last executing test programs: 3.238423746s ago: executing program 3 (id=6989): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710435000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x73, &(0x7f00000001c0)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0x3d, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast1}, [@fragment={0x33, 0x0, 0x6, 0x1, 0x0, 0x1a, 0x66}], "17c17f0791"}}}}}}}, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000001c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100ffffffff0000000001000000100007800c00018008000100", @ANYRES32=r2, @ANYBLOB="0c0005006c010000000000000c000200ff7f000000000000400007800c00018008000100", @ANYRES32=r2, @ANYBLOB="0c00018008000100", @ANYRES32=r2], 0x7c}}, 0x20000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_netdev_private(r5, 0x8946, &(0x7f0000000000)="8d557fd094c38f748ec33512ef3a") syz_genetlink_get_family_id$mptcp(&(0x7f0000005c40), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x88}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$MPTCP_PM_CMD_GET_ADDR(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000040)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fddbdf250300000008000400fffbffff3800018014000400fe880000000000000000000000000101080006"], 0xa4}, 0x1, 0x0, 0x0, 0x890}, 0x800) 2.702950375s ago: executing program 3 (id=6992): r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="540000001000370401000000ffdbdf2500000000", @ANYRES32=r1, @ANYBLOB="890c04000000000005001000050000002c0012800b00010067726574617000001c00028005001700000000000800040003000000060003009c"], 0x54}, 0x1, 0x0, 0x0, 0x44801}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003380)=[{{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000001a40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @empty, @rand_addr=0x64010102}}}], 0x20}}], 0x1, 0x4040880) 2.439950286s ago: executing program 3 (id=6998): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1003d1, 0x3, 0x20000000, 0x6, 0x6}, 0x68}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r4) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="af75355d1696"}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x4) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f00000001c0)=@xdp={0x2c, 0x0, r9, 0x1c}, 0x80, &(0x7f0000000cc0)=[{&(0x7f00000002c0)="27030200dc0f24000e00003c000c00000000ff880000000200000003125ce882cbf490d908f1523f000000032d9c2740e260a09c6911cda856d5ea9a14", 0x3d}], 0x1}, 0x8bb3a301eb085f) 1.991830708s ago: executing program 3 (id=7004): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x20000000}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010006030000000044000500fe880000000000000000000000000101000000003c00000002000000000000000000000000000000000000010600000004"], 0xfc}}, 0x0) (async) r4 = socket$kcm(0xa, 0x5, 0x0) (async) r5 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x40, &(0x7f0000000000)=0x4, 0x4) getsockopt$SO_TIMESTAMP(r5, 0x1, 0x23, 0x0, &(0x7f0000000080)) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r4, 0xc0385868, &(0x7f00000001c0)={r3, &(0x7f0000000000)='/dev/net/tun\x00', 0x800c0, &(0x7f0000000040)={@_ha_fsid={[0x1000, 0x1]}, {0x9, 0xfe, 0x0, 0x8}}, 0xa, &(0x7f0000000080)={@_ha_fsid}, &(0x7f0000000100)=0x947}) (async) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r7, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x30, r8, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x58, 0x7, 0xbdf, 0x7fff}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x620d98e8ee8e8f21) (async) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x25}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) (async) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r9, &(0x7f0000000700)={&(0x7f0000000140)={0x2, 0x4e23, @local}, 0x10, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1400000000000000000000000100000002000000000000001400000000000000000000000200000008000000000000004c0000000000000000000000070000000728"], 0x1b0}, 0x20000000) sendmsg$kcm(r4, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x0, @local, 0x3, 0x3}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000002c0)='\t', 0x1}], 0x1}, 0x41) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$sock_rose_SIOCDELRT(r7, 0x890c, &(0x7f0000000400)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, @default, @bpq0, 0x1, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="70000000ffffffffffe2aff26426e79e70004500002c000000eaff2f9078ac1e0001e0000001000022eb00189078040000000000000086ddffff00000000cbc9645e5ce2b11d232cb67d9a16bb8a3b5da78cd4de5757"], 0x3e) 1.491663175s ago: executing program 4 (id=7009): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x1fa, 0x4) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2, 0x3f}, 0x1c, 0x0}}], 0x1, 0x0) 1.295800679s ago: executing program 4 (id=7011): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000140)={r1}) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) write$tun(r0, &(0x7f0000000300)={@val={0x0, 0x884c}, @void, @eth={@empty, @remote, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x6, 0x0, 0x6}}, {@ipv6={0x86dd, @gre_packet={0xa, 0x6, "12e2e7", 0x5a, 0x2f, 0xff, @local, @private1={0xfc, 0x1, '\x00', 0x1}, {[@hopopts={0x2f}, @dstopts={0x29}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x2, [0xa]}, {0x1}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [0x5, 0x0]}, {0x8, 0x88be, 0x3, {{0x2, 0x1, 0x2, 0x2, 0x1, 0x2, 0x5, 0xff}, 0x1, {0x408}}}, {0x8, 0x22eb, 0x3, {{0x7, 0x2, 0xa5, 0x1, 0x1, 0x2, 0x0, 0x8}, 0x2, {0x6, 0xffff, 0x1, 0x14, 0x1, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x4}}}}}}}}, 0x9c) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$igmp6(0xa, 0x3, 0x2) socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r6, &(0x7f0000000980), 0xe) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r8, @ANYBLOB="060015000700fdff0c00168008000100", @ANYRES32=r7], 0x38}}, 0x10) 1.295393835s ago: executing program 3 (id=7012): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000002030300f5ea88004c4eb3eb000000000b00000000000000fb0ad8f338ecfe88a0d17434adfef3c233911920f827067215f6100ee9510f945d47a67f2fd3eb60ed4942e04b57e66305f28bd7008ec4c3034c6cd91db80fcfd591827813ac875ee64bf93f2b4c2cdd6b907f0eb7434854"], 0x1c}}, 0x0) (async) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000005fc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x800}], 0x1, 0x800) (async) recvmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0xd78a}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/15, 0xf}], 0x1}}], 0x2, 0x0, 0x0) close(0x3) 1.295136337s ago: executing program 1 (id=7013): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3cd2e7b3d6526bf5}}}, 0x68}}, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000300)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x101c, 0x68, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x13}}, {0x4e24, 0x4e20, 0x1008, 0x0, @opaque="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"}}}, 0x102a) 995.978405ms ago: executing program 2 (id=7017): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, 0x0, 0x0) r4 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r5 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/cgroup\x00') sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="580000000714000426bd7000fedbdf25080001000000000008004400", @ANYRES32=r3, @ANYBLOB='\b\x00D\x00', @ANYRES32, @ANYBLOB='\b\x00D\x00', @ANYRES32=r4, @ANYBLOB='\b\x00D\x00', @ANYRES32=r5, @ANYBLOB="0900020073797a32000000000900020073797a32000000000800440030fcce9c20c0d6c7f13e0e753e36736992715a94d0bb412336edeb5db0ca0876d83dd7d3caab", @ANYRES32=r6, @ANYBLOB], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x0) getsockname$packet(r2, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={r3, 0x58, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@getchain={0x3c, 0x66, 0x20, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0x4, 0xfff3}, {0x2, 0xf}}, [{0x8, 0xb, 0x4}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0xfc}]}, 0x3c}}, 0x40004) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000058c0)=@newtfilter={0x38, 0x28, 0x575ac7824d421509, 0x70bd29, 0x4, {0x0, 0x0, 0x0, r7, {0x9}, {0xffff}, {0x10, 0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x11}, 0x40) r9 = socket(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000200)=0x10, 0x4) r10 = socket$unix(0x1, 0x5, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="46000000ae799ecb8eaf8cf46499b41ac5cf1f3dc3c109442712194756a80dbfc1a6678df37cc30bb5fe803806ac8cd16d3da2674f786881860b594ac32bc1705e824ea9cbfb723da53071160fd58d536ab06c21ad42911f2dcebd29c580a65e2f487d07a9320888", @ANYRES16=r12, @ANYBLOB="100000000000000000003900000008000300", @ANYRES32=r13, @ANYBLOB="24005a802000018014000300000020000000000001000000000000000400020004000100"], 0x40}}, 0x0) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$fou(&(0x7f00000048c0), r14) sendmsg$FOU_CMD_GET(r14, &(0x7f0000005a80)={0x0, 0x0, &(0x7f0000005a40)={&(0x7f00000059c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="01002cbd9700ffdbdf2503000000060001004e"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x810) sendmmsg$alg(r9, &(0x7f0000000140), 0x4924b68, 0x0) bind$bt_hci(r0, &(0x7f0000000040), 0x6) r16 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r16, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r16, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) 934.142984ms ago: executing program 1 (id=7018): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='illinois', 0x8) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="8900feff120081ae08060cdc030000fe7f030000000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000) 754.861618ms ago: executing program 4 (id=7020): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f00000002c0)={0x30, r1, 0x1, 0x70bd2c, 0xffeffffe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x52}]}, {0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000640), r6) sendmsg$NFC_CMD_SE_IO(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000006c0)={0x28, r8, 0x11d, 0x70bd2a, 0x25dfdbff, {}, [@NFC_ATTR_SE_APDU={0x4}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000881}, 0x48094) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x50, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x8, 0xffe0}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x3a}}]}, 0x50}}, 0x0) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000001400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000013c0)={&(0x7f00000003c0)={0xfc4, r3, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r9}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x200}, @WGDEVICE_A_IFINDEX={0x0, 0x1, r9}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_PEERS={0xd4c, 0x8, 0x0, 0x1, [{0x5f4, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "5d1f3adf8fb36e1eed56e8bb0df534e55eefaedd9e10f6a38809f90628a365fa"}, @WGPEER_A_ALLOWEDIPS={0x594, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x12}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x10}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1c}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1b}}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x13}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @multicast2}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "5bcbac78975dadcf5f90f40bc4a45ab2ee7f8880edb80b4b12dcca08a57bf529"}]}, {0x24, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}}]}, {0x4b4, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x480, 0x9, 0x0, 0x1, [{0xffffffffffffff0b, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x38}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x8}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x14}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x15}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}]}, {0x4}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x6d}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfff}]}, {0x27c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x1e4, 0x9, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xe}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "c6c3f8a127d1d5fbac3e47a2de1f4be9896190be7f3098fb3fb54c75766c67e7"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @loopback}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @remote}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @multicast1}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}]}, 0xfc4}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008040) r10 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/uts\x00') ioctl$NS_GET_OWNER_UID(r10, 0xb704, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560602000f0200006706000020000000620a00ff0ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffcd35010000000000ce040000000000001c000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56bb5df3083d20f8c2bf304000000815dcf0066d7ded3c5c49a08a503ea6d54f7f3125a8200578ac0836d6454745e70a27444003c5b20451b624db6f5320e9befc1e00b8b32917c4d30d16b7edb732bc3ac330b16c442aff70d27659bc58e296b16750c5577c848754b4894b07f15bab1c640a5c0c4fd62f9db829b301ef67fd2b2736f3af0c54af2412313b17c4c8081c4ed0572261960e227d34cfbfdb247bc2351c9d8363a8cb18b7330604da78b0aba47545f9a25a80dd7d28a5ae41824f611dd2de6dd581c52698f9542a444a8a3969946faded5275c00"/420], &(0x7f0000000100)='GPL\x00'}, 0x48) 754.353033ms ago: executing program 0 (id=7021): syz_emit_ethernet(0x6e, &(0x7f0000000140)={@broadcast, @random="17043a73dbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0xa010101, @rand_addr, {[@lsrr={0x83, 0x3}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@private=0xa010102, 0x10000}, {@local}, {@remote}, {@private, 0x5000000}, {@private}]}]}}}}}}}, 0x0) 754.214859ms ago: executing program 1 (id=7022): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x1fa, 0x4) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2, 0x2ff}, 0x1c, 0x0}}], 0x1, 0x0) 747.751886ms ago: executing program 2 (id=7023): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xc, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18040000000000000000000000000000180000002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000140)="b9ff03316844268cb89e14f00800", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000007600090b000000000000000003000200000000000800050000000eb5"], 0x20}}, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f00000003c0), &(0x7f0000000400)=0x4) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) close(r5) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x400, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008080}, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r6, 0xc0046686, &(0x7f0000000440)={0x2, 0x9e, "4ce420aaa90409e3af0d60a4878d55b8eb485a386dd1884e02f30086888617e8f1aa834352342db155ec838e3c9083b6f86137229d01d9e5cbb8beab148a7a12c052dfa781f4791a2adf4036e8244af9c234f88e001ee3da9bef3de8978cb57b9099a929f007bd0c914f03be97bf33b5197178781c6cbea3ab170b9aa18cb7084b9f68861cf0e996451a5145a74818e2d9e2f740b5f555e4917d6d140c06"}) r7 = socket$nl_route(0x10, 0x3, 0x0) poll(&(0x7f0000000040), 0x55, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x50}}, 0x0) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) accept4(r8, &(0x7f0000000180)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, &(0x7f0000000200)=0x80, 0x80000) r9 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0902000000000000000001000000050002000a00000014000700ff00000000000000000000000000000108000b00", @ANYBLOB="5bea4481"], 0x38}}, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f00000000c0)={0x0, 0x5, 0x2}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7400100006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010004080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x4000800) 564.218163ms ago: executing program 0 (id=7024): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) 562.863187ms ago: executing program 1 (id=7025): pipe(&(0x7f00000002c0)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="060015000700fdff0c00168008000100", @ANYRES32=r0], 0x38}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000003900)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x880000}, 0xc, &(0x7f00000038c0)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELTABLE={0x298, 0x2, 0xa, 0x302, 0x0, 0x0, {0x2}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x9a, 0x6, "b2b5b821d220959e56a009cada03013662a2ad5dbe11087539617749532ca533fd197903531ab72a78198a601bc6b3c7e622e53fa9aab4e8545bd8673142d94fb7110105606fed9f2176d3e2ade1181482a8c89c6437f8c6c652aec407b6d755c4fd7ff11203d0ee92590e89b957a98fbf2c501017deb254f80b4be61cd398471f9f197a9a529408eddbe0b5afa8856995e275d6868e"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0xf9, 0x6, "96c0af2ca2772d29aceb61a182c3d303c1a59d43a197f7cf1e43816468b936184c24a1c07d325b44976f3275c116b5d06272ad74d6473bf2538e8ff4177303de7ab4d9d85fe39a39f24adf8c68406d967e6689ce1ee2d52b0532101823c084b80cd42fd6975a352f243688671b477f8e081019721c36518721faa0b2ad6d2cab1bbaa5669f5d852439b76624dd0e8954bff10cf6c84ef77658e8ae372e4622fb919133282149791e0a3b096d77335d523023c1f33d51ce059c67190a02decb9c9212b271bcbdb8665c47317058cf7337f4637447d0765574a2841bc725ab9fd5615b678ea9bbdc89600d5f03443bbf81cfc015c12c"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xa5, 0x6, "62809bb97bac706cf143ae0a72489409e6c1bd5d8905fac010646dcd6905c641e0a2d40032c88032e4528dab9bf7ee05b6eb17f75300e0c38670be2d356f4de7a23988f1e5dc3703e29783e8210b12a6c65ef0a5c5bb7e5e77d58cd19f34e1ed5ded418a9950c9caecffb514834f7ffab6bd2e63518b42ebfe82d917647a8b3f79456528f289e94561f083683c6e88593cb1e3453a2dcdaa9b63ef501842902fe7"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x2bc4, 0xc, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2b9c, 0x3, 0x0, 0x1, [{0x4}, {0x148, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x144, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xc9, 0x1, "dd9cf6c2a2730d318a6456f2da4353f7cdea98293f063802f21036ee2ed45081983d066c4c4fda55f116d15d6bea3bcb30fd1445b0b61a92c799a5655a57ebe2b1b0ea68f6e775e3fe00c2df8fc2eaec5982aeda209dce30c0fb40ae156ae5e6c12c6e8c046a55a519d1e016f6ddf5de2f6518d828ff62e5d4c8d2ca30f0ffbad411275b93b870405fdec2be2473082417c0057e2e671b48b2a8a8baf39a62fa8073187959bb0ec5f44b8212a0b0b14da0f9232a298241123680490b62e0ed3810f7d3801e"}, @NFTA_DATA_VALUE={0x2c, 0x1, "6a73ec259c9ff62a9d27dbaa73f9abe2063c2a32d01a3a89c4b93ef59dea11b1c041f76c4a0264ce"}]}]}, {0x4}, {0x420, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x15c, 0x7, 0x0, 0x1, @dynset={{0xb}, @val={0x14c, 0x2, 0x0, 0x1, [@NFTA_DYNSET_OP={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_DYNSET_SREG_DATA={0x8, 0x5, 0x1, 0x0, 0xe}, @NFTA_DYNSET_EXPRESSIONS={0x4c, 0xa, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0xfffffffffffffff9}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0xd9c8}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_DYNSET_EXPRESSIONS={0xe4, 0xa, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0xf}]}}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x18, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xa}]}}}, {0x30, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_DUP_SREG_ADDR={0x8}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x15}]}}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x476677b7c41c4b10}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0xbe}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x6}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x8}]}}}]}]}}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_KEY={0x174, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0xf6, 0x1, "e365d65fae5b4c3afdad8a80f77d41da174f56e4a1a3338e1cbbae9f35aec24c0366ff753d72f061b644117bb0016dc150cee4d8f978e0534dbec8b45eaa0f64c336b132506021910ac3391fe259a3a4f16787b401dff32a63a1bd73592387baa73d6f3699a45b6dda858cc3b04677d206f8c3a4940a725c524b973e2819008ef0b6af58232debef61e5e678c07dba2ab8594c7248d3abbf9da0ad412d2ae70996d065c78c3742937a013501e4a9b7323a4b68d75a3548c4d42f5ead9fa9784104055aabbf792fe47afee053980fcde8b5d816e1ee8c03ca199bcf5d65dff8dfd5e56a284d4f0ac23a85367a1bb3c34883d8"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_KEY_END={0xb8, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x51, 0x1, "97f8b20a75589da06c1c8c113ffcb6bf7790c05c29aa433753a3ac358d64b7b030828ec497c0a10ecda0c1b05df83a1620d5364f63924c2cc874194172bd13a09dfdb3e60db30d651d41966d91"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1000000}, @NFTA_SET_ELEM_USERDATA={0x56, 0x6, 0x1, 0x0, "b0bfceb523bd56700ffe6877dce9c36441a801cdd00a6d059576a6c0821b559eea299f4d0405ec6e21b5b646ffd01108bbeaf662b229a64b5da01bcd3c04a1470f9b9764b9dc829505642d6ec9a49ff8cf3f"}, @NFTA_SET_ELEM_USERDATA={0x15, 0x6, 0x1, 0x0, "51a225983c058dc1a73d77b6f4fe11bacf"}]}, {0x7b8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_KEY_END={0x334, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x2c, 0x1, "684807c15ed11ed45616993054cde6f9371b830cf3fee7baf469faf6d883d5212b3082136887ffb1"}, @NFTA_DATA_VALUE={0x89, 0x1, "abcd6a59f289603abf763790cbcfbd4a85991f3d791fce3093c24e9ea42d2938f83dab2e82377a52692bca146a1feb59ee86123aa5118be5a886c0371b2a59ffba323bcdca5557ff595587b825bbe243aebf1334a38b7b91b5fe59b04bd9994017b1eaf3558b323e871a03fde79285cfbc9e12ef1eedc8beec677afcb4846be5e80eb68e6a"}, @NFTA_DATA_VALUE={0x2f, 0x1, "51ce1f883e7f1a953edea6f672e337466c75642c82d8bccf90848779d927dc86c7f571b26e3e88d7e61230"}, @NFTA_DATA_VALUE={0x56, 0x1, "a2a5da451bb91cfd3d559102f657e54550bca646ec1cc315630c580d560eb763935a3e977ed54aaf7cfb8a44be03b6d76c2a9491a613d772aec93813480e1612981b9e48ad5d6b4d586d5cf6a2696b582e97"}, @NFTA_DATA_VALUE={0x99, 0x1, "9c3744d79d0e60cee44ce6b0050b54de354cc76513b9fac9ae6098726da6ff67539c463bcef2d3742f2440afda0fa4636c7bdeecdc515be2f167b644107080d3c67d60cc58f6f6f4d4b2cd223f657f8ac564e7a43cf836ac54f70f26a5ce621b75e44fcaff2928d19ea942e3c8f6b432c5543d2b5138944271cec6dda3fcaf548c1db73b68d97d4992648c1927ccb58ae80a936894"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x469a4caa31aa9710}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0xfc, 0x1, "bf14dd7c12a7987888e9950cc445deefead3f5a752e52e03331a1f5f5640524a5411b2f8d82dd4e4eea491d980f37b9dd96e535ba0931de53a69d093fa022d7e6ca4c28374469a2ef5c35ccd6b08a715d0053f2777d402de9e341cc20e6eec62117bca725c27b820428f87c1c492fc52bb5fa3f9a994947a678a97dada7d30086450fde452f036b9f5c93e92f189023069da315943513ae5b21270af6dcbce8010dfc979a9e31d1191f092a20475a83bd93b015815649c4967ee013b7f9ec192abad0734abaa99bf53acdae6d5a2353d50e8a582ad73355e34e64964542b8e235fa36aa60980900dd2cd95290abafd5d759371f93a1ddeab"}]}, @NFTA_SET_ELEM_KEY_END={0x2c8, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xb1, 0x1, "371117574e3c38b19f8bf9a907d033fde3e8255b195f6f1cfc873e6618261605303a2af3a5072433bf8af973231dcf562ad8dce9f0413dbe8e93d3924417704cad5ae33d0cd6f5e9095155723c529794d3cba5470a8c4b5989dbf871871066a9a1fe552ea35d6c0dab42025e0f3dd84571f9a8346253453a72f09daf63b75081992b05acc83e6db73139dc3f0e3d9dd5223e17370ef46117230fdef190b290f709af750887e56754d197e8a158"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xd2, 0x1, "8673fc6aef2bb6c02f23a47aa354f10d03460e02a5071984bf4724e556a5661f047d63061efbe0ecef77d5e53f230e3e9e8a69b604912efa57847181ac4e82cd733ee4b4861103ea9f3e4485726d936150b4ffa6829c3fee8752e76fc12917e426e3ccd2189a3ac7f93b2868e4a57dc3d6ffbf6769e38babd430092480e8947e86ecfabf7cde5f88481c70b26add6c6356331204f64e4867f05c4271e72c971cc821c80896a9765f4709e17f35b472d700dc4b53d002d003862059bb020fb7af29f2058f48a9f95124524744516f"}, @NFTA_DATA_VALUE={0xdd, 0x1, "7775d462962ab75ef21c6c4fb56a62260e6e029248efd8665f5fbb10d0519908789685009b1911e988a0d9e1d24cea78f21b9d36d2ad5f2b8333bea117ed62fea56eca7852dad1abaf4fff8bcc57f2e8e97baa4fc21030c96704189c7d3963ad6a73266f104f1a408c49a49f4b7157ffdf0e4b2b58cd17e27be66c6078ed880aeacc47647b3ac1201c483731935316e95986aaaf5d08e8e25e6e6029fb7d31080aca39c5c1a343f99ce18865e831181ed685df12ea3a48303a8519cfa9799202e4af9eea81bb408d82c108443f40245341b4dcdb3b82a05ae2"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0xd0, 0xb, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xf}]}}}, {0x94, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x84, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x7, 0x1, 'CT\x00'}, @NFTA_TARGET_INFO={0x4a, 0x3, "8d6eaf73b598546133a094c5a03b6e88fe16043481fa27075f8d698fba94df8caac47980aa8956dad4cfdf47ed341e740525f24131c77a588bfe54d8fd90deb3e79a27c84b74"}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x19, 0x3, "018c689c8d2fa1305e1236500a609832c16e276da6"}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0xdc, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x4}}}, {0x48, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x1e}, @NFTA_LOOKUP_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}}}, {0x30, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x5}, @NFTA_LOG_PREFIX={0x6, 0x2, 0x1, 0x0, '[\x00'}, @NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0xc}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x5}]}}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}]}]}, {0x9d8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x2a8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb1, 0x1, "82aab48ac4a479ccb0ae7c69fb21cbe03772fde60019df5059ca65b373992292698a3e369bc1cc7a264b55439f610b9e0a0deec32b5ac77958d715cbc14a6c984750c82bfb31d805af3e38dbea1dcc7a969717e55b4b1578e9e65efa3247b6ac0f28402d9a30006c170550d0e423147d06d5e31073ff094f46d7bf0c62fa7590555a86d69b3ebf9b243655ad6c86d4b13502fcc2df465f589850b78c6bce3977ac60f27de242555bc19d99a975"}, @NFTA_DATA_VALUE={0x6c, 0x1, "4afcd3d9a18b851efd52b488cbbd4bfb591ce58f375ca36b5985e7352c11be6672cc15ec95e7ecd5ee75a28d550a9550b55bec3cda4804c14d6c2b6d61122770a67e9e7a641e3b61a92dea76c7684a870add837db5f37794665d9989b781528afc78f8c3edd1d6a1"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x5a, 0x1, "dacec79d3ca0d8c9f46a2c89eac678720a8b56d3d51a5818b51100f99461de4e16e35d1d6e25994b4bceafc4c7785e535074204670784d222193c1740d5b5d2cf5a192a8d6b7c4b55eb38ab1f0c47b0e07262e7dc195"}, @NFTA_DATA_VALUE={0xc1, 0x1, "8a35442400c251696db0cbb34f5fe8ac2a9906d39ab7cf340d7f91bda008ddebe58acbdc717ccb66e4cb6c5106d7b4b0c1ea2298dbc19d1d38b6fea04cc5963115e5229dca63958a7f29a6296aef5044fa78566ea9f011784a8ea511ab8547fec644b346b74ec3a5ec3420041e70e3f15f423e1abb64287aa5af11be1d1e98b3ce66490e403cda4be7320a7a4e76d85bbd29b3d0f5cdd152222dff9402ce05730029e24002b474047e4eccb0992d7769e7d582ee1905298e169578ed95"}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @bitwise={{0xc}, @void}}, @NFTA_SET_ELEM_KEY_END={0x2e4, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xa2, 0x1, "80eba420b3887e9df305b6d6f11331403d68a09bf71d8e83c1c1adff42451e01e5a364ee19e5cca83064a9586ebf3741e6e008b0c106018340bb2d2223d7f9f9517dfa258fce1d2b6615406c6fcc4633276e4fa5076f508b4f598b3c7b7f361df2f8a72d55945a69fad1accb5e26a389109678822066157b17df91de9a040da72404dc4e529292675e18b1b460d96b24ed36ed3d0a0a7081ad4b5b5ab8c8"}, @NFTA_DATA_VALUE={0xa9, 0x1, "309827a5257bb8216b4fb8d30ab8349d38b908ab38ea387380295e7ba7d85ec9e65a22f1c201b6c34b6502cef8cc8083c80ec14c44cb84fc8a876df87a6a612586ee0086536bd798367ce78f7670203e8ad76ad348837e210d4739c7ada74303a7c5a7676496ebd5be73a2ba51b8efcca20ede0cb4514f814bf2690b0f0405dd3cd0e683eeed4b97c6bbb7298d3b773a0971fe81ba305d3eba4c0e4e2543fd77d65b524d51"}, @NFTA_DATA_VALUE={0x2e, 0x1, "4a6d71c36b9edcf13ebe288a4dc8ccf93bd5b917255dcc25af3ed90b7c00f68d3d44217568c3a817518c"}, @NFTA_DATA_VALUE={0x4f, 0x1, "a44c61ffe632ec1a65daff8bbc78a1d8a85ff338eacde450336f3c03973f2bb6dda0b99cd208775c775962fc1d44da606886c2b61f5c2f39736bbcadcd068ded83379f43b4c7dee2729b89"}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7ffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x7b, 0x1, "392bbb3657cde1831138921c72b4be7b3aa3866dc9defc562f4a6b50bf6101f222e9fdd269b34242c054b694d0e25398cb6755f1cc3b1faa35129276f31c7ae54475ff7b61fa0d36a475550f42ec4fe670ebd94dc21ff873e0a80f8e4e8f5048b536d8fdf638e431845412c1ed346f5a200821af93719b"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x5}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_USERDATA={0xf5, 0x6, 0x1, 0x0, "9ffc3ed2995d0d8af6b75394e100eef4c078408ba382956065a93cbf07f248dfc053981caaec2d5551016eac70f04a857cdcbb0342be2845bec4c55bee725e190a723b11e7113bbde9b06d73c65088f52829354a76a00b0a19a37af0e904585e597749b72eb73c13646ef6706225df3484d1282e3694f64a6eca051c3aa95391df286f3ed4bb82a0097a4985ae58e318004c110b791374924905870a7481cce91c3f81c14aa0fdbc30bdbc099be8c5b7a4ab2acddfd2fe713f5cc134966315bb7066084085dc61a06e2ab73c74d696b3b4cb0825b3d34f88af3f4e635f19975550344235f9dee8df6b0fa2deaf4532d487"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_EXPR={0x30, 0x7, 0x0, 0x1, @synproxy={{0xd}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x4}, @NFTA_SYNPROXY_WSCALE={0x5}, @NFTA_SYNPROXY_FLAGS={0x8}]}}}, @NFTA_SET_ELEM_KEY={0x20c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x92, 0x1, "bc782bffa2670e5fec22fed37833b1b791e0fd06b83b3c73d938c48258f98a7ae27f6b56dc55cc31d20f6fe36a8905b2217f2239a33ab4181265371f93f9a343496259f1ca4e184f4e1655ccc5c6469da4a9e15a284c7e05d078cf1aa8a27a023f33f576e5dd468c48485e2b159dcc70d74d28a091c9f85068f11b2d5fb9d41e906e43de4e5f6b4c9266aaeb7257"}, @NFTA_DATA_VALUE={0x63, 0x1, "2a23c0669d98e58365e4420513be5b8cd146c19471d2b872db8489c08f633d1b8e7c510638c738c90decc096426614af5e2384ebea9cb4b1301f5cf68171a9c19fd240486095437883175bdd0db4c216521fbd2fe2543b5689cf932e9d3e08"}, @NFTA_DATA_VALUE={0xbd, 0x1, "bdf07ffbd7895ff60838e50ac1a77997ab96635fd52bd94ee791ad734f349d25ad6647e9172fef8a2a3d0b91aff39008ba39b3761871cb06860201b641fe08f0da02b8c32adc9dcecb6c4f8ef43b23c4835581a50fd65e468b2082378912deab3c88b3e6d03982af8cbb1d1712fdeb7896c8580fd0ccb04cb5d40081fe80c17c314cb6896e151528060464b3f637eec1ca17fa62e48bfc4cc7023a29bc2a7169cc0ffd7d518017fe2134aeff349d09ec4cf1c89c653153118d"}, @NFTA_DATA_VALUE={0x4d, 0x1, "9ee654855bf8c40b81d9043bd8bf390e10d4b0fe80b197ea64213912219e7f461f81ffc96da0856436074e0a610dfcf884d46cd92b38e26403c188119f015f0b92426ed2acda04d563"}]}, @NFTA_SET_ELEM_KEY_END={0xe4, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x61, 0x1, "a71a58b783ed3fafb069329e572f56feadf576d684e4f1f7ae2d65b383149e92d7718bc2ea46e8ff00a90f01e79788ca62ad9374585485d6243d1820519a4baf2fb80cb0564d3053d1ec15b63f8e2136954a3fa79f680e4a53f8eaaaf4"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x200d}]}, {0x1498, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x28, 0x7, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DIRECTION={0x5}]}}}, @NFTA_SET_ELEM_KEY_END={0x1300, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0x50, 0x1, "11ca7b0c4bc6a9dc063ba33c15c64b21b8ffa395242a5e06122e8fa5109357276041ec4c2b3983f307a00264f796cda534c5eb227aa6b6fd2bcb11ad05578518992563e85c631c4ba41c434c"}, @NFTA_DATA_VALUE={0xb2, 0x1, "f2abf894e218ee44a203ae8e2e8f1c67c8eb132cc81810023459046614ca4de9bdcac4849f12ffd558aa36f20ddda1847a8b0ee06ea2b6aa569bf00b7ee9f5e18e6d1d2292301a9cbe0866d1c1e42fc44edc5d59a261c87448217345f79b0dcc86b6e124dfd39affdbaaf7d6e0cd1d994423f365693fffa54f40f41de92256a95be477622047a94bf7f01cd7ab9528f22122df5e502a8fa20bf5442637efd62f5cd3a6eceecd9e59a892acc6f97b"}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x5e, 0x1, "e65e8d78fabd13d7fbb11e47df551d91d8dd3d7b48283101719c1b1347a61afd944657a4feef700b98f1f518037bf5eca419022e97e9aa9e7d13a8e3dd3e717bc564e0519226f2a3bd7e4ddf899382b3e523f093af20ab8ef9ea"}, @NFTA_DATA_VALUE={0xca, 0x1, "8ff9d0e0dcd79888760ee68b0aa6ff010764ab724088e1e5f2d8ea0fe275fbc86344490eacd05888f3d5bdc3b769e1eafada04300400df60f73a1a7b32ad6ac99600bb90cc5e2478231c57fc1bb726f90fabfdc3d9728df98bae898b4ea7742e4c61e3d7fa73b9ce867805d79e904d7f521cc3aa47a16e6935658482d4aab4ad1193fd7ae8592218b66987ef329d68fefedbe3cdd232ca73b4e1f84c90b9f1a80ab519625ec9a22fc75fe397164ffca32a59716b7738cb60e8c52c2b92a5fffa9814807a910f"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0xe8, 0xb, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_REDIR_FLAGS={0x8}, @NFTA_REDIR_REG_PROTO_MAX={0x8}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_REDIR_FLAGS={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0x30, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xa}]}}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @fwd={{0x8}, @val={0x4}}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xf}, @NFTA_SET_ELEM_EXPRESSIONS={0x68, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x17}]}}}, {0x1c, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SREG_DATA={0x8, 0x5, 0x1, 0x0, 0x10}]}}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}]}]}]}]}, @NFT_MSG_DELSET={0x60, 0xb, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @socket={{0xb}, @void}}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1b}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x2ee4}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000815) 507.193436ms ago: executing program 0 (id=7026): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000080)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x2}}, [@null, @default, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @default, @bcast]}, 0x48) socket(0x10, 0x803, 0x0) 497.886742ms ago: executing program 2 (id=7027): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 431.370474ms ago: executing program 4 (id=7028): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3cd2e7b3d6526bf5}}}, 0x68}}, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000300)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x101c, 0x68, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x13}}, {0x4e24, 0x4e20, 0x1008, 0x0, @opaque="e90a6b023476d8ee6c1e871b72c4d85e316e6c5af0790924ca8519de9d65dc3bea61286c1787e62ca989aaccc5c8072904e968a28707d319fedeaccad9ef0211361e7d2e20eccc820ac2f320abdaed95f350f3225d40ef1ce72affc6660d5079b25fe9b22be9490365b6a8298610a54bdee447e70b458e89a97190d95f5e70ca00d27229212f17df9aa43b84d556aa4bae5f8e42ef3a92136b5af6b221153c84cc9bcee012f8321d8de39829dc7d9c8a8d679007f54dcd7bb9964851cff7bea19bf5c60b98a63a1f21e41076c2815c5bba83d449077c69ca53323675d8c4034e489230a631a6133e4b31ce275eda6b3b3b430dac36715cac3b5bd4bf287e182f9befd2f959b75eceaf31b43314154782eb874680b282b3431a483d7a9e73497319de71d44b2dc746e28402af783402ae58549a772fcf8bd47be5e6d4f58c42bb512cc5f9e7e0222982abcfc74fa08ac825d5d8fb24bbf6196f8722802e86fe894a1e9cc4764bbc518d3416b0a4be456758db0059cb24314f3a2243abc1effb20d977dabac80a44c71b9cb27ef9652875be28152bb15fe275dcca77f23f9be023dce3044087f2b1b3109ea33a3c7b464415c62f5aae072a4ebb5e08d6a26f0e5b1581e4979a42f03d8a912e205fda93c8ae54a6c2accdb5e310cc679b75dcb42381fede7cb87fe1fc5f3c76789dab01e0e5e670db2fa39b24810456004d64f87a78d137282597cdaccac647d41a5b3f7a3d5c6fb4c8b41e01b89e6e0b292b3ba35a24cea6216dd2beea02ee979ec091b1ae3ec3a3ac24efa5ed55bc10e77a92c4249deb971d959a3f04199477b3a8f703a85753b77923b224d287dd3d967e3173d390d80d71fca96237f6a3944506e530f8b7788c3d7f7087d7a712b41581fa30c9804818e1b150dad9e4ee0873c9180009411962c19b2343a6c7668b6efc765f943c5735187de2ec37cfea22cd2c30d473cf066181760e99de106509478df5f9a3ff795a43f80b900464888fe748baec3f5d68f0dd29cc99ae1a6a8e7ed0a5939b217ec7f2c4ad50884b503cf11f2763821040ceb64b934d5755ef988dd92fcd7bb3c782d361c028071a2d337deaef86e209d82d76f2138742131816cbd9fcdb700367075a03d43fe5c915308c8686f6262e6dd5228b3826f02177c65ba10eda44dee4f54ac0623bd6bc7d1bea52b6ce08324921097a42d59bd9d9bdf5ccd892f37a51ac6fd7f2625686bbf152dd011cfa19118a8f253fc3ab757141088e79ff0e6a8bc3ba05c6520bda568be81830538564f778e76c86ccc0bfb9e395b684692cce3b0143e3c5a5ee758fb62cf8c49c356c377bf10e9752745a5018a9ccb67bf20f947cad3ec89ccdf4c10ac78df44dd5a458447e754845b2480f497ee26993641a1730fa21f1e835619863f3a74563bcb04d2f27d439891a003e8fd8d24204468751c8c068ffa3ecfa8f2b14d41e4594aa0d758afeb07c8710f0d0a28c450407c6a1736f66309d18713477f15ea1ab2f16c614d510e6e50b4c648a0d41a907f405aa265504889762679915725d82f3c1b4ba1398e6e5e43f2dbccb7fe3cd2f9f3f5a6fb9d7260d9ce2adf318354715ef622f1a618dd9ab01c492e41c8e815c40c8bf33f762e32ac5990c10019940283dd20e37e8aaaab3a8c8ea3e057bdc54f070fc150d82ac8be654366d8c8cba2cc17f86b424f508982dcbb325345d6b972c0d79a9789a71cf4917ee951f8efcae326a9cd2fb1ec5a043e0a8d78bc2bebecd1dbc3af6cf502129a150831397e272d57e7dd8cc1d6497af9bec065f6907daa013e665ad0ac1715904230bbb09a6b5d34ce8d23ecf01ddb45103d7b809cdc2440d05516d968eb4e00fa0d7195c78856170b77e9d3cffdeb783ffb34796f23dccaeddb8d982606f315c8956a935a52c1835d36171e851dfec510027efa22afda688378d75590fedfe6d6039b56f69b038786cd062cc5f6820b4f979cc1510b718566a891d36cdbe7416f41f6aa285a88aae9ee2bf2f89d44b3c6068b21074840722c758f84be5806f26e3d590bc49e5873a91058f4f574764bf122c39641eada7122cf58c16585e1ee9bc0503367a65b13d9709cfb85d1c44bb58f724988d0b18be2e56d7c170d17a9a6b91efbb154322c595a4a67c9b10e1e385e63a97010f41107fc0bc92c3530d3f5219fe24053c47d88fd773445c36cba91dccd8718498c568c99610076bcfd1765bcb65ad56a3669d5284c6b5db41fdf0591fba82f0dc9f78a1b19f8e24354050e7f25a8dfaaeed19dd058d130c7a6f6feb6129ec39ecb369fd94c9708c3dd97c7d14fb0de8bfa8b4fdc18c25d597fdee3e03c5fa737176d9ecdc37926978da542bebd76ec040cddf6b4099041bd90bd9a1016014aa7aae35d4f3e647c7eb3ce552d3c534033539c1355f3fdd2f25ae2cf163b85eebe924e1a94addb55df32a12b32a6280790d10d62c8e8265c15923b1ced8948592bb2e71708f6cb2e323b650cb5a9164c1cbdd26f616018175189a65d8710ccc1006b31edaa3265308826517501272f5c4c38fc7c5a4b6c52bf01fc065867669bc324ac1810772e413a54dba3f3d5bd420b703613ac4b4d5a7afaf794de68d236b24c023d7485317d705e34d746cb79df5c55b1c516ece0425d4d12d56465c62679ac2d47e8a0f4f84657f927ba76acfa20d399c3b3c63cb4e408edd54351dc9d02cccae056b581adab6a79ec658603e80d5e12e578918367121fbd9077382c9ab8deeab9844c2fa734c3595304b370640c2af829746db3726b43d3c0c4176f032aabd704eabb84eca2d920f65a6d2220e236190b20b163c1e7da8238b803f723892647b5f4ac44f24356f17d0397b192d1d69cc5330bff5872e6017b87e6a05e9c8eda47fee61e602e53e7d3a692e56b19740452469f27e9b6c417744897691a36bd5bcbc52ba0e234adadbc568bdf0cf6d70e2ca50c0cf015860a6b263d6e9df397531b8118625a7224a1b0b3ca1a2668dea56c77ec5ef28b8e86834ae04b8ac37d6dadd0d00915832132346556b629fae7251acf2cf6b85500e9d5e5319ef68677502324c44cf9a1fb6eaa9b9e2746c36ca1e32cc21335cd7a600bd80da501b1f4e83dff7173d6cb171e2cb62007c7899a7ccb02657ce74e3bc21f6593770f2f32cad1661b768750030ba50084e5eafda5ebb32dbd18ee5c81bd1122ba1469485fd4d6cea9e80b4f8d2d30f63ef00b20572d0bbf94edf292f0f1119304d2593db523ec03a7786e1c414b2ea7eb36e3b22892304bfcb900bb01130e1f3c8193fd579ea8f021f5072c57ff5a2a60af09fb342024a3fb77c6747fba8b459ed4fabfddee1713703a3f3b7a82c0143c897b4bd606b47b993fb3e4187228d1709b2a91aacc4f9edd1cd718dd0387ba7a3c87c3cfe9c7e93d22b8277f279aabcbf2794e96ff4591ed7e311d30b4edaba2839a76cc9afc6e722eb7f4a9904d036dc4e982d5aa16785e3f9393f251b6d751dd016763c9ff1adfc3c113ddec82927c468173a6e2557bf75dc33f47537c96129d97d2b8f68ea7a2c05a804dd85f06ed21e8b7b8863268af6ac448c67e229726a211b76b354d685200fa2b0d1d947912d9b8da1b10a157df3c22c5ec43f5c50378de8425dea849c719e3a1e0120f3616ee518f993d8cfbd0d96bd9ec077d6b316d73da0662cf6a63e3dcd1ae90a75e2194283032ea24c0e8fdcb1d75ecbe130731b6c14ca3211302d8bd253cf61aa6c48b15fa262e05aa9a096e07dbfc28cbb6dba49e95fd12eec6b6c3ab30515c2f138473451f8bbee39a1f6755d53b8e167ac8e9405cc3a4519eed83b717abdb2b0a308731d9d81c14d0dc90ec965a44072d943dc8283211f2d750cb122a859ca712dca07ed5119adf13f546f2560241d948a64178a8b1b18262bfb2d4291d48be2519241f32dc2b42e49c7255fee873ed3e23f55559abb3048be5283eb8d246203c3854169f9934beec28dc013929d3c470da534346d62316c4c68a5e880bb9893c1298114f0744b3b04e79e6bd9522842bf1dc077b4c6b3a04bf35ed96fd2a377f9aa5c3aeed3169427f336a0eef86d64e2cc48f5d4e99b9beeb80cc1e878fc2f5506f6bf538a6c88b70e50e606b9df5dda84d3e8c6669f2539ac47f2ada0b554d5ad90c3d4efd34d3cde32b9a8a7bbcde2d7fa765442fba6b5093d71050712cfb6588c73e63d7249bce190e49d7b007a4758c5d388e53b55484b0a95ebf3bc4924825d88477d0ff1fae699825a23006e39a9060689d0ad7f1dc2cb629e0be1dcbc1e4e877fe439ef0a3ccf39916c8eb31cf8fe0aa2f4aad61ac911bf63bebd1b217b6caff701401441f891a906fa9980d4dafc7d09ea40472bd4ca9fdbbcc501af25dfa35ac422a749805d1b1f491dc16d3e54117cdaee7841adeb7cf0cac0fb614b9948dbdb51a94c9080c5bb98450d991520108ec55837a4c9a3087935899aff706dfa00e9678f5d1a16d10044c933bc3e4954a9d727de26f12d5106f91a4d43f37d67c19524adbbf74a07698353cb2c124ef6efca96128b0af81bc31d89d51065db2918a1518a8267e09c3ce73785ea236d56a6f86e9fd58e355f4648e8492ba7fa27b3e38edbeb29c8c95778ae2a046e6cbd5a75697b5d35999f981d1539b56dfbffc178094f76931f1f1a80728e6b51241ac2c4fe28c746ae4af6431c32bb8f169b8c6441b7a028927664a431975efdfef0d1172eb520f31a3a03d16cc74bdbc74d97b6dc809c9afa2bc3f9514f65c7af6bbe73eb4da276c3efefaa2b6f53ae3182d43108383f670cd9032f9da33ab7a033030b230ffbd07c0eea1e9c0993da7f19a3dab31bc464dd36a6b67d974034a5da5c3156b4f80302968c98d88a5c3e5339c8f5132bc6c55d07a32f3cda6b036a312d743670a01ad1bada0cfb4d76894d3cca065fbd05c1aae61431826ca1595aaf13b43c3f428f28c81538168d8ce1e2c0e1138125ae25743b1925a6c3cdff90c08e5308c887321b756a0dcd84d7953240ac2dc2a5598fee424654ebf711afe45042bc1ebf58b30425272d5029e6f7c50a58340ebb0a572a4bc6f7be648a81639f81c7ba8a02aabd7e6a20ee551abc86456de008299cba76755d043fa57152e1511d4536fa4368fc9836a4d50d6eb44e2e50f762f68a72af545b7e5e476852b9d4767e07220150267098c14abe1ea6669835441f65078d7a8309849f70e38f588804e422deef8f03b8f36bb72dbd1fd7009f7ed89f34551e22dfaa5a45c9b150d014b66e54d8b1414dd1642a9d25044c460d7e1e830021e08d531f1995629699dc02223d0387a9ca241b9ecc82dd0e535a997a449a5a5960280dde6cd3ccd5358c9708f1a717db767b353473e9b64a665156b200c4c0d23a84f9bdd8f997268c220b423f4eaf51abb260d029fb5cedd9fcf19347a1263950400d5eb33a4c534d6b03c6d4e34940b77194ae41e90c84a8178210a3a6b4cb7415f6194bf3c48779e0bbd75b665e36590e92723ef4136d51a3c92794ac8d63871719a932405f92ce10f34e202a3c38bca69878b019d77eed4539b736a84a93c78a15c959a9bc1c9738af64fa405822c77e54754cea4cabdcef3fe065be79eabac7b245bb1df46c8b95738bcc7b16f7450dcd0b19aef4fb3324011cefadbce58b457d6e076454c6384f51318e1a547d30caabef29ac6fe1b03db6b53e026864e070da98360cb682e9b08bef2e3c9d5cf0edc1e569c8121f0ffd82ab33b76d74e219ab710edeec217c93c58c22a1df918d1491f50b4e82e46256"}}}, 0x102a) 397.529462ms ago: executing program 0 (id=7029): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x28000181}, 0x0) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r3, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x118, 0xa, 0x5, 0x201, 0x70bd2c, 0x25dfdbff, {0x6, 0x0, 0x8}, [@generic="73937ebbc7efeea1b16ba5edb9c5", @nested={0x84, 0x143, 0x0, 0x1, [@nested={0x4, 0x2d}, @nested={0x4, 0x149}, @typed={0x72, 0x80, 0x0, 0x0, @binary="c67484be0d4128db8342d9d9dedb496dbdb7b1a5dcdfc6636730a046cb693f5d06597f88df3c099d4e85617974044aa6bdd867e5ea27a8defefcd37d2252e0a36240b521117cf9372a98c1b20cc3f84ea5144fe25a3b1a56e23a12dd0b5513f31c53a5132296e4c1df0771eb49b6"}, @nested={0x4, 0x27}]}, @nested={0x6e, 0xb4, 0x0, 0x1, [@nested={0x4, 0x2f}, @typed={0x14, 0xb2, 0x0, 0x0, @ipv6=@private2}, @generic="250d81b816e24d5271fbe828e04c43206d8efdb4df03fb21296a2ba6add7218c3772edab835343d51e39371c63635894d73d7e961d58bf69d7dc06a25c8194658751f16260de7d4da19947c36a68", @nested={0x4, 0x36}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x40001}, 0x8004) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), r4) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x20000081) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r4) sendmsg$BATADV_CMD_TP_METER_CANCEL(r4, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x44, r5, 0x4, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xd}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7fff}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x1) ioctl$XFS_IOC_START_COMMIT(r4, 0x80585882, &(0x7f0000000640)={0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r6, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x40) sendmsg$NL80211_CMD_DEAUTHENTICATE(r4, &(0x7f0000000ac0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a80)={&(0x7f00000008c0)={0x120, r7, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xfffffff7, 0x23}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SSID={0x10, 0x34, @random="eacce65076fb5d5aecd284ca"}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_IE={0xce, 0x2a, [@ibss={0x6, 0x2, 0xf}, @chsw_timing={0x68, 0x4, {0x2, 0xda}}, @random={0x6b, 0x73, "08d578788edc31b31768a07a1cd6cf575bece38154123d687f5e30c337173455349b4fafa000e9dbe040e910d4efb1c49006db6fff6f663f6312eeee1b093cc23f7d42ef32e7e0c46b2df96aae212de54d1a7df8255831071876300049859bfd5e4490cdab8070ccbc0f5b7b41e78df09036e2"}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x7, 0xb, 0x4}}, @measure_req={0x26, 0x43, {0x3, 0x0, 0x4, "f076dd4559673f067275b31e77990240ae9eed7af2eb88bde62f388cf65cd86724891f30bea056ea62ab35d1c868715925636f2d308901c518eff321004377d0"}}]}, @NL80211_ATTR_REASON_CODE={0x6}]}, 0x120}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000b00)={'ip6tnl0\x00', @random="ffb8c32f8d8b"}) recvmsg$can_raw(r6, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000b40)=""/60, 0x3c}], 0x1, &(0x7f0000000bc0)=""/25, 0x19}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000c40)={'wlan1\x00'}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000d00)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000d40)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000d80)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000dc0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000e00)=0x0) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000f00)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x44, r9, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}]}, 0x44}, 0x1, 0x0, 0x0, 0x4080}, 0x200008c0) r15 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000f40)=[@in={0x2, 0x4e24, @multicast1}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1b}}], 0x20) ioctl$sock_SIOCETHTOOL(r15, 0x8946, &(0x7f0000001080)={'lo\x00', &(0x7f0000000f80)=@ethtool_rxnfc={0x2a, 0x10, 0x101, {0x10, @tcp_ip6_spec={@private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e21, 0x4e22}, {0x0, @empty, 0x6513, 0x2, [0xfff, 0x7]}, @tcp_ip4_spec={@private=0xa010100, @multicast2, 0x4e21, 0x4e20, 0x2}, {0x0, @local, 0x8, 0x4, [0x0, 0x8]}, 0x4800000000000, 0x8}, 0x2, [0x4e, 0x8c]}}) 383.847733ms ago: executing program 3 (id=7030): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8000000110001"], 0xe8}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0xfffffffc}) ioctl(r1, 0x8b22, &(0x7f0000000080)="ac4af9e8421fd6db9fc46e23fc86836f1c502878cdd6d509e756bcbaeae735fc7969324db1a83aec3c4b51320ba036f07c75dd8f3b1e44a5d76a01a43fa32de9162ddcb235a2f580ebcdd3eeba31db68f38483f0c410c1d61aab7f5482520136e002aa6a06f3167b606d8700000000b19a819f8b18d9045f8957c7964f9ba4e553b4df7e279b70ea78") r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000180), &(0x7f0000000280)=0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x3, 0x40, 0xc, 0xb}, {0x2, 0x2, 0x3, 0x800}]}, 0x10) 363.161307ms ago: executing program 2 (id=7031): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}}], {0x14, 0x11, 0x1, 0x0, 0x4000000}}, 0x50}, 0x1, 0x0, 0x0, 0x24048014}, 0x20048804) 361.580735ms ago: executing program 1 (id=7032): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x9}]}], {0x14}}, 0x64}, 0x1, 0x0, 0xf00, 0x40800}, 0x20000000) 203.488339ms ago: executing program 2 (id=7033): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0xc0c4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup(r2, 0x0, 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) 201.636543ms ago: executing program 0 (id=7034): socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r0, 0x29, 0x4c, &(0x7f0000000040), 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0xa}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit={0x95, 0x0, 0x1008}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) 198.42855ms ago: executing program 1 (id=7035): syz_emit_ethernet(0x6e, &(0x7f0000000140)={@broadcast, @random="17043a73dbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0xa010101, @rand_addr, {[@lsrr={0x83, 0x3}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@private=0xa010102, 0x10000}, {@local}, {@remote}, {@private, 0x6000000}, {@private}]}]}}}}}}}, 0x0) 117.158664ms ago: executing program 2 (id=7036): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={0x1, @null, @bpq0, 0x7000000, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1071, 0x6, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @null]}) 109.981488ms ago: executing program 4 (id=7037): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000002a80)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x8, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r1, 0x0, 0xf, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000140)={0x0, 0x7f, 0xf8, 0x327, 0x800, 0x7f, 0x7a96, 0x0, {0x0, @in={{0x2, 0x4e24, @loopback}}, 0x1ff, 0x3ff, 0xfffffffe, 0x6, 0x2}}, &(0x7f0000000200)=0xb0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000240)={r2}, 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x0, 0x0, @mcast2, 0x7}], 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000380)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "000005", 0x14, 0x6, 0x0, @private0, @mcast1={0xff, 0x10}, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000440)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3d, 0x28, 0x0, 0x4000, 0x8, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 8.291246ms ago: executing program 0 (id=7038): ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000280)={0x0, @hci={0x1f, 0x3, 0x4}, @hci={0x1f, 0x4, 0x3}, @can, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0xa, 0x5}) r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r0, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='<\x00\x00*', @ANYRESHEX=r0, @ANYRES8=r3, @ANYRES32=r4, @ANYRESHEX=r4], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) accept4(r5, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r6) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r8, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x7}, {0x6}]}, 0x10) sendmsg$TIPC_NL_PEER_REMOVE(r6, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000180)={0x30, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x200}]}]}, 0x30}}, 0x4048804) 0s ago: executing program 4 (id=7039): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, 0x0, 0x0) socket(0x10, 0x803, 0x0) kernel console output (not intermixed with test programs): _files+0x2a/0x420 [ 803.032627][T24485] ksys_read+0x150/0x270 [ 803.032657][T24485] ? __pfx_ksys_read+0x10/0x10 [ 803.032695][T24485] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.032719][T24485] do_syscall_64+0x15f/0xf80 [ 803.032742][T24485] ? trace_irq_disable+0x3b/0x140 [ 803.032765][T24485] ? clear_bhb_loop+0x40/0x90 [ 803.032790][T24485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.032810][T24485] RIP: 0033:0x7fa441d5d04e [ 803.032832][T24485] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 803.032851][T24485] RSP: 002b:00007fa442d30fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 803.032875][T24485] RAX: ffffffffffffffda RBX: 00007fa442d316c0 RCX: 00007fa441d5d04e [ 803.032889][T24485] RDX: 000000000000000f RSI: 00007fa442d310a0 RDI: 0000000000000004 [ 803.032901][T24485] RBP: 00007fa442d31090 R08: 0000000000000000 R09: 0000000000000000 [ 803.032914][T24485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 803.032926][T24485] R13: 00007fa442016038 R14: 00007fa442015fa0 R15: 00007ffe6f79a0b8 [ 803.032961][T24485] [ 803.307239][T24501] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5918'. [ 803.463254][T24501] gtp3: entered promiscuous mode [ 803.478514][T24501] gtp3: entered allmulticast mode [ 803.542296][T24515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5920'. [ 803.685062][T24507] syzkaller0: entered promiscuous mode [ 803.708494][T24507] syzkaller0: entered allmulticast mode [ 807.873243][T24547] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 807.974130][T24556] netlink: 'syz.1.5935': attribute type 12 has an invalid length. [ 808.118714][T24564] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5935'. [ 808.131130][T24560] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5937'. [ 808.132767][T24563] vlan2: entered promiscuous mode [ 808.155603][T24563] bridge0: entered promiscuous mode [ 808.179051][T24560] syzkaller1: entered promiscuous mode [ 808.186938][T24560] syzkaller1: entered allmulticast mode [ 808.679568][T24591] syzkaller0: entered promiscuous mode [ 808.697799][T24591] syzkaller0: entered allmulticast mode [ 808.962834][T24607] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5955'. [ 809.181655][ T1298] lec:lec_start_xmit: lec0:No lecd attached [ 809.193275][ T1298] clip:clip_start_xmit: skb_dst(skb) == NULL [ 809.200168][T24620] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5960'. [ 809.273294][T24620] hsr0: entered promiscuous mode [ 809.291344][T24620] macvlan2: entered allmulticast mode [ 809.340374][T24617] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5956'. [ 809.345390][T24626] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 809.358990][T24626] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5961'. [ 809.543044][T24635] FAULT_INJECTION: forcing a failure. [ 809.543044][T24635] name failslab, interval 1, probability 0, space 0, times 0 [ 809.575423][T24635] CPU: 0 UID: 0 PID: 24635 Comm: syz.0.5966 Not tainted syzkaller #0 PREEMPT(full) [ 809.575455][T24635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 809.575468][T24635] Call Trace: [ 809.575477][T24635] [ 809.575487][T24635] dump_stack_lvl+0xe8/0x150 [ 809.575523][T24635] should_fail_ex+0x412/0x560 [ 809.575566][T24635] should_failslab+0xa8/0x100 [ 809.575603][T24635] __kmalloc_noprof+0xe8/0x760 [ 809.575634][T24635] ? tomoyo_encode+0x28b/0x550 [ 809.575671][T24635] tomoyo_encode+0x28b/0x550 [ 809.575707][T24635] tomoyo_realpath_from_path+0x58d/0x5d0 [ 809.575737][T24635] ? tomoyo_domain+0xd7/0x130 [ 809.575772][T24635] ? tomoyo_path_number_perm+0x219/0x630 [ 809.575798][T24635] tomoyo_path_number_perm+0x246/0x630 [ 809.575824][T24635] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 809.575847][T24635] ? __lock_acquire+0x6b5/0x2cf0 [ 809.575888][T24635] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 809.575937][T24635] ? __fget_files+0x2a/0x420 [ 809.575967][T24635] ? __fget_files+0x2a/0x420 [ 809.575991][T24635] ? __fget_files+0x3a0/0x420 [ 809.576014][T24635] ? __fget_files+0x2a/0x420 [ 809.576044][T24635] security_file_ioctl+0xc3/0x2a0 [ 809.576070][T24635] __se_sys_ioctl+0x47/0x170 [ 809.576090][T24635] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 809.576113][T24635] do_syscall_64+0x15f/0xf80 [ 809.576137][T24635] ? trace_irq_disable+0x3b/0x140 [ 809.576158][T24635] ? clear_bhb_loop+0x40/0x90 [ 809.576183][T24635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 809.576226][T24635] RIP: 0033:0x7f51b139c819 [ 809.576247][T24635] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 809.576266][T24635] RSP: 002b:00007f51b21d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 809.576290][T24635] RAX: ffffffffffffffda RBX: 00007f51b1615fa0 RCX: 00007f51b139c819 [ 809.576306][T24635] RDX: 0000200000000040 RSI: 0000000000008b2c RDI: 0000000000000004 [ 809.576321][T24635] RBP: 00007f51b21d6090 R08: 0000000000000000 R09: 0000000000000000 [ 809.576333][T24635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 809.576345][T24635] R13: 00007f51b1616038 R14: 00007f51b1615fa0 R15: 00007ffdfceac4e8 [ 809.576379][T24635] [ 809.869016][T24635] ERROR: Out of memory at tomoyo_realpath_from_path. [ 809.943526][T24633] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5964'. [ 810.219073][T24649] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 810.292222][T24653] bond8: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 810.305288][T24653] bond8 (unregistering): Released all slaves [ 810.337405][T24662] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5972'. [ 810.542964][T24673] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 810.712336][T24681] netlink: 'syz.1.5983': attribute type 4 has an invalid length. [ 810.750626][T24681] openvswitch: netlink: Flow key attribute not present in set flow. [ 810.818980][T24691] netlink: 212360 bytes leftover after parsing attributes in process `syz.3.5986'. [ 810.892061][T24691] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5986'. [ 810.980831][T24699] syzkaller0: entered promiscuous mode [ 811.187195][T24707] netlink: 'syz.1.5991': attribute type 16 has an invalid length. [ 811.197049][T24707] netlink: 'syz.1.5991': attribute type 17 has an invalid length. [ 811.288300][T24707] bridge0: port 4(syz_tun) entered blocking state [ 811.295025][T24707] bridge0: port 4(syz_tun) entered listening state [ 811.310813][T24707] bridge0: port 3(team0) entered blocking state [ 811.317354][T24707] bridge0: port 3(team0) entered listening state [ 811.380046][T24707] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 811.479198][T24719] syzkaller0: entered promiscuous mode [ 811.497184][T24719] syzkaller0: entered allmulticast mode [ 811.583668][T24710] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 811.598144][T24710] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 811.607548][T24710] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 812.182047][T24737] bond18 (unregistering): Released all slaves [ 812.529662][T24742] netlink: 'syz.2.6002': attribute type 1 has an invalid length. [ 812.552907][T24745] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 812.561301][T24745] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 812.618879][T24746] syzkaller0: entered promiscuous mode [ 812.635036][T24746] syzkaller0: entered allmulticast mode [ 813.373486][T24781] IPv6: NLM_F_CREATE should be specified when creating new route [ 813.635753][T24794] netlink: 'syz.0.6013': attribute type 2 has an invalid length. [ 814.376412][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5180 ms [ 814.384668][ C0] lec:lec_tx_timeout: lec0 [ 817.319948][T24789] : entered promiscuous mode [ 817.345675][T24797] vlan0: entered promiscuous mode [ 817.353873][T24797] bridge0: entered promiscuous mode [ 817.382193][T24794] 9: entered promiscuous mode [ 817.488504][T24808] wg1: entered promiscuous mode [ 817.498759][T24808] wg1: entered allmulticast mode [ 817.662013][T24821] __nla_validate_parse: 1 callbacks suppressed [ 817.662036][T24821] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6019'. [ 817.672860][T24817] macsec2: entered promiscuous mode [ 817.683624][T24817] batadv0: entered promiscuous mode [ 817.690836][T24817] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 817.702122][T24817] batadv0: left promiscuous mode [ 818.002190][T24844] FAULT_INJECTION: forcing a failure. [ 818.002190][T24844] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 818.048483][ T6322] lec:lec_start_xmit: lec0:No lecd attached [ 818.074575][T24844] CPU: 1 UID: 0 PID: 24844 Comm: syz.0.6025 Not tainted syzkaller #0 PREEMPT(full) [ 818.074606][T24844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 818.074620][T24844] Call Trace: [ 818.074629][T24844] [ 818.074639][T24844] dump_stack_lvl+0xe8/0x150 [ 818.074675][T24844] should_fail_ex+0x412/0x560 [ 818.074712][T24844] prepare_alloc_pages+0x22a/0x650 [ 818.074743][T24844] __alloc_frozen_pages_noprof+0x12f/0x380 [ 818.074773][T24844] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 818.074800][T24844] ? __pfx_policy_nodemask+0x10/0x10 [ 818.074824][T24844] ? __lock_acquire+0x6b5/0x2cf0 [ 818.074867][T24844] alloc_pages_mpol+0x232/0x4a0 [ 818.074897][T24844] vma_alloc_folio_noprof+0xea/0x210 [ 818.074924][T24844] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 818.074949][T24844] ? __pte_offset_map+0x29/0x240 [ 818.074978][T24844] ? __pte_offset_map+0x29/0x240 [ 818.075011][T24844] do_pte_missing+0x1656/0x3490 [ 818.075075][T24844] handle_mm_fault+0x1bec/0x3310 [ 818.075119][T24844] ? handle_mm_fault+0xee/0x3310 [ 818.075155][T24844] ? __pfx_handle_mm_fault+0x10/0x10 [ 818.075183][T24844] ? follow_page_pte+0x841/0x1450 [ 818.075221][T24844] ? __pfx_follow_page_pte+0x10/0x10 [ 818.075263][T24844] __get_user_pages+0x165b/0x29d0 [ 818.075333][T24844] __gup_longterm_locked+0xdcf/0x1630 [ 818.075372][T24844] ? gup_fast_fallback+0x1b1/0x22e0 [ 818.075400][T24844] ? sanity_check_pinned_pages+0x1219/0x12d0 [ 818.075447][T24844] gup_fast_fallback+0x1d82/0x22e0 [ 818.075507][T24844] ? rcu_is_watching+0x15/0xb0 [ 818.075539][T24844] ? __pfx_gup_fast_fallback+0x10/0x10 [ 818.075575][T24844] ? is_valid_gup_args+0x11f/0x200 [ 818.075604][T24844] ? pin_user_pages_fast+0x4d/0xb0 [ 818.075633][T24844] rds_info_getsockopt+0x20e/0x4a0 [ 818.075665][T24844] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 818.075691][T24844] ? __might_fault+0xaf/0x130 [ 818.075724][T24844] ? rds_getsockopt+0x31d/0x500 [ 818.075753][T24844] ? __pfx_rds_getsockopt+0x10/0x10 [ 818.075782][T24844] do_sock_getsockopt+0x51d/0x7e0 [ 818.075822][T24844] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 818.075871][T24844] ? __fget_files+0x3a0/0x420 [ 818.075898][T24844] ? __fget_files+0x2a/0x420 [ 818.075930][T24844] __x64_sys_getsockopt+0x1a4/0x240 [ 818.075965][T24844] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.075987][T24844] do_syscall_64+0x15f/0xf80 [ 818.076010][T24844] ? trace_irq_disable+0x3b/0x140 [ 818.076032][T24844] ? clear_bhb_loop+0x40/0x90 [ 818.076056][T24844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.076083][T24844] RIP: 0033:0x7f51b139c819 [ 818.076103][T24844] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 818.076122][T24844] RSP: 002b:00007f51b21d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 818.076146][T24844] RAX: ffffffffffffffda RBX: 00007f51b1615fa0 RCX: 00007f51b139c819 [ 818.076162][T24844] RDX: 0000000000002713 RSI: 0000200000000114 RDI: 0000000000000003 [ 818.076175][T24844] RBP: 00007f51b21d6090 R08: 0000200000000000 R09: 0000000000000000 [ 818.076189][T24844] R10: 0000200000c35fff R11: 0000000000000246 R12: 0000000000000002 [ 818.076202][T24844] R13: 00007f51b1616038 R14: 00007f51b1615fa0 R15: 00007ffdfceac4e8 [ 818.076236][T24844] [ 818.643312][T24856] syzkaller0: entered promiscuous mode [ 818.649075][T24856] syzkaller0: entered allmulticast mode [ 818.769685][T24862] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6032'. [ 819.091515][T24873] syzkaller0: entered promiscuous mode [ 819.110803][T24873] syzkaller0: entered allmulticast mode [ 819.302697][T24886] FAULT_INJECTION: forcing a failure. [ 819.302697][T24886] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 819.317464][T24886] CPU: 1 UID: 0 PID: 24886 Comm: syz.0.6041 Not tainted syzkaller #0 PREEMPT(full) [ 819.317494][T24886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 819.317507][T24886] Call Trace: [ 819.317515][T24886] [ 819.317524][T24886] dump_stack_lvl+0xe8/0x150 [ 819.317561][T24886] should_fail_ex+0x412/0x560 [ 819.317596][T24886] prepare_alloc_pages+0x22a/0x650 [ 819.317628][T24886] __alloc_frozen_pages_noprof+0x12f/0x380 [ 819.317655][T24886] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 819.317683][T24886] ? __pfx_policy_nodemask+0x10/0x10 [ 819.317706][T24886] ? __lock_acquire+0x6b5/0x2cf0 [ 819.317742][T24886] alloc_pages_mpol+0x232/0x4a0 [ 819.317771][T24886] vma_alloc_folio_noprof+0xea/0x210 [ 819.317798][T24886] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 819.317822][T24886] ? __pte_offset_map+0x29/0x240 [ 819.317849][T24886] ? __pte_offset_map+0x29/0x240 [ 819.317882][T24886] do_pte_missing+0x1656/0x3490 [ 819.317935][T24886] handle_mm_fault+0x1bec/0x3310 [ 819.317976][T24886] ? handle_mm_fault+0xee/0x3310 [ 819.318011][T24886] ? __pfx_handle_mm_fault+0x10/0x10 [ 819.318039][T24886] ? follow_page_pte+0x841/0x1450 [ 819.318077][T24886] ? __pfx_follow_page_pte+0x10/0x10 [ 819.318115][T24886] __get_user_pages+0x165b/0x29d0 [ 819.318173][T24886] __gup_longterm_locked+0xdcf/0x1630 [ 819.318211][T24886] ? gup_fast_fallback+0x1b1/0x22e0 [ 819.318237][T24886] ? sanity_check_pinned_pages+0x1219/0x12d0 [ 819.318270][T24886] gup_fast_fallback+0x1d82/0x22e0 [ 819.318327][T24886] ? rcu_is_watching+0x15/0xb0 [ 819.318355][T24886] ? __pfx_gup_fast_fallback+0x10/0x10 [ 819.318386][T24886] ? is_valid_gup_args+0x11f/0x200 [ 819.318409][T24886] ? pin_user_pages_fast+0x4d/0xb0 [ 819.318432][T24886] rds_info_getsockopt+0x20e/0x4a0 [ 819.318457][T24886] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 819.318477][T24886] ? __might_fault+0xaf/0x130 [ 819.318503][T24886] ? rds_getsockopt+0x31d/0x500 [ 819.318526][T24886] ? __pfx_rds_getsockopt+0x10/0x10 [ 819.318549][T24886] do_sock_getsockopt+0x51d/0x7e0 [ 819.318581][T24886] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 819.318620][T24886] ? __fget_files+0x3a0/0x420 [ 819.318640][T24886] ? __fget_files+0x2a/0x420 [ 819.318667][T24886] __x64_sys_getsockopt+0x1a4/0x240 [ 819.318700][T24886] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.318718][T24886] do_syscall_64+0x15f/0xf80 [ 819.318744][T24886] ? trace_irq_disable+0x3b/0x140 [ 819.318762][T24886] ? clear_bhb_loop+0x40/0x90 [ 819.318783][T24886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.318801][T24886] RIP: 0033:0x7f51b139c819 [ 819.318818][T24886] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 819.318833][T24886] RSP: 002b:00007f51b21d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 819.318853][T24886] RAX: ffffffffffffffda RBX: 00007f51b1615fa0 RCX: 00007f51b139c819 [ 819.318866][T24886] RDX: 0000000000002713 RSI: 0000200000000114 RDI: 0000000000000003 [ 819.318876][T24886] RBP: 00007f51b21d6090 R08: 0000200000000000 R09: 0000000000000000 [ 819.318887][T24886] R10: 0000200000c35fff R11: 0000000000000246 R12: 0000000000000002 [ 819.318897][T24886] R13: 00007f51b1616038 R14: 00007f51b1615fa0 R15: 00007ffdfceac4e8 [ 819.318925][T24886] [ 819.336020][T24881] syzkaller0: entered promiscuous mode [ 819.577956][T24895] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6044'. [ 819.606130][T24881] syzkaller0: entered allmulticast mode [ 820.035006][T24920] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6052'. [ 820.046529][T24918] nbd: must specify an index to disconnect [ 820.129333][T24926] FAULT_INJECTION: forcing a failure. [ 820.129333][T24926] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 820.175981][T24926] CPU: 0 UID: 0 PID: 24926 Comm: syz.1.6055 Not tainted syzkaller #0 PREEMPT(full) [ 820.176013][T24926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 820.176026][T24926] Call Trace: [ 820.176034][T24926] [ 820.176044][T24926] dump_stack_lvl+0xe8/0x150 [ 820.176080][T24926] should_fail_ex+0x412/0x560 [ 820.176115][T24926] prepare_alloc_pages+0x22a/0x650 [ 820.176146][T24926] __alloc_frozen_pages_noprof+0x12f/0x380 [ 820.176174][T24926] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 820.176202][T24926] ? __pfx_policy_nodemask+0x10/0x10 [ 820.176225][T24926] ? __lock_acquire+0x6b5/0x2cf0 [ 820.176259][T24926] alloc_pages_mpol+0x232/0x4a0 [ 820.176288][T24926] vma_alloc_folio_noprof+0xea/0x210 [ 820.176313][T24926] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 820.176342][T24926] ? __pte_offset_map+0x29/0x240 [ 820.176377][T24926] ? __pte_offset_map+0x29/0x240 [ 820.176407][T24926] do_pte_missing+0x1656/0x3490 [ 820.176460][T24926] handle_mm_fault+0x1bec/0x3310 [ 820.176502][T24926] ? handle_mm_fault+0xee/0x3310 [ 820.176536][T24926] ? __pfx_handle_mm_fault+0x10/0x10 [ 820.176564][T24926] ? follow_page_pte+0x841/0x1450 [ 820.176603][T24926] ? __pfx_follow_page_pte+0x10/0x10 [ 820.176644][T24926] __get_user_pages+0x165b/0x29d0 [ 820.176702][T24926] __gup_longterm_locked+0xdcf/0x1630 [ 820.176741][T24926] ? gup_fast_fallback+0x1b1/0x22e0 [ 820.176768][T24926] ? sanity_check_pinned_pages+0x1219/0x12d0 [ 820.176804][T24926] gup_fast_fallback+0x1d82/0x22e0 [ 820.176879][T24926] ? rcu_is_watching+0x15/0xb0 [ 820.176911][T24926] ? __pfx_gup_fast_fallback+0x10/0x10 [ 820.176940][T24926] ? is_valid_gup_args+0x11f/0x200 [ 820.176969][T24926] ? pin_user_pages_fast+0x4d/0xb0 [ 820.176998][T24926] rds_info_getsockopt+0x20e/0x4a0 [ 820.177030][T24926] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 820.177056][T24926] ? __might_fault+0xaf/0x130 [ 820.177089][T24926] ? rds_getsockopt+0x31d/0x500 [ 820.177118][T24926] ? __pfx_rds_getsockopt+0x10/0x10 [ 820.177148][T24926] do_sock_getsockopt+0x51d/0x7e0 [ 820.177186][T24926] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 820.177236][T24926] ? __fget_files+0x3a0/0x420 [ 820.177262][T24926] ? __fget_files+0x2a/0x420 [ 820.177297][T24926] __x64_sys_getsockopt+0x1a4/0x240 [ 820.177335][T24926] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 820.177359][T24926] do_syscall_64+0x15f/0xf80 [ 820.177391][T24926] ? trace_irq_disable+0x3b/0x140 [ 820.177415][T24926] ? clear_bhb_loop+0x40/0x90 [ 820.177441][T24926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 820.177462][T24926] RIP: 0033:0x7fb3d5f9c819 [ 820.177483][T24926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 820.177503][T24926] RSP: 002b:00007fb3d6da1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 820.177527][T24926] RAX: ffffffffffffffda RBX: 00007fb3d6215fa0 RCX: 00007fb3d5f9c819 [ 820.177542][T24926] RDX: 0000000000002713 RSI: 0000200000000114 RDI: 0000000000000003 [ 820.177557][T24926] RBP: 00007fb3d6da1090 R08: 0000200000000000 R09: 0000000000000000 [ 820.177571][T24926] R10: 0000200000c35fff R11: 0000000000000246 R12: 0000000000000002 [ 820.177584][T24926] R13: 00007fb3d6216038 R14: 00007fb3d6215fa0 R15: 00007ffe52cc6e58 [ 820.177621][T24926] [ 820.516927][T24931] syzkaller0: entered promiscuous mode [ 820.522610][T24931] syzkaller0: entered allmulticast mode [ 820.544237][T24934] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6058'. [ 820.697248][T24942] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6061'. [ 820.738097][T24944] 8021q: VLANs not supported on wlan0 [ 821.074251][T24955] netlink: 160 bytes leftover after parsing attributes in process `syz.0.6065'. [ 821.187972][T24962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6069'. [ 821.416869][T24969] syzkaller0: entered promiscuous mode [ 821.426666][T24969] syzkaller0: entered allmulticast mode [ 821.495694][T24974] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6073'. [ 821.521383][T24977] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6074'. [ 821.669908][T24973] bridge12: port 1(bond11) entered blocking state [ 821.707428][T24973] bridge12: port 1(bond11) entered disabled state [ 821.715923][T24973] bond11: entered allmulticast mode [ 821.747981][T24973] bond11: entered promiscuous mode [ 822.022362][ T30] audit: type=1800 audit(1776542695.435:2): pid=24996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6082" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=6509 res=0 errno=0 [ 822.265488][T25003] macsec0: entered promiscuous mode [ 822.739590][T25034] __nla_validate_parse: 2 callbacks suppressed [ 822.739615][T25034] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6093'. [ 822.857928][T25034] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.6093'. [ 822.892109][T25024] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6093'. [ 823.406402][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5360 ms [ 823.414529][ C0] lec:lec_tx_timeout: lec0 [ 823.503126][T25064] bridge13: entered promiscuous mode [ 823.518997][T25064] bridge13: entered allmulticast mode [ 823.545893][T25064] team0: Port device bridge13 added [ 823.574556][T25075] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6105'. [ 823.611897][T25070] bridge0: port 1(team0) entered blocking state [ 823.632892][T25070] bridge0: port 1(team0) entered disabled state [ 823.640744][T25064] IPVS: fo: FWM 3 0x00000003 - no destination available [ 823.648429][T25070] team0: entered allmulticast mode [ 823.658053][T25070] team_slave_0: entered allmulticast mode [ 823.665581][T25070] team_slave_1: entered allmulticast mode [ 823.682097][T25070] team0: entered promiscuous mode [ 823.695796][T25070] team_slave_0: entered promiscuous mode [ 823.719730][T25070] team_slave_1: entered promiscuous mode [ 823.943120][T25083] netdevsim netdevsim0: Direct firmware load for r1 failed with error -2 [ 823.952129][T25083] netdevsim netdevsim0: Falling back to sysfs fallback for: r1 [ 823.968959][T25087] syzkaller0: entered promiscuous mode [ 823.974684][T25087] syzkaller0: entered allmulticast mode [ 824.085965][T25089] syzkaller0: entered promiscuous mode [ 824.230468][T25094] sysfs: cannot create duplicate filename '/class/ieee80211/Ku crK:̥B| lS-!' [ 824.257383][T25094] CPU: 0 UID: 0 PID: 25094 Comm: syz.4.6117 Not tainted syzkaller #0 PREEMPT(full) [ 824.257415][T25094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 824.257429][T25094] Call Trace: [ 824.257438][T25094] [ 824.257448][T25094] dump_stack_lvl+0xe8/0x150 [ 824.257488][T25094] sysfs_warn_dup+0x8e/0xa0 [ 824.257516][T25094] sysfs_do_create_link_sd+0xc0/0x110 [ 824.257546][T25094] device_add_class_symlinks+0x1cf/0x240 [ 824.257580][T25094] device_add+0x475/0xb70 [ 824.257613][T25094] wiphy_register+0x1dc5/0x2dc0 [ 824.257661][T25094] ? __pfx_wiphy_register+0x10/0x10 [ 824.257687][T25094] ? __pfx_netdev_run_todo+0x10/0x10 [ 824.257722][T25094] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 824.257760][T25094] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 824.257792][T25094] ieee80211_register_hw+0x3d82/0x4a70 [ 824.257839][T25094] ? ieee80211_register_hw+0x19a1/0x4a70 [ 824.257895][T25094] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 824.257926][T25094] ? __asan_memset+0x22/0x50 [ 824.257955][T25094] ? __hrtimer_setup+0x1b7/0x260 [ 824.257986][T25094] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 824.258023][T25094] mac80211_hwsim_new_radio+0x3334/0x5ba0 [ 824.258090][T25094] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 824.258117][T25094] ? kstrndup+0xbf/0x160 [ 824.258159][T25094] hwsim_new_radio_nl+0xf6a/0x1c00 [ 824.258218][T25094] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 824.258256][T25094] ? rcu_is_watching+0x15/0xb0 [ 824.258285][T25094] ? trace_kmalloc+0x2a/0xf0 [ 824.258328][T25094] ? __nla_parse+0x40/0x60 [ 824.258356][T25094] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 824.258380][T25094] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 824.258415][T25094] genl_family_rcv_msg_doit+0x22a/0x330 [ 824.258447][T25094] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 824.258488][T25094] ? bpf_lsm_capable+0x9/0x20 [ 824.258510][T25094] ? security_capable+0x7e/0x2c0 [ 824.258533][T25094] genl_rcv_msg+0x61c/0x7a0 [ 824.258551][T25094] ? __pfx_genl_rcv_msg+0x10/0x10 [ 824.258565][T25094] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 824.258583][T25094] ? __pfx_ref_tracker_free+0x10/0x10 [ 824.258609][T25094] netlink_rcv_skb+0x232/0x4b0 [ 824.258627][T25094] ? __pfx_genl_rcv_msg+0x10/0x10 [ 824.258643][T25094] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 824.258671][T25094] ? down_read+0x270/0x2e0 [ 824.258687][T25094] ? genl_rcv+0xd/0x40 [ 824.258701][T25094] genl_rcv+0x28/0x40 [ 824.258713][T25094] netlink_unicast+0x75c/0x8e0 [ 824.258737][T25094] netlink_sendmsg+0x813/0xb40 [ 824.258762][T25094] ? __pfx_netlink_sendmsg+0x10/0x10 [ 824.258782][T25094] ? aa_sock_msg_perm+0xf1/0x1b0 [ 824.258801][T25094] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 824.258821][T25094] ____sys_sendmsg+0x972/0x9f0 [ 824.258840][T25094] ? __might_fault+0xaf/0x130 [ 824.258862][T25094] ? __pfx_____sys_sendmsg+0x10/0x10 [ 824.258887][T25094] ? import_iovec+0x73/0xa0 [ 824.258904][T25094] ___sys_sendmsg+0x2a5/0x360 [ 824.258922][T25094] ? __lock_acquire+0x6b5/0x2cf0 [ 824.258941][T25094] ? __pfx____sys_sendmsg+0x10/0x10 [ 824.258965][T25094] ? futex_wake+0x4ac/0x580 [ 824.258997][T25094] ? __fget_files+0x2a/0x420 [ 824.259013][T25094] ? __fget_files+0x3a0/0x420 [ 824.259036][T25094] __x64_sys_sendmsg+0x1bd/0x2a0 [ 824.259057][T25094] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 824.259085][T25094] ? rcu_is_watching+0x15/0xb0 [ 824.259109][T25094] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 824.259123][T25094] do_syscall_64+0x15f/0xf80 [ 824.259138][T25094] ? trace_irq_disable+0x3b/0x140 [ 824.259152][T25094] ? clear_bhb_loop+0x40/0x90 [ 824.259167][T25094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 824.259180][T25094] RIP: 0033:0x7fb3fc99c819 [ 824.259198][T25094] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 824.259215][T25094] RSP: 002b:00007fb3fabf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 824.259239][T25094] RAX: ffffffffffffffda RBX: 00007fb3fcc15fa0 RCX: 00007fb3fc99c819 [ 824.259249][T25094] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 824.259258][T25094] RBP: 00007fb3fca32c91 R08: 0000000000000000 R09: 0000000000000000 [ 824.259267][T25094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 824.259275][T25094] R13: 00007fb3fcc16038 R14: 00007fb3fcc15fa0 R15: 00007ffeff4403a8 [ 824.259298][T25094] [ 825.172162][T25116] netlink: 'syz.3.6124': attribute type 22 has an invalid length. [ 825.194602][T25116] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6124'. [ 825.298111][T25124] netlink: 'syz.4.6125': attribute type 11 has an invalid length. [ 825.309607][T25116] netlink: 'syz.3.6124': attribute type 22 has an invalid length. [ 825.340112][T25116] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6124'. [ 825.359880][T25124] netlink: 'syz.4.6125': attribute type 3 has an invalid length. [ 825.625238][T25131] syzkaller0: entered promiscuous mode [ 825.647335][T25131] syzkaller0: entered allmulticast mode [ 825.730919][T25135] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 825.771356][T25139] sysfs: cannot create duplicate filename '/class/ieee80211/Ku crK:̥B| lS-!' [ 825.787596][T25139] CPU: 1 UID: 0 PID: 25139 Comm: syz.2.6130 Not tainted syzkaller #0 PREEMPT(full) [ 825.787628][T25139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 825.787641][T25139] Call Trace: [ 825.787650][T25139] [ 825.787660][T25139] dump_stack_lvl+0xe8/0x150 [ 825.787700][T25139] sysfs_warn_dup+0x8e/0xa0 [ 825.787730][T25139] sysfs_do_create_link_sd+0xc0/0x110 [ 825.787764][T25139] device_add_class_symlinks+0x1cf/0x240 [ 825.787797][T25139] device_add+0x475/0xb70 [ 825.787829][T25139] wiphy_register+0x1dc5/0x2dc0 [ 825.787875][T25139] ? __pfx_wiphy_register+0x10/0x10 [ 825.787902][T25139] ? __pfx_netdev_run_todo+0x10/0x10 [ 825.787925][T25139] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 825.787963][T25139] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 825.787996][T25139] ieee80211_register_hw+0x3d82/0x4a70 [ 825.788039][T25139] ? ieee80211_register_hw+0x19a1/0x4a70 [ 825.788097][T25139] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 825.788127][T25139] ? __asan_memset+0x22/0x50 [ 825.788155][T25139] ? __hrtimer_setup+0x1b7/0x260 [ 825.788185][T25139] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 825.788221][T25139] mac80211_hwsim_new_radio+0x3334/0x5ba0 [ 825.788295][T25139] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 825.788322][T25139] ? kstrndup+0xbf/0x160 [ 825.788365][T25139] hwsim_new_radio_nl+0xf6a/0x1c00 [ 825.788422][T25139] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 825.788462][T25139] ? rcu_is_watching+0x15/0xb0 [ 825.788493][T25139] ? trace_kmalloc+0x2a/0xf0 [ 825.788531][T25139] ? __nla_parse+0x40/0x60 [ 825.788558][T25139] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 825.788583][T25139] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 825.788615][T25139] genl_family_rcv_msg_doit+0x22a/0x330 [ 825.788650][T25139] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 825.788693][T25139] ? bpf_lsm_capable+0x9/0x20 [ 825.788715][T25139] ? security_capable+0x7e/0x2c0 [ 825.788752][T25139] genl_rcv_msg+0x61c/0x7a0 [ 825.788783][T25139] ? __pfx_genl_rcv_msg+0x10/0x10 [ 825.788806][T25139] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 825.788855][T25139] netlink_rcv_skb+0x232/0x4b0 [ 825.788885][T25139] ? __pfx_genl_rcv_msg+0x10/0x10 [ 825.788911][T25139] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 825.788959][T25139] ? down_read+0x270/0x2e0 [ 825.788985][T25139] ? genl_rcv+0xd/0x40 [ 825.789011][T25139] genl_rcv+0x28/0x40 [ 825.789031][T25139] netlink_unicast+0x75c/0x8e0 [ 825.789073][T25139] netlink_sendmsg+0x813/0xb40 [ 825.789113][T25139] ? __pfx_netlink_sendmsg+0x10/0x10 [ 825.789148][T25139] ? aa_sock_msg_perm+0xf1/0x1b0 [ 825.789177][T25139] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 825.789211][T25139] ____sys_sendmsg+0x972/0x9f0 [ 825.789243][T25139] ? __might_fault+0xaf/0x130 [ 825.789292][T25139] ? __pfx_____sys_sendmsg+0x10/0x10 [ 825.789333][T25139] ? import_iovec+0x73/0xa0 [ 825.789359][T25139] ___sys_sendmsg+0x2a5/0x360 [ 825.789389][T25139] ? __lock_acquire+0x6b5/0x2cf0 [ 825.789421][T25139] ? __pfx____sys_sendmsg+0x10/0x10 [ 825.789460][T25139] ? futex_wait+0x2a2/0x390 [ 825.789512][T25139] ? __fget_files+0x2a/0x420 [ 825.789541][T25139] ? __fget_files+0x3a0/0x420 [ 825.789583][T25139] __x64_sys_sendmsg+0x1bd/0x2a0 [ 825.789621][T25139] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 825.789664][T25139] ? rcu_is_watching+0x15/0xb0 [ 825.789709][T25139] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.789735][T25139] do_syscall_64+0x15f/0xf80 [ 825.789760][T25139] ? trace_irq_disable+0x3b/0x140 [ 825.789785][T25139] ? clear_bhb_loop+0x40/0x90 [ 825.789815][T25139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.789837][T25139] RIP: 0033:0x7fa441d9c819 [ 825.789858][T25139] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 825.789878][T25139] RSP: 002b:00007fa442d31028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 825.789902][T25139] RAX: ffffffffffffffda RBX: 00007fa442015fa0 RCX: 00007fa441d9c819 [ 825.789919][T25139] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 825.789933][T25139] RBP: 00007fa441e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 825.789947][T25139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 825.789961][T25139] R13: 00007fa442016038 R14: 00007fa442015fa0 R15: 00007ffe6f79a0b8 [ 825.789997][T25139] [ 826.373180][T25153] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6134'. [ 826.408832][T25151] geneve2: entered promiscuous mode [ 826.414743][T25151] geneve2: entered allmulticast mode [ 826.424664][T25156] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6137'. [ 826.441065][T25153] netlink: 'syz.2.6134': attribute type 4 has an invalid length. [ 826.449098][ T176] netdevsim netdevsim4 : set [1, 0] type 2 family 0 port 6081 - 0 [ 826.468678][ T176] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.493138][T25158] netlink: 'syz.2.6134': attribute type 4 has an invalid length. [ 826.521714][ T176] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.539305][T25160] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6138'. [ 826.551496][ T176] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 826.600318][T25160] netlink: 27 bytes leftover after parsing attributes in process `syz.4.6138'. [ 826.678469][T25158] lo: left allmulticast mode [ 826.698255][T25158] netlink: 'syz.2.6134': attribute type 4 has an invalid length. [ 826.953984][T25182] sysfs: cannot create duplicate filename '/class/ieee80211/Ku crK:̥B| lS-!' [ 826.970643][T25182] CPU: 1 UID: 0 PID: 25182 Comm: syz.4.6144 Not tainted syzkaller #0 PREEMPT(full) [ 826.970675][T25182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 826.970688][T25182] Call Trace: [ 826.970698][T25182] [ 826.970709][T25182] dump_stack_lvl+0xe8/0x150 [ 826.970747][T25182] sysfs_warn_dup+0x8e/0xa0 [ 826.970778][T25182] sysfs_do_create_link_sd+0xc0/0x110 [ 826.970809][T25182] device_add_class_symlinks+0x1cf/0x240 [ 826.970841][T25182] device_add+0x475/0xb70 [ 826.970872][T25182] wiphy_register+0x1dc5/0x2dc0 [ 826.970919][T25182] ? __pfx_wiphy_register+0x10/0x10 [ 826.970945][T25182] ? __pfx_netdev_run_todo+0x10/0x10 [ 826.970966][T25182] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 826.971003][T25182] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 826.971035][T25182] ieee80211_register_hw+0x3d82/0x4a70 [ 826.971081][T25182] ? ieee80211_register_hw+0x19a1/0x4a70 [ 826.971137][T25182] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 826.971169][T25182] ? __asan_memset+0x22/0x50 [ 826.971198][T25182] ? __hrtimer_setup+0x1b7/0x260 [ 826.971238][T25182] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 826.971277][T25182] mac80211_hwsim_new_radio+0x3334/0x5ba0 [ 826.971341][T25182] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 826.971371][T25182] ? kstrndup+0xbf/0x160 [ 826.971408][T25182] hwsim_new_radio_nl+0xf6a/0x1c00 [ 826.971467][T25182] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 826.971509][T25182] ? rcu_is_watching+0x15/0xb0 [ 826.971540][T25182] ? trace_kmalloc+0x2a/0xf0 [ 826.971577][T25182] ? __nla_parse+0x40/0x60 [ 826.971604][T25182] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 826.971627][T25182] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 826.971659][T25182] genl_family_rcv_msg_doit+0x22a/0x330 [ 826.971693][T25182] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 826.971732][T25182] ? bpf_lsm_capable+0x9/0x20 [ 826.971756][T25182] ? security_capable+0x7e/0x2c0 [ 826.971790][T25182] genl_rcv_msg+0x61c/0x7a0 [ 826.971823][T25182] ? __pfx_genl_rcv_msg+0x10/0x10 [ 826.971845][T25182] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 826.971875][T25182] ? __pfx_ref_tracker_free+0x10/0x10 [ 826.971920][T25182] netlink_rcv_skb+0x232/0x4b0 [ 826.971976][T25182] ? __pfx_genl_rcv_msg+0x10/0x10 [ 826.972001][T25182] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 826.972051][T25182] ? down_read+0x270/0x2e0 [ 826.972077][T25182] ? genl_rcv+0xd/0x40 [ 826.972100][T25182] genl_rcv+0x28/0x40 [ 826.972120][T25182] netlink_unicast+0x75c/0x8e0 [ 826.972160][T25182] netlink_sendmsg+0x813/0xb40 [ 826.972200][T25182] ? __pfx_netlink_sendmsg+0x10/0x10 [ 826.972246][T25182] ? aa_sock_msg_perm+0xf1/0x1b0 [ 826.972280][T25182] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 826.972314][T25182] ____sys_sendmsg+0x972/0x9f0 [ 826.972345][T25182] ? __might_fault+0xaf/0x130 [ 826.972380][T25182] ? __pfx_____sys_sendmsg+0x10/0x10 [ 826.972422][T25182] ? import_iovec+0x73/0xa0 [ 826.972450][T25182] ___sys_sendmsg+0x2a5/0x360 [ 826.972480][T25182] ? __lock_acquire+0x6b5/0x2cf0 [ 826.972514][T25182] ? __pfx____sys_sendmsg+0x10/0x10 [ 826.972554][T25182] ? futex_wait+0x2a2/0x390 [ 826.972609][T25182] ? __fget_files+0x2a/0x420 [ 826.972635][T25182] ? __fget_files+0x3a0/0x420 [ 826.972673][T25182] __x64_sys_sendmsg+0x1bd/0x2a0 [ 826.972709][T25182] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 826.972752][T25182] ? rcu_is_watching+0x15/0xb0 [ 826.972794][T25182] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.972817][T25182] do_syscall_64+0x15f/0xf80 [ 826.972842][T25182] ? trace_irq_disable+0x3b/0x140 [ 826.972863][T25182] ? clear_bhb_loop+0x40/0x90 [ 826.972890][T25182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.972912][T25182] RIP: 0033:0x7fb3fc99c819 [ 826.972936][T25182] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 826.972957][T25182] RSP: 002b:00007fb3fabf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 826.972981][T25182] RAX: ffffffffffffffda RBX: 00007fb3fcc15fa0 RCX: 00007fb3fc99c819 [ 826.972998][T25182] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 826.973014][T25182] RBP: 00007fb3fca32c91 R08: 0000000000000000 R09: 0000000000000000 [ 826.973028][T25182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 826.973042][T25182] R13: 00007fb3fcc16038 R14: 00007fb3fcc15fa0 R15: 00007ffeff4403a8 [ 826.973081][T25182] [ 828.030090][T25214] x_tables: duplicate underflow at hook 2 [ 828.093922][T25222] xt_hashlimit: size too large, truncated to 1048576 [ 828.139981][T25223] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6160'. [ 828.180527][T25223] syzkaller0: entered promiscuous mode [ 828.186760][T25223] syzkaller0: entered allmulticast mode [ 828.354129][T25230] netlink: 2 bytes leftover after parsing attributes in process `syz.2.6164'. [ 828.392776][T25238] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6166'. [ 828.597704][T25246] bridge_slave_1: Caught tx_queue_len zero misconfig [ 828.687517][T25255] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 828.931075][T25271] netlink: 'syz.0.6175': attribute type 1 has an invalid length. [ 828.952423][T25271] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6175'. [ 829.158898][T25284] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6180'. [ 829.169545][T25284] openvswitch: netlink: Flow actions attr not present in new flow. [ 829.213631][T25284] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6180'. [ 841.796587][ C0] bridge0: port 4(syz_tun) entered learning state [ 841.803500][ C1] bridge0: port 3(team0) entered learning state [ 847.875933][T25299] IPVS: set_ctl: invalid protocol: 0 100.1.1.4:20000 [ 847.892381][T25300] openvswitch: netlink: Key type 30 is not supported [ 847.904689][T25308] netlink: 704 bytes leftover after parsing attributes in process `syz.2.6186'. [ 848.127497][T25322] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6189'. [ 848.247569][T25330] ip6t_srh: unknown srh invflags 4000 [ 848.662382][T25352] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6200'. [ 848.863150][T25363] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6204'. [ 848.940929][T25366] syzkaller1: entered promiscuous mode [ 848.960517][T25366] syzkaller1: entered allmulticast mode [ 848.979032][T25356] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 848.987815][T25369] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6206'. [ 849.097081][T25374] netlink: 33 bytes leftover after parsing attributes in process `syz.3.6207'. [ 849.125827][T25374] netlink: 140 bytes leftover after parsing attributes in process `syz.3.6207'. [ 849.146244][T25374] netlink: 33 bytes leftover after parsing attributes in process `syz.3.6207'. [ 849.200318][T25371] netlink: 'syz.3.6207': attribute type 75 has an invalid length. [ 849.401684][T25389] xt_TPROXY: Can be used only with -p tcp or -p udp [ 849.459688][T25385] xt_TCPMSS: Only works on TCP SYN packets [ 849.633971][T25397] veth1_macvtap: renamed from vlan1 [ 850.130909][T25424] netlink: 'syz.2.6224': attribute type 2 has an invalid length. [ 850.163334][T25424] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6224'. [ 850.204857][T25433] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6228'. [ 850.604790][T25455] team0 (unregistering): Port device team_slave_0 removed [ 850.651414][T25455] team0 (unregistering): Port device team_slave_1 removed [ 850.681413][T25460] netlink: 'syz.0.6231': attribute type 10 has an invalid length. [ 850.976201][T25475] sysfs: cannot create duplicate filename '/class/ieee80211/Ku crK:̥B| lS-!' [ 850.994256][T25475] CPU: 0 UID: 0 PID: 25475 Comm: syz.4.6236 Not tainted syzkaller #0 PREEMPT(full) [ 850.994289][T25475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 850.994303][T25475] Call Trace: [ 850.994313][T25475] [ 850.994323][T25475] dump_stack_lvl+0xe8/0x150 [ 850.994363][T25475] sysfs_warn_dup+0x8e/0xa0 [ 850.994393][T25475] sysfs_do_create_link_sd+0xc0/0x110 [ 850.994428][T25475] device_add_class_symlinks+0x1cf/0x240 [ 850.994459][T25475] device_add+0x475/0xb70 [ 850.994491][T25475] wiphy_register+0x1dc5/0x2dc0 [ 850.994540][T25475] ? __pfx_wiphy_register+0x10/0x10 [ 850.994566][T25475] ? __pfx_netdev_run_todo+0x10/0x10 [ 850.994590][T25475] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 850.994631][T25475] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 850.994664][T25475] ieee80211_register_hw+0x3d82/0x4a70 [ 850.994711][T25475] ? ieee80211_register_hw+0x19a1/0x4a70 [ 850.994770][T25475] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 850.994803][T25475] ? __asan_memset+0x22/0x50 [ 850.994834][T25475] ? __hrtimer_setup+0x1b7/0x260 [ 850.994866][T25475] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 850.994911][T25475] mac80211_hwsim_new_radio+0x3334/0x5ba0 [ 850.994991][T25475] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 850.995020][T25475] ? kstrndup+0xbf/0x160 [ 850.995054][T25475] hwsim_new_radio_nl+0xf6a/0x1c00 [ 850.995112][T25475] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 850.995155][T25475] ? rcu_is_watching+0x15/0xb0 [ 850.995184][T25475] ? trace_kmalloc+0x2a/0xf0 [ 850.995225][T25475] ? __nla_parse+0x40/0x60 [ 850.995252][T25475] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 850.995276][T25475] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 850.995310][T25475] genl_family_rcv_msg_doit+0x22a/0x330 [ 850.995342][T25475] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 850.995384][T25475] ? bpf_lsm_capable+0x9/0x20 [ 850.995409][T25475] ? security_capable+0x7e/0x2c0 [ 850.995447][T25475] genl_rcv_msg+0x61c/0x7a0 [ 850.995480][T25475] ? __pfx_genl_rcv_msg+0x10/0x10 [ 850.995504][T25475] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 850.995537][T25475] ? __pfx_ref_tracker_free+0x10/0x10 [ 850.995584][T25475] netlink_rcv_skb+0x232/0x4b0 [ 850.995617][T25475] ? __pfx_genl_rcv_msg+0x10/0x10 [ 850.995643][T25475] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 850.995694][T25475] ? down_read+0x270/0x2e0 [ 850.995721][T25475] ? genl_rcv+0xd/0x40 [ 850.995746][T25475] genl_rcv+0x28/0x40 [ 850.995769][T25475] netlink_unicast+0x75c/0x8e0 [ 850.995814][T25475] netlink_sendmsg+0x813/0xb40 [ 850.995859][T25475] ? __pfx_netlink_sendmsg+0x10/0x10 [ 850.995896][T25475] ? aa_sock_msg_perm+0xf1/0x1b0 [ 850.995928][T25475] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 850.995974][T25475] ____sys_sendmsg+0x972/0x9f0 [ 850.996006][T25475] ? __might_fault+0xaf/0x130 [ 850.996045][T25475] ? __pfx_____sys_sendmsg+0x10/0x10 [ 850.996091][T25475] ? import_iovec+0x73/0xa0 [ 850.996122][T25475] ___sys_sendmsg+0x2a5/0x360 [ 850.996151][T25475] ? __lock_acquire+0x6b5/0x2cf0 [ 850.996185][T25475] ? __pfx____sys_sendmsg+0x10/0x10 [ 850.996226][T25475] ? futex_wait+0x2a2/0x390 [ 850.996284][T25475] ? __fget_files+0x2a/0x420 [ 850.996311][T25475] ? __fget_files+0x3a0/0x420 [ 850.996348][T25475] __x64_sys_sendmsg+0x1bd/0x2a0 [ 850.996383][T25475] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 850.996425][T25475] ? rcu_is_watching+0x15/0xb0 [ 850.996468][T25475] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 850.996492][T25475] do_syscall_64+0x15f/0xf80 [ 850.996516][T25475] ? trace_irq_disable+0x3b/0x140 [ 850.996541][T25475] ? clear_bhb_loop+0x40/0x90 [ 850.996569][T25475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 850.996591][T25475] RIP: 0033:0x7fb3fc99c819 [ 850.996613][T25475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 850.996632][T25475] RSP: 002b:00007fb3fabf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 850.996657][T25475] RAX: ffffffffffffffda RBX: 00007fb3fcc15fa0 RCX: 00007fb3fc99c819 [ 850.996673][T25475] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 850.996688][T25475] RBP: 00007fb3fca32c91 R08: 0000000000000000 R09: 0000000000000000 [ 850.996701][T25475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 850.996714][T25475] R13: 00007fb3fcc16038 R14: 00007fb3fcc15fa0 R15: 00007ffeff4403a8 [ 850.996753][T25475] [ 851.484049][T25486] syzkaller0: entered promiscuous mode [ 851.524943][T25486] syzkaller0: entered allmulticast mode [ 852.013169][T25512] syzkaller0: entered promiscuous mode [ 852.147791][T25516] veth17: entered allmulticast mode [ 852.349001][T25530] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 852.735104][T25549] syzkaller0: entered promiscuous mode [ 853.120659][T25565] __nla_validate_parse: 14 callbacks suppressed [ 853.120684][T25565] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6270'. [ 853.354125][T25575] xt_limit: Overflow, try lower: 604147548/4200216962 [ 853.379968][T25575] netlink: 'syz.0.6274': attribute type 3 has an invalid length. [ 853.399770][T25575] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6274'. [ 853.789116][T25600] siw: device registration error -23 [ 853.906944][T25604] netlink: 'syz.3.6286': attribute type 1 has an invalid length. [ 853.952879][T25604] 8021q: adding VLAN 0 to HW filter on device bond13 [ 854.070144][T25604] bond13: (slave ip6gretap2): making interface the new active one [ 854.093405][T25604] bond13: (slave ip6gretap2): Enslaving as an active interface with an up link [ 854.647732][T25644] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6300'. [ 854.699099][T25648] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6302'. [ 854.733549][T25648] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6302'. [ 854.761025][T25648] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6302'. [ 854.779586][T25655] Bluetooth: MGMT ver 1.23 [ 854.802338][T25658] netlink: 'syz.0.6302': attribute type 1 has an invalid length. [ 855.032802][T25654] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 855.050126][T25654] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 855.267967][T25654] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 855.281616][T25654] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 855.391758][T25654] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 855.405574][T25654] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 855.560243][T25654] netdevsim netdevsim4  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 855.611297][T25654] netdevsim netdevsim4  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 856.084582][T22418] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 856.112645][T22418] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.278552][T22418] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 856.304086][T22418] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.407850][T22418] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 856.417019][T22418] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.610366][ T176] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 856.636580][ T176] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.682463][T25744] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 856.682463][T25744] Please contact the netfilter-devel mailing list or update your nftables rules. [ 857.230569][T25766] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6335'. [ 857.290265][T25766] netlink: 140 bytes leftover after parsing attributes in process `syz.1.6335'. [ 857.355066][T25774] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6339'. [ 857.381406][T25771] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 857.733390][T25804] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6349'. [ 858.442853][T25842] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 858.542557][T25842] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6359'. [ 858.918130][T25869] vlan4: entered promiscuous mode [ 858.925525][T25869] bridge0: entered promiscuous mode [ 859.069949][T25878] syzkaller1: entered promiscuous mode [ 859.075593][T25878] syzkaller1: entered allmulticast mode [ 859.221079][T25881] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6371'. [ 859.267226][T25883] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6372'. [ 859.493241][T25895] netlink: 244 bytes leftover after parsing attributes in process `syz.1.6377'. [ 859.772041][T25908] syzkaller1: entered promiscuous mode [ 859.778498][T25908] syzkaller1: entered allmulticast mode [ 859.955553][T25918] xt_hashlimit: size too large, truncated to 1048576 [ 860.362430][T25933] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 860.376837][T25933] netlink: 'syz.4.6387': attribute type 13 has an invalid length. [ 860.397861][T25933] gretap0: refused to change device tx_queue_len [ 860.415601][T25933] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 860.694094][T25951] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6389'. [ 860.884763][T25950] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 860.912120][T25950] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 861.194127][T25964] syzkaller1: entered promiscuous mode [ 861.202292][T25964] syzkaller1: entered allmulticast mode [ 861.612346][T25978] sysfs: cannot create duplicate filename '/class/ieee80211/Ku crK:̥B| lS-!' [ 861.642018][T25978] CPU: 0 UID: 0 PID: 25978 Comm: syz.4.6399 Not tainted syzkaller #0 PREEMPT(full) [ 861.642057][T25978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 861.642072][T25978] Call Trace: [ 861.642082][T25978] [ 861.642091][T25978] dump_stack_lvl+0xe8/0x150 [ 861.642131][T25978] sysfs_warn_dup+0x8e/0xa0 [ 861.642162][T25978] sysfs_do_create_link_sd+0xc0/0x110 [ 861.642196][T25978] device_add_class_symlinks+0x1cf/0x240 [ 861.642228][T25978] device_add+0x475/0xb70 [ 861.642261][T25978] wiphy_register+0x1dc5/0x2dc0 [ 861.642312][T25978] ? __pfx_wiphy_register+0x10/0x10 [ 861.642338][T25978] ? __pfx_netdev_run_todo+0x10/0x10 [ 861.642363][T25978] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 861.642403][T25978] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 861.642435][T25978] ieee80211_register_hw+0x3d82/0x4a70 [ 861.642481][T25978] ? ieee80211_register_hw+0x19a1/0x4a70 [ 861.642538][T25978] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 861.642570][T25978] ? __asan_memset+0x22/0x50 [ 861.642612][T25978] ? __hrtimer_setup+0x1b7/0x260 [ 861.642643][T25978] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 861.642682][T25978] mac80211_hwsim_new_radio+0x3334/0x5ba0 [ 861.642753][T25978] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 861.642782][T25978] ? kstrndup+0xbf/0x160 [ 861.642817][T25978] hwsim_new_radio_nl+0xf6a/0x1c00 [ 861.642877][T25978] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 861.642919][T25978] ? rcu_is_watching+0x15/0xb0 [ 861.642951][T25978] ? trace_kmalloc+0x2a/0xf0 [ 861.642992][T25978] ? __nla_parse+0x40/0x60 [ 861.643020][T25978] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 861.643046][T25978] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 861.643081][T25978] genl_family_rcv_msg_doit+0x22a/0x330 [ 861.643115][T25978] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 861.643158][T25978] ? bpf_lsm_capable+0x9/0x20 [ 861.643182][T25978] ? security_capable+0x7e/0x2c0 [ 861.643217][T25978] genl_rcv_msg+0x61c/0x7a0 [ 861.643250][T25978] ? __pfx_genl_rcv_msg+0x10/0x10 [ 861.643274][T25978] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 861.643306][T25978] ? __pfx_ref_tracker_free+0x10/0x10 [ 861.643353][T25978] netlink_rcv_skb+0x232/0x4b0 [ 861.643386][T25978] ? __pfx_genl_rcv_msg+0x10/0x10 [ 861.643414][T25978] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 861.643468][T25978] ? down_read+0x270/0x2e0 [ 861.643497][T25978] ? genl_rcv+0xd/0x40 [ 861.643523][T25978] genl_rcv+0x28/0x40 [ 861.643544][T25978] netlink_unicast+0x75c/0x8e0 [ 861.643598][T25978] netlink_sendmsg+0x813/0xb40 [ 861.643644][T25978] ? __pfx_netlink_sendmsg+0x10/0x10 [ 861.643681][T25978] ? aa_sock_msg_perm+0xf1/0x1b0 [ 861.643714][T25978] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 861.643753][T25978] ____sys_sendmsg+0x972/0x9f0 [ 861.643788][T25978] ? __might_fault+0xaf/0x130 [ 861.643826][T25978] ? __pfx_____sys_sendmsg+0x10/0x10 [ 861.643871][T25978] ? import_iovec+0x73/0xa0 [ 861.643898][T25978] ___sys_sendmsg+0x2a5/0x360 [ 861.643929][T25978] ? __lock_acquire+0x6b5/0x2cf0 [ 861.643964][T25978] ? __pfx____sys_sendmsg+0x10/0x10 [ 861.644007][T25978] ? futex_wait+0x2a2/0x390 [ 861.644066][T25978] ? __fget_files+0x2a/0x420 [ 861.644090][T25978] ? __fget_files+0x3a0/0x420 [ 861.644133][T25978] __x64_sys_sendmsg+0x1bd/0x2a0 [ 861.644170][T25978] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 861.644216][T25978] ? rcu_is_watching+0x15/0xb0 [ 861.644260][T25978] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 861.644285][T25978] do_syscall_64+0x15f/0xf80 [ 861.644310][T25978] ? trace_irq_disable+0x3b/0x140 [ 861.644334][T25978] ? clear_bhb_loop+0x40/0x90 [ 861.644363][T25978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 861.644384][T25978] RIP: 0033:0x7fb3fc99c819 [ 861.644408][T25978] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 861.644428][T25978] RSP: 002b:00007fb3fabf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 861.644454][T25978] RAX: ffffffffffffffda RBX: 00007fb3fcc15fa0 RCX: 00007fb3fc99c819 [ 861.644470][T25978] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 861.644485][T25978] RBP: 00007fb3fca32c91 R08: 0000000000000000 R09: 0000000000000000 [ 861.644499][T25978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 861.644513][T25978] R13: 00007fb3fcc16038 R14: 00007fb3fcc15fa0 R15: 00007ffeff4403a8 [ 861.644554][T25978] [ 862.153179][T25981] netlink: 'syz.1.6401': attribute type 15 has an invalid length. [ 862.188653][T25984] xt_NFQUEUE: number of total queues is 0 [ 862.437377][T26006] netlink: 33 bytes leftover after parsing attributes in process `syz.2.6402'. [ 862.460880][T26006] netlink: 140 bytes leftover after parsing attributes in process `syz.2.6402'. [ 862.532379][T26009] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6407'. [ 862.544151][T26009] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 862.650661][T26012] syzkaller1: entered promiscuous mode [ 862.662061][T26012] syzkaller1: entered allmulticast mode [ 863.301152][T26046] syzkaller1: entered promiscuous mode [ 863.312681][T26046] syzkaller1: entered allmulticast mode [ 863.372932][T26044] netlink: 33 bytes leftover after parsing attributes in process `syz.0.6421'. [ 863.389047][T26044] netlink: 140 bytes leftover after parsing attributes in process `syz.0.6421'. [ 863.601760][T26059] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6425'. [ 863.647958][T26064] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6429'. [ 863.658949][T26059] netlink: 332 bytes leftover after parsing attributes in process `syz.0.6425'. [ 863.673617][T26065] sysfs: cannot create duplicate filename '/class/ieee80211/Ku crK:̥B| lS-!' [ 863.687785][T26065] CPU: 1 UID: 0 PID: 26065 Comm: syz.4.6428 Not tainted syzkaller #0 PREEMPT(full) [ 863.687815][T26065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 863.687829][T26065] Call Trace: [ 863.687839][T26065] [ 863.687849][T26065] dump_stack_lvl+0xe8/0x150 [ 863.687891][T26065] sysfs_warn_dup+0x8e/0xa0 [ 863.687921][T26065] sysfs_do_create_link_sd+0xc0/0x110 [ 863.687954][T26065] device_add_class_symlinks+0x1cf/0x240 [ 863.687988][T26065] device_add+0x475/0xb70 [ 863.688019][T26065] wiphy_register+0x1dc5/0x2dc0 [ 863.688068][T26065] ? __pfx_wiphy_register+0x10/0x10 [ 863.688095][T26065] ? __pfx_netdev_run_todo+0x10/0x10 [ 863.688119][T26065] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 863.688160][T26065] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 863.688199][T26065] ieee80211_register_hw+0x3d82/0x4a70 [ 863.688257][T26065] ? ieee80211_register_hw+0x19a1/0x4a70 [ 863.688318][T26065] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 863.688352][T26065] ? __asan_memset+0x22/0x50 [ 863.688383][T26065] ? __hrtimer_setup+0x1b7/0x260 [ 863.688416][T26065] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 863.688456][T26065] mac80211_hwsim_new_radio+0x3334/0x5ba0 [ 863.688525][T26065] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 863.688563][T26065] ? kstrndup+0xbf/0x160 [ 863.688600][T26065] hwsim_new_radio_nl+0xf6a/0x1c00 [ 863.688661][T26065] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 863.688705][T26065] ? rcu_is_watching+0x15/0xb0 [ 863.688737][T26065] ? trace_kmalloc+0x2a/0xf0 [ 863.688777][T26065] ? __nla_parse+0x40/0x60 [ 863.688806][T26065] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 863.688832][T26065] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 863.688867][T26065] genl_family_rcv_msg_doit+0x22a/0x330 [ 863.688900][T26065] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 863.688942][T26065] ? bpf_lsm_capable+0x9/0x20 [ 863.688966][T26065] ? security_capable+0x7e/0x2c0 [ 863.689003][T26065] genl_rcv_msg+0x61c/0x7a0 [ 863.689038][T26065] ? __pfx_genl_rcv_msg+0x10/0x10 [ 863.689062][T26065] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 863.689092][T26065] ? __pfx_ref_tracker_free+0x10/0x10 [ 863.689136][T26065] netlink_rcv_skb+0x232/0x4b0 [ 863.689169][T26065] ? __pfx_genl_rcv_msg+0x10/0x10 [ 863.689196][T26065] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 863.689250][T26065] ? down_read+0x270/0x2e0 [ 863.689279][T26065] ? genl_rcv+0xd/0x40 [ 863.689305][T26065] genl_rcv+0x28/0x40 [ 863.689327][T26065] netlink_unicast+0x75c/0x8e0 [ 863.689371][T26065] netlink_sendmsg+0x813/0xb40 [ 863.689416][T26065] ? __pfx_netlink_sendmsg+0x10/0x10 [ 863.689453][T26065] ? aa_sock_msg_perm+0xf1/0x1b0 [ 863.689487][T26065] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 863.689524][T26065] ____sys_sendmsg+0x972/0x9f0 [ 863.689565][T26065] ? __might_fault+0xaf/0x130 [ 863.689604][T26065] ? __pfx_____sys_sendmsg+0x10/0x10 [ 863.689651][T26065] ? import_iovec+0x73/0xa0 [ 863.689680][T26065] ___sys_sendmsg+0x2a5/0x360 [ 863.689713][T26065] ? __lock_acquire+0x6b5/0x2cf0 [ 863.689748][T26065] ? __pfx____sys_sendmsg+0x10/0x10 [ 863.689792][T26065] ? futex_wait+0x2a2/0x390 [ 863.689850][T26065] ? __fget_files+0x2a/0x420 [ 863.689876][T26065] ? __fget_files+0x3a0/0x420 [ 863.689918][T26065] __x64_sys_sendmsg+0x1bd/0x2a0 [ 863.689955][T26065] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 863.690000][T26065] ? rcu_is_watching+0x15/0xb0 [ 863.690045][T26065] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 863.690070][T26065] do_syscall_64+0x15f/0xf80 [ 863.690096][T26065] ? trace_irq_disable+0x3b/0x140 [ 863.690121][T26065] ? clear_bhb_loop+0x40/0x90 [ 863.690148][T26065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 863.690170][T26065] RIP: 0033:0x7fb3fc99c819 [ 863.690193][T26065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 863.690213][T26065] RSP: 002b:00007fb3fabf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 863.690237][T26065] RAX: ffffffffffffffda RBX: 00007fb3fcc15fa0 RCX: 00007fb3fc99c819 [ 863.690254][T26065] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 863.690269][T26065] RBP: 00007fb3fca32c91 R08: 0000000000000000 R09: 0000000000000000 [ 863.690283][T26065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 863.690296][T26065] R13: 00007fb3fcc16038 R14: 00007fb3fcc15fa0 R15: 00007ffeff4403a8 [ 863.690336][T26065] [ 864.281406][T26066] netlink: 'syz.3.6429': attribute type 1 has an invalid length. [ 864.302409][T26073] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6432'. [ 864.582015][T26086] netlink: 33 bytes leftover after parsing attributes in process `syz.1.6435'. [ 864.651401][T26086] netlink: 140 bytes leftover after parsing attributes in process `syz.1.6435'. [ 864.667961][T26086] netlink: 33 bytes leftover after parsing attributes in process `syz.1.6435'. [ 865.092248][T26112] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6443'. [ 865.365230][T26127] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6449'. [ 865.435089][T26127] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6449'. [ 865.496253][T26138] netlink: 'syz.4.6450': attribute type 75 has an invalid length. [ 865.805118][T26160] netlink: 'syz.3.6455': attribute type 14 has an invalid length. [ 865.834436][T26160] netlink: 'syz.3.6455': attribute type 13 has an invalid length. [ 866.267048][T26179] bridge9: entered promiscuous mode [ 866.272715][T26179] bridge9: entered allmulticast mode [ 866.308838][T26184] sysfs: cannot create duplicate filename '/class/ieee80211/Ku crK:̥B| lS-!' [ 866.345041][T26184] CPU: 1 UID: 0 PID: 26184 Comm: syz.1.6469 Not tainted syzkaller #0 PREEMPT(full) [ 866.345074][T26184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 866.345088][T26184] Call Trace: [ 866.345097][T26184] [ 866.345109][T26184] dump_stack_lvl+0xe8/0x150 [ 866.345154][T26184] sysfs_warn_dup+0x8e/0xa0 [ 866.345185][T26184] sysfs_do_create_link_sd+0xc0/0x110 [ 866.345219][T26184] device_add_class_symlinks+0x1cf/0x240 [ 866.345252][T26184] device_add+0x475/0xb70 [ 866.345286][T26184] wiphy_register+0x1dc5/0x2dc0 [ 866.345335][T26184] ? __pfx_wiphy_register+0x10/0x10 [ 866.345362][T26184] ? __pfx_netdev_run_todo+0x10/0x10 [ 866.345386][T26184] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 866.345427][T26184] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 866.345458][T26184] ieee80211_register_hw+0x3d82/0x4a70 [ 866.345507][T26184] ? ieee80211_register_hw+0x19a1/0x4a70 [ 866.345582][T26184] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 866.345616][T26184] ? __asan_memset+0x22/0x50 [ 866.345646][T26184] ? __hrtimer_setup+0x1b7/0x260 [ 866.345678][T26184] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 866.345714][T26184] mac80211_hwsim_new_radio+0x3334/0x5ba0 [ 866.345781][T26184] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 866.345809][T26184] ? kstrndup+0xbf/0x160 [ 866.345845][T26184] hwsim_new_radio_nl+0xf6a/0x1c00 [ 866.345903][T26184] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 866.345944][T26184] ? rcu_is_watching+0x15/0xb0 [ 866.345974][T26184] ? trace_kmalloc+0x2a/0xf0 [ 866.346011][T26184] ? __nla_parse+0x40/0x60 [ 866.346039][T26184] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 866.346065][T26184] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 866.346098][T26184] genl_family_rcv_msg_doit+0x22a/0x330 [ 866.346130][T26184] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 866.346172][T26184] ? bpf_lsm_capable+0x9/0x20 [ 866.346196][T26184] ? security_capable+0x7e/0x2c0 [ 866.346232][T26184] genl_rcv_msg+0x61c/0x7a0 [ 866.346264][T26184] ? __pfx_genl_rcv_msg+0x10/0x10 [ 866.346286][T26184] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 866.346314][T26184] ? __pfx_ref_tracker_free+0x10/0x10 [ 866.346357][T26184] netlink_rcv_skb+0x232/0x4b0 [ 866.346388][T26184] ? __pfx_genl_rcv_msg+0x10/0x10 [ 866.346415][T26184] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 866.346467][T26184] ? down_read+0x270/0x2e0 [ 866.346496][T26184] ? genl_rcv+0xd/0x40 [ 866.346520][T26184] genl_rcv+0x28/0x40 [ 866.346552][T26184] netlink_unicast+0x75c/0x8e0 [ 866.346596][T26184] netlink_sendmsg+0x813/0xb40 [ 866.346639][T26184] ? __pfx_netlink_sendmsg+0x10/0x10 [ 866.346672][T26184] ? aa_sock_msg_perm+0xf1/0x1b0 [ 866.346702][T26184] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 866.346736][T26184] ____sys_sendmsg+0x972/0x9f0 [ 866.346768][T26184] ? __might_fault+0xaf/0x130 [ 866.346802][T26184] ? __pfx_____sys_sendmsg+0x10/0x10 [ 866.346847][T26184] ? import_iovec+0x73/0xa0 [ 866.346873][T26184] ___sys_sendmsg+0x2a5/0x360 [ 866.346903][T26184] ? __lock_acquire+0x6b5/0x2cf0 [ 866.346937][T26184] ? __pfx____sys_sendmsg+0x10/0x10 [ 866.346979][T26184] ? futex_wait+0x2a2/0x390 [ 866.347031][T26184] ? __fget_files+0x2a/0x420 [ 866.347056][T26184] ? __fget_files+0x3a0/0x420 [ 866.347095][T26184] __x64_sys_sendmsg+0x1bd/0x2a0 [ 866.347132][T26184] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 866.347176][T26184] ? rcu_is_watching+0x15/0xb0 [ 866.347220][T26184] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.347243][T26184] do_syscall_64+0x15f/0xf80 [ 866.347267][T26184] ? trace_irq_disable+0x3b/0x140 [ 866.347290][T26184] ? clear_bhb_loop+0x40/0x90 [ 866.347318][T26184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.347340][T26184] RIP: 0033:0x7fb3d5f9c819 [ 866.347363][T26184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 866.347381][T26184] RSP: 002b:00007fb3d6da1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 866.347405][T26184] RAX: ffffffffffffffda RBX: 00007fb3d6215fa0 RCX: 00007fb3d5f9c819 [ 866.347422][T26184] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 866.347435][T26184] RBP: 00007fb3d6032c91 R08: 0000000000000000 R09: 0000000000000000 [ 866.347448][T26184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 866.347461][T26184] R13: 00007fb3d6216038 R14: 00007fb3d6215fa0 R15: 00007ffe52cc6e58 [ 866.347499][T26184] [ 867.093204][T26197] x_tables: duplicate underflow at hook 3 [ 867.339107][T26207] vcan2: entered promiscuous mode [ 867.344436][T26207] vcan2: entered allmulticast mode [ 867.747693][T26234] bridge19: entered promiscuous mode [ 867.760082][T26234] bridge19: entered allmulticast mode [ 867.788117][T26234] IPVS: sh: FWM 3 0x00000003 - no destination available [ 867.838910][T26237] tc_dump_action: action bad kind [ 867.959790][T26239] sysfs: cannot create duplicate filename '/class/ieee80211/Ku crK:̥B| lS-!' [ 868.010457][T26239] CPU: 0 UID: 0 PID: 26239 Comm: syz.1.6488 Not tainted syzkaller #0 PREEMPT(full) [ 868.010489][T26239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 868.010503][T26239] Call Trace: [ 868.010524][T26239] [ 868.010533][T26239] dump_stack_lvl+0xe8/0x150 [ 868.010573][T26239] sysfs_warn_dup+0x8e/0xa0 [ 868.010603][T26239] sysfs_do_create_link_sd+0xc0/0x110 [ 868.010636][T26239] device_add_class_symlinks+0x1cf/0x240 [ 868.010669][T26239] device_add+0x475/0xb70 [ 868.010702][T26239] wiphy_register+0x1dc5/0x2dc0 [ 868.010750][T26239] ? __pfx_wiphy_register+0x10/0x10 [ 868.010774][T26239] ? __pfx_netdev_run_todo+0x10/0x10 [ 868.010798][T26239] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 868.010839][T26239] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 868.010870][T26239] ieee80211_register_hw+0x3d82/0x4a70 [ 868.010919][T26239] ? ieee80211_register_hw+0x19a1/0x4a70 [ 868.010977][T26239] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 868.011010][T26239] ? __asan_memset+0x22/0x50 [ 868.011039][T26239] ? __hrtimer_setup+0x1b7/0x260 [ 868.011070][T26239] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 868.011109][T26239] mac80211_hwsim_new_radio+0x3334/0x5ba0 [ 868.011177][T26239] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 868.011206][T26239] ? kstrndup+0xbf/0x160 [ 868.011241][T26239] hwsim_new_radio_nl+0xf6a/0x1c00 [ 868.011295][T26239] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 868.011342][T26239] ? rcu_is_watching+0x15/0xb0 [ 868.011371][T26239] ? trace_kmalloc+0x2a/0xf0 [ 868.011408][T26239] ? __nla_parse+0x40/0x60 [ 868.011434][T26239] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 868.011459][T26239] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 868.011521][T26239] genl_family_rcv_msg_doit+0x22a/0x330 [ 868.011556][T26239] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 868.011599][T26239] ? bpf_lsm_capable+0x9/0x20 [ 868.011623][T26239] ? security_capable+0x7e/0x2c0 [ 868.011659][T26239] genl_rcv_msg+0x61c/0x7a0 [ 868.011692][T26239] ? __pfx_genl_rcv_msg+0x10/0x10 [ 868.011714][T26239] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 868.011745][T26239] ? __pfx_ref_tracker_free+0x10/0x10 [ 868.011787][T26239] netlink_rcv_skb+0x232/0x4b0 [ 868.011819][T26239] ? __pfx_genl_rcv_msg+0x10/0x10 [ 868.011845][T26239] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 868.011897][T26239] ? down_read+0x270/0x2e0 [ 868.011925][T26239] ? genl_rcv+0xd/0x40 [ 868.011950][T26239] genl_rcv+0x28/0x40 [ 868.011972][T26239] netlink_unicast+0x75c/0x8e0 [ 868.012017][T26239] netlink_sendmsg+0x813/0xb40 [ 868.012060][T26239] ? __pfx_netlink_sendmsg+0x10/0x10 [ 868.012095][T26239] ? aa_sock_msg_perm+0xf1/0x1b0 [ 868.012127][T26239] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 868.012165][T26239] ____sys_sendmsg+0x972/0x9f0 [ 868.012196][T26239] ? __might_fault+0xaf/0x130 [ 868.012230][T26239] ? __pfx_____sys_sendmsg+0x10/0x10 [ 868.012275][T26239] ? import_iovec+0x73/0xa0 [ 868.012302][T26239] ___sys_sendmsg+0x2a5/0x360 [ 868.012331][T26239] ? __lock_acquire+0x6b5/0x2cf0 [ 868.012364][T26239] ? __pfx____sys_sendmsg+0x10/0x10 [ 868.012405][T26239] ? futex_wait+0x2a2/0x390 [ 868.012462][T26239] ? __fget_files+0x2a/0x420 [ 868.012488][T26239] ? __fget_files+0x3a0/0x420 [ 868.012541][T26239] __x64_sys_sendmsg+0x1bd/0x2a0 [ 868.012579][T26239] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 868.012623][T26239] ? rcu_is_watching+0x15/0xb0 [ 868.012668][T26239] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 868.012693][T26239] do_syscall_64+0x15f/0xf80 [ 868.012719][T26239] ? trace_irq_disable+0x3b/0x140 [ 868.012742][T26239] ? clear_bhb_loop+0x40/0x90 [ 868.012767][T26239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 868.012786][T26239] RIP: 0033:0x7fb3d5f9c819 [ 868.012809][T26239] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 868.012828][T26239] RSP: 002b:00007fb3d6da1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 868.012851][T26239] RAX: ffffffffffffffda RBX: 00007fb3d6215fa0 RCX: 00007fb3d5f9c819 [ 868.012866][T26239] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 868.012880][T26239] RBP: 00007fb3d6032c91 R08: 0000000000000000 R09: 0000000000000000 [ 868.012895][T26239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 868.012908][T26239] R13: 00007fb3d6216038 R14: 00007fb3d6215fa0 R15: 00007ffe52cc6e58 [ 868.012945][T26239] [ 868.953381][T26263] __nla_validate_parse: 9 callbacks suppressed [ 868.953398][T26263] netlink: 164 bytes leftover after parsing attributes in process `syz.2.6495'. [ 869.119715][T26273] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6499'. [ 869.153759][T26265] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6497'. [ 869.174917][T26273] macvlan2: entered allmulticast mode [ 869.212917][T26273] hsr0: entered allmulticast mode [ 869.244841][T26273] hsr_slave_0: entered allmulticast mode [ 869.257301][T26273] hsr_slave_1: entered allmulticast mode [ 869.285166][T26278] bridge13: entered promiscuous mode [ 869.296014][T26278] bridge13: entered allmulticast mode [ 869.312132][T26278] team0: Port device bridge13 added [ 869.335520][T26285] syzkaller0: entered promiscuous mode [ 869.353040][T26285] syzkaller0: entered allmulticast mode [ 869.537199][T26293] netlink: 108 bytes leftover after parsing attributes in process `syz.0.6506'. [ 869.559978][T26295] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6507'. [ 869.600275][T26295] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6507'. [ 869.628414][T26295] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6507'. [ 869.655944][T26302] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6509'. [ 869.664600][T26295] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6507'. [ 869.696609][T26299] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.6508'. [ 869.828034][T26309] netlink: 'syz.1.6511': attribute type 1 has an invalid length. [ 870.080852][T26325] sysfs: cannot create duplicate filename '/class/ieee80211/Ku crK:̥B| lS-!' [ 870.098587][T26325] CPU: 0 UID: 0 PID: 26325 Comm: syz.1.6516 Not tainted syzkaller #0 PREEMPT(full) [ 870.098619][T26325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 870.098632][T26325] Call Trace: [ 870.098642][T26325] [ 870.098652][T26325] dump_stack_lvl+0xe8/0x150 [ 870.098690][T26325] sysfs_warn_dup+0x8e/0xa0 [ 870.098723][T26325] sysfs_do_create_link_sd+0xc0/0x110 [ 870.098756][T26325] device_add_class_symlinks+0x1cf/0x240 [ 870.098787][T26325] device_add+0x475/0xb70 [ 870.098819][T26325] wiphy_register+0x1dc5/0x2dc0 [ 870.098866][T26325] ? __pfx_wiphy_register+0x10/0x10 [ 870.098892][T26325] ? __pfx_netdev_run_todo+0x10/0x10 [ 870.098915][T26325] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 870.098955][T26325] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 870.098987][T26325] ieee80211_register_hw+0x3d82/0x4a70 [ 870.099034][T26325] ? ieee80211_register_hw+0x19a1/0x4a70 [ 870.099094][T26325] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 870.099126][T26325] ? __asan_memset+0x22/0x50 [ 870.099158][T26325] ? __hrtimer_setup+0x1b7/0x260 [ 870.099189][T26325] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 870.099226][T26325] mac80211_hwsim_new_radio+0x3334/0x5ba0 [ 870.099295][T26325] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 870.099324][T26325] ? kstrndup+0xbf/0x160 [ 870.099360][T26325] hwsim_new_radio_nl+0xf6a/0x1c00 [ 870.099417][T26325] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 870.099458][T26325] ? rcu_is_watching+0x15/0xb0 [ 870.099487][T26325] ? trace_kmalloc+0x2a/0xf0 [ 870.099536][T26325] ? __nla_parse+0x40/0x60 [ 870.099565][T26325] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 870.099590][T26325] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 870.099624][T26325] genl_family_rcv_msg_doit+0x22a/0x330 [ 870.099657][T26325] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 870.099697][T26325] ? bpf_lsm_capable+0x9/0x20 [ 870.099724][T26325] ? security_capable+0x7e/0x2c0 [ 870.099761][T26325] genl_rcv_msg+0x61c/0x7a0 [ 870.099792][T26325] ? __pfx_genl_rcv_msg+0x10/0x10 [ 870.099814][T26325] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 870.099845][T26325] ? __pfx_ref_tracker_free+0x10/0x10 [ 870.099899][T26325] netlink_rcv_skb+0x232/0x4b0 [ 870.099932][T26325] ? __pfx_genl_rcv_msg+0x10/0x10 [ 870.099959][T26325] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 870.100008][T26325] ? down_read+0x270/0x2e0 [ 870.100036][T26325] ? genl_rcv+0xd/0x40 [ 870.100061][T26325] genl_rcv+0x28/0x40 [ 870.100081][T26325] netlink_unicast+0x75c/0x8e0 [ 870.100122][T26325] netlink_sendmsg+0x813/0xb40 [ 870.100165][T26325] ? __pfx_netlink_sendmsg+0x10/0x10 [ 870.100200][T26325] ? aa_sock_msg_perm+0xf1/0x1b0 [ 870.100232][T26325] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 870.100267][T26325] ____sys_sendmsg+0x972/0x9f0 [ 870.100297][T26325] ? __might_fault+0xaf/0x130 [ 870.100333][T26325] ? __pfx_____sys_sendmsg+0x10/0x10 [ 870.100380][T26325] ? import_iovec+0x73/0xa0 [ 870.100408][T26325] ___sys_sendmsg+0x2a5/0x360 [ 870.100439][T26325] ? __lock_acquire+0x6b5/0x2cf0 [ 870.100474][T26325] ? __pfx____sys_sendmsg+0x10/0x10 [ 870.100524][T26325] ? futex_wait+0x2a2/0x390 [ 870.100581][T26325] ? __fget_files+0x2a/0x420 [ 870.100608][T26325] ? __fget_files+0x3a0/0x420 [ 870.100648][T26325] __x64_sys_sendmsg+0x1bd/0x2a0 [ 870.100685][T26325] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 870.100726][T26325] ? rcu_is_watching+0x15/0xb0 [ 870.100768][T26325] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 870.100792][T26325] do_syscall_64+0x15f/0xf80 [ 870.100817][T26325] ? trace_irq_disable+0x3b/0x140 [ 870.100841][T26325] ? clear_bhb_loop+0x40/0x90 [ 870.100868][T26325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 870.100891][T26325] RIP: 0033:0x7fb3d5f9c819 [ 870.100915][T26325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 870.100934][T26325] RSP: 002b:00007fb3d6da1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 870.100960][T26325] RAX: ffffffffffffffda RBX: 00007fb3d6215fa0 RCX: 00007fb3d5f9c819 [ 870.100977][T26325] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 870.100991][T26325] RBP: 00007fb3d6032c91 R08: 0000000000000000 R09: 0000000000000000 [ 870.101003][T26325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 870.101017][T26325] R13: 00007fb3d6216038 R14: 00007fb3d6215fa0 R15: 00007ffe52cc6e58 [ 870.101057][T26325] [ 870.605153][T26326] bridge10: entered promiscuous mode [ 870.617527][ T1298] lec:lec_start_xmit: lec0:No lecd attached [ 870.631884][T26326] bridge10: entered allmulticast mode [ 870.633554][ T1298] clip:clip_start_xmit: skb_dst(skb) == NULL [ 871.876456][ C1] bridge0: port 3(team0) entered forwarding state [ 871.883130][ C1] bridge0: topology change detected, propagating [ 871.890012][ C0] bridge0: port 4(syz_tun) entered forwarding state [ 871.896775][ C0] bridge0: topology change detected, propagating [ 871.964551][T26374] xt_hashlimit: size too large, truncated to 1048576 [ 872.255157][T26380] netlink: 'syz.4.6529': attribute type 1 has an invalid length. [ 872.524699][T26386] bridge14: entered promiscuous mode [ 872.544610][T26386] bridge14: entered allmulticast mode [ 872.568112][T26386] team0: Port device bridge14 added [ 873.914979][T26419] xt_l2tp: wrong L2TP version: 0 [ 874.072632][T26421] __nla_validate_parse: 6 callbacks suppressed [ 874.072657][T26421] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6544'. [ 874.260880][T26434] netlink: 'syz.1.6549': attribute type 11 has an invalid length. [ 874.286039][T26434] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6549'. [ 874.310496][T26437] gtp1: entered promiscuous mode [ 874.317644][T26437] gtp1: entered allmulticast mode [ 874.508928][T26444] bond19: option lp_interval: invalid value (0) [ 874.516296][T26444] bond19: option lp_interval: allowed values 1 - 2147483647 [ 874.533495][T26444] bond19 (unregistering): Released all slaves [ 874.782490][T26457] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6555'. [ 874.807580][T26457] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6555'. [ 874.997889][T26469] mac80211_hwsim hwsim3 : renamed from wlan1 [ 875.158047][T26472] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6560'. [ 875.242184][T26480] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6563'. [ 875.347480][T26484] bridge15: entered promiscuous mode [ 875.352950][T26484] bridge15: entered allmulticast mode [ 875.363635][T26484] team0: Port device bridge15 added [ 875.662033][T26497] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6570'. [ 875.780525][T26503] Cannot find set identified by id 65534 to match [ 875.814730][T26500] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6571'. [ 876.356460][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 876.364616][ C0] lec:lec_tx_timeout: lec0 [ 876.862341][T26560] syzkaller0: entered promiscuous mode [ 876.869292][T26560] syzkaller0: entered allmulticast mode [ 876.971297][T26567] netlink: 'syz.1.6592': attribute type 11 has an invalid length. [ 877.372553][T26574] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6595'. [ 877.497001][T26576] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6596'. [ 880.964319][T26584] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 880.986663][T26584] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 881.168031][T26593] vlan0: entered promiscuous mode [ 881.183820][T26599] veth0: entered promiscuous mode [ 881.213953][T26589] veth0: left promiscuous mode [ 881.232756][T26601] syzkaller1: entered promiscuous mode [ 881.241236][T26601] syzkaller1: entered allmulticast mode [ 881.258586][T26601] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 881.335273][T26610] __nla_validate_parse: 1 callbacks suppressed [ 881.335297][T26610] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6606'. [ 881.385267][ T6322] lec:lec_start_xmit: lec0:No lecd attached [ 881.491882][T26621] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6607'. [ 881.786586][T26630] syzkaller0: entered promiscuous mode [ 881.795355][T26630] syzkaller0: entered allmulticast mode [ 885.696495][T26640] veth0_to_team: entered promiscuous mode [ 885.946757][T26663] syzkaller1: entered promiscuous mode [ 885.966884][T26663] syzkaller1: entered allmulticast mode [ 886.073451][T26673] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6623'. [ 886.396407][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 886.404642][ C0] lec:lec_tx_timeout: lec0 [ 886.527900][T26695] syzkaller0: entered promiscuous mode [ 886.541351][T26695] syzkaller0: entered allmulticast mode [ 886.576196][T26695] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6630'. [ 886.793378][T26700] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 886.801960][T26700] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 887.013342][T26712] netlink: 'syz.3.6632': attribute type 75 has an invalid length. [ 887.223472][T26719] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6636'. [ 887.489278][T26729] syzkaller0: entered promiscuous mode [ 887.495175][T26729] syzkaller0: entered allmulticast mode [ 887.509489][T26738] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6645'. [ 887.550926][T26741] sock: sock_set_timeout: `syz.3.6644' (pid 26741) tries to set negative timeout [ 887.574129][T26738] vlan3: entered allmulticast mode [ 887.582674][T26738] bridge15: entered allmulticast mode [ 887.648824][T26738] bridge15: port 1(bond12) entered blocking state [ 887.670767][T26738] bridge15: port 1(bond12) entered disabled state [ 887.689661][T26738] bond12: entered allmulticast mode [ 887.708592][T26738] bond12: entered promiscuous mode [ 887.863859][T26747] netlink: 'syz.2.6646': attribute type 2 has an invalid length. [ 887.886983][T26749] netlink: 'syz.2.6646': attribute type 2 has an invalid length. [ 887.947139][T26754] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6649'. [ 887.962160][T26750] syzkaller1: entered promiscuous mode [ 887.986826][T26750] syzkaller1: entered allmulticast mode [ 888.176457][T26761] netlink: 140 bytes leftover after parsing attributes in process `syz.0.6652'. [ 888.265573][T26767] syzkaller1: entered promiscuous mode [ 888.275098][T26767] syzkaller1: entered allmulticast mode [ 888.513048][T26781] netlink: 'syz.0.6656': attribute type 64 has an invalid length. [ 888.853956][T26797] syzkaller0: entered promiscuous mode [ 888.872830][T26797] syzkaller0: entered allmulticast mode [ 889.244632][T26815] syzkaller1: entered promiscuous mode [ 889.265157][T26815] syzkaller1: entered allmulticast mode [ 889.351118][T26820] xt_hashlimit: size too large, truncated to 1048576 [ 889.403773][T26824] sctp: [Deprecated]: syz.1.6672 (pid 26824) Use of int in max_burst socket option deprecated. [ 889.403773][T26824] Use struct sctp_assoc_value instead [ 889.482909][T26831] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6675'. [ 889.493391][T26831] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 889.621788][T26839] sysfs: cannot create duplicate filename '/class/ieee80211/Ku crK:̥B| lS-!' [ 889.633765][T26839] CPU: 0 UID: 0 PID: 26839 Comm: syz.4.6677 Not tainted syzkaller #0 PREEMPT(full) [ 889.633799][T26839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 889.633814][T26839] Call Trace: [ 889.633824][T26839] [ 889.633834][T26839] dump_stack_lvl+0xe8/0x150 [ 889.633876][T26839] sysfs_warn_dup+0x8e/0xa0 [ 889.633906][T26839] sysfs_do_create_link_sd+0xc0/0x110 [ 889.633939][T26839] device_add_class_symlinks+0x1cf/0x240 [ 889.633973][T26839] device_add+0x475/0xb70 [ 889.634006][T26839] wiphy_register+0x1dc5/0x2dc0 [ 889.634053][T26839] ? __pfx_wiphy_register+0x10/0x10 [ 889.634080][T26839] ? __pfx_netdev_run_todo+0x10/0x10 [ 889.634104][T26839] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 889.634147][T26839] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 889.634180][T26839] ieee80211_register_hw+0x3d82/0x4a70 [ 889.634227][T26839] ? ieee80211_register_hw+0x19a1/0x4a70 [ 889.634286][T26839] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 889.634328][T26839] ? __asan_memset+0x22/0x50 [ 889.634359][T26839] ? __hrtimer_setup+0x1b7/0x260 [ 889.634391][T26839] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 889.634430][T26839] mac80211_hwsim_new_radio+0x3334/0x5ba0 [ 889.634505][T26839] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 889.634534][T26839] ? kstrndup+0xbf/0x160 [ 889.634570][T26839] hwsim_new_radio_nl+0xf6a/0x1c00 [ 889.634631][T26839] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 889.634674][T26839] ? rcu_is_watching+0x15/0xb0 [ 889.634706][T26839] ? trace_kmalloc+0x2a/0xf0 [ 889.634745][T26839] ? __nla_parse+0x40/0x60 [ 889.634773][T26839] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 889.634798][T26839] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 889.634835][T26839] genl_family_rcv_msg_doit+0x22a/0x330 [ 889.634869][T26839] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 889.634912][T26839] ? bpf_lsm_capable+0x9/0x20 [ 889.634936][T26839] ? security_capable+0x7e/0x2c0 [ 889.634973][T26839] genl_rcv_msg+0x61c/0x7a0 [ 889.635008][T26839] ? __pfx_genl_rcv_msg+0x10/0x10 [ 889.635032][T26839] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 889.635065][T26839] ? __pfx_ref_tracker_free+0x10/0x10 [ 889.635110][T26839] netlink_rcv_skb+0x232/0x4b0 [ 889.635142][T26839] ? __pfx_genl_rcv_msg+0x10/0x10 [ 889.635168][T26839] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 889.635219][T26839] ? down_read+0x270/0x2e0 [ 889.635246][T26839] ? genl_rcv+0xd/0x40 [ 889.635270][T26839] genl_rcv+0x28/0x40 [ 889.635292][T26839] netlink_unicast+0x75c/0x8e0 [ 889.635343][T26839] netlink_sendmsg+0x813/0xb40 [ 889.635386][T26839] ? __pfx_netlink_sendmsg+0x10/0x10 [ 889.635423][T26839] ? aa_sock_msg_perm+0xf1/0x1b0 [ 889.635454][T26839] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 889.635492][T26839] ____sys_sendmsg+0x972/0x9f0 [ 889.635524][T26839] ? __might_fault+0xaf/0x130 [ 889.635562][T26839] ? __pfx_____sys_sendmsg+0x10/0x10 [ 889.635607][T26839] ? import_iovec+0x73/0xa0 [ 889.635637][T26839] ___sys_sendmsg+0x2a5/0x360 [ 889.635669][T26839] ? __lock_acquire+0x6b5/0x2cf0 [ 889.635705][T26839] ? __pfx____sys_sendmsg+0x10/0x10 [ 889.635746][T26839] ? futex_wait+0x2a2/0x390 [ 889.635804][T26839] ? __fget_files+0x2a/0x420 [ 889.635831][T26839] ? __fget_files+0x3a0/0x420 [ 889.635872][T26839] __x64_sys_sendmsg+0x1bd/0x2a0 [ 889.635910][T26839] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 889.635955][T26839] ? rcu_is_watching+0x15/0xb0 [ 889.635999][T26839] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 889.636025][T26839] do_syscall_64+0x15f/0xf80 [ 889.636051][T26839] ? trace_irq_disable+0x3b/0x140 [ 889.636075][T26839] ? clear_bhb_loop+0x40/0x90 [ 889.636103][T26839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 889.636126][T26839] RIP: 0033:0x7fb3fc99c819 [ 889.636150][T26839] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 889.636169][T26839] RSP: 002b:00007fb3fabf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 889.636195][T26839] RAX: ffffffffffffffda RBX: 00007fb3fcc15fa0 RCX: 00007fb3fc99c819 [ 889.636211][T26839] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 889.636226][T26839] RBP: 00007fb3fca32c91 R08: 0000000000000000 R09: 0000000000000000 [ 889.636240][T26839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 889.636254][T26839] R13: 00007fb3fcc16038 R14: 00007fb3fcc15fa0 R15: 00007ffeff4403a8 [ 889.636294][T26839] [ 890.398478][T26857] sctp: [Deprecated]: syz.1.6684 (pid 26857) Use of struct sctp_assoc_value in delayed_ack socket option. [ 890.398478][T26857] Use struct sctp_sack_info instead [ 890.543974][T26866] syzkaller1: entered promiscuous mode [ 890.554780][T26866] syzkaller1: entered allmulticast mode [ 890.662165][T26873] sysfs: cannot create duplicate filename '/class/ieee80211/Ku crK:̥B| lS-!' [ 890.683002][T26873] CPU: 0 UID: 0 PID: 26873 Comm: syz.2.6689 Not tainted syzkaller #0 PREEMPT(full) [ 890.683035][T26873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 890.683049][T26873] Call Trace: [ 890.683059][T26873] [ 890.683070][T26873] dump_stack_lvl+0xe8/0x150 [ 890.683109][T26873] sysfs_warn_dup+0x8e/0xa0 [ 890.683139][T26873] sysfs_do_create_link_sd+0xc0/0x110 [ 890.683172][T26873] device_add_class_symlinks+0x1cf/0x240 [ 890.683204][T26873] device_add+0x475/0xb70 [ 890.683233][T26873] wiphy_register+0x1dc5/0x2dc0 [ 890.683288][T26873] ? __pfx_wiphy_register+0x10/0x10 [ 890.683314][T26873] ? __pfx_netdev_run_todo+0x10/0x10 [ 890.683338][T26873] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 890.683377][T26873] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 890.683409][T26873] ieee80211_register_hw+0x3d82/0x4a70 [ 890.683454][T26873] ? ieee80211_register_hw+0x19a1/0x4a70 [ 890.683510][T26873] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 890.683539][T26873] ? __asan_memset+0x22/0x50 [ 890.683585][T26873] ? __hrtimer_setup+0x1b7/0x260 [ 890.683617][T26873] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 890.683656][T26873] mac80211_hwsim_new_radio+0x3334/0x5ba0 [ 890.683731][T26873] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 890.683760][T26873] ? kstrndup+0xbf/0x160 [ 890.683797][T26873] hwsim_new_radio_nl+0xf6a/0x1c00 [ 890.683857][T26873] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 890.683899][T26873] ? rcu_is_watching+0x15/0xb0 [ 890.683929][T26873] ? trace_kmalloc+0x2a/0xf0 [ 890.683968][T26873] ? __nla_parse+0x40/0x60 [ 890.683994][T26873] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 890.684020][T26873] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 890.684056][T26873] genl_family_rcv_msg_doit+0x22a/0x330 [ 890.684090][T26873] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 890.684133][T26873] ? bpf_lsm_capable+0x9/0x20 [ 890.684156][T26873] ? security_capable+0x7e/0x2c0 [ 890.684194][T26873] genl_rcv_msg+0x61c/0x7a0 [ 890.684228][T26873] ? __pfx_genl_rcv_msg+0x10/0x10 [ 890.684251][T26873] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 890.684310][T26873] netlink_rcv_skb+0x232/0x4b0 [ 890.684340][T26873] ? __pfx_genl_rcv_msg+0x10/0x10 [ 890.684367][T26873] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 890.684420][T26873] ? down_read+0x270/0x2e0 [ 890.684447][T26873] ? genl_rcv+0xd/0x40 [ 890.684473][T26873] genl_rcv+0x28/0x40 [ 890.684495][T26873] netlink_unicast+0x75c/0x8e0 [ 890.684537][T26873] netlink_sendmsg+0x813/0xb40 [ 890.684580][T26873] ? __pfx_netlink_sendmsg+0x10/0x10 [ 890.684617][T26873] ? aa_sock_msg_perm+0xf1/0x1b0 [ 890.684649][T26873] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 890.684686][T26873] ____sys_sendmsg+0x972/0x9f0 [ 890.684719][T26873] ? __might_fault+0xaf/0x130 [ 890.684758][T26873] ? __pfx_____sys_sendmsg+0x10/0x10 [ 890.684804][T26873] ? import_iovec+0x73/0xa0 [ 890.684833][T26873] ___sys_sendmsg+0x2a5/0x360 [ 890.684864][T26873] ? __lock_acquire+0x6b5/0x2cf0 [ 890.684900][T26873] ? __pfx____sys_sendmsg+0x10/0x10 [ 890.684943][T26873] ? futex_wait+0x2a2/0x390 [ 890.685001][T26873] ? __fget_files+0x2a/0x420 [ 890.685029][T26873] ? __fget_files+0x3a0/0x420 [ 890.685071][T26873] __x64_sys_sendmsg+0x1bd/0x2a0 [ 890.685110][T26873] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 890.685155][T26873] ? rcu_is_watching+0x15/0xb0 [ 890.685199][T26873] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 890.685225][T26873] do_syscall_64+0x15f/0xf80 [ 890.685251][T26873] ? trace_irq_disable+0x3b/0x140 [ 890.685284][T26873] ? clear_bhb_loop+0x40/0x90 [ 890.685313][T26873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 890.685336][T26873] RIP: 0033:0x7fa441d9c819 [ 890.685359][T26873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 890.685379][T26873] RSP: 002b:00007fa442d31028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 890.685404][T26873] RAX: ffffffffffffffda RBX: 00007fa442015fa0 RCX: 00007fa441d9c819 [ 890.685421][T26873] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 890.685436][T26873] RBP: 00007fa441e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 890.685450][T26873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 890.685464][T26873] R13: 00007fa442016038 R14: 00007fa442015fa0 R15: 00007ffe6f79a0b8 [ 890.685504][T26873] [ 890.729573][T26877] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6691'. [ 890.791161][T22415] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 891.145043][T22415] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.155202][T26877] chnl_net:caif_netlink_parms(): no params data found [ 891.175798][T26888] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6694'. [ 891.256105][T26886] netlink: 'syz.2.6693': attribute type 11 has an invalid length. [ 891.273167][T26886] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6693'. [ 891.418969][T26897] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 891.438453][T26897] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 891.537246][T26906] netlink: 'syz.1.6698': attribute type 4 has an invalid length. [ 891.572977][T26906] netlink: 17 bytes leftover after parsing attributes in process `syz.1.6698'. [ 891.590141][T26909] netlink: zone id is out of range [ 891.625416][T26909] netlink: zone id is out of range [ 891.655506][T26909] netlink: get zone limit has 4 unknown bytes [ 891.866414][T26922] FAULT_INJECTION: forcing a failure. [ 891.866414][T26922] name failslab, interval 1, probability 0, space 0, times 0 [ 891.887792][T26925] syzkaller1: entered promiscuous mode [ 891.893756][T26925] syzkaller1: entered allmulticast mode [ 891.906423][T26922] CPU: 0 UID: 0 PID: 26922 Comm: syz.1.6703 Not tainted syzkaller #0 PREEMPT(full) [ 891.906455][T26922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 891.906469][T26922] Call Trace: [ 891.906478][T26922] [ 891.906488][T26922] dump_stack_lvl+0xe8/0x150 [ 891.906526][T26922] should_fail_ex+0x412/0x560 [ 891.906562][T26922] should_failslab+0xa8/0x100 [ 891.906587][T26922] __kmalloc_noprof+0xe8/0x760 [ 891.906620][T26922] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 891.906658][T26922] tomoyo_realpath_from_path+0xe3/0x5d0 [ 891.906686][T26922] ? tomoyo_domain+0xd7/0x130 [ 891.906719][T26922] ? tomoyo_path_number_perm+0x219/0x630 [ 891.906744][T26922] tomoyo_path_number_perm+0x246/0x630 [ 891.906772][T26922] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 891.906794][T26922] ? __lock_acquire+0x6b5/0x2cf0 [ 891.906838][T26922] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 891.906887][T26922] ? __fget_files+0x2a/0x420 [ 891.906918][T26922] ? __fget_files+0x2a/0x420 [ 891.906942][T26922] ? __fget_files+0x3a0/0x420 [ 891.906966][T26922] ? __fget_files+0x2a/0x420 [ 891.906996][T26922] security_file_ioctl+0xc3/0x2a0 [ 891.907023][T26922] __se_sys_ioctl+0x47/0x170 [ 891.907044][T26922] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 891.907068][T26922] do_syscall_64+0x15f/0xf80 [ 891.907092][T26922] ? trace_irq_disable+0x3b/0x140 [ 891.907115][T26922] ? clear_bhb_loop+0x40/0x90 [ 891.907141][T26922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 891.907162][T26922] RIP: 0033:0x7fb3d5f9c819 [ 891.907185][T26922] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 891.907203][T26922] RSP: 002b:00007fb3d6da1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 891.907225][T26922] RAX: ffffffffffffffda RBX: 00007fb3d6215fa0 RCX: 00007fb3d5f9c819 [ 891.907241][T26922] RDX: 0000200000000180 RSI: 000000000000890b RDI: 0000000000000004 [ 891.907255][T26922] RBP: 00007fb3d6da1090 R08: 0000000000000000 R09: 0000000000000000 [ 891.907267][T26922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 891.907292][T26922] R13: 00007fb3d6216038 R14: 00007fb3d6215fa0 R15: 00007ffe52cc6e58 [ 891.907328][T26922] [ 891.907338][T26922] ERROR: Out of memory at tomoyo_realpath_from_path. [ 891.967711][T26926] xt_TPROXY: Can be used only with -p tcp or -p udp [ 892.131573][T26935] netlink: 33 bytes leftover after parsing attributes in process `syz.4.6707'. [ 892.181684][T26935] netlink: 140 bytes leftover after parsing attributes in process `syz.4.6707'. [ 892.203821][T26930] netlink: 'syz.4.6707': attribute type 75 has an invalid length. [ 892.293228][T26940] netlink: 'syz.1.6710': attribute type 1 has an invalid length. [ 892.413449][T26948] netlink: 'syz.2.6714': attribute type 4 has an invalid length. [ 892.449152][T26948] netlink: 17 bytes leftover after parsing attributes in process `syz.2.6714'. [ 892.719408][T26964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6717'. [ 892.760792][T26966] xt_SECMARK: invalid mode: 9 [ 892.937676][T26970] netlink: 76 bytes leftover after parsing attributes in process `syz.4.6720'. [ 892.962266][T26972] syzkaller1: entered promiscuous mode [ 892.976512][T26972] syzkaller1: entered allmulticast mode [ 893.044221][T26984] netlink: 33 bytes leftover after parsing attributes in process `syz.2.6723'. [ 893.045444][T26980] sctp: [Deprecated]: syz.1.6724 (pid 26980) Use of int in max_burst socket option deprecated. [ 893.045444][T26980] Use struct sctp_assoc_value instead [ 893.080129][T26984] netlink: 140 bytes leftover after parsing attributes in process `syz.2.6723'. [ 893.131003][T26974] netlink: 'syz.2.6723': attribute type 75 has an invalid length. [ 893.377289][T26994] netlink: 'syz.3.6725': attribute type 1 has an invalid length. [ 893.450095][T26994] 8021q: adding VLAN 0 to HW filter on device bond14 [ 893.562409][T27000] bond14: (slave veth17): Enslaving as an active interface with a down link [ 893.600906][T27014] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.6731'. [ 893.698644][T26994] bond14: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 893.740623][T27011] bond14: (slave veth19): Enslaving as an active interface with a down link [ 893.753099][T27007] syzkaller1: entered promiscuous mode [ 893.766033][T27007] syzkaller1: entered allmulticast mode [ 894.158359][T27034] syzkaller1: entered promiscuous mode [ 894.165223][T27034] syzkaller1: entered allmulticast mode [ 894.667697][T27071] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6749'. [ 894.681505][T27071] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6749'. [ 894.772584][T27074] bond2: option mode: unable to set because the bond device has slaves [ 894.784210][T27078] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 894.802252][T27078] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 895.116147][T27088] syzkaller1: entered promiscuous mode [ 895.141817][T27088] syzkaller1: entered allmulticast mode [ 895.176674][T27096] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 895.285080][T27099] tipc: Enabling of bearer rejected, media not registered [ 895.586545][T27117] syzkaller0: entered promiscuous mode [ 895.592249][T27117] syzkaller0: entered allmulticast mode [ 896.385853][T27146] netlink: 'syz.3.6772': attribute type 75 has an invalid length. [ 900.011004][T27171] __nla_validate_parse: 3 callbacks suppressed [ 900.011029][T27171] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6780'. [ 900.129485][T27174] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6783'. [ 900.215703][T27174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6783'. [ 900.234280][T27174] netlink: 'syz.0.6783': attribute type 5 has an invalid length. [ 900.574983][T27202] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 901.079368][T27228] netlink: 'syz.4.6802': attribute type 10 has an invalid length. [ 901.080716][T27227] bridge20: entered promiscuous mode [ 901.108104][T27228] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6802'. [ 901.124115][T27227] bridge20: entered allmulticast mode [ 901.472977][T27247] netlink: 'syz.3.6807': attribute type 3 has an invalid length. [ 901.977644][T27279] bridge12: entered promiscuous mode [ 901.985088][T27279] bridge12: entered allmulticast mode [ 902.113310][T27288] netlink: 'syz.0.6819': attribute type 11 has an invalid length. [ 902.122102][T27288] netlink: 228 bytes leftover after parsing attributes in process `syz.0.6819'. [ 902.304993][T27293] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6821'. [ 902.630376][T27304] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6827'. [ 902.729047][T27308] netlink: 'syz.0.6827': attribute type 1 has an invalid length. [ 902.811629][T27313] netlink: 'syz.4.6830': attribute type 10 has an invalid length. [ 902.881211][T27315] bridge21: entered promiscuous mode [ 902.889238][T27315] bridge21: entered allmulticast mode [ 902.914032][T27313] team0: Device veth0_vlan failed to register rx_handler [ 903.394206][T27341] FAULT_INJECTION: forcing a failure. [ 903.394206][T27341] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 903.416587][T27341] CPU: 1 UID: 0 PID: 27341 Comm: syz.2.6839 Not tainted syzkaller #0 PREEMPT(full) [ 903.416619][T27341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 903.416632][T27341] Call Trace: [ 903.416641][T27341] [ 903.416651][T27341] dump_stack_lvl+0xe8/0x150 [ 903.416688][T27341] should_fail_ex+0x412/0x560 [ 903.416723][T27341] _copy_from_user+0x2d/0xb0 [ 903.416752][T27341] ___sys_sendmsg+0x1c6/0x360 [ 903.416784][T27341] ? __lock_acquire+0x6b5/0x2cf0 [ 903.416816][T27341] ? __pfx____sys_sendmsg+0x10/0x10 [ 903.416888][T27341] ? __fget_files+0x2a/0x420 [ 903.416914][T27341] ? __fget_files+0x3a0/0x420 [ 903.416951][T27341] __x64_sys_sendmsg+0x1bd/0x2a0 [ 903.416986][T27341] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 903.417028][T27341] ? __pfx_ksys_write+0x10/0x10 [ 903.417069][T27341] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 903.417094][T27341] do_syscall_64+0x15f/0xf80 [ 903.417119][T27341] ? trace_irq_disable+0x3b/0x140 [ 903.417141][T27341] ? clear_bhb_loop+0x40/0x90 [ 903.417167][T27341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 903.417187][T27341] RIP: 0033:0x7fa441d9c819 [ 903.417209][T27341] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 903.417227][T27341] RSP: 002b:00007fa442d31028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 903.417249][T27341] RAX: ffffffffffffffda RBX: 00007fa442015fa0 RCX: 00007fa441d9c819 [ 903.417265][T27341] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 903.417278][T27341] RBP: 00007fa442d31090 R08: 0000000000000000 R09: 0000000000000000 [ 903.417291][T27341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 903.417304][T27341] R13: 00007fa442016038 R14: 00007fa442015fa0 R15: 00007ffe6f79a0b8 [ 903.417339][T27341] [ 903.780030][T27362] sctp: [Deprecated]: syz.3.6847 (pid 27362) Use of struct sctp_assoc_value in delayed_ack socket option. [ 903.780030][T27362] Use struct sctp_sack_info instead [ 903.912517][T27370] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6850'. [ 904.172462][T27379] bridge16: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 904.210905][T27383] mac80211_hwsim hwsim6 : renamed from wlan1 [ 904.379270][T27395] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 904.404429][T27392] syzkaller0: entered promiscuous mode [ 904.418083][T27392] syzkaller0: entered allmulticast mode [ 904.531875][T27399] syzkaller0: entered promiscuous mode [ 904.546905][T27399] syzkaller0: entered allmulticast mode [ 904.700591][T27412] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6867'. [ 905.110240][T27428] netlink: 'syz.3.6874': attribute type 29 has an invalid length. [ 905.158968][T27428] netlink: 'syz.3.6874': attribute type 29 has an invalid length. [ 905.189755][T27430] syzkaller0: entered promiscuous mode [ 905.248703][T27433] netlink: 500 bytes leftover after parsing attributes in process `syz.3.6874'. [ 905.311217][T27436] wg2: Caught tx_queue_len zero misconfig [ 905.324821][T27436] syzkaller0: entered promiscuous mode [ 905.335954][T27436] syzkaller0: entered allmulticast mode [ 905.350186][T27436] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6877'. [ 905.828617][T27464] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6886'. [ 905.838981][T27463] syzkaller0: entered promiscuous mode [ 905.844674][T27463] syzkaller0: entered allmulticast mode [ 906.126869][T27472] sysfs: cannot create duplicate filename '/class/ieee80211/Ku crK:̥B| lS-!' [ 906.138689][T27472] CPU: 0 UID: 0 PID: 27472 Comm: syz.4.6891 Not tainted syzkaller #0 PREEMPT(full) [ 906.138718][T27472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 906.138732][T27472] Call Trace: [ 906.138742][T27472] [ 906.138751][T27472] dump_stack_lvl+0xe8/0x150 [ 906.138790][T27472] sysfs_warn_dup+0x8e/0xa0 [ 906.138819][T27472] sysfs_do_create_link_sd+0xc0/0x110 [ 906.138853][T27472] device_add_class_symlinks+0x1cf/0x240 [ 906.138887][T27472] device_add+0x475/0xb70 [ 906.138919][T27472] wiphy_register+0x1dc5/0x2dc0 [ 906.138967][T27472] ? __pfx_wiphy_register+0x10/0x10 [ 906.138993][T27472] ? __pfx_netdev_run_todo+0x10/0x10 [ 906.139018][T27472] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 906.139059][T27472] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 906.139093][T27472] ieee80211_register_hw+0x3d82/0x4a70 [ 906.139154][T27472] ? ieee80211_register_hw+0x19a1/0x4a70 [ 906.139216][T27472] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 906.139250][T27472] ? __asan_memset+0x22/0x50 [ 906.139281][T27472] ? __hrtimer_setup+0x1b7/0x260 [ 906.139313][T27472] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 906.139351][T27472] mac80211_hwsim_new_radio+0x3334/0x5ba0 [ 906.139432][T27472] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 906.139461][T27472] ? kstrndup+0xbf/0x160 [ 906.139496][T27472] hwsim_new_radio_nl+0xf6a/0x1c00 [ 906.139554][T27472] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 906.139595][T27472] ? rcu_is_watching+0x15/0xb0 [ 906.139625][T27472] ? trace_kmalloc+0x2a/0xf0 [ 906.139664][T27472] ? __nla_parse+0x40/0x60 [ 906.139690][T27472] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 906.139715][T27472] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 906.139751][T27472] genl_family_rcv_msg_doit+0x22a/0x330 [ 906.139785][T27472] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 906.139824][T27472] ? bpf_lsm_capable+0x9/0x20 [ 906.139848][T27472] ? security_capable+0x7e/0x2c0 [ 906.139882][T27472] genl_rcv_msg+0x61c/0x7a0 [ 906.139919][T27472] ? __pfx_genl_rcv_msg+0x10/0x10 [ 906.139944][T27472] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 906.139974][T27472] ? __pfx_ref_tracker_free+0x10/0x10 [ 906.140019][T27472] netlink_rcv_skb+0x232/0x4b0 [ 906.140052][T27472] ? __pfx_genl_rcv_msg+0x10/0x10 [ 906.140079][T27472] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 906.140139][T27472] ? down_read+0x270/0x2e0 [ 906.140167][T27472] ? genl_rcv+0xd/0x40 [ 906.140191][T27472] genl_rcv+0x28/0x40 [ 906.140212][T27472] netlink_unicast+0x75c/0x8e0 [ 906.140251][T27472] netlink_sendmsg+0x813/0xb40 [ 906.140293][T27472] ? __pfx_netlink_sendmsg+0x10/0x10 [ 906.140327][T27472] ? aa_sock_msg_perm+0xf1/0x1b0 [ 906.140357][T27472] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 906.140393][T27472] ____sys_sendmsg+0x972/0x9f0 [ 906.140425][T27472] ? __might_fault+0xaf/0x130 [ 906.140464][T27472] ? __pfx_____sys_sendmsg+0x10/0x10 [ 906.140508][T27472] ? import_iovec+0x73/0xa0 [ 906.140538][T27472] ___sys_sendmsg+0x2a5/0x360 [ 906.140570][T27472] ? __lock_acquire+0x6b5/0x2cf0 [ 906.140604][T27472] ? __pfx____sys_sendmsg+0x10/0x10 [ 906.140646][T27472] ? futex_wait+0x2a2/0x390 [ 906.140701][T27472] ? __fget_files+0x2a/0x420 [ 906.140728][T27472] ? __fget_files+0x3a0/0x420 [ 906.140770][T27472] __x64_sys_sendmsg+0x1bd/0x2a0 [ 906.140806][T27472] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 906.140852][T27472] ? rcu_is_watching+0x15/0xb0 [ 906.140896][T27472] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.140922][T27472] do_syscall_64+0x15f/0xf80 [ 906.140947][T27472] ? trace_irq_disable+0x3b/0x140 [ 906.140972][T27472] ? clear_bhb_loop+0x40/0x90 [ 906.141000][T27472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.141021][T27472] RIP: 0033:0x7fb3fc99c819 [ 906.141044][T27472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 906.141064][T27472] RSP: 002b:00007fb3fabf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 906.141089][T27472] RAX: ffffffffffffffda RBX: 00007fb3fcc15fa0 RCX: 00007fb3fc99c819 [ 906.141115][T27472] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 906.141130][T27472] RBP: 00007fb3fca32c91 R08: 0000000000000000 R09: 0000000000000000 [ 906.141144][T27472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 906.141158][T27472] R13: 00007fb3fcc16038 R14: 00007fb3fcc15fa0 R15: 00007ffeff4403a8 [ 906.141194][T27472] [ 906.755150][T27481] netlink: 33 bytes leftover after parsing attributes in process `syz.0.6894'. [ 906.828795][T27481] netlink: 140 bytes leftover after parsing attributes in process `syz.0.6894'. [ 906.888821][T27481] netlink: 'syz.0.6894': attribute type 75 has an invalid length. [ 907.059375][T27489] netlink: 'syz.3.6897': attribute type 29 has an invalid length. [ 907.060917][T27487] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6895'. [ 907.177806][T27496] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6900'. [ 907.330230][T27495] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 907.753163][T27528] netlink: 'syz.3.6909': attribute type 39 has an invalid length. [ 908.275125][T27542] syzkaller0: entered promiscuous mode [ 908.293980][T27542] syzkaller0: entered allmulticast mode [ 908.360766][T27549] netlink: 'syz.0.6919': attribute type 23 has an invalid length. [ 908.407231][T27553] netlink: 'syz.0.6919': attribute type 23 has an invalid length. [ 908.427637][T27552] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 908.576714][T27564] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6924'. [ 908.625537][T27563] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6923'. [ 908.640935][T27567] syzkaller0: entered promiscuous mode [ 908.967191][T27590] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6931'. [ 909.556957][T27623] syzkaller0: entered promiscuous mode [ 909.891220][T27638] syzkaller1: entered promiscuous mode [ 909.897801][T27638] syzkaller1: entered allmulticast mode [ 910.244133][T27657] syzkaller0: entered promiscuous mode [ 910.329370][T27659] syzkaller0: entered promiscuous mode [ 910.498863][T27675] __nla_validate_parse: 3 callbacks suppressed [ 910.498884][T27675] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6961'. [ 910.676115][T27686] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6966'. [ 910.686242][T27639] FAULT_INJECTION: forcing a failure. [ 910.686242][T27639] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 910.714886][T27639] CPU: 0 UID: 0 PID: 27639 Comm: syz.3.6949 Not tainted syzkaller #0 PREEMPT(full) [ 910.714918][T27639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 910.714931][T27639] Call Trace: [ 910.714940][T27639] [ 910.714950][T27639] dump_stack_lvl+0xe8/0x150 [ 910.714985][T27639] should_fail_ex+0x412/0x560 [ 910.715022][T27639] set_fd_set+0x3a/0xa0 [ 910.715044][T27639] core_sys_select+0xa23/0xc30 [ 910.715094][T27639] ? __pfx_core_sys_select+0x10/0x10 [ 910.715142][T27639] ? __pfx_set_user_sigmask+0x10/0x10 [ 910.715184][T27639] __se_sys_pselect6+0x267/0x320 [ 910.715215][T27639] ? __pfx___se_sys_pselect6+0x10/0x10 [ 910.715249][T27639] ? __x64_sys_pselect6+0x21/0xf0 [ 910.715273][T27639] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 910.715298][T27639] do_syscall_64+0x15f/0xf80 [ 910.715322][T27639] ? trace_irq_disable+0x3b/0x140 [ 910.715340][T27639] ? clear_bhb_loop+0x40/0x90 [ 910.715366][T27639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 910.715387][T27639] RIP: 0033:0x7f746ab9c819 [ 910.715408][T27639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 910.715426][T27639] RSP: 002b:00007f746b974028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 910.715450][T27639] RAX: ffffffffffffffda RBX: 00007f746ae15fa0 RCX: 00007f746ab9c819 [ 910.715466][T27639] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 910.715480][T27639] RBP: 00007f746b974090 R08: 0000000000000000 R09: 0000000000000000 [ 910.715493][T27639] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 910.715507][T27639] R13: 00007f746ae16038 R14: 00007f746ae15fa0 R15: 00007ffc297e64b8 [ 910.715540][T27639] [ 911.072352][T27697] netlink: 'syz.1.6972': attribute type 2 has an invalid length. [ 911.135340][T27702] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6973'. [ 911.731990][T27731] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6980'. [ 912.446828][T27749] nbd2: detected capacity change from 0 to 63 [ 912.468292][ T5840] block nbd2: Receive control failed (result -32) [ 912.468410][ T5831] block nbd2: Receive control failed (result -32) [ 912.520789][T27775] block nbd2: Dead connection, failed to find a fallback [ 912.583573][T27775] block nbd2: shutting down sockets [ 912.629972][T27775] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 912.692443][T27775] Buffer I/O error on dev nbd2, logical block 0, async page read [ 912.714814][T27775] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 912.725177][T27775] Buffer I/O error on dev nbd2, logical block 1, async page read [ 912.752703][T27775] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 912.785256][T27775] Buffer I/O error on dev nbd2, logical block 2, async page read [ 912.811512][T27775] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 912.857775][T27775] Buffer I/O error on dev nbd2, logical block 3, async page read [ 912.869327][T27775] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 912.893339][T27775] Buffer I/O error on dev nbd2, logical block 0, async page read [ 912.906110][T27793] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 912.919690][T27775] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 912.951450][T27775] Buffer I/O error on dev nbd2, logical block 1, async page read [ 912.952578][T27790] gtp33: entered promiscuous mode [ 912.977100][T27775] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 913.000402][T27796] sysfs: cannot create duplicate filename '/class/ieee80211/Ku crK:̥B| lS-!' [ 913.010329][T27775] Buffer I/O error on dev nbd2, logical block 2, async page read [ 913.022443][T27796] CPU: 0 UID: 0 PID: 27796 Comm: syz.2.6999 Not tainted syzkaller #0 PREEMPT(full) [ 913.022484][T27796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 913.022499][T27796] Call Trace: [ 913.022511][T27796] [ 913.022522][T27796] dump_stack_lvl+0xe8/0x150 [ 913.022568][T27796] sysfs_warn_dup+0x8e/0xa0 [ 913.022601][T27796] sysfs_do_create_link_sd+0xc0/0x110 [ 913.022637][T27796] device_add_class_symlinks+0x1cf/0x240 [ 913.022673][T27796] device_add+0x475/0xb70 [ 913.022706][T27796] wiphy_register+0x1dc5/0x2dc0 [ 913.022755][T27796] ? __pfx_wiphy_register+0x10/0x10 [ 913.022782][T27796] ? __pfx_netdev_run_todo+0x10/0x10 [ 913.022808][T27796] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 913.022845][T27796] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 913.022874][T27796] ieee80211_register_hw+0x3d82/0x4a70 [ 913.022923][T27796] ? ieee80211_register_hw+0x19a1/0x4a70 [ 913.022982][T27796] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 913.023014][T27796] ? __asan_memset+0x22/0x50 [ 913.023044][T27796] ? __hrtimer_setup+0x1b7/0x260 [ 913.023077][T27796] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 913.023117][T27796] mac80211_hwsim_new_radio+0x3334/0x5ba0 [ 913.023189][T27796] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 913.023300][T27796] ? kstrndup+0xbf/0x160 [ 913.023343][T27796] hwsim_new_radio_nl+0xf6a/0x1c00 [ 913.023476][T27796] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 913.023522][T27796] ? rcu_is_watching+0x15/0xb0 [ 913.023558][T27796] ? trace_kmalloc+0x2a/0xf0 [ 913.023601][T27796] ? __nla_parse+0x40/0x60 [ 913.023633][T27796] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 913.023661][T27796] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 913.023698][T27796] genl_family_rcv_msg_doit+0x22a/0x330 [ 913.023737][T27796] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 913.023784][T27796] ? bpf_lsm_capable+0x9/0x20 [ 913.023811][T27796] ? security_capable+0x7e/0x2c0 [ 913.023851][T27796] genl_rcv_msg+0x61c/0x7a0 [ 913.023886][T27796] ? __pfx_genl_rcv_msg+0x10/0x10 [ 913.023911][T27796] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 913.023958][T27796] netlink_rcv_skb+0x232/0x4b0 [ 913.023993][T27796] ? __pfx_genl_rcv_msg+0x10/0x10 [ 913.024020][T27796] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 913.024067][T27796] ? down_read+0x270/0x2e0 [ 913.024095][T27796] ? genl_rcv+0xd/0x40 [ 913.024121][T27796] genl_rcv+0x28/0x40 [ 913.024142][T27796] netlink_unicast+0x75c/0x8e0 [ 913.024203][T27796] netlink_sendmsg+0x813/0xb40 [ 913.024249][T27796] ? __pfx_netlink_sendmsg+0x10/0x10 [ 913.024282][T27796] ? aa_sock_msg_perm+0xf1/0x1b0 [ 913.024315][T27796] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 913.024351][T27796] ____sys_sendmsg+0x972/0x9f0 [ 913.024385][T27796] ? __might_fault+0xaf/0x130 [ 913.024434][T27796] ? __pfx_____sys_sendmsg+0x10/0x10 [ 913.024478][T27796] ? import_iovec+0x73/0xa0 [ 913.024508][T27796] ___sys_sendmsg+0x2a5/0x360 [ 913.024538][T27796] ? __lock_acquire+0x6b5/0x2cf0 [ 913.024572][T27796] ? __pfx____sys_sendmsg+0x10/0x10 [ 913.024613][T27796] ? futex_wait+0x2a2/0x390 [ 913.024670][T27796] ? __fget_files+0x2a/0x420 [ 913.024698][T27796] ? __fget_files+0x3a0/0x420 [ 913.024736][T27796] __x64_sys_sendmsg+0x1bd/0x2a0 [ 913.024790][T27796] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 913.024840][T27796] ? rcu_is_watching+0x15/0xb0 [ 913.024890][T27796] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 913.024914][T27796] do_syscall_64+0x15f/0xf80 [ 913.024937][T27796] ? trace_irq_disable+0x3b/0x140 [ 913.024960][T27796] ? clear_bhb_loop+0x40/0x90 [ 913.024987][T27796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 913.025009][T27796] RIP: 0033:0x7fa441d9c819 [ 913.025035][T27796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 913.025057][T27796] RSP: 002b:00007fa442d31028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 913.025081][T27796] RAX: ffffffffffffffda RBX: 00007fa442015fa0 RCX: 00007fa441d9c819 [ 913.025098][T27796] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 913.025113][T27796] RBP: 00007fa441e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 913.025128][T27796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 913.025142][T27796] R13: 00007fa442016038 R14: 00007fa442015fa0 R15: 00007ffe6f79a0b8 [ 913.025181][T27796] [ 913.062948][T27775] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 913.200057][T27800] geneve3: entered promiscuous mode [ 913.287380][T27775] Buffer I/O error on dev nbd2, logical block 3, async page read [ 913.332184][T27807] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20003 [ 913.337483][T27775] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 913.348698][T27800] geneve3: entered allmulticast mode [ 913.357551][T27775] Buffer I/O error on dev nbd2, logical block 0, async page read [ 913.363048][ T176] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 19999 - 0 [ 913.365304][T27775] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 913.379987][ T176] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 19999 - 0 [ 913.385249][T27809] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7003'. [ 913.419751][T27775] Buffer I/O error on dev nbd2, logical block 1, async page read [ 913.432646][T27803] tunl0: Caught tx_queue_len zero misconfig [ 913.454865][T27775] ldm_validate_partition_table(): Disk read failed. [ 913.492917][T27814] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 913.544942][T27775] Dev nbd2: unable to read RDB block 0 [ 913.604718][T27803] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7003'. [ 913.610945][T27775] nbd2: unable to read partition table [ 913.724198][ T176] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 19999 - 0 [ 913.764375][ T176] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 19999 - 0 [ 913.800493][T27775] ldm_validate_partition_table(): Disk read failed. [ 913.812781][T27775] Dev nbd2: unable to read RDB block 0 [ 913.821279][T27775] nbd2: unable to read partition table [ 913.962170][T27825] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7011'. [ 914.058849][T27834] syzkaller1: entered promiscuous mode [ 914.069467][T27834] syzkaller1: entered allmulticast mode [ 914.343898][T27848] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7017'. [ 914.400590][T27848] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7017'. [ 914.558983][T27861] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7023'. [ 914.860864][T27873] syzkaller1: entered promiscuous mode [ 914.876537][T27873] syzkaller1: entered allmulticast mode [ 915.199288][T27893] [ 915.201695][T27893] ====================================================== [ 915.208922][T27893] WARNING: possible circular locking dependency detected [ 915.215988][T27893] syzkaller #0 Not tainted [ 915.220617][T27893] ------------------------------------------------------ [ 915.227756][T27893] syz.2.7036/27893 is trying to acquire lock: [ 915.234257][T27893] ffffffff8ff4be58 (nr_neigh_list_lock){+...}-{3:3}, at: nr_remove_neigh+0x25/0xe0 [ 915.243893][T27893] [ 915.243893][T27893] but task is already holding lock: [ 915.251289][T27893] ffff88803e5ef570 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0x1039/0x2630 [ 915.260731][T27893] [ 915.260731][T27893] which lock already depends on the new lock. [ 915.260731][T27893] [ 915.271659][T27893] [ 915.271659][T27893] the existing dependency chain (in reverse order) is: [ 915.281027][T27893] [ 915.281027][T27893] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 915.289198][T27893] _raw_spin_lock_bh+0x36/0x50 [ 915.294603][T27893] nr_rt_device_down+0x153/0x860 [ 915.300079][T27893] nr_device_event+0x137/0x150 [ 915.305464][T27893] notifier_call_chain+0x1ad/0x3d0 [ 915.311106][T27893] __dev_notify_flags+0x16d/0x310 [ 915.316706][T27893] netif_change_flags+0xe8/0x1a0 [ 915.322190][T27893] dev_change_flags+0x130/0x260 [ 915.327661][T27893] dev_ioctl+0x7b4/0x1150 [ 915.332531][T27893] sock_do_ioctl+0x23e/0x320 [ 915.337648][T27893] sock_ioctl+0x5c6/0x7f0 [ 915.342513][T27893] __se_sys_ioctl+0xfc/0x170 [ 915.347719][T27893] do_syscall_64+0x15f/0xf80 [ 915.352843][T27893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 915.359364][T27893] [ 915.359364][T27893] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 915.367293][T27893] _raw_spin_lock_bh+0x36/0x50 [ 915.372591][T27893] nr_rt_device_down+0xbe/0x860 [ 915.378086][T27893] nr_device_event+0x137/0x150 [ 915.383381][T27893] notifier_call_chain+0x1ad/0x3d0 [ 915.389194][T27893] __dev_notify_flags+0x16d/0x310 [ 915.394765][T27893] netif_change_flags+0xe8/0x1a0 [ 915.400357][T27893] dev_change_flags+0x130/0x260 [ 915.405771][T27893] dev_ioctl+0x7b4/0x1150 [ 915.410647][T27893] sock_do_ioctl+0x23e/0x320 [ 915.416035][T27893] sock_ioctl+0x5c6/0x7f0 [ 915.421183][T27893] __se_sys_ioctl+0xfc/0x170 [ 915.426330][T27893] do_syscall_64+0x15f/0xf80 [ 915.431472][T27893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 915.438256][T27893] [ 915.438256][T27893] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 915.446180][T27893] __lock_acquire+0x15a5/0x2cf0 [ 915.451669][T27893] lock_acquire+0x106/0x350 [ 915.456876][T27893] _raw_spin_lock_bh+0x36/0x50 [ 915.462437][T27893] nr_remove_neigh+0x25/0xe0 [ 915.467562][T27893] nr_add_node+0x1e41/0x2630 [ 915.472690][T27893] nr_rt_ioctl+0xe59/0xf90 [ 915.477756][T27893] sock_do_ioctl+0x101/0x320 [ 915.483142][T27893] sock_ioctl+0x5c6/0x7f0 [ 915.488207][T27893] __se_sys_ioctl+0xfc/0x170 [ 915.493439][T27893] do_syscall_64+0x15f/0xf80 [ 915.499094][T27893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 915.505804][T27893] [ 915.505804][T27893] other info that might help us debug this: [ 915.505804][T27893] [ 915.516342][T27893] Chain exists of: [ 915.516342][T27893] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 915.516342][T27893] [ 915.530463][T27893] Possible unsafe locking scenario: [ 915.530463][T27893] [ 915.538284][T27893] CPU0 CPU1 [ 915.543768][T27893] ---- ---- [ 915.549134][T27893] lock(&nr_node->node_lock); [ 915.553995][T27893] lock(nr_node_list_lock); [ 915.561297][T27893] lock(&nr_node->node_lock); [ 915.568747][T27893] lock(nr_neigh_list_lock); [ 915.573556][T27893] [ 915.573556][T27893] *** DEADLOCK *** [ 915.573556][T27893] [ 915.582063][T27893] 1 lock held by syz.2.7036/27893: [ 915.587450][T27893] #0: ffff88803e5ef570 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0x1039/0x2630 [ 915.597495][T27893] [ 915.597495][T27893] stack backtrace: [ 915.603574][T27893] CPU: 0 UID: 0 PID: 27893 Comm: syz.2.7036 Not tainted syzkaller #0 PREEMPT(full) [ 915.603595][T27893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 915.603606][T27893] Call Trace: [ 915.603615][T27893] [ 915.603624][T27893] dump_stack_lvl+0xe8/0x150 [ 915.603651][T27893] print_circular_bug+0x2e1/0x300 [ 915.603679][T27893] check_noncircular+0x12e/0x150 [ 915.603706][T27893] __lock_acquire+0x15a5/0x2cf0 [ 915.603737][T27893] ? nr_remove_neigh+0x25/0xe0 [ 915.603761][T27893] lock_acquire+0x106/0x350 [ 915.603781][T27893] ? nr_remove_neigh+0x25/0xe0 [ 915.603805][T27893] ? do_raw_spin_lock+0x12b/0x2f0 [ 915.603823][T27893] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 915.603839][T27893] ? nr_remove_neigh+0x25/0xe0 [ 915.603861][T27893] _raw_spin_lock_bh+0x36/0x50 [ 915.603878][T27893] ? nr_remove_neigh+0x25/0xe0 [ 915.603900][T27893] nr_remove_neigh+0x25/0xe0 [ 915.603923][T27893] nr_add_node+0x1e41/0x2630 [ 915.603947][T27893] ? nr_call_to_digi+0x126/0x1b0 [ 915.603970][T27893] nr_rt_ioctl+0xe59/0xf90 [ 915.603995][T27893] ? kasan_quarantine_put+0xbb/0x1f0 [ 915.604024][T27893] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 915.604049][T27893] ? apparmor_capable+0x126/0x170 [ 915.604068][T27893] ? capable+0x88/0xe0 [ 915.604090][T27893] ? nr_ioctl+0x1b1/0x3b0 [ 915.604109][T27893] sock_do_ioctl+0x101/0x320 [ 915.604128][T27893] ? __pfx_sock_do_ioctl+0x10/0x10 [ 915.604144][T27893] ? do_futex+0x333/0x420 [ 915.604173][T27893] sock_ioctl+0x5c6/0x7f0 [ 915.604190][T27893] ? __pfx_sock_ioctl+0x10/0x10 [ 915.604208][T27893] ? __fget_files+0x2a/0x420 [ 915.604228][T27893] ? __fget_files+0x3a0/0x420 [ 915.604248][T27893] ? __fget_files+0x2a/0x420 [ 915.604269][T27893] ? bpf_lsm_file_ioctl+0x9/0x20 [ 915.604286][T27893] ? __pfx_sock_ioctl+0x10/0x10 [ 915.604302][T27893] __se_sys_ioctl+0xfc/0x170 [ 915.604317][T27893] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 915.604334][T27893] do_syscall_64+0x15f/0xf80 [ 915.604354][T27893] ? trace_irq_disable+0x3b/0x140 [ 915.604371][T27893] ? clear_bhb_loop+0x40/0x90 [ 915.604389][T27893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 915.604405][T27893] RIP: 0033:0x7fa441d9c819 [ 915.604421][T27893] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 915.604436][T27893] RSP: 002b:00007fa442d31028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 915.604454][T27893] RAX: ffffffffffffffda RBX: 00007fa442015fa0 RCX: 00007fa441d9c819 [ 915.604467][T27893] RDX: 0000200000000180 RSI: 000000000000890b RDI: 0000000000000004 [ 915.604478][T27893] RBP: 00007fa441e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 915.604489][T27893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 915.604500][T27893] R13: 00007fa442016038 R14: 00007fa442015fa0 R15: 00007ffe6f79a0b8 [ 915.604519][T27893] [ 915.963498][T27899] netlink: 'syz.0.7038': attribute type 29 has an invalid length. [ 915.973125][T27899] netlink: 'syz.0.7038': attribute type 29 has an invalid length.