last executing test programs: 3.578207387s ago: executing program 2 (id=1198): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x64, r3, 0x1, 0xffffffff, 0x0, {0x37}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x64}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r5 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x1a, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010128bd7000fddbdf250700000008000300", @ANYRES32=r6, @ANYBLOB="0c009900ff070000780000001400040073797a6b616c6c65723000000000000008000500070000000a0018000303030303030000"], 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0xf, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x0, 0x8004}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x760}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0}, &(0x7f0000000280)=0x14) ioctl$FS_IOC_GETFSSYSFSPATH(r5, 0x80811501, &(0x7f0000000480)={0x80}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r10, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="080100000000000029000000", @ANYRES64=r10], 0x108}}], 0x1, 0xc040) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f00000022c0)=ANY=[@ANYBLOB="f81400", @ANYRES16=0x0, @ANYBLOB="080028bd7000fddbdf250e000000340001801400020073797a6b616c6c65723000000000000008000100", @ANYRES32=r8, @ANYBLOB="1400020070696d726567300000000000000000005c00018008000100", @ANYRES32=r9, @ANYBLOB="1400020067656e6576653000000000000000000014000200767863616e31000000000000000000001400020076657468305f746f5f62617461647600140002006d6163766c616e310000000000000000380001800800030000000000080001002b4721d56074fd11976c0b", @ANYRES32=r11, @ANYBLOB="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"], 0x14f8}, 0x1, 0x0, 0x0, 0x20044000}, 0x4040010) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r12) socket$nl_netfilter(0x10, 0x3, 0xc) r13 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r13, 0x891a, 0x0) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) 3.009285918s ago: executing program 3 (id=1208): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="78010000170001000000000000000000fc0000000000000000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000fc00000000000000000000000000000000000000000000040000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES8, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000f5ffffff00000000440005007f000001000000000000000000000000000000003c"], 0x178}}, 0x0) 2.911490712s ago: executing program 2 (id=1209): socket$inet6_sctp(0xa, 0x4, 0x84) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000500)=0xf, 0x4) setsockopt$MRT_INIT(r0, 0x0, 0xc8, 0x0, 0x0) getsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000040), &(0x7f0000000080)=0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, &(0x7f0000001b80)=""/4090, 0x26, 0xffa, 0xa}, 0x28) 2.818528346s ago: executing program 3 (id=1210): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, 0x0, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x34, r4, 0x1, 0x0, 0x0, {0x4f}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x3000c81c) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="e03f030025"], 0x33fe0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r6, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 2.598663493s ago: executing program 2 (id=1212): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="470d000000000000000000000000080002"], 0x1c}}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f00000002c0)=0x7fffffff, 0x4) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r2 = socket$tipc(0x1e, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000081120400000000009500200700000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1700000069000100"], 0x18}, 0x1, 0x0, 0x0, 0x4482}, 0x100000000000000) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) ppoll(&(0x7f00000002c0)=[{r0, 0xd00}], 0x1, &(0x7f0000000440)={r4, r5+60000000}, &(0x7f0000000480)={[0xfe0000000]}, 0x8) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'dummy0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newsa={0x188, 0x10, 0x1, 0x0, 0x0, {{@in=@local, @in=@remote, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x2c}, {0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x8000000, 0x200}, {0x0, 0x0, 0x2}, 0x0, 0x34ff, 0xa, 0x0, 0x0, 0xcd}, [@algo_aead={0x4c, 0x12, {{'aegis128l-aesni\x00'}, 0x0, 0x40}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x18}}]}, 0x188}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r8}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) 2.438660908s ago: executing program 3 (id=1214): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, 0x41, 0x107, 0xfffffffc, 0x0, {0x2, 0x7c}, [@typed={0x8, 0x12d, 0x0, 0x0, @fd=r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) writev(r1, &(0x7f0000000180), 0x100000000000003c) r2 = socket(0x11, 0x3, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(r2, &(0x7f00000001c0)={0x11, 0x0, r4, 0x1, 0x2, 0x6, @random="bdd1221610b5"}, 0x14) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$inet(r2, &(0x7f0000000200)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f00000007c0)={0xfffc, 0x5, 0xffc0, 0x0, 0x7f, 0x4, 0xffff}, 0xc) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 2.207046954s ago: executing program 3 (id=1217): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x1f, 0xb, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000008c00000095"], &(0x7f0000000400)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ffffd}, 0x94) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'bridge0\x00', {0x2, 0x4e2a, @multicast2}}) 2.189719992s ago: executing program 0 (id=1219): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x64, r3, 0x1, 0xffffffff, 0x0, {0x37}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x64}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r5 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x1a, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010128bd7000fddbdf250700000008000300", @ANYRES32=r6, @ANYBLOB="0c009900ff070000780000001400040073797a6b616c6c65723000000000000008000500070000000a0018000303030303030000"], 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0xf, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x0, 0x8004}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x760}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0}, &(0x7f0000000280)=0x14) ioctl$FS_IOC_GETFSSYSFSPATH(r5, 0x80811501, &(0x7f0000000480)={0x80}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r10, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="080100000000000029000000", @ANYRES64=r10], 0x108}}], 0x1, 0xc040) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f00000022c0)=ANY=[@ANYBLOB="f81400", @ANYRES16=0x0, @ANYBLOB="080028bd7000fddbdf250e000000340001801400020073797a6b616c6c65723000000000000008000100", @ANYRES32=r8, @ANYBLOB="1400020070696d726567300000000000000000005c00018008000100", @ANYRES32=r9, @ANYBLOB="1400020067656e6576653000000000000000000014000200767863616e31000000000000000000001400020076657468305f746f5f62617461647600140002006d6163766c616e310000000000000000380001800800030000000000080001002b4721d56074fd11976c0b", @ANYRES32=r11, @ANYBLOB="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"], 0x14f8}, 0x1, 0x0, 0x0, 0x20044000}, 0x4040010) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r12) socket$nl_netfilter(0x10, 0x3, 0xc) r13 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r13, 0x891a, 0x0) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) 2.094852046s ago: executing program 3 (id=1220): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a800000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffe}, 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0xc, 0x9, 0x5, 0x900, r0, 0x7, '\x00', 0x0, r2, 0x1, 0x5, 0x3, 0x5}, 0x50) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) getsockopt$rose(0xffffffffffffffff, 0x104, 0x7, 0x0, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r5, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_smc(0x2b, 0x1, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x19, 0xf, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=0x0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b7000000000000", @ANYRES64=r5, @ANYBLOB="2e1371f6958d6597ccecc66f7eb77ac984983599f07befcdb80b74e39ecb1e0381bb535b7c5449b0f5e181ff03bfffbca0579b23f0a31862dda90bdfe1c96e155ba98c8b10bdf73401968b511b27c55f5d6b03eba70aee089d8fb978ea12fbbe9f4aff24301565d57e07c203cdc3b6d24037994ad1b9a085c015a77e93dc224495b27ff90451b26dd646631f734f84cc17b34ffc53bfb8a82d30feda1f7faf9a3246d094521c7179de891571bd136054156ae33cfb65ab2ae767555e9af9dd03118a6a9d3039aa7f9efd7c4f53d0feebfaf518aaebd76e18d47df3f6dddf9975bf7b"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) ppoll(&(0x7f0000000500)=[{r6}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000f, 0x4000010, 0xffffffffffffffff, 0x0) close(0x4) write$cgroup_int(r4, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r4, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r8, 0x0) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r4, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000766f35a62b204a95e81628a6", @ANYRES16=r10, @ANYBLOB="3183000000010000000019000000180001801400020064756d6d793000"/38], 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886) 1.802479871s ago: executing program 0 (id=1222): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x18, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0e04008f00000000000000da41040018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000fcff00008580040086000000bf09000000000000550901008004000095000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000350d00008500000006000000d500f4fffcffffffbf91000000000000b70200000300100085000000ae000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0xb, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) 1.468950298s ago: executing program 2 (id=1225): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, 0x0, &(0x7f00000005c0)='GPL\x00'}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={0x14, 0x38, 0x1, 0x20, 0x0, {0x6a}}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x40014) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000580)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x34, 0x68, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x8, 0x4, 0x2, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x5, 0x7fff}]}}}}}}}, 0x0) 1.351060774s ago: executing program 0 (id=1226): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[], 0xa8}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x6c00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0, 0xffffffffffffffff}, 0x0, &(0x7f00000002c0)}, 0x20) mmap(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x2000000, 0x12, r1, 0xe7ef6000) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c230000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000080000ffffffeb0600000dc3070000474280b9c248cb82"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) ioctl$TUNSETOFFLOAD(r2, 0x80047456, 0xf0ff1f00000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=ANY=[@ANYBLOB="3800000068000100627869ea4310cc2b00000000000000000c00020001000000150000000c000c8006000100d43f000006000300010000008e224a6b189b7dc5da6a43e53f860ea11cc1b7506ef452a9bff528933085267e80bf80c380956da185333d6eb511b7a92b964d7214e824a36fdd0b73975360ce3234a518a9f49a00b9e4afaae88296c287c2ed9437cb45f38e38a27beacf1d45c0ee7a7b3d31ee0f9593cc52deed3fb14af39cd2a331086d71142eae03581c70a514dbcb8c3dde990f922c9c0bfd4f2d5198d78a74b00b7a646ad8d1f6dd7ee42eeae40b4313661ac514e0ce"], 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) 1.285079983s ago: executing program 4 (id=1228): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}, {&(0x7f0000002140)=""/4096, 0x1000}], 0x2) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f00000001c0)={0x0, 0xfffffffffffffd10, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x40010}, 0x8) 1.060380728s ago: executing program 0 (id=1230): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000004000000010000000900010073797a30000000005c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f200011800e000100636f6e6e6c696d69740000000c0002800800014000000000400000000c0a01020000000000000000010000000900020073797a320000000014000380100000800800034000000002040400800900010073797a30"], 0xe4}}, 0x0) 958.874044ms ago: executing program 1 (id=1231): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x70, r3, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x70}, 0x1, 0x0, 0x0, 0x24060054}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50e35, 0x23}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008000) 948.523552ms ago: executing program 3 (id=1232): close(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x100, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000002040000010100000024000180060005004e230800070001000200000008000300ac1414aa0800060001000000"], 0x38}}, 0x0) 936.029285ms ago: executing program 0 (id=1233): unshare(0x2a020400) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000000104050000000000100000000a0000060a000200000000080000000005000100010000"], 0x28}}, 0x8000) r4 = accept$alg(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) sendmmsg$sock(r4, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="ff", 0x1}], 0x1}}], 0x1, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r1) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="b7c02142", @ANYRES16=r5, @ANYBLOB="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"], 0x570}, 0x1, 0x0, 0x0, 0x400a0}, 0x44000) r6 = socket(0x1, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='&'], 0x10) r9 = socket$rds(0x15, 0x5, 0x0) bind$rds(r9, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r9, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r9, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r9, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r8, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r6}, 0x20) bind$unix(r6, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000001680)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) recvmmsg(r6, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/65, 0x41}], 0x1}}], 0x2, 0x0, 0x0) r10 = socket(0x1, 0x803, 0x0) sendto$unix(r10, 0x0, 0x0, 0x800, &(0x7f0000000700)=@file={0x1, './file0\x00'}, 0x6e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0xa, &(0x7f0000000000)=0x1, 0x4) 934.784949ms ago: executing program 4 (id=1234): unshare(0x2a020400) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000000104050000000000100000000a0000060a000200000000080000000005000100010000"], 0x28}}, 0x8000) r4 = accept$alg(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) sendmmsg$sock(r4, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="ff", 0x1}], 0x1}}], 0x1, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r1) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="b7c02142", @ANYRES16=r5, @ANYBLOB="000127bd7000fddbdf25170000002000078008000100050000000c00040003000000000000000800020007000000d40106805e000300f43a659ed9614559142a4db7cbe4ced6172e616ef05071e0e1ad41e64706abcce28b7d9b9f94fb3449897cf5db61bfde125e12385728bfaed9ebf0afc2e13d3ec1139fb856bf6f9193e0db2d140afee2f6fb2a97b070b133903a00003d00040067636d2861657329000000000000000000000000000000000000000000000000150000005bedcb13e3b86aeb9f98c585916584cde2c60bcdf20000004700040067636d28616573290000000000000000000000000000000000000000000000001f000000bc6f50d873fe39db93ec44d743469e6e5795e22265f8e805d756931ccaabf9004e000300fd94c4adae5727436fb6d23b1523581c08c1e20f1aa272a9c43df270f208741bf8e5e196af289145f2056ee9f304d5805709e3461747357e5e992be86d9e6133fc65bd9a39c4d455f4bc000004000200040005008e000300430414abe4451992ef5a13daddad2924b0277257678468ffa3c68ba23d9ac6612df4f975b9890746f24376b7e8eefa8f965ae1c0e878bfa9babe2230f554c5581fe5dfaf505dcba5eba63e2d87789f34ce52b70fe120c52531b1e3f3e9b536777025ce30d4055299b3b37bdbe05b8ac66949c30bf90b2dc4ab65401d50ccf238a7bcdfdbb54a7ff87ec40000140001800d0001007564703a73797a3000000000a00106804800040067636d2861657329000000000000000000000000000000000000000000000000200000004803ba192c2902b70362dadb6cee37af31211fdee0ff7382c5848a82ec076f09ff00030081295de92b81c1ebb536148205a5a66077e08a5e24eb7fc94599c7858353fdd12c378e59a85a392be7089c448246adc74f976c2fcf031d9ced78d7d4e61c388b2a3379a43db4fd8486fa062856d8ec4acd7295b1497f704004c5b3cef364f0550d7eb19181aac819dda7802501e6fd4ba7404c7ffcaefc0f8f51d7e563600c5f1184887319441a9bbee5bc76b623342c59cbd17e887cb204d3a8b3fd68f64b12dcfc95b1c901e398e561764010b5b29380fbba27a7c2e7076208debe404394a9ba86c600fb632b0471ffe49f8a8f356fa741a5a5124572f58d4f6db0b2a8feced5eb720426d586cd9a6ab3f9374a53d069ed2a2b370be1c8db02c2004600040067636d28616573290000000000000000000000000000000000000000000000001e00000056e90f4fcfce7ad6ff20ea5b6b90d667e2a59bd1995eb36ff015f2ea7ea30000040005000400050004000500e00004801c00078008000400020000000800010011000000080001000c000000340007800800010006000000080001001f00000008000200ffff0000080003000600000008000400e525000008000400010000004c00078008000100120000000800020001000000080001000a000000080003000d00000008000300030000000800010011000000080001001e000000080001000b00000008000200f2ffffff0900010073797a30000000001c00078008000300ff7f0000080003000800000008000200a85d0000040007801400078008000400040000000800020004000000d4000680ca000300c037b31b3032e81f8f836d02f9690ecbcbdc6c62b9925a450111da97d7aa6638f0d0c87c5558a6fbe778a91b82971c1def2f9cf2a428e014f27f7226036c8af8217c14a940b80c04d815c864a4e52276ae5113b2e2cf3a282d26435fffd3f050d0016f5d792fa6c7655831828dede764f6a9d0b64ee9fb42c6451b8aa92d1469a85c9df632596aa9ab3db11d64023d0c70cd6ec93453f05d4e00b5b008fbacd851bb4ddfb9f66f4de01b7f108b1ad59ebc32b4f1fd19b54f872b0dd76eab57af29320a2757f2000004000200"], 0x570}, 0x1, 0x0, 0x0, 0x400a0}, 0x44000) r6 = socket(0x1, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='&'], 0x10) r9 = socket$rds(0x15, 0x5, 0x0) bind$rds(r9, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r9, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r9, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r9, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r8, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r6}, 0x20) bind$unix(r6, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000001680)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) recvmmsg(r6, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/65, 0x41}], 0x1}}], 0x2, 0x0, 0x0) r10 = socket(0x1, 0x803, 0x0) sendto$unix(r10, 0x0, 0x0, 0x800, &(0x7f0000000700)=@file={0x1, './file0\x00'}, 0x6e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0xa, &(0x7f0000000000)=0x1, 0x4) 766.825066ms ago: executing program 1 (id=1235): socket$packet(0x11, 0x3, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f260006d2688a84c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (fail_nth: 93) 765.588358ms ago: executing program 0 (id=1236): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x40000) socket$nl_route(0x10, 0x3, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x15, @remote, 'bond0\x00'}}, 0x1e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001a80), 0x200, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x1) close(0x3) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x4, 0x0, 0x1, 0x6, 0xe, 0x1}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0500000008000000020000000400000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000da9aa047e6c2c4183296fdb1d7d85004eda2ad286a06cebfc075926f505fc237cfdc14a649c0ef7784164f8102884943348dfdfaffce33d387d3286e13661bbdc57e8730de8f477c613760cdd1669ffb", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}, 0x1, 0x0, 0x0, 0x4000844}, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r6, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e20, 0x2, @rand_addr=' \x01\x00', 0x2}, 0x1c) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000080000850000002d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r8}, 0x10) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r9, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r9, 0x84, 0x72, &(0x7f0000000700)={0x0, 0x81, 0x10}, &(0x7f0000000040)=0xc) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r11 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r11, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r11, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) 703.412841ms ago: executing program 4 (id=1237): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0xffffffff, {0x1}}}, 0x94}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 330.616353ms ago: executing program 2 (id=1238): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000100)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0xfffffffd}]}, 0x10) sendmmsg(r2, &(0x7f0000003f80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000100)={'ip_vti0\x00', 0x0, 0x80, 0x700, 0x2, 0xfffffffc, {{0x6, 0x4, 0x2, 0x12, 0x18, 0x67, 0x0, 0x4, 0x813252dd9583cc50, 0x0, @loopback, @remote, {[@end]}}}}}) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0xa0, 0x24, 0x100, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xfff2, 0x10}, {0xffff}, {0xb, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @TCA_STAB={0x54, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x5, 0x1000, 0xfffffffd, 0x0, 0xdef, 0x6, 0x1}}, {0x6, 0x2, [0x5]}}, {{0x1c, 0x1, {0x6, 0x40, 0x101, 0x81, 0x2, 0x4, 0x7, 0x6}}, {0x10, 0x2, [0x5, 0x8, 0x7, 0x4, 0xd1d, 0x8ed]}}]}, @TCA_RATE={0x6, 0x5, {0xfa, 0xb7}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}, @TCA_RATE={0x6, 0x5, {0x6, 0xfb}}]}, 0xa0}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 330.05084ms ago: executing program 4 (id=1239): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="96f5", 0x2}, {&(0x7f0000000640)="25b2", 0x2}], 0x2, 0x0, 0x0, 0x900}, 0x200000000000000) 235.044536ms ago: executing program 1 (id=1240): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000020a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000068000000060a010400000000000000000100000008000b4000000000400004802800018007000100637400001c000280080001400000000108000240000000090500030000000000140001800a0001007265646972000000040002800900010073797a30"], 0xdc}, 0x1, 0x0, 0x0, 0x5090}, 0x4000000) socket$nl_netfilter(0x10, 0x3, 0xc) 218.163763ms ago: executing program 2 (id=1241): socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x33) r1 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000020000240012800c0001006d6163766c616e00140002800800010008000000062102000100000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00]'], 0x54}, 0x1, 0x0, 0x0, 0x280608c0}, 0x0) 203.834059ms ago: executing program 1 (id=1242): ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x2, 'veth1_to_bridge\x00', {0x4}, 0x5}) (async) r0 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000040)=@id, &(0x7f0000000080)=0x10, 0x80000) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85) (async) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000180)={&(0x7f00000000c0)=""/144, 0x90}) socket$key(0xf, 0x3, 0x2) r1 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r1, &(0x7f0000000480)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x3, 0x4}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000200)="715f8d95fbb1bb20a2cbab569e77e4914aef3b847f2888b5638f47d7bf48940fc143b79fb952f34f6e2113c890b69a554baeeebe69c10a5925fb7ffddbb7aad72dd1ac4266f31c9235c9f2f740a1f925ca290ab8f4aa709c6f422b336fed86b620ab3829e09562b1b5655fa2fdfa25e89bdabc0184f362", 0x77}, {&(0x7f0000000280)}, {&(0x7f00000002c0)}, {&(0x7f0000000300)="307c8d846174aeb9c23cffb0e41c062591a686df1b9f33ab4264fe6d7c833643fd272734efed795416652a02761a3b07aa646838e6a91630150ee43643838bfa81e4fd28ea0aef8834eeed923fbb58138e4a6f1f2f0953a4f386", 0x5a}], 0x4, &(0x7f00000003c0)="3c2eae2338fa44f4499e975c8d8a5e5c5eb3e862428f42bbdacd35e496fe015797441c8a272c060d96e7d9ef244e539c0d522ae4b09cce80668c5fd1bb7b3223241d52f11aecab2994c544ba1d88fbe088fb2e5749e4e59cb890f8426597eb2347fa448e3da13d1f45332191c20472533e263ee3cec8eb226196e89fef316c268efd1ceb7e8f8ab7f3bf07c81b0025a53b5f0246d206eb93ebcd8a433062bf9ae296447d0817c2e913a4d8b5f6", 0xad, 0x1c53d168414103b2}, 0x40000) (async) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) sendmsg$AUDIT_USER(r2, &(0x7f00000015c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001580)={&(0x7f0000000540)={0x1010, 0x3ed, 0x2, 0x70bd27, 0x25dfdbfe, "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", ["", "", "", "", "", ""]}, 0x1010}, 0x1, 0x0, 0x0, 0x41}, 0x40) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000001600)={0x0, 0x6, 0x57ae, 0x7}, 0x10) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000001640)={0x2, 0x5, 0x800c, 0x8, 0x8, 0x3, 0xe, 0x4, 0x0}, &(0x7f0000001680)=0x20) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000016c0)={r3, 0x5}, 0x8) setsockopt$MRT_DONE(r2, 0x0, 0xc9, 0x0, 0x0) (async) sendto$inet6(r2, &(0x7f0000001700)="2e6653b98bd050377935b603b2b201bdba3b394ed6af13830b4a5ff8555dde83333755018b446eee539a773c9d4d5e616fee80a276ec84a96abaaf9f1db89d", 0x3f, 0x10000001, 0x0, 0x0) (async) getsockopt$inet_tcp_buf(r2, 0x6, 0x1c, &(0x7f0000001740)=""/138, &(0x7f0000001800)=0x8a) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001ac0)={r2, 0x0, 0x75, 0x84, &(0x7f0000001840)="1e6da81757b09384e793d13301c8e9cc01f9808ff9ddac4720af43a6a20d5eecfbd8d82c16ba854b9cb82266c9e1ff2045e3d49a64852a71104cf2241dc25d7fcfb9455d0bad3345dad48b5e0ff27f8872a7ba37d37e2ab5ee172910fa9269e1a66847eb371c551f24e9444eac517750fba1de41ce", &(0x7f00000018c0)=""/132, 0x9, 0x0, 0xc2, 0x11, &(0x7f0000001980)="73a214236b9ffddea5f0eaac115fa82694efc8a5ab9a0f11a0fcb96ddd4ecba37838401c06b386e4e33fc467151a20f16ea1f544b390377974b3006b4a0f07bacc9ab4eda976ff464b487f2df0135188b09f5180535bff2cce20dbd911073fd2537bd0b24ef613fec6f21b775512f5bcf2990133b4125538d15d07600b789efe339a77136842412cf827c86c640dd176b09c1a4ef752a3c430e8a16da6977d6439257a3483d2ca991e27bc191423e497a340e8bde4184a8dd934625e0cafe37bcd24", &(0x7f0000001a80)="4fab8bef1db88b49bb7effb4814b581db9", 0x0, 0x0, 0xfffffffd}, 0x50) (async) r4 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000001b40), 0x2, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0x80087601, &(0x7f0000001b80)) (async) ioctl$PPPIOCGFLAGS1(r2, 0x8004745a, &(0x7f0000001bc0)) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000001c40), r2) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000001d00)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c80)={0x34, r5, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @local}, @GTPA_TID={0xc, 0x3, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000000}, 0x7177ccae6cb86462) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001e40)={@ifindex, 0x6, 0x1, 0x2, &(0x7f0000001d40)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000001d80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001dc0)=[0x0, 0x0], &(0x7f0000001e00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001e80)={@fallback=r0, r2, 0x29, 0x2000, 0x0, @value=r2, @void, @void, @void, r6}, 0x20) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000001ec0), &(0x7f0000001f00)=0x4) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000001f40), r7) (async) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000001f80)=0x1, 0x4) (async) r8 = socket$nl_audit(0x10, 0x3, 0x9) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001fc0)={@fallback=r8, r2, 0x3f, 0x0, r2, @void, @value=r1, @void, @void, r6}, 0x20) write$ppp(0xffffffffffffffff, &(0x7f0000002040)="c8e619e562c8b69daae47e88908bafbc071e73916d23db5592472db87c000a67ef38d9e820fc4d8310b6329209f17a442e15f92feb0311095497a2249f6c8e2f9f50f6ef27f1f81473b7a334934eef4f9b78786141a67cb8d886cfbfb54db6e9ff9328e8c1428813582aebd18f97ab76a1cc96e2c5deacb15b4aac4158e804ce3ed5af920f454381e62d56", 0x8b) 114.924522ms ago: executing program 4 (id=1243): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_int(r0, 0x6, 0x1, 0x0, &(0x7f0000000480)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x0) sendmsg$nfc_llcp(r0, &(0x7f0000000440)={&(0x7f00000000c0)={0x27, r1, 0x1, 0x1, 0x6, 0x0, "31269c424bae744720adb33e307035790e92b38ace91f105f32f928e6e178c04aa0f80696c2afdc784ae4a6097ace3cbfcf2f8439e182bafabcfe324b7badd", 0x37}, 0x60, &(0x7f00000002c0)=[{0xfffffffffffffffd}, {&(0x7f0000000140)="089ffc38005488e64230d0d3e4da3b155b1180c8be0eb882a4fbe28a5c59141438e90b7f367ccd6b189370649ac01e21a12e6639ca7d88d655ee2acd4a681411e1a1c4446fb46d4b4e706ed96dbeafdd1c65affa199d11786ca75bff6dfea8b265b3cb43ed2a9b8a63fa9c6156c1acb00b6c5d96b4fac84e8ccddfae69b54ff5172bbd55617dbb7945b5db100e802f2b1a0d015294f630b0758588513457ea522c606943a92987", 0xa7}, {&(0x7f0000000040)="69a9113677eb4e46d491e7cf7c7b35688258f225e3d34bf66c87040c5cb53f7b27841d13f6dd51a8d25b34260e2cc7d71a7923", 0x33}, {&(0x7f0000000200)="bb39962cfc1e67af088e2b50baf82c1732f8e3969a904e13455f431c18ccc55f69a44c9284ee8e51f597ef8af52dc22c6083bc876f7df246492377f886e242a10fc42921808d37d8c0c94fb9082c66a039939be0e8a26606e8c3f65892814637ad9cbf6ad4fe54dae862e4a1b419e61d902c17893caa6e0db3f97c5e75d462902e4633294c9ac4ab953c135a05e1b271a432e079a91b13b3f4ffe7df69307f2fe76b1eb4b38b9371cc58e6024dba5dad45c5464895def89d", 0xb8}], 0x4, &(0x7f0000000300)={0x108, 0x119, 0x4, "1ad8c6241fcc8f4c4cd6b377437e7b199158a00417ce702db8d3bf838c2f0c32c74709abdc330d23feed05f1b209a06aac79ed83b07a822cfb40fc1d8f675d4a81bf78952ecc4224394305ae9e64a6afafa89666df6503e606981234106d1028ee5f1ea1363f09d6e2e492f2799acbe9d5d09d02991545a3c9259df7a56e1570113e0fe34c3d520a86f5facfa5b9d3aa8aecb8359f4477991a9fd94a6c3686932486bb92b69392d97c4a3c2372db83942d18e84b9fe3d3d052fbc0efbc8d6417dec490b13e84cd6039b1e9bda1ae0ef237041c69a777c76fb41af6eb5aafb216f577872b47646481a08751205e4ea5e8313b61e8"}, 0x108, 0x4}, 0xc004) 87.737967ms ago: executing program 1 (id=1244): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x60, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0xa, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast1}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x12000000}, 0x0) 73.62277ms ago: executing program 4 (id=1245): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in=@empty, @in6=@mcast1, 0x4e22, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x3, 0x0, 0x9}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x36}, 0x1, 0x32}, 0x2, @in6=@private0, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r2, &(0x7f0000000040)={0x24, @short={0x2, 0x0, 0xaaa2}}, 0x14) 0s ago: executing program 1 (id=1246): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2000000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}]}}}]}, 0x40}}, 0x0) kernel console output (not intermixed with test programs): local_addr_list+0x10/0x10 [ 155.959013][ T7710] ? sctp_v6_is_any+0x64/0x80 [ 155.959035][ T7710] ? sctp_copy_one_addr+0x93/0x360 [ 155.959069][ T7710] sctp_bind_addr_copy+0xb3/0x3c0 [ 155.959100][ T7710] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 155.959131][ T7710] sctp_connect_new_asoc+0x2e0/0x690 [ 155.959158][ T7710] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 155.959178][ T7710] ? __local_bh_enable_ip+0x12d/0x1c0 [ 155.959207][ T7710] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 155.959229][ T7710] ? security_sctp_bind_connect+0x7e/0x2e0 [ 155.959258][ T7710] sctp_sendmsg+0x155c/0x2810 [ 155.959296][ T7710] ? __pfx_sctp_sendmsg+0x10/0x10 [ 155.959323][ T7710] ? aa_sk_perm+0x81e/0x950 [ 155.959356][ T7710] ? __pfx_aa_sk_perm+0x10/0x10 [ 155.959386][ T7710] ? sock_rps_record_flow+0x19/0x410 [ 155.959417][ T7710] ? inet_sendmsg+0x2f4/0x370 [ 155.959448][ T7710] __sock_sendmsg+0x19c/0x270 [ 155.959480][ T7710] ____sys_sendmsg+0x52d/0x830 [ 155.959510][ T7710] ? __pfx_____sys_sendmsg+0x10/0x10 [ 155.959544][ T7710] ? import_iovec+0x74/0xa0 [ 155.959578][ T7710] ___sys_sendmsg+0x21f/0x2a0 [ 155.959604][ T7710] ? __pfx____sys_sendmsg+0x10/0x10 [ 155.959674][ T7710] ? __fget_files+0x2a/0x420 [ 155.959690][ T7710] ? __fget_files+0x3a0/0x420 [ 155.959721][ T7710] __sys_sendmmsg+0x227/0x430 [ 155.959751][ T7710] ? __pfx___sys_sendmmsg+0x10/0x10 [ 155.959781][ T7710] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 155.959837][ T7710] ? ksys_write+0x22a/0x250 [ 155.959866][ T7710] ? __pfx_ksys_write+0x10/0x10 [ 155.959886][ T7710] ? rcu_is_watching+0x15/0xb0 [ 155.959914][ T7710] __x64_sys_sendmmsg+0xa0/0xc0 [ 155.959939][ T7710] do_syscall_64+0xfa/0x3b0 [ 155.959957][ T7710] ? lockdep_hardirqs_on+0x9c/0x150 [ 155.959975][ T7710] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.959994][ T7710] ? clear_bhb_loop+0x60/0xb0 [ 155.960018][ T7710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.960035][ T7710] RIP: 0033:0x7f804678ebe9 [ 155.960052][ T7710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.960067][ T7710] RSP: 002b:00007f80476d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 155.960088][ T7710] RAX: ffffffffffffffda RBX: 00007f80469c5fa0 RCX: 00007f804678ebe9 [ 155.960101][ T7710] RDX: 0000000000000001 RSI: 0000200000000a80 RDI: 0000000000000003 [ 155.960112][ T7710] RBP: 00007f80476d6090 R08: 0000000000000000 R09: 0000000000000000 [ 155.960123][ T7710] R10: 000000000004c851 R11: 0000000000000246 R12: 0000000000000002 [ 155.960134][ T7710] R13: 00007f80469c6038 R14: 00007f80469c5fa0 R15: 00007ffc3a815388 [ 155.960168][ T7710] [ 156.443940][ T7704] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.539316][ T7704] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.736927][ T7704] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.835209][ T7723] netlink: 'syz.1.512': attribute type 10 has an invalid length. [ 157.069859][ T13] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.099691][ T3458] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.158483][ T3458] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.186353][ T3458] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.454598][ T5881] Bluetooth: hci4: link tx timeout [ 157.459858][ T5881] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 157.468514][ T5881] Bluetooth: hci4: link tx timeout [ 157.473837][ T5881] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 157.509805][ T7743] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 157.951014][ T7758] sysfs: cannot create duplicate filename '/class/ieee80211/!å' [ 157.972935][ T5881] Bluetooth: hci4: command 0x0405 tx timeout [ 157.991989][ T7758] CPU: 0 UID: 0 PID: 7758 Comm: syz.3.524 Not tainted syzkaller #0 PREEMPT(full) [ 157.992017][ T7758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 157.992029][ T7758] Call Trace: [ 157.992038][ T7758] [ 157.992051][ T7758] dump_stack_lvl+0x189/0x250 [ 157.992086][ T7758] ? __pfx_dump_stack_lvl+0x10/0x10 [ 157.992112][ T7758] ? __pfx__printk+0x10/0x10 [ 157.992147][ T7758] ? kernfs_path_from_node+0x2f/0x290 [ 157.992170][ T7758] ? kernfs_path_from_node+0x250/0x290 [ 157.992190][ T7758] ? kernfs_path_from_node+0x2f/0x290 [ 157.992219][ T7758] sysfs_warn_dup+0x8e/0xa0 [ 157.992240][ T7758] sysfs_do_create_link_sd+0xc0/0x110 [ 157.992265][ T7758] device_add_class_symlinks+0x1cf/0x240 [ 157.992293][ T7758] device_add+0x475/0xb50 [ 157.992321][ T7758] wiphy_register+0x1ba6/0x28d0 [ 157.992363][ T7758] ? __pfx_wiphy_register+0x10/0x10 [ 157.992383][ T7758] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 157.992417][ T7758] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 157.992457][ T7758] ieee80211_register_hw+0x3425/0x4080 [ 157.992504][ T7758] ? ieee80211_register_hw+0x13f1/0x4080 [ 157.992539][ T7758] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 157.992570][ T7758] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 157.992608][ T7758] ? __hrtimer_setup+0x187/0x210 [ 157.992625][ T7758] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 157.992655][ T7758] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 157.992716][ T7758] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 157.992740][ T7758] ? trace_kmalloc+0x1f/0xd0 [ 157.992761][ T7758] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 157.992784][ T7758] ? kstrndup+0xbf/0x160 [ 157.992816][ T7758] hwsim_new_radio_nl+0xea4/0x1b10 [ 157.992844][ T7758] ? __pfx___nla_validate_parse+0x10/0x10 [ 157.992887][ T7758] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 157.992928][ T7758] ? __nla_parse+0x40/0x60 [ 157.992959][ T7758] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 157.992993][ T7758] genl_family_rcv_msg_doit+0x215/0x300 [ 157.993025][ T7758] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 157.993065][ T7758] ? bpf_lsm_capable+0x9/0x20 [ 157.993087][ T7758] ? security_capable+0x7e/0x2e0 [ 157.993121][ T7758] genl_rcv_msg+0x60e/0x790 [ 157.993152][ T7758] ? __pfx_genl_rcv_msg+0x10/0x10 [ 157.993174][ T7758] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 157.993217][ T7758] netlink_rcv_skb+0x205/0x470 [ 157.993233][ T7758] ? __lock_acquire+0xab9/0xd20 [ 157.993257][ T7758] ? __pfx_genl_rcv_msg+0x10/0x10 [ 157.993302][ T7758] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 157.993345][ T7758] ? down_read+0x1ad/0x2e0 [ 157.993371][ T7758] genl_rcv+0x28/0x40 [ 157.993392][ T7758] netlink_unicast+0x82c/0x9e0 [ 157.993441][ T7758] ? __pfx_netlink_unicast+0x10/0x10 [ 157.993473][ T7758] ? netlink_sendmsg+0x642/0xb30 [ 157.993491][ T7758] ? skb_put+0x11b/0x210 [ 157.993516][ T7758] netlink_sendmsg+0x805/0xb30 [ 157.993550][ T7758] ? __pfx_netlink_sendmsg+0x10/0x10 [ 157.993575][ T7758] ? aa_sock_msg_perm+0xf1/0x1d0 [ 157.993597][ T7758] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 157.993618][ T7758] ? __pfx_netlink_sendmsg+0x10/0x10 [ 157.993639][ T7758] __sock_sendmsg+0x219/0x270 [ 157.993672][ T7758] ____sys_sendmsg+0x505/0x830 [ 157.993702][ T7758] ? __pfx_____sys_sendmsg+0x10/0x10 [ 157.993736][ T7758] ? import_iovec+0x74/0xa0 [ 157.993762][ T7758] ___sys_sendmsg+0x21f/0x2a0 [ 157.993787][ T7758] ? __pfx____sys_sendmsg+0x10/0x10 [ 157.993854][ T7758] ? __fget_files+0x2a/0x420 [ 157.993870][ T7758] ? __fget_files+0x3a0/0x420 [ 157.993900][ T7758] __x64_sys_sendmsg+0x19b/0x260 [ 157.993927][ T7758] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 157.993965][ T7758] ? rcu_is_watching+0x15/0xb0 [ 157.993992][ T7758] ? do_syscall_64+0xbe/0x3b0 [ 157.994018][ T7758] do_syscall_64+0xfa/0x3b0 [ 157.994035][ T7758] ? lockdep_hardirqs_on+0x9c/0x150 [ 157.994052][ T7758] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.994070][ T7758] ? clear_bhb_loop+0x60/0xb0 [ 157.994093][ T7758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.994111][ T7758] RIP: 0033:0x7fbcafb8ebe9 [ 157.994129][ T7758] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.994144][ T7758] RSP: 002b:00007fbcb0920038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 157.994165][ T7758] RAX: ffffffffffffffda RBX: 00007fbcafdc5fa0 RCX: 00007fbcafb8ebe9 [ 157.994178][ T7758] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 157.994190][ T7758] RBP: 00007fbcafc11e19 R08: 0000000000000000 R09: 0000000000000000 [ 157.994201][ T7758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 157.994212][ T7758] R13: 00007fbcafdc6038 R14: 00007fbcafdc5fa0 R15: 00007ffd2ec447a8 [ 157.994246][ T7758] [ 159.445617][ T7786] tipc: Enabling of bearer rejected, already enabled [ 159.546121][ T7788] __nla_validate_parse: 2 callbacks suppressed [ 159.546141][ T7788] netlink: 4 bytes leftover after parsing attributes in process `syz.4.534'. [ 159.602854][ T7789] netlink: 4 bytes leftover after parsing attributes in process `syz.4.534'. [ 159.831074][ T7794] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma? [ 159.851951][ T7794] netlink: 14 bytes leftover after parsing attributes in process `syz.3.536'. [ 159.965129][ T7808] syzkaller1: entered promiscuous mode [ 159.969540][ T7809] netlink: 80 bytes leftover after parsing attributes in process `syz.0.542'. [ 159.985255][ T7808] syzkaller1: entered allmulticast mode [ 160.219874][ T7821] netlink: 4 bytes leftover after parsing attributes in process `syz.3.547'. [ 160.229282][ T7821] netlink: 4 bytes leftover after parsing attributes in process `syz.3.547'. [ 160.358968][ T7825] netlink: 224 bytes leftover after parsing attributes in process `syz.3.549'. [ 160.493996][ T7829] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 160.514881][ T7829] netlink: 'syz.3.551': attribute type 15 has an invalid length. [ 160.531815][ T5881] Bluetooth: hci4: command 0x0405 tx timeout [ 160.573662][ T7829] netlink: 12 bytes leftover after parsing attributes in process `syz.3.551'. [ 160.647556][ T7832] netlink: 'syz.3.552': attribute type 10 has an invalid length. [ 161.117359][ T7846] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:4000:0000:7d01 with DS=0xe [ 161.308016][ T7848] netlink: 4 bytes leftover after parsing attributes in process `syz.1.558'. [ 161.468618][ T7859] netlink: 12 bytes leftover after parsing attributes in process `syz.2.560'. [ 161.574222][ T7860] netlink: 'syz.2.560': attribute type 4 has an invalid length. [ 162.045319][ T7876] FAULT_INJECTION: forcing a failure. [ 162.045319][ T7876] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 162.069163][ T7876] CPU: 1 UID: 0 PID: 7876 Comm: syz.1.567 Not tainted syzkaller #0 PREEMPT(full) [ 162.069191][ T7876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 162.069202][ T7876] Call Trace: [ 162.069210][ T7876] [ 162.069219][ T7876] dump_stack_lvl+0x189/0x250 [ 162.069249][ T7876] ? __pfx____ratelimit+0x10/0x10 [ 162.069270][ T7876] ? __pfx_dump_stack_lvl+0x10/0x10 [ 162.069292][ T7876] ? __pfx__printk+0x10/0x10 [ 162.069321][ T7876] ? fs_reclaim_acquire+0x7d/0x100 [ 162.069370][ T7876] should_fail_ex+0x414/0x560 [ 162.069402][ T7876] prepare_alloc_pages+0x213/0x610 [ 162.069430][ T7876] __alloc_frozen_pages_noprof+0x123/0x370 [ 162.069456][ T7876] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 162.069487][ T7876] ? policy_nodemask+0x27c/0x720 [ 162.069510][ T7876] ? __lock_acquire+0xab9/0xd20 [ 162.069543][ T7876] alloc_pages_mpol+0x232/0x4a0 [ 162.069577][ T7876] vma_alloc_folio_noprof+0xe4/0x200 [ 162.069612][ T7876] ? page_table_check_set+0x18d/0x730 [ 162.069636][ T7876] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 162.069677][ T7876] folio_prealloc+0x30/0x180 [ 162.069705][ T7876] __handle_mm_fault+0x2ab9/0x5440 [ 162.069754][ T7876] ? __pfx___handle_mm_fault+0x10/0x10 [ 162.069800][ T7876] ? follow_page_pte+0x7ef/0x13e0 [ 162.069833][ T7876] handle_mm_fault+0x40a/0x8e0 [ 162.069869][ T7876] __get_user_pages+0x1699/0x2ce0 [ 162.069934][ T7876] __gup_longterm_locked+0x3dc/0x1660 [ 162.069978][ T7876] ? rcu_is_watching+0x15/0xb0 [ 162.069996][ T7876] ? xdp_umem_pin_pages+0x52/0x340 [ 162.070018][ T7876] pin_user_pages+0x9e/0xd0 [ 162.070045][ T7876] xdp_umem_pin_pages+0x117/0x340 [ 162.070069][ T7876] xdp_umem_create+0x677/0x8e0 [ 162.070096][ T7876] xsk_setsockopt+0x7b0/0x8d0 [ 162.070122][ T7876] ? __pfx_xsk_setsockopt+0x10/0x10 [ 162.070156][ T7876] ? __fget_files+0x2a/0x420 [ 162.070171][ T7876] ? aa_sock_opt_perm+0xff/0x1b0 [ 162.070195][ T7876] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 162.070213][ T7876] ? __pfx_xsk_setsockopt+0x10/0x10 [ 162.070239][ T7876] do_sock_setsockopt+0x179/0x1b0 [ 162.070267][ T7876] __x64_sys_setsockopt+0x13f/0x1b0 [ 162.070294][ T7876] do_syscall_64+0xfa/0x3b0 [ 162.070313][ T7876] ? lockdep_hardirqs_on+0x9c/0x150 [ 162.070331][ T7876] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.070348][ T7876] ? clear_bhb_loop+0x60/0xb0 [ 162.070370][ T7876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.070388][ T7876] RIP: 0033:0x7fe31318ebe9 [ 162.070405][ T7876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.070420][ T7876] RSP: 002b:00007fe313fa5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 162.070440][ T7876] RAX: ffffffffffffffda RBX: 00007fe3133c5fa0 RCX: 00007fe31318ebe9 [ 162.070452][ T7876] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000003 [ 162.070463][ T7876] RBP: 00007fe313fa5090 R08: 0000000000000020 R09: 0000000000000000 [ 162.070474][ T7876] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000002 [ 162.070484][ T7876] R13: 00007fe3133c6038 R14: 00007fe3133c5fa0 R15: 00007ffd64465448 [ 162.070516][ T7876] [ 163.143420][ T7901] tipc: Resetting bearer [ 163.457252][ T7929] openvswitch: netlink: IP tunnel dst address not specified [ 163.608066][ T7901] tipc: Resetting bearer [ 163.998110][ T7941] lo: entered promiscuous mode [ 164.013092][ T7941] tunl0: entered promiscuous mode [ 164.022376][ T7941] gre0: entered promiscuous mode [ 164.034949][ T7941] gretap0: entered promiscuous mode [ 164.049742][ T7941] erspan0: entered promiscuous mode [ 164.064982][ T7941] ip_vti0: entered promiscuous mode [ 164.078732][ T7941] ip6_vti0: entered promiscuous mode [ 164.097798][ T7941] sit0: entered promiscuous mode [ 164.181952][ T7941] ip6tnl0: entered promiscuous mode [ 164.213572][ T7941] ip6gre0: entered promiscuous mode [ 164.253786][ T7941] syz_tun: entered promiscuous mode [ 164.301853][ T7941] ip6gretap0: entered promiscuous mode [ 164.314281][ T7941] bridge0: entered promiscuous mode [ 164.320984][ T7941] vcan0: entered promiscuous mode [ 164.327207][ T7941] bond0: entered promiscuous mode [ 164.334157][ T7941] bond_slave_0: entered promiscuous mode [ 164.340179][ T7941] bond_slave_1: entered promiscuous mode [ 164.350697][ T7941] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 164.370573][ T7941] team0: entered promiscuous mode [ 164.383320][ T7941] team_slave_0: entered promiscuous mode [ 164.397213][ T7941] team_slave_1: entered promiscuous mode [ 164.413067][ T7941] dummy0: entered promiscuous mode [ 164.422641][ T7941] nlmon0: entered promiscuous mode [ 164.429213][ T7941] caif0: entered promiscuous mode [ 164.439920][ T7941] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 164.517203][ T7901] tipc: Resetting bearer [ 164.680012][ T7961] bond0: Error: Cannot enslave bond to itself. [ 165.637479][ T8000] __nla_validate_parse: 3 callbacks suppressed [ 165.637500][ T8000] netlink: 8 bytes leftover after parsing attributes in process `syz.3.602'. [ 165.752196][ T8005] FAULT_INJECTION: forcing a failure. [ 165.752196][ T8005] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 165.765633][ T8005] CPU: 0 UID: 0 PID: 8005 Comm: syz.4.604 Not tainted syzkaller #0 PREEMPT(full) [ 165.765659][ T8005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 165.765670][ T8005] Call Trace: [ 165.765677][ T8005] [ 165.765685][ T8005] dump_stack_lvl+0x189/0x250 [ 165.765714][ T8005] ? __pfx____ratelimit+0x10/0x10 [ 165.765734][ T8005] ? __pfx_dump_stack_lvl+0x10/0x10 [ 165.765756][ T8005] ? __pfx__printk+0x10/0x10 [ 165.765784][ T8005] ? __might_fault+0xb0/0x130 [ 165.765823][ T8005] should_fail_ex+0x414/0x560 [ 165.765854][ T8005] _copy_from_iter+0x1de/0x1790 [ 165.765883][ T8005] ? rcu_is_watching+0x15/0xb0 [ 165.765904][ T8005] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 165.765932][ T8005] ? __pfx__copy_from_iter+0x10/0x10 [ 165.765953][ T8005] ? __build_skb_around+0x257/0x3e0 [ 165.765977][ T8005] ? netlink_sendmsg+0x642/0xb30 [ 165.765994][ T8005] ? skb_put+0x11b/0x210 [ 165.766018][ T8005] netlink_sendmsg+0x6b2/0xb30 [ 165.766049][ T8005] ? __pfx_netlink_sendmsg+0x10/0x10 [ 165.766073][ T8005] ? aa_sock_msg_perm+0xf1/0x1d0 [ 165.766094][ T8005] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 165.766115][ T8005] ? __pfx_netlink_sendmsg+0x10/0x10 [ 165.766135][ T8005] __sock_sendmsg+0x219/0x270 [ 165.766166][ T8005] ____sys_sendmsg+0x505/0x830 [ 165.766195][ T8005] ? __pfx_____sys_sendmsg+0x10/0x10 [ 165.766228][ T8005] ? import_iovec+0x74/0xa0 [ 165.766255][ T8005] ___sys_sendmsg+0x21f/0x2a0 [ 165.766280][ T8005] ? __pfx____sys_sendmsg+0x10/0x10 [ 165.766354][ T8005] ? __fget_files+0x2a/0x420 [ 165.766372][ T8005] ? __fget_files+0x3a0/0x420 [ 165.766402][ T8005] __x64_sys_sendmsg+0x19b/0x260 [ 165.766427][ T8005] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 165.766458][ T8005] ? __pfx_ksys_write+0x10/0x10 [ 165.766480][ T8005] ? rcu_is_watching+0x15/0xb0 [ 165.766504][ T8005] ? do_syscall_64+0xbe/0x3b0 [ 165.766528][ T8005] do_syscall_64+0xfa/0x3b0 [ 165.766547][ T8005] ? lockdep_hardirqs_on+0x9c/0x150 [ 165.766565][ T8005] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.766582][ T8005] ? clear_bhb_loop+0x60/0xb0 [ 165.766605][ T8005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.766623][ T8005] RIP: 0033:0x7f8b8f78ebe9 [ 165.766641][ T8005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.766656][ T8005] RSP: 002b:00007f8b906e4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 165.766677][ T8005] RAX: ffffffffffffffda RBX: 00007f8b8f9c5fa0 RCX: 00007f8b8f78ebe9 [ 165.766690][ T8005] RDX: 0000000000000060 RSI: 0000200000000200 RDI: 0000000000000003 [ 165.766702][ T8005] RBP: 00007f8b906e4090 R08: 0000000000000000 R09: 0000000000000000 [ 165.766713][ T8005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.766724][ T8005] R13: 00007f8b8f9c6038 R14: 00007f8b8f9c5fa0 R15: 00007ffe55bf6558 [ 165.766757][ T8005] [ 166.053347][ T7987] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 166.072829][ T7987] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 166.100181][ T7987] tipc: Resetting bearer [ 166.124220][ T8010] netlink: 24 bytes leftover after parsing attributes in process `syz.2.606'. [ 166.136726][ T7987] netlink: 'syz.0.599': attribute type 9 has an invalid length. [ 166.144994][ T7987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.599'. [ 166.236738][ T8012] vlan2: entered promiscuous mode [ 166.260402][ T8012] bond0: entered promiscuous mode [ 166.310430][ T8025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.608'. [ 166.539478][ T8035] netlink: 8 bytes leftover after parsing attributes in process `syz.2.612'. [ 166.853410][ T8041] netlink: 788 bytes leftover after parsing attributes in process `syz.3.616'. [ 166.987914][ T8045] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:4100:0000:7d01 with DS=0xe [ 167.780039][ T8074] netlink: 4 bytes leftover after parsing attributes in process `syz.1.627'. [ 167.789234][ T8074] netlink: 34 bytes leftover after parsing attributes in process `syz.1.627'. [ 168.220022][ T8087] netlink: 8 bytes leftover after parsing attributes in process `syz.1.633'. [ 168.685233][ T8094] wg1: left promiscuous mode [ 168.690031][ T8094] wg1: left allmulticast mode [ 168.849272][ T8094] vlan0: left promiscuous mode [ 168.968738][ T8115] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 169.042945][ T6632] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.058533][ T6632] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.099185][ T8122] netlink: 4 bytes leftover after parsing attributes in process `syz.4.641'. [ 169.119115][ T6632] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.141684][ T8125] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 169.155839][ T6632] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.181008][ T8102] IPVS: starting estimator thread 0... [ 169.322713][ T8131] IPVS: using max 33 ests per chain, 79200 per kthread [ 169.415667][ T8137] netlink: 'syz.1.647': attribute type 1 has an invalid length. [ 169.608242][ T8144] bond3: (slave vti0): The slave device specified does not support setting the MAC address [ 169.633808][ T8144] bond3: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 169.651897][ T8144] bond3: (slave vti0): making interface the new active one [ 169.666288][ T8144] bond3: (slave vti0): Enslaving as an active interface with an up link [ 169.680297][ T8148] delete_channel: no stack [ 170.025115][ T8164] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 170.076030][ T8170] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.197222][ T8170] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.306092][ T8170] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.405478][ T8170] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.569962][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.640673][ T6632] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.740410][ T59] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.792370][ T59] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.068758][ T8210] __nla_validate_parse: 8 callbacks suppressed [ 171.068779][ T8210] netlink: 80 bytes leftover after parsing attributes in process `syz.3.675'. [ 171.265407][ T8212] FAULT_INJECTION: forcing a failure. [ 171.265407][ T8212] name failslab, interval 1, probability 0, space 0, times 0 [ 171.293373][ T8212] CPU: 1 UID: 0 PID: 8212 Comm: syz.4.676 Not tainted syzkaller #0 PREEMPT(full) [ 171.293401][ T8212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 171.293411][ T8212] Call Trace: [ 171.293419][ T8212] [ 171.293427][ T8212] dump_stack_lvl+0x189/0x250 [ 171.293455][ T8212] ? __pfx____ratelimit+0x10/0x10 [ 171.293483][ T8212] ? __pfx_dump_stack_lvl+0x10/0x10 [ 171.293506][ T8212] ? __pfx__printk+0x10/0x10 [ 171.293540][ T8212] ? __pfx___might_resched+0x10/0x10 [ 171.293558][ T8212] ? fs_reclaim_acquire+0x7d/0x100 [ 171.293592][ T8212] should_fail_ex+0x414/0x560 [ 171.293624][ T8212] should_failslab+0xa8/0x100 [ 171.293654][ T8212] __kmalloc_cache_noprof+0x70/0x3d0 [ 171.293678][ T8212] ? fl_init+0x53/0x1d0 [ 171.293705][ T8212] fl_init+0x53/0x1d0 [ 171.293728][ T8212] tcf_proto_create+0x248/0x330 [ 171.293758][ T8212] tc_new_tfilter+0x11aa/0x15b0 [ 171.293813][ T8212] ? __pfx_tc_new_tfilter+0x10/0x10 [ 171.293831][ T8212] ? __dev_queue_xmit+0x1d79/0x3b50 [ 171.293898][ T8212] ? __pfx_tc_new_tfilter+0x10/0x10 [ 171.293919][ T8212] rtnetlink_rcv_msg+0x7cc/0xb70 [ 171.293944][ T8212] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 171.293961][ T8212] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 171.293977][ T8212] ? ref_tracker_free+0x63a/0x7d0 [ 171.294005][ T8212] ? __asan_memcpy+0x40/0x70 [ 171.294026][ T8212] ? __pfx_ref_tracker_free+0x10/0x10 [ 171.294067][ T8212] netlink_rcv_skb+0x205/0x470 [ 171.294088][ T8212] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 171.294109][ T8212] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 171.294144][ T8212] ? netlink_deliver_tap+0x2e/0x1b0 [ 171.294174][ T8212] netlink_unicast+0x82c/0x9e0 [ 171.294213][ T8212] ? __pfx_netlink_unicast+0x10/0x10 [ 171.294242][ T8212] ? netlink_sendmsg+0x642/0xb30 [ 171.294259][ T8212] ? skb_put+0x11b/0x210 [ 171.294284][ T8212] netlink_sendmsg+0x805/0xb30 [ 171.294316][ T8212] ? __pfx_netlink_sendmsg+0x10/0x10 [ 171.294340][ T8212] ? aa_sock_msg_perm+0xf1/0x1d0 [ 171.294361][ T8212] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 171.294382][ T8212] ? __pfx_netlink_sendmsg+0x10/0x10 [ 171.294402][ T8212] __sock_sendmsg+0x219/0x270 [ 171.294434][ T8212] ____sys_sendmsg+0x52d/0x830 [ 171.294464][ T8212] ? __pfx_____sys_sendmsg+0x10/0x10 [ 171.294506][ T8212] ? import_iovec+0x74/0xa0 [ 171.294534][ T8212] ___sys_sendmsg+0x21f/0x2a0 [ 171.294559][ T8212] ? __pfx____sys_sendmsg+0x10/0x10 [ 171.294639][ T8212] ? __might_fault+0xb0/0x130 [ 171.294670][ T8212] __sys_sendmmsg+0x227/0x430 [ 171.294700][ T8212] ? __pfx___sys_sendmmsg+0x10/0x10 [ 171.294718][ T8212] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 171.294773][ T8212] ? ksys_write+0x22a/0x250 [ 171.294803][ T8212] ? __pfx_ksys_write+0x10/0x10 [ 171.294825][ T8212] ? rcu_is_watching+0x15/0xb0 [ 171.294853][ T8212] __x64_sys_sendmmsg+0xa0/0xc0 [ 171.294879][ T8212] do_syscall_64+0xfa/0x3b0 [ 171.294898][ T8212] ? lockdep_hardirqs_on+0x9c/0x150 [ 171.294917][ T8212] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.294936][ T8212] ? clear_bhb_loop+0x60/0xb0 [ 171.294960][ T8212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.294978][ T8212] RIP: 0033:0x7f8b8f78ebe9 [ 171.294996][ T8212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.295011][ T8212] RSP: 002b:00007f8b906e4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 171.295033][ T8212] RAX: ffffffffffffffda RBX: 00007f8b8f9c5fa0 RCX: 00007f8b8f78ebe9 [ 171.295046][ T8212] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 171.295059][ T8212] RBP: 00007f8b906e4090 R08: 0000000000000000 R09: 0000000000000000 [ 171.295070][ T8212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 171.295081][ T8212] R13: 00007f8b8f9c6038 R14: 00007f8b8f9c5fa0 R15: 00007ffe55bf6558 [ 171.295116][ T8212] [ 171.792872][ T8222] netlink: 'syz.0.680': attribute type 10 has an invalid length. [ 171.818161][ T8222] team0: Port device dummy0 added [ 171.862209][ T8222] netlink: 'syz.0.680': attribute type 10 has an invalid length. [ 171.935399][ T8227] 8021q: adding VLAN 0 to HW filter on device bond1 [ 172.124528][ T8222] team0: Port device dummy0 removed [ 172.138653][ T8237] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 172.145167][ T8232] macvlan2: entered promiscuous mode [ 172.154656][ T8232] macvlan2: entered allmulticast mode [ 172.179091][ T8237] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 172.181281][ T8232] bond0: entered allmulticast mode [ 172.201267][ T8232] bond_slave_0: entered allmulticast mode [ 172.211281][ T8232] bond_slave_1: entered allmulticast mode [ 172.221199][ T8232] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 172.238880][ T8232] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 172.268080][ T8232] bond0: left allmulticast mode [ 172.292994][ T8232] bond_slave_0: left allmulticast mode [ 172.303112][ T8232] bond_slave_1: left allmulticast mode [ 172.316570][ T8232] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 172.405410][ T8242] erspan0: entered promiscuous mode [ 172.513826][ T8248] wg1: entered promiscuous mode [ 172.535750][ T8248] wg1: entered allmulticast mode [ 172.649937][ T8258] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave [ 172.661322][ T8258] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 173.213743][ T8282] netlink: 16 bytes leftover after parsing attributes in process `syz.2.702'. [ 173.320280][ T8286] netlink: 'syz.3.704': attribute type 1 has an invalid length. [ 173.530945][ T8299] syz_tun: entered promiscuous mode [ 173.564116][ T8299] syz_tun: entered allmulticast mode [ 173.758137][ T8313] netlink: 'syz.0.715': attribute type 9 has an invalid length. [ 173.790387][ T8315] netlink: 4 bytes leftover after parsing attributes in process `syz.2.716'. [ 173.792732][ T8313] netlink: 'syz.0.715': attribute type 6 has an invalid length. [ 173.820804][ T8317] netlink: 12 bytes leftover after parsing attributes in process `syz.4.714'. [ 173.840117][ T8313] netlink: 'syz.0.715': attribute type 7 has an invalid length. [ 173.864850][ T8313] netlink: 'syz.0.715': attribute type 8 has an invalid length. [ 173.874166][ T8315] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 173.908107][ T8315] team0: Device ipvlan2 is already an upper device of the team interface [ 173.949420][ T8323] netlink: 'syz.3.718': attribute type 10 has an invalid length. [ 173.965128][ T8324] netlink: 'syz.4.714': attribute type 4 has an invalid length. [ 174.423028][ T8341] FAULT_INJECTION: forcing a failure. [ 174.423028][ T8341] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 174.479470][ T8341] CPU: 1 UID: 0 PID: 8341 Comm: syz.4.723 Not tainted syzkaller #0 PREEMPT(full) [ 174.479496][ T8341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 174.479505][ T8341] Call Trace: [ 174.479512][ T8341] [ 174.479520][ T8341] dump_stack_lvl+0x189/0x250 [ 174.479551][ T8341] ? __pfx____ratelimit+0x10/0x10 [ 174.479571][ T8341] ? __pfx_dump_stack_lvl+0x10/0x10 [ 174.479593][ T8341] ? __pfx__printk+0x10/0x10 [ 174.479616][ T8341] ? __might_fault+0xb0/0x130 [ 174.479657][ T8341] should_fail_ex+0x414/0x560 [ 174.479687][ T8341] _copy_from_user+0x2d/0xb0 [ 174.479711][ T8341] ___sys_sendmsg+0x158/0x2a0 [ 174.479736][ T8341] ? __pfx____sys_sendmsg+0x10/0x10 [ 174.479797][ T8341] ? __fget_files+0x2a/0x420 [ 174.479813][ T8341] ? __fget_files+0x3a0/0x420 [ 174.479840][ T8341] __x64_sys_sendmsg+0x19b/0x260 [ 174.479866][ T8341] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 174.479897][ T8341] ? __pfx_ksys_write+0x10/0x10 [ 174.479919][ T8341] ? rcu_is_watching+0x15/0xb0 [ 174.479943][ T8341] ? do_syscall_64+0xbe/0x3b0 [ 174.479968][ T8341] do_syscall_64+0xfa/0x3b0 [ 174.479986][ T8341] ? lockdep_hardirqs_on+0x9c/0x150 [ 174.480003][ T8341] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.480021][ T8341] ? clear_bhb_loop+0x60/0xb0 [ 174.480044][ T8341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.480062][ T8341] RIP: 0033:0x7f8b8f78ebe9 [ 174.480079][ T8341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.480093][ T8341] RSP: 002b:00007f8b906e4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 174.480113][ T8341] RAX: ffffffffffffffda RBX: 00007f8b8f9c5fa0 RCX: 00007f8b8f78ebe9 [ 174.480125][ T8341] RDX: 0000000004000080 RSI: 0000200000000300 RDI: 0000000000000003 [ 174.480137][ T8341] RBP: 00007f8b906e4090 R08: 0000000000000000 R09: 0000000000000000 [ 174.480148][ T8341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.480158][ T8341] R13: 00007f8b8f9c6038 R14: 00007f8b8f9c5fa0 R15: 00007ffe55bf6558 [ 174.480189][ T8341] [ 174.782255][ T8350] netlink: 16 bytes leftover after parsing attributes in process `syz.0.722'. [ 174.943166][ T8355] netlink: 8 bytes leftover after parsing attributes in process `syz.4.728'. [ 174.975076][ T8355] netlink: 4 bytes leftover after parsing attributes in process `syz.4.728'. [ 175.038688][ T8359] FAULT_INJECTION: forcing a failure. [ 175.038688][ T8359] name failslab, interval 1, probability 0, space 0, times 0 [ 175.052708][ T8359] CPU: 0 UID: 0 PID: 8359 Comm: syz.3.729 Not tainted syzkaller #0 PREEMPT(full) [ 175.052735][ T8359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 175.052746][ T8359] Call Trace: [ 175.052755][ T8359] [ 175.052764][ T8359] dump_stack_lvl+0x189/0x250 [ 175.052792][ T8359] ? __pfx____ratelimit+0x10/0x10 [ 175.052813][ T8359] ? __pfx_dump_stack_lvl+0x10/0x10 [ 175.052835][ T8359] ? __pfx__printk+0x10/0x10 [ 175.052868][ T8359] ? __pfx___might_resched+0x10/0x10 [ 175.052885][ T8359] ? fs_reclaim_acquire+0x7d/0x100 [ 175.052920][ T8359] should_fail_ex+0x414/0x560 [ 175.052950][ T8359] should_failslab+0xa8/0x100 [ 175.052978][ T8359] kmem_cache_alloc_noprof+0x73/0x3c0 [ 175.053002][ T8359] ? _sctp_make_chunk+0x14e/0x430 [ 175.053046][ T8359] _sctp_make_chunk+0x14e/0x430 [ 175.053072][ T8359] sctp_make_datafrag_empty+0x122/0x230 [ 175.053095][ T8359] ? __pfx_sctp_make_datafrag_empty+0x10/0x10 [ 175.053112][ T8359] ? __kasan_kmalloc+0x93/0xb0 [ 175.053141][ T8359] ? sctp_auth_send_cid+0x69/0x250 [ 175.053165][ T8359] sctp_datamsg_from_user+0x726/0xef0 [ 175.053218][ T8359] sctp_sendmsg_to_asoc+0x1003/0x1810 [ 175.053248][ T8359] ? __asan_memcpy+0x40/0x70 [ 175.053284][ T8359] ? sctp_assoc_add_peer+0xcfa/0x13b0 [ 175.053324][ T8359] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 175.053347][ T8359] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 175.053368][ T8359] ? __local_bh_enable_ip+0x12d/0x1c0 [ 175.053396][ T8359] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 175.053418][ T8359] ? security_sctp_bind_connect+0x7e/0x2e0 [ 175.053447][ T8359] sctp_sendmsg+0x1941/0x2810 [ 175.053484][ T8359] ? __pfx_sctp_sendmsg+0x10/0x10 [ 175.053510][ T8359] ? aa_sk_perm+0x81e/0x950 [ 175.053545][ T8359] ? __pfx_aa_sk_perm+0x10/0x10 [ 175.053577][ T8359] ? sock_rps_record_flow+0x19/0x410 [ 175.053609][ T8359] ? inet_sendmsg+0x2f4/0x370 [ 175.053640][ T8359] __sock_sendmsg+0x19c/0x270 [ 175.053672][ T8359] ____sys_sendmsg+0x52d/0x830 [ 175.053703][ T8359] ? __pfx_____sys_sendmsg+0x10/0x10 [ 175.053738][ T8359] ? import_iovec+0x74/0xa0 [ 175.053765][ T8359] ___sys_sendmsg+0x21f/0x2a0 [ 175.053791][ T8359] ? __pfx____sys_sendmsg+0x10/0x10 [ 175.053859][ T8359] ? __fget_files+0x2a/0x420 [ 175.053875][ T8359] ? __fget_files+0x3a0/0x420 [ 175.053904][ T8359] __sys_sendmmsg+0x227/0x430 [ 175.053934][ T8359] ? __pfx___sys_sendmmsg+0x10/0x10 [ 175.053953][ T8359] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 175.054005][ T8359] ? ksys_write+0x22a/0x250 [ 175.054033][ T8359] ? __pfx_ksys_write+0x10/0x10 [ 175.054052][ T8359] ? rcu_is_watching+0x15/0xb0 [ 175.054077][ T8359] __x64_sys_sendmmsg+0xa0/0xc0 [ 175.054100][ T8359] do_syscall_64+0xfa/0x3b0 [ 175.054119][ T8359] ? lockdep_hardirqs_on+0x9c/0x150 [ 175.054138][ T8359] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.054156][ T8359] ? clear_bhb_loop+0x60/0xb0 [ 175.054181][ T8359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.054199][ T8359] RIP: 0033:0x7fbcafb8ebe9 [ 175.054217][ T8359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.054278][ T8359] RSP: 002b:00007fbcb0920038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 175.054299][ T8359] RAX: ffffffffffffffda RBX: 00007fbcafdc5fa0 RCX: 00007fbcafb8ebe9 [ 175.054313][ T8359] RDX: 0000000000000001 RSI: 0000200000000a80 RDI: 0000000000000003 [ 175.054326][ T8359] RBP: 00007fbcb0920090 R08: 0000000000000000 R09: 0000000000000000 [ 175.054337][ T8359] R10: 000000000004c851 R11: 0000000000000246 R12: 0000000000000002 [ 175.054347][ T8359] R13: 00007fbcafdc6038 R14: 00007fbcafdc5fa0 R15: 00007ffd2ec447a8 [ 175.054378][ T8359] [ 175.426897][ T8340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 175.701039][ T8374] netlink: 'syz.3.735': attribute type 10 has an invalid length. [ 176.373782][ T8400] netlink: 68 bytes leftover after parsing attributes in process `syz.2.745'. [ 176.593607][ T30] audit: type=1800 audit(1756898817.085:2): pid=8387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.739" name="memory.events" dev="tmpfs" ino=767 res=0 errno=0 [ 176.879466][ T8420] netlink: 'syz.2.750': attribute type 10 has an invalid length. [ 176.905401][ T8409] netlink: 40 bytes leftover after parsing attributes in process `syz.4.746'. [ 176.913984][ T8420] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 176.921704][ T8420] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 176.929941][ T8420] tipc: Resetting bearer [ 177.314794][ T8435] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 177.368116][ T8435] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.507576][ T8447] vlan2: entered promiscuous mode [ 177.559407][ T8447] batadv0: entered promiscuous mode [ 177.658161][ T8435] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 177.665242][ T8459] netlink: 8 bytes leftover after parsing attributes in process `syz.4.761'. [ 177.673199][ T8435] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.693162][ T8459] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 177.800100][ T8435] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 177.821271][ T8435] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.948774][ T8435] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 177.979204][ T8435] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.015433][ T8468] bond1: option mode: unable to set because the bond device is up [ 178.035455][ T8470] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 178.060885][ T8470] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 178.248180][ T3458] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.285713][ T3458] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.357192][ T8481] netlink: 4 bytes leftover after parsing attributes in process `syz.4.769'. [ 178.375244][ T8484] netlink: 4 bytes leftover after parsing attributes in process `syz.3.767'. [ 178.387349][ T8481] netlink: 34 bytes leftover after parsing attributes in process `syz.4.769'. [ 178.416621][ T3458] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.461266][ T3458] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.469243][ T8490] netlink: 788 bytes leftover after parsing attributes in process `syz.1.771'. [ 178.514911][ T8488] wg1: entered promiscuous mode [ 178.519986][ T8488] wg1: entered allmulticast mode [ 178.550827][ T59] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.566684][ T59] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.653959][ T59] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.669618][ T59] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.776752][ T8502] netlink: 16 bytes leftover after parsing attributes in process `syz.1.775'. [ 178.914562][ T8103] IPVS: starting estimator thread 0... [ 179.029064][ T8509] IPVS: using max 33 ests per chain, 79200 per kthread [ 179.061793][ T8512] netlink: 9056 bytes leftover after parsing attributes in process `syz.1.777'. [ 179.075083][ T8513] netlink: 8 bytes leftover after parsing attributes in process `syz.4.779'. [ 179.123118][ T8513] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 179.373324][ T8530] netlink: 'syz.1.785': attribute type 1 has an invalid length. [ 179.525931][ T8538] FAULT_INJECTION: forcing a failure. [ 179.525931][ T8538] name failslab, interval 1, probability 0, space 0, times 0 [ 179.579266][ T8538] CPU: 0 UID: 0 PID: 8538 Comm: syz.0.787 Not tainted syzkaller #0 PREEMPT(full) [ 179.579294][ T8538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 179.579306][ T8538] Call Trace: [ 179.579314][ T8538] [ 179.579322][ T8538] dump_stack_lvl+0x189/0x250 [ 179.579352][ T8538] ? __pfx____ratelimit+0x10/0x10 [ 179.579370][ T8538] ? __pfx_dump_stack_lvl+0x10/0x10 [ 179.579392][ T8538] ? __pfx__printk+0x10/0x10 [ 179.579437][ T8538] ? __pfx___might_resched+0x10/0x10 [ 179.579461][ T8538] should_fail_ex+0x414/0x560 [ 179.579491][ T8538] should_failslab+0xa8/0x100 [ 179.579520][ T8538] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 179.579543][ T8538] ? __alloc_skb+0x112/0x2d0 [ 179.579562][ T8538] __alloc_skb+0x112/0x2d0 [ 179.579579][ T8538] netlink_sendmsg+0x5c6/0xb30 [ 179.579609][ T8538] ? __pfx_netlink_sendmsg+0x10/0x10 [ 179.579633][ T8538] ? aa_sock_msg_perm+0xf1/0x1d0 [ 179.579653][ T8538] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 179.579674][ T8538] ? __pfx_netlink_sendmsg+0x10/0x10 [ 179.579694][ T8538] __sock_sendmsg+0x219/0x270 [ 179.579724][ T8538] ____sys_sendmsg+0x505/0x830 [ 179.579751][ T8538] ? __pfx_____sys_sendmsg+0x10/0x10 [ 179.579782][ T8538] ? import_iovec+0x74/0xa0 [ 179.579808][ T8538] ___sys_sendmsg+0x21f/0x2a0 [ 179.579831][ T8538] ? __pfx____sys_sendmsg+0x10/0x10 [ 179.579885][ T8538] ? __fget_files+0x2a/0x420 [ 179.579904][ T8538] ? __fget_files+0x3a0/0x420 [ 179.579930][ T8538] __x64_sys_sendmsg+0x19b/0x260 [ 179.579953][ T8538] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 179.579985][ T8538] ? __pfx_ksys_write+0x10/0x10 [ 179.580015][ T8538] ? do_syscall_64+0xbe/0x3b0 [ 179.580039][ T8538] do_syscall_64+0xfa/0x3b0 [ 179.580057][ T8538] ? lockdep_hardirqs_on+0x9c/0x150 [ 179.580076][ T8538] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.580094][ T8538] ? clear_bhb_loop+0x60/0xb0 [ 179.580127][ T8538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.580144][ T8538] RIP: 0033:0x7fae3898ebe9 [ 179.580162][ T8538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.580177][ T8538] RSP: 002b:00007fae39854038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 179.580198][ T8538] RAX: ffffffffffffffda RBX: 00007fae38bc5fa0 RCX: 00007fae3898ebe9 [ 179.580212][ T8538] RDX: 0000000004000080 RSI: 0000200000000300 RDI: 0000000000000003 [ 179.580224][ T8538] RBP: 00007fae39854090 R08: 0000000000000000 R09: 0000000000000000 [ 179.580236][ T8538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.580247][ T8538] R13: 00007fae38bc6038 R14: 00007fae38bc5fa0 R15: 00007ffc4ab9a768 [ 179.580279][ T8538] [ 180.180197][ T8560] netlink: 'syz.3.798': attribute type 1 has an invalid length. [ 180.190344][ T8560] netlink: 'syz.3.798': attribute type 1 has an invalid length. [ 180.388672][ T8576] team0: Port device vlan0 removed [ 180.425845][ T8569] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 180.449813][ T8569] netlink: 'syz.0.799': attribute type 178 has an invalid length. [ 180.526933][ T8569] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 180.535823][ T8581] netlink: 'syz.2.800': attribute type 4 has an invalid length. [ 180.569725][ T8569] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 180.606567][ T8581] wlan1: mtu less than device minimum [ 181.306513][ T8604] batadv0: entered promiscuous mode [ 181.319609][ T8604] batadv0: left promiscuous mode [ 181.412646][ T8603] delete_channel: no stack [ 181.445256][ T8612] netlink: 'syz.4.813': attribute type 1 has an invalid length. [ 181.722515][ T8621] veth3: entered promiscuous mode [ 181.733827][ T8626] __nla_validate_parse: 7 callbacks suppressed [ 181.733846][ T8626] netlink: 224 bytes leftover after parsing attributes in process `syz.1.818'. [ 181.779122][ T8626] netlink: 'syz.1.818': attribute type 1 has an invalid length. [ 181.788733][ T8622] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma? [ 181.805143][ T8622] netlink: 14 bytes leftover after parsing attributes in process `syz.2.817'. [ 181.860277][ T8626] 8021q: adding VLAN 0 to HW filter on device bond4 [ 182.015146][ T8622] bond1: (slave macvlan2): Removing an active aggregator [ 182.024350][ T8622] bond1: (slave macvlan2): Releasing backup interface [ 182.043193][ T8622] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 182.052873][ T8622] bond_slave_0: left promiscuous mode [ 182.060481][ T8622] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 182.069754][ T8622] bond_slave_1: left promiscuous mode [ 182.081840][ T8622] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 182.090541][ T8622] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 182.098931][ T8622] bond0 (unregistering): Released all slaves [ 182.139942][ T8630] bond4: (slave gretap1): making interface the new active one [ 182.150161][ T8630] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 182.409927][ T8640] tipc: Started in network mode [ 182.417699][ T8640] tipc: Node identity 080211000001, cluster identity 4711 [ 182.427589][ T8640] tipc: Enabled bearer , priority 0 [ 182.467354][ T8646] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 182.477670][ T8646] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 182.487993][ T8646] tipc: Resetting bearer [ 182.650533][ T8654] netlink: 44 bytes leftover after parsing attributes in process `syz.1.828'. [ 182.828622][ T8664] netlink: 20 bytes leftover after parsing attributes in process `syz.1.832'. [ 182.840467][ T8665] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not bonding slave [ 182.862076][ T8665] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 183.074041][ T8676] netlink: 'syz.0.835': attribute type 1 has an invalid length. [ 183.095404][ T8676] netlink: 224 bytes leftover after parsing attributes in process `syz.0.835'. [ 183.122919][ T8676] netlink: 'syz.0.835': attribute type 322 has an invalid length. [ 183.146367][ T8680] netlink: 28 bytes leftover after parsing attributes in process `syz.4.837'. [ 183.173800][ T8680] netlink: 28 bytes leftover after parsing attributes in process `syz.4.837'. [ 183.205036][ T8685] netlink: 'syz.3.838': attribute type 10 has an invalid length. [ 183.223714][ T8685] team0: Device hsr_slave_0 failed to register rx_handler [ 183.336681][ T8691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.842'. [ 183.471907][ T8103] tipc: Node number set to 134418688 [ 183.556315][ T8696] netlink: 4 bytes leftover after parsing attributes in process `syz.4.841'. [ 183.580167][ T8704] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 183.592340][ T8704] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 183.670865][ T8709] netlink: 24 bytes leftover after parsing attributes in process `syz.0.846'. [ 183.962496][ T8721] bond1: option mode: unable to set because the bond device is up [ 184.000202][ T8721] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 184.033871][ T8721] bond1: (slave macvlan4): Enslaving as a backup interface with a down link [ 184.135446][ T8725] batadv0: entered promiscuous mode [ 184.160400][ T8725] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 184.172235][ T8725] batadv0: left promiscuous mode [ 184.224135][ T8732] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 184.266747][ T8728] tipc: Enabling not permitted [ 184.273248][ T8728] tipc: Enabling of bearer rejected, failed to enable media [ 184.842944][ T8755] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 184.859267][ T8755] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 184.862508][ T8760] netlink: 'syz.1.863': attribute type 3 has an invalid length. [ 184.885881][ T8755] tipc: Resetting bearer [ 184.908353][ T8760] netlink: 'syz.1.863': attribute type 1 has an invalid length. [ 185.783494][ T8787] vlan2: entered promiscuous mode [ 185.900194][ T8791] sysfs: cannot create duplicate filename '/class/ieee80211/!å' [ 185.942448][ T8791] CPU: 0 UID: 0 PID: 8791 Comm: syz.1.875 Not tainted syzkaller #0 PREEMPT(full) [ 185.942479][ T8791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 185.942491][ T8791] Call Trace: [ 185.942499][ T8791] [ 185.942509][ T8791] dump_stack_lvl+0x189/0x250 [ 185.942545][ T8791] ? __pfx_dump_stack_lvl+0x10/0x10 [ 185.942570][ T8791] ? __pfx__printk+0x10/0x10 [ 185.942607][ T8791] ? kernfs_path_from_node+0x2f/0x290 [ 185.942629][ T8791] ? kernfs_path_from_node+0x250/0x290 [ 185.942649][ T8791] ? kernfs_path_from_node+0x2f/0x290 [ 185.942677][ T8791] sysfs_warn_dup+0x8e/0xa0 [ 185.942699][ T8791] sysfs_do_create_link_sd+0xc0/0x110 [ 185.942726][ T8791] device_add_class_symlinks+0x1cf/0x240 [ 185.942755][ T8791] device_add+0x475/0xb50 [ 185.942782][ T8791] wiphy_register+0x1ba6/0x28d0 [ 185.942826][ T8791] ? __pfx_wiphy_register+0x10/0x10 [ 185.942846][ T8791] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 185.942882][ T8791] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 185.942915][ T8791] ieee80211_register_hw+0x3425/0x4080 [ 185.942966][ T8791] ? ieee80211_register_hw+0x13f1/0x4080 [ 185.943004][ T8791] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 185.943037][ T8791] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 185.943079][ T8791] ? __hrtimer_setup+0x187/0x210 [ 185.943106][ T8791] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 185.943145][ T8791] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 185.943211][ T8791] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 185.943236][ T8791] ? trace_kmalloc+0x1f/0xd0 [ 185.943257][ T8791] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 185.943282][ T8791] ? kstrndup+0xbf/0x160 [ 185.943314][ T8791] hwsim_new_radio_nl+0xea4/0x1b10 [ 185.943343][ T8791] ? __pfx___nla_validate_parse+0x10/0x10 [ 185.943387][ T8791] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 185.943427][ T8791] ? __nla_parse+0x40/0x60 [ 185.943459][ T8791] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 185.943493][ T8791] genl_family_rcv_msg_doit+0x215/0x300 [ 185.943526][ T8791] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 185.943568][ T8791] ? bpf_lsm_capable+0x9/0x20 [ 185.943592][ T8791] ? security_capable+0x7e/0x2e0 [ 185.943628][ T8791] genl_rcv_msg+0x60e/0x790 [ 185.943661][ T8791] ? __pfx_genl_rcv_msg+0x10/0x10 [ 185.943684][ T8791] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 185.943727][ T8791] netlink_rcv_skb+0x205/0x470 [ 185.943745][ T8791] ? __lock_acquire+0xab9/0xd20 [ 185.943771][ T8791] ? __pfx_genl_rcv_msg+0x10/0x10 [ 185.943799][ T8791] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 185.943841][ T8791] ? down_read+0x1ad/0x2e0 [ 185.943869][ T8791] genl_rcv+0x28/0x40 [ 185.943892][ T8791] netlink_unicast+0x82c/0x9e0 [ 185.943933][ T8791] ? __pfx_netlink_unicast+0x10/0x10 [ 185.943964][ T8791] ? netlink_sendmsg+0x642/0xb30 [ 185.943981][ T8791] ? skb_put+0x11b/0x210 [ 185.944006][ T8791] netlink_sendmsg+0x805/0xb30 [ 185.944039][ T8791] ? __pfx_netlink_sendmsg+0x10/0x10 [ 185.944064][ T8791] ? aa_sock_msg_perm+0xf1/0x1d0 [ 185.944095][ T8791] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 185.944118][ T8791] ? __pfx_netlink_sendmsg+0x10/0x10 [ 185.944139][ T8791] __sock_sendmsg+0x219/0x270 [ 185.944172][ T8791] ____sys_sendmsg+0x505/0x830 [ 185.944203][ T8791] ? __pfx_____sys_sendmsg+0x10/0x10 [ 185.944238][ T8791] ? import_iovec+0x74/0xa0 [ 185.944265][ T8791] ___sys_sendmsg+0x21f/0x2a0 [ 185.944291][ T8791] ? __pfx____sys_sendmsg+0x10/0x10 [ 185.944361][ T8791] ? __fget_files+0x2a/0x420 [ 185.944379][ T8791] ? __fget_files+0x3a0/0x420 [ 185.944410][ T8791] __x64_sys_sendmsg+0x19b/0x260 [ 185.944438][ T8791] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 185.944476][ T8791] ? rcu_is_watching+0x15/0xb0 [ 185.944503][ T8791] ? do_syscall_64+0xbe/0x3b0 [ 185.944529][ T8791] do_syscall_64+0xfa/0x3b0 [ 185.944548][ T8791] ? lockdep_hardirqs_on+0x9c/0x150 [ 185.944569][ T8791] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.944588][ T8791] ? clear_bhb_loop+0x60/0xb0 [ 185.944610][ T8791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.944630][ T8791] RIP: 0033:0x7fe31318ebe9 [ 185.944650][ T8791] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.944667][ T8791] RSP: 002b:00007fe313fa5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 185.944691][ T8791] RAX: ffffffffffffffda RBX: 00007fe3133c5fa0 RCX: 00007fe31318ebe9 [ 185.944705][ T8791] RDX: 00000000000000e4 RSI: 0000200000000040 RDI: 0000000000000004 [ 185.944718][ T8791] RBP: 00007fe313211e19 R08: 0000000000000000 R09: 0000000000000000 [ 185.944730][ T8791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 185.944742][ T8791] R13: 00007fe3133c6038 R14: 00007fe3133c5fa0 R15: 00007ffd64465448 [ 185.944779][ T8791] [ 186.751443][ T8812] netlink: 'syz.3.883': attribute type 1 has an invalid length. [ 186.759429][ T8812] __nla_validate_parse: 5 callbacks suppressed [ 186.759446][ T8812] netlink: 224 bytes leftover after parsing attributes in process `syz.3.883'. [ 186.950739][ T8823] netlink: 'syz.3.886': attribute type 1 has an invalid length. [ 186.995474][ T8823] netlink: 'syz.3.886': attribute type 1 has an invalid length. [ 187.015420][ T8814] netlink: 8 bytes leftover after parsing attributes in process `syz.1.884'. [ 187.060986][ T8829] netlink: 1 bytes leftover after parsing attributes in process `syz.0.888'. [ 187.085455][ T8829] netlink: 1 bytes leftover after parsing attributes in process `syz.0.888'. [ 187.187177][ T8836] bond1: option mode: unable to set because the bond device is up [ 187.366455][ T8841] netlink: 'syz.4.892': attribute type 10 has an invalid length. [ 187.399091][ T8843] netlink: 'syz.0.894': attribute type 25 has an invalid length. [ 187.418534][ T8845] netlink: 52 bytes leftover after parsing attributes in process `syz.1.895'. [ 187.436866][ T8845] netlink: 149 bytes leftover after parsing attributes in process `syz.1.895'. [ 187.890663][ T8863] netlink: 20 bytes leftover after parsing attributes in process `syz.1.903'. [ 188.057076][ T8869] netlink: 28 bytes leftover after parsing attributes in process `syz.0.905'. [ 188.084000][ T8869] netlink: 28 bytes leftover after parsing attributes in process `syz.0.905'. [ 188.202231][ T8874] FAULT_INJECTION: forcing a failure. [ 188.202231][ T8874] name failslab, interval 1, probability 0, space 0, times 0 [ 188.235459][ T8876] _ÐZ`Ô€@: entered promiscuous mode [ 188.242332][ T8874] CPU: 0 UID: 0 PID: 8874 Comm: syz.3.907 Not tainted syzkaller #0 PREEMPT(full) [ 188.242359][ T8874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 188.242370][ T8874] Call Trace: [ 188.242378][ T8874] [ 188.242387][ T8874] dump_stack_lvl+0x189/0x250 [ 188.242418][ T8874] ? __pfx____ratelimit+0x10/0x10 [ 188.242438][ T8874] ? __pfx_dump_stack_lvl+0x10/0x10 [ 188.242462][ T8874] ? __pfx__printk+0x10/0x10 [ 188.242503][ T8874] ? __pfx___might_resched+0x10/0x10 [ 188.242528][ T8874] should_fail_ex+0x414/0x560 [ 188.242559][ T8874] should_failslab+0xa8/0x100 [ 188.242588][ T8874] __kmalloc_cache_node_noprof+0x73/0x3d0 [ 188.242616][ T8874] ? __get_vm_area_node+0x13f/0x300 [ 188.242647][ T8874] __get_vm_area_node+0x13f/0x300 [ 188.242679][ T8874] __vmalloc_node_range_noprof+0x301/0x12f0 [ 188.242707][ T8874] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 188.242732][ T8874] ? __lock_acquire+0xab9/0xd20 [ 188.242789][ T8874] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 188.242812][ T8874] ? __might_fault+0xb0/0x130 [ 188.242838][ T8874] ? _parse_integer_limit+0x1ae/0x1f0 [ 188.242871][ T8874] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 188.242894][ T8874] __vmalloc_noprof+0xb1/0xf0 [ 188.242920][ T8874] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 188.242948][ T8874] bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 188.242988][ T8874] bpf_prog_alloc+0x3c/0x1a0 [ 188.243016][ T8874] bpf_prog_load+0x735/0x1930 [ 188.243061][ T8874] ? __pfx_bpf_prog_load+0x10/0x10 [ 188.243113][ T8874] ? bpf_lsm_bpf+0x9/0x20 [ 188.243135][ T8874] ? security_bpf+0x7e/0x300 [ 188.243163][ T8874] __sys_bpf+0x528/0x870 [ 188.243190][ T8874] ? __pfx___sys_bpf+0x10/0x10 [ 188.243229][ T8874] ? ksys_write+0x22a/0x250 [ 188.243257][ T8874] ? __pfx_ksys_write+0x10/0x10 [ 188.243278][ T8874] ? rcu_is_watching+0x15/0xb0 [ 188.243306][ T8874] __x64_sys_bpf+0x7c/0x90 [ 188.243330][ T8874] do_syscall_64+0xfa/0x3b0 [ 188.243349][ T8874] ? lockdep_hardirqs_on+0x9c/0x150 [ 188.243368][ T8874] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.243387][ T8874] ? clear_bhb_loop+0x60/0xb0 [ 188.243410][ T8874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.243428][ T8874] RIP: 0033:0x7fbcafb8ebe9 [ 188.243446][ T8874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.243463][ T8874] RSP: 002b:00007fbcb0920038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 188.243485][ T8874] RAX: ffffffffffffffda RBX: 00007fbcafdc5fa0 RCX: 00007fbcafb8ebe9 [ 188.243499][ T8874] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 188.243511][ T8874] RBP: 00007fbcb0920090 R08: 0000000000000000 R09: 0000000000000000 [ 188.243523][ T8874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.243534][ T8874] R13: 00007fbcafdc6038 R14: 00007fbcafdc5fa0 R15: 00007ffd2ec447a8 [ 188.243566][ T8874] [ 188.243803][ T8874] syz.3.907: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 188.297441][ T8879] pimreg3: entered allmulticast mode [ 188.302445][ T8874] ,cpuset= [ 188.501927][ T8884] validate_nla: 1 callbacks suppressed [ 188.501946][ T8884] netlink: 'syz.1.913': attribute type 9 has an invalid length. [ 188.506268][ T8874] / [ 188.541417][ T8884] netlink: 'syz.1.913': attribute type 6 has an invalid length. [ 188.548708][ T8874] ,mems_allowed=0-1 [ 188.570906][ T8884] netlink: 'syz.1.913': attribute type 7 has an invalid length. [ 188.579262][ T8874] [ 188.620934][ T8874] CPU: 0 UID: 0 PID: 8874 Comm: syz.3.907 Not tainted syzkaller #0 PREEMPT(full) [ 188.620964][ T8874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 188.620976][ T8874] Call Trace: [ 188.620983][ T8874] [ 188.620990][ T8874] dump_stack_lvl+0x189/0x250 [ 188.621019][ T8874] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 188.621046][ T8874] ? __pfx_dump_stack_lvl+0x10/0x10 [ 188.621067][ T8874] ? __pfx__printk+0x10/0x10 [ 188.621097][ T8874] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 188.621117][ T8874] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 188.621145][ T8874] warn_alloc+0x214/0x310 [ 188.621180][ T8874] ? __pfx_warn_alloc+0x10/0x10 [ 188.621208][ T8874] ? __get_vm_area_node+0x13f/0x300 [ 188.621237][ T8874] ? __get_vm_area_node+0x2b5/0x300 [ 188.621280][ T8874] __vmalloc_node_range_noprof+0x326/0x12f0 [ 188.621307][ T8874] ? __lock_acquire+0xab9/0xd20 [ 188.621365][ T8874] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 188.621390][ T8874] ? __might_fault+0xb0/0x130 [ 188.621416][ T8874] ? _parse_integer_limit+0x1ae/0x1f0 [ 188.621450][ T8874] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 188.621473][ T8874] __vmalloc_noprof+0xb1/0xf0 [ 188.621498][ T8874] ? bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 188.621527][ T8874] bpf_prog_alloc_no_stats+0x4a/0x4b0 [ 188.621556][ T8874] bpf_prog_alloc+0x3c/0x1a0 [ 188.621584][ T8874] bpf_prog_load+0x735/0x1930 [ 188.621621][ T8874] ? __pfx_bpf_prog_load+0x10/0x10 [ 188.621671][ T8874] ? bpf_lsm_bpf+0x9/0x20 [ 188.621693][ T8874] ? security_bpf+0x7e/0x300 [ 188.621722][ T8874] __sys_bpf+0x528/0x870 [ 188.621748][ T8874] ? __pfx___sys_bpf+0x10/0x10 [ 188.621788][ T8874] ? ksys_write+0x22a/0x250 [ 188.621814][ T8874] ? __pfx_ksys_write+0x10/0x10 [ 188.621834][ T8874] ? rcu_is_watching+0x15/0xb0 [ 188.621860][ T8874] __x64_sys_bpf+0x7c/0x90 [ 188.621882][ T8874] do_syscall_64+0xfa/0x3b0 [ 188.621902][ T8874] ? lockdep_hardirqs_on+0x9c/0x150 [ 188.621919][ T8874] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.621936][ T8874] ? clear_bhb_loop+0x60/0xb0 [ 188.621957][ T8874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.621973][ T8874] RIP: 0033:0x7fbcafb8ebe9 [ 188.621989][ T8874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.622003][ T8874] RSP: 002b:00007fbcb0920038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 188.622022][ T8874] RAX: ffffffffffffffda RBX: 00007fbcafdc5fa0 RCX: 00007fbcafb8ebe9 [ 188.622035][ T8874] RDX: 0000000000000094 RSI: 00002000000000c0 RDI: 0000000000000005 [ 188.622044][ T8874] RBP: 00007fbcb0920090 R08: 0000000000000000 R09: 0000000000000000 [ 188.622052][ T8874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.622061][ T8874] R13: 00007fbcafdc6038 R14: 00007fbcafdc5fa0 R15: 00007ffd2ec447a8 [ 188.622084][ T8874] [ 188.903809][ T8874] Mem-Info: [ 188.906959][ T8874] active_anon:3740 inactive_anon:0 isolated_anon:0 [ 188.906959][ T8874] active_file:3479 inactive_file:39889 isolated_file:0 [ 188.906959][ T8874] unevictable:768 dirty:203 writeback:0 [ 188.906959][ T8874] slab_reclaimable:12286 slab_unreclaimable:98690 [ 188.906959][ T8874] mapped:29273 shmem:1358 pagetables:933 [ 188.906959][ T8874] sec_pagetables:0 bounce:0 [ 188.906959][ T8874] kernel_misc_reclaimable:0 [ 188.906959][ T8874] free:1324096 free_pcp:13748 free_cma:0 [ 188.909833][ T8884] netlink: 'syz.1.913': attribute type 8 has an invalid length. [ 188.964018][ T8874] Node 0 active_anon:14928kB inactive_anon:0kB active_file:13916kB inactive_file:159352kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117012kB dirty:816kB writeback:0kB shmem:3896kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11792kB pagetables:3488kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 189.008875][ T8886] netlink: 8 bytes leftover after parsing attributes in process `syz.0.912'. [ 189.025980][ T8874] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 189.056193][ T8874] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 189.085685][ T8874] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 189.091561][ T8874] Node 0 DMA32 free:1387900kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14592kB inactive_anon:0kB active_file:13916kB inactive_file:157776kB unevictable:1536kB writepending:832kB present:3129332kB managed:2557424kB mlocked:0kB bounce:0kB free_pcp:37704kB local_pcp:17356kB free_cma:0kB [ 189.130815][ T8874] lowmem_reserve[]: 0 0 1 1 1 [ 189.136255][ T8874] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 189.166818][ T8874] lowmem_reserve[]: 0 0 0 0 0 [ 189.171640][ T8874] Node 1 Normal free:3892964kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18048kB local_pcp:10208kB free_cma:0kB [ 189.203862][ T8874] lowmem_reserve[]: 0 0 0 0 0 [ 189.208622][ T8874] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 189.221384][ T8874] Node 0 DMA32: 1181*4kB (UME) 881*8kB (UME) 184*16kB (UM) 447*32kB (UME) 195*64kB (UM) 98*128kB (UM) 42*256kB (UME) 16*512kB (UM) 8*1024kB (UME) 4*2048kB (ME) 317*4096kB (M) = 1387804kB [ 189.240302][ T8874] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 189.253602][ T8874] Node 1 Normal: 205*4kB (UE) 56*8kB (UME) 43*16kB (UME) 122*32kB (UME) 30*64kB (UME) 5*128kB (UM) 4*256kB (UME) 3*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 946*4096kB (M) = 3892964kB [ 189.311046][ T8892] tipc: Enabling of bearer rejected, already enabled [ 189.318666][ T8874] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 189.331829][ T8892] tipc: Enabling of bearer rejected, already enabled [ 189.365252][ T8874] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 189.396264][ T8874] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 189.420187][ T8874] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 189.435579][ T8874] 44723 total pagecache pages [ 189.441512][ T8874] 0 pages in swap cache [ 189.445932][ T8874] Free swap = 124996kB [ 189.450334][ T8874] Total swap = 124996kB [ 189.460345][ T8874] 2097051 pages RAM [ 189.469391][ T8898] syz_tun: entered allmulticast mode [ 189.476192][ T8874] 0 pages HighMem/MovableOnly [ 189.496681][ T8874] 425669 pages reserved [ 189.500897][ T8874] 0 pages cma reserved [ 189.509048][ T8898] dvmrp8: entered allmulticast mode [ 190.062755][ T8914] netlink: 'syz.3.923': attribute type 1 has an invalid length. [ 190.176251][ T8897] syz_tun: left allmulticast mode [ 190.193456][ T8897] dvmrp8: left allmulticast mode [ 190.342544][ T8918] netlink: 'syz.2.925': attribute type 1 has an invalid length. [ 191.204787][ T8957] FAULT_INJECTION: forcing a failure. [ 191.204787][ T8957] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 191.222817][ T8957] CPU: 1 UID: 0 PID: 8957 Comm: syz.4.935 Not tainted syzkaller #0 PREEMPT(full) [ 191.222845][ T8957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 191.222856][ T8957] Call Trace: [ 191.222864][ T8957] [ 191.222873][ T8957] dump_stack_lvl+0x189/0x250 [ 191.222902][ T8957] ? __pfx____ratelimit+0x10/0x10 [ 191.222950][ T8957] ? __pfx_dump_stack_lvl+0x10/0x10 [ 191.222974][ T8957] ? __pfx__printk+0x10/0x10 [ 191.223000][ T8957] ? __might_fault+0xb0/0x130 [ 191.223038][ T8957] should_fail_ex+0x414/0x560 [ 191.223069][ T8957] _copy_from_user+0x2d/0xb0 [ 191.223092][ T8957] ___sys_sendmsg+0x158/0x2a0 [ 191.223119][ T8957] ? __pfx____sys_sendmsg+0x10/0x10 [ 191.223183][ T8957] ? __fget_files+0x2a/0x420 [ 191.223199][ T8957] ? __fget_files+0x3a0/0x420 [ 191.223227][ T8957] __x64_sys_sendmsg+0x19b/0x260 [ 191.223253][ T8957] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 191.223293][ T8957] ? __pfx_ksys_write+0x10/0x10 [ 191.223316][ T8957] ? rcu_is_watching+0x15/0xb0 [ 191.223342][ T8957] ? do_syscall_64+0xbe/0x3b0 [ 191.223367][ T8957] do_syscall_64+0xfa/0x3b0 [ 191.223385][ T8957] ? lockdep_hardirqs_on+0x9c/0x150 [ 191.223404][ T8957] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.223422][ T8957] ? clear_bhb_loop+0x60/0xb0 [ 191.223446][ T8957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.223463][ T8957] RIP: 0033:0x7f8b8f78ebe9 [ 191.223482][ T8957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.223498][ T8957] RSP: 002b:00007f8b906e4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 191.223519][ T8957] RAX: ffffffffffffffda RBX: 00007f8b8f9c5fa0 RCX: 00007f8b8f78ebe9 [ 191.223533][ T8957] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 191.223546][ T8957] RBP: 00007f8b906e4090 R08: 0000000000000000 R09: 0000000000000000 [ 191.223558][ T8957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.223569][ T8957] R13: 00007f8b8f9c6038 R14: 00007f8b8f9c5fa0 R15: 00007ffe55bf6558 [ 191.223602][ T8957] [ 191.678095][ T8964] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 191.748693][ T8965] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 191.836555][ T8972] __nla_validate_parse: 1 callbacks suppressed [ 191.836576][ T8972] netlink: 12 bytes leftover after parsing attributes in process `syz.4.943'. [ 191.862431][ T8974] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.942'. [ 191.945257][ T8976] FAULT_INJECTION: forcing a failure. [ 191.945257][ T8976] name failslab, interval 1, probability 0, space 0, times 0 [ 191.981324][ T8976] CPU: 1 UID: 0 PID: 8976 Comm: syz.1.944 Not tainted syzkaller #0 PREEMPT(full) [ 191.981355][ T8976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 191.981366][ T8976] Call Trace: [ 191.981374][ T8976] [ 191.981384][ T8976] dump_stack_lvl+0x189/0x250 [ 191.981412][ T8976] ? __pfx____ratelimit+0x10/0x10 [ 191.981432][ T8976] ? __pfx_dump_stack_lvl+0x10/0x10 [ 191.981455][ T8976] ? __pfx__printk+0x10/0x10 [ 191.981487][ T8976] ? __pfx___might_resched+0x10/0x10 [ 191.981511][ T8976] should_fail_ex+0x414/0x560 [ 191.981542][ T8976] should_failslab+0xa8/0x100 [ 191.981570][ T8976] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 191.981596][ T8976] ? __alloc_skb+0x112/0x2d0 [ 191.981620][ T8976] __alloc_skb+0x112/0x2d0 [ 191.981645][ T8976] netlink_sendmsg+0x5c6/0xb30 [ 191.981677][ T8976] ? __pfx_netlink_sendmsg+0x10/0x10 [ 191.981700][ T8976] ? aa_sock_msg_perm+0xf1/0x1d0 [ 191.981721][ T8976] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 191.981742][ T8976] ? __pfx_netlink_sendmsg+0x10/0x10 [ 191.981763][ T8976] __sock_sendmsg+0x219/0x270 [ 191.981794][ T8976] ____sys_sendmsg+0x52d/0x830 [ 191.981823][ T8976] ? __pfx_____sys_sendmsg+0x10/0x10 [ 191.981855][ T8976] ? import_iovec+0x74/0xa0 [ 191.981882][ T8976] ___sys_sendmsg+0x21f/0x2a0 [ 191.981908][ T8976] ? __pfx____sys_sendmsg+0x10/0x10 [ 191.981971][ T8976] ? __fget_files+0x2a/0x420 [ 191.981996][ T8976] ? __fget_files+0x3a0/0x420 [ 191.982026][ T8976] __sys_sendmmsg+0x227/0x430 [ 191.982054][ T8976] ? __pfx___sys_sendmmsg+0x10/0x10 [ 191.982073][ T8976] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 191.982125][ T8976] ? ksys_write+0x22a/0x250 [ 191.982150][ T8976] ? __pfx_ksys_write+0x10/0x10 [ 191.982172][ T8976] ? rcu_is_watching+0x15/0xb0 [ 191.982200][ T8976] __x64_sys_sendmmsg+0xa0/0xc0 [ 191.982225][ T8976] do_syscall_64+0xfa/0x3b0 [ 191.982243][ T8976] ? lockdep_hardirqs_on+0x9c/0x150 [ 191.982262][ T8976] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.982282][ T8976] ? clear_bhb_loop+0x60/0xb0 [ 191.982305][ T8976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.982329][ T8976] RIP: 0033:0x7fe31318ebe9 [ 191.982348][ T8976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.982365][ T8976] RSP: 002b:00007fe313fa5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 191.982387][ T8976] RAX: ffffffffffffffda RBX: 00007fe3133c5fa0 RCX: 00007fe31318ebe9 [ 191.982401][ T8976] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 191.982413][ T8976] RBP: 00007fe313fa5090 R08: 0000000000000000 R09: 0000000000000000 [ 191.982425][ T8976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.982436][ T8976] R13: 00007fe3133c6038 R14: 00007fe3133c5fa0 R15: 00007ffd64465448 [ 191.982467][ T8976] [ 192.391346][ T8986] sysfs: cannot create duplicate filename '/class/ieee80211/!å' [ 192.399251][ T8986] CPU: 1 UID: 0 PID: 8986 Comm: syz.4.948 Not tainted syzkaller #0 PREEMPT(full) [ 192.399287][ T8986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 192.399300][ T8986] Call Trace: [ 192.399308][ T8986] [ 192.399317][ T8986] dump_stack_lvl+0x189/0x250 [ 192.399352][ T8986] ? __pfx_dump_stack_lvl+0x10/0x10 [ 192.399377][ T8986] ? __pfx__printk+0x10/0x10 [ 192.399414][ T8986] ? kernfs_path_from_node+0x2f/0x290 [ 192.399437][ T8986] ? kernfs_path_from_node+0x250/0x290 [ 192.399458][ T8986] ? kernfs_path_from_node+0x2f/0x290 [ 192.399486][ T8986] sysfs_warn_dup+0x8e/0xa0 [ 192.399509][ T8986] sysfs_do_create_link_sd+0xc0/0x110 [ 192.399535][ T8986] device_add_class_symlinks+0x1cf/0x240 [ 192.399562][ T8986] device_add+0x475/0xb50 [ 192.399589][ T8986] wiphy_register+0x1ba6/0x28d0 [ 192.399632][ T8986] ? __pfx_wiphy_register+0x10/0x10 [ 192.399652][ T8986] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 192.399686][ T8986] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 192.399716][ T8986] ieee80211_register_hw+0x3425/0x4080 [ 192.399765][ T8986] ? ieee80211_register_hw+0x13f1/0x4080 [ 192.399802][ T8986] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 192.399834][ T8986] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 192.399874][ T8986] ? __hrtimer_setup+0x187/0x210 [ 192.399892][ T8986] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 192.399926][ T8986] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 192.399992][ T8986] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 192.400016][ T8986] ? trace_kmalloc+0x1f/0xd0 [ 192.400040][ T8986] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 192.400066][ T8986] ? kstrndup+0xbf/0x160 [ 192.400101][ T8986] hwsim_new_radio_nl+0xea4/0x1b10 [ 192.400131][ T8986] ? __pfx___nla_validate_parse+0x10/0x10 [ 192.400181][ T8986] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 192.400225][ T8986] ? __nla_parse+0x40/0x60 [ 192.400260][ T8986] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 192.400307][ T8986] genl_family_rcv_msg_doit+0x215/0x300 [ 192.400343][ T8986] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 192.400386][ T8986] ? bpf_lsm_capable+0x9/0x20 [ 192.400412][ T8986] ? security_capable+0x7e/0x2e0 [ 192.400451][ T8986] genl_rcv_msg+0x60e/0x790 [ 192.400486][ T8986] ? __pfx_genl_rcv_msg+0x10/0x10 [ 192.400511][ T8986] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 192.400557][ T8986] netlink_rcv_skb+0x205/0x470 [ 192.400575][ T8986] ? __lock_acquire+0xab9/0xd20 [ 192.400605][ T8986] ? __pfx_genl_rcv_msg+0x10/0x10 [ 192.400632][ T8986] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 192.400678][ T8986] ? down_read+0x1ad/0x2e0 [ 192.400705][ T8986] genl_rcv+0x28/0x40 [ 192.400728][ T8986] netlink_unicast+0x82c/0x9e0 [ 192.400769][ T8986] ? __pfx_netlink_unicast+0x10/0x10 [ 192.400802][ T8986] ? netlink_sendmsg+0x642/0xb30 [ 192.400819][ T8986] ? skb_put+0x11b/0x210 [ 192.400846][ T8986] netlink_sendmsg+0x805/0xb30 [ 192.400880][ T8986] ? __pfx_netlink_sendmsg+0x10/0x10 [ 192.400905][ T8986] ? aa_sock_msg_perm+0xf1/0x1d0 [ 192.400928][ T8986] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 192.400950][ T8986] ? __pfx_netlink_sendmsg+0x10/0x10 [ 192.400972][ T8986] __sock_sendmsg+0x219/0x270 [ 192.401006][ T8986] ____sys_sendmsg+0x505/0x830 [ 192.401034][ T8986] ? __pfx_____sys_sendmsg+0x10/0x10 [ 192.401070][ T8986] ? import_iovec+0x74/0xa0 [ 192.401102][ T8986] ___sys_sendmsg+0x21f/0x2a0 [ 192.401125][ T8986] ? __pfx____sys_sendmsg+0x10/0x10 [ 192.401189][ T8986] ? __fget_files+0x2a/0x420 [ 192.401205][ T8986] ? __fget_files+0x3a0/0x420 [ 192.401235][ T8986] __x64_sys_sendmsg+0x19b/0x260 [ 192.401271][ T8986] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 192.401309][ T8986] ? rcu_is_watching+0x15/0xb0 [ 192.401337][ T8986] ? do_syscall_64+0xbe/0x3b0 [ 192.401365][ T8986] do_syscall_64+0xfa/0x3b0 [ 192.401385][ T8986] ? lockdep_hardirqs_on+0x9c/0x150 [ 192.401405][ T8986] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.401425][ T8986] ? clear_bhb_loop+0x60/0xb0 [ 192.401452][ T8986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.401472][ T8986] RIP: 0033:0x7f8b8f78ebe9 [ 192.401492][ T8986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.401509][ T8986] RSP: 002b:00007f8b906e4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 192.401532][ T8986] RAX: ffffffffffffffda RBX: 00007f8b8f9c5fa0 RCX: 00007f8b8f78ebe9 [ 192.401547][ T8986] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004 [ 192.401559][ T8986] RBP: 00007f8b8f811e19 R08: 0000000000000000 R09: 0000000000000000 [ 192.401572][ T8986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 192.401583][ T8986] R13: 00007f8b8f9c6038 R14: 00007f8b8f9c5fa0 R15: 00007ffe55bf6558 [ 192.401620][ T8986] [ 192.861003][ T8987] netlink: 'syz.2.946': attribute type 10 has an invalid length. [ 193.021198][ T8996] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:4100:0000:0000:7d01 with DS=0xe [ 193.241459][ T9009] netlink: 28 bytes leftover after parsing attributes in process `syz.4.956'. [ 193.496843][ T9017] netlink: 'syz.2.961': attribute type 10 has an invalid length. [ 193.566448][ T9019] netlink: 'syz.0.960': attribute type 1 has an invalid length. [ 193.592979][ T9019] netlink: 224 bytes leftover after parsing attributes in process `syz.0.960'. [ 193.763091][ T9027] bond1: option mode: unable to set because the bond device is up [ 194.196847][ T9042] netlink: 36 bytes leftover after parsing attributes in process `syz.1.967'. [ 194.224114][ T9042] netlink: 16 bytes leftover after parsing attributes in process `syz.1.967'. [ 194.251525][ T9042] netlink: 36 bytes leftover after parsing attributes in process `syz.1.967'. [ 194.269989][ T9042] netlink: 36 bytes leftover after parsing attributes in process `syz.1.967'. [ 194.325011][ T9045] netlink: 96 bytes leftover after parsing attributes in process `syz.4.970'. [ 194.384995][ T9045] ipvlan2: entered promiscuous mode [ 194.394801][ T9045] bridge0: port 1(ipvlan2) entered blocking state [ 194.402452][ T9045] bridge0: port 1(ipvlan2) entered disabled state [ 194.409243][ T9045] ipvlan2: entered allmulticast mode [ 194.420121][ T9045] gretap0: entered allmulticast mode [ 194.433473][ T9045] ipvlan2: left allmulticast mode [ 194.438853][ T9045] gretap0: left allmulticast mode [ 194.637318][ T9060] netlink: 4 bytes leftover after parsing attributes in process `syz.0.974'. [ 195.045942][ T9069] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 195.886550][ T9102] vlan2: entered promiscuous mode [ 196.290911][ T9128] tipc: Enabling of bearer rejected, already enabled [ 196.307516][ T9128] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 196.315455][ T9128] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 196.488406][ T9136] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.500613][ T9136] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.584496][ T9136] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.602937][ T9136] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.700549][ T9136] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.714378][ T9136] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.799583][ T9136] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.813951][ T9136] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.197070][ T9172] FAULT_INJECTION: forcing a failure. [ 197.197070][ T9172] name failslab, interval 1, probability 0, space 0, times 0 [ 197.210421][ T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.218991][ T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.228144][ T9172] CPU: 1 UID: 0 PID: 9172 Comm: syz.2.1013 Not tainted syzkaller #0 PREEMPT(full) [ 197.228171][ T9172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 197.228182][ T9172] Call Trace: [ 197.228190][ T9172] [ 197.228199][ T9172] dump_stack_lvl+0x189/0x250 [ 197.228229][ T9172] ? __pfx____ratelimit+0x10/0x10 [ 197.228250][ T9172] ? __pfx_dump_stack_lvl+0x10/0x10 [ 197.228273][ T9172] ? __pfx__printk+0x10/0x10 [ 197.228306][ T9172] ? __pfx___might_resched+0x10/0x10 [ 197.228332][ T9172] should_fail_ex+0x414/0x560 [ 197.228364][ T9172] should_failslab+0xa8/0x100 [ 197.228393][ T9172] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 197.228420][ T9172] ? __alloc_skb+0x112/0x2d0 [ 197.228445][ T9172] __alloc_skb+0x112/0x2d0 [ 197.228469][ T9172] netlink_sendmsg+0x5c6/0xb30 [ 197.228501][ T9172] ? __pfx_netlink_sendmsg+0x10/0x10 [ 197.228526][ T9172] ? aa_sock_msg_perm+0xf1/0x1d0 [ 197.228547][ T9172] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 197.228568][ T9172] ? __pfx_netlink_sendmsg+0x10/0x10 [ 197.228588][ T9172] __sock_sendmsg+0x219/0x270 [ 197.228617][ T9172] ____sys_sendmsg+0x505/0x830 [ 197.228644][ T9172] ? __pfx_____sys_sendmsg+0x10/0x10 [ 197.228676][ T9172] ? import_iovec+0x74/0xa0 [ 197.228704][ T9172] ___sys_sendmsg+0x21f/0x2a0 [ 197.228729][ T9172] ? __pfx____sys_sendmsg+0x10/0x10 [ 197.228794][ T9172] ? __fget_files+0x2a/0x420 [ 197.228811][ T9172] ? __fget_files+0x3a0/0x420 [ 197.228840][ T9172] __x64_sys_sendmsg+0x19b/0x260 [ 197.228876][ T9172] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 197.228910][ T9172] ? __pfx_ksys_write+0x10/0x10 [ 197.228933][ T9172] ? rcu_is_watching+0x15/0xb0 [ 197.228959][ T9172] ? do_syscall_64+0xbe/0x3b0 [ 197.228990][ T9172] do_syscall_64+0xfa/0x3b0 [ 197.229009][ T9172] ? lockdep_hardirqs_on+0x9c/0x150 [ 197.229028][ T9172] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.229047][ T9172] ? clear_bhb_loop+0x60/0xb0 [ 197.229070][ T9172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.229088][ T9172] RIP: 0033:0x7f804678ebe9 [ 197.229106][ T9172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.229122][ T9172] RSP: 002b:00007f80476d6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 197.229144][ T9172] RAX: ffffffffffffffda RBX: 00007f80469c5fa0 RCX: 00007f804678ebe9 [ 197.229158][ T9172] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 197.229170][ T9172] RBP: 00007f80476d6090 R08: 0000000000000000 R09: 0000000000000000 [ 197.229182][ T9172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.229193][ T9172] R13: 00007f80469c6038 R14: 00007f80469c5fa0 R15: 00007ffc3a815388 [ 197.229227][ T9172] [ 197.530900][ T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.555414][ T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.592436][ T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.605368][ T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.826015][ T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.860819][ T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.989825][ T9190] __nla_validate_parse: 14 callbacks suppressed [ 197.989847][ T9190] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1017'. [ 198.477050][ T9223] IPVS: set_ctl: invalid protocol: 94 172.20.20.170:20002 [ 198.489753][ T9223] IPVS: set_ctl: invalid protocol: 108 0.0.0.0:20003 [ 198.528380][ T9226] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1029'. [ 198.542536][ T9226] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1029'. [ 198.605771][ T9225] delete_channel: no stack [ 198.675526][ T9234] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1030'. [ 198.967580][ T9240] bridge: RTM_NEWNEIGH with invalid ether address [ 199.238030][ T9244] team0: Device sit1 is of different type [ 199.350428][ T9250] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1036'. [ 199.677263][ T9262] netlink: 'syz.1.1040': attribute type 10 has an invalid length. [ 199.739601][ T9265] netlink: 'syz.4.1042': attribute type 1 has an invalid length. [ 199.761533][ T9265] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1042'. [ 199.967670][ T9277] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 200.160535][ T9290] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1049'. [ 200.170215][ T9290] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1049'. [ 200.210686][ T9290] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1049'. [ 200.225803][ T9291] openvswitch: netlink: Message has 4 unknown bytes. [ 200.347906][ T9296] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1052'. [ 200.555206][ T9300] netlink: 'syz.4.1053': attribute type 10 has an invalid length. [ 200.574622][ T9300] bond0: (slave wlan1): Opening slave failed [ 200.713602][ T9306] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 200.743806][ T9306] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 201.091667][ T9319] IPv6: Can't replace route, no match found [ 201.093538][ T9321] netlink: 'syz.0.1061': attribute type 1 has an invalid length. [ 201.202772][ T9328] netlink: 'syz.3.1058': attribute type 1 has an invalid length. [ 201.239271][ T9328] netlink: 'syz.3.1058': attribute type 1 has an invalid length. [ 201.290441][ T9332] netlink: 'syz.2.1063': attribute type 9 has an invalid length. [ 201.314978][ T9332] netlink: 'syz.2.1063': attribute type 6 has an invalid length. [ 201.358096][ T9332] netlink: 'syz.2.1063': attribute type 7 has an invalid length. [ 201.408844][ T9332] netlink: 'syz.2.1063': attribute type 8 has an invalid length. [ 201.415656][ T9321] 8021q: adding VLAN 0 to HW filter on device bond2 [ 201.452957][ T9327] bond2: (slave bridge1): making interface the new active one [ 201.468718][ T9327] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 201.539820][ T9329] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 201.690408][ T9352] bond0: (slave wlan1): Opening slave failed [ 201.936932][ T9359] syzkaller1: entered promiscuous mode [ 201.964771][ T9359] syzkaller1: entered allmulticast mode [ 202.355007][ T9379] syzkaller1: entered promiscuous mode [ 202.360764][ T9379] syzkaller1: entered allmulticast mode [ 203.139536][ T9418] __nla_validate_parse: 7 callbacks suppressed [ 203.139555][ T9418] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1094'. [ 203.228067][ T9418] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1094'. [ 203.258575][ T9423] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1096'. [ 203.537200][ T9435] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1100'. [ 203.580725][ T9435] FAULT_INJECTION: forcing a failure. [ 203.580725][ T9435] name failslab, interval 1, probability 0, space 0, times 0 [ 203.649686][ T9435] CPU: 1 UID: 0 PID: 9435 Comm: syz.4.1100 Not tainted syzkaller #0 PREEMPT(full) [ 203.649715][ T9435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 203.649726][ T9435] Call Trace: [ 203.649734][ T9435] [ 203.649743][ T9435] dump_stack_lvl+0x189/0x250 [ 203.649773][ T9435] ? __pfx____ratelimit+0x10/0x10 [ 203.649794][ T9435] ? __pfx_dump_stack_lvl+0x10/0x10 [ 203.649826][ T9435] ? __pfx__printk+0x10/0x10 [ 203.649858][ T9435] ? __pfx___might_resched+0x10/0x10 [ 203.649877][ T9435] ? fs_reclaim_acquire+0x7d/0x100 [ 203.649911][ T9435] should_fail_ex+0x414/0x560 [ 203.649943][ T9435] should_failslab+0xa8/0x100 [ 203.649974][ T9435] __kmalloc_cache_noprof+0x70/0x3d0 [ 203.649999][ T9435] ? device_add+0xbe/0xb50 [ 203.650023][ T9435] device_add+0xbe/0xb50 [ 203.650048][ T9435] wpan_phy_register+0x2f/0x110 [ 203.650076][ T9435] ieee802154_register_hw+0x655/0x980 [ 203.650125][ T9435] ? __pfx_ieee802154_register_hw+0x10/0x10 [ 203.650157][ T9435] ? ksm_do_scan+0x2a80/0x6530 [ 203.650180][ T9435] ? hwsim_add_one+0x365/0x1420 [ 203.650214][ T9435] hwsim_add_one+0x4b2/0x1420 [ 203.650253][ T9435] genl_family_rcv_msg_doit+0x215/0x300 [ 203.650285][ T9435] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 203.650325][ T9435] ? bpf_lsm_capable+0x9/0x20 [ 203.650350][ T9435] ? security_capable+0x7e/0x2e0 [ 203.650384][ T9435] genl_rcv_msg+0x60e/0x790 [ 203.650418][ T9435] ? __pfx_genl_rcv_msg+0x10/0x10 [ 203.650442][ T9435] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 203.650487][ T9435] netlink_rcv_skb+0x205/0x470 [ 203.650504][ T9435] ? __lock_acquire+0xab9/0xd20 [ 203.650532][ T9435] ? __pfx_genl_rcv_msg+0x10/0x10 [ 203.650558][ T9435] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 203.650603][ T9435] ? down_read+0x1ad/0x2e0 [ 203.650629][ T9435] genl_rcv+0x28/0x40 [ 203.650651][ T9435] netlink_unicast+0x82c/0x9e0 [ 203.650696][ T9435] ? __pfx_netlink_unicast+0x10/0x10 [ 203.650725][ T9435] ? netlink_sendmsg+0x642/0xb30 [ 203.650742][ T9435] ? skb_put+0x11b/0x210 [ 203.650768][ T9435] netlink_sendmsg+0x805/0xb30 [ 203.650808][ T9435] ? __pfx_netlink_sendmsg+0x10/0x10 [ 203.650833][ T9435] ? aa_sock_msg_perm+0xf1/0x1d0 [ 203.650855][ T9435] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 203.650875][ T9435] ? __pfx_netlink_sendmsg+0x10/0x10 [ 203.650895][ T9435] __sock_sendmsg+0x219/0x270 [ 203.650927][ T9435] ____sys_sendmsg+0x505/0x830 [ 203.650958][ T9435] ? __pfx_____sys_sendmsg+0x10/0x10 [ 203.650993][ T9435] ? import_iovec+0x74/0xa0 [ 203.651021][ T9435] ___sys_sendmsg+0x21f/0x2a0 [ 203.651046][ T9435] ? __pfx____sys_sendmsg+0x10/0x10 [ 203.651107][ T9435] ? __fget_files+0x2a/0x420 [ 203.651123][ T9435] ? __fget_files+0x3a0/0x420 [ 203.651152][ T9435] __x64_sys_sendmsg+0x19b/0x260 [ 203.651177][ T9435] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 203.651210][ T9435] ? __pfx_ksys_write+0x10/0x10 [ 203.651232][ T9435] ? rcu_is_watching+0x15/0xb0 [ 203.651256][ T9435] ? do_syscall_64+0xbe/0x3b0 [ 203.651281][ T9435] do_syscall_64+0xfa/0x3b0 [ 203.651299][ T9435] ? lockdep_hardirqs_on+0x9c/0x150 [ 203.651317][ T9435] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.651335][ T9435] ? clear_bhb_loop+0x60/0xb0 [ 203.651358][ T9435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.651375][ T9435] RIP: 0033:0x7f8b8f78ebe9 [ 203.651393][ T9435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.651409][ T9435] RSP: 002b:00007f8b906e4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 203.651430][ T9435] RAX: ffffffffffffffda RBX: 00007f8b8f9c5fa0 RCX: 00007f8b8f78ebe9 [ 203.651443][ T9435] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 203.651455][ T9435] RBP: 00007f8b906e4090 R08: 0000000000000000 R09: 0000000000000000 [ 203.651466][ T9435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 203.651477][ T9435] R13: 00007f8b8f9c6038 R14: 00007f8b8f9c5fa0 R15: 00007ffe55bf6558 [ 203.651512][ T9435] [ 204.132411][ T9441] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1102'. [ 204.181639][ T9456] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1105'. [ 204.301557][ T9441] syzkaller1: entered promiscuous mode [ 204.307174][ T9441] syzkaller1: entered allmulticast mode [ 204.421072][ T9466] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1111'. [ 204.430360][ T9466] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1111'. [ 204.561900][ T9473] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1115'. [ 204.809082][ T9486] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1120'. [ 204.920658][ T9489] FAULT_INJECTION: forcing a failure. [ 204.920658][ T9489] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 204.946425][ T9489] CPU: 0 UID: 0 PID: 9489 Comm: syz.2.1121 Not tainted syzkaller #0 PREEMPT(full) [ 204.946453][ T9489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 204.946465][ T9489] Call Trace: [ 204.946473][ T9489] [ 204.946481][ T9489] dump_stack_lvl+0x189/0x250 [ 204.946509][ T9489] ? __pfx____ratelimit+0x10/0x10 [ 204.946528][ T9489] ? __pfx_dump_stack_lvl+0x10/0x10 [ 204.946547][ T9489] ? __pfx__printk+0x10/0x10 [ 204.946582][ T9489] should_fail_ex+0x414/0x560 [ 204.946612][ T9489] _copy_to_user+0x31/0xb0 [ 204.946636][ T9489] simple_read_from_buffer+0xe1/0x170 [ 204.946669][ T9489] proc_fail_nth_read+0x1b3/0x220 [ 204.946694][ T9489] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 204.946717][ T9489] ? rw_verify_area+0x2a6/0x4d0 [ 204.946739][ T9489] ? __lock_acquire+0xab9/0xd20 [ 204.946774][ T9489] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 204.946797][ T9489] vfs_read+0x1fd/0xa30 [ 204.946818][ T9489] ? fdget_pos+0x247/0x320 [ 204.946840][ T9489] ? __pfx___mutex_lock+0x10/0x10 [ 204.946861][ T9489] ? __pfx_vfs_read+0x10/0x10 [ 204.946886][ T9489] ? __fget_files+0x2a/0x420 [ 204.946907][ T9489] ? __fget_files+0x3a0/0x420 [ 204.946922][ T9489] ? __fget_files+0x2a/0x420 [ 204.946948][ T9489] ksys_read+0x145/0x250 [ 204.946975][ T9489] ? __pfx_ksys_read+0x10/0x10 [ 204.947003][ T9489] ? do_syscall_64+0xbe/0x3b0 [ 204.947027][ T9489] do_syscall_64+0xfa/0x3b0 [ 204.947045][ T9489] ? lockdep_hardirqs_on+0x9c/0x150 [ 204.947062][ T9489] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.947081][ T9489] ? clear_bhb_loop+0x60/0xb0 [ 204.947104][ T9489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.947121][ T9489] RIP: 0033:0x7f804678d5fc [ 204.947139][ T9489] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 204.947161][ T9489] RSP: 002b:00007f80476d6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 204.947183][ T9489] RAX: ffffffffffffffda RBX: 00007f80469c5fa0 RCX: 00007f804678d5fc [ 204.947196][ T9489] RDX: 000000000000000f RSI: 00007f80476d60a0 RDI: 0000000000000005 [ 204.947208][ T9489] RBP: 00007f80476d6090 R08: 0000000000000000 R09: 0000000000000000 [ 204.947219][ T9489] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 204.947230][ T9489] R13: 00007f80469c6038 R14: 00007f80469c5fa0 R15: 00007ffc3a815388 [ 204.947263][ T9489] [ 205.443682][ T9505] FAULT_INJECTION: forcing a failure. [ 205.443682][ T9505] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 205.473618][ T9505] CPU: 1 UID: 0 PID: 9505 Comm: syz.4.1127 Not tainted syzkaller #0 PREEMPT(full) [ 205.473648][ T9505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 205.473660][ T9505] Call Trace: [ 205.473667][ T9505] [ 205.473677][ T9505] dump_stack_lvl+0x189/0x250 [ 205.473708][ T9505] ? __pfx____ratelimit+0x10/0x10 [ 205.473728][ T9505] ? __pfx_dump_stack_lvl+0x10/0x10 [ 205.473751][ T9505] ? __pfx__printk+0x10/0x10 [ 205.473780][ T9505] ? fs_reclaim_acquire+0x7d/0x100 [ 205.473833][ T9505] should_fail_ex+0x414/0x560 [ 205.473866][ T9505] prepare_alloc_pages+0x213/0x610 [ 205.473895][ T9505] __alloc_frozen_pages_noprof+0x123/0x370 [ 205.473920][ T9505] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 205.473952][ T9505] ? policy_nodemask+0x27c/0x720 [ 205.473975][ T9505] ? __lock_acquire+0xab9/0xd20 [ 205.474010][ T9505] alloc_pages_mpol+0x232/0x4a0 [ 205.474043][ T9505] vma_alloc_folio_noprof+0xe4/0x200 [ 205.474069][ T9505] ? page_table_check_set+0x18d/0x730 [ 205.474096][ T9505] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 205.474139][ T9505] folio_prealloc+0x30/0x180 [ 205.474169][ T9505] __handle_mm_fault+0x2ab9/0x5440 [ 205.474214][ T9505] ? __pfx___handle_mm_fault+0x10/0x10 [ 205.474261][ T9505] ? follow_page_pte+0x7ef/0x13e0 [ 205.474297][ T9505] handle_mm_fault+0x40a/0x8e0 [ 205.474335][ T9505] __get_user_pages+0x1699/0x2ce0 [ 205.474406][ T9505] __gup_longterm_locked+0x3dc/0x1660 [ 205.474451][ T9505] ? rcu_is_watching+0x15/0xb0 [ 205.474469][ T9505] ? xdp_umem_pin_pages+0x52/0x340 [ 205.474493][ T9505] pin_user_pages+0x9e/0xd0 [ 205.474518][ T9505] xdp_umem_pin_pages+0x117/0x340 [ 205.474544][ T9505] xdp_umem_create+0x677/0x8e0 [ 205.474582][ T9505] xsk_setsockopt+0x7b0/0x8d0 [ 205.474614][ T9505] ? __pfx_xsk_setsockopt+0x10/0x10 [ 205.474650][ T9505] ? __fget_files+0x2a/0x420 [ 205.474664][ T9505] ? aa_sock_opt_perm+0xff/0x1b0 [ 205.474687][ T9505] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 205.474707][ T9505] ? __pfx_xsk_setsockopt+0x10/0x10 [ 205.474736][ T9505] do_sock_setsockopt+0x179/0x1b0 [ 205.474765][ T9505] __x64_sys_setsockopt+0x13f/0x1b0 [ 205.474794][ T9505] do_syscall_64+0xfa/0x3b0 [ 205.474822][ T9505] ? lockdep_hardirqs_on+0x9c/0x150 [ 205.474841][ T9505] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.474860][ T9505] ? clear_bhb_loop+0x60/0xb0 [ 205.474885][ T9505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.474903][ T9505] RIP: 0033:0x7f8b8f78ebe9 [ 205.474923][ T9505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.474940][ T9505] RSP: 002b:00007f8b906e4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 205.474962][ T9505] RAX: ffffffffffffffda RBX: 00007f8b8f9c5fa0 RCX: 00007f8b8f78ebe9 [ 205.474976][ T9505] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000003 [ 205.474988][ T9505] RBP: 00007f8b906e4090 R08: 0000000000000020 R09: 0000000000000000 [ 205.475001][ T9505] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000002 [ 205.475013][ T9505] R13: 00007f8b8f9c6038 R14: 00007f8b8f9c5fa0 R15: 00007ffe55bf6558 [ 205.475049][ T9505] [ 205.799693][ T9510] dvmrp1: entered allmulticast mode [ 205.809060][ T9510] 8021q: VLANs not supported on ip_vti0 [ 205.824317][ T9510] dvmrp8: entered allmulticast mode [ 205.856309][ T9508] dvmrp8: left allmulticast mode [ 205.922812][ T9515] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma? [ 206.240445][ T9537] validate_nla: 3 callbacks suppressed [ 206.240465][ T9537] netlink: 'syz.2.1138': attribute type 10 has an invalid length. [ 206.303776][ T9515] bond1: (slave macvlan4): Releasing backup interface [ 206.318013][ T9515] bond0 (unregistering): Released all slaves [ 206.530340][ T9546] nft_compat: unsupported protocol 1 [ 206.645714][ T9555] FAULT_INJECTION: forcing a failure. [ 206.645714][ T9555] name failslab, interval 1, probability 0, space 0, times 0 [ 206.658464][ T9555] CPU: 1 UID: 0 PID: 9555 Comm: syz.0.1144 Not tainted syzkaller #0 PREEMPT(full) [ 206.658491][ T9555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 206.658503][ T9555] Call Trace: [ 206.658511][ T9555] [ 206.658519][ T9555] dump_stack_lvl+0x189/0x250 [ 206.658547][ T9555] ? __pfx____ratelimit+0x10/0x10 [ 206.658567][ T9555] ? __pfx_dump_stack_lvl+0x10/0x10 [ 206.658589][ T9555] ? __pfx__printk+0x10/0x10 [ 206.658622][ T9555] ? __lock_acquire+0xab9/0xd20 [ 206.658655][ T9555] should_fail_ex+0x414/0x560 [ 206.658686][ T9555] should_failslab+0xa8/0x100 [ 206.658715][ T9555] kmem_cache_alloc_noprof+0x73/0x3c0 [ 206.658740][ T9555] ? skb_clone+0x212/0x3a0 [ 206.658760][ T9555] ? run_filter+0x23/0x270 [ 206.658809][ T9555] skb_clone+0x212/0x3a0 [ 206.658830][ T9555] ? packet_rcv+0x567/0x1730 [ 206.658856][ T9555] packet_rcv+0x65b/0x1730 [ 206.658891][ T9555] ? __pfx_packet_rcv+0x10/0x10 [ 206.658913][ T9555] __netif_receive_skb_core+0xe08/0x4020 [ 206.658953][ T9555] ? kernel_text_address+0xa5/0xe0 [ 206.658981][ T9555] ? __kernel_text_address+0xd/0x40 [ 206.659007][ T9555] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 206.659031][ T9555] ? arch_stack_walk+0xfc/0x150 [ 206.659070][ T9555] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 206.659101][ T9555] ? stack_trace_save+0x9c/0xe0 [ 206.659140][ T9555] ? kasan_save_track+0x4f/0x80 [ 206.659162][ T9555] ? kasan_save_track+0x3e/0x80 [ 206.659181][ T9555] ? __kasan_slab_alloc+0x6c/0x80 [ 206.659203][ T9555] ? bpf_test_run_xdp_live+0x15f1/0x1b10 [ 206.659229][ T9555] __netif_receive_skb_list_core+0x23f/0x800 [ 206.659272][ T9555] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 206.659312][ T9555] netif_receive_skb_list_internal+0x96f/0xcb0 [ 206.659345][ T9555] ? netif_receive_skb_list_internal+0x4fd/0xcb0 [ 206.659375][ T9555] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 206.659403][ T9555] ? __phys_addr+0xd3/0x180 [ 206.659427][ T9555] ? build_skb_around+0x133/0x280 [ 206.659449][ T9555] ? __xdp_build_skb_from_frame+0x34b/0x740 [ 206.659478][ T9555] netif_receive_skb_list+0x54/0x450 [ 206.659506][ T9555] bpf_test_run_xdp_live+0x1786/0x1b10 [ 206.659538][ T9555] ? bpf_test_run_xdp_live+0x38e/0x1b10 [ 206.659572][ T9555] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 206.659590][ T9555] ? bpf_dispatcher_xdp+0x800/0x1000 [ 206.659610][ T9555] ? bpf_dispatcher_xdp+0x800/0x1000 [ 206.659686][ T9555] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 206.659716][ T9555] ? _copy_from_user+0x94/0xb0 [ 206.659739][ T9555] ? bpf_test_init+0x133/0x170 [ 206.659755][ T9555] ? xdp_convert_md_to_buff+0x5b/0x330 [ 206.659778][ T9555] bpf_prog_test_run_xdp+0x713/0x1000 [ 206.659816][ T9555] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 206.659842][ T9555] ? __fget_files+0x2a/0x420 [ 206.659866][ T9555] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 206.659886][ T9555] bpf_prog_test_run+0x2c7/0x340 [ 206.659917][ T9555] __sys_bpf+0x581/0x870 [ 206.659946][ T9555] ? __pfx___sys_bpf+0x10/0x10 [ 206.659967][ T9555] ? sched_clock_cpu+0x74/0x430 [ 206.660032][ T9555] __x64_sys_bpf+0x7c/0x90 [ 206.660063][ T9555] do_syscall_64+0xfa/0x3b0 [ 206.660087][ T9555] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.660104][ T9555] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 206.660123][ T9555] ? clear_bhb_loop+0x60/0xb0 [ 206.660147][ T9555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.660165][ T9555] RIP: 0033:0x7fae3898ebe9 [ 206.660183][ T9555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.660199][ T9555] RSP: 002b:00007fae39854038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 206.660221][ T9555] RAX: ffffffffffffffda RBX: 00007fae38bc5fa0 RCX: 00007fae3898ebe9 [ 206.660235][ T9555] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 206.660247][ T9555] RBP: 00007fae39854090 R08: 0000000000000000 R09: 0000000000000000 [ 206.660259][ T9555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 206.660270][ T9555] R13: 00007fae38bc6038 R14: 00007fae38bc5fa0 R15: 00007ffc4ab9a768 [ 206.660304][ T9555] [ 208.043271][ T9593] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.053730][ T9593] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.110900][ T9597] pim6reg: entered allmulticast mode [ 208.117507][ T9599] tipc: Enabling of bearer rejected, failed to enable media [ 208.146051][ T9597] pim6reg: left allmulticast mode [ 208.239202][ T9593] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.267642][ T9593] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.365338][ T9593] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.369099][ T9611] FAULT_INJECTION: forcing a failure. [ 208.369099][ T9611] name failslab, interval 1, probability 0, space 0, times 0 [ 208.377584][ T9593] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.412117][ T9611] CPU: 1 UID: 0 PID: 9611 Comm: syz.1.1164 Not tainted syzkaller #0 PREEMPT(full) [ 208.412142][ T9611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 208.412154][ T9611] Call Trace: [ 208.412162][ T9611] [ 208.412171][ T9611] dump_stack_lvl+0x189/0x250 [ 208.412201][ T9611] ? __pfx____ratelimit+0x10/0x10 [ 208.412221][ T9611] ? __pfx_dump_stack_lvl+0x10/0x10 [ 208.412244][ T9611] ? __pfx__printk+0x10/0x10 [ 208.412272][ T9611] ? __lock_acquire+0xab9/0xd20 [ 208.412309][ T9611] should_fail_ex+0x414/0x560 [ 208.412342][ T9611] should_failslab+0xa8/0x100 [ 208.412373][ T9611] kmem_cache_alloc_noprof+0x73/0x3c0 [ 208.412397][ T9611] ? skb_clone+0x212/0x3a0 [ 208.412427][ T9611] skb_clone+0x212/0x3a0 [ 208.412453][ T9611] __netlink_deliver_tap+0x404/0x850 [ 208.412489][ T9611] ? netlink_deliver_tap+0x2e/0x1b0 [ 208.412508][ T9611] netlink_deliver_tap+0x19c/0x1b0 [ 208.412529][ T9611] netlink_unicast+0x7fa/0x9e0 [ 208.412590][ T9611] ? __pfx_netlink_unicast+0x10/0x10 [ 208.412620][ T9611] ? netlink_sendmsg+0x642/0xb30 [ 208.412637][ T9611] ? skb_put+0x11b/0x210 [ 208.412661][ T9611] netlink_sendmsg+0x805/0xb30 [ 208.412692][ T9611] ? __pfx_netlink_sendmsg+0x10/0x10 [ 208.412716][ T9611] ? aa_sock_msg_perm+0xf1/0x1d0 [ 208.412737][ T9611] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 208.412757][ T9611] ? __pfx_netlink_sendmsg+0x10/0x10 [ 208.412778][ T9611] __sock_sendmsg+0x219/0x270 [ 208.412816][ T9611] ____sys_sendmsg+0x505/0x830 [ 208.412843][ T9611] ? __pfx_____sys_sendmsg+0x10/0x10 [ 208.412876][ T9611] ? import_iovec+0x74/0xa0 [ 208.412904][ T9611] ___sys_sendmsg+0x21f/0x2a0 [ 208.412925][ T9611] ? __pfx____sys_sendmsg+0x10/0x10 [ 208.412991][ T9611] ? __fget_files+0x2a/0x420 [ 208.413008][ T9611] ? __fget_files+0x3a0/0x420 [ 208.413037][ T9611] __x64_sys_sendmsg+0x19b/0x260 [ 208.413068][ T9611] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 208.413102][ T9611] ? __pfx_ksys_write+0x10/0x10 [ 208.413124][ T9611] ? rcu_is_watching+0x15/0xb0 [ 208.413150][ T9611] ? do_syscall_64+0xbe/0x3b0 [ 208.413175][ T9611] do_syscall_64+0xfa/0x3b0 [ 208.413193][ T9611] ? lockdep_hardirqs_on+0x9c/0x150 [ 208.413212][ T9611] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.413230][ T9611] ? clear_bhb_loop+0x60/0xb0 [ 208.413255][ T9611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.413271][ T9611] RIP: 0033:0x7fe31318ebe9 [ 208.413290][ T9611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.413306][ T9611] RSP: 002b:00007fe313fa5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 208.413327][ T9611] RAX: ffffffffffffffda RBX: 00007fe3133c5fa0 RCX: 00007fe31318ebe9 [ 208.413340][ T9611] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 208.413352][ T9611] RBP: 00007fe313fa5090 R08: 0000000000000000 R09: 0000000000000000 [ 208.413363][ T9611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.413375][ T9611] R13: 00007fe3133c6038 R14: 00007fe3133c5fa0 R15: 00007ffd64465448 [ 208.413408][ T9611] [ 208.837710][ T9593] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.865992][ T9593] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.995683][ T9626] __nla_validate_parse: 7 callbacks suppressed [ 208.995703][ T9626] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1171'. [ 209.051239][ T9626] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1171'. [ 209.070443][ T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.083078][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.106633][ T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.119933][ T9625] netlink: 'syz.1.1172': attribute type 29 has an invalid length. [ 209.159488][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.245033][ T9638] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1176'. [ 209.260810][ T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.292907][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.339272][ T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.353093][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.376105][ T9638] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1176'. [ 209.468586][ T9648] netlink: 'syz.4.1180': attribute type 1 has an invalid length. [ 209.533147][ T9646] batadv0: entered promiscuous mode [ 209.539009][ T9646] vlan3: entered promiscuous mode [ 209.585976][ T9648] bond3: entered promiscuous mode [ 209.592213][ T9648] 8021q: adding VLAN 0 to HW filter on device bond3 [ 209.645591][ T9661] netlink: 'syz.2.1183': attribute type 10 has an invalid length. [ 209.647445][ T9656] bond3: (slave bridge4): making interface the new active one [ 209.669298][ T9656] bridge4: entered promiscuous mode [ 209.680644][ T9656] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 209.708299][ T9661] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 209.715975][ T9661] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 209.973578][ T9667] netlink: 'syz.0.1185': attribute type 1 has an invalid length. [ 210.048161][ T9667] 8021q: adding VLAN 0 to HW filter on device bond3 [ 210.263281][ T9675] veth3: entered promiscuous mode [ 210.376669][ T1325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.435969][ T1325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.633256][ T9693] sysfs: cannot create duplicate filename '/class/ieee80211/!å' [ 210.671341][ T9693] CPU: 1 UID: 0 PID: 9693 Comm: syz.2.1194 Not tainted syzkaller #0 PREEMPT(full) [ 210.671370][ T9693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 210.671383][ T9693] Call Trace: [ 210.671392][ T9693] [ 210.671401][ T9693] dump_stack_lvl+0x189/0x250 [ 210.671436][ T9693] ? __pfx_dump_stack_lvl+0x10/0x10 [ 210.671462][ T9693] ? __pfx__printk+0x10/0x10 [ 210.671499][ T9693] ? kernfs_path_from_node+0x2f/0x290 [ 210.671522][ T9693] ? kernfs_path_from_node+0x250/0x290 [ 210.671542][ T9693] ? kernfs_path_from_node+0x2f/0x290 [ 210.671571][ T9693] sysfs_warn_dup+0x8e/0xa0 [ 210.671593][ T9693] sysfs_do_create_link_sd+0xc0/0x110 [ 210.671619][ T9693] device_add_class_symlinks+0x1cf/0x240 [ 210.671648][ T9693] device_add+0x475/0xb50 [ 210.671676][ T9693] wiphy_register+0x1ba6/0x28d0 [ 210.671721][ T9693] ? __pfx_wiphy_register+0x10/0x10 [ 210.671741][ T9693] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 210.671777][ T9693] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 210.671810][ T9693] ieee80211_register_hw+0x3425/0x4080 [ 210.671858][ T9693] ? ieee80211_register_hw+0x13f1/0x4080 [ 210.671895][ T9693] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 210.671927][ T9693] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 210.671968][ T9693] ? __hrtimer_setup+0x187/0x210 [ 210.671986][ T9693] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 210.672030][ T9693] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 210.672097][ T9693] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 210.672123][ T9693] ? trace_kmalloc+0x1f/0xd0 [ 210.672146][ T9693] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 210.672175][ T9693] ? kstrndup+0xbf/0x160 [ 210.672211][ T9693] hwsim_new_radio_nl+0xea4/0x1b10 [ 210.672244][ T9693] ? __pfx___nla_validate_parse+0x10/0x10 [ 210.672289][ T9693] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 210.672330][ T9693] ? __nla_parse+0x40/0x60 [ 210.672366][ T9693] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 210.672405][ T9693] genl_family_rcv_msg_doit+0x215/0x300 [ 210.672442][ T9693] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 210.672487][ T9693] ? bpf_lsm_capable+0x9/0x20 [ 210.672519][ T9693] ? security_capable+0x7e/0x2e0 [ 210.672577][ T9693] genl_rcv_msg+0x60e/0x790 [ 210.672613][ T9693] ? __pfx_genl_rcv_msg+0x10/0x10 [ 210.672638][ T9693] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 210.672686][ T9693] netlink_rcv_skb+0x205/0x470 [ 210.672704][ T9693] ? __lock_acquire+0xab9/0xd20 [ 210.672736][ T9693] ? __pfx_genl_rcv_msg+0x10/0x10 [ 210.672764][ T9693] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 210.672810][ T9693] ? down_read+0x1ad/0x2e0 [ 210.672838][ T9693] genl_rcv+0x28/0x40 [ 210.672861][ T9693] netlink_unicast+0x82c/0x9e0 [ 210.672904][ T9693] ? __pfx_netlink_unicast+0x10/0x10 [ 210.672936][ T9693] ? netlink_sendmsg+0x642/0xb30 [ 210.672954][ T9693] ? skb_put+0x11b/0x210 [ 210.672981][ T9693] netlink_sendmsg+0x805/0xb30 [ 210.673024][ T9693] ? __pfx_netlink_sendmsg+0x10/0x10 [ 210.673050][ T9693] ? aa_sock_msg_perm+0xf1/0x1d0 [ 210.673072][ T9693] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 210.673093][ T9693] ? __pfx_netlink_sendmsg+0x10/0x10 [ 210.673115][ T9693] __sock_sendmsg+0x219/0x270 [ 210.673148][ T9693] ____sys_sendmsg+0x505/0x830 [ 210.673181][ T9693] ? __pfx_____sys_sendmsg+0x10/0x10 [ 210.673219][ T9693] ? import_iovec+0x74/0xa0 [ 210.673248][ T9693] ___sys_sendmsg+0x21f/0x2a0 [ 210.673276][ T9693] ? __pfx____sys_sendmsg+0x10/0x10 [ 210.673351][ T9693] ? __fget_files+0x2a/0x420 [ 210.673367][ T9693] ? __fget_files+0x3a0/0x420 [ 210.673397][ T9693] __x64_sys_sendmsg+0x19b/0x260 [ 210.673423][ T9693] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 210.673460][ T9693] ? rcu_is_watching+0x15/0xb0 [ 210.673488][ T9693] ? do_syscall_64+0xbe/0x3b0 [ 210.673516][ T9693] do_syscall_64+0xfa/0x3b0 [ 210.673535][ T9693] ? lockdep_hardirqs_on+0x9c/0x150 [ 210.673555][ T9693] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.673575][ T9693] ? clear_bhb_loop+0x60/0xb0 [ 210.673601][ T9693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.673621][ T9693] RIP: 0033:0x7f804678ebe9 [ 210.673641][ T9693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.673658][ T9693] RSP: 002b:00007f80476d6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 210.673681][ T9693] RAX: ffffffffffffffda RBX: 00007f80469c5fa0 RCX: 00007f804678ebe9 [ 210.673695][ T9693] RDX: 0000000000000700 RSI: 0000200000000040 RDI: 0000000000000004 [ 210.673708][ T9693] RBP: 00007f8046811e19 R08: 0000000000000000 R09: 0000000000000000 [ 210.673721][ T9693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 210.673733][ T9693] R13: 00007f80469c6038 R14: 00007f80469c5fa0 R15: 00007ffc3a815388 [ 210.673786][ T9693] [ 211.288624][ T59] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.307006][ T9702] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1197'. [ 211.316646][ T9702] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1197'. [ 211.340016][ T1325] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.368364][ T1325] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.399817][ T1325] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.438862][ T9706] netlink: 'syz.2.1198': attribute type 10 has an invalid length. [ 211.476195][ T9705] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma? [ 211.488046][ T9705] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1200'. [ 211.696343][ T9720] netlink: 'syz.1.1204': attribute type 13 has an invalid length. [ 211.711240][ T9720] netlink: 'syz.1.1204': attribute type 17 has an invalid length. [ 211.838766][ T9705] bond0 (unregistering): Released all slaves [ 211.870966][ T9729] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1208'. [ 211.946002][ T9730] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1204'. [ 211.994802][ T9720] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 212.022081][ T9735] netlink: 'syz.3.1210': attribute type 39 has an invalid length. [ 212.032214][ T9725] xfrm0: entered promiscuous mode [ 212.037293][ T9725] xfrm0: entered allmulticast mode [ 212.061000][ T9739] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 212.199249][ T9720] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 212.429586][ T9753] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1214'. [ 212.459547][ T9753] netlink: 'syz.3.1214': attribute type 10 has an invalid length. [ 212.707705][ T9764] FAULT_INJECTION: forcing a failure. [ 212.707705][ T9764] name failslab, interval 1, probability 0, space 0, times 0 [ 212.707858][ T9766] netlink: 'syz.0.1219': attribute type 10 has an invalid length. [ 212.738928][ T9764] CPU: 1 UID: 0 PID: 9764 Comm: syz.4.1218 Not tainted syzkaller #0 PREEMPT(full) [ 212.738965][ T9764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 212.738978][ T9764] Call Trace: [ 212.738985][ T9764] [ 212.738994][ T9764] dump_stack_lvl+0x189/0x250 [ 212.739022][ T9764] ? __pfx____ratelimit+0x10/0x10 [ 212.739042][ T9764] ? __pfx_dump_stack_lvl+0x10/0x10 [ 212.739064][ T9764] ? __pfx__printk+0x10/0x10 [ 212.739098][ T9764] ? __pfx___might_resched+0x10/0x10 [ 212.739116][ T9764] ? fs_reclaim_acquire+0x7d/0x100 [ 212.739151][ T9764] should_fail_ex+0x414/0x560 [ 212.739181][ T9764] should_failslab+0xa8/0x100 [ 212.739209][ T9764] __kmalloc_noprof+0xcb/0x4f0 [ 212.739232][ T9764] ? kfree+0x4d/0x440 [ 212.739251][ T9764] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 212.739276][ T9764] tomoyo_realpath_from_path+0xe3/0x5d0 [ 212.739297][ T9764] ? tomoyo_domain+0xd9/0x130 [ 212.739322][ T9764] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 212.739347][ T9764] tomoyo_path_number_perm+0x1e8/0x5a0 [ 212.739373][ T9764] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 212.739418][ T9764] ? __lock_acquire+0xab9/0xd20 [ 212.739465][ T9764] ? __fget_files+0x2a/0x420 [ 212.739485][ T9764] ? __fget_files+0x2a/0x420 [ 212.739499][ T9764] ? __fget_files+0x3a0/0x420 [ 212.739513][ T9764] ? __fget_files+0x2a/0x420 [ 212.739533][ T9764] security_file_ioctl+0xcb/0x2d0 [ 212.739560][ T9764] __se_sys_ioctl+0x47/0x170 [ 212.739585][ T9764] do_syscall_64+0xfa/0x3b0 [ 212.739604][ T9764] ? lockdep_hardirqs_on+0x9c/0x150 [ 212.739621][ T9764] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.739640][ T9764] ? clear_bhb_loop+0x60/0xb0 [ 212.739662][ T9764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.739678][ T9764] RIP: 0033:0x7f8b8f78ebe9 [ 212.739695][ T9764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.739709][ T9764] RSP: 002b:00007f8b906e4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 212.739731][ T9764] RAX: ffffffffffffffda RBX: 00007f8b8f9c5fa0 RCX: 00007f8b8f78ebe9 [ 212.739745][ T9764] RDX: 0000200000000000 RSI: 000000000000890b RDI: 0000000000000008 [ 212.739757][ T9764] RBP: 00007f8b906e4090 R08: 0000000000000000 R09: 0000000000000000 [ 212.739769][ T9764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.739780][ T9764] R13: 00007f8b8f9c6038 R14: 00007f8b8f9c5fa0 R15: 00007ffe55bf6558 [ 212.739813][ T9764] [ 212.746315][ T9766] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode [ 212.758530][ T9764] ERROR: Out of memory at tomoyo_realpath_from_path. [ 212.762400][ T9766] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode [ 212.909154][ T9770] FAULT_INJECTION: forcing a failure. [ 212.909154][ T9770] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 213.027531][ T9770] CPU: 1 UID: 0 PID: 9770 Comm: syz.4.1221 Not tainted syzkaller #0 PREEMPT(full) [ 213.027559][ T9770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 213.027570][ T9770] Call Trace: [ 213.027578][ T9770] [ 213.027587][ T9770] dump_stack_lvl+0x189/0x250 [ 213.027615][ T9770] ? __pfx____ratelimit+0x10/0x10 [ 213.027636][ T9770] ? __pfx_dump_stack_lvl+0x10/0x10 [ 213.027657][ T9770] ? __pfx__printk+0x10/0x10 [ 213.027683][ T9770] ? __might_fault+0xb0/0x130 [ 213.027718][ T9770] should_fail_ex+0x414/0x560 [ 213.027749][ T9770] _copy_from_user+0x2d/0xb0 [ 213.027772][ T9770] ___sys_sendmsg+0x158/0x2a0 [ 213.027797][ T9770] ? __pfx____sys_sendmsg+0x10/0x10 [ 213.027861][ T9770] ? __fget_files+0x2a/0x420 [ 213.027878][ T9770] ? __fget_files+0x3a0/0x420 [ 213.027904][ T9770] __x64_sys_sendmsg+0x19b/0x260 [ 213.027928][ T9770] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 213.027979][ T9770] ? __pfx_ksys_write+0x10/0x10 [ 213.028002][ T9770] ? rcu_is_watching+0x15/0xb0 [ 213.028027][ T9770] ? do_syscall_64+0xbe/0x3b0 [ 213.028051][ T9770] do_syscall_64+0xfa/0x3b0 [ 213.028076][ T9770] ? lockdep_hardirqs_on+0x9c/0x150 [ 213.028095][ T9770] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.028112][ T9770] ? clear_bhb_loop+0x60/0xb0 [ 213.028134][ T9770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.028151][ T9770] RIP: 0033:0x7f8b8f78ebe9 [ 213.028167][ T9770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.028193][ T9770] RSP: 002b:00007f8b906e4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 213.028213][ T9770] RAX: ffffffffffffffda RBX: 00007f8b8f9c5fa0 RCX: 00007f8b8f78ebe9 [ 213.028227][ T9770] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 213.028239][ T9770] RBP: 00007f8b906e4090 R08: 0000000000000000 R09: 0000000000000000 [ 213.028251][ T9770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.028261][ T9770] R13: 00007f8b8f9c6038 R14: 00007f8b8f9c5fa0 R15: 00007ffe55bf6558 [ 213.028294][ T9770] [ 213.946497][ T9796] netlink: 'syz.1.1231': attribute type 83 has an invalid length. [ 214.000686][ T9796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.053306][ T9805] netlink: 'syz.3.1232': attribute type 1 has an invalid length. [ 214.066503][ T9805] netlink: 'syz.3.1232': attribute type 1 has an invalid length. [ 214.140935][ T9808] FAULT_INJECTION: forcing a failure. [ 214.140935][ T9808] name failslab, interval 1, probability 0, space 0, times 0 [ 214.153661][ T9808] CPU: 1 UID: 0 PID: 9808 Comm: syz.1.1235 Not tainted syzkaller #0 PREEMPT(full) [ 214.153687][ T9808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 214.153698][ T9808] Call Trace: [ 214.153706][ T9808] [ 214.153714][ T9808] dump_stack_lvl+0x189/0x250 [ 214.153743][ T9808] ? __pfx____ratelimit+0x10/0x10 [ 214.153764][ T9808] ? __pfx_dump_stack_lvl+0x10/0x10 [ 214.153787][ T9808] ? __pfx__printk+0x10/0x10 [ 214.153821][ T9808] ? __lock_acquire+0xab9/0xd20 [ 214.153854][ T9808] should_fail_ex+0x414/0x560 [ 214.153887][ T9808] should_failslab+0xa8/0x100 [ 214.153916][ T9808] kmem_cache_alloc_bulk_noprof+0x77/0x790 [ 214.153947][ T9808] ? pfn_valid+0x125/0x4d0 [ 214.153975][ T9808] ? pfn_valid+0x125/0x4d0 [ 214.153995][ T9808] ? pfn_valid+0x125/0x4d0 [ 214.154020][ T9808] bpf_test_run_xdp_live+0x15f1/0x1b10 [ 214.154054][ T9808] ? bpf_test_run_xdp_live+0x38e/0x1b10 [ 214.154087][ T9808] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 214.154106][ T9808] ? bpf_dispatcher_xdp+0x800/0x1000 [ 214.154127][ T9808] ? bpf_dispatcher_xdp+0x800/0x1000 [ 214.154202][ T9808] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 214.154231][ T9808] ? _copy_from_user+0x94/0xb0 [ 214.154254][ T9808] ? bpf_test_init+0x133/0x170 [ 214.154269][ T9808] ? xdp_convert_md_to_buff+0x5b/0x330 [ 214.154291][ T9808] bpf_prog_test_run_xdp+0x713/0x1000 [ 214.154329][ T9808] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 214.154354][ T9808] ? __fget_files+0x2a/0x420 [ 214.154379][ T9808] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 214.154400][ T9808] bpf_prog_test_run+0x2c7/0x340 [ 214.154432][ T9808] __sys_bpf+0x581/0x870 [ 214.154459][ T9808] ? __pfx___sys_bpf+0x10/0x10 [ 214.154499][ T9808] ? ksys_write+0x22a/0x250 [ 214.154526][ T9808] ? __pfx_ksys_write+0x10/0x10 [ 214.154548][ T9808] ? rcu_is_watching+0x15/0xb0 [ 214.154576][ T9808] __x64_sys_bpf+0x7c/0x90 [ 214.154600][ T9808] do_syscall_64+0xfa/0x3b0 [ 214.154619][ T9808] ? lockdep_hardirqs_on+0x9c/0x150 [ 214.154638][ T9808] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.154656][ T9808] ? clear_bhb_loop+0x60/0xb0 [ 214.154681][ T9808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.154698][ T9808] RIP: 0033:0x7fe31318ebe9 [ 214.154715][ T9808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.154729][ T9808] RSP: 002b:00007fe313fa5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 214.154749][ T9808] RAX: ffffffffffffffda RBX: 00007fe3133c5fa0 RCX: 00007fe31318ebe9 [ 214.154762][ T9808] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 214.154774][ T9808] RBP: 00007fe313fa5090 R08: 0000000000000000 R09: 0000000000000000 [ 214.154785][ T9808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 214.154797][ T9808] R13: 00007fe3133c6038 R14: 00007fe3133c5fa0 R15: 00007ffd64465448 [ 214.154830][ T9808] [ 214.687824][ T9824] __nla_validate_parse: 7 callbacks suppressed [ 214.687844][ T9824] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1241'. [ 214.790146][ T9830] tipc: Enabling of bearer rejected, failed to enable media [ 214.793489][ T9831] ================================================================== [ 214.806793][ T9831] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x2cf2/0x5400 [ 214.814715][ T9831] Read of size 1 at addr ffff888057864bb0 by task syz.4.1245/9831 [ 214.822547][ T9831] [ 214.824981][ T9831] CPU: 1 UID: 0 PID: 9831 Comm: syz.4.1245 Not tainted syzkaller #0 PREEMPT(full) [ 214.825006][ T9831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 214.825019][ T9831] Call Trace: [ 214.825028][ T9831] [ 214.825037][ T9831] dump_stack_lvl+0x189/0x250 [ 214.825065][ T9831] ? __kasan_check_byte+0x12/0x40 [ 214.825095][ T9831] ? __pfx_dump_stack_lvl+0x10/0x10 [ 214.825118][ T9831] ? lock_release+0x4b/0x3e0 [ 214.825150][ T9831] ? __virt_addr_valid+0x4a5/0x5c0 [ 214.825175][ T9831] print_report+0xca/0x240 [ 214.825194][ T9831] ? xfrm_state_find+0x2cf2/0x5400 [ 214.825215][ T9831] kasan_report+0x118/0x150 [ 214.825244][ T9831] ? xfrm_state_find+0x2cf2/0x5400 [ 214.825269][ T9831] xfrm_state_find+0x2cf2/0x5400 [ 214.825290][ T9831] ? unwind_get_return_address+0x4d/0x90 [ 214.825311][ T9831] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 214.825342][ T9831] ? xfrm_state_find+0x1da/0x5400 [ 214.825364][ T9831] ? __pfx_xfrm_state_find+0x10/0x10 [ 214.825383][ T9831] ? kasan_save_stack+0x4d/0x60 [ 214.825404][ T9831] ? kasan_save_stack+0x3e/0x60 [ 214.825424][ T9831] ? kasan_record_aux_stack+0xbd/0xd0 [ 214.825443][ T9831] ? ip_route_output_key_hash_rcu+0x196a/0x23e0 [ 214.825467][ T9831] ? ip_route_output_key_hash+0x174/0x280 [ 214.825489][ T9831] ? __ip4_datagram_connect+0x8f4/0x1270 [ 214.825510][ T9831] ? __ip6_datagram_connect+0x9f0/0x1150 [ 214.825538][ T9831] ? ip6_datagram_connect_v6_only+0x63/0xa0 [ 214.825568][ T9831] ? __x64_sys_connect+0x7a/0x90 [ 214.825584][ T9831] ? do_syscall_64+0xfa/0x3b0 [ 214.825604][ T9831] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.825627][ T9831] xfrm_resolve_and_create_bundle+0x768/0x2f80 [ 214.825676][ T9831] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 214.825702][ T9831] ? __lock_acquire+0xab9/0xd20 [ 214.825740][ T9831] ? xfrm_sk_policy_lookup+0x9d/0x750 [ 214.825772][ T9831] ? xfrm_sk_policy_lookup+0x9d/0x750 [ 214.825800][ T9831] ? xfrm_expand_policies+0x41f/0x6a0 [ 214.825829][ T9831] xfrm_lookup_with_ifid+0x2a7/0x1a70 [ 214.825860][ T9831] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 214.825887][ T9831] ? rcuref_put+0x1b7/0x210 [ 214.825909][ T9831] ? __pfx_rcuref_put+0x10/0x10 [ 214.825932][ T9831] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 214.825959][ T9831] xfrm_lookup_route+0x3c/0x1c0 [ 214.825983][ T9831] __ip4_datagram_connect+0x9a5/0x1270 [ 214.826016][ T9831] __ip6_datagram_connect+0x9f0/0x1150 [ 214.826049][ T9831] ? __pfx___ip6_datagram_connect+0x10/0x10 [ 214.826077][ T9831] ? __local_bh_enable_ip+0x12d/0x1c0 [ 214.826096][ T9831] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 214.826120][ T9831] ip6_datagram_connect_v6_only+0x63/0xa0 [ 214.826151][ T9831] __sys_connect+0x313/0x440 [ 214.826171][ T9831] ? __pfx___sys_connect+0x10/0x10 [ 214.826195][ T9831] ? rcu_is_watching+0x15/0xb0 [ 214.826217][ T9831] __x64_sys_connect+0x7a/0x90 [ 214.826236][ T9831] do_syscall_64+0xfa/0x3b0 [ 214.826256][ T9831] ? lockdep_hardirqs_on+0x9c/0x150 [ 214.826275][ T9831] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.826294][ T9831] ? clear_bhb_loop+0x60/0xb0 [ 214.826315][ T9831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.826334][ T9831] RIP: 0033:0x7f8b8f78ebe9 [ 214.826352][ T9831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.826368][ T9831] RSP: 002b:00007f8b906e4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 214.826390][ T9831] RAX: ffffffffffffffda RBX: 00007f8b8f9c5fa0 RCX: 00007f8b8f78ebe9 [ 214.826404][ T9831] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000004 [ 214.826417][ T9831] RBP: 00007f8b8f811e19 R08: 0000000000000000 R09: 0000000000000000 [ 214.826430][ T9831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 214.826441][ T9831] R13: 00007f8b8f9c6038 R14: 00007f8b8f9c5fa0 R15: 00007ffe55bf6558 [ 214.826463][ T9831] [ 214.826470][ T9831] [ 215.204901][ T9831] Allocated by task 8031: [ 215.209237][ T9831] kasan_save_track+0x3e/0x80 [ 215.213925][ T9831] __kasan_slab_alloc+0x6c/0x80 [ 215.218777][ T9831] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 215.224239][ T9831] xfrm_state_alloc+0x24/0x2f0 [ 215.229104][ T9831] __find_acq_core+0x8a7/0x1c00 [ 215.233972][ T9831] xfrm_find_acq+0x78/0xa0 [ 215.238399][ T9831] xfrm_alloc_userspi+0x6b3/0xc90 [ 215.243438][ T9831] xfrm_user_rcv_msg+0x7a3/0xab0 [ 215.248387][ T9831] netlink_rcv_skb+0x205/0x470 [ 215.253159][ T9831] xfrm_netlink_rcv+0x79/0x90 [ 215.257854][ T9831] netlink_unicast+0x82c/0x9e0 [ 215.262623][ T9831] netlink_sendmsg+0x805/0xb30 [ 215.267392][ T9831] __sock_sendmsg+0x219/0x270 [ 215.272080][ T9831] ____sys_sendmsg+0x505/0x830 [ 215.276846][ T9831] ___sys_sendmsg+0x21f/0x2a0 [ 215.281517][ T9831] __x64_sys_sendmsg+0x19b/0x260 [ 215.286542][ T9831] do_syscall_64+0xfa/0x3b0 [ 215.291041][ T9831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.296934][ T9831] [ 215.299255][ T9831] Freed by task 9: [ 215.302966][ T9831] kasan_save_track+0x3e/0x80 [ 215.307645][ T9831] kasan_save_free_info+0x46/0x50 [ 215.312678][ T9831] __kasan_slab_free+0x5b/0x80 [ 215.317481][ T9831] kmem_cache_free+0x18f/0x400 [ 215.322245][ T9831] xfrm_state_gc_task+0x52d/0x6b0 [ 215.327270][ T9831] process_scheduled_works+0xae1/0x17b0 [ 215.332810][ T9831] worker_thread+0x8a0/0xda0 [ 215.337877][ T9831] kthread+0x70e/0x8a0 [ 215.342039][ T9831] ret_from_fork+0x3f9/0x770 [ 215.346628][ T9831] ret_from_fork_asm+0x1a/0x30 [ 215.351517][ T9831] [ 215.353854][ T9831] The buggy address belongs to the object at ffff888057864880 [ 215.353854][ T9831] which belongs to the cache xfrm_state of size 928 [ 215.367939][ T9831] The buggy address is located 816 bytes inside of [ 215.367939][ T9831] freed 928-byte region [ffff888057864880, ffff888057864c20) [ 215.382253][ T9831] [ 215.384666][ T9831] The buggy address belongs to the physical page: [ 215.391084][ T9831] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x57864 [ 215.399848][ T9831] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 215.408341][ T9831] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 215.415879][ T9831] page_type: f5(slab) [ 215.419871][ T9831] raw: 00fff00000000040 ffff88801feac500 dead000000000122 0000000000000000 [ 215.428454][ T9831] raw: 0000000000000000 00000000800f000f 00000000f5000000 0000000000000000 [ 215.437041][ T9831] head: 00fff00000000040 ffff88801feac500 dead000000000122 0000000000000000 [ 215.445716][ T9831] head: 0000000000000000 00000000800f000f 00000000f5000000 0000000000000000 [ 215.454386][ T9831] head: 00fff00000000002 ffffea00015e1901 00000000ffffffff 00000000ffffffff [ 215.463050][ T9831] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 215.471727][ T9831] page dumped because: kasan: bad access detected [ 215.478129][ T9831] page_owner tracks the page as allocated [ 215.484195][ T9831] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6321, tgid 6319 (syz.0.92), ts 111781361662, free_ts 108015178146 [ 215.503335][ T9831] post_alloc_hook+0x240/0x2a0 [ 215.508292][ T9831] get_page_from_freelist+0x21e4/0x22c0 [ 215.513840][ T9831] __alloc_frozen_pages_noprof+0x181/0x370 [ 215.519666][ T9831] alloc_pages_mpol+0x232/0x4a0 [ 215.524521][ T9831] allocate_slab+0x8a/0x370 [ 215.529025][ T9831] ___slab_alloc+0xbeb/0x1410 [ 215.533790][ T9831] kmem_cache_alloc_noprof+0x283/0x3c0 [ 215.539249][ T9831] xfrm_state_alloc+0x24/0x2f0 [ 215.544018][ T9831] xfrm_add_sa+0x17d1/0x4070 [ 215.548614][ T9831] xfrm_user_rcv_msg+0x7a3/0xab0 [ 215.553558][ T9831] netlink_rcv_skb+0x205/0x470 [ 215.558321][ T9831] xfrm_netlink_rcv+0x79/0x90 [ 215.562996][ T9831] netlink_unicast+0x82c/0x9e0 [ 215.567786][ T9831] netlink_sendmsg+0x805/0xb30 [ 215.572668][ T9831] __sock_sendmsg+0x219/0x270 [ 215.577370][ T9831] ____sys_sendmsg+0x505/0x830 [ 215.582235][ T9831] page last free pid 6196 tgid 6194 stack trace: [ 215.588569][ T9831] __free_frozen_pages+0xbc4/0xd30 [ 215.593695][ T9831] __slab_free+0x303/0x3c0 [ 215.598110][ T9831] qlist_free_all+0x97/0x140 [ 215.602706][ T9831] kasan_quarantine_reduce+0x148/0x160 [ 215.608162][ T9831] __kasan_slab_alloc+0x22/0x80 [ 215.613021][ T9831] __kmalloc_cache_noprof+0x1be/0x3d0 [ 215.618407][ T9831] ref_tracker_alloc+0x133/0x460 [ 215.623353][ T9831] net_rx_queue_update_kobjects+0x1a6/0x740 [ 215.629267][ T9831] netdev_register_kobject+0x21f/0x310 [ 215.634751][ T9831] register_netdevice+0x126c/0x1ae0 [ 215.639971][ T9831] bond_newlink+0x60/0xb0 [ 215.644312][ T9831] rtnl_newlink_create+0x30d/0xb00 [ 215.649435][ T9831] rtnl_newlink+0x16d6/0x1c70 [ 215.654118][ T9831] rtnetlink_rcv_msg+0x7cc/0xb70 [ 215.659060][ T9831] netlink_rcv_skb+0x205/0x470 [ 215.663919][ T9831] netlink_unicast+0x82c/0x9e0 [ 215.668718][ T9831] [ 215.671038][ T9831] Memory state around the buggy address: [ 215.676667][ T9831] ffff888057864a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 215.685245][ T9831] ffff888057864b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 215.693478][ T9831] >ffff888057864b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 215.701533][ T9831] ^ [ 215.707162][ T9831] ffff888057864c00: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc [ 215.715217][ T9831] ffff888057864c80: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 215.723361][ T9831] ================================================================== [ 215.776810][ T9831] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 215.784068][ T9831] CPU: 0 UID: 0 PID: 9831 Comm: syz.4.1245 Not tainted syzkaller #0 PREEMPT(full) [ 215.793375][ T9831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 215.803462][ T9831] Call Trace: [ 215.806746][ T9831] [ 215.809757][ T9831] dump_stack_lvl+0x99/0x250 [ 215.814354][ T9831] ? __asan_memcpy+0x40/0x70 [ 215.818962][ T9831] ? __pfx_dump_stack_lvl+0x10/0x10 [ 215.824155][ T9831] ? __pfx__printk+0x10/0x10 [ 215.828834][ T9831] vpanic+0x281/0x750 [ 215.832817][ T9831] ? preempt_schedule+0xae/0xc0 [ 215.837686][ T9831] ? __pfx_vpanic+0x10/0x10 [ 215.842186][ T9831] ? preempt_schedule_common+0x83/0xd0 [ 215.847664][ T9831] ? preempt_schedule+0xae/0xc0 [ 215.852534][ T9831] ? __pfx_preempt_schedule+0x10/0x10 [ 215.857929][ T9831] panic+0xb9/0xc0 [ 215.861658][ T9831] ? __pfx_panic+0x10/0x10 [ 215.866100][ T9831] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 215.872001][ T9831] ? xfrm_state_find+0x2cf2/0x5400 [ 215.877192][ T9831] check_panic_on_warn+0x89/0xb0 [ 215.882128][ T9831] ? xfrm_state_find+0x2cf2/0x5400 [ 215.887234][ T9831] end_report+0x78/0x160 [ 215.891475][ T9831] kasan_report+0x129/0x150 [ 215.896019][ T9831] ? xfrm_state_find+0x2cf2/0x5400 [ 215.901135][ T9831] xfrm_state_find+0x2cf2/0x5400 [ 215.906084][ T9831] ? unwind_get_return_address+0x4d/0x90 [ 215.911716][ T9831] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 215.917900][ T9831] ? xfrm_state_find+0x1da/0x5400 [ 215.922926][ T9831] ? __pfx_xfrm_state_find+0x10/0x10 [ 215.928200][ T9831] ? kasan_save_stack+0x4d/0x60 [ 215.933045][ T9831] ? kasan_save_stack+0x3e/0x60 [ 215.937927][ T9831] ? kasan_record_aux_stack+0xbd/0xd0 [ 215.943300][ T9831] ? ip_route_output_key_hash_rcu+0x196a/0x23e0 [ 215.949548][ T9831] ? ip_route_output_key_hash+0x174/0x280 [ 215.955284][ T9831] ? __ip4_datagram_connect+0x8f4/0x1270 [ 215.960930][ T9831] ? __ip6_datagram_connect+0x9f0/0x1150 [ 215.966561][ T9831] ? ip6_datagram_connect_v6_only+0x63/0xa0 [ 215.972473][ T9831] ? __x64_sys_connect+0x7a/0x90 [ 215.977425][ T9831] ? do_syscall_64+0xfa/0x3b0 [ 215.982097][ T9831] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.988167][ T9831] xfrm_resolve_and_create_bundle+0x768/0x2f80 [ 215.994582][ T9831] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 216.001194][ T9831] ? __lock_acquire+0xab9/0xd20 [ 216.006075][ T9831] ? xfrm_sk_policy_lookup+0x9d/0x750 [ 216.011456][ T9831] ? xfrm_sk_policy_lookup+0x9d/0x750 [ 216.016929][ T9831] ? xfrm_expand_policies+0x41f/0x6a0 [ 216.022300][ T9831] xfrm_lookup_with_ifid+0x2a7/0x1a70 [ 216.027682][ T9831] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 216.033490][ T9831] ? rcuref_put+0x1b7/0x210 [ 216.038029][ T9831] ? __pfx_rcuref_put+0x10/0x10 [ 216.042962][ T9831] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 216.048334][ T9831] xfrm_lookup_route+0x3c/0x1c0 [ 216.053362][ T9831] __ip4_datagram_connect+0x9a5/0x1270 [ 216.058845][ T9831] __ip6_datagram_connect+0x9f0/0x1150 [ 216.064306][ T9831] ? __pfx___ip6_datagram_connect+0x10/0x10 [ 216.070196][ T9831] ? __local_bh_enable_ip+0x12d/0x1c0 [ 216.075557][ T9831] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 216.081281][ T9831] ip6_datagram_connect_v6_only+0x63/0xa0 [ 216.087110][ T9831] __sys_connect+0x313/0x440 [ 216.091708][ T9831] ? __pfx___sys_connect+0x10/0x10 [ 216.096925][ T9831] ? rcu_is_watching+0x15/0xb0 [ 216.101725][ T9831] __x64_sys_connect+0x7a/0x90 [ 216.106518][ T9831] do_syscall_64+0xfa/0x3b0 [ 216.111017][ T9831] ? lockdep_hardirqs_on+0x9c/0x150 [ 216.116207][ T9831] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.122266][ T9831] ? clear_bhb_loop+0x60/0xb0 [ 216.126936][ T9831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.132826][ T9831] RIP: 0033:0x7f8b8f78ebe9 [ 216.137253][ T9831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.156859][ T9831] RSP: 002b:00007f8b906e4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 216.165291][ T9831] RAX: ffffffffffffffda RBX: 00007f8b8f9c5fa0 RCX: 00007f8b8f78ebe9 [ 216.173263][ T9831] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000004 [ 216.181294][ T9831] RBP: 00007f8b8f811e19 R08: 0000000000000000 R09: 0000000000000000 [ 216.189274][ T9831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 216.197237][ T9831] R13: 00007f8b8f9c6038 R14: 00007f8b8f9c5fa0 R15: 00007ffe55bf6558 [ 216.205206][ T9831] [ 216.208669][ T9831] Kernel Offset: disabled [ 216.213109][ T9831] Rebooting in 86400 seconds..