 325.471471][ T97] block nbd3: Possible stuck request ffff888025200000: control (read@0,1024B). Runtime 240 seconds [ 325.484254][T16667] CPU: 0 UID: 0 PID: 16667 Comm: syz.3.3346 Not tainted syzkaller #0 PREEMPT(full) [ 325.484275][T16667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 325.484284][T16667] Call Trace: [ 325.484292][T16667] [ 325.484299][T16667] dump_stack_lvl+0x189/0x250 [ 325.484320][T16667] ? __pfx____ratelimit+0x10/0x10 [ 325.484335][T16667] ? __pfx_dump_stack_lvl+0x10/0x10 [ 325.484350][T16667] ? __pfx__printk+0x10/0x10 [ 325.484369][T16667] ? __pfx___might_resched+0x10/0x10 [ 325.484382][T16667] ? fs_reclaim_acquire+0x7d/0x100 [ 325.484398][T16667] should_fail_ex+0x414/0x560 [ 325.484428][T16667] should_failslab+0xa8/0x100 [ 325.484448][T16667] __kmalloc_noprof+0xcb/0x4f0 [ 325.484464][T16667] ? tomoyo_encode+0x28b/0x550 [ 325.484481][T16667] tomoyo_encode+0x28b/0x550 [ 325.484501][T16667] tomoyo_realpath_from_path+0x58d/0x5d0 [ 325.484517][T16667] ? tomoyo_domain+0xd9/0x130 [ 325.484536][T16667] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 325.484555][T16667] tomoyo_path_number_perm+0x1e8/0x5a0 [ 325.484574][T16667] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 325.484606][T16667] ? __lock_acquire+0xab9/0xd20 [ 325.484641][T16667] ? __fget_files+0x2a/0x420 [ 325.484656][T16667] ? __fget_files+0x2a/0x420 [ 325.484667][T16667] ? __fget_files+0x3a0/0x420 [ 325.484677][T16667] ? __fget_files+0x2a/0x420 [ 325.484692][T16667] security_file_ioctl+0xcb/0x2d0 [ 325.484711][T16667] __se_sys_ioctl+0x47/0x170 [ 325.484730][T16667] do_syscall_64+0xfa/0x3b0 [ 325.484744][T16667] ? lockdep_hardirqs_on+0x9c/0x150 [ 325.484758][T16667] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.484772][T16667] ? clear_bhb_loop+0x60/0xb0 [ 325.484789][T16667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.484802][T16667] RIP: 0033:0x7f8d2178eec9 [ 325.484816][T16667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 325.484827][T16667] RSP: 002b:00007f8d1f9f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 325.484842][T16667] RAX: ffffffffffffffda RBX: 00007f8d219e5fa0 RCX: 00007f8d2178eec9 [ 325.484852][T16667] RDX: 0000200000000040 RSI: 00000000000089eb RDI: 0000000000000004 [ 325.484861][T16667] RBP: 00007f8d1f9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 325.484869][T16667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 325.484877][T16667] R13: 00007f8d219e6038 R14: 00007f8d219e5fa0 R15: 00007ffe3c183648 [ 325.484900][T16667] [ 325.484925][T16667] ERROR: Out of memory at tomoyo_realpath_from_path. [ 325.485964][ T97] block nbd3: Possible stuck request ffff8880252001c0: control (read@1024,1024B). Runtime 240 seconds [ 325.541613][T16669] netlink: 220 bytes leftover after parsing attributes in process `syz.4.3347'. [ 325.542653][ T97] block nbd3: Possible stuck request ffff888025200380: control (read@2048,1024B). Runtime 240 seconds [ 325.770682][ T97] block nbd3: Possible stuck request ffff888025200540: control (read@3072,1024B). Runtime 240 seconds [ 325.802782][T16674] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3348'. [ 326.085346][T16686] tipc: Enabled bearer , priority 0 [ 326.133749][T16688] syzkaller0: entered promiscuous mode [ 326.167212][T16688] syzkaller0: entered allmulticast mode [ 326.392461][T16691] tipc: Resetting bearer [ 326.473013][T16709] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3361'. [ 326.633714][T16691] tipc: Disabling bearer [ 327.376947][T16729] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 327.501771][T16729] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 327.548511][T16733] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3367'. [ 327.562015][T16729] dummy0: left allmulticast mode [ 327.570270][T16729] bridge0: port 4(dummy0) entered disabled state [ 327.648172][T16729] bridge0: port 3(batadv0) entered disabled state [ 327.672372][T16729] bridge_slave_0: left allmulticast mode [ 327.679012][T16729] bridge_slave_0: left promiscuous mode [ 327.700962][T16729] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.747896][T16729] bridge_slave_1: left allmulticast mode [ 327.753588][T16729] bridge_slave_1: left promiscuous mode [ 327.763138][T16729] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.815359][T16729] bond0: (slave bond_slave_0): Releasing backup interface [ 327.840183][T16729] team0: Port device team_slave_0 removed [ 327.874973][T16729] team0: Port device team_slave_1 removed [ 327.882506][T16729] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 327.896167][T16729] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 327.919053][T16729] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 327.945393][T16729] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 328.013339][T16729] bond0: (slave netdevsim0): Releasing backup interface [ 328.080662][T16729] bond3: (slave gretap0): Releasing active interface [ 328.112650][T16729] bond5: left promiscuous mode [ 328.121094][T16729] bridge0: port 5(bond5) entered disabled state [ 328.143889][ T5940] lo speed is unknown, defaulting to 1000 [ 328.257338][T12022] !yz!: Port: 1 Link DOWN [ 328.294094][T16753] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3375'. [ 328.304027][T16753] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3375'. [ 329.482301][T16816] sctp: [Deprecated]: syz.0.3398 (pid 16816) Use of struct sctp_assoc_value in delayed_ack socket option. [ 329.482301][T16816] Use struct sctp_sack_info instead [ 329.500352][T16816] IPVS: set_ctl: invalid protocol: 50 100.1.1.1:20002 [ 329.960749][T16843] validate_nla: 4 callbacks suppressed [ 329.960766][T16843] netlink: 'syz.0.3407': attribute type 10 has an invalid length. [ 330.321433][T16843] team0: Device C is loopback device. Loopback devices can't be added as a team port [ 330.338017][T16843] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 330.928999][T16878] __nla_validate_parse: 2 callbacks suppressed [ 330.929017][T16878] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3413'. [ 331.228133][ T5877] Bluetooth: hci0: command 0x0c1a tx timeout [ 331.656588][T16943] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3433'. [ 331.781401][T16951] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 331.930630][T16962] netlink: 'syz.3.3436': attribute type 10 has an invalid length. [ 331.947486][T16962] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3436'. [ 331.956907][T16962] bridge0: port 1(dummy0) entered blocking state [ 331.975354][T16963] xt_HMARK: proto mask must be zero with L3 mode [ 331.985676][T16962] bridge0: port 1(dummy0) entered disabled state [ 331.994548][T16962] dummy0: entered allmulticast mode [ 332.002678][T16962] dummy0: left allmulticast mode [ 332.008462][T16962] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 332.150873][T16967] wg1 speed is unknown, defaulting to 1000 [ 332.177003][T16967] wg1 speed is unknown, defaulting to 1000 [ 332.207928][T16967] wg1 speed is unknown, defaulting to 1000 [ 332.235875][T16977] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3440'. [ 332.280223][T16977] netlink: 'syz.4.3440': attribute type 7 has an invalid length. [ 332.337169][T16977] netlink: 'syz.4.3440': attribute type 8 has an invalid length. [ 332.344943][T16977] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3440'. [ 332.395892][T16976] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3443'. [ 333.046877][T16967] infiniband syz0: set active [ 333.052722][T16967] infiniband syz0: added wg1 [ 333.057557][T12022] wg1 speed is unknown, defaulting to 1000 [ 333.065905][T16967] syz0: rxe_create_cq: returned err = -12 [ 333.073795][T16967] infiniband syz0: Couldn't create ib_mad CQ [ 333.123855][T16967] infiniband syz0: Couldn't open port 1 [ 333.197595][T17005] openvswitch: netlink: IP tunnel dst address not specified [ 333.249555][T17005] openvswitch: netlink: IP tunnel dst address not specified [ 333.260406][T16967] RDS/IB: syz0: added [ 333.264932][T16967] smc: adding ib device syz0 with port count 1 [ 333.284891][T16967] smc: ib device syz0 port 1 has pnetid [ 333.287943][T17005] openvswitch: netlink: IP tunnel dst address not specified [ 333.303865][T17012] netlink: 'syz.0.3450': attribute type 11 has an invalid length. [ 333.313614][T16967] wg1 speed is unknown, defaulting to 1000 [ 333.315001][T17005] openvswitch: netlink: IP tunnel dst address not specified [ 333.343100][ T849] wg1 speed is unknown, defaulting to 1000 [ 333.369420][T17012] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3450'. [ 333.858955][T17044] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3457'. [ 333.951254][T17049] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3459'. [ 334.073788][T16967] wg1 speed is unknown, defaulting to 1000 [ 334.199489][T17055] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3463'. [ 334.455714][T16967] wg1 speed is unknown, defaulting to 1000 [ 334.875006][T17080] netlink: 'syz.0.3472': attribute type 1 has an invalid length. [ 334.918721][T17080] 8021q: adding VLAN 0 to HW filter on device bond10 [ 334.926298][T16967] wg1 speed is unknown, defaulting to 1000 [ 334.952575][T17082] bond10: (slave veth5): Enslaving as an active interface with a down link [ 334.991115][T17080] veth7: entered promiscuous mode [ 335.003432][T17080] bond10: (slave veth7): Enslaving as an active interface with a down link [ 335.105504][T17082] vlan3: entered allmulticast mode [ 335.121078][T17082] bond10: entered allmulticast mode [ 335.134399][T17082] bond10: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 335.192679][T16967] wg1 speed is unknown, defaulting to 1000 [ 335.346551][T17044] siw: device registration error -23 [ 335.552531][T17088] ip6gre1: entered allmulticast mode [ 335.954244][T17126] netlink: 'syz.2.3486': attribute type 6 has an invalid length. [ 335.990664][T17126] __nla_validate_parse: 1 callbacks suppressed [ 335.990683][T17126] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3486'. [ 336.154082][T17138] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3488'. [ 336.185326][T17139] netlink: 'syz.2.3490': attribute type 1 has an invalid length. [ 336.248499][T17139] 8021q: adding VLAN 0 to HW filter on device bond9 [ 336.280143][T17145] 8021q: adding VLAN 0 to HW filter on device bond9 [ 336.288096][T17145] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address [ 336.303452][T17145] bond9: (slave vxcan3): Error -95 calling set_mac_address [ 336.562572][T17158] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.604975][T17160] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3497'. [ 336.619411][T17160] siw: device registration error -23 [ 337.500213][T17190] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3505'. [ 337.576861][ T5870] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 337.590328][ T5870] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 337.599974][ T5870] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 337.609279][ T5870] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 337.618282][ T5870] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 337.924541][T17207] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3511'. [ 337.970106][T17207] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3511'. [ 338.165900][T17212] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3511'. [ 338.231750][T17215] FAULT_INJECTION: forcing a failure. [ 338.231750][T17215] name failslab, interval 1, probability 0, space 0, times 0 [ 338.302136][T17215] CPU: 1 UID: 0 PID: 17215 Comm: syz.1.3512 Not tainted syzkaller #0 PREEMPT(full) [ 338.302163][T17215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 338.302175][T17215] Call Trace: [ 338.302184][T17215] [ 338.302192][T17215] dump_stack_lvl+0x189/0x250 [ 338.302216][T17215] ? __pfx____ratelimit+0x10/0x10 [ 338.302236][T17215] ? __pfx_dump_stack_lvl+0x10/0x10 [ 338.302256][T17215] ? __pfx__printk+0x10/0x10 [ 338.302284][T17215] ? __pfx___might_resched+0x10/0x10 [ 338.302299][T17215] ? fs_reclaim_acquire+0x7d/0x100 [ 338.302322][T17215] should_fail_ex+0x414/0x560 [ 338.302352][T17215] should_failslab+0xa8/0x100 [ 338.302378][T17215] __kmalloc_cache_noprof+0x70/0x3d0 [ 338.302400][T17215] ? sctp_transport_new+0x7e/0x640 [ 338.302429][T17215] sctp_transport_new+0x7e/0x640 [ 338.302453][T17215] sctp_assoc_add_peer+0x260/0x13b0 [ 338.302475][T17215] ? sctp_bind_addr_copy+0x380/0x3c0 [ 338.302501][T17215] sctp_connect_new_asoc+0x30a/0x690 [ 338.302524][T17215] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 338.302545][T17215] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 338.302565][T17215] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 338.302584][T17215] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 338.302605][T17215] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 338.302625][T17215] ? security_sctp_bind_connect+0x7e/0x2e0 [ 338.302667][T17215] sctp_sendmsg+0x155c/0x2810 [ 338.302700][T17215] ? __pfx_sctp_sendmsg+0x10/0x10 [ 338.302724][T17215] ? aa_sk_perm+0x81e/0x950 [ 338.302753][T17215] ? __pfx_aa_sk_perm+0x10/0x10 [ 338.302781][T17215] ? sock_rps_record_flow+0x19/0x410 [ 338.302806][T17215] ? inet_sendmsg+0x2f4/0x370 [ 338.302827][T17215] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 338.302850][T17215] __sock_sendmsg+0x19c/0x270 [ 338.302879][T17215] __sys_sendto+0x3bd/0x520 [ 338.302900][T17215] ? __pfx___sys_sendto+0x10/0x10 [ 338.302915][T17215] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 338.302955][T17215] ? __fget_files+0x3a0/0x420 [ 338.302985][T17215] ? ksys_write+0x22a/0x250 [ 338.303009][T17215] ? __pfx_ksys_write+0x10/0x10 [ 338.303027][T17215] ? rcu_is_watching+0x15/0xb0 [ 338.303057][T17215] __x64_sys_sendto+0xde/0x100 [ 338.303080][T17215] do_syscall_64+0xfa/0x3b0 [ 338.303098][T17215] ? lockdep_hardirqs_on+0x9c/0x150 [ 338.303115][T17215] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.303133][T17215] ? clear_bhb_loop+0x60/0xb0 [ 338.303155][T17215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.303171][T17215] RIP: 0033:0x7f138558eec9 [ 338.303188][T17215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 338.303202][T17215] RSP: 002b:00007f13864da038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 338.303222][T17215] RAX: ffffffffffffffda RBX: 00007f13857e5fa0 RCX: 00007f138558eec9 [ 338.303234][T17215] RDX: 0000000000034000 RSI: 0000200000000040 RDI: 0000000000000003 [ 338.303254][T17215] RBP: 00007f13864da090 R08: 0000200000000100 R09: 000000000000001c [ 338.303267][T17215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 338.303278][T17215] R13: 00007f13857e6038 R14: 00007f13857e5fa0 R15: 00007ffd6a6d7ff8 [ 338.303306][T17215] [ 338.345919][T17194] lo speed is unknown, defaulting to 1000 [ 338.639377][T17226] netlink: 6 bytes leftover after parsing attributes in process `syz.2.3518'. [ 338.652776][T17226] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 338.673169][T17226] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3518'. [ 338.702221][T17226] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3518'. [ 338.713399][T17194] wg1 speed is unknown, defaulting to 1000 [ 338.798612][T17237] netlink: 'syz.0.3520': attribute type 1 has an invalid length. [ 339.570212][T17267] netlink: 'syz.0.3527': attribute type 9 has an invalid length. [ 339.708166][ T5870] Bluetooth: hci5: command tx timeout [ 339.759862][T17276] FAULT_INJECTION: forcing a failure. [ 339.759862][T17276] name failslab, interval 1, probability 0, space 0, times 0 [ 339.784806][T17269] tipc: Enabled bearer , priority 0 [ 339.805609][T17274] syzkaller0: entered promiscuous mode [ 339.820922][T17274] syzkaller0: entered allmulticast mode [ 339.827689][T17276] CPU: 0 UID: 0 PID: 17276 Comm: syz.2.3529 Not tainted syzkaller #0 PREEMPT(full) [ 339.827713][T17276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 339.827723][T17276] Call Trace: [ 339.827730][T17276] [ 339.827737][T17276] dump_stack_lvl+0x189/0x250 [ 339.827767][T17276] ? __pfx____ratelimit+0x10/0x10 [ 339.827786][T17276] ? __pfx_dump_stack_lvl+0x10/0x10 [ 339.827806][T17276] ? __pfx__printk+0x10/0x10 [ 339.827835][T17276] ? __pfx___might_resched+0x10/0x10 [ 339.827849][T17276] ? fs_reclaim_acquire+0x7d/0x100 [ 339.827870][T17276] should_fail_ex+0x414/0x560 [ 339.827898][T17276] should_failslab+0xa8/0x100 [ 339.827923][T17276] __kmalloc_cache_noprof+0x70/0x3d0 [ 339.827944][T17276] ? sctp_transport_new+0x7e/0x640 [ 339.827973][T17276] sctp_transport_new+0x7e/0x640 [ 339.827999][T17276] sctp_assoc_add_peer+0x260/0x13b0 [ 339.828023][T17276] ? sctp_bind_addr_copy+0x380/0x3c0 [ 339.828048][T17276] sctp_connect_new_asoc+0x30a/0x690 [ 339.828072][T17276] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 339.828093][T17276] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 339.828114][T17276] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 339.828133][T17276] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 339.828154][T17276] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 339.828172][T17276] ? security_sctp_bind_connect+0x7e/0x2e0 [ 339.828197][T17276] sctp_sendmsg+0x155c/0x2810 [ 339.828231][T17276] ? __pfx_sctp_sendmsg+0x10/0x10 [ 339.828255][T17276] ? aa_sk_perm+0x81e/0x950 [ 339.828285][T17276] ? __pfx_aa_sk_perm+0x10/0x10 [ 339.828313][T17276] ? sock_rps_record_flow+0x19/0x410 [ 339.828338][T17276] ? inet_sendmsg+0x2f4/0x370 [ 339.828357][T17276] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 339.828378][T17276] __sock_sendmsg+0x19c/0x270 [ 339.828404][T17276] __sys_sendto+0x3bd/0x520 [ 339.828422][T17276] ? __pfx___sys_sendto+0x10/0x10 [ 339.828438][T17276] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 339.828469][T17276] ? __fget_files+0x3a0/0x420 [ 339.828495][T17276] ? ksys_write+0x22a/0x250 [ 339.828520][T17276] ? __pfx_ksys_write+0x10/0x10 [ 339.828538][T17276] ? rcu_is_watching+0x15/0xb0 [ 339.828556][T17276] __x64_sys_sendto+0xde/0x100 [ 339.828578][T17276] do_syscall_64+0xfa/0x3b0 [ 339.828595][T17276] ? lockdep_hardirqs_on+0x9c/0x150 [ 339.828609][T17276] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.828630][T17276] ? clear_bhb_loop+0x60/0xb0 [ 339.828651][T17276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.828667][T17276] RIP: 0033:0x7fe72f38eec9 [ 339.828691][T17276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 339.828703][T17276] RSP: 002b:00007fe7302b5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 339.828719][T17276] RAX: ffffffffffffffda RBX: 00007fe72f5e5fa0 RCX: 00007fe72f38eec9 [ 339.828732][T17276] RDX: 0000000000034000 RSI: 0000200000000100 RDI: 0000000000000003 [ 339.828742][T17276] RBP: 00007fe7302b5090 R08: 00002000000000c0 R09: 0000000000000010 [ 339.828754][T17276] R10: 0000000004004815 R11: 0000000000000246 R12: 0000000000000001 [ 339.828764][T17276] R13: 00007fe72f5e6038 R14: 00007fe72f5e5fa0 R15: 00007ffdf5c4b318 [ 339.828795][T17276] [ 340.211105][T17194] chnl_net:caif_netlink_parms(): no params data found [ 340.302875][T17261] tipc: Resetting bearer [ 340.404714][T17261] tipc: Disabling bearer [ 340.503016][T17292] FAULT_INJECTION: forcing a failure. [ 340.503016][T17292] name failslab, interval 1, probability 0, space 0, times 0 [ 340.521298][T17292] CPU: 0 UID: 0 PID: 17292 Comm: syz.2.3535 Not tainted syzkaller #0 PREEMPT(full) [ 340.521324][T17292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 340.521334][T17292] Call Trace: [ 340.521341][T17292] [ 340.521349][T17292] dump_stack_lvl+0x189/0x250 [ 340.521374][T17292] ? __pfx____ratelimit+0x10/0x10 [ 340.521392][T17292] ? __pfx_dump_stack_lvl+0x10/0x10 [ 340.521409][T17292] ? __pfx__printk+0x10/0x10 [ 340.521436][T17292] ? __pfx___might_resched+0x10/0x10 [ 340.521451][T17292] ? fs_reclaim_acquire+0x7d/0x100 [ 340.521473][T17292] should_fail_ex+0x414/0x560 [ 340.521503][T17292] should_failslab+0xa8/0x100 [ 340.521529][T17292] __kmalloc_noprof+0xcb/0x4f0 [ 340.521549][T17292] ? kfree+0x4d/0x440 [ 340.521565][T17292] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 340.521590][T17292] tomoyo_realpath_from_path+0xe3/0x5d0 [ 340.521611][T17292] ? tomoyo_domain+0xd9/0x130 [ 340.521636][T17292] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 340.521658][T17292] tomoyo_path_number_perm+0x1e8/0x5a0 [ 340.521683][T17292] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 340.521723][T17292] ? __lock_acquire+0xab9/0xd20 [ 340.521763][T17292] ? __fget_files+0x2a/0x420 [ 340.521779][T17292] ? __fget_files+0x2a/0x420 [ 340.521793][T17292] ? __fget_files+0x3a0/0x420 [ 340.521807][T17292] ? __fget_files+0x2a/0x420 [ 340.521834][T17292] security_file_ioctl+0xcb/0x2d0 [ 340.521857][T17292] __se_sys_ioctl+0x47/0x170 [ 340.521879][T17292] do_syscall_64+0xfa/0x3b0 [ 340.521897][T17292] ? lockdep_hardirqs_on+0x9c/0x150 [ 340.521913][T17292] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.521931][T17292] ? clear_bhb_loop+0x60/0xb0 [ 340.521950][T17292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.521966][T17292] RIP: 0033:0x7fe72f38eec9 [ 340.521983][T17292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 340.521998][T17292] RSP: 002b:00007fe7302b5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 340.522017][T17292] RAX: ffffffffffffffda RBX: 00007fe72f5e5fa0 RCX: 00007fe72f38eec9 [ 340.522028][T17292] RDX: 00002000000000c0 RSI: 000000000000890c RDI: 0000000000000004 [ 340.522038][T17292] RBP: 00007fe7302b5090 R08: 0000000000000000 R09: 0000000000000000 [ 340.522050][T17292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 340.522059][T17292] R13: 00007fe72f5e6038 R14: 00007fe72f5e5fa0 R15: 00007ffdf5c4b318 [ 340.522087][T17292] [ 340.522094][T17292] ERROR: Out of memory at tomoyo_realpath_from_path. [ 340.871941][T17194] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.900956][T17194] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.929067][T17194] bridge_slave_0: entered allmulticast mode [ 340.936902][T17194] bridge_slave_0: entered promiscuous mode [ 340.973421][T17194] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.981123][T17194] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.990694][T17313] netlink: 'syz.2.3539': attribute type 1 has an invalid length. [ 340.991414][T17194] bridge_slave_1: entered allmulticast mode [ 341.006702][T17194] bridge_slave_1: entered promiscuous mode [ 341.184373][T17326] __nla_validate_parse: 2 callbacks suppressed [ 341.184392][T17326] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3544'. [ 341.239104][T17194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.262149][T17194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.384432][T17194] team0: Port device team_slave_0 added [ 341.407731][T17338] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3547'. [ 341.422593][T17194] team0: Port device team_slave_1 added [ 341.431602][T17341] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3547'. [ 341.618326][T17194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.722804][T17194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.752486][T17194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.771665][T17194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.783187][T17194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.814599][T17194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.826365][ T5870] Bluetooth: hci5: command tx timeout [ 341.935039][T17194] hsr_slave_0: entered promiscuous mode [ 341.964582][T17194] hsr_slave_1: entered promiscuous mode [ 341.973667][T17194] debugfs: 'hsr0' already exists in 'hsr' [ 341.990561][T17194] Cannot create hsr debugfs directory [ 342.221070][T17366] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3552'. [ 342.292865][T17366] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.3552'. [ 342.484518][T17380] FAULT_INJECTION: forcing a failure. [ 342.484518][T17380] name failslab, interval 1, probability 0, space 0, times 0 [ 342.505275][T17380] CPU: 1 UID: 0 PID: 17380 Comm: syz.2.3557 Not tainted syzkaller #0 PREEMPT(full) [ 342.505301][T17380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 342.505313][T17380] Call Trace: [ 342.505321][T17380] [ 342.505329][T17380] dump_stack_lvl+0x189/0x250 [ 342.505355][T17380] ? __pfx____ratelimit+0x10/0x10 [ 342.505374][T17380] ? __pfx_dump_stack_lvl+0x10/0x10 [ 342.505394][T17380] ? __pfx__printk+0x10/0x10 [ 342.505424][T17380] ? rcu_is_watching+0x15/0xb0 [ 342.505445][T17380] should_fail_ex+0x414/0x560 [ 342.505472][T17380] should_failslab+0xa8/0x100 [ 342.505496][T17380] kmem_cache_alloc_noprof+0x73/0x3c0 [ 342.505515][T17380] ? _sctp_make_chunk+0x14e/0x430 [ 342.505537][T17380] _sctp_make_chunk+0x14e/0x430 [ 342.505559][T17380] sctp_make_init+0x58b/0xd30 [ 342.505596][T17380] ? __pfx_sctp_make_init+0x10/0x10 [ 342.505614][T17380] ? arch_stack_walk+0xfc/0x150 [ 342.505645][T17380] ? stack_trace_save+0x9c/0xe0 [ 342.505665][T17380] sctp_sf_do_prm_asoc+0xd2/0x3f0 [ 342.505691][T17380] sctp_do_sm+0x1e7/0x5a20 [ 342.505711][T17380] ? __pfx_sctp_pname+0x10/0x10 [ 342.505733][T17380] ? kasan_save_track+0x3e/0x80 [ 342.505753][T17380] ? sctp_stream_init_ext+0x57/0x180 [ 342.505774][T17380] ? sctp_sendmsg_to_asoc+0x12fd/0x1810 [ 342.505792][T17380] ? sctp_sendmsg+0x1941/0x2810 [ 342.505810][T17380] ? __sock_sendmsg+0x19c/0x270 [ 342.505831][T17380] ? __sys_sendto+0x3bd/0x520 [ 342.505848][T17380] ? do_syscall_64+0xfa/0x3b0 [ 342.505866][T17380] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.505887][T17380] ? __pfx_sctp_do_sm+0x10/0x10 [ 342.505953][T17380] ? __sk_mem_raise_allocated+0xaa9/0x1240 [ 342.505986][T17380] sctp_primitive_ASSOCIATE+0x95/0xc0 [ 342.506013][T17380] sctp_sendmsg_to_asoc+0x102d/0x1810 [ 342.506031][T17380] ? __asan_memcpy+0x40/0x70 [ 342.506059][T17380] ? sctp_assoc_add_peer+0xcfa/0x13b0 [ 342.506094][T17380] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 342.506115][T17380] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 342.506141][T17380] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 342.506162][T17380] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 342.506181][T17380] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 342.506202][T17380] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 342.506222][T17380] ? security_sctp_bind_connect+0x7e/0x2e0 [ 342.506248][T17380] sctp_sendmsg+0x1941/0x2810 [ 342.506281][T17380] ? __pfx_sctp_sendmsg+0x10/0x10 [ 342.506305][T17380] ? aa_sk_perm+0x81e/0x950 [ 342.506333][T17380] ? __pfx_aa_sk_perm+0x10/0x10 [ 342.506361][T17380] ? sock_rps_record_flow+0x19/0x410 [ 342.506387][T17380] ? inet_sendmsg+0x2f4/0x370 [ 342.506409][T17380] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 342.506432][T17380] __sock_sendmsg+0x19c/0x270 [ 342.506460][T17380] __sys_sendto+0x3bd/0x520 [ 342.506482][T17380] ? __pfx___sys_sendto+0x10/0x10 [ 342.506499][T17380] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 342.506532][T17380] ? __fget_files+0x3a0/0x420 [ 342.506562][T17380] ? ksys_write+0x22a/0x250 [ 342.506593][T17380] ? __pfx_ksys_write+0x10/0x10 [ 342.506612][T17380] ? rcu_is_watching+0x15/0xb0 [ 342.506635][T17380] __x64_sys_sendto+0xde/0x100 [ 342.506659][T17380] do_syscall_64+0xfa/0x3b0 [ 342.506677][T17380] ? lockdep_hardirqs_on+0x9c/0x150 [ 342.506695][T17380] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.506712][T17380] ? clear_bhb_loop+0x60/0xb0 [ 342.506734][T17380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.506750][T17380] RIP: 0033:0x7fe72f38eec9 [ 342.506768][T17380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 342.506783][T17380] RSP: 002b:00007fe7302b5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 342.506802][T17380] RAX: ffffffffffffffda RBX: 00007fe72f5e5fa0 RCX: 00007fe72f38eec9 [ 342.506816][T17380] RDX: 0000000000034000 RSI: 0000200000000040 RDI: 0000000000000003 [ 342.506828][T17380] RBP: 00007fe7302b5090 R08: 0000200000000100 R09: 000000000000001c [ 342.506839][T17380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 342.506850][T17380] R13: 00007fe72f5e6038 R14: 00007fe72f5e5fa0 R15: 00007ffdf5c4b318 [ 342.506881][T17380] [ 342.925686][T17384] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3556'. [ 342.935007][T17384] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3556'. [ 343.085481][T17388] FAULT_INJECTION: forcing a failure. [ 343.085481][T17388] name failslab, interval 1, probability 0, space 0, times 0 [ 343.102855][T17388] CPU: 1 UID: 0 PID: 17388 Comm: syz.2.3558 Not tainted syzkaller #0 PREEMPT(full) [ 343.102881][T17388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 343.102893][T17388] Call Trace: [ 343.102901][T17388] [ 343.102909][T17388] dump_stack_lvl+0x189/0x250 [ 343.102934][T17388] ? __pfx____ratelimit+0x10/0x10 [ 343.102954][T17388] ? __pfx_dump_stack_lvl+0x10/0x10 [ 343.102973][T17388] ? __pfx__printk+0x10/0x10 [ 343.102995][T17388] ? __lock_acquire+0xab9/0xd20 [ 343.103025][T17388] should_fail_ex+0x414/0x560 [ 343.103056][T17388] should_failslab+0xa8/0x100 [ 343.103081][T17388] kmem_cache_alloc_noprof+0x73/0x3c0 [ 343.103101][T17388] ? skb_clone+0x212/0x3a0 [ 343.103128][T17388] skb_clone+0x212/0x3a0 [ 343.103153][T17388] __netlink_deliver_tap+0x404/0x850 [ 343.103185][T17388] ? netlink_deliver_tap+0x2e/0x1b0 [ 343.103205][T17388] netlink_deliver_tap+0x19c/0x1b0 [ 343.103225][T17388] netlink_unicast+0x7fa/0x9e0 [ 343.103259][T17388] ? __pfx_netlink_unicast+0x10/0x10 [ 343.103292][T17388] ? netlink_sendmsg+0x642/0xb30 [ 343.103309][T17388] ? skb_put+0x11b/0x210 [ 343.103332][T17388] netlink_sendmsg+0x805/0xb30 [ 343.103361][T17388] ? __pfx_netlink_sendmsg+0x10/0x10 [ 343.103384][T17388] ? aa_sock_msg_perm+0xf1/0x1d0 [ 343.103404][T17388] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 343.103423][T17388] ? __pfx_netlink_sendmsg+0x10/0x10 [ 343.103443][T17388] __sock_sendmsg+0x219/0x270 [ 343.103470][T17388] ____sys_sendmsg+0x505/0x830 [ 343.103498][T17388] ? __pfx_____sys_sendmsg+0x10/0x10 [ 343.103529][T17388] ? import_iovec+0x74/0xa0 [ 343.103555][T17388] ___sys_sendmsg+0x21f/0x2a0 [ 343.103579][T17388] ? __pfx____sys_sendmsg+0x10/0x10 [ 343.103639][T17388] ? __fget_files+0x2a/0x420 [ 343.103655][T17388] ? __fget_files+0x3a0/0x420 [ 343.103682][T17388] __x64_sys_sendmsg+0x19b/0x260 [ 343.103704][T17388] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 343.103733][T17388] ? __pfx_ksys_write+0x10/0x10 [ 343.103751][T17388] ? rcu_is_watching+0x15/0xb0 [ 343.103774][T17388] ? do_syscall_64+0xbe/0x3b0 [ 343.103797][T17388] do_syscall_64+0xfa/0x3b0 [ 343.103814][T17388] ? lockdep_hardirqs_on+0x9c/0x150 [ 343.103830][T17388] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.103847][T17388] ? clear_bhb_loop+0x60/0xb0 [ 343.103867][T17388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.103884][T17388] RIP: 0033:0x7fe72f38eec9 [ 343.103900][T17388] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 343.103913][T17388] RSP: 002b:00007fe7302b5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 343.103932][T17388] RAX: ffffffffffffffda RBX: 00007fe72f5e5fa0 RCX: 00007fe72f38eec9 [ 343.103943][T17388] RDX: 0000000000048010 RSI: 0000200000000280 RDI: 0000000000000003 [ 343.103954][T17388] RBP: 00007fe7302b5090 R08: 0000000000000000 R09: 0000000000000000 [ 343.103965][T17388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 343.103974][T17388] R13: 00007fe72f5e6038 R14: 00007fe72f5e5fa0 R15: 00007ffdf5c4b318 [ 343.104005][T17388] [ 343.423602][T17391] FAULT_INJECTION: forcing a failure. [ 343.423602][T17391] name failslab, interval 1, probability 0, space 0, times 0 [ 343.437154][T17391] CPU: 1 UID: 0 PID: 17391 Comm: syz.1.3561 Not tainted syzkaller #0 PREEMPT(full) [ 343.437178][T17391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 343.437190][T17391] Call Trace: [ 343.437197][T17391] [ 343.437206][T17391] dump_stack_lvl+0x189/0x250 [ 343.437230][T17391] ? __pfx____ratelimit+0x10/0x10 [ 343.437248][T17391] ? __pfx_dump_stack_lvl+0x10/0x10 [ 343.437277][T17391] ? __pfx__printk+0x10/0x10 [ 343.437301][T17391] ? __pfx___might_resched+0x10/0x10 [ 343.437318][T17391] ? fs_reclaim_acquire+0x7d/0x100 [ 343.437341][T17391] should_fail_ex+0x414/0x560 [ 343.437368][T17391] should_failslab+0xa8/0x100 [ 343.437393][T17391] __kmalloc_noprof+0xcb/0x4f0 [ 343.437413][T17391] ? tomoyo_encode+0x28b/0x550 [ 343.437436][T17391] tomoyo_encode+0x28b/0x550 [ 343.437459][T17391] tomoyo_realpath_from_path+0x58d/0x5d0 [ 343.437478][T17391] ? tomoyo_domain+0xd9/0x130 [ 343.437501][T17391] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 343.437522][T17391] tomoyo_path_number_perm+0x1e8/0x5a0 [ 343.437546][T17391] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 343.437589][T17391] ? __lock_acquire+0xab9/0xd20 [ 343.437633][T17391] ? __fget_files+0x2a/0x420 [ 343.437653][T17391] ? __fget_files+0x2a/0x420 [ 343.437668][T17391] ? __fget_files+0x3a0/0x420 [ 343.437683][T17391] ? __fget_files+0x2a/0x420 [ 343.437704][T17391] security_file_ioctl+0xcb/0x2d0 [ 343.437729][T17391] __se_sys_ioctl+0x47/0x170 [ 343.437752][T17391] do_syscall_64+0xfa/0x3b0 [ 343.437770][T17391] ? lockdep_hardirqs_on+0x9c/0x150 [ 343.437788][T17391] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.437806][T17391] ? clear_bhb_loop+0x60/0xb0 [ 343.437827][T17391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.437844][T17391] RIP: 0033:0x7f138558eec9 [ 343.437861][T17391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 343.437876][T17391] RSP: 002b:00007f13864da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 343.437896][T17391] RAX: ffffffffffffffda RBX: 00007f13857e5fa0 RCX: 00007f138558eec9 [ 343.437909][T17391] RDX: 00002000000000c0 RSI: 000000000000890c RDI: 0000000000000004 [ 343.437922][T17391] RBP: 00007f13864da090 R08: 0000000000000000 R09: 0000000000000000 [ 343.437934][T17391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 343.437945][T17391] R13: 00007f13857e6038 R14: 00007f13857e5fa0 R15: 00007ffd6a6d7ff8 [ 343.437976][T17391] [ 343.437996][T17391] ERROR: Out of memory at tomoyo_realpath_from_path. [ 343.696194][T17388] team0: Device ip6gre1 is up. Set it down before adding it as a team port [ 343.804150][T17194] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 343.867396][ T5870] Bluetooth: hci5: command tx timeout [ 343.873294][T17399] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3563'. [ 343.902777][T17194] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 343.922026][T17399] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3563'. [ 343.931547][T17399] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3563'. [ 344.084161][T17194] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.169904][T17392] lo speed is unknown, defaulting to 1000 [ 344.185297][T17392] wg1 speed is unknown, defaulting to 1000 [ 344.226411][T17194] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.249923][T17394] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 344.626562][T17194] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 344.673467][T17194] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 344.695651][T17194] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 344.725310][T17194] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 344.789098][T17426] FAULT_INJECTION: forcing a failure. [ 344.789098][T17426] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 344.811155][T17426] CPU: 0 UID: 0 PID: 17426 Comm: syz.4.3571 Not tainted syzkaller #0 PREEMPT(full) [ 344.811180][T17426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 344.811191][T17426] Call Trace: [ 344.811200][T17426] [ 344.811209][T17426] dump_stack_lvl+0x189/0x250 [ 344.811234][T17426] ? __pfx____ratelimit+0x10/0x10 [ 344.811254][T17426] ? __pfx_dump_stack_lvl+0x10/0x10 [ 344.811274][T17426] ? __pfx__printk+0x10/0x10 [ 344.811310][T17426] should_fail_ex+0x414/0x560 [ 344.811347][T17426] _copy_to_user+0x31/0xb0 [ 344.811372][T17426] simple_read_from_buffer+0xe1/0x170 [ 344.811401][T17426] proc_fail_nth_read+0x1b3/0x220 [ 344.811425][T17426] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 344.811448][T17426] ? rw_verify_area+0x2a6/0x4d0 [ 344.811469][T17426] ? __lock_acquire+0xab9/0xd20 [ 344.811490][T17426] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 344.811511][T17426] vfs_read+0x200/0xa30 [ 344.811532][T17426] ? fdget_pos+0x247/0x320 [ 344.811553][T17426] ? __pfx___mutex_lock+0x10/0x10 [ 344.811574][T17426] ? __pfx_vfs_read+0x10/0x10 [ 344.811598][T17426] ? __fget_files+0x2a/0x420 [ 344.811619][T17426] ? __fget_files+0x3a0/0x420 [ 344.811634][T17426] ? __fget_files+0x2a/0x420 [ 344.811660][T17426] ksys_read+0x145/0x250 [ 344.811680][T17426] ? __fget_files+0x3a0/0x420 [ 344.811696][T17426] ? __pfx_ksys_read+0x10/0x10 [ 344.811723][T17426] ? do_syscall_64+0xbe/0x3b0 [ 344.811745][T17426] do_syscall_64+0xfa/0x3b0 [ 344.811763][T17426] ? lockdep_hardirqs_on+0x9c/0x150 [ 344.811781][T17426] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.811799][T17426] ? clear_bhb_loop+0x60/0xb0 [ 344.811821][T17426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.811838][T17426] RIP: 0033:0x7fd99ff8d8dc [ 344.811855][T17426] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 344.811871][T17426] RSP: 002b:00007fd9a0e19030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 344.811890][T17426] RAX: ffffffffffffffda RBX: 00007fd9a01e5fa0 RCX: 00007fd99ff8d8dc [ 344.811903][T17426] RDX: 000000000000000f RSI: 00007fd9a0e190a0 RDI: 0000000000000003 [ 344.811915][T17426] RBP: 00007fd9a0e19090 R08: 0000000000000000 R09: 0000000000000000 [ 344.811927][T17426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 344.811938][T17426] R13: 00007fd9a01e6038 R14: 00007fd9a01e5fa0 R15: 00007ffcddc38b68 [ 344.811969][T17426] [ 345.087932][T17419] tipc: Enabled bearer , priority 0 [ 345.095744][T17419] syzkaller0: entered promiscuous mode [ 345.101357][T17419] syzkaller0: entered allmulticast mode [ 345.197928][T17432] tipc: Resetting bearer [ 345.240241][T17194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.260419][T17194] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.285355][ T9564] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.292580][ T9564] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.452788][T16909] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.460058][T16909] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.476133][ T5870] Bluetooth: hci0: command 0x0c1a tx timeout [ 345.496258][T17418] tipc: Resetting bearer [ 345.525979][T17418] tipc: Disabling bearer [ 345.958478][ T5870] Bluetooth: hci5: command tx timeout [ 346.224819][T17194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.444276][T17194] veth0_vlan: entered promiscuous mode [ 346.474824][T17194] veth1_vlan: entered promiscuous mode [ 346.641633][T17194] veth0_macvtap: entered promiscuous mode [ 346.696551][T17194] veth1_macvtap: entered promiscuous mode [ 346.743255][T17194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 346.784550][T17194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 346.821878][T17484] __nla_validate_parse: 9 callbacks suppressed [ 346.821898][T17484] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3585'. [ 346.843623][ T9564] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.872481][ T9564] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.924017][T17488] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3586'. [ 346.945755][T17493] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3585'. [ 347.213616][ T9564] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.269942][ T9564] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.297883][T17497] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3587'. [ 347.306940][T17497] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3587'. [ 347.538289][T16909] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.578218][T16909] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.681190][ T9564] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.704555][T17512] netlink: 'syz.4.3594': attribute type 1 has an invalid length. [ 347.721486][ T9564] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.864531][T17512] bond7: (slave ip6gretap2): Enslaving as an active interface with an up link [ 348.064113][T17512] veth5: entered promiscuous mode [ 348.243284][T17530] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3600'. [ 348.292320][T17537] bond11: entered promiscuous mode [ 348.341703][T17537] 8021q: adding VLAN 0 to HW filter on device bond11 [ 348.422518][T17542] netlink: 33836 bytes leftover after parsing attributes in process `syz.2.3601'. [ 348.492400][ T5877] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 348.506366][ T5877] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 348.518231][ T5877] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 348.526825][ T5877] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 348.536911][ T5877] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 348.884826][T17561] netlink: 87 bytes leftover after parsing attributes in process `syz.2.3609'. [ 349.441624][T17548] lo speed is unknown, defaulting to 1000 [ 349.464200][T17548] wg1 speed is unknown, defaulting to 1000 [ 350.018084][T17600] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 350.201099][T17548] chnl_net:caif_netlink_parms(): no params data found [ 350.476988][T17548] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.485560][T17548] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.498440][T17548] bridge_slave_0: entered allmulticast mode [ 350.506557][T17548] bridge_slave_0: entered promiscuous mode [ 350.540412][T17548] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.566269][T17548] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.589163][ T5870] Bluetooth: hci2: command tx timeout [ 350.590109][T17548] bridge_slave_1: entered allmulticast mode [ 350.606206][T17548] bridge_slave_1: entered promiscuous mode [ 350.685522][T17548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.702418][T17548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.745864][T17548] team0: Port device team_slave_0 added [ 350.761847][T17548] team0: Port device team_slave_1 added [ 350.832937][T17548] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.850951][T17548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.882333][T17548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.909400][T17548] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.926638][T17548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.964115][T17548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.114236][T17548] hsr_slave_0: entered promiscuous mode [ 351.133636][T17548] hsr_slave_1: entered promiscuous mode [ 351.148391][T17548] debugfs: 'hsr0' already exists in 'hsr' [ 351.159872][T17548] Cannot create hsr debugfs directory [ 351.671477][T17548] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 351.692630][T17548] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.725579][T17548] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 351.761510][T17548] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 351.837005][T17680] netlink: 'syz.4.3651': attribute type 2 has an invalid length. [ 351.850840][T17680] netlink: 'syz.4.3651': attribute type 1 has an invalid length. [ 351.888827][T17548] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 351.914272][T17548] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.937266][T17548] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 351.958300][T17548] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 352.028535][ T5870] Bluetooth: hci0: command 0x0c1a tx timeout [ 352.036333][ T5877] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 352.112633][T17548] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 352.147292][T17548] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.163504][T17548] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 352.179703][T17548] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 352.324154][T17548] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 352.386792][T17548] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.417638][T17548] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 352.464867][T17548] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 352.484388][T17693] tipc: Started in network mode [ 352.491405][T17693] tipc: Node identity 463cf09f4646, cluster identity 4711 [ 352.502902][T17693] tipc: Enabled bearer , priority 0 [ 352.520474][T17689] tipc: Resetting bearer [ 352.668989][ T5877] Bluetooth: hci2: command tx timeout [ 353.497448][ T849] tipc: Node number set to 8056991 [ 354.108335][ T5877] Bluetooth: hci0: command 0x0c1a tx timeout [ 354.382104][T17689] tipc: Disabling bearer [ 354.736688][T17548] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 354.748292][ T5877] Bluetooth: hci2: command tx timeout [ 354.765733][T17548] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 354.786487][T17548] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 354.822799][T17548] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 354.915236][T17764] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1536) ! [ 355.082722][T17768] netlink: 'syz.4.3683': attribute type 10 has an invalid length. [ 355.124423][T17768] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 355.200438][T17548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.286235][T17548] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.340853][T16909] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.348132][T16909] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.421088][T16909] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.428316][T16909] bridge0: port 2(bridge_slave_1) entered forwarding state [ 355.503557][T17788] TCP: TCP_TX_DELAY enabled [ 355.558646][ T97] block nbd3: Possible stuck request ffff888025200000: control (read@0,1024B). Runtime 270 seconds [ 355.569586][ T97] block nbd3: Possible stuck request ffff8880252001c0: control (read@1024,1024B). Runtime 270 seconds [ 355.581901][T17791] netlink: 'syz.3.3690': attribute type 83 has an invalid length. [ 355.695954][T17799] FAULT_INJECTION: forcing a failure. [ 355.695954][T17799] name failslab, interval 1, probability 0, space 0, times 0 [ 355.715426][T17799] CPU: 0 UID: 0 PID: 17799 Comm: syz.0.3693 Not tainted syzkaller #0 PREEMPT(full) [ 355.715452][T17799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 355.715463][T17799] Call Trace: [ 355.715470][T17799] [ 355.715478][T17799] dump_stack_lvl+0x189/0x250 [ 355.715502][T17799] ? __pfx____ratelimit+0x10/0x10 [ 355.715525][T17799] ? __pfx_dump_stack_lvl+0x10/0x10 [ 355.715545][T17799] ? __pfx__printk+0x10/0x10 [ 355.715574][T17799] ? __pfx___might_resched+0x10/0x10 [ 355.715596][T17799] should_fail_ex+0x414/0x560 [ 355.715624][T17799] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 355.715642][T17799] should_failslab+0xa8/0x100 [ 355.715666][T17799] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 355.715681][T17799] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 355.715703][T17799] ? alloc_inode+0x6a/0x1b0 [ 355.715724][T17799] ? __pfx_simple_start_creating+0x10/0x10 [ 355.715744][T17799] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 355.715759][T17799] alloc_inode+0x6a/0x1b0 [ 355.715784][T17799] new_inode+0x22/0x170 [ 355.715804][T17799] __debugfs_create_file+0x14d/0x4f0 [ 355.715833][T17799] debugfs_create_file_full+0x3f/0x60 [ 355.715858][T17799] ref_tracker_dir_debugfs+0x14e/0x270 [ 355.715876][T17799] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 355.715919][T17799] ? rcu_is_watching+0x15/0xb0 [ 355.715935][T17799] ? alloc_netdev_mqs+0xa3/0x11b0 [ 355.715961][T17799] ? __raw_spin_lock_init+0x45/0x100 [ 355.715982][T17799] alloc_netdev_mqs+0x26f/0x11b0 [ 355.716001][T17799] ? __pfx_ip6gre_tunnel_setup+0x10/0x10 [ 355.716031][T17799] rtnl_create_link+0x31f/0xd10 [ 355.716060][T17799] rtnl_newlink_create+0x25c/0xb00 [ 355.716086][T17799] ? __mutex_lock+0x5bb/0x1350 [ 355.716111][T17799] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 355.716135][T17799] ? __pfx___mutex_lock+0x10/0x10 [ 355.716174][T17799] ? ns_capable+0x8a/0xf0 [ 355.716195][T17799] rtnl_newlink+0x16d6/0x1c70 [ 355.716215][T17799] ? netlink_sendmsg+0x805/0xb30 [ 355.716252][T17799] ? __pfx_rtnl_newlink+0x10/0x10 [ 355.716294][T17799] ? kasan_quarantine_put+0xdd/0x220 [ 355.716315][T17799] ? lockdep_hardirqs_on+0x9c/0x150 [ 355.716338][T17799] ? nlmon_xmit+0xb0/0x100 [ 355.716356][T17801] netlink: 'syz.4.3694': attribute type 11 has an invalid length. [ 355.716354][T17799] ? kmem_cache_free+0x18f/0x400 [ 355.716383][T17799] ? __local_bh_enable_ip+0x12d/0x1c0 [ 355.716401][T17799] ? lockdep_hardirqs_on+0x9c/0x150 [ 355.716415][T17799] ? __local_bh_enable_ip+0x12d/0x1c0 [ 355.716430][T17799] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 355.716450][T17799] ? __dev_queue_xmit+0x27b/0x3b50 [ 355.716472][T17799] ? __dev_queue_xmit+0x27b/0x3b50 [ 355.716491][T17799] ? __dev_queue_xmit+0x27b/0x3b50 [ 355.716514][T17799] ? __dev_queue_xmit+0x1d79/0x3b50 [ 355.716540][T17799] ? __lock_acquire+0xab9/0xd20 [ 355.716590][T17799] ? __pfx_rtnl_newlink+0x10/0x10 [ 355.716608][T17799] rtnetlink_rcv_msg+0x7cf/0xb70 [ 355.716630][T17799] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 355.716647][T17799] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 355.716663][T17799] ? ref_tracker_free+0x63a/0x7d0 [ 355.716681][T17799] ? __asan_memcpy+0x40/0x70 [ 355.716698][T17799] ? __pfx_ref_tracker_free+0x10/0x10 [ 355.716727][T17799] netlink_rcv_skb+0x205/0x470 [ 355.716747][T17799] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 355.716766][T17799] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 355.716798][T17799] ? netlink_deliver_tap+0x2e/0x1b0 [ 355.716824][T17799] netlink_unicast+0x82f/0x9e0 [ 355.716857][T17799] ? __pfx_netlink_unicast+0x10/0x10 [ 355.716883][T17799] ? netlink_sendmsg+0x642/0xb30 [ 355.716898][T17799] ? skb_put+0x11b/0x210 [ 355.716921][T17799] netlink_sendmsg+0x805/0xb30 [ 355.716949][T17799] ? __pfx_netlink_sendmsg+0x10/0x10 [ 355.716971][T17799] ? aa_sock_msg_perm+0xf1/0x1d0 [ 355.716990][T17799] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 355.717007][T17799] ? __pfx_netlink_sendmsg+0x10/0x10 [ 355.717025][T17799] __sock_sendmsg+0x219/0x270 [ 355.717053][T17799] ____sys_sendmsg+0x505/0x830 [ 355.717079][T17799] ? __pfx_____sys_sendmsg+0x10/0x10 [ 355.717109][T17799] ? import_iovec+0x74/0xa0 [ 355.717134][T17799] ___sys_sendmsg+0x21f/0x2a0 [ 355.717157][T17799] ? __pfx____sys_sendmsg+0x10/0x10 [ 355.717217][T17799] ? __fget_files+0x2a/0x420 [ 355.717232][T17799] ? __fget_files+0x3a0/0x420 [ 355.717267][T17799] __x64_sys_sendmsg+0x19b/0x260 [ 355.717291][T17799] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 355.717326][T17799] ? __pfx_ksys_write+0x10/0x10 [ 355.717345][T17799] ? rcu_is_watching+0x15/0xb0 [ 355.717368][T17799] ? do_syscall_64+0xbe/0x3b0 [ 355.717391][T17799] do_syscall_64+0xfa/0x3b0 [ 355.717407][T17799] ? lockdep_hardirqs_on+0x9c/0x150 [ 355.717425][T17799] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.717442][T17799] ? clear_bhb_loop+0x60/0xb0 [ 355.717462][T17799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.717479][T17799] RIP: 0033:0x7f9b54f8eec9 [ 355.717495][T17799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 355.717509][T17799] RSP: 002b:00007f9b55dc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 355.717527][T17799] RAX: ffffffffffffffda RBX: 00007f9b551e5fa0 RCX: 00007f9b54f8eec9 [ 355.717541][T17799] RDX: 0000000000048010 RSI: 0000200000000280 RDI: 0000000000000003 [ 355.717552][T17799] RBP: 00007f9b55dc7090 R08: 0000000000000000 R09: 0000000000000000 [ 355.717563][T17799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 355.717574][T17799] R13: 00007f9b551e6038 R14: 00007f9b551e5fa0 R15: 00007ffe197f1cd8 [ 355.717604][T17799] [ 355.748677][T17799] debugfs: out of free dentries, can not create file 'netdev@ffff888054cc4610' [ 355.752817][T17801] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3694'. [ 356.285866][ T97] block nbd3: Possible stuck request ffff888025200380: control (read@2048,1024B). Runtime 270 seconds [ 356.296967][ T97] block nbd3: Possible stuck request ffff888025200540: control (read@3072,1024B). Runtime 270 seconds [ 356.580110][T17820] tipc: Enabled bearer , priority 0 [ 356.633638][T17826] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3701'. [ 356.635989][T17548] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.693728][T17820] syzkaller0: entered promiscuous mode [ 356.703910][T17820] syzkaller0: entered allmulticast mode [ 356.816952][T17829] tipc: Resetting bearer [ 356.839169][ T5877] Bluetooth: hci2: command tx timeout [ 356.920181][T17818] tipc: Resetting bearer [ 356.964477][T17818] tipc: Disabling bearer [ 357.113033][T17548] veth0_vlan: entered promiscuous mode [ 357.150026][T17548] veth1_vlan: entered promiscuous mode [ 357.275507][T17548] veth0_macvtap: entered promiscuous mode [ 357.403275][T17548] veth1_macvtap: entered promiscuous mode [ 357.449337][T17548] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 357.520712][T17548] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 357.563381][ T59] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.581093][ T59] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.600935][ T59] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.616687][ T59] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.809252][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.862143][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.973967][T17889] netlink: 'syz.0.3718': attribute type 23 has an invalid length. [ 357.993685][ T9564] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.025147][ T9564] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.413076][T17904] netlink: 'syz.4.3722': attribute type 2 has an invalid length. [ 358.421404][T17908] netlink: 'syz.3.3721': attribute type 10 has an invalid length. [ 358.435904][T17907] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3723'. [ 358.462172][T17904] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3722'. [ 358.502914][T17904] nbd: must specify at least one socket [ 358.536690][T17912] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3722'. [ 358.576107][T17912] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3722'. [ 358.674736][T17908] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 358.967338][T17925] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3726'. [ 359.424748][ T5870] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 359.440850][ T5870] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 359.449167][ T5870] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 359.512795][ T5870] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 359.522839][ T5870] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 359.911392][T17955] dummy0: left promiscuous mode [ 359.956508][T17955] batadv0: left promiscuous mode [ 359.973467][T17955] batadv0: left allmulticast mode [ 360.080929][T17955] wg2: left promiscuous mode [ 360.085766][T17955] wg2: left allmulticast mode [ 360.558988][T17955] ipvlan0: left allmulticast mode [ 360.564316][T17955] veth0_vlan: left allmulticast mode [ 360.692092][T17955] gretap0: left promiscuous mode [ 360.698524][T17955] ip6gre1: left allmulticast mode [ 360.716666][T17955] bond5: left allmulticast mode [ 360.766557][T17955] veth5: left promiscuous mode [ 360.781975][T12022] lo speed is unknown, defaulting to 1000 [ 360.801916][T12020] wg1 speed is unknown, defaulting to 1000 [ 360.817199][T12022] syz2: Port: 1 Link DOWN [ 360.825450][T12020] syz0: Port: 1 Link DOWN [ 360.900677][T16909] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.923126][T16909] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.942695][T16909] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.962110][T16909] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.972008][T16909] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.998629][T17984] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3737'. [ 361.007105][T16909] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.010405][T17984] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3737'. [ 361.033182][T12022] wg1 speed is unknown, defaulting to 1000 [ 361.063149][T16909] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 361.084081][T16909] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.239726][T17992] Bluetooth: MGMT ver 1.23 [ 361.483894][T18005] netlink: 'syz.0.3746': attribute type 5 has an invalid length. [ 361.498818][T17949] lo speed is unknown, defaulting to 1000 [ 361.517742][T17949] wg1 speed is unknown, defaulting to 1000 [ 361.628060][ T5870] Bluetooth: hci0: command tx timeout [ 361.986299][T17964] lo speed is unknown, defaulting to 1000 [ 362.009582][T17964] wg1 speed is unknown, defaulting to 1000 [ 362.176058][T17949] chnl_net:caif_netlink_parms(): no params data found [ 362.280376][T18021] dvmrp0: entered allmulticast mode [ 362.412064][T17949] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.421583][T17949] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.430935][T17949] bridge_slave_0: entered allmulticast mode [ 362.439422][T17949] bridge_slave_0: entered promiscuous mode [ 362.469924][T17949] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.479672][T17949] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.493742][T17949] bridge_slave_1: entered allmulticast mode [ 362.536316][T17949] bridge_slave_1: entered promiscuous mode [ 362.884463][T17949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 362.918919][T17949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 363.199412][T17949] team0: Port device team_slave_0 added [ 363.225497][T18051] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3757'. [ 363.237356][T18051] netlink: 'syz.3.3757': attribute type 5 has an invalid length. [ 363.245118][T18051] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3757'. [ 363.283746][T17949] team0: Port device team_slave_1 added [ 363.309977][ T5877] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 363.388514][T17949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 363.399642][T17949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.433599][T17949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 363.453819][T17949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 363.466110][T17949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.498477][T17949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.691649][T17949] hsr_slave_0: entered promiscuous mode [ 363.707959][ T5877] Bluetooth: hci0: command 0x041b tx timeout [ 363.708439][T17949] hsr_slave_1: entered promiscuous mode [ 363.726911][T18063] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.3762'. [ 363.734183][T17949] debugfs: 'hsr0' already exists in 'hsr' [ 363.751231][T17949] Cannot create hsr debugfs directory [ 363.935294][T18073] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3766'. [ 363.959404][T18073] netlink: 10 bytes leftover after parsing attributes in process `syz.4.3766'. [ 363.977857][T18068] syzkaller1: entered promiscuous mode [ 363.983484][T18068] syzkaller1: entered allmulticast mode [ 364.265609][T18088] tipc: Enabling of bearer rejected, failed to enable media [ 364.351216][T17949] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 364.384563][T17949] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 364.409209][T18096] netlink: 348 bytes leftover after parsing attributes in process `syz.0.3774'. [ 364.483895][T18098] tipc: Enabled bearer , priority 0 [ 364.500778][T18098] syzkaller0: entered promiscuous mode [ 364.512713][T18098] syzkaller0: entered allmulticast mode [ 364.539198][T17949] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 364.550074][T17949] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 364.551862][T18099] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3775'. [ 364.572510][T18098] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3775'. [ 364.613902][T18097] tipc: Resetting bearer [ 364.659644][T18097] tipc: Disabling bearer [ 364.704369][T17949] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 364.747370][T17949] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 364.836758][T17949] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 364.925379][T17949] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 365.318941][T18129] team0: Device ip6gre1 is of different type [ 365.445012][T17949] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 365.464789][T17949] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 365.515177][T17949] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 365.562593][T17949] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 365.789050][ T5877] Bluetooth: hci0: command 0x041b tx timeout [ 365.905112][T18148] netlink: 'syz.3.3791': attribute type 10 has an invalid length. [ 365.917826][T16914] ------------[ cut here ]------------ [ 365.923639][T16914] RTNL: assertion failed at ./include/net/netdev_lock.h (72) [ 365.942642][T18148] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.948171][T16914] WARNING: CPU: 0 PID: 16914 at ./include/net/netdev_lock.h:72 __linkwatch_sync_dev+0x303/0x350 [ 365.950390][T18148] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.960206][T16914] Modules linked in: [ 365.971521][T16914] CPU: 0 UID: 0 PID: 16914 Comm: kworker/u8:23 Not tainted syzkaller #0 PREEMPT(full) [ 365.981214][T16914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 365.991348][T16914] Workqueue: bond0 bond_mii_monitor [ 365.996589][T16914] RIP: 0010:__linkwatch_sync_dev+0x303/0x350 [ 366.002736][T16914] Code: 7c fe ff ff e8 ae 96 53 f8 c6 05 2b 88 21 06 01 90 48 c7 c7 e0 d6 94 8c 48 c7 c6 46 16 a0 8d ba 48 00 00 00 e8 5e 33 17 f8 90 <0f> 0b 90 90 e9 4d fe ff ff 44 89 f1 80 e1 07 38 c1 0f 8c 22 fd ff [ 366.003679][T18148] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.022698][T16914] RSP: 0018:ffffc9001a6bf670 EFLAGS: 00010246 [ 366.029595][T18148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.030032][T18148] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.035810][T16914] [ 366.035819][T16914] RAX: efeeb8fd720f0a00 RBX: ffff888028300000 RCX: ffff88802b7e1e00 [ 366.043141][T18148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.068165][T16914] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 366.076154][T16914] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 366.084522][T16914] R10: dffffc0000000000 R11: fffffbfff1bfa22c R12: 1ffff1100506005d [ 366.092730][T16914] R13: dffffc0000000000 R14: ffffffff8c1d0048 R15: 0000000000000000 [ 366.100863][T16914] FS: 0000000000000000(0000) GS:ffff888125c12000(0000) knlGS:0000000000000000 [ 366.109946][T16914] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 366.116546][T16914] CR2: 0000200000ffd000 CR3: 00000000545b0000 CR4: 00000000003526f0 [ 366.124966][T16914] Call Trace: [ 366.128370][T16914] [ 366.131306][T16914] ? ethtool_op_get_link+0xd/0x70 [ 366.136347][T16914] ethtool_op_get_link+0x15/0x70 [ 366.141366][T16914] bond_check_dev_link+0x444/0x6c0 [ 366.146706][T16914] ? __pfx_bond_check_dev_link+0x10/0x10 [ 366.152649][T16914] ? netdev_lower_get_next_private_rcu+0x9f/0x100 [ 366.159134][T16914] bond_mii_monitor+0x428/0x2e00 [ 366.164102][T16914] ? bond_mii_monitor+0x153/0x2e00 [ 366.169314][T16914] ? __pfx_bond_mii_monitor+0x10/0x10 [ 366.174707][T16914] ? register_lock_class+0x51/0x320 [ 366.179971][T16914] ? __lock_acquire+0xab9/0xd20 [ 366.184855][T16914] ? process_scheduled_works+0x9ef/0x17b0 [ 366.190741][T16914] ? _raw_spin_unlock_irq+0x23/0x50 [ 366.195951][T16914] ? process_scheduled_works+0x9ef/0x17b0 [ 366.201758][T16914] ? process_scheduled_works+0x9ef/0x17b0 [ 366.207575][T16914] process_scheduled_works+0xae1/0x17b0 [ 366.213302][T16914] ? __pfx_process_scheduled_works+0x10/0x10 [ 366.219407][T16914] worker_thread+0x8a0/0xda0 [ 366.224053][T16914] kthread+0x70e/0x8a0 [ 366.228336][T16914] ? __pfx_worker_thread+0x10/0x10 [ 366.233471][T16914] ? __pfx_kthread+0x10/0x10 [ 366.238172][T16914] ? _raw_spin_unlock_irq+0x23/0x50 [ 366.243388][T16914] ? lockdep_hardirqs_on+0x9c/0x150 [ 366.248908][T16914] ? __pfx_kthread+0x10/0x10 [ 366.253534][T16914] ret_from_fork+0x439/0x7d0 [ 366.258394][T16914] ? __pfx_ret_from_fork+0x10/0x10 [ 366.263623][T16914] ? __switch_to_asm+0x39/0x70 [ 366.268783][T16914] ? __switch_to_asm+0x33/0x70 [ 366.273578][T16914] ? __pfx_kthread+0x10/0x10 [ 366.278258][T16914] ret_from_fork_asm+0x1a/0x30 [ 366.283064][T16914] [ 366.285462][T18148] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 366.286172][T16914] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 366.286194][T16914] CPU: 0 UID: 0 PID: 16914 Comm: kworker/u8:23 Not tainted syzkaller #0 PREEMPT(full) [ 366.286214][T16914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 366.286228][T16914] Workqueue: bond0 bond_mii_monitor [ 366.286257][T16914] Call Trace: [ 366.286265][T16914] [ 366.286275][T16914] dump_stack_lvl+0x99/0x250 [ 366.286299][T16914] ? __asan_memcpy+0x40/0x70 [ 366.286320][T16914] ? __pfx_dump_stack_lvl+0x10/0x10 [ 366.286340][T16914] ? __pfx__printk+0x10/0x10 [ 366.286377][T16914] vpanic+0x281/0x750 [ 366.286397][T16914] ? __pfx__printk+0x10/0x10 [ 366.286419][T16914] ? __pfx_vpanic+0x10/0x10 [ 366.286439][T16914] ? is_bpf_text_address+0x292/0x2b0 [ 366.286475][T16914] panic+0xb9/0xc0 [ 366.286494][T16914] ? __pfx_panic+0x10/0x10 [ 366.286531][T16914] __warn+0x31b/0x4b0 [ 366.286549][T16914] ? __linkwatch_sync_dev+0x303/0x350 [ 366.286574][T16914] ? __linkwatch_sync_dev+0x303/0x350 [ 366.286596][T16914] report_bug+0x2be/0x4f0 [ 366.286614][T16914] ? __linkwatch_sync_dev+0x303/0x350 [ 366.286636][T16914] ? __linkwatch_sync_dev+0x303/0x350 [ 366.286657][T16914] ? __linkwatch_sync_dev+0x305/0x350 [ 366.286679][T16914] handle_bug+0x84/0x160 [ 366.286700][T16914] exc_invalid_op+0x1a/0x50 [ 366.286721][T16914] asm_exc_invalid_op+0x1a/0x20 [ 366.286738][T16914] RIP: 0010:__linkwatch_sync_dev+0x303/0x350 [ 366.286760][T16914] Code: 7c fe ff ff e8 ae 96 53 f8 c6 05 2b 88 21 06 01 90 48 c7 c7 e0 d6 94 8c 48 c7 c6 46 16 a0 8d ba 48 00 00 00 e8 5e 33 17 f8 90 <0f> 0b 90 90 e9 4d fe ff ff 44 89 f1 80 e1 07 38 c1 0f 8c 22 fd ff [ 366.286776][T16914] RSP: 0018:ffffc9001a6bf670 EFLAGS: 00010246 [ 366.286793][T16914] RAX: efeeb8fd720f0a00 RBX: ffff888028300000 RCX: ffff88802b7e1e00 [ 366.286807][T16914] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 366.286819][T16914] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 366.286830][T16914] R10: dffffc0000000000 R11: fffffbfff1bfa22c R12: 1ffff1100506005d [ 366.286843][T16914] R13: dffffc0000000000 R14: ffffffff8c1d0048 R15: 0000000000000000 [ 366.286873][T16914] ? ethtool_op_get_link+0xd/0x70 [ 366.286898][T16914] ethtool_op_get_link+0x15/0x70 [ 366.286917][T16914] bond_check_dev_link+0x444/0x6c0 [ 366.286947][T16914] ? __pfx_bond_check_dev_link+0x10/0x10 [ 366.286982][T16914] ? netdev_lower_get_next_private_rcu+0x9f/0x100 [ 366.287006][T16914] bond_mii_monitor+0x428/0x2e00 [ 366.287041][T16914] ? bond_mii_monitor+0x153/0x2e00 [ 366.287078][T16914] ? __pfx_bond_mii_monitor+0x10/0x10 [ 366.287108][T16914] ? register_lock_class+0x51/0x320 [ 366.287138][T16914] ? __lock_acquire+0xab9/0xd20 [ 366.287172][T16914] ? process_scheduled_works+0x9ef/0x17b0 [ 366.287197][T16914] ? _raw_spin_unlock_irq+0x23/0x50 [ 366.287214][T16914] ? process_scheduled_works+0x9ef/0x17b0 [ 366.287230][T16914] ? process_scheduled_works+0x9ef/0x17b0 [ 366.287250][T16914] process_scheduled_works+0xae1/0x17b0 [ 366.287298][T16914] ? __pfx_process_scheduled_works+0x10/0x10 [ 366.287333][T16914] worker_thread+0x8a0/0xda0 [ 366.287387][T16914] kthread+0x70e/0x8a0 [ 366.287412][T16914] ? __pfx_worker_thread+0x10/0x10 [ 366.287430][T16914] ? __pfx_kthread+0x10/0x10 [ 366.287452][T16914] ? _raw_spin_unlock_irq+0x23/0x50 [ 366.287469][T16914] ? lockdep_hardirqs_on+0x9c/0x150 [ 366.287485][T16914] ? __pfx_kthread+0x10/0x10 [ 366.287508][T16914] ret_from_fork+0x439/0x7d0 [ 366.287530][T16914] ? __pfx_ret_from_fork+0x10/0x10 [ 366.287554][T16914] ? __switch_to_asm+0x39/0x70 [ 366.287574][T16914] ? __switch_to_asm+0x33/0x70 [ 366.287593][T16914] ? __pfx_kthread+0x10/0x10 [ 366.287614][T16914] ret_from_fork_asm+0x1a/0x30 [ 366.287651][T16914] [ 366.295034][T16914] Kernel Offset: disabled