last executing test programs: 6.31912221s ago: executing program 3 (id=3196): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000280)=0x10, 0x4) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001}) epoll_wait(r4, &(0x7f00000003c0)=[{}], 0x1, 0xffffffff) shutdown(r3, 0x1) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$'], 0x28}}], 0x1, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r6}, 0x10) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x840) ioctl$NILFS_IOCTL_GET_CPINFO(r3, 0x80186e82, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x3953c2, 0x0) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r9, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, 0x1405, 0x702, 0x70bd2a, 0x25dfdbfe, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x2}, {0x8}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000040)=0x3) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x9, 0x0, 0x2, 0x6, 0x1bd1, 0x8}, &(0x7f0000000100)=0x20) r10 = socket(0x840000000002, 0x3, 0x100) connect$inet(r10, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x2b) sendmmsg$inet(r10, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$bt_hci_HCI_FILTER(r10, 0x0, 0x2, &(0x7f0000000140)={0x0, [0x90, 0x6], 0x8}, 0x10) 6.268295668s ago: executing program 2 (id=3197): pipe(0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000000206010800000000000000000000000014000780080012400000000305001500090000000500010006000000050005000a00000005000400000000000900020073798530000000000c000300686173683a6970"], 0x58}, 0x1, 0x0, 0x0, 0x20015051}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) syz_emit_ethernet(0x46, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaabb018014b6a4c1d83cc200000108004a5d0038006800000c21907864010100ac1414aa89135d640002000000000000000002e0000001004e214e2204b1907840740e234b310000"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000000)=0x1, 0x4) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x0, @vifc_lcl_ifindex=0x1, @empty}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) write(r4, &(0x7f0000000080)="340000001a000100000000000000000002202000000000000000000008000100e001020308000200ac1414bb0800030001000000", 0x34) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000700180a050000000000000000000a0000000900010073797a30000000000900020073797a31000000001400000011"], 0x54}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000200)=0x10001, 0x12) sendfile(r2, r1, 0x0, 0xf03a0005) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r8, 0x891c, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffc}}) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000000406050000000000000000000a0000000500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x58010}, 0x800) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 5.714634146s ago: executing program 0 (id=3202): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), r0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c085}, 0x0) 5.598380414s ago: executing program 2 (id=3203): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x0, @empty}, {0x2, 0x4e22, @multicast1}, {0x2, 0x20, @empty}, 0x363, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x3, 0x6}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) r2 = socket(0x1e, 0x5, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000540)={0x0, 0x8}, &(0x7f0000000580)=0x8) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, 0x27, 0x301, 0x2270bd24, 0x25dfdbff, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4044810) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) sendmmsg(r7, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r2, 0x0) r8 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r8, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) accept4$nfc_llcp(r2, 0x0, 0x0, 0x0) sendmsg$tipc(r8, &(0x7f0000000500)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x1}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000140)="bc", 0x1}], 0x1, 0x0, 0x0, 0x10}, 0x20040001) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000300)=@filter={'filter\x00', 0xe, 0x4, 0x290, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1f8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x1, 0x1, 0x2, 0x1, 0x9}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) sendto$inet(r9, 0x0, 0x0, 0x20000040, &(0x7f0000000200)={0x2, 0x1234, @loopback}, 0x10) 5.375250337s ago: executing program 0 (id=3204): r0 = socket$netlink(0x10, 0x3, 0x6720f15ce8555866) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101a40, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000130002000000007988cec85400fbdbdf25fc00000000000000000000000000e022524d0000000000220000000000000009"], 0xb8}}, 0x50) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @private=0xa010100}}, 0x80, 0x0}, 0x54890) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a11800150006001400000000120800030043000040a8002b", 0x33}], 0x1}, 0x200488c4) write$cgroup_subtree(r2, &(0x7f0000000400)=ANY=[], 0xfe33) r3 = socket(0x40000000015, 0x5, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$pppl2tp(0x18, 0x1, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000800)={'wlan0\x00'}) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r6, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="05000400"], 0x10) connect$inet6(r3, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x390, 0x1d8, 0xc8, 0x8, 0x1d8, 0x5803, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@private0, @mcast1, [0xffffff00, 0xff, 0xff], [0x0, 0xff000000, 0xff], 'pimreg\x00', 'wlan0\x00', {}, {}, 0x2c, 0x1, 0x1, 0x51}, 0x0, 0x168, 0x1b0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x8, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3274e082555f6722282f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67442c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5000000000800", 0x1, 0x1, {0xfffffffffffffffe}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x5, 0x0, 0x3, 'pptp\x00', {0x100000000}}}}, {{@ipv6={@remote, @mcast1, [0xff000000, 0x100000100], [], 'macvtap0\x00', 'macsec0\x00', {}, {}, 0x87}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0xffffffff, 0x0, 'netbios-ns\x00', 'syz0\x00', {0xd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffc}}}}, 0x3f0) 5.061294105s ago: executing program 1 (id=3206): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r2 = socket$kcm(0xa, 0x2, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000440)={0x0, 0xe4, "c08fc75947e85d63e62b5041bf40cdfc56ed05b43e2614bfd04664879354011a06d2d8966b654d40ec7128a0d57a99fff0aa2879fe6c85d8b44b439f129243a55f78f882c93b94d03e86f03f45755021e88c62185df0ccc6f231c1b534e9a670251cb46793abfc74ffd9f9b8fa8c83a2123920bce8a7479e7510fa83841b313cc455e263c90a899c0727eae6368d7f97ea36835886fb363fc0909e3faacd70368c650ad5afaa1d7a7e3b991707c2ea7748ad6d11af6f5c45504a058a7aeaab092df3247702d81f6fb8084ddb23c576f7cdcb16aa97081f9c648090022ef9329843d3fa3d"}, &(0x7f0000000600)=0xec) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000640)={r3, 0x2}, 0x8) sendmsg$kcm(r2, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x20000001) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="b4050000fdff7f006110a40000000000c60000000000000095000000000000009f33ef60916e6e713f1e6b0b725ad99b817fd98cd824498949714e32f21dcc4ae5437aca55f21f3ca9e822d182054d54d53cd2b6da714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed00000000000000000000000000000000000000006c63b40e0c00000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f79829c90bd2114252581567acae715cbe1b57d5cda432c5b9443999f7d24195405f2e76ba88454cc9227069ccb7b37b41215c000000003be991e5e897284cdd6043058cec00000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r4, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r4, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r5, &(0x7f00000000c0)}, 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000004400000008000300", @ANYBLOB="08002600851600000a00180000000000000000001c005a80180001"], 0x4c}}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r6, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x70, r8, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8b35, 0x31}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x4}, @key_params=[@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "ffef313c5c"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}]]}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_FD={0x8, 0x6, r7}, @TCA_BPF_FLAGS={0x8, 0x8, 0xffffffff}, @TCA_BPF_ACT={0x4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24048001}, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000003b00010324bd7002fadbdf2506"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0xc048) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r6) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4800}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a840000000c0a010100002100000000000a0000060900020073797a31000000000900010073797a310000000058000380540000800c00018006000100d103000044000b802c000180090001006c617374000000001c000280080001400000000508000140000001ff080001400000000614000180090001006c617374"], 0xac}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) 4.788361371s ago: executing program 2 (id=3207): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, 0x0}, 0x4000) r2 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) ioctl$XFS_IOC_FSGEOMETRY_V1(r2, 0x80705864, &(0x7f0000000300)) socket$kcm(0x23, 0x2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000002900)=r4, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0x2, &(0x7f00000002c0)=0xffff, 0x4) bind$inet6(r8, &(0x7f0000000040)={0xa, 0xe22, 0x8000, @empty}, 0x1c) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000004c0)=@ccm_128={{0x304}, "0e57b3d487e2db32", "a9df7ccffde8899f914d4f2c3e263509", "3c36a51c", "0100009800"}, 0x28) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001380)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d7d18db747c88f6e518f0a947ee2b49e33538afa8af92347514f", 0x8a}], 0x1}, 0x20004000) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="180000002e00090027bd700000000000040000000443c843d0ca20f630aae349bba792001d00a198e0d95ea407ce178d7040e5b6285cc6ae39c126c0e359b49e288972017e6c24499b7b15b3bcc062b3721f9a919d43084329d61d96ae250f0e593d74d27841b62ff939d6ed30d1b572224a833c58c821048bff932f35ba63ad7c1e6409000000e0070000002d4497fbba0aba5be32a6d"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x4000000) syz_emit_ethernet(0x82, &(0x7f00000003c0)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xc, 0x1, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @dev, {[@lsrr={0x83, 0x3}, @lsrr={0x83, 0x3, 0x90}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa01012f}, {@local}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@remote}, {@loopback}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0x800}, {@broadcast}]}]}}}}}}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, 0x0) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r10, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x14, @local}, 0x10) 4.731753978s ago: executing program 1 (id=3208): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x23, 0x0, 0x0, 0x0, 0x1}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000002f00090073cc72e16accbe0a040000002a0011802e"], 0x40}, 0x1, 0x0, 0x0, 0x2004e884}, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r2, &(0x7f0000000200)={0x23, 0x1, 0xac, 0x1}, 0x10) listen(r2, 0x5) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r3, &(0x7f0000000280)={0x23, 0x2, 0xac, 0x1}, 0x10) connect$phonet_pipe(r3, &(0x7f0000000300)={0x23, 0x1, 0xac, 0x1}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000340), &(0x7f00000003c0)='%pi6 \x00'}, 0x20) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r7, r6, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd41, &(0x7f0000001fc0)=ANY=[], 0x0) accept$phonet_pipe(r2, 0x0, 0x0) 4.255015563s ago: executing program 1 (id=3211): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket(0x10, 0x803, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8e0400000000000000c61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7b148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b74cd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b36db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece010000000100000010223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f50714600fb6241c6e955031795b2c2f56411e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff814f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffff854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeedd005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e92604e1026e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c36981edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ce852364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b00000000000000a5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, 0x0, 0xc0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001440)=ANY=[@ANYBLOB="1400000030000103000000000000000001"], 0x114}], 0x1}, 0x0) recvmmsg(r4, &(0x7f00000065c0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000900000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000048000000160a0101000b000000000000010000000900020073797a30000000000900"], 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r5, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000180)=""/197, 0xc5}, {&(0x7f0000001640)=""/197, 0xc5}, {&(0x7f0000000440)=""/56, 0x38}, {&(0x7f0000000500)=""/167, 0xa7}, {&(0x7f0000001740)=""/4076, 0xfec}], 0x5}, 0x2}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x3}], 0x7, 0x100, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000003c0)='nv', 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010000108fdffffff0800000800000000", @ANYRES32=0x0, @ANYBLOB="00000000a304040008001b"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendto$inet(r1, &(0x7f0000000240)="c9", 0x1, 0x4044880, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000004000000040200081200000000000000a24500b7586c90e502e3bd05350b64dcbdc64c5f781baa4992e93b25c5728ef1c3e7f29ece63247c20dc96c1c635d94a69cecaffdcea7ac940232fd3fa1fdbf00f06ec4d43d33ac567a2a9845e44a6bfcb5988b352275f058437f56505bb3f72931efb6ffb8c53a744456f34804dc5b04ae576bf5fe3e2e4238ad4866a5c5dc0aac8a51e3164b80d40cdd3ff9fe40a7aff0887d2df8afce38c1c322a4df65e650b0fb78d93da378119203c43b07476078d4ee632a4e5ddefe31f7b9f1c7502f25446d9c04857acd097615d22a531b3", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES32], 0x50) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) 4.219154895s ago: executing program 3 (id=3212): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x1c, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x40}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x9}, @TCA_CODEL_ECN={0x8, 0x4, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240048e4}, 0x40) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200e61114120600002fb96dbcf706e10500000086ddffff1144ee", 0x1d}], 0x1}, 0x0) 4.10099846s ago: executing program 0 (id=3213): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071001e000000000095000300"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) unshare(0x20000400) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r0}, 0xc) 4.016883468s ago: executing program 4 (id=3214): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), r0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c085}, 0x0) 3.915110169s ago: executing program 0 (id=3215): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xe, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x5, &(0x7f0000000300)=@raw=[@generic={0xb7, 0x2, 0x0, 0x0, 0xa}, @generic={0xbf, 0x3, 0xa}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x3f}, @generic={0x95, 0x0, 0x0, 0x4}], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0x2, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x100, 0x0, 0x2, 0x3}, {0x0, 0x3, 0x200000000000}, 0x7, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@multicast1, 0x2, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3503, 0x1, 0x0, 0x0, 0x0, 0xffffffff}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x80) r3 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r3, &(0x7f0000000180)={&(0x7f00000006c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000019c0)=[{&(0x7f0000000600)="9745010000004000012c8cc5ff", 0xd}, {&(0x7f0000000340)="82f750e625d3c8d9d65198c3bd00fd", 0xf}], 0x2, &(0x7f00000008c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x16}, @rand_addr=0x64010100}}}], 0x20}, 0x400c804) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@map=r0, r1, 0x7, 0x0, 0x0, @void, @value=0x0}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f00000000c0)=0x1000a, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00'}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x20000804) recvmmsg(r4, &(0x7f0000007700), 0x4000267, 0xfc0, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x38, 0x2, 0x7, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8001}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$netlink(0x10, 0x3, 0x400000000000004) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x29000, 0x1000, 0xbb}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000000340)=0x800, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r7, &(0x7f00000003c0)={0x2c, 0x2, r9, 0x20000000}, 0x10) writev(r6, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) close(0xffffffffffffffff) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, 0x0) 3.856078574s ago: executing program 3 (id=3216): sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x48080}, 0x2) socket$kcm(0x21, 0x2, 0xa) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x7], 0x1, [0x1, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x86be, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x14, 0x0, 0xb, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x40) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0xc0189436, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r3, 0xfffffffc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b0000000000000000d1b1fdcf679ce1e10000000000", @ANYRES32=0x0, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000600)="2e61b3e3dff01e19adc7beef915d564c90c200"/32, 0x20) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r6, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 3.791595703s ago: executing program 4 (id=3217): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) listen(r0, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000200)=0x20004, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000080000cd4f8f8d1b861aae74107e0a84c2000000000008000000911171000000000095d7b2fe4c873cd9"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@mpls_newroute={0x1c, 0x18, 0xb7148a345ea44e67, 0x70bd28, 0x25dfdbfe, {0x1c, 0x14, 0x10, 0x4, 0xfd, 0x3, 0xfe, 0x0, 0x2000}}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x80) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002fff300851000000600000018020000", @ANYRES32], &(0x7f0000000440)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a400000010000104080000000300000000000000", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a70001280110001006272696467655f736c6176650000000058000580050019a103000000050005000000000005000c000700000005000700a100000005000a00ffa1000005000800ffa10000040018000500060001000000060002000100000005001e00000000000500010003000000140003006272696467655f736c6176655f30"], 0xa4}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r6) bind$vsock_stream(r4, &(0x7f0000000540)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x5a, &(0x7f00000000c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x5, 0x0, @dev={0xac, 0x14, 0x14, 0x32}, @private=0xa010100, {[@timestamp_addr={0x44, 0x14, 0x5, 0x3, 0x0, [{@broadcast}, {@broadcast, 0xfa9}]}, @lsrr={0x83, 0xb, 0xd3, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102]}, @lsrr={0x83, 0x3, 0x4a}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0xfffd}}}}}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000880)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0xa}, @enum, @fwd={0xa}, @enum={0x0, 0x4, 0x0, 0x6, 0x4, [{0x9, 0x1}, {0x5, 0x401}, {0xa, 0xfffffff7}, {0x1, 0x10000}]}, @volatile={0xe, 0x0, 0x0, 0x9, 0x3}, @restrict={0x0, 0x0, 0x0, 0xb, 0x1}]}}, &(0x7f0000000f40)=""/4079, 0x82, 0xfef, 0x1, 0x410}, 0x28) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000019ed8d7578e2c677cc7b959d4c300000000000050"], 0x3c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="080005"], 0x164}}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(r9, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, r10, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_bridge\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000090}, 0x4000081) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000c00000020000180140002006c6f000000000000000000000000000008000300010000002400038008000200400000000c00040000000000000000000c00050019000000ff"], 0x58}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYRES64=r3, @ANYRES32=0x0, @ANYRESHEX=r6, @ANYRES32=r3, @ANYBLOB="14000300003414000200fe8800"/26], 0x64}, 0x1, 0x0, 0x0, 0x24000011}, 0x24008010) 3.372052456s ago: executing program 2 (id=3218): sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x48080}, 0x2) socket$kcm(0x21, 0x2, 0xa) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x7], 0x1, [0x1, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x86be, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x14, 0x0, 0xb, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x40) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0xc0189436, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r3, 0xfffffffc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b0000000000000000d1b1fdcf679ce1e10000000000", @ANYRES32=0x0, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000600)="2e61b3e3dff01e19adc7beef915d564c90c200"/32, 0x20) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r8, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r5, 0x1, 0x70bd2c, 0x1000000, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) 1.689522205s ago: executing program 3 (id=3219): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x34, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xffe0}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4040004) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r7, 0x29, 0x4d, 0x0, 0x0) r8 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01008000000005dcdf2501000000080056ce", @ANYRES32=r9, @ANYBLOB="44000280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000008000008000600", @ANYRES32=r6, @ANYBLOB], 0x60}, 0x1, 0x400000000000000}, 0x0) unshare(0x100000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000440)={'syztnl1\x00', &(0x7f00000003c0)={'ip6_vti0\x00', 0x0, 0x29, 0xbc, 0x4, 0x3, 0x9, @ipv4={'\x00', '\xff\xff', @broadcast}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x20, 0xbe, 0x7fff}}) getsockname$packet(r2, &(0x7f0000000480)={0x11, 0x0, 0x0}, &(0x7f0000000500)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000001380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001340)={&(0x7f0000000980)={0x998, r8, 0x200, 0x70bd29, 0x25dfdbfd, {}, [{{0x8, 0x1, r3}, {0x1b8, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7a8}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0xae8f, 0xfd, 0xee, 0x1000}, {0xfffe, 0x5, 0x5, 0x2}]}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}]}}, {{0x8, 0x1, r3}, {0xf4, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xff}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}, {{0x8, 0x1, r10}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r3}, {0x144, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xa1b1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8}, {0x264, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r11}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xbf}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}]}}, {{0x8, 0x1, r3}, {0x100, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4f}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8, 0x1, r3}, {0xbc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r3}}}]}}]}, 0x998}, 0x1, 0x0, 0x0, 0x4844}, 0x800) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket(0x10, 0x803, 0x4) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@ipv4_newrule={0x34, 0x20, 0x1, 0x70bd25, 0x25dfdbfe, {0x2, 0x10, 0x14, 0x4, 0x0, 0x0, 0x0, 0x6, 0x3}, [@FRA_DST={0x8, 0x1, @rand_addr=0x64010101}, @FRA_SRC={0x8, 0x2, @private=0xa010102}, @FRA_FLOW={0x8}]}, 0x34}}, 0x40010) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r13) getsockname$packet(r13, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@delchain={0x3c, 0x2c, 0xf31, 0x70bd2c, 0x2000, {0x0, 0x0, 0x0, r15, {0x8}, {0xfff2, 0xffff}, {0xffff, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0xa01}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) 1.616065785s ago: executing program 4 (id=3220): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x83}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_REVISION={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x2c0c0}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect$unix(r2, &(0x7f0000000100)=@abs={0x1, 0x0, 0x2}, 0x6e) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x6011, r2, 0x543bb000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000004, 0x12, r4, 0xe6905000) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000001300)=@raw={'raw\x00', 0x8, 0x3, 0x590, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x4c0, 0xffffffff, 0xffffffff, 0x4c0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00', 0x80}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xffffff00, 0xffffffff, 0x0, 0xff000000], [0xffffffff, 0xffffff00, 0xffffffff, 0xff], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x21, 0x3, 0x4, 0x5}, 0x0, 0x298, 0x300, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0xcf12, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0xfff, 0x7fff, 0x81, '\x00', 'syz0\x00', {0x525}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f0) mmap(&(0x7f00008ba000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0xfffff000) ioctl$XFS_IOC_COMMIT_RANGE(r0, 0x40585883, &(0x7f0000000800)={r2, 0x0, 0x9, 0x4, 0xffffffffffff0001, 0x8, [0x6, 0x10001, 0xc51, 0x8, 0x8, 0x4]}) unshare(0x22020600) r6 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_netfilter(r0, &(0x7f00000007c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000780)={&(0x7f0000000340)={0x424, 0x11, 0x6, 0x5, 0x70bd27, 0x25dfdbfd, {0x5, 0x0, 0xa}, [@generic="e7224099aacc5fe8816e3a79d4d372f656b4ea07d42b98a4e6c551cedd705e82e0ce1075811599e3316c46fc8c29a87208a6d65c1a9ee81fada4ecaf5c0ab0e49b402c25719e554caa589ae04713921ebe37812d193cc8f51e79391bbc4cf6e79a8c51ce7ca8bf7bfb996e5ad6afd85169a3a6ac736810aaec1ff21a33d18a7835c3563b285691e2c8e3eb020b7ac39afdcab18c6b6f0c7c88b7098226a384a75f6d0646b0459db19c1f60db9a67877cfeca6f5a8851f84a3fb941a4b4f075f8b244bb0230f4cc9b373b2271c2bea3811e2d8de8dae973152044c94cd490b7bce7b9674fe2a3a2146380f2f0138a4a43ae9384", @typed={0x8, 0x121, 0x0, 0x0, @str=']^,\x00'}, @generic="1ae42fe8e6944084b986db28ef7cfd6aeaadb295acc762063951b54323dfd2fe31c3b4275f6a1da05a2485e5d4515a80a7f44bb54cac0edfa3d94983a881716d900339e6170a861453f7ba4f5fcd7d7645a2e81c2cf30efb0afd106d9bc2bbf41efa4bdc565c8e262e238a4c4290adc4dbe09e30f75c221c41cfb5125f4dbbedc9243b9d58b5db0315a7f495616c5b33aed8cfbb42c9071324d0b9b489cdef1bbdea0495552212ae1f79849f8e1cd26efd40fded136e034c8324bb192d880ad368dd023a661e19f8e1e3df66adbfb23ec12fa4b133e046015961f6a3321d0e50bb2208aeda2a37f627f5566bec2127418df3b4", @generic="5b7c3d51546ee5ee348210407392847578cd6a611e9e5bf8f0ea6059b14f2e9e4049b95de1fa8cd990ef4e7f9d7ce63b9080f5e23a13fb143fc6a04999facbc709ba011fc2aaebfe64c690b2a9059cc561b5e4e683b0", @typed={0x8, 0xd1, 0x0, 0x0, @ipv4=@private=0xa010100}, @typed={0x8, 0x104, 0x0, 0x0, @ipv4=@remote}, @generic="1da28a05937b6076398efa6c2ab0b3f4b599549a37fb3d181609c609f12bc0c343e9fb1aee96daf3a55f349ef6ee0827802a92b4dcf20c8338e8814c3f8c06ab71677c6d8b66ac54d11dac1d79503378df857515aab366fdbd5b233e9e578ca4a5bdce29a40559cc48e6fce4e3ee5a2948bd7cf04e9a13beb069fe0bdb889928d97c7b5701d24d4b8cc657560390bef36820f2b1e87b058f139614bee10645e3dda1793e1370685f20acb3f0db24dc41dd161e7748339ac343be8412053171b249c14a579d62411ffb9f1173", @nested={0xee, 0xb4, 0x0, 0x1, [@nested={0x4, 0x87}, @generic="f992ac26cf1930dc286c9c2343e481b38f8278dd13949a8584467c2af5bb0abec00edf13e223db17d71325021cfe5f9e1cd34ebabbdbcb93dae81ff21084054f354048e6ed48e927f6ada05375d34134b179ff54d4aee479b9b32c58454ed5a5f670359df81f009133f27e5cad27c867658576b868bc09e3f74cd0a7c593c425a46056b3daaac21fda9df2f4b0b7da5f9386f365415e0fa84cfca3d9794fc6847c6c54bf09ddddc6c48ecec490116617f439665b96286f5e3ae6d1dba21edac5d71d32afd68f74925f193979fb34cdeeb00a56414dd78678198e96d041d19cf31cd84d1cfa67"]}]}, 0x424}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) setsockopt$inet_tcp_buf(r6, 0x6, 0x21, 0x0, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000040)=0xffffffe4, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x2c, r8, 0x605, 0x70bd2d, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000801}, 0xc0c4) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r5, 0xc0046686, &(0x7f0000000240)={0x1, 0xb4, "87a3d44ddb07e29cfc836a15c6f3f2ec890d4adddb9323039e6fa9c85ea3ae5a1aae716f087ff8e606a4f9d756bcacb1adf0da6580cc58dd79456af16b19f218def697de6477805bb9485d793f9851f1f2c1cbe6e38e1eb573fbc35aad74893f35046eddeaf292e1a1d0f017314846cc8c15c54810cd5bca3c82cd9361c5cc08eaf98d0a575f220e1bfe603becc7e515d34ccfb69eb791069fd98abcdaae5c9a1a1f6d75fe72842a6a1a59700c26e82fb918e507"}) 1.598873418s ago: executing program 0 (id=3221): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0) r4 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) readv(r4, &(0x7f0000000fc0)=[{&(0x7f00000004c0)=""/84}, {&(0x7f0000000700)=""/251}, {&(0x7f0000000800)=""/159}, {&(0x7f0000000f80)=""/52}], 0x1000000000000398) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r6 = openat$cgroup_devices(r5, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f0000000200)=ANY=[@ANYBLOB="d7f9e9c3c85efc7beeae72576320", @ANYRESDEC], 0x5d) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001", @ANYRES16=r2], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000440)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xfffffffe}}, 0x80000, 0x0, 0x0, 0x0, 0xb3550aa4ba878396, 0x1000000, 0x8}, 0x9c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f00000001c0)={0x3, [0x0, 0x0, 0x0]}, &(0x7f00000002c0)=0x10) bind$alg(r2, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000010000108000000020000000000000000", @ANYRES32=0x0, @ANYBLOB="900000000008000008000a00", @ANYRES32=0x0, @ANYBLOB="08001b0000000000"], 0x30}}, 0x4000880) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000002100090002000000ffdbdf2501000000080008"], 0x1c}}, 0x4000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 1.564741664s ago: executing program 2 (id=3222): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbff, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x8090}, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x3, @mcast1, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e20, @remote}}, 0x0, 0x0, 0x3f, 0x0, "bb02a3c364ca41d6357e5445244748042f9e4e00f943a92866ef086c82ac9b2df3ee818afaacff1f16c54dc46d8b6d2ccd008a008000000000000000a032000700000000000000000000000000004d00"}, 0xd8) r2 = socket$kcm(0x23, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) listen(r2, 0x800) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000080)={0x2, 0x15, 0x4, 0x20, 0x80, 0x3, 0xd, 0x3, 0x2c, 0x31, 0xa2, 0xa, 0x10, 0x84}, 0xe) sendto$inet6(r4, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) close(r4) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local}) write$tun(r3, 0x0, 0x78) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000100)="580000001400add427323b472545b45602117fffffff810000400e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00050000000000000200000000", 0x58}], 0x1) socket$can_raw(0x1d, 0x3, 0x1) socket$packet(0x11, 0x3, 0x300) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x0, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xc0803, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r8, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r8, 0x40047459, &(0x7f0000000100)=0x4) 1.553504655s ago: executing program 1 (id=3223): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x40) socket$inet(0x2, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x268, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x23c, 0x4, 0x0, 0x1, [{0x238, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x228, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x214, 0x3, "d67a8527f76ec1d39e537c4c3060c6a405106c72848aa8bcb429b3a20d532452032d5f166334739d1719a5778bd4f724ee4ca57f2527aeeb0c75755d68fc6fa55f4825682ee95e581039823e5963beedcf65b8b005623d90772a8b6ebd2498b0aff725a3eabb6c99cb2edfe10b9c33be8a971e08401bc0807e75a2ff376b7934473bc1f02bb512b77414daf260c9c7d4e1f0758b56ec5823892af310e6252fcfb1d9dbaddefdaa26f43f12f831fd221926d6536eeff641db46920ae0e48f3ff5de599714ba6510ce479d4116a519792281736f39c9fc0e10ef557392c43389271cebcf36543fcf6f83bf74b93ee4eb5e8c82e35bb4784cc1ed0ad291b16e8368487589f7590bf5896f340a36555a1cf69736da230a809176dbdfba3d47efb9a6932e5503d277532b7d4e6f7c7373a298e5843a9f74d5fd07fbc6ad22bc644ba9b3c94ec3c8f0b9321b16e5826b1f058f781760a5d4b6a8880202b41689139c37d651f65a92d883f8901add03b650c9ec182fb565a4d657ebba9d6a5eb426b22d5933b72362e6ec327fb679aa8034b8b3b6680ad138be47652a3e77981187d2921cebfc1639aa280e3d38dba9b1af49ceded79c78a2d656b3a3e946e17e6257def6679f70f11aa01a2d906aecf4dbc7d1a332a8932ed719ce7eecb5450f49a5764f944b3f6b637502ddba609c6e45dcfad1db7c7dda3e2c755ddcf27132985442e9b8df16f96c82e72e3e2491856d0775"}, @NFTA_MATCH_NAME={0x8, 0x1, 'bpf\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x290}}, 0x4048010) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) r3 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r3, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=[@init={0x18, 0x84, 0x0, {0x6, 0x9, 0x6, 0xd9}}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00'}], 0x38, 0x4855}, 0x24000052) bind$inet(r2, &(0x7f0000000000)={0x2, 0x5e21, @local}, 0x10) r4 = socket$can_raw(0x1d, 0x3, 0x1) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x4000) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) bind$can_raw(r4, &(0x7f00000000c0)={0x1d, r6}, 0x8) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0x2a, &(0x7f0000000000)=0xb6, 0x4) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r7, 0x0, 0x0, 0x32, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000100)=[{{0x3}, {0x3, 0x0, 0x1, 0x1}}, {{0x2, 0x1}, {0x1, 0x1, 0x1}}], 0x10) close(r4) 495.123397ms ago: executing program 3 (id=3224): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000008000007b8af8ff00000000bfa27e00000000000007020000f8ffffffb703000008000000b70400000000000085000000c600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x6}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x20004884) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 471.836563ms ago: executing program 4 (id=3225): r0 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x74, 0x2c, 0xf25, 0x70bd25, 0x2, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x342, 0x20000001, 0x9, 0x9ab5, 0xe9c8, {0x6, 0x2, 0x401, 0x0, 0x1}, {0xe, 0x2, 0x51, 0x0, 0x5, 0x7fffffff}, 0x4, 0x6, 0x6}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 378.05821ms ago: executing program 1 (id=3226): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x1c, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x40}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x9}, @TCA_CODEL_ECN={0x8, 0x4, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240048e4}, 0x40) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200e61114120600002fb96dbcf706e10500000086ddffff1144ee", 0x1d}], 0x1}, 0x0) 367.728926ms ago: executing program 4 (id=3227): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), r0) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x400c085}, 0x0) 200.939333ms ago: executing program 4 (id=3228): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4008010}, 0x840) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r1, 0x9801}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @remote}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}, @IFLA_GRE_PMTUDISC={0x5}]}}}]}, 0x48}}, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x12, 0x4, 0x4, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$inet(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0) unshare(0x2c020400) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, 0x0, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f0000000700)=@framed={{}, [@generic={0x91, 0x1, 0x1, 0x34}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7020000010000e1850000008600000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback, r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 172.045096ms ago: executing program 3 (id=3229): sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x48080}, 0x2) socket$kcm(0x21, 0x2, 0xa) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x7], 0x1, [0x1, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x86be, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x14, 0x0, 0xb, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x40) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0xc0189436, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r3, 0xfffffffc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b0000000000000000d1b1fdcf679ce1e10000000000", @ANYRES32=0x0, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000600)="2e61b3e3dff01e19adc7beef915d564c90c200"/32, 0x20) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r6, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 118.439788ms ago: executing program 0 (id=3230): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$kcm(0x2, 0xa, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010000000000000000001000000018000180140002007866726d3000"/38], 0x2c}}, 0x24008080) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000740)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @void, @void, @void, @void, [{0xdd, 0x96, "a8b419c199378712f1722ccdaf594f1884c09fc18eb9daea8350b4fec2768708542a3133e1577fa4faf743fa1d05c4e49974ce4914e95e75a5a4ce207a6b2dfb295a46a122207bdc8685105b75db1b2b6e84feb5d7658e175c68249b5806f334dc013a4b20c6fec7d5631ac86c815af57c84ad7ba705d4ca950265741791058c8db9ab9c5060545a48a86d770dc138aca678d9c15b9d"}, {0xdd, 0x39, "fe6595963e33e562785943b0684c9066cd618a19ed0d663124c720f3fa689fb14ebfdd3f3606a5bd151ba940c0a6d7ba301b6b10f84c776047"}]}, 0xff) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], 0x6c4) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0), &(0x7f0000000540)=@mgmt_frame=@reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x1}, @device_b, @broadcast, @from_mac=@device_b, {0xf, 0x9}}, 0x1000, 0xc, @random=0x9, @val={0x1, 0x8, [{0x18}, {0x9, 0x1}, {0x1b}, {0x60, 0x1}, {0xc}, {0x0, 0x1}, {0x3d, 0x1}, {0x20}]}, @void, [{0xdd, 0x74, "5107d3db08462cb1544af777ee8a58bd3b2edb2d19a2342c4307f4d21a4a88b4f1c457a66f1712b373f8dcb5ce42bfd7c4b7a4420dc2d9c3b346e11ea0e494ccdb39e58084ed552d9a4df78706fd8ae7acffd9f0239eff893799d03eab39c3eb6527fcd2514eff21557c0302a16fd57ae32e2738"}]}, 0x9e) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000300), 0x4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r6) sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00006000000080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r6) sendmsg$IEEE802154_ASSOCIATE_REQ(r8, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1004014}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r9, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x15}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004800}, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="5daa000000000000611010000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) 53.613339ms ago: executing program 2 (id=3231): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000380)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000380)='cpuacct.usage_user\x00', 0x275a, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd60"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r5) getsockname$packet(r5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000370427bd70000000000000000000", @ANYRES32=r6, @ANYBLOB="c30803000b2ebe2650001280080001006774700044000280080007000a010101080004000100000008000700ac1414330500", @ANYRES32=r5], 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010027840000000000000080000008000100", @ANYRES32=r6, @ANYBLOB="0c00030003000000000000000800020000000000060006000000000005000d000500"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4004800) bpf$PROG_LOAD(0x5, &(0x7f0000001d80)={0x13, 0x20, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x1a08}, [@btf_id={0x18, 0xb, 0x3, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x98}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfb17}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @tail_call, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @alu={0x4, 0x0, 0x6, 0x4, 0x4, 0x30, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000ac0)='syzkaller\x00', 0xff, 0x1000, &(0x7f0000000c80)=""/4096, 0x41000, 0x7c, '\x00', r6, @fallback=0xe, r1, 0x8, &(0x7f0000001c80)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000001cc0)={0x1, 0x8, 0x1, 0x3}, 0x10, 0x0, r1, 0x3, &(0x7f0000001d00)=[r1], &(0x7f0000001d40)=[{0x4, 0x3, 0x0, 0xc2f8922b0f65d77c}, {0x2, 0x2, 0xb, 0xb}, {0x2, 0x3, 0x8, 0xc}], 0x10, 0x9000}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x7, 0xfff3}, {0xb, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) socket(0x28, 0x5, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, 0x0, 0x0) bind$inet(r8, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd5effffffffffff00", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="120000000000000000000000000005009113030000000000aa00000000000000"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) 0s ago: executing program 1 (id=3232): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='vegas', 0x5) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f03214e000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed", 0x6e}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4040004) kernel console output (not intermixed with test programs): 508.174192][T15845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2719'. [ 508.189775][T15841] syzkaller0: entered promiscuous mode [ 508.189802][T15841] syzkaller0: entered allmulticast mode [ 508.196084][T15841] net_ratelimit: 2 callbacks suppressed [ 508.196104][T15841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.246721][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 508.246857][ C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 508.612029][T15860] netlink: 'syz.2.2723': attribute type 1 has an invalid length. [ 508.658809][T15861] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2725'. [ 508.765655][T15858] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2725'. [ 508.825025][T15860] 8021q: adding VLAN 0 to HW filter on device bond10 [ 508.962387][T15867] netlink: 'syz.4.2726': attribute type 2 has an invalid length. [ 509.000060][T15862] bond10: (slave geneve2): making interface the new active one [ 509.018644][T15862] bond10: (slave geneve2): Enslaving as an active interface with an up link [ 509.026214][T15867] sysfs: cannot create duplicate filename '/class/ieee80211/.P'G!DES' [ 509.026257][T15867] CPU: 0 UID: 0 PID: 15867 Comm: syz.4.2726 Not tainted syzkaller #0 PREEMPT(full) [ 509.026284][T15867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 509.026298][T15867] Call Trace: [ 509.026307][T15867] [ 509.026316][T15867] dump_stack_lvl+0xe8/0x150 [ 509.026356][T15867] sysfs_warn_dup+0x8e/0xa0 [ 509.026391][T15867] sysfs_do_create_link_sd+0xc0/0x110 [ 509.026430][T15867] device_add_class_symlinks+0x1cf/0x240 [ 509.026459][T15867] device_add+0x467/0xb80 [ 509.026487][T15867] wiphy_register+0x1fc8/0x2ff0 [ 509.026530][T15867] ? __pfx_wiphy_register+0x10/0x10 [ 509.026554][T15867] ? __pfx_netdev_run_todo+0x10/0x10 [ 509.026591][T15867] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 509.026635][T15867] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 509.026668][T15867] ieee80211_register_hw+0x3d7c/0x4b40 [ 509.026714][T15867] ? ieee80211_register_hw+0x1961/0x4b40 [ 509.026773][T15867] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 509.026807][T15867] ? __asan_memset+0x22/0x50 [ 509.026844][T15867] ? __hrtimer_setup+0x1b7/0x260 [ 509.026876][T15867] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 509.026910][T15867] mac80211_hwsim_new_radio+0x3264/0x5720 [ 509.026973][T15867] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 509.027000][T15867] ? kstrndup+0xbd/0x160 [ 509.027031][T15867] ? kstrndup+0xbd/0x160 [ 509.027058][T15867] hwsim_new_radio_nl+0xd8b/0xf90 [ 509.027112][T15867] genl_family_rcv_msg_doit+0x233/0x340 [ 509.027150][T15867] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 509.027194][T15867] ? bpf_lsm_capable+0x9/0x20 [ 509.027215][T15867] ? security_capable+0x7e/0x2c0 [ 509.027250][T15867] genl_rcv_msg+0x614/0x7a0 [ 509.027285][T15867] ? __pfx_genl_rcv_msg+0x10/0x10 [ 509.027311][T15867] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 509.027354][T15867] netlink_rcv_skb+0x226/0x4a0 [ 509.027390][T15867] ? __pfx_genl_rcv_msg+0x10/0x10 [ 509.027419][T15867] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 509.027472][T15867] ? down_read+0x2be/0x330 [ 509.027509][T15867] genl_rcv+0x28/0x40 [ 509.027533][T15867] netlink_unicast+0x7bd/0x940 [ 509.027579][T15867] netlink_sendmsg+0x813/0xb40 [ 509.027611][T15867] ? __pfx_netlink_sendmsg+0x10/0x10 [ 509.027642][T15867] ? apparmor_socket_sendmsg+0x98/0x360 [ 509.027669][T15867] ? __pfx_netlink_sendmsg+0x10/0x10 [ 509.027689][T15867] sock_sendmsg_nosec+0x13a/0x180 [ 509.027716][T15867] ____sys_sendmsg+0x54e/0x850 [ 509.027755][T15867] ? __pfx_____sys_sendmsg+0x10/0x10 [ 509.027798][T15867] ? import_iovec+0x73/0xa0 [ 509.027832][T15867] ___sys_sendmsg+0x2a5/0x360 [ 509.027861][T15867] ? __lock_acquire+0x747/0x2de0 [ 509.027891][T15867] ? __pfx____sys_sendmsg+0x10/0x10 [ 509.027927][T15867] ? futex_wait+0x2a2/0x390 [ 509.027999][T15867] ? __fget_files+0x2a/0x420 [ 509.028030][T15867] ? __fget_files+0x3a2/0x420 [ 509.028082][T15867] __x64_sys_sendmsg+0x1b1/0x290 [ 509.028118][T15867] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 509.028178][T15867] do_syscall_64+0x166/0x520 [ 509.028206][T15867] ? trace_irq_disable+0x3b/0x140 [ 509.028230][T15867] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.028254][T15867] ? clear_bhb_loop+0x70/0xc0 [ 509.028282][T15867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.028306][T15867] RIP: 0033:0x7ff3ee39e159 [ 509.028328][T15867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 509.028348][T15867] RSP: 002b:00007ff3ef1b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 509.028373][T15867] RAX: ffffffffffffffda RBX: 00007ff3ee625fa0 RCX: 00007ff3ee39e159 [ 509.028390][T15867] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 509.028405][T15867] RBP: 00007ff3ee43506b R08: 0000000000000000 R09: 0000000000000000 [ 509.028420][T15867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 509.028434][T15867] R13: 00007ff3ee626038 R14: 00007ff3ee625fa0 R15: 00007ffe2efbf1e8 [ 509.028474][T15867] [ 509.291287][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 509.291616][ C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 509.381102][T13761] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.381290][T13761] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.381390][T13761] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.393475][T13761] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.596217][T15876] openvswitch: netlink: Missing valid actions attribute. [ 509.596262][T15876] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 509.622077][T15876] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2731'. [ 509.787604][T15885] wg2 speed is unknown, defaulting to 1000 [ 509.816770][T15888] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2732'. [ 509.816798][T15888] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2732'. [ 509.816814][T15888] netlink: 'syz.3.2732': attribute type 4 has an invalid length. [ 510.124287][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 510.124312][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.326764][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 510.326922][ C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 510.492429][T15907] netlink: 'syz.4.2739': attribute type 2 has an invalid length. [ 510.511986][T15907] sysfs: cannot create duplicate filename '/class/ieee80211/.P'G!DES' [ 510.512014][T15907] CPU: 1 UID: 0 PID: 15907 Comm: syz.4.2739 Not tainted syzkaller #0 PREEMPT(full) [ 510.512050][T15907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 510.512065][T15907] Call Trace: [ 510.512075][T15907] [ 510.512085][T15907] dump_stack_lvl+0xe8/0x150 [ 510.512127][T15907] sysfs_warn_dup+0x8e/0xa0 [ 510.512168][T15907] sysfs_do_create_link_sd+0xc0/0x110 [ 510.512209][T15907] device_add_class_symlinks+0x1cf/0x240 [ 510.512240][T15907] device_add+0x467/0xb80 [ 510.512269][T15907] wiphy_register+0x1fc8/0x2ff0 [ 510.512313][T15907] ? __pfx_wiphy_register+0x10/0x10 [ 510.512338][T15907] ? __pfx_netdev_run_todo+0x10/0x10 [ 510.512374][T15907] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 510.512425][T15907] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 510.512458][T15907] ieee80211_register_hw+0x3d7c/0x4b40 [ 510.512506][T15907] ? ieee80211_register_hw+0x1961/0x4b40 [ 510.512562][T15907] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 510.512596][T15907] ? __asan_memset+0x22/0x50 [ 510.512633][T15907] ? __hrtimer_setup+0x1b7/0x260 [ 510.512667][T15907] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 510.512700][T15907] mac80211_hwsim_new_radio+0x3264/0x5720 [ 510.512762][T15907] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 510.512787][T15907] ? kstrndup+0xbd/0x160 [ 510.512818][T15907] ? kstrndup+0xbd/0x160 [ 510.512842][T15907] hwsim_new_radio_nl+0xd8b/0xf90 [ 510.512889][T15907] genl_family_rcv_msg_doit+0x233/0x340 [ 510.512930][T15907] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 510.512975][T15907] ? bpf_lsm_capable+0x9/0x20 [ 510.512996][T15907] ? security_capable+0x7e/0x2c0 [ 510.513033][T15907] genl_rcv_msg+0x614/0x7a0 [ 510.513079][T15907] ? __pfx_genl_rcv_msg+0x10/0x10 [ 510.513108][T15907] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 510.513153][T15907] netlink_rcv_skb+0x226/0x4a0 [ 510.513190][T15907] ? __pfx_genl_rcv_msg+0x10/0x10 [ 510.513221][T15907] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 510.513276][T15907] ? down_read+0x2be/0x330 [ 510.513314][T15907] genl_rcv+0x28/0x40 [ 510.513340][T15907] netlink_unicast+0x7bd/0x940 [ 510.513387][T15907] netlink_sendmsg+0x813/0xb40 [ 510.513421][T15907] ? __pfx_netlink_sendmsg+0x10/0x10 [ 510.513454][T15907] ? apparmor_socket_sendmsg+0x98/0x360 [ 510.513483][T15907] ? __pfx_netlink_sendmsg+0x10/0x10 [ 510.513504][T15907] sock_sendmsg_nosec+0x13a/0x180 [ 510.513532][T15907] ____sys_sendmsg+0x54e/0x850 [ 510.513569][T15907] ? __pfx_____sys_sendmsg+0x10/0x10 [ 510.513612][T15907] ? import_iovec+0x73/0xa0 [ 510.513646][T15907] ___sys_sendmsg+0x2a5/0x360 [ 510.513676][T15907] ? __lock_acquire+0x747/0x2de0 [ 510.513705][T15907] ? __pfx____sys_sendmsg+0x10/0x10 [ 510.513742][T15907] ? futex_wait+0x2a2/0x390 [ 510.513812][T15907] ? __fget_files+0x2a/0x420 [ 510.513844][T15907] ? __fget_files+0x3a2/0x420 [ 510.513888][T15907] __x64_sys_sendmsg+0x1b1/0x290 [ 510.513924][T15907] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 510.513987][T15907] do_syscall_64+0x166/0x520 [ 510.514015][T15907] ? trace_irq_disable+0x3b/0x140 [ 510.514053][T15907] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.514081][T15907] ? clear_bhb_loop+0x70/0xc0 [ 510.514110][T15907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.514133][T15907] RIP: 0033:0x7ff3ee39e159 [ 510.514157][T15907] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 510.514178][T15907] RSP: 002b:00007ff3ef1b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 510.514204][T15907] RAX: ffffffffffffffda RBX: 00007ff3ee625fa0 RCX: 00007ff3ee39e159 [ 510.514222][T15907] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 510.514237][T15907] RBP: 00007ff3ee43506b R08: 0000000000000000 R09: 0000000000000000 [ 510.514252][T15907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 510.514266][T15907] R13: 00007ff3ee626038 R14: 00007ff3ee625fa0 R15: 00007ffe2efbf1e8 [ 510.514302][T15907] [ 511.145413][T15923] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2740'. [ 511.145440][T15923] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2740'. [ 511.191126][T15927] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2741'. [ 511.366612][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 511.530107][T15930] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2743'. [ 512.318085][T15916] tipc: Resetting bearer [ 512.319916][T15916] tipc: Resetting bearer [ 513.021516][T15959] netlink: 'syz.3.2745': attribute type 1 has an invalid length. [ 513.206710][ T142] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.218246][ T38] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.218327][ T38] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.218366][ T38] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.446607][ C0] net_ratelimit: 3 callbacks suppressed [ 513.446630][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 513.446774][ C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 513.600575][T15977] __nla_validate_parse: 2 callbacks suppressed [ 513.600608][T15977] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2751'. [ 513.771500][T15981] netlink: 'syz.2.2754': attribute type 2 has an invalid length. [ 513.804550][T15981] sysfs: cannot create duplicate filename '/class/ieee80211/.P'G!DES' [ 513.804574][T15981] CPU: 0 UID: 0 PID: 15981 Comm: syz.2.2754 Not tainted syzkaller #0 PREEMPT(full) [ 513.804602][T15981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 513.804617][T15981] Call Trace: [ 513.804626][T15981] [ 513.804636][T15981] dump_stack_lvl+0xe8/0x150 [ 513.804677][T15981] sysfs_warn_dup+0x8e/0xa0 [ 513.804715][T15981] sysfs_do_create_link_sd+0xc0/0x110 [ 513.804756][T15981] device_add_class_symlinks+0x1cf/0x240 [ 513.804787][T15981] device_add+0x467/0xb80 [ 513.804816][T15981] wiphy_register+0x1fc8/0x2ff0 [ 513.804860][T15981] ? __pfx_wiphy_register+0x10/0x10 [ 513.804886][T15981] ? __pfx_netdev_run_todo+0x10/0x10 [ 513.804922][T15981] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 513.804966][T15981] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 513.805003][T15981] ieee80211_register_hw+0x3d7c/0x4b40 [ 513.805050][T15981] ? ieee80211_register_hw+0x1961/0x4b40 [ 513.805117][T15981] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 513.805152][T15981] ? __asan_memset+0x22/0x50 [ 513.805190][T15981] ? __hrtimer_setup+0x1b7/0x260 [ 513.805221][T15981] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 513.805255][T15981] mac80211_hwsim_new_radio+0x3264/0x5720 [ 513.805321][T15981] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 513.805349][T15981] ? kstrndup+0xbd/0x160 [ 513.805379][T15981] ? kstrndup+0xbd/0x160 [ 513.805406][T15981] hwsim_new_radio_nl+0xd8b/0xf90 [ 513.805453][T15981] genl_family_rcv_msg_doit+0x233/0x340 [ 513.805493][T15981] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 513.805539][T15981] ? bpf_lsm_capable+0x9/0x20 [ 513.805560][T15981] ? security_capable+0x7e/0x2c0 [ 513.805597][T15981] genl_rcv_msg+0x614/0x7a0 [ 513.805634][T15981] ? __pfx_genl_rcv_msg+0x10/0x10 [ 513.805663][T15981] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 513.805708][T15981] netlink_rcv_skb+0x226/0x4a0 [ 513.805747][T15981] ? __pfx_genl_rcv_msg+0x10/0x10 [ 513.805787][T15981] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 513.805843][T15981] ? down_read+0x2be/0x330 [ 513.805881][T15981] genl_rcv+0x28/0x40 [ 513.805907][T15981] netlink_unicast+0x7bd/0x940 [ 513.805955][T15981] netlink_sendmsg+0x813/0xb40 [ 513.805987][T15981] ? __pfx_netlink_sendmsg+0x10/0x10 [ 513.806021][T15981] ? apparmor_socket_sendmsg+0x98/0x360 [ 513.806052][T15981] ? __pfx_netlink_sendmsg+0x10/0x10 [ 513.806082][T15981] sock_sendmsg_nosec+0x13a/0x180 [ 513.806110][T15981] ____sys_sendmsg+0x54e/0x850 [ 513.806150][T15981] ? __pfx_____sys_sendmsg+0x10/0x10 [ 513.806194][T15981] ? import_iovec+0x73/0xa0 [ 513.806229][T15981] ___sys_sendmsg+0x2a5/0x360 [ 513.806259][T15981] ? __lock_acquire+0x747/0x2de0 [ 513.806289][T15981] ? __pfx____sys_sendmsg+0x10/0x10 [ 513.806326][T15981] ? futex_wait+0x2a2/0x390 [ 513.806399][T15981] ? __fget_files+0x2a/0x420 [ 513.806431][T15981] ? __fget_files+0x3a2/0x420 [ 513.806476][T15981] __x64_sys_sendmsg+0x1b1/0x290 [ 513.806512][T15981] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 513.806613][T15981] do_syscall_64+0x166/0x520 [ 513.806705][T15981] ? trace_irq_disable+0x3b/0x140 [ 513.806787][T15981] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.806850][T15981] ? clear_bhb_loop+0x70/0xc0 [ 513.806927][T15981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.806988][T15981] RIP: 0033:0x7fd01e59e159 [ 513.807042][T15981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 513.807103][T15981] RSP: 002b:00007fd01f3a5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 513.807167][T15981] RAX: ffffffffffffffda RBX: 00007fd01e825fa0 RCX: 00007fd01e59e159 [ 513.807209][T15981] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 513.807250][T15981] RBP: 00007fd01e63506b R08: 0000000000000000 R09: 0000000000000000 [ 513.807287][T15981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 513.807319][T15981] R13: 00007fd01e826038 R14: 00007fd01e825fa0 R15: 00007ffcf5eb4108 [ 513.807415][T15981] [ 514.220185][T15983] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2755'. [ 514.313076][T15989] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2756'. [ 514.433982][T15989] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 514.486783][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 514.486932][ C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 514.492688][T15989] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2756'. [ 514.492715][T15989] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2756'. [ 514.999807][T16008] netlink: 'syz.2.2761': attribute type 13 has an invalid length. [ 515.017797][T16013] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2760'. [ 515.019616][T16013] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2760'. [ 515.019721][T16013] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2760'. [ 515.528063][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 515.528195][ C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 515.590066][T16030] syzkaller1: entered promiscuous mode [ 515.590094][T16030] syzkaller1: entered allmulticast mode [ 515.685353][T16035] netlink: 'syz.0.2768': attribute type 10 has an invalid length. [ 515.685379][T16035] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2768'. [ 515.861670][T16041] netlink: 'syz.4.2771': attribute type 2 has an invalid length. [ 515.897564][T16041] sysfs: cannot create duplicate filename '/class/ieee80211/.P'G!DES' [ 515.897587][T16041] CPU: 1 UID: 0 PID: 16041 Comm: syz.4.2771 Not tainted syzkaller #0 PREEMPT(full) [ 515.897618][T16041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 515.897632][T16041] Call Trace: [ 515.897642][T16041] [ 515.897651][T16041] dump_stack_lvl+0xe8/0x150 [ 515.897692][T16041] sysfs_warn_dup+0x8e/0xa0 [ 515.897728][T16041] sysfs_do_create_link_sd+0xc0/0x110 [ 515.897767][T16041] device_add_class_symlinks+0x1cf/0x240 [ 515.897798][T16041] device_add+0x467/0xb80 [ 515.897825][T16041] wiphy_register+0x1fc8/0x2ff0 [ 515.897869][T16041] ? __pfx_wiphy_register+0x10/0x10 [ 515.897894][T16041] ? __pfx_netdev_run_todo+0x10/0x10 [ 515.897940][T16041] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 515.897984][T16041] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 515.898017][T16041] ieee80211_register_hw+0x3d7c/0x4b40 [ 515.898063][T16041] ? ieee80211_register_hw+0x1961/0x4b40 [ 515.898121][T16041] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 515.898154][T16041] ? __asan_memset+0x22/0x50 [ 515.898191][T16041] ? __hrtimer_setup+0x1b7/0x260 [ 515.898223][T16041] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 515.898256][T16041] mac80211_hwsim_new_radio+0x3264/0x5720 [ 515.898320][T16041] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 515.898347][T16041] ? kstrndup+0xbd/0x160 [ 515.898377][T16041] ? kstrndup+0xbd/0x160 [ 515.898404][T16041] hwsim_new_radio_nl+0xd8b/0xf90 [ 515.898449][T16041] genl_family_rcv_msg_doit+0x233/0x340 [ 515.898488][T16041] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 515.898534][T16041] ? bpf_lsm_capable+0x9/0x20 [ 515.898553][T16041] ? security_capable+0x7e/0x2c0 [ 515.898589][T16041] genl_rcv_msg+0x614/0x7a0 [ 515.898625][T16041] ? __pfx_genl_rcv_msg+0x10/0x10 [ 515.898654][T16041] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 515.898698][T16041] netlink_rcv_skb+0x226/0x4a0 [ 515.898746][T16041] ? __pfx_genl_rcv_msg+0x10/0x10 [ 515.898775][T16041] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 515.898828][T16041] ? down_read+0x2be/0x330 [ 515.898865][T16041] genl_rcv+0x28/0x40 [ 515.898890][T16041] netlink_unicast+0x7bd/0x940 [ 515.898943][T16041] netlink_sendmsg+0x813/0xb40 [ 515.898976][T16041] ? __pfx_netlink_sendmsg+0x10/0x10 [ 515.899007][T16041] ? apparmor_socket_sendmsg+0x98/0x360 [ 515.899036][T16041] ? __pfx_netlink_sendmsg+0x10/0x10 [ 515.899057][T16041] sock_sendmsg_nosec+0x13a/0x180 [ 515.899084][T16041] ____sys_sendmsg+0x54e/0x850 [ 515.899120][T16041] ? __pfx_____sys_sendmsg+0x10/0x10 [ 515.899181][T16041] ? import_iovec+0x73/0xa0 [ 515.899215][T16041] ___sys_sendmsg+0x2a5/0x360 [ 515.899244][T16041] ? __lock_acquire+0x747/0x2de0 [ 515.899273][T16041] ? __pfx____sys_sendmsg+0x10/0x10 [ 515.899308][T16041] ? futex_wait+0x2a2/0x390 [ 515.899377][T16041] ? __fget_files+0x2a/0x420 [ 515.899410][T16041] ? __fget_files+0x3a2/0x420 [ 515.899456][T16041] __x64_sys_sendmsg+0x1b1/0x290 [ 515.899490][T16041] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 515.899546][T16041] do_syscall_64+0x166/0x520 [ 515.899575][T16041] ? trace_irq_disable+0x3b/0x140 [ 515.899599][T16041] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.899623][T16041] ? clear_bhb_loop+0x70/0xc0 [ 515.899653][T16041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.899677][T16041] RIP: 0033:0x7ff3ee39e159 [ 515.899698][T16041] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 515.899718][T16041] RSP: 002b:00007ff3ef1b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 515.899744][T16041] RAX: ffffffffffffffda RBX: 00007ff3ee625fa0 RCX: 00007ff3ee39e159 [ 515.899762][T16041] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 515.899778][T16041] RBP: 00007ff3ee43506b R08: 0000000000000000 R09: 0000000000000000 [ 515.899793][T16041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 515.899807][T16041] R13: 00007ff3ee626038 R14: 00007ff3ee625fa0 R15: 00007ffe2efbf1e8 [ 515.899847][T16041] [ 515.959774][T16044] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2772'. [ 516.438023][T16045] syzkaller0: entered promiscuous mode [ 516.438050][T16045] syzkaller0: entered allmulticast mode [ 516.566797][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 516.566983][ C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 517.606756][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 518.647048][ C0] net_ratelimit: 1 callbacks suppressed [ 518.647066][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 518.647160][ C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 519.686605][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 519.686743][ C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 519.698212][T16093] netlink: 'syz.4.2777': attribute type 2 has an invalid length. [ 519.725057][T16093] sysfs: cannot create duplicate filename '/class/ieee80211/.P'G!DES' [ 519.725080][T16093] CPU: 0 UID: 0 PID: 16093 Comm: syz.4.2777 Not tainted syzkaller #0 PREEMPT(full) [ 519.725119][T16093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 519.725134][T16093] Call Trace: [ 519.725143][T16093] [ 519.725153][T16093] dump_stack_lvl+0xe8/0x150 [ 519.725195][T16093] sysfs_warn_dup+0x8e/0xa0 [ 519.725230][T16093] sysfs_do_create_link_sd+0xc0/0x110 [ 519.725268][T16093] device_add_class_symlinks+0x1cf/0x240 [ 519.725297][T16093] device_add+0x467/0xb80 [ 519.725332][T16093] wiphy_register+0x1fc8/0x2ff0 [ 519.725376][T16093] ? __pfx_wiphy_register+0x10/0x10 [ 519.725400][T16093] ? __pfx_netdev_run_todo+0x10/0x10 [ 519.725435][T16093] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 519.725477][T16093] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 519.725508][T16093] ieee80211_register_hw+0x3d7c/0x4b40 [ 519.725553][T16093] ? ieee80211_register_hw+0x1961/0x4b40 [ 519.725614][T16093] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 519.725649][T16093] ? __asan_memset+0x22/0x50 [ 519.725686][T16093] ? __hrtimer_setup+0x1b7/0x260 [ 519.725719][T16093] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 519.725752][T16093] mac80211_hwsim_new_radio+0x3264/0x5720 [ 519.725814][T16093] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 519.725841][T16093] ? kstrndup+0xbd/0x160 [ 519.725872][T16093] ? kstrndup+0xbd/0x160 [ 519.725899][T16093] hwsim_new_radio_nl+0xd8b/0xf90 [ 519.725944][T16093] genl_family_rcv_msg_doit+0x233/0x340 [ 519.725982][T16093] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 519.726028][T16093] ? bpf_lsm_capable+0x9/0x20 [ 519.726049][T16093] ? security_capable+0x7e/0x2c0 [ 519.726086][T16093] genl_rcv_msg+0x614/0x7a0 [ 519.726131][T16093] ? __pfx_genl_rcv_msg+0x10/0x10 [ 519.726159][T16093] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 519.726202][T16093] netlink_rcv_skb+0x226/0x4a0 [ 519.726240][T16093] ? __pfx_genl_rcv_msg+0x10/0x10 [ 519.726270][T16093] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 519.726325][T16093] ? down_read+0x2be/0x330 [ 519.726362][T16093] genl_rcv+0x28/0x40 [ 519.726388][T16093] netlink_unicast+0x7bd/0x940 [ 519.726434][T16093] netlink_sendmsg+0x813/0xb40 [ 519.726466][T16093] ? __pfx_netlink_sendmsg+0x10/0x10 [ 519.726496][T16093] ? apparmor_socket_sendmsg+0x98/0x360 [ 519.726525][T16093] ? __pfx_netlink_sendmsg+0x10/0x10 [ 519.726546][T16093] sock_sendmsg_nosec+0x13a/0x180 [ 519.726571][T16093] ____sys_sendmsg+0x54e/0x850 [ 519.726610][T16093] ? __pfx_____sys_sendmsg+0x10/0x10 [ 519.726653][T16093] ? import_iovec+0x73/0xa0 [ 519.726687][T16093] ___sys_sendmsg+0x2a5/0x360 [ 519.726718][T16093] ? __lock_acquire+0x747/0x2de0 [ 519.726748][T16093] ? __pfx____sys_sendmsg+0x10/0x10 [ 519.726784][T16093] ? futex_wait+0x2a2/0x390 [ 519.726852][T16093] ? __fget_files+0x2a/0x420 [ 519.726882][T16093] ? __fget_files+0x3a2/0x420 [ 519.726928][T16093] __x64_sys_sendmsg+0x1b1/0x290 [ 519.726964][T16093] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 519.727023][T16093] do_syscall_64+0x166/0x520 [ 519.727052][T16093] ? trace_irq_disable+0x3b/0x140 [ 519.727075][T16093] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.727111][T16093] ? clear_bhb_loop+0x70/0xc0 [ 519.727141][T16093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.727165][T16093] RIP: 0033:0x7ff3ee39e159 [ 519.727189][T16093] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 519.727209][T16093] RSP: 002b:00007ff3ef1b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 519.727235][T16093] RAX: ffffffffffffffda RBX: 00007ff3ee625fa0 RCX: 00007ff3ee39e159 [ 519.727252][T16093] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 519.727268][T16093] RBP: 00007ff3ee43506b R08: 0000000000000000 R09: 0000000000000000 [ 519.727283][T16093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 519.727297][T16093] R13: 00007ff3ee626038 R14: 00007ff3ee625fa0 R15: 00007ffe2efbf1e8 [ 519.727336][T16093] [ 520.200252][T16104] syzkaller0: entered promiscuous mode [ 520.200277][T16104] syzkaller0: entered allmulticast mode [ 520.296912][T16104] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 520.726764][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 520.726934][ C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 521.106314][T16137] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 521.135411][T16137] __nla_validate_parse: 1 callbacks suppressed [ 521.135436][T16137] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2787'. [ 521.215924][T16137] 8021q: adding VLAN 0 to HW filter on device bond15 [ 521.429604][T16149] syzkaller0: entered promiscuous mode [ 521.429628][T16149] syzkaller0: entered allmulticast mode [ 521.464763][T16152] bond4: left promiscuous mode [ 521.464792][T16152] bond4: left allmulticast mode [ 521.521708][T16152] ip6gre1: left promiscuous mode [ 521.521734][T16152] ip6gre1: left allmulticast mode [ 521.549858][T16152] macsec1: left promiscuous mode [ 521.550533][T16152] macsec2: left promiscuous mode [ 521.550552][T16152] macsec2: left allmulticast mode [ 521.766588][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 521.766722][ C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 521.810983][T16170] netlink: 'syz.1.2795': attribute type 2 has an invalid length. [ 521.839920][T16170] sysfs: cannot create duplicate filename '/class/ieee80211/.P'G!DES' [ 521.839941][T16170] CPU: 0 UID: 0 PID: 16170 Comm: syz.1.2795 Not tainted syzkaller #0 PREEMPT(full) [ 521.839968][T16170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 521.839982][T16170] Call Trace: [ 521.839991][T16170] [ 521.840001][T16170] dump_stack_lvl+0xe8/0x150 [ 521.840042][T16170] sysfs_warn_dup+0x8e/0xa0 [ 521.840078][T16170] sysfs_do_create_link_sd+0xc0/0x110 [ 521.840118][T16170] device_add_class_symlinks+0x1cf/0x240 [ 521.840149][T16170] device_add+0x467/0xb80 [ 521.840177][T16170] wiphy_register+0x1fc8/0x2ff0 [ 521.840221][T16170] ? __pfx_wiphy_register+0x10/0x10 [ 521.840246][T16170] ? __pfx_netdev_run_todo+0x10/0x10 [ 521.840286][T16170] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 521.840329][T16170] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 521.840363][T16170] ieee80211_register_hw+0x3d7c/0x4b40 [ 521.840410][T16170] ? ieee80211_register_hw+0x1961/0x4b40 [ 521.840467][T16170] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 521.840502][T16170] ? __asan_memset+0x22/0x50 [ 521.840538][T16170] ? __hrtimer_setup+0x1b7/0x260 [ 521.840578][T16170] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 521.840611][T16170] mac80211_hwsim_new_radio+0x3264/0x5720 [ 521.840675][T16170] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 521.840702][T16170] ? kstrndup+0xbd/0x160 [ 521.840731][T16170] ? kstrndup+0xbd/0x160 [ 521.840758][T16170] hwsim_new_radio_nl+0xd8b/0xf90 [ 521.840802][T16170] genl_family_rcv_msg_doit+0x233/0x340 [ 521.840840][T16170] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 521.840886][T16170] ? bpf_lsm_capable+0x9/0x20 [ 521.840906][T16170] ? security_capable+0x7e/0x2c0 [ 521.840941][T16170] genl_rcv_msg+0x614/0x7a0 [ 521.840977][T16170] ? __pfx_genl_rcv_msg+0x10/0x10 [ 521.841004][T16170] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 521.841048][T16170] netlink_rcv_skb+0x226/0x4a0 [ 521.841085][T16170] ? __pfx_genl_rcv_msg+0x10/0x10 [ 521.841115][T16170] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 521.841169][T16170] ? down_read+0x2be/0x330 [ 521.841207][T16170] genl_rcv+0x28/0x40 [ 521.841232][T16170] netlink_unicast+0x7bd/0x940 [ 521.841278][T16170] netlink_sendmsg+0x813/0xb40 [ 521.841311][T16170] ? __pfx_netlink_sendmsg+0x10/0x10 [ 521.841344][T16170] ? apparmor_socket_sendmsg+0x98/0x360 [ 521.841373][T16170] ? __pfx_netlink_sendmsg+0x10/0x10 [ 521.841394][T16170] sock_sendmsg_nosec+0x13a/0x180 [ 521.841421][T16170] ____sys_sendmsg+0x54e/0x850 [ 521.841460][T16170] ? __pfx_____sys_sendmsg+0x10/0x10 [ 521.841504][T16170] ? import_iovec+0x73/0xa0 [ 521.841537][T16170] ___sys_sendmsg+0x2a5/0x360 [ 521.841575][T16170] ? __lock_acquire+0x747/0x2de0 [ 521.841606][T16170] ? __pfx____sys_sendmsg+0x10/0x10 [ 521.841643][T16170] ? futex_wait+0x2a2/0x390 [ 521.841712][T16170] ? __fget_files+0x2a/0x420 [ 521.841744][T16170] ? __fget_files+0x3a2/0x420 [ 521.841789][T16170] __x64_sys_sendmsg+0x1b1/0x290 [ 521.841825][T16170] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 521.841883][T16170] do_syscall_64+0x166/0x520 [ 521.841911][T16170] ? trace_irq_disable+0x3b/0x140 [ 521.841935][T16170] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.841959][T16170] ? clear_bhb_loop+0x70/0xc0 [ 521.841988][T16170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.842012][T16170] RIP: 0033:0x7f5e81b9e159 [ 521.842034][T16170] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 521.842053][T16170] RSP: 002b:00007f5e7fdf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 521.842079][T16170] RAX: ffffffffffffffda RBX: 00007f5e81e25fa0 RCX: 00007f5e81b9e159 [ 521.842096][T16170] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 521.842111][T16170] RBP: 00007f5e81c3506b R08: 0000000000000000 R09: 0000000000000000 [ 521.842125][T16170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 521.842139][T16170] R13: 00007f5e81e26038 R14: 00007f5e81e25fa0 R15: 00007ffd3d6d3438 [ 521.842178][T16170] [ 522.687767][T16186] netlink: 'syz.3.2798': attribute type 2 has an invalid length. [ 522.715663][T16186] sysfs: cannot create duplicate filename '/class/ieee80211/.P'G!DES' [ 522.715687][T16186] CPU: 0 UID: 0 PID: 16186 Comm: syz.3.2798 Not tainted syzkaller #0 PREEMPT(full) [ 522.715714][T16186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 522.715728][T16186] Call Trace: [ 522.715737][T16186] [ 522.715748][T16186] dump_stack_lvl+0xe8/0x150 [ 522.715788][T16186] sysfs_warn_dup+0x8e/0xa0 [ 522.715825][T16186] sysfs_do_create_link_sd+0xc0/0x110 [ 522.715874][T16186] device_add_class_symlinks+0x1cf/0x240 [ 522.715906][T16186] device_add+0x467/0xb80 [ 522.715935][T16186] wiphy_register+0x1fc8/0x2ff0 [ 522.715980][T16186] ? __pfx_wiphy_register+0x10/0x10 [ 522.716004][T16186] ? __pfx_netdev_run_todo+0x10/0x10 [ 522.716041][T16186] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 522.716084][T16186] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 522.716116][T16186] ieee80211_register_hw+0x3d7c/0x4b40 [ 522.716161][T16186] ? ieee80211_register_hw+0x1961/0x4b40 [ 522.716218][T16186] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 522.716252][T16186] ? __asan_memset+0x22/0x50 [ 522.716289][T16186] ? __hrtimer_setup+0x1b7/0x260 [ 522.716322][T16186] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 522.716355][T16186] mac80211_hwsim_new_radio+0x3264/0x5720 [ 522.716419][T16186] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 522.716449][T16186] ? kstrndup+0xbd/0x160 [ 522.716479][T16186] ? kstrndup+0xbd/0x160 [ 522.716506][T16186] hwsim_new_radio_nl+0xd8b/0xf90 [ 522.716550][T16186] genl_family_rcv_msg_doit+0x233/0x340 [ 522.716589][T16186] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 522.716634][T16186] ? bpf_lsm_capable+0x9/0x20 [ 522.716655][T16186] ? security_capable+0x7e/0x2c0 [ 522.716691][T16186] genl_rcv_msg+0x614/0x7a0 [ 522.716727][T16186] ? __pfx_genl_rcv_msg+0x10/0x10 [ 522.716779][T16186] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 522.716941][T16186] netlink_rcv_skb+0x226/0x4a0 [ 522.717042][T16186] ? __pfx_genl_rcv_msg+0x10/0x10 [ 522.717117][T16186] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 522.717253][T16186] ? down_read+0x2be/0x330 [ 522.717347][T16186] genl_rcv+0x28/0x40 [ 522.717405][T16186] netlink_unicast+0x7bd/0x940 [ 522.717519][T16186] netlink_sendmsg+0x813/0xb40 [ 522.717601][T16186] ? __pfx_netlink_sendmsg+0x10/0x10 [ 522.717686][T16186] ? apparmor_socket_sendmsg+0x98/0x360 [ 522.717760][T16186] ? __pfx_netlink_sendmsg+0x10/0x10 [ 522.717813][T16186] sock_sendmsg_nosec+0x13a/0x180 [ 522.717895][T16186] ____sys_sendmsg+0x54e/0x850 [ 522.717989][T16186] ? __pfx_____sys_sendmsg+0x10/0x10 [ 522.718100][T16186] ? import_iovec+0x73/0xa0 [ 522.718191][T16186] ___sys_sendmsg+0x2a5/0x360 [ 522.718281][T16186] ? __lock_acquire+0x747/0x2de0 [ 522.718362][T16186] ? __pfx____sys_sendmsg+0x10/0x10 [ 522.718455][T16186] ? futex_wait+0x2a2/0x390 [ 522.718638][T16186] ? __fget_files+0x2a/0x420 [ 522.718720][T16186] ? __fget_files+0x3a2/0x420 [ 522.718833][T16186] __x64_sys_sendmsg+0x1b1/0x290 [ 522.718927][T16186] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 522.719070][T16186] do_syscall_64+0x166/0x520 [ 522.719142][T16186] ? trace_irq_disable+0x3b/0x140 [ 522.719203][T16186] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.719266][T16186] ? clear_bhb_loop+0x70/0xc0 [ 522.719338][T16186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.719393][T16186] RIP: 0033:0x7f79c4b9e159 [ 522.719446][T16186] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 522.719497][T16186] RSP: 002b:00007f79c5a73028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 522.719558][T16186] RAX: ffffffffffffffda RBX: 00007f79c4e25fa0 RCX: 00007f79c4b9e159 [ 522.719599][T16186] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 522.719641][T16186] RBP: 00007f79c4c3506b R08: 0000000000000000 R09: 0000000000000000 [ 522.719688][T16186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 522.719735][T16186] R13: 00007f79c4e26038 R14: 00007f79c4e25fa0 R15: 00007ffff906acc8 [ 522.719837][T16186] [ 522.807225][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 522.807363][ C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 523.553600][T16199] syzkaller0: entered promiscuous mode [ 523.553629][T16199] syzkaller0: entered allmulticast mode [ 523.582936][T16209] tipc: Enabling of bearer rejected, already enabled [ 523.597932][T16209] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2805'. [ 523.625074][T16210] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2804'. [ 523.677218][T16211] netlink: 'syz.2.2805': attribute type 1 has an invalid length. [ 523.825638][T16215] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2805'. [ 523.846727][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 523.846866][ C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 523.861857][T16218] netlink: 'syz.3.2806': attribute type 4 has an invalid length. [ 523.861882][T16218] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2806'. [ 524.330214][T16224] netlink: 'syz.0.2807': attribute type 2 has an invalid length. [ 524.886748][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 524.886901][ C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 525.931243][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 525.931505][ C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 526.813832][T16211] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 526.832977][T16217] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2806'. [ 526.857689][T16218] 8021q: adding VLAN 0 to HW filter on device .` [ 526.936260][T16224] sysfs: cannot create duplicate filename '/class/ieee80211/.P'G!DES' [ 526.936283][T16224] CPU: 1 UID: 0 PID: 16224 Comm: syz.0.2807 Not tainted syzkaller #0 PREEMPT(full) [ 526.936310][T16224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 526.936325][T16224] Call Trace: [ 526.936335][T16224] [ 526.936347][T16224] dump_stack_lvl+0xe8/0x150 [ 526.936390][T16224] sysfs_warn_dup+0x8e/0xa0 [ 526.936428][T16224] sysfs_do_create_link_sd+0xc0/0x110 [ 526.936471][T16224] device_add_class_symlinks+0x1cf/0x240 [ 526.936502][T16224] device_add+0x467/0xb80 [ 526.936531][T16224] wiphy_register+0x1fc8/0x2ff0 [ 526.936577][T16224] ? __pfx_wiphy_register+0x10/0x10 [ 526.936603][T16224] ? __pfx_netdev_run_todo+0x10/0x10 [ 526.936640][T16224] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 526.936685][T16224] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 526.936719][T16224] ieee80211_register_hw+0x3d7c/0x4b40 [ 526.936769][T16224] ? ieee80211_register_hw+0x1961/0x4b40 [ 526.936830][T16224] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 526.936865][T16224] ? __asan_memset+0x22/0x50 [ 526.936903][T16224] ? __hrtimer_setup+0x1b7/0x260 [ 526.936937][T16224] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 526.936971][T16224] mac80211_hwsim_new_radio+0x3264/0x5720 [ 526.937036][T16224] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 526.937065][T16224] ? kstrndup+0xbd/0x160 [ 526.937097][T16224] ? kstrndup+0xbd/0x160 [ 526.937126][T16224] hwsim_new_radio_nl+0xd8b/0xf90 [ 526.937182][T16224] genl_family_rcv_msg_doit+0x233/0x340 [ 526.937222][T16224] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 526.937269][T16224] ? bpf_lsm_capable+0x9/0x20 [ 526.937290][T16224] ? security_capable+0x7e/0x2c0 [ 526.937327][T16224] genl_rcv_msg+0x614/0x7a0 [ 526.937364][T16224] ? __pfx_genl_rcv_msg+0x10/0x10 [ 526.937393][T16224] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 526.937439][T16224] netlink_rcv_skb+0x226/0x4a0 [ 526.937488][T16224] ? __pfx_genl_rcv_msg+0x10/0x10 [ 526.937520][T16224] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 526.937578][T16224] ? down_read+0x2be/0x330 [ 526.937619][T16224] genl_rcv+0x28/0x40 [ 526.937645][T16224] netlink_unicast+0x7bd/0x940 [ 526.937693][T16224] netlink_sendmsg+0x813/0xb40 [ 526.937726][T16224] ? __pfx_netlink_sendmsg+0x10/0x10 [ 526.937759][T16224] ? apparmor_socket_sendmsg+0x98/0x360 [ 526.937790][T16224] ? __pfx_netlink_sendmsg+0x10/0x10 [ 526.937811][T16224] sock_sendmsg_nosec+0x13a/0x180 [ 526.937840][T16224] ____sys_sendmsg+0x54e/0x850 [ 526.937880][T16224] ? __pfx_____sys_sendmsg+0x10/0x10 [ 526.937924][T16224] ? import_iovec+0x73/0xa0 [ 526.937959][T16224] ___sys_sendmsg+0x2a5/0x360 [ 526.937991][T16224] ? __lock_acquire+0x747/0x2de0 [ 526.938023][T16224] ? __pfx____sys_sendmsg+0x10/0x10 [ 526.938060][T16224] ? futex_wait+0x2a2/0x390 [ 526.938152][T16224] ? __fget_files+0x2a/0x420 [ 526.938185][T16224] ? __fget_files+0x3a2/0x420 [ 526.938233][T16224] __x64_sys_sendmsg+0x1b1/0x290 [ 526.938271][T16224] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 526.938332][T16224] do_syscall_64+0x166/0x520 [ 526.938362][T16224] ? trace_irq_disable+0x3b/0x140 [ 526.938387][T16224] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.938413][T16224] ? clear_bhb_loop+0x70/0xc0 [ 526.938444][T16224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.938468][T16224] RIP: 0033:0x7fc7c7f9e159 [ 526.938491][T16224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 526.938512][T16224] RSP: 002b:00007fc7c8dc4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 526.938539][T16224] RAX: ffffffffffffffda RBX: 00007fc7c8225fa0 RCX: 00007fc7c7f9e159 [ 526.938557][T16224] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 526.938571][T16224] RBP: 00007fc7c803506b R08: 0000000000000000 R09: 0000000000000000 [ 526.938586][T16224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 526.938600][T16224] R13: 00007fc7c8226038 R14: 00007fc7c8225fa0 R15: 00007ffe3d0e1b98 [ 526.938640][T16224] [ 526.972020][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 526.972145][ C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 527.559411][T16238] block nbd2: server does not support multiple connections per device. [ 527.559995][T16238] block nbd2: shutting down sockets [ 527.713854][T16247] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2821'. [ 527.763372][T16250] netlink: 'syz.4.2813': attribute type 4 has an invalid length. [ 527.819569][T16250] netlink: 'syz.4.2813': attribute type 4 has an invalid length. [ 528.006613][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 528.006757][ C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 528.108066][T16262] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2815'. [ 528.217192][T16253] bond9: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 528.713840][T16253] bond9 (unregistering): Released all slaves [ 528.850239][T16261] wg2 speed is unknown, defaulting to 1000 [ 529.046760][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 529.046908][ C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 529.200316][T16276] tipc: Resetting bearer [ 529.200457][T16276] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 529.202369][T16276] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 529.241989][T16276] tipc: Resetting bearer [ 529.242113][T16276] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 529.242359][T16276] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 529.376719][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 529.376921][ C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 529.443388][T16276] tipc: Resetting bearer [ 529.646821][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 529.646980][ C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 529.718752][T16293] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2822'. [ 529.755785][T16293] IPv6: Can't replace route, no match found [ 530.260029][T16305] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2825'. [ 530.614905][T16320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 530.629095][T16320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 530.750262][T16320] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 530.750292][T16320] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 530.751224][T16320] tipc: Resetting bearer [ 530.751521][T16320] tipc: Resetting bearer [ 530.847976][T10287] wg2 speed is unknown, defaulting to 1000 [ 530.848020][T10287] syz2: Port: 1 Link ACTIVE [ 531.519012][T16346] syzkaller0: entered promiscuous mode [ 531.519039][T16346] syzkaller0: entered allmulticast mode [ 531.903025][T16357] netlink: 'syz.1.2843': attribute type 1 has an invalid length. [ 531.979716][T16358] batman_adv: batadv0: Removing interface: ipvlan1 [ 532.048757][T16368] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2842'. [ 532.048783][T16368] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2842'. [ 532.203935][T16367] lo: entered promiscuous mode [ 532.222085][T16367] tunl0: entered promiscuous mode [ 532.224253][T16367] gre0: entered promiscuous mode [ 532.262113][T16367] 0{X: left allmulticast mode [ 532.315023][T16367] ip_vti0: entered promiscuous mode [ 532.333216][T16367] ip6_vti0: entered promiscuous mode [ 532.354802][T16367] sit0: entered promiscuous mode [ 532.387821][T16367] ip6tnl0: entered promiscuous mode [ 532.457417][T16367] ip6gre0: entered promiscuous mode [ 532.475680][T16367] ip6gretap0: entered promiscuous mode [ 532.519128][T16369] 8021q: adding VLAN 0 to HW filter on device team0 [ 532.604794][T16369] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 532.604824][T16369] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 532.605726][T16369] tipc: Resetting bearer [ 532.606015][T16369] tipc: Resetting bearer [ 532.606269][T16369] veth1_vlan: left promiscuous mode [ 532.649210][T16369] veth0_vlan: left promiscuous mode [ 532.650940][T16369] veth0_vlan: entered promiscuous mode [ 532.653325][T16369] veth1_vlan: entered promiscuous mode [ 532.683147][T16369] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 532.684391][T16369] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 532.685608][T16369] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 532.710407][T16369] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 532.850867][T16366] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2845'. [ 532.859161][ T331] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.859338][ T331] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.859443][ T331] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.859545][ T331] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.123397][T16393] syzkaller0: entered promiscuous mode [ 533.123423][T16393] syzkaller0: entered allmulticast mode [ 533.361597][T16397] syzkaller0: entered promiscuous mode [ 533.361624][T16397] syzkaller0: entered allmulticast mode [ 533.473402][T16406] netlink: 'syz.2.2855': attribute type 2 has an invalid length. [ 533.715840][T16406] sysfs: cannot create duplicate filename '/class/ieee80211/.P'G!DES' [ 533.715865][T16406] CPU: 1 UID: 0 PID: 16406 Comm: syz.2.2855 Not tainted syzkaller #0 PREEMPT(full) [ 533.715893][T16406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 533.715908][T16406] Call Trace: [ 533.715919][T16406] [ 533.715929][T16406] dump_stack_lvl+0xe8/0x150 [ 533.715972][T16406] sysfs_warn_dup+0x8e/0xa0 [ 533.716009][T16406] sysfs_do_create_link_sd+0xc0/0x110 [ 533.716051][T16406] device_add_class_symlinks+0x1cf/0x240 [ 533.716084][T16406] device_add+0x467/0xb80 [ 533.716113][T16406] wiphy_register+0x1fc8/0x2ff0 [ 533.716159][T16406] ? __pfx_wiphy_register+0x10/0x10 [ 533.716185][T16406] ? __pfx_netdev_run_todo+0x10/0x10 [ 533.716223][T16406] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 533.716271][T16406] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 533.716304][T16406] ieee80211_register_hw+0x3d7c/0x4b40 [ 533.716353][T16406] ? ieee80211_register_hw+0x1961/0x4b40 [ 533.716413][T16406] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 533.716447][T16406] ? __asan_memset+0x22/0x50 [ 533.716484][T16406] ? __hrtimer_setup+0x1b7/0x260 [ 533.716517][T16406] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 533.716559][T16406] mac80211_hwsim_new_radio+0x3264/0x5720 [ 533.716625][T16406] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 533.716653][T16406] ? kstrndup+0xbd/0x160 [ 533.716686][T16406] ? kstrndup+0xbd/0x160 [ 533.716714][T16406] hwsim_new_radio_nl+0xd8b/0xf90 [ 533.716760][T16406] genl_family_rcv_msg_doit+0x233/0x340 [ 533.716800][T16406] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 533.716846][T16406] ? bpf_lsm_capable+0x9/0x20 [ 533.716867][T16406] ? security_capable+0x7e/0x2c0 [ 533.716904][T16406] genl_rcv_msg+0x614/0x7a0 [ 533.716940][T16406] ? __pfx_genl_rcv_msg+0x10/0x10 [ 533.716967][T16406] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 533.717011][T16406] netlink_rcv_skb+0x226/0x4a0 [ 533.717050][T16406] ? __pfx_genl_rcv_msg+0x10/0x10 [ 533.717082][T16406] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 533.717138][T16406] ? down_read+0x2be/0x330 [ 533.717177][T16406] genl_rcv+0x28/0x40 [ 533.717203][T16406] netlink_unicast+0x7bd/0x940 [ 533.717252][T16406] netlink_sendmsg+0x813/0xb40 [ 533.717287][T16406] ? __pfx_netlink_sendmsg+0x10/0x10 [ 533.717322][T16406] ? apparmor_socket_sendmsg+0x98/0x360 [ 533.717351][T16406] ? __pfx_netlink_sendmsg+0x10/0x10 [ 533.717374][T16406] sock_sendmsg_nosec+0x13a/0x180 [ 533.717402][T16406] ____sys_sendmsg+0x54e/0x850 [ 533.717443][T16406] ? __pfx_____sys_sendmsg+0x10/0x10 [ 533.717488][T16406] ? import_iovec+0x73/0xa0 [ 533.717531][T16406] ___sys_sendmsg+0x2a5/0x360 [ 533.717562][T16406] ? __lock_acquire+0x747/0x2de0 [ 533.717594][T16406] ? __pfx____sys_sendmsg+0x10/0x10 [ 533.717633][T16406] ? futex_wake+0x51b/0x5f0 [ 533.717705][T16406] ? __fget_files+0x2a/0x420 [ 533.717738][T16406] ? __fget_files+0x3a2/0x420 [ 533.717785][T16406] __x64_sys_sendmsg+0x1b1/0x290 [ 533.717822][T16406] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 533.717883][T16406] do_syscall_64+0x166/0x520 [ 533.717913][T16406] ? trace_irq_disable+0x3b/0x140 [ 533.717938][T16406] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.717963][T16406] ? clear_bhb_loop+0x70/0xc0 [ 533.717994][T16406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.718018][T16406] RIP: 0033:0x7fd01e59e159 [ 533.718042][T16406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 533.718061][T16406] RSP: 002b:00007fd01f3a5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 533.718085][T16406] RAX: ffffffffffffffda RBX: 00007fd01e825fa0 RCX: 00007fd01e59e159 [ 533.718103][T16406] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 533.718118][T16406] RBP: 00007fd01e63506b R08: 0000000000000000 R09: 0000000000000000 [ 533.718133][T16406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 533.718147][T16406] R13: 00007fd01e826038 R14: 00007fd01e825fa0 R15: 00007ffcf5eb4108 [ 533.718186][T16406] [ 534.176417][T16421] 8021q: adding VLAN 0 to HW filter on device team0 [ 534.203142][T16421] : left promiscuous mode [ 534.326583][ C0] net_ratelimit: 12 callbacks suppressed [ 534.326608][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 534.326680][ C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 534.330564][T16421] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 534.330592][T16421] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 534.331583][T16421] tipc: Resetting bearer [ 534.331944][T16421] tipc: Resetting bearer [ 534.392446][T16421] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 534.448615][T16429] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2859'. [ 534.448644][T16429] openvswitch: netlink: Flow actions attr not present in new flow. [ 534.486363][T16429] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2859'. [ 534.673466][T16436] wg2 speed is unknown, defaulting to 1000 [ 534.915087][T16441] netlink: 'syz.0.2863': attribute type 30 has an invalid length. [ 534.915111][T16441] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2863'. [ 534.916872][T16441] bond0: option arp_missed_max: invalid value (0) [ 534.916897][T16441] bond0: option arp_missed_max: allowed values 1 - 255 [ 535.366750][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 535.366829][ C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 535.377878][T16451] syzkaller0: entered promiscuous mode [ 535.377941][T16451] syzkaller0: entered allmulticast mode [ 535.973672][T16463] gretap3: entered promiscuous mode [ 536.211920][T16457] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2868'. [ 536.406787][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 536.406879][ C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 537.446725][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 537.446824][ C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 537.828164][T16482] tc_dump_action: action bad kind [ 539.526768][ C0] net_ratelimit: 2 callbacks suppressed [ 539.526792][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 539.526863][ C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 540.026047][T16525] tipc: Resetting bearer [ 540.040785][T16525] tipc: Resetting bearer [ 540.130281][T16536] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2880'. [ 540.568400][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 540.568494][ C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 541.608649][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 541.608763][ C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 541.988898][T16580] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2887'. [ 541.993526][T16580] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2887'. [ 542.610167][T16591] tc_dump_action: action bad kind [ 542.646585][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 542.646665][ C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 543.136796][T16609] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2892'. [ 543.686861][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 543.686947][ C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 544.146841][T16624] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2895'. [ 544.146874][T16624] netlink: 59 bytes leftover after parsing attributes in process `syz.4.2895'. [ 544.726600][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 544.726698][ C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 545.212556][T16614] openvswitch: netlink: Flow key attr not present in new flow. [ 545.355288][T16641] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2899'. [ 545.676943][T16645] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2899'. [ 545.676974][T16645] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2899'. [ 545.766631][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 545.766727][ C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 545.899718][T16641] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 546.294123][T16654] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 546.311728][T16654] sch_tbf: burst 6281 is lower than device lo mtu (11337746) ! [ 546.673130][T16663] tc_dump_action: action bad kind [ 546.796779][T10581] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 546.796804][T10581] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 546.806674][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 546.806759][ C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 546.911282][T16671] openvswitch: netlink: Flow actions attr not present in new flow. [ 547.086496][T12016] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 547.086523][T12016] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 547.646832][T16687] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2908'. [ 547.646866][T16687] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2908'. [ 547.679624][T16687] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2908'. [ 547.708662][T16687] syzkaller1: entered promiscuous mode [ 547.708688][T16687] syzkaller1: entered allmulticast mode [ 547.846777][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 548.075926][T16702] netlink: 'syz.3.2909': attribute type 2 has an invalid length. [ 548.651023][T16702] sysfs: cannot create duplicate filename '/class/ieee80211/.P'G!DES' [ 548.651052][T16702] CPU: 1 UID: 0 PID: 16702 Comm: syz.3.2909 Not tainted syzkaller #0 PREEMPT(full) [ 548.651099][T16702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 548.651125][T16702] Call Trace: [ 548.651142][T16702] [ 548.651162][T16702] dump_stack_lvl+0xe8/0x150 [ 548.651228][T16702] sysfs_warn_dup+0x8e/0xa0 [ 548.651295][T16702] sysfs_do_create_link_sd+0xc0/0x110 [ 548.651338][T16702] device_add_class_symlinks+0x1cf/0x240 [ 548.651370][T16702] device_add+0x467/0xb80 [ 548.651403][T16702] wiphy_register+0x1fc8/0x2ff0 [ 548.651451][T16702] ? __pfx_wiphy_register+0x10/0x10 [ 548.651477][T16702] ? __pfx_netdev_run_todo+0x10/0x10 [ 548.651515][T16702] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 548.651560][T16702] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 548.651595][T16702] ieee80211_register_hw+0x3d7c/0x4b40 [ 548.651645][T16702] ? ieee80211_register_hw+0x1961/0x4b40 [ 548.651705][T16702] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 548.651741][T16702] ? __asan_memset+0x22/0x50 [ 548.651779][T16702] ? __hrtimer_setup+0x1b7/0x260 [ 548.651813][T16702] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 548.651848][T16702] mac80211_hwsim_new_radio+0x3264/0x5720 [ 548.651915][T16702] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 548.651944][T16702] ? kstrndup+0xbd/0x160 [ 548.651976][T16702] ? kstrndup+0xbd/0x160 [ 548.652003][T16702] hwsim_new_radio_nl+0xd8b/0xf90 [ 548.652051][T16702] genl_family_rcv_msg_doit+0x233/0x340 [ 548.652091][T16702] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 548.652138][T16702] ? bpf_lsm_capable+0x9/0x20 [ 548.652160][T16702] ? security_capable+0x7e/0x2c0 [ 548.652197][T16702] genl_rcv_msg+0x614/0x7a0 [ 548.652234][T16702] ? __pfx_genl_rcv_msg+0x10/0x10 [ 548.652264][T16702] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 548.652318][T16702] netlink_rcv_skb+0x226/0x4a0 [ 548.652358][T16702] ? __pfx_genl_rcv_msg+0x10/0x10 [ 548.652389][T16702] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 548.652446][T16702] ? down_read+0x2be/0x330 [ 548.652487][T16702] genl_rcv+0x28/0x40 [ 548.652513][T16702] netlink_unicast+0x7bd/0x940 [ 548.652562][T16702] netlink_sendmsg+0x813/0xb40 [ 548.652597][T16702] ? __pfx_netlink_sendmsg+0x10/0x10 [ 548.652632][T16702] ? apparmor_socket_sendmsg+0x98/0x360 [ 548.652663][T16702] ? __pfx_netlink_sendmsg+0x10/0x10 [ 548.652684][T16702] sock_sendmsg_nosec+0x13a/0x180 [ 548.652713][T16702] ____sys_sendmsg+0x54e/0x850 [ 548.652754][T16702] ? __pfx_____sys_sendmsg+0x10/0x10 [ 548.652799][T16702] ? import_iovec+0x73/0xa0 [ 548.652835][T16702] ___sys_sendmsg+0x2a5/0x360 [ 548.652867][T16702] ? __lock_acquire+0x747/0x2de0 [ 548.652898][T16702] ? __pfx____sys_sendmsg+0x10/0x10 [ 548.652936][T16702] ? futex_wake+0x51b/0x5f0 [ 548.653009][T16702] ? __fget_files+0x2a/0x420 [ 548.653042][T16702] ? __fget_files+0x3a2/0x420 [ 548.653089][T16702] __x64_sys_sendmsg+0x1b1/0x290 [ 548.653126][T16702] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 548.653186][T16702] do_syscall_64+0x166/0x520 [ 548.653216][T16702] ? trace_irq_disable+0x3b/0x140 [ 548.653240][T16702] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.653266][T16702] ? clear_bhb_loop+0x70/0xc0 [ 548.653305][T16702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.653329][T16702] RIP: 0033:0x7f79c4b9e159 [ 548.653353][T16702] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 548.653374][T16702] RSP: 002b:00007f79c5a73028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 548.653400][T16702] RAX: ffffffffffffffda RBX: 00007f79c4e25fa0 RCX: 00007f79c4b9e159 [ 548.653419][T16702] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 548.653434][T16702] RBP: 00007f79c4c3506b R08: 0000000000000000 R09: 0000000000000000 [ 548.653450][T16702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 548.653465][T16702] R13: 00007f79c4e26038 R14: 00007f79c4e25fa0 R15: 00007ffff906acc8 [ 548.653505][T16702] [ 549.402059][T16723] netlink: 'syz.4.2911': attribute type 1 has an invalid length. [ 549.565679][T16717] IPVS: Scheduler module ip_vs_sip not found [ 549.616697][T16717] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2911'. [ 549.901286][T16733] netlink: 'syz.1.2914': attribute type 2 has an invalid length. [ 549.919889][T16725] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2913'. [ 549.926622][ C0] net_ratelimit: 4 callbacks suppressed [ 549.926644][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 549.926732][ C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 550.273666][T16723] 8021q: adding VLAN 0 to HW filter on device bond19 [ 550.341079][T16735] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2915'. [ 550.456699][T16738] netlink: NAT attribute has 8 unknown bytes [ 550.456739][T16738] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 550.966672][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 550.966754][ C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 551.532640][T16752] wg2 speed is unknown, defaulting to 1000 [ 552.006641][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 552.006732][ C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 552.102816][T16769] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 552.305582][T16764] ip6gre2: entered promiscuous mode [ 552.305608][T16764] ip6gre2: entered allmulticast mode [ 552.575739][T16772] Unknown options in mask 6 [ 552.576412][T16772] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2924'. [ 552.576549][T16772] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2924'. [ 552.663378][T16772] netlink: 'syz.1.2924': attribute type 1 has an invalid length. [ 552.663404][T16772] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2924'. [ 552.757718][T16779] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2927'. [ 553.046604][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 553.046685][ C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 553.646019][T16793] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2930'. [ 553.717692][T16793] IPVS: Error connecting to the multicast addr [ 554.044980][ T59] tipc: Subscription rejected, illegal request [ 554.064641][T16805] netlink: 'syz.3.2932': attribute type 3 has an invalid length. [ 554.096283][T16810] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2934'. [ 554.292385][T16808] syzkaller0: entered promiscuous mode [ 554.292443][T16808] syzkaller0: entered allmulticast mode [ 554.340828][T16812] tipc: Enabled bearer , priority 0 [ 554.447524][T16808] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 554.599069][T16812] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2935'. [ 554.636595][T16808] tipc: Resetting bearer [ 554.673239][T16807] tipc: Resetting bearer [ 554.845842][T16807] tipc: Disabling bearer [ 554.986956][T16818] batman_adv: batadv0: Adding interface: veth0 [ 554.987272][T16818] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 554.987324][T16818] batman_adv: batadv0: Interface activated: veth0 [ 555.065606][T16818] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 555.065636][T16818] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 555.085346][T16818] batman_adv: batadv0: Interface deactivated: veth0 [ 555.085372][T16818] batman_adv: batadv0: Removing interface: veth0 [ 555.126718][ C0] net_ratelimit: 2 callbacks suppressed [ 555.126745][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 555.126849][ C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 555.167393][T16819] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 555.490585][T16828] xt_l2tp: invalid flags combination: 8 [ 555.547666][T16826] tc_dump_action: action bad kind [ 555.602169][T16826] netlink: 'syz.0.2941': attribute type 2 has an invalid length. [ 555.602195][T16826] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2941'. [ 555.952938][T16835] ip_tables: iptables: counters copy to user failed while replacing table [ 556.036765][T16836] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 556.166668][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 556.166754][ C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 556.753240][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058796c00: rx timeout, send abort [ 557.206777][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 557.206871][ C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 557.253306][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058796c00: abort rx timeout. Force session deactivation [ 557.253476][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807bad9400: rx timeout, send abort [ 557.419734][T16859] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20001 [ 557.753526][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807bad9400: abort rx timeout. Force session deactivation [ 558.246698][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 558.301738][T16847] ip6gretap0: entered allmulticast mode [ 558.606704][T16878] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20004 [ 558.899902][T16887] xt_policy: output policy not valid in PREROUTING and INPUT [ 560.226929][T16919] net_ratelimit: 3 callbacks suppressed [ 560.226951][T16919] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 560.326659][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 560.326753][ C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 561.366678][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 561.366772][ C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 562.000818][T16958] veth1_vlan: left promiscuous mode [ 562.017206][T16958] veth0_vlan: left promiscuous mode [ 562.036755][T16958] veth0_vlan: entered promiscuous mode [ 562.055631][T16958] veth1_vlan: entered promiscuous mode [ 562.086582][T16958] veth1_macvtap: left promiscuous mode [ 562.111272][T16958] veth0_macvtap: left promiscuous mode [ 562.115408][T16958] veth0_macvtap: entered promiscuous mode [ 562.137127][T16958] veth1_macvtap: entered promiscuous mode [ 562.171249][T16958] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 562.205114][T16958] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 562.222221][T16958] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 562.255690][T16958] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 562.277876][T16958] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 562.306936][T16958] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 562.406611][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 562.406710][ C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 562.688851][T16958] 8021q: adding VLAN 0 to HW filter on device bond1 [ 562.693506][T16958] 8021q: adding VLAN 0 to HW filter on device bond2 [ 562.830690][T16958] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 562.847940][T16958] 8021q: adding VLAN 0 to HW filter on device bond3 [ 562.880318][T16958] 8021q: adding VLAN 0 to HW filter on device bond4 [ 562.901113][T16958] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 562.918759][T16958] 8021q: adding VLAN 0 to HW filter on device bond5 [ 563.033005][T16958] 8021q: adding VLAN 0 to HW filter on device bond6 [ 563.125245][T16958] 8021q: adding VLAN 0 to HW filter on device bond7 [ 563.136704][T13756] bond6: (slave bridge2): link status up again after 0 ms [ 563.200122][ T59] bond6: (slave bridge2): link status up again after 0 ms [ 563.216665][ T331] bond6: (slave bridge2): link status up again after 0 ms [ 563.293447][T16958] 8021q: adding VLAN 0 to HW filter on device bond8 [ 563.310913][T16958] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 563.442089][T16958] batman_adv: batadv0: Interface activated: gretap2 [ 563.465722][T16958] 8021q: adding VLAN 0 to HW filter on device bond9 [ 563.523189][T13760] bridge4: port 1(veth5) entered blocking state [ 563.523305][T13760] bridge4: port 1(veth5) entered forwarding state [ 563.544811][T13760] bridge4: port 2(veth7) entered blocking state [ 563.544940][T13760] bridge4: port 2(veth7) entered forwarding state [ 563.746969][ T331] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 563.748170][T12016] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 563.748218][T12016] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 563.748259][T12016] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 563.748857][T16975] ip6_vti0: left promiscuous mode [ 563.933985][T16978] syzkaller0: left promiscuous mode [ 563.934013][T16978] syzkaller0: left allmulticast mode [ 564.426407][T16991] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2969'. [ 564.967762][T16997] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2970'. [ 565.381089][T13760] net_ratelimit: 24 callbacks suppressed [ 565.381116][T13760] bond6: (slave bridge2): link status up again after 0 ms [ 565.400693][T12016] bond6: (slave bridge2): link status up again after 0 ms [ 565.418513][T13760] bond6: (slave bridge2): link status up again after 0 ms [ 565.438647][T13756] bond6: (slave bridge2): link status up again after 0 ms [ 565.482020][T12016] bond6: (slave bridge2): link status up again after 0 ms [ 565.497226][ T3310] bond6: (slave bridge2): link status up again after 0 ms [ 565.518901][ T3310] bond6: (slave bridge2): link status up again after 0 ms [ 565.526705][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 565.526947][ C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 565.555572][ T331] bond6: (slave bridge2): link status up again after 0 ms [ 566.165859][T17025] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2973'. [ 566.330365][T17029] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 566.982929][T17041] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2976'. [ 567.111206][T17046] IPVS: Error connecting to the multicast addr [ 568.278641][T17067] tc_dump_action: action bad kind [ 568.421790][T17071] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2980'. [ 569.225671][T17094] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2983'. [ 569.458105][T17094] netlink: 'syz.1.2983': attribute type 1 has an invalid length. [ 569.458134][T17094] netlink: 200 bytes leftover after parsing attributes in process `syz.1.2983'. [ 569.730688][T17098] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2984'. [ 570.429605][T12016] net_ratelimit: 23 callbacks suppressed [ 570.429631][T12016] bond6: (slave bridge2): failed to get link speed/duplex [ 570.536614][T13756] bond6: (slave bridge2): failed to get link speed/duplex [ 570.599579][T17088] xt_policy: output policy not valid in PREROUTING and INPUT [ 570.650750][T12016] bond6: (slave bridge2): failed to get link speed/duplex [ 570.726737][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 570.726834][ C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 570.986890][T17119] Unknown options in mask 6 [ 570.988758][T17119] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2988'. [ 570.988794][T17119] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2988'. [ 571.139320][ T331] bond6: (slave bridge2): failed to get link speed/duplex [ 571.267584][ T331] bond6: (slave bridge2): failed to get link speed/duplex [ 571.289314][T17121] netlink: 'syz.2.2988': attribute type 1 has an invalid length. [ 571.289338][T17121] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2988'. [ 571.532656][T17128] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2990'. [ 571.532686][T17128] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2990'. [ 571.766774][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 571.766872][ C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 572.074337][T17133] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2992'. [ 572.695824][T17143] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2994'. [ 572.806801][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 573.944407][T17126] tipc: Resetting bearer [ 573.945146][T17126] tipc: Resetting bearer [ 574.130639][T17142] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2994'. [ 574.130675][T17142] netlink: 'syz.3.2994': attribute type 4 has an invalid length. [ 574.629968][T17162] netlink: 'syz.2.2999': attribute type 10 has an invalid length. [ 574.723112][T17162] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 574.974462][T17161] wg2 speed is unknown, defaulting to 1000 [ 575.478770][T17173] net_ratelimit: 13 callbacks suppressed [ 575.478796][T17173] netlink: zone id is out of range [ 575.478808][T17173] netlink: zone id is out of range [ 575.478819][T17173] netlink: zone id is out of range [ 575.478829][T17173] netlink: zone id is out of range [ 575.478839][T17173] netlink: zone id is out of range [ 575.478848][T17173] netlink: zone id is out of range [ 575.478862][T17173] netlink: zone id is out of range [ 575.478872][T17173] netlink: zone id is out of range [ 575.478882][T17173] netlink: zone id is out of range [ 575.478891][T17173] netlink: zone id is out of range [ 576.160234][T17185] __nla_validate_parse: 1 callbacks suppressed [ 576.160256][T17185] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3005'. [ 576.449022][T17190] syzkaller0: entered promiscuous mode [ 576.449048][T17190] syzkaller0: entered allmulticast mode [ 576.478441][T17194] xt_policy: output policy not valid in PREROUTING and INPUT [ 577.865255][T17221] Cannot find set identified by id 0 to match [ 580.229780][T17229] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3014'. [ 580.302501][T17235] netlink: 'syz.1.3016': attribute type 2 has an invalid length. [ 580.328926][T17235] : entered promiscuous mode [ 580.446555][T17224] netlink: 'syz.2.3013': attribute type 10 has an invalid length. [ 580.487383][ T50] net_ratelimit: 174 callbacks suppressed [ 580.487408][ T50] bond6: (slave bridge2): failed to get link speed/duplex [ 580.615884][T13756] bond6: (slave bridge2): failed to get link speed/duplex [ 580.717726][ T331] bond6: (slave bridge2): failed to get link speed/duplex [ 580.849324][T10583] bond6: (slave bridge2): failed to get link speed/duplex [ 580.909031][T17238] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 580.960667][T13756] bond6: (slave bridge2): failed to get link speed/duplex [ 581.067759][T13756] bond6: (slave bridge2): failed to get link speed/duplex [ 581.126561][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 581.126664][ C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 581.213684][T10583] bond6: (slave bridge2): failed to get link speed/duplex [ 581.421520][T17252] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3017'. [ 582.071747][T17258] sysfs: cannot create duplicate filename '/class/ieee80211/.P'G!DES' [ 582.071775][T17258] CPU: 0 UID: 0 PID: 17258 Comm: syz.3.3019 Not tainted syzkaller #0 PREEMPT(full) [ 582.071802][T17258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 582.071818][T17258] Call Trace: [ 582.071827][T17258] [ 582.071838][T17258] dump_stack_lvl+0xe8/0x150 [ 582.071892][T17258] sysfs_warn_dup+0x8e/0xa0 [ 582.071930][T17258] sysfs_do_create_link_sd+0xc0/0x110 [ 582.071972][T17258] device_add_class_symlinks+0x1cf/0x240 [ 582.072004][T17258] device_add+0x467/0xb80 [ 582.072033][T17258] wiphy_register+0x1fc8/0x2ff0 [ 582.072077][T17258] ? __pfx_wiphy_register+0x10/0x10 [ 582.072105][T17258] ? __pfx_netdev_run_todo+0x10/0x10 [ 582.072143][T17258] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 582.072186][T17258] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 582.072218][T17258] ieee80211_register_hw+0x3d7c/0x4b40 [ 582.072264][T17258] ? ieee80211_register_hw+0x1961/0x4b40 [ 582.072321][T17258] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 582.072357][T17258] ? __asan_memset+0x22/0x50 [ 582.072394][T17258] ? __hrtimer_setup+0x1b7/0x260 [ 582.072427][T17258] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 582.072461][T17258] mac80211_hwsim_new_radio+0x3264/0x5720 [ 582.072526][T17258] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 582.072554][T17258] ? kstrndup+0xbd/0x160 [ 582.072586][T17258] ? kstrndup+0xbd/0x160 [ 582.072614][T17258] hwsim_new_radio_nl+0xd8b/0xf90 [ 582.072661][T17258] genl_family_rcv_msg_doit+0x233/0x340 [ 582.072699][T17258] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 582.072742][T17258] ? bpf_lsm_capable+0x9/0x20 [ 582.072763][T17258] ? security_capable+0x7e/0x2c0 [ 582.072801][T17258] genl_rcv_msg+0x614/0x7a0 [ 582.072838][T17258] ? __pfx_genl_rcv_msg+0x10/0x10 [ 582.072866][T17258] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 582.072926][T17258] netlink_rcv_skb+0x226/0x4a0 [ 582.072965][T17258] ? __pfx_genl_rcv_msg+0x10/0x10 [ 582.072997][T17258] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 582.073053][T17258] ? down_read+0x2be/0x330 [ 582.073092][T17258] genl_rcv+0x28/0x40 [ 582.073119][T17258] netlink_unicast+0x7bd/0x940 [ 582.073166][T17258] netlink_sendmsg+0x813/0xb40 [ 582.073201][T17258] ? __pfx_netlink_sendmsg+0x10/0x10 [ 582.073234][T17258] ? apparmor_socket_sendmsg+0x98/0x360 [ 582.073264][T17258] ? __pfx_netlink_sendmsg+0x10/0x10 [ 582.073285][T17258] sock_sendmsg_nosec+0x13a/0x180 [ 582.073313][T17258] ____sys_sendmsg+0x54e/0x850 [ 582.073353][T17258] ? __pfx_____sys_sendmsg+0x10/0x10 [ 582.073393][T17258] ? import_iovec+0x73/0xa0 [ 582.073427][T17258] ___sys_sendmsg+0x2a5/0x360 [ 582.073458][T17258] ? __lock_acquire+0x747/0x2de0 [ 582.073489][T17258] ? __pfx____sys_sendmsg+0x10/0x10 [ 582.073525][T17258] ? futex_wait+0x2a2/0x390 [ 582.073596][T17258] ? __fget_files+0x2a/0x420 [ 582.073630][T17258] ? __fget_files+0x3a2/0x420 [ 582.073676][T17258] __x64_sys_sendmsg+0x1b1/0x290 [ 582.073712][T17258] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 582.073772][T17258] do_syscall_64+0x166/0x520 [ 582.073801][T17258] ? trace_irq_disable+0x3b/0x140 [ 582.073826][T17258] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.073850][T17258] ? clear_bhb_loop+0x70/0xc0 [ 582.073888][T17258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.073913][T17258] RIP: 0033:0x7f79c4b9e159 [ 582.073937][T17258] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 582.073958][T17258] RSP: 002b:00007f79c5a73028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 582.073985][T17258] RAX: ffffffffffffffda RBX: 00007f79c4e25fa0 RCX: 00007f79c4b9e159 [ 582.074005][T17258] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 582.074021][T17258] RBP: 00007f79c4c3506b R08: 0000000000000000 R09: 0000000000000000 [ 582.074036][T17258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 582.074051][T17258] R13: 00007f79c4e26038 R14: 00007f79c4e25fa0 R15: 00007ffff906acc8 [ 582.074091][T17258] [ 583.773074][T17287] netlink: 236 bytes leftover after parsing attributes in process `syz.1.3024'. [ 583.793333][T17280] digital: digital_start_poll: Unknown protocol [ 583.823207][T17280] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3023'. [ 584.617296][T17304] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3028'. [ 584.844520][T17310] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3030'. [ 585.496792][ T59] net_ratelimit: 34 callbacks suppressed [ 585.496816][ T59] bond6: (slave bridge2): failed to get link speed/duplex [ 585.618004][ T59] bond6: (slave bridge2): failed to get link speed/duplex [ 585.727029][T13756] bond6: (slave bridge2): failed to get link speed/duplex [ 585.837791][T13756] bond6: (slave bridge2): failed to get link speed/duplex [ 585.954264][ T3310] bond6: (slave bridge2): failed to get link speed/duplex [ 586.036568][T17324] openvswitch: netlink: Multiple metadata blocks provided [ 586.057652][ T50] bond6: (slave bridge2): failed to get link speed/duplex [ 586.176782][ T59] bond6: (slave bridge2): failed to get link speed/duplex [ 586.293656][ T59] bond6: (slave bridge2): failed to get link speed/duplex [ 586.330322][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 586.950189][T17354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3036'. [ 587.289913][T17355] netlink: 'syz.2.3037': attribute type 11 has an invalid length. [ 587.747882][T17374] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3039'. [ 587.875144][T17371] syzkaller1: entered promiscuous mode [ 587.875171][T17371] syzkaller1: entered allmulticast mode [ 588.372742][T17384] xt_policy: output policy not valid in PREROUTING and INPUT [ 589.613023][T17401] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3043'. [ 589.703037][T17403] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3045'. [ 590.620469][T17424] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3048'. [ 590.711344][T17428] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3048'. [ 591.057891][ T59] net_ratelimit: 33 callbacks suppressed [ 591.057934][ T59] bond6: (slave bridge2): failed to get link speed/duplex [ 591.172414][T13756] bond6: (slave bridge2): failed to get link speed/duplex [ 591.276610][T13756] bond6: (slave bridge2): failed to get link speed/duplex [ 591.390283][T13756] bond6: (slave bridge2): failed to get link speed/duplex [ 591.496895][T10583] bond6: (slave bridge2): failed to get link speed/duplex [ 591.515076][T17439] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3050'. [ 591.526935][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 591.527014][ C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 591.567287][T17438] netlink: 'syz.0.3051': attribute type 2 has an invalid length. [ 591.572014][T17438] netlink: 'syz.0.3051': attribute type 2 has an invalid length. [ 591.572041][T17438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3051'. [ 591.606988][ T59] bond6: (slave bridge2): failed to get link speed/duplex [ 591.718051][ T59] bond6: (slave bridge2): failed to get link speed/duplex [ 591.830034][T16362] bond6: (slave bridge2): failed to get link speed/duplex [ 592.453896][T17459] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3056'. [ 593.110245][T17466] netlink: 'syz.3.3058': attribute type 10 has an invalid length. [ 593.173390][T17466] team0 (unregistering): Port device bridge3 removed [ 593.469641][T17476] IPVS: Error connecting to the multicast addr [ 593.541196][T17481] syzkaller1: entered promiscuous mode [ 593.541225][T17481] syzkaller1: entered allmulticast mode [ 593.542854][T17481] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 593.686892][T17488] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3060'. [ 594.118547][T17489] bond20: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 594.335827][T17489] bond20 (unregistering): Released all slaves [ 594.650796][T17497] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3066'. [ 594.836572][ T1167] tipc: Subscription rejected, illegal request [ 594.902695][T17509] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3069'. [ 595.266150][T16105] udevd[16105]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 595.731186][T17527] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 595.760671][T17529] xt_hl: Unknown Hop Limit match mode: 4 [ 596.043602][T17535] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3074'. [ 596.096564][T10579] net_ratelimit: 103 callbacks suppressed [ 596.096587][T10579] bond6: (slave bridge2): failed to get link speed/duplex [ 596.216619][T10579] bond6: (slave bridge2): failed to get link speed/duplex [ 596.249438][T17539] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3076'. [ 596.273419][T17539] netlink: 'syz.0.3076': attribute type 1 has an invalid length. [ 596.386632][T13584] bond6: (slave bridge2): failed to get link speed/duplex [ 596.427098][T17539] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3076'. [ 596.477880][T17547] tc_dump_action: action bad kind [ 596.502351][ T344] bond6: (slave bridge2): failed to get link speed/duplex [ 596.600442][T17546] bond_slave_0: left promiscuous mode [ 596.600479][T17546] bond_slave_1: left promiscuous mode [ 596.726577][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 596.726676][ C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 597.034874][T17559] netlink: 'syz.3.3079': attribute type 10 has an invalid length. [ 597.059734][T17558] netlink: 'syz.2.3080': attribute type 1 has an invalid length. [ 597.203341][T17563] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3080'. [ 597.243723][T17564] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3079'. [ 597.392940][T17568] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3079'. [ 597.766727][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 597.766861][ C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 597.840314][T17546] tipc: Resetting bearer [ 597.841550][T17546] tipc: Resetting bearer [ 598.015998][T17574] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3082'. [ 598.800583][T17546] bridge3: port 2(veth9) entered disabled state [ 598.801078][T17546] bridge3: port 1(veth7) entered disabled state [ 599.283429][T17546] ip6gretap1: left promiscuous mode [ 599.336315][T17546] bridge7: port 2(veth19) entered disabled state [ 599.336862][T17546] bridge7: port 1(veth17) entered disabled state [ 599.684356][T17546] tipc: Resetting bearer [ 599.705141][T17558] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 599.707698][T13753] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 599.707739][T13753] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 599.707769][T13753] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 599.707821][T13753] bond6: (slave bridge2): failed to get link speed/duplex [ 599.708279][T13753] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 599.708318][T13753] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 599.708347][T13753] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 599.708388][T13753] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 599.708432][T13753] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 599.708460][T13753] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 599.708499][T13753] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 599.708526][T13753] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 599.708552][T13753] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 599.818390][ T1167] bond6: (slave bridge2): failed to get link speed/duplex [ 599.985841][T17582] netlink: 220 bytes leftover after parsing attributes in process `syz.1.3084'. [ 600.053109][T17565] tipc: Resetting bearer [ 600.063913][T17565] tipc: Resetting bearer [ 600.205870][ T5762] wg2 speed is unknown, defaulting to 1000 [ 600.277532][T17586] netlink: 1319 bytes leftover after parsing attributes in process `syz.4.3085'. [ 600.641124][T17598] netlink: 'syz.0.3087': attribute type 10 has an invalid length. [ 600.647314][T17598] team0 (unregistering): Port device wg1 removed [ 600.935579][T17608] SET target dimension over the limit! [ 601.196568][ T1167] net_ratelimit: 13 callbacks suppressed [ 601.196592][ T1167] bond6: (slave bridge2): failed to get link speed/duplex [ 601.233698][T17608] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3092'. [ 601.275010][T17611] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 601.299168][T17622] tipc: Enabling of bearer rejected, already enabled [ 601.307724][ T1167] bond6: (slave bridge2): failed to get link speed/duplex [ 601.416898][T10579] bond6: (slave bridge2): failed to get link speed/duplex [ 601.531242][ T1167] bond6: (slave bridge2): failed to get link speed/duplex [ 601.636770][ T344] bond6: (slave bridge2): failed to get link speed/duplex [ 601.750273][T10579] bond6: (slave bridge2): failed to get link speed/duplex [ 601.858023][T10579] bond6: (slave bridge2): failed to get link speed/duplex [ 601.968602][T10579] bond6: (slave bridge2): failed to get link speed/duplex [ 602.077654][ T1167] bond6: (slave bridge2): failed to get link speed/duplex [ 602.180142][T17629] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3095'. [ 602.187342][ T344] bond6: (slave bridge2): failed to get link speed/duplex [ 602.433647][T17637] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3098'. [ 602.479949][T17642] IPVS: Error connecting to the multicast addr [ 602.550413][T17643] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3111'. [ 602.669011][T17653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3101'. [ 602.765685][T17651] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3102'. [ 602.765714][T17651] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3102'. [ 602.945797][T17664] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 603.344844][T17671] xt_policy: output policy not valid in PREROUTING and INPUT [ 604.498549][T17702] tipc: Enabling of bearer rejected, already enabled [ 604.770339][T17709] C: renamed from veth1_to_team (while UP) [ 604.792634][T17709] netlink: 'syz.2.3117': attribute type 1 has an invalid length. [ 604.792658][T17709] __nla_validate_parse: 2 callbacks suppressed [ 604.792671][T17709] netlink: 116 bytes leftover after parsing attributes in process `syz.2.3117'. [ 605.082424][T13753] IPVS: starting estimator thread 0... [ 605.177410][T17717] IPVS: using max 26 ests per chain, 62400 per kthread [ 605.338185][T17724] netlink: 'syz.1.3119': attribute type 10 has an invalid length. [ 605.362864][T17724] team0: Port device dummy0 added [ 605.366144][T17720] netlink: 'syz.1.3119': attribute type 10 has an invalid length. [ 605.395952][T17720] team0: Port device dummy0 removed [ 605.719892][T13584] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 605.719918][T13584] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 605.726162][T17726] wg2 speed is unknown, defaulting to 1000 [ 606.042775][T17736] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3123'. [ 606.349725][T13584] net_ratelimit: 31 callbacks suppressed [ 606.349749][T13584] bond6: (slave bridge2): failed to get link speed/duplex [ 606.376145][T17745] tipc: Enabling of bearer rejected, already enabled [ 606.456574][ T1167] bond6: (slave bridge2): failed to get link speed/duplex [ 606.728411][ T13] bond6: (slave bridge2): failed to get link speed/duplex [ 606.730301][T17759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3129'. [ 606.730329][T17759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3129'. [ 607.011456][T17762] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3131'. [ 607.155558][T17756] tipc: Resetting bearer [ 607.155891][T17756] tipc: Resetting bearer [ 607.827752][T17756] bridge4: port 2(veth7) entered disabled state [ 607.827917][T17756] bridge4: port 1(veth5) entered disabled state [ 608.408100][T17756] batman_adv: batadv0: Interface deactivated: gretap2 [ 608.585362][ T5733] wg2 speed is unknown, defaulting to 1000 [ 608.585406][ T5733] syz2: Port: 1 Link DOWN [ 608.636748][T10579] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 608.636787][T10579] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.636830][T10579] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 608.636858][T10579] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.636898][T10579] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 608.636926][T10579] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.636965][T10579] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 608.636992][T10579] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.850817][T17769] sysfs: cannot create duplicate filename '/class/ieee80211/.P'G!DES' [ 608.850839][T17769] CPU: 0 UID: 0 PID: 17769 Comm: syz.0.3133 Not tainted syzkaller #0 PREEMPT(full) [ 608.850866][T17769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 608.850882][T17769] Call Trace: [ 608.850892][T17769] [ 608.850903][T17769] dump_stack_lvl+0xe8/0x150 [ 608.850944][T17769] sysfs_warn_dup+0x8e/0xa0 [ 608.850979][T17769] sysfs_do_create_link_sd+0xc0/0x110 [ 608.851020][T17769] device_add_class_symlinks+0x1cf/0x240 [ 608.851051][T17769] device_add+0x467/0xb80 [ 608.851080][T17769] wiphy_register+0x1fc8/0x2ff0 [ 608.851126][T17769] ? __pfx_wiphy_register+0x10/0x10 [ 608.851153][T17769] ? __pfx_netdev_run_todo+0x10/0x10 [ 608.851191][T17769] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 608.851236][T17769] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 608.851269][T17769] ieee80211_register_hw+0x3d7c/0x4b40 [ 608.851314][T17769] ? ieee80211_register_hw+0x1961/0x4b40 [ 608.851372][T17769] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 608.851407][T17769] ? __asan_memset+0x22/0x50 [ 608.851444][T17769] ? __hrtimer_setup+0x1b7/0x260 [ 608.851476][T17769] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 608.851509][T17769] mac80211_hwsim_new_radio+0x3264/0x5720 [ 608.851581][T17769] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 608.851609][T17769] ? kstrndup+0xbd/0x160 [ 608.851642][T17769] ? kstrndup+0xbd/0x160 [ 608.851670][T17769] hwsim_new_radio_nl+0xd8b/0xf90 [ 608.851716][T17769] genl_family_rcv_msg_doit+0x233/0x340 [ 608.851759][T17769] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 608.851804][T17769] ? bpf_lsm_capable+0x9/0x20 [ 608.851826][T17769] ? security_capable+0x7e/0x2c0 [ 608.851862][T17769] genl_rcv_msg+0x614/0x7a0 [ 608.851898][T17769] ? __pfx_genl_rcv_msg+0x10/0x10 [ 608.851926][T17769] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 608.851971][T17769] netlink_rcv_skb+0x226/0x4a0 [ 608.852009][T17769] ? __pfx_genl_rcv_msg+0x10/0x10 [ 608.852040][T17769] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 608.852096][T17769] ? down_read+0x2be/0x330 [ 608.852134][T17769] genl_rcv+0x28/0x40 [ 608.852160][T17769] netlink_unicast+0x7bd/0x940 [ 608.852207][T17769] netlink_sendmsg+0x813/0xb40 [ 608.852241][T17769] ? __pfx_netlink_sendmsg+0x10/0x10 [ 608.852275][T17769] ? apparmor_socket_sendmsg+0x98/0x360 [ 608.852305][T17769] ? __pfx_netlink_sendmsg+0x10/0x10 [ 608.852327][T17769] sock_sendmsg_nosec+0x13a/0x180 [ 608.852355][T17769] ____sys_sendmsg+0x54e/0x850 [ 608.852395][T17769] ? __pfx_____sys_sendmsg+0x10/0x10 [ 608.852439][T17769] ? import_iovec+0x73/0xa0 [ 608.852474][T17769] ___sys_sendmsg+0x2a5/0x360 [ 608.852505][T17769] ? __lock_acquire+0x747/0x2de0 [ 608.852536][T17769] ? __pfx____sys_sendmsg+0x10/0x10 [ 608.852581][T17769] ? futex_wait+0x2a2/0x390 [ 608.852651][T17769] ? __fget_files+0x2a/0x420 [ 608.852684][T17769] ? __fget_files+0x3a2/0x420 [ 608.852730][T17769] __x64_sys_sendmsg+0x1b1/0x290 [ 608.852772][T17769] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 608.852836][T17769] do_syscall_64+0x166/0x520 [ 608.852867][T17769] ? trace_irq_disable+0x3b/0x140 [ 608.852890][T17769] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.852916][T17769] ? clear_bhb_loop+0x70/0xc0 [ 608.852945][T17769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.852969][T17769] RIP: 0033:0x7fc7c7f9e159 [ 608.852993][T17769] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 608.853016][T17769] RSP: 002b:00007fc7c8dc4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 608.853043][T17769] RAX: ffffffffffffffda RBX: 00007fc7c8225fa0 RCX: 00007fc7c7f9e159 [ 608.853061][T17769] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 608.853077][T17769] RBP: 00007fc7c803506b R08: 0000000000000000 R09: 0000000000000000 [ 608.853093][T17769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 608.853108][T17769] R13: 00007fc7c8226038 R14: 00007fc7c8225fa0 R15: 00007ffe3d0e1b98 [ 608.853148][T17769] [ 609.279139][T17778] netlink: 'syz.3.3134': attribute type 11 has an invalid length. [ 609.279167][T17778] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3134'. [ 609.579576][T17798] syzkaller0: entered promiscuous mode [ 609.579602][T17798] syzkaller0: entered allmulticast mode [ 609.992009][T17809] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3144'. [ 610.220877][T17806] 8021q: adding VLAN 0 to HW filter on device bond1 [ 610.249305][T17806] 8021q: adding VLAN 0 to HW filter on device bond2 [ 610.253815][T17806] 8021q: adding VLAN 0 to HW filter on device bond3 [ 610.272233][T17806] 8021q: adding VLAN 0 to HW filter on device bond4 [ 610.301353][T17806] 8021q: adding VLAN 0 to HW filter on device bond5 [ 610.314713][T17806] 8021q: adding VLAN 0 to HW filter on device bond6 [ 610.332689][T17806] 8021q: adding VLAN 0 to HW filter on device bond7 [ 610.336381][T17806] 8021q: adding VLAN 0 to HW filter on device bond8 [ 610.352194][T17806] 8021q: adding VLAN 0 to HW filter on device bond9 [ 610.354574][T17806] 8021q: adding VLAN 0 to HW filter on device bond10 [ 610.371174][T17806] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 610.374108][T17806] 8021q: adding VLAN 0 to HW filter on device bond11 [ 610.375338][T17806] 8021q: adding VLAN 0 to HW filter on device bond12 [ 610.383841][T17806] 8021q: adding VLAN 0 to HW filter on device bond13 [ 610.416030][T17806] A link change request failed with some changes committed already. Interface vlan2 may have been left with an inconsistent configuration, please check. [ 610.419367][ T331] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 610.419459][ T331] netdevsim netdevsim3 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 610.420414][ T331] bond8: (slave bridge0): link status definitely down, disabling slave [ 610.420667][ T331] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 610.421384][ T331] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 610.563661][T17824] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3145'. [ 610.576954][T13760] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 610.576993][T13760] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 610.577034][T13760] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 610.577063][T13760] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 611.125441][T17833] sysfs: cannot create duplicate filename '/class/ieee80211/.P'G!DES' [ 611.125468][T17833] CPU: 1 UID: 0 PID: 17833 Comm: syz.3.3148 Not tainted syzkaller #0 PREEMPT(full) [ 611.125497][T17833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 611.125512][T17833] Call Trace: [ 611.125522][T17833] [ 611.125533][T17833] dump_stack_lvl+0xe8/0x150 [ 611.125576][T17833] sysfs_warn_dup+0x8e/0xa0 [ 611.125614][T17833] sysfs_do_create_link_sd+0xc0/0x110 [ 611.125654][T17833] device_add_class_symlinks+0x1cf/0x240 [ 611.125687][T17833] device_add+0x467/0xb80 [ 611.125717][T17833] wiphy_register+0x1fc8/0x2ff0 [ 611.125763][T17833] ? __pfx_wiphy_register+0x10/0x10 [ 611.125788][T17833] ? __pfx_netdev_run_todo+0x10/0x10 [ 611.125824][T17833] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 611.125868][T17833] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 611.125901][T17833] ieee80211_register_hw+0x3d7c/0x4b40 [ 611.126044][T17833] ? ieee80211_register_hw+0x1961/0x4b40 [ 611.126107][T17833] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 611.126144][T17833] ? __asan_memset+0x22/0x50 [ 611.126188][T17833] ? __hrtimer_setup+0x1b7/0x260 [ 611.126221][T17833] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 611.126257][T17833] mac80211_hwsim_new_radio+0x3264/0x5720 [ 611.126324][T17833] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 611.126353][T17833] ? kstrndup+0xbd/0x160 [ 611.126385][T17833] ? kstrndup+0xbd/0x160 [ 611.126412][T17833] hwsim_new_radio_nl+0xd8b/0xf90 [ 611.126473][T17833] genl_family_rcv_msg_doit+0x233/0x340 [ 611.126514][T17833] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 611.126561][T17833] ? bpf_lsm_capable+0x9/0x20 [ 611.126581][T17833] ? security_capable+0x7e/0x2c0 [ 611.126616][T17833] genl_rcv_msg+0x614/0x7a0 [ 611.126654][T17833] ? __pfx_genl_rcv_msg+0x10/0x10 [ 611.126680][T17833] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 611.126720][T17833] netlink_rcv_skb+0x226/0x4a0 [ 611.126758][T17833] ? __pfx_genl_rcv_msg+0x10/0x10 [ 611.126788][T17833] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 611.126842][T17833] ? down_read+0x2be/0x330 [ 611.126881][T17833] genl_rcv+0x28/0x40 [ 611.126908][T17833] netlink_unicast+0x7bd/0x940 [ 611.126954][T17833] netlink_sendmsg+0x813/0xb40 [ 611.126988][T17833] ? __pfx_netlink_sendmsg+0x10/0x10 [ 611.127022][T17833] ? apparmor_socket_sendmsg+0x98/0x360 [ 611.127053][T17833] ? __pfx_netlink_sendmsg+0x10/0x10 [ 611.127075][T17833] sock_sendmsg_nosec+0x13a/0x180 [ 611.127103][T17833] ____sys_sendmsg+0x54e/0x850 [ 611.127144][T17833] ? __pfx_____sys_sendmsg+0x10/0x10 [ 611.127189][T17833] ? import_iovec+0x73/0xa0 [ 611.127225][T17833] ___sys_sendmsg+0x2a5/0x360 [ 611.127256][T17833] ? __lock_acquire+0x747/0x2de0 [ 611.127287][T17833] ? __pfx____sys_sendmsg+0x10/0x10 [ 611.127325][T17833] ? futex_wait+0x2a2/0x390 [ 611.127395][T17833] ? __fget_files+0x2a/0x420 [ 611.127429][T17833] ? __fget_files+0x3a2/0x420 [ 611.127488][T17833] __x64_sys_sendmsg+0x1b1/0x290 [ 611.127527][T17833] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 611.127586][T17833] do_syscall_64+0x166/0x520 [ 611.127617][T17833] ? trace_irq_disable+0x3b/0x140 [ 611.127643][T17833] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.127668][T17833] ? clear_bhb_loop+0x70/0xc0 [ 611.127699][T17833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.127724][T17833] RIP: 0033:0x7f79c4b9e159 [ 611.127748][T17833] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 611.127769][T17833] RSP: 002b:00007f79c5a73028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 611.127795][T17833] RAX: ffffffffffffffda RBX: 00007f79c4e25fa0 RCX: 00007f79c4b9e159 [ 611.127812][T17833] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 611.127827][T17833] RBP: 00007f79c4c3506b R08: 0000000000000000 R09: 0000000000000000 [ 611.127842][T17833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 611.127857][T17833] R13: 00007f79c4e26038 R14: 00007f79c4e25fa0 R15: 00007ffff906acc8 [ 611.127896][T17833] [ 611.723353][T17844] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3151'. [ 612.055981][T17859] netlink: 296 bytes leftover after parsing attributes in process `syz.1.3155'. [ 612.072944][T17851] syzkaller0: entered promiscuous mode [ 612.072969][T17851] syzkaller0: entered allmulticast mode [ 612.439871][T17865] netlink: 'syz.3.3156': attribute type 2 has an invalid length. [ 612.441055][T17865] netlink: 'syz.3.3156': attribute type 2 has an invalid length. [ 612.441076][T17865] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3156'. [ 612.474686][T17866] syzkaller0: entered promiscuous mode [ 612.474825][T17866] syzkaller0: entered allmulticast mode [ 613.175195][T17871] vxcan0: entered allmulticast mode [ 613.305861][T17877] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3158'. [ 613.513430][T17881] tc_dump_action: action bad kind [ 613.763810][T17885] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 613.828431][T17899] netlink: 564 bytes leftover after parsing attributes in process `syz.3.3165'. [ 614.176601][T17901] block nbd0: reconnected socket [ 614.183248][T17901] netlink: 'syz.0.3167': attribute type 9 has an invalid length. [ 614.363390][ T4935] block nbd0: Receive control failed (result -32) [ 614.534887][T17908] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3170'. [ 614.547670][T17908] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3170'. [ 614.548433][T17908] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3170'. [ 614.830838][T17918] netlink: 'syz.4.3173': attribute type 1 has an invalid length. [ 614.941742][T17920] hsr_slave_0 (unregistering): left promiscuous mode [ 615.033487][T17927] lo: left promiscuous mode [ 615.064973][T17927] tunl0: left promiscuous mode [ 615.084976][T17927] gre0: left promiscuous mode [ 615.123343][T17929] __nla_validate_parse: 6 callbacks suppressed [ 615.123366][T17929] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3175'. [ 615.180509][T17930] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3174'. [ 615.216341][T17927] ip_vti0: left promiscuous mode [ 615.262190][T17927] sit0: left promiscuous mode [ 615.313821][T17927] ip6tnl0: left promiscuous mode [ 615.328155][T17927] ip6gre0: left promiscuous mode [ 615.382683][T17927] 8021q: adding VLAN 0 to HW filter on device bond0 [ 615.384810][T17927] 8021q: adding VLAN 0 to HW filter on device team0 [ 615.553161][T17927] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 615.553190][T17927] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 615.563251][T17927] tipc: Resetting bearer [ 615.583725][T17927] tipc: Resetting bearer [ 615.615202][T17927] veth1_vlan: left promiscuous mode [ 615.631102][T17927] veth0_vlan: left promiscuous mode [ 615.638430][T17927] veth0_vlan: entered promiscuous mode [ 615.651307][T17927] veth1_vlan: entered promiscuous mode [ 615.684063][T17927] veth1_macvtap: left promiscuous mode [ 615.704487][T17927] veth0_macvtap: left promiscuous mode [ 615.714579][T17927] veth0_macvtap: entered promiscuous mode [ 615.743162][T17927] veth1_macvtap: entered promiscuous mode [ 615.778105][T17927] 8021q: adding VLAN 0 to HW filter on device bond1 [ 615.795016][T17927] 8021q: adding VLAN 0 to HW filter on device bond2 [ 615.812474][T17927] 8021q: adding VLAN 0 to HW filter on device bond3 [ 615.900123][T17927] 8021q: adding VLAN 0 to HW filter on device bond4 [ 615.904235][T17927] 8021q: adding VLAN 0 to HW filter on device bond5 [ 615.947807][T17927] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 615.970366][T17927] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 615.973052][T17927] 8021q: adding VLAN 0 to HW filter on device bond7 [ 615.974240][T17927] 8021q: adding VLAN 0 to HW filter on device bond8 [ 616.003030][T17927] 8021q: adding VLAN 0 to HW filter on device eth0 [ 616.004406][T17927] 8021q: adding VLAN 0 to HW filter on device eth1 [ 616.005681][T17927] 8021q: adding VLAN 0 to HW filter on device eth2 [ 616.010224][T17927] 8021q: adding VLAN 0 to HW filter on device eth3 [ 616.038772][T17927] 8021q: adding VLAN 0 to HW filter on device bond9 [ 616.057497][T17927] 8021q: adding VLAN 0 to HW filter on device bond10 [ 616.063737][T17927] 8021q: adding VLAN 0 to HW filter on device bond11 [ 616.067130][T17927] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 616.098167][T17927] 8021q: adding VLAN 0 to HW filter on device bond6 [ 616.170473][T17927] 8021q: adding VLAN 0 to HW filter on device bond12 [ 616.173516][T17927] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 616.175303][T17927] 8021q: adding VLAN 0 to HW filter on device bond13 [ 616.186635][T17927] mac80211_hwsim hwsim15 wlan0: entered promiscuous mode [ 616.217694][T17927] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 616.292262][T13755] bridge3: port 1(veth7) entered blocking state [ 616.292384][T13755] bridge3: port 1(veth7) entered forwarding state [ 616.294894][T13755] bridge3: port 2(veth9) entered blocking state [ 616.295002][T13755] bridge3: port 2(veth9) entered forwarding state [ 616.337421][T13755] bridge7: port 1(veth17) entered blocking state [ 616.337535][T13755] bridge7: port 1(veth17) entered forwarding state [ 616.339735][T13755] bridge7: port 2(veth19) entered blocking state [ 616.339908][T13755] bridge7: port 2(veth19) entered forwarding state [ 616.375965][ T5807] bond_slave_0: entered promiscuous mode [ 616.375997][ T5807] bond_slave_1: entered promiscuous mode [ 616.449831][ T5807] ip6gretap1: entered promiscuous mode [ 616.457238][T17936] sysfs: cannot create duplicate filename '/class/ieee80211/.P'G!DES' [ 616.457308][T17936] CPU: 1 UID: 0 PID: 17936 Comm: syz.4.3178 Not tainted syzkaller #0 PREEMPT(full) [ 616.457380][T17936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 616.457419][T17936] Call Trace: [ 616.457442][T17936] [ 616.457471][T17936] dump_stack_lvl+0xe8/0x150 [ 616.457574][T17936] sysfs_warn_dup+0x8e/0xa0 [ 616.457667][T17936] sysfs_do_create_link_sd+0xc0/0x110 [ 616.457778][T17936] device_add_class_symlinks+0x1cf/0x240 [ 616.457874][T17936] device_add+0x467/0xb80 [ 616.457945][T17936] wiphy_register+0x1fc8/0x2ff0 [ 616.458057][T17936] ? __pfx_wiphy_register+0x10/0x10 [ 616.458128][T17936] ? __pfx_netdev_run_todo+0x10/0x10 [ 616.458246][T17936] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 616.458365][T17936] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 616.458454][T17936] ieee80211_register_hw+0x3d7c/0x4b40 [ 616.458573][T17936] ? ieee80211_register_hw+0x1961/0x4b40 [ 616.458719][T17936] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 616.458822][T17936] ? __asan_memset+0x22/0x50 [ 616.458915][T17936] ? __hrtimer_setup+0x1b7/0x260 [ 616.458998][T17936] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 616.459081][T17936] mac80211_hwsim_new_radio+0x3264/0x5720 [ 616.459245][T17936] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 616.459303][T17936] ? kstrndup+0xbd/0x160 [ 616.459384][T17936] ? kstrndup+0xbd/0x160 [ 616.459455][T17936] hwsim_new_radio_nl+0xd8b/0xf90 [ 616.459582][T17936] genl_family_rcv_msg_doit+0x233/0x340 [ 616.459697][T17936] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 616.459812][T17936] ? bpf_lsm_capable+0x9/0x20 [ 616.459865][T17936] ? security_capable+0x7e/0x2c0 [ 616.459958][T17936] genl_rcv_msg+0x614/0x7a0 [ 616.460050][T17936] ? __pfx_genl_rcv_msg+0x10/0x10 [ 616.460125][T17936] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 616.460239][T17936] netlink_rcv_skb+0x226/0x4a0 [ 616.460330][T17936] ? __pfx_genl_rcv_msg+0x10/0x10 [ 616.460411][T17936] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 616.460553][T17936] ? down_read+0x2be/0x330 [ 616.460656][T17936] genl_rcv+0x28/0x40 [ 616.460719][T17936] netlink_unicast+0x7bd/0x940 [ 616.460850][T17936] netlink_sendmsg+0x813/0xb40 [ 616.460934][T17936] ? __pfx_netlink_sendmsg+0x10/0x10 [ 616.461039][T17936] ? apparmor_socket_sendmsg+0x98/0x360 [ 616.461127][T17936] ? __pfx_netlink_sendmsg+0x10/0x10 [ 616.461187][T17936] sock_sendmsg_nosec+0x13a/0x180 [ 616.461262][T17936] ____sys_sendmsg+0x54e/0x850 [ 616.461359][T17936] ? __pfx_____sys_sendmsg+0x10/0x10 [ 616.461471][T17936] ? import_iovec+0x73/0xa0 [ 616.461561][T17936] ___sys_sendmsg+0x2a5/0x360 [ 616.461643][T17936] ? __lock_acquire+0x747/0x2de0 [ 616.461718][T17936] ? __pfx____sys_sendmsg+0x10/0x10 [ 616.461825][T17936] ? futex_wait+0x2a2/0x390 [ 616.462010][T17936] ? __fget_files+0x2a/0x420 [ 616.462093][T17936] ? __fget_files+0x3a2/0x420 [ 616.462176][T17936] __x64_sys_sendmsg+0x1b1/0x290 [ 616.462212][T17936] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 616.462268][T17936] do_syscall_64+0x166/0x520 [ 616.462298][T17936] ? trace_irq_disable+0x3b/0x140 [ 616.462382][T17936] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.462462][T17936] ? clear_bhb_loop+0x70/0xc0 [ 616.462544][T17936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.462605][T17936] RIP: 0033:0x7ff3ee39e159 [ 616.462665][T17936] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 616.462720][T17936] RSP: 002b:00007ff3ef1b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 616.462811][T17936] RAX: ffffffffffffffda RBX: 00007ff3ee625fa0 RCX: 00007ff3ee39e159 [ 616.462860][T17936] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 616.462901][T17936] RBP: 00007ff3ee43506b R08: 0000000000000000 R09: 0000000000000000 [ 616.462941][T17936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 616.462982][T17936] R13: 00007ff3ee626038 R14: 00007ff3ee625fa0 R15: 00007ffe2efbf1e8 [ 616.463082][T17936] [ 616.489293][ T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 616.489388][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.489468][ T12] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 616.527175][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 616.527419][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 617.077687][T17965] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3181'. [ 617.077712][T17965] netlink: 356 bytes leftover after parsing attributes in process `syz.2.3181'. [ 617.077729][T17965] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3181'. [ 617.157611][T13761] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 617.157656][T13761] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.157685][T13761] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 617.157735][T13761] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 617.157763][T13761] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.157791][T13761] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 617.157831][T13761] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 617.157858][T13761] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.157886][T13761] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 617.527275][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 617.527372][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 617.741223][T17993] batman_adv: batadv0: Adding interface: macvtap1 [ 617.741238][T17993] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 617.741259][T17993] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 617.843180][T17993] batman_adv: batadv0: Removing interface: macvtap1 [ 618.048592][T18008] sysfs: cannot create duplicate filename '/class/ieee80211/.P'G!DES' [ 618.048617][T18008] CPU: 0 UID: 0 PID: 18008 Comm: syz.1.3195 Not tainted syzkaller #0 PREEMPT(full) [ 618.048650][T18008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 618.048666][T18008] Call Trace: [ 618.048677][T18008] [ 618.048688][T18008] dump_stack_lvl+0xe8/0x150 [ 618.048730][T18008] sysfs_warn_dup+0x8e/0xa0 [ 618.048769][T18008] sysfs_do_create_link_sd+0xc0/0x110 [ 618.048811][T18008] device_add_class_symlinks+0x1cf/0x240 [ 618.048843][T18008] device_add+0x467/0xb80 [ 618.048873][T18008] wiphy_register+0x1fc8/0x2ff0 [ 618.048918][T18008] ? __pfx_wiphy_register+0x10/0x10 [ 618.048945][T18008] ? __pfx_netdev_run_todo+0x10/0x10 [ 618.048982][T18008] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 618.049027][T18008] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 618.049061][T18008] ieee80211_register_hw+0x3d7c/0x4b40 [ 618.049110][T18008] ? ieee80211_register_hw+0x1961/0x4b40 [ 618.049170][T18008] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 618.049204][T18008] ? __asan_memset+0x22/0x50 [ 618.049251][T18008] ? __hrtimer_setup+0x1b7/0x260 [ 618.049285][T18008] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 618.049320][T18008] mac80211_hwsim_new_radio+0x3264/0x5720 [ 618.049387][T18008] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 618.049416][T18008] ? kstrndup+0xbd/0x160 [ 618.049447][T18008] ? kstrndup+0xbd/0x160 [ 618.049475][T18008] hwsim_new_radio_nl+0xd8b/0xf90 [ 618.049522][T18008] genl_family_rcv_msg_doit+0x233/0x340 [ 618.049563][T18008] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 618.049609][T18008] ? bpf_lsm_capable+0x9/0x20 [ 618.049630][T18008] ? security_capable+0x7e/0x2c0 [ 618.049668][T18008] genl_rcv_msg+0x614/0x7a0 [ 618.049704][T18008] ? __pfx_genl_rcv_msg+0x10/0x10 [ 618.049734][T18008] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 618.049779][T18008] netlink_rcv_skb+0x226/0x4a0 [ 618.049816][T18008] ? __pfx_genl_rcv_msg+0x10/0x10 [ 618.049846][T18008] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 618.049899][T18008] ? down_read+0x2be/0x330 [ 618.049938][T18008] genl_rcv+0x28/0x40 [ 618.049965][T18008] netlink_unicast+0x7bd/0x940 [ 618.050013][T18008] netlink_sendmsg+0x813/0xb40 [ 618.050048][T18008] ? __pfx_netlink_sendmsg+0x10/0x10 [ 618.050081][T18008] ? apparmor_socket_sendmsg+0x98/0x360 [ 618.050112][T18008] ? __pfx_netlink_sendmsg+0x10/0x10 [ 618.050134][T18008] sock_sendmsg_nosec+0x13a/0x180 [ 618.050162][T18008] ____sys_sendmsg+0x54e/0x850 [ 618.050224][T18008] ? __pfx_____sys_sendmsg+0x10/0x10 [ 618.050277][T18008] ? import_iovec+0x73/0xa0 [ 618.050312][T18008] ___sys_sendmsg+0x2a5/0x360 [ 618.050344][T18008] ? __lock_acquire+0x747/0x2de0 [ 618.050376][T18008] ? __pfx____sys_sendmsg+0x10/0x10 [ 618.050414][T18008] ? futex_wait+0x2a2/0x390 [ 618.050485][T18008] ? __fget_files+0x2a/0x420 [ 618.050518][T18008] ? __fget_files+0x3a2/0x420 [ 618.050565][T18008] __x64_sys_sendmsg+0x1b1/0x290 [ 618.050601][T18008] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 618.050662][T18008] do_syscall_64+0x166/0x520 [ 618.050694][T18008] ? trace_irq_disable+0x3b/0x140 [ 618.050718][T18008] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.050742][T18008] ? clear_bhb_loop+0x70/0xc0 [ 618.050771][T18008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.050794][T18008] RIP: 0033:0x7f5e81b9e159 [ 618.050817][T18008] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 618.050836][T18008] RSP: 002b:00007f5e7fdf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 618.050863][T18008] RAX: ffffffffffffffda RBX: 00007f5e81e25fa0 RCX: 00007f5e81b9e159 [ 618.050882][T18008] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 618.050898][T18008] RBP: 00007f5e81c3506b R08: 0000000000000000 R09: 0000000000000000 [ 618.050913][T18008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 618.050928][T18008] R13: 00007f5e81e26038 R14: 00007f5e81e25fa0 R15: 00007ffd3d6d3438 [ 618.050969][T18008] [ 618.053394][T18006] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3194'. [ 618.451834][T18006] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3194'. [ 618.577323][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 618.577406][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 619.251757][T18022] netlink: 'syz.1.3198': attribute type 1 has an invalid length. [ 619.251930][T18022] netlink: 'syz.1.3198': attribute type 2 has an invalid length. [ 619.606660][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 619.606773][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 619.652707][T18045] ip_tables: iptables: counters copy to user failed while replacing table [ 620.028044][T18054] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3206'. [ 620.028080][T18054] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3206'. [ 620.028158][T18054] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3206'. [ 620.277484][T18058] netlink: 'syz.1.3208': attribute type 2 has an invalid length. [ 620.851963][T18069] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3211'. [ 621.560273][T18069] bond_slave_0: left promiscuous mode [ 621.560308][T18069] bond_slave_1: left promiscuous mode [ 621.696778][ C1] net_ratelimit: 2 callbacks suppressed [ 621.696806][ C1] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 621.696888][ C1] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 621.921104][T18069] tipc: Resetting bearer [ 621.921744][T18069] tipc: Resetting bearer [ 622.524471][T18069] bridge3: port 2(veth9) entered disabled state [ 622.524852][T18069] bridge3: port 1(veth7) entered disabled state [ 622.718896][T18069] ip6gretap1: left promiscuous mode [ 622.736976][T18069] bridge7: port 2(veth19) entered disabled state [ 622.737468][T18069] bridge7: port 1(veth17) entered disabled state [ 622.953499][T18069] tipc: Resetting bearer [ 622.997497][T18075] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3215'. [ 623.031318][T18091] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3217'. [ 623.097856][T13755] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 623.097897][T13755] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.097926][T13755] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 623.105236][ T279] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 623.105317][ T279] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.105396][ T279] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 623.105499][ T279] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 623.105576][ T279] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.105639][ T279] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 623.105738][ T279] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 623.105803][ T279] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.105871][ T279] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 623.241884][T18100] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3219'. [ 623.351773][ T31] audit: type=1804 audit(1790086186.008:16): pid=18104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3220" name="/newroot/653/cgroup.controllers" dev="tmpfs" ino=3382 res=1 errno=0 [ 623.357981][ T31] audit: type=1800 audit(1790086186.008:17): pid=18104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3220" name="cgroup.controllers" dev="tmpfs" ino=3382 res=0 errno=0 [ 623.456962][T18104] Timeout policy `syz0' can only be used by L3 protocol number 512 [ 623.782733][T18120] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 623.839829][T18121] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3222'. [ 624.648909][T18129] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 624.931780][T18136] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3228'. [ 625.058095][T18136] [ 625.060490][T18136] ====================================================== [ 625.067541][T18136] WARNING: possible circular locking dependency detected [ 625.074611][T18136] syzkaller #0 Not tainted [ 625.079062][T18136] ------------------------------------------------------ [ 625.086108][T18136] syz.4.3228/18136 is trying to acquire lock: [ 625.092205][T18136] ffff8880260ebf18 (set->srcu){.+.+}-{0:0}, at: __synchronize_srcu+0xb5/0x2f0 [ 625.101146][T18136] [ 625.101146][T18136] but task is already holding lock: [ 625.108547][T18136] ffff88802aed8588 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480 [ 625.118001][T18136] [ 625.118001][T18136] which lock already depends on the new lock. [ 625.118001][T18136] [ 625.128450][T18136] [ 625.128450][T18136] the existing dependency chain (in reverse order) is: [ 625.137507][T18136] [ 625.137507][T18136] -> #6 (&q->elevator_lock){+.+.}-{4:4}: [ 625.145374][T18136] __mutex_lock+0x19d/0x1550 [ 625.150541][T18136] elevator_change+0x1af/0x480 [ 625.155873][T18136] elevator_set_none+0xb5/0x140 [ 625.161292][T18136] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 625.167675][T18136] nbd_start_device+0x189/0xb30 [ 625.173089][T18136] nbd_genl_connect+0x167d/0x1cd0 [ 625.178673][T18136] genl_family_rcv_msg_doit+0x233/0x340 [ 625.184792][T18136] genl_rcv_msg+0x614/0x7a0 [ 625.189857][T18136] netlink_rcv_skb+0x226/0x4a0 [ 625.195191][T18136] genl_rcv+0x28/0x40 [ 625.199736][T18136] netlink_unicast+0x7bd/0x940 [ 625.205066][T18136] netlink_sendmsg+0x813/0xb40 [ 625.210391][T18136] sock_sendmsg_nosec+0x13a/0x180 [ 625.215972][T18136] ____sys_sendmsg+0x54e/0x850 [ 625.221302][T18136] ___sys_sendmsg+0x2a5/0x360 [ 625.226548][T18136] __x64_sys_sendmsg+0x1b1/0x290 [ 625.232059][T18136] do_syscall_64+0x166/0x520 [ 625.237209][T18136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.243664][T18136] [ 625.243664][T18136] -> #5 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 625.252320][T18136] blk_alloc_queue+0x544/0x690 [ 625.257642][T18136] __blk_mq_alloc_disk+0x194/0x390 [ 625.263323][T18136] nbd_dev_add+0x494/0xb60 [ 625.268293][T18136] nbd_init+0x168/0x1f0 [ 625.273013][T18136] do_one_initcall+0x250/0x870 [ 625.278353][T18136] do_initcall_level+0x10a/0x1a0 [ 625.283861][T18136] do_initcalls+0x59/0xa0 [ 625.288764][T18136] kernel_init_freeable+0x29d/0x3e0 [ 625.294531][T18136] kernel_init+0x22/0x1d0 [ 625.299435][T18136] ret_from_fork+0x514/0xb70 [ 625.304583][T18136] ret_from_fork_asm+0x1a/0x30 [ 625.309917][T18136] [ 625.309917][T18136] -> #4 (fs_reclaim){+.+.}-{0:0}: [ 625.317182][T18136] fs_reclaim_acquire+0x71/0x100 [ 625.322692][T18136] __kmalloc_cache_node_noprof+0x66/0x620 [ 625.328970][T18136] create_worker+0x112/0x7c0 [ 625.334140][T18136] workqueue_prepare_cpu+0xe4/0x170 [ 625.339919][T18136] cpuhp_invoke_callback+0x434/0x810 [ 625.345786][T18136] _cpu_up+0x2ce/0x5b0 [ 625.350440][T18136] cpu_up+0x1d2/0x220 [ 625.354997][T18136] cpuhp_bringup_mask+0xb2/0x1a0 [ 625.360501][T18136] cpuhp_bringup_cpus_parallel+0x109/0x120 [ 625.366914][T18136] bringup_nonboot_cpus+0x17/0x30 [ 625.372511][T18136] smp_init+0x32/0x110 [ 625.377153][T18136] kernel_init_freeable+0x27f/0x3e0 [ 625.382923][T18136] kernel_init+0x22/0x1d0 [ 625.387858][T18136] ret_from_fork+0x514/0xb70 [ 625.393019][T18136] ret_from_fork_asm+0x1a/0x30 [ 625.398357][T18136] [ 625.398357][T18136] -> #3 (cpu_hotplug_lock){++++}-{0:0}: [ 625.406172][T18136] cpus_read_lock+0x42/0x160 [ 625.411334][T18136] static_key_slow_inc+0x12/0x30 [ 625.416837][T18136] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 625.423131][T18136] nbd_genl_foreach_sock+0x265/0x450 [ 625.428995][T18136] nbd_genl_reconfigure+0xbbb/0x1040 [ 625.434856][T18136] genl_family_rcv_msg_doit+0x233/0x340 [ 625.440984][T18136] genl_rcv_msg+0x614/0x7a0 [ 625.446084][T18136] netlink_rcv_skb+0x226/0x4a0 [ 625.451437][T18136] genl_rcv+0x28/0x40 [ 625.455984][T18136] netlink_unicast+0x7bd/0x940 [ 625.461333][T18136] netlink_sendmsg+0x813/0xb40 [ 625.466657][T18136] sock_sendmsg_nosec+0x13a/0x180 [ 625.472243][T18136] ____sys_sendmsg+0x54e/0x850 [ 625.477579][T18136] ___sys_sendmsg+0x2a5/0x360 [ 625.482829][T18136] __x64_sys_sendmsg+0x1b1/0x290 [ 625.488346][T18136] do_syscall_64+0x166/0x520 [ 625.493503][T18136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.499961][T18136] [ 625.499961][T18136] -> #2 (&nsock->tx_lock){+.+.}-{4:4}: [ 625.507659][T18136] __mutex_lock+0x19d/0x1550 [ 625.512826][T18136] nbd_queue_rq+0x373/0xff0 [ 625.517891][T18136] blk_mq_dispatch_rq_list+0x499/0x1990 [ 625.524003][T18136] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 625.530930][T18136] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 625.537486][T18136] blk_mq_run_work_fn+0x16c/0x300 [ 625.543104][T18136] process_scheduled_works+0xc3d/0x1630 [ 625.549222][T18136] worker_thread+0xa47/0xfb0 [ 625.554376][T18136] kthread+0x38b/0x480 [ 625.559018][T18136] ret_from_fork+0x514/0xb70 [ 625.564160][T18136] ret_from_fork_asm+0x1a/0x30 [ 625.569492][T18136] [ 625.569492][T18136] -> #1 (&cmd->lock){+.+.}-{4:4}: [ 625.576746][T18136] __mutex_lock+0x19d/0x1550 [ 625.581907][T18136] nbd_queue_rq+0xc1/0xff0 [ 625.586909][T18136] blk_mq_dispatch_rq_list+0x499/0x1990 [ 625.593022][T18136] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 625.599922][T18136] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 625.606472][T18136] blk_mq_run_work_fn+0x16c/0x300 [ 625.612056][T18136] process_scheduled_works+0xc3d/0x1630 [ 625.618176][T18136] worker_thread+0xa47/0xfb0 [ 625.623341][T18136] kthread+0x38b/0x480 [ 625.627968][T18136] ret_from_fork+0x514/0xb70 [ 625.633113][T18136] ret_from_fork_asm+0x1a/0x30 [ 625.638445][T18136] [ 625.638445][T18136] -> #0 (set->srcu){.+.+}-{0:0}: [ 625.645614][T18136] __lock_acquire+0x164c/0x2de0 [ 625.651018][T18136] lock_sync+0xb3/0x130 [ 625.655735][T18136] __synchronize_srcu+0xc9/0x2f0 [ 625.661223][T18136] elevator_switch+0x1e8/0x7b0 [ 625.666554][T18136] elevator_change+0x2fa/0x480 [ 625.671878][T18136] elevator_set_default+0x375/0x440 [ 625.677627][T18136] blk_register_queue+0x3f3/0x4e0 [ 625.683204][T18136] __add_disk+0x6b8/0xdb0 [ 625.688103][T18136] add_disk_fwnode+0x100/0x3a0 [ 625.693432][T18136] nbd_dev_add+0x733/0xb60 [ 625.698409][T18136] nbd_genl_connect+0x96c/0x1cd0 [ 625.703904][T18136] genl_family_rcv_msg_doit+0x233/0x340 [ 625.710014][T18136] genl_rcv_msg+0x614/0x7a0 [ 625.715078][T18136] netlink_rcv_skb+0x226/0x4a0 [ 625.720407][T18136] genl_rcv+0x28/0x40 [ 625.724943][T18136] netlink_unicast+0x7bd/0x940 [ 625.730264][T18136] netlink_sendmsg+0x813/0xb40 [ 625.735572][T18136] sock_sendmsg_nosec+0x13a/0x180 [ 625.741184][T18136] ____sys_sendmsg+0x54e/0x850 [ 625.746509][T18136] ___sys_sendmsg+0x2a5/0x360 [ 625.751787][T18136] __x64_sys_sendmsg+0x1b1/0x290 [ 625.757284][T18136] do_syscall_64+0x166/0x520 [ 625.762426][T18136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.768876][T18136] [ 625.768876][T18136] other info that might help us debug this: [ 625.768876][T18136] [ 625.779124][T18136] Chain exists of: [ 625.779124][T18136] set->srcu --> &q->q_usage_counter(io)#50 --> &q->elevator_lock [ 625.779124][T18136] [ 625.792804][T18136] Possible unsafe locking scenario: [ 625.792804][T18136] [ 625.800297][T18136] CPU0 CPU1 [ 625.805690][T18136] ---- ---- [ 625.811080][T18136] lock(&q->elevator_lock); [ 625.815738][T18136] lock(&q->q_usage_counter(io)#50); [ 625.823667][T18136] lock(&q->elevator_lock); [ 625.830800][T18136] sync(set->srcu); [ 625.834710][T18136] [ 625.834710][T18136] *** DEADLOCK *** [ 625.834710][T18136] [ 625.842887][T18136] locks held by syz.4.3228/18136: 6, last CPU#0: [ 625.849223][T18136] #0: ffffffff902c47a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 625.857458][T18136] #1: ffffffff902c45e0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 625.866448][T18136] #2: ffff888029ad41c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: add_disk_fwnode+0xea/0x3a0 [ 625.876847][T18136] #3: ffff88802aed8610 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_register_queue+0x10d/0x4e0 [ 625.886705][T18136] #4: ffff88802aed8098 (&q->q_usage_counter(queue)#52){+.+.}-{0:0}, at: elevator_change+0x194/0x480 [ 625.897625][T18136] #5: ffff88802aed8588 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480 [ 625.907478][T18136] [ 625.907478][T18136] stack backtrace: [ 625.913380][T18136] CPU: 0 UID: 0 PID: 18136 Comm: syz.4.3228 Not tainted syzkaller #0 PREEMPT(full) [ 625.922776][T18136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 625.932856][T18136] Call Trace: [ 625.936152][T18136] [ 625.939095][T18136] dump_stack_lvl+0xe8/0x150 [ 625.943712][T18136] print_circular_bug+0x2e2/0x300 [ 625.948760][T18136] check_noncircular+0x12f/0x150 [ 625.953725][T18136] __lock_acquire+0x164c/0x2de0 [ 625.958597][T18136] ? lockdep_unlock+0x5c/0xd0 [ 625.963297][T18136] ? __lock_acquire+0x1511/0x2de0 [ 625.968345][T18136] lock_sync+0xb3/0x130 [ 625.972531][T18136] ? __synchronize_srcu+0xb5/0x2f0 [ 625.977676][T18136] ? __synchronize_srcu+0xb5/0x2f0 [ 625.982816][T18136] __synchronize_srcu+0xc9/0x2f0 [ 625.987777][T18136] ? __pfx___synchronize_srcu+0x10/0x10 [ 625.993602][T18136] ? do_raw_spin_lock+0x12b/0x2f0 [ 625.998667][T18136] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 626.004510][T18136] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 626.010086][T18136] ? synchronize_srcu+0x20a/0x260 [ 626.015136][T18136] elevator_switch+0x1e8/0x7b0 [ 626.019924][T18136] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 626.025409][T18136] elevator_change+0x2fa/0x480 [ 626.030198][T18136] ? do_raw_spin_unlock+0xf5/0x200 [ 626.035334][T18136] elevator_set_default+0x375/0x440 [ 626.040546][T18136] ? __pfx_elevator_set_default+0x10/0x10 [ 626.046285][T18136] ? disk_register_independent_access_ranges+0x2d8/0x380 [ 626.053338][T18136] ? blk_crypto_sysfs_register+0x11c/0x170 [ 626.059160][T18136] blk_register_queue+0x3f3/0x4e0 [ 626.064210][T18136] __add_disk+0x6b8/0xdb0 [ 626.068564][T18136] add_disk_fwnode+0x100/0x3a0 [ 626.073353][T18136] nbd_dev_add+0x733/0xb60 [ 626.077789][T18136] ? __pfx_nbd_dev_add+0x10/0x10 [ 626.082747][T18136] ? __pfx_nbd_genl_foreach_sock+0x10/0x10 [ 626.088566][T18136] ? bpf_lsm_capable+0x9/0x20 [ 626.093448][T18136] ? security_capable+0x7e/0x2c0 [ 626.098403][T18136] ? radix_tree_lookup+0x25c/0x290 [ 626.103539][T18136] nbd_genl_connect+0x96c/0x1cd0 [ 626.108499][T18136] ? __pfx_nbd_genl_connect+0x10/0x10 [ 626.113885][T18136] ? rcu_is_watching+0x16/0xb0 [ 626.118677][T18136] ? trace_kmalloc+0x2a/0xf0 [ 626.123290][T18136] ? __kmalloc_noprof+0x38c/0x720 [ 626.128332][T18136] ? __nla_parse+0x40/0x60 [ 626.132771][T18136] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 626.139119][T18136] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 626.145469][T18136] genl_family_rcv_msg_doit+0x233/0x340 [ 626.151035][T18136] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 626.157124][T18136] ? __lock_acquire+0x747/0x2de0 [ 626.162079][T18136] genl_rcv_msg+0x614/0x7a0 [ 626.166619][T18136] ? __pfx_genl_rcv_msg+0x10/0x10 [ 626.171707][T18136] ? __pfx_nbd_genl_connect+0x10/0x10 [ 626.177106][T18136] netlink_rcv_skb+0x226/0x4a0 [ 626.181898][T18136] ? __pfx_genl_rcv_msg+0x10/0x10 [ 626.186949][T18136] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 626.192287][T18136] ? down_read+0x2be/0x330 [ 626.196729][T18136] genl_rcv+0x28/0x40 [ 626.200728][T18136] netlink_unicast+0x7bd/0x940 [ 626.205516][T18136] netlink_sendmsg+0x813/0xb40 [ 626.210309][T18136] ? __pfx_netlink_sendmsg+0x10/0x10 [ 626.215611][T18136] ? apparmor_socket_sendmsg+0x98/0x360 [ 626.221180][T18136] ? __pfx_netlink_sendmsg+0x10/0x10 [ 626.226503][T18136] sock_sendmsg_nosec+0x13a/0x180 [ 626.231549][T18136] ____sys_sendmsg+0x54e/0x850 [ 626.236332][T18136] ? __pfx_____sys_sendmsg+0x10/0x10 [ 626.241643][T18136] ? import_iovec+0x73/0xa0 [ 626.246166][T18136] ___sys_sendmsg+0x2a5/0x360 [ 626.250867][T18136] ? __lock_acquire+0x747/0x2de0 [ 626.255825][T18136] ? __pfx____sys_sendmsg+0x10/0x10 [ 626.261046][T18136] ? futex_wake+0x51b/0x5f0 [ 626.265591][T18136] ? __fget_files+0x2a/0x420 [ 626.270209][T18136] ? __fget_files+0x3a2/0x420 [ 626.274919][T18136] __x64_sys_sendmsg+0x1b1/0x290 [ 626.279884][T18136] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 626.285371][T18136] do_syscall_64+0x166/0x520 [ 626.289990][T18136] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.296073][T18136] ? clear_bhb_loop+0x70/0xc0 [ 626.300771][T18136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.306686][T18136] RIP: 0033:0x7ff3ee39e159 [ 626.311118][T18136] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 626.330737][T18136] RSP: 002b:00007ff3ef195028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 626.339167][T18136] RAX: ffffffffffffffda RBX: 00007ff3ee626090 RCX: 00007ff3ee39e159 [ 626.347154][T18136] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000009 [ 626.355137][T18136] RBP: 00007ff3ee43506b R08: 0000000000000000 R09: 0000000000000000 [ 626.363122][T18136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 626.371105][T18136] R13: 00007ff3ee626128 R14: 00007ff3ee626090 R15: 00007ffe2efbf1e8 [ 626.379100][T18136] [ 626.624963][T16105] udevd[16105]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory