last executing test programs: 3.044606392s ago: executing program 2 (id=2479): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}}, 0x24}}, 0x24000000) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b2b, &(0x7f0000000080)={'wlan1\x00', @random="02251f00004a"}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x5}) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x2, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x440, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) 2.718409967s ago: executing program 4 (id=2486): r0 = socket$nl_generic(0x10, 0x3, 0x10) getpid() sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x20, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="bc1400002e00090027bd70000000400004000000a51411804b8a9f750c996372b5b14b3a91a3ff88cca5dd0d428ddfdd02a37c0b93bcdade6c5307b79c2d122f"], 0x14bc}, 0x1, 0x0, 0x0, 0x42804}, 0x10) 1.980063381s ago: executing program 4 (id=2492): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001e0001000000000000000000020000000100000700000000080001000000000008000f"], 0x2c}, 0x1, 0x0, 0x0, 0x4008012}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r5, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40094) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r5, 0x400, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4011) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r9, 0x40305829, &(0x7f0000000240)={0x1100, 0x0, 0x4, 0x7fffffffffffffff}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x1113, r10, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)='%pK \x00'}, 0x20) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)={0x1b, 0x0, 0x0, 0xfffffffb, 0x0, 0x1, 0x401, '\x00', r7, 0xffffffffffffffff, 0x3, 0x2, 0x1}, 0x50) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x48) r14 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0xf, 0x4, 0x8, 0xb}, 0x48) r15 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r14, &(0x7f0000000200), &(0x7f0000000140)=@udp6=r15, 0x3}, 0x20) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r13, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x9, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0xf}, [@exit, @tail_call]}, &(0x7f0000000400)='GPL\x00', 0x9, 0xd0, &(0x7f0000000540)=""/208, 0x1f00, 0xc, '\x00', r7, 0x25, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000640)={0x5, 0x2, 0x8}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[r10, r11, r12, r13, 0x1], &(0x7f0000000800)=[{0x1, 0x2, 0x4, 0x8}]}, 0x94) getsockname$packet(r8, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan0\x00'}) 1.936444379s ago: executing program 3 (id=2493): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xfc}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x60}}, 0x0) (async) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f00000000c0), 0x4) (async, rerun: 64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r1, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a1400000000000700000120000000020a01010000000000000000000000020900010073797a310000000014000000160a01080000000000000000a0000007140000000b0a050000000000000000000000000814000000080a0500000000000000000003000001140000001100010000000000000000000a00000a"], 0x98}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.936149957s ago: executing program 2 (id=2494): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x6, 0xfdcd, 0x2f, 0x40}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x28, 0x2c, 0x61, 0x0, 0x40, 0x11, 0x0, @private=0xa010104, @broadcast}, {0x4e26, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x7ff, 0xe92}}}}, 0x3a) 1.935515479s ago: executing program 0 (id=2495): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x11}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0xe}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x24040001}, 0x810) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x81080080}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x48901}, 0x800) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r3, 0x200, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2000000}, 0x4004008) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r4, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r5, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x80) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_DISASSOCIATE_REQ(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x48, r3, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_REASON={0x5, 0x12, 0x7e}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x80) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'ip6gre0\x00', 0x0, 0x4, 0x4, 0x27, 0x9, 0x2b, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xf880, 0x9, 0x7, 0xc3c}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)=@setneightbl={0xa0, 0x43, 0x100, 0x70bd28, 0x25dfdbfc, {0x1c}, [@NDTA_THRESH3={0x8, 0x4, 0x5}, @NDTA_PARMS={0x1c, 0x6, 0x0, 0x1, [@NDTPA_RETRANS_TIME={0xc, 0x5, 0x6}, @NDTPA_LOCKTIME={0xc, 0xf, 0x9}]}, @NDTA_THRESH1={0x8}, @NDTA_THRESH2={0x8, 0x3, 0x24b}, @NDTA_GC_INTERVAL={0xc, 0x8, 0x2}, @NDTA_NAME={0x5, 0x1, '\x00'}, @NDTA_PARMS={0x44, 0x6, 0x0, 0x1, [@NDTPA_RETRANS_TIME={0xc, 0x5, 0x81}, @NDTPA_IFINDEX={0x8}, @NDTPA_IFINDEX={0x8, 0x1, r7}, @NDTPA_RETRANS_TIME={0xc, 0x5, 0x5}, @NDTPA_QUEUE_LEN={0x8, 0x8, 0x717}, @NDTPA_MCAST_PROBES={0x8, 0xb, 0x2}, @NDTPA_PROXY_QLEN={0x8, 0xe, 0x1}]}]}, 0xa0}}, 0x4000804) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r8, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2004000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x4) r9 = syz_genetlink_get_family_id$nfc(&(0x7f00000009c0), r0) sendmsg$NFC_CMD_ENABLE_SE(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x2c, r9, 0x614, 0x70bd25, 0x25dfdbfd, {}, [@NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x98ae470e99bcd058}, 0x0) r10 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$inet_pktinfo(r10, 0x0, 0x8, &(0x7f0000000ac0)={0x0, @broadcast, @private}, &(0x7f0000000b00)=0xc) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b80), r4) sendmsg$ETHTOOL_MSG_RINGS_SET(r4, &(0x7f0000000c80)={&(0x7f0000000b40), 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x60, r12, 0x2, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x9}, @ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x5}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0xff}, @ETHTOOL_A_RINGS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x40048c0) r13 = bpf$ITER_CREATE(0x21, &(0x7f0000000cc0), 0x8) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r13, 0x89fa, &(0x7f0000000d40)={'sit0\x00', &(0x7f0000000d00)={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, 0x16, 0x1e}}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000d80)) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f0000000f80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x2000020}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e00)={0x114, 0x1, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x3006}, @CTA_NAT_DST={0x80, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @empty}, @CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @private=0xa010102}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}, @CTA_NAT_V4_MINIP={0x8, 0x1, @broadcast}, @CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2406}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xc9}, @CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x8}]}, @CTA_FILTER={0x1c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x19}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x88}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x2d1}]}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x23a96b82}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5489}]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'snmp_trap\x00'}}]}, 0x114}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) ioctl$IOCTL_GET_NCIDEV_IDX(r13, 0x0, &(0x7f0000001000)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r13, 0x0, &(0x7f0000001040)=0x0) sendmsg$NFC_CMD_LLC_SDREQ(r0, &(0x7f0000001100)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x2c, r9, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x2c}}, 0x28005) 1.842871957s ago: executing program 4 (id=2496): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfd, 0x2ffffffff}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x54, 0x2c, 0x10, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0xfff1, 0x1}, {0x6}, {0x8, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'team_slave_0\x00'}, @TCA_U32_HASH={0x8, 0x2, 0x1}, @TCA_U32_FLAGS={0x8, 0xb, 0x3}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x2004c800}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x8b079ce6b107b09a, 0x0) (async) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000000000)="f383db70474d98433cec6bb1baee54df2edfcf06e062dbf4fb9ae7270b28d11df15e6fb63b000a4b55708ed362ad76851cd4bb51c69d09a903c734da95fc35e9da843bea9ccb2d27fcff5aadc68861cede0a90299532f8e3ecd548f2e5b14021d046c6708852122f2d28c747213a54a04bb5315a7bdcca015d3ab681b44d50c8d067735b4cfe7bfa3e249700dd0e287441c443efacd1069fc83044c9a0c9089a50f5c9", 0xa3}, {&(0x7f00000000c0)="b34fc1", 0x3}, {&(0x7f0000000100)="01393748873d5f7c576527276bf8df425c4281f6a09c308b4f3de6aaf17ca537f56c481c08f01b1db159b10244cbe80e7376c70555de7681d6d1d7921e320bc7006cac60f6c1e4d4d179e8f708514710444fd3e16732db55f55a34e0019f8c034d294289a734e0f200f8ba713699a46706e5a301215526a6a3a06cd32c64919d5e6b96a5e83627947da6ffdb382f46b3138adcd4992233d024fb597a17", 0x9d}, {&(0x7f00000001c0)="30960e58ddeeb74620e8e84d2a8604424369a405ee1ad537c357b39d1d5a22a88ff5117d4fd018a09b86b583ce2b03209469f8d52cb2e74f2a8ba8e5fe5da59c72", 0x41}, {&(0x7f0000000240)="0dce29a53aa570606b2abd3a3f65785eaa1ad9a6cccd64ffa44ae3cad0d8ff08fe3f1311bc739732d629ac2dbdeee0f9c7769cf43fa95d52ed14910818a6fb8662d8aed3e2f6e16eeb2986105113a6d093f00070eb6d9fe69949116be5ca0fa151a3c2f92f5d360fde938d8c70d22cf5a33de72642d39c0a43462fa87115f39874a6d1a87beccd343d79e80f10b5a1f1edf63486bab71e3d40a2", 0x9a}, {&(0x7f0000000980)="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", 0x1000}, {&(0x7f0000001980)}, {&(0x7f00000019c0)="7f0fe5c061013422ff80b5eb4a8d8bc942b6c8b2ffd1ae18114cd4af75280d4ee5d64c43d13d420c24bb08295c8887ce7ea378e96bce30991de323c7d2c84889d33661bf09b2368de02855617904bd5ec8deebe053955d072475059844b35341ae042a8e44b09d96e38ce6cbf040f8e1b854e35f84629de42ef7", 0x7a}], 0x8}, 0x4044850) 1.819828813s ago: executing program 0 (id=2497): r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, 0x0, 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)}, 0x4048081) 1.727667061s ago: executing program 0 (id=2498): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r0) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}, 0xac}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000480)=""/92, 0x5c}, {&(0x7f00000018c0)=""/4108, 0x100c}, {&(0x7f0000001680)=""/109, 0x6d}, {&(0x7f0000001740)=""/72, 0x48}, {&(0x7f00000005c0)=""/61, 0x3d}], 0x5}, 0x7}, {{0x0, 0x0, 0x0}, 0xd3a7}, {{0x0, 0x4000, 0x0}, 0x80000}, {{0x0, 0x0, 0x0}, 0x8000005}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x10001}, {{0x0, 0x0, 0x0}, 0xa9e5}], 0x9, 0x2000, 0x0) 1.721189817s ago: executing program 3 (id=2499): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x20, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="bc1400002e00090027bd700000e7030004000000a51411804b8a9f750c996372b5b14b3a91a3ff88cca5dd0d428ddfdd02a37c0b93bcdade6c5307b79c2d122f"], 0x14bc}, 0x1, 0x0, 0x0, 0x42804}, 0x10) 1.705565423s ago: executing program 1 (id=2500): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) socket(0x400000000010, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="6c000000000101040000000000000000020000002c0001801400018008000100e000000108000200ac1414000c00028005000100000000020000034000040000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000002"], 0x6c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x6c, 0x0, 0x1, 0x401, 0x84, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x6c}}, 0x0) 1.593225469s ago: executing program 2 (id=2501): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2283, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x1}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f00000002c0)={r0, &(0x7f0000000180)='+\']+$[\x00', 0x60000, &(0x7f0000000200)={@align=0x9, {0x2bb, 0x9, 0x7}}, 0x2, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000280)=0x8}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x2, 0x4, 0x4, 0x9, 0x0, r0, 0x70000000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1}, &(0x7f0000000300), &(0x7f00000001c0), 0x1000000}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000080)={0x38, 0x2, 0x1, 0x3, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @private=0xa010101}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x6}]}]}, 0x38}}, 0x4) 1.096004142s ago: executing program 0 (id=2502): socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002fc0)=ANY=[@ANYBLOB="4400000010000104000000000000000500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000300070000000800090001"], 0x44}}, 0x0) 1.095825982s ago: executing program 1 (id=2503): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000001240)={0x20, 0x140e, 0x1, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_PDN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x1) 1.087911949s ago: executing program 1 (id=2504): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r8, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0xffff}, {0x0, 0x0, 0x0, 0x8, 0x2, 0x3}, 0x0, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x4000080) bind$packet(r6, &(0x7f0000000040)={0x11, 0x8, r9, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r6, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x44, r2, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0xcfb4854c0caad94c) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0xea}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000e00)=ANY=[@ANYBLOB="980200001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="000004000000000024001280090001007866726d000000001400028008000200020000000800020001000000140003007866726d30"], 0x298}}, 0x0) 924.748591ms ago: executing program 4 (id=2505): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x180}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x1}]}}}]}, 0x3c}, 0x1, 0x2}, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f00000006c0)=[{{&(0x7f0000000000)={0xa, 0x40, 0x0, @private0={0xfc, 0x0, '\x00', 0xfe}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000080)="18", 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e23, 0xfffffffb, @remote, 0x5}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000140)='.', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r3, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000400)=[{&(0x7f00000002c0)="a609a89c9edd34187123b5adceb3968557f4e107445a53c0815c9636d00f896d1e8cd8de77a79f1e3e2c53ddf1bb9f8ac5cb5257ff4e8b960026bc4244c4b09179a97dffdf02563e23546d3e78f944e7e2fee2a00b6313048fe354223318badb21d8c086669c5f7772f4a6d90d0997babdf79f7d557e055b3e6f2e4f41ec06a39a57b9ccc00bbca22395e41f9e9652af665f0e1603fb85d4799d54d44c706ff8df9bb805b182a1260b5936ae44f649b5e2fdca240984dcd0033ec28aeaaa686608c5c50538eea153", 0xc8}, {&(0x7f00000004c0)="7ee25c099579d92f8da721f68a8100b6adf04e0cd543f7d26019d57e6a3ecf7ef34486da35c482845d517dc801cca9e4f248b15413a7e252b0", 0x39}], 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000009c0)={0x0, @in6={{0xa, 0x4e23, 0xab9, @local, 0x8}}}, &(0x7f0000000100)=0x84) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000ac0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x380, 0x2, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_USERDATA={0xde, 0x6, "441992d89c3b98c0713cb8f9af7717496326f5c0ec0af1401698e90e1027609e292218ae78441ac9da949d49014f98e7ef41f5e6e0ee1e363feec8e13d5fdb53653ed526dc2f099f234ecd85159c8f6d876ee5ee2d827e10e28d695c0c5a3d91dd8c6e6e221fa218b843e8938188bae4148b36506fa7c4796e24d0cf706a3a8d6298760e9eb3d468449dd7059f2b695060d54ca2096e507d1ce343f25887df668eb3a1821f7797a55009d9be760c7d1764fc1c492b0a46ecd41ddbaf8777dae24a814b1a0b5fad7a799ecffae7590ecbfe545475b9a617448983"}, @NFTA_TABLE_USERDATA={0xbd, 0x6, "fc27c08c99e7d373914ac488b1cb859a6d463ce624fa5d76546b51326f8a4c299bd40bd4e605a47cf979a515582d3becfa92be67e766d353199200e42b5b8998c93860f84bd12addc2711f9b69e5df0fd344c0530af04d50320107ca45cbf801c4842e82afd9787b4a806b5e6a7173722cb53dc42ac99755dadf54bfae03e595860022d3ace737ad11c99749794c8a681f1e9b8bb2f48ae5becece2422e63c8c85e6df06b5e9ed95a4a859ab1d75d55dcdac241ffd5226587a"}, @NFTA_TABLE_USERDATA={0xd1, 0x6, "104365a79e8eefeb245b62ab67ec5a2c4ea21ee06028a8267d72718cfc13b4cb5a4967b16de6f54a31a87cb97bedc8e17419d7d0623ed88f1db217bdf3fcbf09a291b674bbcebd9ff449053f4794004f372276cc3aabf2a6e7094186ddb067f552854bf72bf47865856c0c206f75256ce8f8201fd9f6190a68352730315ae21730d6c5f92d7d5c6ee1826fe9c8e587c97e52edd1a6ab52af2bf84add0f5e5bbeb11b194dcaf5db26bb91f38e0c1554681d075b8ea2917ed3e7b80db7fc4b48bfc9799f1a654f070a47042328a4"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0xe1, 0x6, "f140f0e99d14f4f292fe9706fd0776899293ae3ea555d6dfd818e443773c3f52a703c395d63614ceb3d6f38c5033e8d5fc8459f6db2515fcb7a7cd8ff72f30740cb1f0f7d5a232cde3b65fcb42016526aea8697a62e0df1ddf5eb240d53f8aa9bc5e680925c1818faca08d99283957e174f8d3441dac25be36e038777c09a795a5dfc32c6eab5fc62ed4cba9a99ffee4bcab0de5de24b11acf500d626e8f2ae71c3b4b222ec9bfd30a55ddfa97039b1e610d0050a312ef37d3f543399f6cee30bdfd7c92fd9fe3fa8a2ad02f8bfa66196b3c1ef48b6cd5e0a33f21eb5b"}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}]}], {0x14}}, 0x3f4}, 0x1, 0x0, 0x0, 0x40}, 0x4000041) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000e40)=@newtaction={0x5c, 0x30, 0xb, 0x5, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0xffffffff, 0x4, 0x0, 0x400}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8890}, 0x40) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c0800002c0007012bbd700000000000097c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000009d00), r8) sendmsg$NLBL_CALIPSO_C_ADD(r8, &(0x7f0000009dc0)={0x0, 0x0, &(0x7f0000009d80)={&(0x7f0000009d40)={0x24, r9, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0xc050) r10 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_dellink={0x20, 0x11, 0x1, 0x70bd28, 0x25dfdbfe, {0x7, 0x0, 0x0, r11, 0xb8, 0x10000}}, 0x20}}, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, r9, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40880}, 0x8000) r12 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r12, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r13, 0x40489}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r13}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x439, 0x40, 0x0, {0x0, 0x0, 0xe403, r13, 0xa000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @remote}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48050}, 0x200080d0) 855.779411ms ago: executing program 3 (id=2506): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x6) accept4$bt_l2cap(r0, 0x0, 0x0, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x4a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20}, {0x6, 0x0, 0x0, 0x3}]}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xfffff7e8, 0x0, 0x4}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x7, 0x400, 0xfffffff7}, 0x2, r2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}}, 0x4000000) 851.745167ms ago: executing program 2 (id=2507): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x3, 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x6, 0x0, &(0x7f0000000840)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r2, r4, 0x25, 0x4, @void}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r5, r6, 0x4, r6}, 0x5) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x34, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0x8, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_DATA={0x4}}}}]}, 0x34}}, 0x0) 695.43041ms ago: executing program 3 (id=2508): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) socket$inet6(0xa, 0x2, 0x0) (async) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f, r3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@multicast2, 0x404d3, 0x32}, 0x0, @in=@empty}}, 0xe8) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x2000, {0x0, 0x0, 0x74, r3, {0xd, 0x10}, {0xfff8, 0xb}, {0xfff2, 0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000854}, 0x20000040) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0xc1c6eeb1d29c64e8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0xc1c6eeb1d29c64e8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c080080", @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000000000000b0000000005001473797a3000000000"], 0x28}}, 0x0) 525.982095ms ago: executing program 1 (id=2509): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x6, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000e5000200f0ffffff18400000fcffffff000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x7}, 0x90) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x540000, r1}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x6, 0x0, 0x400, 0x6, 0x820000ab, r1}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000180)={@local, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7, 0x1, 0x2a5, 0x500, 0x0, 0x40080, r1}) r3 = socket$nl_route(0x10, 0x3, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000340)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc040}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="740000001000013700000006000000000000ffffd71cbe84925f41734bdc0c3db4604d1a3732ec307ebb6af202ff7406449bfee296d6df94e49e3f80a085d961166c7a18fb225deb776591cd90a972935d4757f9ba1a34a330d712157f1de9625191a4e3b9ea5284c148dc8726f956582cd0beb122416f81d4c3ecf2541d", @ANYRESDEC=0x0, @ANYRES32=r3], 0x74}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 372.463282ms ago: executing program 3 (id=2510): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x7cff, 0xbd, 0x4, 0x6, 0x1ff}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, 0x0}, 0x5) 369.177775ms ago: executing program 2 (id=2511): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, 0x0, 0x0) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x6, 0xfdcd, 0x2f, 0x40}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x28, 0x2c, 0x61, 0x0, 0x40, 0x11, 0x0, @private=0xa010104, @broadcast}, {0x4e26, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x7ff, 0xe92}}}}, 0x3a) 367.374564ms ago: executing program 4 (id=2512): r0 = socket(0x10, 0x80002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) r1 = socket(0x1d, 0x2, 0x6) getsockopt$inet_mreqn(r1, 0x6a, 0x4, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000080025bd7000fcdbff2500000000", @ANYRES32=0x0, @ANYBLOB="1000000082040400240012800b0001006272696467650000140002800800020001000000080003001d"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$XFS_IOC_ERROR_INJECTION(0xffffffffffffffff, 0x40085874, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(r0, 0x0, 0x0, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000180)) 344.724181ms ago: executing program 1 (id=2513): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r0) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}, 0xac}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000480)=""/92, 0x5c}, {&(0x7f00000018c0)=""/4108, 0x100c}, {&(0x7f0000001680)=""/109, 0x6d}, {&(0x7f0000001740)=""/72, 0x48}, {&(0x7f00000005c0)=""/61, 0x3d}], 0x5}, 0x7}, {{0x0, 0x0, 0x0}, 0xd3a7}, {{0x0, 0x0, 0x0, 0x300}, 0x80000}, {{0x0, 0x0, 0x0}, 0x8000005}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x10001}, {{0x0, 0x0, 0x0}, 0xa9e5}], 0x9, 0x2000, 0x0) 213.557265ms ago: executing program 0 (id=2514): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) socket(0x400000000010, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="6c000000000101040000000000000000020000002c0001801400018008000100e000000108000200ac1414000c00028005000100000000020000034000040000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000002"], 0x6c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x6c, 0x0, 0x1, 0x401, 0x600, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x6c}}, 0x0) 167.563473ms ago: executing program 4 (id=2515): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001e00010000000000fedbdf2507000000", @ANYRES32=r2, @ANYBLOB="000000000a0002"], 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=r0, @ANYRESDEC=r2, @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x4080) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$xdp(0x2c, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0xc7f0}, 0x10) write(r6, &(0x7f0000000600)="240000001a005f0214f9f4070009040081000000fd000002000000000800040001e628d9", 0x24) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r7, 0x11b, 0x3, &(0x7f0000000740)=0x2000, 0x4) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r9 = accept4(r8, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x6c, 0x2, 0x2, 0x401, 0x0, 0x0, {0x5, 0x0, 0x2}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_TUPLE={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x850}, 0x4008805) recvmmsg(r9, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000580)=""/230, 0xe6}], 0x15}, 0x2000000}], 0x2, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) bind$xdp(r7, &(0x7f0000000100)={0x2c, 0x0, r10}, 0x10) bind$xdp(r5, &(0x7f0000000240)={0x2c, 0x1, r10, 0x0, r7}, 0x10) accept4$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x4a, 0x800) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000680)={&(0x7f0000000380)=@can_delroute={0x15c, 0x19, 0x400, 0x70bd26, 0x25dfdbfe, {0x1d, 0x1, 0x5}, [@CGW_MOD_XOR={0x15, 0x3, {{{0x0, 0x1, 0x1, 0x1}, 0x8, 0x1, 0x0, 0x0, "6291dd5f232958b1"}, 0x3}}, @CGW_DST_IF={0x8, 0xa, r11}, @CGW_CS_CRC8={0x11e, 0x6, {0x1e, 0x79, 0x6e, 0x2, 0x4, "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", 0x0, "8a626a8e78ae2e7e7d31a10da912cc62d46cca57"}}, @CGW_LIM_HOPS={0x5, 0xd, 0x2}]}, 0x15c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000001) 107.784775ms ago: executing program 0 (id=2516): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000001580)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000540)=0x9c) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bdad, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bdad, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) socket$kcm(0x2b, 0x1, 0x0) (async) r2 = socket$kcm(0x2b, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x8000, 0x0) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) (async) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r0}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@restrict={0xd, 0x0, 0x0, 0xb, 0x2}]}, {0x0, [0x30]}}, &(0x7f0000000280)=""/142, 0x27, 0x8e, 0x1, 0x4, 0x10000, @value=r3}, 0x28) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f00000002c0)={@private1={0xfc, 0x1, '\x00', 0x3}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, 0x9, 0x8, 0x0, 0x0, 0x4, 0x200002}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x40880}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x3f2, 0x800, 0x70bd25, 0x25dfdbfb, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x2, 0x6, 0x5a8, 0x308, 0x308, 0x0, 0x238, 0x238, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'pimreg0\x00', 'vlan1\x00', {}, {}, 0x21}, 0x0, 0x120, 0x148, 0x0, {0x7a00000010000000}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@inet=@multiport={{0x50}, {0x0, 0xc, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4e20], [0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd]}}]}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x2}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x33}, [], [0x0, 0x0, 0x0, 0xff000000], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x23, 0xff, 0x6}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x0, 0x0, 0xff000000], '\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xa}, @dev={0xfe, 0x80, '\x00', 0x2d}, [0xff, 0xff, 0xffffffff, 0xffffff00], [0xf56acaad6a8e9696, 0xffffffff, 0xffffff00, 0xff], 'pimreg0\x00', 'veth1\x00', {}, {}, 0xff, 0xf}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@broadcast, 0x0, 0x34}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, [0xff000000, 0x0, 0xff000000, 0xffffff00], [0xff, 0xff, 0xff000000, 0xffffffff], 'team_slave_1\x00', 'dvmrp0\x00', {}, {0xff}, 0x32, 0x4, 0x4, 0x59}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x5, 0x5}, {0x0, 0x0, 0xa}, {0x1, 0x5, 0x3}, 0x6, 0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x608) setsockopt$sock_attach_bpf(r2, 0x1, 0xd, &(0x7f0000000080), 0x24) r8 = socket$inet_tcp(0x2, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) (async) r9 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGFLAGS(r9, 0x8004745a, 0x0) (async) ioctl$PPPIOCGFLAGS(r9, 0x8004745a, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x4, 0x3b0, 0xffffffff, 0x130, 0x0, 0x208, 0xffffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x4, &(0x7f00000001c0), {[{{@uncond, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@socket0={{0x20}}, @common=@set={{0x40}, {{0x3, [0x4, 0x4, 0x5, 0x4, 0x2, 0x4], 0x3, 0x1}}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x9, 0x8, [0x13, 0x1f, 0x1b, 0x17, 0x5, 0x39, 0x3b, 0x20, 0x25, 0x9, 0xa, 0x3e, 0xb, 0x9, 0xf, 0x2a], 0x1, 0x40, 0x4}}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0xffffffffffffffff, [0x4, 0x2, 0x6, 0x4, 0x7, 0x3], 0x4, 0x2}}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@multicast1, @local, 0xffffffff, 0x7fffffff, 'ipvlan1\x00', 'syz_tun\x00', {0xff}, {}, 0x2e, 0x1, 0x40}, 0x0, 0xe8, 0x110, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x1, 'RAS\x00'}}, @common=@ah={{0x30}, {[0x8, 0x401], 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) getsockopt(r8, 0x0, 0x32, &(0x7f0000000000)=""/2, &(0x7f0000000040)=0x2) (async) getsockopt(r8, 0x0, 0x32, &(0x7f0000000000)=""/2, &(0x7f0000000040)=0x2) close(r2) 98.170873ms ago: executing program 2 (id=2517): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_HASH_MAX={0x8}, @IFLA_BR_MCAST_HASH_ELASTICITY={0x8}]}}}]}, 0x44}}, 0x0) 393.306µs ago: executing program 1 (id=2518): r0 = socket$netlink(0x10, 0x3, 0xa) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3000000040000701feffffff00000000017c000004fd00428014000180060006008011f2987c853ddd57720428552980500a000008000a", @ANYRES32=0x0, @ANYBLOB="04000280"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$XFS_IOC_SWAPEXT(r1, 0xc0c0586d, &(0x7f0000000200)={0x0, r1, r0, 0xffffffff00000000, 0x6f, '\x00', {0x7fffffffffffffff, 0xed, 0xa, 0x3, 0x6, 0x1, 0x80000006, 0xffffffffffffffff, {0x7f, 0x5b8}, {0x9, 0x100}, {0x530473e, 0x6}, 0x5, 0x2, 0xffffdfc0, 0x5, 0x4, 0xfff9, 0x2, 0x4, 0x6, 0x3, '\x00', 0x6, 0x40, 0x1, 0x4}}) (async) write$6lowpan_control(r2, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:11 0', 0xb) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000000c0)={'wg0\x00', 0x0}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1e000000040000007eb400000500000000020000", @ANYRESHEX=r6, @ANYBLOB="080000000000000000cc863aae00000000000000", @ANYRES32=r3, @ANYRES32, @ANYBLOB="0200000001000000000000000300"/28], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x14, 0x32, &(0x7f0000000680)=ANY=[@ANYBLOB="18180000", @ANYRES32=r0, @ANYBLOB="800000000000000018210000", @ANYRES32=0x1, @ANYBLOB="0000000039e2483d18650000000000000000000004000000b7080000000000007b8af8ff00000000b7080000080000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRESDEC=r7, @ANYBLOB="0000000000000000b70500000800000085000000a50000009400300001000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000000600000085100000f8ffffff1801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000008500000006000000b7080000000000007b8af8ff00000000b70800006a0800007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000046bfd4bd9b7959d45165a96a3b20dc83d536aeb668681be5dff7"], &(0x7f0000000380)='GPL\x00', 0x6, 0x1003, &(0x7f0000001dc0)=""/4099, 0x41100, 0x4, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, &(0x7f00000013c0)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000001400)={0x4, 0xe, 0x0, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0xa, &(0x7f0000001440), &(0x7f0000001480)=[{0x3, 0x2, 0xa}, {0x3, 0x4, 0xe}, {0x2, 0x3, 0xa, 0x5}, {0x1, 0x5, 0x3, 0x3}, {0x4, 0x4, 0xd, 0x7}, {0x5, 0x4, 0xf, 0x4}, {0x5, 0x3, 0xf}, {0x3, 0x1, 0x4, 0x2}, {0x1, 0x5, 0xd, 0x6}, {0x5, 0x5, 0xb, 0x1}], 0x10, 0x3}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000001600)={r1, r8}) (async) r9 = socket(0x10, 0x3, 0x0) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)) (rerun: 32) r10 = socket$inet(0xa, 0x801, 0x84) connect$inet(r10, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r11 = socket$can_bcm(0x1d, 0x2, 0x2) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r11, &(0x7f00000000c0)={0x1d, r12}, 0x10) sendmsg$can_bcm(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="01000000c90800"/16, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000000000000ef1d62ee7e923b0ad9cda5b28dd4753620a2f0271768a8284c18a4e2b5e44dc77098b18fd964df0d213608ec503db52d42f1a78c97322f4ae4c8dc89cf2b1440"], 0x80}}, 0x0) (async, rerun: 64) sendmsg$can_bcm(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="02"], 0x48}}, 0x40884) (async, rerun: 64) listen(r10, 0x8) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r13, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r13, 0x0) r14 = accept4(r10, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r14, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x6, 0x9}, &(0x7f00000000c0)=0x18) sendmmsg(r9, &(0x7f0000000000), 0x400000000000235, 0x0) 0s ago: executing program 3 (id=2519): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040), 0xc) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) (async) writev(r1, &(0x7f0000000680)=[{&(0x7f0000000080)='~', 0x1}], 0x1) (async) ioctl$sock_qrtr_TIOCINQ(r0, 0x541b, &(0x7f0000000000)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}]}}}]}, 0x40}}, 0x0) kernel console output (not intermixed with test programs): 898][T12190] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 284.129934][T12190] ieee80211_register_hw+0x3d82/0x4a70 [ 284.129969][T12190] ? ieee80211_register_hw+0x18e1/0x4a70 [ 284.130013][T12190] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 284.130036][T12190] ? __asan_memset+0x22/0x50 [ 284.130060][T12190] ? __hrtimer_setup+0x1b7/0x260 [ 284.130084][T12190] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 284.130115][T12190] mac80211_hwsim_new_radio+0x3335/0x5aa0 [ 284.130168][T12190] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 284.130189][T12190] ? kstrndup+0xbf/0x160 [ 284.130218][T12190] hwsim_new_radio_nl+0xf6a/0x1c00 [ 284.130263][T12190] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 284.130296][T12190] ? rcu_is_watching+0x15/0xb0 [ 284.130319][T12190] ? trace_kmalloc+0x2a/0xf0 [ 284.130351][T12190] ? __nla_parse+0x40/0x60 [ 284.130385][T12190] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 284.130410][T12190] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 284.130453][T12190] genl_family_rcv_msg_doit+0x22a/0x330 [ 284.130479][T12190] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 284.130510][T12190] ? bpf_lsm_capable+0x9/0x20 [ 284.130526][T12190] ? security_capable+0x7e/0x2c0 [ 284.130554][T12190] genl_rcv_msg+0x61c/0x7a0 [ 284.130585][T12190] ? __pfx_genl_rcv_msg+0x10/0x10 [ 284.130604][T12190] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 284.130638][T12190] netlink_rcv_skb+0x232/0x4b0 [ 284.130664][T12190] ? __pfx_genl_rcv_msg+0x10/0x10 [ 284.130686][T12190] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 284.130726][T12190] ? down_read+0x270/0x2e0 [ 284.130743][T12190] ? genl_rcv+0xd/0x40 [ 284.130763][T12190] genl_rcv+0x28/0x40 [ 284.130780][T12190] netlink_unicast+0x75c/0x8e0 [ 284.130813][T12190] netlink_sendmsg+0x813/0xb40 [ 284.130849][T12190] ? __pfx_netlink_sendmsg+0x10/0x10 [ 284.130877][T12190] ? aa_sock_msg_perm+0xf1/0x1b0 [ 284.130902][T12190] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 284.130929][T12190] ____sys_sendmsg+0x972/0x9f0 [ 284.130954][T12190] ? __might_fault+0xaf/0x130 [ 284.130982][T12190] ? __pfx_____sys_sendmsg+0x10/0x10 [ 284.131017][T12190] ? import_iovec+0x73/0xa0 [ 284.131046][T12190] ___sys_sendmsg+0x2a5/0x360 [ 284.131071][T12190] ? __lock_acquire+0x6b5/0x2cf0 [ 284.131094][T12190] ? __pfx____sys_sendmsg+0x10/0x10 [ 284.131126][T12190] ? futex_wait+0x2a2/0x390 [ 284.131174][T12190] ? __fget_files+0x2a/0x420 [ 284.131195][T12190] ? __fget_files+0x3a0/0x420 [ 284.131225][T12190] __x64_sys_sendmsg+0x1bd/0x2a0 [ 284.131254][T12190] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 284.131288][T12190] ? rcu_is_watching+0x15/0xb0 [ 284.131317][T12190] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.131336][T12190] do_syscall_64+0x15f/0xf80 [ 284.131361][T12190] ? trace_irq_disable+0x3b/0x140 [ 284.131387][T12190] ? clear_bhb_loop+0x40/0x90 [ 284.131408][T12190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.131425][T12190] RIP: 0033:0x7f98bb79ce59 [ 284.131451][T12190] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 284.131465][T12190] RSP: 002b:00007f98bc615028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 284.131482][T12190] RAX: ffffffffffffffda RBX: 00007f98bba15fa0 RCX: 00007f98bb79ce59 [ 284.131494][T12190] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 284.131521][T12190] RBP: 00007f98bb832d6f R08: 0000000000000000 R09: 0000000000000000 [ 284.131531][T12190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 284.131542][T12190] R13: 00007f98bba16038 R14: 00007f98bba15fa0 R15: 00007ffc63056c88 [ 284.131577][T12190] [ 284.652305][T12197] IPVS: length: 8 != 1152 [ 284.975229][T12214] atomic_op ffff888055c64998 conn xmit_atomic 0000000000000000 [ 285.135808][T12225] netlink: 'syz.1.1785': attribute type 29 has an invalid length. [ 285.160961][T12223] netlink: 'syz.1.1785': attribute type 29 has an invalid length. [ 285.508644][T12254] IPv6: NLM_F_CREATE should be specified when creating new route [ 286.337856][T12281] netlink: 'syz.1.1802': attribute type 1 has an invalid length. [ 286.366214][T12281] __nla_validate_parse: 14 callbacks suppressed [ 286.366239][T12281] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1802'. [ 286.411664][T12284] netlink: 'syz.3.1803': attribute type 25 has an invalid length. [ 286.890258][T12268] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 286.992229][T12268] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 287.206449][T12305] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1806'. [ 287.494022][ T13] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 287.520327][ T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.540710][ T13] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 287.563970][ T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.584737][ T13] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 287.627309][ T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.657003][T12295] FAULT_INJECTION: forcing a failure. [ 287.657003][T12295] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 287.734119][T12295] CPU: 0 UID: 0 PID: 12295 Comm: syz.3.1805 Not tainted syzkaller #0 PREEMPT(full) [ 287.734147][T12295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 287.734161][T12295] Call Trace: [ 287.734169][T12295] [ 287.734178][T12295] dump_stack_lvl+0xe8/0x150 [ 287.734207][T12295] should_fail_ex+0x412/0x560 [ 287.734242][T12295] prepare_alloc_pages+0x22a/0x650 [ 287.734284][T12295] __alloc_frozen_pages_noprof+0x12f/0x380 [ 287.734324][T12295] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 287.734362][T12295] ? __pfx_policy_nodemask+0x10/0x10 [ 287.734401][T12295] ? __lock_acquire+0x6b5/0x2cf0 [ 287.734429][T12295] alloc_pages_mpol+0x235/0x490 [ 287.734468][T12295] folio_alloc_mpol_noprof+0x39/0x160 [ 287.734505][T12295] vma_alloc_folio_noprof+0xe1/0x1e0 [ 287.734537][T12295] ? __asan_memset+0x22/0x50 [ 287.734574][T12295] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 287.734609][T12295] ? __pte_offset_map+0x29/0x240 [ 287.734636][T12295] ? __pte_offset_map+0x29/0x240 [ 287.734666][T12295] do_pte_missing+0x159d/0x33f0 [ 287.734712][T12295] ? handle_mm_fault+0xee/0x3170 [ 287.734743][T12295] handle_mm_fault+0x1bd9/0x3170 [ 287.734798][T12295] ? handle_mm_fault+0xee/0x3170 [ 287.734831][T12295] ? __pfx_handle_mm_fault+0x10/0x10 [ 287.734872][T12295] ? __lock_acquire+0x6b5/0x2cf0 [ 287.734899][T12295] ? lock_mm_and_find_vma+0xa7/0x340 [ 287.734931][T12295] do_user_addr_fault+0x75b/0x1340 [ 287.734983][T12295] exc_page_fault+0x6a/0xc0 [ 287.735014][T12295] asm_exc_page_fault+0x26/0x30 [ 287.735033][T12295] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 287.735056][T12295] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 287.735073][T12295] RSP: 0018:ffffc9001b7e74d8 EFLAGS: 00050206 [ 287.735091][T12295] RAX: ffff8880550a4e01 RBX: ffff8880550a4f1c RCX: 00000000000007fc [ 287.735105][T12295] RDX: 0000000000000000 RSI: ffff8880550a565c RDI: 0000200000002000 [ 287.735118][T12295] RBP: ffffc9001b7e7650 R08: ffff8880550a5e57 R09: 1ffff1100aa14bca [ 287.735133][T12295] R10: dffffc0000000000 R11: ffffed100aa14bcb R12: dffffc0000000000 [ 287.735147][T12295] R13: 0000000000000f3c R14: 00007ffffffff000 R15: 00002000000027fc [ 287.735179][T12295] _copy_to_iter+0x60a/0x17d0 [ 287.735224][T12295] ? __pfx__copy_to_iter+0x10/0x10 [ 287.735250][T12295] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 287.735278][T12295] ? lockdep_hardirqs_on+0x7a/0x110 [ 287.735307][T12295] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 287.735334][T12295] ? __skb_try_recv_datagram+0x3d4/0x4d0 [ 287.735372][T12295] __skb_datagram_iter+0xf8/0x980 [ 287.735393][T12295] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 287.735421][T12295] skb_copy_datagram_iter+0xb5/0x240 [ 287.735445][T12295] netlink_recvmsg+0x2c3/0xa50 [ 287.735483][T12295] ? __pfx_netlink_recvmsg+0x10/0x10 [ 287.735516][T12295] ? __lock_acquire+0x6b5/0x2cf0 [ 287.735540][T12295] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 287.735571][T12295] ? security_socket_recvmsg+0x7e/0x2c0 [ 287.735590][T12295] ? __pfx_netlink_recvmsg+0x10/0x10 [ 287.735620][T12295] sock_recvmsg_nosec+0x10c/0x140 [ 287.735646][T12295] ____sys_recvmsg+0x3e3/0x4a0 [ 287.735685][T12295] ? __pfx_____sys_recvmsg+0x10/0x10 [ 287.735731][T12295] ? import_iovec+0x73/0xa0 [ 287.735763][T12295] ___sys_recvmsg+0x215/0x590 [ 287.735818][T12295] ? __pfx____sys_recvmsg+0x10/0x10 [ 287.735855][T12295] ? __fget_files+0x2a/0x420 [ 287.735915][T12295] do_recvmmsg+0x334/0x800 [ 287.735945][T12295] ? __pfx_do_recvmmsg+0x10/0x10 [ 287.735990][T12295] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 287.736030][T12295] __x64_sys_recvmmsg+0x198/0x250 [ 287.736054][T12295] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 287.736083][T12295] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.736106][T12295] do_syscall_64+0x15f/0xf80 [ 287.736136][T12295] ? trace_irq_disable+0x3b/0x140 [ 287.736167][T12295] ? clear_bhb_loop+0x40/0x90 [ 287.736194][T12295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.736214][T12295] RIP: 0033:0x7f98bb79ce59 [ 287.736233][T12295] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.736250][T12295] RSP: 002b:00007f98bc5d3028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 287.736271][T12295] RAX: ffffffffffffffda RBX: 00007f98bba16180 RCX: 00007f98bb79ce59 [ 287.736287][T12295] RDX: 0000000000000009 RSI: 0000200000000d80 RDI: 0000000000000003 [ 287.736300][T12295] RBP: 00007f98bc5d3090 R08: 0000000000000000 R09: 0000000000000000 [ 287.736313][T12295] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000002 [ 287.736326][T12295] R13: 00007f98bba16218 R14: 00007f98bba16180 R15: 00007ffc63056c88 [ 287.736360][T12295] [ 288.822350][T12335] ksmbd: Unknown IPC event: 3, ignore. [ 288.843544][T12335] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1815'. [ 288.895528][T12335] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1815'. [ 288.924827][T12343] netlink: 'syz.1.1818': attribute type 49 has an invalid length. [ 289.923739][T12343] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0 [ 289.934664][T12343] ip6gretap0: entered promiscuous mode [ 289.947488][T12343] ip6gretap0: entered allmulticast mode [ 289.963180][ T1038] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 289.981215][T12356] bond0: Caught tx_queue_len zero misconfig [ 290.152341][T12372] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 290.159719][T12372] IPv6: NLM_F_CREATE should be set when creating new route [ 290.350742][T12383] netlink: 'syz.4.1826': attribute type 1 has an invalid length. [ 290.358676][T12375] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1824'. [ 290.488499][T12383] 8021q: adding VLAN 0 to HW filter on device bond5 [ 290.612485][T12387] bond5: (slave gretap1): making interface the new active one [ 290.625451][T12397] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 290.658501][T12387] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 290.671442][T12397] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1828'. [ 290.985050][T12413] netlink: 'syz.4.1833': attribute type 1 has an invalid length. [ 291.003213][T12413] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1833'. [ 291.028005][T12413] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1833'. [ 291.054053][T12414] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1833'. [ 291.186719][T12427] sysfs: cannot create duplicate filename '/class/ieee80211/Ku crK:̥B| lS-!' [ 291.226558][T12427] CPU: 0 UID: 0 PID: 12427 Comm: syz.1.1836 Not tainted syzkaller #0 PREEMPT(full) [ 291.226588][T12427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 291.226603][T12427] Call Trace: [ 291.226611][T12427] [ 291.226638][T12427] dump_stack_lvl+0xe8/0x150 [ 291.226670][T12427] sysfs_warn_dup+0x8e/0xa0 [ 291.226700][T12427] sysfs_do_create_link_sd+0xc0/0x110 [ 291.226731][T12427] device_add_class_symlinks+0x1cf/0x240 [ 291.226764][T12427] device_add+0x475/0xbb0 [ 291.226798][T12427] wiphy_register+0x1dc5/0x2dc0 [ 291.226852][T12427] ? __pfx_wiphy_register+0x10/0x10 [ 291.226889][T12427] ? __pfx_netdev_run_todo+0x10/0x10 [ 291.226913][T12427] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 291.226949][T12427] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 291.226990][T12427] ieee80211_register_hw+0x3d82/0x4a70 [ 291.227032][T12427] ? ieee80211_register_hw+0x18e1/0x4a70 [ 291.227085][T12427] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 291.227113][T12427] ? __asan_memset+0x22/0x50 [ 291.227141][T12427] ? __hrtimer_setup+0x1b7/0x260 [ 291.227181][T12427] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 291.227215][T12427] mac80211_hwsim_new_radio+0x3335/0x5aa0 [ 291.227280][T12427] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 291.227313][T12427] ? kstrndup+0xbf/0x160 [ 291.227354][T12427] hwsim_new_radio_nl+0xf6a/0x1c00 [ 291.227403][T12427] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 291.227438][T12427] ? rcu_is_watching+0x15/0xb0 [ 291.227462][T12427] ? trace_kmalloc+0x2a/0xf0 [ 291.227497][T12427] ? __nla_parse+0x40/0x60 [ 291.227552][T12427] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 291.227577][T12427] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 291.227612][T12427] genl_family_rcv_msg_doit+0x22a/0x330 [ 291.227646][T12427] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 291.227687][T12427] ? bpf_lsm_capable+0x9/0x20 [ 291.227719][T12427] ? security_capable+0x7e/0x2c0 [ 291.227752][T12427] genl_rcv_msg+0x61c/0x7a0 [ 291.227782][T12427] ? __pfx_genl_rcv_msg+0x10/0x10 [ 291.227804][T12427] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 291.227831][T12427] ? __pfx_ref_tracker_free+0x10/0x10 [ 291.227872][T12427] netlink_rcv_skb+0x232/0x4b0 [ 291.227903][T12427] ? __pfx_genl_rcv_msg+0x10/0x10 [ 291.227927][T12427] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 291.227974][T12427] ? down_read+0x270/0x2e0 [ 291.227994][T12427] ? genl_rcv+0xd/0x40 [ 291.228018][T12427] genl_rcv+0x28/0x40 [ 291.228038][T12427] netlink_unicast+0x75c/0x8e0 [ 291.228077][T12427] netlink_sendmsg+0x813/0xb40 [ 291.228118][T12427] ? __pfx_netlink_sendmsg+0x10/0x10 [ 291.228152][T12427] ? aa_sock_msg_perm+0xf1/0x1b0 [ 291.228181][T12427] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 291.228212][T12427] ____sys_sendmsg+0x972/0x9f0 [ 291.228242][T12427] ? __might_fault+0xaf/0x130 [ 291.228276][T12427] ? __pfx_____sys_sendmsg+0x10/0x10 [ 291.228323][T12427] ? import_iovec+0x73/0xa0 [ 291.228358][T12427] ___sys_sendmsg+0x2a5/0x360 [ 291.228387][T12427] ? __lock_acquire+0x6b5/0x2cf0 [ 291.228414][T12427] ? __pfx____sys_sendmsg+0x10/0x10 [ 291.228452][T12427] ? futex_wait+0x2a2/0x390 [ 291.228510][T12427] ? __fget_files+0x2a/0x420 [ 291.228533][T12427] ? __fget_files+0x3a0/0x420 [ 291.228568][T12427] __x64_sys_sendmsg+0x1bd/0x2a0 [ 291.228601][T12427] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 291.228641][T12427] ? rcu_is_watching+0x15/0xb0 [ 291.228676][T12427] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.228700][T12427] do_syscall_64+0x15f/0xf80 [ 291.228731][T12427] ? trace_irq_disable+0x3b/0x140 [ 291.228762][T12427] ? clear_bhb_loop+0x40/0x90 [ 291.228787][T12427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.228807][T12427] RIP: 0033:0x7f9236d9ce59 [ 291.228826][T12427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 291.228843][T12427] RSP: 002b:00007f9237c25028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 291.228865][T12427] RAX: ffffffffffffffda RBX: 00007f9237015fa0 RCX: 00007f9236d9ce59 [ 291.228881][T12427] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 291.228894][T12427] RBP: 00007f9236e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 291.228907][T12427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 291.228918][T12427] R13: 00007f9237016038 R14: 00007f9237015fa0 R15: 00007ffc0ac7e608 [ 291.228950][T12427] [ 292.363074][T12475] netlink: 'syz.1.1843': attribute type 1 has an invalid length. [ 292.397090][T12475] netlink: 'syz.1.1843': attribute type 2 has an invalid length. [ 292.563273][T12489] ip6t_srh: unknown srh invflags 4000 [ 292.681173][T12494] sysfs: cannot create duplicate filename '/class/ieee80211/Ku crK:̥B| lS-!' [ 292.723300][T12494] CPU: 1 UID: 0 PID: 12494 Comm: syz.1.1849 Not tainted syzkaller #0 PREEMPT(full) [ 292.723327][T12494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 292.723359][T12494] Call Trace: [ 292.723367][T12494] [ 292.723376][T12494] dump_stack_lvl+0xe8/0x150 [ 292.723407][T12494] sysfs_warn_dup+0x8e/0xa0 [ 292.723435][T12494] sysfs_do_create_link_sd+0xc0/0x110 [ 292.723466][T12494] device_add_class_symlinks+0x1cf/0x240 [ 292.723499][T12494] device_add+0x475/0xbb0 [ 292.723531][T12494] wiphy_register+0x1dc5/0x2dc0 [ 292.723586][T12494] ? __pfx_wiphy_register+0x10/0x10 [ 292.723620][T12494] ? __pfx_netdev_run_todo+0x10/0x10 [ 292.723643][T12494] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 292.723678][T12494] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 292.723722][T12494] ieee80211_register_hw+0x3d82/0x4a70 [ 292.723762][T12494] ? ieee80211_register_hw+0x18e1/0x4a70 [ 292.723814][T12494] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 292.723842][T12494] ? __asan_memset+0x22/0x50 [ 292.723870][T12494] ? __hrtimer_setup+0x1b7/0x260 [ 292.723898][T12494] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 292.723933][T12494] mac80211_hwsim_new_radio+0x3335/0x5aa0 [ 292.723994][T12494] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 292.724020][T12494] ? kstrndup+0xbf/0x160 [ 292.724054][T12494] hwsim_new_radio_nl+0xf6a/0x1c00 [ 292.724108][T12494] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 292.724147][T12494] ? rcu_is_watching+0x15/0xb0 [ 292.724175][T12494] ? trace_kmalloc+0x2a/0xf0 [ 292.724211][T12494] ? __nla_parse+0x40/0x60 [ 292.724249][T12494] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 292.724283][T12494] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 292.724318][T12494] genl_family_rcv_msg_doit+0x22a/0x330 [ 292.724352][T12494] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 292.724392][T12494] ? bpf_lsm_capable+0x9/0x20 [ 292.724414][T12494] ? security_capable+0x7e/0x2c0 [ 292.724450][T12494] genl_rcv_msg+0x61c/0x7a0 [ 292.724482][T12494] ? __pfx_genl_rcv_msg+0x10/0x10 [ 292.724505][T12494] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 292.724534][T12494] ? __pfx_ref_tracker_free+0x10/0x10 [ 292.724577][T12494] netlink_rcv_skb+0x232/0x4b0 [ 292.724611][T12494] ? __pfx_genl_rcv_msg+0x10/0x10 [ 292.724636][T12494] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 292.724683][T12494] ? down_read+0x270/0x2e0 [ 292.724704][T12494] ? genl_rcv+0xd/0x40 [ 292.724729][T12494] genl_rcv+0x28/0x40 [ 292.724751][T12494] netlink_unicast+0x75c/0x8e0 [ 292.724792][T12494] netlink_sendmsg+0x813/0xb40 [ 292.724835][T12494] ? __pfx_netlink_sendmsg+0x10/0x10 [ 292.724870][T12494] ? aa_sock_msg_perm+0xf1/0x1b0 [ 292.724902][T12494] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 292.724935][T12494] ____sys_sendmsg+0x972/0x9f0 [ 292.724968][T12494] ? __might_fault+0xaf/0x130 [ 292.725020][T12494] ? __pfx_____sys_sendmsg+0x10/0x10 [ 292.725063][T12494] ? import_iovec+0x73/0xa0 [ 292.725095][T12494] ___sys_sendmsg+0x2a5/0x360 [ 292.725125][T12494] ? __lock_acquire+0x6b5/0x2cf0 [ 292.725152][T12494] ? __pfx____sys_sendmsg+0x10/0x10 [ 292.725189][T12494] ? futex_wait+0x2a2/0x390 [ 292.725246][T12494] ? __fget_files+0x2a/0x420 [ 292.725278][T12494] ? __fget_files+0x3a0/0x420 [ 292.725315][T12494] __x64_sys_sendmsg+0x1bd/0x2a0 [ 292.725369][T12494] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 292.725413][T12494] ? rcu_is_watching+0x15/0xb0 [ 292.725451][T12494] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.725476][T12494] do_syscall_64+0x15f/0xf80 [ 292.725508][T12494] ? trace_irq_disable+0x3b/0x140 [ 292.725541][T12494] ? clear_bhb_loop+0x40/0x90 [ 292.725568][T12494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.725590][T12494] RIP: 0033:0x7f9236d9ce59 [ 292.725611][T12494] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 292.725629][T12494] RSP: 002b:00007f9237c25028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 292.725653][T12494] RAX: ffffffffffffffda RBX: 00007f9237015fa0 RCX: 00007f9236d9ce59 [ 292.725669][T12494] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 292.725682][T12494] RBP: 00007f9236e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 292.725696][T12494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 292.725709][T12494] R13: 00007f9237016038 R14: 00007f9237015fa0 R15: 00007ffc0ac7e608 [ 292.725746][T12494] [ 293.317745][T12509] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 293.326435][ T29] IPVS: starting estimator thread 0... [ 293.427871][T12510] IPVS: using max 30 ests per chain, 72000 per kthread [ 293.450907][T12506] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 293.844845][T12537] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1860'. [ 294.306479][T12559] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1865'. [ 294.348377][T12559] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1865'. [ 294.385489][T12559] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1865'. [ 294.502949][T12574] netlink: 'syz.3.1869': attribute type 17 has an invalid length. [ 294.545356][T12574] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1869'. [ 294.593802][T12574] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1869'. [ 294.663243][T12582] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1870'. [ 294.818198][T12589] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1872'. [ 294.886430][T12582] 8021q: adding VLAN 0 to HW filter on device bond6 [ 295.086708][T12580] bond1 (unregistering): Released all slaves [ 295.216264][T12588] bond6: entered promiscuous mode [ 295.222030][T12588] bond6: entered allmulticast mode [ 295.245829][T12588] 8021q: adding VLAN 0 to HW filter on device bond6 [ 295.285926][T12588] team0: Port device bond6 added [ 295.344679][T12593] sch_tbf: burst 12 is lower than device bridge4 mtu (1514) ! [ 295.522033][T12606] netlink: 'syz.4.1875': attribute type 1 has an invalid length. [ 295.729733][T12606] bond7: entered promiscuous mode [ 295.746001][T12606] 8021q: adding VLAN 0 to HW filter on device bond7 [ 295.773033][ T5288] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 295.821929][T12626] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 295.925986][T12633] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 295.933333][T12633] IPv6: NLM_F_CREATE should be set when creating new route [ 296.053718][T12640] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1881'. [ 296.190326][T12646] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1883'. [ 296.242819][T12646] vet: renamed from veth0_vlan (while UP) [ 296.515340][T12661] netlink: 'syz.4.1886': attribute type 3 has an invalid length. [ 296.673423][T12665] syzkaller0: entered promiscuous mode [ 296.679070][T12665] syzkaller0: entered allmulticast mode [ 298.415054][ T5288] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 298.473658][T12706] netlink: 'syz.4.1888': attribute type 29 has an invalid length. [ 298.714936][T12618] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 298.867230][T12716] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 298.874578][T12716] IPv6: NLM_F_CREATE should be set when creating new route [ 299.085418][T12727] __nla_validate_parse: 2 callbacks suppressed [ 299.087098][T12727] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1895'. [ 299.125585][T12626] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 299.157260][T12727] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1895'. [ 299.202672][T12736] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 299.272088][T12736] sysfs: cannot create duplicate filename '/class/ieee80211/Ku crK:̥B| lS-!' [ 299.304715][T12736] CPU: 0 UID: 0 PID: 12736 Comm: syz.3.1898 Not tainted syzkaller #0 PREEMPT(full) [ 299.304754][T12736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 299.304769][T12736] Call Trace: [ 299.304778][T12736] [ 299.304788][T12736] dump_stack_lvl+0xe8/0x150 [ 299.304820][T12736] sysfs_warn_dup+0x8e/0xa0 [ 299.304848][T12736] sysfs_do_create_link_sd+0xc0/0x110 [ 299.304880][T12736] device_add_class_symlinks+0x1cf/0x240 [ 299.304913][T12736] device_add+0x475/0xbb0 [ 299.304944][T12736] wiphy_register+0x1dc5/0x2dc0 [ 299.305007][T12736] ? __pfx_wiphy_register+0x10/0x10 [ 299.305040][T12736] ? __pfx_netdev_run_todo+0x10/0x10 [ 299.305060][T12736] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 299.305093][T12736] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 299.305130][T12736] ieee80211_register_hw+0x3d82/0x4a70 [ 299.305168][T12736] ? ieee80211_register_hw+0x18e1/0x4a70 [ 299.305216][T12736] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 299.305243][T12736] ? __asan_memset+0x22/0x50 [ 299.305268][T12736] ? __hrtimer_setup+0x1b7/0x260 [ 299.305294][T12736] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 299.305326][T12736] mac80211_hwsim_new_radio+0x3335/0x5aa0 [ 299.305403][T12736] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 299.305427][T12736] ? kstrndup+0xbf/0x160 [ 299.305458][T12736] hwsim_new_radio_nl+0xf6a/0x1c00 [ 299.305508][T12736] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 299.305544][T12736] ? rcu_is_watching+0x15/0xb0 [ 299.305570][T12736] ? trace_kmalloc+0x2a/0xf0 [ 299.305605][T12736] ? __nla_parse+0x40/0x60 [ 299.305640][T12736] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 299.305664][T12736] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 299.305715][T12736] genl_family_rcv_msg_doit+0x22a/0x330 [ 299.305758][T12736] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 299.305798][T12736] ? bpf_lsm_capable+0x9/0x20 [ 299.305820][T12736] ? security_capable+0x7e/0x2c0 [ 299.305856][T12736] genl_rcv_msg+0x61c/0x7a0 [ 299.305888][T12736] ? __pfx_genl_rcv_msg+0x10/0x10 [ 299.305911][T12736] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 299.305955][T12736] netlink_rcv_skb+0x232/0x4b0 [ 299.305988][T12736] ? __pfx_genl_rcv_msg+0x10/0x10 [ 299.306013][T12736] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 299.306063][T12736] ? down_read+0x270/0x2e0 [ 299.306084][T12736] ? genl_rcv+0xd/0x40 [ 299.306109][T12736] genl_rcv+0x28/0x40 [ 299.306133][T12736] netlink_unicast+0x75c/0x8e0 [ 299.306174][T12736] netlink_sendmsg+0x813/0xb40 [ 299.306217][T12736] ? __pfx_netlink_sendmsg+0x10/0x10 [ 299.306255][T12736] ? aa_sock_msg_perm+0xf1/0x1b0 [ 299.306287][T12736] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 299.306322][T12736] ____sys_sendmsg+0x972/0x9f0 [ 299.306355][T12736] ? __might_fault+0xaf/0x130 [ 299.306391][T12736] ? __pfx_____sys_sendmsg+0x10/0x10 [ 299.306435][T12736] ? import_iovec+0x73/0xa0 [ 299.306484][T12736] ___sys_sendmsg+0x2a5/0x360 [ 299.306512][T12736] ? __lock_acquire+0x6b5/0x2cf0 [ 299.306558][T12736] ? __pfx____sys_sendmsg+0x10/0x10 [ 299.306611][T12736] ? futex_wait+0x2a2/0x390 [ 299.306669][T12736] ? __fget_files+0x2a/0x420 [ 299.306693][T12736] ? __fget_files+0x3a0/0x420 [ 299.306729][T12736] __x64_sys_sendmsg+0x1bd/0x2a0 [ 299.306773][T12736] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 299.306814][T12736] ? rcu_is_watching+0x15/0xb0 [ 299.306848][T12736] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.306870][T12736] do_syscall_64+0x15f/0xf80 [ 299.306900][T12736] ? trace_irq_disable+0x3b/0x140 [ 299.306930][T12736] ? clear_bhb_loop+0x40/0x90 [ 299.306955][T12736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.306975][T12736] RIP: 0033:0x7f98bb79ce59 [ 299.306995][T12736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.307013][T12736] RSP: 002b:00007f98bc615028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 299.307035][T12736] RAX: ffffffffffffffda RBX: 00007f98bba15fa0 RCX: 00007f98bb79ce59 [ 299.307051][T12736] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000004 [ 299.307064][T12736] RBP: 00007f98bb832d6f R08: 0000000000000000 R09: 0000000000000000 [ 299.307076][T12736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 299.307087][T12736] R13: 00007f98bba16038 R14: 00007f98bba15fa0 R15: 00007ffc63056c88 [ 299.307122][T12736] [ 299.861028][T12751] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1904'. [ 299.870247][T12748] syzkaller0: entered promiscuous mode [ 299.876606][T12748] syzkaller0: entered allmulticast mode [ 299.950398][T12755] netlink: 'syz.4.1904': attribute type 11 has an invalid length. [ 299.976265][T12755] netlink: 'syz.4.1904': attribute type 1 has an invalid length. [ 300.056625][T12751] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1904'. [ 300.072791][T12760] netlink: 'syz.3.1906': attribute type 1 has an invalid length. [ 300.080754][T12751] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1904'. [ 300.215006][T12764] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1906'. [ 300.438877][T12778] syzkaller0: entered promiscuous mode [ 300.455578][T12778] syzkaller0: entered allmulticast mode [ 300.658699][T12791] netlink: 'syz.1.1915': attribute type 3 has an invalid length. [ 300.752533][T12798] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1918'. [ 300.818817][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 300.881007][T12802] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 300.979572][T12802] ip6gre2: entered allmulticast mode [ 300.987768][T12802] team0: Device ip6gre2 is of different type [ 301.245128][T12806] syzkaller0: entered promiscuous mode [ 301.251756][T12806] syzkaller0: entered allmulticast mode [ 301.263976][T12820] sysfs: cannot create duplicate filename '/class/ieee80211/Ku crK:̥B| lS-!' [ 301.276535][T12820] CPU: 1 UID: 0 PID: 12820 Comm: syz.2.1924 Not tainted syzkaller #0 PREEMPT(full) [ 301.276561][T12820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 301.276573][T12820] Call Trace: [ 301.276581][T12820] [ 301.276590][T12820] dump_stack_lvl+0xe8/0x150 [ 301.276620][T12820] sysfs_warn_dup+0x8e/0xa0 [ 301.276654][T12820] sysfs_do_create_link_sd+0xc0/0x110 [ 301.276683][T12820] device_add_class_symlinks+0x1cf/0x240 [ 301.276714][T12820] device_add+0x475/0xbb0 [ 301.276742][T12820] wiphy_register+0x1dc5/0x2dc0 [ 301.276812][T12820] ? __pfx_wiphy_register+0x10/0x10 [ 301.276847][T12820] ? __pfx_netdev_run_todo+0x10/0x10 [ 301.276869][T12820] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 301.276904][T12820] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 301.276956][T12820] ieee80211_register_hw+0x3d82/0x4a70 [ 301.277010][T12820] ? ieee80211_register_hw+0x18e1/0x4a70 [ 301.277063][T12820] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 301.277091][T12820] ? __asan_memset+0x22/0x50 [ 301.277119][T12820] ? __hrtimer_setup+0x1b7/0x260 [ 301.277157][T12820] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 301.277198][T12820] mac80211_hwsim_new_radio+0x3335/0x5aa0 [ 301.277254][T12820] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 301.277277][T12820] ? kstrndup+0xbf/0x160 [ 301.277307][T12820] hwsim_new_radio_nl+0xf6a/0x1c00 [ 301.277357][T12820] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 301.277395][T12820] ? rcu_is_watching+0x15/0xb0 [ 301.277420][T12820] ? trace_kmalloc+0x2a/0xf0 [ 301.277455][T12820] ? __nla_parse+0x40/0x60 [ 301.277489][T12820] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 301.277513][T12820] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 301.277546][T12820] genl_family_rcv_msg_doit+0x22a/0x330 [ 301.277577][T12820] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 301.277616][T12820] ? bpf_lsm_capable+0x9/0x20 [ 301.277635][T12820] ? security_capable+0x7e/0x2c0 [ 301.277674][T12820] genl_rcv_msg+0x61c/0x7a0 [ 301.277704][T12820] ? __pfx_genl_rcv_msg+0x10/0x10 [ 301.277726][T12820] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 301.277753][T12820] ? __pfx_ref_tracker_free+0x10/0x10 [ 301.277794][T12820] netlink_rcv_skb+0x232/0x4b0 [ 301.277824][T12820] ? __pfx_genl_rcv_msg+0x10/0x10 [ 301.277848][T12820] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 301.277895][T12820] ? down_read+0x270/0x2e0 [ 301.277913][T12820] ? genl_rcv+0xd/0x40 [ 301.277936][T12820] genl_rcv+0x28/0x40 [ 301.277955][T12820] netlink_unicast+0x75c/0x8e0 [ 301.277994][T12820] netlink_sendmsg+0x813/0xb40 [ 301.278050][T12820] ? __pfx_netlink_sendmsg+0x10/0x10 [ 301.278086][T12820] ? aa_sock_msg_perm+0xf1/0x1b0 [ 301.278115][T12820] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 301.278147][T12820] ____sys_sendmsg+0x972/0x9f0 [ 301.278178][T12820] ? __might_fault+0xaf/0x130 [ 301.278224][T12820] ? __pfx_____sys_sendmsg+0x10/0x10 [ 301.278264][T12820] ? import_iovec+0x73/0xa0 [ 301.278299][T12820] ___sys_sendmsg+0x2a5/0x360 [ 301.278360][T12820] ? __lock_acquire+0x6b5/0x2cf0 [ 301.278387][T12820] ? __pfx____sys_sendmsg+0x10/0x10 [ 301.278426][T12820] ? futex_wait+0x2a2/0x390 [ 301.278483][T12820] ? __fget_files+0x2a/0x420 [ 301.278506][T12820] ? __fget_files+0x3a0/0x420 [ 301.278541][T12820] __x64_sys_sendmsg+0x1bd/0x2a0 [ 301.278575][T12820] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 301.278615][T12820] ? rcu_is_watching+0x15/0xb0 [ 301.278659][T12820] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.278686][T12820] do_syscall_64+0x15f/0xf80 [ 301.278715][T12820] ? trace_irq_disable+0x3b/0x140 [ 301.278764][T12820] ? clear_bhb_loop+0x40/0x90 [ 301.278816][T12820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.278837][T12820] RIP: 0033:0x7f640b39ce59 [ 301.278856][T12820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 301.278875][T12820] RSP: 002b:00007f640c23f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 301.278897][T12820] RAX: ffffffffffffffda RBX: 00007f640b615fa0 RCX: 00007f640b39ce59 [ 301.278913][T12820] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 301.278927][T12820] RBP: 00007f640b432d6f R08: 0000000000000000 R09: 0000000000000000 [ 301.278940][T12820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 301.278953][T12820] R13: 00007f640b616038 R14: 00007f640b615fa0 R15: 00007ffd257c1b58 [ 301.278990][T12820] [ 301.818129][T12825] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1925'. [ 301.827155][T12825] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1925'. [ 302.420206][ T5288] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 302.936336][T12846] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1930'. [ 303.375234][T12837] syzkaller0: entered promiscuous mode [ 303.382174][T12837] syzkaller0: entered allmulticast mode [ 303.570034][T12855] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 303.595276][T12855] Bluetooth: MGMT ver 1.23 [ 303.689880][T12863] sysfs: cannot create duplicate filename '/class/ieee80211/Ku crK:̥B| lS-!' [ 303.704368][T12863] CPU: 1 UID: 0 PID: 12863 Comm: syz.3.1936 Not tainted syzkaller #0 PREEMPT(full) [ 303.704395][T12863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 303.704420][T12863] Call Trace: [ 303.704430][T12863] [ 303.704439][T12863] dump_stack_lvl+0xe8/0x150 [ 303.704472][T12863] sysfs_warn_dup+0x8e/0xa0 [ 303.704522][T12863] sysfs_do_create_link_sd+0xc0/0x110 [ 303.704555][T12863] device_add_class_symlinks+0x1cf/0x240 [ 303.704588][T12863] device_add+0x475/0xbb0 [ 303.704632][T12863] wiphy_register+0x1dc5/0x2dc0 [ 303.704685][T12863] ? __pfx_wiphy_register+0x10/0x10 [ 303.704719][T12863] ? __pfx_netdev_run_todo+0x10/0x10 [ 303.704741][T12863] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 303.704776][T12863] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 303.704817][T12863] ieee80211_register_hw+0x3d82/0x4a70 [ 303.704858][T12863] ? ieee80211_register_hw+0x18e1/0x4a70 [ 303.704908][T12863] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 303.704936][T12863] ? __asan_memset+0x22/0x50 [ 303.704970][T12863] ? __hrtimer_setup+0x1b7/0x260 [ 303.704998][T12863] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 303.705034][T12863] mac80211_hwsim_new_radio+0x3335/0x5aa0 [ 303.705111][T12863] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 303.705136][T12863] ? kstrndup+0xbf/0x160 [ 303.705169][T12863] hwsim_new_radio_nl+0xf6a/0x1c00 [ 303.705233][T12863] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 303.705272][T12863] ? rcu_is_watching+0x15/0xb0 [ 303.705300][T12863] ? trace_kmalloc+0x2a/0xf0 [ 303.705337][T12863] ? __nla_parse+0x40/0x60 [ 303.705374][T12863] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 303.705399][T12863] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 303.705434][T12863] genl_family_rcv_msg_doit+0x22a/0x330 [ 303.705479][T12863] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 303.705517][T12863] ? bpf_lsm_capable+0x9/0x20 [ 303.705537][T12863] ? security_capable+0x7e/0x2c0 [ 303.705570][T12863] genl_rcv_msg+0x61c/0x7a0 [ 303.705600][T12863] ? __pfx_genl_rcv_msg+0x10/0x10 [ 303.705622][T12863] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 303.705664][T12863] netlink_rcv_skb+0x232/0x4b0 [ 303.705694][T12863] ? __pfx_genl_rcv_msg+0x10/0x10 [ 303.705718][T12863] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 303.705765][T12863] ? down_read+0x270/0x2e0 [ 303.705785][T12863] ? genl_rcv+0xd/0x40 [ 303.705808][T12863] genl_rcv+0x28/0x40 [ 303.705827][T12863] netlink_unicast+0x75c/0x8e0 [ 303.705865][T12863] netlink_sendmsg+0x813/0xb40 [ 303.705905][T12863] ? __pfx_netlink_sendmsg+0x10/0x10 [ 303.705940][T12863] ? aa_sock_msg_perm+0xf1/0x1b0 [ 303.705969][T12863] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 303.706000][T12863] ____sys_sendmsg+0x972/0x9f0 [ 303.706030][T12863] ? __might_fault+0xaf/0x130 [ 303.706063][T12863] ? __pfx_____sys_sendmsg+0x10/0x10 [ 303.706103][T12863] ? import_iovec+0x73/0xa0 [ 303.706139][T12863] ___sys_sendmsg+0x2a5/0x360 [ 303.706167][T12863] ? __lock_acquire+0x6b5/0x2cf0 [ 303.706203][T12863] ? __pfx____sys_sendmsg+0x10/0x10 [ 303.706242][T12863] ? futex_wake+0x4ac/0x580 [ 303.706300][T12863] ? __fget_files+0x2a/0x420 [ 303.706324][T12863] ? __fget_files+0x3a0/0x420 [ 303.706360][T12863] __x64_sys_sendmsg+0x1bd/0x2a0 [ 303.706394][T12863] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 303.706434][T12863] ? rcu_is_watching+0x15/0xb0 [ 303.706469][T12863] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.706492][T12863] do_syscall_64+0x15f/0xf80 [ 303.706521][T12863] ? trace_irq_disable+0x3b/0x140 [ 303.706553][T12863] ? clear_bhb_loop+0x40/0x90 [ 303.706578][T12863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.706599][T12863] RIP: 0033:0x7f98bb79ce59 [ 303.706625][T12863] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 303.706642][T12863] RSP: 002b:00007f98bc615028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 303.706664][T12863] RAX: ffffffffffffffda RBX: 00007f98bba15fa0 RCX: 00007f98bb79ce59 [ 303.706679][T12863] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 303.706692][T12863] RBP: 00007f98bb832d6f R08: 0000000000000000 R09: 0000000000000000 [ 303.706705][T12863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 303.706717][T12863] R13: 00007f98bba16038 R14: 00007f98bba15fa0 R15: 00007ffc63056c88 [ 303.706752][T12863] [ 304.196462][T12870] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 304.481735][T12885] syzkaller0: entered promiscuous mode [ 304.504277][T12885] syzkaller0: entered allmulticast mode [ 304.881892][T12911] sysfs: cannot create duplicate filename '/class/ieee80211/Ku crK:̥B| lS-!' [ 304.905930][T12911] CPU: 0 UID: 0 PID: 12911 Comm: syz.2.1950 Not tainted syzkaller #0 PREEMPT(full) [ 304.905958][T12911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 304.905970][T12911] Call Trace: [ 304.905978][T12911] [ 304.905986][T12911] dump_stack_lvl+0xe8/0x150 [ 304.906017][T12911] sysfs_warn_dup+0x8e/0xa0 [ 304.906043][T12911] sysfs_do_create_link_sd+0xc0/0x110 [ 304.906071][T12911] device_add_class_symlinks+0x1cf/0x240 [ 304.906102][T12911] device_add+0x475/0xbb0 [ 304.906130][T12911] wiphy_register+0x1dc5/0x2dc0 [ 304.906180][T12911] ? __pfx_wiphy_register+0x10/0x10 [ 304.906213][T12911] ? __pfx_netdev_run_todo+0x10/0x10 [ 304.906234][T12911] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 304.906267][T12911] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 304.906303][T12911] ieee80211_register_hw+0x3d82/0x4a70 [ 304.906341][T12911] ? ieee80211_register_hw+0x18e1/0x4a70 [ 304.906396][T12911] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 304.906422][T12911] ? __asan_memset+0x22/0x50 [ 304.906448][T12911] ? __hrtimer_setup+0x1b7/0x260 [ 304.906474][T12911] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 304.906507][T12911] mac80211_hwsim_new_radio+0x3335/0x5aa0 [ 304.906565][T12911] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 304.906600][T12911] ? kstrndup+0xbf/0x160 [ 304.906628][T12911] hwsim_new_radio_nl+0xf6a/0x1c00 [ 304.906674][T12911] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 304.906708][T12911] ? rcu_is_watching+0x15/0xb0 [ 304.906731][T12911] ? trace_kmalloc+0x2a/0xf0 [ 304.906762][T12911] ? __nla_parse+0x40/0x60 [ 304.906795][T12911] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 304.906817][T12911] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 304.906848][T12911] genl_family_rcv_msg_doit+0x22a/0x330 [ 304.906877][T12911] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 304.906911][T12911] ? bpf_lsm_capable+0x9/0x20 [ 304.906930][T12911] ? security_capable+0x7e/0x2c0 [ 304.906958][T12911] genl_rcv_msg+0x61c/0x7a0 [ 304.906987][T12911] ? __pfx_genl_rcv_msg+0x10/0x10 [ 304.907007][T12911] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 304.907030][T12911] ? __pfx_ref_tracker_free+0x10/0x10 [ 304.907067][T12911] netlink_rcv_skb+0x232/0x4b0 [ 304.907095][T12911] ? __pfx_genl_rcv_msg+0x10/0x10 [ 304.907118][T12911] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 304.907163][T12911] ? down_read+0x270/0x2e0 [ 304.907181][T12911] ? genl_rcv+0xd/0x40 [ 304.907203][T12911] genl_rcv+0x28/0x40 [ 304.907221][T12911] netlink_unicast+0x75c/0x8e0 [ 304.907258][T12911] netlink_sendmsg+0x813/0xb40 [ 304.907296][T12911] ? __pfx_netlink_sendmsg+0x10/0x10 [ 304.907329][T12911] ? aa_sock_msg_perm+0xf1/0x1b0 [ 304.907361][T12911] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 304.907400][T12911] ____sys_sendmsg+0x972/0x9f0 [ 304.907429][T12911] ? __might_fault+0xaf/0x130 [ 304.907460][T12911] ? __pfx_____sys_sendmsg+0x10/0x10 [ 304.907498][T12911] ? import_iovec+0x73/0xa0 [ 304.907530][T12911] ___sys_sendmsg+0x2a5/0x360 [ 304.907557][T12911] ? __lock_acquire+0x6b5/0x2cf0 [ 304.907582][T12911] ? __pfx____sys_sendmsg+0x10/0x10 [ 304.907618][T12911] ? futex_wait+0x2a2/0x390 [ 304.907671][T12911] ? __fget_files+0x2a/0x420 [ 304.907694][T12911] ? __fget_files+0x3a0/0x420 [ 304.907726][T12911] __x64_sys_sendmsg+0x1bd/0x2a0 [ 304.907758][T12911] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 304.907797][T12911] ? rcu_is_watching+0x15/0xb0 [ 304.907829][T12911] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.907849][T12911] do_syscall_64+0x15f/0xf80 [ 304.907880][T12911] ? clear_bhb_loop+0x40/0x90 [ 304.907904][T12911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.907923][T12911] RIP: 0033:0x7f640b39ce59 [ 304.907941][T12911] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 304.907958][T12911] RSP: 002b:00007f640c23f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 304.907979][T12911] RAX: ffffffffffffffda RBX: 00007f640b615fa0 RCX: 00007f640b39ce59 [ 304.907993][T12911] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 304.908005][T12911] RBP: 00007f640b432d6f R08: 0000000000000000 R09: 0000000000000000 [ 304.908016][T12911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 304.908027][T12911] R13: 00007f640b616038 R14: 00007f640b615fa0 R15: 00007ffd257c1b58 [ 304.908059][T12911] [ 305.494942][T12929] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1955'. [ 305.535495][T12929] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1955'. [ 305.857596][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 305.876428][T12962] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 306.511512][ T5288] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 306.519543][T12626] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 308.426724][T12929] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 308.616838][T12989] sysfs: cannot create duplicate filename '/class/ieee80211/Ku crK:̥B| lS-!' [ 308.645318][T12989] CPU: 1 UID: 0 PID: 12989 Comm: syz.3.1967 Not tainted syzkaller #0 PREEMPT(full) [ 308.645347][T12989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 308.645361][T12989] Call Trace: [ 308.645370][T12989] [ 308.645379][T12989] dump_stack_lvl+0xe8/0x150 [ 308.645411][T12989] sysfs_warn_dup+0x8e/0xa0 [ 308.645440][T12989] sysfs_do_create_link_sd+0xc0/0x110 [ 308.645471][T12989] device_add_class_symlinks+0x1cf/0x240 [ 308.645504][T12989] device_add+0x475/0xbb0 [ 308.645536][T12989] wiphy_register+0x1dc5/0x2dc0 [ 308.645588][T12989] ? __pfx_wiphy_register+0x10/0x10 [ 308.645623][T12989] ? __pfx_netdev_run_todo+0x10/0x10 [ 308.645646][T12989] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 308.645681][T12989] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 308.645721][T12989] ieee80211_register_hw+0x3d82/0x4a70 [ 308.645762][T12989] ? ieee80211_register_hw+0x18e1/0x4a70 [ 308.645812][T12989] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 308.645841][T12989] ? __asan_memset+0x22/0x50 [ 308.645889][T12989] ? __hrtimer_setup+0x1b7/0x260 [ 308.645926][T12989] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 308.645957][T12989] mac80211_hwsim_new_radio+0x3335/0x5aa0 [ 308.646009][T12989] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 308.646033][T12989] ? kstrndup+0xbf/0x160 [ 308.646081][T12989] hwsim_new_radio_nl+0xf6a/0x1c00 [ 308.646130][T12989] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 308.646165][T12989] ? rcu_is_watching+0x15/0xb0 [ 308.646191][T12989] ? trace_kmalloc+0x2a/0xf0 [ 308.646235][T12989] ? __nla_parse+0x40/0x60 [ 308.646268][T12989] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 308.646291][T12989] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 308.646323][T12989] genl_family_rcv_msg_doit+0x22a/0x330 [ 308.646352][T12989] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 308.646388][T12989] ? bpf_lsm_capable+0x9/0x20 [ 308.646424][T12989] ? security_capable+0x7e/0x2c0 [ 308.646457][T12989] genl_rcv_msg+0x61c/0x7a0 [ 308.646487][T12989] ? __pfx_genl_rcv_msg+0x10/0x10 [ 308.646509][T12989] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 308.646550][T12989] netlink_rcv_skb+0x232/0x4b0 [ 308.646580][T12989] ? __pfx_genl_rcv_msg+0x10/0x10 [ 308.646604][T12989] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 308.646651][T12989] ? down_read+0x270/0x2e0 [ 308.646670][T12989] ? genl_rcv+0xd/0x40 [ 308.646693][T12989] genl_rcv+0x28/0x40 [ 308.646713][T12989] netlink_unicast+0x75c/0x8e0 [ 308.646751][T12989] netlink_sendmsg+0x813/0xb40 [ 308.646791][T12989] ? __pfx_netlink_sendmsg+0x10/0x10 [ 308.646825][T12989] ? aa_sock_msg_perm+0xf1/0x1b0 [ 308.646855][T12989] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 308.646909][T12989] ____sys_sendmsg+0x972/0x9f0 [ 308.646940][T12989] ? __might_fault+0xaf/0x130 [ 308.646973][T12989] ? __pfx_____sys_sendmsg+0x10/0x10 [ 308.647014][T12989] ? import_iovec+0x73/0xa0 [ 308.647048][T12989] ___sys_sendmsg+0x2a5/0x360 [ 308.647078][T12989] ? __lock_acquire+0x6b5/0x2cf0 [ 308.647105][T12989] ? __pfx____sys_sendmsg+0x10/0x10 [ 308.647143][T12989] ? futex_wait+0x2a2/0x390 [ 308.647202][T12989] ? __fget_files+0x2a/0x420 [ 308.647225][T12989] ? __fget_files+0x3a0/0x420 [ 308.647271][T12989] __x64_sys_sendmsg+0x1bd/0x2a0 [ 308.647303][T12989] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 308.647341][T12989] ? rcu_is_watching+0x15/0xb0 [ 308.647374][T12989] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.647395][T12989] do_syscall_64+0x15f/0xf80 [ 308.647424][T12989] ? trace_irq_disable+0x3b/0x140 [ 308.647453][T12989] ? clear_bhb_loop+0x40/0x90 [ 308.647478][T12989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.647498][T12989] RIP: 0033:0x7f98bb79ce59 [ 308.647516][T12989] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 308.647533][T12989] RSP: 002b:00007f98bc615028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 308.647554][T12989] RAX: ffffffffffffffda RBX: 00007f98bba15fa0 RCX: 00007f98bb79ce59 [ 308.647567][T12989] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 308.647580][T12989] RBP: 00007f98bb832d6f R08: 0000000000000000 R09: 0000000000000000 [ 308.647591][T12989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 308.647603][T12989] R13: 00007f98bba16038 R14: 00007f98bba15fa0 R15: 00007ffc63056c88 [ 308.647635][T12989] [ 309.088559][T12999] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1968'. [ 309.101437][T12999] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1968'. [ 309.119059][T13001] netlink: 'syz.1.1972': attribute type 1 has an invalid length. [ 309.566398][T12990] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 309.607756][T13009] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 309.628928][T13009] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 309.648102][T12998] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1971'. [ 309.694527][T13001] bond4: (slave bridge4): Enslaving as an active interface with a down link [ 309.763433][T13017] bond4: (slave gretap1): making interface the new active one [ 309.784135][T13017] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 309.946385][T13035] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1979'. [ 310.704050][T13074] netlink: 'syz.3.1989': attribute type 11 has an invalid length. [ 310.897677][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 310.936313][T13094] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 311.073335][T13103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1996'. [ 311.084367][T13103] netlink: 'syz.2.1996': attribute type 1 has an invalid length. [ 311.102955][T13103] netlink: 'syz.2.1996': attribute type 7 has an invalid length. [ 311.119840][T13103] netlink: 'syz.2.1996': attribute type 8 has an invalid length. [ 311.142433][T13103] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1996'. [ 311.203833][T13109] syz_tun: entered allmulticast mode [ 311.286935][ T5288] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 311.490530][T13115] sit3: entered promiscuous mode [ 311.495533][T13115] sit3: entered allmulticast mode [ 311.733166][T13100] bond1 (unregistering): Released all slaves [ 311.862513][T13141] netlink: 'syz.2.2005': attribute type 1 has an invalid length. [ 312.164317][T13156] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2010'. [ 312.175201][T13157] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2010'. [ 312.218028][T13157] 8021q: adding VLAN 0 to HW filter on device bond6 [ 312.234442][T13156] bond6: entered promiscuous mode [ 312.241408][T13156] bond6: entered allmulticast mode [ 312.242111][T13161] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2009'. [ 312.259623][T13156] 8021q: adding VLAN 0 to HW filter on device bond6 [ 312.279613][T13156] team0: Port device bond6 added [ 312.308818][T13156] bond6: (slave vcan1): refused to change device type [ 312.373867][T13167] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2011'. [ 312.521592][T13173] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2013'. [ 312.624104][T13177] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2016'. [ 312.735095][T13182] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2018'. [ 312.803127][T13188] nbd: couldn't find a device at index 1048580 [ 312.949880][T13194] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2021'. [ 313.040096][T13197] openvswitch: netlink: IP tunnel dst address not specified [ 313.213399][T13201] pimreg: left allmulticast mode [ 313.355771][T13211] xt_l2tp: v2 sid > 0xffff: 1114112 [ 313.377230][T13210] netlink: 'syz.1.2028': attribute type 3 has an invalid length. [ 313.413424][T13210] netlink: 'syz.1.2028': attribute type 1 has an invalid length. [ 313.432681][T13210] netlink: 'syz.1.2028': attribute type 2 has an invalid length. [ 313.612699][T13184] bond1 (unregistering): Released all slaves [ 313.870829][T13244] x_tables: duplicate underflow at hook 1 [ 314.300916][T13264] sysfs: cannot create duplicate filename '/class/ieee80211/Ku crK:̥B| lS-!' [ 314.315567][T13264] CPU: 0 UID: 0 PID: 13264 Comm: syz.2.2044 Not tainted syzkaller #0 PREEMPT(full) [ 314.315597][T13264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 314.315611][T13264] Call Trace: [ 314.315620][T13264] [ 314.315629][T13264] dump_stack_lvl+0xe8/0x150 [ 314.315659][T13264] sysfs_warn_dup+0x8e/0xa0 [ 314.315689][T13264] sysfs_do_create_link_sd+0xc0/0x110 [ 314.315719][T13264] device_add_class_symlinks+0x1cf/0x240 [ 314.315752][T13264] device_add+0x475/0xbb0 [ 314.315784][T13264] wiphy_register+0x1dc5/0x2dc0 [ 314.315838][T13264] ? __pfx_wiphy_register+0x10/0x10 [ 314.315872][T13264] ? __pfx_netdev_run_todo+0x10/0x10 [ 314.315894][T13264] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 314.315928][T13264] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 314.315968][T13264] ieee80211_register_hw+0x3d82/0x4a70 [ 314.316009][T13264] ? ieee80211_register_hw+0x18e1/0x4a70 [ 314.316060][T13264] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 314.316087][T13264] ? __asan_memset+0x22/0x50 [ 314.316114][T13264] ? __hrtimer_setup+0x1b7/0x260 [ 314.316140][T13264] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 314.316175][T13264] mac80211_hwsim_new_radio+0x3335/0x5aa0 [ 314.316237][T13264] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 314.316262][T13264] ? kstrndup+0xbf/0x160 [ 314.316294][T13264] hwsim_new_radio_nl+0xf6a/0x1c00 [ 314.316346][T13264] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 314.316383][T13264] ? rcu_is_watching+0x15/0xb0 [ 314.316408][T13264] ? trace_kmalloc+0x2a/0xf0 [ 314.316445][T13264] ? __nla_parse+0x40/0x60 [ 314.316490][T13264] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 314.316516][T13264] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 314.316552][T13264] genl_family_rcv_msg_doit+0x22a/0x330 [ 314.316587][T13264] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 314.316628][T13264] ? bpf_lsm_capable+0x9/0x20 [ 314.316649][T13264] ? security_capable+0x7e/0x2c0 [ 314.316685][T13264] genl_rcv_msg+0x61c/0x7a0 [ 314.316718][T13264] ? __pfx_genl_rcv_msg+0x10/0x10 [ 314.316741][T13264] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 314.316769][T13264] ? __pfx_ref_tracker_free+0x10/0x10 [ 314.316814][T13264] netlink_rcv_skb+0x232/0x4b0 [ 314.316846][T13264] ? __pfx_genl_rcv_msg+0x10/0x10 [ 314.316872][T13264] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 314.316922][T13264] ? down_read+0x270/0x2e0 [ 314.316942][T13264] ? genl_rcv+0xd/0x40 [ 314.316968][T13264] genl_rcv+0x28/0x40 [ 314.316989][T13264] netlink_unicast+0x75c/0x8e0 [ 314.317030][T13264] netlink_sendmsg+0x813/0xb40 [ 314.317073][T13264] ? __pfx_netlink_sendmsg+0x10/0x10 [ 314.317108][T13264] ? aa_sock_msg_perm+0xf1/0x1b0 [ 314.317139][T13264] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 314.317172][T13264] ____sys_sendmsg+0x972/0x9f0 [ 314.317204][T13264] ? __might_fault+0xaf/0x130 [ 314.317239][T13264] ? __pfx_____sys_sendmsg+0x10/0x10 [ 314.317282][T13264] ? import_iovec+0x73/0xa0 [ 314.317318][T13264] ___sys_sendmsg+0x2a5/0x360 [ 314.317348][T13264] ? __lock_acquire+0x6b5/0x2cf0 [ 314.317377][T13264] ? __pfx____sys_sendmsg+0x10/0x10 [ 314.317418][T13264] ? futex_wait+0x2a2/0x390 [ 314.317486][T13264] ? __fget_files+0x2a/0x420 [ 314.317512][T13264] ? __fget_files+0x3a0/0x420 [ 314.317551][T13264] __x64_sys_sendmsg+0x1bd/0x2a0 [ 314.317588][T13264] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 314.317631][T13264] ? rcu_is_watching+0x15/0xb0 [ 314.317670][T13264] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.317693][T13264] do_syscall_64+0x15f/0xf80 [ 314.317725][T13264] ? trace_irq_disable+0x3b/0x140 [ 314.317758][T13264] ? clear_bhb_loop+0x40/0x90 [ 314.317785][T13264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.317807][T13264] RIP: 0033:0x7f640b39ce59 [ 314.317827][T13264] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 314.317846][T13264] RSP: 002b:00007f640c23f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 314.317870][T13264] RAX: ffffffffffffffda RBX: 00007f640b615fa0 RCX: 00007f640b39ce59 [ 314.317887][T13264] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 314.317901][T13264] RBP: 00007f640b432d6f R08: 0000000000000000 R09: 0000000000000000 [ 314.317914][T13264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 314.317927][T13264] R13: 00007f640b616038 R14: 00007f640b615fa0 R15: 00007ffd257c1b58 [ 314.317965][T13264] [ 314.907002][T13275] netlink: 'syz.0.2049': attribute type 1 has an invalid length. [ 315.387272][T13297] netlink: 'syz.0.2057': attribute type 39 has an invalid length. [ 315.409406][T13297] hsr_slave_0: left promiscuous mode [ 315.430432][T13297] hsr_slave_1: left promiscuous mode [ 315.787589][T13322] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 315.794252][T13319] syzkaller0: entered promiscuous mode [ 315.805979][T13319] syzkaller0: entered allmulticast mode [ 315.937695][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 316.010822][T13329] bond0: (slave bond_slave_1): Releasing backup interface [ 316.019400][T13331] netlink: 'syz.2.2070': attribute type 6 has an invalid length. [ 316.082785][T13336] __nla_validate_parse: 24 callbacks suppressed [ 316.082806][T13336] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2071'. [ 316.258895][T13348] xt_TCPMSS: Only works on TCP SYN packets [ 316.259850][T13340] xt_TCPMSS: Only works on TCP SYN packets [ 316.376299][T13356] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.2076'. [ 316.400585][T13356] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.2076'. [ 316.551657][T13363] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2079'. [ 316.585940][T13369] syzkaller0: entered promiscuous mode [ 316.603088][T13369] syzkaller0: entered allmulticast mode [ 316.760623][T13375] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2081'. [ 316.850313][T13381] netlink: 'syz.2.2083': attribute type 1 has an invalid length. [ 316.867734][T13382] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2083'. [ 316.934042][T13378] netlink: 'syz.0.2082': attribute type 1 has an invalid length. [ 316.951097][T13393] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2085'. [ 317.041637][T13381] 8021q: adding VLAN 0 to HW filter on device bond7 [ 317.220378][ T1315] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 317.278246][T13402] netlink: 'syz.2.2090': attribute type 11 has an invalid length. [ 317.469883][T13417] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6tnl0, syncid = 1, id = 0 [ 317.605706][T13427] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2096'. [ 317.820514][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 317.873799][T13438] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 317.895648][T13441] pim6reg1: entered promiscuous mode [ 317.901178][T13441] pim6reg1: entered allmulticast mode [ 317.928122][T13436] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2099'. [ 318.268864][T13457] x_tables: duplicate underflow at hook 4 [ 318.407832][T13463] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2108'. [ 318.427849][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 318.590015][T13471] ip6tnl0: Caught tx_queue_len zero misconfig [ 318.796695][T13482] openvswitch: netlink: Flow actions attr not present in new flow. [ 318.908226][T13486] netlink: 'syz.3.2116': attribute type 2 has an invalid length. [ 318.925831][T13486] block nbd1: Unsupported socket: should be TCP or UNIX. [ 319.401797][T13520] gretap3: entered promiscuous mode [ 319.407072][T13520] gretap3: entered allmulticast mode [ 319.488638][T13531] netlink: 'syz.3.2130': attribute type 19 has an invalid length. [ 319.776592][T13547] tc_dump_action: action bad kind [ 319.804686][T13550] netlink: 'syz.4.2134': attribute type 1 has an invalid length. [ 320.191865][T13568] syzkaller0: entered promiscuous mode [ 320.209964][T13568] syzkaller0: entered allmulticast mode [ 320.565640][T13594] tipc: Enabled bearer , priority 10 [ 320.796591][T13606] netlink: 'syz.4.2150': attribute type 4 has an invalid length. [ 320.848434][T13610] netlink: 'syz.2.2152': attribute type 21 has an invalid length. [ 320.934922][T13610] bond8: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 320.961796][T13610] bond8 (unregistering): Released all slaves [ 320.977639][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 321.094058][T13622] __nla_validate_parse: 9 callbacks suppressed [ 321.094077][T13622] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2157'. [ 321.152034][T13623] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2156'. [ 321.464601][T13640] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2162'. [ 321.534026][T13634] bond5: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 321.561927][T13634] bond5 (unregistering): Released all slaves [ 321.691179][T13648] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2164'. [ 321.759722][T13651] netlink: 788 bytes leftover after parsing attributes in process `syz.0.2166'. [ 321.781067][T13651] dvmrp0: left allmulticast mode [ 321.800380][T13651] pimreg: left allmulticast mode [ 322.168100][T13667] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2173'. [ 322.204784][T13663] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2171'. [ 322.588530][T13685] netlink: 'syz.0.2180': attribute type 1 has an invalid length. [ 322.782260][T12626] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 322.904226][T13703] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2185'. [ 323.072167][T13712] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2186'. [ 323.089620][T13712] nbd: must specify at least one socket [ 323.100541][T13712] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2186'. [ 323.110651][T13712] nbd: must specify at least one socket [ 323.116546][T13712] nbd: must specify at least one socket [ 323.123421][T13712] nbd: must specify at least one socket [ 323.131170][T13712] nbd: must specify at least one socket [ 323.137233][T13712] nbd: must specify at least one socket [ 323.145764][T13712] nbd: must specify at least one socket [ 323.155023][T13712] nbd: must specify at least one socket [ 323.164413][T13712] nbd: must specify at least one socket [ 323.170651][T13712] nbd: must specify at least one socket [ 323.176610][T13712] nbd: must specify at least one socket [ 323.182882][T13712] nbd: must specify at least one socket [ 323.191087][T13712] nbd: must specify at least one socket [ 323.197001][T13712] nbd: must specify at least one socket [ 323.203287][T13712] nbd: must specify at least one socket [ 323.210098][T13712] nbd: must specify at least one socket [ 323.216071][T13712] nbd: must specify at least one socket [ 323.226074][T13712] nbd: must specify at least one socket [ 323.240098][T13712] nbd: must specify at least one socket [ 323.245841][T13704] bond1 (unregistering): Released all slaves [ 323.255654][T13712] nbd: must specify at least one socket [ 323.278742][T13712] nbd: must specify at least one socket [ 323.300771][T13712] nbd: must specify at least one socket [ 323.316808][T13712] nbd: must specify at least one socket [ 323.335009][T13712] nbd: must specify at least one socket [ 323.354000][T13712] nbd: must specify at least one socket [ 323.385017][T13712] nbd: must specify at least one socket [ 323.400926][T13712] nbd: must specify at least one socket [ 323.406826][T13712] nbd: must specify at least one socket [ 323.413102][T13712] nbd: must specify at least one socket [ 323.422591][T13712] nbd: must specify at least one socket [ 323.430285][T13712] nbd: must specify at least one socket [ 323.436797][T13712] nbd: must specify at least one socket [ 323.445316][T13712] nbd: must specify at least one socket [ 323.480463][T13712] nbd: must specify at least one socket [ 323.506598][T13712] nbd: must specify at least one socket [ 323.520439][T13712] nbd: must specify at least one socket [ 323.537666][T13712] nbd: must specify at least one socket [ 323.551859][T13712] nbd: must specify at least one socket [ 323.567879][T13712] nbd: must specify at least one socket [ 323.586765][T13712] nbd: must specify at least one socket [ 323.607162][T13712] nbd: must specify at least one socket [ 323.635359][T13712] nbd: must specify at least one socket [ 323.657589][T13712] nbd: must specify at least one socket [ 323.676947][T13712] nbd: must specify at least one socket [ 323.693875][T13712] nbd: must specify at least one socket [ 323.716555][T13712] nbd: must specify at least one socket [ 323.743023][T13712] nbd: must specify at least one socket [ 323.759999][T13712] nbd: must specify at least one socket [ 323.772189][T13712] nbd: must specify at least one socket [ 323.786349][T13712] nbd: must specify at least one socket [ 323.801771][T13712] nbd: must specify at least one socket [ 323.826580][T13712] nbd: must specify at least one socket [ 323.850462][T13712] nbd: must specify at least one socket [ 323.857189][T13733] netlink: 'syz.1.2193': attribute type 83 has an invalid length. [ 323.868896][T13728] ip6erspan1: entered allmulticast mode [ 323.875184][T13712] nbd: must specify at least one socket [ 324.532300][T13770] tipc: Enabling of bearer rejected, already enabled [ 325.183016][T13810] netlink: 'syz.4.2218': attribute type 10 has an invalid length. [ 325.270817][T13810] bond0: (slave team0): Releasing backup interface [ 325.283378][T13810] team0 (unregistering): left allmulticast mode [ 325.308302][T13810] team_slave_0: left allmulticast mode [ 325.322109][T13810] team_slave_1: left allmulticast mode [ 325.335283][T13810] netdevsim netdevsim4 netdevsim1: left allmulticast mode [ 325.381394][T13810] team0 (unregistering): Port device team_slave_0 removed [ 325.451006][T13810] team0 (unregistering): Port device team_slave_1 removed [ 325.482827][T13810] team0 (unregistering): Port device netdevsim1 removed [ 325.504386][T13810] team0 (unregistering): Port device bond6 removed [ 325.692000][T13846] netlink: 'syz.3.2228': attribute type 10 has an invalid length. [ 325.829146][T13855] netlink: 'syz.2.2231': attribute type 1 has an invalid length. [ 325.860180][T13855] netlink: 'syz.2.2231': attribute type 2 has an invalid length. [ 325.882902][T13855] netlink: 'syz.2.2231': attribute type 2 has an invalid length. [ 325.908878][T13855] netlink: 'syz.2.2231': attribute type 2 has an invalid length. [ 325.926409][T13859] Unsupported ieee802154 address type: 0 [ 326.017567][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 326.098359][T13871] __nla_validate_parse: 63 callbacks suppressed [ 326.098376][T13871] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2238'. [ 326.099153][T13853] syz.2.2231 (13853) used greatest stack depth: 16600 bytes left [ 326.275519][T13871] bond5 (unregistering): Released all slaves [ 326.400176][T13894] xt_l2tp: v2 doesn't support IP mode [ 326.546545][T13903] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2246'. [ 326.831974][T13915] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2250'. [ 326.868327][T13915] netlink: 'syz.2.2250': attribute type 13 has an invalid length. [ 326.894256][T13915] veth1_macvtap: left promiscuous mode [ 326.902797][T13915] macsec0: entered allmulticast mode [ 327.445100][T13938] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2259'. [ 327.508998][ T6374] tipc: Subscription rejected, illegal request [ 327.569257][T13946] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 327.721285][ T5646] block nbd1: Receive control failed (result -32) [ 327.742456][T13953] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.2265'. [ 327.911000][T13965] tunl0: Caught tx_queue_len zero misconfig [ 328.024662][T13972] Unsupported ieee802154 address type: 0 [ 328.117241][T13974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2271'. [ 328.175843][T13978] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2273'. [ 328.200126][T13979] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2272'. [ 328.253465][T13979] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2272'. [ 328.297599][T13979] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2272'. [ 328.308168][T13974] 8021q: adding VLAN 0 to HW filter on device bond8 [ 328.315784][T13987] openvswitch: netlink: Duplicate or invalid key (type 0). [ 328.324597][T13979] netlink: 'syz.4.2272': attribute type 15 has an invalid length. [ 328.366146][T13979] netlink: 'syz.4.2272': attribute type 15 has an invalid length. [ 328.372881][T13987] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 328.376144][ T13] netdevsim netdevsim4 netdevsim0: set [0, 1] type 1 family 0 port 256 - 0 [ 328.414663][ T13] netdevsim netdevsim4 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0 [ 328.430045][ T13] netdevsim netdevsim4 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0 [ 328.439155][ T13] netdevsim netdevsim4 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0 [ 328.531890][T13995] netlink: 'syz.2.2278': attribute type 10 has an invalid length. [ 328.542836][T13995] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.553491][T13997] netlink: 'syz.0.2277': attribute type 83 has an invalid length. [ 328.575775][T13995] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 328.603554][T13995] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 328.628003][T13995] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 328.827228][T14013] atomic_op ffff88801fa81198 conn xmit_atomic 0000000000000000 [ 329.005130][T14024] netlink: 'syz.2.2285': attribute type 1 has an invalid length. [ 329.164890][T14031] sysfs: cannot create duplicate filename '/class/ieee80211/Ku crK:̥B| lS-!' [ 329.232485][T14031] CPU: 0 UID: 0 PID: 14031 Comm: syz.4.2289 Not tainted syzkaller #0 PREEMPT(full) [ 329.232515][T14031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 329.232530][T14031] Call Trace: [ 329.232539][T14031] [ 329.232550][T14031] dump_stack_lvl+0xe8/0x150 [ 329.232583][T14031] sysfs_warn_dup+0x8e/0xa0 [ 329.232612][T14031] sysfs_do_create_link_sd+0xc0/0x110 [ 329.232645][T14031] device_add_class_symlinks+0x1cf/0x240 [ 329.232678][T14031] device_add+0x475/0xbb0 [ 329.232710][T14031] wiphy_register+0x1dc5/0x2dc0 [ 329.232765][T14031] ? __pfx_wiphy_register+0x10/0x10 [ 329.232799][T14031] ? __pfx_netdev_run_todo+0x10/0x10 [ 329.232821][T14031] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 329.232857][T14031] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 329.232898][T14031] ieee80211_register_hw+0x3d82/0x4a70 [ 329.232940][T14031] ? ieee80211_register_hw+0x18e1/0x4a70 [ 329.232992][T14031] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 329.233020][T14031] ? __asan_memset+0x22/0x50 [ 329.233047][T14031] ? __hrtimer_setup+0x1b7/0x260 [ 329.233074][T14031] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 329.233108][T14031] mac80211_hwsim_new_radio+0x3335/0x5aa0 [ 329.233168][T14031] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 329.233193][T14031] ? kstrndup+0xbf/0x160 [ 329.233225][T14031] hwsim_new_radio_nl+0xf6a/0x1c00 [ 329.233274][T14031] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 329.233310][T14031] ? rcu_is_watching+0x15/0xb0 [ 329.233348][T14031] ? trace_kmalloc+0x2a/0xf0 [ 329.233382][T14031] ? __nla_parse+0x40/0x60 [ 329.233418][T14031] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 329.233451][T14031] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 329.233483][T14031] genl_family_rcv_msg_doit+0x22a/0x330 [ 329.233515][T14031] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 329.233553][T14031] ? bpf_lsm_capable+0x9/0x20 [ 329.233572][T14031] ? security_capable+0x7e/0x2c0 [ 329.233606][T14031] genl_rcv_msg+0x61c/0x7a0 [ 329.233636][T14031] ? __pfx_genl_rcv_msg+0x10/0x10 [ 329.233658][T14031] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 329.233685][T14031] ? __pfx_ref_tracker_free+0x10/0x10 [ 329.233726][T14031] netlink_rcv_skb+0x232/0x4b0 [ 329.233756][T14031] ? __pfx_genl_rcv_msg+0x10/0x10 [ 329.233785][T14031] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 329.233850][T14031] ? down_read+0x270/0x2e0 [ 329.233870][T14031] ? genl_rcv+0xd/0x40 [ 329.233896][T14031] genl_rcv+0x28/0x40 [ 329.233917][T14031] netlink_unicast+0x75c/0x8e0 [ 329.233958][T14031] netlink_sendmsg+0x813/0xb40 [ 329.234006][T14031] ? __pfx_netlink_sendmsg+0x10/0x10 [ 329.234042][T14031] ? aa_sock_msg_perm+0xf1/0x1b0 [ 329.234074][T14031] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 329.234108][T14031] ____sys_sendmsg+0x972/0x9f0 [ 329.234140][T14031] ? __might_fault+0xaf/0x130 [ 329.234176][T14031] ? __pfx_____sys_sendmsg+0x10/0x10 [ 329.234220][T14031] ? import_iovec+0x73/0xa0 [ 329.234256][T14031] ___sys_sendmsg+0x2a5/0x360 [ 329.234287][T14031] ? __lock_acquire+0x6b5/0x2cf0 [ 329.234316][T14031] ? __pfx____sys_sendmsg+0x10/0x10 [ 329.234357][T14031] ? futex_wait+0x2a2/0x390 [ 329.234418][T14031] ? __fget_files+0x2a/0x420 [ 329.234451][T14031] ? __fget_files+0x3a0/0x420 [ 329.234490][T14031] __x64_sys_sendmsg+0x1bd/0x2a0 [ 329.234527][T14031] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 329.234571][T14031] ? rcu_is_watching+0x15/0xb0 [ 329.234608][T14031] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.234633][T14031] do_syscall_64+0x15f/0xf80 [ 329.234665][T14031] ? trace_irq_disable+0x3b/0x140 [ 329.234698][T14031] ? clear_bhb_loop+0x40/0x90 [ 329.234724][T14031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.234745][T14031] RIP: 0033:0x7f76b679ce59 [ 329.234766][T14031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 329.234785][T14031] RSP: 002b:00007f76b7605028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 329.234808][T14031] RAX: ffffffffffffffda RBX: 00007f76b6a15fa0 RCX: 00007f76b679ce59 [ 329.234824][T14031] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 329.234837][T14031] RBP: 00007f76b6832d6f R08: 0000000000000000 R09: 0000000000000000 [ 329.234850][T14031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 329.234863][T14031] R13: 00007f76b6a16038 R14: 00007f76b6a15fa0 R15: 00007ffdcb535c58 [ 329.234899][T14031] [ 330.094135][T14064] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 330.376956][T14078] sysfs: cannot create duplicate filename '/class/ieee80211/Ku crK:̥B| lS-!' [ 330.391253][T14078] CPU: 0 UID: 0 PID: 14078 Comm: syz.2.2305 Not tainted syzkaller #0 PREEMPT(full) [ 330.391279][T14078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 330.391292][T14078] Call Trace: [ 330.391300][T14078] [ 330.391308][T14078] dump_stack_lvl+0xe8/0x150 [ 330.391336][T14078] sysfs_warn_dup+0x8e/0xa0 [ 330.391373][T14078] sysfs_do_create_link_sd+0xc0/0x110 [ 330.391402][T14078] device_add_class_symlinks+0x1cf/0x240 [ 330.391433][T14078] device_add+0x475/0xbb0 [ 330.391462][T14078] wiphy_register+0x1dc5/0x2dc0 [ 330.391513][T14078] ? __pfx_wiphy_register+0x10/0x10 [ 330.391545][T14078] ? __pfx_netdev_run_todo+0x10/0x10 [ 330.391565][T14078] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 330.391598][T14078] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 330.391637][T14078] ieee80211_register_hw+0x3d82/0x4a70 [ 330.391676][T14078] ? ieee80211_register_hw+0x18e1/0x4a70 [ 330.391724][T14078] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 330.391750][T14078] ? __asan_memset+0x22/0x50 [ 330.391776][T14078] ? __hrtimer_setup+0x1b7/0x260 [ 330.391801][T14078] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 330.391837][T14078] mac80211_hwsim_new_radio+0x3335/0x5aa0 [ 330.391895][T14078] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 330.391919][T14078] ? kstrndup+0xbf/0x160 [ 330.391950][T14078] hwsim_new_radio_nl+0xf6a/0x1c00 [ 330.392000][T14078] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 330.392036][T14078] ? rcu_is_watching+0x15/0xb0 [ 330.392061][T14078] ? trace_kmalloc+0x2a/0xf0 [ 330.392095][T14078] ? __nla_parse+0x40/0x60 [ 330.392131][T14078] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 330.392155][T14078] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 330.392189][T14078] genl_family_rcv_msg_doit+0x22a/0x330 [ 330.392220][T14078] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 330.392258][T14078] ? bpf_lsm_capable+0x9/0x20 [ 330.392277][T14078] ? security_capable+0x7e/0x2c0 [ 330.392310][T14078] genl_rcv_msg+0x61c/0x7a0 [ 330.392340][T14078] ? __pfx_genl_rcv_msg+0x10/0x10 [ 330.392369][T14078] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 330.392397][T14078] ? __pfx_ref_tracker_free+0x10/0x10 [ 330.392439][T14078] netlink_rcv_skb+0x232/0x4b0 [ 330.392469][T14078] ? __pfx_genl_rcv_msg+0x10/0x10 [ 330.392494][T14078] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 330.392542][T14078] ? down_read+0x270/0x2e0 [ 330.392572][T14078] ? genl_rcv+0xd/0x40 [ 330.392602][T14078] genl_rcv+0x28/0x40 [ 330.392621][T14078] netlink_unicast+0x75c/0x8e0 [ 330.392658][T14078] netlink_sendmsg+0x813/0xb40 [ 330.392696][T14078] ? __pfx_netlink_sendmsg+0x10/0x10 [ 330.392729][T14078] ? aa_sock_msg_perm+0xf1/0x1b0 [ 330.392757][T14078] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 330.392805][T14078] ____sys_sendmsg+0x972/0x9f0 [ 330.392836][T14078] ? __might_fault+0xaf/0x130 [ 330.392879][T14078] ? __pfx_____sys_sendmsg+0x10/0x10 [ 330.392918][T14078] ? import_iovec+0x73/0xa0 [ 330.392950][T14078] ___sys_sendmsg+0x2a5/0x360 [ 330.392978][T14078] ? __lock_acquire+0x6b5/0x2cf0 [ 330.393004][T14078] ? __pfx____sys_sendmsg+0x10/0x10 [ 330.393041][T14078] ? futex_wait+0x2a2/0x390 [ 330.393096][T14078] ? __fget_files+0x2a/0x420 [ 330.393135][T14078] ? __fget_files+0x3a0/0x420 [ 330.393172][T14078] __x64_sys_sendmsg+0x1bd/0x2a0 [ 330.393206][T14078] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 330.393248][T14078] ? rcu_is_watching+0x15/0xb0 [ 330.393282][T14078] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.393305][T14078] do_syscall_64+0x15f/0xf80 [ 330.393335][T14078] ? trace_irq_disable+0x3b/0x140 [ 330.393373][T14078] ? clear_bhb_loop+0x40/0x90 [ 330.393399][T14078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.393420][T14078] RIP: 0033:0x7f640b39ce59 [ 330.393439][T14078] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 330.393457][T14078] RSP: 002b:00007f640c23f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 330.393479][T14078] RAX: ffffffffffffffda RBX: 00007f640b615fa0 RCX: 00007f640b39ce59 [ 330.393494][T14078] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 330.393507][T14078] RBP: 00007f640b432d6f R08: 0000000000000000 R09: 0000000000000000 [ 330.393520][T14078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 330.393532][T14078] R13: 00007f640b616038 R14: 00007f640b615fa0 R15: 00007ffd257c1b58 [ 330.393567][T14078] [ 330.958274][T14086] bond8: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 331.057534][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 331.104774][T14086] bond8: (slave lo): Enslaving as an active interface with an up link [ 331.118660][T14080] __nla_validate_parse: 13 callbacks suppressed [ 331.118678][T14080] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2306'. [ 331.136000][T14086] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 331.159978][T14094] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.2312'. [ 331.169243][T14094] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 331.288684][T14093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2311'. [ 331.323350][T14093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2311'. [ 331.341700][T14102] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2316'. [ 331.353942][T14102] FAULT_INJECTION: forcing a failure. [ 331.353942][T14102] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 331.371791][T14102] CPU: 0 UID: 0 PID: 14102 Comm: syz.3.2316 Not tainted syzkaller #0 PREEMPT(full) [ 331.371818][T14102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 331.371831][T14102] Call Trace: [ 331.371839][T14102] [ 331.371847][T14102] dump_stack_lvl+0xe8/0x150 [ 331.371877][T14102] should_fail_ex+0x412/0x560 [ 331.371911][T14102] _copy_from_user+0x2d/0xb0 [ 331.371947][T14102] ___sys_sendmsg+0x1c6/0x360 [ 331.371979][T14102] ? __lock_acquire+0x6b5/0x2cf0 [ 331.372007][T14102] ? __pfx____sys_sendmsg+0x10/0x10 [ 331.372079][T14102] ? __fget_files+0x2a/0x420 [ 331.372104][T14102] ? __fget_files+0x3a0/0x420 [ 331.372141][T14102] __x64_sys_sendmsg+0x1bd/0x2a0 [ 331.372176][T14102] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 331.372217][T14102] ? __pfx_ksys_write+0x10/0x10 [ 331.372257][T14102] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.372280][T14102] do_syscall_64+0x15f/0xf80 [ 331.372320][T14102] ? trace_irq_disable+0x3b/0x140 [ 331.372351][T14102] ? clear_bhb_loop+0x40/0x90 [ 331.372376][T14102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.372396][T14102] RIP: 0033:0x7f98bb79ce59 [ 331.372422][T14102] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 331.372440][T14102] RSP: 002b:00007f98bc615028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 331.372461][T14102] RAX: ffffffffffffffda RBX: 00007f98bba15fa0 RCX: 00007f98bb79ce59 [ 331.372476][T14102] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000005 [ 331.372489][T14102] RBP: 00007f98bc615090 R08: 0000000000000000 R09: 0000000000000000 [ 331.372502][T14102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 331.372514][T14102] R13: 00007f98bba16038 R14: 00007f98bba15fa0 R15: 00007ffc63056c88 [ 331.372547][T14102] [ 331.722145][T14113] validate_nla: 3 callbacks suppressed [ 331.722163][T14113] netlink: 'syz.0.2321': attribute type 3 has an invalid length. [ 331.741071][T14113] netlink: 'syz.0.2321': attribute type 2 has an invalid length. [ 331.749791][T14113] netlink: 'syz.0.2321': attribute type 2 has an invalid length. [ 331.758156][T14113] sctp: [Deprecated]: syz.0.2321 (pid 14113) Use of int in max_burst socket option. [ 331.758156][T14113] Use struct sctp_assoc_value instead [ 331.791134][T14111] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2320'. [ 331.943579][T14122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2323'. [ 332.004475][T14125] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2325'. [ 332.055290][T14128] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2326'. [ 332.089375][T14129] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2326'. [ 332.148660][T14128] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.156327][T14128] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.377745][T14141] netlink: 'syz.2.2328': attribute type 1 has an invalid length. [ 332.395539][T14141] netlink: 'syz.2.2328': attribute type 2 has an invalid length. [ 332.792220][T14162] sysfs: cannot create duplicate filename '/class/ieee80211/Ku crK:̥B| lS-!' [ 332.880623][T14162] CPU: 1 UID: 0 PID: 14162 Comm: syz.1.2335 Not tainted syzkaller #0 PREEMPT(full) [ 332.880651][T14162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 332.880664][T14162] Call Trace: [ 332.880672][T14162] [ 332.880681][T14162] dump_stack_lvl+0xe8/0x150 [ 332.880729][T14162] sysfs_warn_dup+0x8e/0xa0 [ 332.880770][T14162] sysfs_do_create_link_sd+0xc0/0x110 [ 332.880798][T14162] device_add_class_symlinks+0x1cf/0x240 [ 332.880847][T14162] device_add+0x475/0xbb0 [ 332.880881][T14162] wiphy_register+0x1dc5/0x2dc0 [ 332.880935][T14162] ? __pfx_wiphy_register+0x10/0x10 [ 332.880970][T14162] ? __pfx_netdev_run_todo+0x10/0x10 [ 332.880992][T14162] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 332.881026][T14162] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 332.881066][T14162] ieee80211_register_hw+0x3d82/0x4a70 [ 332.881118][T14162] ? ieee80211_register_hw+0x18e1/0x4a70 [ 332.881166][T14162] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 332.881199][T14162] ? __asan_memset+0x22/0x50 [ 332.881225][T14162] ? __hrtimer_setup+0x1b7/0x260 [ 332.881250][T14162] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 332.881282][T14162] mac80211_hwsim_new_radio+0x3335/0x5aa0 [ 332.881340][T14162] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 332.881364][T14162] ? kstrndup+0xbf/0x160 [ 332.881395][T14162] hwsim_new_radio_nl+0xf6a/0x1c00 [ 332.881451][T14162] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 332.881486][T14162] ? rcu_is_watching+0x15/0xb0 [ 332.881510][T14162] ? trace_kmalloc+0x2a/0xf0 [ 332.881544][T14162] ? __nla_parse+0x40/0x60 [ 332.881591][T14162] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 332.881615][T14162] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 332.881647][T14162] genl_family_rcv_msg_doit+0x22a/0x330 [ 332.881680][T14162] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 332.881743][T14162] ? bpf_lsm_capable+0x9/0x20 [ 332.881763][T14162] ? security_capable+0x7e/0x2c0 [ 332.881796][T14162] genl_rcv_msg+0x61c/0x7a0 [ 332.881827][T14162] ? __pfx_genl_rcv_msg+0x10/0x10 [ 332.881849][T14162] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 332.881876][T14162] ? __pfx_ref_tracker_free+0x10/0x10 [ 332.881916][T14162] netlink_rcv_skb+0x232/0x4b0 [ 332.881947][T14162] ? __pfx_genl_rcv_msg+0x10/0x10 [ 332.881971][T14162] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 332.882017][T14162] ? down_read+0x270/0x2e0 [ 332.882036][T14162] ? genl_rcv+0xd/0x40 [ 332.882060][T14162] genl_rcv+0x28/0x40 [ 332.882080][T14162] netlink_unicast+0x75c/0x8e0 [ 332.882128][T14162] netlink_sendmsg+0x813/0xb40 [ 332.882173][T14162] ? __pfx_netlink_sendmsg+0x10/0x10 [ 332.882212][T14162] ? aa_sock_msg_perm+0xf1/0x1b0 [ 332.882245][T14162] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 332.882295][T14162] ____sys_sendmsg+0x972/0x9f0 [ 332.882330][T14162] ? __might_fault+0xaf/0x130 [ 332.882367][T14162] ? __pfx_____sys_sendmsg+0x10/0x10 [ 332.882413][T14162] ? import_iovec+0x73/0xa0 [ 332.882458][T14162] ___sys_sendmsg+0x2a5/0x360 [ 332.882491][T14162] ? __lock_acquire+0x6b5/0x2cf0 [ 332.882521][T14162] ? __pfx____sys_sendmsg+0x10/0x10 [ 332.882564][T14162] ? futex_wait+0x2a2/0x390 [ 332.882628][T14162] ? __fget_files+0x2a/0x420 [ 332.882654][T14162] ? __fget_files+0x3a0/0x420 [ 332.882694][T14162] __x64_sys_sendmsg+0x1bd/0x2a0 [ 332.882732][T14162] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 332.882777][T14162] ? rcu_is_watching+0x15/0xb0 [ 332.882817][T14162] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.882843][T14162] do_syscall_64+0x15f/0xf80 [ 332.882875][T14162] ? trace_irq_disable+0x3b/0x140 [ 332.882909][T14162] ? clear_bhb_loop+0x40/0x90 [ 332.882938][T14162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.882961][T14162] RIP: 0033:0x7f9236d9ce59 [ 332.882982][T14162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 332.883009][T14162] RSP: 002b:00007f9237c25028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 332.883034][T14162] RAX: ffffffffffffffda RBX: 00007f9237015fa0 RCX: 00007f9236d9ce59 [ 332.883069][T14162] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 332.883083][T14162] RBP: 00007f9236e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 332.883097][T14162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 332.883111][T14162] R13: 00007f9237016038 R14: 00007f9237015fa0 R15: 00007ffc0ac7e608 [ 332.883149][T14162] [ 333.410175][T14166] netlink: 'syz.3.2337': attribute type 1 has an invalid length. [ 333.515933][T14174] FAULT_INJECTION: forcing a failure. [ 333.515933][T14174] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 333.533502][T14174] CPU: 1 UID: 0 PID: 14174 Comm: syz.1.2342 Not tainted syzkaller #0 PREEMPT(full) [ 333.533527][T14174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 333.533539][T14174] Call Trace: [ 333.533564][T14174] [ 333.533573][T14174] dump_stack_lvl+0xe8/0x150 [ 333.533608][T14174] should_fail_ex+0x412/0x560 [ 333.533641][T14174] _copy_from_iter+0x1d3/0x1670 [ 333.533674][T14174] ? rcu_is_watching+0x15/0xb0 [ 333.533706][T14174] ? __pfx__copy_from_iter+0x10/0x10 [ 333.533742][T14174] ? netlink_sendmsg+0x650/0xb40 [ 333.533771][T14174] ? skb_put+0x11b/0x210 [ 333.533803][T14174] netlink_sendmsg+0x6c0/0xb40 [ 333.533863][T14174] ? __pfx_netlink_sendmsg+0x10/0x10 [ 333.533898][T14174] ? aa_sock_msg_perm+0xf1/0x1b0 [ 333.533929][T14174] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 333.533962][T14174] ____sys_sendmsg+0x972/0x9f0 [ 333.533992][T14174] ? __might_fault+0xaf/0x130 [ 333.534027][T14174] ? __pfx_____sys_sendmsg+0x10/0x10 [ 333.534068][T14174] ? import_iovec+0x73/0xa0 [ 333.534103][T14174] ___sys_sendmsg+0x2a5/0x360 [ 333.534141][T14174] ? __lock_acquire+0x6b5/0x2cf0 [ 333.534169][T14174] ? __pfx____sys_sendmsg+0x10/0x10 [ 333.534240][T14174] ? __fget_files+0x2a/0x420 [ 333.534264][T14174] ? __fget_files+0x3a0/0x420 [ 333.534300][T14174] __x64_sys_sendmsg+0x1bd/0x2a0 [ 333.534336][T14174] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 333.534379][T14174] ? __pfx_ksys_write+0x10/0x10 [ 333.534421][T14174] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.534444][T14174] do_syscall_64+0x15f/0xf80 [ 333.534476][T14174] ? trace_irq_disable+0x3b/0x140 [ 333.534506][T14174] ? clear_bhb_loop+0x40/0x90 [ 333.534533][T14174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.534554][T14174] RIP: 0033:0x7f9236d9ce59 [ 333.534573][T14174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 333.534592][T14174] RSP: 002b:00007f9237c25028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 333.534615][T14174] RAX: ffffffffffffffda RBX: 00007f9237015fa0 RCX: 00007f9236d9ce59 [ 333.534630][T14174] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000005 [ 333.534644][T14174] RBP: 00007f9237c25090 R08: 0000000000000000 R09: 0000000000000000 [ 333.534657][T14174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 333.534669][T14174] R13: 00007f9237016038 R14: 00007f9237015fa0 R15: 00007ffc0ac7e608 [ 333.534704][T14174] [ 333.840253][T14182] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 334.237012][T14200] netlink: 'syz.2.2349': attribute type 33 has an invalid length. [ 334.824619][T14227] netlink: 'syz.0.2361': attribute type 61 has an invalid length. [ 335.853010][T14280] 8021q: adding VLAN 0 to HW filter on device bond5 [ 335.862227][T14282] tap0: tun_chr_ioctl cmd 2148553947 [ 335.961647][T14280] 8021q: adding VLAN 0 to HW filter on device bond6 [ 335.988948][T14280] bond5: (slave bond6): Enslaving as an active interface with an up link [ 336.094865][T14288] bond5 (unregistering): (slave bond6): Releasing backup interface [ 336.097518][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 336.127029][T14288] bond5 (unregistering): Released all slaves [ 336.166728][T14293] __nla_validate_parse: 25 callbacks suppressed [ 336.166746][T14293] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2374'. [ 336.456000][T14308] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 336.540216][T14314] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2382'. [ 336.777600][T14327] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2384'. [ 336.820394][T14331] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2387'. [ 336.826309][T14327] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2384'. [ 336.846876][T14331] netlink: 'syz.0.2387': attribute type 30 has an invalid length. [ 336.870518][T14330] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2387'. [ 336.879858][T14330] netlink: 'syz.0.2387': attribute type 30 has an invalid length. [ 336.894407][T14334] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2385'. [ 336.923494][T14335] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 336.951360][T14335] bond1: (slave lo): Enslaving as an active interface with an up link [ 336.975756][T14335] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 337.045499][T14339] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1473558231/1473558233 [ 337.072987][T14339] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1473558231/1473558232 [ 337.088936][ T408] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 337.110856][ T408] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 337.131247][T14338] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1473558231/1473558233 [ 337.151945][ T408] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 337.170809][T14338] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1473558231/1473558232 [ 337.200327][T14338] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2385'. [ 337.435584][T14350] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2389'. [ 337.469510][T14353] sctp: [Deprecated]: syz.0.2393 (pid 14353) Use of struct sctp_assoc_value in delayed_ack socket option. [ 337.469510][T14353] Use struct sctp_sack_info instead [ 337.477003][T14352] veth1_macvtap: entered allmulticast mode [ 337.491303][T14353] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2393'. [ 337.603839][T14352] veth1_macvtap (unregistering): left allmulticast mode [ 337.639435][T14363] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 337.647982][T14363] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 337.703530][T14356] h: entered promiscuous mode [ 337.716654][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.740698][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.893995][T14370] FAULT_INJECTION: forcing a failure. [ 337.893995][T14370] name failslab, interval 1, probability 0, space 0, times 0 [ 337.925713][T14370] CPU: 0 UID: 0 PID: 14370 Comm: syz.2.2398 Not tainted syzkaller #0 PREEMPT(full) [ 337.925740][T14370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 337.925751][T14370] Call Trace: [ 337.925758][T14370] [ 337.925765][T14370] dump_stack_lvl+0xe8/0x150 [ 337.925799][T14370] should_fail_ex+0x412/0x560 [ 337.925823][T14370] should_failslab+0xa8/0x100 [ 337.925847][T14370] ? __nf_conntrack_alloc+0x81/0x3e0 [ 337.925871][T14370] kmem_cache_alloc_noprof+0x87/0x650 [ 337.925890][T14370] ? nf_ct_pernet+0x45/0x270 [ 337.925912][T14370] __nf_conntrack_alloc+0x81/0x3e0 [ 337.925936][T14370] ctnetlink_new_conntrack+0x5c8/0x22a0 [ 337.925964][T14370] ? rcu_is_watching+0x15/0xb0 [ 337.925985][T14370] ? __pfx_ctnetlink_new_conntrack+0x10/0x10 [ 337.926005][T14370] ? __mutex_lock+0x319/0x1550 [ 337.926020][T14370] ? __pfx___nla_validate_parse+0x10/0x10 [ 337.926048][T14370] ? unwind_next_frame+0xa6/0x2550 [ 337.926070][T14370] ? is_bpf_text_address+0x26/0x2b0 [ 337.926085][T14370] ? lock_acquire+0x106/0x350 [ 337.926101][T14370] ? nfnetlink_rcv_msg+0xa71/0x12c0 [ 337.926149][T14370] nfnetlink_rcv_msg+0xc03/0x12c0 [ 337.926169][T14370] ? unwind_get_return_address+0x4d/0x90 [ 337.926190][T14370] ? nfnetlink_rcv_msg+0x22a/0x12c0 [ 337.926227][T14370] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 337.926288][T14370] netlink_rcv_skb+0x232/0x4b0 [ 337.926313][T14370] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 337.926334][T14370] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 337.926365][T14370] ? bpf_lsm_capable+0x9/0x20 [ 337.926380][T14370] ? security_capable+0x7e/0x2c0 [ 337.926408][T14370] nfnetlink_rcv+0x2c0/0x27b0 [ 337.926438][T14370] ? __local_bh_enable_ip+0xd0/0x130 [ 337.926455][T14370] ? lockdep_hardirqs_on+0x7a/0x110 [ 337.926479][T14370] ? __dev_queue_xmit+0x2b6/0x3950 [ 337.926494][T14370] ? __local_bh_enable_ip+0xd0/0x130 [ 337.926510][T14370] ? __dev_queue_xmit+0x2b6/0x3950 [ 337.926523][T14370] ? __dev_queue_xmit+0x1fe5/0x3950 [ 337.926536][T14370] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 337.926562][T14370] ? __dev_queue_xmit+0x2b6/0x3950 [ 337.926580][T14370] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 337.926606][T14370] ? __pfx___dev_queue_xmit+0x10/0x10 [ 337.926626][T14370] ? ref_tracker_free+0x693/0x840 [ 337.926650][T14370] ? __pfx_ref_tracker_free+0x10/0x10 [ 337.926686][T14370] ? skb_clone+0x246/0x3a0 [ 337.926703][T14370] ? __netlink_deliver_tap+0x807/0x850 [ 337.926727][T14370] ? netlink_deliver_tap+0x2e/0x1b0 [ 337.926755][T14370] ? netlink_deliver_tap+0x2e/0x1b0 [ 337.926778][T14370] ? netlink_deliver_tap+0x2e/0x1b0 [ 337.926806][T14370] netlink_unicast+0x75c/0x8e0 [ 337.926835][T14370] netlink_sendmsg+0x813/0xb40 [ 337.926867][T14370] ? __pfx_netlink_sendmsg+0x10/0x10 [ 337.926895][T14370] ? aa_sock_msg_perm+0xf1/0x1b0 [ 337.926919][T14370] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 337.926944][T14370] ____sys_sendmsg+0x972/0x9f0 [ 337.926971][T14370] ? __might_fault+0xaf/0x130 [ 337.927001][T14370] ? __pfx_____sys_sendmsg+0x10/0x10 [ 337.927037][T14370] ? import_iovec+0x73/0xa0 [ 337.927069][T14370] ___sys_sendmsg+0x2a5/0x360 [ 337.927093][T14370] ? __lock_acquire+0x6b5/0x2cf0 [ 337.927126][T14370] ? __pfx____sys_sendmsg+0x10/0x10 [ 337.927205][T14370] ? __fget_files+0x2a/0x420 [ 337.927232][T14370] ? __fget_files+0x3a0/0x420 [ 337.927265][T14370] __x64_sys_sendmsg+0x1bd/0x2a0 [ 337.927298][T14370] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 337.927338][T14370] ? __pfx_ksys_write+0x10/0x10 [ 337.927373][T14370] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.927394][T14370] do_syscall_64+0x15f/0xf80 [ 337.927421][T14370] ? trace_irq_disable+0x3b/0x140 [ 337.927449][T14370] ? clear_bhb_loop+0x40/0x90 [ 337.927474][T14370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.927494][T14370] RIP: 0033:0x7f640b39ce59 [ 337.927513][T14370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 337.927530][T14370] RSP: 002b:00007f640c23f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 337.927551][T14370] RAX: ffffffffffffffda RBX: 00007f640b615fa0 RCX: 00007f640b39ce59 [ 337.927565][T14370] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000005 [ 337.927576][T14370] RBP: 00007f640c23f090 R08: 0000000000000000 R09: 0000000000000000 [ 337.927588][T14370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 337.927600][T14370] R13: 00007f640b616038 R14: 00007f640b615fa0 R15: 00007ffd257c1b58 [ 337.927632][T14370] [ 338.395214][T14373] netlink: 'syz.1.2400': attribute type 1 has an invalid length. [ 338.596958][T14380] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 338.617661][T14388] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 338.646507][T14381] ip6gre2: entered allmulticast mode [ 338.654182][T14381] team0: Device ip6gre2 is of different type [ 338.848464][T14401] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 338.863544][T14405] IPVS: ovf: SCTP 172.20.20.187:0 - no destination available [ 338.929776][T14398] netlink: 'syz.1.2407': attribute type 83 has an invalid length. [ 338.976178][T14401] bond5: (slave lo): Enslaving as an active interface with an up link [ 338.996560][T14401] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 339.126602][T14423] netlink: 'syz.2.2413': attribute type 49 has an invalid length. [ 339.268851][T14425] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.276182][T14425] bridge0: port 2(bridge_slave_1) entered listening state [ 339.283663][T14425] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.290885][T14425] bridge0: port 1(bridge_slave_0) entered listening state [ 339.523143][T14425] 8021q: adding VLAN 0 to HW filter on device bond2 [ 339.548252][T14425] 8021q: adding VLAN 0 to HW filter on device bond4 [ 339.563360][T14425] 8021q: adding VLAN 0 to HW filter on device bond6 [ 339.585842][T14425] 8021q: adding VLAN 0 to HW filter on device bond5 [ 340.220251][T14456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.244847][T14456] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.275322][T14456] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 340.343107][T14456] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 340.353642][T14456] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 340.370470][T14456] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 340.381647][T14456] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 340.400712][T14456] veth1_macvtap: left promiscuous mode [ 340.408066][T14456] veth0_macvtap: left promiscuous mode [ 340.415507][T14456] veth0_macvtap: entered promiscuous mode [ 340.426404][T14456] veth1_macvtap: entered promiscuous mode [ 340.442651][T14456] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 340.451885][T14456] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 340.460679][T14456] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 340.470564][T14456] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 340.491336][T14456] 8021q: adding VLAN 0 to HW filter on device bond1 [ 340.549061][T14456] 8021q: adding VLAN 0 to HW filter on device bond2 [ 340.573221][T14456] 8021q: adding VLAN 0 to HW filter on device bond3 [ 340.593474][T14456] 8021q: adding VLAN 0 to HW filter on device bond4 [ 340.612123][T14456] 8021q: adding VLAN 0 to HW filter on device bond5 [ 340.623423][T14456] 8021q: adding VLAN 0 to HW filter on device bond6 [ 340.635640][T14456] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 340.680022][T14456] hsr1: Slave A (veth1_to_team) is not up; please bring it up to get a fully working HSR network [ 340.725470][T14456] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check. [ 340.749576][ T3328] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.756817][ T3328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.814072][ T3328] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.821308][ T3328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.915831][T14486] syzkaller0: entered promiscuous mode [ 340.924037][T14486] syzkaller0: entered allmulticast mode [ 340.932870][ T48] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 340.947422][ T48] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.140195][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 342.598993][T14493] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 342.599681][ T48] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 342.618543][ T48] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.630243][ T48] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 342.647487][ T48] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.662137][ T6372] bond6: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 342.764045][ T48] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 342.795616][T14513] netlink: 'syz.3.2434': attribute type 26 has an invalid length. [ 342.805961][ T48] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.871882][T14513] xfrm0 speed is unknown, defaulting to 1000 [ 342.934389][T14513] xfrm0 speed is unknown, defaulting to 1000 [ 342.980545][T14513] xfrm0 speed is unknown, defaulting to 1000 [ 343.131501][T14530] openvswitch: netlink: nsh attr 13535 is out of range max 3 [ 343.270445][T10590] xfrm0 speed is unknown, defaulting to 1000 [ 343.277052][T14513] infiniband syz1: set active [ 343.283222][T14513] infiniband syz1: added xfrm0 [ 343.305907][T14513] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 343.322734][T14513] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 343.340388][T14513] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 343.382192][T14513] RDS/IB: syz1: added [ 343.387056][T14513] smc: adding ib device syz1 with port count 1 [ 343.394016][T14513] smc: ib device syz1 port 1 has no pnetid [ 343.403462][ T29] xfrm0 speed is unknown, defaulting to 1000 [ 343.415585][T14513] xfrm0 speed is unknown, defaulting to 1000 [ 343.594521][T14513] xfrm0 speed is unknown, defaulting to 1000 [ 343.809393][T14513] xfrm0 speed is unknown, defaulting to 1000 [ 344.009957][T14513] xfrm0 speed is unknown, defaulting to 1000 [ 344.175951][T14513] xfrm0 speed is unknown, defaulting to 1000 [ 344.250497][T14533] __nla_validate_parse: 16 callbacks suppressed [ 344.250515][T14533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2439'. [ 344.328940][T14538] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 344.361995][T14539] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2441'. [ 344.404841][T14539] netlink: 'syz.2.2441': attribute type 1 has an invalid length. [ 344.576870][T14552] syzkaller0: entered promiscuous mode [ 344.598177][T14552] syzkaller0: entered allmulticast mode [ 344.813201][T14564] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2446'. [ 344.864822][T14561] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2446'. [ 345.032608][T14572] netlink: 'syz.4.2450': attribute type 1 has an invalid length. [ 345.125844][T14567] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2448'. [ 345.175925][T14567] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 345.225999][T14584] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2453'. [ 345.276525][T14587] tipc: Enabling of bearer rejected, failed to enable media [ 345.487818][T14597] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2456'. [ 345.498801][T14597] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2456'. [ 345.665378][ T30] audit: type=1804 audit(1779494245.386:4): pid=14599 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2457" name="/newroot/473/cgroup.controllers" dev="tmpfs" ino=2434 res=1 errno=0 [ 345.728192][ T30] audit: type=1800 audit(1779494245.386:5): pid=14599 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2457" name="cgroup.controllers" dev="tmpfs" ino=2434 res=0 errno=0 [ 346.177878][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 346.223876][T14623] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2465'. [ 346.241055][T14621] netlink: 'syz.1.2464': attribute type 16 has an invalid length. [ 346.259092][T14621] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2464'. [ 346.454039][T14636] netlink: 'syz.0.2468': attribute type 58 has an invalid length. [ 346.537320][T14638] sysfs: cannot create duplicate filename '/class/ieee80211/Ku crK:̥B| lS-!' [ 346.550978][T14638] CPU: 1 UID: 0 PID: 14638 Comm: syz.4.2470 Not tainted syzkaller #0 PREEMPT(full) [ 346.551001][T14638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 346.551013][T14638] Call Trace: [ 346.551020][T14638] [ 346.551028][T14638] dump_stack_lvl+0xe8/0x150 [ 346.551057][T14638] sysfs_warn_dup+0x8e/0xa0 [ 346.551083][T14638] sysfs_do_create_link_sd+0xc0/0x110 [ 346.551111][T14638] device_add_class_symlinks+0x1cf/0x240 [ 346.551140][T14638] device_add+0x475/0xbb0 [ 346.551168][T14638] wiphy_register+0x1dc5/0x2dc0 [ 346.551213][T14638] ? __pfx_wiphy_register+0x10/0x10 [ 346.551239][T14638] ? __pfx_netdev_run_todo+0x10/0x10 [ 346.551258][T14638] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 346.551285][T14638] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 346.551316][T14638] ieee80211_register_hw+0x3d82/0x4a70 [ 346.551346][T14638] ? ieee80211_register_hw+0x18e1/0x4a70 [ 346.551384][T14638] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 346.551404][T14638] ? __asan_memset+0x22/0x50 [ 346.551424][T14638] ? __hrtimer_setup+0x1b7/0x260 [ 346.551444][T14638] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 346.551471][T14638] mac80211_hwsim_new_radio+0x3335/0x5aa0 [ 346.551521][T14638] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 346.551541][T14638] ? kstrndup+0xbf/0x160 [ 346.551565][T14638] hwsim_new_radio_nl+0xf6a/0x1c00 [ 346.551603][T14638] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 346.551632][T14638] ? rcu_is_watching+0x15/0xb0 [ 346.551653][T14638] ? trace_kmalloc+0x2a/0xf0 [ 346.551680][T14638] ? __nla_parse+0x40/0x60 [ 346.551708][T14638] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 346.551727][T14638] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 346.551753][T14638] genl_family_rcv_msg_doit+0x22a/0x330 [ 346.551777][T14638] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 346.551806][T14638] ? bpf_lsm_capable+0x9/0x20 [ 346.551822][T14638] ? security_capable+0x7e/0x2c0 [ 346.551848][T14638] genl_rcv_msg+0x61c/0x7a0 [ 346.551871][T14638] ? __pfx_genl_rcv_msg+0x10/0x10 [ 346.551888][T14638] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 346.551915][T14638] ? __pfx_ref_tracker_free+0x10/0x10 [ 346.551948][T14638] netlink_rcv_skb+0x232/0x4b0 [ 346.551972][T14638] ? __pfx_genl_rcv_msg+0x10/0x10 [ 346.551991][T14638] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 346.552028][T14638] ? down_read+0x270/0x2e0 [ 346.552043][T14638] ? genl_rcv+0xd/0x40 [ 346.552062][T14638] genl_rcv+0x28/0x40 [ 346.552078][T14638] netlink_unicast+0x75c/0x8e0 [ 346.552108][T14638] netlink_sendmsg+0x813/0xb40 [ 346.552140][T14638] ? __pfx_netlink_sendmsg+0x10/0x10 [ 346.552167][T14638] ? aa_sock_msg_perm+0xf1/0x1b0 [ 346.552191][T14638] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 346.552216][T14638] ____sys_sendmsg+0x972/0x9f0 [ 346.552242][T14638] ? __might_fault+0xaf/0x130 [ 346.552272][T14638] ? __pfx_____sys_sendmsg+0x10/0x10 [ 346.552331][T14638] ? import_iovec+0x73/0xa0 [ 346.552366][T14638] ___sys_sendmsg+0x2a5/0x360 [ 346.552397][T14638] ? __lock_acquire+0x6b5/0x2cf0 [ 346.552424][T14638] ? __pfx____sys_sendmsg+0x10/0x10 [ 346.552472][T14638] ? futex_wait+0x2a2/0x390 [ 346.552518][T14638] ? __fget_files+0x2a/0x420 [ 346.552535][T14638] ? __fget_files+0x3a0/0x420 [ 346.552560][T14638] __x64_sys_sendmsg+0x1bd/0x2a0 [ 346.552585][T14638] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 346.552614][T14638] ? rcu_is_watching+0x15/0xb0 [ 346.552639][T14638] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.552654][T14638] do_syscall_64+0x15f/0xf80 [ 346.552676][T14638] ? trace_irq_disable+0x3b/0x140 [ 346.552698][T14638] ? clear_bhb_loop+0x40/0x90 [ 346.552715][T14638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.552729][T14638] RIP: 0033:0x7f76b679ce59 [ 346.552743][T14638] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 346.552755][T14638] RSP: 002b:00007f76b7605028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 346.552770][T14638] RAX: ffffffffffffffda RBX: 00007f76b6a15fa0 RCX: 00007f76b679ce59 [ 346.552780][T14638] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 346.552789][T14638] RBP: 00007f76b6832d6f R08: 0000000000000000 R09: 0000000000000000 [ 346.552798][T14638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 346.552806][T14638] R13: 00007f76b6a16038 R14: 00007f76b6a15fa0 R15: 00007ffdcb535c58 [ 346.552830][T14638] [ 347.011761][T14643] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 347.019665][T14643] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 347.548975][T14678] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 347.685321][T14685] sysfs: cannot create duplicate filename '/class/ieee80211/Ku crK:̥B| lS-!' [ 347.701486][T14685] CPU: 0 UID: 0 PID: 14685 Comm: syz.4.2486 Not tainted syzkaller #0 PREEMPT(full) [ 347.701515][T14685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 347.701529][T14685] Call Trace: [ 347.701537][T14685] [ 347.701547][T14685] dump_stack_lvl+0xe8/0x150 [ 347.701580][T14685] sysfs_warn_dup+0x8e/0xa0 [ 347.701608][T14685] sysfs_do_create_link_sd+0xc0/0x110 [ 347.701638][T14685] device_add_class_symlinks+0x1cf/0x240 [ 347.701670][T14685] device_add+0x475/0xbb0 [ 347.701700][T14685] wiphy_register+0x1dc5/0x2dc0 [ 347.701754][T14685] ? __pfx_wiphy_register+0x10/0x10 [ 347.701788][T14685] ? __pfx_netdev_run_todo+0x10/0x10 [ 347.701810][T14685] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 347.701844][T14685] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 347.701884][T14685] ieee80211_register_hw+0x3d82/0x4a70 [ 347.701923][T14685] ? ieee80211_register_hw+0x18e1/0x4a70 [ 347.701974][T14685] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 347.702002][T14685] ? __asan_memset+0x22/0x50 [ 347.702044][T14685] ? __hrtimer_setup+0x1b7/0x260 [ 347.702072][T14685] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 347.702108][T14685] mac80211_hwsim_new_radio+0x3335/0x5aa0 [ 347.702168][T14685] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 347.702194][T14685] ? kstrndup+0xbf/0x160 [ 347.702244][T14685] hwsim_new_radio_nl+0xf6a/0x1c00 [ 347.702300][T14685] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 347.702339][T14685] ? rcu_is_watching+0x15/0xb0 [ 347.702368][T14685] ? trace_kmalloc+0x2a/0xf0 [ 347.702406][T14685] ? __nla_parse+0x40/0x60 [ 347.702455][T14685] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 347.702481][T14685] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 347.702529][T14685] genl_family_rcv_msg_doit+0x22a/0x330 [ 347.702564][T14685] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 347.702605][T14685] ? bpf_lsm_capable+0x9/0x20 [ 347.702626][T14685] ? security_capable+0x7e/0x2c0 [ 347.702666][T14685] genl_rcv_msg+0x61c/0x7a0 [ 347.702698][T14685] ? __pfx_genl_rcv_msg+0x10/0x10 [ 347.702722][T14685] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 347.702750][T14685] ? __pfx_ref_tracker_free+0x10/0x10 [ 347.702793][T14685] netlink_rcv_skb+0x232/0x4b0 [ 347.702826][T14685] ? __pfx_genl_rcv_msg+0x10/0x10 [ 347.702851][T14685] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 347.702901][T14685] ? down_read+0x270/0x2e0 [ 347.702922][T14685] ? genl_rcv+0xd/0x40 [ 347.702953][T14685] genl_rcv+0x28/0x40 [ 347.702976][T14685] netlink_unicast+0x75c/0x8e0 [ 347.703019][T14685] netlink_sendmsg+0x813/0xb40 [ 347.703080][T14685] ? __pfx_netlink_sendmsg+0x10/0x10 [ 347.703116][T14685] ? aa_sock_msg_perm+0xf1/0x1b0 [ 347.703149][T14685] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 347.703183][T14685] ____sys_sendmsg+0x972/0x9f0 [ 347.703217][T14685] ? __might_fault+0xaf/0x130 [ 347.703254][T14685] ? __pfx_____sys_sendmsg+0x10/0x10 [ 347.703302][T14685] ? import_iovec+0x73/0xa0 [ 347.703341][T14685] ___sys_sendmsg+0x2a5/0x360 [ 347.703374][T14685] ? __lock_acquire+0x6b5/0x2cf0 [ 347.703404][T14685] ? __pfx____sys_sendmsg+0x10/0x10 [ 347.703455][T14685] ? futex_wait+0x2a2/0x390 [ 347.703521][T14685] ? __fget_files+0x2a/0x420 [ 347.703547][T14685] ? __fget_files+0x3a0/0x420 [ 347.703587][T14685] __x64_sys_sendmsg+0x1bd/0x2a0 [ 347.703625][T14685] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 347.703671][T14685] ? rcu_is_watching+0x15/0xb0 [ 347.703710][T14685] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.703736][T14685] do_syscall_64+0x15f/0xf80 [ 347.703769][T14685] ? trace_irq_disable+0x3b/0x140 [ 347.703805][T14685] ? clear_bhb_loop+0x40/0x90 [ 347.703834][T14685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.703856][T14685] RIP: 0033:0x7f76b679ce59 [ 347.703878][T14685] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 347.703897][T14685] RSP: 002b:00007f76b7605028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 347.703920][T14685] RAX: ffffffffffffffda RBX: 00007f76b6a15fa0 RCX: 00007f76b679ce59 [ 347.703937][T14685] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 347.703952][T14685] RBP: 00007f76b6832d6f R08: 0000000000000000 R09: 0000000000000000 [ 347.703966][T14685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 347.703979][T14685] R13: 00007f76b6a16038 R14: 00007f76b6a15fa0 R15: 00007ffdcb535c58 [ 347.704018][T14685] [ 348.193950][T14687] syzkaller0: entered promiscuous mode [ 348.199759][T14687] syzkaller0: entered allmulticast mode [ 348.222776][T14692] tunl0: entered promiscuous mode [ 348.228147][T14692] netlink: 'syz.0.2490': attribute type 3 has an invalid length. [ 348.666971][T14711] sysfs: cannot create duplicate filename '/class/ieee80211/Ku crK:̥B| lS-!' [ 348.679735][T14711] CPU: 0 UID: 0 PID: 14711 Comm: syz.3.2499 Not tainted syzkaller #0 PREEMPT(full) [ 348.679762][T14711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 348.679775][T14711] Call Trace: [ 348.679783][T14711] [ 348.679793][T14711] dump_stack_lvl+0xe8/0x150 [ 348.679822][T14711] sysfs_warn_dup+0x8e/0xa0 [ 348.679855][T14711] sysfs_do_create_link_sd+0xc0/0x110 [ 348.679884][T14711] device_add_class_symlinks+0x1cf/0x240 [ 348.679914][T14711] device_add+0x475/0xbb0 [ 348.679943][T14711] wiphy_register+0x1dc5/0x2dc0 [ 348.679993][T14711] ? __pfx_wiphy_register+0x10/0x10 [ 348.680026][T14711] ? __pfx_netdev_run_todo+0x10/0x10 [ 348.680047][T14711] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 348.680088][T14711] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 348.680127][T14711] ieee80211_register_hw+0x3d82/0x4a70 [ 348.680166][T14711] ? ieee80211_register_hw+0x18e1/0x4a70 [ 348.680214][T14711] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 348.680240][T14711] ? __asan_memset+0x22/0x50 [ 348.680266][T14711] ? __hrtimer_setup+0x1b7/0x260 [ 348.680291][T14711] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 348.680324][T14711] mac80211_hwsim_new_radio+0x3335/0x5aa0 [ 348.680382][T14711] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 348.680405][T14711] ? kstrndup+0xbf/0x160 [ 348.680436][T14711] hwsim_new_radio_nl+0xf6a/0x1c00 [ 348.680486][T14711] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 348.680521][T14711] ? rcu_is_watching+0x15/0xb0 [ 348.680546][T14711] ? trace_kmalloc+0x2a/0xf0 [ 348.680580][T14711] ? __nla_parse+0x40/0x60 [ 348.680615][T14711] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 348.680639][T14711] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 348.680672][T14711] genl_family_rcv_msg_doit+0x22a/0x330 [ 348.680704][T14711] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 348.680742][T14711] ? bpf_lsm_capable+0x9/0x20 [ 348.680761][T14711] ? security_capable+0x7e/0x2c0 [ 348.680795][T14711] genl_rcv_msg+0x61c/0x7a0 [ 348.680823][T14711] ? __pfx_genl_rcv_msg+0x10/0x10 [ 348.680846][T14711] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 348.680872][T14711] ? __pfx_ref_tracker_free+0x10/0x10 [ 348.680913][T14711] netlink_rcv_skb+0x232/0x4b0 [ 348.680944][T14711] ? __pfx_genl_rcv_msg+0x10/0x10 [ 348.680970][T14711] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 348.681035][T14711] ? down_read+0x270/0x2e0 [ 348.681056][T14711] ? genl_rcv+0xd/0x40 [ 348.681095][T14711] genl_rcv+0x28/0x40 [ 348.681117][T14711] netlink_unicast+0x75c/0x8e0 [ 348.681160][T14711] netlink_sendmsg+0x813/0xb40 [ 348.681203][T14711] ? __pfx_netlink_sendmsg+0x10/0x10 [ 348.681241][T14711] ? aa_sock_msg_perm+0xf1/0x1b0 [ 348.681273][T14711] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 348.681306][T14711] ____sys_sendmsg+0x972/0x9f0 [ 348.681339][T14711] ? __might_fault+0xaf/0x130 [ 348.681375][T14711] ? __pfx_____sys_sendmsg+0x10/0x10 [ 348.681418][T14711] ? import_iovec+0x73/0xa0 [ 348.681456][T14711] ___sys_sendmsg+0x2a5/0x360 [ 348.681487][T14711] ? __lock_acquire+0x6b5/0x2cf0 [ 348.681515][T14711] ? __pfx____sys_sendmsg+0x10/0x10 [ 348.681556][T14711] ? futex_wait+0x2a2/0x390 [ 348.681618][T14711] ? __fget_files+0x2a/0x420 [ 348.681643][T14711] ? __fget_files+0x3a0/0x420 [ 348.681694][T14711] __x64_sys_sendmsg+0x1bd/0x2a0 [ 348.681732][T14711] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 348.681777][T14711] ? rcu_is_watching+0x15/0xb0 [ 348.681816][T14711] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.681840][T14711] do_syscall_64+0x15f/0xf80 [ 348.681872][T14711] ? trace_irq_disable+0x3b/0x140 [ 348.681905][T14711] ? clear_bhb_loop+0x40/0x90 [ 348.681933][T14711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.681966][T14711] RIP: 0033:0x7f98bb79ce59 [ 348.681987][T14711] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 348.682007][T14711] RSP: 002b:00007f98bc615028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 348.682031][T14711] RAX: ffffffffffffffda RBX: 00007f98bba15fa0 RCX: 00007f98bb79ce59 [ 348.682048][T14711] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 348.682061][T14711] RBP: 00007f98bb832d6f R08: 0000000000000000 R09: 0000000000000000 [ 348.682075][T14711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 348.682094][T14711] R13: 00007f98bba16038 R14: 00007f98bba15fa0 R15: 00007ffc63056c88 [ 348.682139][T14711] [ 349.424532][T14721] __nla_validate_parse: 7 callbacks suppressed [ 349.424552][T14721] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2504'. [ 349.564249][T14730] netlink: 'syz.3.2506': attribute type 4 has an invalid length. [ 349.611550][T14725] netlink: 576 bytes leftover after parsing attributes in process `syz.1.2504'. [ 349.631867][T14723] bond3 (unregistering): Released all slaves [ 349.663446][T14737] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2508'. [ 349.870106][T14743] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2509'. [ 350.038013][T14747] syzkaller0: entered promiscuous mode [ 350.044702][T14747] syzkaller0: entered allmulticast mode [ 350.144211][T14755] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2514'. [ 350.229126][T14757] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2515'. [ 350.344991][T14760] bridge7: the hash_elasticity option has been deprecated and is always 16 [ 350.355165][T14762] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000d: 0000 [#1] SMP KASAN PTI [ 350.367107][T14762] KASAN: null-ptr-deref in range [0x0000000000000068-0x000000000000006f] [ 350.375542][T14762] CPU: 0 UID: 0 PID: 14762 Comm: syz.0.2516 Not tainted syzkaller #0 PREEMPT(full) [ 350.376387][T14767] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2518'. [ 350.384929][T14762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 350.384945][T14762] RIP: 0010:kernel_sock_shutdown+0x47/0x70 [ 350.384974][T14762] Code: 52 f8 4d 8d 7e 20 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 57 e1 bd f8 4d 8b 3f 49 83 c7 68 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 3a e1 bd f8 4d 8b 1f 4c 89 f7 89 [ 350.384998][T14762] RSP: 0018:ffffc9000dc870a8 EFLAGS: 00010202 [ 350.385018][T14762] RAX: 000000000000000d RBX: 0000000000000002 RCX: ffff8880295c1ec0 [ 350.385032][T14762] RDX: 0000000000000000 RSI: 0000000000000002 RDI: ffff888076577240 [ 350.385046][T14762] RBP: 0000000000000002 R08: ffffc9000dc86ea7 R09: 1ffff92001b90dd4 [ 350.459443][T14762] R10: dffffc0000000000 R11: fffff52001b90dd5 R12: dffffc0000000000 [ 350.467437][T14762] R13: dffffc0000000000 R14: ffff888076577240 R15: 0000000000000068 [ 350.475416][T14762] FS: 00007f9f1c4bc6c0(0000) GS:ffff888125287000(0000) knlGS:0000000000000000 [ 350.484355][T14762] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 350.490954][T14762] CR2: 00007ffc0ac7def0 CR3: 000000007cd50000 CR4: 00000000003526f0 [ 350.498961][T14762] Call Trace: [ 350.502255][T14762] [ 350.505197][T14762] udp_tunnel_sock_release+0x6f/0x80 [ 350.510521][T14762] rxe_net_del+0x121/0x2e0 [ 350.514957][T14762] rxe_dellink+0x15/0x20 [ 350.519221][T14762] nldev_dellink+0x304/0x3d0 [ 350.523821][T14762] ? __pfx_nldev_dellink+0x10/0x10 [ 350.528992][T14762] ? apparmor_capable+0x126/0x170 [ 350.534033][T14762] ? bpf_lsm_capable+0x9/0x20 [ 350.538720][T14762] ? security_capable+0x7e/0x2c0 [ 350.543677][T14762] ? __pfx_nldev_dellink+0x10/0x10 [ 350.548800][T14762] rdma_nl_rcv+0x6d1/0xa10 [ 350.553242][T14762] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 350.558195][T14762] ? netlink_deliver_tap+0x2e/0x1b0 [ 350.563415][T14762] ? netlink_deliver_tap+0x2e/0x1b0 [ 350.568630][T14762] netlink_unicast+0x75c/0x8e0 [ 350.573524][T14762] netlink_sendmsg+0x813/0xb40 [ 350.578336][T14762] ? __pfx_netlink_sendmsg+0x10/0x10 [ 350.583652][T14762] ? page_table_check_set+0x126/0x510 [ 350.589049][T14762] ? lock_acquire+0x106/0x350 [ 350.593751][T14762] ? aa_sock_msg_perm+0xf1/0x1b0 [ 350.598725][T14762] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 350.604037][T14762] ____sys_sendmsg+0x972/0x9f0 [ 350.608833][T14762] ? __might_fault+0xaf/0x130 [ 350.613528][T14762] ? __pfx_____sys_sendmsg+0x10/0x10 [ 350.618856][T14762] ? import_iovec+0x73/0xa0 [ 350.623383][T14762] ___sys_sendmsg+0x2a5/0x360 [ 350.628077][T14762] ? __lock_acquire+0x6b5/0x2cf0 [ 350.633024][T14762] ? __pfx____sys_sendmsg+0x10/0x10 [ 350.638268][T14762] ? __fget_files+0x2a/0x420 [ 350.642884][T14762] ? __fget_files+0x3a0/0x420 [ 350.647582][T14762] __x64_sys_sendmsg+0x1bd/0x2a0 [ 350.652542][T14762] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 350.658021][T14762] ? __se_sys_rt_sigprocmask+0x22f/0x2a0 [ 350.663670][T14762] ? do_user_addr_fault+0xc6f/0x1340 [ 350.669013][T14762] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.675095][T14762] do_syscall_64+0x15f/0xf80 [ 350.679700][T14762] ? trace_irq_disable+0x3b/0x140 [ 350.684748][T14762] ? clear_bhb_loop+0x40/0x90 [ 350.689441][T14762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.695342][T14762] RIP: 0033:0x7f9f1b59ce59 [ 350.699782][T14762] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 350.719417][T14762] RSP: 002b:00007f9f1c4bc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 350.727838][T14762] RAX: ffffffffffffffda RBX: 00007f9f1b816090 RCX: 00007f9f1b59ce59 [ 350.735844][T14762] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 350.743851][T14762] RBP: 00007f9f1b632d6f R08: 0000000000000000 R09: 0000000000000000 [ 350.751846][T14762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 350.759830][T14762] R13: 00007f9f1b816128 R14: 00007f9f1b816090 R15: 00007ffc498119d8 [ 350.767821][T14762] [ 350.770844][T14762] Modules linked in: [ 350.777609][T14762] ---[ end trace 0000000000000000 ]--- [ 350.791788][T14762] RIP: 0010:kernel_sock_shutdown+0x47/0x70 [ 350.797978][T14762] Code: 52 f8 4d 8d 7e 20 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 57 e1 bd f8 4d 8b 3f 49 83 c7 68 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 3a e1 bd f8 4d 8b 1f 4c 89 f7 89 [ 350.820800][T14767] openvswitch: netlink: Flow key attr not present in new flow. [ 350.828123][T14762] RSP: 0018:ffffc9000dc870a8 EFLAGS: 00010202 [ 350.834521][T14762] RAX: 000000000000000d RBX: 0000000000000002 RCX: ffff8880295c1ec0 [ 350.842664][T14762] RDX: 0000000000000000 RSI: 0000000000000002 RDI: ffff888076577240 [ 350.851637][T14762] RBP: 0000000000000002 R08: ffffc9000dc86ea7 R09: 1ffff92001b90dd4 [ 350.860074][T14762] R10: dffffc0000000000 R11: fffff52001b90dd5 R12: dffffc0000000000 [ 350.868492][T14762] R13: dffffc0000000000 R14: ffff888076577240 R15: 0000000000000068 [ 350.876690][T14762] FS: 00007f9f1c4bc6c0(0000) GS:ffff888125387000(0000) knlGS:0000000000000000 [ 350.878749][T14761] smc: removing ib device syz1 [ 350.888893][T14762] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 350.897122][T14762] CR2: 00007f9f1c49aff8 CR3: 000000007cd50000 CR4: 00000000003526f0 [ 350.905277][T14762] Kernel panic - not syncing: Fatal exception [ 350.911942][T14762] Kernel Offset: disabled [ 350.916276][T14762] Rebooting in 86400 seconds..