last executing test programs: 4m28.289268599s ago: executing program 0 (id=6080): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @broadcast}, {0x2, 0x4e20, @multicast1}, {0x2, 0x4e21, @broadcast}, 0x1, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000000)='team0\x00', 0x7f, 0x32, 0xfff}) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_to_bond\x00'}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x800, 0x0, 0x2, 0x1, 0x773c}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'macsec0\x00', &(0x7f00000006c0)=@ethtool_ts_info}) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005c40)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}}, 0x4c8d0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$bt_l2cap(r1, &(0x7f0000000640)={0x1f, 0x1000, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xdb, 0x2}, 0xe) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0xfc, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) sendmmsg$inet(r2, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{0x0}], 0x1}}], 0x1, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$sock_int(r4, 0x1, 0x12, 0x0, &(0x7f0000000600)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x64}}, 0x0) 4m28.102248464s ago: executing program 0 (id=6083): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x2, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x80000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000000000029000000", @ANYRES16=r1], 0x18}, 0x40c0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000100001000000"], 0x50}}, 0x20044084) close(r4) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0xe4, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xb8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'veth1\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}]}, @NFT_MSG_DELFLOWTABLE={0x24c, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xe8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM, @NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'pimreg1\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'team_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8, 0x1, 0x1, 0x0, 0x20}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x110, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x101}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'dvmrp0\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0x0, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x10}}, 0x378}}, 0x0) 4m27.747418574s ago: executing program 0 (id=6087): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)}], 0x1) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000080)=0x48b5, 0x4) close(r0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, 0x0, &(0x7f0000000500)) close(0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x403, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @remote}]}}}, @IFLA_EXT_MASK={0x8, 0x1d, 0xfffffff1}]}, 0x44}, 0x1, 0xba01, 0x0, 0x20000000}, 0x40080) 4m27.026307637s ago: executing program 0 (id=6091): bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x48) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x2000300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4m26.064413609s ago: executing program 0 (id=6102): pipe(&(0x7f00000000c0)) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$inet(0x2, 0x2, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x0) 4m25.985347366s ago: executing program 0 (id=6103): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r1, 0x0, 0xf69}, 0x18) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r3, 0x0, 0xf69}, 0x18) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000000)={0x1, 0x5, 0xfffffff9, 0x2}) close(r5) close(0x4) 4m10.871487231s ago: executing program 32 (id=6103): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r1, 0x0, 0xf69}, 0x18) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r3, 0x0, 0xf69}, 0x18) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000000)={0x1, 0x5, 0xfffffff9, 0x2}) close(r5) close(0x4) 2.825141376s ago: executing program 3 (id=8614): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x7, {{0xa, 0x4e20, 0xe0, @mcast2, 0x138e}}, {{0xa, 0x4e21, 0x9, @private2, 0x4}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000002d00)={0x9, {{0xa, 0x4e23, 0x1000, @mcast2, 0x3}}, {{0xa, 0x4e22, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0xb0}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000005c0)={0x7, {{0xa, 0x4e24, 0x5, @mcast2, 0x1000005}}, {{0xa, 0x4620, 0xfffffff8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000}}}, 0x108) 2.733272171s ago: executing program 3 (id=8617): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = socket(0x23, 0x5, 0x0) ioctl$sock_qrtr_TIOCINQ(r2, 0x541b, &(0x7f0000000000)) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x2b, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='tlb_flush\x00', r3}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000340)=[{&(0x7f0000002000)="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", 0xfe41}, {&(0x7f0000000300)="9b364acaa018d77f8143825708d8", 0x1}], 0x1000000000000029, 0xa) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000280)={@val={0x800e, 0x6005}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0xe000, 0x0, 0x4, 0x0, @empty, @empty}, {0x4e22, 0x0, 0x8}}}}}}, 0x2e) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc///\x00\x82q\xee\x00!\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r7, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r8, &(0x7f0000000380), 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) close(r9) setsockopt$packet_int(r2, 0x107, 0xe, &(0x7f0000000040)=0x2dbf6c21, 0x4) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="8dffffff0600"}) 2.528932047s ago: executing program 4 (id=8624): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x5, 0x0}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x4, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.524572485s ago: executing program 3 (id=8625): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0xc0, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x94, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x8}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x80000001}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x1ff, 0x3}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x6}, @TCA_HTB_INIT={0xffffff63, 0x2, {0x3, 0xfffffffb, 0x7fffffff}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x3}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x80000001}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9, 0xfff}}]}}]}, 0xc0}}, 0x0) 2.39789838s ago: executing program 3 (id=8628): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000181421f7"], 0x20}, 0x1, 0x0, 0x0, 0x20040001}, 0x20000082) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000700)={0x0, 0x81, 0x10}, &(0x7f0000000040)=0xc) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r4 = socket$packet(0x11, 0x3, 0x300) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$packet_int(r4, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r4, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000003000000000000000000000085100000feffffff185a000008000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000003eb3ea73d2baf85116411b992fc4589bbadb864f359774e31d3707059e0f39cea868f6890caab9d999434de37758f41aa249c41a8363fe3abbac5a38a6f6213f0de40cb2f07654a9926ec285ce8ea30fb9049510b3eb94fa1675fc0a81168c3f867434e250beb3ce76a7034a6256023412090314a41b15a7c60747a48d6728b3e981dbcdcf4e5a0e231ec01631182f3366804dd8dcdbcc4b31e5c3820cb7c9526d29138ae0b69a2255eb"], 0x0, 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[r5, r5, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x3, 0x2, 0x7, 0x2}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x5}, 0x94) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r7, 0xffffffffffffffff, 0x24}, 0xc) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x62040200) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r9, @ANYBLOB="0a00340002020202020200000a00060008021100000000000800359c8063ce113f9049b200000000"], 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x2e) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, 0x0) 2.33239499s ago: executing program 5 (id=8629): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000d40)="3ce2de4d8d957a8de4e490b6cd03b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a", 0xfffffd61, 0x4000800, 0x0, 0xfffffffffffffef8) recvmmsg(r0, 0x0, 0x0, 0x22, 0x0) socket(0x400000000010, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, 0x0, 0x0) sendmmsg$sock(r3, 0x0, 0x0, 0x200000c1) ioctl$int_in(r2, 0x5421, 0x0) connect$vsock_stream(r2, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4, 0x0, 0x8}, 0x18) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r6, 0x400448e6, &(0x7f0000000080)="fc") pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) 2.298020028s ago: executing program 4 (id=8631): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000003c0)=@newqdisc={0x4c, 0x24, 0xf0b, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_AUTORATE={0x8}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}, @TCA_CAKE_INGRESS={0x8}]}}]}, 0x4c}}, 0x4090) 2.193174695s ago: executing program 4 (id=8634): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) unshare(0x62040200) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r1, 0x5421, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002021702500000000002020207b1af8ff00000000bfa10000951234d35864aa628023ce005f3d367c00000701fefff7ffffffb702000008000000b703003e6d000083850054308de8c7749781c53da224ccde11e1586e8521a654fc2538faaff61c75b305f68d9e6e226e602f10e29e98c99a9db3afbe80cf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) sendto$llc(r3, &(0x7f0000000180)="ccd0b1195f16b94bb92206c5e70b0b148b7bfbf7b57bb1c57d7138d231a4ac738a2ed63659dc6899cc1e321965e3d2b442", 0x31, 0x0, &(0x7f00000001c0)={0x1a, 0x312, 0x7f, 0x1, 0x3, 0x6, @broadcast}, 0x10) socket$l2tp6(0xa, 0x2, 0x73) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xf) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x5460, 0x0) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r5, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_O_TEI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000d0}, 0x4000010) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r6, &(0x7f0000000100), 0x2, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000c40), 0x12) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r10, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2) sendmsg$inet(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="92", 0x1}], 0x1}, 0x3) r11 = openat$cgroup_ro(r8, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r11, &(0x7f0000000200)=0x1, 0x12) 1.708145069s ago: executing program 2 (id=8637): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d50633"], 0x6f4}}, 0x0) 1.543168763s ago: executing program 2 (id=8639): sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x40080c0) r0 = socket$inet6(0xa, 0x80803, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x547b31180522e14c}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast}, 0x0, @in6=@private1}}, 0xe4) connect$inet6(r0, &(0x7f00000000c0), 0x1c) 1.451113321s ago: executing program 2 (id=8641): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r1, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0xb}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.421304764s ago: executing program 5 (id=8643): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x3}]}}]}, 0x3c}}, 0x0) 1.288749282s ago: executing program 5 (id=8645): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f000000d000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSETELEM={0x24, 0xc, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x40) 1.267157753s ago: executing program 4 (id=8646): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000011002901800000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800058004800500080000003e"], 0x44}}, 0x4000) 1.200441873s ago: executing program 5 (id=8648): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x77, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='cdg\x00', 0x3) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d00)={{}, &(0x7f0000000a40), &(0x7f0000000cc0)}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000000000000000000000000000850000003d"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r2, r1, 0x7}, 0x10) close(r2) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000140)='memory.numa_stat\x00', 0x275a, 0x0) read$alg(r4, &(0x7f0000000040)=""/136, 0x88) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200), 0x806000) writev(r5, 0x0, 0x0) write$tun(r5, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000012c0), 0x4) r6 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x80, 0x0, 0x7, 0x3, 0xc2, 0x4, 0x20, 0x8, [0x2, 0x0, 0x0, 0xc, 0x5, 0x0, 0x0, 0x2]}}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001380)={{}, &(0x7f0000001300), &(0x7f0000001340)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000c40)={@initdev, 0x0}, &(0x7f0000000c80)=0x14) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{&(0x7f0000000040)={0x2, 0x5, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)="7728984b77ddff487b6b5a8d2343190ef5ba4e0d85be8ea7e8b60fd877e975f2eb9ef080326744960008b3414f95c1a31eeec58bdd14d949f9a3ab837035130f00da5c56fe0d4b3756f5be8139112b2940f7ee516a1584d0b3b6e7082880af65499b4528ac4a15cf6ef3ca51c2863db317d65999", 0x74}], 0x1, &(0x7f0000000180)=[@ip_retopts={{0xbc, 0x0, 0x7, {[@ra={0x94, 0x4}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x34, 0x17, 0x1, 0x5, [{@rand_addr=0x64010100, 0x6}, {@multicast1, 0x1000}, {@dev={0xac, 0x14, 0x14, 0xa}, 0x40}, {@loopback, 0x1}, {@broadcast, 0x9}, {@rand_addr=0x64010102, 0x3}]}, @timestamp_prespec={0x44, 0x24, 0x65, 0x3, 0x1, [{@multicast1, 0x48}, {@broadcast, 0x6}, {@broadcast}, {@local, 0x6}]}, @noop, @end, @ssrr={0x89, 0x7, 0x8d, [@empty]}, @timestamp_prespec={0x44, 0x14, 0xf4, 0x3, 0x6, [{@private=0xa010100, 0xc}, {@multicast2, 0x1c0}]}, @timestamp_addr={0x44, 0x2c, 0x1f, 0x1, 0x8, [{@multicast1, 0x5}, {@broadcast, 0x81}, {@rand_addr=0x64010101, 0x3887}, {@multicast1, 0xf}, {@multicast1, 0x7ff}]}]}}}, @ip_retopts={{0x44, 0x0, 0x7, {[@generic={0x44, 0xd, "bb85fb3318c4fbc32753dc"}, @rr={0x7, 0x1f, 0xc0, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, @multicast2]}, @generic={0x94, 0x7, "d83d46e6da"}]}}}], 0x108}}, {{&(0x7f00000002c0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000300)="fd4fccdcedb9e6c4881ecb8dbc1d984b8e3649871c4d8bf1e541a86d46b536e9a6ef91f18f2e08055e75dceea8ec14e06bcab7b73fbffd8034f6a2a7a9257ccc72f58fb3c36f1852f28ae2f6882eb9b92bdb57ce763e0194baaa3867f317bfc055956540983e634c01415e5be97073f199686e99dd2fc0ebb46445831f2f2fe0f18a817d8ff69b52db0f3d4ab78d1831115b51a2b38ee789", 0x98}, {&(0x7f00000003c0)="524fdd80485ecce02a6a1149de033d49d5061e9ce7d342f27d", 0x19}], 0x2, &(0x7f0000000440)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0x60000000}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_retopts={{0x20, 0x0, 0x7, {[@lsrr={0x83, 0xb, 0xba, [@broadcast, @rand_addr=0x64010102]}, @ra={0x94, 0x4, 0x1}, @end]}}}], 0x68}}, {{&(0x7f0000000500)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000540)="163654dcac7c1f49d309a21915efd070f07a242c388fc9788c891b2199b474e9e42340298262fb6f7705e935b7649c18d8925afe8aeac384fe855042b7415fc4bf905fd88848af75b84966da2761520882bb6bb7e20a9a9abaea52f5b29f74cf649b6f12edcd4d794e89f2476a0c5447fc22fda77bca37dac8486fcbc2ccf58cca1113af2f12cae7fd8fffc94aa46b1f49fabe7d1bcac4d3842f2ccca4223f791c3ee433638e9568c8a626b7ea7ca6c196b7c5742d67d23884bf9037423613b75ec9ab46d3397ddc92f5a5631a645e90a2f67e96d1395d89404e92", 0xdb}, {&(0x7f0000000640)="ac1be72df5f1fd1c905e8d276a1ca7104b17cc82d69e5072bc2336db0088d77d3a783edbc687a9f00a9456e5f653e99b2990b87b37684ef3e4655ca3b84a31d24c16a6abde5b6bee796d0251d2b1b5f42b03ae193d91e454f71aa6406b8daad7f450a5b1cfa1e565ec3cc950182ad34842c6aba87289354b", 0x78}, {&(0x7f0000000740)="20cc62887693243140d778c5934944501a24730d8c6d8b38997e9949076e20bd7738cfa980e5a64f82a679baf92858aae4adad40af9a51bf607fb006a673640eba315917a63ba63c0c3db7ff9917c6957b95e8ebbd10d00f4f8d612c7e28a483a5d50aed151cda77208ef0789e495ceec9c8431564d837b6631d01c082880c09d5e540f3f0f3bf9d1a583ef02c102459fd00851f065494b310a2141bab4745eaca7c7bd0e83a415cabd4a711c3", 0xad}], 0x3, &(0x7f0000000840)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_retopts={{0x6c, 0x0, 0x7, {[@rr={0x7, 0x3, 0x4c}, @generic={0xc5, 0xd, "7f91908c87ced8a1b05cd9"}, @rr={0x7, 0xb, 0xb9, [@local, @multicast2]}, @cipso={0x86, 0x12, 0xffffffffffffffff, [{0x6, 0xc, "6b7c1de9aede479d42f2"}]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0xc, 0xa3, 0x3, 0x2, [{@private=0xa010101, 0x7fff}]}, @rr={0x7, 0x1f, 0x4, [@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x16}, @multicast2, @multicast2, @dev={0xac, 0x14, 0x14, 0x26}, @empty]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xb}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xa3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3a}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}], 0x118}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000980)="014be59c6ce9e4fb88168211ac288b56a1dcd43468d413eab9f056c8ed45edf75dec96a9d7e7be62a744ae7e855d06ef8be3e864d6bcfbe5768e77a430d78592ea5e805d31710463d6d11e34cbbb379ddd471564408f9c7a24a2464e00f1330491274131d902595ca9865e1ac06f243f7332ef2a50e674e7f29869d03d46191c1e27c732e17bf6f780bc21540266b5f4fe99758685ebbf2d3f5ac2f7e9908ad9dd7d67f95b8ec3f4079e778e7b469c48b23db00ab7dd985b65607003c2", 0xbd}, {&(0x7f0000000a40)}, {&(0x7f0000000a80)="5907d46b5b574cb99a6b5ea965674b8f39efedc076555810aa77341ba848c18dff07b827b153338ff72b0e263de9bbc4804448edaff5fd0e1945a5c0e19445d71fdf162dd9e05ced426a4c4ca1ccbc7c3eb312248a3794533911463f52eb1c72bc2026e4e3fa097eb8f56c6e927b02c2a097ed0398d9c7d29ef724a663de54ac2b793a94329cd9ac7865b360929cbf44c0512265c400f0295c25f7cb5cf6da479a8446e4302d34455a69ab3979ee5ca3bc01c13c9bb9555a052b83f75a0f9a78c6d03f425d1e2b3c977edbe0d3ebacb854d15915fdc59d5d09435d7c5161f04fcfd721096279889e3c55f3d2", 0xec}, {&(0x7f0000000b80)="fdf989e81591cca94fd467d0b6ca89b9013705df9d77cd3e64b97ce94effacba9490cc2fbed7d874366878b2fbec58257f0ccb8a2e3c981698b16de1338336939a2f8ede0868c1bcf9da3697550e7ae51730b47c5d3a1eeca56b7d7b45a9d1f6eff8fa879800b05f4da436a7067764a322f36b04363c", 0x76}], 0x4, &(0x7f0000000f80)=[@ip_retopts={{0x9c, 0x0, 0x7, {[@timestamp={0x44, 0x1c, 0x62, 0x0, 0x6, [0x4, 0x7, 0x4, 0x1, 0x6, 0x3]}, @generic={0x88, 0x11, "7161dd815bb0aa351deeda8302d684"}, @noop, @rr={0x7, 0x1b, 0x5e, [@remote, @dev={0xac, 0x14, 0x14, 0x11}, @remote, @dev={0xac, 0x14, 0x14, 0x41}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102]}, @lsrr={0x83, 0xb, 0x10, [@multicast2, @dev={0xac, 0x14, 0x14, 0x3a}]}, @rr={0x7, 0xf, 0x5e, [@private=0xa010101, @local, @multicast1]}, @rr={0x7, 0xb, 0xc2, [@local, @remote]}, @ra={0x94, 0x4}, @rr={0x7, 0x17, 0x9f, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @dev={0xac, 0x14, 0x14, 0x2f}, @rand_addr=0x64010101]}]}}}, @ip_retopts={{0x90, 0x0, 0x7, {[@end, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0xf, 0xbc, [@dev={0xac, 0x14, 0x14, 0x33}, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x17}]}, @noop, @timestamp={0x44, 0x10, 0x76, 0x0, 0x3, [0x401, 0xfffffc18, 0x4]}, @lsrr={0x83, 0x7, 0x5a, [@loopback]}, @cipso={0x86, 0x4a, 0x1, [{0x6, 0x5, "2b7b8b"}, {0x6, 0x3, "87"}, {0x7, 0xc, "95b184501694974e806d"}, {0x0, 0x11, "7c0e929822f661a44e646ed428eddb"}, {0x1, 0xa, "c4033989ab872fd5"}, {0x2, 0x12, "259d69a759fdabb105cb05099551d8e9"}, {0x7, 0x3, "98"}]}, @rr={0x7, 0x3, 0x95}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_retopts={{0x18, 0x0, 0x7, {[@ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_ttl={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @empty, @multicast2}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}], 0x1e0}}], 0x4, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x2000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x7e832, 0xffffffffffffffff, 0x0) 1.192606398s ago: executing program 2 (id=8649): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000040100000f1f7000095"], &(0x7f0000000480)='GPL\x00', 0x8, 0x1009, &(0x7f0000000bc0)=""/4105, 0x40f00, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x800, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1000a, 0x1b400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x21, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="d4000000240001032abd70000000000001"], 0xd4}}, 0x4080) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) shutdown(r4, 0x0) recvmsg$unix(r4, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x0) syz_open_procfs$namespace(r5, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x235, 0x7fffffff, 0x7, 0x4, 0x8d, 0x1c, 0xa, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x8, 0x3f9a, 0x0, 0x800000000ffff}, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DISASSOCIATE(r7, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="28000000e7876ba85a4286750c08715c82a3882c21310bcc5bbf9038c0f1c0b6a7d1315a8bda650bf0199951e410effcb8b9481c06b1a8982492b1437330c9a432d7406f30ea2127711a4bfb59db069927d9887c418676d56b665c278b70e9f516cb9f607b98dfa26ebdc9133e76c82f518b4199fe3f15eae3e44173628b8203a8b8c476ceb3a3267359fd572699d5932e011202a759938e68145431e6268204e475f9377745f75169f7558d8ba392e290f5c4af62920722936a4d3db68f21bb05349879fc7ce8c5ac7541f79901b029193c50e00bfa11fd01f75bf827419f7819eac195b63c33", @ANYRES16=r2, @ANYBLOB="01002abd7000fbdbdf25280000000c00990007000000350000000600360006000000"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x20004001) close(r1) 994.373732ms ago: executing program 3 (id=8650): syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) accept4$vsock_stream(r0, &(0x7f0000000880)={0x28, 0x0, 0x2711}, 0x10, 0x80000) shutdown(r1, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x84500, 0x0) write$tun(r4, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x100) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x0, 0x7fefc, 0x8, 0x0, 0x1}, 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r5, 0x0, &(0x7f0000000200)=""/76}, 0x20) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) unshare(0x6a040000) r6 = socket(0x8, 0x3, 0x0) ioctl$sock_netrom_SIOCADDRT(r6, 0x6180, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000040), r6) sendmsg$DEVLINK_CMD_TRAP_SET(r6, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0xe0, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0xe0}}, 0x40000000) 994.159919ms ago: executing program 4 (id=8651): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 916.953834ms ago: executing program 4 (id=8652): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r0, &(0x7f00000004c0)='W', 0x1, 0x8005, &(0x7f0000000380)={0xa, 0x0, 0x0, @private0, 0x8}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000140)=0xfffffff1, 0x4) 624.085648ms ago: executing program 1 (id=8653): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000810500000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="14d00400900900002400128009000100626f6e64000000001400028008000b00", @ANYRES32=r2], 0x44}, 0x1, 0x0, 0x0, 0x2}, 0xc050) 476.769509ms ago: executing program 1 (id=8654): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000013c0)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x5}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x64, 0x2, {{0x7fff, 0x7f, 0x192, 0xf, 0x7fff, 0x205}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x8, 0x5, 0x1, 0x3, 0xfd}}]}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x1, 0xfffffffd, 0x0, 0x1bb, 0x4}}]}}}]}, 0x94}}, 0x0) syz_emit_ethernet(0xfc1, &(0x7f00000013c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0xfb3, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xe}}, "dd9dec79219eb5499325e16c96335bc5ff0e043319357749084ca9d0ae1378f4e88112a2f7c10fd1523b9007773fd2b2bd0ebabccd2e5c35fb3baff587585840f2530c6f4d025f118440ac22a8b34da7b5e1e873bd429686be3ef84439e05fc0fefedb8b897b09445a9e10cf24aec2ff3ca6a86d94df0c4a928ed904dcfb02e6c6c5918a839d33cb9b55dfb3cd89d80eb18dc06415d313b4ea240a65eff4b941ac018e8f81de044239960271333255291b5fbfdcf8db25e175640f36986b859aeb3370ca17e6a20aeeb5c5d27eb097fc1fab796a7ff8fcbe119bbe4be2c8a5c58890191c59bea20bfe4edf9c5453e59f610d3bd1d6eb49b02e464aee0480187c5717936add1347b08cdf5b056adb941708e8a0498900419e98b75658c6dd00f88eebf8c9aaee2e38c80eafcf6ca08ea305da9c7050948ef78a1457a2e933287fe8d2e100cb00078ed829985f8812d543cc5cdb71521f4113829551efe915e4d6773f2d285cc1e8813919356ca5ef202b0d2b8a3d7de51e4635e761ffd7efe5d51dd1325596f0e4e1c0b1ce73240cb931227892d66f3629c9d152372d5790c1c25e2f6f850a5eb83654f423b84adbbf4169d472b2cddaa7137ff14c2944ade3a57613806810707a2e6c078beb4b87cf8cf39c9950bcb3f9bb42308bd5e68d81f7f4d9e528541703059787f5e342be8ebb9841d587f7455b409115d511c130d9641fc74391228bda52d2fa58e2ca74b26583e73e2cfb881945d8ecbc77eb35e783057f6c35ba06b7f639ec516ee54bf3645f6ec436ba859e22ed480a862285aa21f3d5cd3734dde388a7f8920c4a6b4a952f830e0d2811f2f2714e660e961de0b3e0b8d5fd1007690a61e414e82245dbe4e47c73465ed40af1cee2eae4801ee408ad1fce81ff8db77082c5efd93fa9a1a3e3d78eff84f326df1c6fa656cc7d4dab842fe8e0d9ce47ad0a7e74dfe1a53776a346a22dc7a0e476754d385d99aa9cbd3f445ffb2ed61e01b28fc071d706ad204b1e8014481dba0cbc460b67e64d6e955184271cedef7f951021e3595ebe9c3384b53efafb67cbed2aa1ede5d7fcff3a9d27d05766fb8894d7948609441759f4c4dfa33b6d486d4fb7e231f04d4f0f9e98f4b156129d9307fb9ebf3b278232062e7fe9ec2db7c4c991f83733368a107bf5798a1df45c919d71cce45ed907240c2f2fa6a4227e8e11cef2e7968c63e7a1adc3edec2170c17ed2cc54d0ea2b34e99b81015ffe51a501c2b73ddac5223e69d0dd451d358c0cd2ff7db256850ec1e9e349901f168d854284da68d80c68298a75c5d859008c82fe08b4cf2e68a2c0190760a03aff1be2c9425b6d5ef5c67bafb6d16fffeeb0211d90abbade4db9d6a9e9c981dde14c1d54e9138f9760bcdccbf17e7416042cfe7bbd8bba2f739f7f900ee45b965316b950e8474f3be92081fb63f43a4858b39e20e14d5a38c0973d680f2fda9e310d0e088523bdcbb728bcd0074447b4ace876da5642cd7d781cdb023a31446e0a0c59d5388674a5c8a97927e014a73d0330bd5c5187db79f1c546a8bcca008263509c23b246dea58fb36c44d373c1c92ffdd1600c27d4b10b3fc86b88ecefe8743bb59a6b8e443f06d2ae3a6908b6bc25b647deee13262225b8879dd79413ffa3d4aef91a0a04d4dc3030b5beb081c5fdf9152c3a17e6b24457fd580d84d3006af27ff44d6ec3664c4955a1d1dc5eb041682644ae564390a3d0aa602b2a18cdd3f8a1efff7b8f3afc31c283c9b74b806a98bd9f1ad8ecce410160c0a27f7ef90a2b0c1bea64e187adc04a04bff7c435659bc4c3ce5c2730e121972541062102e93d2a136e1aaaf3e25d547cad6e2b0874500fc098469494d2654808ee88588fd167f4332061a9b4cae6b22d87624e325e89a269f61ce0d26465ddfedc1f0fa2a5cf1ee7fe3e6cb375f1ff04cf8d22667debe574b8395023bde9a8302376af2e119c4c88433d1722011ade605f3a4201860742b0392ac96cc138d9ddb952f4e4742a7fd9d625465dac35347c1662b2085c357120c6ff69dedc013c5fe46555a4448b0be41e21ad73162bf9aa1cfb70f4702c7051c0a13fae918133f123d33c5c02e66ae8fceb3109b2e13a7a3e71484d59dfcba16db2d21549be1ba6cd5ad7610eefda427982384961f18bd6857ad97e868c2914d0ba934a296eda52646031c4504864061f3cba1df65cd04ef6b1050fb30b5abbbe28f8f7adb8073e452f4c0c5492a5f8d427ddf451ae303a86639e5dbccfe2b2bedb911d534a77c012e2f8a24917d98ab14557caf3e66040f21767685644f0003459762d4ab25a0e33a92b54748cf46a977505074b79b9b0746b2b5b168876a2ca10bb903edc1d1992a4a94c0ee0dd7b37add092163b5fbaf16090f8143187d060b19e3822f3def14717e41558f9582467a5a5f89148450fde235e7a5bb900e4e9d14e2147bfd2a52f84a115eb170bf3d3b9b3de9781960be4e53025c7dce005e1458140bb9cf9da8fa1124ac558fb220d57c23a7f120f5171eb2208d9e6ab7186ae457973da564f1fd45b241c15596035f55034c3995a587b4471068076839420df947f10ab2fc211732d768c135d63cc5eeda1bdfc780e7ed90855fa5a364e63f529703cd0f691b0b6a41232bfd1c1f61ef6b16ed3b9055ca888c8ebcd16a0623ede9e4e37b7d6175e3d0ddba8e7d87639eb8b0ba246131951a581575f1adf4c598a9f2f087d5eb2a0a5834d8cb12b0ad76d9381a838ccfbfcc20bbb970474c48677f10aa57be1d607d5b049d397178035f7f3393cd9000336c83218850ecd64142a22f7ae7e6a7e62013d6d105eb7c862e13979698681d44121ee9e2e552315d4d3913ff7bcd90d6bed72d50107a971a37d5a1d75efeebf03cc91239b7e427fba8df6b79674c15acd2093289fe6155063af81d85840abf4635f66083b3707d34b2149dfdf95cb4deb71e1574118c242b160c770347e6b1f135a985e89fe8e6d7f40281cfb6dc05cd8b9d4f6680c0863acb34516092acdf2bea67f54ab4282ba2d898287f34d9384e335b2ddbb87aaea8cadb8f0b397e99a68a7a214fae5a1f56c95bcd901534c23cd5cff3c168813d7fa1191dd7437c96b07324a7b21b48e205b859dcd080bd62ab7cca4bd7a73959218d0eeb21c887483201eaf3afb19efe1741b57332c5441685a7bb8324d9e85faafc785312b58aabef2eef6a8048663bf13db9ae9edd4b1dcebc99890693f11b354b1f1aad19b66251b4bcaed0daed73b87dedd140fd680e7d3355362844d1d7ba2ae6be7ffae59d7b3c679b890448b0de1acf591abfe6f3096794b7e142e0ac0862ab8cb76eb79b17d1138be3747f907c3f11c636a0f0e0d315d1ff05aab0ce62fbac03a2b4ddeac7ee192bba2da93b7a926271f6d594aa14de2c294ad0c77770a624d1ce24cc8d8f5e9b629604fa7897f0cbd641f76a85dc8df33b5715eb100e30e53b85110d2252c22575a7365eb08006b4d62d305e780101965094ce2aaad170df470870e687fb280b772d41ad5d470b71e256af3a0d2c02df95821d38f28cdff26fa7a3f6e920edbd3174d2d2bde854ef68dae8a0a4a63753c825930903a2ca75d4321bad0ad9ff6852f94dd04972a45bb9625b3726dfbcc959e85242f0d327b181aee0fdab7af064dd97151b131a5c4a51a66692cbbd9f1348a16470cedef1b255e172cd2b15184177ad43744de941869af884ff8e59ef0e63ac5e1b99c851e0f915359ce12d9c380bb6f9c2bc773267157afeda7abcc120a31a1b72af6662bff7f5f194dad00b4ebfdcbb4dfc39854412db1ae99b449d741f841239159ea467cf1e38b95bcb7603ebcb400cb31410b2a4e25126caade0019bf667cc998bc4582578da0f8a6268f6d114ccf9dd8379995e8be1b934bb5645d72f97e05628129a7d2bc548e08796341f43dc3c9fcbe89d8284dc6633bee0d17e99f600425f0172b6bc478f5117dadf15e36e850ecc0ca75664ef8e4877a44b4ffa22a6f1d6719f8d81f9937928caa0690b77406a3298aaf446e2f78343267399bb7f64c60f82bf5d07210281eaad09a3810790720c98a041332c809be7aea1480b9e5eb989085c23b4aee75143068def3e89d1c417b63321e68d340a1472d2504088c17cd75de0e700508c55a7246ca9a762cc50ca35cbcaa7dcf4ae3264c32ff2cd67566ed501fb8182b5f16c58295783f3b2b554b06aae700f198c71ad7519868c1e6fbeb0246569b04beeb8b71bcbb9af93372bee365efb1d7424689e8241b1dc346a73a84b5773487f388356b8dbec1a108846e3f8dc74865b156e8ad18b353efc4ad0b11412a381fec8f5d45678b4f8b680591be8077303e7aff71acf9052ae3b73e41e19668f9b53bfd75b778970831b6891a78ffe0d4863e62cbbf6cf8c085032864479cd3a250842984dcc2860f057f86c8e2d4d2afefb8a45b7d5b8c94e752f369a1b434c827cd26cd0276a8b40019a95ebe7c16de4c1ce8efbd5c70e0c507631818aa4fbc937d212e428aefa895069656babdbd921af974da32c49f4ca6d1e1e28319b427c8bad4d650809c673ec6073770b4097e5700a8071110fd07acbc5a59f8d7b0735a98fd40ce03718a9a93c035948859215c59f54343b08bfd95a35d73c5f09a9ebe63c509fe8443fa74e6efd0fd87defc7cb16725ce3c3d5f7664cfe253faf2cbeb307052dd2269b6266acdb31e2006b9355f673ca5c9cb907605ce071824254b139607a069531f9598f4040ddeb9cd018e9dfa1808032dfb65a4af0820da810a7b58fbb65ac8e65b017a40ec2d445a5c7b78d1f0e717b19427ef1fe6cc08c5e9da5a7d1d508fd939854589dcba8d75ff3d8d1c1fb28af1ed6900bcd4cedbe42fd6243c81264fe81be756bfd71ebcd4d96bd7ec50a676bc57e130bd8da21bb6e888eb6c8402516f6fe6dfe25be9a3e33f2cdbed9de00efb867cbe80ec2309458f41924b967d254166e5a0a5f776395214a67900d180704b9fb09f9c4c4c62fd382fcd5efe099e22d2c82f198a39d193f65b68e09454e2ab8f2d7413c64563742f1c34ca9285e501bff5efa30a0da946f875d23162eaa53c4008bed38e9a190b08ff8bfb6bfb91553c4c329fc73b8be308b00347dee2afdc08bab311c75386f452b706d1820c9038998924665010a548c09743a16167b0b09373b5cd2fb1da4f6c9ea5b1f1dd7775f6fcb23eab4fd1990364dacb2a1656b9bcf1c4866b7222872a3a3a03d397499222a3f31a35d3aeaf6a6d39f0fbee1e0f6e1e10ba0774f15f245d955cc8132d86c2d768f8a06274caa5a12c46e9e08ee556c1da49830f1e6c0a0c53a9ef1489c3fba0251c3e6839e891ac298108f3ed05066e48b8bda2c5f6e691c7a7425b7019e0a547f6560a0af41831a4a790c3a8eac9a3a9119da3eef85cb12f3f3115f04ae95534ac847b4ee2cc2fc43cdba382ecae7c4f499ce1be1ca1907313ff665c2fd7d4c8f36716f33b6861f5cf3f1c878feadfa9a664b8d629a16c750c466326a951efaa830e4f328270041f2ca0be49f0affe5806b94b027033f008957e83d167d6fe4168ec4fb79385cc06e257bba807ecfccaba56cf751dac996b7a347d36ec52b0f5d16425402416c735530bd7c545f8c753fb3b1054b82bc3"}}}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r3) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r4, 0xc03, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008001}, 0x4000000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000001000000080001003f0000000c000200700f00000000ffff0c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r6, 0x200, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000000000bb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000002100000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 416.255417ms ago: executing program 1 (id=8655): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='tlb_flush\x00'}, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000340)=[{&(0x7f0000002000)="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", 0xfc0}, {&(0x7f0000000300)="9b364acaa018d77f8143825708d8", 0xe}], 0x2, 0xa) 392.615008ms ago: executing program 1 (id=8656): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='freezer.parent_freezing\x00', 0x275a, 0x0) mmap(&(0x7f00004a2000/0x2000)=nil, 0x2000, 0x0, 0x28011, r1, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x0) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x0, 0x0, 0x0}, 0x94) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x400}) getsockopt(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r4, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$int_in(r4, 0x5452, 0x0) recvfrom(r4, &(0x7f0000000200)=""/82, 0x52, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, 0x0, 0x0) 327.651606ms ago: executing program 5 (id=8657): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = socket(0x23, 0x5, 0x0) ioctl$sock_qrtr_TIOCINQ(r2, 0x541b, &(0x7f0000000000)) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x2b, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='tlb_flush\x00', r3}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000340)=[{&(0x7f0000002000)="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", 0xfe41}, {&(0x7f0000000300)="9b364acaa018d77f8143825708d8", 0x1}], 0x1000000000000029, 0xa) ioctl$TUNSETVNETLE(r5, 0x400454dc, &(0x7f0000000140)=0x1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000280)={@val={0x800e, 0x6005}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0xe000, 0x0, 0x4, 0x0, @empty, @empty}, {0x4e22, 0x0, 0x8}}}}}}, 0x2e) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc///\x00\x82q\xee\x00!\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r6, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r7, &(0x7f0000000380), 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) close(r8) setsockopt$packet_int(r2, 0x107, 0xe, &(0x7f0000000040)=0x2dbf6c21, 0x4) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="8dffffff0600"}) 238.439374ms ago: executing program 2 (id=8658): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000c00), r0) sendmsg$NBD_CMD_STATUS(r0, 0x0, 0x20000841) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r1, 0x1, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x400}, 0x20000084) 205.566036ms ago: executing program 1 (id=8659): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x3c, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000) 100.819168ms ago: executing program 2 (id=8661): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000181421f7"], 0x20}, 0x1, 0x0, 0x0, 0x20040001}, 0x20000082) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000700)={0x0, 0x81, 0x10}, &(0x7f0000000040)=0xc) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r4 = socket$packet(0x11, 0x3, 0x300) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$packet_int(r4, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r4, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000003000000000000000000000085100000feffffff185a000008000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000095000000000000003eb3ea73d2baf85116411b992fc4589bbadb864f359774e31d3707059e0f39cea868f6890caab9d999434de37758f41aa249c41a8363fe3abbac5a38a6f6213f0de40cb2f07654a9926ec285ce8ea30fb9049510b3eb94fa1675fc0a81168c3f867434e250beb3ce76a7034a6256023412090314a41b15a7c60747a48d6728b3e981dbcdcf4e5a0e231ec01631182f3366804dd8dcdbcc4b31e5c3820cb7c9526d29138ae0b69a2255eb"], 0x0, 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[r5, r5, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x3, 0x2, 0x7, 0x2}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x5}, 0x94) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r7, 0xffffffffffffffff, 0x24}, 0xc) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) unshare(0x62040200) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r9, @ANYBLOB="0a00340002020202020200000a00060008021100000000000800359c8063ce113f9049b200000000"], 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x2e) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, 0x0) 35.003756ms ago: executing program 1 (id=8662): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x3a, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="8c00000010000304000009000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e0000000040000280060001000000000004000480280003800c00010040000000060000000c0001000004000000000000d8fd010006000000090000000600050088a8000008000a00", @ANYRES32=r2, @ANYBLOB="08000500", @ANYRES32=r2], 0x8c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0) 32.839571ms ago: executing program 3 (id=8663): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xc4) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000006340)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x7, 0x0, 0x20000000, 0x8, 0x6, 0x900, 0x401}}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@ipv4_newroute={0x2c, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x2a00}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_DPORT={0x6, 0x1d, 0x4e24}]}, 0x2c}}, 0x20008081) syz_emit_ethernet(0x86, &(0x7f0000000000)=ANY=[], 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000080001003f0000000c000200700f00000000ffff0c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0xc000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r9}, 0x10) r10 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x34, r10, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}]}, 0x34}}, 0xc800) sendmsg$SMC_PNETID_DEL(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)={0x34, r10, 0xe27, 0x70bd28, 0x0, {0x4, 0x7, 0x2}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x34}, 0x1, 0x40030000000000}, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000340)={r2, 0xd9, 0xca28, 0xc3, 0xfff, 0x2, 0x3, 0xffff2366, {r2, @in={{0x2, 0x4e23, @multicast1}}, 0xbc, 0x3, 0x2, 0xb67, 0x80000001}}, &(0x7f0000000400)=0xb0) socket$kcm(0x29, 0x0, 0x0) 0s ago: executing program 5 (id=8664): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x5, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6fe2}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xb380, 0x4, 0x0, 0xd87, 0x6}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xab, 0x8e}}]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x0) kernel console output (not intermixed with test programs): 0000000000 [ 565.483062][T27967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 565.483074][T27967] R13: 00007f2a7b9b6128 R14: 00007f2a7b9b6090 R15: 00007ffeef1b84e8 [ 565.483097][T27967] [ 566.070280][T27980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7783'. [ 566.085613][T27980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7783'. [ 566.179415][T27978] bond9: option mode: unable to set because the bond device is up [ 566.355940][T27993] netlink: 530 bytes leftover after parsing attributes in process `syz.4.7789'. [ 566.397271][T27995] netlink: 'syz.4.7790': attribute type 10 has an invalid length. [ 566.554589][T28005] netlink: 'syz.3.7792': attribute type 13 has an invalid length. [ 566.571978][T28005] netlink: 'syz.3.7792': attribute type 17 has an invalid length. [ 566.574368][T28004] lo speed is unknown, defaulting to 1000 [ 566.610170][T28008] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 566.729800][T28005] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 566.747413][T24515] lo speed is unknown, defaulting to 1000 [ 566.755420][T24515] syz0: Port: 1 Link ACTIVE [ 566.755653][T28004] lo speed is unknown, defaulting to 1000 [ 566.781245][T24515] lo speed is unknown, defaulting to 1000 [ 566.828570][T28009] lo speed is unknown, defaulting to 1000 [ 566.879519][T28005] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 566.976627][T28009] lo speed is unknown, defaulting to 1000 [ 567.056126][T28005] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 567.069994][T28017] lo speed is unknown, defaulting to 1000 [ 567.176554][T28023] sctp: [Deprecated]: syz.2.7795 (pid 28023) Use of struct sctp_assoc_value in delayed_ack socket option. [ 567.176554][T28023] Use struct sctp_sack_info instead [ 567.195573][T28017] lo speed is unknown, defaulting to 1000 [ 567.219093][T28005] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 567.401860][T28023] sysfs: cannot create duplicate filename '/class/ieee80211/žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»–_à›xDä±pj8¼•TTí!' [ 567.542904][T28023] CPU: 1 UID: 0 PID: 28023 Comm: syz.2.7795 Not tainted syzkaller #0 PREEMPT(full) [ 567.542934][T28023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 567.542946][T28023] Call Trace: [ 567.542954][T28023] [ 567.542963][T28023] dump_stack_lvl+0x189/0x250 [ 567.542990][T28023] ? __pfx_dump_stack_lvl+0x10/0x10 [ 567.543012][T28023] ? __pfx__printk+0x10/0x10 [ 567.543034][T28023] ? kernfs_root+0x1c/0x230 [ 567.543056][T28023] ? kernfs_path_from_node+0x2f/0x290 [ 567.543075][T28023] ? kernfs_path_from_node+0x250/0x290 [ 567.543092][T28023] ? kernfs_path_from_node+0x2f/0x290 [ 567.543114][T28023] sysfs_warn_dup+0x8e/0xa0 [ 567.543132][T28023] sysfs_do_create_link_sd+0xc0/0x110 [ 567.543153][T28023] device_add_class_symlinks+0x1cf/0x240 [ 567.543175][T28023] device_add+0x475/0xb50 [ 567.543196][T28023] wiphy_register+0x1ba6/0x28d0 [ 567.543229][T28023] ? __pfx_wiphy_register+0x10/0x10 [ 567.543254][T28023] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 567.543278][T28023] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 567.543301][T28023] ieee80211_register_hw+0x3425/0x4080 [ 567.543340][T28023] ? ieee80211_register_hw+0x1461/0x4080 [ 567.543365][T28023] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 567.543389][T28023] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 567.543419][T28023] ? __hrtimer_setup+0x187/0x210 [ 567.543435][T28023] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 567.543463][T28023] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 567.543501][T28023] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 567.543524][T28023] ? trace_kmalloc+0x1f/0xd0 [ 567.543546][T28023] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 567.543569][T28023] ? kstrndup+0xbf/0x160 [ 567.543592][T28023] hwsim_new_radio_nl+0xea4/0x1b10 [ 567.543616][T28023] ? __pfx___nla_validate_parse+0x10/0x10 [ 567.543649][T28023] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 567.543678][T28023] ? __nla_parse+0x40/0x60 [ 567.543705][T28023] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 567.543732][T28023] genl_family_rcv_msg_doit+0x212/0x300 [ 567.543758][T28023] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 567.543785][T28023] ? bpf_lsm_capable+0x9/0x20 [ 567.543807][T28023] ? security_capable+0x7e/0x2e0 [ 567.543836][T28023] genl_rcv_msg+0x60e/0x790 [ 567.543860][T28023] ? __pfx_genl_rcv_msg+0x10/0x10 [ 567.543878][T28023] ? __kasan_slab_alloc+0x6c/0x80 [ 567.543902][T28023] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 567.543925][T28023] ? __netlink_lookup+0xbd/0x810 [ 567.543941][T28023] ? rcu_is_watching+0x15/0xb0 [ 567.543964][T28023] netlink_rcv_skb+0x208/0x470 [ 567.543990][T28023] ? __pfx_genl_rcv_msg+0x10/0x10 [ 567.544011][T28023] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 567.544041][T28023] ? lock_release+0x4b/0x3e0 [ 567.544068][T28023] ? down_read+0x1ad/0x2e0 [ 567.544086][T28023] genl_rcv+0x28/0x40 [ 567.544104][T28023] netlink_unicast+0x82f/0x9e0 [ 567.544131][T28023] ? __pfx_netlink_unicast+0x10/0x10 [ 567.544156][T28023] ? netlink_sendmsg+0x642/0xb30 [ 567.544171][T28023] ? skb_put+0x11b/0x210 [ 567.544191][T28023] netlink_sendmsg+0x805/0xb30 [ 567.544211][T28023] ? __pfx_netlink_sendmsg+0x10/0x10 [ 567.544229][T28023] ? futex_unqueue+0x22/0x240 [ 567.544249][T28023] ? aa_sock_msg_perm+0xf1/0x1d0 [ 567.544267][T28023] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 567.544287][T28023] ? __pfx_netlink_sendmsg+0x10/0x10 [ 567.544304][T28023] __sock_sendmsg+0x219/0x270 [ 567.544338][T28023] ____sys_sendmsg+0x505/0x830 [ 567.544360][T28023] ? __pfx_____sys_sendmsg+0x10/0x10 [ 567.544385][T28023] ? import_iovec+0x74/0xa0 [ 567.544407][T28023] ___sys_sendmsg+0x21f/0x2a0 [ 567.544427][T28023] ? __pfx____sys_sendmsg+0x10/0x10 [ 567.544449][T28023] ? futex_wait+0x285/0x360 [ 567.544487][T28023] ? __fget_files+0x2a/0x420 [ 567.544503][T28023] ? __fget_files+0x3a0/0x420 [ 567.544524][T28023] __x64_sys_sendmsg+0x19b/0x260 [ 567.544545][T28023] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 567.544568][T28023] ? rcu_is_watching+0x15/0xb0 [ 567.544588][T28023] ? rcu_is_watching+0x15/0xb0 [ 567.544607][T28023] do_syscall_64+0xfa/0x3b0 [ 567.544624][T28023] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.544643][T28023] ? clear_bhb_loop+0x60/0xb0 [ 567.544664][T28023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.544681][T28023] RIP: 0033:0x7f19f078ebe9 [ 567.544699][T28023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 567.544716][T28023] RSP: 002b:00007f19f163b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 567.544737][T28023] RAX: ffffffffffffffda RBX: 00007f19f09b6090 RCX: 00007f19f078ebe9 [ 567.544752][T28023] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000009 [ 567.544764][T28023] RBP: 00007f19f0811e19 R08: 0000000000000000 R09: 0000000000000000 [ 567.544777][T28023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 567.544789][T28023] R13: 00007f19f09b6128 R14: 00007f19f09b6090 R15: 00007ffe99ba9a58 [ 567.544811][T28023] [ 568.327256][T28033] bond9: option mode: unable to set because the bond device is up [ 568.733614][T28046] 8021q: adding VLAN 0 to HW filter on device bond1 [ 568.757669][T28046] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 568.789469][T28046] bond1: (slave macvlan5): Enslaving as a backup interface with a down link [ 568.909382][T28046] bond1: (slave macvlan5): Releasing backup interface [ 569.246356][T28053] lo speed is unknown, defaulting to 1000 [ 569.265745][T28053] lo speed is unknown, defaulting to 1000 [ 569.347619][T28067] netlink: 'syz.5.7803': attribute type 6 has an invalid length. [ 569.741431][T28073] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7808'. [ 569.797898][T28079] bond9: option mode: unable to set because the bond device is up [ 569.853674][T28076] lo speed is unknown, defaulting to 1000 [ 569.868083][T28076] lo speed is unknown, defaulting to 1000 [ 569.926967][T28085] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7812'. [ 570.048574][T28090] lo speed is unknown, defaulting to 1000 [ 570.064406][T28090] lo speed is unknown, defaulting to 1000 [ 570.631659][T28103] netlink: 596 bytes leftover after parsing attributes in process `syz.5.7815'. [ 570.732429][T28109] netlink: 'syz.4.7816': attribute type 13 has an invalid length. [ 570.744145][T28109] netlink: 'syz.4.7816': attribute type 17 has an invalid length. [ 570.860666][T28109] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 570.885660][T23164] lo speed is unknown, defaulting to 1000 [ 570.893598][T23164] syz2: Port: 1 Link ACTIVE [ 570.918464][T28110] lo speed is unknown, defaulting to 1000 [ 570.935886][T28115] tipc: Enabling of bearer rejected, already enabled [ 570.950357][T28113] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7818'. [ 570.960141][T28110] lo speed is unknown, defaulting to 1000 [ 571.474053][T28134] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7823'. [ 571.483762][T28134] tipc: Invalid UDP bearer configuration [ 571.483800][T28134] tipc: Enabling of bearer rejected, failed to enable media [ 571.596166][T28138] lo speed is unknown, defaulting to 1000 [ 571.679483][T28138] lo speed is unknown, defaulting to 1000 [ 571.722302][T28149] lo speed is unknown, defaulting to 1000 [ 571.974519][T28156] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7829'. [ 572.001291][T28149] lo speed is unknown, defaulting to 1000 [ 572.052835][T28141] netlink: 248 bytes leftover after parsing attributes in process `syz.2.7824'. [ 572.320312][T28167] IPVS: set_ctl: invalid protocol: 137 172.20.20.187:20004 [ 572.468986][T28175] netlink: 3 bytes leftover after parsing attributes in process `syz.5.7832'. [ 572.526585][T28167] nbd4: detected capacity change from 0 to 127 [ 572.543019][ T5186] block nbd4: Receive control failed (result -32) [ 572.573043][T28175] batadv1: entered promiscuous mode [ 572.578601][T28175] batadv1: entered allmulticast mode [ 572.598569][T28159] lo speed is unknown, defaulting to 1000 [ 572.606089][T28159] lo speed is unknown, defaulting to 1000 [ 572.872940][T28186] delete_channel: no stack [ 572.966732][T28189] netlink: 'syz.2.7835': attribute type 9 has an invalid length. [ 572.996219][T28189] netlink: 'syz.2.7835': attribute type 6 has an invalid length. [ 573.014936][T28191] tipc: Enabling of bearer rejected, already enabled [ 573.481804][T28200] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7840'. [ 573.496770][T28198] lo speed is unknown, defaulting to 1000 [ 573.524867][T28198] lo speed is unknown, defaulting to 1000 [ 573.828599][T28205] IPVS: set_ctl: invalid protocol: 137 172.20.20.187:20004 [ 573.852929][T28210] netlink: 'syz.3.7842': attribute type 13 has an invalid length. [ 573.871733][T28210] netlink: 'syz.3.7842': attribute type 17 has an invalid length. [ 573.923939][T28209] 8021q: adding VLAN 0 to HW filter on device macvlan6 [ 573.948304][T28209] bond1: (slave macvlan6): Enslaving as a backup interface with a down link [ 573.973240][T28210] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 574.021141][T28205] nbd5: detected capacity change from 0 to 127 [ 574.039587][T28209] bond1: (slave macvlan6): Releasing backup interface [ 574.042494][ T5186] block nbd5: Receive control failed (result -32) [ 574.196122][T28211] lo speed is unknown, defaulting to 1000 [ 574.256925][T28211] lo speed is unknown, defaulting to 1000 [ 574.294819][T28210] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 574.981028][T28228] netlink: 'syz.1.7847': attribute type 13 has an invalid length. [ 575.013076][T28228] netlink: 'syz.1.7847': attribute type 17 has an invalid length. [ 575.300467][T28228] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 575.341248][T28234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7847'. [ 575.387024][T28229] lo speed is unknown, defaulting to 1000 [ 575.401824][T28229] lo speed is unknown, defaulting to 1000 [ 575.465532][T28228] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 575.482126][T28236] tipc: Enabling of bearer rejected, already enabled [ 575.516732][T28228] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 575.785981][T28245] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7850'. [ 575.944884][T28241] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7850'. [ 576.188434][T28254] lo speed is unknown, defaulting to 1000 [ 576.195483][T28254] lo speed is unknown, defaulting to 1000 [ 576.529091][T28263] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7852'. [ 576.630126][T28265] lo speed is unknown, defaulting to 1000 [ 576.674495][T28270] netlink: 788 bytes leftover after parsing attributes in process `syz.4.7854'. [ 576.789700][T28265] lo speed is unknown, defaulting to 1000 [ 577.743382][T28289] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 577.946010][T28295] tipc: Enabled bearer , priority 0 [ 577.982942][T28295] syzkaller0: entered promiscuous mode [ 578.003628][T28296] netlink: 'syz.1.7858': attribute type 13 has an invalid length. [ 578.008054][T28295] syzkaller0: entered allmulticast mode [ 578.021157][T28296] netlink: 'syz.1.7858': attribute type 17 has an invalid length. [ 578.035393][T28296] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 578.182515][T28295] tipc: Resetting bearer [ 578.203094][T28294] lo speed is unknown, defaulting to 1000 [ 578.209639][T28294] lo speed is unknown, defaulting to 1000 [ 578.232599][T28293] tipc: Resetting bearer [ 578.253909][T28293] tipc: Disabling bearer [ 578.261410][T28296] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 578.338976][T28300] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7860'. [ 578.353512][T28296] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 578.406902][T28303] tipc: Enabling of bearer rejected, already enabled [ 578.443997][T28305] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 578.604371][T28309] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7862'. [ 578.813766][T28316] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7863'. [ 579.056676][T28324] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7864'. [ 579.178120][T28328] lo speed is unknown, defaulting to 1000 [ 579.191585][T28328] lo speed is unknown, defaulting to 1000 [ 579.413088][T28340] syzkaller1: entered promiscuous mode [ 579.418588][T28340] syzkaller1: entered allmulticast mode [ 579.618217][T28350] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7870'. [ 579.629891][T28348] IPVS: Scheduler module ip_vs_sip not found [ 579.823581][T28346] vlan3: entered allmulticast mode [ 579.837927][T28346] bridge0: entered allmulticast mode [ 579.843867][T28346] bridge6: port 1(vlan3) entered blocking state [ 579.850310][T28346] bridge6: port 1(vlan3) entered disabled state [ 579.858079][T28346] vlan3: entered promiscuous mode [ 579.866902][T28346] bridge0: entered promiscuous mode [ 579.894009][T28346] mac80211_hwsim hwsim28 wlan0: entered allmulticast mode [ 579.947299][T28369] lo speed is unknown, defaulting to 1000 [ 579.954238][T28369] lo speed is unknown, defaulting to 1000 [ 580.464089][T28378] netlink: 'syz.1.7877': attribute type 12 has an invalid length. [ 580.586928][T28388] bond19: (slave veth43): Releasing active interface [ 580.667728][T28392] netlink: 'syz.3.7879': attribute type 10 has an invalid length. [ 580.826584][T28362] netlink: 'syz.2.7874': attribute type 6 has an invalid length. [ 580.968794][T28398] !: left allmulticast mode [ 580.981709][T23164] lo speed is unknown, defaulting to 1000 [ 580.987633][T23164] syz2: Port: 1 Link DOWN [ 581.146712][T28402] tipc: Enabling of bearer rejected, already enabled [ 581.297548][T28404] tipc: Enabling of bearer rejected, already enabled [ 581.496648][T28408] __nla_validate_parse: 1 callbacks suppressed [ 581.496669][T28408] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7885'. [ 581.552196][T28408] macvtap5: entered promiscuous mode [ 581.566667][T28408] macvtap5: entered allmulticast mode [ 581.580666][T28408] !: entered allmulticast mode [ 581.706528][T28412] lo speed is unknown, defaulting to 1000 [ 581.723813][T28412] lo speed is unknown, defaulting to 1000 [ 581.727620][T28414] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7887'. [ 581.762894][T28416] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7888'. [ 582.083055][T28426] bond5: option mode: unable to set because the bond device is up [ 582.116774][T28426] 8021q: adding VLAN 0 to HW filter on device macvlan11 [ 582.139394][T28426] bond5: (slave macvlan11): Enslaving as a backup interface with a down link [ 582.325242][T28431] netlink: 'syz.3.7893': attribute type 4 has an invalid length. [ 582.350783][T28434] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7891'. [ 582.377289][T24515] lo speed is unknown, defaulting to 1000 [ 582.385841][T24515] syz0: Port: 1 Link DOWN [ 582.394158][T24515] lo speed is unknown, defaulting to 1000 [ 582.398325][T28431] netlink: 152 bytes leftover after parsing attributes in process `syz.3.7893'. [ 582.413448][T28429] erspan0: entered promiscuous mode [ 582.420255][T28429] erspan0: left promiscuous mode [ 582.449397][T28434] bridge29: port 1(veth37) entered blocking state [ 582.456529][T28434] bridge29: port 1(veth37) entered disabled state [ 582.465260][T28434] veth37: entered allmulticast mode [ 582.473494][T28434] veth37: entered promiscuous mode [ 582.485025][T28435] bridge29: port 2(veth0_to_bond) entered blocking state [ 582.499980][T28435] bridge29: port 2(veth0_to_bond) entered disabled state [ 582.519847][T28435] veth0_to_bond: entered allmulticast mode [ 582.548083][T28436] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7893'. [ 582.560362][T28435] veth0_to_bond: entered promiscuous mode [ 582.641093][T28429] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7892'. [ 582.657201][T28439] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7894'. [ 582.797095][T28448] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 582.829060][T28448] veth0_to_team: entered promiscuous mode [ 582.841815][T28448] veth0_to_team: entered allmulticast mode [ 582.971441][T28452] tipc: Enabling of bearer rejected, already enabled [ 583.085216][T28450] lo speed is unknown, defaulting to 1000 [ 583.147193][T28450] lo speed is unknown, defaulting to 1000 [ 583.167563][T28460] netlink: 'syz.4.7901': attribute type 13 has an invalid length. [ 583.201194][T28460] netlink: 'syz.4.7901': attribute type 17 has an invalid length. [ 583.316631][T28460] !: left promiscuous mode [ 583.338950][T28460] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 583.366711][T24515] lo speed is unknown, defaulting to 1000 [ 583.410803][T24515] syz2: Port: 1 Link ACTIVE [ 583.432434][T28462] lo speed is unknown, defaulting to 1000 [ 583.456215][T28462] lo speed is unknown, defaulting to 1000 [ 583.594496][T28468] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 583.776622][T28471] veth1_to_bond: entered allmulticast mode [ 583.868987][T28471] bond_slave_1: entered promiscuous mode [ 583.957192][T28471] bond_slave_1: left promiscuous mode [ 583.970489][T28471] veth1_to_bond: left allmulticast mode [ 584.013712][T28457] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 584.033306][T28479] netlink: 'syz.3.7905': attribute type 13 has an invalid length. [ 584.041480][T28479] netlink: 'syz.3.7905': attribute type 17 has an invalid length. [ 584.079778][T28479] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 584.106383][T28481] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7906'. [ 584.131210][ T9] lo speed is unknown, defaulting to 1000 [ 584.137359][ T9] syz0: Port: 1 Link ACTIVE [ 584.160009][T25420] lo speed is unknown, defaulting to 1000 [ 584.233234][T28479] lo speed is unknown, defaulting to 1000 [ 584.244487][T28486] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7908'. [ 584.256038][T28479] lo speed is unknown, defaulting to 1000 [ 584.566095][T28496] bond9: option mode: unable to set because the bond device is up [ 584.907393][T28507] tipc: Enabling of bearer rejected, already enabled [ 584.994523][T28512] netlink: 'syz.1.7914': attribute type 1 has an invalid length. [ 585.503889][T28527] 8021q: adding VLAN 0 to HW filter on device bond6 [ 585.533144][T28527] veth0_to_bond: left allmulticast mode [ 585.545614][T28527] veth0_to_bond: left promiscuous mode [ 585.555476][T28527] bridge29: port 2(veth0_to_bond) entered disabled state [ 585.566037][T28527] veth37: left allmulticast mode [ 585.571376][T28527] veth37: left promiscuous mode [ 585.580888][T28527] bridge29: port 1(veth37) entered disabled state [ 585.633068][T28529] bridge0: port 1(erspan0) entered blocking state [ 585.655227][T28529] bridge0: port 1(erspan0) entered disabled state [ 585.684265][T28529] erspan0: entered allmulticast mode [ 585.726467][T28529] erspan0: entered promiscuous mode [ 585.752886][T28537] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 585.781660][T28533] veth35: left promiscuous mode [ 585.790367][T28533] macvtap6: left promiscuous mode [ 585.961108][T28534] erspan0: left allmulticast mode [ 585.966315][T28534] erspan0: left promiscuous mode [ 585.973678][T28534] bridge0: port 1(erspan0) entered disabled state [ 586.059677][T28541] bond14: option mode: unable to set because the bond device is up [ 586.187844][T28550] tipc: Enabling of bearer rejected, already enabled [ 586.298108][T28559] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 586.557449][T28569] lo speed is unknown, defaulting to 1000 [ 586.567741][T28569] lo speed is unknown, defaulting to 1000 [ 586.584315][T28580] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 586.658821][T28584] __nla_validate_parse: 14 callbacks suppressed [ 586.658840][T28584] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7937'. [ 586.710687][T28584] bridge24: entered promiscuous mode [ 586.716165][T28584] bridge24: entered allmulticast mode [ 586.898654][T28594] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7938'. [ 587.247801][T28608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7942'. [ 587.274391][T28608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7942'. [ 587.292486][T28612] tipc: Enabled bearer , priority 0 [ 587.315905][T28613] lo speed is unknown, defaulting to 1000 [ 587.321411][T28612] syzkaller0: entered promiscuous mode [ 587.329073][T28612] syzkaller0: entered allmulticast mode [ 587.337340][T28613] lo speed is unknown, defaulting to 1000 [ 587.434502][T28612] tipc: Resetting bearer [ 587.465231][T28611] tipc: Resetting bearer [ 587.478165][T28611] tipc: Disabling bearer [ 587.493883][T28623] sctp: [Deprecated]: syz.4.7944 (pid 28623) Use of struct sctp_assoc_value in delayed_ack socket option. [ 587.493883][T28623] Use struct sctp_sack_info instead [ 587.540308][T28619] sysfs: cannot create duplicate filename '/class/ieee80211/žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»–_à›xDä±pj8¼•TTí!' [ 587.555118][T28619] CPU: 0 UID: 0 PID: 28619 Comm: syz.4.7944 Not tainted syzkaller #0 PREEMPT(full) [ 587.555145][T28619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 587.555157][T28619] Call Trace: [ 587.555165][T28619] [ 587.555173][T28619] dump_stack_lvl+0x189/0x250 [ 587.555201][T28619] ? __pfx_dump_stack_lvl+0x10/0x10 [ 587.555221][T28619] ? __pfx__printk+0x10/0x10 [ 587.555242][T28619] ? kernfs_root+0x1c/0x230 [ 587.555262][T28619] ? kernfs_path_from_node+0x2f/0x290 [ 587.555280][T28619] ? kernfs_path_from_node+0x250/0x290 [ 587.555299][T28619] ? kernfs_path_from_node+0x2f/0x290 [ 587.555319][T28619] sysfs_warn_dup+0x8e/0xa0 [ 587.555338][T28619] sysfs_do_create_link_sd+0xc0/0x110 [ 587.555358][T28619] device_add_class_symlinks+0x1cf/0x240 [ 587.555379][T28619] device_add+0x475/0xb50 [ 587.555396][T28619] wiphy_register+0x1ba6/0x28d0 [ 587.555447][T28619] ? __pfx_wiphy_register+0x10/0x10 [ 587.555466][T28619] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 587.555486][T28619] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 587.555506][T28619] ieee80211_register_hw+0x3425/0x4080 [ 587.555531][T28619] ? ieee80211_register_hw+0x1461/0x4080 [ 587.555553][T28619] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 587.555572][T28619] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 587.555598][T28619] ? __hrtimer_setup+0x187/0x210 [ 587.555614][T28619] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 587.555642][T28619] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 587.555682][T28619] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 587.555703][T28619] ? trace_kmalloc+0x1f/0xd0 [ 587.555723][T28619] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 587.555744][T28619] ? kstrndup+0xbf/0x160 [ 587.555765][T28619] hwsim_new_radio_nl+0xea4/0x1b10 [ 587.555788][T28619] ? __pfx___nla_validate_parse+0x10/0x10 [ 587.555817][T28619] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 587.555842][T28619] ? __nla_parse+0x40/0x60 [ 587.555868][T28619] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 587.555894][T28619] genl_family_rcv_msg_doit+0x212/0x300 [ 587.555917][T28619] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 587.555943][T28619] ? bpf_lsm_capable+0x9/0x20 [ 587.555966][T28619] ? security_capable+0x7e/0x2e0 [ 587.555991][T28619] genl_rcv_msg+0x60e/0x790 [ 587.556013][T28619] ? __pfx_genl_rcv_msg+0x10/0x10 [ 587.556032][T28619] ? __kasan_slab_alloc+0x6c/0x80 [ 587.556054][T28619] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 587.556077][T28619] ? __netlink_lookup+0xbd/0x810 [ 587.556091][T28619] ? rcu_is_watching+0x15/0xb0 [ 587.556112][T28619] netlink_rcv_skb+0x208/0x470 [ 587.556136][T28619] ? __pfx_genl_rcv_msg+0x10/0x10 [ 587.556153][T28619] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 587.556179][T28619] ? lock_release+0x4b/0x3e0 [ 587.556202][T28619] ? down_read+0x1ad/0x2e0 [ 587.556220][T28619] genl_rcv+0x28/0x40 [ 587.556239][T28619] netlink_unicast+0x82f/0x9e0 [ 587.556265][T28619] ? __pfx_netlink_unicast+0x10/0x10 [ 587.556288][T28619] ? netlink_sendmsg+0x642/0xb30 [ 587.556304][T28619] ? skb_put+0x11b/0x210 [ 587.556322][T28619] netlink_sendmsg+0x805/0xb30 [ 587.556343][T28619] ? __pfx_netlink_sendmsg+0x10/0x10 [ 587.556361][T28619] ? aa_sock_msg_perm+0xf1/0x1d0 [ 587.556379][T28619] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 587.556398][T28619] ? __pfx_netlink_sendmsg+0x10/0x10 [ 587.556414][T28619] __sock_sendmsg+0x219/0x270 [ 587.556439][T28619] ____sys_sendmsg+0x505/0x830 [ 587.556461][T28619] ? __pfx_____sys_sendmsg+0x10/0x10 [ 587.556484][T28619] ? import_iovec+0x74/0xa0 [ 587.556506][T28619] ___sys_sendmsg+0x21f/0x2a0 [ 587.556525][T28619] ? __pfx____sys_sendmsg+0x10/0x10 [ 587.556547][T28619] ? futex_wake+0x4b2/0x560 [ 587.556584][T28619] ? __fget_files+0x2a/0x420 [ 587.556600][T28619] ? __fget_files+0x3a0/0x420 [ 587.556620][T28619] __x64_sys_sendmsg+0x19b/0x260 [ 587.556641][T28619] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 587.556674][T28619] ? rcu_is_watching+0x15/0xb0 [ 587.556695][T28619] ? rcu_is_watching+0x15/0xb0 [ 587.556714][T28619] do_syscall_64+0xfa/0x3b0 [ 587.556732][T28619] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.556751][T28619] ? clear_bhb_loop+0x60/0xb0 [ 587.556770][T28619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.556788][T28619] RIP: 0033:0x7fc38578ebe9 [ 587.556805][T28619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 587.556820][T28619] RSP: 002b:00007fc386644038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 587.556839][T28619] RAX: ffffffffffffffda RBX: 00007fc3859b5fa0 RCX: 00007fc38578ebe9 [ 587.556854][T28619] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000009 [ 587.556866][T28619] RBP: 00007fc385811e19 R08: 0000000000000000 R09: 0000000000000000 [ 587.556878][T28619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 587.556888][T28619] R13: 00007fc3859b6038 R14: 00007fc3859b5fa0 R15: 00007fff29f174e8 [ 587.556909][T28619] [ 588.187922][T28637] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7946'. [ 588.238881][T28640] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7947'. [ 588.272214][T28641] lo speed is unknown, defaulting to 1000 [ 588.308196][T28641] lo speed is unknown, defaulting to 1000 [ 588.382513][T28648] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 588.418601][T28649] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7949'. [ 588.484896][T28648] batadv_slave_0: entered promiscuous mode [ 588.493937][T28648] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7950'. [ 588.558501][T28657] netlink: 428 bytes leftover after parsing attributes in process `syz.1.7950'. [ 588.578297][T28657] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7950'. [ 588.900341][T28668] netlink: 'syz.3.7952': attribute type 1 has an invalid length. [ 589.377639][T28684] netlink: 'syz.2.7957': attribute type 13 has an invalid length. [ 589.396697][T28684] netlink: 'syz.2.7957': attribute type 17 has an invalid length. [ 589.433536][T28684] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 589.544554][T28685] lo speed is unknown, defaulting to 1000 [ 589.557814][T28685] lo speed is unknown, defaulting to 1000 [ 589.775157][T28677] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 590.100124][T28702] geneve4: left promiscuous mode [ 590.120975][T28702] geneve4: left allmulticast mode [ 590.146847][T28702] geneve5: left promiscuous mode [ 590.191036][T28702] geneve5: left allmulticast mode [ 590.231358][T28702] veth43: left promiscuous mode [ 590.239824][ T9] lo speed is unknown, defaulting to 1000 [ 590.248319][ T9] syz0: Port: 1 Link DOWN [ 590.263464][T28715] netlink: 'syz.1.7963': attribute type 10 has an invalid length. [ 590.292449][T23610] lo speed is unknown, defaulting to 1000 [ 590.532029][T28727] netlink: 'syz.1.7966': attribute type 4 has an invalid length. [ 590.895763][T28739] netlink: 'syz.4.7970': attribute type 1 has an invalid length. [ 590.928319][T28741] lo speed is unknown, defaulting to 1000 [ 590.945863][T28741] lo speed is unknown, defaulting to 1000 [ 591.025186][T28746] lo speed is unknown, defaulting to 1000 [ 591.248449][T28753] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 591.301212][T28746] lo speed is unknown, defaulting to 1000 [ 591.483457][T28755] openvswitch: netlink: Flow actions attr not present in new flow. [ 591.678537][T28768] netlink: 'syz.5.7976': attribute type 13 has an invalid length. [ 591.689562][T28768] netlink: 'syz.5.7976': attribute type 17 has an invalid length. [ 591.727490][T28768] 8021q: adding VLAN 0 to HW filter on device team0 [ 591.735320][T28768] tipc: Resetting bearer [ 591.741632][T28768] tipc: Resetting bearer [ 591.748981][T28768] !: left promiscuous mode [ 591.760027][T28768] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 591.909589][T28771] lo speed is unknown, defaulting to 1000 [ 591.979548][T28768] __nla_validate_parse: 13 callbacks suppressed [ 591.979567][T28768] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7976'. [ 592.014491][T28768] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 592.029485][T28768] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 592.039744][T28774] syzkaller1: entered allmulticast mode [ 592.054094][T28771] lo speed is unknown, defaulting to 1000 [ 592.206901][T28783] batadv_slave_1: entered promiscuous mode [ 592.285672][T28783] netlink: 72 bytes leftover after parsing attributes in process `syz.2.7980'. [ 592.306331][T28783] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7980'. [ 592.529752][T28782] batadv_slave_1: left promiscuous mode [ 592.577134][T28791] tipc: Enabling of bearer rejected, already enabled [ 592.669152][T28794] netlink: 'syz.4.7981': attribute type 1 has an invalid length. [ 592.677138][T28794] netlink: 140 bytes leftover after parsing attributes in process `syz.4.7981'. [ 592.692088][T28794] netlink: 96 bytes leftover after parsing attributes in process `syz.4.7981'. [ 592.754542][T28797] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7984'. [ 592.857138][T28802] netlink: 'syz.3.7986': attribute type 9 has an invalid length. [ 592.884117][T28803] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 592.971971][T28801] lo speed is unknown, defaulting to 1000 [ 592.979734][T28801] lo speed is unknown, defaulting to 1000 [ 593.062886][T28803] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 593.182015][T28803] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 593.352659][T28817] netlink: 232 bytes leftover after parsing attributes in process `syz.1.7988'. [ 593.502649][T28817] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7988'. [ 593.817913][T28814] netlink: 140 bytes leftover after parsing attributes in process `syz.5.7987'. [ 593.831224][T28814] netlink: 96 bytes leftover after parsing attributes in process `syz.5.7987'. [ 593.842257][T28803] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 594.054250][T28826] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 594.667625][T28846] tipc: Enabling of bearer rejected, already enabled [ 594.957651][T28852] bond5: option mode: unable to set because the bond device has slaves [ 594.992060][T28852] bond5: (slave macvlan11): Releasing backup interface [ 595.036311][T28861] validate_nla: 5 callbacks suppressed [ 595.036328][T28861] netlink: 'syz.5.7998': attribute type 13 has an invalid length. [ 595.055186][T28861] netlink: 'syz.5.7998': attribute type 17 has an invalid length. [ 595.096129][T28861] tipc: Resetting bearer [ 595.126958][T28861] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 595.188501][T28864] lo speed is unknown, defaulting to 1000 [ 595.195376][T28864] lo speed is unknown, defaulting to 1000 [ 595.232017][T28863] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 595.266329][T28872] netlink: 'syz.2.8000': attribute type 4 has an invalid length. [ 595.276438][T28857] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 595.319173][T28857] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 595.353016][T28863] tipc: Resetting bearer [ 595.422321][T28874] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 595.602744][T28888] netlink: 'syz.2.8005': attribute type 1 has an invalid length. [ 595.830334][T28893] macvtap1: entered promiscuous mode [ 595.837273][T28893] !: entered promiscuous mode [ 595.843016][T28893] macvtap1: entered allmulticast mode [ 595.850020][T28897] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 595.959325][T28899] lo speed is unknown, defaulting to 1000 [ 595.970208][T28899] lo speed is unknown, defaulting to 1000 [ 596.385658][T28916] netlink: 'syz.5.8014': attribute type 1 has an invalid length. [ 596.424253][T28916] 8021q: adding VLAN 0 to HW filter on device bond8 [ 596.621222][T28916] 8021q: adding VLAN 0 to HW filter on device bond8 [ 596.638895][T28916] bond8: (slave vxcan1): The slave device specified does not support setting the MAC address [ 596.688322][T28916] bond8: (slave vxcan1): Error -95 calling set_mac_address [ 596.841554][T28920] veth5: entered promiscuous mode [ 596.876092][T28920] bond8: (slave veth5): Enslaving as an active interface with a down link [ 597.147937][T28942] netlink: 'syz.4.8017': attribute type 13 has an invalid length. [ 597.158493][T28942] netlink: 'syz.4.8017': attribute type 17 has an invalid length. [ 597.205080][T28942] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 597.237324][T28947] __nla_validate_parse: 14 callbacks suppressed [ 597.237343][T28947] netlink: 1 bytes leftover after parsing attributes in process `syz.1.8019'. [ 597.372476][T28952] delete_channel: no stack [ 597.396498][T28942] lo speed is unknown, defaulting to 1000 [ 597.419743][T28942] lo speed is unknown, defaulting to 1000 [ 597.427882][T28953] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8017'. [ 597.478687][T28953] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 597.615649][T28960] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8024'. [ 597.625834][T28961] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 597.763680][T28969] sctp: [Deprecated]: syz.1.8025 (pid 28969) Use of struct sctp_assoc_value in delayed_ack socket option. [ 597.763680][T28969] Use struct sctp_sack_info instead [ 597.960429][T28965] sysfs: cannot create duplicate filename '/class/ieee80211/žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»–_à›xDä±pj8¼•TTí!' [ 597.972979][T28965] CPU: 0 UID: 0 PID: 28965 Comm: syz.1.8025 Not tainted syzkaller #0 PREEMPT(full) [ 597.973007][T28965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 597.973019][T28965] Call Trace: [ 597.973028][T28965] [ 597.973036][T28965] dump_stack_lvl+0x189/0x250 [ 597.973065][T28965] ? __pfx_dump_stack_lvl+0x10/0x10 [ 597.973087][T28965] ? __pfx__printk+0x10/0x10 [ 597.973109][T28965] ? kernfs_root+0x1c/0x230 [ 597.973131][T28965] ? kernfs_path_from_node+0x2f/0x290 [ 597.973150][T28965] ? kernfs_path_from_node+0x250/0x290 [ 597.973168][T28965] ? kernfs_path_from_node+0x2f/0x290 [ 597.973189][T28965] sysfs_warn_dup+0x8e/0xa0 [ 597.973207][T28965] sysfs_do_create_link_sd+0xc0/0x110 [ 597.973227][T28965] device_add_class_symlinks+0x1cf/0x240 [ 597.973248][T28965] device_add+0x475/0xb50 [ 597.973268][T28965] wiphy_register+0x1ba6/0x28d0 [ 597.973302][T28965] ? __pfx_wiphy_register+0x10/0x10 [ 597.973326][T28965] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 597.973350][T28965] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 597.973372][T28965] ieee80211_register_hw+0x3425/0x4080 [ 597.973400][T28965] ? ieee80211_register_hw+0x1461/0x4080 [ 597.973423][T28965] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 597.973444][T28965] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 597.973472][T28965] ? __hrtimer_setup+0x187/0x210 [ 597.973489][T28965] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 597.973515][T28965] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 597.973552][T28965] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 597.973574][T28965] ? trace_kmalloc+0x1f/0xd0 [ 597.973594][T28965] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 597.973619][T28965] ? kstrndup+0xbf/0x160 [ 597.973642][T28965] hwsim_new_radio_nl+0xea4/0x1b10 [ 597.973665][T28965] ? __pfx___nla_validate_parse+0x10/0x10 [ 597.973706][T28965] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 597.973734][T28965] ? __nla_parse+0x40/0x60 [ 597.973758][T28965] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 597.973786][T28965] genl_family_rcv_msg_doit+0x212/0x300 [ 597.973811][T28965] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 597.973841][T28965] ? bpf_lsm_capable+0x9/0x20 [ 597.973866][T28965] ? security_capable+0x7e/0x2e0 [ 597.973896][T28965] genl_rcv_msg+0x60e/0x790 [ 597.973920][T28965] ? __pfx_genl_rcv_msg+0x10/0x10 [ 597.973939][T28965] ? __kasan_slab_alloc+0x6c/0x80 [ 597.973961][T28965] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 597.973983][T28965] ? __netlink_lookup+0xbd/0x810 [ 597.973999][T28965] ? rcu_is_watching+0x15/0xb0 [ 597.974022][T28965] netlink_rcv_skb+0x208/0x470 [ 597.974047][T28965] ? __pfx_genl_rcv_msg+0x10/0x10 [ 597.974068][T28965] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 597.974098][T28965] ? lock_release+0x4b/0x3e0 [ 597.974124][T28965] ? down_read+0x1ad/0x2e0 [ 597.974142][T28965] genl_rcv+0x28/0x40 [ 597.974160][T28965] netlink_unicast+0x82f/0x9e0 [ 597.974187][T28965] ? __pfx_netlink_unicast+0x10/0x10 [ 597.974210][T28965] ? netlink_sendmsg+0x642/0xb30 [ 597.974225][T28965] ? skb_put+0x11b/0x210 [ 597.974245][T28965] netlink_sendmsg+0x805/0xb30 [ 597.974265][T28965] ? __pfx_netlink_sendmsg+0x10/0x10 [ 597.974284][T28965] ? aa_sock_msg_perm+0xf1/0x1d0 [ 597.974301][T28965] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 597.974321][T28965] ? __pfx_netlink_sendmsg+0x10/0x10 [ 597.974337][T28965] __sock_sendmsg+0x219/0x270 [ 597.974361][T28965] ____sys_sendmsg+0x505/0x830 [ 597.974382][T28965] ? __pfx_____sys_sendmsg+0x10/0x10 [ 597.974405][T28965] ? import_iovec+0x74/0xa0 [ 597.974454][T28965] ___sys_sendmsg+0x21f/0x2a0 [ 597.974474][T28965] ? __pfx____sys_sendmsg+0x10/0x10 [ 597.974494][T28965] ? futex_wake+0x4b2/0x560 [ 597.974531][T28965] ? __fget_files+0x2a/0x420 [ 597.974546][T28965] ? __fget_files+0x3a0/0x420 [ 597.974566][T28965] __x64_sys_sendmsg+0x19b/0x260 [ 597.974587][T28965] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 597.974613][T28965] ? rcu_is_watching+0x15/0xb0 [ 597.974633][T28965] ? rcu_is_watching+0x15/0xb0 [ 597.974653][T28965] do_syscall_64+0xfa/0x3b0 [ 597.974671][T28965] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.974698][T28965] ? clear_bhb_loop+0x60/0xb0 [ 597.974719][T28965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.974738][T28965] RIP: 0033:0x7f2a7b78ebe9 [ 597.974755][T28965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 597.974772][T28965] RSP: 002b:00007f2a7c54c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 597.974795][T28965] RAX: ffffffffffffffda RBX: 00007f2a7b9b5fa0 RCX: 00007f2a7b78ebe9 [ 597.974809][T28965] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000009 [ 597.974822][T28965] RBP: 00007f2a7b811e19 R08: 0000000000000000 R09: 0000000000000000 [ 597.974834][T28965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 597.974846][T28965] R13: 00007f2a7b9b6038 R14: 00007f2a7b9b5fa0 R15: 00007ffeef1b84e8 [ 597.974868][T28965] [ 598.575747][T28974] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 598.587949][T28974] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 598.651417][T28978] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8027'. [ 598.717150][T28981] tipc: Enabled bearer , priority 0 [ 598.732354][T28982] pim6reg: entered allmulticast mode [ 598.739052][T28981] syzkaller0: entered promiscuous mode [ 598.746754][T28981] syzkaller0: entered allmulticast mode [ 598.764864][T28982] pim6reg: left allmulticast mode [ 598.844244][T28981] tipc: Resetting bearer [ 599.007721][T28994] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8031'. [ 599.097781][T28995] dvmrp1: entered allmulticast mode [ 599.396000][T29000] lo speed is unknown, defaulting to 1000 [ 599.436651][T29000] lo speed is unknown, defaulting to 1000 [ 599.454549][T29005] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8034'. [ 599.793980][T29022] sctp: [Deprecated]: syz.2.8037 (pid 29022) Use of struct sctp_assoc_value in delayed_ack socket option. [ 599.793980][T29022] Use struct sctp_sack_info instead [ 599.813596][T29021] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8038'. [ 599.836174][T29023] lo speed is unknown, defaulting to 1000 [ 599.852906][T29024] sysfs: cannot create duplicate filename '/class/ieee80211/žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»–_à›xDä±pj8¼•TTí!' [ 599.877842][T29021] netlink: 'syz.5.8038': attribute type 4 has an invalid length. [ 599.889168][T29024] CPU: 1 UID: 0 PID: 29024 Comm: syz.2.8037 Not tainted syzkaller #0 PREEMPT(full) [ 599.889196][T29024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 599.889206][T29024] Call Trace: [ 599.889213][T29024] [ 599.889222][T29024] dump_stack_lvl+0x189/0x250 [ 599.889249][T29024] ? __pfx_dump_stack_lvl+0x10/0x10 [ 599.889271][T29024] ? __pfx__printk+0x10/0x10 [ 599.889293][T29024] ? kernfs_root+0x1c/0x230 [ 599.889315][T29024] ? kernfs_path_from_node+0x2f/0x290 [ 599.889334][T29024] ? kernfs_path_from_node+0x250/0x290 [ 599.889353][T29024] ? kernfs_path_from_node+0x2f/0x290 [ 599.889374][T29024] sysfs_warn_dup+0x8e/0xa0 [ 599.889391][T29024] sysfs_do_create_link_sd+0xc0/0x110 [ 599.889412][T29024] device_add_class_symlinks+0x1cf/0x240 [ 599.889434][T29024] device_add+0x475/0xb50 [ 599.889452][T29024] wiphy_register+0x1ba6/0x28d0 [ 599.889485][T29024] ? __pfx_wiphy_register+0x10/0x10 [ 599.889517][T29024] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 599.889541][T29024] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 599.889564][T29024] ieee80211_register_hw+0x3425/0x4080 [ 599.889593][T29024] ? ieee80211_register_hw+0x1461/0x4080 [ 599.889616][T29024] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 599.889639][T29024] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 599.889667][T29024] ? __hrtimer_setup+0x187/0x210 [ 599.889684][T29024] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 599.889710][T29024] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 599.889748][T29024] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 599.889770][T29024] ? trace_kmalloc+0x1f/0xd0 [ 599.889791][T29024] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 599.889814][T29024] ? kstrndup+0xbf/0x160 [ 599.889836][T29024] hwsim_new_radio_nl+0xea4/0x1b10 [ 599.889860][T29024] ? __pfx___nla_validate_parse+0x10/0x10 [ 599.889893][T29024] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 599.889922][T29024] ? __nla_parse+0x40/0x60 [ 599.889948][T29024] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 599.889975][T29024] genl_family_rcv_msg_doit+0x212/0x300 [ 599.890001][T29024] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 599.890028][T29024] ? bpf_lsm_capable+0x9/0x20 [ 599.890051][T29024] ? security_capable+0x7e/0x2e0 [ 599.890081][T29024] genl_rcv_msg+0x60e/0x790 [ 599.890104][T29024] ? __pfx_genl_rcv_msg+0x10/0x10 [ 599.890123][T29024] ? __kasan_slab_alloc+0x6c/0x80 [ 599.890145][T29024] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 599.890167][T29024] ? __netlink_lookup+0xbd/0x810 [ 599.890183][T29024] ? rcu_is_watching+0x15/0xb0 [ 599.890204][T29024] netlink_rcv_skb+0x208/0x470 [ 599.890229][T29024] ? __pfx_genl_rcv_msg+0x10/0x10 [ 599.890248][T29024] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 599.890277][T29024] ? lock_release+0x4b/0x3e0 [ 599.890304][T29024] ? down_read+0x1ad/0x2e0 [ 599.890321][T29024] genl_rcv+0x28/0x40 [ 599.890339][T29024] netlink_unicast+0x82f/0x9e0 [ 599.890365][T29024] ? __pfx_netlink_unicast+0x10/0x10 [ 599.890387][T29024] ? netlink_sendmsg+0x642/0xb30 [ 599.890401][T29024] ? skb_put+0x11b/0x210 [ 599.890421][T29024] netlink_sendmsg+0x805/0xb30 [ 599.890441][T29024] ? __pfx_netlink_sendmsg+0x10/0x10 [ 599.890458][T29024] ? futex_unqueue+0x22/0x240 [ 599.890477][T29024] ? aa_sock_msg_perm+0xf1/0x1d0 [ 599.890500][T29024] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 599.890519][T29024] ? __pfx_netlink_sendmsg+0x10/0x10 [ 599.890538][T29024] __sock_sendmsg+0x219/0x270 [ 599.890563][T29024] ____sys_sendmsg+0x505/0x830 [ 599.890585][T29024] ? __pfx_____sys_sendmsg+0x10/0x10 [ 599.890607][T29024] ? import_iovec+0x74/0xa0 [ 599.890628][T29024] ___sys_sendmsg+0x21f/0x2a0 [ 599.890649][T29024] ? __pfx____sys_sendmsg+0x10/0x10 [ 599.890671][T29024] ? futex_wait+0x285/0x360 [ 599.890709][T29024] ? __fget_files+0x2a/0x420 [ 599.890725][T29024] ? __fget_files+0x3a0/0x420 [ 599.890746][T29024] __x64_sys_sendmsg+0x19b/0x260 [ 599.890767][T29024] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 599.890792][T29024] ? rcu_is_watching+0x15/0xb0 [ 599.890813][T29024] ? rcu_is_watching+0x15/0xb0 [ 599.890832][T29024] do_syscall_64+0xfa/0x3b0 [ 599.890850][T29024] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.890868][T29024] ? clear_bhb_loop+0x60/0xb0 [ 599.890889][T29024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.890907][T29024] RIP: 0033:0x7f19f078ebe9 [ 599.890924][T29024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 599.890940][T29024] RSP: 002b:00007f19f161a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 599.890962][T29024] RAX: ffffffffffffffda RBX: 00007f19f09b6180 RCX: 00007f19f078ebe9 [ 599.890977][T29024] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000009 [ 599.890990][T29024] RBP: 00007f19f0811e19 R08: 0000000000000000 R09: 0000000000000000 [ 599.891003][T29024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 599.891015][T29024] R13: 00007f19f09b6218 R14: 00007f19f09b6180 R15: 00007ffe99ba9a58 [ 599.891039][T29024] [ 599.952829][T29021] netlink: 17 bytes leftover after parsing attributes in process `syz.5.8038'. [ 600.298889][T29023] lo speed is unknown, defaulting to 1000 [ 600.634550][T29040] tipc: Enabling of bearer rejected, already enabled [ 600.646394][T29040] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 600.654830][T29040] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 600.935481][T29050] netlink: 256 bytes leftover after parsing attributes in process `syz.1.8043'. [ 600.945902][T29050] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8043'. [ 601.197741][T29066] sctp: [Deprecated]: syz.1.8046 (pid 29066) Use of struct sctp_assoc_value in delayed_ack socket option. [ 601.197741][T29066] Use struct sctp_sack_info instead [ 601.264025][T29066] sysfs: cannot create duplicate filename '/class/ieee80211/žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»–_à›xDä±pj8¼•TTí!' [ 601.290430][T29066] CPU: 0 UID: 0 PID: 29066 Comm: syz.1.8046 Not tainted syzkaller #0 PREEMPT(full) [ 601.290456][T29066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 601.290468][T29066] Call Trace: [ 601.290477][T29066] [ 601.290485][T29066] dump_stack_lvl+0x189/0x250 [ 601.290515][T29066] ? __pfx_dump_stack_lvl+0x10/0x10 [ 601.290538][T29066] ? __pfx__printk+0x10/0x10 [ 601.290558][T29066] ? kernfs_root+0x1c/0x230 [ 601.290578][T29066] ? kernfs_path_from_node+0x2f/0x290 [ 601.290596][T29066] ? kernfs_path_from_node+0x250/0x290 [ 601.290613][T29066] ? kernfs_path_from_node+0x2f/0x290 [ 601.290634][T29066] sysfs_warn_dup+0x8e/0xa0 [ 601.290652][T29066] sysfs_do_create_link_sd+0xc0/0x110 [ 601.290671][T29066] device_add_class_symlinks+0x1cf/0x240 [ 601.290692][T29066] device_add+0x475/0xb50 [ 601.290711][T29066] wiphy_register+0x1ba6/0x28d0 [ 601.290745][T29066] ? __pfx_wiphy_register+0x10/0x10 [ 601.290769][T29066] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 601.290793][T29066] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 601.290816][T29066] ieee80211_register_hw+0x3425/0x4080 [ 601.290845][T29066] ? ieee80211_register_hw+0x1461/0x4080 [ 601.290869][T29066] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 601.290892][T29066] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 601.290920][T29066] ? __hrtimer_setup+0x187/0x210 [ 601.290938][T29066] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 601.290964][T29066] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 601.291002][T29066] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 601.291024][T29066] ? trace_kmalloc+0x1f/0xd0 [ 601.291047][T29066] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 601.291071][T29066] ? kstrndup+0xbf/0x160 [ 601.291094][T29066] hwsim_new_radio_nl+0xea4/0x1b10 [ 601.291119][T29066] ? __pfx___nla_validate_parse+0x10/0x10 [ 601.291152][T29066] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 601.291181][T29066] ? __nla_parse+0x40/0x60 [ 601.291207][T29066] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 601.291246][T29066] genl_family_rcv_msg_doit+0x212/0x300 [ 601.291273][T29066] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 601.291302][T29066] ? bpf_lsm_capable+0x9/0x20 [ 601.291326][T29066] ? security_capable+0x7e/0x2e0 [ 601.291354][T29066] genl_rcv_msg+0x60e/0x790 [ 601.291378][T29066] ? __pfx_genl_rcv_msg+0x10/0x10 [ 601.291396][T29066] ? __kasan_slab_alloc+0x6c/0x80 [ 601.291419][T29066] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 601.291442][T29066] ? __netlink_lookup+0xbd/0x810 [ 601.291457][T29066] ? rcu_is_watching+0x15/0xb0 [ 601.291480][T29066] netlink_rcv_skb+0x208/0x470 [ 601.291507][T29066] ? __pfx_genl_rcv_msg+0x10/0x10 [ 601.291528][T29066] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 601.291558][T29066] ? lock_release+0x4b/0x3e0 [ 601.291585][T29066] ? down_read+0x1ad/0x2e0 [ 601.291603][T29066] genl_rcv+0x28/0x40 [ 601.291622][T29066] netlink_unicast+0x82f/0x9e0 [ 601.291650][T29066] ? __pfx_netlink_unicast+0x10/0x10 [ 601.291674][T29066] ? netlink_sendmsg+0x642/0xb30 [ 601.291689][T29066] ? skb_put+0x11b/0x210 [ 601.291709][T29066] netlink_sendmsg+0x805/0xb30 [ 601.291731][T29066] ? __pfx_netlink_sendmsg+0x10/0x10 [ 601.291749][T29066] ? aa_sock_msg_perm+0xf1/0x1d0 [ 601.291767][T29066] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 601.291787][T29066] ? __pfx_netlink_sendmsg+0x10/0x10 [ 601.291804][T29066] __sock_sendmsg+0x219/0x270 [ 601.291830][T29066] ____sys_sendmsg+0x505/0x830 [ 601.291853][T29066] ? __pfx_____sys_sendmsg+0x10/0x10 [ 601.291878][T29066] ? import_iovec+0x74/0xa0 [ 601.291900][T29066] ___sys_sendmsg+0x21f/0x2a0 [ 601.291920][T29066] ? __pfx____sys_sendmsg+0x10/0x10 [ 601.291943][T29066] ? futex_wake+0x4b2/0x560 [ 601.291980][T29066] ? __fget_files+0x2a/0x420 [ 601.291995][T29066] ? __fget_files+0x3a0/0x420 [ 601.292016][T29066] __x64_sys_sendmsg+0x19b/0x260 [ 601.292036][T29066] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 601.292061][T29066] ? rcu_is_watching+0x15/0xb0 [ 601.292081][T29066] ? rcu_is_watching+0x15/0xb0 [ 601.292100][T29066] do_syscall_64+0xfa/0x3b0 [ 601.292118][T29066] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.292137][T29066] ? clear_bhb_loop+0x60/0xb0 [ 601.292155][T29066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.292174][T29066] RIP: 0033:0x7f2a7b78ebe9 [ 601.292192][T29066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 601.292210][T29066] RSP: 002b:00007f2a7c52b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 601.292237][T29066] RAX: ffffffffffffffda RBX: 00007f2a7b9b6090 RCX: 00007f2a7b78ebe9 [ 601.292252][T29066] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000009 [ 601.292265][T29066] RBP: 00007f2a7b811e19 R08: 0000000000000000 R09: 0000000000000000 [ 601.292278][T29066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 601.292290][T29066] R13: 00007f2a7b9b6128 R14: 00007f2a7b9b6090 R15: 00007ffeef1b84e8 [ 601.292314][T29066] [ 601.773947][ T5186] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 601.872056][T29075] netlink: 'syz.3.8048': attribute type 10 has an invalid length. [ 601.959314][T29080] lo speed is unknown, defaulting to 1000 [ 601.967463][T29080] lo speed is unknown, defaulting to 1000 [ 602.118031][T29090] sctp: [Deprecated]: syz.3.8051 (pid 29090) Use of struct sctp_assoc_value in delayed_ack socket option. [ 602.118031][T29090] Use struct sctp_sack_info instead [ 602.229606][T29085] sysfs: cannot create duplicate filename '/class/ieee80211/žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»–_à›xDä±pj8¼•TTí!' [ 602.244562][T29085] CPU: 1 UID: 0 PID: 29085 Comm: syz.3.8051 Not tainted syzkaller #0 PREEMPT(full) [ 602.244591][T29085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 602.244604][T29085] Call Trace: [ 602.244611][T29085] [ 602.244621][T29085] dump_stack_lvl+0x189/0x250 [ 602.244650][T29085] ? __pfx_dump_stack_lvl+0x10/0x10 [ 602.244673][T29085] ? __pfx__printk+0x10/0x10 [ 602.244696][T29085] ? kernfs_root+0x1c/0x230 [ 602.244719][T29085] ? kernfs_path_from_node+0x2f/0x290 [ 602.244739][T29085] ? kernfs_path_from_node+0x250/0x290 [ 602.244758][T29085] ? kernfs_path_from_node+0x2f/0x290 [ 602.244780][T29085] sysfs_warn_dup+0x8e/0xa0 [ 602.244798][T29085] sysfs_do_create_link_sd+0xc0/0x110 [ 602.244820][T29085] device_add_class_symlinks+0x1cf/0x240 [ 602.244842][T29085] device_add+0x475/0xb50 [ 602.244862][T29085] wiphy_register+0x1ba6/0x28d0 [ 602.244897][T29085] ? __pfx_wiphy_register+0x10/0x10 [ 602.244921][T29085] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 602.244953][T29085] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 602.244977][T29085] ieee80211_register_hw+0x3425/0x4080 [ 602.245007][T29085] ? ieee80211_register_hw+0x1461/0x4080 [ 602.245033][T29085] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 602.245055][T29085] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 602.245083][T29085] ? __hrtimer_setup+0x187/0x210 [ 602.245109][T29085] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 602.245137][T29085] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 602.245177][T29085] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 602.245200][T29085] ? trace_kmalloc+0x1f/0xd0 [ 602.245222][T29085] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 602.245246][T29085] ? kstrndup+0xbf/0x160 [ 602.245270][T29085] hwsim_new_radio_nl+0xea4/0x1b10 [ 602.245301][T29085] ? __pfx___nla_validate_parse+0x10/0x10 [ 602.245335][T29085] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 602.245366][T29085] ? __nla_parse+0x40/0x60 [ 602.245394][T29085] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 602.245423][T29085] genl_family_rcv_msg_doit+0x212/0x300 [ 602.245449][T29085] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 602.245477][T29085] ? bpf_lsm_capable+0x9/0x20 [ 602.245501][T29085] ? security_capable+0x7e/0x2e0 [ 602.245528][T29085] genl_rcv_msg+0x60e/0x790 [ 602.245553][T29085] ? __pfx_genl_rcv_msg+0x10/0x10 [ 602.245572][T29085] ? __kasan_slab_alloc+0x6c/0x80 [ 602.245595][T29085] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 602.245618][T29085] ? __netlink_lookup+0xbd/0x810 [ 602.245634][T29085] ? rcu_is_watching+0x15/0xb0 [ 602.245657][T29085] netlink_rcv_skb+0x208/0x470 [ 602.245683][T29085] ? __pfx_genl_rcv_msg+0x10/0x10 [ 602.245705][T29085] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 602.245735][T29085] ? lock_release+0x4b/0x3e0 [ 602.245763][T29085] ? down_read+0x1ad/0x2e0 [ 602.245781][T29085] genl_rcv+0x28/0x40 [ 602.245800][T29085] netlink_unicast+0x82f/0x9e0 [ 602.245828][T29085] ? __pfx_netlink_unicast+0x10/0x10 [ 602.245853][T29085] ? netlink_sendmsg+0x642/0xb30 [ 602.245868][T29085] ? skb_put+0x11b/0x210 [ 602.245888][T29085] netlink_sendmsg+0x805/0xb30 [ 602.245909][T29085] ? __pfx_netlink_sendmsg+0x10/0x10 [ 602.245927][T29085] ? futex_unqueue+0x22/0x240 [ 602.245946][T29085] ? aa_sock_msg_perm+0xf1/0x1d0 [ 602.245965][T29085] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 602.245984][T29085] ? __pfx_netlink_sendmsg+0x10/0x10 [ 602.246001][T29085] __sock_sendmsg+0x219/0x270 [ 602.246026][T29085] ____sys_sendmsg+0x505/0x830 [ 602.246047][T29085] ? __pfx_____sys_sendmsg+0x10/0x10 [ 602.246071][T29085] ? import_iovec+0x74/0xa0 [ 602.246093][T29085] ___sys_sendmsg+0x21f/0x2a0 [ 602.246113][T29085] ? __pfx____sys_sendmsg+0x10/0x10 [ 602.246135][T29085] ? futex_wait+0x285/0x360 [ 602.246173][T29085] ? __fget_files+0x2a/0x420 [ 602.246189][T29085] ? __fget_files+0x3a0/0x420 [ 602.246210][T29085] __x64_sys_sendmsg+0x19b/0x260 [ 602.246231][T29085] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 602.246256][T29085] ? rcu_is_watching+0x15/0xb0 [ 602.246276][T29085] ? rcu_is_watching+0x15/0xb0 [ 602.246302][T29085] do_syscall_64+0xfa/0x3b0 [ 602.246320][T29085] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.246340][T29085] ? clear_bhb_loop+0x60/0xb0 [ 602.246361][T29085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.246379][T29085] RIP: 0033:0x7f9a6f98ebe9 [ 602.246397][T29085] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 602.246413][T29085] RSP: 002b:00007f9a707b9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 602.246434][T29085] RAX: ffffffffffffffda RBX: 00007f9a6fbb5fa0 RCX: 00007f9a6f98ebe9 [ 602.246448][T29085] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000009 [ 602.246461][T29085] RBP: 00007f9a6fa11e19 R08: 0000000000000000 R09: 0000000000000000 [ 602.246474][T29085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 602.246486][T29085] R13: 00007f9a6fbb6038 R14: 00007f9a6fbb5fa0 R15: 00007fff209044e8 [ 602.246509][T29085] [ 602.779936][T29080] netlink: 'syz.1.8049': attribute type 6 has an invalid length. [ 602.819282][T29097] tipc: Enabled bearer , priority 0 [ 602.829946][T29097] syzkaller0: entered promiscuous mode [ 602.837460][T29097] syzkaller0: entered allmulticast mode [ 602.851442][T29097] tipc: Resetting bearer [ 602.859265][T29095] tipc: Resetting bearer [ 602.873229][T29095] tipc: Disabling bearer [ 602.942568][T29101] __nla_validate_parse: 2 callbacks suppressed [ 602.942588][T29101] netlink: 68 bytes leftover after parsing attributes in process `syz.3.8052'. [ 603.044744][T29106] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8055'. [ 603.054224][T29106] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8055'. [ 603.157221][T29111] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8057'. [ 603.492691][T29123] tipc: Resetting bearer [ 603.676290][T29128] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8060'. [ 603.710927][T29128] netlink: 64 bytes leftover after parsing attributes in process `syz.3.8060'. [ 603.720042][T29128] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8060'. [ 603.854851][T29128] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 603.933649][T29132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8061'. [ 604.070120][T29140] sctp: [Deprecated]: syz.3.8062 (pid 29140) Use of struct sctp_assoc_value in delayed_ack socket option. [ 604.070120][T29140] Use struct sctp_sack_info instead [ 604.091957][T29139] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8063'. [ 604.156157][T29140] sysfs: cannot create duplicate filename '/class/ieee80211/žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»–_à›xDä±pj8¼•TTí!' [ 604.172031][T29140] CPU: 1 UID: 0 PID: 29140 Comm: syz.3.8062 Not tainted syzkaller #0 PREEMPT(full) [ 604.172060][T29140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 604.172072][T29140] Call Trace: [ 604.172079][T29140] [ 604.172088][T29140] dump_stack_lvl+0x189/0x250 [ 604.172117][T29140] ? __pfx_dump_stack_lvl+0x10/0x10 [ 604.172138][T29140] ? __pfx__printk+0x10/0x10 [ 604.172161][T29140] ? kernfs_root+0x1c/0x230 [ 604.172184][T29140] ? kernfs_path_from_node+0x2f/0x290 [ 604.172204][T29140] ? kernfs_path_from_node+0x250/0x290 [ 604.172222][T29140] ? kernfs_path_from_node+0x2f/0x290 [ 604.172243][T29140] sysfs_warn_dup+0x8e/0xa0 [ 604.172262][T29140] sysfs_do_create_link_sd+0xc0/0x110 [ 604.172283][T29140] device_add_class_symlinks+0x1cf/0x240 [ 604.172304][T29140] device_add+0x475/0xb50 [ 604.172324][T29140] wiphy_register+0x1ba6/0x28d0 [ 604.172356][T29140] ? __pfx_wiphy_register+0x10/0x10 [ 604.172380][T29140] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 604.172405][T29140] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 604.172427][T29140] ieee80211_register_hw+0x3425/0x4080 [ 604.172457][T29140] ? ieee80211_register_hw+0x1461/0x4080 [ 604.172483][T29140] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 604.172506][T29140] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 604.172535][T29140] ? __hrtimer_setup+0x187/0x210 [ 604.172552][T29140] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 604.172579][T29140] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 604.172617][T29140] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 604.172640][T29140] ? trace_kmalloc+0x1f/0xd0 [ 604.172661][T29140] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 604.172685][T29140] ? kstrndup+0xbf/0x160 [ 604.172707][T29140] hwsim_new_radio_nl+0xea4/0x1b10 [ 604.172732][T29140] ? __pfx___nla_validate_parse+0x10/0x10 [ 604.172765][T29140] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 604.172793][T29140] ? __nla_parse+0x40/0x60 [ 604.172819][T29140] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 604.172855][T29140] genl_family_rcv_msg_doit+0x212/0x300 [ 604.172881][T29140] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 604.172910][T29140] ? bpf_lsm_capable+0x9/0x20 [ 604.172933][T29140] ? security_capable+0x7e/0x2e0 [ 604.172961][T29140] genl_rcv_msg+0x60e/0x790 [ 604.172986][T29140] ? __pfx_genl_rcv_msg+0x10/0x10 [ 604.173004][T29140] ? __kasan_slab_alloc+0x6c/0x80 [ 604.173027][T29140] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 604.173050][T29140] ? __netlink_lookup+0xbd/0x810 [ 604.173065][T29140] ? rcu_is_watching+0x15/0xb0 [ 604.173088][T29140] netlink_rcv_skb+0x208/0x470 [ 604.173113][T29140] ? __pfx_genl_rcv_msg+0x10/0x10 [ 604.173134][T29140] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 604.173164][T29140] ? lock_release+0x4b/0x3e0 [ 604.173189][T29140] ? down_read+0x1ad/0x2e0 [ 604.173207][T29140] genl_rcv+0x28/0x40 [ 604.173226][T29140] netlink_unicast+0x82f/0x9e0 [ 604.173253][T29140] ? __pfx_netlink_unicast+0x10/0x10 [ 604.173278][T29140] ? netlink_sendmsg+0x642/0xb30 [ 604.173293][T29140] ? skb_put+0x11b/0x210 [ 604.173313][T29140] netlink_sendmsg+0x805/0xb30 [ 604.173335][T29140] ? __pfx_netlink_sendmsg+0x10/0x10 [ 604.173353][T29140] ? futex_unqueue+0x22/0x240 [ 604.173372][T29140] ? aa_sock_msg_perm+0xf1/0x1d0 [ 604.173390][T29140] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 604.173410][T29140] ? __pfx_netlink_sendmsg+0x10/0x10 [ 604.173426][T29140] __sock_sendmsg+0x219/0x270 [ 604.173449][T29140] ____sys_sendmsg+0x505/0x830 [ 604.173469][T29140] ? __pfx_____sys_sendmsg+0x10/0x10 [ 604.173493][T29140] ? import_iovec+0x74/0xa0 [ 604.173515][T29140] ___sys_sendmsg+0x21f/0x2a0 [ 604.173535][T29140] ? __pfx____sys_sendmsg+0x10/0x10 [ 604.173557][T29140] ? futex_wait+0x285/0x360 [ 604.173595][T29140] ? __fget_files+0x2a/0x420 [ 604.173610][T29140] ? __fget_files+0x3a0/0x420 [ 604.173631][T29140] __x64_sys_sendmsg+0x19b/0x260 [ 604.173650][T29140] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 604.173675][T29140] ? rcu_is_watching+0x15/0xb0 [ 604.173695][T29140] ? rcu_is_watching+0x15/0xb0 [ 604.173714][T29140] do_syscall_64+0xfa/0x3b0 [ 604.173732][T29140] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.173750][T29140] ? clear_bhb_loop+0x60/0xb0 [ 604.173771][T29140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.173790][T29140] RIP: 0033:0x7f9a6f98ebe9 [ 604.173807][T29140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 604.173825][T29140] RSP: 002b:00007f9a70798038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 604.173867][T29140] RAX: ffffffffffffffda RBX: 00007f9a6fbb6090 RCX: 00007f9a6f98ebe9 [ 604.173882][T29140] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000009 [ 604.173895][T29140] RBP: 00007f9a6fa11e19 R08: 0000000000000000 R09: 0000000000000000 [ 604.173909][T29140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 604.173920][T29140] R13: 00007f9a6fbb6128 R14: 00007f9a6fbb6090 R15: 00007fff209044e8 [ 604.173943][T29140] [ 604.677744][T29143] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 604.747509][T29139] smc: net device bond0 applied user defined pnetid SYZ2 [ 604.748775][T29148] lo speed is unknown, defaulting to 1000 [ 604.764136][T29148] lo speed is unknown, defaulting to 1000 [ 604.772862][T29141] smc: net device bond0 erased user defined pnetid SYZ2 [ 604.792893][T29147] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8066'. [ 605.412419][T29177] lo speed is unknown, defaulting to 1000 [ 605.419181][T29177] lo speed is unknown, defaulting to 1000 [ 605.663047][T29201] netlink: 'syz.5.8077': attribute type 5 has an invalid length. [ 605.690470][T29200] tipc: Resetting bearer [ 605.762090][T29200] syzkaller0: left promiscuous mode [ 605.781918][T29200] syzkaller0: left allmulticast mode [ 605.848870][T29200] !: left promiscuous mode [ 605.904676][T29200] macvtap1: left promiscuous mode [ 605.967408][T29200] macvtap1: left allmulticast mode [ 606.387726][T29214] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 606.637933][T29221] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 606.838731][T29228] openvswitch: netlink: Flow actions attr not present in new flow. [ 607.096478][T29236] tipc: Resetting bearer [ 607.116204][T29236] veth0_to_team: left promiscuous mode [ 607.124407][T29236] veth0_to_team: left allmulticast mode [ 607.152481][T29236] mac80211_hwsim hwsim28 wlan0: left allmulticast mode [ 607.182192][T29236] veth5: left promiscuous mode [ 607.396038][T29257] bond9: option mode: unable to set because the bond device is up [ 607.785655][T29279] lo speed is unknown, defaulting to 1000 [ 607.806273][T29279] lo speed is unknown, defaulting to 1000 [ 607.884665][T29288] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 608.032895][T29293] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 608.116030][T29295] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 608.708760][T29309] netlink: 'syz.4.8108': attribute type 1 has an invalid length. [ 609.078010][T29322] __nla_validate_parse: 17 callbacks suppressed [ 609.078023][T29322] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8113'. [ 609.123374][T29326] macvlan6: entered allmulticast mode [ 609.129037][T29326] veth1_vlan: entered allmulticast mode [ 609.137259][T29326] veth1_vlan: left allmulticast mode [ 609.176412][T29321] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 609.199623][T29321] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 609.220173][T29321] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 609.241362][T29331] lo speed is unknown, defaulting to 1000 [ 609.248148][T29331] lo speed is unknown, defaulting to 1000 [ 609.272573][T29321] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 609.384330][T29321] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 609.390348][T29321] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 609.432202][T29321] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 609.438220][T29321] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 609.456645][T29337] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8116'. [ 609.524814][T29321] tipc: Resetting bearer [ 609.565758][T29321] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 609.572773][T29321] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 609.664213][T29349] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8120'. [ 609.699458][T29350] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8118'. [ 609.715459][T29351] netlink: 'syz.1.8119': attribute type 13 has an invalid length. [ 609.730358][T29351] netlink: 'syz.1.8119': attribute type 17 has an invalid length. [ 609.743830][T29351] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 609.825107][T29356] netlink: 'syz.5.8121': attribute type 13 has an invalid length. [ 609.833867][T29356] netlink: 'syz.5.8121': attribute type 17 has an invalid length. [ 609.944036][T29356] 8021q: adding VLAN 0 to HW filter on device team0 [ 609.968058][T29356] tipc: Resetting bearer [ 609.983909][T29356] tipc: Resetting bearer [ 609.993883][T29356] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 610.014760][T29347] lo speed is unknown, defaulting to 1000 [ 610.088596][T29347] lo speed is unknown, defaulting to 1000 [ 610.098555][T29357] lo speed is unknown, defaulting to 1000 [ 610.155493][T29363] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 610.226815][T29357] lo speed is unknown, defaulting to 1000 [ 610.726488][T29373] lo speed is unknown, defaulting to 1000 [ 610.736330][T29373] lo speed is unknown, defaulting to 1000 [ 610.771288][T29352] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 611.178384][T29387] netlink: 'syz.3.8130': attribute type 1 has an invalid length. [ 611.337693][T29380] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8128'. [ 611.360040][T29387] 8021q: adding VLAN 0 to HW filter on device bond20 [ 611.717618][T29389] 8021q: adding VLAN 0 to HW filter on device bond20 [ 611.742902][T29389] bond20: (slave vxcan1): The slave device specified does not support setting the MAC address [ 611.755074][T29389] bond20: (slave vxcan1): Error -95 calling set_mac_address [ 611.799927][T29391] veth45: entered promiscuous mode [ 611.811310][T29391] bond20: (slave veth45): Enslaving as an active interface with a down link [ 612.075002][T29415] bond6: option mode: unable to set because the bond device is up [ 612.124545][T29417] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8138'. [ 612.149955][T29423] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 612.266315][T29411] netlink: 68 bytes leftover after parsing attributes in process `syz.5.8137'. [ 612.506125][T29435] netlink: 14 bytes leftover after parsing attributes in process `syz.5.8143'. [ 613.213407][T29455] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 613.386808][T29464] lo speed is unknown, defaulting to 1000 [ 613.398519][T29464] lo speed is unknown, defaulting to 1000 [ 613.483849][T29469] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8155'. [ 613.493381][T29469] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8155'. [ 613.541038][T29471] IPVS: set_ctl: invalid protocol: 98 224.0.0.1:20001 [ 613.834225][T29485] netlink: 'syz.4.8161': attribute type 13 has an invalid length. [ 613.843373][T29485] netlink: 'syz.4.8161': attribute type 17 has an invalid length. [ 613.867190][T29485] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 614.008483][T29485] lo speed is unknown, defaulting to 1000 [ 614.016220][T29485] lo speed is unknown, defaulting to 1000 [ 614.099338][T29490] __nla_validate_parse: 3 callbacks suppressed [ 614.099356][T29490] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8162'. [ 614.099626][T29491] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8161'. [ 614.147825][T29491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 614.569739][T29507] wg1: entered promiscuous mode [ 614.579513][T29507] wg1: entered allmulticast mode [ 614.634728][T29511] dvmrp1: left allmulticast mode [ 614.689798][T29513] syz0: rxe_newlink: already configured on lo [ 614.740490][T29511] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 614.758243][ T10] lo speed is unknown, defaulting to 1000 [ 614.765143][ T10] syz0: Port: 1 Link ACTIVE [ 614.771857][ T10] lo speed is unknown, defaulting to 1000 [ 614.846459][T29516] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8171'. [ 614.988073][T29522] bond9: option mode: unable to set because the bond device is up [ 615.086643][T29528] lo speed is unknown, defaulting to 1000 [ 615.094853][T29528] lo speed is unknown, defaulting to 1000 [ 615.248346][T29538] netlink: 88 bytes leftover after parsing attributes in process `syz.4.8180'. [ 615.473790][T29545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8183'. [ 615.503079][T29545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8183'. [ 615.599218][T29554] bond6: option mode: unable to set because the bond device is up [ 615.656061][T29554] 8021q: adding VLAN 0 to HW filter on device macvlan13 [ 615.695790][T29554] bond6: (slave macvlan13): Enslaving as a backup interface with a down link [ 615.726526][T29561] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8188'. [ 616.098158][T29577] netlink: 'syz.1.8195': attribute type 10 has an invalid length. [ 616.113404][T29577] netlink: 2 bytes leftover after parsing attributes in process `syz.1.8195'. [ 616.168180][T29583] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8198'. [ 616.179036][T29583] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8198'. [ 616.497373][T29606] sctp: [Deprecated]: syz.4.8206 (pid 29606) Use of struct sctp_assoc_value in delayed_ack socket option. [ 616.497373][T29606] Use struct sctp_sack_info instead [ 616.578436][T29606] sysfs: cannot create duplicate filename '/class/ieee80211/žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»–_à›xDä±pj8¼•TTí!' [ 616.591983][T29606] CPU: 0 UID: 0 PID: 29606 Comm: syz.4.8206 Not tainted syzkaller #0 PREEMPT(full) [ 616.592011][T29606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 616.592024][T29606] Call Trace: [ 616.592033][T29606] [ 616.592042][T29606] dump_stack_lvl+0x189/0x250 [ 616.592070][T29606] ? __pfx_dump_stack_lvl+0x10/0x10 [ 616.592091][T29606] ? __pfx__printk+0x10/0x10 [ 616.592113][T29606] ? kernfs_root+0x1c/0x230 [ 616.592134][T29606] ? kernfs_path_from_node+0x2f/0x290 [ 616.592154][T29606] ? kernfs_path_from_node+0x250/0x290 [ 616.592173][T29606] ? kernfs_path_from_node+0x2f/0x290 [ 616.592196][T29606] sysfs_warn_dup+0x8e/0xa0 [ 616.592216][T29606] sysfs_do_create_link_sd+0xc0/0x110 [ 616.592237][T29606] device_add_class_symlinks+0x1cf/0x240 [ 616.592259][T29606] device_add+0x475/0xb50 [ 616.592279][T29606] wiphy_register+0x1ba6/0x28d0 [ 616.592312][T29606] ? __pfx_wiphy_register+0x10/0x10 [ 616.592336][T29606] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 616.592361][T29606] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 616.592385][T29606] ieee80211_register_hw+0x3425/0x4080 [ 616.592414][T29606] ? ieee80211_register_hw+0x1461/0x4080 [ 616.592438][T29606] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 616.592461][T29606] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 616.592490][T29606] ? __hrtimer_setup+0x187/0x210 [ 616.592507][T29606] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 616.592535][T29606] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 616.592573][T29606] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 616.592596][T29606] ? trace_kmalloc+0x1f/0xd0 [ 616.592617][T29606] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 616.592642][T29606] ? kstrndup+0xbf/0x160 [ 616.592664][T29606] hwsim_new_radio_nl+0xea4/0x1b10 [ 616.592712][T29606] ? __pfx___nla_validate_parse+0x10/0x10 [ 616.592746][T29606] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 616.592775][T29606] ? __nla_parse+0x40/0x60 [ 616.592801][T29606] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 616.592829][T29606] genl_family_rcv_msg_doit+0x212/0x300 [ 616.592854][T29606] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 616.592883][T29606] ? bpf_lsm_capable+0x9/0x20 [ 616.592906][T29606] ? security_capable+0x7e/0x2e0 [ 616.592933][T29606] genl_rcv_msg+0x60e/0x790 [ 616.592956][T29606] ? __pfx_genl_rcv_msg+0x10/0x10 [ 616.592975][T29606] ? __kasan_slab_alloc+0x6c/0x80 [ 616.592997][T29606] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 616.593020][T29606] ? __netlink_lookup+0xbd/0x810 [ 616.593037][T29606] ? rcu_is_watching+0x15/0xb0 [ 616.593060][T29606] netlink_rcv_skb+0x208/0x470 [ 616.593085][T29606] ? __pfx_genl_rcv_msg+0x10/0x10 [ 616.593106][T29606] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 616.593137][T29606] ? lock_release+0x4b/0x3e0 [ 616.593163][T29606] ? down_read+0x1ad/0x2e0 [ 616.593181][T29606] genl_rcv+0x28/0x40 [ 616.593197][T29606] netlink_unicast+0x82f/0x9e0 [ 616.593225][T29606] ? __pfx_netlink_unicast+0x10/0x10 [ 616.593246][T29606] ? netlink_sendmsg+0x642/0xb30 [ 616.593262][T29606] ? skb_put+0x11b/0x210 [ 616.593280][T29606] netlink_sendmsg+0x805/0xb30 [ 616.593297][T29606] ? __pfx_netlink_sendmsg+0x10/0x10 [ 616.593315][T29606] ? aa_sock_msg_perm+0xf1/0x1d0 [ 616.593333][T29606] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 616.593351][T29606] ? __pfx_netlink_sendmsg+0x10/0x10 [ 616.593367][T29606] __sock_sendmsg+0x219/0x270 [ 616.593390][T29606] ____sys_sendmsg+0x505/0x830 [ 616.593410][T29606] ? __pfx_____sys_sendmsg+0x10/0x10 [ 616.593432][T29606] ? import_iovec+0x74/0xa0 [ 616.593453][T29606] ___sys_sendmsg+0x21f/0x2a0 [ 616.593470][T29606] ? __pfx____sys_sendmsg+0x10/0x10 [ 616.593491][T29606] ? futex_wake+0x4b2/0x560 [ 616.593527][T29606] ? __fget_files+0x2a/0x420 [ 616.593542][T29606] ? __fget_files+0x3a0/0x420 [ 616.593561][T29606] __x64_sys_sendmsg+0x19b/0x260 [ 616.593581][T29606] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 616.593604][T29606] ? rcu_is_watching+0x15/0xb0 [ 616.593623][T29606] ? rcu_is_watching+0x15/0xb0 [ 616.593641][T29606] do_syscall_64+0xfa/0x3b0 [ 616.593658][T29606] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.593676][T29606] ? clear_bhb_loop+0x60/0xb0 [ 616.593710][T29606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.593728][T29606] RIP: 0033:0x7fc38578ebe9 [ 616.593745][T29606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 616.593761][T29606] RSP: 002b:00007fc386623038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 616.593782][T29606] RAX: ffffffffffffffda RBX: 00007fc3859b6090 RCX: 00007fc38578ebe9 [ 616.593797][T29606] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000009 [ 616.593808][T29606] RBP: 00007fc385811e19 R08: 0000000000000000 R09: 0000000000000000 [ 616.593820][T29606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 616.593832][T29606] R13: 00007fc3859b6128 R14: 00007fc3859b6090 R15: 00007fff29f174e8 [ 616.593855][T29606] [ 617.117334][T29610] lo speed is unknown, defaulting to 1000 [ 617.147719][T29610] lo speed is unknown, defaulting to 1000 [ 617.197411][T29613] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 617.338027][T29624] netlink: 'syz.2.8213': attribute type 2 has an invalid length. [ 617.433998][T29622] netlink: 'syz.5.8211': attribute type 10 has an invalid length. [ 617.852832][T29647] delete_channel: no stack [ 618.492878][T29678] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 618.855988][T29689] netlink: 'syz.1.8233': attribute type 10 has an invalid length. [ 619.428617][T29716] smc: net device bond0 applied user defined pnetid SYZ2 [ 619.446053][T29711] smc: net device bond0 erased user defined pnetid SYZ2 [ 619.599968][T29729] __nla_validate_parse: 8 callbacks suppressed [ 619.599987][T29729] netlink: 19 bytes leftover after parsing attributes in process `syz.3.8248'. [ 619.616015][T29727] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8247'. [ 619.628573][T29727] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8247'. [ 619.792891][T29741] netlink: 64 bytes leftover after parsing attributes in process `syz.3.8254'. [ 619.802799][T29741] nbd: must specify at least one socket [ 619.984407][T29761] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 620.112095][T29778] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8263'. [ 620.123873][T29778] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8263'. [ 620.154873][T29780] netlink: 64 bytes leftover after parsing attributes in process `syz.4.8269'. [ 620.167188][T29780] nbd: must specify at least one socket [ 620.282812][T29791] netlink: 14 bytes leftover after parsing attributes in process `syz.3.8273'. [ 620.396925][T29799] lo speed is unknown, defaulting to 1000 [ 620.417629][T29799] lo speed is unknown, defaulting to 1000 [ 620.614743][T29821] netlink: 'syz.2.8284': attribute type 13 has an invalid length. [ 620.623450][T29821] netlink: 'syz.2.8284': attribute type 17 has an invalid length. [ 620.646687][T29820] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8285'. [ 620.687582][T29828] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8283'. [ 620.699015][T29821] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 620.758872][T29815] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 620.795476][T29831] netlink: 'syz.3.8286': attribute type 1 has an invalid length. [ 620.812969][T29815] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 620.870846][T29827] lo speed is unknown, defaulting to 1000 [ 620.885533][T29827] lo speed is unknown, defaulting to 1000 [ 621.454690][T29853] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 72 [ 621.549387][T29862] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 622.105540][T29895] lo: MTU too low for tipc bearer [ 622.117125][T29895] tipc: Enabling of bearer rejected, failed to enable media [ 622.194724][T29904] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 622.228268][T29906] bond6: option mode: unable to set because the bond device has slaves [ 622.248998][T29906] bond6: (slave macvlan14): Error -98 calling set_mac_address [ 622.402964][T29914] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 623.243960][T29945] 8021q: adding VLAN 0 to HW filter on device bond14 [ 623.265660][T29945] 8021q: adding VLAN 0 to HW filter on device macvlan11 [ 623.283196][T29945] bond14: (slave macvlan11): Enslaving as a backup interface with a down link [ 623.665941][T29975] lo speed is unknown, defaulting to 1000 [ 623.675481][T29975] lo speed is unknown, defaulting to 1000 [ 623.726799][T29980] bond9: option mode: unable to set because the bond device is up [ 623.749645][T29980] 8021q: adding VLAN 0 to HW filter on device macvlan6 [ 623.775096][T29980] bond9: (slave macvlan6): Enslaving as a backup interface with a down link [ 624.328419][T30011] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 624.595836][T30029] sctp: [Deprecated]: syz.1.8356 (pid 30029) Use of struct sctp_assoc_value in delayed_ack socket option. [ 624.595836][T30029] Use struct sctp_sack_info instead [ 624.624624][T30030] netlink: 'syz.3.8358': attribute type 13 has an invalid length. [ 624.643698][T30030] netlink: 'syz.3.8358': attribute type 17 has an invalid length. [ 624.673380][T30027] smc: net device bond0 applied user defined pnetid SYZ2 [ 624.706829][T30031] smc: net device bond0 erased user defined pnetid SYZ2 [ 624.746559][T30030] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 624.764761][T30026] lo speed is unknown, defaulting to 1000 [ 624.771962][T30029] sysfs: cannot create duplicate filename '/class/ieee80211/žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»–_à›xDä±pj8¼•TTí!' [ 624.784734][T30029] CPU: 1 UID: 0 PID: 30029 Comm: syz.1.8356 Not tainted syzkaller #0 PREEMPT(full) [ 624.784760][T30029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 624.784771][T30029] Call Trace: [ 624.784779][T30029] [ 624.784787][T30029] dump_stack_lvl+0x189/0x250 [ 624.784813][T30029] ? __pfx_dump_stack_lvl+0x10/0x10 [ 624.784833][T30029] ? __pfx__printk+0x10/0x10 [ 624.784856][T30029] ? kernfs_root+0x1c/0x230 [ 624.784877][T30029] ? kernfs_path_from_node+0x2f/0x290 [ 624.784893][T30029] ? kernfs_path_from_node+0x250/0x290 [ 624.784910][T30029] ? kernfs_path_from_node+0x2f/0x290 [ 624.784929][T30029] sysfs_warn_dup+0x8e/0xa0 [ 624.784945][T30029] sysfs_do_create_link_sd+0xc0/0x110 [ 624.784963][T30029] device_add_class_symlinks+0x1cf/0x240 [ 624.784983][T30029] device_add+0x475/0xb50 [ 624.785002][T30029] wiphy_register+0x1ba6/0x28d0 [ 624.785037][T30029] ? __pfx_wiphy_register+0x10/0x10 [ 624.785059][T30029] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 624.785082][T30029] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 624.785104][T30029] ieee80211_register_hw+0x3425/0x4080 [ 624.785132][T30029] ? ieee80211_register_hw+0x1461/0x4080 [ 624.785156][T30029] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 624.785178][T30029] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 624.785215][T30029] ? __hrtimer_setup+0x187/0x210 [ 624.785231][T30029] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 624.785257][T30029] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 624.785291][T30029] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 624.785309][T30029] ? trace_kmalloc+0x1f/0xd0 [ 624.785328][T30029] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 624.785350][T30029] ? kstrndup+0xbf/0x160 [ 624.785370][T30029] hwsim_new_radio_nl+0xea4/0x1b10 [ 624.785391][T30029] ? __pfx___nla_validate_parse+0x10/0x10 [ 624.785421][T30029] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 624.785447][T30029] ? __nla_parse+0x40/0x60 [ 624.785471][T30029] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 624.785497][T30029] genl_family_rcv_msg_doit+0x212/0x300 [ 624.785523][T30029] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 624.785552][T30029] ? bpf_lsm_capable+0x9/0x20 [ 624.785577][T30029] ? security_capable+0x7e/0x2e0 [ 624.785605][T30029] genl_rcv_msg+0x60e/0x790 [ 624.785629][T30029] ? __pfx_genl_rcv_msg+0x10/0x10 [ 624.785648][T30029] ? __kasan_slab_alloc+0x6c/0x80 [ 624.785671][T30029] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 624.785693][T30029] ? __netlink_lookup+0xbd/0x810 [ 624.785709][T30029] ? rcu_is_watching+0x15/0xb0 [ 624.785732][T30029] netlink_rcv_skb+0x208/0x470 [ 624.785763][T30029] ? __pfx_genl_rcv_msg+0x10/0x10 [ 624.785784][T30029] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 624.785815][T30029] ? lock_release+0x4b/0x3e0 [ 624.785842][T30029] ? down_read+0x1ad/0x2e0 [ 624.785861][T30029] genl_rcv+0x28/0x40 [ 624.785880][T30029] netlink_unicast+0x82f/0x9e0 [ 624.785907][T30029] ? __pfx_netlink_unicast+0x10/0x10 [ 624.785931][T30029] ? netlink_sendmsg+0x642/0xb30 [ 624.785947][T30029] ? skb_put+0x11b/0x210 [ 624.785965][T30029] netlink_sendmsg+0x805/0xb30 [ 624.785986][T30029] ? __pfx_netlink_sendmsg+0x10/0x10 [ 624.786004][T30029] ? aa_sock_msg_perm+0xf1/0x1d0 [ 624.786023][T30029] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 624.786042][T30029] ? __pfx_netlink_sendmsg+0x10/0x10 [ 624.786059][T30029] __sock_sendmsg+0x219/0x270 [ 624.786084][T30029] ____sys_sendmsg+0x505/0x830 [ 624.786106][T30029] ? __pfx_____sys_sendmsg+0x10/0x10 [ 624.786136][T30029] ? import_iovec+0x74/0xa0 [ 624.786159][T30029] ___sys_sendmsg+0x21f/0x2a0 [ 624.786180][T30029] ? __pfx____sys_sendmsg+0x10/0x10 [ 624.786209][T30029] ? futex_wake+0x4b2/0x560 [ 624.786248][T30029] ? __fget_files+0x2a/0x420 [ 624.786264][T30029] ? __fget_files+0x3a0/0x420 [ 624.786286][T30029] __x64_sys_sendmsg+0x19b/0x260 [ 624.786307][T30029] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 624.786332][T30029] ? rcu_is_watching+0x15/0xb0 [ 624.786353][T30029] ? rcu_is_watching+0x15/0xb0 [ 624.786372][T30029] do_syscall_64+0xfa/0x3b0 [ 624.786389][T30029] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.786408][T30029] ? clear_bhb_loop+0x60/0xb0 [ 624.786428][T30029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.786447][T30029] RIP: 0033:0x7f2a7b78ebe9 [ 624.786464][T30029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 624.786481][T30029] RSP: 002b:00007f2a7c52b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 624.786504][T30029] RAX: ffffffffffffffda RBX: 00007f2a7b9b6090 RCX: 00007f2a7b78ebe9 [ 624.786520][T30029] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000009 [ 624.786533][T30029] RBP: 00007f2a7b811e19 R08: 0000000000000000 R09: 0000000000000000 [ 624.786546][T30029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 624.786558][T30029] R13: 00007f2a7b9b6128 R14: 00007f2a7b9b6090 R15: 00007ffeef1b84e8 [ 624.786581][T30029] [ 624.792361][T30026] lo speed is unknown, defaulting to 1000 [ 624.888929][T30037] __nla_validate_parse: 29 callbacks suppressed [ 624.888949][T30037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8358'. [ 625.152896][T30030] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 625.345922][T30053] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 625.737907][T30077] sctp: [Deprecated]: syz.4.8373 (pid 30077) Use of struct sctp_assoc_value in delayed_ack socket option. [ 625.737907][T30077] Use struct sctp_sack_info instead [ 625.795793][T30073] sysfs: cannot create duplicate filename '/class/ieee80211/žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»–_à›xDä±pj8¼•TTí!' [ 625.825611][T30073] CPU: 1 UID: 0 PID: 30073 Comm: syz.4.8373 Not tainted syzkaller #0 PREEMPT(full) [ 625.825639][T30073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 625.825652][T30073] Call Trace: [ 625.825660][T30073] [ 625.825669][T30073] dump_stack_lvl+0x189/0x250 [ 625.825697][T30073] ? __pfx_dump_stack_lvl+0x10/0x10 [ 625.825719][T30073] ? __pfx__printk+0x10/0x10 [ 625.825741][T30073] ? kernfs_root+0x1c/0x230 [ 625.825763][T30073] ? kernfs_path_from_node+0x2f/0x290 [ 625.825782][T30073] ? kernfs_path_from_node+0x250/0x290 [ 625.825801][T30073] ? kernfs_path_from_node+0x2f/0x290 [ 625.825821][T30073] sysfs_warn_dup+0x8e/0xa0 [ 625.825840][T30073] sysfs_do_create_link_sd+0xc0/0x110 [ 625.825860][T30073] device_add_class_symlinks+0x1cf/0x240 [ 625.825881][T30073] device_add+0x475/0xb50 [ 625.825900][T30073] wiphy_register+0x1ba6/0x28d0 [ 625.825933][T30073] ? __pfx_wiphy_register+0x10/0x10 [ 625.825956][T30073] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 625.825980][T30073] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 625.826001][T30073] ieee80211_register_hw+0x3425/0x4080 [ 625.826030][T30073] ? ieee80211_register_hw+0x1461/0x4080 [ 625.826060][T30073] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 625.826084][T30073] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 625.826112][T30073] ? __hrtimer_setup+0x187/0x210 [ 625.826129][T30073] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 625.826156][T30073] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 625.826192][T30073] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 625.826214][T30073] ? trace_kmalloc+0x1f/0xd0 [ 625.826236][T30073] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 625.826260][T30073] ? kstrndup+0xbf/0x160 [ 625.826284][T30073] hwsim_new_radio_nl+0xea4/0x1b10 [ 625.826307][T30073] ? __pfx___nla_validate_parse+0x10/0x10 [ 625.826340][T30073] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 625.826368][T30073] ? __nla_parse+0x40/0x60 [ 625.826394][T30073] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 625.826421][T30073] genl_family_rcv_msg_doit+0x212/0x300 [ 625.826446][T30073] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 625.826477][T30073] ? bpf_lsm_capable+0x9/0x20 [ 625.826501][T30073] ? security_capable+0x7e/0x2e0 [ 625.826529][T30073] genl_rcv_msg+0x60e/0x790 [ 625.826553][T30073] ? __pfx_genl_rcv_msg+0x10/0x10 [ 625.826572][T30073] ? __kasan_slab_alloc+0x6c/0x80 [ 625.826594][T30073] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 625.826616][T30073] ? __netlink_lookup+0xbd/0x810 [ 625.826632][T30073] ? rcu_is_watching+0x15/0xb0 [ 625.826655][T30073] netlink_rcv_skb+0x208/0x470 [ 625.826680][T30073] ? __pfx_genl_rcv_msg+0x10/0x10 [ 625.826701][T30073] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 625.826731][T30073] ? lock_release+0x4b/0x3e0 [ 625.826757][T30073] ? down_read+0x1ad/0x2e0 [ 625.826782][T30073] genl_rcv+0x28/0x40 [ 625.826801][T30073] netlink_unicast+0x82f/0x9e0 [ 625.826828][T30073] ? __pfx_netlink_unicast+0x10/0x10 [ 625.826852][T30073] ? netlink_sendmsg+0x642/0xb30 [ 625.826867][T30073] ? skb_put+0x11b/0x210 [ 625.826886][T30073] netlink_sendmsg+0x805/0xb30 [ 625.826906][T30073] ? __pfx_netlink_sendmsg+0x10/0x10 [ 625.826925][T30073] ? aa_sock_msg_perm+0xf1/0x1d0 [ 625.826942][T30073] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 625.826961][T30073] ? __pfx_netlink_sendmsg+0x10/0x10 [ 625.826979][T30073] __sock_sendmsg+0x219/0x270 [ 625.827004][T30073] ____sys_sendmsg+0x505/0x830 [ 625.827026][T30073] ? __pfx_____sys_sendmsg+0x10/0x10 [ 625.827050][T30073] ? import_iovec+0x74/0xa0 [ 625.827078][T30073] ___sys_sendmsg+0x21f/0x2a0 [ 625.827098][T30073] ? __pfx____sys_sendmsg+0x10/0x10 [ 625.827120][T30073] ? futex_wake+0x4b2/0x560 [ 625.827156][T30073] ? __fget_files+0x2a/0x420 [ 625.827171][T30073] ? __fget_files+0x3a0/0x420 [ 625.827192][T30073] __x64_sys_sendmsg+0x19b/0x260 [ 625.827211][T30073] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 625.827236][T30073] ? rcu_is_watching+0x15/0xb0 [ 625.827255][T30073] ? rcu_is_watching+0x15/0xb0 [ 625.827274][T30073] do_syscall_64+0xfa/0x3b0 [ 625.827292][T30073] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.827310][T30073] ? clear_bhb_loop+0x60/0xb0 [ 625.827332][T30073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.827350][T30073] RIP: 0033:0x7fc38578ebe9 [ 625.827367][T30073] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 625.827386][T30073] RSP: 002b:00007fc386644038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 625.827407][T30073] RAX: ffffffffffffffda RBX: 00007fc3859b5fa0 RCX: 00007fc38578ebe9 [ 625.827422][T30073] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000009 [ 625.827435][T30073] RBP: 00007fc385811e19 R08: 0000000000000000 R09: 0000000000000000 [ 625.827447][T30073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 625.827460][T30073] R13: 00007fc3859b6038 R14: 00007fc3859b5fa0 R15: 00007fff29f174e8 [ 625.827482][T30073] [ 626.354333][T30090] 8021q: adding VLAN 0 to HW filter on device bond1 [ 626.369232][T30090] 8021q: adding VLAN 0 to HW filter on device macvlan7 [ 626.378448][T30090] bond1: (slave macvlan7): Enslaving as a backup interface with a down link [ 626.393997][T30090] tipc: Resetting bearer [ 626.449379][T30091] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 626.582797][T30105] IPVS: Error connecting to the multicast addr [ 626.681903][T30108] netlink: 530 bytes leftover after parsing attributes in process `syz.5.8386'. [ 626.843384][T30118] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8393'. [ 626.954595][T30126] netlink: 'syz.5.8394': attribute type 13 has an invalid length. [ 626.965867][T30126] netlink: 'syz.5.8394': attribute type 17 has an invalid length. [ 626.984041][T30126] tipc: Resetting bearer [ 626.990238][T30126] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 627.008375][T30132] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 627.086087][T30121] lo speed is unknown, defaulting to 1000 [ 627.096161][T30121] lo speed is unknown, defaulting to 1000 [ 627.334507][T30150] lo speed is unknown, defaulting to 1000 [ 627.382867][T30156] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8408'. [ 627.418337][T30150] lo speed is unknown, defaulting to 1000 [ 627.467845][T30120] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 627.517025][T30167] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 627.550906][T30166] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8412'. [ 627.742937][T30177] netlink: 530 bytes leftover after parsing attributes in process `syz.4.8417'. [ 627.970932][T30187] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8421'. [ 628.288704][T30200] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 628.320339][T30210] netlink: 530 bytes leftover after parsing attributes in process `syz.5.8431'. [ 628.546181][T30222] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8434'. [ 628.663078][T30214] lo speed is unknown, defaulting to 1000 [ 628.671916][T30214] lo speed is unknown, defaulting to 1000 [ 628.735020][T30229] vlan0: entered promiscuous mode [ 628.752848][T30229] bridge0: entered promiscuous mode [ 628.787726][T30231] netlink: 'syz.5.8436': attribute type 13 has an invalid length. [ 628.801922][T30231] netlink: 'syz.5.8436': attribute type 17 has an invalid length. [ 628.867145][T30231] tipc: Resetting bearer [ 628.895859][T30231] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 628.980920][T30231] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8436'. [ 628.992037][T30231] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 628.997247][T30232] lo speed is unknown, defaulting to 1000 [ 629.004490][T30231] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 629.012534][T30232] lo speed is unknown, defaulting to 1000 [ 629.467090][T30235] lo speed is unknown, defaulting to 1000 [ 629.601572][T30235] lo speed is unknown, defaulting to 1000 [ 630.155173][T30261] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8446'. [ 630.444512][T30278] vlan4: entered promiscuous mode [ 630.449719][T30278] bridge0: entered promiscuous mode [ 630.845246][T30292] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 631.044845][T30298] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8462'. [ 631.642774][T30330] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8475'. [ 631.749736][T30334] tipc: Enabling of bearer rejected, already enabled [ 631.968835][T30336] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 632.042986][T30340] netlink: 530 bytes leftover after parsing attributes in process `syz.1.8480'. [ 632.230899][T30351] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8486'. [ 632.318000][T30360] tipc: Enabling of bearer rejected, already enabled [ 632.352287][T30361] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8485'. [ 632.375800][T30361] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8485'. [ 632.485293][T30371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8491'. [ 632.530866][T30371] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8491'. [ 632.807224][T30399] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8504'. [ 633.277117][T30433] lo speed is unknown, defaulting to 1000 [ 633.284409][T30433] lo speed is unknown, defaulting to 1000 [ 633.599581][T30454] macvlan8: entered allmulticast mode [ 633.608434][T30454] veth1_vlan: entered allmulticast mode [ 633.619303][T30454] veth1_vlan: left allmulticast mode [ 633.819485][T30469] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 634.133725][T30490] lo speed is unknown, defaulting to 1000 [ 634.151581][T30490] lo speed is unknown, defaulting to 1000 [ 634.426906][T30500] sctp: [Deprecated]: syz.3.8544 (pid 30500) Use of struct sctp_assoc_value in delayed_ack socket option. [ 634.426906][T30500] Use struct sctp_sack_info instead [ 634.487354][T30500] sysfs: cannot create duplicate filename '/class/ieee80211/žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»–_à›xDä±pj8¼•TTí!' [ 634.502751][T30500] CPU: 0 UID: 0 PID: 30500 Comm: syz.3.8544 Not tainted syzkaller #0 PREEMPT(full) [ 634.502778][T30500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 634.502790][T30500] Call Trace: [ 634.502797][T30500] [ 634.502806][T30500] dump_stack_lvl+0x189/0x250 [ 634.502834][T30500] ? __pfx_dump_stack_lvl+0x10/0x10 [ 634.502854][T30500] ? __pfx__printk+0x10/0x10 [ 634.502876][T30500] ? kernfs_root+0x1c/0x230 [ 634.502898][T30500] ? kernfs_path_from_node+0x2f/0x290 [ 634.502917][T30500] ? kernfs_path_from_node+0x250/0x290 [ 634.502936][T30500] ? kernfs_path_from_node+0x2f/0x290 [ 634.502958][T30500] sysfs_warn_dup+0x8e/0xa0 [ 634.502977][T30500] sysfs_do_create_link_sd+0xc0/0x110 [ 634.502998][T30500] device_add_class_symlinks+0x1cf/0x240 [ 634.503020][T30500] device_add+0x475/0xb50 [ 634.503039][T30500] wiphy_register+0x1ba6/0x28d0 [ 634.503074][T30500] ? __pfx_wiphy_register+0x10/0x10 [ 634.503098][T30500] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 634.503121][T30500] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 634.503142][T30500] ieee80211_register_hw+0x3425/0x4080 [ 634.503172][T30500] ? ieee80211_register_hw+0x1461/0x4080 [ 634.503195][T30500] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 634.503217][T30500] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 634.503245][T30500] ? __hrtimer_setup+0x187/0x210 [ 634.503260][T30500] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 634.503291][T30500] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 634.503326][T30500] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 634.503348][T30500] ? trace_kmalloc+0x1f/0xd0 [ 634.503368][T30500] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 634.503393][T30500] ? kstrndup+0xbf/0x160 [ 634.503416][T30500] hwsim_new_radio_nl+0xea4/0x1b10 [ 634.503436][T30500] ? __pfx___nla_validate_parse+0x10/0x10 [ 634.503470][T30500] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 634.503496][T30500] ? __nla_parse+0x40/0x60 [ 634.503522][T30500] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 634.503548][T30500] genl_family_rcv_msg_doit+0x212/0x300 [ 634.503573][T30500] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 634.503600][T30500] ? bpf_lsm_capable+0x9/0x20 [ 634.503624][T30500] ? security_capable+0x7e/0x2e0 [ 634.503651][T30500] genl_rcv_msg+0x60e/0x790 [ 634.503675][T30500] ? __pfx_genl_rcv_msg+0x10/0x10 [ 634.503694][T30500] ? __kasan_slab_alloc+0x6c/0x80 [ 634.503716][T30500] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 634.503739][T30500] ? __netlink_lookup+0xbd/0x810 [ 634.503755][T30500] ? rcu_is_watching+0x15/0xb0 [ 634.503776][T30500] netlink_rcv_skb+0x208/0x470 [ 634.503803][T30500] ? __pfx_genl_rcv_msg+0x10/0x10 [ 634.503824][T30500] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 634.503855][T30500] ? lock_release+0x4b/0x3e0 [ 634.503881][T30500] ? down_read+0x1ad/0x2e0 [ 634.503900][T30500] genl_rcv+0x28/0x40 [ 634.503918][T30500] netlink_unicast+0x82f/0x9e0 [ 634.503946][T30500] ? __pfx_netlink_unicast+0x10/0x10 [ 634.503969][T30500] ? netlink_sendmsg+0x642/0xb30 [ 634.503984][T30500] ? skb_put+0x11b/0x210 [ 634.504004][T30500] netlink_sendmsg+0x805/0xb30 [ 634.504021][T30500] ? __pfx_netlink_sendmsg+0x10/0x10 [ 634.504038][T30500] ? aa_sock_msg_perm+0xf1/0x1d0 [ 634.504054][T30500] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 634.504074][T30500] ? __pfx_netlink_sendmsg+0x10/0x10 [ 634.504091][T30500] __sock_sendmsg+0x219/0x270 [ 634.504116][T30500] ____sys_sendmsg+0x505/0x830 [ 634.504137][T30500] ? __pfx_____sys_sendmsg+0x10/0x10 [ 634.504161][T30500] ? import_iovec+0x74/0xa0 [ 634.504184][T30500] ___sys_sendmsg+0x21f/0x2a0 [ 634.504206][T30500] ? __pfx____sys_sendmsg+0x10/0x10 [ 634.504229][T30500] ? futex_wake+0x4b2/0x560 [ 634.504266][T30500] ? __fget_files+0x2a/0x420 [ 634.504290][T30500] ? __fget_files+0x3a0/0x420 [ 634.504310][T30500] __x64_sys_sendmsg+0x19b/0x260 [ 634.504329][T30500] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 634.504352][T30500] ? rcu_is_watching+0x15/0xb0 [ 634.504371][T30500] ? rcu_is_watching+0x15/0xb0 [ 634.504388][T30500] do_syscall_64+0xfa/0x3b0 [ 634.504406][T30500] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.504425][T30500] ? clear_bhb_loop+0x60/0xb0 [ 634.504447][T30500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.504465][T30500] RIP: 0033:0x7f9a6f98ebe9 [ 634.504484][T30500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 634.504502][T30500] RSP: 002b:00007f9a70798038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 634.504523][T30500] RAX: ffffffffffffffda RBX: 00007f9a6fbb6090 RCX: 00007f9a6f98ebe9 [ 634.504539][T30500] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000009 [ 634.504552][T30500] RBP: 00007f9a6fa11e19 R08: 0000000000000000 R09: 0000000000000000 [ 634.504563][T30500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 634.504575][T30500] R13: 00007f9a6fbb6128 R14: 00007f9a6fbb6090 R15: 00007fff209044e8 [ 634.504598][T30500] [ 635.316451][T30531] __nla_validate_parse: 7 callbacks suppressed [ 635.316471][T30531] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8555'. [ 635.338880][T30529] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 635.346146][T30529] IPv6: NLM_F_CREATE should be set when creating new route [ 635.376020][T30532] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8556'. [ 635.508714][T30526] lo speed is unknown, defaulting to 1000 [ 635.526755][T30526] lo speed is unknown, defaulting to 1000 [ 635.672285][T30551] sctp: [Deprecated]: syz.3.8560 (pid 30551) Use of struct sctp_assoc_value in delayed_ack socket option. [ 635.672285][T30551] Use struct sctp_sack_info instead [ 635.685409][T30550] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 635.729494][T30551] sysfs: cannot create duplicate filename '/class/ieee80211/žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»–_à›xDä±pj8¼•TTí!' [ 635.773873][T30551] CPU: 0 UID: 0 PID: 30551 Comm: syz.3.8560 Not tainted syzkaller #0 PREEMPT(full) [ 635.773904][T30551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 635.773917][T30551] Call Trace: [ 635.773925][T30551] [ 635.773933][T30551] dump_stack_lvl+0x189/0x250 [ 635.773961][T30551] ? __pfx_dump_stack_lvl+0x10/0x10 [ 635.773983][T30551] ? __pfx__printk+0x10/0x10 [ 635.774006][T30551] ? kernfs_root+0x1c/0x230 [ 635.774029][T30551] ? kernfs_path_from_node+0x2f/0x290 [ 635.774048][T30551] ? kernfs_path_from_node+0x250/0x290 [ 635.774066][T30551] ? kernfs_path_from_node+0x2f/0x290 [ 635.774088][T30551] sysfs_warn_dup+0x8e/0xa0 [ 635.774106][T30551] sysfs_do_create_link_sd+0xc0/0x110 [ 635.774127][T30551] device_add_class_symlinks+0x1cf/0x240 [ 635.774150][T30551] device_add+0x475/0xb50 [ 635.774170][T30551] wiphy_register+0x1ba6/0x28d0 [ 635.774211][T30551] ? __pfx_wiphy_register+0x10/0x10 [ 635.774236][T30551] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 635.774261][T30551] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 635.774284][T30551] ieee80211_register_hw+0x3425/0x4080 [ 635.774313][T30551] ? ieee80211_register_hw+0x1461/0x4080 [ 635.774338][T30551] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 635.774361][T30551] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 635.774390][T30551] ? __hrtimer_setup+0x187/0x210 [ 635.774407][T30551] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 635.774435][T30551] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 635.774474][T30551] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 635.774496][T30551] ? trace_kmalloc+0x1f/0xd0 [ 635.774518][T30551] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 635.774543][T30551] ? kstrndup+0xbf/0x160 [ 635.774566][T30551] hwsim_new_radio_nl+0xea4/0x1b10 [ 635.774591][T30551] ? __pfx___nla_validate_parse+0x10/0x10 [ 635.774624][T30551] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 635.774654][T30551] ? __nla_parse+0x40/0x60 [ 635.774680][T30551] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 635.774708][T30551] genl_family_rcv_msg_doit+0x212/0x300 [ 635.774735][T30551] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 635.774763][T30551] ? bpf_lsm_capable+0x9/0x20 [ 635.774786][T30551] ? security_capable+0x7e/0x2e0 [ 635.774815][T30551] genl_rcv_msg+0x60e/0x790 [ 635.774839][T30551] ? __pfx_genl_rcv_msg+0x10/0x10 [ 635.774858][T30551] ? __kasan_slab_alloc+0x6c/0x80 [ 635.774881][T30551] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 635.774907][T30551] ? __netlink_lookup+0xbd/0x810 [ 635.774924][T30551] ? rcu_is_watching+0x15/0xb0 [ 635.774947][T30551] netlink_rcv_skb+0x208/0x470 [ 635.774979][T30551] ? __pfx_genl_rcv_msg+0x10/0x10 [ 635.775001][T30551] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 635.775034][T30551] ? lock_release+0x4b/0x3e0 [ 635.775061][T30551] ? down_read+0x1ad/0x2e0 [ 635.775080][T30551] genl_rcv+0x28/0x40 [ 635.775099][T30551] netlink_unicast+0x82f/0x9e0 [ 635.775127][T30551] ? __pfx_netlink_unicast+0x10/0x10 [ 635.775151][T30551] ? netlink_sendmsg+0x642/0xb30 [ 635.775166][T30551] ? skb_put+0x11b/0x210 [ 635.775186][T30551] netlink_sendmsg+0x805/0xb30 [ 635.775213][T30551] ? __pfx_netlink_sendmsg+0x10/0x10 [ 635.775232][T30551] ? aa_sock_msg_perm+0xf1/0x1d0 [ 635.775250][T30551] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 635.775270][T30551] ? __pfx_netlink_sendmsg+0x10/0x10 [ 635.775287][T30551] __sock_sendmsg+0x219/0x270 [ 635.775313][T30551] ____sys_sendmsg+0x505/0x830 [ 635.775335][T30551] ? __pfx_____sys_sendmsg+0x10/0x10 [ 635.775359][T30551] ? import_iovec+0x74/0xa0 [ 635.775381][T30551] ___sys_sendmsg+0x21f/0x2a0 [ 635.775401][T30551] ? __pfx____sys_sendmsg+0x10/0x10 [ 635.775424][T30551] ? futex_wake+0x4b2/0x560 [ 635.775459][T30551] ? __fget_files+0x2a/0x420 [ 635.775473][T30551] ? __fget_files+0x3a0/0x420 [ 635.775493][T30551] __x64_sys_sendmsg+0x19b/0x260 [ 635.775514][T30551] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 635.775536][T30551] ? rcu_is_watching+0x15/0xb0 [ 635.775554][T30551] ? rcu_is_watching+0x15/0xb0 [ 635.775571][T30551] do_syscall_64+0xfa/0x3b0 [ 635.775588][T30551] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.775609][T30551] ? clear_bhb_loop+0x60/0xb0 [ 635.775631][T30551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.775649][T30551] RIP: 0033:0x7f9a6f98ebe9 [ 635.775666][T30551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 635.775683][T30551] RSP: 002b:00007f9a70798038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 635.775704][T30551] RAX: ffffffffffffffda RBX: 00007f9a6fbb6090 RCX: 00007f9a6f98ebe9 [ 635.775719][T30551] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000009 [ 635.775732][T30551] RBP: 00007f9a6fa11e19 R08: 0000000000000000 R09: 0000000000000000 [ 635.775743][T30551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 635.775756][T30551] R13: 00007f9a6fbb6128 R14: 00007f9a6fbb6090 R15: 00007fff209044e8 [ 635.775778][T30551] [ 636.273893][T30553] netlink: 14 bytes leftover after parsing attributes in process `syz.5.8562'. [ 636.414231][T30566] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8567'. [ 636.489820][T30573] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8568'. [ 636.633409][T30576] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8569'. [ 636.931932][T30597] sctp: [Deprecated]: syz.5.8575 (pid 30597) Use of struct sctp_assoc_value in delayed_ack socket option. [ 636.931932][T30597] Use struct sctp_sack_info instead [ 636.971250][T30592] sysfs: cannot create duplicate filename '/class/ieee80211/žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»–_à›xDä±pj8¼•TTí!' [ 636.984208][T30592] CPU: 1 UID: 0 PID: 30592 Comm: syz.5.8575 Not tainted syzkaller #0 PREEMPT(full) [ 636.984236][T30592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 636.984249][T30592] Call Trace: [ 636.984257][T30592] [ 636.984265][T30592] dump_stack_lvl+0x189/0x250 [ 636.984293][T30592] ? __pfx_dump_stack_lvl+0x10/0x10 [ 636.984316][T30592] ? __pfx__printk+0x10/0x10 [ 636.984338][T30592] ? kernfs_root+0x1c/0x230 [ 636.984360][T30592] ? kernfs_path_from_node+0x2f/0x290 [ 636.984378][T30592] ? kernfs_path_from_node+0x250/0x290 [ 636.984394][T30592] ? kernfs_path_from_node+0x2f/0x290 [ 636.984414][T30592] sysfs_warn_dup+0x8e/0xa0 [ 636.984429][T30592] sysfs_do_create_link_sd+0xc0/0x110 [ 636.984446][T30592] device_add_class_symlinks+0x1cf/0x240 [ 636.984466][T30592] device_add+0x475/0xb50 [ 636.984484][T30592] wiphy_register+0x1ba6/0x28d0 [ 636.984514][T30592] ? __pfx_wiphy_register+0x10/0x10 [ 636.984535][T30592] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 636.984557][T30592] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 636.984577][T30592] ieee80211_register_hw+0x3425/0x4080 [ 636.984602][T30592] ? ieee80211_register_hw+0x1461/0x4080 [ 636.984624][T30592] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 636.984644][T30592] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 636.984670][T30592] ? __hrtimer_setup+0x187/0x210 [ 636.984686][T30592] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 636.984711][T30592] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 636.984744][T30592] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 636.984763][T30592] ? trace_kmalloc+0x1f/0xd0 [ 636.984782][T30592] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 636.984805][T30592] ? kstrndup+0xbf/0x160 [ 636.984824][T30592] hwsim_new_radio_nl+0xea4/0x1b10 [ 636.984846][T30592] ? __pfx___nla_validate_parse+0x10/0x10 [ 636.984879][T30592] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 636.984908][T30592] ? __nla_parse+0x40/0x60 [ 636.984935][T30592] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 636.984962][T30592] genl_family_rcv_msg_doit+0x212/0x300 [ 636.984986][T30592] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 636.985013][T30592] ? bpf_lsm_capable+0x9/0x20 [ 636.985045][T30592] ? security_capable+0x7e/0x2e0 [ 636.985070][T30592] genl_rcv_msg+0x60e/0x790 [ 636.985092][T30592] ? __pfx_genl_rcv_msg+0x10/0x10 [ 636.985108][T30592] ? __kasan_slab_alloc+0x6c/0x80 [ 636.985127][T30592] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 636.985146][T30592] ? __netlink_lookup+0xbd/0x810 [ 636.985160][T30592] ? rcu_is_watching+0x15/0xb0 [ 636.985179][T30592] netlink_rcv_skb+0x208/0x470 [ 636.985201][T30592] ? __pfx_genl_rcv_msg+0x10/0x10 [ 636.985220][T30592] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 636.985246][T30592] ? lock_release+0x4b/0x3e0 [ 636.985269][T30592] ? down_read+0x1ad/0x2e0 [ 636.985285][T30592] genl_rcv+0x28/0x40 [ 636.985300][T30592] netlink_unicast+0x82f/0x9e0 [ 636.985324][T30592] ? __pfx_netlink_unicast+0x10/0x10 [ 636.985347][T30592] ? netlink_sendmsg+0x642/0xb30 [ 636.985361][T30592] ? skb_put+0x11b/0x210 [ 636.985378][T30592] netlink_sendmsg+0x805/0xb30 [ 636.985397][T30592] ? __pfx_netlink_sendmsg+0x10/0x10 [ 636.985412][T30592] ? futex_unqueue+0x22/0x240 [ 636.985430][T30592] ? aa_sock_msg_perm+0xf1/0x1d0 [ 636.985447][T30592] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 636.985465][T30592] ? __pfx_netlink_sendmsg+0x10/0x10 [ 636.985481][T30592] __sock_sendmsg+0x219/0x270 [ 636.985504][T30592] ____sys_sendmsg+0x505/0x830 [ 636.985527][T30592] ? __pfx_____sys_sendmsg+0x10/0x10 [ 636.985548][T30592] ? import_iovec+0x74/0xa0 [ 636.985568][T30592] ___sys_sendmsg+0x21f/0x2a0 [ 636.985586][T30592] ? __pfx____sys_sendmsg+0x10/0x10 [ 636.985606][T30592] ? futex_wait+0x285/0x360 [ 636.985639][T30592] ? __fget_files+0x2a/0x420 [ 636.985655][T30592] ? __fget_files+0x3a0/0x420 [ 636.985673][T30592] __x64_sys_sendmsg+0x19b/0x260 [ 636.985692][T30592] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 636.985714][T30592] ? rcu_is_watching+0x15/0xb0 [ 636.985731][T30592] ? rcu_is_watching+0x15/0xb0 [ 636.985749][T30592] do_syscall_64+0xfa/0x3b0 [ 636.985766][T30592] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.985784][T30592] ? clear_bhb_loop+0x60/0xb0 [ 636.985803][T30592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.985820][T30592] RIP: 0033:0x7f73f758ebe9 [ 636.985836][T30592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 636.985852][T30592] RSP: 002b:00007f73f83f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 636.985871][T30592] RAX: ffffffffffffffda RBX: 00007f73f77b5fa0 RCX: 00007f73f758ebe9 [ 636.985886][T30592] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000009 [ 636.985898][T30592] RBP: 00007f73f7611e19 R08: 0000000000000000 R09: 0000000000000000 [ 636.985910][T30592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 636.985922][T30592] R13: 00007f73f77b6038 R14: 00007f73f77b5fa0 R15: 00007fffd47c2308 [ 636.985944][T30592] [ 637.497970][T30601] netlink: 530 bytes leftover after parsing attributes in process `syz.4.8578'. [ 637.608844][T30617] netlink: 14 bytes leftover after parsing attributes in process `syz.3.8581'. [ 637.622141][T30618] netlink: 14 bytes leftover after parsing attributes in process `syz.5.8582'. [ 637.729419][T30624] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8584'. [ 637.744412][T30625] sch_fq: defrate 0 ignored. [ 637.825488][T30632] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 637.833146][T30632] IPv6: NLM_F_CREATE should be set when creating new route [ 637.840382][T30632] IPv6: NLM_F_CREATE should be set when creating new route [ 637.847826][T30632] IPv6: NLM_F_CREATE should be set when creating new route [ 637.995657][T30639] netlink: 'syz.3.8592': attribute type 8 has an invalid length. [ 638.379257][T30677] smc: net device bond0 applied user defined pnetid SYZ2 [ 638.392955][T30677] smc: net device bond0 erased user defined pnetid SYZ2 [ 638.912671][T30709] ! (unregistering): left allmulticast mode [ 638.981468][T30720] smc: net device bond0 applied user defined pnetid SYZ2 [ 639.001244][T30720] smc: net device bond0 erased user defined pnetid SYZ2 [ 639.087712][T30728] netlink: 'syz.3.8628': attribute type 13 has an invalid length. [ 639.102248][T30728] netlink: 'syz.3.8628': attribute type 17 has an invalid length. [ 639.129498][T30728] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 639.183140][T30733] lo speed is unknown, defaulting to 1000 [ 639.196327][T30733] lo speed is unknown, defaulting to 1000 [ 639.218142][T30728] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 639.254709][T30728] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 639.263152][T30741] lo speed is unknown, defaulting to 1000 [ 639.383221][T30741] lo speed is unknown, defaulting to 1000 [ 640.448368][T30786] __nla_validate_parse: 15 callbacks suppressed [ 640.448387][T30786] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8660'. [ 640.681563][T30796] lo speed is unknown, defaulting to 1000 [ 640.688981][T30796] lo speed is unknown, defaulting to 1000 [ 640.806637][T30799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8653'. [ 640.823315][T30799] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 641.138484][T30813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8656'. [ 641.153889][T30813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8656'. [ 641.342755][T30826] netlink: 'syz.2.8661': attribute type 13 has an invalid length. [ 641.372940][T30826] netlink: 'syz.2.8661': attribute type 17 has an invalid length. [ 641.394071][T30828] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8662'. [ 641.406874][T30826] ------------[ cut here ]------------ [ 641.412417][T30826] WARNING: CPU: 1 PID: 30826 at net/ipv6/route.c:4857 rt6_multipath_rebalance+0x455/0x8b0 [ 641.422576][T30826] Modules linked in: [ 641.426489][T30826] CPU: 1 UID: 0 PID: 30826 Comm: syz.2.8661 Not tainted syzkaller #0 PREEMPT(full) [ 641.436011][T30826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 641.436312][T30828] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8662'. [ 641.446242][T30826] RIP: 0010:rt6_multipath_rebalance+0x455/0x8b0 [ 641.446282][T30826] Code: ff ff 44 89 e1 80 e1 07 38 c1 0f 8c 85 fe ff ff 4c 89 e7 e8 cd 20 f2 f7 e9 78 fe ff ff e8 83 b5 8e f7 eb 05 e8 7c b5 8e f7 90 <0f> 0b 90 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d e9 55 c5 4b 01 [ 641.446299][T30826] RSP: 0018:ffffc9000b6ce620 EFLAGS: 00010283 [ 641.446317][T30826] RAX: ffffffff8a30f5ad RBX: dffffc0000000000 RCX: 0000000000080000 [ 641.446333][T30826] RDX: ffffc9000e468000 RSI: 0000000000010f88 RDI: 0000000000010f89 [ 641.446348][T30826] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 641.446369][T30826] R10: dffffc0000000000 R11: fffff520016d9cbc R12: ffff88805d55ecde [ 641.446385][T30826] R13: ffff88805d55ec90 R14: 0000000000000000 R15: 1ffff1100baabd92 [ 641.446400][T30826] FS: 00007f19f163b6c0(0000) GS:ffff888125d18000(0000) knlGS:0000000000000000 [ 641.446419][T30826] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 641.446433][T30826] CR2: 000055558b065808 CR3: 0000000082302000 CR4: 00000000003526f0 [ 641.446450][T30826] Call Trace: [ 641.446461][T30826] [ 641.446475][T30826] fib6_ifup+0x14a/0x180 [ 641.446501][T30826] ? __pfx_fib6_ifup+0x10/0x10 [ 641.446525][T30826] fib6_clean_node+0x24d/0x590 [ 641.446552][T30826] ? __pfx_fib6_clean_node+0x10/0x10 [ 641.446576][T30826] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 641.446604][T30826] ? rcu_is_watching+0x15/0xb0 [ 641.446621][T30826] fib6_walk_continue+0x67b/0x910 [ 641.446653][T30826] fib6_walk+0x149/0x290 [ 641.446677][T30826] __fib6_clean_all+0x234/0x380 [ 641.446699][T30826] ? __fib6_clean_all+0x9b/0x380 [ 641.446720][T30826] ? __pfx_fib6_ifup+0x10/0x10 [ 641.446743][T30826] ? __pfx___fib6_clean_all+0x10/0x10 [ 641.446768][T30826] ? __pfx_fib6_clean_node+0x10/0x10 [ 641.446791][T30826] ? __pfx_fib6_ifup+0x10/0x10 [ 641.446814][T30826] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 641.446847][T30826] rt6_sync_up+0x128/0x160 [ 641.446871][T30826] ? __pfx_rt6_sync_up+0x10/0x10 [ 641.446896][T30826] ? ipv6_mc_up+0x3da/0x580 [ 641.446920][T30826] addrconf_notify+0xd55/0x1010 [ 641.446948][T30826] notifier_call_chain+0x1b3/0x3e0 [ 641.446972][T30826] netif_state_change+0x284/0x3a0 [ 641.446996][T30826] ? __pfx_console_unlock+0x10/0x10 [ 641.447014][T30826] ? __pfx_netif_state_change+0x10/0x10 [ 641.447039][T30826] ? netif_change_flags+0xe8/0x1a0 [ 641.613262][T30838] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 641.618238][T30826] do_setlink+0x35de/0x41c0 [ 641.618272][T30826] ? __kernel_text_address+0xd/0x40 [ 641.633818][T30838] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 641.634195][T30826] ? __pfx_do_setlink+0x10/0x10 [ 641.703003][T30840] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8663'. [ 641.709095][T30826] ? _printk+0xcf/0x120 [ 641.727081][T30826] ? __pfx____ratelimit+0x10/0x10 [ 641.732195][T30826] ? __mutex_trylock_common+0x153/0x260 [ 641.737768][T30826] ? __pfx___mutex_trylock_common+0x10/0x10 [ 641.743725][T30826] ? rcu_is_watching+0x15/0xb0 [ 641.748598][T30826] ? trace_contention_end+0x39/0x120 [ 641.753945][T30826] ? __mutex_lock+0x335/0x1350 [ 641.758755][T30826] ? rtnl_newlink+0x8db/0x1c70 [ 641.763600][T30826] ? __pfx___mutex_lock+0x10/0x10 [ 641.768745][T30826] ? ns_capable+0x8a/0xf0 [ 641.773226][T30826] ? rtnl_link_get_net_capable+0x16a/0x350 [ 641.779089][T30826] rtnl_newlink+0x149f/0x1c70 [ 641.783891][T30826] ? __pfx_rtnl_newlink+0x10/0x10 [ 641.788953][T30826] ? __pfx___schedule+0x10/0x10 [ 641.793883][T30826] ? preempt_schedule+0xae/0xc0 [ 641.798766][T30826] ? __dev_queue_xmit+0x27b/0x3b50 [ 641.804037][T30826] ? preempt_schedule_common+0x83/0xd0 [ 641.809641][T30826] ? preempt_schedule+0xae/0xc0 [ 641.814672][T30826] ? __pfx_preempt_schedule+0x10/0x10 [ 641.820240][T30826] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 641.826370][T30826] ? preempt_schedule_thunk+0x16/0x30 [ 641.831879][T30826] ? __local_bh_enable_ip+0x12d/0x1c0 [ 641.837263][T30826] ? __local_bh_enable_ip+0x13e/0x1c0 [ 641.842690][T30826] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 641.848511][T30826] ? __dev_queue_xmit+0x27b/0x3b50 [ 641.853681][T30826] ? lock_release+0x4b/0x3e0 [ 641.858287][T30826] ? __dev_queue_xmit+0x27b/0x3b50 [ 641.863533][T30826] ? __dev_queue_xmit+0x27b/0x3b50 [ 641.868672][T30826] ? __dev_queue_xmit+0x1d79/0x3b50 [ 641.874037][T30826] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 641.879602][T30826] ? rcu_is_watching+0x15/0xb0 [ 641.884440][T30826] ? lock_release+0x4b/0x3e0 [ 641.889057][T30826] ? bpf_lsm_capable+0x9/0x20 [ 641.893956][T30826] ? security_capable+0x7e/0x2e0 [ 641.898958][T30826] ? __pfx_rtnl_newlink+0x10/0x10 [ 641.904067][T30826] rtnetlink_rcv_msg+0x7cc/0xb70 [ 641.909122][T30826] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 641.914297][T30826] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 641.919795][T30826] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 641.926889][T30826] netlink_rcv_skb+0x208/0x470 [ 641.931721][T30826] ? rcu_is_watching+0x15/0xb0 [ 641.936597][T30826] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 641.942217][T30826] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 641.947543][T30826] netlink_unicast+0x82f/0x9e0 [ 641.952455][T30826] ? __pfx_netlink_unicast+0x10/0x10 [ 641.957779][T30826] ? netlink_sendmsg+0x642/0xb30 [ 641.962766][T30826] ? skb_put+0x11b/0x210 [ 641.967028][T30826] netlink_sendmsg+0x805/0xb30 [ 641.971846][T30826] ? __pfx_netlink_sendmsg+0x10/0x10 [ 641.977149][T30826] ? futex_unqueue+0x22/0x240 [ 641.982135][T30826] ? aa_sock_msg_perm+0xf1/0x1d0 [ 641.987097][T30826] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 641.992492][T30826] ? __pfx_netlink_sendmsg+0x10/0x10 [ 641.997784][T30826] __sock_sendmsg+0x219/0x270 [ 642.002600][T30826] ____sys_sendmsg+0x505/0x830 [ 642.007379][T30826] ? __pfx_____sys_sendmsg+0x10/0x10 [ 642.012777][T30826] ? import_iovec+0x74/0xa0 [ 642.017286][T30826] ___sys_sendmsg+0x21f/0x2a0 [ 642.022010][T30826] ? __pfx____sys_sendmsg+0x10/0x10 [ 642.027233][T30826] ? futex_wait+0x285/0x360 [ 642.031825][T30826] ? __fget_files+0x2a/0x420 [ 642.036587][T30826] ? __fget_files+0x3a0/0x420 [ 642.041352][T30826] __x64_sys_sendmsg+0x19b/0x260 [ 642.046394][T30826] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 642.051882][T30826] ? rcu_is_watching+0x15/0xb0 [ 642.056642][T30826] ? rcu_is_watching+0x15/0xb0 [ 642.061450][T30826] do_syscall_64+0xfa/0x3b0 [ 642.065985][T30826] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.072093][T30826] ? clear_bhb_loop+0x60/0xb0 [ 642.076854][T30826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.082835][T30826] RIP: 0033:0x7f19f078ebe9 [ 642.087245][T30826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 642.107226][T30826] RSP: 002b:00007f19f163b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 642.115706][T30826] RAX: ffffffffffffffda RBX: 00007f19f09b6090 RCX: 00007f19f078ebe9 [ 642.123735][T30826] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000007 [ 642.131818][T30826] RBP: 00007f19f0811e19 R08: 0000000000000000 R09: 0000000000000000 [ 642.140043][T30826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 642.148047][T30826] R13: 00007f19f09b6128 R14: 00007f19f09b6090 R15: 00007ffe99ba9a58 [ 642.156134][T30826] [ 642.159150][T30826] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 642.166509][T30826] CPU: 1 UID: 0 PID: 30826 Comm: syz.2.8661 Not tainted syzkaller #0 PREEMPT(full) [ 642.175958][T30826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 642.186037][T30826] Call Trace: [ 642.189317][T30826] [ 642.192240][T30826] dump_stack_lvl+0x99/0x250 [ 642.196961][T30826] ? __asan_memcpy+0x40/0x70 [ 642.201541][T30826] ? __pfx_dump_stack_lvl+0x10/0x10 [ 642.206740][T30826] ? __pfx__printk+0x10/0x10 [ 642.211470][T30826] vpanic+0x281/0x750 [ 642.215495][T30826] ? __pfx__printk+0x10/0x10 [ 642.220198][T30826] ? __pfx_vpanic+0x10/0x10 [ 642.224785][T30826] ? is_bpf_text_address+0x26/0x2b0 [ 642.230068][T30826] panic+0xb9/0xc0 [ 642.233805][T30826] ? __pfx_panic+0x10/0x10 [ 642.238317][T30826] __warn+0x31b/0x4b0 [ 642.242368][T30826] ? rt6_multipath_rebalance+0x455/0x8b0 [ 642.248262][T30826] ? rt6_multipath_rebalance+0x455/0x8b0 [ 642.254027][T30826] report_bug+0x2be/0x4f0 [ 642.258445][T30826] ? rt6_multipath_rebalance+0x455/0x8b0 [ 642.264272][T30826] ? rt6_multipath_rebalance+0x455/0x8b0 [ 642.269905][T30826] ? rt6_multipath_rebalance+0x457/0x8b0 [ 642.275622][T30826] handle_bug+0x84/0x160 [ 642.279858][T30826] exc_invalid_op+0x1a/0x50 [ 642.284457][T30826] asm_exc_invalid_op+0x1a/0x20 [ 642.289363][T30826] RIP: 0010:rt6_multipath_rebalance+0x455/0x8b0 [ 642.295767][T30826] Code: ff ff 44 89 e1 80 e1 07 38 c1 0f 8c 85 fe ff ff 4c 89 e7 e8 cd 20 f2 f7 e9 78 fe ff ff e8 83 b5 8e f7 eb 05 e8 7c b5 8e f7 90 <0f> 0b 90 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d e9 55 c5 4b 01 [ 642.315712][T30826] RSP: 0018:ffffc9000b6ce620 EFLAGS: 00010283 [ 642.321777][T30826] RAX: ffffffff8a30f5ad RBX: dffffc0000000000 RCX: 0000000000080000 [ 642.329740][T30826] RDX: ffffc9000e468000 RSI: 0000000000010f88 RDI: 0000000000010f89 [ 642.337706][T30826] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 642.345765][T30826] R10: dffffc0000000000 R11: fffff520016d9cbc R12: ffff88805d55ecde [ 642.353750][T30826] R13: ffff88805d55ec90 R14: 0000000000000000 R15: 1ffff1100baabd92 [ 642.361723][T30826] ? rt6_multipath_rebalance+0x44d/0x8b0 [ 642.367401][T30826] fib6_ifup+0x14a/0x180 [ 642.371656][T30826] ? __pfx_fib6_ifup+0x10/0x10 [ 642.376439][T30826] fib6_clean_node+0x24d/0x590 [ 642.381371][T30826] ? __pfx_fib6_clean_node+0x10/0x10 [ 642.386668][T30826] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 642.392579][T30826] ? rcu_is_watching+0x15/0xb0 [ 642.397464][T30826] fib6_walk_continue+0x67b/0x910 [ 642.402496][T30826] fib6_walk+0x149/0x290 [ 642.406732][T30826] __fib6_clean_all+0x234/0x380 [ 642.411662][T30826] ? __fib6_clean_all+0x9b/0x380 [ 642.416593][T30826] ? __pfx_fib6_ifup+0x10/0x10 [ 642.421356][T30826] ? __pfx___fib6_clean_all+0x10/0x10 [ 642.426719][T30826] ? __pfx_fib6_clean_node+0x10/0x10 [ 642.432083][T30826] ? __pfx_fib6_ifup+0x10/0x10 [ 642.436839][T30826] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 642.442467][T30826] rt6_sync_up+0x128/0x160 [ 642.446873][T30826] ? __pfx_rt6_sync_up+0x10/0x10 [ 642.451799][T30826] ? ipv6_mc_up+0x3da/0x580 [ 642.456294][T30826] addrconf_notify+0xd55/0x1010 [ 642.461322][T30826] notifier_call_chain+0x1b3/0x3e0 [ 642.466505][T30826] netif_state_change+0x284/0x3a0 [ 642.471609][T30826] ? __pfx_console_unlock+0x10/0x10 [ 642.476889][T30826] ? __pfx_netif_state_change+0x10/0x10 [ 642.482426][T30826] ? netif_change_flags+0xe8/0x1a0 [ 642.487525][T30826] do_setlink+0x35de/0x41c0 [ 642.492015][T30826] ? __kernel_text_address+0xd/0x40 [ 642.497209][T30826] ? __pfx_do_setlink+0x10/0x10 [ 642.502046][T30826] ? _printk+0xcf/0x120 [ 642.506205][T30826] ? __pfx____ratelimit+0x10/0x10 [ 642.511272][T30826] ? __mutex_trylock_common+0x153/0x260 [ 642.516993][T30826] ? __pfx___mutex_trylock_common+0x10/0x10 [ 642.522988][T30826] ? rcu_is_watching+0x15/0xb0 [ 642.527742][T30826] ? trace_contention_end+0x39/0x120 [ 642.533102][T30826] ? __mutex_lock+0x335/0x1350 [ 642.537965][T30826] ? rtnl_newlink+0x8db/0x1c70 [ 642.542745][T30826] ? __pfx___mutex_lock+0x10/0x10 [ 642.547792][T30826] ? ns_capable+0x8a/0xf0 [ 642.552200][T30826] ? rtnl_link_get_net_capable+0x16a/0x350 [ 642.558025][T30826] rtnl_newlink+0x149f/0x1c70 [ 642.562705][T30826] ? __pfx_rtnl_newlink+0x10/0x10 [ 642.567728][T30826] ? __pfx___schedule+0x10/0x10 [ 642.573046][T30826] ? preempt_schedule+0xae/0xc0 [ 642.577900][T30826] ? __dev_queue_xmit+0x27b/0x3b50 [ 642.583088][T30826] ? preempt_schedule_common+0x83/0xd0 [ 642.588738][T30826] ? preempt_schedule+0xae/0xc0 [ 642.593925][T30826] ? __pfx_preempt_schedule+0x10/0x10 [ 642.599285][T30826] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 642.605375][T30826] ? preempt_schedule_thunk+0x16/0x30 [ 642.610792][T30826] ? __local_bh_enable_ip+0x12d/0x1c0 [ 642.616258][T30826] ? __local_bh_enable_ip+0x13e/0x1c0 [ 642.621627][T30826] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 642.627333][T30826] ? __dev_queue_xmit+0x27b/0x3b50 [ 642.632433][T30826] ? lock_release+0x4b/0x3e0 [ 642.637020][T30826] ? __dev_queue_xmit+0x27b/0x3b50 [ 642.642115][T30826] ? __dev_queue_xmit+0x27b/0x3b50 [ 642.647319][T30826] ? __dev_queue_xmit+0x1d79/0x3b50 [ 642.652510][T30826] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 642.657699][T30826] ? rcu_is_watching+0x15/0xb0 [ 642.662451][T30826] ? lock_release+0x4b/0x3e0 [ 642.667216][T30826] ? bpf_lsm_capable+0x9/0x20 [ 642.671888][T30826] ? security_capable+0x7e/0x2e0 [ 642.676823][T30826] ? __pfx_rtnl_newlink+0x10/0x10 [ 642.681850][T30826] rtnetlink_rcv_msg+0x7cc/0xb70 [ 642.686867][T30826] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 642.691971][T30826] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 642.697431][T30826] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 642.704434][T30826] netlink_rcv_skb+0x208/0x470 [ 642.709191][T30826] ? rcu_is_watching+0x15/0xb0 [ 642.713957][T30826] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 642.719452][T30826] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 642.724740][T30826] netlink_unicast+0x82f/0x9e0 [ 642.729499][T30826] ? __pfx_netlink_unicast+0x10/0x10 [ 642.734771][T30826] ? netlink_sendmsg+0x642/0xb30 [ 642.739693][T30826] ? skb_put+0x11b/0x210 [ 642.743921][T30826] netlink_sendmsg+0x805/0xb30 [ 642.748672][T30826] ? __pfx_netlink_sendmsg+0x10/0x10 [ 642.753941][T30826] ? futex_unqueue+0x22/0x240 [ 642.758606][T30826] ? aa_sock_msg_perm+0xf1/0x1d0 [ 642.763540][T30826] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 642.768821][T30826] ? __pfx_netlink_sendmsg+0x10/0x10 [ 642.774264][T30826] __sock_sendmsg+0x219/0x270 [ 642.778939][T30826] ____sys_sendmsg+0x505/0x830 [ 642.783782][T30826] ? __pfx_____sys_sendmsg+0x10/0x10 [ 642.789054][T30826] ? import_iovec+0x74/0xa0 [ 642.793544][T30826] ___sys_sendmsg+0x21f/0x2a0 [ 642.798218][T30826] ? __pfx____sys_sendmsg+0x10/0x10 [ 642.803503][T30826] ? futex_wait+0x285/0x360 [ 642.808098][T30826] ? __fget_files+0x2a/0x420 [ 642.812672][T30826] ? __fget_files+0x3a0/0x420 [ 642.817368][T30826] __x64_sys_sendmsg+0x19b/0x260 [ 642.822299][T30826] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 642.827765][T30826] ? rcu_is_watching+0x15/0xb0 [ 642.832516][T30826] ? rcu_is_watching+0x15/0xb0 [ 642.837266][T30826] do_syscall_64+0xfa/0x3b0 [ 642.841772][T30826] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.847824][T30826] ? clear_bhb_loop+0x60/0xb0 [ 642.852610][T30826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.858492][T30826] RIP: 0033:0x7f19f078ebe9 [ 642.862895][T30826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 642.882661][T30826] RSP: 002b:00007f19f163b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 642.891151][T30826] RAX: ffffffffffffffda RBX: 00007f19f09b6090 RCX: 00007f19f078ebe9 [ 642.899113][T30826] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000007 [ 642.907068][T30826] RBP: 00007f19f0811e19 R08: 0000000000000000 R09: 0000000000000000 [ 642.915028][T30826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 642.922991][T30826] R13: 00007f19f09b6128 R14: 00007f19f09b6090 R15: 00007ffe99ba9a58 [ 642.930968][T30826] [ 642.934232][T30826] Kernel Offset: disabled [ 642.938541][T30826] Rebooting in 86400 seconds..