last executing test programs: 3.952183837s ago: executing program 4 (id=1518): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="600000000206050000000000000000000000000014000780080013400000050000000000000000090500010006000000050005000200000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x60}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0xfffffffe}, 0x10}, 0x94) socket$kcm(0x10, 0x2, 0x0) socket$nl_audit(0x10, 0x3, 0x9) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x4}, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000090a010400000000000000000000000d20000000090a010400000000000000000a0000090900020073797a320000000034000000140a03000000000000000000030000070900010073797a30000000000c0006400000000000000002080003400000000318000000120a"], 0xa8}, 0x1, 0x0, 0x0, 0x44810}, 0x44000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x746}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r4, 0x0, 0xc, &(0x7f0000000040)=0xfffffffc, 0x4) setsockopt$inet_int(r4, 0x0, 0x8, 0x0, 0x0) recvmmsg(r4, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/59, 0x3b}, 0xfffffff9}], 0x1, 0x45833af92e4b39ff, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x4010744d, &(0x7f0000000180)) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r5, 0x104, 0x7, 0x0, &(0x7f0000000240)) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x1, 0x1000, 0x1, 0x7ff, 0xf84, 0x3}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xf}}}, 0x24}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000005c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @void, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x3, 0x24, 0x2c, 0x66, 0x0, 0xff, 0x6, 0x0, @rand_addr=0x64010101, @empty}, @payload_conn={{{0x18, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, 0x2, 0xe, 0x0, 0x3, 0x5, 0x2, 0x0, 0x2, 0x4, 0x4, 0x4e24, 0x4e24}}}}}}}, 0x0) 2.852252467s ago: executing program 4 (id=1529): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, 0x2b, 0xb, 0x0, 0x0, {0x8}, [@typed={0x4, 0x3}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x88H'}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd}]}, 0x2c}}, 0x40) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, 0x2b, 0xb, 0x0, 0x0, {0x8}, [@typed={0x4, 0x3}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x88H'}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd}]}, 0x2c}}, 0x40) unshare(0x20000400) (async) unshare(0x20000400) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x1, 0x9}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x7, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018100000", @ANYRES32=r1, @ANYBLOB="000000000000000018100000", @ANYRES32=r2, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x7, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018100000", @ANYRES32=r1, @ANYBLOB="000000000000000018100000", @ANYRES32=r2, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r2}, 0x8) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r2}, 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xa, 0x9, 0x42, 0x8, 0xa00, r1}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r3, r4}, 0xc) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r3, r4}, 0xc) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4080}, 0x44040) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)=@mpls_newroute={0x1c, 0x18, 0x101, 0x70bd2d, 0x25dfdbfc, {0x1c, 0x14, 0x0, 0x3, 0x0, 0x3, 0x2, 0xa, 0x200}}, 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x4080) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000200)={'wg0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000380)={'tunl0\x00', &(0x7f0000000240)={'tunl0\x00', r7, 0x7800, 0x7, 0x5, 0x9, {{0x10, 0x4, 0x0, 0x4, 0x40, 0x65, 0x0, 0x20, 0x4, 0x0, @multicast1, @local, {[@cipso={0x86, 0xe, 0x3, [{0x6, 0x6, "aa853d60"}, {0x5, 0x2}]}, @cipso={0x86, 0x1a, 0x3, [{0x1, 0x6, "9d68450a"}, {0x5, 0x5, "54c08f"}, {0x5, 0x9, "964d9626be1a98"}]}, @noop]}}}}}) 2.582373162s ago: executing program 2 (id=1534): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x28, 0x0, 0x0, 0xfffff024}, {0x6, 0x0, 0x0, 0x6}]}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r1) 2.456282969s ago: executing program 1 (id=1535): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = epoll_create(0x400) pipe(&(0x7f0000000000)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000500)) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0) recvmmsg(r5, &(0x7f0000003780)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4076, 0xfec}], 0x1}, 0x2}], 0x1, 0x40010100, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0xa0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0xa0}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0xb4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @local}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xb4}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000500)={'tunl0\x00', 0x0}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r7, 0x84, 0x78, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x3, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x16}}]}}}]}, 0x3c}, 0x1, 0x2}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) getsockopt$inet6_tcp_buf(r8, 0x6, 0x1a, 0x0, &(0x7f00000001c0)) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="300000004a00010025bd7000fcdbdf250a008000", @ANYRES32=0x0, @ANYBLOB="0100000014000100ff"], 0x30}}, 0x40080) 2.327646999s ago: executing program 1 (id=1537): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4d}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYRES32=r3], 0x44}}, 0x20008040) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r9, r9}, &(0x7f0000000600), &(0x7f0000000640)=r8}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000080000000003500000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000001940000000c62cdcd440000000000000095"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x4d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x40}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) r12 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r12}, 0x10) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r13, &(0x7f0000000180), 0x40010) 2.26458501s ago: executing program 2 (id=1538): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000100), &(0x7f0000000140)=0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r0], 0x24}}, 0x0) 2.262941602s ago: executing program 4 (id=1539): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(r3, &(0x7f0000000080)="29000000140005b7ff000000040860eb01cb02fcb2e4e6589b3e0ed7283f14b912685e684c42b9eeb9", 0x29) r4 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r1) sendmsg$NFC_CMD_LLC_SET_PARAMS(r1, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="150601010000ffdbdf251000000005000f003100000008000100", @ANYRES32=0x0, @ANYBLOB="050010004b"], 0x2c}, 0x1, 0x0, 0x0, 0x20044000}, 0x2000888c) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x4c}, {0x6}]}, 0x10) 2.262370664s ago: executing program 3 (id=1540): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x7, 0x0, 0xfffffffc}, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001440)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x18) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x41}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000180)="6a0c7d479e982bba0e2f82cf2b7e", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) listen(0xffffffffffffffff, 0x4) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01}, 0x810) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x20, 0x19, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x440d5}, 0x840) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r1, &(0x7f0000001740)=[{{0x0, 0x500, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1}}], 0x4000210, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x0, 0x0, 0x0, 0x8, 0xa3, &(0x7f0000001c40)=""/163, 0x0, 0x76, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) 2.006837486s ago: executing program 4 (id=1541): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0xb, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x9a}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4e}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYRESHEX=r0], 0xcc}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f0000000180)=[{0x3, 0x1, {0x0, 0x0, 0x4}, {0x0, 0x0, 0x2}, 0x1, 0x2}, {0x1, 0x1, {0x0, 0xf0, 0x1}, {0x2, 0x0, 0x2}, 0xfe}], 0x40) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r3, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) syz_emit_ethernet(0x3a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0208004500002c0000000000069078ac1414bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6c02000500000000004fa500"], 0x0) 1.961355138s ago: executing program 2 (id=1542): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14) ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0x941c, 0x0) socketpair(0x18, 0x3, 0x101, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000140), 0xffffffffffffffff) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000200)={'wg0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000240)={'syztnl2\x00', r2, 0x2f, 0xb, 0x3, 0x2, 0x38, @private2, @private2, 0x7820, 0x40, 0xf1, 0x5}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'ip_vti0\x00', &(0x7f0000000300)={'gre0\x00', r2, 0x8, 0x40, 0x1, 0x10000, {{0x14, 0x4, 0x3, 0x11, 0x50, 0x64, 0x0, 0x5, 0x29, 0x0, @multicast2, @multicast1, {[@generic={0x44, 0x8, "57ce3a074e93"}, @timestamp_addr={0x44, 0x14, 0x80, 0x1, 0x5, [{@rand_addr=0x64010101, 0x8001}, {@dev={0xac, 0x14, 0x14, 0x12}, 0x2}]}, @ssrr={0x89, 0x13, 0xf0, [@rand_addr=0x64010101, @multicast2, @dev={0xac, 0x14, 0x14, 0x20}, @loopback]}, @rr={0x7, 0xb, 0x7d, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) getpeername$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000400)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000440)={'wg2\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r4, &(0x7f0000000f40)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000480)={0xa48, r5, 0x100, 0x70bd29, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x138, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r2}, {0x100, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x471}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2c2}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r2}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb51}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8, 0x1, r9}, {0x88, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r2}, {0x1ac, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0x220, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xb9}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}]}}, {{0x8, 0x1, r2}, {0x1e8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x534e}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x50}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}]}}]}, 0xa48}, 0x1, 0x0, 0x0, 0x4000}, 0x80d0) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000fc0), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(r4, &(0x7f0000001100)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x64, r12, 0x204, 0x3cbc, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x213}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x30e}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x4048014}, 0x20000000) setsockopt$MRT_DONE(r3, 0x0, 0xc9, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000001180)={'wg2\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000011c0)={'batadv0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f00000015c0)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001580)={&(0x7f0000001200)={0x368, r5, 0x4, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r6}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x1, 0x4, 0x9, 0x9}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r10}, {0x12c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xa}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}]}}, {{0x8, 0x1, r2}, {0x194, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r15}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xa0a4}}}]}}]}, 0x368}, 0x1, 0x0, 0x0, 0x840}, 0x8880) recvfrom$l2tp(r3, &(0x7f0000001600)=""/225, 0xe1, 0x3, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000001700), r4) r16 = syz_genetlink_get_family_id$wireguard(&(0x7f0000001780), r4) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000002580)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002540)={&(0x7f00000017c0)={0xd60, r16, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_PEERS={0xd44, 0x8, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @empty}}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x38, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xfff}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}, {0x170, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x8, @dev={0xfe, 0x80, '\x00', 0x20}}}, @WGPEER_A_ALLOWEDIPS={0x124, 0x9, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x39}}, {0x5, 0x3, 0x1}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x43c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x1b8, 0x9, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0x4}, {0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "8a37591cf009f84f7ac92b0414d9ffc35d3ab4cff471219fb27f5302ceddcb19"}, @WGPEER_A_ALLOWEDIPS={0x1bc, 0x9, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x34}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x44}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "8872704a7d2224f60c777c9d32ff1a07afc9c556c9356bf6a4c2795c73fcd62e"}, @WGPEER_A_ALLOWEDIPS={0x2c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}]}, {0x508, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x49c, 0x9, 0x0, 0x1, [{0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x29}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x148, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x39}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2c}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2d}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2a}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xb}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x4, @empty, 0x6}}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "fc0aa5a69a86195dba46995c9dcfe383f8dab0830a420b593b9daf552591f46b"}]}, {0x24, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}}]}, {0x148, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0xf0, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x9}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x39}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x5, @mcast2, 0xfff}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "495f6447bc6fc5cb11648c92ec8cdc064dfad82e128f38181205bf244c5492d1"}]}, {0x9c, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x67e}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @broadcast}}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x8, @dev={0xfe, 0x80, '\x00', 0x41}}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0xff, @empty, 0x81}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "e00491a849108d3783b1480bbcdc2cda363aa35cb196ba69fa6f26b415bec376"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}]}, 0xd60}, 0x1, 0x0, 0x0, 0x4000}, 0x10) r17 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000025c0)={0x1b, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x4, '\x00', r10, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000026c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000002640), &(0x7f0000002680)}, 0x20) r19 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002740)=@generic={&(0x7f0000002700)='./file0\x00', 0x0, 0x8}, 0x18) r20 = bpf$MAP_CREATE(0x0, &(0x7f0000002780)=@bloom_filter={0x1e, 0x6d5, 0x1000, 0x5, 0x10, 0x1, 0x5, '\x00', r14, 0xffffffffffffffff, 0x3, 0x1, 0x2, 0x5}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002e40)={0x11, 0x26, &(0x7f00000028c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x45}, {{0x18, 0x1, 0x1, 0x0, r17}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r18}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_fd={0x18, 0x1, 0x1, 0x0, r19}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r20}}, @call={0x85, 0x0, 0x0, 0x5f}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x7}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xbe416f7dba90bb51}}}, &(0x7f0000002a00)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x7c, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002bc0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000002c00)={0x2, 0xf, 0x0, 0x120}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000002e00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x28e7}, 0x94) 1.484550704s ago: executing program 1 (id=1544): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYRESHEX], 0x0, 0x32}, 0x28) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x20, 0x0, 0x7, 0x201, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)={0x20, 0x3, 0x7, 0x187a67a68afe9213, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x40048c0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000826bd7000ffdbdf250300000038000680050002000d000000060001000a000000080003000a010181060005004e24000014000400fe8000000000000000000000000089b3c70002ec01000000"], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x800) 1.483929154s ago: executing program 0 (id=1545): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@bloom_filter={0x1e, 0x4789, 0x9, 0x1, 0x10081, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x1, 0xf}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, &(0x7f00000002c0)}, 0x20) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080040000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x31) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000000400007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70400000000000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f2800800180009ac0f"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x64, 0x13, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x4000) r4 = socket(0x10, 0x3, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x4d0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000008c0)=r6, 0x4) (async) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff00", 0x44}], 0x1) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(r4, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=@gettclass={0x24, 0x2a, 0x700, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x3, 0x4}, {0xb, 0x2}, {0xe}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x44081) (async) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021200011800e000100636f6e6e6c696d69740000000c00028008000140fffffff73c0000000c0a01010000000000000000070400000900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002"], 0xe0}}, 0x0) (async) close(r7) (async) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000320081184e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a80016000400014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7ce", 0x6c}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newsa={0x13c, 0x10, 0x713, 0x70bd2d, 0x0, {{@in=@broadcast, @in=@loopback, 0x0, 0x7, 0x0, 0x0, 0xa, 0x0, 0x80}, {@in=@local, 0x0, 0x3c}, @in6=@private1, {0x0, 0xfffffffffffffffe, 0x7, 0x100000}, {0x0, 0x0, 0xfffffffffffffff5}, {0x0, 0x0, 0x8}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0x4c, 0x14, {{'hmac(md5)\x00'}, 0x0, 0x40}}]}, 0x13c}}, 0x0) getsockopt$inet6_int(r4, 0x29, 0x9, &(0x7f0000000140), &(0x7f0000000180)=0x4) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) socket$kcm(0x11, 0x3, 0x0) socket$kcm(0x10, 0x3, 0x10) (async) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f00000001c0)={'filter\x00', 0x4}, 0x68) 1.435093651s ago: executing program 2 (id=1546): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000003240)) (async) socket$nl_generic(0x10, 0x3, 0x10) 1.404145947s ago: executing program 1 (id=1547): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000094000a0a0101000000000000000002000000"], 0x14}, 0x1, 0x0, 0x0, 0x44800}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="38010000000101040000000000000000020000002c0001801400018008000100ac14143208000200ac1414000c00028005000100000000000600034000020000240002801400018008000100e000000108000200e00000010c000280050001000000000008000740"], 0x138}}, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x32}}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x4}]}, 0x68}}, 0x0) 1.3602592s ago: executing program 3 (id=1548): r0 = socket$alg(0x26, 0x5, 0x0) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000003c0)='dctcp-reno\x00', 0xb) setsockopt$sock_int(r1, 0x1, 0x1, &(0x7f0000000200), 0x4) (async) getsockopt$inet_mreqn(r1, 0x0, 0x20, 0x0, 0x0) (async) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r2 = accept4(r0, 0x0, 0x0, 0x800) setsockopt$RDS_RECVERR(0xffffffffffffffff, 0x114, 0x5, &(0x7f0000000080), 0x4) (async) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000006cc0)={0x0, 0x0, &(0x7f0000006c80)={&(0x7f0000000380)=ANY=[@ANYBLOB="50010000", @ANYRES16=0x0, @ANYBLOB="000325bd7000fbdbdf254a000000080001001700000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x14068800}, 0x1) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x1}, {0x5, 0x2}, {0xd, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) (async) recvfrom$rose(r2, &(0x7f0000000300)=""/60, 0x3c, 0x2043, &(0x7f0000000340)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, 0x6, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x40) (async) r7 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=@newqdisc={0x98, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r8, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100], [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x4]}}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x0, 0x5, 0x4}]}}]}, 0x98}}, 0x0) (async) getpeername$packet(r7, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000002c0)=0x14) (async) socket(0x27, 0x1, 0x87) (async) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={@dev={0xfe, 0x80, '\x00', 0x35}, @dev={0xfe, 0x80, '\x00', 0x30}, @loopback, 0x80000001, 0x2b7, 0x858b, 0x500, 0x4, 0x80300000, r8}) (async) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 1.284626912s ago: executing program 1 (id=1549): syz_emit_ethernet(0x86, &(0x7f0000001180)=ANY=[@ANYBLOB="ffffffffffff0180c23e2510732ef56bd76053b3ef140543bc000d000800450000140000000000889078ac1e0001ac1414aa00000000006490780200000000000000100000008908981864d689ac43445c1c26e95299e94ccad8794114ae3061e328af342f99e4d0ce57abcb41f7f5c8ab8f63dd38a1bb3ce5a4bbb68671a28911b403ba187187dc98ca816f77013a778b6c40b49ea94e97e6771e9482abb91f920a1cf5c261958ebaef022374eaff19744ce0422eae39f2f403c7599fe604a308e05e5f31fa54659d20bc52f1198b7115e03c1c89bd669fc3901304e743979a543191081c35ebd62ff204e89d67d1"], 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/3344], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe37}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000080)="b907ef23f66a54f05c13e5f0888e", 0x0, 0x0, 0x18000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r1 = socket(0x1, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x840000000002, 0x3, 0x100) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e1f, @empty}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000080)={0x4001, 0x1, 0x0, 0x9}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@ipv6_getaddr={0x18, 0x16, 0x1, 0x70bd2b, 0x25dfdbfe, {0xa, 0x0, 0x4, 0xfd}}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x896) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) recvmsg(r1, &(0x7f0000003780)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x86, &(0x7f0000001180)=ANY=[@ANYBLOB="ffffffffffff0180c23e2510732ef56bd76053b3ef140543bc000d000800450000140000000000889078ac1e0001ac1414aa00000000006490780200000000000000100000008908981864d689ac43445c1c26e95299e94ccad8794114ae3061e328af342f99e4d0ce57abcb41f7f5c8ab8f63dd38a1bb3ce5a4bbb68671a28911b403ba187187dc98ca816f77013a778b6c40b49ea94e97e6771e9482abb91f920a1cf5c261958ebaef022374eaff19744ce0422eae39f2f403c7599fe604a308e05e5f31fa54659d20bc52f1198b7115e03c1c89bd669fc3901304e743979a543191081c35ebd62ff204e89d67d1"], 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/3344], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe37}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000080)="b907ef23f66a54f05c13e5f0888e", 0x0, 0x0, 0x18000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) socket(0x1, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) (async) socket(0x840000000002, 0x3, 0x100) (async) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e1f, @empty}, 0x10) (async) sendmmsg$inet(r3, &(0x7f0000005240), 0x4000095, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000080)={0x4001, 0x1, 0x0, 0x9}, 0x10) (async) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@ipv6_getaddr={0x18, 0x16, 0x1, 0x70bd2b, 0x25dfdbfe, {0xa, 0x0, 0x4, 0xfd}}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x896) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) (async) recvmsg(r1, &(0x7f0000003780)={0x0, 0x0, 0x0}, 0x0) (async) 1.281596765s ago: executing program 2 (id=1550): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="88000000", @ANYRES16=r1, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="6c0023800600030057000000060004"], 0x88}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="0cd800003e000701feffffff00000000017c0000040042800c00354adbf4746c0035c71f1d01800600060090390000100002800c00168008000f00884727"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, 0x8, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x51}, 0x1, 0x0, 0x0, 0x4}, 0x10) 1.248548676s ago: executing program 0 (id=1551): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8}]}, 0x24}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYRES32, @ANYBLOB="2f0000000400120004000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@ipv4_newrule={0x30, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_IIFNAME={0x14, 0x3, 'vxcan1\x00'}]}, 0x30}}, 0x0) epoll_create(0x3) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), r1) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r5, &(0x7f0000000e40)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x400, @loopback={0xff00000000000000}, 0x101}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000000)="8000102e7577d401", 0x8}], 0x1}}], 0x1, 0x4000880) sendto$inet6(r5, 0x0, 0x0, 0x845, &(0x7f0000000240)={0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8001}, 0x1c) write(r0, &(0x7f0000000080)="81e49166ee16c4f25c012198859d1d45ed7c3312e915eaa63b6f9e6fd3e4174da181586bfeb1561a266fe97c8fc16035ac87205a47a17779e6514b688f07f96e0b44cfd61b74fd8cf7aa92a20608ecc72feb859010ca2ee7ae39929fda04faef9672901cad57241a741b46b8e0f11234e8ab163013531bffa7f7e6fe34a04cbf9e", 0x81) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x40003, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0x1, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0x1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x12, 0x1f, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @map_fd={0x18, 0x2, 0x1, 0x0, r6}, @alu={0x7, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffe0, 0x4}, @call={0x85, 0x0, 0x0, 0x36}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r9}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r11}}]}, &(0x7f0000000100)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.200132204s ago: executing program 3 (id=1552): r0 = socket$inet6(0xa, 0x3, 0x5) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$igmp(0x2, 0x3, 0x2) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) (async) pipe(&(0x7f0000000040)) (async) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r1], 0x20}}, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) (async) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) (async) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0xc040) 1.023911057s ago: executing program 0 (id=1553): r0 = socket$inet6(0xa, 0x3, 0xff) r1 = socket(0x2b, 0x80801, 0x1) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r3, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r3], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001080)=@alg={0xe0, 0x10, 0x1, 0x70bd2d, 0x25dfdbfd, {{'xts(twofish)\x00'}, '\x00', '\x00', 0x400, 0x2000}}, 0xe0}, 0x1, 0x0, 0x0, 0x44}, 0x80) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6000000010000104a0518fd50000000000000000", @ANYRES32=0x0, @ANYBLOB="096b0200000000002c00128009000100626f6e64000000001c00028006001900ff0300000800090001000000080007000300000014003500626f6e6430"], 0x60}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) unshare(0x22020600) r8 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$inet6_udp_int(r8, 0x11, 0xb, &(0x7f00000000c0)=0x7ffffffc, 0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000004f40)={'gre0\x00', &(0x7f0000000240)={'gretap0\x00', r3, 0x1, 0x20, 0x0, 0x4, {{0x34, 0x4, 0x1, 0x8, 0xd0, 0x67, 0x0, 0xdb, 0x4, 0x0, @empty, @empty, {[@timestamp_prespec={0x44, 0x44, 0x58, 0x3, 0xa, [{@local, 0x2f}, {@multicast1, 0x6}, {@local, 0x7fff}, {@empty, 0x80000000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x47ed}, {@remote, 0x2}, {@broadcast, 0xa}, {@broadcast, 0xfffffffa}]}, @end, @timestamp_prespec={0x44, 0x24, 0x4c, 0x3, 0x6, [{@empty, 0x7f}, {@empty, 0x7}, {@empty, 0x43}, {@multicast1, 0x6}]}, @timestamp_addr={0x44, 0x3c, 0xc3, 0x1, 0xf, [{@multicast2, 0x8001}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x39ba}, {@loopback, 0x10001}, {@dev={0xac, 0x14, 0x14, 0x19}, 0x80000000}, {@multicast1, 0x1800}, {@multicast2, 0xffffffff}, {@private=0xa010100, 0xc0000}]}, @noop, @noop, @timestamp={0x44, 0xc, 0x64, 0x0, 0x6, [0xff0d, 0x8]}, @timestamp={0x44, 0x8, 0xfa, 0x0, 0x4, [0x9]}, @noop]}}}}}) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x140, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'wg1\x00', {}, {0x222cecdb0fb5a62a}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x0, "d176"}}, @common=@unspec=@state={{0x28}, {0xfffffffd}}]}, @unspec=@CT0={0x48}}, {{@ipv6={@local, @private2, [], [0xff], 'veth1_to_hsr\x00', 'dummy0\x00', {}, {}, 0x88}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f0000000040)={0xa, 0xf5, 0x40000, @dev}, 0x1c, &(0x7f00000012c0)=[{&(0x7f0000000100)="daffc38b69363a52fe8000480000000021845a91f64fddcf51f405595faeea41974e5559ea91f7", 0x27}, {&(0x7f0000000200)="014ada5fb8892cf7f76a112c2c545dc1", 0x10}], 0x2}, 0xb00) 1.023450663s ago: executing program 3 (id=1554): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="010028bd7000000000006600000008000300", @ANYRES32=r3, @ANYBLOB="0800b70099000000"], 0x24}, 0x1, 0x0, 0x0, 0x10000}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000001701000003000000669b86e900000000180000"], 0x30, 0x20000000}], 0x1, 0xc050) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f00000010c0)=ANY=[@ANYBLOB="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"], 0xaf0}, 0x1, 0x0, 0x0, 0x20000001}, 0x8000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000000000008508000002000000850000005a000000950000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x48}, 0x94) 759.414722ms ago: executing program 4 (id=1555): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe000000009c080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x4000000, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 712.236705ms ago: executing program 1 (id=1556): r0 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r0, &(0x7f0000000580)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0xee3, @dev={0xfe, 0x80, '\x00', 0x23}, 0xc, 0xfffffffc}, 0x80, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000440)='\b', 0x1}], 0x2}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r1 = socket(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000001c40)=0x4) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000100)=0xffff0080) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000000)=0x8) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000080)="88b0bae0e826425499f4d4ddb99bbe211a", 0x11}, 0x1, 0x0, 0x0, 0x8004}, 0x24044044) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="e0000000", @ANYRES16=r4, @ANYBLOB="0100000000000000000003000000080001"], 0xe0}}, 0x0) r6 = socket(0x28, 0x5, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r7, &(0x7f0000000440), 0x10) bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x80, 0x20, 0x8, 0x2, {{0x47, 0x4, 0x1, 0x8, 0x11c, 0x68, 0x0, 0x9, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@ssrr={0x89, 0x7, 0x51, [@empty]}, @noop, @cipso={0x86, 0x65, 0x1, [{0x5, 0xd, "7e0d4edd7ff9c6fbaccea5"}, {0x1, 0x3, "b4"}, {0x0, 0x12, "ce1372b71c6978d0546012f0965492c9"}, {0x2, 0xf, "9d7f654e047faffc6ecb48c0d8"}, {0x5, 0x7, "106e759ccc"}, {0x5, 0xa, "8684b1b7ee80b2bb"}, {0x6, 0xb, "51e9c746c45f44325e"}, {0x7, 0x12, "3073da82ff4d8427d2bb9582ab72611f"}]}, @timestamp_addr={0x44, 0x3c, 0xe5, 0x1, 0xd, [{@local, 0x6f2}, {@local, 0x6}, {@empty, 0x700000}, {@local, 0xa}, {@multicast2, 0x5}, {@local, 0x1ff}, {@remote, 0x2}]}, @noop, @ssrr={0x89, 0x17, 0xf6, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty]}, @timestamp={0x44, 0x24, 0xc5, 0x0, 0x0, [0x0, 0xff1, 0x10, 0x2, 0x9, 0x5, 0x6, 0xfff]}, @ssrr={0x89, 0x7, 0x81, [@empty]}, @end, @timestamp={0x44, 0x18, 0xe9, 0x0, 0x7, [0x4, 0x0, 0x5, 0x5, 0x9]}]}}}}}) write(r1, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000100001000200"/20, @ANYRES32=0x0, @ANYBLOB="000000000301040008001b0000000000"], 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) socket$unix(0x1, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$kcm(0x2, 0xa, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) 710.904223ms ago: executing program 2 (id=1557): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="a00000001a00010000000000000000001c140000000000f5"], 0xa0}}, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$inet_smc(0x2b, 0x1, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000001c0)) socket(0x11, 0x3, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e921", 0x38}], 0x1}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4c001) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r4, &(0x7f00000000c0), 0x9) sendfile(r4, r3, 0x0, 0x10000) socket(0x2a, 0x800, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x8, &(0x7f0000001640)=ANY=[@ANYRES32=r4], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$IPSET_CMD_TEST(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="ac0000000b060101000000000000000005000002300007800c001940000000000000000808000b40ffffc59e1800028014000240fe8000000000000000000000000000395c000880100007800c00184000000000000000050c00078008000940fffff0010c000780060004404e210000100007800900120073797a3200000000100007800900120073797a3000000000100007800a001100aaaaaaaaaaaa00000900020073797a3000000000"], 0xac}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) 710.165815ms ago: executing program 3 (id=1558): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) (async, rerun: 64) r4 = accept4(r3, 0x0, 0x0, 0x80000) (rerun: 64) setsockopt$inet6_udp_int(r1, 0x11, 0xa, &(0x7f00000002c0)=0x101, 0x4) (async) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$inet6(r5, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000300}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000700)="260d797bf74a5966a55eb61e4dadecabc8132d312212b03e64845709f0aaab48fc399c9845b871e7dab2e34742e01f7aeb5403d0202bdbf2fb216034a128b57d69fb30240c53f1252c46786f5405fb38695057002e99", 0x56}, {&(0x7f0000000580)="c2402b64faa0309142d75e4dc5467025320596e7814204bcb5b0781589601fecd9f8683665d68de14072cc733ba4a1bdb3d913f86ab8b46b49b77cd6313a7432364aac271d9409ab221b5da8a9d8f9347d2e2e542a14c1", 0x57}, {&(0x7f0000000600)="2db6ad65bfdd4ca1938df13cf86fd49915da541a7ee9d70198b5fa85c3d2128fc84a9daeafad8d35bfb3989f8d15242f8cacec11b6f26b338b56d6775b005a0abc245a5e7c8680001a3917649470199312024f3f9cb5d47718d15fc3ecd7ab53ed0adce8f20355fef20b476576402affb3262876f46fff761a6f377a52f2ab07b6aa", 0x82}], 0x3}, 0xff03}], 0x2, 0x4008000) (async) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000200), 0x4) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c00028005000100000000000800074000000000180006"], 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x3a00, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000800074000000000180006801400040020010000000000000000000000000001"], 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x4000894) (async) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000001c0)={'veth1_to_batadv\x00', @broadcast}) (async, rerun: 32) socket(0x10, 0x803, 0x0) (async, rerun: 32) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) (async, rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYRES64=r1], 0x0, 0x2a, 0x0, 0x1}, 0x28) (async, rerun: 64) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x11, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 560.498871ms ago: executing program 4 (id=1559): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000ec0000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0xffffffffffffffff, 0x3e, 0x9, 0x2}, 0x20) r3 = socket(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=@newtaction={0x18, 0x31, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x10, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 495.00521ms ago: executing program 0 (id=1560): socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r0 = socket$kcm(0x10, 0x2, 0x10) (rerun: 32) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) (async, rerun: 32) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001640)=""/4096, 0x103f}], 0x1, 0x0, 0xffffffffffffff13}, 0x0) (rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000280)=[{0x20}]}, 0x10) (async) r2 = epoll_create1(0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) getsockname(0xffffffffffffffff, 0x0, 0x0) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) r5 = socket$inet(0x2, 0x4000000805, 0x0) sendmmsg(r5, &(0x7f0000000180)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local, 0x2}, 0x80, &(0x7f0000000200)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x18}}], 0x2, 0x844) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x2, 0x6}, 0x4) (async, rerun: 32) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40}, {0x6}]}, 0x10) (async, rerun: 32) syz_emit_ethernet(0x46, &(0x7f0000000180)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x11, 0xe, 0xc18, 0x5932}}}}}}, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) (async) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r2, &(0x7f0000000000)={0xa0000001}) (async) unshare(0x60600) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x38) (async) ppoll(&(0x7f0000000200)=[{r7, 0x1}], 0x1, 0x0, 0x0, 0x3) socket$nl_rdma(0x10, 0x3, 0x14) syz_emit_ethernet(0x2a, 0x0, 0x0) (async) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={0x0}}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) (async) epoll_wait(r2, &(0x7f0000000040)=[{}], 0x1, 0x400) 328.397066ms ago: executing program 3 (id=1561): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="c39203100400000000008900000008000300", @ANYRES32=r2, @ANYBLOB="10001d800400008004000180857b44771dfa35b47775c899410080"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) recvmsg(r3, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="fc", 0x1}], 0x1}, 0x41) recvmsg(r3, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2002) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, &(0x7f00000000c0)={'dummy0\x00', @random="0130210100ff"}) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xe, 0x4, 0x4, 0x1a}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000008000000000000000100008500000097000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000000850000000600000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r7}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="1709000000000000000001000000050007000000000008000900fffffffe060002000000000008000a000100000008001800ac1414aa080019"], 0x58}}, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb001480080007"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500000000414000125bd7000fedbdf25087bbe819583f1ffbe00010002000000080001000000010000000800010000000000080001000100000008000100"/80], 0x50}, 0x1, 0x0, 0x0, 0xc001}, 0x40010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$sock(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000003c0)="6160053b80e1137950e0000000000000000c1194", 0x14}, {&(0x7f0000000900)="287e7aa2c54faa6513fa48851f129d9c7ecced3d91f00c016b373c60e67a4dcaf56fa7d327b3dfec7e7bba5d4b10e5e12ded9c91a6bdff81f02c0c521d", 0x3d}, {&(0x7f0000000740)="c06808810a35b9bececdc5c46e3471459835d6b4d9448f9d18504a5a6ee4dac370efb8fcda57014236b2eee226c35d1915c99a7ea1c11b78616dbbf66eaf26d602ac281b362b80d57c0b9942493fdd0ea78ebb51560f50c01560d32bad55cd7364dabc2cac5bfd11ad65408ea7c61edc4daa5e3e750212a653056de69398894222d91ca357715ada659f72cd13e6a16aec7a1b02876ff096fb251303998bd6ffc7d9d8837c699aac04", 0xa9}, {&(0x7f0000000a00)="be72f7a71232b252418ec8e18a896bf99c8889d4a446d028f6d3d6a6f9eafc1aa442f530f286cb1d8ad0c312c3b547170f980c065fd113b5a957fd7c3399a4c9e1d9c1c5780ed6d03b6583a4053e7da345048fc8911631e2665d7ace4168b18abc61ac05ab816b755fdeea41e84c28ae358945aab7b48d653b6e72dc717a0b22ea8b0c1a9de70aa5e6ac2a0c929bfef2e8bdede2fd3db3e9164a1333b01014d59d86f3bcb813efef1109118cebeaf5c33c890b4490fa016b8391ee0a502b4482a5b38b86eafcc218abc325878946b1d7d1ac8ec416443fb65a5037d4c8acd7ff4647cfbc7ea377c5d83546fc3247b7b32287", 0xf2}, {&(0x7f0000000c00)="18bf6387e123745af3c585da92d27fc14850816a90c186ddb2660e3e86a275e6d5be808ab49d757a6d4600cb4c532d68865eabf54fa8faee21efe27ce7e0c7b5ab099d3f4b7f78e4f37dbeeba174262452be86e78faf220273090b84385b284695ced9ef41a997056644b9232717081965ae2fd6b79f99864e7a45b55b9ed584262330c50943fe3b31d248c0d226c476a5f11f56486fde13aedaf29c3755028a44ba3159c599a9884df94903cd9f1bcf99ce5aa716cb035fbc63318f6230b425c094f924", 0xc4}], 0x5, &(0x7f00000005c0)=[@timestamping={{0x14, 0x1, 0x25, 0x9}}], 0x18}, 0x40) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) 256.249089ms ago: executing program 0 (id=1562): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000048000000030a01010000000000000000020000000900010073797a30000000000900030073797a3200000000080007006e617400140004800800014000000001080002"], 0xa4}}, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000048000000030a01010000000000000000020000000900010073797a30000000000900030073797a3200000000080007006e617400140004800800014000000001080002"], 0xa4}}, 0x0) (async) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) (async) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}, 0x5}, 0x1c) (async) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) (async) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) (async) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x0) (async) 0s ago: executing program 0 (id=1563): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_ALL_TARGETS={0x8}, @IFLA_BOND_PRIMARY={0x8}, @IFLA_BOND_MODE={0x5, 0x1, 0x5}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) r1 = socket(0x2a, 0x2, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @local}, @in={0x2, 0x0, @remote}, @in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e21, @loopback}], 0x12) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@ipv4_delrule={0x24, 0x21, 0x105, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, [@FRA_GENERIC_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x1}]}, 0x24}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) kernel console output (not intermixed with test programs): 0x3b0 [ 140.553825][ T7483] ? lockdep_hardirqs_on+0x9c/0x150 [ 140.553850][ T7483] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.553867][ T7483] ? clear_bhb_loop+0x60/0xb0 [ 140.553889][ T7483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.553905][ T7483] RIP: 0033:0x7f5d6a98eb69 [ 140.553921][ T7483] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.553936][ T7483] RSP: 002b:00007f5d6b832038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 140.553956][ T7483] RAX: ffffffffffffffda RBX: 00007f5d6abb6080 RCX: 00007f5d6a98eb69 [ 140.553969][ T7483] RDX: 0000000000004010 RSI: 0000200000000280 RDI: 000000000000000b [ 140.553980][ T7483] RBP: 00007f5d6b832090 R08: 0000000000000000 R09: 0000000000000000 [ 140.553991][ T7483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.554001][ T7483] R13: 0000000000000000 R14: 00007f5d6abb6080 R15: 00007ffe730b9bf8 [ 140.554027][ T7483] [ 141.286476][ T7503] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 141.776331][ T7510] lo speed is unknown, defaulting to 1000 [ 142.025707][ T7523] FAULT_INJECTION: forcing a failure. [ 142.025707][ T7523] name failslab, interval 1, probability 0, space 0, times 0 [ 142.084160][ T7523] CPU: 0 UID: 0 PID: 7523 Comm: syz.1.426 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 142.084199][ T7523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 142.084212][ T7523] Call Trace: [ 142.084221][ T7523] [ 142.084230][ T7523] dump_stack_lvl+0x189/0x250 [ 142.084259][ T7523] ? __pfx____ratelimit+0x10/0x10 [ 142.084290][ T7523] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.084312][ T7523] ? __pfx__printk+0x10/0x10 [ 142.084342][ T7523] ? __pfx___might_resched+0x10/0x10 [ 142.084375][ T7523] ? fs_reclaim_acquire+0x7d/0x100 [ 142.084403][ T7523] should_fail_ex+0x414/0x560 [ 142.084443][ T7523] ? rhashtable_init_noprof+0x4ee/0xbb0 [ 142.084469][ T7523] should_failslab+0xa8/0x100 [ 142.084491][ T7523] __kvmalloc_node_noprof+0x161/0x5f0 [ 142.084526][ T7523] ? rhashtable_init_noprof+0x4ee/0xbb0 [ 142.084559][ T7523] rhashtable_init_noprof+0x4ee/0xbb0 [ 142.084594][ T7523] tcf_proto_create+0x248/0x330 [ 142.084623][ T7523] tc_new_tfilter+0x11aa/0x15b0 [ 142.084674][ T7523] ? __pfx_tc_new_tfilter+0x10/0x10 [ 142.084734][ T7523] ? __pfx_tc_new_tfilter+0x10/0x10 [ 142.084755][ T7523] rtnetlink_rcv_msg+0x7cc/0xb70 [ 142.084792][ T7523] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 142.084823][ T7523] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 142.084852][ T7523] ? ref_tracker_free+0x63a/0x7d0 [ 142.084875][ T7523] ? __asan_memcpy+0x40/0x70 [ 142.084901][ T7523] ? __pfx_ref_tracker_free+0x10/0x10 [ 142.084935][ T7523] netlink_rcv_skb+0x205/0x470 [ 142.084969][ T7523] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 142.085003][ T7523] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 142.085048][ T7523] ? netlink_deliver_tap+0x2e/0x1b0 [ 142.085089][ T7523] netlink_unicast+0x82c/0x9e0 [ 142.085127][ T7523] ? __pfx_netlink_unicast+0x10/0x10 [ 142.085163][ T7523] ? netlink_sendmsg+0x642/0xb30 [ 142.085199][ T7523] ? skb_put+0x11b/0x210 [ 142.085224][ T7523] netlink_sendmsg+0x805/0xb30 [ 142.085267][ T7523] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.085304][ T7523] ? aa_sock_msg_perm+0x94/0x160 [ 142.085335][ T7523] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 142.085359][ T7523] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.085393][ T7523] __sock_sendmsg+0x219/0x270 [ 142.085425][ T7523] ____sys_sendmsg+0x505/0x830 [ 142.085454][ T7523] ? __pfx_____sys_sendmsg+0x10/0x10 [ 142.085487][ T7523] ? import_iovec+0x74/0xa0 [ 142.085521][ T7523] ___sys_sendmsg+0x21f/0x2a0 [ 142.085547][ T7523] ? __pfx____sys_sendmsg+0x10/0x10 [ 142.085611][ T7523] ? __fget_files+0x2a/0x420 [ 142.085631][ T7523] ? __fget_files+0x3a0/0x420 [ 142.085662][ T7523] __x64_sys_sendmsg+0x19b/0x260 [ 142.085687][ T7523] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 142.085718][ T7523] ? __pfx_ksys_write+0x10/0x10 [ 142.085746][ T7523] ? rcu_is_watching+0x15/0xb0 [ 142.085785][ T7523] ? do_syscall_64+0xbe/0x3b0 [ 142.085821][ T7523] do_syscall_64+0xfa/0x3b0 [ 142.085851][ T7523] ? lockdep_hardirqs_on+0x9c/0x150 [ 142.085881][ T7523] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.085901][ T7523] ? clear_bhb_loop+0x60/0xb0 [ 142.085926][ T7523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.085946][ T7523] RIP: 0033:0x7f158998eb69 [ 142.085964][ T7523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.085981][ T7523] RSP: 002b:00007f158a7c6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 142.086005][ T7523] RAX: ffffffffffffffda RBX: 00007f1589bb5fa0 RCX: 00007f158998eb69 [ 142.086018][ T7523] RDX: 0000000000004010 RSI: 0000200000000280 RDI: 000000000000000b [ 142.086031][ T7523] RBP: 00007f158a7c6090 R08: 0000000000000000 R09: 0000000000000000 [ 142.086043][ T7523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.086054][ T7523] R13: 0000000000000000 R14: 00007f1589bb5fa0 R15: 00007ffc9da592b8 [ 142.086088][ T7523] [ 142.533124][ T7539] __nla_validate_parse: 11 callbacks suppressed [ 142.533147][ T7539] netlink: 24 bytes leftover after parsing attributes in process `syz.3.429'. [ 142.638566][ T7543] Bluetooth: MGMT ver 1.23 [ 142.647471][ T7543] netlink: 16 bytes leftover after parsing attributes in process `syz.1.430'. [ 142.671252][ T7539] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.429'. [ 142.810437][ T7545] netlink: 'syz.4.431': attribute type 25 has an invalid length. [ 143.336497][ T7571] macsec1: entered promiscuous mode [ 143.356809][ T7571] macsec1: entered allmulticast mode [ 143.537634][ T7578] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 143.710626][ T7581] netlink: 8 bytes leftover after parsing attributes in process `syz.1.442'. [ 143.735564][ T7581] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.744062][ T7581] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.866751][ T7592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.444'. [ 143.879130][ T7592] netlink: 'syz.1.444': attribute type 30 has an invalid length. [ 143.904331][ T7592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.444'. [ 143.921252][ T6900] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.931485][ T6900] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.946249][ T7592] netlink: 'syz.1.444': attribute type 30 has an invalid length. [ 143.946601][ T6900] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.964425][ T6900] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.026761][ T7598] netlink: 36 bytes leftover after parsing attributes in process `syz.4.445'. [ 144.075584][ T7599] macvlan0: left promiscuous mode [ 144.090119][ T7599] gretap1: left promiscuous mode [ 144.098358][ T7599] gretap1: left allmulticast mode [ 144.433317][ T7616] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 144.450173][ T7614] netlink: 200 bytes leftover after parsing attributes in process `syz.1.451'. [ 144.481507][ T7617] netlink: 4 bytes leftover after parsing attributes in process `syz.2.450'. [ 144.557228][ T7617] (unnamed net_device) (uninitialized): option mode: invalid value (254) [ 145.163352][ T7637] syz_tun: entered allmulticast mode [ 145.329185][ T7640] dvmrp1: entered allmulticast mode [ 145.482576][ T7636] syz_tun: left allmulticast mode [ 145.635569][ T7645] netlink: 8 bytes leftover after parsing attributes in process `syz.2.458'. [ 145.677546][ T7645] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 145.708937][ T7645] netlink: 'syz.2.458': attribute type 1 has an invalid length. [ 146.215504][ T7662] sch_tbf: burst 2 is lower than device lo mtu (65550) ! [ 146.293522][ T7663] sch_tbf: burst 2 is lower than device lo mtu (65550) ! [ 146.313865][ T7663] sch_tbf: burst 2 is lower than device lo mtu (65550) ! [ 146.399227][ T7671] tap0: tun_chr_ioctl cmd 35108 [ 146.570076][ T7674] lo speed is unknown, defaulting to 1000 [ 146.746136][ T7681] tipc: Started in network mode [ 146.751144][ T7681] tipc: Node identity 666aca9f31d8, cluster identity 4711 [ 146.762653][ T7681] tipc: Enabled bearer , priority 0 [ 146.789412][ T7681] syzkaller0: entered promiscuous mode [ 146.815049][ T7681] syzkaller0: entered allmulticast mode [ 146.901566][ T7694] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.990763][ T7694] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.211019][ T7684] tipc: Resetting bearer [ 147.268117][ T7702] FAULT_INJECTION: forcing a failure. [ 147.268117][ T7702] name failslab, interval 1, probability 0, space 0, times 0 [ 147.305661][ T7684] tipc: Disabling bearer [ 147.322490][ T7702] CPU: 1 UID: 0 PID: 7702 Comm: syz.2.471 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 147.322522][ T7702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 147.322535][ T7702] Call Trace: [ 147.322543][ T7702] [ 147.322553][ T7702] dump_stack_lvl+0x189/0x250 [ 147.322580][ T7702] ? __pfx____ratelimit+0x10/0x10 [ 147.322611][ T7702] ? __pfx_dump_stack_lvl+0x10/0x10 [ 147.322633][ T7702] ? __pfx__printk+0x10/0x10 [ 147.322666][ T7702] ? __pfx___might_resched+0x10/0x10 [ 147.322697][ T7702] ? fs_reclaim_acquire+0x7d/0x100 [ 147.322725][ T7702] should_fail_ex+0x414/0x560 [ 147.322765][ T7702] should_failslab+0xa8/0x100 [ 147.322788][ T7702] __kmalloc_cache_noprof+0x70/0x3d0 [ 147.322820][ T7702] ? fl_change+0x308/0x1ac0 [ 147.322846][ T7702] fl_change+0x308/0x1ac0 [ 147.322875][ T7702] ? fl_get+0x9a/0x380 [ 147.322895][ T7702] ? fl_get+0x9a/0x380 [ 147.322915][ T7702] ? fl_get+0x2f1/0x380 [ 147.322934][ T7702] ? __pfx_fl_change+0x10/0x10 [ 147.322963][ T7702] ? __pfx_fl_get+0x10/0x10 [ 147.322993][ T7702] tc_new_tfilter+0xdc7/0x15b0 [ 147.323046][ T7702] ? __pfx_tc_new_tfilter+0x10/0x10 [ 147.323106][ T7702] ? __pfx_tc_new_tfilter+0x10/0x10 [ 147.323127][ T7702] rtnetlink_rcv_msg+0x7cc/0xb70 [ 147.323158][ T7702] ? __lock_acquire+0xab9/0xd20 [ 147.323190][ T7702] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 147.323221][ T7702] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 147.323272][ T7702] netlink_rcv_skb+0x205/0x470 [ 147.323305][ T7702] ? __lock_acquire+0xab9/0xd20 [ 147.323335][ T7702] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 147.323368][ T7702] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 147.323413][ T7702] ? netlink_deliver_tap+0x2e/0x1b0 [ 147.323454][ T7702] netlink_unicast+0x82c/0x9e0 [ 147.323493][ T7702] ? __pfx_netlink_unicast+0x10/0x10 [ 147.323523][ T7702] ? netlink_sendmsg+0x642/0xb30 [ 147.323553][ T7702] ? skb_put+0x11b/0x210 [ 147.323577][ T7702] netlink_sendmsg+0x805/0xb30 [ 147.323621][ T7702] ? __pfx_netlink_sendmsg+0x10/0x10 [ 147.323657][ T7702] ? aa_sock_msg_perm+0x94/0x160 [ 147.323687][ T7702] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 147.323711][ T7702] ? __pfx_netlink_sendmsg+0x10/0x10 [ 147.323745][ T7702] __sock_sendmsg+0x219/0x270 [ 147.323777][ T7702] ____sys_sendmsg+0x505/0x830 [ 147.323806][ T7702] ? __pfx_____sys_sendmsg+0x10/0x10 [ 147.323840][ T7702] ? import_iovec+0x74/0xa0 [ 147.323874][ T7702] ___sys_sendmsg+0x21f/0x2a0 [ 147.323900][ T7702] ? __pfx____sys_sendmsg+0x10/0x10 [ 147.323971][ T7702] ? __fget_files+0x2a/0x420 [ 147.323992][ T7702] ? __fget_files+0x3a0/0x420 [ 147.324025][ T7702] __x64_sys_sendmsg+0x19b/0x260 [ 147.324051][ T7702] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 147.324086][ T7702] ? __pfx_ksys_write+0x10/0x10 [ 147.324114][ T7702] ? rcu_is_watching+0x15/0xb0 [ 147.324154][ T7702] ? do_syscall_64+0xbe/0x3b0 [ 147.324203][ T7702] do_syscall_64+0xfa/0x3b0 [ 147.324232][ T7702] ? lockdep_hardirqs_on+0x9c/0x150 [ 147.324261][ T7702] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.324298][ T7702] ? clear_bhb_loop+0x60/0xb0 [ 147.324325][ T7702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.324346][ T7702] RIP: 0033:0x7f289838eb69 [ 147.324365][ T7702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.324382][ T7702] RSP: 002b:00007f289921f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 147.324407][ T7702] RAX: ffffffffffffffda RBX: 00007f28985b6080 RCX: 00007f289838eb69 [ 147.324422][ T7702] RDX: 0000000000004010 RSI: 0000200000000280 RDI: 000000000000000b [ 147.324435][ T7702] RBP: 00007f289921f090 R08: 0000000000000000 R09: 0000000000000000 [ 147.324448][ T7702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 147.324460][ T7702] R13: 0000000000000000 R14: 00007f28985b6080 R15: 00007ffd22e13448 [ 147.324494][ T7702] [ 147.759533][ T7677] lo speed is unknown, defaulting to 1000 [ 148.686033][ T7746] __nla_validate_parse: 6 callbacks suppressed [ 148.686054][ T7746] netlink: 24 bytes leftover after parsing attributes in process `syz.0.477'. [ 149.084519][ T7750] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.477'. [ 149.657323][ T7762] netlink: 4 bytes leftover after parsing attributes in process `syz.2.481'. [ 149.878916][ T7767] tipc: Enabling of bearer rejected, failed to enable media [ 150.305062][ T7774] sctp: [Deprecated]: syz.3.484 (pid 7774) Use of int in max_burst socket option deprecated. [ 150.305062][ T7774] Use struct sctp_assoc_value instead [ 150.838114][ T7795] netlink: 36 bytes leftover after parsing attributes in process `syz.2.485'. [ 151.072160][ T7800] netlink: 4 bytes leftover after parsing attributes in process `syz.1.490'. [ 151.313441][ T7804] lo speed is unknown, defaulting to 1000 [ 151.705747][ T7816] syzkaller0: entered allmulticast mode [ 151.714339][ T7816] netlink: 28 bytes leftover after parsing attributes in process `syz.4.494'. [ 151.727556][ T7816] netlink: 8 bytes leftover after parsing attributes in process `syz.4.494'. [ 151.736527][ T7816] netlink: 4 bytes leftover after parsing attributes in process `syz.4.494'. [ 151.750596][ T7816] netlink: 'syz.4.494': attribute type 1 has an invalid length. [ 151.767543][ T7816] netlink: 10 bytes leftover after parsing attributes in process `syz.4.494'. [ 151.863179][ T7816] nbd: socks must be embedded in a SOCK_ITEM attr [ 151.910960][ T7816] block nbd0: shutting down sockets [ 151.943099][ T7820] netlink: 4 bytes leftover after parsing attributes in process `syz.3.495'. [ 152.636941][ T7844] veth1_macvtap: left promiscuous mode [ 153.949652][ T7885] tipc: Started in network mode [ 153.973684][ T7885] tipc: Node identity 36117e944cf4, cluster identity 4711 [ 154.001499][ T7885] tipc: Enabled bearer , priority 0 [ 154.047743][ T7875] tipc: Resetting bearer [ 154.289851][ T7869] syzkaller0: entered promiscuous mode [ 154.302935][ T7869] syzkaller0: entered allmulticast mode [ 154.318562][ T7891] __nla_validate_parse: 4 callbacks suppressed [ 154.318579][ T7891] netlink: 8 bytes leftover after parsing attributes in process `syz.0.510'. [ 154.430653][ T7868] tipc: Resetting bearer [ 154.445761][ T7868] tipc: Disabling bearer [ 210.997357][ T7953] netlink: 316 bytes leftover after parsing attributes in process `syz.0.519'. [ 211.116196][ T7958] netlink: 20 bytes leftover after parsing attributes in process `syz.0.519'. [ 211.148142][ T7934] lo speed is unknown, defaulting to 1000 [ 211.482570][ T7973] netlink: 36 bytes leftover after parsing attributes in process `syz.2.522'. [ 211.894264][ T51] Bluetooth: hci2: command 0x0401 tx timeout [ 211.895375][ T5844] Bluetooth: hci1: command 0x0406 tx timeout [ 211.908970][ T5845] Bluetooth: hci3: command 0x0406 tx timeout [ 211.911965][ T7981] netlink: 'syz.4.526': attribute type 3 has an invalid length. [ 211.980554][ T7981] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.526'. [ 212.032785][ T7985] netlink: 'syz.0.527': attribute type 27 has an invalid length. [ 212.264952][ T7996] netlink: 8 bytes leftover after parsing attributes in process `syz.0.529'. [ 212.291352][ T7996] netlink: 24 bytes leftover after parsing attributes in process `syz.0.529'. [ 212.317534][ T7996] netlink: 24 bytes leftover after parsing attributes in process `syz.0.529'. [ 212.761187][ T8016] lo speed is unknown, defaulting to 1000 [ 212.768496][ T8016] lo speed is unknown, defaulting to 1000 [ 212.782803][ T8016] lo speed is unknown, defaulting to 1000 [ 212.797124][ T8016] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 212.843541][ T8016] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 212.913485][ T8019] lo speed is unknown, defaulting to 1000 [ 212.951677][ T8022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 213.007386][ T8016] lo speed is unknown, defaulting to 1000 [ 213.046478][ T8016] lo speed is unknown, defaulting to 1000 [ 213.047432][ T8028] netlink: 28 bytes leftover after parsing attributes in process `syz.1.536'. [ 213.144392][ T8016] lo speed is unknown, defaulting to 1000 [ 213.165147][ T8016] lo speed is unknown, defaulting to 1000 [ 213.246632][ T8033] netlink: 12 bytes leftover after parsing attributes in process `syz.2.542'. [ 213.256599][ T8016] lo speed is unknown, defaulting to 1000 [ 213.323911][ T8016] lo speed is unknown, defaulting to 1000 [ 213.389707][ T8036] netlink: 8 bytes leftover after parsing attributes in process `syz.3.541'. [ 213.658790][ T8045] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 213.809680][ T8052] FAULT_INJECTION: forcing a failure. [ 213.809680][ T8052] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 213.863628][ T8052] CPU: 1 UID: 0 PID: 8052 Comm: syz.2.548 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 213.863659][ T8052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 213.863671][ T8052] Call Trace: [ 213.863680][ T8052] [ 213.863689][ T8052] dump_stack_lvl+0x189/0x250 [ 213.863719][ T8052] ? __pfx____ratelimit+0x10/0x10 [ 213.863749][ T8052] ? __pfx_dump_stack_lvl+0x10/0x10 [ 213.863770][ T8052] ? __pfx__printk+0x10/0x10 [ 213.863796][ T8052] ? __might_fault+0xb0/0x130 [ 213.863839][ T8052] should_fail_ex+0x414/0x560 [ 213.863877][ T8052] _copy_from_user+0x2d/0xb0 [ 213.863909][ T8052] generic_map_update_batch+0x51b/0x7f0 [ 213.863947][ T8052] ? __pfx_generic_map_update_batch+0x10/0x10 [ 213.863971][ T8052] ? __fget_files+0x2a/0x420 [ 213.863999][ T8052] ? __pfx_generic_map_update_batch+0x10/0x10 [ 213.864022][ T8052] bpf_map_do_batch+0x36c/0x5f0 [ 213.864059][ T8052] __sys_bpf+0x6af/0x870 [ 213.864091][ T8052] ? __pfx___sys_bpf+0x10/0x10 [ 213.864136][ T8052] ? ksys_write+0x22a/0x250 [ 213.864170][ T8052] ? __pfx_ksys_write+0x10/0x10 [ 213.864198][ T8052] ? rcu_is_watching+0x15/0xb0 [ 213.864240][ T8052] __x64_sys_bpf+0x7c/0x90 [ 213.864268][ T8052] do_syscall_64+0xfa/0x3b0 [ 213.864299][ T8052] ? lockdep_hardirqs_on+0x9c/0x150 [ 213.864328][ T8052] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.864350][ T8052] ? clear_bhb_loop+0x60/0xb0 [ 213.864388][ T8052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.864409][ T8052] RIP: 0033:0x7f289838eb69 [ 213.864428][ T8052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.864446][ T8052] RSP: 002b:00007f2899240038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 213.864470][ T8052] RAX: ffffffffffffffda RBX: 00007f28985b5fa0 RCX: 00007f289838eb69 [ 213.864485][ T8052] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 213.864499][ T8052] RBP: 00007f2899240090 R08: 0000000000000000 R09: 0000000000000000 [ 213.864512][ T8052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 213.864524][ T8052] R13: 0000000000000000 R14: 00007f28985b5fa0 R15: 00007ffd22e13448 [ 213.864558][ T8052] [ 214.706824][ T8073] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 215.119372][ T8094] netlink: 'syz.0.561': attribute type 11 has an invalid length. [ 215.144842][ T8096] netlink: 'syz.0.561': attribute type 11 has an invalid length. [ 215.981950][ T8121] lo speed is unknown, defaulting to 1000 [ 216.249737][ T8133] vxcan1: tx address claim with dlc 0 [ 216.337427][ T8135] netlink: 'syz.0.575': attribute type 13 has an invalid length. [ 216.355312][ T8135] __nla_validate_parse: 5 callbacks suppressed [ 216.355333][ T8135] netlink: 4 bytes leftover after parsing attributes in process `syz.0.575'. [ 216.452140][ T149] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.472730][ T8135] netlink: 'syz.0.575': attribute type 13 has an invalid length. [ 216.477304][ T8142] netlink: 'syz.0.575': attribute type 15 has an invalid length. [ 216.480603][ T8135] netlink: 4 bytes leftover after parsing attributes in process `syz.0.575'. [ 216.520597][ T8142] netlink: 666 bytes leftover after parsing attributes in process `syz.0.575'. [ 216.546360][ T8141] netlink: 4 bytes leftover after parsing attributes in process `syz.2.577'. [ 216.555679][ T8144] tipc: Enabling of bearer rejected, failed to enable media [ 216.572962][ T149] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.589358][ T8144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.578'. [ 216.591431][ T149] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.655630][ T149] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 216.688360][ T8147] netlink: 'syz.4.579': attribute type 1 has an invalid length. [ 216.709469][ T8147] netlink: 8 bytes leftover after parsing attributes in process `syz.4.579'. [ 217.078362][ T8159] netlink: 28 bytes leftover after parsing attributes in process `syz.2.581'. [ 217.121336][ T8163] netlink: 'syz.0.583': attribute type 1 has an invalid length. [ 217.141698][ T8162] batadv_slave_1: entered promiscuous mode [ 217.444709][ T8169] 8021q: adding VLAN 0 to HW filter on device bond4 [ 217.468954][ T8160] batadv_slave_1: left promiscuous mode [ 217.919899][ T8171] bond4 (unregistering): Released all slaves [ 217.968065][ T8159] lo speed is unknown, defaulting to 1000 [ 218.005417][ T8179] netlink: 'syz.4.585': attribute type 1 has an invalid length. [ 218.045129][ T8175] 8021q: adding VLAN 0 to HW filter on device bond2 [ 218.056967][ T8175] bridge0: port 3(bond2) entered blocking state [ 218.102757][ T8175] bridge0: port 3(bond2) entered disabled state [ 218.109558][ T8175] bond2: entered allmulticast mode [ 218.125359][ T8175] bond2: entered promiscuous mode [ 218.171464][ T8185] netlink: 8 bytes leftover after parsing attributes in process `syz.0.586'. [ 218.207613][ T8179] bond2: entered promiscuous mode [ 218.214145][ T8179] 8021q: adding VLAN 0 to HW filter on device bond2 [ 218.624282][ T8192] netlink: 36 bytes leftover after parsing attributes in process `syz.0.588'. [ 219.314911][ T8202] netlink: 20 bytes leftover after parsing attributes in process `syz.1.592'. [ 220.266743][ T8248] vxcan1: MTU too low for tipc bearer [ 220.283592][ T8248] tipc: Enabling of bearer rejected, failed to enable media [ 220.304522][ T8248] netlink: 'syz.3.604': attribute type 30 has an invalid length. [ 220.985257][ T8278] openvswitch: netlink: Multiple metadata blocks provided [ 221.017368][ T8278] openvswitch: netlink: Multiple metadata blocks provided [ 221.198941][ T8287] lo: entered allmulticast mode [ 221.222863][ T8287] lo: left allmulticast mode [ 221.387171][ T8296] netlink: 'syz.1.622': attribute type 1 has an invalid length. [ 221.404165][ T8296] __nla_validate_parse: 5 callbacks suppressed [ 221.404200][ T8296] netlink: 20 bytes leftover after parsing attributes in process `syz.1.622'. [ 221.431405][ T8296] netlink: 'syz.1.622': attribute type 1 has an invalid length. [ 221.441236][ T8296] netlink: 20 bytes leftover after parsing attributes in process `syz.1.622'. [ 221.473528][ T8305] netlink: 'syz.4.619': attribute type 1 has an invalid length. [ 221.483500][ T8296] netlink: 'syz.1.622': attribute type 1 has an invalid length. [ 221.501571][ T8296] netlink: 20 bytes leftover after parsing attributes in process `syz.1.622'. [ 221.525265][ T8296] netlink: 'syz.1.622': attribute type 1 has an invalid length. [ 221.536229][ T8296] netlink: 20 bytes leftover after parsing attributes in process `syz.1.622'. [ 221.552701][ T8296] netlink: 'syz.1.622': attribute type 1 has an invalid length. [ 221.560625][ T8296] netlink: 20 bytes leftover after parsing attributes in process `syz.1.622'. [ 221.570885][ T8296] netlink: 'syz.1.622': attribute type 1 has an invalid length. [ 221.580281][ T8296] netlink: 20 bytes leftover after parsing attributes in process `syz.1.622'. [ 221.591245][ T8296] netlink: 20 bytes leftover after parsing attributes in process `syz.1.622'. [ 221.601960][ T8296] netlink: 20 bytes leftover after parsing attributes in process `syz.1.622'. [ 221.614337][ T8308] FAULT_INJECTION: forcing a failure. [ 221.614337][ T8308] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 221.630445][ T8296] netlink: 20 bytes leftover after parsing attributes in process `syz.1.622'. [ 221.640297][ T8308] CPU: 0 UID: 0 PID: 8308 Comm: syz.0.625 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 221.640328][ T8308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 221.640341][ T8308] Call Trace: [ 221.640349][ T8308] [ 221.640359][ T8308] dump_stack_lvl+0x189/0x250 [ 221.640387][ T8308] ? __pfx____ratelimit+0x10/0x10 [ 221.640418][ T8308] ? __pfx_dump_stack_lvl+0x10/0x10 [ 221.640439][ T8308] ? __pfx__printk+0x10/0x10 [ 221.640466][ T8308] ? __might_fault+0xb0/0x130 [ 221.640511][ T8308] should_fail_ex+0x414/0x560 [ 221.640550][ T8308] _copy_from_user+0x2d/0xb0 [ 221.640580][ T8308] generic_map_update_batch+0x572/0x7f0 [ 221.640618][ T8308] ? __pfx_generic_map_update_batch+0x10/0x10 [ 221.640653][ T8308] ? __fget_files+0x2a/0x420 [ 221.640681][ T8308] ? __pfx_generic_map_update_batch+0x10/0x10 [ 221.640703][ T8308] bpf_map_do_batch+0x36c/0x5f0 [ 221.640742][ T8308] __sys_bpf+0x6af/0x870 [ 221.640773][ T8308] ? __pfx___sys_bpf+0x10/0x10 [ 221.640818][ T8308] ? ksys_write+0x22a/0x250 [ 221.640853][ T8308] ? __pfx_ksys_write+0x10/0x10 [ 221.640881][ T8308] ? rcu_is_watching+0x15/0xb0 [ 221.640923][ T8308] __x64_sys_bpf+0x7c/0x90 [ 221.640952][ T8308] do_syscall_64+0xfa/0x3b0 [ 221.640983][ T8308] ? lockdep_hardirqs_on+0x9c/0x150 [ 221.641013][ T8308] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.641033][ T8308] ? clear_bhb_loop+0x60/0xb0 [ 221.641058][ T8308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.641077][ T8308] RIP: 0033:0x7f5d6a98eb69 [ 221.641096][ T8308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.641119][ T8308] RSP: 002b:00007f5d6b853038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 221.641142][ T8308] RAX: ffffffffffffffda RBX: 00007f5d6abb5fa0 RCX: 00007f5d6a98eb69 [ 221.641158][ T8308] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 221.641171][ T8308] RBP: 00007f5d6b853090 R08: 0000000000000000 R09: 0000000000000000 [ 221.641183][ T8308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 221.641194][ T8308] R13: 0000000000000000 R14: 00007f5d6abb5fa0 R15: 00007ffe730b9bf8 [ 221.641227][ T8308] [ 221.864070][ T8296] netlink: 20 bytes leftover after parsing attributes in process `syz.1.622'. [ 221.891403][ T8296] hsr0: left promiscuous mode [ 222.209080][ T8315] lo speed is unknown, defaulting to 1000 [ 222.341945][ T8333] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 222.393907][ T8333] macsec1: entered allmulticast mode [ 222.408660][ T8333] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 222.435006][ T8333] batman_adv: batadv0: Adding interface: macsec1 [ 222.453076][ T8333] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.495299][ T8333] batman_adv: batadv0: Interface activated: macsec1 [ 222.683021][ T8350] FAULT_INJECTION: forcing a failure. [ 222.683021][ T8350] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 222.766905][ T8350] CPU: 0 UID: 0 PID: 8350 Comm: syz.2.636 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 222.766937][ T8350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 222.766949][ T8350] Call Trace: [ 222.766958][ T8350] [ 222.766967][ T8350] dump_stack_lvl+0x189/0x250 [ 222.766994][ T8350] ? __pfx____ratelimit+0x10/0x10 [ 222.767025][ T8350] ? __pfx_dump_stack_lvl+0x10/0x10 [ 222.767046][ T8350] ? __pfx__printk+0x10/0x10 [ 222.767073][ T8350] ? __might_fault+0xb0/0x130 [ 222.767117][ T8350] should_fail_ex+0x414/0x560 [ 222.767157][ T8350] _copy_from_user+0x2d/0xb0 [ 222.767198][ T8350] generic_map_update_batch+0x51b/0x7f0 [ 222.767236][ T8350] ? __pfx_generic_map_update_batch+0x10/0x10 [ 222.767261][ T8350] ? __fget_files+0x2a/0x420 [ 222.767288][ T8350] ? __pfx_generic_map_update_batch+0x10/0x10 [ 222.767321][ T8350] bpf_map_do_batch+0x36c/0x5f0 [ 222.767359][ T8350] __sys_bpf+0x6af/0x870 [ 222.767389][ T8350] ? __pfx___sys_bpf+0x10/0x10 [ 222.767431][ T8350] ? ksys_write+0x22a/0x250 [ 222.767464][ T8350] ? __pfx_ksys_write+0x10/0x10 [ 222.767491][ T8350] ? rcu_is_watching+0x15/0xb0 [ 222.767533][ T8350] __x64_sys_bpf+0x7c/0x90 [ 222.767560][ T8350] do_syscall_64+0xfa/0x3b0 [ 222.767591][ T8350] ? lockdep_hardirqs_on+0x9c/0x150 [ 222.767620][ T8350] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.767639][ T8350] ? clear_bhb_loop+0x60/0xb0 [ 222.767665][ T8350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.767685][ T8350] RIP: 0033:0x7f289838eb69 [ 222.767704][ T8350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.767723][ T8350] RSP: 002b:00007f2899240038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 222.767746][ T8350] RAX: ffffffffffffffda RBX: 00007f28985b5fa0 RCX: 00007f289838eb69 [ 222.767762][ T8350] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 222.767776][ T8350] RBP: 00007f2899240090 R08: 0000000000000000 R09: 0000000000000000 [ 222.767789][ T8350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 222.767801][ T8350] R13: 0000000000000000 R14: 00007f28985b5fa0 R15: 00007ffd22e13448 [ 222.767835][ T8350] [ 223.389925][ T8363] bridge_slave_0: left allmulticast mode [ 223.426294][ T8363] bridge_slave_0: left promiscuous mode [ 223.447801][ T8363] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.486124][ T8363] bridge_slave_1: left allmulticast mode [ 223.496419][ T8363] bridge_slave_1: left promiscuous mode [ 223.520285][ T8363] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.554881][ T8363] bond0: (slave bond_slave_0): Releasing backup interface [ 223.585385][ T8363] bond0: (slave bond_slave_1): Releasing backup interface [ 223.632021][ T8381] validate_nla: 83 callbacks suppressed [ 223.632044][ T8381] netlink: 'syz.4.639': attribute type 10 has an invalid length. [ 223.669164][ T8383] IPVS: set_ctl: invalid protocol: 94 172.20.20.61:20004 [ 223.671212][ T8363] team0: Port device team_slave_0 removed [ 223.714615][ T8363] team0: Port device team_slave_1 removed [ 223.721871][ T8363] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.735399][ T8363] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.769371][ T8363] bond1: left allmulticast mode [ 223.792392][ T8363] bond1: left promiscuous mode [ 223.804354][ T8363] bridge0: port 3(bond1) entered disabled state [ 223.819384][ T5906] lo speed is unknown, defaulting to 1000 [ 223.848483][ T8373] pimreg: entered allmulticast mode [ 224.139264][ T8381] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 224.155391][ T8390] unknown channel width for channel at 909000KHz? [ 224.168152][ T8390] unknown channel width for channel at 909000KHz? [ 224.179691][ T8389] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 224.191981][ T8390] unknown channel width for channel at 909000KHz? [ 224.207603][ T8389] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 224.211746][ T8372] lo speed is unknown, defaulting to 1000 [ 224.219916][ T8389] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 224.270610][ T8409] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 224.320616][ T8409] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 224.921102][ T8421] syzkaller1: entered promiscuous mode [ 224.928521][ T8421] syzkaller1: entered allmulticast mode [ 225.103560][ T8445] 8021q: VLANs not supported on ip_vti0 [ 225.214869][ T8451] sctp: [Deprecated]: syz.2.664 (pid 8451) Use of struct sctp_assoc_value in delayed_ack socket option. [ 225.214869][ T8451] Use struct sctp_sack_info instead [ 225.429975][ T8465] netlink: 'syz.1.669': attribute type 4 has an invalid length. [ 225.499186][ T8469] netlink: 'syz.1.669': attribute type 4 has an invalid length. [ 226.073077][ T8483] netlink: 'syz.3.673': attribute type 2 has an invalid length. [ 226.081066][ T8483] netlink: 'syz.3.673': attribute type 1 has an invalid length. [ 226.220061][ T8487] openvswitch: netlink: Tunnel attr 1 has unexpected len 5 expected 4 [ 226.577290][ T8501] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 226.606453][ T8502] netlink: 'syz.2.677': attribute type 13 has an invalid length. [ 226.629497][ T8502] netlink: 'syz.2.677': attribute type 17 has an invalid length. [ 226.688098][ T8502] gretap0: refused to change device tx_queue_len [ 226.701141][ T8502] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 227.113696][ T8509] __nla_validate_parse: 84 callbacks suppressed [ 227.113717][ T8509] netlink: 4 bytes leftover after parsing attributes in process `syz.2.680'. [ 227.501872][ T8541] netlink: 68 bytes leftover after parsing attributes in process `syz.4.690'. [ 227.781895][ T8561] netlink: 36 bytes leftover after parsing attributes in process `syz.0.693'. [ 227.789472][ T8563] netlink: 24 bytes leftover after parsing attributes in process `syz.1.697'. [ 227.815345][ T8563] netlink: 12 bytes leftover after parsing attributes in process `syz.1.697'. [ 227.829145][ T8552] netlink: 12 bytes leftover after parsing attributes in process `syz.4.694'. [ 227.841596][ T8552] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000 [ 227.866554][ T8552] tipc: Enabled bearer , priority 10 [ 228.010670][ T8570] netlink: 'syz.2.698': attribute type 1 has an invalid length. [ 228.069306][ T8563] 8021q: adding VLAN 0 to HW filter on device bond3 [ 228.077329][ T8567] tc_dump_action: action bad kind [ 228.139078][ T8570] bond2: entered promiscuous mode [ 228.145330][ T8570] 8021q: adding VLAN 0 to HW filter on device bond2 [ 228.180959][ T8567] netlink: 'syz.1.697': attribute type 4 has an invalid length. [ 228.235491][ T8563] netlink: 'syz.1.697': attribute type 4 has an invalid length. [ 228.374657][ T8563] bond3: (slave batadv1): Opening slave failed [ 228.411492][ T8591] netlink: 8 bytes leftover after parsing attributes in process `syz.0.702'. [ 228.624113][ T8601] tipc: Started in network mode [ 228.629055][ T8601] tipc: Node identity 3e7ffd651a2d, cluster identity 4711 [ 228.642204][ T8601] tipc: Enabled bearer , priority 0 [ 228.654933][ T8601] syzkaller0: entered promiscuous mode [ 228.660451][ T8601] syzkaller0: entered allmulticast mode [ 228.719206][ T8601] tipc: Resetting bearer [ 228.746679][ T8611] netlink: 28 bytes leftover after parsing attributes in process `syz.1.708'. [ 228.769538][ T8600] tipc: Resetting bearer [ 228.949564][ T8600] tipc: Disabling bearer [ 229.054975][ T8622] netlink: 168 bytes leftover after parsing attributes in process `syz.0.712'. [ 229.231023][ T8627] ip6gre1: entered allmulticast mode [ 229.257398][ T8629] IPVS: stopping backup sync thread 6629 ... [ 229.816379][ T8663] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.838992][ T8663] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 229.870125][ T8663] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.921666][ T8663] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.198752][ T8683] netlink: 12 bytes leftover after parsing attributes in process `syz.0.733'. [ 230.258222][ T8683] bridge0: left allmulticast mode [ 230.387625][ T8683] pim6reg: entered allmulticast mode [ 230.511871][ T8701] gretap0: entered promiscuous mode [ 230.533093][ T8697] IPVS: persistence engine module ip_vs_pe_ not found [ 230.624872][ T8697] 0ªî{X¹¦: renamed from gretap0 [ 230.647897][ T8697] 0ªî{X¹¦: left promiscuous mode [ 230.673830][ T8697] 0ªî{X¹¦: entered allmulticast mode [ 230.703686][ T8697] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 230.966737][ T8718] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 231.318204][ T8745] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 231.338021][ T8745] netlink: 'syz.3.746': attribute type 1 has an invalid length. [ 231.788938][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.804479][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.826391][ T8762] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 231.841861][ T8768] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 232.078378][ T8775] FAULT_INJECTION: forcing a failure. [ 232.078378][ T8775] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 232.109283][ T8775] CPU: 0 UID: 0 PID: 8775 Comm: syz.2.760 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 232.109317][ T8775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 232.109330][ T8775] Call Trace: [ 232.109339][ T8775] [ 232.109349][ T8775] dump_stack_lvl+0x189/0x250 [ 232.109378][ T8775] ? __pfx____ratelimit+0x10/0x10 [ 232.109410][ T8775] ? __pfx_dump_stack_lvl+0x10/0x10 [ 232.109433][ T8775] ? __pfx__printk+0x10/0x10 [ 232.109460][ T8775] ? __might_fault+0xb0/0x130 [ 232.109506][ T8775] should_fail_ex+0x414/0x560 [ 232.109546][ T8775] _copy_from_user+0x2d/0xb0 [ 232.109578][ T8775] sctp_getsockopt_paddr_thresholds+0xd6/0x720 [ 232.109622][ T8775] ? __lock_acquire+0xab9/0xd20 [ 232.109656][ T8775] ? __pfx_sctp_getsockopt_paddr_thresholds+0x10/0x10 [ 232.109707][ T8775] ? __local_bh_enable_ip+0x12d/0x1c0 [ 232.109740][ T8775] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 232.109786][ T8775] sctp_getsockopt+0x950/0xb60 [ 232.109818][ T8775] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 232.109852][ T8775] do_sock_getsockopt+0x372/0x450 [ 232.109877][ T8775] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 232.109898][ T8775] ? do_syscall_64+0x20/0x3b0 [ 232.109930][ T8775] ? __fget_files+0x3a0/0x420 [ 232.109950][ T8775] ? __fget_files+0x2a/0x420 [ 232.109979][ T8775] __x64_sys_getsockopt+0x1a5/0x250 [ 232.110000][ T8775] ? do_syscall_64+0x20/0x3b0 [ 232.110034][ T8775] ? do_syscall_64+0x20/0x3b0 [ 232.110070][ T8775] do_syscall_64+0xfa/0x3b0 [ 232.110100][ T8775] ? lockdep_hardirqs_on+0x9c/0x150 [ 232.110131][ T8775] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.110152][ T8775] ? clear_bhb_loop+0x60/0xb0 [ 232.110179][ T8775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.110199][ T8775] RIP: 0033:0x7f289838eb69 [ 232.110218][ T8775] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.110236][ T8775] RSP: 002b:00007f2899240038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 232.110265][ T8775] RAX: ffffffffffffffda RBX: 00007f28985b5fa0 RCX: 00007f289838eb69 [ 232.110281][ T8775] RDX: 000000000000001f RSI: 0000000000000084 RDI: 0000000000000003 [ 232.110293][ T8775] RBP: 00007f2899240090 R08: 0000200000000100 R09: 0000000000000000 [ 232.110307][ T8775] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 232.110320][ T8775] R13: 0000000000000000 R14: 00007f28985b5fa0 R15: 00007ffd22e13448 [ 232.110354][ T8775] [ 232.447461][ T8790] __nla_validate_parse: 10 callbacks suppressed [ 232.447483][ T8790] netlink: 36 bytes leftover after parsing attributes in process `syz.3.763'. [ 232.522998][ T8786] lo speed is unknown, defaulting to 1000 [ 232.731603][ T8793] tipc: Enabled bearer , priority 10 [ 232.858195][ T8793] tipc: Resetting bearer [ 232.868385][ T8799] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 232.973926][ T8802] netlink: 'syz.3.768': attribute type 1 has an invalid length. [ 233.126612][ T8802] 8021q: adding VLAN 0 to HW filter on device bond4 [ 233.149611][ T8793] tipc: Resetting bearer [ 233.197959][ T8813] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 233.205976][ T8813] IPv6: NLM_F_CREATE should be set when creating new route [ 233.213397][ T8813] IPv6: NLM_F_CREATE should be set when creating new route [ 233.390342][ T8826] netlink: 68 bytes leftover after parsing attributes in process `syz.1.774'. [ 233.852831][ T5906] tipc: Node number set to 609418597 [ 234.687386][ T8793] tipc: Disabling bearer [ 234.719936][ T8803] bond4: (slave bridge2): making interface the new active one [ 234.729590][ T8803] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 234.756002][ T8804] bond4: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 235.577583][ T8870] FAULT_INJECTION: forcing a failure. [ 235.577583][ T8870] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 235.611955][ T8870] CPU: 0 UID: 0 PID: 8870 Comm: syz.0.786 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 235.611989][ T8870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 235.612003][ T8870] Call Trace: [ 235.612012][ T8870] [ 235.612021][ T8870] dump_stack_lvl+0x189/0x250 [ 235.612049][ T8870] ? __pfx____ratelimit+0x10/0x10 [ 235.612081][ T8870] ? __pfx_dump_stack_lvl+0x10/0x10 [ 235.612103][ T8870] ? __pfx__printk+0x10/0x10 [ 235.612130][ T8870] ? __might_fault+0xb0/0x130 [ 235.612175][ T8870] should_fail_ex+0x414/0x560 [ 235.612216][ T8870] _copy_from_user+0x2d/0xb0 [ 235.612258][ T8870] generic_map_update_batch+0x51b/0x7f0 [ 235.612300][ T8870] ? __pfx_generic_map_update_batch+0x10/0x10 [ 235.612324][ T8870] ? __fget_files+0x2a/0x420 [ 235.612352][ T8870] ? __pfx_generic_map_update_batch+0x10/0x10 [ 235.612374][ T8870] bpf_map_do_batch+0x36c/0x5f0 [ 235.612412][ T8870] __sys_bpf+0x6af/0x870 [ 235.612443][ T8870] ? __pfx___sys_bpf+0x10/0x10 [ 235.612486][ T8870] ? ksys_write+0x22a/0x250 [ 235.612519][ T8870] ? __pfx_ksys_write+0x10/0x10 [ 235.612545][ T8870] ? rcu_is_watching+0x15/0xb0 [ 235.612585][ T8870] __x64_sys_bpf+0x7c/0x90 [ 235.612612][ T8870] do_syscall_64+0xfa/0x3b0 [ 235.612643][ T8870] ? lockdep_hardirqs_on+0x9c/0x150 [ 235.612673][ T8870] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.612694][ T8870] ? clear_bhb_loop+0x60/0xb0 [ 235.612721][ T8870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.612741][ T8870] RIP: 0033:0x7f5d6a98eb69 [ 235.612760][ T8870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.612778][ T8870] RSP: 002b:00007f5d6b853038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 235.612802][ T8870] RAX: ffffffffffffffda RBX: 00007f5d6abb5fa0 RCX: 00007f5d6a98eb69 [ 235.612817][ T8870] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 235.612831][ T8870] RBP: 00007f5d6b853090 R08: 0000000000000000 R09: 0000000000000000 [ 235.612844][ T8870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 235.612856][ T8870] R13: 0000000000000000 R14: 00007f5d6abb5fa0 R15: 00007ffe730b9bf8 [ 235.612888][ T8870] [ 235.619414][ T8875] IPVS: set_ctl: invalid protocol: 47 255.255.255.255:20003 [ 236.108715][ T8897] netlink: 'syz.2.793': attribute type 2 has an invalid length. [ 236.140972][ T8898] netlink: 'syz.2.793': attribute type 2 has an invalid length. [ 236.176639][ T8901] netlink: 12 bytes leftover after parsing attributes in process `syz.1.794'. [ 236.213091][ T8901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.228398][ T8898] netlink: 16 bytes leftover after parsing attributes in process `syz.2.793'. [ 236.254615][ T8901] bond0: (slave rose0): Enslaving as an active interface with an up link [ 236.371741][ T8907] netlink: 176956 bytes leftover after parsing attributes in process `syz.4.796'. [ 236.529096][ T8917] FAULT_INJECTION: forcing a failure. [ 236.529096][ T8917] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 236.554978][ T8917] CPU: 1 UID: 0 PID: 8917 Comm: syz.1.799 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 236.555013][ T8917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 236.555026][ T8917] Call Trace: [ 236.555034][ T8917] [ 236.555044][ T8917] dump_stack_lvl+0x189/0x250 [ 236.555072][ T8917] ? __pfx____ratelimit+0x10/0x10 [ 236.555103][ T8917] ? __pfx_dump_stack_lvl+0x10/0x10 [ 236.555125][ T8917] ? __pfx__printk+0x10/0x10 [ 236.555161][ T8917] ? __might_fault+0xb0/0x130 [ 236.555205][ T8917] should_fail_ex+0x414/0x560 [ 236.555246][ T8917] _copy_from_user+0x2d/0xb0 [ 236.555278][ T8917] generic_map_update_batch+0x572/0x7f0 [ 236.555319][ T8917] ? __pfx_generic_map_update_batch+0x10/0x10 [ 236.555344][ T8917] ? __fget_files+0x2a/0x420 [ 236.555373][ T8917] ? __pfx_generic_map_update_batch+0x10/0x10 [ 236.555397][ T8917] bpf_map_do_batch+0x36c/0x5f0 [ 236.555437][ T8917] __sys_bpf+0x6af/0x870 [ 236.555470][ T8917] ? __pfx___sys_bpf+0x10/0x10 [ 236.555515][ T8917] ? ksys_write+0x22a/0x250 [ 236.555549][ T8917] ? __pfx_ksys_write+0x10/0x10 [ 236.555577][ T8917] ? rcu_is_watching+0x15/0xb0 [ 236.555619][ T8917] __x64_sys_bpf+0x7c/0x90 [ 236.555647][ T8917] do_syscall_64+0xfa/0x3b0 [ 236.555678][ T8917] ? lockdep_hardirqs_on+0x9c/0x150 [ 236.555707][ T8917] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.555727][ T8917] ? clear_bhb_loop+0x60/0xb0 [ 236.555755][ T8917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.555775][ T8917] RIP: 0033:0x7f158998eb69 [ 236.555795][ T8917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.555813][ T8917] RSP: 002b:00007f158a7c6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 236.555837][ T8917] RAX: ffffffffffffffda RBX: 00007f1589bb5fa0 RCX: 00007f158998eb69 [ 236.555853][ T8917] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 236.555867][ T8917] RBP: 00007f158a7c6090 R08: 0000000000000000 R09: 0000000000000000 [ 236.555880][ T8917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 236.555892][ T8917] R13: 0000000000000000 R14: 00007f1589bb5fa0 R15: 00007ffc9da592b8 [ 236.555925][ T8917] [ 236.822438][ T8928] tipc: Enabled bearer , priority 0 [ 236.830196][ T8928] syzkaller0: entered promiscuous mode [ 236.835770][ T8928] syzkaller0: entered allmulticast mode [ 236.950293][ T8928] tipc: Resetting bearer [ 236.999220][ T8926] tipc: Resetting bearer [ 237.088129][ T8926] tipc: Disabling bearer [ 237.107628][ T8939] netlink: 24 bytes leftover after parsing attributes in process `syz.1.804'. [ 237.262192][ T8943] netlink: 72 bytes leftover after parsing attributes in process `syz.0.806'. [ 237.283131][ T8943] block nbd0: not configured, cannot reconfigure [ 237.335532][ T8949] syzkaller1: entered promiscuous mode [ 237.341527][ T8949] syzkaller1: entered allmulticast mode [ 237.376637][ T8951] team0: entered promiscuous mode [ 237.379464][ T8949] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 237.404765][ T8950] netlink: 4 bytes leftover after parsing attributes in process `syz.4.808'. [ 237.429483][ T8951] netlink: 4 bytes leftover after parsing attributes in process `syz.4.808'. [ 237.455607][ T8955] atomic_op ffff8880695bf998 conn xmit_atomic 0000000000000000 [ 237.776548][ T8973] netlink: 24 bytes leftover after parsing attributes in process `syz.2.815'. [ 237.913173][ T8979] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.815'. [ 237.934260][ T8978] netlink: 'syz.3.816': attribute type 64 has an invalid length. [ 237.968756][ T8950] team0 (unregistering): left promiscuous mode [ 237.988957][ T8989] netlink: 4 bytes leftover after parsing attributes in process `syz.3.816'. [ 238.043940][ T8994] dvmrp1: left allmulticast mode [ 238.107065][ T8987] netlink: 'syz.1.817': attribute type 10 has an invalid length. [ 238.125307][ T8987] netlink: 40 bytes leftover after parsing attributes in process `syz.1.817'. [ 238.357550][ T9005] netlink: 32 bytes leftover after parsing attributes in process `syz.4.818'. [ 238.685597][ T8987] veth0_vlan: entered allmulticast mode [ 238.704237][ T8987] bridge0: port 4(veth0_vlan) entered blocking state [ 238.736623][ T8987] bridge0: port 4(veth0_vlan) entered disabled state [ 238.774633][ T8987] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 238.849994][ T8993] lo speed is unknown, defaulting to 1000 [ 238.934416][ T9019] netlink: 24 bytes leftover after parsing attributes in process `syz.3.819'. [ 239.012035][ T9021] tipc: Enabling of bearer rejected, failed to enable media [ 239.327002][ T9037] netlink: 4 bytes leftover after parsing attributes in process `syz.4.825'. [ 239.532258][ T9053] netlink: 8 bytes leftover after parsing attributes in process `syz.4.825'. [ 239.541442][ T9053] netlink: 48 bytes leftover after parsing attributes in process `syz.4.825'. [ 239.579657][ T9050] netlink: 'syz.4.825': attribute type 1 has an invalid length. [ 239.620878][ T9050] netlink: 5624 bytes leftover after parsing attributes in process `syz.4.825'. [ 240.867802][ T9104] netlink: 'syz.4.838': attribute type 1 has an invalid length. [ 241.021213][ T9098] bond3: (slave gretap1): making interface the new active one [ 241.037246][ T9098] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 241.236158][ T9116] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 241.386803][ T9124] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 241.580680][ T9132] FAULT_INJECTION: forcing a failure. [ 241.580680][ T9132] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 241.601560][ T9132] CPU: 0 UID: 0 PID: 9132 Comm: syz.2.848 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 241.601590][ T9132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 241.601600][ T9132] Call Trace: [ 241.601608][ T9132] [ 241.601616][ T9132] dump_stack_lvl+0x189/0x250 [ 241.601640][ T9132] ? __pfx____ratelimit+0x10/0x10 [ 241.601666][ T9132] ? __pfx_dump_stack_lvl+0x10/0x10 [ 241.601683][ T9132] ? __pfx__printk+0x10/0x10 [ 241.601705][ T9132] ? __might_fault+0xb0/0x130 [ 241.601740][ T9132] should_fail_ex+0x414/0x560 [ 241.601781][ T9132] _copy_from_user+0x2d/0xb0 [ 241.601807][ T9132] generic_map_update_batch+0x51b/0x7f0 [ 241.601838][ T9132] ? __pfx_generic_map_update_batch+0x10/0x10 [ 241.601857][ T9132] ? __fget_files+0x2a/0x420 [ 241.601880][ T9132] ? __pfx_generic_map_update_batch+0x10/0x10 [ 241.601898][ T9132] bpf_map_do_batch+0x36c/0x5f0 [ 241.601930][ T9132] __sys_bpf+0x6af/0x870 [ 241.601957][ T9132] ? __pfx___sys_bpf+0x10/0x10 [ 241.601980][ T9132] ? preempt_schedule_irq+0xde/0x150 [ 241.602041][ T9132] __x64_sys_bpf+0x7c/0x90 [ 241.602064][ T9132] do_syscall_64+0xfa/0x3b0 [ 241.602090][ T9132] ? lockdep_hardirqs_on+0x9c/0x150 [ 241.602115][ T9132] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.602132][ T9132] ? clear_bhb_loop+0x60/0xb0 [ 241.602153][ T9132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.602171][ T9132] RIP: 0033:0x7f289838eb69 [ 241.602188][ T9132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.602204][ T9132] RSP: 002b:00007f2899240038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 241.602226][ T9132] RAX: ffffffffffffffda RBX: 00007f28985b5fa0 RCX: 00007f289838eb69 [ 241.602238][ T9132] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 241.602249][ T9132] RBP: 00007f2899240090 R08: 0000000000000000 R09: 0000000000000000 [ 241.602259][ T9132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 241.602269][ T9132] R13: 0000000000000000 R14: 00007f28985b5fa0 R15: 00007ffd22e13448 [ 241.602298][ T9132] [ 242.463220][ T9163] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 242.894495][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.916858][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.970216][ T9177] FAULT_INJECTION: forcing a failure. [ 242.970216][ T9177] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 243.005706][ T9177] CPU: 1 UID: 0 PID: 9177 Comm: syz.0.860 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 243.005739][ T9177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 243.005763][ T9177] Call Trace: [ 243.005772][ T9177] [ 243.005781][ T9177] dump_stack_lvl+0x189/0x250 [ 243.005809][ T9177] ? __pfx____ratelimit+0x10/0x10 [ 243.005840][ T9177] ? __pfx_dump_stack_lvl+0x10/0x10 [ 243.005862][ T9177] ? __pfx__printk+0x10/0x10 [ 243.005890][ T9177] ? __might_fault+0xb0/0x130 [ 243.005935][ T9177] should_fail_ex+0x414/0x560 [ 243.005975][ T9177] _copy_from_user+0x2d/0xb0 [ 243.006007][ T9177] generic_map_update_batch+0x572/0x7f0 [ 243.006046][ T9177] ? __pfx_generic_map_update_batch+0x10/0x10 [ 243.006071][ T9177] ? __fget_files+0x2a/0x420 [ 243.006104][ T9177] ? __pfx_generic_map_update_batch+0x10/0x10 [ 243.006128][ T9177] bpf_map_do_batch+0x36c/0x5f0 [ 243.006167][ T9177] __sys_bpf+0x6af/0x870 [ 243.006200][ T9177] ? __pfx___sys_bpf+0x10/0x10 [ 243.006245][ T9177] ? ksys_write+0x22a/0x250 [ 243.006279][ T9177] ? __pfx_ksys_write+0x10/0x10 [ 243.006306][ T9177] ? rcu_is_watching+0x15/0xb0 [ 243.006348][ T9177] __x64_sys_bpf+0x7c/0x90 [ 243.006377][ T9177] do_syscall_64+0xfa/0x3b0 [ 243.006407][ T9177] ? lockdep_hardirqs_on+0x9c/0x150 [ 243.006437][ T9177] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.006459][ T9177] ? clear_bhb_loop+0x60/0xb0 [ 243.006484][ T9177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.006505][ T9177] RIP: 0033:0x7f5d6a98eb69 [ 243.006524][ T9177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 243.006542][ T9177] RSP: 002b:00007f5d6b853038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 243.006566][ T9177] RAX: ffffffffffffffda RBX: 00007f5d6abb5fa0 RCX: 00007f5d6a98eb69 [ 243.006581][ T9177] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 243.006594][ T9177] RBP: 00007f5d6b853090 R08: 0000000000000000 R09: 0000000000000000 [ 243.006607][ T9177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 243.006619][ T9177] R13: 0000000000000000 R14: 00007f5d6abb5fa0 R15: 00007ffe730b9bf8 [ 243.006661][ T9177] [ 243.253220][ T9175] netlink: 'syz.2.859': attribute type 5 has an invalid length. [ 243.707248][ T9197] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 243.730581][ T9197] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 243.765708][ T9201] __nla_validate_parse: 5 callbacks suppressed [ 243.765730][ T9201] netlink: 8 bytes leftover after parsing attributes in process `syz.1.868'. [ 244.114262][ T9220] lo speed is unknown, defaulting to 1000 [ 244.289313][ T9228] syz.2.875: vmalloc error: size 16781312, failed to allocated page array size 32776, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 244.339106][ T9242] netlink: 'syz.4.877': attribute type 10 has an invalid length. [ 244.374172][ T9242] netlink: 40 bytes leftover after parsing attributes in process `syz.4.877'. [ 244.405523][ T9228] CPU: 1 UID: 0 PID: 9228 Comm: syz.2.875 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 244.405563][ T9228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 244.405576][ T9228] Call Trace: [ 244.405584][ T9228] [ 244.405594][ T9228] dump_stack_lvl+0x189/0x250 [ 244.405625][ T9228] ? __pfx_dump_stack_lvl+0x10/0x10 [ 244.405647][ T9228] ? __pfx__printk+0x10/0x10 [ 244.405674][ T9228] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 244.405698][ T9228] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 244.405725][ T9228] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 244.405752][ T9228] warn_alloc+0x214/0x310 [ 244.405781][ T9228] ? __pfx_warn_alloc+0x10/0x10 [ 244.405813][ T9228] ? __get_vm_area_node+0x28f/0x300 [ 244.405847][ T9228] ? xskq_create+0xbf/0x170 [ 244.405880][ T9228] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 244.405934][ T9228] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 244.405981][ T9228] ? __kasan_kmalloc+0x93/0xb0 [ 244.406018][ T9228] vmalloc_user_noprof+0xad/0xf0 [ 244.406039][ T9228] ? xskq_create+0xbf/0x170 [ 244.406070][ T9228] xskq_create+0xbf/0x170 [ 244.406104][ T9228] xsk_init_queue+0xb0/0x110 [ 244.406136][ T9228] xsk_setsockopt+0x57b/0x8d0 [ 244.406167][ T9228] ? __pfx_xsk_setsockopt+0x10/0x10 [ 244.406195][ T9228] ? __pfx_aa_sk_perm+0x10/0x10 [ 244.406225][ T9228] ? __fget_files+0x2a/0x420 [ 244.406246][ T9228] ? aa_sock_opt_perm+0x74/0x110 [ 244.406277][ T9228] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 244.406302][ T9228] ? __pfx_xsk_setsockopt+0x10/0x10 [ 244.406332][ T9228] do_sock_setsockopt+0x17c/0x1b0 [ 244.406360][ T9228] __x64_sys_setsockopt+0x13f/0x1b0 [ 244.406387][ T9228] do_syscall_64+0xfa/0x3b0 [ 244.406417][ T9228] ? lockdep_hardirqs_on+0x9c/0x150 [ 244.406447][ T9228] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.406469][ T9228] ? clear_bhb_loop+0x60/0xb0 [ 244.406495][ T9228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.406515][ T9228] RIP: 0033:0x7f289838eb69 [ 244.406535][ T9228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.406552][ T9228] RSP: 002b:00007f289921f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 244.406584][ T9228] RAX: ffffffffffffffda RBX: 00007f28985b6080 RCX: 00007f289838eb69 [ 244.406599][ T9228] RDX: 0000000000000003 RSI: 000000000000011b RDI: 000000000000000e [ 244.406612][ T9228] RBP: 00007f2898411df1 R08: 0000000000000004 R09: 0000000000000000 [ 244.406625][ T9228] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 244.406638][ T9228] R13: 0000000000000000 R14: 00007f28985b6080 R15: 00007ffd22e13448 [ 244.406672][ T9228] [ 244.406745][ T9228] Mem-Info: [ 244.416666][ T9242] !: entered promiscuous mode [ 244.447254][ T9228] active_anon:4516 inactive_anon:0 isolated_anon:0 [ 244.447254][ T9228] active_file:1751 inactive_file:39886 isolated_file:0 [ 244.447254][ T9228] unevictable:768 dirty:132 writeback:0 [ 244.447254][ T9228] slab_reclaimable:11062 slab_unreclaimable:102368 [ 244.447254][ T9228] mapped:29478 shmem:1367 pagetables:1139 [ 244.447254][ T9228] sec_pagetables:0 bounce:0 [ 244.447254][ T9228] kernel_misc_reclaimable:0 [ 244.447254][ T9228] free:1321078 free_pcp:18630 free_cma:0 [ 244.471756][ T9242] !: entered allmulticast mode [ 244.740860][ T9228] Node 0 active_anon:17964kB inactive_anon:0kB active_file:7004kB inactive_file:159340kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117912kB dirty:528kB writeback:0kB shmem:3932kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12660kB pagetables:4508kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 244.776231][ T9242] bridge0: port 1(0!) entered blocking state [ 244.783602][ T9228] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 244.813502][ T9242] bridge0: port 1(0!) entered disabled state [ 244.819811][ T9228] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 244.832253][ T9242] bridge0: port 1(0!) entered blocking state [ 244.850961][ T9228] lowmem_reserve[]: [ 244.856898][ T9242] bridge0: port 1(0!) entered forwarding state [ 244.873675][ T9228] 0 2500 2502 2502 2502 [ 244.878103][ T9228] Node 0 DMA32 free:1371292kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18020kB inactive_anon:0kB active_file:7004kB inactive_file:157508kB unevictable:1536kB writepending:528kB present:3129332kB managed:2560292kB mlocked:0kB bounce:0kB free_pcp:53508kB local_pcp:25252kB free_cma:0kB [ 244.900178][ T9248] lo speed is unknown, defaulting to 1000 [ 244.919126][ T9228] lowmem_reserve[]: 0 0 1 1 1 [ 244.924883][ T9228] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1832kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 244.960586][ T9228] lowmem_reserve[]: 0 0 0 0 0 [ 245.022236][ T9228] Node 1 Normal free:3897444kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:20384kB local_pcp:9056kB free_cma:0kB [ 245.084084][ T9228] lowmem_reserve[]: 0 0 0 0 0 [ 245.093904][ T9228] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 245.147004][ T9228] Node 0 DMA32: 1620*4kB (UME) 1192*8kB (UME) 225*16kB (UME) 1219*32kB (UME) 455*64kB (UME) 131*128kB (UME) 29*256kB (UME) 13*512kB (UME) 4*1024kB (M) 4*2048kB (UE) 303*4096kB (M) = 1371968kB [ 245.168162][ T9228] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 245.180582][ T9228] Node 1 Normal: 199*4kB (UE) 41*8kB (UME) 42*16kB (UME) 117*32kB (UME) 41*64kB (UME) 9*128kB (UM) 2*256kB (M) 3*512kB (ME) 3*1024kB (UME) 2*2048kB (UE) 947*4096kB (M) = 3897444kB [ 245.198967][ T9228] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 245.208698][ T9228] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 245.218246][ T9228] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 245.238499][ T9228] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 245.255940][ T9228] 42996 total pagecache pages [ 245.260881][ T9228] 0 pages in swap cache [ 245.266610][ T9228] Free swap = 124996kB [ 245.270975][ T9228] Total swap = 124996kB [ 245.278898][ T9228] 2097051 pages RAM [ 245.283000][ T9228] 0 pages HighMem/MovableOnly [ 245.288301][ T9228] 424872 pages reserved [ 245.296218][ T9228] 0 pages cma reserved [ 245.416595][ T9255] netlink: 12 bytes leftover after parsing attributes in process `syz.4.880'. [ 245.476842][ T9260] netlink: 12 bytes leftover after parsing attributes in process `syz.2.881'. [ 245.487666][ T9260] netlink: 'syz.2.881': attribute type 1 has an invalid length. [ 245.495847][ T9260] netlink: 108 bytes leftover after parsing attributes in process `syz.2.881'. [ 245.595454][ T9255] 8021q: adding VLAN 0 to HW filter on device bond1 [ 245.709807][ T9268] netlink: 'syz.2.882': attribute type 21 has an invalid length. [ 245.739507][ T9261] 8021q: adding VLAN 0 to HW filter on device bond1 [ 245.750061][ T9261] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 245.786606][ T9261] bond1: (slave vxcan1): Error -95 calling set_mac_address [ 245.904290][ T9268] netlink: 152 bytes leftover after parsing attributes in process `syz.2.882'. [ 245.990572][ T9258] lo speed is unknown, defaulting to 1000 [ 246.746321][ T9307] netlink: 'syz.2.891': attribute type 83 has an invalid length. [ 247.340834][ T9323] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 247.386266][ T9325] netlink: 4 bytes leftover after parsing attributes in process `syz.3.896'. [ 247.396396][ T9325] netlink: 'syz.3.896': attribute type 21 has an invalid length. [ 247.407407][ T9325] netlink: 152 bytes leftover after parsing attributes in process `syz.3.896'. [ 247.558232][ T9331] netlink: 36 bytes leftover after parsing attributes in process `syz.1.897'. [ 247.646721][ T9334] netlink: 28 bytes leftover after parsing attributes in process `syz.0.899'. [ 247.733489][ T5853] Bluetooth: hci4: command 0x0406 tx timeout [ 248.026334][ T9355] netlink: 'syz.0.905': attribute type 2 has an invalid length. [ 248.039008][ T9355] netlink: 'syz.0.905': attribute type 1 has an invalid length. [ 248.049998][ T9355] sctp: [Deprecated]: syz.0.905 (pid 9355) Use of int in maxseg socket option. [ 248.049998][ T9355] Use struct sctp_assoc_value instead [ 248.147788][ T9356] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.196978][ T9369] tipc: Enabling of bearer rejected, failed to enable media [ 248.274100][ T9356] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.373533][ T9356] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.411189][ T9378] sctp: [Deprecated]: syz.1.913 (pid 9378) Use of int in maxseg socket option. [ 248.411189][ T9378] Use struct sctp_assoc_value instead [ 248.494372][ T9356] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.721875][ T9389] vlan3: entered promiscuous mode [ 248.735137][ T9389] gretap0: entered promiscuous mode [ 248.763974][ T36] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.788105][ T9392] vlan3: entered promiscuous mode [ 248.841000][ T36] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.905229][ T36] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.009036][ T36] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.104176][ T9409] __nla_validate_parse: 7 callbacks suppressed [ 249.104197][ T9409] netlink: 8 bytes leftover after parsing attributes in process `syz.2.923'. [ 249.377835][ T9417] tipc: Enabled bearer , priority 0 [ 249.404395][ T9417] syzkaller0: entered promiscuous mode [ 249.420434][ T9417] syzkaller0: entered allmulticast mode [ 249.466994][ T9417] tipc: Resetting bearer [ 249.516112][ T9430] netlink: 200 bytes leftover after parsing attributes in process `syz.2.930'. [ 249.935923][ T9452] netlink: 72 bytes leftover after parsing attributes in process `syz.2.936'. [ 249.946811][ T9452] netlink: 12 bytes leftover after parsing attributes in process `syz.2.936'. [ 249.958678][ T9452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.936'. [ 250.074395][ T9454] syz_tun: entered promiscuous mode [ 250.098763][ T9454] team0: Port device syz_tun added [ 250.131791][ T30] audit: type=1800 audit(1754077227.870:2): pid=9464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.941" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1041 res=0 errno=0 [ 250.169136][ T30] audit: type=1800 audit(1754077227.910:3): pid=9464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.941" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1041 res=0 errno=0 [ 250.351330][ T9478] netlink: 4 bytes leftover after parsing attributes in process `syz.4.946'. [ 250.462427][ T5953] tipc: Node number set to 1294575218 [ 250.845304][ T9499] lo speed is unknown, defaulting to 1000 [ 250.986209][ T9515] netlink: 8 bytes leftover after parsing attributes in process `syz.4.954'. [ 251.126016][ T9519] tipc: Enabled bearer , priority 0 [ 251.137998][ T9519] syzkaller0: entered promiscuous mode [ 251.144422][ T9519] syzkaller0: entered allmulticast mode [ 251.188661][ T9519] tipc: Resetting bearer [ 251.199083][ T9518] tipc: Resetting bearer [ 251.226839][ T9518] tipc: Disabling bearer [ 251.297930][ T9501] lo speed is unknown, defaulting to 1000 [ 251.631727][ T9537] netlink: 224 bytes leftover after parsing attributes in process `syz.2.961'. [ 251.678814][ T9537] netlink: 8 bytes leftover after parsing attributes in process `syz.2.961'. [ 251.703016][ T9540] netlink: 'syz.4.962': attribute type 7 has an invalid length. [ 251.736633][ T9540] netlink: 'syz.4.962': attribute type 8 has an invalid length. [ 251.747362][ T9541] netlink: 'syz.4.962': attribute type 7 has an invalid length. [ 251.755333][ T9541] netlink: 'syz.4.962': attribute type 8 has an invalid length. [ 251.802250][ T9509] lo speed is unknown, defaulting to 1000 [ 251.830700][ T9543] netlink: 24 bytes leftover after parsing attributes in process `syz.2.963'. [ 253.857364][ T9587] syzkaller1: entered promiscuous mode [ 253.871406][ T9587] syzkaller1: entered allmulticast mode [ 254.167037][ T9615] tipc: Enabled bearer , priority 0 [ 254.175090][ T9615] syzkaller0: entered promiscuous mode [ 254.180613][ T9615] syzkaller0: entered allmulticast mode [ 254.216883][ T9615] tipc: Resetting bearer [ 254.230536][ T9615] syzkaller0: tun_net_xmit 90 [ 254.254700][ T9617] tipc: Enabled bearer , priority 0 [ 254.279078][ T9615] __nla_validate_parse: 5 callbacks suppressed [ 254.279099][ T9615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.977'. [ 254.291219][ T9617] syzkaller0: entered promiscuous mode [ 254.301104][ T9617] syzkaller0: entered allmulticast mode [ 254.326685][ T9614] tipc: Resetting bearer [ 254.344381][ T9614] tipc: Disabling bearer [ 254.364590][ T9617] tipc: Resetting bearer [ 254.374819][ T9616] tipc: Resetting bearer [ 254.398082][ T9616] tipc: Disabling bearer [ 255.049424][ T9655] netlink: 6 bytes leftover after parsing attributes in process `syz.2.991'. [ 255.067433][ T9655] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 255.251158][ T9667] netlink: 4 bytes leftover after parsing attributes in process `syz.1.994'. [ 256.471015][ T9703] FAULT_INJECTION: forcing a failure. [ 256.471015][ T9703] name failslab, interval 1, probability 0, space 0, times 0 [ 256.515679][ T9703] CPU: 1 UID: 0 PID: 9703 Comm: syz.4.1004 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 256.515713][ T9703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 256.515726][ T9703] Call Trace: [ 256.515743][ T9703] [ 256.515753][ T9703] dump_stack_lvl+0x189/0x250 [ 256.515783][ T9703] ? __pfx____ratelimit+0x10/0x10 [ 256.515815][ T9703] ? __pfx_dump_stack_lvl+0x10/0x10 [ 256.515838][ T9703] ? __pfx__printk+0x10/0x10 [ 256.515872][ T9703] ? __pfx___might_resched+0x10/0x10 [ 256.515905][ T9703] ? fs_reclaim_acquire+0x7d/0x100 [ 256.515936][ T9703] should_fail_ex+0x414/0x560 [ 256.515978][ T9703] should_failslab+0xa8/0x100 [ 256.516001][ T9703] __kmalloc_noprof+0xcb/0x4f0 [ 256.516031][ T9703] ? kfree+0x4d/0x440 [ 256.516058][ T9703] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 256.516098][ T9703] tomoyo_realpath_from_path+0xe3/0x5d0 [ 256.516133][ T9703] ? tomoyo_domain+0xd9/0x130 [ 256.516173][ T9703] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 256.516201][ T9703] tomoyo_path_number_perm+0x1e8/0x5a0 [ 256.516232][ T9703] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 256.516281][ T9703] ? __lock_acquire+0xab9/0xd20 [ 256.516336][ T9703] ? __fget_files+0x2a/0x420 [ 256.516362][ T9703] ? __fget_files+0x2a/0x420 [ 256.516381][ T9703] ? __fget_files+0x3a0/0x420 [ 256.516401][ T9703] ? __fget_files+0x2a/0x420 [ 256.516427][ T9703] security_file_ioctl+0xcb/0x2d0 [ 256.516455][ T9703] __se_sys_ioctl+0x47/0x170 [ 256.516488][ T9703] do_syscall_64+0xfa/0x3b0 [ 256.516521][ T9703] ? lockdep_hardirqs_on+0x9c/0x150 [ 256.516551][ T9703] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.516573][ T9703] ? clear_bhb_loop+0x60/0xb0 [ 256.516601][ T9703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.516622][ T9703] RIP: 0033:0x7f34cb98eb69 [ 256.516642][ T9703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.516662][ T9703] RSP: 002b:00007f34cc77e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 256.516686][ T9703] RAX: ffffffffffffffda RBX: 00007f34cbbb6160 RCX: 00007f34cb98eb69 [ 256.516702][ T9703] RDX: 0000000000000000 RSI: 0000000000008905 RDI: 0000000000000003 [ 256.516715][ T9703] RBP: 00007f34cc77e090 R08: 0000000000000000 R09: 0000000000000000 [ 256.516729][ T9703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.516748][ T9703] R13: 0000000000000001 R14: 00007f34cbbb6160 R15: 00007ffc7fd54338 [ 256.516784][ T9703] [ 256.516794][ T9703] ERROR: Out of memory at tomoyo_realpath_from_path. [ 256.879655][ T9719] netlink: 'syz.3.1005': attribute type 10 has an invalid length. [ 257.128134][ T9725] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1008'. [ 257.679579][ T9760] lo speed is unknown, defaulting to 1000 [ 258.119616][ T9771] FAULT_INJECTION: forcing a failure. [ 258.119616][ T9771] name failslab, interval 1, probability 0, space 0, times 0 [ 258.134708][ T9771] CPU: 0 UID: 0 PID: 9771 Comm: syz.3.1018 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 258.134743][ T9771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 258.134757][ T9771] Call Trace: [ 258.134766][ T9771] [ 258.134775][ T9771] dump_stack_lvl+0x189/0x250 [ 258.134809][ T9771] ? __pfx____ratelimit+0x10/0x10 [ 258.134839][ T9771] ? __pfx_dump_stack_lvl+0x10/0x10 [ 258.134862][ T9771] ? __pfx__printk+0x10/0x10 [ 258.134892][ T9771] ? __pfx___might_resched+0x10/0x10 [ 258.134924][ T9771] ? fs_reclaim_acquire+0x7d/0x100 [ 258.134953][ T9771] should_fail_ex+0x414/0x560 [ 258.134993][ T9771] should_failslab+0xa8/0x100 [ 258.135016][ T9771] __kmalloc_noprof+0xcb/0x4f0 [ 258.135046][ T9771] ? tomoyo_encode+0x28b/0x550 [ 258.135083][ T9771] tomoyo_encode+0x28b/0x550 [ 258.135121][ T9771] tomoyo_realpath_from_path+0x58d/0x5d0 [ 258.135155][ T9771] ? tomoyo_domain+0xd9/0x130 [ 258.135194][ T9771] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 258.135222][ T9771] tomoyo_path_number_perm+0x1e8/0x5a0 [ 258.135251][ T9771] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 258.135294][ T9771] ? __lock_acquire+0xab9/0xd20 [ 258.135346][ T9771] ? __fget_files+0x2a/0x420 [ 258.135379][ T9771] ? __fget_files+0x2a/0x420 [ 258.135397][ T9771] ? __fget_files+0x3a0/0x420 [ 258.135416][ T9771] ? __fget_files+0x2a/0x420 [ 258.135441][ T9771] security_file_ioctl+0xcb/0x2d0 [ 258.135468][ T9771] __se_sys_ioctl+0x47/0x170 [ 258.135501][ T9771] do_syscall_64+0xfa/0x3b0 [ 258.135529][ T9771] ? lockdep_hardirqs_on+0x9c/0x150 [ 258.135557][ T9771] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.135579][ T9771] ? clear_bhb_loop+0x60/0xb0 [ 258.135606][ T9771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.135627][ T9771] RIP: 0033:0x7f776f98eb69 [ 258.135647][ T9771] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.135666][ T9771] RSP: 002b:00007f7770752038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 258.135690][ T9771] RAX: ffffffffffffffda RBX: 00007f776fbb5fa0 RCX: 00007f776f98eb69 [ 258.135706][ T9771] RDX: 0000000000000000 RSI: 0000000000008905 RDI: 0000000000000003 [ 258.135719][ T9771] RBP: 00007f7770752090 R08: 0000000000000000 R09: 0000000000000000 [ 258.135732][ T9771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.135744][ T9771] R13: 0000000000000000 R14: 00007f776fbb5fa0 R15: 00007fff2a1e97a8 [ 258.135777][ T9771] [ 258.391494][ T9771] ERROR: Out of memory at tomoyo_realpath_from_path. [ 258.730089][ T9780] netlink: 'syz.0.1021': attribute type 1 has an invalid length. [ 258.747567][ T9780] netlink: 'syz.0.1021': attribute type 2 has an invalid length. [ 258.757687][ T9780] netlink: 'syz.0.1021': attribute type 8 has an invalid length. [ 258.780154][ T9780] netlink: 1148 bytes leftover after parsing attributes in process `syz.0.1021'. [ 258.818581][ T9786] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1022'. [ 258.957542][ T9790] bridge_slave_0: left allmulticast mode [ 258.989405][ T9790] bridge_slave_0: left promiscuous mode [ 259.020101][ T9790] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.074766][ T9790] bridge_slave_1: left allmulticast mode [ 259.090090][ T9790] bridge_slave_1: left promiscuous mode [ 259.121552][ T9790] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.183972][ T9808] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1031'. [ 259.194401][ T9790] bond0: (slave 1@ÿ): Releasing backup interface [ 259.212813][ T9790] bond0: (slave bond_slave_1): Releasing backup interface [ 259.248146][ T9790] team0: Port device team_slave_0 removed [ 259.260835][ T9790] team0: Port device team_slave_1 removed [ 259.280098][ T9790] bond2: left allmulticast mode [ 259.285630][ T9812] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1030'. [ 259.299875][ T9790] bond2: left promiscuous mode [ 259.309376][ T9790] bridge0: port 3(bond2) entered disabled state [ 259.350110][ T9812] tipc: Enabled bearer , priority 0 [ 259.371526][ T9806] tipc: Resetting bearer [ 259.381322][ T9806] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1030'. [ 259.405046][ T9804] tipc: Disabling bearer [ 259.648709][ T9826] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1035'. [ 259.714279][ T9826] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1035'. [ 259.760461][ T9827] lo speed is unknown, defaulting to 1000 [ 259.925757][ T9838] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1038'. [ 259.941834][ T9838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1038'. [ 260.027444][ T9838] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1038'. [ 260.081387][ T9838] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1038'. [ 260.121514][ T9838] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1038'. [ 260.234050][ T9838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1038'. [ 260.252643][ T9838] openvswitch: netlink: Unknown nsh attribute 0 [ 260.260605][ T9838] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 260.440432][ T9856] 8021q: adding VLAN 0 to HW filter on device bond4 [ 260.448263][ T9857] bond4: option mode: unable to set because the bond device is up [ 260.484447][ T9863] netlink: 'syz.4.1044': attribute type 10 has an invalid length. [ 260.742240][ T9882] tipc: Enabled bearer , priority 0 [ 260.755353][ T9870] syzkaller0: entered promiscuous mode [ 260.761057][ T9870] syzkaller0: entered allmulticast mode [ 260.931100][ T9870] tipc: Resetting bearer [ 260.979277][ T9867] tipc: Resetting bearer [ 261.206593][ T9867] tipc: Disabling bearer [ 261.646048][ T9907] pim6reg: entered allmulticast mode [ 261.698408][ T9914] FAULT_INJECTION: forcing a failure. [ 261.698408][ T9914] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 261.723445][ T9912] netlink: 'syz.1.1057': attribute type 2 has an invalid length. [ 261.736774][ T9914] CPU: 0 UID: 0 PID: 9914 Comm: syz.4.1059 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 261.736808][ T9914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 261.736822][ T9914] Call Trace: [ 261.736830][ T9914] [ 261.736840][ T9914] dump_stack_lvl+0x189/0x250 [ 261.736869][ T9914] ? __pfx____ratelimit+0x10/0x10 [ 261.736900][ T9914] ? __pfx_dump_stack_lvl+0x10/0x10 [ 261.736922][ T9914] ? __pfx__printk+0x10/0x10 [ 261.736949][ T9914] ? __might_fault+0xb0/0x130 [ 261.736995][ T9914] should_fail_ex+0x414/0x560 [ 261.737036][ T9914] _copy_from_user+0x2d/0xb0 [ 261.737076][ T9914] generic_map_update_batch+0x51b/0x7f0 [ 261.737116][ T9914] ? __pfx_generic_map_update_batch+0x10/0x10 [ 261.737141][ T9914] ? __fget_files+0x2a/0x420 [ 261.737170][ T9914] ? __pfx_generic_map_update_batch+0x10/0x10 [ 261.737194][ T9914] bpf_map_do_batch+0x36c/0x5f0 [ 261.737234][ T9914] __sys_bpf+0x6af/0x870 [ 261.737266][ T9914] ? __pfx___sys_bpf+0x10/0x10 [ 261.737311][ T9914] ? ksys_write+0x22a/0x250 [ 261.737345][ T9914] ? __pfx_ksys_write+0x10/0x10 [ 261.737374][ T9914] ? rcu_is_watching+0x15/0xb0 [ 261.737416][ T9914] __x64_sys_bpf+0x7c/0x90 [ 261.737445][ T9914] do_syscall_64+0xfa/0x3b0 [ 261.737476][ T9914] ? lockdep_hardirqs_on+0x9c/0x150 [ 261.737505][ T9914] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.737527][ T9914] ? clear_bhb_loop+0x60/0xb0 [ 261.737553][ T9914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.737573][ T9914] RIP: 0033:0x7f34cb98eb69 [ 261.737593][ T9914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.737612][ T9914] RSP: 002b:00007f34cc7c0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 261.737636][ T9914] RAX: ffffffffffffffda RBX: 00007f34cbbb5fa0 RCX: 00007f34cb98eb69 [ 261.737652][ T9914] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 261.737667][ T9914] RBP: 00007f34cc7c0090 R08: 0000000000000000 R09: 0000000000000000 [ 261.737680][ T9914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 261.737693][ T9914] R13: 0000000000000000 R14: 00007f34cbbb5fa0 R15: 00007ffc7fd54338 [ 261.737727][ T9914] [ 262.060407][ T9923] batadv_slave_1: entered promiscuous mode [ 262.316895][ T9939] netlink: 'syz.1.1065': attribute type 10 has an invalid length. [ 262.396978][ T9939] team0: Port device geneve0 added [ 262.418524][ T9941] netlink: 'syz.4.1067': attribute type 4 has an invalid length. [ 262.449836][ T9942] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 262.473223][ T9947] veth1_macvtap: left promiscuous mode [ 262.478794][ T9947] macsec0: entered allmulticast mode [ 262.510854][ T9947] veth1_macvtap: entered promiscuous mode [ 262.560891][ T9947] veth1_macvtap: entered allmulticast mode [ 262.603665][ T9947] macsec0: left allmulticast mode [ 262.619019][ T9947] veth1_macvtap: left allmulticast mode [ 262.794289][ T9958] syzkaller0: tun_net_xmit 76 [ 262.800294][ T9958] tipc: Enabled bearer , priority 0 [ 262.876083][ T9954] tipc: Resetting bearer [ 262.903586][ T9954] syzkaller0: tun_net_xmit 76 [ 262.994460][ T9952] tipc: Resetting bearer [ 263.416842][ T9978] "syz.0.1077" (9978) uses obsolete ecb(arc4) skcipher [ 263.842467][ T5897] tipc: Node number set to 2061860500 [ 264.827698][ T9952] tipc: Disabling bearer [ 264.839663][ T9970] tipc: Enabled bearer , priority 0 [ 264.848892][ T9973] syzkaller0: entered promiscuous mode [ 264.862709][ T9973] syzkaller0: entered allmulticast mode [ 264.951576][ T9987] tipc: Resetting bearer [ 265.099888][ T9987] tipc: Resetting bearer [ 265.146389][ T9987] tipc: Disabling bearer [ 265.262215][T10012] netlink: 'syz.1.1085': attribute type 10 has an invalid length. [ 266.408353][T10044] bond0: entered promiscuous mode [ 266.426342][T10044] bond_slave_0: entered promiscuous mode [ 266.435840][T10044] bond_slave_1: entered promiscuous mode [ 266.443618][T10044] macvlan0: entered promiscuous mode [ 266.451911][T10044] batadv0: entered promiscuous mode [ 266.476389][T10044] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 266.499495][T10044] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 266.511143][T10044] hsr1: entered allmulticast mode [ 266.529067][T10044] bond0: entered allmulticast mode [ 266.537063][T10044] bond_slave_0: entered allmulticast mode [ 266.545576][T10044] bond_slave_1: entered allmulticast mode [ 266.551835][T10044] macvlan0: entered allmulticast mode [ 266.580072][T10044] batadv0: entered allmulticast mode [ 266.586443][T10044] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 266.600665][T10044] bond0: left promiscuous mode [ 266.606232][T10044] bond_slave_0: left promiscuous mode [ 266.611961][T10044] bond_slave_1: left promiscuous mode [ 266.618078][T10044] macvlan0: left promiscuous mode [ 266.627794][T10044] batadv0: left promiscuous mode [ 266.815291][T10065] syz_tun: entered allmulticast mode [ 266.831254][T10065] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 267.058414][T10061] lo speed is unknown, defaulting to 1000 [ 267.131707][T10077] openvswitch: netlink: IP tunnel dst address not specified [ 267.256176][T10085] __nla_validate_parse: 10 callbacks suppressed [ 267.256198][T10085] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1105'. [ 267.285504][T10085] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 267.647748][T10097] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1111'. [ 267.675054][T10100] tipc: Enabling of bearer rejected, failed to enable media [ 267.755698][T10103] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1110'. [ 267.809034][T10104] lo speed is unknown, defaulting to 1000 [ 267.815185][T10107] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1114'. [ 268.175687][T10115] macsec2: entered promiscuous mode [ 268.655399][T10125] IPv4: Oversized IP packet from 127.202.26.0 [ 268.712247][T10130] IPv4: Oversized IP packet from 127.202.26.0 [ 269.086162][T10134] lo speed is unknown, defaulting to 1000 [ 269.174498][T10141] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1123'. [ 270.014218][T10162] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1130'. [ 270.114146][T10158] sctp: [Deprecated]: syz.4.1126 (pid 10158) Use of struct sctp_assoc_value in delayed_ack socket option. [ 270.114146][T10158] Use struct sctp_sack_info instead [ 270.265157][T10172] netlink: 6032 bytes leftover after parsing attributes in process `syz.1.1131'. [ 270.408818][T10135] lo speed is unknown, defaulting to 1000 [ 270.463043][T10177] delete_channel: no stack [ 271.143486][T10164] lo speed is unknown, defaulting to 1000 [ 271.276237][T10221] netlink: 'syz.1.1147': attribute type 10 has an invalid length. [ 271.297667][T10221] team0: Port device dummy0 added [ 271.500263][T10196] lo speed is unknown, defaulting to 1000 [ 272.121293][T10233] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1150'. [ 272.242037][T10229] lo speed is unknown, defaulting to 1000 [ 272.745484][T10232] lo speed is unknown, defaulting to 1000 [ 273.150086][T10242] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1154'. [ 273.159827][T10242] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1154'. [ 273.331623][T10246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1155'. [ 273.387984][T10246] ip6tnl0: Master is either lo or non-ether device [ 273.606914][T10253] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1158'. [ 273.620604][T10253] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1158'. [ 273.630896][T10253] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1158'. [ 273.846296][T10259] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1159'. [ 273.921882][T10259] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1159'. [ 273.932043][T10259] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1159'. [ 273.941576][T10259] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1159'. [ 274.438331][T10275] gretap1: entered promiscuous mode [ 274.443878][T10275] gretap1: entered allmulticast mode [ 276.024333][T10341] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 276.896983][ T59] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 277.160362][T10384] erspan0: left allmulticast mode [ 277.332082][T10384] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 277.451070][T10384] bond1: left promiscuous mode [ 277.457251][T10384] bond1: left allmulticast mode [ 277.463995][T10384] bond2: left promiscuous mode [ 277.468921][T10384] bond2: left allmulticast mode [ 277.475502][T10384] veth7: left promiscuous mode [ 277.485154][T10384] batman_adv: batadv0: Interface deactivated: macsec1 [ 277.493379][T10384] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 277.500326][T10384] macsec1: left allmulticast mode [ 277.513990][T10384] gretap1: left promiscuous mode [ 277.519098][T10384] gretap1: left allmulticast mode [ 277.528219][ T13] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 277.539739][ T13] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.551332][ T13] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 277.563857][ T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.574736][ T13] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 277.589314][ T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.598678][ T13] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 277.608044][ T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.891791][T10413] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 277.942559][T10413] syzkaller1: entered promiscuous mode [ 277.962440][T10413] syzkaller1: entered allmulticast mode [ 278.001786][T10413] bond0: (slave dummy0): Releasing backup interface [ 278.049546][T10413] bridge_slave_0: left allmulticast mode [ 278.058303][T10413] bridge_slave_0: left promiscuous mode [ 278.072905][T10413] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.110558][T10413] bridge_slave_1: left allmulticast mode [ 278.162700][T10413] bridge_slave_1: left promiscuous mode [ 278.169381][T10413] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.255293][T10413] bond0: (slave bond_slave_0): Releasing backup interface [ 278.282230][T10413] bond0: (slave bond_slave_1): Releasing backup interface [ 278.294984][T10413] team0: Port device team_slave_0 removed [ 278.303841][T10413] team0: Port device team_slave_1 removed [ 278.310174][T10413] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.319410][T10413] batman_adv: batadv0: Removing interface: macsec1 [ 278.340299][T10422] __nla_validate_parse: 15 callbacks suppressed [ 278.340323][T10422] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1194'. [ 278.642952][T10425] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1195'. [ 279.254159][T10442] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1200'. [ 279.268031][T10444] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 279.268087][T10441] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1200'. [ 279.428570][T10448] lo speed is unknown, defaulting to 1000 [ 279.428804][T10450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1201'. [ 279.443855][T10450] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1201'. [ 279.923722][T10475] netlink: 'syz.0.1207': attribute type 4 has an invalid length. [ 279.931715][T10475] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1207'. [ 279.961173][T10475] Ã: renamed from bond0 [ 280.340640][T10486] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1202'. [ 280.591684][T10476] netlink: 'syz.1.1209': attribute type 13 has an invalid length. [ 280.610351][T10476] netlink: 'syz.1.1209': attribute type 17 has an invalid length. [ 280.610856][T10471] lo speed is unknown, defaulting to 1000 [ 280.763460][T10493] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1209'. [ 280.819973][T10493] bridge_slave_0: entered allmulticast mode [ 281.333093][T10476] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.391046][T10476] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 281.552094][T10509] netlink: 'syz.4.1214': attribute type 33 has an invalid length. [ 281.575376][T10509] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1214'. [ 281.608233][ T8868] bridge0: port 1(0!) entered disabled state [ 281.667512][T10500] lo speed is unknown, defaulting to 1000 [ 281.922185][T10513] bridge3: entered promiscuous mode [ 282.628161][T10540] pim6reg1: entered promiscuous mode [ 282.639429][T10540] pim6reg1: entered allmulticast mode [ 282.807652][T10542] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 283.229206][T10554] tipc: Enabled bearer , priority 0 [ 283.413491][T10554] tipc: Disabling bearer [ 283.993885][T10586] lo speed is unknown, defaulting to 1000 [ 284.112967][T10596] __nla_validate_parse: 5 callbacks suppressed [ 284.112989][T10596] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1240'. [ 284.156606][T10588] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1239'. [ 284.315182][T10597] IPv6: Can't replace route, no match found [ 284.540699][T10621] netlink: 'syz.3.1245': attribute type 13 has an invalid length. [ 284.568045][T10621] netlink: 'syz.3.1245': attribute type 17 has an invalid length. [ 284.683512][T10621] 0ªî{X¹¦: left allmulticast mode [ 284.886033][T10621] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 284.960682][T10630] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 285.069480][T10639] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1251'. [ 285.099976][T10623] lo speed is unknown, defaulting to 1000 [ 285.239712][T10647] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1251'. [ 285.265498][T10639] bond4: entered promiscuous mode [ 285.272939][T10639] bond4: entered allmulticast mode [ 285.278733][T10639] 8021q: adding VLAN 0 to HW filter on device bond4 [ 285.326931][T10649] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1252'. [ 285.494936][T10643] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1251'. [ 285.537281][T10659] syzkaller0: entered promiscuous mode [ 285.545379][T10659] syzkaller0: entered allmulticast mode [ 285.559412][T10656] tipc: Enabled bearer , priority 0 [ 285.578665][T10658] netlink: 'syz.2.1255': attribute type 7 has an invalid length. [ 285.587025][T10658] netlink: 'syz.2.1255': attribute type 8 has an invalid length. [ 285.595957][T10658] netlink: 'syz.2.1255': attribute type 4 has an invalid length. [ 285.626438][T10658] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1255'. [ 285.693944][T10656] tipc: Resetting bearer [ 285.784370][T10656] tipc: Disabling bearer [ 285.820932][T10665] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1257'. [ 286.338822][T10684] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1262'. [ 286.574434][T10698] netlink: 'syz.2.1265': attribute type 1 has an invalid length. [ 286.585955][T10698] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1265'. [ 286.619582][T10700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.667880][T10699] 8021q: adding VLAN 0 to HW filter on device bond4 [ 286.814084][T10711] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 286.872708][T10707] lo speed is unknown, defaulting to 1000 [ 287.155303][T10727] (unnamed net_device) (uninitialized): option ad_select: invalid value (34) [ 288.761842][T10776] hsr_slave_1 (unregistering): left promiscuous mode [ 288.971882][T10796] bridge3: entered promiscuous mode [ 288.980553][T10796] bridge3: entered allmulticast mode [ 289.156664][T10804] openvswitch: netlink: Flow key attribute not present in set flow. [ 289.160809][T10806] netlink: 'syz.3.1301': attribute type 1 has an invalid length. [ 289.219756][T10806] 8021q: adding VLAN 0 to HW filter on device bond5 [ 289.237537][T10806] netlink: 'syz.3.1301': attribute type 4 has an invalid length. [ 289.250527][T10806] netlink: 'syz.3.1301': attribute type 4 has an invalid length. [ 289.332902][T10806] block nbd1: server does not support multiple connections per device. [ 289.346932][T10806] block nbd1: shutting down sockets [ 289.416422][T10812] sctp: [Deprecated]: syz.1.1302 (pid 10812) Use of struct sctp_assoc_value in delayed_ack socket option. [ 289.416422][T10812] Use struct sctp_sack_info instead [ 289.726509][T10826] tipc: Enabling of bearer rejected, failed to enable media [ 290.061771][T10846] __nla_validate_parse: 5 callbacks suppressed [ 290.061793][T10846] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1313'. [ 290.154635][T10850] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1314'. [ 290.396402][T10858] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1319'. [ 290.505741][T10865] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1319'. [ 290.604443][T10865] bridge4: entered promiscuous mode [ 290.615330][T10865] macsec1: entered promiscuous mode [ 290.621127][T10865] macsec1: entered allmulticast mode [ 290.630614][T10865] bridge4: entered allmulticast mode [ 290.645737][T10865] bridge4: port 1(macsec1) entered blocking state [ 290.659474][T10865] bridge4: port 1(macsec1) entered disabled state [ 290.678606][T10865] bridge4: left allmulticast mode [ 290.686792][T10865] bridge4: left promiscuous mode [ 290.894893][T10885] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1324'. [ 290.918907][T10885] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1324'. [ 290.928582][T10885] tipc: Invalid UDP bearer configuration [ 290.928638][T10885] tipc: Enabling of bearer rejected, failed to enable media [ 290.956294][T10891] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1326'. [ 291.001656][T10893] netlink: 'syz.3.1327': attribute type 1 has an invalid length. [ 291.116043][T10891] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1326'. [ 291.138452][T10897] bond6: entered promiscuous mode [ 291.166252][T10897] bond6: entered allmulticast mode [ 291.189772][T10897] 8021q: adding VLAN 0 to HW filter on device bond6 [ 291.251098][T10893] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1327'. [ 291.463832][T10907] netlink: 'syz.0.1331': attribute type 1 has an invalid length. [ 291.621489][T10914] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1334'. [ 291.650916][T10916] syz.4.1333: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 291.713904][T10916] CPU: 1 UID: 0 PID: 10916 Comm: syz.4.1333 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 291.713938][T10916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 291.713951][T10916] Call Trace: [ 291.713959][T10916] [ 291.713968][T10916] dump_stack_lvl+0x189/0x250 [ 291.713997][T10916] ? __pfx_dump_stack_lvl+0x10/0x10 [ 291.714018][T10916] ? __pfx__printk+0x10/0x10 [ 291.714043][T10916] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 291.714066][T10916] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 291.714091][T10916] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 291.714116][T10916] warn_alloc+0x214/0x310 [ 291.714135][T10916] ? stack_depot_save_flags+0x40/0x900 [ 291.714158][T10916] ? __pfx_warn_alloc+0x10/0x10 [ 291.714181][T10916] ? kasan_save_track+0x4f/0x80 [ 291.714208][T10916] ? xskq_create+0x56/0x170 [ 291.714233][T10916] ? xsk_init_queue+0xb0/0x110 [ 291.714256][T10916] ? xsk_setsockopt+0x4dc/0x8d0 [ 291.714278][T10916] ? do_sock_setsockopt+0x17c/0x1b0 [ 291.714296][T10916] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 291.714312][T10916] ? do_syscall_64+0xfa/0x3b0 [ 291.714340][T10916] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.714367][T10916] __vmalloc_node_range_noprof+0x125/0x12f0 [ 291.714417][T10916] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 291.714438][T10916] ? xskq_create+0x56/0x170 [ 291.714467][T10916] ? __kasan_kmalloc+0x93/0xb0 [ 291.714498][T10916] vmalloc_user_noprof+0xad/0xf0 [ 291.714605][T10916] ? xskq_create+0xbf/0x170 [ 291.714643][T10916] xskq_create+0xbf/0x170 [ 291.714679][T10916] xsk_init_queue+0xb0/0x110 [ 291.714712][T10916] xsk_setsockopt+0x4dc/0x8d0 [ 291.714742][T10916] ? __pfx_xsk_setsockopt+0x10/0x10 [ 291.714771][T10916] ? __pfx_aa_sk_perm+0x10/0x10 [ 291.714804][T10916] ? aa_sock_opt_perm+0x74/0x110 [ 291.714836][T10916] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 291.714861][T10916] ? __pfx_xsk_setsockopt+0x10/0x10 [ 291.714890][T10916] do_sock_setsockopt+0x17c/0x1b0 [ 291.714919][T10916] __x64_sys_setsockopt+0x13f/0x1b0 [ 291.714947][T10916] do_syscall_64+0xfa/0x3b0 [ 291.714979][T10916] ? lockdep_hardirqs_on+0x9c/0x150 [ 291.715010][T10916] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.715032][T10916] ? clear_bhb_loop+0x60/0xb0 [ 291.715059][T10916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.715080][T10916] RIP: 0033:0x7f34cb98eb69 [ 291.715100][T10916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.715118][T10916] RSP: 002b:00007f34cc79f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 291.715144][T10916] RAX: ffffffffffffffda RBX: 00007f34cbbb6080 RCX: 00007f34cb98eb69 [ 291.715160][T10916] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 291.715173][T10916] RBP: 00007f34cba11df1 R08: 0000000000000004 R09: 0000000000000000 [ 291.715186][T10916] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 291.715200][T10916] R13: 0000000000000000 R14: 00007f34cbbb6080 R15: 00007ffc7fd54338 [ 291.715236][T10916] [ 291.715245][T10916] Mem-Info: [ 292.025971][T10916] active_anon:7461 inactive_anon:0 isolated_anon:0 [ 292.025971][T10916] active_file:1751 inactive_file:39906 isolated_file:0 [ 292.025971][T10916] unevictable:768 dirty:261 writeback:0 [ 292.025971][T10916] slab_reclaimable:11372 slab_unreclaimable:129933 [ 292.025971][T10916] mapped:33367 shmem:4211 pagetables:1140 [ 292.025971][T10916] sec_pagetables:0 bounce:0 [ 292.025971][T10916] kernel_misc_reclaimable:0 [ 292.025971][T10916] free:1292463 free_pcp:16860 free_cma:0 [ 292.086540][T10916] Node 0 active_anon:29896kB inactive_anon:0kB active_file:7004kB inactive_file:159420kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:130880kB dirty:1052kB writeback:0kB shmem:15388kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12920kB pagetables:4520kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 292.122655][T10916] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 292.157116][T10916] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 292.272038][T10916] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 292.302986][T10916] Node 0 DMA32 free:1262676kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21952kB inactive_anon:0kB active_file:7004kB inactive_file:157588kB unevictable:1536kB writepending:1052kB present:3129332kB managed:2560292kB mlocked:0kB bounce:0kB free_pcp:51456kB local_pcp:21120kB free_cma:0kB [ 292.424368][T10916] lowmem_reserve[]: 0 0 1 1 1 [ 292.444023][T10916] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1832kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 292.590064][T10916] lowmem_reserve[]: 0 0 0 0 0 [ 292.610196][T10916] Node 1 Normal free:3898240kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:19584kB local_pcp:8512kB free_cma:0kB [ 292.636116][T10934] lo speed is unknown, defaulting to 1000 [ 292.671509][T10916] lowmem_reserve[]: 0 0 0 0 0 [ 292.693889][T10916] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 292.761844][T10916] Node 0 DMA32: 1987*4kB (UME) 886*8kB (UM) 115*16kB (UME) 712*32kB (UME) 670*64kB (UM) 168*128kB (UME) 43*256kB (UM) 18*512kB (UME) 13*1024kB (UME) 7*2048kB (UM) 272*4096kB (UM) = 1266028kB [ 292.803480][T10949] netlink: 'syz.3.1340': attribute type 9 has an invalid length. [ 292.827616][T10916] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 292.872463][T10916] Node 1 Normal: 198*4kB (UE) 41*8kB (UME) 42*16kB (UME) 128*32kB (UME) 46*64kB (UME) 10*128kB (UM) 2*256kB (M) 3*512kB (ME) 3*1024kB (UME) 2*2048kB (UE) 947*4096kB (M) = 3898240kB [ 292.930891][T10916] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 292.953648][T10916] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 292.964524][T10916] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 293.004649][T10916] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 293.026853][T10916] 43023 total pagecache pages [ 293.037237][T10916] 0 pages in swap cache [ 293.047686][T10916] Free swap = 124996kB [ 293.066507][T10916] Total swap = 124996kB [ 293.080945][T10916] 2097051 pages RAM [ 293.089155][T10916] 0 pages HighMem/MovableOnly [ 293.119725][T10916] 424872 pages reserved [ 293.137340][T10916] 0 pages cma reserved [ 293.295777][T10932] lo speed is unknown, defaulting to 1000 [ 293.757442][T10976] vlan0: entered promiscuous mode [ 293.876089][T10976] team0: Port device vlan0 added [ 294.863521][T11016] Set syz0 is full, maxelem 0 reached [ 295.110723][T11028] FAULT_INJECTION: forcing a failure. [ 295.110723][T11028] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 295.140289][T11028] CPU: 1 UID: 0 PID: 11028 Comm: syz.3.1364 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 295.140323][T11028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 295.140338][T11028] Call Trace: [ 295.140347][T11028] [ 295.140356][T11028] dump_stack_lvl+0x189/0x250 [ 295.140387][T11028] ? __pfx____ratelimit+0x10/0x10 [ 295.140418][T11028] ? __pfx_dump_stack_lvl+0x10/0x10 [ 295.140452][T11028] ? __pfx__printk+0x10/0x10 [ 295.140480][T11028] ? __might_fault+0xb0/0x130 [ 295.140525][T11028] should_fail_ex+0x414/0x560 [ 295.140566][T11028] _copy_from_user+0x2d/0xb0 [ 295.140598][T11028] kcm_setsockopt+0x172/0x4e0 [ 295.140623][T11028] ? __pfx_aa_sk_perm+0x10/0x10 [ 295.140653][T11028] ? __pfx_kcm_setsockopt+0x10/0x10 [ 295.140676][T11028] ? aa_sock_opt_perm+0x74/0x110 [ 295.140705][T11028] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 295.140730][T11028] ? __pfx_kcm_setsockopt+0x10/0x10 [ 295.140757][T11028] do_sock_setsockopt+0x17c/0x1b0 [ 295.140786][T11028] __x64_sys_setsockopt+0x13f/0x1b0 [ 295.140814][T11028] do_syscall_64+0xfa/0x3b0 [ 295.140845][T11028] ? lockdep_hardirqs_on+0x9c/0x150 [ 295.140874][T11028] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.140896][T11028] ? clear_bhb_loop+0x60/0xb0 [ 295.140923][T11028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.140944][T11028] RIP: 0033:0x7f776f98eb69 [ 295.140964][T11028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 295.140983][T11028] RSP: 002b:00007f7770731038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 295.141008][T11028] RAX: ffffffffffffffda RBX: 00007f776fbb6080 RCX: 00007f776f98eb69 [ 295.141024][T11028] RDX: 0000000000000001 RSI: 0000000000000119 RDI: 0000000000000003 [ 295.141037][T11028] RBP: 00007f7770731090 R08: 0000000000000004 R09: 0000000000000000 [ 295.141050][T11028] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 295.141064][T11028] R13: 0000000000000001 R14: 00007f776fbb6080 R15: 00007fff2a1e97a8 [ 295.141096][T11028] [ 295.294042][T11029] __nla_validate_parse: 12 callbacks suppressed [ 295.294067][T11029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1365'. [ 295.395646][T11029] syz_tun: entered promiscuous mode [ 295.416355][T11029] macsec2: entered allmulticast mode [ 295.421716][T11029] syz_tun: entered allmulticast mode [ 295.621818][T11038] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1368'. [ 295.658079][T11042] veth1_macvtap: left promiscuous mode [ 295.666304][T11042] macsec0: entered allmulticast mode [ 295.678005][T11042] veth1_macvtap: entered promiscuous mode [ 295.685661][T11042] veth1_macvtap: entered allmulticast mode [ 295.693154][T11042] macsec0: left allmulticast mode [ 295.698602][T11042] veth1_macvtap: left allmulticast mode [ 295.717006][T11042] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1370'. [ 295.841333][T11052] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1373'. [ 295.943027][T11056] tipc: Enabled bearer , priority 0 [ 295.958898][T11056] syzkaller0: entered promiscuous mode [ 295.971611][T11056] syzkaller0: entered allmulticast mode [ 295.996874][T11057] tipc: Resetting bearer [ 296.027454][T11057] tipc: Disabling bearer [ 296.150655][T11072] tipc: Enabling of bearer rejected, failed to enable media [ 296.350612][T11075] FAULT_INJECTION: forcing a failure. [ 296.350612][T11075] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 296.364959][T11075] CPU: 1 UID: 0 PID: 11075 Comm: syz.2.1377 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 296.364992][T11075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 296.365005][T11075] Call Trace: [ 296.365014][T11075] [ 296.365023][T11075] dump_stack_lvl+0x189/0x250 [ 296.365051][T11075] ? __pfx____ratelimit+0x10/0x10 [ 296.365083][T11075] ? __pfx_dump_stack_lvl+0x10/0x10 [ 296.365105][T11075] ? __pfx__printk+0x10/0x10 [ 296.365147][T11075] should_fail_ex+0x414/0x560 [ 296.365187][T11075] _copy_to_user+0x31/0xb0 [ 296.365220][T11075] simple_read_from_buffer+0xe1/0x170 [ 296.365260][T11075] proc_fail_nth_read+0x1b3/0x220 [ 296.365290][T11075] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 296.365327][T11075] ? rw_verify_area+0x258/0x650 [ 296.365358][T11075] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 296.365386][T11075] vfs_read+0x1fd/0x980 [ 296.365416][T11075] ? fdget_pos+0x247/0x320 [ 296.365442][T11075] ? __pfx___mutex_lock+0x10/0x10 [ 296.365478][T11075] ? __pfx_vfs_read+0x10/0x10 [ 296.365510][T11075] ? __fget_files+0x2a/0x420 [ 296.365536][T11075] ? __fget_files+0x3a0/0x420 [ 296.365556][T11075] ? __fget_files+0x2a/0x420 [ 296.365588][T11075] ksys_read+0x145/0x250 [ 296.365621][T11075] ? __pfx_ksys_read+0x10/0x10 [ 296.365649][T11075] ? rcu_is_watching+0x15/0xb0 [ 296.365689][T11075] ? do_syscall_64+0xbe/0x3b0 [ 296.365730][T11075] do_syscall_64+0xfa/0x3b0 [ 296.365761][T11075] ? lockdep_hardirqs_on+0x9c/0x150 [ 296.365791][T11075] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.365813][T11075] ? clear_bhb_loop+0x60/0xb0 [ 296.365840][T11075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.365861][T11075] RIP: 0033:0x7f289838d57c [ 296.365881][T11075] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 296.365900][T11075] RSP: 002b:00007f289921f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 296.365925][T11075] RAX: ffffffffffffffda RBX: 00007f28985b6080 RCX: 00007f289838d57c [ 296.365941][T11075] RDX: 000000000000000f RSI: 00007f289921f0a0 RDI: 0000000000000004 [ 296.365955][T11075] RBP: 00007f289921f090 R08: 0000000000000000 R09: 0000000000000000 [ 296.365969][T11075] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 296.365982][T11075] R13: 0000000000000001 R14: 00007f28985b6080 R15: 00007ffd22e13448 [ 296.366016][T11075] [ 296.777590][T11079] tipc: Enabled bearer , priority 0 [ 296.861084][T11079] syzkaller0: entered promiscuous mode [ 296.888264][T11079] syzkaller0: entered allmulticast mode [ 296.972430][T11086] netlink: 'syz.0.1383': attribute type 21 has an invalid length. [ 297.065391][T11102] netlink: 'syz.0.1383': attribute type 1 has an invalid length. [ 297.095993][T11102] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1383'. [ 297.140839][T11086] netlink: 'syz.0.1383': attribute type 6 has an invalid length. [ 297.169470][T11086] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1383'. [ 297.257637][T11103] tipc: Resetting bearer [ 297.775547][T11078] tipc: Resetting bearer [ 297.861833][T11110] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1386'. [ 297.871190][T11110] netlink: 'syz.3.1386': attribute type 1 has an invalid length. [ 297.890912][T11078] tipc: Disabling bearer [ 298.022739][T11114] »»»»»»: renamed from bond_slave_0 [ 298.064372][T11120] netlink: 'syz.4.1389': attribute type 3 has an invalid length. [ 298.076552][T11121] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1388'. [ 298.105307][T11121] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1388'. [ 298.317148][T11132] block nbd1: Unsupported socket: shutdown callout must be supported. [ 298.714764][T11155] veth0: entered promiscuous mode [ 298.732812][T11155] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1399'. [ 298.810055][T11155] veth0 (unregistering): left promiscuous mode [ 299.070728][T11170] bond7: entered promiscuous mode [ 299.076551][T11170] 8021q: adding VLAN 0 to HW filter on device bond7 [ 299.447834][T11172] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 299.466417][T11172] bond0 (unregistering): Released all slaves [ 299.550879][T11165] lo speed is unknown, defaulting to 1000 [ 299.791900][T11203] netlink: 'syz.0.1412': attribute type 2 has an invalid length. [ 300.398339][T11228] __nla_validate_parse: 2 callbacks suppressed [ 300.398362][T11228] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1418'. [ 300.668032][T11233] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1420'. [ 300.736761][T11235] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1421'. [ 300.783477][T11238] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1422'. [ 300.815084][T11238] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1422'. [ 300.868038][T11238] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1422'. [ 300.941869][T11238] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 301.130299][T11247] lo speed is unknown, defaulting to 1000 [ 301.818502][T11270] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1431'. [ 301.828119][T11270] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1431'. [ 301.974895][T11271] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1432'. [ 302.463637][T11271] à (unregistering): Released all slaves [ 302.506094][T11290] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 302.524835][T11290] macsec3: entered promiscuous mode [ 302.531425][T11290] macsec3: entered allmulticast mode [ 302.539389][T11290] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 302.577160][T11295] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1438'. [ 302.898199][T11309] netlink: 'syz.2.1442': attribute type 29 has an invalid length. [ 304.286043][T11339] syzkaller1: entered allmulticast mode [ 304.308422][T11339] syzkaller1: left allmulticast mode [ 304.314618][T11342] IPVS: set_ctl: invalid protocol: 115 172.20.20.170:20000 [ 305.264834][T11385] tipc: Enabled bearer , priority 0 [ 305.283717][T11385] syzkaller0: entered promiscuous mode [ 305.309768][T11385] syzkaller0: entered allmulticast mode [ 305.410666][T11385] tipc: Resetting bearer [ 305.458045][T11382] tipc: Resetting bearer [ 305.501003][T11382] tipc: Disabling bearer [ 305.590356][T11402] __nla_validate_parse: 6 callbacks suppressed [ 305.590380][T11402] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1464'. [ 305.644065][T11394] lo speed is unknown, defaulting to 1000 [ 305.714347][T11408] bridge0: entered allmulticast mode [ 305.846770][T11413] netlink: 'syz.0.1465': attribute type 13 has an invalid length. [ 306.135286][T11424] netlink: 'syz.3.1469': attribute type 9 has an invalid length. [ 306.153132][T11424] netlink: 'syz.3.1469': attribute type 6 has an invalid length. [ 306.185029][T11413] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.226229][T11413] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 306.667658][T11442] syzkaller0: entered promiscuous mode [ 306.673958][T11442] syzkaller0: entered allmulticast mode [ 306.695126][T11438] tipc: Enabled bearer , priority 0 [ 306.715971][T11438] tipc: Resetting bearer [ 306.773864][T11437] tipc: Resetting bearer [ 306.877862][T11437] tipc: Disabling bearer [ 307.273892][T11461] lo speed is unknown, defaulting to 1000 [ 307.789749][T11481] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1479'. [ 308.297337][T11498] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1483'. [ 308.642652][T11503] netlink: 'syz.3.1483': attribute type 7 has an invalid length. [ 308.671263][T11503] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1483'. [ 308.687912][T11513] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1486'. [ 308.887254][T11518] netlink: 4436 bytes leftover after parsing attributes in process `syz.4.1488'. [ 308.927189][T11518] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 309.313536][T11526] lo speed is unknown, defaulting to 1000 [ 309.557783][T11552] tipc: Enabled bearer , priority 0 [ 309.568926][T11552] syzkaller0: entered promiscuous mode [ 309.600448][T11552] syzkaller0: entered allmulticast mode [ 309.738128][T11552] netlink: 'syz.1.1494': attribute type 5 has an invalid length. [ 309.847608][T11551] tipc: Resetting bearer [ 309.905739][T11551] tipc: Disabling bearer [ 309.931556][T11528] lo speed is unknown, defaulting to 1000 [ 310.201620][T11561] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1495'. [ 310.215749][T11557] v: renamed from ip6_vti0 (while UP) [ 310.242099][T11560] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1496'. [ 310.424611][T11538] lo speed is unknown, defaulting to 1000 [ 310.611136][T11575] syzkaller1: entered promiscuous mode [ 310.617421][T11575] syzkaller1: entered allmulticast mode [ 310.649477][T11575] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1501'. [ 310.746730][T11578] tun0: tun_chr_ioctl cmd 1074025675 [ 310.752161][T11578] tun0: persist enabled [ 310.758918][T11539] lo speed is unknown, defaulting to 1000 [ 310.768904][T11578] tun0: tun_chr_ioctl cmd 1074025675 [ 310.775366][T11578] tun0: persist disabled [ 310.790954][T11578] tun0: tun_chr_ioctl cmd 35108 [ 310.830318][T11580] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1503'. [ 310.957485][T11585] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551607) [ 310.968598][T11585] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 311.705607][T11599] netlink: 'syz.2.1508': attribute type 3 has an invalid length. [ 312.521814][T11629] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1518'. [ 312.909402][T11638] lo speed is unknown, defaulting to 1000 [ 312.995893][T11645] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1524'. [ 313.141355][T11648] ip6gretap0: entered promiscuous mode [ 313.156416][T11648] vlan3: entered promiscuous mode [ 313.655132][ T30] audit: type=1800 audit(1754077291.400:4): pid=11660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1528" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=1618 res=0 errno=0 [ 313.681305][ T30] audit: type=1804 audit(1754077291.400:5): pid=11660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1528" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=1618 res=1 errno=0 [ 313.767229][T11665] netlink: 'syz.4.1529': attribute type 1 has an invalid length. [ 313.783340][T11665] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1529'. [ 313.878065][T11667] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1531'. [ 313.946338][T11666] netlink: 'syz.4.1529': attribute type 1 has an invalid length. [ 313.976354][T11666] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1529'. [ 314.181763][T11685] netlink: 564 bytes leftover after parsing attributes in process `syz.0.1536'. [ 314.224592][T11685] netlink: 171 bytes leftover after parsing attributes in process `syz.0.1536'. [ 314.237665][T11689] sctp: [Deprecated]: syz.2.1538 (pid 11689) Use of int in maxseg socket option. [ 314.237665][T11689] Use struct sctp_assoc_value instead [ 314.252359][T11685] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1536'. [ 315.643309][T11747] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 315.789057][T11750] __nla_validate_parse: 12 callbacks suppressed [ 315.789078][T11750] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1556'. [ 315.836955][T11752] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1558'. [ 315.944005][T11763] netlink: 'syz.2.1557': attribute type 10 has an invalid length. [ 316.161732][T11783] netlink: 'syz.3.1561': attribute type 29 has an invalid length. [ 316.303178][T11793] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 316.409827][T11750] vlan0: left promiscuous mode [ 316.660942][T11750] macsec1: left promiscuous mode [ 316.730050][T11750] Oops: general protection fault, probably for non-canonical address 0xdffffc001fffe1ac: 0000 [#1] SMP KASAN PTI [ 316.742000][T11750] KASAN: probably user-memory-access in range [0x00000000ffff0d60-0x00000000ffff0d67] [ 316.751848][T11750] CPU: 1 UID: 0 PID: 11750 Comm: syz.1.1556 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 316.763601][T11750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 316.773688][T11750] RIP: 0010:__ip_mc_dec_group+0x2fd/0x690 [ 316.779453][T11750] Code: 89 e9 c4 f7 c6 05 13 97 8f 05 01 48 c7 c7 a0 f7 9b 8c be 97 05 00 00 48 c7 c2 20 f8 9b 8c e8 da d3 a2 f7 4c 89 e3 48 c1 eb 03 <42> 80 3c 2b 00 74 08 4c 89 e7 e8 44 0c 28 f8 4d 8b 2c 24 4d 39 f5 [ 316.799275][T11750] RSP: 0018:ffffc90002fb68f8 EFLAGS: 00010206 [ 316.805417][T11750] RAX: ffffffff89fac6ee RBX: 000000001fffe1ac RCX: 0000000000080000 [ 316.813415][T11750] RDX: ffffc9000bcf3000 RSI: 000000000007ffff RDI: 0000000000080000 [ 316.821460][T11750] RBP: ffff888058e0c020 R08: ffffffff8f508fa7 R09: 1ffffffff1ea11f4 [ 316.829536][T11750] R10: dffffc0000000000 R11: fffffbfff1ea11f5 R12: 00000000ffff0d60 [ 316.837523][T11750] R13: dffffc0000000000 R14: ffff888069dc9000 R15: 1ffff1100b1c1804 [ 316.845517][T11750] FS: 00007f158a7c66c0(0000) GS:ffff888125d80000(0000) knlGS:0000000000000000 [ 316.854476][T11750] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 316.861079][T11750] CR2: 000000110c3a9fb4 CR3: 00000000275ca000 CR4: 00000000003526f0 [ 316.869072][T11750] Call Trace: [ 316.872368][T11750] [ 316.875321][T11750] inetdev_event+0x2a7/0x15b0 [ 316.880028][T11750] ? __pfx_inetdev_event+0x10/0x10 [ 316.885154][T11750] notifier_call_chain+0x1b3/0x3e0 [ 316.890281][T11750] __dev_notify_flags+0x18d/0x2e0 [ 316.895314][T11750] ? __pfx___dev_notify_flags+0x10/0x10 [ 316.900869][T11750] ? __dev_change_flags+0x4cc/0x6d0 [ 316.906076][T11750] ? __pfx___dev_change_flags+0x10/0x10 [ 316.911631][T11750] ? netif_state_change+0x256/0x3a0 [ 316.916851][T11750] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 316.922855][T11750] ? __pfx_netif_state_change+0x10/0x10 [ 316.928429][T11750] netif_change_flags+0xe8/0x1a0 [ 316.933382][T11750] do_setlink+0xc55/0x41c0 [ 316.937813][T11750] ? __kernel_text_address+0xd/0x40 [ 316.943033][T11750] ? arch_stack_walk+0xfc/0x150 [ 316.947896][T11750] ? __pfx_do_setlink+0x10/0x10 [ 316.952765][T11750] ? __lock_acquire+0xab9/0xd20 [ 316.957653][T11750] ? __mutex_trylock_common+0x153/0x260 [ 316.963207][T11750] ? __pfx___mutex_trylock_common+0x10/0x10 [ 316.969108][T11750] ? rcu_is_watching+0x15/0xb0 [ 316.973926][T11750] ? trace_contention_end+0x39/0x120 [ 316.979226][T11750] ? __mutex_lock+0x335/0x1340 [ 316.984010][T11750] ? __pfx_aa_get_newest_label+0x10/0x10 [ 316.989657][T11750] ? __pfx_aa_get_newest_label+0x10/0x10 [ 316.995306][T11750] ? rtnl_newlink+0x8db/0x1c70 [ 317.000086][T11750] ? rcu_is_watching+0x15/0xb0 [ 317.004882][T11750] ? __pfx___mutex_lock+0x10/0x10 [ 317.009932][T11750] ? ns_capable+0x8a/0xf0 [ 317.014291][T11750] ? rtnl_link_get_net_capable+0x16a/0x350 [ 317.020114][T11750] rtnl_newlink+0x149f/0x1c70 [ 317.024808][T11750] ? netlink_sendmsg+0x805/0xb30 [ 317.029769][T11750] ? __pfx_rtnl_newlink+0x10/0x10 [ 317.034817][T11750] ? kasan_quarantine_put+0xdd/0x220 [ 317.040117][T11750] ? lockdep_hardirqs_on+0x9c/0x150 [ 317.045372][T11750] ? nlmon_xmit+0xb0/0x100 [ 317.049797][T11750] ? kmem_cache_free+0x18f/0x400 [ 317.054756][T11750] ? __local_bh_enable_ip+0x12d/0x1c0 [ 317.060150][T11750] ? lockdep_hardirqs_on+0x9c/0x150 [ 317.065384][T11750] ? __local_bh_enable_ip+0x12d/0x1c0 [ 317.070803][T11750] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 317.076562][T11750] ? __dev_queue_xmit+0x27b/0x3b50 [ 317.081788][T11750] ? __lock_acquire+0xab9/0xd20 [ 317.086670][T11750] ? __pfx_rtnl_newlink+0x10/0x10 [ 317.091719][T11750] rtnetlink_rcv_msg+0x7cc/0xb70 [ 317.096688][T11750] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 317.101823][T11750] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 317.107296][T11750] ? ref_tracker_free+0x63a/0x7d0 [ 317.112339][T11750] ? __asan_memcpy+0x40/0x70 [ 317.116952][T11750] ? __pfx_ref_tracker_free+0x10/0x10 [ 317.122342][T11750] netlink_rcv_skb+0x205/0x470 [ 317.127147][T11750] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 317.132637][T11750] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 317.137949][T11750] ? netlink_deliver_tap+0x2e/0x1b0 [ 317.143173][T11750] netlink_unicast+0x82c/0x9e0 [ 317.147964][T11750] ? __pfx_netlink_unicast+0x10/0x10 [ 317.153293][T11750] ? netlink_sendmsg+0x642/0xb30 [ 317.158607][T11750] ? skb_put+0x11b/0x210 [ 317.162903][T11750] netlink_sendmsg+0x805/0xb30 [ 317.167698][T11750] ? __pfx_netlink_sendmsg+0x10/0x10 [ 317.173089][T11750] ? aa_sock_msg_perm+0x94/0x160 [ 317.178045][T11750] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 317.183342][T11750] ? __pfx_netlink_sendmsg+0x10/0x10 [ 317.188733][T11750] __sock_sendmsg+0x219/0x270 [ 317.193424][T11750] ____sys_sendmsg+0x505/0x830 [ 317.198380][T11750] ? __pfx_____sys_sendmsg+0x10/0x10 [ 317.203680][T11750] ? import_iovec+0x74/0xa0 [ 317.208203][T11750] ___sys_sendmsg+0x21f/0x2a0 [ 317.212895][T11750] ? __pfx____sys_sendmsg+0x10/0x10 [ 317.218212][T11750] ? __fget_files+0x2a/0x420 [ 317.222901][T11750] ? __fget_files+0x3a0/0x420 [ 317.227623][T11750] __x64_sys_sendmsg+0x19b/0x260 [ 317.232835][T11750] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 317.238425][T11750] ? do_syscall_64+0xbe/0x3b0 [ 317.243155][T11750] do_syscall_64+0xfa/0x3b0 [ 317.247676][T11750] ? lockdep_hardirqs_on+0x9c/0x150 [ 317.252928][T11750] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.259032][T11750] ? clear_bhb_loop+0x60/0xb0 [ 317.263820][T11750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.269722][T11750] RIP: 0033:0x7f158998eb69 [ 317.274146][T11750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 317.293788][T11750] RSP: 002b:00007f158a7c6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 317.302224][T11750] RAX: ffffffffffffffda RBX: 00007f1589bb5fa0 RCX: 00007f158998eb69 [ 317.310223][T11750] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 000000000000000e [ 317.318381][T11750] RBP: 00007f1589a11df1 R08: 0000000000000000 R09: 0000000000000000 [ 317.326366][T11750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 317.334350][T11750] R13: 0000000000000000 R14: 00007f1589bb5fa0 R15: 00007ffc9da592b8 [ 317.342356][T11750] [ 317.345433][T11750] Modules linked in: [ 317.353400][T11750] ---[ end trace 0000000000000000 ]--- [ 317.415748][T11750] RIP: 0010:__ip_mc_dec_group+0x2fd/0x690 [ 317.421555][T11750] Code: 89 e9 c4 f7 c6 05 13 97 8f 05 01 48 c7 c7 a0 f7 9b 8c be 97 05 00 00 48 c7 c2 20 f8 9b 8c e8 da d3 a2 f7 4c 89 e3 48 c1 eb 03 <42> 80 3c 2b 00 74 08 4c 89 e7 e8 44 0c 28 f8 4d 8b 2c 24 4d 39 f5 [ 317.443904][T11750] RSP: 0018:ffffc90002fb68f8 EFLAGS: 00010206 [ 317.452800][T11750] RAX: ffffffff89fac6ee RBX: 000000001fffe1ac RCX: 0000000000080000 [ 317.461161][T11750] RDX: ffffc9000bcf3000 RSI: 000000000007ffff RDI: 0000000000080000 [ 317.477312][T11750] RBP: ffff888058e0c020 R08: ffffffff8f508fa7 R09: 1ffffffff1ea11f4 [ 317.491777][T11750] R10: dffffc0000000000 R11: fffffbfff1ea11f5 R12: 00000000ffff0d60 [ 317.502114][T11750] R13: dffffc0000000000 R14: ffff888069dc9000 R15: 1ffff1100b1c1804 [ 317.512068][T11750] FS: 00007f158a7c66c0(0000) GS:ffff888125c80000(0000) knlGS:0000000000000000 [ 317.527200][T11750] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 317.534859][T11750] CR2: 000055c256ead660 CR3: 00000000275ca000 CR4: 00000000003526f0 [ 317.543762][T11750] Kernel panic - not syncing: Fatal exception [ 317.550250][T11750] Kernel Offset: disabled [ 317.555115][T11750] Rebooting in 86400 seconds..