last executing test programs: 2.912205931s ago: executing program 0 (id=2520): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="400401000000faff0800"], 0x50}}, 0x0) 2.826575633s ago: executing program 2 (id=2521): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) getpeername$netlink(r1, &(0x7f0000000040), &(0x7f0000000080)=0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) socket$packet(0x11, 0x2, 0x300) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$igmp(0x2, 0x3, 0x2) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x20000400) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000005640)={0x1, [0x0]}, &(0x7f0000005680)=0x8) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xfff3}}}, 0x24}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 2.666142606s ago: executing program 0 (id=2526): sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207"], 0x10}}, 0x40044) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, 0x0, 0x0) connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r1, &(0x7f0000000200), 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640), 0x0, 0x0, 0x0, 0x8000}, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0xac}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) r5 = socket(0x840000000002, 0x3, 0x100) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) close(r6) r7 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r7, &(0x7f00000005c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x3ffffffe, @remote, 0x7}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[], 0xc}, 0x0) sendmmsg$inet(r5, &(0x7f0000005240), 0x4000095, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="00000000140000002400128009000100626f6e6400000000140002800500130d0000000008001e"], 0x44}, 0x1, 0x2000000000000000}, 0x0) 2.429469948s ago: executing program 2 (id=2529): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_MASTER={0x8}, @IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 2.420232787s ago: executing program 3 (id=2530): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'xfrm0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="1a040500d3fc03fc01004788031c09", 0x10025, 0x4000004, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x6, 0x6, @remote}, 0x14) 2.249526519s ago: executing program 2 (id=2531): sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000327bd7000fedbdf251300000008000100706369303a30303a31302e3000000000080003000000000008000b00d009000006001100070000000800010070636900110002"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48050) r0 = socket(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 2.213470392s ago: executing program 3 (id=2532): r0 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt(r0, 0x110, 0x6, 0x0, 0x0) 2.073717958s ago: executing program 4 (id=2534): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r4, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) bind$unix(r3, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1000, 0x89}, 0x50) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r7}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "9ac420000461afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xe, 0x1, 'IDLETIMER\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x1d, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="bc1000002b000b000000000000000000070000000800030004000100a01001"], 0x10bc}}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) socket$inet_icmp(0x2, 0x2, 0x1) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6131, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) unshare(0x22020400) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, &(0x7f0000000980)=""/103, 0x0, &(0x7f0000000600), 0x80, r5, 0x0, 0x7}, 0x38) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee11, 0x0, 0x0, 0x3], [0x0, 0x8, 0x3]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x4, 0x4, 0x4000000}]}]}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x48804}, 0x0) r10 = socket$isdn(0x22, 0x3, 0x24) sendto$isdn(r10, &(0x7f0000000100)={0x8, 0x8, "733ddf01931a50653fa050ab986a0541817b94e0fd17c4738f037011122fa375fea7f0120506d9f5ad984c01a1ef435528739c69a2f258886eb610acc16d4f2f8cafc04bbe23e97409ea492fa4e566af28d33820db09762983a11894b5ab221fe2f5675201efb33818fe5e797669c1d01a6d3375f13e4016b931a5f4db5a10d57018d614faa02e117dc514db1fce0dac1762389790bfffe37300e17e51a5a5d1b32c8d6cfe55bd696d86864b00e2c3da19163d2c65515b0b0ebe79"}, 0xc3, 0x4c000, &(0x7f0000000000)={0x22, 0xf4, 0x4, 0x8, 0x2}, 0x6) 2.053872515s ago: executing program 2 (id=2535): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @hsr={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 2.015543915s ago: executing program 3 (id=2536): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000040)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000000)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'ip6tnl0\x00', 0x84aebfbd6349b7f2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f0a6dd", 0x0, 0xfffffffd, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.9629655s ago: executing program 2 (id=2537): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000680)={0x0, 0xfc000000}, 0x8) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000380)="0e", 0x1}], 0x1}}], 0x1, 0x402c809) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x79, &(0x7f0000000040)=ANY=[], 0x8) 1.845601927s ago: executing program 3 (id=2538): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x24004004) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0xc0}, 0x2160) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, 0x0, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) 1.524061428s ago: executing program 0 (id=2540): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x2, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x1040, 0x20000000, 0xfffffffc, 0x7ff}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) 1.346221147s ago: executing program 1 (id=2542): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'xfrm0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="1a040500d3fc03fc01004788031c09", 0x10025, 0x4000004, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x6, 0x6, @remote}, 0x14) 1.226240858s ago: executing program 1 (id=2543): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)="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", 0x147}, {&(0x7f0000000480)}], 0x2}}], 0x1, 0x480e0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.161729414s ago: executing program 0 (id=2544): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) listen(r0, 0x5) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newrule={0x1c, 0x21, 0x1, 0x0, 0x0, {0x2, 0x0, 0x14}}, 0x1c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) accept(r0, &(0x7f0000000080)=@can, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) sendto$inet6(r1, &(0x7f0000000000)="169c523d58bdd0", 0x7, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.125422765s ago: executing program 1 (id=2545): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000004001004000024001a80200002801c00018008001a00060000000800160002000000080010000004"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.112552799s ago: executing program 4 (id=2546): unshare(0x22020600) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="180007000000000000000000030000d5747af0ff100000004ef9c328ef4d9500"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x25, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000100), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xd, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) pipe(0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newchain={0x48, 0x64, 0x808, 0x70bd28, 0x8, {0x0, 0x0, 0x0, 0x0, {0x1, 0xb}, {0x8, 0xc}, {0x8, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x1}}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}, @TCA_RATE={0x6, 0x5, {0x1, 0x9}}, @filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x20000100) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0xffffffff, 0x0, 0x400}}}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_TCINDEX={0x4, 0x2, @void}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) getsockopt(0xffffffffffffffff, 0x110, 0x6, 0x0, 0x0) 1.04418283s ago: executing program 1 (id=2547): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @hsr={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 1.009513902s ago: executing program 2 (id=2548): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffff"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$rds(0x15, 0x5, 0x0) r0 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r0, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) connect$pppl2tp(r0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000000)=0xfffffff7, 0x4) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="10000000fcffffff0000000000000000851000000200000085000000d00000009500000000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x45, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x15, 0x301, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x17, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000711205000000000095"], 0x0, 0x5}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r6, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40455d00000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e74657200400100000c0a01010000000000000000070000000900020073797a31000000000900010073797a300000000014010380100100800800034000000002030106"], 0x1d4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 936.547364ms ago: executing program 3 (id=2549): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [], {0x14}}, 0x28}}, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000680)={0x0, 0xfc000000}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000380)="0e", 0x1}], 0x1}}], 0x1, 0x402c809) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x79, 0x0, 0x8) 855.665119ms ago: executing program 4 (id=2550): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x3fe, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r1, &(0x7f0000000180)="b0", 0x1, 0x6004851, &(0x7f0000000240)={0xa, 0x4e23, 0x6, @loopback, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e24, @loopback}}}, 0x84) 854.17017ms ago: executing program 1 (id=2551): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003380)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb0100180000000100000000180019c8c0460000060000000100001304000000000000014300000001000000002171005f5f2e00000020f375"], 0x0, 0x38, 0x0, 0x0, 0x6abb}, 0x28) r1 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)=0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, r0, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0)={0x20000000, 0x0, 0x200}, 0x10}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001080)={r4, r3, 0x4, r3}, 0x10) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) accept4(r5, 0x0, 0x0, 0x800) r6 = socket$rds(0x15, 0x5, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f000000a7c0)=[{{0x0, 0x0, &(0x7f0000008bc0)=[{&(0x7f0000002200)=""/176, 0xb0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000008ac0)=""/193, 0xc1}], 0x5}, 0x6}], 0x1, 0x40010040, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r8 = accept4(r7, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) sendmmsg$unix(r8, &(0x7f0000000680), 0x4924924924925c6, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1, 0x1000000000000}}], 0x48}, 0x0) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000880)={0x27, r2, 0x0, 0x6, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e879918d20000000f2170e65e3f50327080e000000000000001900", 0x3c}, 0x60) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/109, 0x6d}, {&(0x7f0000000140)=""/84, 0x54}], 0x2) close(r1) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4000, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000100)='cubic', 0x4) 796.291515ms ago: executing program 4 (id=2552): unshare(0x22020600) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000240)={'batadv0\x00', &(0x7f00000001c0)=@ethtool_gstrings={0x1b, 0x1}}) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) unshare(0x2c020400) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000380)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x4) 632.418139ms ago: executing program 1 (id=2553): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'xfrm0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="1a040500d3fc03fc01004788031c09", 0x10025, 0x4000004, &(0x7f0000000300)={0x11, 0x0, r2, 0x1, 0x6, 0x6, @remote}, 0x14) 558.215541ms ago: executing program 4 (id=2554): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) syz_emit_ethernet(0x3b5, &(0x7f0000000940)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x37f, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af03"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e100908f61640000000200000000000000000002000000008879e66485201a0015ca83747357a02745000400"/55}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000019c0)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x2c, 0x0, 0x0, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x6d}}}}, [@NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @from_mac}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48000) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f00000013c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)={0x2c, r4, 0x401, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040050}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x4, 0x5, 0x3, 0x9, 0x28, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x24}, 0x8, 0x0, 0x2, 0x2}}) r6 = socket(0x10, 0x3, 0x6) r7 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x22, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x3}, {0xffff, 0xffff}, {0x10, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000200)={'ip_vti0\x00', 0x0, 0x8, 0x40, 0x80000001, 0x3, {{0x2c, 0x4, 0x1, 0x3, 0xb0, 0x64, 0x0, 0xad, 0x2f, 0x0, @remote, @broadcast, {[@rr={0x7, 0x23, 0x2a, [@loopback, @remote, @rand_addr=0x64010100, @remote, @multicast2, @rand_addr=0x64010102, @multicast1, @multicast1]}, @rr={0x7, 0x7, 0xde, [@rand_addr=0x64010100]}, @ssrr={0x89, 0xb, 0xe1, [@private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x65, 0x0, [{0x6, 0xf, "c0c059d2c1c0d6fd894eaa9f2e"}, {0x2, 0x12, "b61571e4c621accdee44283b3467ff87"}, {0x6, 0x10, "62b99f115b267d7a1a34f7b233df"}, {0x2, 0x11, "cae961c2533b00b75fbdab78fb84c3"}, {0x6, 0x11, "1c1b3e55ea92cd5ec288e89f4f2f1c"}, {0x5, 0x6, "9682af5b"}, {0x5, 0x6, "060b535c"}]}, @end]}}}}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f00000018c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001880)={&(0x7f0000000340)={0x1530, r4, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_WANTED={0x168, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffffff7}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xffffffff}, @ETHTOOL_A_BITSET_BITS={0xec, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz2\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '(#\''}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, ',\t\'{^}&):\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '&\\*\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '\xf3]!.(!\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz0\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0x64, 0x5, "37c81396b19ba8ee020e791f9613c665f128c41e09e2343218883ae30b8523b4500425ceccd45c665295defb047e64850e90b914ba73d4a1511f9cd3638f1f66b42c19eda3845bd4d833ef16e5889f56b00124546799c1c368431ecd3527aea6"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_WANTED={0x338, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x103, 0x4, "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"}, @ETHTOOL_A_BITSET_VALUE={0xd0, 0x4, "f1bc74d25dfee13fa7871d391f8850546f3dd4d7d8a25f0587514bffc1f0607fb0a7b1d5d067bfc28be87778c9c2ba1a436ce3e24bc795578573607549f021557bf79b8218a9c5e74e061532dc5c6adcd7ef1e9565e291dcbaf71a0b55c84fb96df33d1b02426589be6f5bfac1590f3f5da2915245db067373da3a86beca5896b55231ec9c3c0fe960f5bf4f57a6d0c58f77385a556306445eec784e0d66752d642201432823e5ee97db0e5acf463ac936940d70417bfa07140221a64181f8065dd0c292a0630ffca8a14025"}, @ETHTOOL_A_BITSET_VALUE={0x93, 0x4, "66e28c0b0692cc2b1f0894faca9d26178e9917b04c67fa343f8b0612c8d79f2e834f9b58f12954f4ba030035f2f39b005eae913b226e3f25a065491707111f879a70d6db62664e384131f3935cf1a58ed9a73b68c1c5bab46b38a3464b3557e396c7bb590715738d0ccce062837d82868bb01872753b26ec26022b71e3123eddd14e8aab0783bd4d78836490ac708a"}, @ETHTOOL_A_BITSET_MASK={0xbe, 0x5, "90ab34efc1d10dbf48181dd68bd89782623aa5f6cd4bf14a77b2cf30c0513090f26c922f7d06389c377bc5d6759ca3dbb737cc85527461546675b2d2f0506109333d001d873b941f3485f2eb96b41b49f1d373087d61c26a6570ffe04a3b67d022d2719bbde5df2ba9595b17ca4bc5904f1cd8833386c8d372b197702e5ea6d14017a28a7dfd5b14f297455108e410a302aa02fe8e4bd61dccd6a3f627cbc2bb16588ef90f7d91e7d62fce38834578e9720ba4d760a93b640a73"}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_FEATURES_WANTED={0x1040, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_MASK={0x27, 0x5, "e6e35d7b30e390e19b911623fffb68cf66706ad909d4d995888bf71f5b11e219837841"}]}]}, 0x1530}, 0x1, 0x0, 0x0, 0xc0055}, 0x0) r10 = accept(r7, &(0x7f0000001a00)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000001a80)=0x80) r11 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r12 = getuid() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRESHEX=r12, @ANYRES32=r11, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x250}, 0x1, 0x0, 0x0, 0x2004c010}, 0x50) setsockopt$inet_IP_IPSEC_POLICY(r10, 0x0, 0x10, &(0x7f0000001ac0)={{{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x8, 0x8, 0x4e23, 0x8, 0x2, 0x80, 0x80, 0x2b, r5, r12}, {0x6, 0x8, 0x401, 0xd, 0x4d9, 0xa89, 0x3, 0xc6e8}, {0xffff, 0x8, 0x2, 0x3760716e}, 0xc, 0x6e6bb4, 0x0, 0x0, 0x2, 0x1}, {{@in=@loopback, 0x4d6, 0x33}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x34ff, 0x3, 0x2, 0xa, 0xa7a, 0x6, 0xe138}}, 0xe8) r13 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x2c}}, 0x0) sendmmsg(r0, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x28011) 441.832591ms ago: executing program 4 (id=2556): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r4, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) bind$unix(r3, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1000, 0x89}, 0x50) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r7}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "9ac420000461afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xe, 0x1, 'IDLETIMER\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x1d, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="bc1000002b000b000000000000000000070000000800030004000100a01001"], 0x10bc}}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) socket$inet_icmp(0x2, 0x2, 0x1) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6131, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) unshare(0x22020400) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000000c0)={0x0, &(0x7f0000000980)=""/103, 0x0, &(0x7f0000000600), 0x80, r5, 0x0, 0x7}, 0x38) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee11, 0x0, 0x0, 0x3], [0x0, 0x8, 0x3]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x4, 0x4, 0x4000000}]}]}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x48804}, 0x0) r10 = socket$isdn(0x22, 0x3, 0x24) sendto$isdn(r10, &(0x7f0000000100)={0x8, 0x8, "733ddf01931a50653fa050ab986a0541817b94e0fd17c4738f037011122fa375fea7f0120506d9f5ad984c01a1ef435528739c69a2f258886eb610acc16d4f2f8cafc04bbe23e97409ea492fa4e566af28d33820db09762983a11894b5ab221fe2f5675201efb33818fe5e797669c1d01a6d3375f13e4016b931a5f4db5a10d57018d614faa02e117dc514db1fce0dac1762389790bfffe37300e17e51a5a5d1b32c8d6cfe55bd696d86864b00e2c3da19163d2c65515b0b0ebe79"}, 0xc3, 0x4c000, &(0x7f0000000000)={0x22, 0xf4, 0x4, 0x8, 0x2}, 0x6) 280.141834ms ago: executing program 0 (id=2557): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000004001004000024001a80200002801c00018008001a00060000000800160002000000080010000004000008"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 90.255484ms ago: executing program 0 (id=2558): socket$netlink(0x10, 0x3, 0x8000000004) socket$netlink(0x10, 0x3, 0xf) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x4040004) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r2, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e20, 0x0, @loopback, 0x7}}, 0x0, 0x0, 0x47, 0x0, "09be2271b78506e6dd938d324c415acd403a4480fd1afa34432bcdfa64d957e93efafd27ad06a6f589bb643f167cf0fcd370239aaa93f6ded3c5032c96ead0cdc68474d402ab73e482db7ec1e0a57489"}, 0xd8) bind$inet6(r2, &(0x7f0000000a00)={0xa, 0x4e20, 0x4, @loopback, 0x5}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0xeffffff1, @empty, 0x2}, 0x1c) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @empty, 0x5}, 0x1c) 0s ago: executing program 3 (id=2559): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000002d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x89) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) kernel console output (not intermixed with test programs): multicast mode [ 167.326848][ T8341] team_slave_1: left promiscuous mode [ 167.355493][ T8341] team0: Port device team_slave_1 removed [ 167.375000][ T8341] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.383187][ T8341] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.402257][ T8341] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.418353][ T8341] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.430357][ T8350] netlink: 88 bytes leftover after parsing attributes in process `syz.0.760'. [ 167.449037][ T8341] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 167.462151][ T5867] tipc: Node number set to 2886997007 [ 167.515347][ T8344] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 167.541831][ T8354] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 167.693942][ T8355] tipc: Enabling of bearer rejected, failed to enable media [ 168.199031][ T8384] tipc: Started in network mode [ 168.204419][ T8384] tipc: Node identity 1e179b3bf8bd, cluster identity 4711 [ 168.212377][ T8384] tipc: Enabled bearer , priority 0 [ 168.220469][ T8384] syzkaller0: entered promiscuous mode [ 168.231105][ T8384] syzkaller0: entered allmulticast mode [ 168.314994][ T8391] tipc: Resetting bearer [ 168.424075][ T8383] tipc: Resetting bearer [ 168.458613][ T8383] tipc: Disabling bearer [ 168.528485][ T8399] syz_tun: entered allmulticast mode [ 168.540496][ T8399] netlink: 4 bytes leftover after parsing attributes in process `syz.1.778'. [ 168.584017][ T8401] netlink: 16 bytes leftover after parsing attributes in process `syz.3.779'. [ 168.597018][ T8401] netlink: 36 bytes leftover after parsing attributes in process `syz.3.779'. [ 168.611579][ T8399] syz_tun (unregistering): left allmulticast mode [ 168.853928][ T8410] netlink: 4 bytes leftover after parsing attributes in process `syz.1.783'. [ 169.020881][ T8419] batadv2: entered promiscuous mode [ 169.029263][ T8419] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 169.190800][ T8425] FAULT_INJECTION: forcing a failure. [ 169.190800][ T8425] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.231260][ T8425] CPU: 0 UID: 0 PID: 8425 Comm: syz.3.788 Not tainted syzkaller #0 PREEMPT(full) [ 169.231289][ T8425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 169.231300][ T8425] Call Trace: [ 169.231308][ T8425] [ 169.231316][ T8425] dump_stack_lvl+0x189/0x250 [ 169.231349][ T8425] ? __pfx____ratelimit+0x10/0x10 [ 169.231377][ T8425] ? __pfx_dump_stack_lvl+0x10/0x10 [ 169.231403][ T8425] ? __pfx__printk+0x10/0x10 [ 169.231423][ T8425] ? __might_fault+0xb0/0x130 [ 169.231462][ T8425] should_fail_ex+0x414/0x560 [ 169.231497][ T8425] _copy_from_iter+0x1de/0x1790 [ 169.231527][ T8425] ? rcu_is_watching+0x15/0xb0 [ 169.231554][ T8425] ? kmalloc_reserve+0xbd/0x290 [ 169.231574][ T8425] ? __pfx__copy_from_iter+0x10/0x10 [ 169.231598][ T8425] ? __build_skb_around+0x262/0x3f0 [ 169.231622][ T8425] ? netlink_sendmsg+0x642/0xb30 [ 169.231641][ T8425] ? skb_put+0x11b/0x210 [ 169.231665][ T8425] netlink_sendmsg+0x6b2/0xb30 [ 169.231697][ T8425] ? __pfx_netlink_sendmsg+0x10/0x10 [ 169.231723][ T8425] ? aa_sock_msg_perm+0xf1/0x1d0 [ 169.231752][ T8425] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 169.231772][ T8425] ? __pfx_netlink_sendmsg+0x10/0x10 [ 169.231794][ T8425] __sock_sendmsg+0x21c/0x270 [ 169.231825][ T8425] ____sys_sendmsg+0x505/0x830 [ 169.231854][ T8425] ? __pfx_____sys_sendmsg+0x10/0x10 [ 169.231886][ T8425] ? import_iovec+0x74/0xa0 [ 169.231915][ T8425] ___sys_sendmsg+0x21f/0x2a0 [ 169.231939][ T8425] ? __pfx____sys_sendmsg+0x10/0x10 [ 169.232002][ T8425] ? __fget_files+0x2a/0x420 [ 169.232020][ T8425] ? __fget_files+0x3a0/0x420 [ 169.232051][ T8425] __x64_sys_sendmsg+0x19b/0x260 [ 169.232076][ T8425] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 169.232108][ T8425] ? __pfx_ksys_write+0x10/0x10 [ 169.232139][ T8425] ? do_syscall_64+0xbe/0xfa0 [ 169.232163][ T8425] do_syscall_64+0xfa/0xfa0 [ 169.232179][ T8425] ? lockdep_hardirqs_on+0x9c/0x150 [ 169.232199][ T8425] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.232218][ T8425] ? clear_bhb_loop+0x60/0xb0 [ 169.232251][ T8425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.232269][ T8425] RIP: 0033:0x7f5386f8f6c9 [ 169.232288][ T8425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.232304][ T8425] RSP: 002b:00007f5387e5c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 169.232326][ T8425] RAX: ffffffffffffffda RBX: 00007f53871e5fa0 RCX: 00007f5386f8f6c9 [ 169.232341][ T8425] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 169.232354][ T8425] RBP: 00007f5387e5c090 R08: 0000000000000000 R09: 0000000000000000 [ 169.232366][ T8425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.232377][ T8425] R13: 00007f53871e6038 R14: 00007f53871e5fa0 R15: 00007ffd15fd2c98 [ 169.232412][ T8425] [ 169.278013][ T8429] netlink: 72 bytes leftover after parsing attributes in process `syz.0.790'. [ 169.562258][ T8434] syzkaller0: entered promiscuous mode [ 169.569463][ T8434] syzkaller0: entered allmulticast mode [ 169.714569][ T8441] syz_tun: entered allmulticast mode [ 169.740248][ T8441] netlink: 4 bytes leftover after parsing attributes in process `syz.3.793'. [ 169.844693][ T8441] syz_tun (unregistering): left allmulticast mode [ 169.895437][ T8450] netlink: 'syz.4.794': attribute type 21 has an invalid length. [ 170.259145][ T8454] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 170.287347][ T8454] macvtap1: entered allmulticast mode [ 170.299102][ T8454] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 170.315101][ T8454] mac80211_hwsim hwsim7 wlan0: left allmulticast mode [ 170.338423][ T8454] mac80211_hwsim hwsim7 wlan0: left promiscuous mode [ 170.423375][ T8467] netlink: 8 bytes leftover after parsing attributes in process `syz.1.797'. [ 170.442319][ T8467] netlink: 8 bytes leftover after parsing attributes in process `syz.1.797'. [ 170.454324][ T8467] netlink: 8 bytes leftover after parsing attributes in process `syz.1.797'. [ 170.466518][ T8467] netlink: 8 bytes leftover after parsing attributes in process `syz.1.797'. [ 170.484185][ T8467] netlink: 8 bytes leftover after parsing attributes in process `syz.1.797'. [ 170.524465][ T8467] netlink: 8 bytes leftover after parsing attributes in process `syz.1.797'. [ 170.552672][ T8467] netlink: 8 bytes leftover after parsing attributes in process `syz.1.797'. [ 170.601377][ T8467] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 170.925532][ T8485] lo: entered allmulticast mode [ 171.107358][ T8485] lo: left allmulticast mode [ 171.489811][ T8493] netlink: 'syz.3.806': attribute type 30 has an invalid length. [ 171.556952][ T8493] bond2: option arp_missed_max: invalid value (0) [ 171.564250][ T8493] bond2: option arp_missed_max: allowed values 1 - 255 [ 171.583548][ T8493] bond2 (unregistering): Released all slaves [ 171.837321][ T8514] ip6_vti0 speed is unknown, defaulting to 1000 [ 171.882333][ T8522] netlink: 'syz.4.815': attribute type 1 has an invalid length. [ 173.579802][ T8570] netlink: 'syz.0.828': attribute type 30 has an invalid length. [ 173.652982][ T8570] bond2: option arp_missed_max: invalid value (0) [ 173.660625][ T8570] bond2: option arp_missed_max: allowed values 1 - 255 [ 173.676995][ T8570] bond2 (unregistering): Released all slaves [ 174.193771][ T8603] mac80211_hwsim hwsim11 wlan0: entered promiscuous mode [ 174.201579][ T8603] macvtap1: entered allmulticast mode [ 174.209346][ T8603] mac80211_hwsim hwsim11 wlan0: entered allmulticast mode [ 174.226227][ T8603] mac80211_hwsim hwsim11 wlan0: left allmulticast mode [ 174.234075][ T8603] mac80211_hwsim hwsim11 wlan0: left promiscuous mode [ 174.312021][ T5834] Bluetooth: hci4: command 0x0405 tx timeout [ 174.479176][ T8614] __nla_validate_parse: 16 callbacks suppressed [ 174.479201][ T8614] netlink: 1315 bytes leftover after parsing attributes in process `syz.2.842'. [ 174.517378][ T8614] netlink: 4 bytes leftover after parsing attributes in process `syz.2.842'. [ 174.764034][ T8632] netlink: 96 bytes leftover after parsing attributes in process `syz.4.849'. [ 174.782680][ T8632] sysfs: cannot create duplicate filename '/class/ieee80211/1ùàV!' [ 174.792225][ T8632] CPU: 1 UID: 0 PID: 8632 Comm: syz.4.849 Not tainted syzkaller #0 PREEMPT(full) [ 174.792253][ T8632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 174.792266][ T8632] Call Trace: [ 174.792274][ T8632] [ 174.792284][ T8632] dump_stack_lvl+0x189/0x250 [ 174.792322][ T8632] ? __pfx_dump_stack_lvl+0x10/0x10 [ 174.792351][ T8632] ? __pfx__printk+0x10/0x10 [ 174.792380][ T8632] ? kernfs_path_from_node+0x2f/0x290 [ 174.792406][ T8632] ? kernfs_path_from_node+0x250/0x290 [ 174.792427][ T8632] ? kernfs_path_from_node+0x2f/0x290 [ 174.792456][ T8632] sysfs_warn_dup+0x8e/0xa0 [ 174.792478][ T8632] sysfs_do_create_link_sd+0xc0/0x110 [ 174.792504][ T8632] device_add_class_symlinks+0x1cf/0x240 [ 174.792534][ T8632] device_add+0x475/0xb50 [ 174.792564][ T8632] wiphy_register+0x1d2e/0x2d20 [ 174.792617][ T8632] ? __pfx_wiphy_register+0x10/0x10 [ 174.792648][ T8632] ? __pfx_netdev_run_todo+0x10/0x10 [ 174.792674][ T8632] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 174.792709][ T8632] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 174.792739][ T8632] ieee80211_register_hw+0x3473/0x40d0 [ 174.792784][ T8632] ? ieee80211_register_hw+0x1491/0x40d0 [ 174.792823][ T8632] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 174.792844][ T8632] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 174.792879][ T8632] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 174.792907][ T8632] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 174.792946][ T8632] ? __hrtimer_setup+0x187/0x210 [ 174.792966][ T8632] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 174.792992][ T8632] mac80211_hwsim_new_radio+0x2f9a/0x5260 [ 174.793063][ T8632] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 174.793100][ T8632] ? trace_kmalloc+0x1f/0xd0 [ 174.793125][ T8632] ? __kmalloc_node_track_caller_noprof+0x587/0x800 [ 174.793154][ T8632] ? kstrndup+0xbf/0x160 [ 174.793191][ T8632] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 174.793220][ T8632] ? __pfx___nla_validate_parse+0x10/0x10 [ 174.793262][ T8632] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 174.793299][ T8632] ? rcu_is_watching+0x15/0xb0 [ 174.793328][ T8632] ? __nla_parse+0x40/0x60 [ 174.793355][ T8632] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 174.793396][ T8632] genl_family_rcv_msg_doit+0x215/0x300 [ 174.793434][ T8632] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 174.793474][ T8632] ? bpf_lsm_capable+0x9/0x20 [ 174.793494][ T8632] ? security_capable+0x7e/0x2e0 [ 174.793528][ T8632] genl_rcv_msg+0x60e/0x790 [ 174.793560][ T8632] ? __pfx_genl_rcv_msg+0x10/0x10 [ 174.793583][ T8632] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 174.793628][ T8632] netlink_rcv_skb+0x208/0x470 [ 174.793646][ T8632] ? __lock_acquire+0xab9/0xd20 [ 174.793666][ T8632] ? __pfx_genl_rcv_msg+0x10/0x10 [ 174.793693][ T8632] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 174.793740][ T8632] ? down_read+0x1ad/0x2e0 [ 174.793767][ T8632] genl_rcv+0x28/0x40 [ 174.793792][ T8632] netlink_unicast+0x82f/0x9e0 [ 174.793834][ T8632] ? __pfx_netlink_unicast+0x10/0x10 [ 174.793867][ T8632] ? netlink_sendmsg+0x642/0xb30 [ 174.793886][ T8632] ? skb_put+0x11b/0x210 [ 174.793912][ T8632] netlink_sendmsg+0x805/0xb30 [ 174.793948][ T8632] ? __pfx_netlink_sendmsg+0x10/0x10 [ 174.793974][ T8632] ? aa_sock_msg_perm+0xf1/0x1d0 [ 174.794005][ T8632] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 174.794023][ T8632] ? __pfx_netlink_sendmsg+0x10/0x10 [ 174.794045][ T8632] __sock_sendmsg+0x21c/0x270 [ 174.794077][ T8632] ____sys_sendmsg+0x505/0x830 [ 174.794119][ T8632] ? __pfx_____sys_sendmsg+0x10/0x10 [ 174.794155][ T8632] ? import_iovec+0x74/0xa0 [ 174.794186][ T8632] ___sys_sendmsg+0x21f/0x2a0 [ 174.794215][ T8632] ? __pfx____sys_sendmsg+0x10/0x10 [ 174.794288][ T8632] ? __fget_files+0x2a/0x420 [ 174.794307][ T8632] ? __fget_files+0x3a0/0x420 [ 174.794341][ T8632] __x64_sys_sendmsg+0x19b/0x260 [ 174.794368][ T8632] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 174.794432][ T8632] ? do_syscall_64+0xbe/0xfa0 [ 174.794459][ T8632] do_syscall_64+0xfa/0xfa0 [ 174.794477][ T8632] ? lockdep_hardirqs_on+0x9c/0x150 [ 174.794496][ T8632] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.794515][ T8632] ? clear_bhb_loop+0x60/0xb0 [ 174.794540][ T8632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.794560][ T8632] RIP: 0033:0x7f189bd8f6c9 [ 174.794579][ T8632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.794597][ T8632] RSP: 002b:00007f189cc95038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 174.794620][ T8632] RAX: ffffffffffffffda RBX: 00007f189bfe5fa0 RCX: 00007f189bd8f6c9 [ 174.794634][ T8632] RDX: 0000000004000010 RSI: 0000200000000100 RDI: 000000000000000a [ 174.794647][ T8632] RBP: 00007f189be11f91 R08: 0000000000000000 R09: 0000000000000000 [ 174.794660][ T8632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 174.794672][ T8632] R13: 00007f189bfe6038 R14: 00007f189bfe5fa0 R15: 00007fffa47faa28 [ 174.794711][ T8632] [ 175.539203][ T8639] netlink: 20 bytes leftover after parsing attributes in process `syz.0.848'. [ 175.637178][ T8638] SET target dimension over the limit! [ 175.732493][ T8641] : entered promiscuous mode [ 176.001943][ T8653] tc_dump_action: action bad kind [ 176.203371][ T8662] syzkaller1: entered promiscuous mode [ 176.209178][ T8662] syzkaller1: entered allmulticast mode [ 176.404157][ T5834] Bluetooth: hci4: command 0x0405 tx timeout [ 176.840166][ T8667] netlink: 'syz.2.860': attribute type 30 has an invalid length. [ 176.887519][ T8667] bond4: option arp_missed_max: invalid value (0) [ 176.894660][ T8667] bond4: option arp_missed_max: allowed values 1 - 255 [ 176.914353][ T8667] bond4 (unregistering): Released all slaves [ 176.975615][ T8687] netlink: 244 bytes leftover after parsing attributes in process `syz.1.868'. [ 177.580232][ T8712] netlink: 220 bytes leftover after parsing attributes in process `syz.4.876'. [ 177.918521][ T8705] netlink: 'syz.3.871': attribute type 30 has an invalid length. [ 177.980001][ T8705] bond2: option arp_missed_max: invalid value (0) [ 177.986899][ T8705] bond2: option arp_missed_max: allowed values 1 - 255 [ 178.002509][ T8705] bond2 (unregistering): Released all slaves [ 178.125759][ T8728] pim6reg1: entered promiscuous mode [ 178.174457][ T8728] pim6reg1: entered allmulticast mode [ 178.526820][ T8739] netlink: 34 bytes leftover after parsing attributes in process `syz.3.884'. [ 178.857562][ T8749] xt_CT: You must specify a L4 protocol and not use inversions on it [ 179.182253][ T8764] netlink: 8 bytes leftover after parsing attributes in process `syz.2.894'. [ 179.215825][ T8762] netlink: 8 bytes leftover after parsing attributes in process `syz.2.894'. [ 179.392932][ T8778] syzkaller1: entered promiscuous mode [ 179.404778][ T8778] syzkaller1: entered allmulticast mode [ 179.678193][ T8769] netlink: 'syz.1.893': attribute type 30 has an invalid length. [ 179.734935][ T8769] bond3: option arp_missed_max: invalid value (0) [ 179.742144][ T8769] bond3: option arp_missed_max: allowed values 1 - 255 [ 179.750412][ T8785] netlink: 32 bytes leftover after parsing attributes in process `syz.2.900'. [ 179.773155][ T8785] netlink: 8 bytes leftover after parsing attributes in process `syz.2.900'. [ 179.777570][ T8769] bond3 (unregistering): Released all slaves [ 180.009505][ T8795] netlink: 96 bytes leftover after parsing attributes in process `syz.0.903'. [ 180.058347][ T8795] sysfs: cannot create duplicate filename '/class/ieee80211/1ùàV!' [ 180.077740][ T8795] CPU: 1 UID: 0 PID: 8795 Comm: syz.0.903 Not tainted syzkaller #0 PREEMPT(full) [ 180.077776][ T8795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 180.077798][ T8795] Call Trace: [ 180.077807][ T8795] [ 180.077816][ T8795] dump_stack_lvl+0x189/0x250 [ 180.077855][ T8795] ? __pfx_dump_stack_lvl+0x10/0x10 [ 180.077884][ T8795] ? __pfx__printk+0x10/0x10 [ 180.077913][ T8795] ? kernfs_path_from_node+0x2f/0x290 [ 180.077935][ T8795] ? kernfs_path_from_node+0x250/0x290 [ 180.077957][ T8795] ? kernfs_path_from_node+0x2f/0x290 [ 180.077987][ T8795] sysfs_warn_dup+0x8e/0xa0 [ 180.078012][ T8795] sysfs_do_create_link_sd+0xc0/0x110 [ 180.078040][ T8795] device_add_class_symlinks+0x1cf/0x240 [ 180.078070][ T8795] device_add+0x475/0xb50 [ 180.078099][ T8795] wiphy_register+0x1d2e/0x2d20 [ 180.078153][ T8795] ? __pfx_wiphy_register+0x10/0x10 [ 180.078183][ T8795] ? __pfx_netdev_run_todo+0x10/0x10 [ 180.078208][ T8795] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 180.078243][ T8795] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 180.078272][ T8795] ieee80211_register_hw+0x3473/0x40d0 [ 180.078325][ T8795] ? ieee80211_register_hw+0x1491/0x40d0 [ 180.078360][ T8795] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 180.078384][ T8795] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 180.078418][ T8795] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 180.078444][ T8795] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 180.078480][ T8795] ? __hrtimer_setup+0x187/0x210 [ 180.078498][ T8795] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 180.078524][ T8795] mac80211_hwsim_new_radio+0x2f9a/0x5260 [ 180.078590][ T8795] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 180.078616][ T8795] ? trace_kmalloc+0x1f/0xd0 [ 180.078639][ T8795] ? __kmalloc_node_track_caller_noprof+0x587/0x800 [ 180.078669][ T8795] ? kstrndup+0xbf/0x160 [ 180.078704][ T8795] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 180.078732][ T8795] ? __pfx___nla_validate_parse+0x10/0x10 [ 180.078774][ T8795] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 180.078823][ T8795] ? rcu_is_watching+0x15/0xb0 [ 180.078852][ T8795] ? __nla_parse+0x40/0x60 [ 180.078877][ T8795] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 180.078912][ T8795] genl_family_rcv_msg_doit+0x215/0x300 [ 180.078945][ T8795] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 180.078986][ T8795] ? bpf_lsm_capable+0x9/0x20 [ 180.079008][ T8795] ? security_capable+0x7e/0x2e0 [ 180.079041][ T8795] genl_rcv_msg+0x60e/0x790 [ 180.079077][ T8795] ? __pfx_genl_rcv_msg+0x10/0x10 [ 180.079100][ T8795] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 180.079150][ T8795] netlink_rcv_skb+0x208/0x470 [ 180.079169][ T8795] ? __lock_acquire+0xab9/0xd20 [ 180.079190][ T8795] ? __pfx_genl_rcv_msg+0x10/0x10 [ 180.079218][ T8795] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 180.079261][ T8795] ? down_read+0x1ad/0x2e0 [ 180.079287][ T8795] genl_rcv+0x28/0x40 [ 180.079311][ T8795] netlink_unicast+0x82f/0x9e0 [ 180.079351][ T8795] ? __pfx_netlink_unicast+0x10/0x10 [ 180.079381][ T8795] ? netlink_sendmsg+0x642/0xb30 [ 180.079399][ T8795] ? skb_put+0x11b/0x210 [ 180.079424][ T8795] netlink_sendmsg+0x805/0xb30 [ 180.079458][ T8795] ? __pfx_netlink_sendmsg+0x10/0x10 [ 180.079485][ T8795] ? aa_sock_msg_perm+0xf1/0x1d0 [ 180.079515][ T8795] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 180.079533][ T8795] ? __pfx_netlink_sendmsg+0x10/0x10 [ 180.079556][ T8795] __sock_sendmsg+0x21c/0x270 [ 180.079588][ T8795] ____sys_sendmsg+0x505/0x830 [ 180.079618][ T8795] ? __pfx_____sys_sendmsg+0x10/0x10 [ 180.079652][ T8795] ? import_iovec+0x74/0xa0 [ 180.079681][ T8795] ___sys_sendmsg+0x21f/0x2a0 [ 180.079707][ T8795] ? __pfx____sys_sendmsg+0x10/0x10 [ 180.079774][ T8795] ? __fget_files+0x2a/0x420 [ 180.079807][ T8795] ? __fget_files+0x3a0/0x420 [ 180.079837][ T8795] __x64_sys_sendmsg+0x19b/0x260 [ 180.079864][ T8795] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 180.079906][ T8795] ? do_syscall_64+0xbe/0xfa0 [ 180.079931][ T8795] do_syscall_64+0xfa/0xfa0 [ 180.079948][ T8795] ? lockdep_hardirqs_on+0x9c/0x150 [ 180.079967][ T8795] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.079987][ T8795] ? clear_bhb_loop+0x60/0xb0 [ 180.080011][ T8795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.080030][ T8795] RIP: 0033:0x7f83fe58f6c9 [ 180.080049][ T8795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.080066][ T8795] RSP: 002b:00007f83ff433038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 180.080089][ T8795] RAX: ffffffffffffffda RBX: 00007f83fe7e5fa0 RCX: 00007f83fe58f6c9 [ 180.080102][ T8795] RDX: 0000000004000010 RSI: 0000200000000100 RDI: 000000000000000b [ 180.080115][ T8795] RBP: 00007f83fe611f91 R08: 0000000000000000 R09: 0000000000000000 [ 180.080128][ T8795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 180.080140][ T8795] R13: 00007f83fe7e6038 R14: 00007f83fe7e5fa0 R15: 00007ffc1d57c8b8 [ 180.080177][ T8795] [ 180.458822][ T8804] netlink: 88 bytes leftover after parsing attributes in process `syz.3.908'. [ 180.970718][ T8814] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.910'. [ 181.261873][ T8828] netlink: 96 bytes leftover after parsing attributes in process `syz.3.917'. [ 181.294368][ T8828] sysfs: cannot create duplicate filename '/class/ieee80211/1ùàV!' [ 181.306567][ T8828] CPU: 1 UID: 0 PID: 8828 Comm: syz.3.917 Not tainted syzkaller #0 PREEMPT(full) [ 181.306597][ T8828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 181.306609][ T8828] Call Trace: [ 181.306618][ T8828] [ 181.306627][ T8828] dump_stack_lvl+0x189/0x250 [ 181.306667][ T8828] ? __pfx_dump_stack_lvl+0x10/0x10 [ 181.306697][ T8828] ? __pfx__printk+0x10/0x10 [ 181.306727][ T8828] ? kernfs_path_from_node+0x2f/0x290 [ 181.306753][ T8828] ? kernfs_path_from_node+0x250/0x290 [ 181.306776][ T8828] ? kernfs_path_from_node+0x2f/0x290 [ 181.306808][ T8828] sysfs_warn_dup+0x8e/0xa0 [ 181.306832][ T8828] sysfs_do_create_link_sd+0xc0/0x110 [ 181.306861][ T8828] device_add_class_symlinks+0x1cf/0x240 [ 181.306892][ T8828] device_add+0x475/0xb50 [ 181.306923][ T8828] wiphy_register+0x1d2e/0x2d20 [ 181.306978][ T8828] ? __pfx_wiphy_register+0x10/0x10 [ 181.307009][ T8828] ? __pfx_netdev_run_todo+0x10/0x10 [ 181.307036][ T8828] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 181.307081][ T8828] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 181.307113][ T8828] ieee80211_register_hw+0x3473/0x40d0 [ 181.307160][ T8828] ? ieee80211_register_hw+0x1491/0x40d0 [ 181.307200][ T8828] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 181.307224][ T8828] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 181.307261][ T8828] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 181.307290][ T8828] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 181.307332][ T8828] ? __hrtimer_setup+0x187/0x210 [ 181.307354][ T8828] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 181.307381][ T8828] mac80211_hwsim_new_radio+0x2f9a/0x5260 [ 181.307456][ T8828] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 181.307485][ T8828] ? trace_kmalloc+0x1f/0xd0 [ 181.307510][ T8828] ? __kmalloc_node_track_caller_noprof+0x587/0x800 [ 181.307541][ T8828] ? kstrndup+0xbf/0x160 [ 181.307578][ T8828] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 181.307616][ T8828] ? __pfx___nla_validate_parse+0x10/0x10 [ 181.307659][ T8828] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 181.307702][ T8828] ? rcu_is_watching+0x15/0xb0 [ 181.307732][ T8828] ? __nla_parse+0x40/0x60 [ 181.307761][ T8828] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 181.307801][ T8828] genl_family_rcv_msg_doit+0x215/0x300 [ 181.307838][ T8828] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 181.307885][ T8828] ? bpf_lsm_capable+0x9/0x20 [ 181.307908][ T8828] ? security_capable+0x7e/0x2e0 [ 181.307954][ T8828] genl_rcv_msg+0x60e/0x790 [ 181.308006][ T8828] ? __pfx_genl_rcv_msg+0x10/0x10 [ 181.308034][ T8828] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 181.308076][ T8828] ? __asan_memcpy+0x40/0x70 [ 181.308104][ T8828] ? __pfx_ref_tracker_free+0x10/0x10 [ 181.308136][ T8828] netlink_rcv_skb+0x208/0x470 [ 181.308156][ T8828] ? __lock_acquire+0xab9/0xd20 [ 181.308178][ T8828] ? __pfx_genl_rcv_msg+0x10/0x10 [ 181.308208][ T8828] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 181.308258][ T8828] ? down_read+0x1ad/0x2e0 [ 181.308285][ T8828] genl_rcv+0x28/0x40 [ 181.308309][ T8828] netlink_unicast+0x82f/0x9e0 [ 181.308355][ T8828] ? __pfx_netlink_unicast+0x10/0x10 [ 181.308390][ T8828] ? netlink_sendmsg+0x642/0xb30 [ 181.308409][ T8828] ? skb_put+0x11b/0x210 [ 181.308437][ T8828] netlink_sendmsg+0x805/0xb30 [ 181.308484][ T8828] ? __pfx_netlink_sendmsg+0x10/0x10 [ 181.308512][ T8828] ? aa_sock_msg_perm+0xf1/0x1d0 [ 181.308545][ T8828] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 181.308565][ T8828] ? __pfx_netlink_sendmsg+0x10/0x10 [ 181.308589][ T8828] __sock_sendmsg+0x21c/0x270 [ 181.308624][ T8828] ____sys_sendmsg+0x505/0x830 [ 181.308655][ T8828] ? __pfx_____sys_sendmsg+0x10/0x10 [ 181.308689][ T8828] ? import_iovec+0x74/0xa0 [ 181.308721][ T8828] ___sys_sendmsg+0x21f/0x2a0 [ 181.308748][ T8828] ? __pfx____sys_sendmsg+0x10/0x10 [ 181.308823][ T8828] ? __fget_files+0x2a/0x420 [ 181.308842][ T8828] ? __fget_files+0x3a0/0x420 [ 181.308877][ T8828] __x64_sys_sendmsg+0x19b/0x260 [ 181.308905][ T8828] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 181.308954][ T8828] ? do_syscall_64+0xbe/0xfa0 [ 181.308979][ T8828] do_syscall_64+0xfa/0xfa0 [ 181.308997][ T8828] ? lockdep_hardirqs_on+0x9c/0x150 [ 181.309016][ T8828] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.309036][ T8828] ? clear_bhb_loop+0x60/0xb0 [ 181.309070][ T8828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.309090][ T8828] RIP: 0033:0x7f5386f8f6c9 [ 181.309116][ T8828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.309135][ T8828] RSP: 002b:00007f5387e5c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 181.309159][ T8828] RAX: ffffffffffffffda RBX: 00007f53871e5fa0 RCX: 00007f5386f8f6c9 [ 181.309173][ T8828] RDX: 0000000004000010 RSI: 0000200000000100 RDI: 000000000000000b [ 181.309187][ T8828] RBP: 00007f5387011f91 R08: 0000000000000000 R09: 0000000000000000 [ 181.309200][ T8828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 181.309212][ T8828] R13: 00007f53871e6038 R14: 00007f53871e5fa0 R15: 00007ffd15fd2c98 [ 181.309253][ T8828] [ 181.936575][ T8843] netlink: 'syz.4.923': attribute type 1 has an invalid length. [ 181.966290][ T8843] netlink: 224 bytes leftover after parsing attributes in process `syz.4.923'. [ 182.263359][ T8842] pim6reg1: entered promiscuous mode [ 182.274466][ T8844] netlink: 'syz.1.919': attribute type 30 has an invalid length. [ 182.321079][ T8842] pim6reg1: entered allmulticast mode [ 182.389531][ T8844] bond3: option arp_missed_max: invalid value (0) [ 182.398231][ T8844] bond3: option arp_missed_max: allowed values 1 - 255 [ 182.438215][ T8844] bond3 (unregistering): Released all slaves [ 182.615938][ T8866] tipc: Enabling of bearer rejected, failed to enable media [ 182.740862][ T8870] netlink: 332 bytes leftover after parsing attributes in process `syz.2.932'. [ 182.821400][ T8870] netlink: 'syz.2.932': attribute type 9 has an invalid length. [ 182.829117][ T8870] netlink: 108 bytes leftover after parsing attributes in process `syz.2.932'. [ 182.843394][ T8839] delete_channel: no stack [ 182.849661][ T8842] syz.0.922 (8842) used greatest stack depth: 17976 bytes left [ 182.893106][ T8870] netlink: 32 bytes leftover after parsing attributes in process `syz.2.932'. [ 182.909677][ T8845] syz.0.922 (8845) used greatest stack depth: 17832 bytes left [ 183.035224][ T8879] sysfs: cannot create duplicate filename '/class/ieee80211/1ùàV!' [ 183.051251][ T8879] CPU: 1 UID: 0 PID: 8879 Comm: syz.1.934 Not tainted syzkaller #0 PREEMPT(full) [ 183.051282][ T8879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 183.051294][ T8879] Call Trace: [ 183.051304][ T8879] [ 183.051313][ T8879] dump_stack_lvl+0x189/0x250 [ 183.051351][ T8879] ? __pfx_dump_stack_lvl+0x10/0x10 [ 183.051378][ T8879] ? __pfx__printk+0x10/0x10 [ 183.051407][ T8879] ? kernfs_path_from_node+0x2f/0x290 [ 183.051432][ T8879] ? kernfs_path_from_node+0x250/0x290 [ 183.051455][ T8879] ? kernfs_path_from_node+0x2f/0x290 [ 183.051485][ T8879] sysfs_warn_dup+0x8e/0xa0 [ 183.051509][ T8879] sysfs_do_create_link_sd+0xc0/0x110 [ 183.051537][ T8879] device_add_class_symlinks+0x1cf/0x240 [ 183.051567][ T8879] device_add+0x475/0xb50 [ 183.051596][ T8879] wiphy_register+0x1d2e/0x2d20 [ 183.051651][ T8879] ? __pfx_wiphy_register+0x10/0x10 [ 183.051681][ T8879] ? __pfx_netdev_run_todo+0x10/0x10 [ 183.051706][ T8879] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 183.051739][ T8879] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 183.051771][ T8879] ieee80211_register_hw+0x3473/0x40d0 [ 183.051814][ T8879] ? ieee80211_register_hw+0x1491/0x40d0 [ 183.051851][ T8879] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 183.051874][ T8879] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 183.051907][ T8879] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 183.051935][ T8879] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 183.051973][ T8879] ? __hrtimer_setup+0x187/0x210 [ 183.051994][ T8879] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 183.052021][ T8879] mac80211_hwsim_new_radio+0x2f9a/0x5260 [ 183.052100][ T8879] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 183.052130][ T8879] ? trace_kmalloc+0x1f/0xd0 [ 183.052156][ T8879] ? __kmalloc_node_track_caller_noprof+0x587/0x800 [ 183.052187][ T8879] ? kstrndup+0xbf/0x160 [ 183.052222][ T8879] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 183.052252][ T8879] ? __pfx___nla_validate_parse+0x10/0x10 [ 183.052295][ T8879] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 183.052335][ T8879] ? rcu_is_watching+0x15/0xb0 [ 183.052364][ T8879] ? __nla_parse+0x40/0x60 [ 183.052392][ T8879] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 183.052432][ T8879] genl_family_rcv_msg_doit+0x215/0x300 [ 183.052470][ T8879] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 183.052516][ T8879] ? bpf_lsm_capable+0x9/0x20 [ 183.052540][ T8879] ? security_capable+0x7e/0x2e0 [ 183.052576][ T8879] genl_rcv_msg+0x60e/0x790 [ 183.052613][ T8879] ? __pfx_genl_rcv_msg+0x10/0x10 [ 183.052640][ T8879] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 183.052691][ T8879] netlink_rcv_skb+0x208/0x470 [ 183.052711][ T8879] ? __lock_acquire+0xab9/0xd20 [ 183.052733][ T8879] ? __pfx_genl_rcv_msg+0x10/0x10 [ 183.052761][ T8879] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 183.052808][ T8879] ? down_read+0x1ad/0x2e0 [ 183.052835][ T8879] genl_rcv+0x28/0x40 [ 183.052859][ T8879] netlink_unicast+0x82f/0x9e0 [ 183.052903][ T8879] ? __pfx_netlink_unicast+0x10/0x10 [ 183.052936][ T8879] ? netlink_sendmsg+0x642/0xb30 [ 183.052955][ T8879] ? skb_put+0x11b/0x210 [ 183.052980][ T8879] netlink_sendmsg+0x805/0xb30 [ 183.053014][ T8879] ? __pfx_netlink_sendmsg+0x10/0x10 [ 183.053040][ T8879] ? aa_sock_msg_perm+0xf1/0x1d0 [ 183.053092][ T8879] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 183.053112][ T8879] ? __pfx_netlink_sendmsg+0x10/0x10 [ 183.053136][ T8879] __sock_sendmsg+0x21c/0x270 [ 183.053169][ T8879] ____sys_sendmsg+0x505/0x830 [ 183.053203][ T8879] ? __pfx_____sys_sendmsg+0x10/0x10 [ 183.053240][ T8879] ? import_iovec+0x74/0xa0 [ 183.053271][ T8879] ___sys_sendmsg+0x21f/0x2a0 [ 183.053298][ T8879] ? __pfx____sys_sendmsg+0x10/0x10 [ 183.053371][ T8879] ? __fget_files+0x2a/0x420 [ 183.053390][ T8879] ? __fget_files+0x3a0/0x420 [ 183.053424][ T8879] __x64_sys_sendmsg+0x19b/0x260 [ 183.053452][ T8879] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 183.053498][ T8879] ? do_syscall_64+0xbe/0xfa0 [ 183.053525][ T8879] do_syscall_64+0xfa/0xfa0 [ 183.053540][ T8879] ? lockdep_hardirqs_on+0x9c/0x150 [ 183.053559][ T8879] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.053579][ T8879] ? clear_bhb_loop+0x60/0xb0 [ 183.053605][ T8879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.053625][ T8879] RIP: 0033:0x7f754038f6c9 [ 183.053645][ T8879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.053663][ T8879] RSP: 002b:00007f75412d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 183.053686][ T8879] RAX: ffffffffffffffda RBX: 00007f75405e5fa0 RCX: 00007f754038f6c9 [ 183.053701][ T8879] RDX: 0000000004000010 RSI: 0000200000000100 RDI: 000000000000000b [ 183.053715][ T8879] RBP: 00007f7540411f91 R08: 0000000000000000 R09: 0000000000000000 [ 183.053727][ T8879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 183.053739][ T8879] R13: 00007f75405e6038 R14: 00007f75405e5fa0 R15: 00007ffd2c2e9a98 [ 183.053778][ T8879] [ 183.706510][ T8888] sysfs: cannot create duplicate filename '/class/ieee80211/1ùàV!' [ 183.731535][ T8888] CPU: 0 UID: 0 PID: 8888 Comm: syz.4.937 Not tainted syzkaller #0 PREEMPT(full) [ 183.731566][ T8888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 183.731578][ T8888] Call Trace: [ 183.731587][ T8888] [ 183.731603][ T8888] dump_stack_lvl+0x189/0x250 [ 183.731644][ T8888] ? __pfx_dump_stack_lvl+0x10/0x10 [ 183.731672][ T8888] ? __pfx__printk+0x10/0x10 [ 183.731701][ T8888] ? kernfs_path_from_node+0x2f/0x290 [ 183.731727][ T8888] ? kernfs_path_from_node+0x250/0x290 [ 183.731750][ T8888] ? kernfs_path_from_node+0x2f/0x290 [ 183.731779][ T8888] sysfs_warn_dup+0x8e/0xa0 [ 183.731805][ T8888] sysfs_do_create_link_sd+0xc0/0x110 [ 183.731835][ T8888] device_add_class_symlinks+0x1cf/0x240 [ 183.731867][ T8888] device_add+0x475/0xb50 [ 183.731898][ T8888] wiphy_register+0x1d2e/0x2d20 [ 183.731950][ T8888] ? __pfx_wiphy_register+0x10/0x10 [ 183.731976][ T8888] ? __pfx_netdev_run_todo+0x10/0x10 [ 183.732002][ T8888] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 183.732048][ T8888] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 183.732101][ T8888] ieee80211_register_hw+0x3473/0x40d0 [ 183.732148][ T8888] ? ieee80211_register_hw+0x1491/0x40d0 [ 183.732188][ T8888] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 183.732211][ T8888] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 183.732249][ T8888] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 183.732278][ T8888] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 183.732318][ T8888] ? __hrtimer_setup+0x187/0x210 [ 183.732339][ T8888] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 183.732367][ T8888] mac80211_hwsim_new_radio+0x2f9a/0x5260 [ 183.732441][ T8888] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 183.732471][ T8888] ? trace_kmalloc+0x1f/0xd0 [ 183.732496][ T8888] ? __kmalloc_node_track_caller_noprof+0x587/0x800 [ 183.732528][ T8888] ? kstrndup+0xbf/0x160 [ 183.732563][ T8888] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 183.732592][ T8888] ? __pfx___nla_validate_parse+0x10/0x10 [ 183.732635][ T8888] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 183.732675][ T8888] ? rcu_is_watching+0x15/0xb0 [ 183.732704][ T8888] ? __nla_parse+0x40/0x60 [ 183.732731][ T8888] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 183.732770][ T8888] genl_family_rcv_msg_doit+0x215/0x300 [ 183.732808][ T8888] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 183.732853][ T8888] ? bpf_lsm_capable+0x9/0x20 [ 183.732875][ T8888] ? security_capable+0x7e/0x2e0 [ 183.732907][ T8888] genl_rcv_msg+0x60e/0x790 [ 183.732940][ T8888] ? __pfx_genl_rcv_msg+0x10/0x10 [ 183.732966][ T8888] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 183.733023][ T8888] netlink_rcv_skb+0x208/0x470 [ 183.733043][ T8888] ? __lock_acquire+0xab9/0xd20 [ 183.733064][ T8888] ? __pfx_genl_rcv_msg+0x10/0x10 [ 183.733105][ T8888] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 183.733162][ T8888] ? down_read+0x1ad/0x2e0 [ 183.733189][ T8888] genl_rcv+0x28/0x40 [ 183.733214][ T8888] netlink_unicast+0x82f/0x9e0 [ 183.733259][ T8888] ? __pfx_netlink_unicast+0x10/0x10 [ 183.733293][ T8888] ? netlink_sendmsg+0x642/0xb30 [ 183.733312][ T8888] ? skb_put+0x11b/0x210 [ 183.733340][ T8888] netlink_sendmsg+0x805/0xb30 [ 183.733374][ T8888] ? __pfx_netlink_sendmsg+0x10/0x10 [ 183.733401][ T8888] ? aa_sock_msg_perm+0xf1/0x1d0 [ 183.733433][ T8888] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 183.733453][ T8888] ? __pfx_netlink_sendmsg+0x10/0x10 [ 183.733474][ T8888] __sock_sendmsg+0x21c/0x270 [ 183.733507][ T8888] ____sys_sendmsg+0x505/0x830 [ 183.733539][ T8888] ? __pfx_____sys_sendmsg+0x10/0x10 [ 183.733574][ T8888] ? import_iovec+0x74/0xa0 [ 183.733606][ T8888] ___sys_sendmsg+0x21f/0x2a0 [ 183.733633][ T8888] ? __pfx____sys_sendmsg+0x10/0x10 [ 183.733718][ T8888] ? __fget_files+0x2a/0x420 [ 183.733736][ T8888] ? __fget_files+0x3a0/0x420 [ 183.733777][ T8888] __x64_sys_sendmsg+0x19b/0x260 [ 183.733802][ T8888] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 183.733845][ T8888] ? do_syscall_64+0xbe/0xfa0 [ 183.733870][ T8888] do_syscall_64+0xfa/0xfa0 [ 183.733889][ T8888] ? lockdep_hardirqs_on+0x9c/0x150 [ 183.733909][ T8888] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.733929][ T8888] ? clear_bhb_loop+0x60/0xb0 [ 183.733954][ T8888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.733974][ T8888] RIP: 0033:0x7f189bd8f6c9 [ 183.733995][ T8888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.734019][ T8888] RSP: 002b:00007f189cc95038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 183.734043][ T8888] RAX: ffffffffffffffda RBX: 00007f189bfe5fa0 RCX: 00007f189bd8f6c9 [ 183.734058][ T8888] RDX: 0000000004000010 RSI: 0000200000000100 RDI: 000000000000000c [ 183.734072][ T8888] RBP: 00007f189be11f91 R08: 0000000000000000 R09: 0000000000000000 [ 183.734084][ T8888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 183.734096][ T8888] R13: 00007f189bfe6038 R14: 00007f189bfe5fa0 R15: 00007fffa47faa28 [ 183.734136][ T8888] [ 184.225967][ T8890] tipc: New replicast peer: 255.255.255.255 [ 184.233050][ T8890] tipc: Enabled bearer , priority 10 [ 184.352726][ T8890] netlink: 'syz.1.939': attribute type 11 has an invalid length. [ 184.369228][ T8901] bridge_slave_0: left allmulticast mode [ 184.376705][ T8901] bridge_slave_0: left promiscuous mode [ 184.383914][ T8901] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.392411][ T8890] netlink: 'syz.1.939': attribute type 11 has an invalid length. [ 184.429325][ T8901] bridge_slave_1: left allmulticast mode [ 184.455496][ T8901] bridge_slave_1: left promiscuous mode [ 184.478264][ T8901] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.563795][ T8901] bond0: (slave bond_slave_0): Releasing backup interface [ 184.594183][ T8901] bond0: (slave bond_slave_1): Releasing backup interface [ 184.625758][ T8901] team0: Port device team_slave_0 removed [ 184.656755][ T8901] team0: Port device team_slave_1 removed [ 184.664436][ T8901] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.684417][ T8901] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.694244][ T8901] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 184.906006][ T8920] netlink: 'syz.1.949': attribute type 3 has an invalid length. [ 184.947386][ T8920] netlink: 'syz.1.949': attribute type 1 has an invalid length. [ 184.974329][ T8921] __nla_validate_parse: 5 callbacks suppressed [ 184.974350][ T8921] netlink: 32 bytes leftover after parsing attributes in process `syz.1.949'. [ 184.983051][ T8920] netlink: 224 bytes leftover after parsing attributes in process `syz.1.949'. [ 185.094473][ T8928] netlink: 144 bytes leftover after parsing attributes in process `syz.3.951'. [ 185.146764][ T8915] netlink: 'syz.2.944': attribute type 30 has an invalid length. [ 185.152173][ T8928] netlink: 44 bytes leftover after parsing attributes in process `syz.3.951'. [ 185.238118][ T8915] bond4: option arp_missed_max: invalid value (0) [ 185.245120][ T8915] bond4: option arp_missed_max: allowed values 1 - 255 [ 185.266071][ T8915] bond4 (unregistering): Released all slaves [ 185.351685][ T5867] tipc: Node number set to 4127558492 [ 185.776645][ T8941] ip6_vti0 speed is unknown, defaulting to 1000 [ 186.611339][ T8965] IPVS: Scheduler module ip_vs_ not found [ 187.158654][ T8982] bond4: option fail_over_mac: invalid value (127) [ 187.190319][ T8982] bond4 (unregistering): Released all slaves [ 187.805357][ T9004] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 187.895293][ T8992] netlink: 'syz.0.969': attribute type 30 has an invalid length. [ 187.934571][ T8992] bond2: option arp_missed_max: invalid value (0) [ 187.941252][ T8992] bond2: option arp_missed_max: allowed values 1 - 255 [ 187.987232][ T8992] bond2 (unregistering): Released all slaves [ 188.024582][ T9011] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 194.156109][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.314007][ T9025] tipc: New replicast peer: 255.255.255.255 [ 200.321077][ T9025] tipc: Enabled bearer , priority 10 [ 200.358132][ T9025] netlink: 64 bytes leftover after parsing attributes in process `syz.3.982'. [ 200.396981][ T9025] netlink: 'syz.3.982': attribute type 11 has an invalid length. [ 200.418495][ T9025] netlink: 'syz.3.982': attribute type 11 has an invalid length. [ 200.446517][ T9025] netlink: 224 bytes leftover after parsing attributes in process `syz.3.982'. [ 200.509530][ T9026] ip6_vti0 speed is unknown, defaulting to 1000 [ 200.635815][ T9038] bridge0: entered promiscuous mode [ 200.677031][ T9038] bridge0: port 1(macvtap1) entered blocking state [ 200.776384][ T9038] bridge0: port 1(macvtap1) entered disabled state [ 200.804444][ T9038] macvtap1: entered allmulticast mode [ 200.824436][ T9038] bridge0: entered allmulticast mode [ 200.843390][ T9038] macvtap1: left allmulticast mode [ 200.861305][ T9038] bridge0: left allmulticast mode [ 200.893061][ T9038] bridge0: left promiscuous mode [ 201.058205][ T9037] netlink: 'syz.2.985': attribute type 30 has an invalid length. [ 201.165055][ T9047] TCP: TCP_TX_DELAY enabled [ 201.165147][ T9037] bond4: option arp_missed_max: invalid value (0) [ 201.176647][ T9037] bond4: option arp_missed_max: allowed values 1 - 255 [ 201.215514][ T9037] bond4 (unregistering): Released all slaves [ 201.354774][ T5827] Bluetooth: hci0: command 0x0406 tx timeout [ 201.359420][ T5836] Bluetooth: hci3: command 0x0406 tx timeout [ 201.361676][ T5827] Bluetooth: hci1: command 0x0406 tx timeout [ 201.367213][ T5836] Bluetooth: hci2: command 0x0406 tx timeout [ 201.432098][ T24] tipc: Node number set to 3869940539 [ 201.770945][ T9064] netlink: 220 bytes leftover after parsing attributes in process `syz.1.997'. [ 201.788402][ T9065] netlink: 96 bytes leftover after parsing attributes in process `syz.4.995'. [ 201.853769][ T9065] sysfs: cannot create duplicate filename '/class/ieee80211/1ùàV!' [ 201.892309][ T9065] CPU: 0 UID: 0 PID: 9065 Comm: syz.4.995 Not tainted syzkaller #0 PREEMPT(full) [ 201.892340][ T9065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 201.892352][ T9065] Call Trace: [ 201.892360][ T9065] [ 201.892370][ T9065] dump_stack_lvl+0x189/0x250 [ 201.892409][ T9065] ? __pfx_dump_stack_lvl+0x10/0x10 [ 201.892439][ T9065] ? __pfx__printk+0x10/0x10 [ 201.892469][ T9065] ? kernfs_path_from_node+0x2f/0x290 [ 201.892494][ T9065] ? kernfs_path_from_node+0x250/0x290 [ 201.892517][ T9065] ? kernfs_path_from_node+0x2f/0x290 [ 201.892545][ T9065] sysfs_warn_dup+0x8e/0xa0 [ 201.892568][ T9065] sysfs_do_create_link_sd+0xc0/0x110 [ 201.892593][ T9065] device_add_class_symlinks+0x1cf/0x240 [ 201.892622][ T9065] device_add+0x475/0xb50 [ 201.892653][ T9065] wiphy_register+0x1d2e/0x2d20 [ 201.892706][ T9065] ? __pfx_wiphy_register+0x10/0x10 [ 201.892735][ T9065] ? __pfx_netdev_run_todo+0x10/0x10 [ 201.892758][ T9065] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 201.892792][ T9065] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 201.892818][ T9065] ieee80211_register_hw+0x3473/0x40d0 [ 201.892871][ T9065] ? ieee80211_register_hw+0x1491/0x40d0 [ 201.892910][ T9065] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 201.892932][ T9065] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 201.892962][ T9065] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 201.892987][ T9065] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 201.893024][ T9065] ? __hrtimer_setup+0x187/0x210 [ 201.893044][ T9065] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 201.893070][ T9065] mac80211_hwsim_new_radio+0x2f9a/0x5260 [ 201.893138][ T9065] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 201.893166][ T9065] ? trace_kmalloc+0x1f/0xd0 [ 201.893189][ T9065] ? __kmalloc_node_track_caller_noprof+0x587/0x800 [ 201.893216][ T9065] ? kstrndup+0xbf/0x160 [ 201.893253][ T9065] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 201.893281][ T9065] ? __pfx___nla_validate_parse+0x10/0x10 [ 201.893326][ T9065] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 201.893362][ T9065] ? rcu_is_watching+0x15/0xb0 [ 201.893390][ T9065] ? __nla_parse+0x40/0x60 [ 201.893416][ T9065] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 201.893456][ T9065] genl_family_rcv_msg_doit+0x215/0x300 [ 201.893493][ T9065] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 201.893536][ T9065] ? bpf_lsm_capable+0x9/0x20 [ 201.893558][ T9065] ? security_capable+0x7e/0x2e0 [ 201.893593][ T9065] genl_rcv_msg+0x60e/0x790 [ 201.893627][ T9065] ? __pfx_genl_rcv_msg+0x10/0x10 [ 201.893650][ T9065] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 201.893697][ T9065] netlink_rcv_skb+0x208/0x470 [ 201.893715][ T9065] ? __lock_acquire+0xab9/0xd20 [ 201.893736][ T9065] ? __pfx_genl_rcv_msg+0x10/0x10 [ 201.893765][ T9065] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 201.893811][ T9065] ? down_read+0x1ad/0x2e0 [ 201.893846][ T9065] genl_rcv+0x28/0x40 [ 201.893870][ T9065] netlink_unicast+0x82f/0x9e0 [ 201.893913][ T9065] ? __pfx_netlink_unicast+0x10/0x10 [ 201.893948][ T9065] ? netlink_sendmsg+0x642/0xb30 [ 201.893968][ T9065] ? skb_put+0x11b/0x210 [ 201.893995][ T9065] netlink_sendmsg+0x805/0xb30 [ 201.894029][ T9065] ? __pfx_netlink_sendmsg+0x10/0x10 [ 201.894056][ T9065] ? aa_sock_msg_perm+0xf1/0x1d0 [ 201.894087][ T9065] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 201.894106][ T9065] ? __pfx_netlink_sendmsg+0x10/0x10 [ 201.894129][ T9065] __sock_sendmsg+0x21c/0x270 [ 201.894162][ T9065] ____sys_sendmsg+0x505/0x830 [ 201.894194][ T9065] ? __pfx_____sys_sendmsg+0x10/0x10 [ 201.894230][ T9065] ? import_iovec+0x74/0xa0 [ 201.894261][ T9065] ___sys_sendmsg+0x21f/0x2a0 [ 201.894288][ T9065] ? __pfx____sys_sendmsg+0x10/0x10 [ 201.894360][ T9065] ? __fget_files+0x2a/0x420 [ 201.894380][ T9065] ? __fget_files+0x3a0/0x420 [ 201.894412][ T9065] __x64_sys_sendmsg+0x19b/0x260 [ 201.894439][ T9065] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 201.894486][ T9065] ? do_syscall_64+0xbe/0xfa0 [ 201.894512][ T9065] do_syscall_64+0xfa/0xfa0 [ 201.894529][ T9065] ? lockdep_hardirqs_on+0x9c/0x150 [ 201.894548][ T9065] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.894567][ T9065] ? clear_bhb_loop+0x60/0xb0 [ 201.894591][ T9065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.894611][ T9065] RIP: 0033:0x7f189bd8f6c9 [ 201.894632][ T9065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.894649][ T9065] RSP: 002b:00007f189cc95038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 201.894673][ T9065] RAX: ffffffffffffffda RBX: 00007f189bfe5fa0 RCX: 00007f189bd8f6c9 [ 201.894687][ T9065] RDX: 0000000004000010 RSI: 0000200000000100 RDI: 000000000000000b [ 201.894700][ T9065] RBP: 00007f189be11f91 R08: 0000000000000000 R09: 0000000000000000 [ 201.894713][ T9065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 201.894725][ T9065] R13: 00007f189bfe6038 R14: 00007f189bfe5fa0 R15: 00007fffa47faa28 [ 201.894765][ T9065] [ 202.502533][ T9074] netlink: 100 bytes leftover after parsing attributes in process `syz.1.999'. [ 202.770551][ T9083] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1000'. [ 202.864717][ T9086] sysfs: cannot create duplicate filename '/class/ieee80211/1ùàV!' [ 202.936020][ T9086] CPU: 1 UID: 0 PID: 9086 Comm: syz.0.1000 Not tainted syzkaller #0 PREEMPT(full) [ 202.936053][ T9086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 202.936065][ T9086] Call Trace: [ 202.936074][ T9086] [ 202.936083][ T9086] dump_stack_lvl+0x189/0x250 [ 202.936124][ T9086] ? __pfx_dump_stack_lvl+0x10/0x10 [ 202.936153][ T9086] ? __pfx__printk+0x10/0x10 [ 202.936183][ T9086] ? kernfs_path_from_node+0x2f/0x290 [ 202.936209][ T9086] ? kernfs_path_from_node+0x250/0x290 [ 202.936232][ T9086] ? kernfs_path_from_node+0x2f/0x290 [ 202.936263][ T9086] sysfs_warn_dup+0x8e/0xa0 [ 202.936289][ T9086] sysfs_do_create_link_sd+0xc0/0x110 [ 202.936317][ T9086] device_add_class_symlinks+0x1cf/0x240 [ 202.936345][ T9086] device_add+0x475/0xb50 [ 202.936374][ T9086] wiphy_register+0x1d2e/0x2d20 [ 202.936447][ T9086] ? __pfx_wiphy_register+0x10/0x10 [ 202.936475][ T9086] ? __pfx_netdev_run_todo+0x10/0x10 [ 202.936501][ T9086] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 202.936536][ T9086] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 202.936567][ T9086] ieee80211_register_hw+0x3473/0x40d0 [ 202.936612][ T9086] ? ieee80211_register_hw+0x1491/0x40d0 [ 202.936650][ T9086] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 202.936673][ T9086] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 202.936709][ T9086] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 202.936738][ T9086] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 202.936787][ T9086] ? __hrtimer_setup+0x187/0x210 [ 202.936808][ T9086] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 202.936835][ T9086] mac80211_hwsim_new_radio+0x2f9a/0x5260 [ 202.936913][ T9086] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 202.936943][ T9086] ? trace_kmalloc+0x1f/0xd0 [ 202.936967][ T9086] ? __kmalloc_node_track_caller_noprof+0x587/0x800 [ 202.936998][ T9086] ? kstrndup+0xbf/0x160 [ 202.937034][ T9086] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 202.937062][ T9086] ? __pfx___nla_validate_parse+0x10/0x10 [ 202.937104][ T9086] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 202.937144][ T9086] ? rcu_is_watching+0x15/0xb0 [ 202.937172][ T9086] ? __nla_parse+0x40/0x60 [ 202.937200][ T9086] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 202.937240][ T9086] genl_family_rcv_msg_doit+0x215/0x300 [ 202.937277][ T9086] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 202.937322][ T9086] ? bpf_lsm_capable+0x9/0x20 [ 202.937346][ T9086] ? security_capable+0x7e/0x2e0 [ 202.937383][ T9086] genl_rcv_msg+0x60e/0x790 [ 202.937419][ T9086] ? __pfx_genl_rcv_msg+0x10/0x10 [ 202.937445][ T9086] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 202.937497][ T9086] netlink_rcv_skb+0x208/0x470 [ 202.937515][ T9086] ? __lock_acquire+0xab9/0xd20 [ 202.937535][ T9086] ? __pfx_genl_rcv_msg+0x10/0x10 [ 202.937565][ T9086] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 202.937613][ T9086] ? down_read+0x1ad/0x2e0 [ 202.937639][ T9086] genl_rcv+0x28/0x40 [ 202.937663][ T9086] netlink_unicast+0x82f/0x9e0 [ 202.937705][ T9086] ? __pfx_netlink_unicast+0x10/0x10 [ 202.937739][ T9086] ? netlink_sendmsg+0x642/0xb30 [ 202.937757][ T9086] ? skb_put+0x11b/0x210 [ 202.937792][ T9086] netlink_sendmsg+0x805/0xb30 [ 202.937827][ T9086] ? __pfx_netlink_sendmsg+0x10/0x10 [ 202.937854][ T9086] ? aa_sock_msg_perm+0xf1/0x1d0 [ 202.937886][ T9086] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 202.937906][ T9086] ? __pfx_netlink_sendmsg+0x10/0x10 [ 202.937929][ T9086] __sock_sendmsg+0x21c/0x270 [ 202.937963][ T9086] ____sys_sendmsg+0x505/0x830 [ 202.937995][ T9086] ? __pfx_____sys_sendmsg+0x10/0x10 [ 202.938031][ T9086] ? import_iovec+0x74/0xa0 [ 202.938063][ T9086] ___sys_sendmsg+0x21f/0x2a0 [ 202.938090][ T9086] ? __pfx____sys_sendmsg+0x10/0x10 [ 202.938164][ T9086] ? __fget_files+0x2a/0x420 [ 202.938183][ T9086] ? __fget_files+0x3a0/0x420 [ 202.938217][ T9086] __x64_sys_sendmsg+0x19b/0x260 [ 202.938243][ T9086] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 202.938290][ T9086] ? do_syscall_64+0xbe/0xfa0 [ 202.938316][ T9086] do_syscall_64+0xfa/0xfa0 [ 202.938331][ T9086] ? lockdep_hardirqs_on+0x9c/0x150 [ 202.938350][ T9086] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.938370][ T9086] ? clear_bhb_loop+0x60/0xb0 [ 202.938396][ T9086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.938416][ T9086] RIP: 0033:0x7f83fe58f6c9 [ 202.938436][ T9086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.938453][ T9086] RSP: 002b:00007f83ff412038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 202.938476][ T9086] RAX: ffffffffffffffda RBX: 00007f83fe7e6090 RCX: 00007f83fe58f6c9 [ 202.938491][ T9086] RDX: 0000000004000010 RSI: 0000200000000100 RDI: 000000000000000b [ 202.938504][ T9086] RBP: 00007f83fe611f91 R08: 0000000000000000 R09: 0000000000000000 [ 202.938516][ T9086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 202.938528][ T9086] R13: 00007f83fe7e6128 R14: 00007f83fe7e6090 R15: 00007ffc1d57c8b8 [ 202.938567][ T9086] [ 203.672717][ T9103] netlink: 332 bytes leftover after parsing attributes in process `syz.3.1010'. [ 203.715940][ T9103] netlink: 'syz.3.1010': attribute type 9 has an invalid length. [ 203.741268][ T9103] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1010'. [ 203.771227][ T9103] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1010'. [ 204.217564][ T9133] batadv1: entered promiscuous mode [ 204.233456][ T9133] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 204.262754][ T9134] macvtap1: entered allmulticast mode [ 204.279423][ T9134] mac80211_hwsim hwsim9 wlan0: entered allmulticast mode [ 204.309565][ T9134] mac80211_hwsim hwsim9 wlan0: left allmulticast mode [ 204.442305][ T9136] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 204.456705][ T9136] macvtap1: entered allmulticast mode [ 204.477668][ T9136] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 204.517799][ T9136] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 204.540798][ T9136] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 205.051628][ T9150] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1025'. [ 205.094308][ T9142] netlink: 'syz.1.1023': attribute type 30 has an invalid length. [ 205.194934][ T9159] FAULT_INJECTION: forcing a failure. [ 205.194934][ T9159] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 205.209748][ T9159] CPU: 1 UID: 0 PID: 9159 Comm: syz.0.1028 Not tainted syzkaller #0 PREEMPT(full) [ 205.209775][ T9159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 205.209787][ T9159] Call Trace: [ 205.209795][ T9159] [ 205.209804][ T9159] dump_stack_lvl+0x189/0x250 [ 205.209838][ T9159] ? __pfx____ratelimit+0x10/0x10 [ 205.209867][ T9159] ? __pfx_dump_stack_lvl+0x10/0x10 [ 205.209894][ T9159] ? __pfx__printk+0x10/0x10 [ 205.209915][ T9159] ? __might_fault+0xb0/0x130 [ 205.209955][ T9159] should_fail_ex+0x414/0x560 [ 205.209990][ T9159] _copy_from_user+0x2d/0xb0 [ 205.210016][ T9159] ___sys_sendmsg+0x158/0x2a0 [ 205.210042][ T9159] ? __pfx____sys_sendmsg+0x10/0x10 [ 205.210070][ T9159] ? __lock_acquire+0xab9/0xd20 [ 205.210127][ T9159] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 205.210165][ T9159] __sys_sendmmsg+0x227/0x430 [ 205.210194][ T9159] ? __pfx___sys_sendmmsg+0x10/0x10 [ 205.210214][ T9159] ? lockdep_hardirqs_on+0x9c/0x150 [ 205.210267][ T9159] ? ksys_write+0x1e1/0x250 [ 205.210299][ T9159] ? __pfx_ksys_write+0x10/0x10 [ 205.210331][ T9159] __x64_sys_sendmmsg+0xa0/0xc0 [ 205.210356][ T9159] do_syscall_64+0xfa/0xfa0 [ 205.210373][ T9159] ? lockdep_hardirqs_on+0x9c/0x150 [ 205.210391][ T9159] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.210411][ T9159] ? clear_bhb_loop+0x60/0xb0 [ 205.210435][ T9159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.210453][ T9159] RIP: 0033:0x7f83fe58f6c9 [ 205.210471][ T9159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.210487][ T9159] RSP: 002b:00007f83ff433038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 205.210518][ T9159] RAX: ffffffffffffffda RBX: 00007f83fe7e5fa0 RCX: 00007f83fe58f6c9 [ 205.210533][ T9159] RDX: 0000000000000001 RSI: 0000200000003e80 RDI: 0000000000000007 [ 205.210545][ T9159] RBP: 00007f83ff433090 R08: 0000000000000000 R09: 0000000000000000 [ 205.210557][ T9159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.210569][ T9159] R13: 00007f83fe7e6038 R14: 00007f83fe7e5fa0 R15: 00007ffc1d57c8b8 [ 205.210603][ T9159] [ 205.213493][ T9142] bond3: option arp_missed_max: invalid value (0) [ 205.384248][ T9148] netlink: 'syz.4.1024': attribute type 30 has an invalid length. [ 205.474343][ T9142] bond3: option arp_missed_max: allowed values 1 - 255 [ 205.532500][ T9142] bond3 (unregistering): Released all slaves [ 205.868286][ T9148] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 206.202874][ T9178] batadv1: entered promiscuous mode [ 206.273260][ T9178] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 206.767064][ T9181] netlink: 'syz.3.1033': attribute type 30 has an invalid length. [ 206.822451][ T9181] bond2: option arp_missed_max: invalid value (0) [ 206.829145][ T9181] bond2: option arp_missed_max: allowed values 1 - 255 [ 206.860996][ T9181] bond2 (unregistering): Released all slaves [ 207.443826][ T9213] IPVS: Scheduler module ip_vs_ not found [ 207.783472][ T9215] netlink: 'syz.2.1046': attribute type 30 has an invalid length. [ 207.850481][ T9215] bond4: option arp_missed_max: invalid value (0) [ 207.857677][ T9215] bond4: option arp_missed_max: allowed values 1 - 255 [ 207.894867][ T9215] bond4 (unregistering): Released all slaves [ 207.980199][ T9225] batadv2: entered promiscuous mode [ 208.012810][ T9225] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 208.047857][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.059410][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.549019][ T9246] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.557252][ T9246] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.038016][ T9246] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.122425][ T9246] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.698690][ T9246] macsec1: left promiscuous mode [ 209.723621][ T9246] batman_adv: batadv0: Interface deactivated: gretap1 [ 209.760283][ T9246] batadv1: left promiscuous mode [ 209.791898][ T9245] netlink: 'syz.0.1056': attribute type 4 has an invalid length. [ 209.837041][ T9251] netlink: 'syz.3.1059': attribute type 4 has an invalid length. [ 209.877344][ T36] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.907254][ T36] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.028202][ T36] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.043621][ T36] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.149498][ T9285] batadv2: entered promiscuous mode [ 210.160547][ T9285] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 210.503528][ T9284] netlink: 'syz.4.1064': attribute type 30 has an invalid length. [ 210.560880][ T9284] bond2: option arp_missed_max: invalid value (0) [ 210.567625][ T9284] bond2: option arp_missed_max: allowed values 1 - 255 [ 210.578377][ T9284] bond2 (unregistering): Released all slaves [ 210.580323][ T9303] netlink: zone id is out of range [ 210.626518][ T9303] netlink: zone id is out of range [ 210.656273][ T9303] netlink: zone id is out of range [ 210.680667][ T9303] netlink: zone id is out of range [ 210.708155][ T9303] netlink: zone id is out of range [ 210.730763][ T9303] netlink: zone id is out of range [ 210.805762][ T9303] netlink: zone id is out of range [ 210.843307][ T9303] netlink: zone id is out of range [ 210.860991][ T9303] netlink: zone id is out of range [ 210.884349][ T9303] netlink: zone id is out of range [ 210.977388][ T9290] netlink: 'syz.2.1067': attribute type 30 has an invalid length. [ 211.055255][ T9290] bond4: option arp_missed_max: invalid value (0) [ 211.072266][ T9290] bond4: option arp_missed_max: allowed values 1 - 255 [ 211.103707][ T9290] bond4 (unregistering): Released all slaves [ 211.208675][ T9315] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1072'. [ 211.313885][ T9320] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.321868][ T9320] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.477793][ T9320] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.500535][ T9320] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.657550][ T9320] batadv1: left promiscuous mode [ 211.664966][ T9320] macsec1: left promiscuous mode [ 211.677268][ T9320] batadv2: left promiscuous mode [ 211.690680][ T12] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.700617][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.709783][ T12] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.719384][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.734621][ T12] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.743830][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.756018][ T9312] sysfs: cannot create duplicate filename '/class/ieee80211/1ùàV!' [ 211.766373][ T9312] CPU: 0 UID: 0 PID: 9312 Comm: syz.1.1072 Not tainted syzkaller #0 PREEMPT(full) [ 211.766404][ T9312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 211.766416][ T9312] Call Trace: [ 211.766424][ T9312] [ 211.766434][ T9312] dump_stack_lvl+0x189/0x250 [ 211.766474][ T9312] ? __pfx_dump_stack_lvl+0x10/0x10 [ 211.766504][ T9312] ? __pfx__printk+0x10/0x10 [ 211.766532][ T9312] ? kernfs_path_from_node+0x2f/0x290 [ 211.766558][ T9312] ? kernfs_path_from_node+0x250/0x290 [ 211.766580][ T9312] ? kernfs_path_from_node+0x2f/0x290 [ 211.766610][ T9312] sysfs_warn_dup+0x8e/0xa0 [ 211.766636][ T9312] sysfs_do_create_link_sd+0xc0/0x110 [ 211.766665][ T9312] device_add_class_symlinks+0x1cf/0x240 [ 211.766710][ T9312] device_add+0x475/0xb50 [ 211.766742][ T9312] wiphy_register+0x1d2e/0x2d20 [ 211.766817][ T9312] ? __pfx_wiphy_register+0x10/0x10 [ 211.766855][ T9312] ? __pfx_netdev_run_todo+0x10/0x10 [ 211.766898][ T9312] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 211.766935][ T9312] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 211.766973][ T9312] ieee80211_register_hw+0x3473/0x40d0 [ 211.767018][ T9312] ? ieee80211_register_hw+0x1491/0x40d0 [ 211.767055][ T9312] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 211.767078][ T9312] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 211.767114][ T9312] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 211.767143][ T9312] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 211.767184][ T9312] ? __hrtimer_setup+0x187/0x210 [ 211.767205][ T9312] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 211.767250][ T9312] mac80211_hwsim_new_radio+0x2f9a/0x5260 [ 211.767322][ T9312] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 211.767350][ T9312] ? trace_kmalloc+0x1f/0xd0 [ 211.767375][ T9312] ? __kmalloc_node_track_caller_noprof+0x587/0x800 [ 211.767406][ T9312] ? kstrndup+0xbf/0x160 [ 211.767442][ T9312] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 211.767471][ T9312] ? __pfx___nla_validate_parse+0x10/0x10 [ 211.767527][ T9312] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 211.767567][ T9312] ? rcu_is_watching+0x15/0xb0 [ 211.767603][ T9312] ? __nla_parse+0x40/0x60 [ 211.767631][ T9312] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 211.767671][ T9312] genl_family_rcv_msg_doit+0x215/0x300 [ 211.767706][ T9312] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 211.767748][ T9312] ? bpf_lsm_capable+0x9/0x20 [ 211.767772][ T9312] ? security_capable+0x7e/0x2e0 [ 211.767817][ T9312] genl_rcv_msg+0x60e/0x790 [ 211.767853][ T9312] ? __pfx_genl_rcv_msg+0x10/0x10 [ 211.767880][ T9312] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 211.767932][ T9312] netlink_rcv_skb+0x208/0x470 [ 211.767951][ T9312] ? __lock_acquire+0xab9/0xd20 [ 211.767973][ T9312] ? __pfx_genl_rcv_msg+0x10/0x10 [ 211.768003][ T9312] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 211.768052][ T9312] ? down_read+0x1ad/0x2e0 [ 211.768079][ T9312] genl_rcv+0x28/0x40 [ 211.768102][ T9312] netlink_unicast+0x82f/0x9e0 [ 211.768142][ T9312] ? __pfx_netlink_unicast+0x10/0x10 [ 211.768174][ T9312] ? netlink_sendmsg+0x642/0xb30 [ 211.768193][ T9312] ? skb_put+0x11b/0x210 [ 211.768220][ T9312] netlink_sendmsg+0x805/0xb30 [ 211.768256][ T9312] ? __pfx_netlink_sendmsg+0x10/0x10 [ 211.768284][ T9312] ? aa_sock_msg_perm+0xf1/0x1d0 [ 211.768317][ T9312] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 211.768336][ T9312] ? __pfx_netlink_sendmsg+0x10/0x10 [ 211.768360][ T9312] __sock_sendmsg+0x21c/0x270 [ 211.768394][ T9312] ____sys_sendmsg+0x505/0x830 [ 211.768427][ T9312] ? __pfx_____sys_sendmsg+0x10/0x10 [ 211.768464][ T9312] ? import_iovec+0x74/0xa0 [ 211.768497][ T9312] ___sys_sendmsg+0x21f/0x2a0 [ 211.768524][ T9312] ? __pfx____sys_sendmsg+0x10/0x10 [ 211.768598][ T9312] ? __fget_files+0x2a/0x420 [ 211.768617][ T9312] ? __fget_files+0x3a0/0x420 [ 211.768652][ T9312] __x64_sys_sendmsg+0x19b/0x260 [ 211.768680][ T9312] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 211.768728][ T9312] ? do_syscall_64+0xbe/0xfa0 [ 211.768753][ T9312] do_syscall_64+0xfa/0xfa0 [ 211.768771][ T9312] ? lockdep_hardirqs_on+0x9c/0x150 [ 211.768791][ T9312] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.768819][ T9312] ? clear_bhb_loop+0x60/0xb0 [ 211.768844][ T9312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.768863][ T9312] RIP: 0033:0x7f754038f6c9 [ 211.768884][ T9312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.768902][ T9312] RSP: 002b:00007f75412d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 211.768924][ T9312] RAX: ffffffffffffffda RBX: 00007f75405e5fa0 RCX: 00007f754038f6c9 [ 211.768940][ T9312] RDX: 0000000004000010 RSI: 0000200000000100 RDI: 000000000000000c [ 211.768952][ T9312] RBP: 00007f7540411f91 R08: 0000000000000000 R09: 0000000000000000 [ 211.768963][ T9312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 211.768974][ T9312] R13: 00007f75405e6038 R14: 00007f75405e5fa0 R15: 00007ffd2c2e9a98 [ 211.769012][ T9312] [ 212.294272][ T9340] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1079'. [ 212.306571][ T9342] lo: entered allmulticast mode [ 212.312831][ T12] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 212.322389][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.430665][ T9343] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1082'. [ 212.556243][ T9351] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 212.568969][ T9351] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1086'. [ 212.624218][ T9342] lo: left allmulticast mode [ 212.682090][ T9361] tipc: Enabling of bearer rejected, already enabled [ 212.706364][ T9361] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1088'. [ 212.857194][ T9372] veth0: entered promiscuous mode [ 212.913028][ T9372] veth0: left promiscuous mode [ 212.962342][ T9372] ip6_vti0 speed is unknown, defaulting to 1000 [ 213.165436][ T9374] netlink: 'syz.0.1089': attribute type 30 has an invalid length. [ 213.208409][ T9374] bond2: option arp_missed_max: invalid value (0) [ 213.215825][ T9374] bond2: option arp_missed_max: allowed values 1 - 255 [ 213.232117][ T9374] bond2 (unregistering): Released all slaves [ 213.628626][ T9389] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1096'. [ 213.649934][ T9389] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1096'. [ 213.728562][ T9386] IPVS: Scheduler module ip_vs_ not found [ 213.782399][ T9384] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1095'. [ 214.206271][ T9410] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1105'. [ 214.453099][ T9423] sysfs: cannot create duplicate filename '/class/ieee80211/1ùàV!' [ 214.476235][ T9423] CPU: 1 UID: 0 PID: 9423 Comm: syz.1.1111 Not tainted syzkaller #0 PREEMPT(full) [ 214.476271][ T9423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 214.477028][ T9423] Call Trace: [ 214.477040][ T9423] [ 214.477050][ T9423] dump_stack_lvl+0x189/0x250 [ 214.477091][ T9423] ? __pfx_dump_stack_lvl+0x10/0x10 [ 214.477119][ T9423] ? __pfx__printk+0x10/0x10 [ 214.477149][ T9423] ? kernfs_path_from_node+0x2f/0x290 [ 214.477175][ T9423] ? kernfs_path_from_node+0x250/0x290 [ 214.477201][ T9423] ? kernfs_path_from_node+0x2f/0x290 [ 214.477234][ T9423] sysfs_warn_dup+0x8e/0xa0 [ 214.477260][ T9423] sysfs_do_create_link_sd+0xc0/0x110 [ 214.477292][ T9423] device_add_class_symlinks+0x1cf/0x240 [ 214.477323][ T9423] device_add+0x475/0xb50 [ 214.477352][ T9423] wiphy_register+0x1d2e/0x2d20 [ 214.477414][ T9423] ? __pfx_wiphy_register+0x10/0x10 [ 214.477448][ T9423] ? __pfx_netdev_run_todo+0x10/0x10 [ 214.477478][ T9423] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 214.477515][ T9423] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 214.477546][ T9423] ieee80211_register_hw+0x3473/0x40d0 [ 214.477592][ T9423] ? ieee80211_register_hw+0x1491/0x40d0 [ 214.477633][ T9423] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 214.477658][ T9423] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 214.477697][ T9423] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 214.477727][ T9423] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 214.477765][ T9423] ? __hrtimer_setup+0x187/0x210 [ 214.477790][ T9423] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 214.477820][ T9423] mac80211_hwsim_new_radio+0x2f9a/0x5260 [ 214.477892][ T9423] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 214.477923][ T9423] ? trace_kmalloc+0x1f/0xd0 [ 214.477949][ T9423] ? __kmalloc_node_track_caller_noprof+0x587/0x800 [ 214.477982][ T9423] ? kstrndup+0xbf/0x160 [ 214.478019][ T9423] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 214.478050][ T9423] ? __pfx___nla_validate_parse+0x10/0x10 [ 214.478093][ T9423] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 214.478138][ T9423] ? rcu_is_watching+0x15/0xb0 [ 214.478169][ T9423] ? __nla_parse+0x40/0x60 [ 214.478199][ T9423] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 214.478239][ T9423] genl_family_rcv_msg_doit+0x215/0x300 [ 214.478275][ T9423] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 214.478319][ T9423] ? bpf_lsm_capable+0x9/0x20 [ 214.478345][ T9423] ? security_capable+0x7e/0x2e0 [ 214.478383][ T9423] genl_rcv_msg+0x60e/0x790 [ 214.478433][ T9423] ? __pfx_genl_rcv_msg+0x10/0x10 [ 214.478463][ T9423] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 214.478519][ T9423] netlink_rcv_skb+0x208/0x470 [ 214.478543][ T9423] ? __lock_acquire+0xab9/0xd20 [ 214.478568][ T9423] ? __pfx_genl_rcv_msg+0x10/0x10 [ 214.478600][ T9423] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 214.478649][ T9423] ? down_read+0x1ad/0x2e0 [ 214.478677][ T9423] genl_rcv+0x28/0x40 [ 214.478703][ T9423] netlink_unicast+0x82f/0x9e0 [ 214.478749][ T9423] ? __pfx_netlink_unicast+0x10/0x10 [ 214.478786][ T9423] ? netlink_sendmsg+0x642/0xb30 [ 214.478808][ T9423] ? skb_put+0x11b/0x210 [ 214.478836][ T9423] netlink_sendmsg+0x805/0xb30 [ 214.478873][ T9423] ? __pfx_netlink_sendmsg+0x10/0x10 [ 214.478903][ T9423] ? aa_sock_msg_perm+0xf1/0x1d0 [ 214.478937][ T9423] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 214.478959][ T9423] ? __pfx_netlink_sendmsg+0x10/0x10 [ 214.478984][ T9423] __sock_sendmsg+0x21c/0x270 [ 214.479020][ T9423] ____sys_sendmsg+0x505/0x830 [ 214.479053][ T9423] ? __pfx_____sys_sendmsg+0x10/0x10 [ 214.479091][ T9423] ? import_iovec+0x74/0xa0 [ 214.479127][ T9423] ___sys_sendmsg+0x21f/0x2a0 [ 214.479156][ T9423] ? __pfx____sys_sendmsg+0x10/0x10 [ 214.479231][ T9423] ? __fget_files+0x2a/0x420 [ 214.479253][ T9423] ? __fget_files+0x3a0/0x420 [ 214.479289][ T9423] __x64_sys_sendmsg+0x19b/0x260 [ 214.479319][ T9423] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 214.479364][ T9423] ? do_syscall_64+0xbe/0xfa0 [ 214.479391][ T9423] do_syscall_64+0xfa/0xfa0 [ 214.479421][ T9423] ? lockdep_hardirqs_on+0x9c/0x150 [ 214.479447][ T9423] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.479472][ T9423] ? clear_bhb_loop+0x60/0xb0 [ 214.479500][ T9423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.479524][ T9423] RIP: 0033:0x7f754038f6c9 [ 214.479546][ T9423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.479566][ T9423] RSP: 002b:00007f75412d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 214.479592][ T9423] RAX: ffffffffffffffda RBX: 00007f75405e5fa0 RCX: 00007f754038f6c9 [ 214.479608][ T9423] RDX: 0000000004000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 214.479623][ T9423] RBP: 00007f7540411f91 R08: 0000000000000000 R09: 0000000000000000 [ 214.479637][ T9423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 214.479651][ T9423] R13: 00007f75405e6038 R14: 00007f75405e5fa0 R15: 00007ffd2c2e9a98 [ 214.479690][ T9423] [ 215.059276][ T9432] tipc: Enabling of bearer rejected, already enabled [ 215.071214][ T9424] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1110'. [ 215.097058][ T9424] sysfs: cannot create duplicate filename '/class/ieee80211/1ùàV!' [ 215.156529][ T9424] CPU: 1 UID: 0 PID: 9424 Comm: syz.2.1110 Not tainted syzkaller #0 PREEMPT(full) [ 215.156557][ T9424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 215.156569][ T9424] Call Trace: [ 215.156577][ T9424] [ 215.156586][ T9424] dump_stack_lvl+0x189/0x250 [ 215.156621][ T9424] ? __pfx_dump_stack_lvl+0x10/0x10 [ 215.156648][ T9424] ? __pfx__printk+0x10/0x10 [ 215.156675][ T9424] ? kernfs_path_from_node+0x2f/0x290 [ 215.156702][ T9424] ? kernfs_path_from_node+0x250/0x290 [ 215.156724][ T9424] ? kernfs_path_from_node+0x2f/0x290 [ 215.156763][ T9424] sysfs_warn_dup+0x8e/0xa0 [ 215.156788][ T9424] sysfs_do_create_link_sd+0xc0/0x110 [ 215.156815][ T9424] device_add_class_symlinks+0x1cf/0x240 [ 215.156844][ T9424] device_add+0x475/0xb50 [ 215.156875][ T9424] wiphy_register+0x1d2e/0x2d20 [ 215.156927][ T9424] ? __pfx_wiphy_register+0x10/0x10 [ 215.156956][ T9424] ? __pfx_netdev_run_todo+0x10/0x10 [ 215.156981][ T9424] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 215.157013][ T9424] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 215.157057][ T9424] ieee80211_register_hw+0x3473/0x40d0 [ 215.157102][ T9424] ? ieee80211_register_hw+0x1491/0x40d0 [ 215.157137][ T9424] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 215.157159][ T9424] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 215.157192][ T9424] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 215.157220][ T9424] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 215.157257][ T9424] ? __hrtimer_setup+0x187/0x210 [ 215.157277][ T9424] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 215.157303][ T9424] mac80211_hwsim_new_radio+0x2f9a/0x5260 [ 215.157374][ T9424] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 215.157401][ T9424] ? trace_kmalloc+0x1f/0xd0 [ 215.157422][ T9424] ? __kmalloc_node_track_caller_noprof+0x587/0x800 [ 215.157449][ T9424] ? kstrndup+0xbf/0x160 [ 215.157483][ T9424] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 215.157511][ T9424] ? __pfx___nla_validate_parse+0x10/0x10 [ 215.157552][ T9424] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 215.157593][ T9424] ? rcu_is_watching+0x15/0xb0 [ 215.157620][ T9424] ? __nla_parse+0x40/0x60 [ 215.157643][ T9424] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 215.157679][ T9424] genl_family_rcv_msg_doit+0x215/0x300 [ 215.157715][ T9424] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 215.157765][ T9424] ? bpf_lsm_capable+0x9/0x20 [ 215.157788][ T9424] ? security_capable+0x7e/0x2e0 [ 215.157825][ T9424] genl_rcv_msg+0x60e/0x790 [ 215.157863][ T9424] ? __pfx_genl_rcv_msg+0x10/0x10 [ 215.157890][ T9424] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 215.157942][ T9424] netlink_rcv_skb+0x208/0x470 [ 215.157961][ T9424] ? __lock_acquire+0xab9/0xd20 [ 215.157983][ T9424] ? __pfx_genl_rcv_msg+0x10/0x10 [ 215.158013][ T9424] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 215.158060][ T9424] ? down_read+0x1ad/0x2e0 [ 215.158088][ T9424] genl_rcv+0x28/0x40 [ 215.158112][ T9424] netlink_unicast+0x82f/0x9e0 [ 215.158156][ T9424] ? __pfx_netlink_unicast+0x10/0x10 [ 215.158190][ T9424] ? netlink_sendmsg+0x642/0xb30 [ 215.158210][ T9424] ? skb_put+0x11b/0x210 [ 215.158237][ T9424] netlink_sendmsg+0x805/0xb30 [ 215.158273][ T9424] ? __pfx_netlink_sendmsg+0x10/0x10 [ 215.158301][ T9424] ? aa_sock_msg_perm+0xf1/0x1d0 [ 215.158334][ T9424] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 215.158354][ T9424] ? __pfx_netlink_sendmsg+0x10/0x10 [ 215.158378][ T9424] __sock_sendmsg+0x21c/0x270 [ 215.158412][ T9424] ____sys_sendmsg+0x505/0x830 [ 215.158444][ T9424] ? __pfx_____sys_sendmsg+0x10/0x10 [ 215.158481][ T9424] ? import_iovec+0x74/0xa0 [ 215.158510][ T9424] ___sys_sendmsg+0x21f/0x2a0 [ 215.158538][ T9424] ? __pfx____sys_sendmsg+0x10/0x10 [ 215.158612][ T9424] ? __fget_files+0x2a/0x420 [ 215.158632][ T9424] ? __fget_files+0x3a0/0x420 [ 215.158666][ T9424] __x64_sys_sendmsg+0x19b/0x260 [ 215.158694][ T9424] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 215.158750][ T9424] ? do_syscall_64+0xbe/0xfa0 [ 215.158775][ T9424] do_syscall_64+0xfa/0xfa0 [ 215.158793][ T9424] ? lockdep_hardirqs_on+0x9c/0x150 [ 215.158812][ T9424] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.158832][ T9424] ? clear_bhb_loop+0x60/0xb0 [ 215.158858][ T9424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.158878][ T9424] RIP: 0033:0x7f83eb38f6c9 [ 215.158898][ T9424] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.158916][ T9424] RSP: 002b:00007f83ec1f5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 215.158939][ T9424] RAX: ffffffffffffffda RBX: 00007f83eb5e5fa0 RCX: 00007f83eb38f6c9 [ 215.158953][ T9424] RDX: 0000000004000010 RSI: 0000200000000100 RDI: 000000000000000d [ 215.158966][ T9424] RBP: 00007f83eb411f91 R08: 0000000000000000 R09: 0000000000000000 [ 215.158979][ T9424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 215.158991][ T9424] R13: 00007f83eb5e6038 R14: 00007f83eb5e5fa0 R15: 00007fff7f35e248 [ 215.159030][ T9424] [ 215.705570][ T9436] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 215.836006][ T9434] netlink: 'syz.0.1113': attribute type 30 has an invalid length. [ 215.966601][ T9434] bond2: option arp_missed_max: invalid value (0) [ 215.986223][ T9434] bond2: option arp_missed_max: allowed values 1 - 255 [ 216.000691][ T9434] bond2 (unregistering): Released all slaves [ 216.300419][ T9465] __nla_validate_parse: 3 callbacks suppressed [ 216.300440][ T9465] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1124'. [ 216.320983][ T9465] 8021q: VLANs not supported on ipvlan1 [ 216.372348][ T9467] macvtap1: entered allmulticast mode [ 216.377932][ T9467] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 216.389602][ T9467] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 216.419971][ T9469] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1126'. [ 216.438887][ T9469] sysfs: cannot create duplicate filename '/class/ieee80211/1ùàV!' [ 216.447200][ T9469] CPU: 0 UID: 0 PID: 9469 Comm: syz.2.1126 Not tainted syzkaller #0 PREEMPT(full) [ 216.447229][ T9469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 216.447241][ T9469] Call Trace: [ 216.447249][ T9469] [ 216.447258][ T9469] dump_stack_lvl+0x189/0x250 [ 216.447296][ T9469] ? __pfx_dump_stack_lvl+0x10/0x10 [ 216.447324][ T9469] ? __pfx__printk+0x10/0x10 [ 216.447353][ T9469] ? kernfs_path_from_node+0x2f/0x290 [ 216.447378][ T9469] ? kernfs_path_from_node+0x250/0x290 [ 216.447401][ T9469] ? kernfs_path_from_node+0x2f/0x290 [ 216.447431][ T9469] sysfs_warn_dup+0x8e/0xa0 [ 216.447456][ T9469] sysfs_do_create_link_sd+0xc0/0x110 [ 216.447484][ T9469] device_add_class_symlinks+0x1cf/0x240 [ 216.447514][ T9469] device_add+0x475/0xb50 [ 216.447544][ T9469] wiphy_register+0x1d2e/0x2d20 [ 216.447598][ T9469] ? __pfx_wiphy_register+0x10/0x10 [ 216.447628][ T9469] ? __pfx_netdev_run_todo+0x10/0x10 [ 216.447654][ T9469] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 216.447690][ T9469] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 216.447728][ T9469] ieee80211_register_hw+0x3473/0x40d0 [ 216.447775][ T9469] ? ieee80211_register_hw+0x1491/0x40d0 [ 216.447814][ T9469] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 216.447837][ T9469] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 216.447873][ T9469] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 216.447902][ T9469] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 216.447942][ T9469] ? __hrtimer_setup+0x187/0x210 [ 216.447963][ T9469] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 216.447991][ T9469] mac80211_hwsim_new_radio+0x2f9a/0x5260 [ 216.448062][ T9469] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 216.448091][ T9469] ? trace_kmalloc+0x1f/0xd0 [ 216.448115][ T9469] ? __kmalloc_node_track_caller_noprof+0x587/0x800 [ 216.448145][ T9469] ? kstrndup+0xbf/0x160 [ 216.448187][ T9469] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 216.448216][ T9469] ? __pfx___nla_validate_parse+0x10/0x10 [ 216.448257][ T9469] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 216.448298][ T9469] ? rcu_is_watching+0x15/0xb0 [ 216.448327][ T9469] ? __nla_parse+0x40/0x60 [ 216.448354][ T9469] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 216.448394][ T9469] genl_family_rcv_msg_doit+0x215/0x300 [ 216.448432][ T9469] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 216.448477][ T9469] ? bpf_lsm_capable+0x9/0x20 [ 216.448500][ T9469] ? security_capable+0x7e/0x2e0 [ 216.448537][ T9469] genl_rcv_msg+0x60e/0x790 [ 216.448574][ T9469] ? __pfx_genl_rcv_msg+0x10/0x10 [ 216.448600][ T9469] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 216.448634][ T9469] ? __asan_memcpy+0x40/0x70 [ 216.448660][ T9469] ? __pfx_ref_tracker_free+0x10/0x10 [ 216.448691][ T9469] netlink_rcv_skb+0x208/0x470 [ 216.448710][ T9469] ? __lock_acquire+0xab9/0xd20 [ 216.448739][ T9469] ? __pfx_genl_rcv_msg+0x10/0x10 [ 216.448768][ T9469] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 216.448816][ T9469] ? down_read+0x1ad/0x2e0 [ 216.448843][ T9469] genl_rcv+0x28/0x40 [ 216.448867][ T9469] netlink_unicast+0x82f/0x9e0 [ 216.448911][ T9469] ? __pfx_netlink_unicast+0x10/0x10 [ 216.448945][ T9469] ? netlink_sendmsg+0x642/0xb30 [ 216.448964][ T9469] ? skb_put+0x11b/0x210 [ 216.448989][ T9469] netlink_sendmsg+0x805/0xb30 [ 216.449022][ T9469] ? __pfx_netlink_sendmsg+0x10/0x10 [ 216.449048][ T9469] ? aa_sock_msg_perm+0xf1/0x1d0 [ 216.449077][ T9469] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 216.449096][ T9469] ? __pfx_netlink_sendmsg+0x10/0x10 [ 216.449118][ T9469] __sock_sendmsg+0x21c/0x270 [ 216.449150][ T9469] ____sys_sendmsg+0x505/0x830 [ 216.449181][ T9469] ? __pfx_____sys_sendmsg+0x10/0x10 [ 216.449215][ T9469] ? import_iovec+0x74/0xa0 [ 216.449243][ T9469] ___sys_sendmsg+0x21f/0x2a0 [ 216.449268][ T9469] ? __pfx____sys_sendmsg+0x10/0x10 [ 216.449334][ T9469] ? __fget_files+0x2a/0x420 [ 216.449352][ T9469] ? __fget_files+0x3a0/0x420 [ 216.449383][ T9469] __x64_sys_sendmsg+0x19b/0x260 [ 216.449410][ T9469] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 216.449455][ T9469] ? do_syscall_64+0xbe/0xfa0 [ 216.449477][ T9469] do_syscall_64+0xfa/0xfa0 [ 216.449493][ T9469] ? lockdep_hardirqs_on+0x9c/0x150 [ 216.449512][ T9469] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.449531][ T9469] ? clear_bhb_loop+0x60/0xb0 [ 216.449556][ T9469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.449575][ T9469] RIP: 0033:0x7f83eb38f6c9 [ 216.449595][ T9469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.449612][ T9469] RSP: 002b:00007f83ec1f5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 216.449635][ T9469] RAX: ffffffffffffffda RBX: 00007f83eb5e5fa0 RCX: 00007f83eb38f6c9 [ 216.449650][ T9469] RDX: 0000000004000010 RSI: 0000200000000100 RDI: 000000000000000d [ 216.449663][ T9469] RBP: 00007f83eb411f91 R08: 0000000000000000 R09: 0000000000000000 [ 216.449675][ T9469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 216.449687][ T9469] R13: 00007f83eb5e6038 R14: 00007f83eb5e5fa0 R15: 00007fff7f35e248 [ 216.449736][ T9469] [ 216.979392][ T9473] tipc: Enabling of bearer rejected, already enabled [ 217.177716][ T9481] netlink: 'syz.4.1132': attribute type 1 has an invalid length. [ 217.217630][ T9481] 8021q: adding VLAN 0 to HW filter on device bond2 [ 217.248036][ T9481] 8021q: adding VLAN 0 to HW filter on device bond2 [ 217.255392][ T9481] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 217.263994][ T9485] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1131'. [ 217.266609][ T9481] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 217.315788][ T9489] vlan2: entered allmulticast mode [ 217.333482][ T9489] team0: entered allmulticast mode [ 217.342806][ T9489] bond2: (slave vlan2): Opening slave failed [ 217.456795][ T9496] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1136'. [ 217.826072][ T9503] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1137'. [ 217.837971][ T9504] netlink: 200 bytes leftover after parsing attributes in process `syz.1.1135'. [ 217.838823][ T9494] netlink: 'syz.2.1134': attribute type 30 has an invalid length. [ 217.887822][ T9494] bond4: option arp_missed_max: invalid value (0) [ 217.894615][ T9494] bond4: option arp_missed_max: allowed values 1 - 255 [ 217.925145][ T9494] bond4 (unregistering): Released all slaves [ 217.957196][ T9503] 8021q: VLANs not supported on ipvlan1 [ 218.344734][ T9519] tipc: Started in network mode [ 218.349665][ T9519] tipc: Node identity ac14140f, cluster identity 4711 [ 218.357038][ T9519] tipc: New replicast peer: 255.255.255.255 [ 218.372106][ T9519] tipc: Enabled bearer , priority 10 [ 218.439353][ T9519] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1143'. [ 218.522916][ T9521] mac80211_hwsim hwsim11 wlan0: entered promiscuous mode [ 218.530485][ T9521] macvtap1: entered allmulticast mode [ 218.543403][ T9521] mac80211_hwsim hwsim11 wlan0: entered allmulticast mode [ 218.568109][ T9521] mac80211_hwsim hwsim11 wlan0: left allmulticast mode [ 218.575893][ T9521] mac80211_hwsim hwsim11 wlan0: left promiscuous mode [ 218.633032][ T9523] macvtap1: entered allmulticast mode [ 218.638662][ T9523] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 218.652532][ T9523] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 218.873392][ T9541] netlink: 'syz.1.1154': attribute type 12 has an invalid length. [ 218.884115][ T9541] netlink: 'syz.1.1154': attribute type 29 has an invalid length. [ 218.893259][ T9541] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1154'. [ 218.903526][ T9541] netlink: 'syz.1.1154': attribute type 2 has an invalid length. [ 218.911512][ T9541] netlink: 23 bytes leftover after parsing attributes in process `syz.1.1154'. [ 219.491272][ T9275] tipc: Node number set to 2886997007 [ 219.769565][ T9594] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1174'. [ 220.019415][ T9607] syzkaller0: entered promiscuous mode [ 220.027174][ T9607] syzkaller0: entered allmulticast mode [ 220.219357][ T9614] Timeout policy `syz0' can only be used by L3 protocol number 8939 [ 220.827727][ T9643] netlink: 'syz.1.1194': attribute type 3 has an invalid length. [ 220.836333][ T9643] netlink: 'syz.1.1194': attribute type 1 has an invalid length. [ 221.240213][ T9663] bond0: (slave erspan0): Opening slave failed [ 221.339797][ T9669] __nla_validate_parse: 4 callbacks suppressed [ 221.339827][ T9669] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1206'. [ 221.467835][ T9678] syzkaller0: entered promiscuous mode [ 221.473615][ T9678] syzkaller0: entered allmulticast mode [ 221.571763][ T9682] lo: entered allmulticast mode [ 221.598942][ T9682] pimreg: entered allmulticast mode [ 221.617810][ T9680] lo: left allmulticast mode [ 221.977700][ T9704] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1222'. [ 221.987071][ T9704] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1222'. [ 222.028248][ T9708] tipc: Enabled bearer , priority 0 [ 222.036250][ T9708] syzkaller0: entered promiscuous mode [ 222.042188][ T9708] syzkaller0: entered allmulticast mode [ 222.055244][ T9708] tipc: Resetting bearer [ 222.071336][ T9708] syzkaller0: tun_net_xmit 90 [ 222.077942][ T9706] tipc: Resetting bearer [ 222.096135][ T9706] tipc: Disabling bearer [ 222.123213][ T9713] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1225'. [ 222.952275][ T9758] syzkaller0: entered promiscuous mode [ 222.958160][ T9758] syzkaller0: entered allmulticast mode [ 222.994286][ T9758] tipc: Enabled bearer , priority 0 [ 223.014188][ T9757] tipc: Resetting bearer [ 223.045149][ T9757] tipc: Disabling bearer [ 223.527609][ T9792] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1257'. [ 223.538895][ T9792] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1257'. [ 223.641882][ T9791] delete_channel: no stack [ 223.745719][ T9803] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1262'. [ 223.951735][ T9810] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1265'. [ 223.969947][ T24] IPVS: starting estimator thread 0... [ 224.083757][ T9815] IPVS: using max 28 ests per chain, 67200 per kthread [ 224.170747][ T9827] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1272'. [ 224.670034][ T9855] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1284'. [ 225.139463][ T9884] netlink: 'syz.3.1298': attribute type 5 has an invalid length. [ 225.147675][ T9884] netlink: 'syz.3.1298': attribute type 5 has an invalid length. [ 225.166954][ T9886] bridge_slave_1: entered allmulticast mode [ 225.295027][ T9891] Bluetooth: MGMT ver 1.23 [ 226.177342][ T9938] netlink: 'syz.2.1323': attribute type 10 has an invalid length. [ 226.382509][ T9949] __nla_validate_parse: 1 callbacks suppressed [ 226.382530][ T9949] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1328'. [ 226.477817][ T9954] xt_hashlimit: size too large, truncated to 1048576 [ 227.001516][ T9972] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1338'. [ 227.180537][ T9982] smc: ib device syz2 ibport 1 erased user defined pnetid SYZ0 [ 227.263592][ T9988] netlink: 'syz.2.1346': attribute type 32 has an invalid length. [ 227.275186][ T9988] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1346'. [ 227.463949][ T9999] veth6: entered promiscuous mode [ 227.469229][ T9999] veth6: entered allmulticast mode [ 227.523032][T10001] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1352'. [ 227.641023][T10009] syzkaller0: entered promiscuous mode [ 227.659664][T10009] syzkaller0: entered allmulticast mode [ 228.248342][T10042] syzkaller0: entered promiscuous mode [ 228.254788][T10042] syzkaller0: entered allmulticast mode [ 228.353555][T10046] netlink: 'syz.2.1374': attribute type 4 has an invalid length. [ 229.259171][T10090] netlink: 'syz.4.1395': attribute type 1 has an invalid length. [ 229.311212][T10090] netlink: 5640 bytes leftover after parsing attributes in process `syz.4.1395'. [ 230.073500][ T5875] IPVS: starting estimator thread 0... [ 230.171247][T10123] IPVS: using max 26 ests per chain, 62400 per kthread [ 230.550840][T10149] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1423'. [ 230.997749][T10171] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1433'. [ 231.435574][T10200] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1447'. [ 231.755426][T10218] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 232.906419][T10277] netlink: 'syz.0.1483': attribute type 4 has an invalid length. [ 233.190420][T10300] netlink: 'syz.3.1492': attribute type 12 has an invalid length. [ 233.211502][T10300] netlink: 'syz.3.1492': attribute type 29 has an invalid length. [ 233.219677][T10300] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1492'. [ 233.245352][T10300] netlink: 23 bytes leftover after parsing attributes in process `syz.3.1492'. [ 233.391760][T10310] netlink: 'syz.3.1499': attribute type 13 has an invalid length. [ 233.401976][T10310] netlink: 24859 bytes leftover after parsing attributes in process `syz.3.1499'. [ 233.480488][T10314] netlink: 'syz.1.1500': attribute type 4 has an invalid length. [ 233.890184][T10290] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 233.908852][T10343] net_ratelimit: 5 callbacks suppressed [ 233.908875][T10343] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 233.969838][T10345] netlink: 'syz.0.1515': attribute type 4 has an invalid length. [ 234.559030][T10375] netlink: 'syz.3.1528': attribute type 4 has an invalid length. [ 234.671692][T10379] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1530'. [ 235.082417][ T5834] block nbd0: Receive control failed (result -32) [ 235.762066][T10418] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1547'. [ 236.029024][T10431] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1553'. [ 236.426389][T10454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1566'. [ 236.635283][T10462] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 236.729251][T10462] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 236.944922][T10484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1578'. [ 237.253353][T10506] netlink: 'syz.3.1587': attribute type 27 has an invalid length. [ 237.265596][T10506] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1587'. [ 237.509003][T10520] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1593'. [ 237.544038][T10520] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1593'. [ 238.403663][T10549] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1608'. [ 238.414763][T10549] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1608'. [ 238.605258][T10564] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1611'. [ 238.808011][T10574] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1620'. [ 239.151645][T10594] syzkaller0: entered promiscuous mode [ 239.159357][T10594] syzkaller0: entered allmulticast mode [ 239.242942][T10598] netlink: 'syz.4.1631': attribute type 2 has an invalid length. [ 239.253462][T10598] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1631'. [ 239.667319][T10625] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1644'. [ 239.796957][T10629] syzkaller0: entered promiscuous mode [ 239.805594][T10629] syzkaller0: entered allmulticast mode [ 240.254187][ T2994] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x32 [ 241.348526][T10726] netlink: 'syz.4.1691': attribute type 30 has an invalid length. [ 241.440770][T10726] bond3: option arp_missed_max: invalid value (0) [ 241.460368][T10726] bond3: option arp_missed_max: allowed values 1 - 255 [ 241.483114][T10726] bond3 (unregistering): Released all slaves [ 242.008323][T10758] netlink: 'syz.0.1707': attribute type 1 has an invalid length. [ 242.056964][T10759] __nla_validate_parse: 6 callbacks suppressed [ 242.056989][T10759] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1706'. [ 242.130660][T10761] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1708'. [ 242.329934][T10771] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1712'. [ 242.330790][T10778] netlink: 'syz.3.1715': attribute type 3 has an invalid length. [ 242.373996][T10778] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1715'. [ 242.768415][T10796] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1722'. [ 242.843096][T10803] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.1725'. [ 243.316623][T10829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1737'. [ 243.509579][T10841] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1740'. [ 244.674470][T10902] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1767'. [ 244.692771][T10902] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1767'. [ 246.579468][T11018] netlink: 'syz.1.1817': attribute type 30 has an invalid length. [ 246.641018][T11018] bond3: option arp_missed_max: invalid value (0) [ 246.657778][T11018] bond3: option arp_missed_max: allowed values 1 - 255 [ 246.681903][T11018] bond3 (unregistering): Released all slaves [ 246.975926][ T5875] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 247.000736][T11043] wlan0 speed is unknown, defaulting to 1000 [ 247.007987][ T5875] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 247.022676][T11043] wlan0 speed is unknown, defaulting to 1000 [ 247.032889][T11043] wlan0 speed is unknown, defaulting to 1000 [ 247.046518][T11043] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 247.059628][T11046] netlink: 'syz.3.1829': attribute type 12 has an invalid length. [ 247.068108][T11046] netlink: 'syz.3.1829': attribute type 29 has an invalid length. [ 247.076393][T11046] __nla_validate_parse: 6 callbacks suppressed [ 247.076421][T11046] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1829'. [ 247.078492][T11043] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 247.083636][T11046] netlink: 'syz.3.1829': attribute type 2 has an invalid length. [ 247.108464][T11046] netlink: 23 bytes leftover after parsing attributes in process `syz.3.1829'. [ 247.133712][ T66] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 247.143566][T11043] wlan0 speed is unknown, defaulting to 1000 [ 247.154364][T11043] wlan0 speed is unknown, defaulting to 1000 [ 247.163975][T11043] wlan0 speed is unknown, defaulting to 1000 [ 247.172900][T11043] wlan0 speed is unknown, defaulting to 1000 [ 247.188491][T11043] wlan0 speed is unknown, defaulting to 1000 [ 247.200175][T11050] netlink: 'syz.1.1831': attribute type 4 has an invalid length. [ 247.241218][ T13] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 247.302998][T11052] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1832'. [ 247.361647][ T13] wlan1: authentication with 08:02:11:00:00:00 timed out [ 247.667879][T11076] netlink: 'syz.1.1842': attribute type 12 has an invalid length. [ 247.719485][T11076] netlink: 'syz.1.1842': attribute type 29 has an invalid length. [ 247.729067][T11076] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1842'. [ 247.738467][T11076] netlink: 'syz.1.1842': attribute type 2 has an invalid length. [ 247.746802][T11076] netlink: 23 bytes leftover after parsing attributes in process `syz.1.1842'. [ 248.135798][T11092] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1850'. [ 248.161263][T11092] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1850'. [ 248.173282][T11094] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1852'. [ 248.358372][T11100] netlink: 'syz.3.1856': attribute type 12 has an invalid length. [ 248.378096][T11104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1855'. [ 248.390786][T11100] netlink: 'syz.3.1856': attribute type 29 has an invalid length. [ 248.424485][T11100] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1856'. [ 250.694998][T11244] syzkaller0: entered promiscuous mode [ 250.700648][T11244] syzkaller0: entered allmulticast mode [ 250.748779][T11246] syzkaller0: left promiscuous mode [ 250.754454][T11246] syzkaller0: left allmulticast mode [ 251.251051][T11271] syzkaller0: entered promiscuous mode [ 251.265683][T11271] syzkaller0: entered allmulticast mode [ 251.805269][T11307] syzkaller0: entered promiscuous mode [ 251.816696][T11307] syzkaller0: entered allmulticast mode [ 252.391017][T11339] syzkaller0: entered promiscuous mode [ 252.397325][T11339] syzkaller0: entered allmulticast mode [ 252.407134][T11343] validate_nla: 3 callbacks suppressed [ 252.407155][T11343] netlink: 'syz.1.1970': attribute type 12 has an invalid length. [ 252.430480][T11343] netlink: 'syz.1.1970': attribute type 29 has an invalid length. [ 252.445005][T11343] __nla_validate_parse: 16 callbacks suppressed [ 252.445027][T11343] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1970'. [ 252.461446][T11346] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1971'. [ 252.470489][T11343] netlink: 'syz.1.1970': attribute type 2 has an invalid length. [ 252.514785][T11343] netlink: 23 bytes leftover after parsing attributes in process `syz.1.1970'. [ 252.969922][T11374] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1983'. [ 252.999813][T11374] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1983'. [ 253.121548][T11382] syzkaller0: entered promiscuous mode [ 253.127542][T11382] syzkaller0: entered allmulticast mode [ 253.450393][T11400] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1996'. [ 254.560696][T11469] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2025'. [ 254.589478][T11469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2025'. [ 255.425563][T11518] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2041'. [ 255.447328][T11519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2040'. [ 255.597360][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.289914][T11575] netlink: 'syz.3.2065': attribute type 12 has an invalid length. [ 256.298134][T11575] netlink: 'syz.3.2065': attribute type 29 has an invalid length. [ 256.307015][T11575] netlink: 'syz.3.2065': attribute type 2 has an invalid length. [ 258.785214][T11664] __nla_validate_parse: 5 callbacks suppressed [ 258.785237][T11664] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2106'. [ 258.867015][T11669] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2108'. [ 259.344375][T11694] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2119'. [ 259.805791][T11720] netlink: 'syz.4.2130': attribute type 21 has an invalid length. [ 259.821447][T11720] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2130'. [ 259.905698][T11724] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2132'. [ 259.970333][T11726] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2133'. [ 260.502690][T11752] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2146'. [ 260.512593][T11752] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2146'. [ 260.996416][T11777] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2156'. [ 261.039823][T11780] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2157'. [ 261.423073][T11795] syzkaller0: left promiscuous mode [ 261.460882][T11797] syzkaller0: entered promiscuous mode [ 261.475400][T11797] syzkaller0: entered allmulticast mode [ 262.525077][T11846] netlink: 'syz.3.2184': attribute type 12 has an invalid length. [ 262.533591][T11846] netlink: 'syz.3.2184': attribute type 29 has an invalid length. [ 262.542220][T11846] netlink: 'syz.3.2184': attribute type 2 has an invalid length. [ 262.919730][T11866] pim6reg1: entered promiscuous mode [ 262.948869][T11866] pim6reg1: entered allmulticast mode [ 263.297476][T11886] netlink: 'syz.1.2196': attribute type 12 has an invalid length. [ 263.313704][T11886] netlink: 'syz.1.2196': attribute type 29 has an invalid length. [ 263.353252][T11886] netlink: 'syz.1.2196': attribute type 2 has an invalid length. [ 263.590171][T11902] syzkaller0: left allmulticast mode [ 263.802823][T11911] __nla_validate_parse: 10 callbacks suppressed [ 263.802843][T11911] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2206'. [ 264.002771][T11919] netlink: 'syz.1.2211': attribute type 39 has an invalid length. [ 264.057961][T11921] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2212'. [ 264.510968][T11945] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2222'. [ 267.571634][T12031] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2263'. [ 267.796936][T12044] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2267'. [ 268.031928][T12057] netlink: 'syz.1.2275': attribute type 72 has an invalid length. [ 268.041843][T12057] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2275'. [ 268.166682][T12065] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2279'. [ 268.187479][T12065] sysfs: cannot create duplicate filename '/class/ieee80211/1ùàV!' [ 268.195935][T12065] CPU: 1 UID: 0 PID: 12065 Comm: syz.2.2279 Not tainted syzkaller #0 PREEMPT(full) [ 268.195975][T12065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 268.195988][T12065] Call Trace: [ 268.195996][T12065] [ 268.196004][T12065] dump_stack_lvl+0x189/0x250 [ 268.196043][T12065] ? __pfx_dump_stack_lvl+0x10/0x10 [ 268.196071][T12065] ? __pfx__printk+0x10/0x10 [ 268.196100][T12065] ? kernfs_path_from_node+0x2f/0x290 [ 268.196126][T12065] ? kernfs_path_from_node+0x250/0x290 [ 268.196149][T12065] ? kernfs_path_from_node+0x2f/0x290 [ 268.196180][T12065] sysfs_warn_dup+0x8e/0xa0 [ 268.196205][T12065] sysfs_do_create_link_sd+0xc0/0x110 [ 268.196232][T12065] device_add_class_symlinks+0x1cf/0x240 [ 268.196259][T12065] device_add+0x475/0xb50 [ 268.196291][T12065] wiphy_register+0x1d2e/0x2d20 [ 268.196345][T12065] ? __pfx_wiphy_register+0x10/0x10 [ 268.196376][T12065] ? __pfx_netdev_run_todo+0x10/0x10 [ 268.196404][T12065] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 268.196440][T12065] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 268.196472][T12065] ieee80211_register_hw+0x3473/0x40d0 [ 268.196518][T12065] ? ieee80211_register_hw+0x1491/0x40d0 [ 268.196556][T12065] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 268.196580][T12065] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 268.196616][T12065] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 268.196646][T12065] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 268.196685][T12065] ? __hrtimer_setup+0x187/0x210 [ 268.196707][T12065] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 268.196734][T12065] mac80211_hwsim_new_radio+0x2f9a/0x5260 [ 268.196807][T12065] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 268.196836][T12065] ? trace_kmalloc+0x1f/0xd0 [ 268.196872][T12065] ? __kmalloc_node_track_caller_noprof+0x587/0x800 [ 268.196904][T12065] ? kstrndup+0xbf/0x160 [ 268.196941][T12065] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 268.196976][T12065] ? __pfx___nla_validate_parse+0x10/0x10 [ 268.197018][T12065] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 268.197057][T12065] ? rcu_is_watching+0x15/0xb0 [ 268.197082][T12065] ? __nla_parse+0x40/0x60 [ 268.197107][T12065] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 268.197144][T12065] genl_family_rcv_msg_doit+0x215/0x300 [ 268.197178][T12065] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 268.197220][T12065] ? bpf_lsm_capable+0x9/0x20 [ 268.197245][T12065] ? security_capable+0x7e/0x2e0 [ 268.197280][T12065] genl_rcv_msg+0x60e/0x790 [ 268.197315][T12065] ? __pfx_genl_rcv_msg+0x10/0x10 [ 268.197342][T12065] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 268.197375][T12065] ? __asan_memcpy+0x40/0x70 [ 268.197401][T12065] ? __pfx_ref_tracker_free+0x10/0x10 [ 268.197433][T12065] netlink_rcv_skb+0x208/0x470 [ 268.197451][T12065] ? __lock_acquire+0xab9/0xd20 [ 268.197473][T12065] ? __pfx_genl_rcv_msg+0x10/0x10 [ 268.197501][T12065] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 268.197549][T12065] ? down_read+0x1ad/0x2e0 [ 268.197575][T12065] genl_rcv+0x28/0x40 [ 268.197600][T12065] netlink_unicast+0x82f/0x9e0 [ 268.197638][T12065] ? __pfx_netlink_unicast+0x10/0x10 [ 268.197670][T12065] ? netlink_sendmsg+0x642/0xb30 [ 268.197687][T12065] ? skb_put+0x11b/0x210 [ 268.197711][T12065] netlink_sendmsg+0x805/0xb30 [ 268.197742][T12065] ? __pfx_netlink_sendmsg+0x10/0x10 [ 268.197767][T12065] ? aa_sock_msg_perm+0xf1/0x1d0 [ 268.197794][T12065] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 268.197813][T12065] ? __pfx_netlink_sendmsg+0x10/0x10 [ 268.197835][T12065] __sock_sendmsg+0x21c/0x270 [ 268.197864][T12065] ____sys_sendmsg+0x505/0x830 [ 268.197895][T12065] ? __pfx_____sys_sendmsg+0x10/0x10 [ 268.197930][T12065] ? import_iovec+0x74/0xa0 [ 268.198016][T12065] ___sys_sendmsg+0x21f/0x2a0 [ 268.198050][T12065] ? __pfx____sys_sendmsg+0x10/0x10 [ 268.198101][T12065] ? __fget_files+0x2a/0x420 [ 268.198116][T12065] ? __fget_files+0x3a0/0x420 [ 268.198143][T12065] __x64_sys_sendmsg+0x19b/0x260 [ 268.198164][T12065] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 268.198195][T12065] ? do_syscall_64+0xbe/0xfa0 [ 268.198212][T12065] do_syscall_64+0xfa/0xfa0 [ 268.198226][T12065] ? lockdep_hardirqs_on+0x9c/0x150 [ 268.198240][T12065] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.198257][T12065] ? clear_bhb_loop+0x60/0xb0 [ 268.198276][T12065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.198292][T12065] RIP: 0033:0x7f83eb38f6c9 [ 268.198307][T12065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 268.198320][T12065] RSP: 002b:00007f83ec1f5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 268.198337][T12065] RAX: ffffffffffffffda RBX: 00007f83eb5e5fa0 RCX: 00007f83eb38f6c9 [ 268.198350][T12065] RDX: 0000000004000010 RSI: 0000200000000100 RDI: 000000000000000c [ 268.198360][T12065] RBP: 00007f83eb411f91 R08: 0000000000000000 R09: 0000000000000000 [ 268.198371][T12065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 268.198382][T12065] R13: 00007f83eb5e6038 R14: 00007f83eb5e5fa0 R15: 00007fff7f35e248 [ 268.198424][T12065] [ 268.794024][T12076] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2284'. [ 268.885621][T12080] netlink: 'syz.3.2288': attribute type 72 has an invalid length. [ 268.893884][T12080] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2288'. [ 269.031885][T12088] syzkaller0: entered promiscuous mode [ 269.037477][T12088] syzkaller0: entered allmulticast mode [ 269.418550][T12112] netlink: 'syz.0.2300': attribute type 72 has an invalid length. [ 269.457825][T12112] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2300'. [ 269.467844][T12115] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2301'. [ 269.824948][T12130] syzkaller0: entered promiscuous mode [ 269.830557][T12130] syzkaller0: entered allmulticast mode [ 269.976617][T12140] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2313'. [ 270.036726][T12142] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2312'. [ 270.216531][T12147] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2315'. [ 270.499368][T12168] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ0 [ 270.563236][T12171] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2325'. [ 270.803198][T12182] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2330'. [ 271.572676][T12200] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2337'. [ 271.666976][T12203] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2341'. [ 272.571013][T12248] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 273.024693][T12251] netlink: 'syz.3.2359': attribute type 30 has an invalid length. [ 273.064256][T12251] bond2: option arp_missed_max: invalid value (0) [ 273.071038][T12251] bond2: option arp_missed_max: allowed values 1 - 255 [ 273.100416][T12251] bond2 (unregistering): Released all slaves [ 273.249277][T12272] 8021q: VLANs not supported on ipvlan1 [ 274.522012][T12319] __nla_validate_parse: 4 callbacks suppressed [ 274.522031][T12319] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2377'. [ 275.238063][T12328] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2381'. [ 275.264656][T12328] 8021q: VLANs not supported on ipvlan1 [ 275.389216][T12336] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 275.502059][T12339] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2385'. [ 275.703511][T12332] netlink: 'syz.0.2382': attribute type 30 has an invalid length. [ 275.834820][T12332] bond2: option arp_missed_max: invalid value (0) [ 275.844658][T12332] bond2: option arp_missed_max: allowed values 1 - 255 [ 275.854587][T12332] bond2 (unregistering): Released all slaves [ 275.863676][T12344] netlink: 'syz.1.2384': attribute type 30 has an invalid length. [ 275.901496][T12344] bond3: option arp_missed_max: invalid value (0) [ 275.908135][T12344] bond3: option arp_missed_max: allowed values 1 - 255 [ 275.933269][T12344] bond3 (unregistering): Released all slaves [ 276.190031][T12357] syz_tun: entered allmulticast mode [ 276.202429][T12357] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2390'. [ 276.269703][T12357] syz_tun (unregistering): left allmulticast mode [ 276.398387][T12364] syzkaller0: entered promiscuous mode [ 276.410945][T12364] syzkaller0: entered allmulticast mode [ 276.526590][T12369] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2396'. [ 276.621384][T12374] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2398'. [ 276.754946][T12380] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 276.789684][T12382] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 277.053452][T12384] netlink: 'syz.3.2400': attribute type 30 has an invalid length. [ 277.100311][T12384] bond2: option arp_missed_max: invalid value (0) [ 277.107633][T12384] bond2: option arp_missed_max: allowed values 1 - 255 [ 277.119199][T12384] bond2 (unregistering): Released all slaves [ 277.180000][T12387] netlink: 'syz.1.2401': attribute type 30 has an invalid length. [ 277.219108][T12387] bond3: option arp_missed_max: invalid value (0) [ 277.227002][T12387] bond3: option arp_missed_max: allowed values 1 - 255 [ 277.237335][T12387] bond3 (unregistering): Released all slaves [ 278.064273][T12414] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2408'. [ 278.173933][T12421] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2411'. [ 279.229484][T12435] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 279.530438][T12436] netlink: 'syz.0.2417': attribute type 30 has an invalid length. [ 279.783739][T12446] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2421'. [ 280.080393][T12458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2426'. [ 281.322734][T12436] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 281.550556][T12485] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2433'. [ 283.015994][T12512] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2437'. [ 283.130892][T12520] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2441'. [ 283.208750][T12524] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 283.311661][T12530] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2445'. [ 283.810315][T12524] netlink: 'syz.1.2443': attribute type 30 has an invalid length. [ 283.978886][T12546] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2448'. [ 284.856384][T12524] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 285.150357][T12559] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2453'. [ 285.168209][T12558] tipc: Enabling of bearer rejected, already enabled [ 285.341831][T12570] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2456'. [ 286.725366][T12563] kthread_run failed with err -4 [ 286.730880][T12563] netlink: 'syz.1.2455': attribute type 3 has an invalid length. [ 286.749624][T12575] netlink: 'syz.3.2454': attribute type 4 has an invalid length. [ 286.900869][T12584] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2461'. [ 286.966179][T12584] sysfs: cannot create duplicate filename '/class/ieee80211/1ùàV!' [ 286.981986][T12584] CPU: 0 UID: 0 PID: 12584 Comm: syz.0.2461 Not tainted syzkaller #0 PREEMPT(full) [ 286.982018][T12584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 286.982030][T12584] Call Trace: [ 286.982038][T12584] [ 286.982049][T12584] dump_stack_lvl+0x189/0x250 [ 286.982086][T12584] ? __pfx_dump_stack_lvl+0x10/0x10 [ 286.982115][T12584] ? __pfx__printk+0x10/0x10 [ 286.982141][T12584] ? kernfs_path_from_node+0x2f/0x290 [ 286.982166][T12584] ? kernfs_path_from_node+0x250/0x290 [ 286.982189][T12584] ? kernfs_path_from_node+0x2f/0x290 [ 286.982218][T12584] sysfs_warn_dup+0x8e/0xa0 [ 286.982244][T12584] sysfs_do_create_link_sd+0xc0/0x110 [ 286.982273][T12584] device_add_class_symlinks+0x1cf/0x240 [ 286.982303][T12584] device_add+0x475/0xb50 [ 286.982333][T12584] wiphy_register+0x1d2e/0x2d20 [ 286.982386][T12584] ? __pfx_wiphy_register+0x10/0x10 [ 286.982416][T12584] ? __pfx_netdev_run_todo+0x10/0x10 [ 286.982441][T12584] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 286.982476][T12584] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 286.982504][T12584] ieee80211_register_hw+0x3473/0x40d0 [ 286.982547][T12584] ? ieee80211_register_hw+0x1491/0x40d0 [ 286.982584][T12584] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 286.982606][T12584] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 286.982642][T12584] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 286.982669][T12584] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 286.982706][T12584] ? __hrtimer_setup+0x187/0x210 [ 286.982727][T12584] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 286.982753][T12584] mac80211_hwsim_new_radio+0x2f9a/0x5260 [ 286.982827][T12584] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 286.982856][T12584] ? trace_kmalloc+0x1f/0xd0 [ 286.982881][T12584] ? __kmalloc_node_track_caller_noprof+0x587/0x800 [ 286.982912][T12584] ? kstrndup+0xbf/0x160 [ 286.982946][T12584] hwsim_new_radio_nl+0xf5b/0x1bd0 [ 286.982975][T12584] ? __pfx___nla_validate_parse+0x10/0x10 [ 286.983016][T12584] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 286.983055][T12584] ? rcu_is_watching+0x15/0xb0 [ 286.983084][T12584] ? __nla_parse+0x40/0x60 [ 286.983111][T12584] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 286.983150][T12584] genl_family_rcv_msg_doit+0x215/0x300 [ 286.983188][T12584] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 286.983234][T12584] ? bpf_lsm_capable+0x9/0x20 [ 286.983258][T12584] ? security_capable+0x7e/0x2e0 [ 286.983292][T12584] genl_rcv_msg+0x60e/0x790 [ 286.983328][T12584] ? __pfx_genl_rcv_msg+0x10/0x10 [ 286.983354][T12584] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 286.983388][T12584] ? __asan_memcpy+0x40/0x70 [ 286.983414][T12584] ? __pfx_ref_tracker_free+0x10/0x10 [ 286.983445][T12584] netlink_rcv_skb+0x208/0x470 [ 286.983464][T12584] ? __lock_acquire+0xab9/0xd20 [ 286.983485][T12584] ? __pfx_genl_rcv_msg+0x10/0x10 [ 286.983515][T12584] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 286.983563][T12584] ? down_read+0x1ad/0x2e0 [ 286.983589][T12584] genl_rcv+0x28/0x40 [ 286.983613][T12584] netlink_unicast+0x82f/0x9e0 [ 286.983653][T12584] ? __pfx_netlink_unicast+0x10/0x10 [ 286.983684][T12584] ? netlink_sendmsg+0x642/0xb30 [ 286.983701][T12584] ? skb_put+0x11b/0x210 [ 286.983725][T12584] netlink_sendmsg+0x805/0xb30 [ 286.983758][T12584] ? __pfx_netlink_sendmsg+0x10/0x10 [ 286.983794][T12584] ? aa_sock_msg_perm+0xf1/0x1d0 [ 286.983824][T12584] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 286.983842][T12584] ? __pfx_netlink_sendmsg+0x10/0x10 [ 286.983865][T12584] __sock_sendmsg+0x21c/0x270 [ 286.983896][T12584] ____sys_sendmsg+0x505/0x830 [ 286.983925][T12584] ? __pfx_____sys_sendmsg+0x10/0x10 [ 286.983957][T12584] ? import_iovec+0x74/0xa0 [ 286.983989][T12584] ___sys_sendmsg+0x21f/0x2a0 [ 286.984014][T12584] ? __pfx____sys_sendmsg+0x10/0x10 [ 286.984081][T12584] ? __fget_files+0x2a/0x420 [ 286.984100][T12584] ? __fget_files+0x3a0/0x420 [ 286.984133][T12584] __x64_sys_sendmsg+0x19b/0x260 [ 286.984159][T12584] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 286.984203][T12584] ? do_syscall_64+0xbe/0xfa0 [ 286.984229][T12584] do_syscall_64+0xfa/0xfa0 [ 286.984245][T12584] ? lockdep_hardirqs_on+0x9c/0x150 [ 286.984264][T12584] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.984284][T12584] ? clear_bhb_loop+0x60/0xb0 [ 286.984310][T12584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.984330][T12584] RIP: 0033:0x7f83fe58f6c9 [ 286.984350][T12584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.984368][T12584] RSP: 002b:00007f83ff433038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 286.984391][T12584] RAX: ffffffffffffffda RBX: 00007f83fe7e5fa0 RCX: 00007f83fe58f6c9 [ 286.984406][T12584] RDX: 0000000004000010 RSI: 0000200000000100 RDI: 000000000000000b [ 286.984419][T12584] RBP: 00007f83fe611f91 R08: 0000000000000000 R09: 0000000000000000 [ 286.984431][T12584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 286.984443][T12584] R13: 00007f83fe7e6038 R14: 00007f83fe7e5fa0 R15: 00007ffc1d57c8b8 [ 286.984482][T12584] [ 287.511192][ T9258] page_pool_release_retry() stalled pool shutdown: id 40, 1 inflight 60 sec [ 287.833522][T12606] tipc: Enabling of bearer rejected, already enabled [ 287.850087][T12602] ip6_vti0 speed is unknown, defaulting to 1000 [ 288.179987][T12616] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2469'. [ 288.295157][T12602] wlan0 speed is unknown, defaulting to 1000 [ 288.432842][T12620] syzkaller0: left promiscuous mode [ 288.451276][T12620] syzkaller0: left allmulticast mode [ 288.629987][T12608] netlink: 'syz.4.2465': attribute type 30 has an invalid length. [ 288.723735][T12608] bond3: option arp_missed_max: invalid value (0) [ 288.730222][T12608] bond3: option arp_missed_max: allowed values 1 - 255 [ 288.755637][T12608] bond3 (unregistering): Released all slaves [ 289.155464][T12647] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2478'. [ 289.171480][T12645] netlink: 'syz.1.2474': attribute type 4 has an invalid length. [ 289.389781][T12650] macvtap1: entered allmulticast mode [ 289.389987][T12654] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2480'. [ 289.404403][T12650] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 289.463467][T12650] mac80211_hwsim hwsim7 wlan0: left allmulticast mode [ 290.042948][T12672] ip6_vti0 speed is unknown, defaulting to 1000 [ 290.188430][T12686] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2492'. [ 290.215947][T12684] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 290.357947][T12672] wlan0 speed is unknown, defaulting to 1000 [ 290.368614][T12684] netlink: 'syz.3.2491': attribute type 30 has an invalid length. [ 290.526594][T12684] bond2: option arp_missed_max: invalid value (0) [ 290.560236][T12684] bond2: option arp_missed_max: allowed values 1 - 255 [ 290.585998][T12684] bond2 (unregistering): Released all slaves [ 291.047015][T12705] netlink: 'syz.0.2496': attribute type 4 has an invalid length. [ 291.443206][T12716] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2501'. [ 291.494476][T12716] 8021q: VLANs not supported on ipvlan1 [ 291.836525][T12728] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2504'. [ 291.899452][T12731] syzkaller0: entered promiscuous mode [ 291.920461][T12731] syzkaller0: entered allmulticast mode [ 292.160445][T12746] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 292.285980][T12751] syzkaller0: entered promiscuous mode [ 292.292615][T12751] syzkaller0: entered allmulticast mode [ 292.577971][T12757] netlink: 'syz.3.2511': attribute type 30 has an invalid length. [ 293.975964][T12757] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 293.977467][T12766] netlink: 'syz.4.2516': attribute type 4 has an invalid length. [ 294.076897][T12775] syzkaller0: entered promiscuous mode [ 294.082861][T12775] syzkaller0: entered allmulticast mode [ 294.372191][T12790] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2521'. [ 294.467973][T12798] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 294.884129][T12801] netlink: 'syz.0.2526': attribute type 30 has an invalid length. [ 294.923573][T12801] bond2: option arp_missed_max: invalid value (0) [ 294.930484][T12801] bond2: option arp_missed_max: allowed values 1 - 255 [ 294.945678][T12801] bond2 (unregistering): Released all slaves [ 295.237119][T12831] netlink: 'syz.4.2534': attribute type 4 has an invalid length. [ 295.928539][T12849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2545'. [ 296.967813][T12884] netlink: 'syz.4.2556': attribute type 4 has an invalid length. [ 297.384358][ T5833] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 297.396656][ T5833] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 297.405112][ T5833] CPU: 1 UID: 0 PID: 5833 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 297.414686][ T5833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 297.424856][ T5833] RIP: 0010:klist_remove+0x14a/0x340 [ 297.430224][ T5833] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 49 1e e8 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 2a 1e e8 f6 49 8b 44 24 58 48 89 44 24 08 [ 297.441299][ T5837] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 297.450286][ T5833] RSP: 0018:ffffc900047275e0 EFLAGS: 00010202 [ 297.463394][ T5833] RAX: 000000000000000b RBX: ffff888075995ac0 RCX: 0000000000000000 [ 297.471476][ T5833] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 297.479817][ T5833] RBP: ffffc900047276e0 R08: ffffffff8f63a403 R09: 1ffffffff1ec7480 [ 297.487968][ T5833] R10: dffffc0000000000 R11: fffffbfff1ec7481 R12: 0000000000000000 [ 297.495939][ T5833] R13: 1ffff110063bf60c R14: ffff888031dfb060 R15: dffffc0000000000 [ 297.504001][ T5833] FS: 0000000000000000(0000) GS:ffff888126238000(0000) knlGS:0000000000000000 [ 297.513026][ T5833] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 297.519635][ T5833] CR2: 00007f83ec1156c0 CR3: 000000008c2d4000 CR4: 00000000003526f0 [ 297.527616][ T5833] Call Trace: [ 297.530907][ T5833] [ 297.533844][ T5833] ? __pfx_klist_remove+0x10/0x10 [ 297.538874][ T5833] ? __pfx_kobject_move+0x10/0x10 [ 297.543908][ T5833] ? do_raw_spin_unlock+0x122/0x240 [ 297.549119][ T5833] ? get_device_parent+0x366/0x3a0 [ 297.554319][ T5833] device_move+0x193/0x700 [ 297.558740][ T5833] hci_conn_del_sysfs+0xb8/0x170 [ 297.563883][ T5833] hci_conn_del+0xc33/0x11b0 [ 297.568856][ T5833] hci_conn_hash_flush+0x191/0x230 [ 297.574070][ T5833] hci_dev_close_sync+0xaef/0x1330 [ 297.579284][ T5833] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 297.585083][ T5833] ? up_write+0x1c4/0x420 [ 297.589983][ T5833] hci_unregister_dev+0x21a/0x510 [ 297.595222][ T5833] vhci_release+0x152/0x1a0 [ 297.599932][ T5833] ? __pfx_vhci_release+0x10/0x10 [ 297.604974][ T5833] __fput+0x44c/0xa70 [ 297.609155][ T5833] task_work_run+0x1d4/0x260 [ 297.613756][ T5833] ? __pfx_task_work_run+0x10/0x10 [ 297.619049][ T5833] ? do_exit+0x6b0/0x2300 [ 297.623386][ T5833] ? kmem_cache_free+0x19b/0x690 [ 297.628476][ T5833] do_exit+0x6b5/0x2300 [ 297.632772][ T5833] ? do_raw_spin_lock+0x121/0x290 [ 297.637801][ T5833] ? __pfx_do_exit+0x10/0x10 [ 297.642417][ T5833] ? preempt_schedule_common+0x83/0xd0 [ 297.647881][ T5833] ? preempt_schedule+0xae/0xc0 [ 297.652826][ T5833] ? __pfx_preempt_schedule+0x10/0x10 [ 297.658212][ T5833] do_group_exit+0x21c/0x2d0 [ 297.662809][ T5833] get_signal+0x1285/0x1340 [ 297.667418][ T5833] arch_do_signal_or_restart+0xa0/0x790 [ 297.673058][ T5833] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 297.679310][ T5833] ? exit_to_user_mode_loop+0x40/0x130 [ 297.684769][ T5833] exit_to_user_mode_loop+0x72/0x130 [ 297.690226][ T5833] do_syscall_64+0x2bd/0xfa0 [ 297.695075][ T5833] ? lockdep_hardirqs_on+0x9c/0x150 [ 297.700275][ T5833] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.706342][ T5833] ? clear_bhb_loop+0x60/0xb0 [ 297.711248][ T5833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.717236][ T5833] RIP: 0033:0x7f754038e0dc [ 297.721665][ T5833] Code: Unable to access opcode bytes at 0x7f754038e0b2. [ 297.728768][ T5833] RSP: 002b:00007ffd2c2e9df0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 297.737535][ T5833] RAX: fffffffffffffe00 RBX: 0000000000000003 RCX: 00007f754038e0dc [ 297.745944][ T5833] RDX: 0000000000000030 RSI: 00007ffd2c2e9eb0 RDI: 00000000000000f9 [ 297.754191][ T5833] RBP: 00007ffd2c2e9e5c R08: 0000000000000000 R09: 0079746972756365 [ 297.762249][ T5833] R10: 00007ffd2c2e97b0 R11: 0000000000000246 R12: 0000000000000258 [ 297.770395][ T5833] R13: 00000000000927c0 R14: 00000000000485fe R15: 00007ffd2c2e9eb0 [ 297.778559][ T5833] [ 297.781577][ T5833] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 297.786907][ T5833] ---[ end trace 0000000000000000 ]--- [ 297.810841][ T5837] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 297.819161][ T5837] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 297.827046][ T5837] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 297.834837][ T5837] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 297.842995][ T5833] RIP: 0010:klist_remove+0x14a/0x340 [ 297.848325][ T5833] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 49 1e e8 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 2a 1e e8 f6 49 8b 44 24 58 48 89 44 24 08 [ 297.869173][ T5833] RSP: 0018:ffffc900047275e0 EFLAGS: 00010202 [ 297.876223][ T5833] RAX: 000000000000000b RBX: ffff888075995ac0 RCX: 0000000000000000 [ 297.884442][ T5833] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 297.892488][ T5833] RBP: ffffc900047276e0 R08: ffffffff8f63a403 R09: 1ffffffff1ec7480 [ 297.900493][ T5833] R10: dffffc0000000000 R11: fffffbfff1ec7481 R12: 0000000000000000 [ 297.909552][ T5833] R13: 1ffff110063bf60c R14: ffff888031dfb060 R15: dffffc0000000000 [ 297.918518][ T5833] FS: 0000000000000000(0000) GS:ffff888126138000(0000) knlGS:0000000000000000 [ 297.928163][ T5833] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 297.934962][ T5833] CR2: 00007f049dddae10 CR3: 0000000024016000 CR4: 00000000003526f0 [ 297.943332][ T5833] Kernel panic - not syncing: Fatal exception [ 297.950083][ T5833] Kernel Offset: disabled [ 297.954856][ T5833] Rebooting in 86400 seconds..