last executing test programs: 3.298896105s ago: executing program 3 (id=1860): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x11, 0x2, 0x300) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000074800040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006c617374000000000400028008000340000001", @ANYRES16=r1], 0xe4}, 0x1, 0x0, 0x0, 0x1}, 0x800) 3.053934668s ago: executing program 3 (id=1864): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b408000000000000611067000000000006000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x201, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48) 2.91989233s ago: executing program 3 (id=1867): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000008000000070000000300000001"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x31e5}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) 1.951025327s ago: executing program 2 (id=1879): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) writev(r0, &(0x7f0000003500)=[{&(0x7f00000035c0)='42', 0x2}, {&(0x7f0000000080)='C&', 0x2}, {0x0}, {&(0x7f0000001240)="d3", 0x1}], 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg0\x00', 0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x16, 0x6, 0x3af412e2, 0x6, 0x8200, r0, 0xfffffffa, '\x00', r1, r2, 0x4, 0x5, 0x2, 0x0, @value=r0}, 0x50) 1.905468928s ago: executing program 3 (id=1880): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x2b, 0x1, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x20040894) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x15, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x4, 0x6, 0x0, 0x1, 0x4}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000000000180100000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r6, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r4, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r7, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010100000000000000000a0000000900010073797a30000000004c000000030a010200000000000000000a0000000900010073797a30000000000900030073797a31000000000a000700736f757465000000140004800800014000000000080002"], 0x94}}, 0x0) ioctl$OCFS2_IOC_UNRESVSP64(r0, 0x4030582b, &(0x7f0000000040)={0x0, 0x2, 0x2, 0x4, 0xffffffc0, 0x7}) 1.796809519s ago: executing program 2 (id=1881): unshare(0x22020600) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$SIOCX25SCAUSEDIAG(0xffffffffffffffff, 0x89ec, &(0x7f0000000100)={0x4, 0x71}) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_ringparam={0x33, 0x7f, 0x20002e2e, 0x10040, 0xe, 0x3, 0x2000000, 0x0, 0x3000000}}) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xfffffffffffffc1f) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000010003704feffffffffdbdf2500000000", @ANYRES32=r4, @ANYBLOB="c30407001b9236c8ae2d18015395b479e47600bf2618001280238fa00f1833a5d18dbd46e559cd08000100736974000c00028008000200ac1e0101"], 0x38}, 0x1, 0x0, 0x0, 0x20a7d52d1a3e1087}, 0x1000c014) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000005e0001"], 0x1c}, 0x1, 0x0, 0x0, 0x24000880}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000680)=@req={0x8, 0xf52, 0x3, 0x5}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)={0xfca4, r7, 0x5, 0x0, 0x0, {{}, {@void, @val={0x0, 0x99, {0xa718, 0x11}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8011}, 0x400c00c) r8 = accept4$inet6(r1, &(0x7f0000000580), &(0x7f00000005c0)=0x1c, 0x80800) r9 = socket$packet(0x11, 0x3, 0x300) sendmsg$unix(r5, &(0x7f0000000640)={&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000380)="e1b133c24f6fd72ec96f7d987e33", 0xe}, {&(0x7f00000003c0)="47bdea96ff6fa6bc155a595ecd51f0a67d126468088596ab4f33e0cdcabe77d95f336b197c2b5f9e844f739838f8bae038639f575bd6373ffaa38353829988506528cb14d4c93182e567e0d3681c2ac12a8d3f4799a1e6a980eb385c863e03259ecabcba3fa9f9a64503291cea20be045e591d682200b161919e4dcaf340d598523265a308f37aeced5b5f1da965da440fceb2e6b1280927c0926d022b990a0c67fd58c2325642b3ec653ffeabd978c77c98b7f6ea760776336ed65a11de911a", 0xc0}, {&(0x7f0000000480)="539e5ef80aa9993726499a850269cbcaafd0b915eacc418a33f01913c3c3c12b91faae543f9a5fd79827a22f206ec7a9da21dc268af0b42895f330e89a6d09bf5f316e0e32e9b8f4b8723cbbfecf454b34fd982472d67d0b81c0e75707259b21351c9b3fce87e609d67795a00a77b5879eb7ddbb5a5a297817ed818ee6e13a76708676ee72ec88033424a40f3bb9fec7601d3db3c1", 0x95}], 0x3, &(0x7f0000000600)=[@rights={{0x24, 0x1, 0x1, [r9, r3, r1, r6, r8]}}], 0x28, 0x8002}, 0x0) ioctl$SIOCAX25NOUID(0xffffffffffffffff, 0x89e3, &(0x7f0000000180)=0x1) ioctl$SIOCAX25ADDFWD(r5, 0x89ea, &(0x7f0000000740)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) sendmmsg$inet(r1, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 1.796642022s ago: executing program 4 (id=1882): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="44010000100001000000000800000000ac1e00010000000000000000000000000000000000000000000000000000000000000000000000000000200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000033000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000805600000000000000000000000000000000000000000000000000000010000000090000000200000000000000000000000200010000000000000000004800010073686132353600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c00", @ANYRES32=0x0, @ANYBLOB="3cf4270b9b2e25a8f9c89460785131a886448ade2be73f92943d59556b0c41971a4be9a218b2b2340027973e97bb72c927157c239a6ee4119392e3b724a65d"], 0x144}}, 0x0) 1.634601284s ago: executing program 4 (id=1884): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000400)=@framed={{0x18, 0x2}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x17}}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x40, 0x0, 0x40f00, 0x46, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x61}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = socket$l2tp6(0xa, 0x2, 0x73) pipe(&(0x7f0000000180)) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, 0x100010, 0xffffffffffffffff, 0x8884d000) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x6, @empty, 0xb, 0x2}, 0x20) bind$l2tp6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x6, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x2, 0x2}, 0x20) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x20000000}) 1.625729301s ago: executing program 1 (id=1885): socket$alg(0x26, 0x5, 0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) (async) bind$alg(r0, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$ETHTOOL_MSG_EEE_SET(r1, 0x0, 0x10) (async) sendmsg$ETHTOOL_MSG_EEE_SET(r1, 0x0, 0x10) sendto$rose(r1, &(0x7f0000000000)="929ce7bc21", 0x5, 0x4000, 0x0, 0x0) recvmsg(r1, &(0x7f0000000cc0)={&(0x7f0000000140)=@sco, 0x80, &(0x7f0000000c40)=[{&(0x7f00000002c0)=""/133, 0x85}, {&(0x7f0000000480)=""/94, 0x5e}, {&(0x7f0000000a00)=""/232, 0xe8}, {&(0x7f0000000b00)=""/138, 0x8a}, {&(0x7f0000000bc0)=""/106, 0x6a}], 0x5}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="188f080000000000000000000085000000610000009500"/32], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$packet(r1, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x9, 0x3, 0x430, 0x240, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x360, 0xffffffff, 0xffffffff, 0x360, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@uncond, 0x0, 0x218, 0x240, 0x0, {}, [@common=@rt={{0x138}, {0x5, [0x2, 0xb], 0x2000000, 0x1, 0x0, [@local, @private1, @ipv4={'\x00', '\xff\xff', @empty}, @mcast1, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}, @local, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, @dev={0xfe, 0x80, '\x00', 0xf}, @empty], 0xe}}, @common=@unspec=@connbytes={{0x38}, {[{0xa}, {0x6}], 0x7, 0x2}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x7541, 0x1f1}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1a, 0xb}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0xcc0, 0x0, &(0x7f0000000200)="c8bb4e7dbde79f73008865000800b0ad75acd2df", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.556495143s ago: executing program 4 (id=1887): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x1d, 0xe, &(0x7f00000001c0)=@raw=[@alu={0x4, 0x0, 0x5, 0x0, 0x8, 0xffffffffffffffff, 0x8}, @exit, @map_idx={0x18, 0x2, 0x5, 0x0, 0xc}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7fffffff}}, @call={0x85, 0x0, 0x0, 0x1f}, @call={0x85, 0x0, 0x0, 0x28}], &(0x7f0000000240)='GPL\x00', 0x1ff, 0xa7, &(0x7f0000000280)=""/167, 0x41000, 0x20, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x2, 0x52, 0x6}, 0x10, 0xffffffffffffffff, 0x0, 0x1, &(0x7f00000003c0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000400)=[{0x4, 0x4, 0x9, 0x8}], 0x10, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003b80)={r0, 0x0, 0xef, 0x1000, &(0x7f0000000600)="634a9712522a2388a7d58c1ee26024b25d3daa08892b31df9976713d5cb91270ffc69cfcfe839113e61de543f4782bf6475f4f1478c6cddc76431c808b73d2ac9f432cf8424c94332820ff9d9ee56dbf01b93ea209974e99059c6052f10fe4c58685e681c01ef4da517442aaf9dd16a592b66d6a339077774310b047d81e0d78472fdffb0ae34cda96179aa33f385504c8196c05e0c907deaa1954b189c1d6c7c88cd017347b0d4a4f107f1d9e2306ce256faa66c98cd8de2c3e07e6d6c395e153023250704a8a86551336cfb6d866a58e873c53bbbddc58ebc61413f95c2340019d2a32c2ff116d9d531ce225f9a6", &(0x7f0000001b00)=""/4096, 0x6, 0x0, 0x1000, 0x4a, &(0x7f0000002b00)="4860766419e0291ae87541b5177b716b44d923d07bd244d0c6511d66d6de80d274feb302e104d3d905cf0db185feee2ba809aeb745abee352cc6ba0638dfb857010c86a632b1dd46ae30957c9d18e5f0cf8d3313accf3176b229845f9f5361775b6b535535c88a05551f8d78d5e7e26b156444d21ef76af867fe94e9d752331abb1a1fc56214cd2f5548d194cf3bf2b7fd5b7ef928008f9abede530ce1f007bccc60344f86ae87772c8fcd4c3ab7ba1b4e62aa3ecea3693b473f63955f002596afe6db98a5f51ead6763fe41f0384ceccb336bffcfbe8c4b23a65ffc8651d8b50aff0a0210f4462274b3cb3f18640179a44af05e87d0a4c518fa94eaa5bc2eef0497bee948a70ce14e68e80a2e0b06817fb3e234959e15a6bb2194a22f0fb20e4fa5356ccb88d73cfa1c90a4b40a5510203fad8b23cf2a9e74ebbff662c41c1e11012b718ede7576364715cb3c33eac5645e99fc0975020ca3d0df841b5cd68282f37b71769c327b0dc47cae8327fa36037a4db479e825c8af5ea8b9a9b48059dc53c0fde58ef6319564fc187aea385000ff0f98f1585c2d7f6ac09761abb236d47de6f2cbd59fd3c7b720a0a0141827bc6afe1abd45b041b5cf98659bd4bc567ca154ba22942aee21c8ff828939529ad859dfb9af4a87d41ad1968fb9687b5d9d120b890c4806bc2b1eb1434961e8f050ae3e435815bc5f8e7a949447f60f1ace55d4b1354e9830962f2e0ff8ef0c3f6f2135e2f017cd7b8bb43175e20d374488658aa6ca77f117d90b91df2db565c6441f5b0ed370175f784ed84d810cf51c25333909af63d1c8c9a7adbf08cf616f3bf3262518b5e3c831e390b729a1ee3325dac2b2dd3390eb82e586f6008cc71a5ca5c4f644ba6cf8cd2b2a538d04fa6f34b67c2fb94dc12a97bd0f2eb798df29628a0a06a9d3c422f7506a34f833423a5c87a54149ce9f0b5d14e75eaf479c82c3079193c1fd4b51fc4b17c0f4018b749310bf34e2474b066043476d4d7d3fd2bbc07472b18d8c91edb6b2d7d4bc540eb4f71f42ce7c7add1cec6666cbab1f79b91c0c34899ce2c59a7f2a9333501eb45184fdc4f2e08de9ef5cc6cf4b01125e7c7894a2559e89e070f9c48d101e85bb264bbadad70ec434df8af522ad2ff90277f365596456c215be39081831066b6fc54f226c0219928b12438df0b2828699671592c0da5328e9c25d91527b37bf6506fadd6fcd249731311aeebec22f226de7080e5850f2da4b0c1788b505b29b17bf91128f7f1cf667155ed0df5de3151aaee242a0ffe4eb351657b471f2d3b6f02a8efc99e51e4afa6a0c1ba767e3f8a698f683afb74cda43db3c9902bb85c91f763f790830f379591679fa9ae8ee388fefe1c5391c080ffb6509fcf121ced71c257cbe5900a7be21f5e9cf2cc10d0d540ec48f109b2baaf948dd83c7127de1f4f79f0ed709286fa97cbb1fcba84c78db1f509fba0aa22243b887c262a308578fffd032b7367f8daba96f7c4ec763b95d15050469255fe2df067619af8b298d9715837d71a16b12ee34707c517a19f7bb1d04937b81bf792105a7d8d4e7c19c54ef3bc7c70e7384be19f06d8a4187762e873cdccd869aa023e5628fd1cbfa74abd371aed8cf4209b3579df7b56b6b78e0371a9fe5ff967b6fb5edab51ec53ff3a4ee7ebf103d0acb5dcc316bc415343f1e450b3144fc8e77bdefac3444856161e805ba861e247375d286133998f83a026c43a36bec29dec468441cc879ee25e6d456c117e87dd33a7b97437b38901f73aa73082672cc4cab671601dc75f04486adbb405d8de3a36080e2f3c330eaf00a5fb8933cfd5547a6cf5937b13cd34c10cebdf84810256a98386fff50fe0e2db134f7343e444c2117a625b47510b1b716e543447d3e69f3dffcb6cdce45aaba346b321b7060e8430ad6e5f03b0a298ce48401bc9855c0fa8687dcc7624d5fa1f19cd84de1c659853f4b8dd7e7ea9c7439c7a4116b4db4acf80addb853d00c5fdeb9f39cb132f9258c8ec5fb628bbd6db3d2f5986a2ff92218eb343dd5ed372ed674fe0a8c6452cba6f126e1592f301b84aebc1c08138e6f91896ccb986746bc4fd268fb3f953bc934374b017394b2a9b60b7d6c9b5dab90402a554202a6bb3fc0c4f880c1063731349ff6de629873ff121c8a3c9678676bf34c38c0785aa58aae1605f63bd24b97d1245a732f7b9d8ce77e5759163c34eae91e6ef2e630205c3b0edb019a08a12520e8c83f017ddb7fe008f0ecd438b02e406643188085e19708032e444e2fe909985dd4f34ef623c9f9be5c2f9c02f7d2ead698e2aacfd1a73ee98dfd6d4287e5260f03f2e192d2d891fe9003b159cf243fc64352c45e1632458a27eaa3b13bd2ad6f6c68a11678d5c126e1caa6d7e42818c3869b13042b292f942c2d4086179b326358b18c51f6fc7dca316a7b639c9ebd35f80f9571a6a303f86c78f461cd90adf7b269e8580e816986fd568833c5d70eae16b6683a4c40ad27a57bcc94b5628baef51a60d7d6bee4af43b7910e11028ef0d162a277dca31d6727cb7192f6df29e2f86d14fdbc1762b3c09c146045c16a6747941c17b5afe93b21b335400b09532d2b277cd456073091cfe2fa17dbeba0b83c4367918d5f1a5311175f90855b8556782f9e80da6844c3438bc231d3599a8b41983429e63e29b251991cf15aaea2340e4a1f7e0be265fcd1c61d82ad101d95fe54f0efc0840d9922de47fd8ad6da558ab86376053d1798dea5291db50bdf543d3abe5bc0ad410342623b9f1afefefeb3b1953c910fbd2140b48301709e130f3abafedbf3e88956182330c4f8dbda4b0defea31e5d07aa819c7c6a91ec59b7bb01639e4a7dd3b5d13ae9971594265d4a9794225a7f023a2b01f9bb5c6de4dbfdcdaf797f6ad23d2b9c01be3c9b7f3b5e22a81e2836141c9832fef0002986886be80d46bb9fbe9dbbf0021503989f8b578cb38cec16bab6697cd00e0d04b23a87f3dde281426dc391290f92149107b97869eebeb90af6ba49fb79fb70c8897be26e07a440b787e4ac97f5e1dc9b48de4fe6113c1b6ddac710b67c551ec33bd0136f48a4fda46f140fe7bcebeb7ce08e5c50fc2cc5fa09cfe75f707082bcb4d1d7e1b4e450d1d3045dd2cd502175d69a4477c20d215ba6bad22ee75337205c587d16e7176e3cfe93b1eadf70af6a6ad27021c4dc1b495d72969c97cfff938a22d9dd23e00643b6aa292cd89028bbc2507e4512ca2ca79042d27ca767d996215ec6fcc8d6d5ec7844fdff0a5b340f941a671593cee947477654d2533b88286edfbb587ac38858769ae427791ac90a0901ae096d8d2ed1382d7323733e73738281f7bd0f5751f7e8350d26451b6436bfa28b2d005a4d6f8d62fe0b39f0a23c8014d0a3906b88eae069370014a9686366b902b4bee365b7e3c4ee6ddefa3df242bc5791a88c9719008ce2440b7c05b3f60e838b3c8e0570ad8c133f883aa9a588635293ca1401b7a03ae15d5979c53b121b53d0c9c18bd51d073c1af5eb85bb1d8ab3c7ba617004f6cbd364fdfcfd21449d3d1f0dc8d6959cccb012c30a42b043c9b7bf2fc1e55b22f09f7b1c707c6d38e2cd5f148433d8bd44947bbdb4e1e5b10523292bced500b8c469f5359917c9860d9ae04f91e7d0bf8d5045302165164087c51703520d72dda8f888dfa2c846cc1fbdbafb99209003f73761920a0623c1c40212a8b80b028709685cbb89d399d1cd198be069d75331133607e1a1884812bd703ba780c520adb8ff00ca768b2277df3778c1b9a29c07799b35f014d3eeecd2a110fa798323559eb4f082e192dd7e99490a1d94a351cf6908b2521981b8ee7e02606dbed173343fb622d29cccb15f00cc4051831ff872e9355a58ca414fb7f5895b740a7913b9c99f32fcd286cd996d71c504d5ce4bcb07824fb91bc039f1570c86c40b6c45aaabb36dfeae87233f9f1ab4ecf5bbee2b0a5010eb9f2c303e10c38244655506dc1b1662cbde2ab780f67de6364c297cbb8af350486cba7321042382f7becee564707830b6df8ccfe8b1a88af41e9b6be573458f57df365268a5fce09a01ddd73a2c2310f1bbc6c973400a15ddd4609b455a8510c4941ff4f798c9e162b55650982f13416316b11d6279d3030990c80c96018b523b529ef9013337b23b4a121837eca1154fba1fdcf09adb0f9e294bbb51c8c2282ef555155e755759626f8b8b86dd8f4eceb64f405a7aac03bbbb2d5ed6324bef1275d94cc52fa45dacd96e0062a9ea4a03c12da808baa9483ed9c25cd8a7377d2c3ac4c88af1fe19519beeced7ae4b8dccbfcfb74875e24915ca7c19d2bdeb3ca8a7540f869132e4c9eead5c290c67a98ab1da3f4c92e08d43d03a730e18360c4d519a484233be3747a75120478eeff04d468efe105f24314ace546ab214833b3bf890cf99a070d84bd97abe5b85ee6100d44c6e3536051165ced99a1bcfa8e0c5d2a177cf976935e3b3d51860ae50baa9db5ea60191781972498515dee8754462c82df1a42890d6561603a5b58e8a6af504986a18beee324b5cda160f6f4d341f56dee1a1f3ad83c7a92bd3c4b9247db1028f26e2780137c33ac2bd9fbde571f057ff61fdcbb5538480dbdb17d53315669d97502cfda865174e767579fededa5fd7b0197aaacaa4c1c1fd17fa8d98ba5ebf174361d3fc1caef4edbe38e0609da64d77be364ad55007e63eb05988dfbdd87459b41053d28368e8e71f465f67c073cc019234d5ed5598bce4f43dad4a32ded41e34b6b3f8c20c16f21c27c9dea90c0e8080551de5e83cb613ff16668282eac21bcf6fb3555dcd07c8a5c9ab95da012d058b7ff9b84977bad5b5b5323173bfef89216d4c7da0820d2f90a353ff9927644e80aa241370d8412fea8656192b23ef9715a34cb384f5f282e818fa1ee24a2b560110159f893428341542337f3eefe51f5221ab088a582745712d49c9e812d1f686beab5963ec198b5aecb3fe4888a17461dad0cfbfe44c8c72dca2286f680497988463afe4af2a66ad611a132e957eb3a0b456b968cd0d7c4edfbdb5c7b0b4d476b8b92d5f8b3980739cc82e2f54f68dd238e24e900c354414e3a478f233b1c11ee3b4b17f5dd6e849c930a96b81a1740a4cde1d2b2f5a18bc9c742a776ca39ca926b5cd4a5efbe4c9ca7257aa68dcc6c8f53866fab3b8d0e6bc01a22a2a3ed1a261a2971e4b7a64f1b13155208bdb6c521e5f86fb19b22ee3ceeb3e7fc55937cb552b84c547d32d761f92444ddfb5625fdfce565e3e2cabe1fe0a925424b4be30b61424fe5e6fb0dd6d075b1eb6979a8c37152604570ec350e4eb134410905defe98ae1ec3e2e3fa5207e0472c47077f81837c5ccac722e694361f76110b593198a6ba725d5e7f24100660d1e73016fb0577296fb418a40761dae4f3285735f559461da8111f9e04107043a66c93fdab7eeb9f0f09a4ef72031813a1e8753578b9eee36d310e7105ce916bade90ca02ed1c8c19c8cdd34c6247a80a094232baefb41782dfed2c721349352e893683e6fe7c22d27b3f4cba1caa2b10fef7e09afc13cb896ee1f168296e9cbf7a9e83f3e1f63326ff07339aaa5019f1c9ec8d6ea1270bb41fb7fea66b90191e1d53e38dee7f4eee91db39f05540fe3b515c5f36b87cc5b79214522bc148818c7c1640832ee30b71f20626157a8903e15c4cbc231985ef5e9dbf2cc47982165ed3349ab2cb3c672a63f96dbfe3f920172bd712f0221d2ca89d0ddc5cb4c05c8d1b50a7cb36653def9d1758d00b3c1f", &(0x7f0000003b00)="ca027fc5f6fccb24759f82a99ced3e18a5c580009cec32a9576b0e8ad0ed4d37c0c69962471ddd0925a9e3d32fcac2c0fcb5325b6dad1a1f9d5aedfe118522e227638751cb70c9f23481", 0x4, 0x0, 0xf}, 0x50) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r3, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000002400010026bd7000fcdb174f15b90000b4c0bf56e5d85b64f485b3d2df625b95a326054bcee68ef22c60a2d796a7b283d6ef7c63dafa84736a6197bb7f4537e379d0ba43dfbb908ac0f08cb4a34c994d8cbf03bbc798a8a42d22282bf1e3c06a4ae538e8c3eaabb6bbe8e3e4d07b2abd6c6a17c7abdf236d38b80e41790ceb784fed0f9265c196242d6c6607f6c02c713727e4deca4f388fec45cb90db753d6df6e13972d0f1738ae75bbf52b0b1cf0fd8814a8a3c4e0c0300000000000000e4563994ecfb53d9e7c5846dbde1fdcf7694af0be2882a60e8fc8b8d8f43b1bdaeb8"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$can_raw(0x1d, 0x3, 0x1) writev(r6, &(0x7f0000000180)=[{&(0x7f0000000000)='\a', 0x1}], 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000001000010000000000000000020000000a3c000000120a01010000000000000000020000000900020073797a310000000008000440620000000900010073797a30000000000800034000000002140000001100010000000000000000000000000a"], 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000025000a20000000000a01030000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000003740000001e0a01020000000000000000010000000900020073797a32001400003400038030000080090006400000000024000b8020000180070001006374000014000280080001400000000008000240000000000900010073797a30"], 0xe4}}, 0x0) 1.432934894s ago: executing program 0 (id=1888): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d8000000180081054e81f783db4cb9040a1d080006007c03e8fc55a10a0015000600142603600e120800060000000401a8000800a400000001000000035c0461c1d67f6f94007134cf6efb8000a007a290457f010400000700000000ceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bf9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/215, 0xd7}], 0x1}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000040)={'lo\x00', {0x2, 0x4e22, @empty=0x2000000}}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x55}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x7}]}}]}, 0x40}}, 0x0) write(r1, &(0x7f00000001c0)="faefbe2d683f14c1cbcc195a01be65bc7fb153ca891bdbdac2f5daf22d1187a12bc7da9677ae30dac5dec13032c3b894b9190fdc34421bcd9bc50a28914dfe40c2e266492603564985aa5a68af9373ba95d31fd22f6bd87451955fb7d0d6e6e347aa80f012a3eac5ecb2006d2cdca927936bc619fc6b44663da8c24256155064cbd1f07f", 0x84) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000280)={'wg0\x00', 0x2000}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$inet_icmp(0x2, 0x2, 0x1) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x30, 0xffff, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x1}}}]]}, {0x4}, {0xc}, {0x4a}}}, @m_gact={0x6c, 0x2, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}, @TCA_GACT_PARMS={0x0, 0x2, {0x6, 0xfffffff7, 0x1, 0x0, 0x442}}, @TCA_GACT_PROB={0xc, 0x3, {0xf5, 0x26e6}}, @TCA_GACT_PROB={0xfffffffffffffe74, 0x3, {0x1, 0x18a8, 0x6}}]}, {0xffffff50}, {0xc, 0x3}, {0xc}}}]}]}, 0xf0}}, 0x0) ioctl$sock_inet_SIOCDELRT(r8, 0x890c, &(0x7f00000000c0)={0x0, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @remote}, {0x2, 0x4e21, @rand_addr=0x64010100}, 0x46, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)='bond_slave_1\x00', 0x1, 0x81, 0x8}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r7, 0x3a}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000840)='\'', 0x28}], 0x1}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x14, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x2}}}}}}}, 0x0) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311802e"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010) 1.42385227s ago: executing program 1 (id=1889): mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @empty}], 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000f00)={0x0, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0xea}, 0x90) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000c100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000400006", @ANYRES32=0x0, @ANYBLOB="158804000301040008001b000000000008000d0003000000"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c0200001900010025bd700001000000fe8800000000000000000000000001010000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000001000000000000000000000000000000500000000000000000000000000000005000000000000000000000000000000050000000000000000000000000000000000000000000000000800000000000000000000000000000002000000000000010001000000000084010500fc01000000000000000000000000000100000000330000000000000064010100000000000000000000000000ff340000000000000000000000000000402000007f000001000000000000000000000000000020003c00000002000000fe80000000000000000000000000000000000000000000000000000000000000000000007f000001000000000000000000000000000000006c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000ac14144300000000000000000000000000000000330000000200000000000000000000000000ffffac1414aa000000000000000000000000000000000000000020010000000000000000000000000000000004d26c000000000000000000000000000000000000090000000100000000000000000c000000000000008f700000ac1e0101000000000000000000000000000004d23c00000000000000e00000020000000000000000000000000000000002000100"/500], 0x23c}, 0x1, 0x0, 0x0, 0x8041}, 0x4000) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$isdn(0x22, 0x2, 0x24) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000140)=0x4) close(r4) 876.333919ms ago: executing program 1 (id=1890): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000008000000070000000300000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x31e5}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) 736.23145ms ago: executing program 3 (id=1891): socket$inet6(0xa, 0x2, 0x0) (async) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) (async) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050002000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a30000000004c000000060a010400000000000000000500000008000b400000000024000480200001800d00010073796e70726f7879000000000c00028008000340000000050900010073797a30"], 0xc0}, 0x1, 0x0, 0x0, 0x20020014}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) connect$inet6(r0, &(0x7f0000000800)={0xa, 0x4e24, 0xbf, @ipv4={'\x00', '\xff\xff', @loopback}, 0xc58e}, 0x1c) writev(r2, &(0x7f0000000680)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 719.4578ms ago: executing program 1 (id=1892): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x46, &(0x7f0000000080)='team0\x00', 0x10) (async, rerun: 32) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4) (async, rerun: 32) mmap(&(0x7f000082c000/0xc000)=nil, 0xc000, 0x6, 0x13, r0, 0x0) 656.340677ms ago: executing program 2 (id=1893): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d40)={0x0, 0xe0, &(0x7f0000000d00)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d7843e40108804400202024000100000000000100000000000000fdfffffeffff7f000000000000000000000000001400040003000000ac1414bb00000000000000000600050000000000000100802400020073e591ec06154031d3954ac0e16752e72640f08b5281a8461d17d26d12f2bbb6060005000021000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39228c00098028000080060001000a0000001400020020010000000000000000000000000001050003000000000088000080060001000a0000001400020020010000000000000000000000000002050003000000001003800080060001008c0e000008000200ac1414aa05000300000000001c000080060001000200000008000200ac1414bb0500030000000000200004000e00000000000000fe800000000000000000000000000000000000009c0000802400020073961633df6dc9cb418b15afd0bae7b90f1e6cfed8bb423cf9285c474163154908000a00010000002400010000000000000000000000000000000000000000000000000000000000000000004800098028000080060001000a00000014000200fe8000000000000000000000000000bb05000300000000001c000080060001000200000008000200000000000500030000000000080005000100000008000100", @ANYRES32=r2], 0x22c}}, 0x0) 620.844712ms ago: executing program 4 (id=1894): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000001c0), 0x12) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a0000000000006b01a400000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xb5}, 0x48) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b921, 0x80000, {0x0, 0x0, 0x0, r12, {0x0, 0x3}, {0xfff1, 0xb}, {0xe, 0x6}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x59cbf48e6369c0a3}, 0x4000) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 605.307611ms ago: executing program 3 (id=1895): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x28, 0x0, 0x9, 0x201, 0x0, 0x0, {0x6, 0x0, 0x3}, [@NFCTH_STATUS={0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}]}, 0x28}}, 0x20044085) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}, 0x1, 0x0, 0x0, 0x4c000}, 0x4000) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000030000000400000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_ext={0x1c, 0x19, &(0x7f0000000900)=@framed={{0x18, 0x0, 0x0, 0x0, 0x574b8e23, 0x0, 0x0, 0x0, 0x9}, [@jmp={0x5, 0x1, 0x8, 0x4, 0x4, 0x100, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x24000000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3ff0}}]}, &(0x7f0000000200)='syzkaller\x00', 0xa, 0xed, &(0x7f0000000400)=""/237, 0x41100, 0x20, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000500)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0x2, 0x4, 0x7}, 0x10, 0xb812, r3, 0x5, &(0x7f0000000640)=[0xffffffffffffffff], &(0x7f00000006c0)=[{0x0, 0x3, 0x9, 0x1}, {0x1, 0x2, 0x8, 0x6}, {0x1, 0x5, 0x2, 0x5}, {0x0, 0xfffffffc, 0x4, 0x7}, {0x0, 0x4, 0xe, 0xb}]}, 0x94) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000e00)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x3}}]}, {0x0, [0x0, 0x2e, 0x5f, 0x0, 0x30]}}, &(0x7f0000000780)=""/33, 0x37, 0x21, 0x0, 0x1, 0x10000}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0x20, &(0x7f0000000900)={&(0x7f0000000840)=""/56, 0x38, 0x0, &(0x7f0000000880)=""/121, 0x79}}, 0x10) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000a80)={r0, &(0x7f0000000980)='7$#\x00', 0x200000, &(0x7f00000009c0)={@align=0x100000000, {0x1, 0x6, 0x7f94, 0xfffffffffffff861}}, 0xfffff46b, &(0x7f0000000a00)={@_ha_fsid}, &(0x7f0000000a40)=0xb9}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b40)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000ac0), &(0x7f0000000b00)}, 0x20) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b80)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x1}, 0x50) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000c00)={0x0, 0x200, 0x8}, 0xc) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c40)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xe000000}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r11}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x14}}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r12, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x5, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x19, 0x13, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_idx_val={0x18, 0x1, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x9}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000680)='GPL\x00', 0x401, 0x45, &(0x7f00000006c0)=""/69, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x12, r4, 0x8, &(0x7f0000000800)={0x0, 0x5}, 0x8, 0x10, 0x0, 0x0, r5, 0xffffffffffffffff, 0x2, &(0x7f0000000cc0)=[r6, r7, r8, r9, r10], &(0x7f0000000d00)=[{0x5, 0x4, 0x10, 0x5}, {0x4, 0x1, 0x10, 0x7}], 0x10, 0x200}, 0x94) r13 = socket$alg(0x26, 0x5, 0x0) bind$alg(r13, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r13, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r14 = accept4$alg(r13, 0x0, 0x0, 0x0) recvmmsg(r14, &(0x7f0000004e40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000440)=""/135, 0x87}], 0x1}, 0x6}], 0x1, 0x10000, 0x0) unshare(0x2c020400) r15 = socket(0x1e, 0x5, 0x0) connect$tipc(r15, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$inet(r15, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1}}], 0x1, 0x4000) 512.906682ms ago: executing program 1 (id=1896): socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000140)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=@newqdisc={0x24, 0x24, 0x10, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {}, {0xb, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x24004001) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r1) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff000000000100000000300000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800e00010069703665727370616e000000100002800400120006001800177b000008000a00", @ANYRES32=r2], 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) setsockopt$packet_fanout(r3, 0x107, 0x12, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xca1) 509.2667ms ago: executing program 2 (id=1897): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x11, 0x2, 0x300) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070012040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006c617374000000000400028008000340000001", @ANYRES16=r1], 0xe4}, 0x1, 0x0, 0x0, 0x1}, 0x800) 387.140467ms ago: executing program 0 (id=1898): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b408000000000000611067000000000006000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x1800, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48) 304.787499ms ago: executing program 2 (id=1899): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0xfffffffffffffff4, [@enum64={0x9, 0x6, 0x0, 0x13, 0x0, 0x1, [{0x3, 0x6, 0x4}, {0xe, 0xffff, 0xfffff800}, {0x4, 0xffffff9d}, {0xd, 0xed3dd074, 0x6}, {0x6, 0x8, 0xb79}, {0xb, 0xd3d7, 0x80000001}, {0xf, 0x4, 0xa}]}]}, {0x0, [0x0, 0x5f, 0x7f, 0x30, 0x30]}}, &(0x7f0000000100)=""/141, 0x73, 0x8d, 0x1, 0x7}, 0x28) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x3ff, 0x9, 0x1, 0xf, 0x5, 0x1}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x870b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) (async, rerun: 64) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000240)="800000800000210ee7decd7a0003", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xd8, 0x6, @broadcast}, 0x14) (async, rerun: 64) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) (async, rerun: 64) r6 = socket$kcm(0x2, 0xa, 0x2) r7 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCOUTQ(r7, 0x5411, &(0x7f0000000040)) (async) write$tun(0xffffffffffffffff, &(0x7f0000000240)={@val={0xa, 0x201}, @void, @eth={@multicast, @broadcast, @void, {@generic={0x6558}}}}, 0x12) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000180)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r8, 0x0) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0xfc, 0x0, @vifc_lcl_addr=@local, @multicast1}, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 304.438373ms ago: executing program 0 (id=1900): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000a00bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00'}, 0x6b) 230.5503ms ago: executing program 1 (id=1901): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000600)=[@assoc={0x18, 0x117, 0x4, 0x6}, @iv={0x1018, 0x117, 0x2, 0x1000, "aae837b38aa1dd267e3cf7e55758373de2748b52a02390acc509c6fbf72479b4c401ef9e6e7762ba27c6105161e8fa1cad5720b4bc545195fe81be1b6d376ad6dc2ba78505372f127d6ead152ea088de4fe570d2268ca0715189b966c1e4f4a99c813f67d70762510a18de85b63a6978e1a73d766012446a57004ab49e25f0f30ba5d7ff9030ada6684371834293ff30fc88c107f26ff3adc060d966fe47aea5b7c160ce7a2c4fca4ee15c9ee3497f26f3afac1fb010f738cf49d2943a7030c3c327df396ae48bcdbcfb69c297da1f06a04605f6c203f97674c26d7b88dabaca65d161f760d80c4e44ac85791a77a20483860e032b3ddd4280c74896a428a2491a19dfdbdff60354678be22caae4e00847ce7ff2c898923a64e94b54e507e40689d50753121a4f54cc05648c44ca9a5ced54eb1e7a73ddea5f38cbd7c85521df914a2419e44d9e6be287bec8774c73bfcd26dd774a9aaa6c3ceb8dad25e083e690dd0657bcf3636339e949a4f22b2fae06b8633045d4762af69c96705aac68e71b9f36d14cc25093fff0453af30f92d695ff8dadbcee060d9da21764b2314893149679f0845465948ada4b5612f234c32f31ad8a83d8903bf137c2fd6c1860e6581c186a3a8f3010abee1497841a6f6d4aa15abb673102948a56a2434ab8dfc910df9a6315ab32eae5f66935d4097057059337f354d81c49538e086f92f44f1b62cc646fd87d9e1fa73d74d17c45d6004d4259e348ffa8157caf9abc44323a7e40570080822158e6b9eee09908860ab4a930d88921ca1bc41f980a19443aedbd8196190897892e9482909b347961cc673c0baef47fa4f19ed4c424385af43d1ea705da681827c029a933d0e5065c1d655a1c2fa67b4da0286dffe541c96bdff3b0f556d1a8a78f9ef106edf85854c8163f3b53f3259d584f14be0bb3715de66e023c8592e4eb00837c4bb746043b1097788469a07d25c6b71e44410c3b079bd0446f998492e6299a54d0bd7837d590418e9592797d7ff98710f6a3b2bc740d7a1322a0ebeb14d86ad8fbdae5d64ae8dc51d2e78dd20959f24bbe5d687d82ae28196562b120a3a36a2aaf2debb8121a42cb0eec1480d0b66d697ad2ae41ad0899272c7bc4c8d3cc6510e67131966438dbc5454ec2847c98cca9266a6874c3506f850b2839612d196071a4112491e63f71438f9a444575cbae5bca273f5c1baae6801be78dea83f9592ab6f1ce1c3afc84ec26f8a300aa612512f587b6ecea62a73b626f42c0caa16c2ed28c2a0c63c8cd489b14d1448591eed6bddeb54d7a335a6163553840c3093ad6d3878200e51db395e0b4cf2d8f583c6f09f8dc268821a1757edc2693e189ffa168e933386ab6a188a7a0de5909111f36eb401725a0bdace0c567de3ccd13f977563096c14f4ba37aa1cf5dd9f222750df0608d161eddfc72cbc26ce1389ee4cd96146f5bb145de59c6f0e689b0df95a2edac990418f8725ee47927a3b0e1625c7d1156c8b01b533b82e7e3f6ca6857bcb32abcea762d49bb5fa8636eb6667dc3135c3e71e41b5603bcfe7d117e776cee7913a418e002a13ea7ff73c2e49573eccf9ba484331bf829daff2f8c93987509c472350156b93cdceca77ac458911a14f28e903cf69e0cd813eb910cdc8fc10438ebd065f920496361a4ac5a7219147f71f1571619e16f660f57d5dd3262ddfffa0be1763d03c4b96f48ccf6eeb802703feefe3944ed7bbda5255773340af6ff87a9b29f185e6697de794885e8a7022623e3996beeb6fce834b88d7c941c27b88309a2f4a8be4de0ff34b449da759ec0c43664c827b55681dc6b4091a7f0bc290ea34f77f6828a4df24b82ccb34b34655f66e46f955a8708f15df6a79d37f1580030cecad62a2f75dc6dd3f7ce35405296980006d2527f1ba2ec7b6cc8a9b23c207bd9c1200c34bb666e1f21b4e9a21b1b64ccb63223cdb02abc7f437852feedbe7edc528ccc4324a49ec70359f8a95c7af6099a3a327e822baf2bf65c243a417e5b02548d662417004c4cbf253d0065165d7cb6a46b64d9fda5e921252175dea7b14e73c000618b4e9c4258d68b8c94f0c9271c73c2efebb11348775814cbf7f8f6dbe99ceb28dd2de7e62215a038c98bb1b61667e5a602abafbdce17d77ec004d931139f48175f3e6cf85085cff3fa3f050987115c532d94cf6143a217e4a8b9a15dede9c82bd55d02ff221aa691241242dcba2d980b32edd0a48cded2811fa5778b852c413b4d6fcf9ac3ba97af488896f11d1679a5d0443947c51a444230b323af1fe4cfc54bde0fceb30aad76495190d78b07fe66fbab4cf8cf00498b90c8b569e5afa581b12952603025daaf7cfe14478c6ee008c50c8895916bb0b45c8637e07fc783eede2b8e1ee25dd9e84d9dbdcde76fe469e0167e5ecb36922c7979ba755db845a90cd87168ceb6990d44794b36818fb8293b8a7d29d5f14b94510626ca7ed5b09fdc922bd7a1097328be858933d188a8c33cc9bef4c3b1d6a571b45b16af37b04807a6570a2fe82b57f0b25cf04af40faf27b6134a2ab363ceed06217c478ad515c37660c54ffca4872497b8dba2da6585d0fab575332c11a619cec5e1f4189430e9ab36568d34e1f9a5033fe2793c282a6f06fc4c2ee0e24f32512a8a9adb6359a504f983213bb905076718ebd6d53a50a1b61fa175a3c7d685eca008cd0d924c58462e19ac1b35aeebf6ad24fe3f37ad720f20f9fd681632afaccddf1db79d55e432e07f63c6ac034bf5863db3d2479f91cba6fbe68b0f1608c9777feef3a49fd04f359f12b4d9ad47de4671a88085f6d4c858b5e020b586cbc3569ec34ed2ddceda518082ce9aa80f4810c004b15432ca8bbe2233c644b4a71988ddc138acc0c489167d1a01b13bbcce3112bb1a9c8a46ad907930505d0afea100cfb14b559afdc3f86b20b640f7bfb72d3eef097ac1c6d6bed81e63c79b801b73a1778d0342b2b7e1d78ad465db31cb84dc48d9bf96db9968046e64b2a1fd7f345382c2538868dcff4dd2fdd3dd8f385bb19cf62f91ee74653d25391f62bea9c405d59f000faea3b641bc1c35ebe9c8c95b356618c53929eabaf77e9d5554628132503f7a841c42aae3b395175fbb459eeaf5975c6d9a1e7aa69aa709ddb66ea4a5218297927ea09959069302596799a00287ec5a9f4b1c4805a05c3f6976fd472b204d02371f262888dabbcf3185df0ae20ca35697ea566fe3ec3382f62e46298f88889f335d58a9a17f0dae915264e76f4da5a28dd643e7e1b4ac2d2bb576448fca01c3a862b7155e2fc95da2844ad7815f697591257becce5c6c4b92fee582ac14a0a95653f2ad60e1928b8521094e45292051400b71aca5886079d68f8de13413f922c73c33a498ec9abca254596f7f4791717a3f7b262a0136ccc1e3b1b4a23c720bf2084e3ab539c9c044fa778466e03a25d00a6319e96dcec24ebaafa9bd74ca9702706f7f77efd87742589445fb6e796aea8a188fd8c396e44ab0e6d038c659f1017293a19be153ad1044ce5a7b7b5cd239499e410efdcd6a884607a16e101938b2e57936f420d50b2b5f2321456a57fa7447401f26f1f1ee7edd52bf279aa9f83bcacbd6d2aa9836ceecb584dc62cf2830fe0354902d8f23b75bcae4d563f24572dc0be2fa958d5a7409fbe7ec0f50f79870bb6df67ee54f2965dae99acf3147436b76fb6f9cf6145bdb0ea6875d68d373e11214e1262547339faae7107dd5e016c921eec6a63a9c36a5c19f9d4eaf836974cdacd4e84aa4bb44542920ca9d2b6f3e38e746e0412d8b7811efa4acb633d1c9c62758180065415f6d18fcf4e37dd887ec3ba3bed3a9f31a3f8bf2973360729cd974eddca17a75c28de7c8bdc202d2c68a6662d6977374820c986c2ef5ebdf75d7d0c7d401b56bba08d3301b7b6b81ddffe0fd2b32b953500f63d7d529de72dbcf342e73bd2b608ee0567285e5dc17b7f124d3bb0850aac47b3db4bff71793594471717ab376ed3c915ba65ffa62a7d0985d5a232fe88b50fccd6bc2bd91908f25118357d5f6d07251260839128817be994347b24e17d5086fbdf53e26c9329ada5ae8a21fed43a2049e2e0ffc9c30cc8bb394efd4b79997871a35b51f62b659b102a273d36552ace950699e1258e6218a2bdc9d46ec28061bd6888a3f2f51ea2a0643b22cd42b70fabd0345550d87c3762609eaa486874baeb2421c452488493491c40438a93880fb739febb9fa9da6407161879844cecf310d2f592f3d414eedb46798a258562637aed4de39e8f32eaf8d0a909545afe33e6fb36a404b75e4f6e94ecbed817402f9ccd7a16c2b4fe25b472307eb0084f5d4dcc5ecf0cf673047cae869a053019094b3030eb0f98926fbe053c427c4babc970cd6023233ab4512a75b288db72e93f16bdd85fa707709c51a3258630056f4939791603386cf57debf3438a0ccf527c897579f366193fd71ad0481d9edd9f926e100fe382d9b34201be124138b13647c5c7d27fa913fc23bac9830cd486f4e94d560b995aac8a18e81aac1ed6f5103efb6a6bad2839ac8e69aa33ac787af3a17811b6c18c9ee99d8584d2f31d7263132be2f18fd5beeaa38fa38fea16e4ffa2099c24f6f226f6a52145aab2c548823f852d8cd859f7b79353495a9c62ed06715dc5b8b110bb1ba5508a60bf6d7a51dfb3b6397e718d3612099a72175e19bb38eeb630b01dfc728564923c58160c211dc9c9987eec296f196a9a07fdc14d50d2801e2f9f98f6f61f7c2b5557a937ec390c728526db310ab2510d28ee1e1073df6c94006636c4c473df38def83c38f374b061d763c4a3ec17bb27a3d884a9170657d564fb6c9bbd86fe228b8f7c62a6a55cd40fa60dffe33927b3f100c9edc0f31e71e3bb98a2065d4be036d279ebac1759d0f7242ac6962e5d533f9d8c278c0c0e4f4cc83041e7422ce3cc3280b29b4d94591180849957a4d6c4821e6cb6fad4b68744f7bb4b59faddb6e0b64f31b384a8937d5a75544fa962eb2a097545aa4fa81dc18fcd689a68079e7c17df29ecb251921b19899cf28e15ff34a917d2253cf3e58a9bb706107f3e49ee0caad6297262ed71d059f85089ab7d1bc09502ff41f0cf5c9c52f1183a5fd4243d7333b0dbbfde01be1edbd1fee01534b9b2a76bd324332689de398069573dcbf1056e4010acd6aad32b24ea78e61fb79f007b8631310f20d46a37a858b631c1b9089da2624688b064840f0b7b8c2a7507cb182c2772ccf722e0c2510daeda3cdc83b31cd7a0e6c19ac3194e67f0617676e7d934e5806fd43f9110447221a0ed3c6cdea405718832b2e17018f22275016b101045095d944ca45a47eb5962e905cadfa2feb0ac9906ee1ba76f04c460b3b54d441b00eaa43cc8070f7d27b40f09f10e858495aa03cae9b969e6f4024b3ae492d2cb64d41863a7a8732a7812e8e2522b8ae5511ff565505aa1b99022be23f4e19a78230e97d47407509d81df462fd1091742846f7da7b6840a946b73aa70871a79b50e91788f22692a71327940c4a22404772f896db1a807145b8a03d9451a1ac0973ed6ed86c8dfadba5f0b2267cd9b2199500ad97e1cfdc94112f2ce2f9306697032706618596b7a2e77a6e1721e4fb7412899f7e3d263fb84b21ac7b85afd0792897bb15d086f878d2da0df59b2afeb4de55757d398e37d37ffa9d58971e573e4fbdae673af4e9ef71714adf48dddb6c5a1ed6d4a5a943d71031d53f9dfa890a60d329044af901204baf50b332d90f96b64d1e1d8578e9d2"}], 0x1030}], 0x1, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xff14}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x23) 150.723753ms ago: executing program 0 (id=1902): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000008000000070000000300000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x31e5}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) 110.424717ms ago: executing program 4 (id=1903): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000040)={{0x32, @multicast1, 0x4e21, 0x2, 'ovf\x00', 0x4, 0x3, 0x5a}, {@rand_addr=0x64010100, 0x4e22, 0x3, 0x1350, 0xffff897c, 0x3}}, 0x44) getsockopt$inet_int(r0, 0x0, 0xb, 0x0, &(0x7f0000000dc0)) r1 = socket(0x10, 0x80002, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="44000000040a0102"], 0x44}, 0x1, 0x0, 0x0, 0x4000084}, 0x24008000) readv(r2, &(0x7f00000005c0)=[{0x0}, {&(0x7f0000002680)=""/171, 0xab}, {&(0x7f0000002740)=""/86, 0x56}], 0x3) r3 = socket(0x840000000002, 0x3, 0xff) socket$alg(0x26, 0x5, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5800000055003d07000000000001000007000000", @ANYRES32=r5, @ANYBLOB="20000280", @ANYRES32=r4, @ANYBLOB="0000000000000000000000000a0000000000000000000014200001"], 0x58}}, 0x0) sendmsg$inet(r3, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000380)=[{0x0}, {&(0x7f00000000c0)="9e762d2f24d02a99cb0aa59510ebf8762a6c1f64", 0x14}], 0x2, &(0x7f0000000600)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x44}, @private=0xa010102}}}], 0x20}, 0x2400c804) sendmsg$nl_route_sched(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newtaction={0x80, 0x30, 0x51b, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_skbmod={0x68, 0x1, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x5a}, 0xffffffffffffffff}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x7f}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}]}]}, 0x80}}, 0x801) 32.708511ms ago: executing program 0 (id=1904): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000040)={0x83, 0xfff, 0x0, 0x0, 0xb, 0xfffffff8, 0x8000003, 0x2, r3}, 0x20) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={r3, 0x2}, &(0x7f0000000040)=0x8) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r4, &(0x7f0000000200)=[{&(0x7f0000000140)="1e", 0xff80}], 0x2a0) 32.404483ms ago: executing program 2 (id=1905): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xa8, r1, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DISABLE_VHT={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffffffff}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xf}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x38}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x17ac79945f4c2cf5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3}], @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x8000000, {0x0, 0x6, 0xffff, 0x9}}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x800}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, r3, 0xc1a, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xb}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x11}, 0x20001000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, 0x6}, 0x1c) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) r6 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$inet_opts(r6, 0x0, 0xf, &(0x7f00000004c0)=""/2, &(0x7f0000000500)=0x2) bind$inet(r5, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) listen(r4, 0x1) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100fcfffffffcdbdf250700000008000300", @ANYRES32=r2, @ANYBLOB="140004006e696376663000000000000000000000080005000600000014001780040007000400030004000400040006"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x8040) 19.45093ms ago: executing program 0 (id=1906): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x6}]}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x8b}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x20008804}, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x9, 0x6, 0xb02, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40000) connect$qrtr(r1, &(0x7f0000007340)={0x2a, 0xffffffffffffffff, 0x2}, 0xc) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'dummy0\x00', 0x800}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000fd3f000000000000090000008500000007000000850000001100000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89fb, &(0x7f0000000540)={'ip6gre0\x00', 0x0}) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r7 = accept4$alg(r5, 0x0, 0x0, 0x0) read$alg(r7, &(0x7f00000012c0)=""/4109, 0x100d) sendmmsg$alg(r7, &(0x7f0000000c80)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="7f1ad71c5e1e2ffd65015711202c22a16e97f0b88f833c486c5fbe2f289a0d0f74a06da438dab866494a247e9e4e4f06f21c7c3f5c4dc83ecf01cf0f3edeb9a676c8fb387ad8e1ef53ac7dfd6baf1ecf42036e181292251526714cf6d8fb4bce389c96bc0e24d3abc248a5b98fa279d377b558a6a1486d3a79e1164c19f1c333019380a90df8ef6b", 0x88}, {&(0x7f0000000580)="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", 0x116}, {&(0x7f0000000280)="faab1d43a65d20ccf90a2bc53c6384d81e049741816045278e7e25ee0c020808bb08ab9992f5ffd89cd1df31c662ff364cbace61fcb7e067b266f3fed7c325d75bd964ef413b57037d7b69e34cdda89b0328e064119c9e8c7beb616f163ccf71e6f0ce625cddf3ac464cae067dc59d", 0x6f}, {&(0x7f0000002300)="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", 0xe50}], 0x4, &(0x7f00000004c0), 0x0, 0x20000850}], 0x1, 0x4000080) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) sendmmsg$inet(r8, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(0x4) 0s ago: executing program 4 (id=1907): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1900242e4bccd722295bda004004000000f01bc04900"/39, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x6, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x3}}, @typedef={0x4, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x4e, 0x0, 0x4}, 0x20) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @broadcast}}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000200)=""/224, 0xe0}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000000380)=""/130, 0x82}, {&(0x7f0000000440)=""/79, 0x4f}], 0x4, &(0x7f00000005c0)=""/60, 0x3c}, 0x40012101) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000880)={r1, 0x20, &(0x7f0000000840)={&(0x7f00000006c0)=""/87, 0x57, 0x0, &(0x7f0000000740)=""/209, 0xd1}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000180)=ANY=[@ANYRESDEC=0x0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000001007baaf8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @xdp, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, 0x94) kernel console output (not intermixed with test programs): .658400][ T8838] RSP: 002b:00007f2a8cd73028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 147.658418][ T8838] RAX: ffffffffffffffda RBX: 00007f2a8c215fa0 RCX: 00007f2a8bf9c819 [ 147.658430][ T8838] RDX: 0000200000000000 RSI: 00000000400261f2 RDI: 0000000000000004 [ 147.658442][ T8838] RBP: 00007f2a8cd73090 R08: 0000000000000000 R09: 0000000000000000 [ 147.658453][ T8838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.658463][ T8838] R13: 00007f2a8c216038 R14: 00007f2a8c215fa0 R15: 00007ffe2026e318 [ 147.658492][ T8838] [ 147.658512][ T8838] ERROR: Out of memory at tomoyo_realpath_from_path. [ 147.713404][ T6691] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.059612][ T8848] netlink: 76 bytes leftover after parsing attributes in process `syz.4.799'. [ 148.111107][ T8848] syzkaller0: entered promiscuous mode [ 148.116622][ T8848] syzkaller0: entered allmulticast mode [ 148.131415][ T8848] 0: reclassify loop, rule prio 0, protocol 800 [ 148.134110][ T8850] tipc: Enabled bearer , priority 0 [ 148.147927][ T8850] syzkaller0: entered promiscuous mode [ 148.154463][ T8850] syzkaller0: entered allmulticast mode [ 148.254110][ T8850] tipc: Resetting bearer [ 148.262493][ T8849] tipc: Resetting bearer [ 148.278692][ T8849] tipc: Disabling bearer [ 148.304228][ T8856] netlink: 'syz.4.802': attribute type 1 has an invalid length. [ 148.313293][ T8856] netlink: 224 bytes leftover after parsing attributes in process `syz.4.802'. [ 148.324877][ T8856] netlink: 212912 bytes leftover after parsing attributes in process `syz.4.802'. [ 148.571263][ T8859] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 148.953989][ T8862] netlink: 12 bytes leftover after parsing attributes in process `syz.0.805'. [ 149.115833][ T8885] netlink: 'syz.3.809': attribute type 2 has an invalid length. [ 149.125330][ T8886] netlink: 4 bytes leftover after parsing attributes in process `syz.1.810'. [ 149.604643][ T6691] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 60142 - 0 [ 149.621396][ T6691] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 149.668628][ T6691] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 60142 - 0 [ 149.698280][ T6691] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 149.731215][ T6691] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 60142 - 0 [ 149.741693][ T6691] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 149.884042][ T178] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 60142 - 0 [ 149.903975][ T178] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 149.965404][ T8919] tipc: Failed to remove unknown binding: 66,0,0/1540728513:160994844/160994845 [ 149.984606][ T8919] tipc: Failed to remove unknown binding: 66,0,0/1540728513:160994844/160994845 [ 149.996276][ T8921] netlink: 8 bytes leftover after parsing attributes in process `syz.4.822'. [ 150.551729][ T8954] netlink: 'syz.3.831': attribute type 1 has an invalid length. [ 150.592966][ T8954] 8021q: adding VLAN 0 to HW filter on device bond3 [ 150.613568][ T8954] bond3: (slave ip6erspan0): making interface the new active one [ 150.622794][ T8954] bond3: (slave ip6erspan0): Enslaving as an active interface with an up link [ 150.633121][ T8957] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 150.641249][ T8957] syzkaller1: linktype set to 769 [ 150.848643][ T8968] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.971894][ T8969] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.005004][ T8968] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.110450][ T8969] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.166712][ T8968] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.227495][ T8969] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.256774][ T8968] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.323227][ T8969] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.364988][ T8976] syzkaller0: entered promiscuous mode [ 151.372344][ T8976] syzkaller0: entered allmulticast mode [ 151.518649][ T6732] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.549889][ T6704] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.617770][ T6732] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.629528][ T8985] 8021q: VLANs not supported on caif0 [ 151.637151][ T8989] netlink: 'syz.2.844': attribute type 1 has an invalid length. [ 151.692551][ T8989] 8021q: adding VLAN 0 to HW filter on device bond3 [ 151.701428][ T6704] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.745315][ T6704] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.777287][ T6732] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.799694][ T6732] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.829232][ T6732] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.847302][ T8993] netlink: 'syz.4.845': attribute type 10 has an invalid length. [ 151.886012][ T8993] dummy0: entered allmulticast mode [ 151.902709][ T8993] team0: Port device dummy0 added [ 151.974246][ T8997] veth0: entered promiscuous mode [ 152.106180][ T9005] netlink: 'syz.1.849': attribute type 13 has an invalid length. [ 152.148467][ T9005] netlink: 'syz.1.849': attribute type 17 has an invalid length. [ 152.158590][ T9007] netlink: 'syz.0.850': attribute type 1 has an invalid length. [ 152.183097][ T9003] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.190791][ T9003] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.300935][ T9003] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.303761][ T9014] __nla_validate_parse: 5 callbacks suppressed [ 152.303777][ T9014] netlink: 4 bytes leftover after parsing attributes in process `syz.1.849'. [ 152.314081][ T9003] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.423987][ T9000] netlink: 8 bytes leftover after parsing attributes in process `syz.2.847'. [ 152.436616][ T9000] netlink: 28 bytes leftover after parsing attributes in process `syz.2.847'. [ 152.487932][ T8997] bond0: entered promiscuous mode [ 152.541084][ T9007] 8021q: adding VLAN 0 to HW filter on device bond7 [ 152.611568][ T9005] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.621564][ T9005] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 152.645092][ T9009] vlan2: entered promiscuous mode [ 152.650662][ T9009] bond7: entered promiscuous mode [ 152.656211][ T9009] vlan2: entered allmulticast mode [ 152.662207][ T9009] bond7: entered allmulticast mode [ 152.681981][ T9013] bond7: (slave bridge3): making interface the new active one [ 152.690113][ T9013] bridge3: entered promiscuous mode [ 152.695535][ T9013] bridge3: entered allmulticast mode [ 152.702485][ T9013] bond7: (slave bridge3): Enslaving as an active interface with an up link [ 152.715042][ T6691] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.733654][ T6691] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.748978][ T8992] bond0: left promiscuous mode [ 152.761303][ T8992] veth0: left promiscuous mode [ 152.794190][ T6691] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.835351][ T6691] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.953699][ T9027] netlink: 16 bytes leftover after parsing attributes in process `syz.1.853'. [ 152.975086][ T9027] nbd: must specify a device to reconfigure [ 153.305651][ T9052] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.407464][ T9052] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.518424][ T9052] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.578319][ T9062] syzkaller0: entered promiscuous mode [ 153.584025][ T9062] syzkaller0: entered allmulticast mode [ 153.642069][ T9052] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.718302][ T9068] syzkaller0: entered promiscuous mode [ 153.731043][ T9068] syzkaller0: entered allmulticast mode [ 154.481406][ T9111] syzkaller0: entered promiscuous mode [ 154.487013][ T9111] syzkaller0: entered allmulticast mode [ 154.533570][ T9108] 0: reclassify loop, rule prio 0, protocol 800 [ 154.567026][ T9116] siw: device registration error -23 [ 154.573620][ T9115] siw: device registration error -23 [ 154.581789][ T9116] smc: removing ib device syz2 [ 155.547875][ T6732] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.579833][ T6732] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.589897][ T6732] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.630459][ T6732] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.877680][ T9166] netlink: 'syz.1.890': attribute type 62 has an invalid length. [ 155.943321][ T9166] netlink: 16 bytes leftover after parsing attributes in process `syz.1.890'. [ 156.017419][ T9163] netlink: 192 bytes leftover after parsing attributes in process `syz.3.891'. [ 156.053642][ T6691] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.072499][ T6691] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.153178][ T6691] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.265390][ T6691] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.486341][ T9190] netlink: 28 bytes leftover after parsing attributes in process `syz.4.898'. [ 156.605764][ T9199] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.902'. [ 156.827764][ T9205] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.938734][ T9205] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.024406][ T9205] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.108050][ T9205] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.273317][ T9235] netlink: 4 bytes leftover after parsing attributes in process `syz.3.909'. [ 157.386119][ T6691] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.427355][ T6691] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.467695][ T6691] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.487380][ T9241] netlink: 27 bytes leftover after parsing attributes in process `syz.0.912'. [ 157.496573][ T6691] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.692571][ T9249] netlink: 'syz.2.914': attribute type 1 has an invalid length. [ 157.739745][ T9249] 8021q: adding VLAN 0 to HW filter on device bond4 [ 157.806819][ T9257] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 157.830214][ T9257] netlink: 'syz.1.915': attribute type 39 has an invalid length. [ 158.178106][ T9269] netlink: 'syz.2.918': attribute type 1 has an invalid length. [ 158.332740][ T9269] 8021q: adding VLAN 0 to HW filter on device bond5 [ 158.571255][ T9276] IPv6: sit1: Disabled Multicast RS [ 158.890913][ T9291] atomic_op ffff888033ef3198 conn xmit_atomic 0000000000000000 [ 159.044962][ T9295] netlink: 12 bytes leftover after parsing attributes in process `syz.4.927'. [ 159.125733][ T9295] bond4: entered promiscuous mode [ 159.133338][ T9295] bond4: entered allmulticast mode [ 159.140797][ T9295] 8021q: adding VLAN 0 to HW filter on device bond4 [ 159.167600][ T9295] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 159.418316][ T9309] netlink: 9 bytes leftover after parsing attributes in process `syz.0.930'. [ 159.518595][ T9309] gretap0: entered promiscuous mode [ 159.546125][ T9309] netlink: 5 bytes leftover after parsing attributes in process `syz.0.930'. [ 159.555820][ T9303] netlink: 'syz.2.928': attribute type 16 has an invalid length. [ 159.583944][ T9303] netlink: 'syz.2.928': attribute type 17 has an invalid length. [ 159.596753][ T9315] netlink: 104 bytes leftover after parsing attributes in process `syz.1.932'. [ 159.609416][ T9309] 0ªî{X¹¦: renamed from gretap0 [ 159.630742][ T9309] 0ªî{X¹¦: left promiscuous mode [ 159.651309][ T9309] 0ªî{X¹¦: entered allmulticast mode [ 159.663975][ T9309] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 159.823500][ T9303] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.833601][ T9303] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 159.864122][ T9320] tap0: tun_chr_ioctl cmd 1074812118 [ 160.012649][ T9336] syzkaller0: entered promiscuous mode [ 160.018360][ T9336] syzkaller0: entered allmulticast mode [ 160.353786][ T9355] FAULT_INJECTION: forcing a failure. [ 160.353786][ T9355] name failslab, interval 1, probability 0, space 0, times 0 [ 160.366657][ T9355] CPU: 1 UID: 0 PID: 9355 Comm: syz.0.943 Not tainted syzkaller #0 PREEMPT(full) [ 160.366679][ T9355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 160.366689][ T9355] Call Trace: [ 160.366695][ T9355] [ 160.366702][ T9355] dump_stack_lvl+0xe8/0x150 [ 160.366729][ T9355] should_fail_ex+0x412/0x560 [ 160.366758][ T9355] should_failslab+0xa8/0x100 [ 160.366780][ T9355] ? skb_clone+0x212/0x3a0 [ 160.366795][ T9355] kmem_cache_alloc_noprof+0x87/0x650 [ 160.366814][ T9355] ? __netlink_lookup+0xc6/0x8b0 [ 160.366844][ T9355] skb_clone+0x212/0x3a0 [ 160.366863][ T9355] __netlink_deliver_tap+0x404/0x850 [ 160.366897][ T9355] ? netlink_deliver_tap+0x2e/0x1b0 [ 160.366920][ T9355] netlink_deliver_tap+0x19c/0x1b0 [ 160.366945][ T9355] netlink_unicast+0x730/0x8e0 [ 160.366977][ T9355] netlink_sendmsg+0x813/0xb40 [ 160.367007][ T9355] ? __pfx_netlink_sendmsg+0x10/0x10 [ 160.367032][ T9355] ? aa_sock_msg_perm+0xf1/0x1b0 [ 160.367050][ T9355] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 160.367072][ T9355] ____sys_sendmsg+0x972/0x9f0 [ 160.367093][ T9355] ? __lock_acquire+0x6b5/0x2cf0 [ 160.367121][ T9355] ? __pfx_____sys_sendmsg+0x10/0x10 [ 160.367151][ T9355] ? import_iovec+0x73/0xa0 [ 160.367174][ T9355] ___sys_sendmsg+0x2a5/0x360 [ 160.367204][ T9355] ? __pfx____sys_sendmsg+0x10/0x10 [ 160.367234][ T9355] ? kstrtouint+0x6e/0xe0 [ 160.367280][ T9355] ? __fget_files+0x2a/0x420 [ 160.367306][ T9355] ? __fget_files+0x3a0/0x420 [ 160.367330][ T9355] __sys_sendmmsg+0x27c/0x4e0 [ 160.367351][ T9355] ? __pfx___sys_sendmmsg+0x10/0x10 [ 160.367365][ T9355] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 160.367410][ T9355] ? ksys_write+0x242/0x270 [ 160.367430][ T9355] ? __pfx_ksys_write+0x10/0x10 [ 160.367457][ T9355] __x64_sys_sendmmsg+0xa0/0xc0 [ 160.367476][ T9355] do_syscall_64+0x14d/0xf80 [ 160.367495][ T9355] ? trace_irq_disable+0x3b/0x150 [ 160.367511][ T9355] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.367529][ T9355] ? clear_bhb_loop+0x40/0x90 [ 160.367548][ T9355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.367565][ T9355] RIP: 0033:0x7f5418b9c819 [ 160.367581][ T9355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.367595][ T9355] RSP: 002b:00007f5419a65028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 160.367613][ T9355] RAX: ffffffffffffffda RBX: 00007f5418e15fa0 RCX: 00007f5418b9c819 [ 160.367626][ T9355] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000015 [ 160.367636][ T9355] RBP: 00007f5419a65090 R08: 0000000000000000 R09: 0000000000000000 [ 160.367646][ T9355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.367655][ T9355] R13: 00007f5418e16038 R14: 00007f5418e15fa0 R15: 00007ffc31b3b5e8 [ 160.367682][ T9355] [ 160.664847][ T9355] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 160.768222][ T9357] syzkaller0: entered promiscuous mode [ 160.786425][ T9357] syzkaller0: entered allmulticast mode [ 160.810981][ T9365] netlink: 8 bytes leftover after parsing attributes in process `syz.1.945'. [ 160.822696][ T9357] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 160.857193][ T9365] netlink: 24 bytes leftover after parsing attributes in process `syz.1.945'. [ 161.020856][ T9377] IPVS: length: 35 != 24 [ 161.140133][ T9383] netlink: 'syz.2.952': attribute type 1 has an invalid length. [ 161.209480][ T9383] 8021q: adding VLAN 0 to HW filter on device bond6 [ 161.211145][ T9375] netlink: 44 bytes leftover after parsing attributes in process `syz.1.949'. [ 161.242130][ T9388] bond6: entered allmulticast mode [ 161.552441][ T9412] FAULT_INJECTION: forcing a failure. [ 161.552441][ T9412] name failslab, interval 1, probability 0, space 0, times 0 [ 161.586813][ T9412] CPU: 0 UID: 0 PID: 9412 Comm: syz.2.958 Not tainted syzkaller #0 PREEMPT(full) [ 161.586839][ T9412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 161.586850][ T9412] Call Trace: [ 161.586856][ T9412] [ 161.586864][ T9412] dump_stack_lvl+0xe8/0x150 [ 161.586894][ T9412] should_fail_ex+0x412/0x560 [ 161.586924][ T9412] should_failslab+0xa8/0x100 [ 161.586949][ T9412] __kmalloc_cache_noprof+0x88/0x660 [ 161.586968][ T9412] ? __pfx_stack_trace_save+0x10/0x10 [ 161.586988][ T9412] ? rtnl_newlink+0x136/0x1bb0 [ 161.587015][ T9412] rtnl_newlink+0x136/0x1bb0 [ 161.587038][ T9412] ? kasan_save_track+0x3e/0x80 [ 161.587056][ T9412] ? kasan_save_free_info+0x46/0x50 [ 161.587079][ T9412] ? __kasan_slab_free+0x5c/0x80 [ 161.587099][ T9412] ? dev_hard_start_xmit+0x2d8/0x870 [ 161.587114][ T9412] ? __dev_queue_xmit+0x14d9/0x3980 [ 161.587131][ T9412] ? __netlink_deliver_tap+0x5ad/0x850 [ 161.587153][ T9412] ? netlink_deliver_tap+0x19c/0x1b0 [ 161.587174][ T9412] ? netlink_unicast+0x730/0x8e0 [ 161.587193][ T9412] ? netlink_sendmsg+0x813/0xb40 [ 161.587217][ T9412] ? __pfx_rtnl_newlink+0x10/0x10 [ 161.587237][ T9412] ? do_syscall_64+0x14d/0xf80 [ 161.587256][ T9412] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.587306][ T9412] ? kasan_quarantine_put+0xbb/0x1f0 [ 161.587325][ T9412] ? lockdep_hardirqs_on+0x7a/0x110 [ 161.587349][ T9412] ? kmem_cache_free+0x187/0x630 [ 161.587368][ T9412] ? nlmon_xmit+0xb0/0x100 [ 161.587403][ T9412] ? __lock_acquire+0x6b5/0x2cf0 [ 161.587437][ T9412] ? __local_bh_enable_ip+0xd0/0x130 [ 161.587459][ T9412] ? lockdep_hardirqs_on+0x7a/0x110 [ 161.587478][ T9412] ? __dev_queue_xmit+0x2b6/0x3980 [ 161.587494][ T9412] ? __local_bh_enable_ip+0xd0/0x130 [ 161.587514][ T9412] ? __dev_queue_xmit+0x2b6/0x3980 [ 161.587554][ T9412] ? __pfx_rtnl_newlink+0x10/0x10 [ 161.587576][ T9412] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 161.587601][ T9412] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 161.587623][ T9412] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 161.587643][ T9412] ? ref_tracker_free+0x693/0x840 [ 161.587663][ T9412] ? __pfx_ref_tracker_free+0x10/0x10 [ 161.587690][ T9412] netlink_rcv_skb+0x232/0x4b0 [ 161.587716][ T9412] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 161.587742][ T9412] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 161.587778][ T9412] ? netlink_deliver_tap+0x2e/0x1b0 [ 161.587800][ T9412] ? netlink_deliver_tap+0x2e/0x1b0 [ 161.587829][ T9412] netlink_unicast+0x75c/0x8e0 [ 161.587861][ T9412] netlink_sendmsg+0x813/0xb40 [ 161.587893][ T9412] ? __pfx_netlink_sendmsg+0x10/0x10 [ 161.587920][ T9412] ? aa_sock_msg_perm+0xf1/0x1b0 [ 161.587939][ T9412] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 161.587962][ T9412] ____sys_sendmsg+0x972/0x9f0 [ 161.587986][ T9412] ? __lock_acquire+0x6b5/0x2cf0 [ 161.588015][ T9412] ? __pfx_____sys_sendmsg+0x10/0x10 [ 161.588049][ T9412] ? import_iovec+0x73/0xa0 [ 161.588072][ T9412] ___sys_sendmsg+0x2a5/0x360 [ 161.588103][ T9412] ? __pfx____sys_sendmsg+0x10/0x10 [ 161.588132][ T9412] ? kstrtouint+0x6e/0xe0 [ 161.588180][ T9412] ? __fget_files+0x2a/0x420 [ 161.588195][ T9412] ? __fget_files+0x3a0/0x420 [ 161.588221][ T9412] __sys_sendmmsg+0x27c/0x4e0 [ 161.588243][ T9412] ? __pfx___sys_sendmmsg+0x10/0x10 [ 161.588258][ T9412] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 161.588303][ T9412] ? ksys_write+0x242/0x270 [ 161.588325][ T9412] ? __pfx_ksys_write+0x10/0x10 [ 161.588351][ T9412] __x64_sys_sendmmsg+0xa0/0xc0 [ 161.588370][ T9412] do_syscall_64+0x14d/0xf80 [ 161.588388][ T9412] ? trace_irq_disable+0x3b/0x150 [ 161.588404][ T9412] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.588427][ T9412] ? clear_bhb_loop+0x40/0x90 [ 161.588448][ T9412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.588465][ T9412] RIP: 0033:0x7f75fb39c819 [ 161.588482][ T9412] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.588496][ T9412] RSP: 002b:00007f75fc239028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 161.588515][ T9412] RAX: ffffffffffffffda RBX: 00007f75fb615fa0 RCX: 00007f75fb39c819 [ 161.588527][ T9412] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000015 [ 161.588538][ T9412] RBP: 00007f75fc239090 R08: 0000000000000000 R09: 0000000000000000 [ 161.588549][ T9412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.588559][ T9412] R13: 00007f75fb616038 R14: 00007f75fb615fa0 R15: 00007ffc07fa6458 [ 161.588587][ T9412] [ 162.215495][ T9414] netlink: 212916 bytes leftover after parsing attributes in process `syz.3.960'. [ 162.397089][ T9429] netlink: 16 bytes leftover after parsing attributes in process `syz.4.961'. [ 162.418478][ T9429] tipc: Invalid UDP bearer configuration [ 162.418528][ T9429] tipc: Enabling of bearer rejected, failed to enable media [ 162.489318][ T9439] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 162.618843][ T9442] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 162.786844][ T9457] __nla_validate_parse: 1 callbacks suppressed [ 162.786864][ T9457] netlink: 220 bytes leftover after parsing attributes in process `syz.0.971'. [ 162.807853][ T9457] tc_dump_action: action bad kind [ 162.990533][ T9476] netlink: 2 bytes leftover after parsing attributes in process `syz.3.976'. [ 163.028692][ T9479] veth0_to_batadv: entered promiscuous mode [ 163.038669][ T9479] veth0_to_batadv: entered allmulticast mode [ 163.273057][ T9492] netpci0: tun_chr_ioctl cmd 1074025678 [ 163.304381][ T9492] netpci0: group set to 0 [ 163.348478][ T9502] netlink: 'syz.1.982': attribute type 32 has an invalid length. [ 163.362505][ T9502] netlink: 'syz.1.982': attribute type 61 has an invalid length. [ 163.393671][ T9502] netlink: 16 bytes leftover after parsing attributes in process `syz.1.982'. [ 163.558424][ T9511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.986'. [ 163.567618][ T9511] netlink: 24 bytes leftover after parsing attributes in process `syz.0.986'. [ 164.037154][ T9538] tc_dump_action: action bad kind [ 164.285380][ T9548] netlink: 'syz.4.998': attribute type 10 has an invalid length. [ 164.402850][ T9549] veth0: entered promiscuous mode [ 164.430734][ T9549] bond0: entered promiscuous mode [ 164.500926][ T9551] netlink: 12 bytes leftover after parsing attributes in process `syz.0.999'. [ 164.544953][ T9551] ipvlan2: entered allmulticast mode [ 164.578493][ T9556] block nbd0: Unsupported socket: should be TCP or UNIX. [ 164.620626][ T9558] sctp: [Deprecated]: syz.2.1000 (pid 9558) Use of struct sctp_assoc_value in delayed_ack socket option. [ 164.620626][ T9558] Use struct sctp_sack_info instead [ 164.752398][ T9547] bond0: left promiscuous mode [ 164.779316][ T9547] veth0: left promiscuous mode [ 165.077917][ T9574] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 165.096946][ T9574] syzkaller1: linktype set to 0 [ 165.762850][ T9586] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1007'. [ 165.785591][ T9579] erspan0: mtu less than device minimum [ 165.795243][ T9589] netlink: 'syz.0.1009': attribute type 10 has an invalid length. [ 165.839028][ T9589] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1009'. [ 165.863997][ T9593] netlink: 'syz.0.1009': attribute type 1 has an invalid length. [ 165.886786][ T9589] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 165.925879][ T9593] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1009'. [ 165.949044][ T9592] FAULT_INJECTION: forcing a failure. [ 165.949044][ T9592] name failslab, interval 1, probability 0, space 0, times 0 [ 165.988971][ T9592] CPU: 0 UID: 0 PID: 9592 Comm: syz.4.1010 Not tainted syzkaller #0 PREEMPT(full) [ 165.988995][ T9592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 165.989005][ T9592] Call Trace: [ 165.989012][ T9592] [ 165.989019][ T9592] dump_stack_lvl+0xe8/0x150 [ 165.989048][ T9592] should_fail_ex+0x412/0x560 [ 165.989086][ T9592] should_failslab+0xa8/0x100 [ 165.989109][ T9592] ? security_inode_alloc+0x39/0x310 [ 165.989127][ T9592] kmem_cache_alloc_noprof+0x87/0x650 [ 165.989155][ T9592] security_inode_alloc+0x39/0x310 [ 165.989176][ T9592] inode_init_always_gfp+0x9ed/0xdc0 [ 165.989204][ T9592] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 165.989225][ T9592] alloc_inode+0x82/0x1b0 [ 165.989250][ T9592] new_inode+0x22/0x170 [ 165.989271][ T9592] __debugfs_create_file+0xb8/0x400 [ 165.989295][ T9592] debugfs_create_file_full+0x3f/0x60 [ 165.989318][ T9592] ref_tracker_dir_debugfs+0x197/0x360 [ 165.989336][ T9592] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 165.989378][ T9592] ? __kvmalloc_node_noprof+0x545/0x8a0 [ 165.989400][ T9592] ? alloc_netdev_mqs+0xa6/0x11b0 [ 165.989422][ T9592] ? __raw_spin_lock_init+0x45/0x100 [ 165.989445][ T9592] alloc_netdev_mqs+0x272/0x11b0 [ 165.989463][ T9592] ? __pfx_macvlan_setup+0x10/0x10 [ 165.989491][ T9592] rtnl_create_link+0x31f/0xd70 [ 165.989515][ T9592] rtnl_newlink_create+0x277/0xb70 [ 165.989544][ T9592] ? __mutex_lock+0x5ac/0x1300 [ 165.989571][ T9592] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 165.989599][ T9592] ? __pfx___mutex_lock+0x10/0x10 [ 165.989627][ T9592] ? ns_capable+0x89/0xe0 [ 165.989652][ T9592] rtnl_newlink+0x166a/0x1bb0 [ 165.989689][ T9592] ? __pfx_rtnl_newlink+0x10/0x10 [ 165.989710][ T9592] ? do_syscall_64+0x14d/0xf80 [ 165.989728][ T9592] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.989783][ T9592] ? kasan_quarantine_put+0xbb/0x1f0 [ 165.989802][ T9592] ? lockdep_hardirqs_on+0x7a/0x110 [ 165.989825][ T9592] ? kmem_cache_free+0x187/0x630 [ 165.989845][ T9592] ? nlmon_xmit+0xb0/0x100 [ 165.989881][ T9592] ? __lock_acquire+0x6b5/0x2cf0 [ 165.989909][ T9592] ? __local_bh_enable_ip+0xd0/0x130 [ 165.989931][ T9592] ? lockdep_hardirqs_on+0x7a/0x110 [ 165.989950][ T9592] ? __dev_queue_xmit+0x2b6/0x3980 [ 165.989971][ T9592] ? __local_bh_enable_ip+0xd0/0x130 [ 165.989991][ T9592] ? __dev_queue_xmit+0x2b6/0x3980 [ 165.990034][ T9592] ? __pfx_rtnl_newlink+0x10/0x10 [ 165.990056][ T9592] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 165.990089][ T9592] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 165.990111][ T9592] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 165.990131][ T9592] ? ref_tracker_free+0x693/0x840 [ 165.990152][ T9592] ? __pfx_ref_tracker_free+0x10/0x10 [ 165.990180][ T9592] netlink_rcv_skb+0x232/0x4b0 [ 165.990206][ T9592] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 165.990230][ T9592] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 165.990266][ T9592] ? netlink_deliver_tap+0x2e/0x1b0 [ 165.990289][ T9592] ? netlink_deliver_tap+0x2e/0x1b0 [ 165.990318][ T9592] netlink_unicast+0x75c/0x8e0 [ 165.990351][ T9592] netlink_sendmsg+0x813/0xb40 [ 165.990384][ T9592] ? __pfx_netlink_sendmsg+0x10/0x10 [ 165.990412][ T9592] ? aa_sock_msg_perm+0xf1/0x1b0 [ 165.990431][ T9592] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 165.990454][ T9592] ____sys_sendmsg+0x972/0x9f0 [ 165.990478][ T9592] ? __lock_acquire+0x6b5/0x2cf0 [ 165.990507][ T9592] ? __pfx_____sys_sendmsg+0x10/0x10 [ 165.990541][ T9592] ? import_iovec+0x73/0xa0 [ 165.990565][ T9592] ___sys_sendmsg+0x2a5/0x360 [ 165.990596][ T9592] ? __pfx____sys_sendmsg+0x10/0x10 [ 165.990626][ T9592] ? kstrtouint+0x6e/0xe0 [ 165.990676][ T9592] ? __fget_files+0x2a/0x420 [ 165.990692][ T9592] ? __fget_files+0x3a0/0x420 [ 165.990718][ T9592] __sys_sendmmsg+0x27c/0x4e0 [ 165.990741][ T9592] ? __pfx___sys_sendmmsg+0x10/0x10 [ 165.990755][ T9592] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 165.990798][ T9592] ? ksys_write+0x242/0x270 [ 165.990819][ T9592] ? __pfx_ksys_write+0x10/0x10 [ 165.990846][ T9592] __x64_sys_sendmmsg+0xa0/0xc0 [ 165.990865][ T9592] do_syscall_64+0x14d/0xf80 [ 165.990884][ T9592] ? trace_irq_disable+0x3b/0x150 [ 165.990898][ T9592] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.990914][ T9592] ? clear_bhb_loop+0x40/0x90 [ 165.990934][ T9592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.990951][ T9592] RIP: 0033:0x7facaa59c819 [ 165.990967][ T9592] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.990981][ T9592] RSP: 002b:00007facab53e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 165.990999][ T9592] RAX: ffffffffffffffda RBX: 00007facaa815fa0 RCX: 00007facaa59c819 [ 165.991011][ T9592] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000015 [ 165.991022][ T9592] RBP: 00007facab53e090 R08: 0000000000000000 R09: 0000000000000000 [ 165.991033][ T9592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.991043][ T9592] R13: 00007facaa816038 R14: 00007facaa815fa0 R15: 00007ffdfbeb4f68 [ 165.991081][ T9592] [ 165.997028][ T9592] debugfs: out of free dentries, can not create file 'netdev@ffff888071c76620' [ 166.292474][ T9592] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 166.315389][ T9612] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1013'. [ 166.536174][ T9612] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 166.821126][ T9631] netlink: 'syz.4.1019': attribute type 1 has an invalid length. [ 167.005369][ T9643] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 167.039387][ T9642] tap0: tun_chr_ioctl cmd 1074025676 [ 167.044735][ T9642] tap0: owner set to 0 [ 167.094165][ T9642] bond0: entered promiscuous mode [ 167.106148][ T9642] bond_slave_0: entered promiscuous mode [ 167.156392][ T9642] bond_slave_1: entered promiscuous mode [ 167.338178][ T9642] bond0: left promiscuous mode [ 167.355332][ T9642] bond_slave_0: left promiscuous mode [ 167.380995][ T9642] bond_slave_1: left promiscuous mode [ 167.418981][ T9646] netlink: 'syz.2.1025': attribute type 3 has an invalid length. [ 167.437404][ T9646] netlink: 'syz.2.1025': attribute type 3 has an invalid length. [ 167.630195][ T9660] FAULT_INJECTION: forcing a failure. [ 167.630195][ T9660] name failslab, interval 1, probability 0, space 0, times 0 [ 167.659273][ T9660] CPU: 1 UID: 0 PID: 9660 Comm: syz.1.1029 Not tainted syzkaller #0 PREEMPT(full) [ 167.659302][ T9660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 167.659312][ T9660] Call Trace: [ 167.659319][ T9660] [ 167.659327][ T9660] dump_stack_lvl+0xe8/0x150 [ 167.659357][ T9660] should_fail_ex+0x412/0x560 [ 167.659386][ T9660] ? alloc_inode+0x6a/0x1b0 [ 167.659411][ T9660] should_failslab+0xa8/0x100 [ 167.659436][ T9660] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 167.659455][ T9660] ? simple_start_creating+0xcc/0x110 [ 167.659479][ T9660] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 167.659499][ T9660] alloc_inode+0x6a/0x1b0 [ 167.659525][ T9660] new_inode+0x22/0x170 [ 167.659546][ T9660] __debugfs_create_file+0xb8/0x400 [ 167.659570][ T9660] debugfs_create_file_full+0x3f/0x60 [ 167.659593][ T9660] ref_tracker_dir_debugfs+0x197/0x360 [ 167.659614][ T9660] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 167.659660][ T9660] ? __kvmalloc_node_noprof+0x545/0x8a0 [ 167.659681][ T9660] ? alloc_netdev_mqs+0xa6/0x11b0 [ 167.659703][ T9660] ? __raw_spin_lock_init+0x45/0x100 [ 167.659725][ T9660] alloc_netdev_mqs+0x272/0x11b0 [ 167.659743][ T9660] ? __pfx_macvlan_setup+0x10/0x10 [ 167.659772][ T9660] rtnl_create_link+0x31f/0xd70 [ 167.659809][ T9660] rtnl_newlink_create+0x277/0xb70 [ 167.659834][ T9660] ? __pfx___nla_validate_parse+0x10/0x10 [ 167.659864][ T9660] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 167.659895][ T9660] ? __pfx___mutex_lock+0x10/0x10 [ 167.659926][ T9660] ? ns_capable+0x89/0xe0 [ 167.659950][ T9660] rtnl_newlink+0x166a/0x1bb0 [ 167.659985][ T9660] ? __pfx_rtnl_newlink+0x10/0x10 [ 167.660002][ T9660] ? do_syscall_64+0x14d/0xf80 [ 167.660020][ T9660] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.660066][ T9660] ? kasan_quarantine_put+0xbb/0x1f0 [ 167.660086][ T9660] ? lockdep_hardirqs_on+0x7a/0x110 [ 167.660108][ T9660] ? kmem_cache_free+0x187/0x630 [ 167.660125][ T9660] ? nlmon_xmit+0xb0/0x100 [ 167.660158][ T9660] ? __lock_acquire+0x6b5/0x2cf0 [ 167.660186][ T9660] ? __local_bh_enable_ip+0xd0/0x130 [ 167.660206][ T9660] ? lockdep_hardirqs_on+0x7a/0x110 [ 167.660224][ T9660] ? __dev_queue_xmit+0x2b6/0x3980 [ 167.660240][ T9660] ? __local_bh_enable_ip+0xd0/0x130 [ 167.660260][ T9660] ? __dev_queue_xmit+0x2b6/0x3980 [ 167.660300][ T9660] ? __pfx_rtnl_newlink+0x10/0x10 [ 167.660320][ T9660] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 167.660344][ T9660] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 167.660363][ T9660] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 167.660382][ T9660] ? ref_tracker_free+0x693/0x840 [ 167.660403][ T9660] ? __pfx_ref_tracker_free+0x10/0x10 [ 167.660428][ T9660] netlink_rcv_skb+0x232/0x4b0 [ 167.660454][ T9660] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 167.660478][ T9660] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 167.660511][ T9660] ? netlink_deliver_tap+0x2e/0x1b0 [ 167.660533][ T9660] ? netlink_deliver_tap+0x2e/0x1b0 [ 167.660539][ T9661] netlink: 'syz.2.1028': attribute type 9 has an invalid length. [ 167.660560][ T9660] netlink_unicast+0x75c/0x8e0 [ 167.660588][ T9660] netlink_sendmsg+0x813/0xb40 [ 167.660616][ T9660] ? __pfx_netlink_sendmsg+0x10/0x10 [ 167.660643][ T9660] ? aa_sock_msg_perm+0xf1/0x1b0 [ 167.660662][ T9660] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 167.660686][ T9660] ____sys_sendmsg+0x972/0x9f0 [ 167.660710][ T9660] ? __lock_acquire+0x6b5/0x2cf0 [ 167.660737][ T9660] ? __pfx_____sys_sendmsg+0x10/0x10 [ 167.660768][ T9660] ? import_iovec+0x73/0xa0 [ 167.660799][ T9660] ___sys_sendmsg+0x2a5/0x360 [ 167.660829][ T9660] ? __pfx____sys_sendmsg+0x10/0x10 [ 167.660858][ T9660] ? kstrtouint+0x6e/0xe0 [ 167.660909][ T9660] ? __fget_files+0x2a/0x420 [ 167.660924][ T9660] ? __fget_files+0x3a0/0x420 [ 167.660949][ T9660] __sys_sendmmsg+0x27c/0x4e0 [ 167.660971][ T9660] ? __pfx___sys_sendmmsg+0x10/0x10 [ 167.660986][ T9660] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 167.661031][ T9660] ? ksys_write+0x242/0x270 [ 167.661052][ T9660] ? __pfx_ksys_write+0x10/0x10 [ 167.661078][ T9660] __x64_sys_sendmmsg+0xa0/0xc0 [ 167.661096][ T9660] do_syscall_64+0x14d/0xf80 [ 167.661116][ T9660] ? trace_irq_disable+0x3b/0x150 [ 167.661131][ T9660] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.661149][ T9660] ? clear_bhb_loop+0x40/0x90 [ 167.661169][ T9660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.661186][ T9660] RIP: 0033:0x7f1c5b79c819 [ 167.661203][ T9660] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.661217][ T9660] RSP: 002b:00007f1c5c73c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 167.661236][ T9660] RAX: ffffffffffffffda RBX: 00007f1c5ba15fa0 RCX: 00007f1c5b79c819 [ 167.661248][ T9660] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000015 [ 167.661260][ T9660] RBP: 00007f1c5c73c090 R08: 0000000000000000 R09: 0000000000000000 [ 167.661270][ T9660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 167.661280][ T9660] R13: 00007f1c5ba16038 R14: 00007f1c5ba15fa0 R15: 00007ffef4d7cdd8 [ 167.661310][ T9660] [ 167.662523][ T9660] debugfs: out of free dentries, can not create file 'netdev@ffff88807ced0620' [ 168.169586][ T9660] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 168.433576][ T9679] tipc: Enabled bearer , priority 26 [ 168.559660][ T9684] netlink: 'syz.2.1035': attribute type 8 has an invalid length. [ 168.570403][ T9683] netlink: 'syz.4.1030': attribute type 1 has an invalid length. [ 168.649297][ T9683] 8021q: adding VLAN 0 to HW filter on device bond5 [ 168.682365][ T5487] veth0_vlan: left promiscuous mode [ 168.719825][ T5487] veth0_vlan: entered promiscuous mode [ 168.831830][ T9692] : renamed from veth0_to_bond (while UP) [ 168.862457][ T9702] __nla_validate_parse: 5 callbacks suppressed [ 168.862473][ T9702] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1041'. [ 168.914126][ T9705] syz_tun: left promiscuous mode [ 168.915975][ T9706] sctp: [Deprecated]: syz.4.1040 (pid 9706) Use of struct sctp_assoc_value in delayed_ack socket option. [ 168.915975][ T9706] Use struct sctp_sack_info instead [ 168.970596][ T9709] delete_channel: no stack [ 168.975610][ T9705] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 169.033690][ T9718] netlink: 1788 bytes leftover after parsing attributes in process `syz.1.1044'. [ 169.547557][ T9737] sctp: [Deprecated]: syz.1.1049 (pid 9737) Use of int in maxseg socket option. [ 169.547557][ T9737] Use struct sctp_assoc_value instead [ 169.903528][ T9760] syzkaller0: entered promiscuous mode [ 169.931361][ T9760] syzkaller0: entered allmulticast mode [ 169.973469][ T9764] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1053'. [ 169.991955][ T9764] veth1_to_hsr: entered promiscuous mode [ 170.004406][ T9764] macvtap1: entered promiscuous mode [ 170.037467][ T9764] macvtap1: entered allmulticast mode [ 170.048876][ T9764] veth1_to_hsr: entered allmulticast mode [ 170.087541][ T9766] bond5: entered allmulticast mode [ 170.093553][ T9766] 8021q: adding VLAN 0 to HW filter on device bond5 [ 170.258276][ T9785] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 170.817774][ T9826] FAULT_INJECTION: forcing a failure. [ 170.817774][ T9826] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 170.867905][ T9826] CPU: 0 UID: 0 PID: 9826 Comm: syz.3.1069 Not tainted syzkaller #0 PREEMPT(full) [ 170.867931][ T9826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 170.867941][ T9826] Call Trace: [ 170.867948][ T9826] [ 170.867955][ T9826] dump_stack_lvl+0xe8/0x150 [ 170.867984][ T9826] should_fail_ex+0x412/0x560 [ 170.868014][ T9826] _copy_from_user+0x2d/0xb0 [ 170.868036][ T9826] ___sys_sendmsg+0x1c6/0x360 [ 170.868067][ T9826] ? __pfx____sys_sendmsg+0x10/0x10 [ 170.868121][ T9826] ? __fget_files+0x2a/0x420 [ 170.868138][ T9826] ? __fget_files+0x3a0/0x420 [ 170.868162][ T9826] __x64_sys_sendmsg+0x1bd/0x2a0 [ 170.868190][ T9826] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 170.868223][ T9826] ? __pfx_ksys_write+0x10/0x10 [ 170.868252][ T9826] do_syscall_64+0x14d/0xf80 [ 170.868273][ T9826] ? trace_irq_disable+0x3b/0x150 [ 170.868290][ T9826] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.868307][ T9826] ? clear_bhb_loop+0x40/0x90 [ 170.868328][ T9826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.868345][ T9826] RIP: 0033:0x7f2a8bf9c819 [ 170.868363][ T9826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.868378][ T9826] RSP: 002b:00007f2a8cd73028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 170.868398][ T9826] RAX: ffffffffffffffda RBX: 00007f2a8c215fa0 RCX: 00007f2a8bf9c819 [ 170.868410][ T9826] RDX: 0000000000044000 RSI: 0000200000000540 RDI: 0000000000000003 [ 170.868421][ T9826] RBP: 00007f2a8cd73090 R08: 0000000000000000 R09: 0000000000000000 [ 170.868453][ T9826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.868463][ T9826] R13: 00007f2a8c216038 R14: 00007f2a8c215fa0 R15: 00007ffe2026e318 [ 170.868493][ T9826] [ 170.973160][ T9834] netlink: 'syz.4.1071': attribute type 10 has an invalid length. [ 171.135956][ T9834] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1071'. [ 171.209635][ T9839] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1071'. [ 171.276740][ T9843] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1072'. [ 171.323672][ T9848] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1073'. [ 171.389440][ T9848] netlink: 'syz.2.1073': attribute type 13 has an invalid length. [ 171.398288][ T9848] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1073'. [ 171.553361][ T9855] ieee802154 phy0 wpan0: encryption failed: -22 [ 171.660032][ T9863] netlink: 19 bytes leftover after parsing attributes in process `syz.2.1077'. [ 172.417126][ T9939] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1088'. [ 172.522095][ T9946] tipc: Enabling of bearer rejected, failed to enable media [ 173.096533][ T24] IPVS: starting estimator thread 0... [ 173.200175][ T9978] IPVS: using max 37 ests per chain, 88800 per kthread [ 173.434222][ T9992] syzkaller0: entered promiscuous mode [ 173.443595][ T9992] syzkaller0: entered allmulticast mode [ 173.777942][T10007] FAULT_INJECTION: forcing a failure. [ 173.777942][T10007] name failslab, interval 1, probability 0, space 0, times 0 [ 173.799792][T10007] CPU: 1 UID: 0 PID: 10007 Comm: syz.1.1102 Not tainted syzkaller #0 PREEMPT(full) [ 173.799817][T10007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 173.799829][T10007] Call Trace: [ 173.799836][T10007] [ 173.799844][T10007] dump_stack_lvl+0xe8/0x150 [ 173.799874][T10007] should_fail_ex+0x412/0x560 [ 173.799906][T10007] should_failslab+0xa8/0x100 [ 173.799931][T10007] __kvmalloc_node_noprof+0x178/0x8a0 [ 173.799954][T10007] ? alloc_netdev_mqs+0x8a6/0x11b0 [ 173.799977][T10007] ? __asan_memset+0x22/0x50 [ 173.799998][T10007] alloc_netdev_mqs+0x8a6/0x11b0 [ 173.800025][T10007] rtnl_create_link+0x31f/0xd70 [ 173.800050][T10007] rtnl_newlink_create+0x277/0xb70 [ 173.800075][T10007] ? __pfx___nla_validate_parse+0x10/0x10 [ 173.800105][T10007] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 173.800133][T10007] ? __pfx___mutex_lock+0x10/0x10 [ 173.800165][T10007] ? ns_capable+0x89/0xe0 [ 173.800191][T10007] rtnl_newlink+0x166a/0x1bb0 [ 173.800229][T10007] ? __pfx_rtnl_newlink+0x10/0x10 [ 173.800250][T10007] ? do_syscall_64+0x14d/0xf80 [ 173.800270][T10007] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.800321][T10007] ? kasan_quarantine_put+0xbb/0x1f0 [ 173.800340][T10007] ? lockdep_hardirqs_on+0x7a/0x110 [ 173.800363][T10007] ? kmem_cache_free+0x187/0x630 [ 173.800382][T10007] ? nlmon_xmit+0xb0/0x100 [ 173.800414][T10007] ? __lock_acquire+0x6b5/0x2cf0 [ 173.800441][T10007] ? __local_bh_enable_ip+0xd0/0x130 [ 173.800463][T10007] ? lockdep_hardirqs_on+0x7a/0x110 [ 173.800482][T10007] ? __dev_queue_xmit+0x2b6/0x3980 [ 173.800497][T10007] ? __local_bh_enable_ip+0xd0/0x130 [ 173.800517][T10007] ? __dev_queue_xmit+0x2b6/0x3980 [ 173.800558][T10007] ? __pfx_rtnl_newlink+0x10/0x10 [ 173.800585][T10007] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 173.800610][T10007] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 173.800631][T10007] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 173.800651][T10007] ? ref_tracker_free+0x693/0x840 [ 173.800671][T10007] ? __pfx_ref_tracker_free+0x10/0x10 [ 173.800700][T10007] netlink_rcv_skb+0x232/0x4b0 [ 173.800724][T10007] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 173.800747][T10007] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 173.800781][T10007] ? netlink_deliver_tap+0x2e/0x1b0 [ 173.800804][T10007] ? netlink_deliver_tap+0x2e/0x1b0 [ 173.800833][T10007] netlink_unicast+0x75c/0x8e0 [ 173.800866][T10007] netlink_sendmsg+0x813/0xb40 [ 173.800899][T10007] ? __pfx_netlink_sendmsg+0x10/0x10 [ 173.800925][T10007] ? aa_sock_msg_perm+0xf1/0x1b0 [ 173.800944][T10007] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 173.800968][T10007] ____sys_sendmsg+0x972/0x9f0 [ 173.800993][T10007] ? __lock_acquire+0x6b5/0x2cf0 [ 173.801023][T10007] ? __pfx_____sys_sendmsg+0x10/0x10 [ 173.801057][T10007] ? import_iovec+0x73/0xa0 [ 173.801082][T10007] ___sys_sendmsg+0x2a5/0x360 [ 173.801113][T10007] ? __pfx____sys_sendmsg+0x10/0x10 [ 173.801144][T10007] ? kstrtouint+0x6e/0xe0 [ 173.801195][T10007] ? __fget_files+0x2a/0x420 [ 173.801211][T10007] ? __fget_files+0x3a0/0x420 [ 173.801237][T10007] __sys_sendmmsg+0x27c/0x4e0 [ 173.801260][T10007] ? __pfx___sys_sendmmsg+0x10/0x10 [ 173.801276][T10007] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 173.801321][T10007] ? ksys_write+0x242/0x270 [ 173.801343][T10007] ? __pfx_ksys_write+0x10/0x10 [ 173.801367][T10007] __x64_sys_sendmmsg+0xa0/0xc0 [ 173.801386][T10007] do_syscall_64+0x14d/0xf80 [ 173.801405][T10007] ? trace_irq_disable+0x3b/0x150 [ 173.801421][T10007] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.801438][T10007] ? clear_bhb_loop+0x40/0x90 [ 173.801459][T10007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.801474][T10007] RIP: 0033:0x7f1c5b79c819 [ 173.801491][T10007] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.801504][T10007] RSP: 002b:00007f1c5c73c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 173.801522][T10007] RAX: ffffffffffffffda RBX: 00007f1c5ba15fa0 RCX: 00007f1c5b79c819 [ 173.801533][T10007] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000015 [ 173.801544][T10007] RBP: 00007f1c5c73c090 R08: 0000000000000000 R09: 0000000000000000 [ 173.801554][T10007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 173.801570][T10007] R13: 00007f1c5ba16038 R14: 00007f1c5ba15fa0 R15: 00007ffef4d7cdd8 [ 173.801597][T10007] [ 174.294039][T10015] netlink: 'syz.3.1101': attribute type 61 has an invalid length. [ 174.629814][T10024] netlink: 'syz.1.1105': attribute type 2 has an invalid length. [ 174.672074][T10024] __nla_validate_parse: 2 callbacks suppressed [ 174.672091][T10024] netlink: 1696 bytes leftover after parsing attributes in process `syz.1.1105'. [ 174.768311][T10024] bond6: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 174.808540][T10024] bond6 (unregistering): Released all slaves [ 175.091064][T10039] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1109'. [ 175.146460][T10043] xt_hashlimit: size too large, truncated to 1048576 [ 175.152704][T10039] bond4: entered promiscuous mode [ 175.240020][T10047] –: renamed from wg2 [ 175.263058][T10048] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1110'. [ 175.447697][T10046] syzkaller0: entered promiscuous mode [ 175.454073][T10046] syzkaller0: entered allmulticast mode [ 175.690508][T10056] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1113'. [ 175.708712][T10056] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1113'. [ 175.727660][T10066] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.773183][T10056] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1113'. [ 176.496931][T10074] tipc: Enabling of bearer rejected, failed to enable media [ 176.571495][T10066] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.706363][T10066] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.842499][T10066] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.144357][T10106] nbd: must specify at least one socket [ 177.199505][ T6724] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.223547][ T6724] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.269563][T10110] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1120'. [ 177.473037][ T6692] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.514843][ T6692] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.601075][T10126] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1124'. [ 178.307612][T10152] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1127'. [ 178.422676][T10156] sit0: entered promiscuous mode [ 178.452003][T10156] netlink: 'syz.2.1127': attribute type 1 has an invalid length. [ 178.502382][T10156] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1127'. [ 178.722967][T10168] xt_socket: unknown flags 0x50 [ 178.942176][T10175] syzkaller0: entered promiscuous mode [ 178.998648][T10175] syzkaller0: entered allmulticast mode [ 179.010168][ T9980] Set syz1 is full, maxelem 65536 reached [ 179.948236][T10227] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.984409][T10236] FAULT_INJECTION: forcing a failure. [ 179.984409][T10236] name failslab, interval 1, probability 0, space 0, times 0 [ 180.013385][T10236] CPU: 1 UID: 0 PID: 10236 Comm: syz.3.1138 Not tainted syzkaller #0 PREEMPT(full) [ 180.013410][T10236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 180.013420][T10236] Call Trace: [ 180.013427][T10236] [ 180.013434][T10236] dump_stack_lvl+0xe8/0x150 [ 180.013463][T10236] should_fail_ex+0x412/0x560 [ 180.013494][T10236] should_failslab+0xa8/0x100 [ 180.013519][T10236] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 180.013540][T10236] ? __alloc_skb+0x186/0x7d0 [ 180.013563][T10236] ? __alloc_skb+0x1d0/0x7d0 [ 180.013583][T10236] ? __local_bh_enable_ip+0xd0/0x130 [ 180.013609][T10236] __alloc_skb+0x1d0/0x7d0 [ 180.013631][T10236] ? netlink_ack_tlv_len+0x6c/0x210 [ 180.013657][T10236] netlink_ack+0x146/0xa50 [ 180.013691][T10236] netlink_rcv_skb+0x2b6/0x4b0 [ 180.013713][T10236] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 180.013735][T10236] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 180.013765][T10236] ? bpf_lsm_capable+0x9/0x20 [ 180.013787][T10236] ? security_capable+0x7e/0x2c0 [ 180.013817][T10236] nfnetlink_rcv+0x2c0/0x27b0 [ 180.013845][T10236] ? __local_bh_enable_ip+0xd0/0x130 [ 180.013865][T10236] ? lockdep_hardirqs_on+0x7a/0x110 [ 180.013884][T10236] ? __dev_queue_xmit+0x2b6/0x3980 [ 180.013902][T10236] ? __local_bh_enable_ip+0xd0/0x130 [ 180.013921][T10236] ? __dev_queue_xmit+0x2b6/0x3980 [ 180.013936][T10236] ? __dev_queue_xmit+0x1fe5/0x3980 [ 180.013952][T10236] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 180.013980][T10236] ? __dev_queue_xmit+0x2b6/0x3980 [ 180.014000][T10236] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 180.014024][T10236] ? __pfx___dev_queue_xmit+0x10/0x10 [ 180.014048][T10236] ? ref_tracker_free+0x693/0x840 [ 180.014068][T10236] ? __pfx_ref_tracker_free+0x10/0x10 [ 180.014107][T10236] ? skb_clone+0x246/0x3a0 [ 180.014127][T10236] ? __netlink_deliver_tap+0x807/0x850 [ 180.014149][T10236] ? netlink_deliver_tap+0x2e/0x1b0 [ 180.014176][T10236] ? netlink_deliver_tap+0x2e/0x1b0 [ 180.014198][T10236] ? netlink_deliver_tap+0x2e/0x1b0 [ 180.014225][T10236] netlink_unicast+0x75c/0x8e0 [ 180.014254][T10236] netlink_sendmsg+0x813/0xb40 [ 180.014285][T10236] ? __pfx_netlink_sendmsg+0x10/0x10 [ 180.014312][T10236] ? aa_sock_msg_perm+0xf1/0x1b0 [ 180.014331][T10236] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 180.014354][T10236] ____sys_sendmsg+0x972/0x9f0 [ 180.014388][T10236] ? __pfx_____sys_sendmsg+0x10/0x10 [ 180.014420][T10236] ? import_iovec+0x73/0xa0 [ 180.014444][T10236] ___sys_sendmsg+0x2a5/0x360 [ 180.014473][T10236] ? __pfx____sys_sendmsg+0x10/0x10 [ 180.014526][T10236] ? __fget_files+0x2a/0x420 [ 180.014543][T10236] ? __fget_files+0x3a0/0x420 [ 180.014568][T10236] __x64_sys_sendmsg+0x1bd/0x2a0 [ 180.014597][T10236] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 180.014631][T10236] ? __pfx_ksys_write+0x10/0x10 [ 180.014661][T10236] do_syscall_64+0x14d/0xf80 [ 180.014680][T10236] ? trace_irq_disable+0x3b/0x150 [ 180.014694][T10236] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.014712][T10236] ? clear_bhb_loop+0x40/0x90 [ 180.014732][T10236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.014748][T10236] RIP: 0033:0x7f2a8bf9c819 [ 180.014763][T10236] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.014778][T10236] RSP: 002b:00007f2a8cd73028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 180.014795][T10236] RAX: ffffffffffffffda RBX: 00007f2a8c215fa0 RCX: 00007f2a8bf9c819 [ 180.014807][T10236] RDX: 0000000000044000 RSI: 0000200000000540 RDI: 0000000000000003 [ 180.014819][T10236] RBP: 00007f2a8cd73090 R08: 0000000000000000 R09: 0000000000000000 [ 180.014830][T10236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.014839][T10236] R13: 00007f2a8c216038 R14: 00007f2a8c215fa0 R15: 00007ffe2026e318 [ 180.014865][T10236] [ 180.448729][T10238] __nla_validate_parse: 1 callbacks suppressed [ 180.456266][T10238] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1139'. [ 180.627406][T10227] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.644886][T10251] xt_TCPMSS: Only works on TCP SYN packets [ 180.850779][T10227] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.064995][T10227] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.117305][T10273] FAULT_INJECTION: forcing a failure. [ 181.117305][T10273] name failslab, interval 1, probability 0, space 0, times 0 [ 181.130653][T10273] CPU: 1 UID: 0 PID: 10273 Comm: syz.1.1146 Not tainted syzkaller #0 PREEMPT(full) [ 181.130678][T10273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 181.130688][T10273] Call Trace: [ 181.130695][T10273] [ 181.130702][T10273] dump_stack_lvl+0xe8/0x150 [ 181.130730][T10273] should_fail_ex+0x412/0x560 [ 181.130771][T10273] should_failslab+0xa8/0x100 [ 181.130796][T10273] __kmalloc_cache_noprof+0x88/0x660 [ 181.130816][T10273] ? __asan_memset+0x22/0x50 [ 181.130832][T10273] ? alloc_netdev_mqs+0xbf8/0x11b0 [ 181.130850][T10273] ? __kmalloc_cache_noprof+0x15b/0x660 [ 181.130873][T10273] alloc_netdev_mqs+0xbf8/0x11b0 [ 181.130900][T10273] rtnl_create_link+0x31f/0xd70 [ 181.130926][T10273] rtnl_newlink_create+0x277/0xb70 [ 181.130955][T10273] ? __mutex_lock+0x5ac/0x1300 [ 181.130982][T10273] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 181.131010][T10273] ? __pfx___mutex_lock+0x10/0x10 [ 181.131040][T10273] ? ns_capable+0x89/0xe0 [ 181.131067][T10273] rtnl_newlink+0x166a/0x1bb0 [ 181.131105][T10273] ? __pfx_rtnl_newlink+0x10/0x10 [ 181.131124][T10273] ? do_syscall_64+0x14d/0xf80 [ 181.131144][T10273] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.131198][T10273] ? kasan_quarantine_put+0xbb/0x1f0 [ 181.131218][T10273] ? lockdep_hardirqs_on+0x7a/0x110 [ 181.131243][T10273] ? kmem_cache_free+0x187/0x630 [ 181.131262][T10273] ? nlmon_xmit+0xb0/0x100 [ 181.131297][T10273] ? __lock_acquire+0x6b5/0x2cf0 [ 181.131324][T10273] ? __local_bh_enable_ip+0xd0/0x130 [ 181.131347][T10273] ? lockdep_hardirqs_on+0x7a/0x110 [ 181.131366][T10273] ? __dev_queue_xmit+0x2b6/0x3980 [ 181.131384][T10273] ? __local_bh_enable_ip+0xd0/0x130 [ 181.131404][T10273] ? __dev_queue_xmit+0x2b6/0x3980 [ 181.131446][T10273] ? __pfx_rtnl_newlink+0x10/0x10 [ 181.131468][T10273] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 181.131494][T10273] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 181.131516][T10273] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 181.131535][T10273] ? ref_tracker_free+0x693/0x840 [ 181.131555][T10273] ? __pfx_ref_tracker_free+0x10/0x10 [ 181.131581][T10273] netlink_rcv_skb+0x232/0x4b0 [ 181.131605][T10273] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 181.131628][T10273] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 181.131666][T10273] ? netlink_deliver_tap+0x2e/0x1b0 [ 181.131688][T10273] ? netlink_deliver_tap+0x2e/0x1b0 [ 181.131715][T10273] netlink_unicast+0x75c/0x8e0 [ 181.131752][T10273] netlink_sendmsg+0x813/0xb40 [ 181.131787][T10273] ? __pfx_netlink_sendmsg+0x10/0x10 [ 181.131812][T10273] ? aa_sock_msg_perm+0xf1/0x1b0 [ 181.131832][T10273] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 181.131857][T10273] ____sys_sendmsg+0x972/0x9f0 [ 181.131881][T10273] ? __lock_acquire+0x6b5/0x2cf0 [ 181.131908][T10273] ? __pfx_____sys_sendmsg+0x10/0x10 [ 181.131941][T10273] ? import_iovec+0x73/0xa0 [ 181.131964][T10273] ___sys_sendmsg+0x2a5/0x360 [ 181.131992][T10273] ? __pfx____sys_sendmsg+0x10/0x10 [ 181.132022][T10273] ? kstrtouint+0x6e/0xe0 [ 181.132069][T10273] ? __fget_files+0x2a/0x420 [ 181.132085][T10273] ? __fget_files+0x3a0/0x420 [ 181.132111][T10273] __sys_sendmmsg+0x27c/0x4e0 [ 181.132133][T10273] ? __pfx___sys_sendmmsg+0x10/0x10 [ 181.132145][T10273] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 181.132189][T10273] ? ksys_write+0x242/0x270 [ 181.132212][T10273] ? __pfx_ksys_write+0x10/0x10 [ 181.132236][T10273] __x64_sys_sendmmsg+0xa0/0xc0 [ 181.132256][T10273] do_syscall_64+0x14d/0xf80 [ 181.132274][T10273] ? trace_irq_disable+0x3b/0x150 [ 181.132289][T10273] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.132306][T10273] ? clear_bhb_loop+0x40/0x90 [ 181.132327][T10273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.132343][T10273] RIP: 0033:0x7f1c5b79c819 [ 181.132359][T10273] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.132375][T10273] RSP: 002b:00007f1c5c73c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 181.132393][T10273] RAX: ffffffffffffffda RBX: 00007f1c5ba15fa0 RCX: 00007f1c5b79c819 [ 181.132406][T10273] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000015 [ 181.132417][T10273] RBP: 00007f1c5c73c090 R08: 0000000000000000 R09: 0000000000000000 [ 181.132427][T10273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 181.132437][T10273] R13: 00007f1c5ba16038 R14: 00007f1c5ba15fa0 R15: 00007ffef4d7cdd8 [ 181.132464][T10273] [ 181.768278][T10286] netlink: 'syz.0.1148': attribute type 58 has an invalid length. [ 181.845816][ T6733] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.860498][T10286] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1148'. [ 181.869925][ T6733] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.932546][T10283] xt_l2tp: invalid flags combination: 8 [ 181.977400][ T129] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.170169][ T129] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.179137][T10305] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1151'. [ 182.590618][T10334] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1154'. [ 182.599849][T10334] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1154'. [ 182.613509][T10334] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1154'. [ 182.712678][T10334] netlink: 1036 bytes leftover after parsing attributes in process `syz.1.1154'. [ 182.734093][T10340] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1158'. [ 182.756523][T10334] gretap1: entered promiscuous mode [ 182.787052][T10334] batman_adv: batadv0: Adding interface: gretap1 [ 182.808395][T10334] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 182.857966][T10334] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 182.920474][T10344] FAULT_INJECTION: forcing a failure. [ 182.920474][T10344] name failslab, interval 1, probability 0, space 0, times 0 [ 182.944704][T10344] CPU: 0 UID: 0 PID: 10344 Comm: syz.4.1159 Not tainted syzkaller #0 PREEMPT(full) [ 182.944731][T10344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 182.944742][T10344] Call Trace: [ 182.944750][T10344] [ 182.944758][T10344] dump_stack_lvl+0xe8/0x150 [ 182.944797][T10344] should_fail_ex+0x412/0x560 [ 182.944828][T10344] should_failslab+0xa8/0x100 [ 182.944855][T10344] __kvmalloc_node_noprof+0x178/0x8a0 [ 182.944878][T10344] ? alloc_netdev_mqs+0xc89/0x11b0 [ 182.944899][T10344] ? alloc_netdev_mqs+0xbf8/0x11b0 [ 182.944924][T10344] alloc_netdev_mqs+0xc89/0x11b0 [ 182.944950][T10344] rtnl_create_link+0x31f/0xd70 [ 182.944977][T10344] rtnl_newlink_create+0x277/0xb70 [ 182.945007][T10344] ? __mutex_lock+0x5ac/0x1300 [ 182.945035][T10344] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 182.945064][T10344] ? __pfx___mutex_lock+0x10/0x10 [ 182.945096][T10344] ? ns_capable+0x89/0xe0 [ 182.945123][T10344] rtnl_newlink+0x166a/0x1bb0 [ 182.945161][T10344] ? __pfx_rtnl_newlink+0x10/0x10 [ 182.945182][T10344] ? do_syscall_64+0x14d/0xf80 [ 182.945202][T10344] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.945256][T10344] ? kasan_quarantine_put+0xbb/0x1f0 [ 182.945276][T10344] ? lockdep_hardirqs_on+0x7a/0x110 [ 182.945301][T10344] ? kmem_cache_free+0x187/0x630 [ 182.945321][T10344] ? nlmon_xmit+0xb0/0x100 [ 182.945358][T10344] ? __lock_acquire+0x6b5/0x2cf0 [ 182.945386][T10344] ? __local_bh_enable_ip+0xd0/0x130 [ 182.945409][T10344] ? lockdep_hardirqs_on+0x7a/0x110 [ 182.945428][T10344] ? __dev_queue_xmit+0x2b6/0x3980 [ 182.945445][T10344] ? __local_bh_enable_ip+0xd0/0x130 [ 182.945466][T10344] ? __dev_queue_xmit+0x2b6/0x3980 [ 182.945508][T10344] ? __pfx_rtnl_newlink+0x10/0x10 [ 182.945530][T10344] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 182.945557][T10344] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 182.945578][T10344] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 182.945598][T10344] ? ref_tracker_free+0x693/0x840 [ 182.945618][T10344] ? __pfx_ref_tracker_free+0x10/0x10 [ 182.945650][T10344] netlink_rcv_skb+0x232/0x4b0 [ 182.945677][T10344] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 182.945702][T10344] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 182.945739][T10344] ? netlink_deliver_tap+0x2e/0x1b0 [ 182.945763][T10344] ? netlink_deliver_tap+0x2e/0x1b0 [ 182.945799][T10344] netlink_unicast+0x75c/0x8e0 [ 182.945834][T10344] netlink_sendmsg+0x813/0xb40 [ 182.945867][T10344] ? __pfx_netlink_sendmsg+0x10/0x10 [ 182.945896][T10344] ? aa_sock_msg_perm+0xf1/0x1b0 [ 182.945916][T10344] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 182.945940][T10344] ____sys_sendmsg+0x972/0x9f0 [ 182.945966][T10344] ? __lock_acquire+0x6b5/0x2cf0 [ 182.945996][T10344] ? __pfx_____sys_sendmsg+0x10/0x10 [ 182.946032][T10344] ? import_iovec+0x73/0xa0 [ 182.946058][T10344] ___sys_sendmsg+0x2a5/0x360 [ 182.946089][T10344] ? __pfx____sys_sendmsg+0x10/0x10 [ 182.946127][T10344] ? kstrtouint+0x6e/0xe0 [ 182.946179][T10344] ? __fget_files+0x2a/0x420 [ 182.946195][T10344] ? __fget_files+0x3a0/0x420 [ 182.946223][T10344] __sys_sendmmsg+0x27c/0x4e0 [ 182.946247][T10344] ? __pfx___sys_sendmmsg+0x10/0x10 [ 182.946262][T10344] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 182.946310][T10344] ? ksys_write+0x242/0x270 [ 182.946333][T10344] ? __pfx_ksys_write+0x10/0x10 [ 182.946361][T10344] __x64_sys_sendmmsg+0xa0/0xc0 [ 182.946381][T10344] do_syscall_64+0x14d/0xf80 [ 182.946401][T10344] ? trace_irq_disable+0x3b/0x150 [ 182.946416][T10344] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.946435][T10344] ? clear_bhb_loop+0x40/0x90 [ 182.946457][T10344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.946474][T10344] RIP: 0033:0x7facaa59c819 [ 182.946491][T10344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.946506][T10344] RSP: 002b:00007facab53e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 182.946526][T10344] RAX: ffffffffffffffda RBX: 00007facaa815fa0 RCX: 00007facaa59c819 [ 182.946539][T10344] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000015 [ 182.946551][T10344] RBP: 00007facab53e090 R08: 0000000000000000 R09: 0000000000000000 [ 182.946562][T10344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 182.946573][T10344] R13: 00007facaa816038 R14: 00007facaa815fa0 R15: 00007ffdfbeb4f68 [ 182.946603][T10344] [ 183.506011][T10352] netlink: 'syz.0.1162': attribute type 1 has an invalid length. [ 183.582438][T10352] 8021q: adding VLAN 0 to HW filter on device bond8 [ 183.631005][T10354] netlink: 'syz.3.1160': attribute type 5 has an invalid length. [ 183.809451][T10365] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 60142 - 0 [ 183.836005][T10365] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 183.881645][T10366] 0ªî{X¹¦: left allmulticast mode [ 183.906809][T10366] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1165'. [ 183.946242][T10366] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 183.997773][T10367] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1164'. [ 184.009646][T10365] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 60142 - 0 [ 184.020212][T10365] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 184.183101][T10365] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 60142 - 0 [ 184.193348][T10365] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 184.280973][T10365] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 60142 - 0 [ 184.293178][T10365] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 184.498379][ T6732] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 60142 - 0 [ 184.508267][ T6732] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 184.554984][ T6732] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 60142 - 0 [ 184.568986][ T6732] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 184.651885][ T6732] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 60142 - 0 [ 184.662514][ T6732] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 184.718371][ T6726] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 60142 - 0 [ 184.736232][ T6726] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 184.758419][T10385] netlink: set zone limit has 8 unknown bytes [ 184.866222][T10387] FAULT_INJECTION: forcing a failure. [ 184.866222][T10387] name failslab, interval 1, probability 0, space 0, times 0 [ 184.899975][T10387] CPU: 0 UID: 0 PID: 10387 Comm: syz.2.1171 Not tainted syzkaller #0 PREEMPT(full) [ 184.900001][T10387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 184.900012][T10387] Call Trace: [ 184.900019][T10387] [ 184.900027][T10387] dump_stack_lvl+0xe8/0x150 [ 184.900057][T10387] should_fail_ex+0x412/0x560 [ 184.900088][T10387] should_failslab+0xa8/0x100 [ 184.900114][T10387] __kmalloc_cache_noprof+0x88/0x660 [ 184.900135][T10387] ? macvlan_common_newlink+0x5e1/0x19e0 [ 184.900162][T10387] macvlan_common_newlink+0x5e1/0x19e0 [ 184.900183][T10387] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 184.900209][T10387] ? validate_linkmsg+0x765/0x950 [ 184.900231][T10387] ? __pfx_macvlan_common_newlink+0x10/0x10 [ 184.900257][T10387] ? __pfx_macvlan_newlink+0x10/0x10 [ 184.900282][T10387] rtnl_newlink_create+0x329/0xb70 [ 184.900306][T10387] ? __pfx___nla_validate_parse+0x10/0x10 [ 184.900336][T10387] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 184.900365][T10387] ? __pfx___mutex_lock+0x10/0x10 [ 184.900398][T10387] ? ns_capable+0x89/0xe0 [ 184.900423][T10387] rtnl_newlink+0x166a/0x1bb0 [ 184.900471][T10387] ? __pfx_rtnl_newlink+0x10/0x10 [ 184.900492][T10387] ? do_syscall_64+0x14d/0xf80 [ 184.900510][T10387] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.900562][T10387] ? kasan_quarantine_put+0xbb/0x1f0 [ 184.900581][T10387] ? lockdep_hardirqs_on+0x7a/0x110 [ 184.900605][T10387] ? kmem_cache_free+0x187/0x630 [ 184.900623][T10387] ? nlmon_xmit+0xb0/0x100 [ 184.900657][T10387] ? __lock_acquire+0x6b5/0x2cf0 [ 184.900685][T10387] ? __local_bh_enable_ip+0xd0/0x130 [ 184.900706][T10387] ? lockdep_hardirqs_on+0x7a/0x110 [ 184.900724][T10387] ? __dev_queue_xmit+0x2b6/0x3980 [ 184.900740][T10387] ? __local_bh_enable_ip+0xd0/0x130 [ 184.900760][T10387] ? __dev_queue_xmit+0x2b6/0x3980 [ 184.900801][T10387] ? __pfx_rtnl_newlink+0x10/0x10 [ 184.900823][T10387] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 184.900848][T10387] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 184.900869][T10387] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 184.900889][T10387] ? ref_tracker_free+0x693/0x840 [ 184.900910][T10387] ? __pfx_ref_tracker_free+0x10/0x10 [ 184.900939][T10387] netlink_rcv_skb+0x232/0x4b0 [ 184.900965][T10387] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 184.900989][T10387] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 184.901024][T10387] ? netlink_deliver_tap+0x2e/0x1b0 [ 184.901047][T10387] ? netlink_deliver_tap+0x2e/0x1b0 [ 184.901075][T10387] netlink_unicast+0x75c/0x8e0 [ 184.901107][T10387] netlink_sendmsg+0x813/0xb40 [ 184.901140][T10387] ? __pfx_netlink_sendmsg+0x10/0x10 [ 184.901168][T10387] ? aa_sock_msg_perm+0xf1/0x1b0 [ 184.901188][T10387] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 184.901212][T10387] ____sys_sendmsg+0x972/0x9f0 [ 184.901236][T10387] ? __lock_acquire+0x6b5/0x2cf0 [ 184.901265][T10387] ? __pfx_____sys_sendmsg+0x10/0x10 [ 184.901300][T10387] ? import_iovec+0x73/0xa0 [ 184.901325][T10387] ___sys_sendmsg+0x2a5/0x360 [ 184.901356][T10387] ? __pfx____sys_sendmsg+0x10/0x10 [ 184.901387][T10387] ? kstrtouint+0x6e/0xe0 [ 184.901438][T10387] ? __fget_files+0x2a/0x420 [ 184.901453][T10387] ? __fget_files+0x3a0/0x420 [ 184.901487][T10387] __sys_sendmmsg+0x27c/0x4e0 [ 184.901510][T10387] ? __pfx___sys_sendmmsg+0x10/0x10 [ 184.901525][T10387] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 184.901573][T10387] ? ksys_write+0x242/0x270 [ 184.901595][T10387] ? __pfx_ksys_write+0x10/0x10 [ 184.901626][T10387] __x64_sys_sendmmsg+0xa0/0xc0 [ 184.901645][T10387] do_syscall_64+0x14d/0xf80 [ 184.901665][T10387] ? trace_irq_disable+0x3b/0x150 [ 184.901680][T10387] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.901698][T10387] ? clear_bhb_loop+0x40/0x90 [ 184.901719][T10387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.901736][T10387] RIP: 0033:0x7f75fb39c819 [ 184.901754][T10387] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.901769][T10387] RSP: 002b:00007f75fc239028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 184.901789][T10387] RAX: ffffffffffffffda RBX: 00007f75fb615fa0 RCX: 00007f75fb39c819 [ 184.901801][T10387] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000015 [ 184.901813][T10387] RBP: 00007f75fc239090 R08: 0000000000000000 R09: 0000000000000000 [ 184.901824][T10387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 184.901835][T10387] R13: 00007f75fb616038 R14: 00007f75fb615fa0 R15: 00007ffc07fa6458 [ 184.901864][T10387] [ 185.393942][T10389] syzkaller1: entered promiscuous mode [ 185.419638][T10389] syzkaller1: entered allmulticast mode [ 185.465827][T10389] netlink: 'syz.4.1172': attribute type 2 has an invalid length. [ 185.536604][T10400] netlink: 'syz.3.1173': attribute type 1 has an invalid length. [ 185.651564][ T5821] Bluetooth: hci4: link tx timeout [ 185.658059][ T5821] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 185.891690][T10411] syzkaller0: entered promiscuous mode [ 185.907474][T10411] syzkaller0: entered allmulticast mode [ 185.971764][T10414] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1180'. [ 186.036754][T10417] netlink: 'syz.4.1182': attribute type 1 has an invalid length. [ 186.101897][T10417] 8021q: adding VLAN 0 to HW filter on device bond6 [ 186.214957][T10431] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.356835][T10431] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.390140][T10440] IPv6: addrconf: prefix option has invalid lifetime [ 186.477896][T10431] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.563064][T10447] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1186'. [ 186.586668][T10431] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.632057][T10447] bridge0: port 3(batadv0) entered blocking state [ 186.639159][T10447] bridge0: port 3(batadv0) entered disabled state [ 186.671075][T10447] batadv0: entered allmulticast mode [ 186.690007][T10447] batadv0: entered promiscuous mode [ 186.792853][ T6733] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.813133][ T6733] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.821723][T10452] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1187'. [ 186.857216][ T6726] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.936626][ T6697] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.131234][ T6733] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 187.141360][ T6733] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 187.151561][T10471] netlink: 'syz.1.1190': attribute type 1 has an invalid length. [ 187.169215][T10471] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 187.190570][T10476] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.1193'. [ 187.212560][T10480] netlink: 'syz.0.1194': attribute type 1 has an invalid length. [ 187.327539][T10480] 8021q: adding VLAN 0 to HW filter on device bond9 [ 187.404559][T10488] FAULT_INJECTION: forcing a failure. [ 187.404559][T10488] name failslab, interval 1, probability 0, space 0, times 0 [ 187.419594][T10488] CPU: 0 UID: 0 PID: 10488 Comm: syz.3.1197 Not tainted syzkaller #0 PREEMPT(full) [ 187.419620][T10488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 187.419631][T10488] Call Trace: [ 187.419639][T10488] [ 187.419646][T10488] dump_stack_lvl+0xe8/0x150 [ 187.419675][T10488] should_fail_ex+0x412/0x560 [ 187.419707][T10488] should_failslab+0xa8/0x100 [ 187.419732][T10488] __kmalloc_noprof+0xe8/0x760 [ 187.419752][T10488] ? dev_prep_valid_name+0x1bc/0x630 [ 187.419779][T10488] dev_prep_valid_name+0x1bc/0x630 [ 187.419799][T10488] ? ____sys_sendmsg+0x972/0x9f0 [ 187.419823][T10488] ? __sys_sendmmsg+0x27c/0x4e0 [ 187.419843][T10488] ? __pfx_dev_prep_valid_name+0x10/0x10 [ 187.419872][T10488] ? __raw_spin_lock_init+0x45/0x100 [ 187.419894][T10488] register_netdevice+0x539/0x1cf0 [ 187.419917][T10488] ? do_raw_spin_lock+0x12b/0x2f0 [ 187.419945][T10488] ? pcpu_alloc+0x10/0x360 [ 187.419968][T10488] ? dev_addr_check+0x20/0x230 [ 187.419993][T10488] ? __pfx_register_netdevice+0x10/0x10 [ 187.420014][T10488] ? __asan_memset+0x22/0x50 [ 187.420031][T10488] ? dev_addr_mod+0x354/0x520 [ 187.420064][T10488] macvlan_common_newlink+0x127c/0x19e0 [ 187.420085][T10488] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 187.420116][T10488] ? __pfx_macvlan_common_newlink+0x10/0x10 [ 187.420142][T10488] ? __pfx_macvlan_newlink+0x10/0x10 [ 187.420170][T10488] rtnl_newlink_create+0x329/0xb70 [ 187.420202][T10488] ? __pfx___nla_validate_parse+0x10/0x10 [ 187.420232][T10488] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 187.420260][T10488] ? __pfx___mutex_lock+0x10/0x10 [ 187.420292][T10488] ? ns_capable+0x89/0xe0 [ 187.420317][T10488] rtnl_newlink+0x166a/0x1bb0 [ 187.420354][T10488] ? __pfx_rtnl_newlink+0x10/0x10 [ 187.420374][T10488] ? do_syscall_64+0x14d/0xf80 [ 187.420393][T10488] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.420445][T10488] ? kasan_quarantine_put+0xbb/0x1f0 [ 187.420464][T10488] ? lockdep_hardirqs_on+0x7a/0x110 [ 187.420489][T10488] ? kmem_cache_free+0x187/0x630 [ 187.420508][T10488] ? nlmon_xmit+0xb0/0x100 [ 187.420543][T10488] ? __lock_acquire+0x6b5/0x2cf0 [ 187.420570][T10488] ? __local_bh_enable_ip+0xd0/0x130 [ 187.420593][T10488] ? lockdep_hardirqs_on+0x7a/0x110 [ 187.420611][T10488] ? __dev_queue_xmit+0x2b6/0x3980 [ 187.420628][T10488] ? __local_bh_enable_ip+0xd0/0x130 [ 187.420648][T10488] ? __dev_queue_xmit+0x2b6/0x3980 [ 187.420690][T10488] ? __pfx_rtnl_newlink+0x10/0x10 [ 187.420712][T10488] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 187.420738][T10488] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 187.420759][T10488] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 187.420779][T10488] ? ref_tracker_free+0x693/0x840 [ 187.420800][T10488] ? __pfx_ref_tracker_free+0x10/0x10 [ 187.420828][T10488] netlink_rcv_skb+0x232/0x4b0 [ 187.420854][T10488] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 187.420878][T10488] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 187.420914][T10488] ? netlink_deliver_tap+0x2e/0x1b0 [ 187.420937][T10488] ? netlink_deliver_tap+0x2e/0x1b0 [ 187.420966][T10488] netlink_unicast+0x75c/0x8e0 [ 187.420999][T10488] netlink_sendmsg+0x813/0xb40 [ 187.421037][T10488] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.421063][T10488] ? aa_sock_msg_perm+0xf1/0x1b0 [ 187.421083][T10488] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 187.421106][T10488] ____sys_sendmsg+0x972/0x9f0 [ 187.421129][T10488] ? __lock_acquire+0x6b5/0x2cf0 [ 187.421158][T10488] ? __pfx_____sys_sendmsg+0x10/0x10 [ 187.421197][T10488] ? import_iovec+0x73/0xa0 [ 187.421222][T10488] ___sys_sendmsg+0x2a5/0x360 [ 187.421252][T10488] ? __pfx____sys_sendmsg+0x10/0x10 [ 187.421282][T10488] ? kstrtouint+0x6e/0xe0 [ 187.421333][T10488] ? __fget_files+0x2a/0x420 [ 187.421349][T10488] ? __fget_files+0x3a0/0x420 [ 187.421375][T10488] __sys_sendmmsg+0x27c/0x4e0 [ 187.421398][T10488] ? __pfx___sys_sendmmsg+0x10/0x10 [ 187.421413][T10488] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 187.421458][T10488] ? ksys_write+0x242/0x270 [ 187.421482][T10488] ? __pfx_ksys_write+0x10/0x10 [ 187.421507][T10488] __x64_sys_sendmmsg+0xa0/0xc0 [ 187.421527][T10488] do_syscall_64+0x14d/0xf80 [ 187.421546][T10488] ? trace_irq_disable+0x3b/0x150 [ 187.421561][T10488] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.421578][T10488] ? clear_bhb_loop+0x40/0x90 [ 187.421600][T10488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.421617][T10488] RIP: 0033:0x7f2a8bf9c819 [ 187.421634][T10488] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.421649][T10488] RSP: 002b:00007f2a8cd73028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 187.421667][T10488] RAX: ffffffffffffffda RBX: 00007f2a8c215fa0 RCX: 00007f2a8bf9c819 [ 187.421680][T10488] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000015 [ 187.421692][T10488] RBP: 00007f2a8cd73090 R08: 0000000000000000 R09: 0000000000000000 [ 187.421702][T10488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 187.421713][T10488] R13: 00007f2a8c216038 R14: 00007f2a8c215fa0 R15: 00007ffe2026e318 [ 187.421742][T10488] [ 187.919917][ T5825] Bluetooth: hci4: command 0x0405 tx timeout [ 188.032879][T10489] netlink: 'syz.4.1196': attribute type 39 has an invalid length. [ 188.521689][T10526] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1203'. [ 188.533464][T10526] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1203'. [ 188.542943][T10526] netlink: 'syz.1.1203': attribute type 5 has an invalid length. [ 188.551290][T10526] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1203'. [ 188.888343][T10535] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1206'. [ 188.902986][T10535] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1206'. [ 189.937108][ T29] audit: type=1804 audit(1776262379.033:7): pid=10545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1208" name="/newroot/207/cgroup.controllers" dev="tmpfs" ino=1074 res=1 errno=0 [ 189.961024][ T29] audit: type=1800 audit(1776262379.033:8): pid=10545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1208" name="cgroup.controllers" dev="tmpfs" ino=1074 res=0 errno=0 [ 190.960078][T10495] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 191.212159][T10566] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1215'. [ 191.220637][T10567] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 191.728162][T10580] syzkaller1: entered promiscuous mode [ 191.754402][T10580] syzkaller1: entered allmulticast mode [ 191.898137][T10598] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1226'. [ 192.010519][T10604] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1229'. [ 192.028595][T10601] syzkaller0: entered promiscuous mode [ 192.034607][T10601] syzkaller0: entered allmulticast mode [ 192.090339][T10601] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1228'. [ 192.159000][T10616] netlink: 'syz.2.1233': attribute type 1 has an invalid length. [ 192.166959][T10616] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1233'. [ 192.176106][T10616] netlink: 658 bytes leftover after parsing attributes in process `syz.2.1233'. [ 192.188592][T10616] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1233'. [ 192.281100][T10617] ipvlan1: entered promiscuous mode [ 192.287194][T10617] bridge0: port 3(ipvlan1) entered blocking state [ 192.307965][T10620] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1234'. [ 192.330179][T10617] bridge0: port 3(ipvlan1) entered disabled state [ 192.339648][T10617] ipvlan1: entered allmulticast mode [ 192.344168][T10620] ieee802154 phy0 wpan0: encryption failed: -22 [ 192.356725][T10617] bridge0: entered allmulticast mode [ 192.366069][T10625] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1236'. [ 192.366631][T10617] ipvlan1: left allmulticast mode [ 192.381688][T10617] bridge0: left allmulticast mode [ 192.404319][T10620] syz_tun: entered promiscuous mode [ 192.574435][T10643] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1240'. [ 192.588720][T10643] nbd: must specify a device to reconfigure [ 192.832261][T10653] netlink: 'syz.4.1242': attribute type 1 has an invalid length. [ 192.883307][T10653] 8021q: adding VLAN 0 to HW filter on device bond7 [ 192.990186][T10666] netlink: 'syz.2.1246': attribute type 1 has an invalid length. [ 192.998701][T10667] netlink: 'syz.2.1246': attribute type 1 has an invalid length. [ 193.219279][T10675] openvswitch: netlink: Flow key attr not present in new flow. [ 193.378964][T10696] nbd: must specify a device to reconfigure [ 194.120534][T10731] gre1: entered promiscuous mode [ 194.176629][T10734] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.243931][T10738] nbd: must specify a device to reconfigure [ 194.310792][T10734] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.367118][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.404251][T10734] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.484830][T10734] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.693757][T10688] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.730523][T10688] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.774241][T10688] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.804167][T10688] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.005426][T10781] nbd: must specify a device to reconfigure [ 195.200720][T10792] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 195.251276][T10791] gretap1: entered promiscuous mode [ 195.257303][T10791] batman_adv: batadv0: Adding interface: gretap1 [ 195.278857][T10791] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 195.307341][T10791] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 195.582266][T10807] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 196.047032][T10816] nbd: must specify a device to reconfigure [ 196.063426][T10814] macvlan0: entered promiscuous mode [ 196.220485][T10822] ieee802154 phy0 wpan0: encryption failed: -22 [ 196.247660][T10821] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 60142 - 0 [ 196.257634][T10821] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 196.361467][T10825] __nla_validate_parse: 20 callbacks suppressed [ 196.361495][T10825] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1289'. [ 196.395071][T10821] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 60142 - 0 [ 196.443715][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 196.454516][ T5835] Bluetooth: hci2: command 0x0406 tx timeout [ 196.456200][ T5825] Bluetooth: hci3: command 0x0406 tx timeout [ 196.463933][T10821] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 196.468487][T10825] nbd: must specify a device to reconfigure [ 196.625894][T10821] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 60142 - 0 [ 196.652926][T10821] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 196.712175][T10840] syzkaller0: entered promiscuous mode [ 196.723012][T10840] syzkaller0: entered allmulticast mode [ 196.747269][T10821] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 60142 - 0 [ 196.761457][T10821] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 196.830562][T10847] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1296'. [ 196.871593][T10685] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 60142 - 0 [ 196.880674][T10685] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 196.912664][ T6721] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 60142 - 0 [ 196.931499][ T6721] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 196.960947][ T6721] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 60142 - 0 [ 196.970432][ T6721] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 197.001476][T10685] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 60142 - 0 [ 197.007026][T10849] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1297'. [ 197.013141][T10685] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 197.048946][T10849] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1297'. [ 197.143619][T10851] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1298'. [ 197.226099][T10855] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1298'. [ 197.397242][T10859] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1301'. [ 197.432458][T10859] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1301'. [ 197.640131][T10862] Bluetooth: MGMT ver 1.23 [ 198.216388][T10888] openvswitch: netlink: Invalid VLAN frame [ 198.321829][T10892] netlink: 'syz.4.1308': attribute type 1 has an invalid length. [ 198.353024][T10892] bond8: entered promiscuous mode [ 198.358546][T10892] 8021q: adding VLAN 0 to HW filter on device bond8 [ 198.388837][T10892] netlink: 1084 bytes leftover after parsing attributes in process `syz.4.1308'. [ 198.421999][T10892] bond8: (slave bridge0): making interface the new active one [ 198.430252][T10892] bridge0: entered promiscuous mode [ 198.437187][T10892] bond8: (slave bridge0): Enslaving as an active interface with an up link [ 198.615948][T10898] syzkaller0: entered promiscuous mode [ 198.623632][T10898] syzkaller0: entered allmulticast mode [ 198.865701][T10907] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1312'. [ 200.594069][T10867] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 200.836886][T10933] bond9: option ad_user_port_key: invalid value (65535) [ 200.844298][T10933] bond9: option ad_user_port_key: allowed values 0 - 1023 [ 200.855757][T10933] bond9 (unregistering): Released all slaves [ 200.932298][T10941] syzkaller0: entered promiscuous mode [ 200.939188][T10941] syzkaller0: entered allmulticast mode [ 201.617379][T10974] __nla_validate_parse: 6 callbacks suppressed [ 201.617399][T10974] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1331'. [ 201.646617][T10981] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.732702][T10981] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.780829][T10986] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1334'. [ 201.805780][T10986] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1334'. [ 201.842139][T10981] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.947689][T10981] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.022876][ T6734] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.145482][ T6734] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.279492][ T6734] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.311832][ T6734] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.402204][T11030] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1346'. [ 203.420525][T11030] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1346'. [ 203.821936][T11034] openvswitch: netlink: Key 22 has unexpected len 2 expected 4 [ 203.849030][T11034] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1348'. [ 204.061124][T11040] netlink: 192 bytes leftover after parsing attributes in process `syz.1.1349'. [ 204.436881][T11046] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.497105][T11046] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.710662][T11046] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.921581][T11046] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.020160][T11078] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1359'. [ 205.148412][T11080] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1359'. [ 205.184910][T11078] bond10: entered promiscuous mode [ 205.191124][T11078] 8021q: adding VLAN 0 to HW filter on device bond10 [ 205.339864][T11078] 8021q: adding VLAN 0 to HW filter on device bond10 [ 205.354484][T11087] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1360'. [ 205.367676][T11078] bond10: (slave vcan1): The slave device specified does not support setting the MAC address [ 205.379953][T11078] bond10: (slave vcan1): Error -95 calling set_mac_address [ 205.476631][ T6715] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.485516][T11090] syzkaller1: entered promiscuous mode [ 205.491867][T11090] syzkaller1: entered allmulticast mode [ 205.508549][ T6734] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.561075][T10687] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.693578][T11099] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 205.705180][T11099] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 205.778232][ T6734] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.806405][T11103] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.857568][T11104] netlink: 'syz.0.1367': attribute type 5 has an invalid length. [ 205.901973][T11104] geneve4: entered promiscuous mode [ 205.925449][T11104] geneve4: entered allmulticast mode [ 205.933993][ T6734] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 51650 - 0 [ 205.959478][ T6734] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 51650 - 0 [ 205.995331][T11103] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.639616][T11155] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.703682][T11155] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.766639][T11155] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.841080][T11155] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.032511][T11180] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.094793][T11180] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.106030][T11180] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.195178][T10688] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 60142 - 0 [ 207.206041][T10688] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 207.216759][T10688] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 60142 - 0 [ 207.225444][T10688] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 207.235891][T10688] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 60142 - 0 [ 207.244553][T10688] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 207.294696][T10688] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 60142 - 0 [ 207.303591][T10688] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 207.320155][T10688] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.328710][T10688] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.339815][T10688] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.349042][T10688] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.362995][T11191] __nla_validate_parse: 3 callbacks suppressed [ 207.363015][T11191] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1390'. [ 207.381423][T11191] syzkaller0: entered promiscuous mode [ 207.386937][T11191] syzkaller0: entered allmulticast mode [ 207.487996][T11194] netlink: 'syz.1.1391': attribute type 1 has an invalid length. [ 207.619612][T11199] netlink: 'syz.2.1392': attribute type 1 has an invalid length. [ 208.913493][T11194] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 208.919369][T11202] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 208.941283][T11103] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.994725][T11103] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 51650 - 0 [ 209.125780][T11103] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.151228][T11103] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 51650 - 0 [ 209.357086][ T6734] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 51650 - 0 [ 209.375809][ T6734] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 209.395037][T11232] netlink: 'syz.3.1403': attribute type 1 has an invalid length. [ 209.441107][T11232] bond5: entered promiscuous mode [ 209.446877][T11232] 8021q: adding VLAN 0 to HW filter on device bond5 [ 209.454548][ T6734] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 51650 - 0 [ 209.463734][ T6734] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 209.479397][T10688] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 51650 - 0 [ 209.487822][T10688] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 209.551968][T11232] 8021q: adding VLAN 0 to HW filter on device bond5 [ 209.574349][T11232] bond5: (slave wireguard1): The slave device specified does not support setting the MAC address [ 209.590561][T11232] bond5: (slave wireguard1): Setting fail_over_mac to active for active-backup mode [ 209.616773][T11232] bond5: (slave wireguard1): making interface the new active one [ 209.640087][T11232] wireguard1: entered promiscuous mode [ 209.650884][T11232] bond5: (slave wireguard1): Enslaving as an active interface with an up link [ 209.661090][T10688] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 51650 - 0 [ 209.697095][T10688] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 209.751275][T11229] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.820248][T11251] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1408'. [ 209.829955][T11251] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1408'. [ 209.842754][T11251] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1408'. [ 209.873742][T11229] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.984398][T11229] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.011798][T11242] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1404'. [ 210.031651][T11264] netlink: 'syz.0.1411': attribute type 4 has an invalid length. [ 210.061102][T11229] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.193045][ T6715] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.290244][ T6715] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.298516][ T6715] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.397411][ T6715] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.565622][T11278] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1415'. [ 210.626103][T11284] SET target dimension over the limit! [ 210.923472][T11287] tipc: Started in network mode [ 210.998473][T11287] tipc: Node identity 029528bbdec9, cluster identity 6 [ 211.020496][T11287] tipc: Enabled bearer , priority 0 [ 211.180195][T11298] syzkaller0: entered promiscuous mode [ 211.185930][T11298] syzkaller0: entered allmulticast mode [ 211.373567][T11287] tipc: Resetting bearer [ 211.429175][T11322] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1429'. [ 211.443230][T11324] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1428'. [ 211.487138][T11327] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1429'. [ 211.608102][T11329] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1431'. [ 212.023108][T11363] netlink: 'syz.3.1439': attribute type 4 has an invalid length. [ 212.039339][T11277] tipc: Resetting bearer [ 212.148662][T11277] tipc: Disabling bearer [ 212.474284][T11389] __nla_validate_parse: 4 callbacks suppressed [ 212.474303][T11389] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1450'. [ 212.474444][T11391] netlink: 124 bytes leftover after parsing attributes in process `syz.3.1450'. [ 212.727147][T11407] FAULT_INJECTION: forcing a failure. [ 212.727147][T11407] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 212.783638][T11407] CPU: 0 UID: 0 PID: 11407 Comm: syz.3.1454 Not tainted syzkaller #0 PREEMPT(full) [ 212.783664][T11407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 212.783676][T11407] Call Trace: [ 212.783683][T11407] [ 212.783691][T11407] dump_stack_lvl+0xe8/0x150 [ 212.783722][T11407] should_fail_ex+0x412/0x560 [ 212.783753][T11407] prepare_alloc_pages+0x22a/0x650 [ 212.783782][T11407] __alloc_frozen_pages_noprof+0x12f/0x380 [ 212.783809][T11407] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 212.783836][T11407] ? __pfx_policy_nodemask+0x10/0x10 [ 212.783867][T11407] alloc_pages_mpol+0x232/0x4a0 [ 212.783895][T11407] ___kmalloc_large_node+0x4e/0x150 [ 212.783916][T11407] __kmalloc_large_node_noprof+0x18/0x90 [ 212.783937][T11407] __kmalloc_noprof+0x3e8/0x760 [ 212.783956][T11407] ? iovec_from_user+0x87/0x250 [ 212.783981][T11407] iovec_from_user+0x87/0x250 [ 212.784006][T11407] __import_iovec+0x163/0x7e0 [ 212.784030][T11407] ? get_pid_task+0x20/0x1f0 [ 212.784051][T11407] import_iovec+0x73/0xa0 [ 212.784076][T11407] vfs_writev+0x1cf/0x990 [ 212.784109][T11407] ? __pfx_vfs_writev+0x10/0x10 [ 212.784145][T11407] ? __fget_files+0x2a/0x420 [ 212.784166][T11407] ? __fget_files+0x3a0/0x420 [ 212.784181][T11407] ? __fget_files+0x2a/0x420 [ 212.784205][T11407] do_writev+0x154/0x2e0 [ 212.784232][T11407] ? __pfx_do_writev+0x10/0x10 [ 212.784264][T11407] do_syscall_64+0x14d/0xf80 [ 212.784284][T11407] ? trace_irq_disable+0x3b/0x150 [ 212.784298][T11407] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.784315][T11407] ? clear_bhb_loop+0x40/0x90 [ 212.784336][T11407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.784353][T11407] RIP: 0033:0x7f2a8bf9c819 [ 212.784369][T11407] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.784384][T11407] RSP: 002b:00007f2a8cd73028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 212.784404][T11407] RAX: ffffffffffffffda RBX: 00007f2a8c215fa0 RCX: 00007f2a8bf9c819 [ 212.784415][T11407] RDX: 00000000000002a0 RSI: 0000200000000200 RDI: 0000000000000004 [ 212.784426][T11407] RBP: 00007f2a8cd73090 R08: 0000000000000000 R09: 0000000000000000 [ 212.784437][T11407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.784446][T11407] R13: 00007f2a8c216038 R14: 00007f2a8c215fa0 R15: 00007ffe2026e318 [ 212.784472][T11407] [ 212.800327][T11414] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1455'. [ 213.058921][T11414] netlink: 'syz.0.1455': attribute type 7 has an invalid length. [ 213.066784][T11414] netlink: 'syz.0.1455': attribute type 8 has an invalid length. [ 213.088929][T11414] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1455'. [ 213.149360][T11423] xt_TCPMSS: Only works on TCP SYN packets [ 213.326670][T11432] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1464'. [ 213.426518][T11429] xt_hashlimit: size too large, truncated to 1048576 [ 213.496483][T11443] –: renamed from wg2 (while UP) [ 213.702383][T11455] netlink: 'syz.1.1467': attribute type 13 has an invalid length. [ 213.710450][T11455] netlink: 'syz.1.1467': attribute type 17 has an invalid length. [ 213.806447][T11457] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1467'. [ 213.819260][T11455] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 214.170484][T11459] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1468'. [ 215.627500][T11488] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1476'. [ 216.305181][T11432] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 216.469927][T11490] IPVS: set_ctl: invalid protocol: 24 0.0.0.0:0 [ 216.485570][T11490] netlink: 'syz.0.1477': attribute type 39 has an invalid length. [ 216.959161][T11527] netlink: 340 bytes leftover after parsing attributes in process `syz.1.1484'. [ 216.978394][T11519] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1485'. [ 217.110460][T11526] syzkaller0: entered promiscuous mode [ 217.116701][T11526] syzkaller0: entered allmulticast mode [ 217.133507][T11535] xfrm1: entered allmulticast mode [ 217.796190][T11574] netlink: 'syz.4.1503': attribute type 1 has an invalid length. [ 217.870205][T11573] bond9: (slave bridge1): making interface the new active one [ 217.880675][T11573] bond9: (slave bridge1): Enslaving as an active interface with an up link [ 217.924230][T11574] bond9: (slave bridge2): Enslaving as an active interface with a down link [ 217.945905][T11573] bond9: (slave gretap2): Enslaving as an active interface with an up link [ 217.963583][T11573] macvlan0: entered promiscuous mode [ 217.970456][T11573] macvlan0: entered allmulticast mode [ 217.976635][T11573] bond9: entered promiscuous mode [ 217.982379][T11573] bridge1: entered promiscuous mode [ 217.988535][T11573] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 217.997099][T11573] bond9: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 218.034407][T11573] bond9: left promiscuous mode [ 218.039940][T11573] bridge1: left promiscuous mode [ 218.226991][T11586] syzkaller0: entered promiscuous mode [ 218.235473][T11586] syzkaller0: entered allmulticast mode [ 218.247088][T11586] __nla_validate_parse: 1 callbacks suppressed [ 218.247105][T11586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1505'. [ 218.413656][T11595] sctp: [Deprecated]: syz.2.1509 (pid 11595) Use of int in max_burst socket option. [ 218.413656][T11595] Use struct sctp_assoc_value instead [ 218.584827][T11603] syzkaller0: entered promiscuous mode [ 218.590999][T11603] syzkaller0: entered allmulticast mode [ 219.225870][T11616] tipc: Started in network mode [ 219.232200][T11616] tipc: Node identity ff, cluster identity 4711 [ 219.259595][T11616] tipc: Enabling of bearer rejected, failed to enable media [ 219.373271][T11628] netlink: 'syz.4.1515': attribute type 5 has an invalid length. [ 219.496214][T11633] ieee802154 phy0 wpan0: encryption failed: -22 [ 219.504354][T11634] ieee802154 phy0 wpan0: encryption failed: -22 [ 220.514075][T11686] syzkaller1: entered promiscuous mode [ 220.519765][T11686] syzkaller1: entered allmulticast mode [ 220.794706][T11686] tap0: tun_chr_ioctl cmd 1074025677 [ 220.809925][T11686] tap0: linktype set to 773 [ 220.865898][T11704] syzkaller0: entered promiscuous mode [ 220.871680][T11704] syzkaller0: entered allmulticast mode [ 221.041887][T11709] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1542'. [ 221.231983][T11719] dummy0: entered promiscuous mode [ 221.255908][T11719] dummy0: left promiscuous mode [ 222.202483][T11736] ieee802154 phy0 wpan0: encryption failed: -22 [ 222.339366][T11742] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1554'. [ 222.391558][T11744] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1552'. [ 222.519966][T11752] sctp: [Deprecated]: syz.3.1555 (pid 11752) Use of int in max_burst socket option. [ 222.519966][T11752] Use struct sctp_assoc_value instead [ 222.972018][T11731] ipvlan2: entered promiscuous mode [ 223.937588][T11785] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1562'. [ 223.964762][T11789] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1564'. [ 224.120610][T11795] xt_TPROXY: Can be used only with -p tcp or -p udp [ 224.631410][T11801] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 51650 - 0 [ 224.642071][T11801] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 224.859530][T11804] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1568'. [ 224.920266][T11801] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 51650 - 0 [ 224.931509][T11801] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 224.941723][T11804] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1568'. [ 224.959048][T11804] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1568'. [ 225.003018][T11804] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1568'. [ 225.056089][T11801] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 51650 - 0 [ 225.078634][T11801] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 225.162270][T11813] netlink: 292 bytes leftover after parsing attributes in process `syz.3.1571'. [ 225.182280][T11813] netlink: 'syz.3.1571': attribute type 1 has an invalid length. [ 225.240952][T11801] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 51650 - 0 [ 225.251652][T11801] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 225.490332][ T6734] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 51650 - 0 [ 225.520992][ T6734] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 225.593814][ T6715] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 51650 - 0 [ 225.612934][ T6715] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 225.634712][ T6715] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 51650 - 0 [ 225.648079][T11826] netlink: 684 bytes leftover after parsing attributes in process `syz.3.1576'. [ 225.653739][ T6715] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 225.714688][T10685] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 51650 - 0 [ 225.727254][T10685] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 225.808621][T11831] netlink: 'syz.3.1578': attribute type 3 has an invalid length. [ 225.884563][T11831] netlink: 'syz.3.1578': attribute type 3 has an invalid length. [ 226.080078][T11841] veth0: entered promiscuous mode [ 226.110556][T11844] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1581'. [ 226.153136][T11839] veth0: left promiscuous mode [ 226.160932][T11852] netlink: 'syz.1.1585': attribute type 1 has an invalid length. [ 226.206364][T11852] 8021q: adding VLAN 0 to HW filter on device bond6 [ 226.423326][T11870] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1589'. [ 227.372803][T11907] bond11: option ad_actor_sys_prio: invalid value (0) [ 227.382790][T11907] bond11: option ad_actor_sys_prio: allowed values 1 - 65535 [ 227.392000][T11907] bond11 (unregistering): Released all slaves [ 227.712058][T11926] netlink: 'syz.1.1604': attribute type 1 has an invalid length. [ 228.001016][T11938] netlink: 'syz.1.1608': attribute type 3 has an invalid length. [ 228.016824][T11942] ieee802154 phy0 wpan0: encryption failed: -22 [ 228.020278][T11939] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 228.432217][T11963] ieee802154 phy0 wpan0: encryption failed: -22 [ 228.539849][T11966] syzkaller0: entered promiscuous mode [ 228.552094][T11968] netlink: 'syz.1.1619': attribute type 1 has an invalid length. [ 228.573374][T11968] netlink: 'syz.1.1619': attribute type 2 has an invalid length. [ 228.711994][T11975] af_packet: tpacket_rcv: packet too big, clamped from 29 to 4294967272. macoff=96 [ 228.985762][T11985] ieee802154 phy0 wpan0: encryption failed: -22 [ 228.991275][T11961] syzkaller0: entered promiscuous mode [ 228.997840][T11961] syzkaller0: entered allmulticast mode [ 229.082555][T11990] netlink: zone id is out of range [ 229.087813][T11990] netlink: zone id is out of range [ 229.122607][T11990] netlink: zone id is out of range [ 229.136734][T11990] netlink: zone id is out of range [ 229.156290][T11990] netlink: zone id is out of range [ 229.156345][T11981] IPVS: Scheduler module ip_vs_ not found [ 229.164712][T11990] netlink: zone id is out of range [ 229.217868][T11998] netlink: 'syz.1.1625': attribute type 2 has an invalid length. [ 229.231295][T11990] netlink: zone id is out of range [ 229.236657][T11990] netlink: zone id is out of range [ 229.246621][T11990] netlink: zone id is out of range [ 229.256730][T11990] netlink: zone id is out of range [ 229.283699][T12001] netlink: 'syz.1.1625': attribute type 2 has an invalid length. [ 229.962606][T12014] __nla_validate_parse: 6 callbacks suppressed [ 229.962619][T12014] netlink: 228 bytes leftover after parsing attributes in process `syz.2.1632'. [ 230.954938][T11998] : entered promiscuous mode [ 231.104047][T12024] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1634'. [ 231.104482][T12017] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 231.398042][T12045] netlink: 203340 bytes leftover after parsing attributes in process `syz.2.1639'. [ 232.254190][T12082] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1642'. [ 233.094870][T12122] validate_nla: 1 callbacks suppressed [ 233.094890][T12122] netlink: 'syz.2.1652': attribute type 1 has an invalid length. [ 233.113010][T12119] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1651'. [ 233.124747][T12122] netlink: 'syz.2.1652': attribute type 1 has an invalid length. [ 233.367560][T12135] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 234.313884][T12179] tipc: Enabling of bearer rejected, failed to enable media [ 234.443514][T12187] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.1664'. [ 234.464961][ T5487] veth1_macvtap: left promiscuous mode [ 234.492015][ T5487] veth1_macvtap: entered promiscuous mode [ 234.707060][T12200] dvmrp0: left allmulticast mode [ 234.785618][T12197] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1666'. [ 234.797454][T12202] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1667'. [ 234.834656][T12200] nbd: must specify a device to reconfigure [ 235.008481][T12215] net_ratelimit: 354 callbacks suppressed [ 235.008500][T12215] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 235.258201][T12227] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1675'. [ 235.293578][T12233] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1676'. [ 235.318058][T12233] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1676'. [ 235.518306][T12247] netlink: 212260 bytes leftover after parsing attributes in process `syz.1.1679'. [ 235.535708][T12245] syzkaller0: entered promiscuous mode [ 235.545764][T12245] syzkaller0: entered allmulticast mode [ 236.048592][T12271] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1683'. [ 236.063501][T12271] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1683'. [ 236.154802][T12271] bond0: entered promiscuous mode [ 236.161362][T12271] bond_slave_0: entered promiscuous mode [ 236.194773][T12271] bond_slave_1: entered promiscuous mode [ 236.206638][T12271] bond0: left promiscuous mode [ 236.220903][T12271] bond_slave_0: left promiscuous mode [ 236.239135][T12271] bond_slave_1: left promiscuous mode [ 236.454469][T12283] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 236.488225][T12286] netlink: 'syz.2.1689': attribute type 13 has an invalid length. [ 236.496465][T12286] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1689'. [ 236.509500][T12286] syz_tun: refused to change device tx_queue_len [ 236.516202][T12286] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 236.574512][T12288] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1686'. [ 236.623087][T12288] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1686'. [ 236.659211][T12288] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1686'. [ 236.712177][T12288] gretap1: entered promiscuous mode [ 236.718515][T12288] batman_adv: batadv0: Adding interface: gretap1 [ 236.725495][T12288] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 236.745583][T12288] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 237.726202][T12339] bridge0: entered promiscuous mode [ 237.742189][T12339] vlan3: entered promiscuous mode [ 238.337459][T12358] openvswitch: netlink: Unexpected mask (mask=5000040, allowed=1010048) [ 238.347555][T12354] syzkaller0: entered promiscuous mode [ 238.354101][T12354] syzkaller0: entered allmulticast mode [ 239.326967][T12397] bond8: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 239.353404][T12397] bond8 (unregistering): Released all slaves [ 240.530160][T12448] __nla_validate_parse: 22 callbacks suppressed [ 240.530180][T12448] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1734'. [ 240.576619][T12448] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1734'. [ 240.661063][T12448] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1734'. [ 240.704722][T12448] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1734'. [ 240.781310][T12456] netlink: 1036 bytes leftover after parsing attributes in process `syz.4.1734'. [ 240.997795][T12462] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1739'. [ 241.714675][ T29] audit: type=1804 audit(1776262430.813:9): pid=12483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1746" name="/newroot/335/cgroup.controllers" dev="tmpfs" ino=1726 res=1 errno=0 [ 241.749955][T12483] openvswitch: netlink: Flow key attr not present in new flow. [ 241.818204][ T29] audit: type=1800 audit(1776262430.813:10): pid=12483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1746" name="cgroup.controllers" dev="tmpfs" ino=1726 res=0 errno=0 [ 241.888855][ T29] audit: type=1800 audit(1776262430.843:11): pid=12483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1746" name="cgroup.controllers" dev="tmpfs" ino=1726 res=0 errno=0 [ 242.046095][T12490] sctp: [Deprecated]: syz.2.1748 (pid 12490) Use of int in max_burst socket option. [ 242.046095][T12490] Use struct sctp_assoc_value instead [ 242.090106][T12491] netlink: 'syz.1.1749': attribute type 5 has an invalid length. [ 242.101319][T12491] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.1749'. [ 242.471153][T12509] xt_hashlimit: size too large, truncated to 1048576 [ 242.651601][T12518] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1753'. [ 242.996760][T12527] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1757'. [ 243.056408][T12526] netlink: 'syz.2.1756': attribute type 1 has an invalid length. [ 243.069078][T12526] netlink: 264 bytes leftover after parsing attributes in process `syz.2.1756'. [ 243.110534][T12526] netlink: 'syz.2.1756': attribute type 1 has an invalid length. [ 243.996224][T12560] x_tables: duplicate underflow at hook 2 [ 245.102201][T12607] xt_hashlimit: max too large, truncated to 1048576 [ 245.122970][T12607] xt_hashlimit: Unknown mode mask 300, kernel too old? [ 245.829794][T12630] __nla_validate_parse: 9 callbacks suppressed [ 245.829814][T12630] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1790'. [ 246.134248][T12639] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1791'. [ 246.143534][T12639] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1791'. [ 246.153101][T12639] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1791'. [ 246.162638][T12639] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1791'. [ 246.191819][T12639] netlink: 1036 bytes leftover after parsing attributes in process `syz.4.1791'. [ 247.078069][T12653] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1797'. [ 247.290960][T12667] netlink: 'syz.0.1800': attribute type 5 has an invalid length. [ 247.356128][T12667] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1800'. [ 247.373756][T12674] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.502355][T12674] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.650364][T12674] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.746520][T12674] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.770956][T12694] netlink: 'syz.3.1808': attribute type 3 has an invalid length. [ 247.793435][T12695] netlink: 'syz.3.1808': attribute type 3 has an invalid length. [ 247.840069][T12697] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1809'. [ 247.858069][T12697] netlink: 'syz.2.1809': attribute type 6 has an invalid length. [ 247.981690][ T6700] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.995126][ T6700] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.125074][ T6700] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.161748][ T6715] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.397930][T12720] netlink: 'syz.0.1814': attribute type 8 has an invalid length. [ 248.497002][T12723] tipc: Enabled bearer , priority 0 [ 248.687940][T12734] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1817'. [ 248.775896][T12721] tipc: Disabling bearer [ 249.076242][T12755] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 249.463907][T12777] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 51650 - 0 [ 249.548072][T12777] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 249.678361][T12777] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 51650 - 0 [ 249.719129][T12777] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 249.824393][T12777] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 51650 - 0 [ 249.859502][T12777] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 249.989603][T12777] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 51650 - 0 [ 250.019078][T12777] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 250.203698][ T6715] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 51650 - 0 [ 250.222864][ T6715] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 250.282980][ T6734] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 51650 - 0 [ 250.294502][ T6734] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 250.390722][ T6734] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 51650 - 0 [ 250.403143][ T6734] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 250.421327][T12813] netlink: 'syz.2.1835': attribute type 10 has an invalid length. [ 250.439188][ T6734] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 51650 - 0 [ 250.447491][ T6734] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 250.470468][T12815] netlink: 'syz.1.1836': attribute type 2 has an invalid length. [ 250.479348][T12817] netlink: 'syz.3.1837': attribute type 10 has an invalid length. [ 250.491582][T12813] team0: Port device wlan1 added [ 250.713467][T12829] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 251.013073][T12844] __nla_validate_parse: 5 callbacks suppressed [ 251.013095][T12844] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1846'. [ 251.096354][T12846] netlink: 'syz.4.1847': attribute type 8 has an invalid length. [ 251.610579][T12872] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1856'. [ 251.633081][T12872] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1856'. [ 251.706427][T12879] netlink: 'syz.3.1857': attribute type 1 has an invalid length. [ 251.812878][T12878] gretap0: entered promiscuous mode [ 251.868404][T12888] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1861'. [ 252.236382][T12902] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.1866'. [ 252.271662][T12902] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1866'. [ 252.482265][T12916] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1871'. [ 252.633926][T12916] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1871'. [ 253.533364][T12969] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1887'. [ 253.790601][T12989] delete_channel: no stack [ 253.950112][T12977] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1887'. [ 254.352753][T12998] syzkaller0: entered promiscuous mode [ 254.382441][T12998] syzkaller0: entered allmulticast mode [ 254.644969][T13025] tipc: Enabled bearer , priority 0 [ 254.657829][T13023] validate_nla: 2 callbacks suppressed [ 254.657846][T13023] netlink: 'syz.1.1896': attribute type 1 has an invalid length. [ 254.716256][T13023] 8021q: adding VLAN 0 to HW filter on device bond7 [ 254.728275][T13020] syzkaller0: entered promiscuous mode [ 254.739182][T13020] syzkaller0: entered allmulticast mode [ 254.813924][T13020] tipc: Resetting bearer [ 254.828563][T13019] tipc: Resetting bearer [ 254.882375][T13019] tipc: Disabling bearer [ 255.000701][T13047] IPVS: set_ctl: invalid protocol: 50 224.0.0.1:20001 [ 255.030619][ T5838] Bluetooth: hci4: link tx timeout [ 255.035973][ T5838] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 255.164725][T13053] ================================================================== [ 255.172849][T13053] BUG: KASAN: slab-out-of-bounds in af_alg_pull_tsgl+0x1c6/0x740 [ 255.180602][T13053] Read of size 8 at addr ffff88807918f360 by task syz.0.1906/13053 [ 255.188507][T13053] [ 255.190856][T13053] CPU: 0 UID: 0 PID: 13053 Comm: syz.0.1906 Not tainted syzkaller #0 PREEMPT(full) [ 255.190886][T13053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 255.190899][T13053] Call Trace: [ 255.190907][T13053] [ 255.190916][T13053] dump_stack_lvl+0xe8/0x150 [ 255.190949][T13053] print_report+0xba/0x230 [ 255.190975][T13053] ? af_alg_pull_tsgl+0x1c6/0x740 [ 255.191006][T13053] kasan_report+0x117/0x150 [ 255.191032][T13053] ? af_alg_pull_tsgl+0x1c6/0x740 [ 255.191064][T13053] af_alg_pull_tsgl+0x1c6/0x740 [ 255.191111][T13053] skcipher_recvmsg+0x5df/0x1140 [ 255.191142][T13053] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 255.191165][T13053] ? aa_sock_msg_perm+0xf1/0x1b0 [ 255.191183][T13053] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 255.191206][T13053] ? security_socket_recvmsg+0x7e/0x2c0 [ 255.191229][T13053] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 255.191249][T13053] sock_recvmsg+0x172/0x1b0 [ 255.191274][T13053] sock_read_iter+0x251/0x320 [ 255.191296][T13053] ? __pfx_sock_read_iter+0x10/0x10 [ 255.191320][T13053] ? bpf_lsm_file_permission+0x9/0x20 [ 255.191346][T13053] ? security_file_permission+0x75/0x260 [ 255.191375][T13053] vfs_read+0x582/0xa70 [ 255.191400][T13053] ? __pfx_vfs_read+0x10/0x10 [ 255.191424][T13053] ? __fget_files+0x2a/0x420 [ 255.191445][T13053] ksys_read+0x150/0x270 [ 255.191466][T13053] ? __pfx_ksys_read+0x10/0x10 [ 255.191491][T13053] do_syscall_64+0x14d/0xf80 [ 255.191513][T13053] ? trace_irq_disable+0x3b/0x150 [ 255.191531][T13053] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.191550][T13053] ? clear_bhb_loop+0x40/0x90 [ 255.191569][T13053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.191588][T13053] RIP: 0033:0x7f5418b9c819 [ 255.191606][T13053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.191626][T13053] RSP: 002b:00007f5419a65028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 255.191649][T13053] RAX: ffffffffffffffda RBX: 00007f5418e15fa0 RCX: 00007f5418b9c819 [ 255.191665][T13053] RDX: 000000000000100d RSI: 00002000000012c0 RDI: 000000000000000c [ 255.191678][T13053] RBP: 00007f5418c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 255.191691][T13053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 255.191703][T13053] R13: 00007f5418e16038 R14: 00007f5418e15fa0 R15: 00007ffc31b3b5e8 [ 255.191726][T13053] [ 255.191733][T13053] [ 255.429328][T13053] Allocated by task 13053: [ 255.433730][T13053] kasan_save_track+0x3e/0x80 [ 255.438399][T13053] __kasan_kmalloc+0x93/0xb0 [ 255.443091][T13053] __kmalloc_noprof+0x35c/0x760 [ 255.447962][T13053] sock_kmalloc+0xd6/0x160 [ 255.452494][T13053] skcipher_recvmsg+0x54d/0x1140 [ 255.457430][T13053] sock_recvmsg+0x172/0x1b0 [ 255.461923][T13053] sock_read_iter+0x251/0x320 [ 255.466613][T13053] vfs_read+0x582/0xa70 [ 255.470761][T13053] ksys_read+0x150/0x270 [ 255.475002][T13053] do_syscall_64+0x14d/0xf80 [ 255.479589][T13053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.485473][T13053] [ 255.487792][T13053] The buggy address belongs to the object at ffff88807918f340 [ 255.487792][T13053] which belongs to the cache kmalloc-32 of size 32 [ 255.501660][T13053] The buggy address is located 0 bytes to the right of [ 255.501660][T13053] allocated 32-byte region [ffff88807918f340, ffff88807918f360) [ 255.516164][T13053] [ 255.518483][T13053] The buggy address belongs to the physical page: [ 255.524949][T13053] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7918f [ 255.534056][T13053] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 255.541165][T13053] page_type: f5(slab) [ 255.545143][T13053] raw: 00fff00000000000 ffff88813feac780 dead000000000100 dead000000000122 [ 255.553714][T13053] raw: 0000000000000000 0000000800400040 00000000f5000000 0000000000000000 [ 255.562285][T13053] page dumped because: kasan: bad access detected [ 255.568782][T13053] page_owner tracks the page as allocated [ 255.574570][T13053] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5669, tgid 5669 (sh), ts 55473863989, free_ts 55472988178 [ 255.593310][T13053] post_alloc_hook+0x231/0x280 [ 255.598072][T13053] get_page_from_freelist+0x24dc/0x2580 [ 255.603782][T13053] __alloc_frozen_pages_noprof+0x18d/0x380 [ 255.609669][T13053] allocate_slab+0x77/0x660 [ 255.614193][T13053] refill_objects+0x331/0x3c0 [ 255.618886][T13053] __pcs_replace_empty_main+0x2e6/0x730 [ 255.624535][T13053] __kmalloc_cache_noprof+0x392/0x660 [ 255.629906][T13053] kmem_cache_free+0x15b/0x630 [ 255.634755][T13053] tear_down_vmas+0x312/0x520 [ 255.639507][T13053] exit_mmap+0x4b6/0xa10 [ 255.643739][T13053] __mmput+0x118/0x430 [ 255.647803][T13053] exec_mmap+0x3b4/0x440 [ 255.652033][T13053] begin_new_exec+0x134a/0x24a0 [ 255.657056][T13053] load_elf_binary+0xa47/0x2980 [ 255.661900][T13053] bprm_execve+0x93d/0x1460 [ 255.666491][T13053] do_execveat_common+0x50d/0x690 [ 255.671592][T13053] page last free pid 5669 tgid 5669 stack trace: [ 255.677990][T13053] __free_frozen_pages+0xc2b/0xdb0 [ 255.683184][T13053] tlb_finish_mmu+0x144/0x230 [ 255.687875][T13053] exit_mmap+0x498/0xa10 [ 255.692134][T13053] __mmput+0x118/0x430 [ 255.696198][T13053] exec_mmap+0x3b4/0x440 [ 255.700427][T13053] begin_new_exec+0x134a/0x24a0 [ 255.705264][T13053] load_elf_binary+0xa47/0x2980 [ 255.710106][T13053] bprm_execve+0x93d/0x1460 [ 255.714606][T13053] do_execveat_common+0x50d/0x690 [ 255.719623][T13053] __x64_sys_execve+0x97/0xc0 [ 255.724389][T13053] do_syscall_64+0x14d/0xf80 [ 255.729070][T13053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.735181][T13053] [ 255.737514][T13053] Memory state around the buggy address: [ 255.743220][T13053] ffff88807918f200: 00 00 00 00 fc fc fc fc 00 00 00 00 fc fc fc fc [ 255.751477][T13053] ffff88807918f280: 00 00 00 00 fc fc fc fc fa fb fb fb fc fc fc fc [ 255.759536][T13053] >ffff88807918f300: fa fb fb fb fc fc fc fc 00 00 00 00 fc fc fc fc [ 255.767769][T13053] ^ [ 255.774969][T13053] ffff88807918f380: fa fb fb fb fc fc fc fc 00 00 00 00 fc fc fc fc [ 255.783024][T13053] ffff88807918f400: 00 00 00 00 fc fc fc fc 00 00 00 00 fc fc fc fc [ 255.791069][T13053] ================================================================== [ 255.807944][T13053] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 255.815289][T13053] CPU: 1 UID: 0 PID: 13053 Comm: syz.0.1906 Not tainted syzkaller #0 PREEMPT(full) [ 255.825032][T13053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 255.835238][T13053] Call Trace: [ 255.838523][T13053] [ 255.841542][T13053] vpanic+0x56c/0xa60 [ 255.845531][T13053] ? __pfx_vpanic+0x10/0x10 [ 255.850039][T13053] ? __pfx___schedule+0x10/0x10 [ 255.854889][T13053] panic+0xc5/0xd0 [ 255.858642][T13053] ? __pfx_panic+0x10/0x10 [ 255.863064][T13053] ? preempt_schedule_common+0x82/0xd0 [ 255.868532][T13053] ? af_alg_pull_tsgl+0x1c6/0x740 [ 255.873575][T13053] check_panic_on_warn+0x89/0xb0 [ 255.878522][T13053] ? af_alg_pull_tsgl+0x1c6/0x740 [ 255.883599][T13053] end_report+0x73/0x180 [ 255.887839][T13053] ? af_alg_pull_tsgl+0x1c6/0x740 [ 255.892866][T13053] kasan_report+0x128/0x150 [ 255.897381][T13053] ? af_alg_pull_tsgl+0x1c6/0x740 [ 255.902408][T13053] af_alg_pull_tsgl+0x1c6/0x740 [ 255.907283][T13053] skcipher_recvmsg+0x5df/0x1140 [ 255.912227][T13053] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 255.917874][T13053] ? aa_sock_msg_perm+0xf1/0x1b0 [ 255.923000][T13053] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 255.928312][T13053] ? security_socket_recvmsg+0x7e/0x2c0 [ 255.933990][T13053] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 255.939458][T13053] sock_recvmsg+0x172/0x1b0 [ 255.943972][T13053] sock_read_iter+0x251/0x320 [ 255.948662][T13053] ? __pfx_sock_read_iter+0x10/0x10 [ 255.953956][T13053] ? bpf_lsm_file_permission+0x9/0x20 [ 255.959416][T13053] ? security_file_permission+0x75/0x260 [ 255.965077][T13053] vfs_read+0x582/0xa70 [ 255.969253][T13053] ? __pfx_vfs_read+0x10/0x10 [ 255.973935][T13053] ? __fget_files+0x2a/0x420 [ 255.978603][T13053] ksys_read+0x150/0x270 [ 255.982843][T13053] ? __pfx_ksys_read+0x10/0x10 [ 255.987774][T13053] do_syscall_64+0x14d/0xf80 [ 255.992356][T13053] ? trace_irq_disable+0x3b/0x150 [ 255.997457][T13053] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.003511][T13053] ? clear_bhb_loop+0x40/0x90 [ 256.008273][T13053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.014250][T13053] RIP: 0033:0x7f5418b9c819 [ 256.018666][T13053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.038523][T13053] RSP: 002b:00007f5419a65028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 256.046932][T13053] RAX: ffffffffffffffda RBX: 00007f5418e15fa0 RCX: 00007f5418b9c819 [ 256.054892][T13053] RDX: 000000000000100d RSI: 00002000000012c0 RDI: 000000000000000c [ 256.062856][T13053] RBP: 00007f5418c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 256.070817][T13053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 256.078967][T13053] R13: 00007f5418e16038 R14: 00007f5418e15fa0 R15: 00007ffc31b3b5e8 [ 256.086950][T13053] [ 256.090606][T13053] Kernel Offset: disabled [ 256.094928][T13053] Rebooting in 86400 seconds..