last executing test programs: 7.279268362s ago: executing program 1 (id=4735): sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x0, 0x4, 0x70bd29}, 0x14}}, 0x40000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x1108, 0x9, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0xb, r0}, 0x38) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r0}, 0x38) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0x10}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x40}, @TCA_CAKE_NAT={0x8}]}}]}, 0x44}}, 0x0) sendto$inet(r1, 0x0, 0x0, 0x4000041, &(0x7f0000001200)={0x2, 0x4e23, @remote}, 0x10) unshare(0x6a040000) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = accept$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f00000000c0)=0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18f641bd89ee514c16c73200000003000000000000000100"], &(0x7f0000000140)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000180)={0x3, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff7}, 0x94) r5 = socket(0x2, 0x80805, 0x0) getsockname$netlink(r2, &(0x7f00000001c0), &(0x7f0000000200)=0xc) sendmmsg$inet(r5, &(0x7f00000003c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="e1", 0x1}], 0x1}}], 0x1, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000040)={r7, 0x8788, 0x20}, 0xc) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000100)={r7, 0x7}, &(0x7f0000000180)=0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r9, 0x1, 0x10, &(0x7f0000000100)=0xffff, 0x4) shutdown(r8, 0x1) setsockopt$sock_int(r9, 0x1, 0x22, &(0x7f0000000040)=0x7, 0x4) 6.648126487s ago: executing program 1 (id=4745): syz_open_procfs$namespace(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) write(r2, &(0x7f0000000200)="240000001a005f0400f9f407000904018020200000000000000000000800020000000000", 0x24) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, r3, 0x1}, 0x14}}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x49, &(0x7f0000001880)=0x3, 0x4) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x5, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r4, 0x0, r5, 0x0, 0x2000000002ffff, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000000)=0x100182, 0x4) 5.968651257s ago: executing program 4 (id=4753): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000003cca5f1c00f1ff000100000028000096", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bind$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x40) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00001e0001ff000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_emit_ethernet(0x20, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"/422], &(0x7f0000000180)={0x0, 0x4, [0xfa, 0x545, 0x699, 0xc89]}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x3aa0}}, 0x0) sendmmsg$inet_sctp(r7, &(0x7f0000000440)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)=' m=', 0x3}], 0x1, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000840000000600001f7f69844a373cad00"], 0x18, 0x20080084}], 0x1, 0x815) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000000000000180012800b0001006700002800700000080002800480120008000a0028c770aaf68a3b4156a7ede99eebac22ee37d7bf6ed05ee6be9a705df7ba8f8b2268b755660cb40f2f0ac7a715fc6928e364ad12e1f7326c19ec01a4dafa060bd405dc00d653a5c88388bb1a9831399e16be524d0036d158ac6c09a31d03faba39c848e8fa490584360c0315a2d363759fef00"/162, @ANYRES32=r5, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000de0000000000000000000000630123000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x7, &(0x7f00000000c0)="feffffff", 0x4) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r10, @ANYBLOB="dfb9316d8cc37d856f1dbd2f758987de3d92acde72b23b752cece49834ce40df8a769c49446828f50def377f3fd47964cd3372296884cdc93ab89ee84f04e7551e943d5643b7b7109131ca05bb2926a4f02a0cd70ed42c29f0179242e85559b9b8a3256d9d320818e9bc7ee8c2b763818523904c82ecfdda8298e379b0d0f98b1354a26ddf3427cc629a4b37f4c2b286da799e55a4160073bbb37c3cfe563d3ee074d62df5763afa6e1cbfe8525b5c4be274542b693126321ac744cc44badf65dd8b08ce96f3e0b49fe35be80cae420aa420e0fd00"/228], 0x4c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="000061c5c6a8c7bf520f000000000000b7030000020000e0850000001b000000b700000000000000957f6b5a6d75f65049401d3c6ecc0a396b0d49ba0399cbd8260a280c303aaf6e05df815c840b7195edcfdb8a46029217dc905e25bd614e07bf80f60c68d9d0ed174f629c2184075b8c67eacae5269484d438e8cba0e6367df031d033b4b28f61133d08ee485685ab387ba9ce46f695b7bc9284a0666970c39ce767c1d29d5a827603b89d14bb09182d079081fbdd696814becd2150f68f7a1d05e10c"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.403217125s ago: executing program 1 (id=4759): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x2000000000000035, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x80000000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r3, 0x1, 0x28, &(0x7f0000000140)=0x1, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x2a, 0x3, 0x0, &(0x7f00000001c0)) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a14000000000000000100000a0000000000000000db8b5b902c0bceb66fac12ff9caa9f36a9af72596688c258fdbd476d432682114038865b06e14b933f3cca7e50d5310de78f87eae01816d0a1e1ebee107f4fc886460f9329251d01d6b70f13ea8d3db54e58516621c157550589a131dbb1bab16cb3cb27249453d7183d1ae5d87c195bc716ef4081f653a0ccfe70d626db19872192e4211ab2c5f1908dc789f3037b8a2b57e8085fd5f2"], 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r2, 0x2000002, 0xe, 0x0, &(0x7f0000000000)="0033c9f7b9a60000000100000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r0, @ANYRES32=0x0], 0x18}, 0x1, 0x0, 0x0, 0x10048841}, 0x80) recvmmsg(r0, &(0x7f00000052c0)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, 0x0}, 0x2046}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000840)=""/147, 0x93}, {&(0x7f0000000900)=""/220, 0xdc}, {&(0x7f0000000a00)=""/11, 0xb}, {&(0x7f0000000a40)=""/80, 0x50}, {&(0x7f0000000b40)=""/97, 0x61}, {&(0x7f0000000bc0)=""/123, 0x7b}, {&(0x7f0000002e00)=""/4096, 0x1000}, {&(0x7f0000000080)=""/187, 0xbb}], 0x8}, 0x9}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x4}, {{&(0x7f0000001900)=@ieee802154={0x24, @long}, 0x80, 0x0}, 0xb68d}], 0x9, 0x40002000, 0x0) 5.236190333s ago: executing program 3 (id=4761): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) (async) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) sendmsg$inet(r1, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="91", 0x1}], 0x1}, 0x805) (async) sendmsg$inet(r1, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="91", 0x1}], 0x1}, 0x805) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r6, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) (async) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r6, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x34, r6, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x43ef}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), r5) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="0500"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000400)="55ad", 0x2}], 0x1}, 0x4c03) (async) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000400)="55ad", 0x2}], 0x1}, 0x4c03) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r8, 0x303, 0x70bd28, 0x0, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) syz_emit_ethernet(0xac, &(0x7f0000000000)={@broadcast, @multicast, @val={@val={0x88a8, 0x2, 0x0, 0x4}, {0x8100, 0x2, 0x0, 0x3}}, {@llc={0x4, {@llc={0xff, 0x7e, '8', "50849a9d866e69f4aacb0dffe10536e2d4103e2d455fd9c472bf3b996ec5aac7eef415d3a72d2d32330b985827a1672f96634eabf7a4ce03f41f0632f0e050f14b61de392977e13e40765782a118f7cd85dd862c37a41fdd179ffc22a6e1210e8ff95d267a4ae1571b39b21621413386989f11953efebdec70993cc53aa85e9c1ac32f8800fb007dda18436b06db103c31803d"}}}}}, &(0x7f00000000c0)={0x1, 0x4, [0xb6f, 0xe1e, 0x4c5, 0x8c5]}) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x3c, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000801}, 0x448c0) 5.16238052s ago: executing program 4 (id=4762): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x80, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:inetd_exec_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}]}, 0x80}}, 0x90) (async) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x80, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:inetd_exec_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}]}, 0x80}}, 0x90) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r0) (async) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r0) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r3, 0x1, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r0) (async) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r0) sendmsg$NL802154_CMD_DEL_SEC_DEV(r4, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r5, 0x4, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0302}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000001}, 0x48000) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000500)={&(0x7f0000000440), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r3, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x200400c0}, 0x88) socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r6, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x10, 0x3f2, 0x200, 0x70bd27, 0x25dfdbfe, "", [""]}, 0x10}}, 0x40000) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000640), 0x400000, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000680)=0x2) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, r3, 0x10, 0x70bd2c, 0x25dfdbfb}, 0x14}}, 0x4044880) (async) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, r3, 0x10, 0x70bd2c, 0x25dfdbfb}, 0x14}}, 0x4044880) syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), r0) (async) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000840)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000880)={'wpan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000880)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r4, &(0x7f0000000940)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x3c, r8, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xa}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xd}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008050}, 0x1) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r11, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x2c, r8, 0xb00, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008844}, 0x20) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SCAN_REQ(r12, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x54, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0x8}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xd}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x9}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x5}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x10}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x1}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x2}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1f}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r11, &(0x7f0000000c80)={&(0x7f0000000bc0), 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r2, 0x400, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4c0) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000d00), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r12, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x2c, r13, 0x532, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8008840}, 0x40011) syz_init_net_socket$ax25(0x3, 0x5, 0x8) (async) r14 = syz_init_net_socket$ax25(0x3, 0x5, 0x8) bind$ax25(r14, &(0x7f0000000e00)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x4}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48) syz_genetlink_get_family_id$fou(&(0x7f0000000ec0), r6) (async) r15 = syz_genetlink_get_family_id$fou(&(0x7f0000000ec0), r6) sendmsg$FOU_CMD_DEL(r6, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x94811653c305abcb}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x34, r15, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008094}, 0x20000020) 5.015528221s ago: executing program 3 (id=4764): socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/uts\x00') unshare(0x6a040000) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) (async) r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000009500"/24], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r1}, 0x10) accept4$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @initdev}, &(0x7f0000000440)=0x10, 0x80000) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000500)={'ip6gre0\x00', 0x0}) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) (async) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, 0x0, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r4, &(0x7f0000000140)="24000000010006", 0x7) (async) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000340)={r3, r3, 0x1, 0x0, 0x0, 0x31, 0x1, 0x10cf, 0x5df, 0x8b, 0x2, 0x3, 'syz0\x00'}) (async) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000c80)={0x17, &(0x7f0000001040)}) 4.85401121s ago: executing program 4 (id=4766): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e80)={0xffffffffffffffff, 0xe0, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x0, 0x94, &(0x7f0000000c80)=[{}], 0x8, 0x10, &(0x7f0000000cc0), &(0x7f0000000d00), 0x8, 0xb8, 0x8, 0x8, &(0x7f0000000d40)}}, 0x10) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x7d4165c9) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e24, 0x91, @remote, 0x1}}, 0x0, 0x0, 0x32, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e24, 0x0, @private1={0xfc, 0x1, '\x00', 0xfe}, 0x2}}, 0x0, 0x0, 0x4, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb499519becf7542c90bc21470e441225642855b5f2faed4a18d67efd5f2fdf98328de94410300"}, 0xd8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e21, 0x1, @mcast2, 0x4}}, 0x0, 0x0, 0x11, 0x0, "2b20a9a47cddc63b223be606d7fa19f22a369ae714de81ca4d11e10450d766feb63b382d54ba4bb57a219cad5ddfc1e4fe7630a33b6deca160d8c2fbff48eb96428300"}, 0xd8) (async, rerun: 32) syz_emit_ethernet(0x66, &(0x7f0000000380)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x30, 0x2c, 0x0, @dev, @mcast2, {[@hopopts={0x3c}], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1={0xfc, 0x1, '\x00', 0x1}}}}}}}, 0x0) (async, rerun: 32) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async, rerun: 64) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) (rerun: 64) close(r8) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (async) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10) (async) unshare(0x600) (async, rerun: 64) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYRES8=r6, @ANYRES8=r9], 0x280) (rerun: 64) listen(r6, 0x0) (async, rerun: 64) socket$netlink(0x10, 0x3, 0x8000000004) (rerun: 64) 3.931063881s ago: executing program 0 (id=4769): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000380)=@filter={'filter\x00', 0x42, 0x4, 0x298, 0xffffffff, 0x0, 0x0, 0x98, 0xffffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@ip={@private=0x4, @empty, 0x0, 0xff, 'ip6gretap0\x00', 'wg2\x00', {0xff}, {}, 0x84}, 0xa00, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0x92, 0x1, [0x9, 0x8, 0x5, 0x7, 0x15, 0x3b, 0x4, 0x24, 0x1c, 0x2e, 0x3a, 0x1a, 0x1e, 0x2f, 0x7, 0x26], 0x0, 0x4, 0x1}}}, {{@ip={@multicast2, @local, 0xffffffff, 0xffffff00, 'wg0\x00', 'pim6reg\x00', {}, {}, 0x0, 0x3, 0x4}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070040000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021e00200001e0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000b4020380b0020080080003"], 0x364}}, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x2, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x66, 0x903, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xe, 0x7}, {0xa6, 0xfff1}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) sendmsg$tipc(r7, &(0x7f00000000c0)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc084}, 0x20000090) socket$tipc(0x1e, 0x2, 0x0) (async) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000380)=@filter={'filter\x00', 0x42, 0x4, 0x298, 0xffffffff, 0x0, 0x0, 0x98, 0xffffffff, 0xffffffff, 0x2b8, 0x2b8, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@ip={@private=0x4, @empty, 0x0, 0xff, 'ip6gretap0\x00', 'wg2\x00', {0xff}, {}, 0x84}, 0xa00, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0x92, 0x1, [0x9, 0x8, 0x5, 0x7, 0x15, 0x3b, 0x4, 0x24, 0x1c, 0x2e, 0x3a, 0x1a, 0x1e, 0x2f, 0x7, 0x26], 0x0, 0x4, 0x1}}}, {{@ip={@multicast2, @local, 0xffffffff, 0xffffff00, 'wg0\x00', 'pim6reg\x00', {}, {}, 0x0, 0x3, 0x4}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070040000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021e00200001e0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000b4020380b0020080080003"], 0x364}}, 0x0) (async) socket$tipc(0x1e, 0x5, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x5, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x2, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x66, 0x903, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xe, 0x7}, {0xa6, 0xfff1}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) (async) socket$tipc(0x1e, 0x5, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) (async) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) (async) sendmsg$tipc(r7, &(0x7f00000000c0)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc084}, 0x20000090) (async) 3.927570448s ago: executing program 4 (id=4771): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000020000850000001b000000b700000000000000180100002120732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x3c, r4, 0x7, 0x1000002, 0x1, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x3}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x4}]}, 0x3c}}, 0x40800) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r2, &(0x7f0000000640)=[{&(0x7f0000000280)="581a17919cc77431510e7fc4ed9fb860505f1495ff92f16a44f8a13d58751d926def1f80b315bdc726cdd8b5d1a91f485854af8fc854b0da7a02522fe7b2c21db7a46c48473099d4a4654cfd97a67c9e79afc0d444e6c78b0216d2201b128df9d4ed5b4dbe676fe56a6354f819d997a6acb8595633cff6f77473b2b3abcc65b51cb3d3a30bf9b0b2ce59d568d3a89b49331904da2a37c89ea236f5d5640c32c3ac74e4bde1a62c560cb63836552f881c8a8305d2a13d838a5160a6c06c63decc865a92e9539f3513af3a1e6f78608890f912f087214dac06387a94d5e1b31c35be117ee540dc4560aa500269b81a0bbc", 0xf0}, {&(0x7f0000000100)="1d4ac370cf8c47025bd7a6566c8bd20f39915734b4a24e9b596dfcd1abdb72276d5f80b1d38cedd7d704de6ec72fa6861cd700b4f8c0f594861c0296", 0x3c}, {&(0x7f0000000380)="88e584aac45d6d83e6c2e7857149eb55d2c259a747dbdfc0787e87150d7e40953e657417f2c201284dd4714eb1aeeb7076b8fbca22585997d6b6e3bcc4294fb9be03e73d06a9", 0x46}, {&(0x7f0000000400)="83c0b58e5bcffe6c14ab199d81f63d9e77512d040c3f3a7b41a3a1ed6cf40450443e4e377139b523eb3dd725f87a1ed946e28c6b19e1fc6ea21fe2eef736ec85289f34830b89c7169369862871b9608f2e976924a41f64f236a395563ddb3b994b4d9cf9f465dea2adad06013851713e9d30f195383be99db35611dd11a69721e423fcf5904c2af8ca4b1774bc6438d1c6218a2ada56c8b5b289274c2d116ecd4aafbd01536f931c84ec7f95ce8c6d118d1dec3bfa645c3e72018e9c154a80fd84b6e0233520ee1dc56ec6247282000000000000000000", 0xd7}, {&(0x7f0000004480)="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", 0xda9}, {&(0x7f0000000700)="f4f6ec3f1f6e4804195e1668ee6a0869812c0c3a096c7999643abde2e9c01404f75059df685d52a7b5d59f75dab6f01434874daf57b46d0151c0214ee1d955d8a24b8ce42aa8461222202c0b7e67b10f14040bd14ce1d9b5c123024c0aa559191474c1b44eebe0a40750feb6b9f872bd5f100d8f15dac14e66ca4b6e8bc168f9c7677432cbc268bf49e7b09d1a18cd49ad8bf344bbfde550052881cb7979129c65fc61fbbd6a99f24251b060090a04935c7f7a6f7862714aa4401ec436ba3a64601b8305ee5b3e5d824a1f6f02d9d180a36bf1982548a8d04ec644fbb8edf3c8952349bf4d7e67ddbb0edb4341", 0xed}, {&(0x7f0000001440)="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", 0xffd}, {&(0x7f0000003480)="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", 0xf07}], 0x8) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) readv(r2, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xff1}], 0x1) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r7, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r9, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r9, &(0x7f00000004c0)='W', 0x1, 0x8005, &(0x7f0000000380)={0xa, 0x0, 0x0, @private0, 0x8}, 0x1c) setsockopt$inet6_int(r9, 0x29, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@deltfilter={0x4c, 0x2d, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0xa3d6}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x2}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x200480c4}, 0x41) sendmsg$sock(r5, &(0x7f0000000780)={&(0x7f0000000300)=@in6={0xa, 0x4e22, 0x41d, @loopback, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000180)=[@mark={{0x14, 0x1, 0x51, 0x1}}], 0x18}, 0x44000) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e24, 0x4, @mcast2, 0x3}}, 0x7, 0x1c8, 0x10, 0x8000, 0xc0, 0x9, 0x4}, &(0x7f0000000140)=0x9c) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r9, 0x84, 0x22, &(0x7f0000000280)={0x4, 0x8004, 0x1, 0x80000001, r10}, &(0x7f00000002c0)=0x10) 3.886057664s ago: executing program 1 (id=4772): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x0, [0xbe, 0x7, 0x3]}, &(0x7f0000000240)=0x44) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd29, 0x25dfdbfb, {{@in6=@mcast1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffd}, {0x0, 0x5, 0x200000000000}, 0x0, 0x0, 0x1, 0x0, 0x2}, [@tmpl={0x44, 0x5, [{{@in6=@dev={0xfe, 0x80, '\x00', 0x44}, 0x4d4, 0x2b}, 0xa, @in=@multicast1, 0x0, 0x4, 0x0, 0x0, 0xce}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) r3 = accept4(r2, &(0x7f0000000040)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000140)=0x80, 0x80000) r4 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x22020600) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r5}, 0x10) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="0000000000009500"/24], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r8, 0x11, 0x0, 0x0, @void, @value=r7}, 0x20) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@map, r8, 0xf3c5227cb953423c, 0x2010, 0x0, @value=r9}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@const={0x1}, @float={0x6, 0x0, 0x0, 0x10, 0x8}]}, {0x0, [0x61, 0x5f, 0x5f, 0x0, 0x5f]}}, &(0x7f0000000600)=""/149, 0x37, 0x95, 0x0, 0xe12}, 0x28) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x6c, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback={0x5f000000, 0x2d}}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x6c}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xb26b262913f80a7e}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)={0x1bc, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x118, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x19b3}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "3b5b5db974dbc75ed5f97ab9ab416ea9612ace533eefe2"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xf3eb}, @TIPC_NLA_NODE_ID={0xb5, 0x3, "f2a2f05b45c9a1e282732ad1ce0b5b39641ab9e52a236e1bf5208348a72f6352c2c0332d8222c8ad8d773a88618e350c911009333ba3549ceee5e360f1a6153759875ad0e6536c9cb441583b1bc25e8a36a4d959fe34939482070e069d5f436e732f44247d984cc4265121dacdd5184e15447e5e82fa26b7e7b0cf65ef03c21bb1454649953954ae08bc523e73eabbdbfb49cbe9b71de2556d3929a1bb02cc7e14ac1cb3d48d3ccea541b6a826accc89fc"}]}, @TIPC_NLA_NET={0x4}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x8, 0x3, "a2dac8a6"}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x7c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x66c5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x56}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x400}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfcc}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x20000000}, 0x4088005) sendmmsg$inet(r0, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890) 3.663176612s ago: executing program 1 (id=4774): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) (async) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) socket$kcm(0x2, 0x1, 0x0) (async) r4 = socket$kcm(0x2, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0xd4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000001140012800c0001006d6163766c616e00dbff028008000500", @ANYRES32=r6, @ANYBLOB="080004127f0000000a000100aa"], 0x50}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$inet(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x20000015) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000500)={r2}) sendmsg$inet(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)='R', 0x1}], 0x1, 0x0, 0x2a}, 0x0) (async) sendmsg$inet(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)='R', 0x1}], 0x1, 0x0, 0x2a}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r4, r3}) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000100)={r4}) sendmmsg$unix(r1, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000009c0)="18acf8b1ed479de320cdbff21bc648a4423880b9fb95564f48c38e3fdaea755288c2a91a1ef344702de01af77d599320e22a0ea41b13aa09f1b359b0e2d2e8b6074bb4119ea219d2055df8bab18280f3c3ea8e45510d60a28f7af2a9c471dbe0a88f57ae4580b0b420f5f90b70efb6805d81812d5d64c87c99f9c75e9f656dfd6e0cb005b1abd4d879a097dd9d3e6e12f85505cd45c840f9503b2fff6c33e6a675512ab99729da82acc41b65a398d515700ba76224267cdabfb9576027eb82a82c337e379c488d47691d7fe2c55bbe29a7a37633648559a31b90f145d0f5a2d8d9499f100ba95da30ce9df964d2af22e6551f8a35878071d2b5477c0f1c0ab067a8bd9368c04ed9b6e1547f04d022d726bb32daf66bded05624baa409848f50d96df5d0a86c6ce2b9b0767e85c5233c1e30aaad953301d7294b375db43804290971c857070e9d2c8b6397ab8d56358476fc0359ee79b7956f0ef1ce2edefc6bd340037706a57aa98105019c21be58ce8c868c90db57bfe8304416b3e7e02837ea3ce01ce463321f2ea429ee0c42b27d28c2b6063eb5cd746e26ade0c9ae3049ebb8c5038b01281f26c9777fb1263a5ba1262fa783e07ef5ded966eb85a4a811f5aab0d9575551239e9b0f76e5217744b0a8edcb1504774e36818033e3ab03ca6164df64fdf4352b9c88bfa91add131e13bee44e7eb4e38e613f3bab3c6c8a5038e446d57c9058b975f05f36e0e49171b426b99aa82a0656d7ffc46169ee20456aab06ee429bff9408fb1961e3976e288bee69e9ec6dc72862e1cfcc6c4804457285efcb056b0d834666748129994a3fc172c4c9c622a0c4ddd84bce972d56c70f3687222e5857f9a24b0e138a8359409f5b4ba3206c1a7f35c9e90f3ad903715ab7283e700f9ec2c641f38e998122266a8b1731ce1f03d12a643f281b3ace22f1e403dfe05052fdca3da258f8f1bd7c88949d2a14510b4116c5e403b6cee434d4969113ff8eebc1052e6a1dfa710cadfa0dbd96afa3dd1ab32b10e97d4c015e357bb938d5c2420ed83fff6a17ca9c334fc1b1a3b171f3ca2f4f88a66c59477a73265a8dc10c6d0e5ab2f595e4b9bdd160f35a7917d46df4a50b7651a5991f2444fc0a235f210e8ce8afede0b725d0cabfa20e4d36a836314d180f66614db4fbbd15ef7a947247f7f6f0eb34af0b7aeaaa9210154285dcd0389de273ad3459a1d87f062d9a050c57b6325750aeb9f47d7242117d8e0d38ae1e6cef179809d422ae852bf41f8d5ec42fac487ed46e0511a1f554cd6181e6c81dfdafa7c69daa2ba822e22e305b4b8f34c20fcc8e50cf451f053df249a7f5b20cbc0bc127f55d80bc9c0ba3cf9f0a9c56286215c20f9d60cb61276c6bbf772c151be2520e22b8f6daea2aa1f9e1b30bbeed092d3c2fb92a10fb71e7fea336a0258620c918581487ec04c54ca4e9811a83a6bf39dca6a4e89092cdee6e40024bd7c1ae7b3a8cdbb38c21ccb1de68f7fc9fa4726b832cedcfdd22b71f37d66f350e78e3c19bcae0322f8f070c316bc3c2ba0cb12a43746bd8aaa1645e3f8800b93722ac1791396bb3def1678cb5ab3f42c097c4c3684ea61dc89209ae57906bd4577a93b14eceff6f18893064198d9141a927ced2af06226011187f1851d6a5c1b5ff78a4c6d8b387a781c06a286f052d2e828ed94110cd7b9e6cfcb840e12019678080a6e9e517ce8ba6276c5a919197fd0adf86547135fcec083f2c1fea0e40564f279ceec580e827e39fa77bfa823d6e08aa7bd320491381f21be8b10dc2ed7fee1524680a52bb1e14cb6248519100edd7df29bac5c4ad1c893ee99db03aa7e077ba6608b0db797f31a6cd6d5a01077a41df98fc373ac5c149b87c55bb73bb17b09dffa7847b134b866b9ce179d547750dd2fb9c280e2003d132c87e2535f31232a32d738aeedeff052f256a9c866b6c2cb880d15f1acca7396a8f6113afe45e46e96a6c7762eb09d2c568df561d5484356b4ae71f89bf0126c6670c4fbeee59a89e20206401ef85f083039aa9ceacc2912427b031c35e29c7a702e0054f4dbb01062c0daab2a5faa49a86cd5d48d64bbee12f60ee529a00ad13a579934faff4ec12778038a3e48217fc4eb97ebe3dec9ecdfc0af3e722ed7ca0f12952c2902b0db061098d4bf14664104c440c9d07af7fbaa375274f61b04c17050a3e139dcce999071f18468139182cfe78a84c90c0428d7c75a621a6eaa69e028ce47626235ca3edbbb53e15afebebb25e18c732a820edca2f60be8c0ecd7e5a30282a0add95c6eb43b0afea34d91de7b20f4fb999d17c7fc418738f61cce38d656ce86e2d0a97f31dad0296ee63fb48e859003f88d0a27c874a47301dc0f1fd4f4e9b1bcd7806f715c751b94e182307d2d01278eb0ad2e1a48c3cac80ea5ec28b9b52f5cf6ea8b5611be5a24f91545cae2f581fd58fd47e6aa3b88b380442f21739319050ef702ffe604d7b1341013d330ad4e8d7c3cec17da298b4fcf1205e156f30642d654384d4be8b9eb4add6d9603e8fe122b9d70171d6f8ea5", 0x710}], 0x1}}], 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz1\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r9, &(0x7f0000000300)='devices.deny\x00', 0x2, 0x0) (async) r10 = openat$cgroup_devices(r9, &(0x7f0000000300)='devices.deny\x00', 0x2, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000001a00010000000000000000000a00"], 0x38}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) write$cgroup_devices(r10, &(0x7f0000000200)=ANY=[@ANYBLOB='c '], 0xa) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="5bb6926762f4156e135600"/20], &(0x7f0000000140)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r12, 0x8, &(0x7f0000000240)={0x3, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff5}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="5bb6926762f4156e135600"/20], &(0x7f0000000140)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r12, 0x8, &(0x7f0000000240)={0x3, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff5}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000540), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r2, @ANYRES8=r5], 0x50) 420.411653ms ago: executing program 0 (id=4776): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000080)) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, 0x0, 0x0) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4b, 0x0, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000380)={{0x6, @bcast, 0xa}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48) (async) connect$netrom(r1, &(0x7f0000000380)={{0x6, @bcast, 0xa}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000300)={{0x6, @rose, 0xfffbffff}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) listen(r1, 0x1ad72f7) r3 = socket$kcm(0x10, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000000000)={0x7}, 0x4) (async) setsockopt$inet6_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000000000)={0x7}, 0x4) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) (async) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000500)={0xffffffffffffffff}) splice(r6, 0x0, r5, 0x0, 0xffffffbfffff8000, 0x8) pwritev(r6, &(0x7f00000001c0)=[{&(0x7f0000000180)="cb1b7d9918e96af6c2d943400ca0edbe2163d1041d46826a84a92c", 0x1b}], 0x1, 0x1, 0x2) (async) pwritev(r6, &(0x7f00000001c0)=[{&(0x7f0000000180)="cb1b7d9918e96af6c2d943400ca0edbe2163d1041d46826a84a92c", 0x1b}], 0x1, 0x1, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001e00010029bd7000000000000701"], 0x1c}}, 0x2000c000) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001e008d2a"], 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x40000c0) close(0x4) accept4$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x40000) (async) r8 = accept4$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x40000) getsockname$ax25(r8, &(0x7f0000000080)={{0x3, @rose}, [@netrom, @bcast, @rose, @default, @bcast]}, &(0x7f0000000100)=0x48) 418.59442ms ago: executing program 3 (id=4778): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1e}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff78, 0x0, 0x0}, &(0x7f0000000340)=0x40) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f00000000c0)={'ipvlan1\x00'}) 414.745454ms ago: executing program 2 (id=4779): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback, 0x5}, 0x1c) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x0, 0x0, {0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, 0x32) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x8) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) sendto$inet6(r2, 0x0, 0x0, 0x8, &(0x7f0000000380)={0xa, 0x4e24, 0x413, @mcast2, 0x5de3}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000600)={0x5e}, 0x8) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f00000000c0)=@srh={0x2, 0x0, 0x4, 0x0, 0x6, 0x10, 0x2}, 0x8) getsockopt$inet6_opts(r0, 0x29, 0x39, 0x0, &(0x7f0000001d00)) socket$inet6_sctp(0xa, 0x801, 0x84) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) close(0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x1, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4) shutdown(r5, 0x1) sendmsg$sock(r5, &(0x7f0000000780)={&(0x7f0000000300)=@in6={0xa, 0x4e23, 0x41d, @loopback, 0x4}, 0x80, 0x0}, 0xff00) bind$unix(r4, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4e20}, 0x6e) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x13, 0x0, &(0x7f00000008c0)) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0xcd) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bdaa, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe2}, {0xffff, 0xffff}, {0x5, 0xa}}}, 0x24}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f00000004c0)={0x5, 0x40000}, 0x10) sendmsg$nl_route(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000001200375f3fbd7000fcffffff07000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\n'], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x8884) shutdown(r6, 0x1) 414.260297ms ago: executing program 0 (id=4780): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000104000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x24000801}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x0, 0x0, 0x400}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) close(0x3) r2 = socket(0x1e, 0x1, 0x0) sendmmsg$sock(r2, &(0x7f0000000100)=[{{&(0x7f0000000180)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x1, 0xfffffffd, 0x9}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}], 0x1, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) recvmsg$qrtr(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[{0x18, 0x0, 0x0, ""/5}, {0x1010, 0x0, 0x0, ""/4096}, {0xe0, 0x0, 0x0, ""/205}, {0xf0, 0x0, 0x0, ""/221}], 0x11f8, 0x20000}, 0x38, 0x10011) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) recvmmsg(r3, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 413.776053ms ago: executing program 2 (id=4781): socket$nl_rdma(0x10, 0x3, 0x14) (async) socket$nl_rdma(0x10, 0x3, 0x14) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.freeze\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0xfdcb) r2 = accept4$unix(r1, &(0x7f00000000c0), &(0x7f0000000140)=0x6e, 0x0) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0xff05, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000161459d928bd7000fdffffff08004400", @ANYRES32=r0, @ANYBLOB="0900020073797a30000000000900020053797a320000000079281e1e6623a7ad5169aaa61cf6e46be8847f29fe788adcf7356a6abf2acb878c18abb5768ed0725268dd3cf641e903b598433888249ff07415d12571f4c408d34176236d7e5deed43c144e408f4c83a5b789e8e237303c3c4da4e4"], 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x4000) 413.166231ms ago: executing program 0 (id=4782): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x28, 0x18, 0x229, 0x0, 0x0, {0x2}, [@typed={0x4, 0x800}, @nested={0x10, 0x9, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @generic="a1fcd70d"]}]}, 0x28}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x1, @loopback, 0x2}]}, 0x0) (rerun: 32) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r4 = socket$igmp6(0xa, 0x3, 0x2) (rerun: 64) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r6 = accept$alg(r5, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000000900)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000000c0)="5bdbd57a0e656889964df9937f561de9b944d1e381fed329742e239cb13cf2af711d03d2f15b3118abd8fd087f117830209a631f9dfbec5cbbbb2216a2d87dfb0d7dd906c594125a10053c8e288ac4445ff0e999d423cc250e31e8650d248e49ba5fb3be8db01db38acf5a4455630ecb10f753530ada6598a1bf4c727f30db4778beff4805370a5cebf05e199368871b2751c242633419d13a6b05a390d21ab1d44be1254385b3d882c646f9762bf3480e05e98c9cc655adb7caa279e66709794e3b93cda0b9a14794e6d020cc68ea70e71a083e1a2b375591203ce218e8d244cf32f5dd7af0ee1ed032d3b59e4d571366", 0xf1}, {&(0x7f0000000000)="ef7791000dc7777cb951ca638ea0e1b5d280548c882aa59a68cd17c0e7f23d6d56a03be6caa272b3505e304463179c4d7768d9c3e5c21f3a9963ffde6682e5ecfe30b771e51c8d", 0x47}], 0x2, 0x0, 0x0, 0x806}], 0x1, 0x0) recvmmsg(r6, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)=""/64, 0x40}, {&(0x7f0000000440)=""/247, 0xf7}], 0x2}, 0x7fff}], 0x1, 0x2101, 0x0) (async) connect$unix(r4, &(0x7f00000014c0)=@file={0x0, './file0\x00'}, 0x6e) close(r4) (async, rerun: 64) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0x8c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) (rerun: 64) socket$qrtr(0x2a, 0x2, 0x0) 412.881687ms ago: executing program 2 (id=4783): r0 = socket(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) recvfrom(r1, 0x0, 0x0, 0x40002023, 0x0, 0x0) (async) recvfrom(r1, 0x0, 0x0, 0x40002023, 0x0, 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) (async) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_BETA={0x8, 0x6, 0xb}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x1}]}}]}, 0x44}}, 0x0) 411.845038ms ago: executing program 2 (id=4784): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x12, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x7ca4}, {}, {}, [@exit, @exit, @jmp={0x5, 0x1, 0x3, 0x3, 0x7, 0x8, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000006c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x44, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x28, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x0, 0x700}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c) 410.840762ms ago: executing program 0 (id=4785): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002ec0000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x503, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115, 0x10000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x6}, @IFLA_BOND_UPDELAY={0x8}]}}}]}, 0x44}}, 0x28000000) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r3, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000000b40)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x1, "d9878e084cb804"}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000007c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001b40)={r4, r5, "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", "39f2008b4d371260927528711da34538e90b6f6644c075cc46352d9aca8341e663b6d1684a382f6fd85cf6a27a2727e406056579e49fd0649cacdf8a45e3fde5c36fec176a2fa8257f84c780af41b8913c480748c762bcd6d214c2794cdb98c4f574289c26880473fcec47d38ddcd08897273755274128c609ba685d2ec2955faed156b2a45449ae435499d389c3b1ddc97370b84f08d5ae6931c675f2383229afee0304e49191450208a3f70f9b2eb9d9b0d93c9add82b233ed223805f50ec3a959429faec45e8890daa6c96b734e2e4dcd511471e5c02b09ca443a862787bd3abcab3ee38f59dc1d9aaa469b6c38af7e416a9fd98b6dbfb98acb464dd36476a532791de8a2d4cd84756831f2136c055b337e66f9dc0fd62f12848570d5bb6633eb81be43f3c788e518d2201139f65009b079f4fea811b7fde0a9afa7eb86e72e100cb730c9dfa52be484cc8d4b1dec93b5a37bef592558797b86add44ade0f3c4a83c728aa6841a5cc00e6d997e5eb84612a5656fedb4d646d9c43f1a574d7a21bd1138ca3f501e10c85a2dc80e3c3b34d2d498db6216d41890e36a8dbd0fdb7bbae9de0815ac2d7591b2aa20de4a57da6dcf4c6eb4946ffd57c14f26d771bd49a17551fff1e08fd5fcf0cad9bd1daefd615727b082ccfe1fc87f093a062efe709af1d58850c5c5fa76123fd29218047ec5172a4ab8be44ea0dae8a7aedc434b8d46aaf1eaf38f82a2e326cc46e9930d9d80fc207bb5f14c66e79bafe8472064b7f77f784e8988cb69646c54acc8f1a760f1cee70a701b190be8877898a4419dab9962ef9e81acb5fae08f8e41b63e4ea48f79fda176c9ff3149b19a8d5d57df9341f1b202bab8cea2eca3511983c71aacb1c8879d77ae76d366cb6a1b7d48a256ca758e866eb3aa5b0f166b188a7add0894b5b35d0892adc096cb85d965a6329f64977835dba1f2080abe78606d0c45be0475009d582dd799d268063bd1da19a642037dca5f453347a809f1c3f60f430bf03e9748c527c265bdfece43fb80ab4589b9c7c5b770247bcf10b4447d2c6357c2fe252d33768e251c545c2f52d06e4bf0350335f18dedf197ea83d668b5f424cae087749c277ca4dbe91bda0a92ec4f3d2ec07f0345cbf230530ffe1694edb5cb6865387a93530fa3ea93db6a02ad529fd55d41e78db5c35284f3b0482283084b73ed5c5d3b3781412d63f2b75c70c8c2771bd16efb3f68623bc50792b88a5efa3acdc1d8eaca53285d790d80b7b39b6af5bb4f265cc649f37804616c87f81c4bc81d9f3e6b94540ab702f100b88be9bfc57f92023376318d2316a3c5f95cd51a54f09e8e551c79b6df09566fa957c9852c2068dffef9d780acffeb26563c44fc99015818c4b2cf8a99af659a982a141e7de18d4aa7344808997eb106aecdd98f166fe933f8fa32b178ec844234e811f5a38080f00acfa950be6141d5d0764b3fb6214c7cf06269068a58fbf23c500b7aeadfa67c9a874cb18985ecb4f96902c1b937ed4fe54252e3c3f372eefe9e9dd323ed7294d93ab432a114b45cb1effec44380e926352e90acf932cff493b0c9b23c5de1ece0dd1aa70d744d86c4faf0c4e3f3d0c2ba62260412230c27f76f82de7289574aa3542fbf7c0a41fe2718a46a52ff2b6a3f68afd06b10a9a30932927e3a669e4cf46675e399f8b9304f5d1a62bd66f55c0265c0e327b174fba48c9dc7cd56ab565cf7081d08f98c1e8a5509910dca971756d160a3eac87d34c9ac06b98a206f0cc320c2e6f6b239df78a0bfcad1dbe920f867cb138e72e458394e3270074c4b8a250104f129d85a9188f2ec87f541d8adc7a4a21256f9331bee76b94ebd818192af380b73f74e4e0b3547404a1233a5ce3f00444a7fcc806d603ff2bb887eee5d736011639708709e5156609bf85020e822fe56088fd16785cbfcdf34c87972761327c67a30d09b85e8b77aaa3ab0fa086985b903c3e87edf7313371f8562f6168ead927914113aa115ad3bea44aa03ea9db2f71a52587444ab7ab779c793e7b92002ba33c41c58cc26117d056b97c3da8375a7a3478bb015a0171f917d8ed5f19b6bc7fba82e442d860286d8948f2f9521af1f6696157943d126c0fe4d5cf0f3de9fc4d8a84b34042ce5f7ced62a5fdba1172b7ae8e7b3f16a6160854963dd1d972af4ef293237deb50f688761a6daa0a69eb7e4fa804803e9517819a75e20d7a69f244e124220895733725350159946457fc2a5225ce9e6364966bd2ca07d4c028708ddc931d32f3a39ce092b71b2e757a51289501c4aa486634b031b78402bb8cc4e1569d0a637fb163c965614f663d97c2d51d22cc2d7d5f432658ae02c9490b5364288af9d784975d4f15672b1dc58e191566c86ff393fb2805fd8b63fdd2451e5992e07b42533aa3ffbfab1b91ce7b0afb4669411eb7cf0c4ba624d83a4b89e1db5189411740f91db03854e519054c16fda1fb5563b9d08e0f862ebd9d3ea516e9b70d713a05b769012fe79c72f5c8d7030e951ee3e36bf6331357577534216fbc472a118034f84c41deb3fc0e082570d1ca09e2edc6a53d635dd0cfd3797afbbbfdd879ed359f3e386e33f7576a807420f168f76e9355eecfd74c0225c660765b8585b3c6187f514379816c075b4cd9b974fae8a0c7d6da9d65576fbd7e85c973c62aaaed39773eb4144f42507cf5adfa50f9ceb95adb565f917d7a6a59be4f0259f2037f71f153f449830ae6c94d4ffb60e091cfdb73c305d7045d0253d6a44295fdd25518f9f4d79b0f89f62db7b5a746a958c802213de07756c27cc44ae2adf840119f9a3f79afe6a5c56ec2971a2e09e9774848847b061657c64df3de73b83ec59566be8d8f324a365d67685e16bc1f3e41bbf1b13ef58a5e532e73216c1344d411d154fb4c4cec9f94ffbc9eaba425022b6b81a6f1641acc1315b4b4a52b64ae4cbb4dff02b6bc40da21fe6b71551d556ca70f91af231e2d33253166ce0ea5b4b93a3ce2c2dc228d39cc37492824ea00c4da7c3e77b5d9b7633579fa9bcc5ca878c401ce6f40b7c2f17a276a04091bcabae9725108d92a065cbcca6f3a9f1e7302643c82009b60fb11deb255e8a128289076d4085d36be5157db0f39db2c9e8e239573785455bce222c27cb4ff49546a981acb4dba369f1f024582f2a90c44410cc88975ea9341b6bd0004972fffc0b46d9eeeed55c24de97f1e6a25fb32b903b0fbefa5c3806d31758bcc0cf3da80aeb92961d6837cbdbe242fac86b7a99c8a80a4e695a0eea095f021a97e1ca28c85e2d9a05146f271c4c9d0799e79fd2d76197c649f6729b8ffd51851dbb25716ba01f68bdbfe98d569ee08c7055528528e8f726e7892cf0aaa9038fe1869dc93c4a89ca62325e62389f27ded96f56f4efb80f9d2c8705669c5c57b6aeadc55d63f864f693f21cd2177966af5131601d185b7f088b099670d215db73d3e902c0815e195ba1b41e7d77310e84f38b17e26ebeea8e6355bd6c81a58b317e8e35017772efb7c5e15b9ad2cafa1483628b5640f47d191f9f1ce85d17f8f3b20ed09f6130a57a3efc58c10cc2116be53a979f1d433df8042d1af4558c0385baa215c234ad39c6fa2ab9a94ba33c952705f99c85303c22356ae1e7c47b451e7623e0e52f55282d6148618357302c46c8c1c14f2ae158d091a012da847239c6783cc83e694ce61f0ef957d717f4dd8f6c583f11cbc20c0841b0e48cf32c15666edb17466a44a81239d6e1d2d6dc9036a5a3baea0a5a5fd97f2601285b879af1c993b2a617a6712a0c42c9b128ceb7a200016310422ead43e7be5de1dfba984d6666833573e3cc78227d3a78440469f2e0b4d35d0b1401e888ce77465114f5821675d9b8eebc66ae76deb259e3b4fd2bda3b53ff8903b30b9dbaecd8cae96c70b4c4f44802ee8ca229ad32bd4d29e49fe65b00b8cf87746e9b47b3687329ad36ca6f4d192825b17e7ed798000ad23df7236c6bfda46d05714c3f8688cb78cb07e51b9a3f4607dcf1fdd9d4d3d8e8d3744907e724f6fcddbf8b0b7d7dee273176b8c7becd9504d046a6edc5f0717558db252c675879780ae07c46002bef70b19e5faa0149fc5e582971787bc06f3627ddd1e975e0ee7492116c48c1eb31d9f6281870cb834838f465edee4e1d74f98f34d969668a08af6dba217ede59af7953d55d2573cfb061966a02d04cb47fc04709a3b8ebac1e6b09b3024f6ee52248944b787e7d10a794df631be731afe579f3cef26c6ac971fe5992357c454fb53a6aacd9a098b6f8edfa46feb98d04523198bda215e10da381f717abbf1e04d2299db889e91b8116e9e21522b9c52b9981ada1c1e152bbd813b314d33b441aa59604bc86586ee2709324cb52a8da5952c58c4f6a7072db33c320fc911ac132ebd1db868319a648559c761bbce4cd893fff9317b05066dc11d3fcd474c1e11a7d75fb137d3bef9b06b33e040b36ef4ccf2c06d8a35846867a39808e9452603f3bb5549d00b1cfa53516a1f45acecb181c5d1fbee9d9bff665a108850500c8d28faebf0870a1a7cfd6eece7bb47856f64d8d09c02e9c363e91bc6ad71ae75d40e19426b5e5bafe56f0c67d438ae42145c1b37e3aee3369886a076e5f8a1c0f8c37806bbc62a4138170e22865d5fe2e6d1d6ddd6bad3cb0dae5a530e1055b9b6dbfeb7efe23254a55f06ffa1a95e63862093c1b7e6c5c47279617d26be49aff173f8f04c3169b9941783ec12af2869528cfa3c1def8d958f8e6239fc2853f80a542be3641135eb974c9c0654aaac4d70f5bcf71c2e184d176cfc90a11636f4c40b3ed365d87fd698e01c2517aac0dc1ececbb6d1e80e93993090b248b4491bebbc49b34ebf33e978d8d572b7d67682639280f2a9da4e7d6c5a113d62dffd74bba404dd3d886a8a755fa35e7af72caf13a48e78ae534d7fa2148e0cf4ac2b5a44666fe2b686a2fe6339de9e6db5096a7cd760872f79f5b9aedca82d7ea8b4bcf521eb8db96aabab6b2c05e6c5c4ed8398485c6b44425c92f1b31dd9d49e3b358dee771423b91210b613c7c1033b251101b2d06f422b70fd168c0fa22fd6903cb5bab9d8793fce96defbc767bed531549e591325ef63081640a3fd1d1f7a637d54a62394f9a7f909050e5e06a9d7c1344d2d6db7bd856f46b5cf6c1d8110ac8c9aa39f988faacfd05e760b2df2ccb299ae6c1608ef83fd9b942a2b5d625b6f0276782f078f377efcbaa272dd777331fea118151ea9e5c6519cb51ae54bd97299a120b0395aeb64b302b61182e9212cc608abad3658428ec85b828f7095c7054e46eb043fb0821237300d487e4da81b20174726dd7cfc0b1b5616d1d787a2eb1d6e383caa673a96e00d0046c7732b85764ebb03e77c5706ab11b53c9e3715c"}) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) (async, rerun: 64) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) r8 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) (rerun: 32) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000040)=r11, 0x4) (async) sendmsg$unix(r10, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) (async) r12 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f0000000b00)={'bond0\x00', &(0x7f0000000a40)=@ethtool_pauseparam={0x13, 0x0, 0x36, 0x101}}) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r12, 0x10e, 0x4, &(0x7f0000000240)=0x10001, 0x4) (async) r13 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r13, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_j1939(r13, &(0x7f0000000300)={0x1d, r14, 0x2, {0x0, 0xf0}, 0xc295a7c9ee09b05c}, 0x18) sendto(r13, 0x0, 0x0, 0x48880, &(0x7f0000000100)=@nfc={0x27, 0x0, 0x1, 0x2}, 0x80) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) (async) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000200)={0x0, r6, 0x1, 0x3, 0x9, 0x5}) sendto$packet(r8, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3f", 0x46, 0x0, &(0x7f0000000540)={0xc9, 0x0, r15, 0x1, 0x0, 0x6, @multicast}, 0x14) 410.422948ms ago: executing program 1 (id=4786): r0 = socket$packet(0x11, 0x2, 0x300) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18}], 0x18}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r1, 0x0, 0x19, &(0x7f0000000000)=0x6aba, 0x4) setsockopt$inet_int(r1, 0x0, 0xc, &(0x7f0000000180)=0x42000000, 0x4) recvmmsg(r1, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) r2 = socket(0x10, 0x80003, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0xfffffffffffffde7, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[], 0x78}}, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000000)=[{0x50, 0x24, 0x0, 0x56}, {0x6, 0x2, 0x8}]}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000540)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, &(0x7f0000001300)={0x1, 0xfb00000000000000, @start={r6, 0x1, "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", "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"}, [0x1b0aa890, 0x0, 0x9, 0x9, 0x8, 0x4838, 0x1, 0x5, 0x9, 0x4, 0x3000000000, 0x60000000000000, 0x7fffffff, 0x100, 0x6, 0x9, 0x5, 0x9f, 0x2, 0x3, 0x8, 0x200000, 0x4, 0xfffffffffffffff1, 0x9468, 0x1, 0x9, 0x5, 0x7fffffffffffffff, 0xfffffffffffff800, 0x1, 0x9, 0x7, 0x800, 0x1, 0x35, 0x1, 0x2, 0x0, 0xffffffffffffff86, 0x6, 0x0, 0x9, 0x2, 0xfffffffffffffffc, 0x6, 0x942c, 0xf, 0xf, 0x35451402, 0x7, 0x8, 0x5, 0x90, 0xffffffffd4d3f109, 0x200, 0x1, 0x3, 0x0, 0x4, 0x38a, 0x5, 0x1, 0x3]}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x69f28}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @rand_addr=0x64010102}]}}}]}, 0x38}}, 0x20000080) 407.502311ms ago: executing program 2 (id=4787): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x42280, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r5) r6 = socket$unix(0x1, 0x1, 0x0) setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000080)=0x1, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x10, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x7, 0xb}, {0xffff, 0xffff}, {0xb}}}, 0xffffffffffffffab}, 0x1, 0x0, 0x0, 0x20008001}, 0x8000080) connect$rxrpc(0xffffffffffffffff, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x13, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000070000001801000020696c2500000000002020207b1af8ff00000000bfa10000000000000701000003ffffffb702000008000000b70300000e0000008500000006000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001010000850000002d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r9}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r8, {}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x7fff}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x9}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008080) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$TUNSETOWNER(r0, 0x400454da, 0xffffffffffffffff) 402.889262ms ago: executing program 3 (id=4788): accept4$packet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x14, 0x80800) (async) r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x14, 0x80800) accept$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async) r2 = accept$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendto(r2, &(0x7f0000000100)="b224b2d7741d2e", 0x7, 0x4000000, 0x0, 0x0) (async) sendto(r2, &(0x7f0000000100)="b224b2d7741d2e", 0x7, 0x4000000, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x1d, r1}, 0x10, &(0x7f0000000240)={&(0x7f00000001c0)={0x2, 0x8c0, 0xfff, {r3, r4/1000+10000}, {0x0, 0xea60}, {0x4, 0x0, 0x1, 0x1}, 0x1, @canfd={{0x0, 0x1}, 0x29, 0x2, 0x0, 0x0, "d67d4d8d717e3f12bbdc5a3163e9b76e023ec2063d729db08ed11cc5db81be5032f5a05666f8dcbd8ace9563e90005165ced938921b8fbca2893b8bedcd61b40"}}, 0x80}, 0x1, 0x0, 0x0, 0x40010}, 0x4004884) getsockopt$bt_hci(r2, 0x0, 0x1, &(0x7f00000002c0)=""/102, &(0x7f0000000340)=0x66) accept4(r0, &(0x7f0000000380)=@hci, &(0x7f0000000400)=0x80, 0x81800) (async) r5 = accept4(r0, &(0x7f0000000380)=@hci, &(0x7f0000000400)=0x80, 0x81800) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000005c0)=0x0) r7 = getuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000600)={0x0, 0x0, 0x0}, &(0x7f0000000640)=0xc) r9 = gettid() getgid() (async) r10 = getgid() r11 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r12 = socket$inet_tcp(0x2, 0x1, 0x0) gettid() (async) r13 = gettid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000680)={{{@in6, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@private}}, &(0x7f0000000780)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000007c0)={0x0, 0x0, 0x0}, &(0x7f0000000800)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000840)={0x0}, &(0x7f0000000880)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000008c0)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@ipv4={""/10, ""/2, @local}}}, &(0x7f00000009c0)=0xe8) getgid() (async) r18 = getgid() sendmsg$unix(r5, &(0x7f0000000ac0)={&(0x7f0000000440)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000580)=[{&(0x7f00000004c0)="ea7d0498d07966cc2a28817661f3516331d50acf2b8ccfa526aa4464f9e77ebc95182ca572d666bbac62648f9d2befb78081837f0bd726e50bff35dd7311bbfd3e24e2dc509b4af629751e38bbd288cefb4e6c2ff30845981ad61a2fa1d7c1b10fcf2c610d77c4e4718421e10bc629e72a18c583be81cb0aab7c037bb0f4ab25e4d965bf11fe90cd78bc560bd12fe06643543b1cc1f8e0028f2764", 0x9b}], 0x1, &(0x7f0000000a00)=[@cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}, @cred={{0x1c, 0x1, 0x2, {r9, 0xee00, r10}}}, @rights={{0x24, 0x1, 0x1, [r11, r2, r0, r0, r12]}}, @cred={{0x1c, 0x1, 0x2, {r13, r14, r15}}}, @cred={{0x1c, 0x1, 0x2, {r16, r17, r18}}}, @rights={{0x14, 0x1, 0x1, [r2]}}], 0xc0, 0x2004c0c1}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000b00), 0xc, &(0x7f0000000f80)={&(0x7f0000000b40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSET={0x3c, 0xb, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x20, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSET={0x1a0, 0xb, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_DESC={0x94, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x80, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x58}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc7c9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc0}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x10000}]}, @NFTA_SET_USERDATA={0x44, 0xd, 0x1, 0x0, "46b2e5cabc570d12140fc538db0dd4bcf2b310601d5825763578a56e42b626258a8a0a4359a911f42da95a3bae8fcc956cdd87df05d36762bd58deb03d4ccaff"}, @NFTA_SET_EXPRESSIONS={0xb4, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0xa0, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x90, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TARGET_INFO={0x4f, 0x3, "b6064d2c0fd899f5e7219bce810e9d3c5302ea21263dd5d8090cd2f11d0fde2e1e47e00ad8a4fc6387ed745d366d9fe6ea95b5643b7a9571c0f5bab188e27c4ccd98a933081a545be4e3e4"}, @NFTA_TARGET_NAME={0xa, 0x1, 'TRACE\x00'}, @NFTA_TARGET_INFO={0x25, 0x3, "c79db00555062783f32091325d21d106589d44b2091e49beda28914f0d4c85a298"}]}}}]}]}, @NFT_MSG_NEWCHAIN={0x214, 0x3, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_USERDATA={0xc2, 0xc, "3aca32b89fee03f665e490ec93e93fe1f9b6e8be1827a3082d7b39fe72f4fb68432d95f42359fcb26673d91045cddea4841938188d0f2ff4bf6d55eef0a3eabd8e5169a447c350839f551f15088e314c2113b75ebd840f708dd72fd82cb66a427cd27b349dd54884cb5b2e3ac627599c958e87ff47ffc305eb8e01020fe9f71c0e9ae897a0bc4a49f3f6380f0d1793b945e0786f7cd8cafc9c7c3ff0efb0a89a54a81f89017e01ae3f16b1ffe0f312d46bc247c21f1d79b840e17af5a492"}, @NFTA_CHAIN_USERDATA={0x4}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_CHAIN_HOOK={0x4c, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x73cf6134}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_DEV={0x14, 0x3, 'ipvlan0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'wg0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2ea8d375}]}, @NFTA_CHAIN_USERDATA={0xb4, 0xc, "a1c916ded5407b88fbfbd6c3f4d4751a8881d3900638c4f340774420b41d92f7f3d35b67ca8d965c9fc367ddfe8405066a95f54988480120b549600a03686a1276231aa3401259eec5337976c381edf488fda2ece3e8eb14325bc360d38e0fb4d84bba5502f6d13d16ccdc6ca18dcb94d46a72a750fbbed834619f9f5bd5df5d3652750b918db60c23925fc4059e59dd3de5076f2d0a870543ad3b1801c3366167052d2021ad04b72ee4bbebfbc6de1d"}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}]}], {0x14}}, 0x438}, 0x1, 0x0, 0x0, 0x8000}, 0x4) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000b00), 0xc, &(0x7f0000000f80)={&(0x7f0000000b40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSET={0x3c, 0xb, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x20, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSET={0x1a0, 0xb, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_DESC={0x94, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x80, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x58}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc7c9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc0}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x10000}]}, @NFTA_SET_USERDATA={0x44, 0xd, 0x1, 0x0, "46b2e5cabc570d12140fc538db0dd4bcf2b310601d5825763578a56e42b626258a8a0a4359a911f42da95a3bae8fcc956cdd87df05d36762bd58deb03d4ccaff"}, @NFTA_SET_EXPRESSIONS={0xb4, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0xa0, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x90, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TARGET_INFO={0x4f, 0x3, "b6064d2c0fd899f5e7219bce810e9d3c5302ea21263dd5d8090cd2f11d0fde2e1e47e00ad8a4fc6387ed745d366d9fe6ea95b5643b7a9571c0f5bab188e27c4ccd98a933081a545be4e3e4"}, @NFTA_TARGET_NAME={0xa, 0x1, 'TRACE\x00'}, @NFTA_TARGET_INFO={0x25, 0x3, "c79db00555062783f32091325d21d106589d44b2091e49beda28914f0d4c85a298"}]}}}]}]}, @NFT_MSG_NEWCHAIN={0x214, 0x3, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_USERDATA={0xc2, 0xc, "3aca32b89fee03f665e490ec93e93fe1f9b6e8be1827a3082d7b39fe72f4fb68432d95f42359fcb26673d91045cddea4841938188d0f2ff4bf6d55eef0a3eabd8e5169a447c350839f551f15088e314c2113b75ebd840f708dd72fd82cb66a427cd27b349dd54884cb5b2e3ac627599c958e87ff47ffc305eb8e01020fe9f71c0e9ae897a0bc4a49f3f6380f0d1793b945e0786f7cd8cafc9c7c3ff0efb0a89a54a81f89017e01ae3f16b1ffe0f312d46bc247c21f1d79b840e17af5a492"}, @NFTA_CHAIN_USERDATA={0x4}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_CHAIN_HOOK={0x4c, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x73cf6134}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_DEV={0x14, 0x3, 'ipvlan0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'wg0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2ea8d375}]}, @NFTA_CHAIN_USERDATA={0xb4, 0xc, "a1c916ded5407b88fbfbd6c3f4d4751a8881d3900638c4f340774420b41d92f7f3d35b67ca8d965c9fc367ddfe8405066a95f54988480120b549600a03686a1276231aa3401259eec5337976c381edf488fda2ece3e8eb14325bc360d38e0fb4d84bba5502f6d13d16ccdc6ca18dcb94d46a72a750fbbed834619f9f5bd5df5d3652750b918db60c23925fc4059e59dd3de5076f2d0a870543ad3b1801c3366167052d2021ad04b72ee4bbebfbc6de1d"}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}]}], {0x14}}, 0x438}, 0x1, 0x0, 0x0, 0x8000}, 0x4) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x44, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r11}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_FAMILY={0x5, 0xd, 0x11}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r11}]}, 0x44}, 0x1, 0x0, 0x0, 0x20048000}, 0x2400c840) (async) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000010c0)={&(0x7f0000001040)={0x44, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r11}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_FAMILY={0x5, 0xd, 0x11}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r11}]}, 0x44}, 0x1, 0x0, 0x0, 0x20048000}, 0x2400c840) r19 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001180), r5) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r5, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x1c, r19, 0x100, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20040880) socket$nl_generic(0x10, 0x3, 0x10) r20 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001280), 0x4) writev(r20, &(0x7f0000001400)=[{&(0x7f00000012c0)="03913974da2596628b1d854ed877d604449b71bd7f4b418c994c036741b559c38a3bafa26ee587035d9e75dfc5946b4b30d474c44cdace65d59a20bb3e373c187ff613deb0cb561958436c3a0dff43f303bd567cab0b93593d5bf2550df4ec6f77ceac3203f95530154d4f7ac0dd7838c11bac7f02b68ba8c36c178068c3d585930a49431e64513fd1562fabe03231d714b7166678c94ef311c9bce3e461c087ed4bd0db9a494da21e9c4a9f5f3fa781d61b62d7942dba27939896650417cef499be44dff310230cc1cb34b789026f2a534bb423e3af5d5c", 0xd8}, {&(0x7f00000013c0)="8d8eb419f034cf2090628f341472ea69b11469ec3cff", 0x16}], 0x2) setsockopt$IPT_SO_SET_REPLACE(r12, 0x0, 0x40, &(0x7f00000014c0)=@nat={'nat\x00', 0x1b, 0x5, 0x13e0, 0x11d0, 0xb8, 0xffffffff, 0xb8, 0x12a0, 0x1348, 0x1348, 0xffffffff, 0x1348, 0x1348, 0x5, &(0x7f0000001440), {[{{@ip={@local, @local, 0xff000000, 0xff000000, 'veth1_to_batadv\x00', 'veth0_to_bond\x00', {}, {}, 0x1d, 0x3, 0xa}, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x8, @ipv4=@broadcast, @ipv6=@local, @port=0x4e24, @port=0x4e21}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x27}, @loopback, 0xff, 0x0, 'nr0\x00', 'ip6gretap0\x00', {}, {}, 0xc, 0x1, 0x49}, 0x0, 0x10e0, 0x1118, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.net/syz0\x00', 0x8, {0x7}}}, @common=@set={{0x40}, {{0x4, [0x5, 0x4, 0x6, 0x0, 0x3, 0x2], 0x3, 0x1}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @private=0xa010102, @broadcast, @gre_key=0x4, @icmp_id=0x66}}}}, {{@uncond, 0x0, 0x90, 0xd0, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x64}}}, {{@ip={@private=0xa010102, @remote, 0x0, 0x0, 'netpci0\x00', 'rose0\x00', {0xff}, {}, 0x11, 0x2, 0x18}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x12, @broadcast, @multicast2, @port=0x4e24, @gre_key=0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1440) (async) setsockopt$IPT_SO_SET_REPLACE(r12, 0x0, 0x40, &(0x7f00000014c0)=@nat={'nat\x00', 0x1b, 0x5, 0x13e0, 0x11d0, 0xb8, 0xffffffff, 0xb8, 0x12a0, 0x1348, 0x1348, 0xffffffff, 0x1348, 0x1348, 0x5, &(0x7f0000001440), {[{{@ip={@local, @local, 0xff000000, 0xff000000, 'veth1_to_batadv\x00', 'veth0_to_bond\x00', {}, {}, 0x1d, 0x3, 0xa}, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x8, @ipv4=@broadcast, @ipv6=@local, @port=0x4e24, @port=0x4e21}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x27}, @loopback, 0xff, 0x0, 'nr0\x00', 'ip6gretap0\x00', {}, {}, 0xc, 0x1, 0x49}, 0x0, 0x10e0, 0x1118, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.net/syz0\x00', 0x8, {0x7}}}, @common=@set={{0x40}, {{0x4, [0x5, 0x4, 0x6, 0x0, 0x3, 0x2], 0x3, 0x1}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @private=0xa010102, @broadcast, @gre_key=0x4, @icmp_id=0x66}}}}, {{@uncond, 0x0, 0x90, 0xd0, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x64}}}, {{@ip={@private=0xa010102, @remote, 0x0, 0x0, 'netpci0\x00', 'rose0\x00', {0xff}, {}, 0x11, 0x2, 0x18}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x12, @broadcast, @multicast2, @port=0x4e24, @gre_key=0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1440) socket$igmp(0x2, 0x3, 0x2) 402.490549ms ago: executing program 4 (id=4789): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYRES16=0x0], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000000200)={0x50, r2, 0x1, 0x70bd25, 0x25dfdc00, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x48040) (async) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000000200)={0x50, r2, 0x1, 0x70bd25, 0x25dfdc00, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}]}, 0x50}}, 0x48040) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000005e00010000000000fddbdf2508000000010000000b"], 0x1c}], 0x1}, 0x0) (async) sendmsg$netlink(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000005e00010000000000fddbdf2508000000010000000b"], 0x1c}], 0x1}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000200)=@ethtool_perm_addr={0x4b, 0xa, 'Cr\a\x00\x00\x00\x00\x00Go'}}) 269.253105ms ago: executing program 3 (id=4790): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.stat\x00', 0x7a05, 0x1700) write$cgroup_type(r1, &(0x7f00000000c0), 0x9) sendfile(r1, r0, 0x0, 0x10000) 115.674451ms ago: executing program 2 (id=4791): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f00000006c0), 0x8) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0x5c, 0x30, 0x25, 0x0, 0x0, {}, [{0x48, 0x1, [@m_pedit={0x44, 0x1, 0x0, 0x0, {{0xa}, {0x18, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x14, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e80)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r4, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r5) getsockopt(r3, 0x1, 0xd, &(0x7f00000004c0)=""/238, &(0x7f00000000c0)=0xee) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="2045abe84e31fedbdf250f0000000500330003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x14) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f0000000940)=[{0x0}, {&(0x7f00000009c0)="38683f236ec70a", 0x7}], 0x2}}], 0x1, 0xc0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)={0x2c, 0x2e, 0x1, 0x70bd2a, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r9}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x109, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}]}, @nested={0x5, 0x1, 0x0, 0x1, [@generic="99"]}]}, 0x2c}], 0x1}, 0x0) sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)=ANY=[], 0x118}, {&(0x7f0000001f40)={0x110c, 0x2b, 0x2, 0x70bd26, 0x25dfdbfe, "", [@generic="6335bca7947920ab45101781232521", @nested={0xa0, 0x5a, 0x0, 0x1, [@typed={0x8d, 0xc1, 0x0, 0x0, @binary="8305c7e2561935506ac2b5849e9ac95e0ca02b3bfd28e0cf8f079d402a14f72104f845d9099bdc1b86b7c231239ca5a326a3668a01880ebbf972a9c70daead54783f6735079401fb17daa6ed49fe0043604db664b5923055b7c673a7398a1f6f57c423b25098c9c88f0232ed7e9294302148e2c3ca0439035247406d1eb15ab69875d04e590cfd5b1a"}, @typed={0x8, 0xbd, 0x0, 0x0, @u32=0x4}, @nested={0x4, 0xaa}]}, @typed={0x8, 0x4a, 0x0, 0x0, @u32=0x2}, @typed={0x14, 0x60, 0x0, 0x0, @ipv6=@private2}, @typed={0x4, 0xb7}, @nested={0x8, 0x81, 0x0, 0x1, [@nested={0x4, 0x127}]}, @typed={0x8, 0x8, 0x0, 0x0, @fd=r0}, @nested={0x100c, 0xf2, 0x0, 0x1, [@typed={0x8, 0x100, 0x0, 0x0, @u32=0x40}, @generic="990834a5335899b179616284e5c2251dad7b91672f6f6117bcc7dd4070912b2953890e870cca622c8b9897e7a3a52c693b05ef3604e4aabe0c54d11e2f9634a341819fca06c139586b2bdfa6b12112213dd066109f9ccdde226869e92498776abd3d25587196577d4205a2c9d9335ba1d9dbcc23636c06548ebed9a7a32f623d04cbc6d8bd50a5bf2e2ba841e82648791bcd0fbfaf00aeb48b75ea4fbe16cee9374cff14b966b52d8325fa861a1c6cd62d288ce05bf96cd984d3fd60e67d42af8cb1c3b610e924ab9817cbda1f8746ea586c32b89b84fab787f0d92fe030a601f7186ca2a47681400b8a9dc08c1586d52d0d39d1efe29f0ce11ad8bee51e2f3c7ac92838fe748ec469cebadc33ceb92348df4c407742bbcf6e21f6dba4910735352f9eb789c01ec659f497bd81bafd53fb3e941b8b628aecb090607a3dbcda7cd4feba73d49eae08caad800c1b58760333491edff51ab85a5d6471b9af4cfe2da7f59398343b427004c6cff3ebada733642fe6ed651f43acf6816dd8d16d3556b8b381b96c616c49b4dc753d5c3660b8f5cb3e6d1147701517f24e5b9281f011081efffc3e4195dfd6d357ae19c34fd13b7f8c6d326bc16cc6f9f549e02619c8f1b967befdb839554da35a440170a2d98c5b17b98ea450be28d9b1513e772be4814f6c7a0721935dc2601d68fc7b466deb64a7a6064a821b246a001b37ea44e940835241d042d1ac11bdfe3860a2ebd011db304cd848c861af1dbdee0f6b2261d5bb42d73fdd4a94db3b03de1001291ef3d6551b8ff1db9088dabd3f908b3ad2d41abf69daf138091112a9bc7470a8175baabf7c50a621bd7c2019b84079530f0c67ee51388fcc32bcc0e8577bd46aaba8395cc2079553fe38e2063f8416d7fabd72b6f3b7c84cce458d68107dfdd7715ca7ea869e1720799e86fba5d391daa1399496442e4aa0db41f799007da4a22de16f2f9e990b1fb84740bd7c46912e0d0f61d7fe038ae8037168c3cf7c3bc7f2a3bdddca2a040cc814264afd7363aea7a45234d40933647fe9d11b9a7786f047b1900e1b7bb5d61ed2acb0dc7fca657eb9ea78610cbb7805411ff11b37a4c17211cc63ad3b3d1c56800e1de5b5a2517881d4914136fcf360787bf7dd7556567acd0773dd5b3a95d285b46be30eb60320376079fa911132e71b269b4a55166167e00debae4c7afd1923e9d18edaa4ac23e083e2bdf1de6a8b8c37fc4c86f99d9cee58a76593f45e3a53b39c8ce9830aa0da47f0e582265cadf3cfa088fa826ad238518e425542b4fd5ea507a6cd5879ab6f161bbe244c20ea261e9216fd4a950deb57748b5fe7a5fd40b2b0494c7bd14a22740763dadc7b247e1633a829edc4923cf64e3d1d4736de85df41943db29280a52577492b964dc1a48a63a734d31ba472e2c0451c7a497c71372cad1b6897f865b18d4c5d1094adf2295acaa0ce9ca0fd4658aaccce273eff3768d142506cb22b788b6166759269f9da521f56587bddd4988e1fe586bb1b3a2acc3554a13ad7ca3a817bfeee975733a21c675f5424ee85df067f45132d57521c41d2359a00a1ea324fbcf11e270fd722223130c674bdfe11cfbb06b93f1aa849260cb8a95b7258302fe743de8839755791ac8d12a2fd7630627fd75eb7e487b00f301334553fecf7bb69338e4bc51007627c167570d4562f936b64460a9d0b3fd6d38f5159a174daa9ac1a2b1961be28092b1db72679837e370ff92edbb3078556b8bf01e88205f3e906066a157c6ceeefbe921523ee288fab16614b10ec479f2f37380e7555380927ee90bc558a730b38a951be957968945026577dc9dbedafa6a15bcedcab02d5445b35b5d299a6c206e50d0a4210700843b565733da69043d8c68304001f30086d98534a06a4ec55c544bc44e8eb67d856fc30d50d6904e37f9b32c4d2ddd9fe41133bbd196e7743377876f60c126e4ee08af90d74a71df507d8d4823ff592905205b8f919b896a0269b620e24297acc0e8b21d9b00deee13a9f639132d95eef2af4900945d20b22fb6546759b354cd8a607e431a76fafe1963d20c299505838ed844acfd196d5088c5dcd2ded48fa1c403ca079666c155ab5f3ae275701c07364ba3555dbce83a70d503b29d321d393353f48bb6874217494bd170cc19304434ed0628236360adab62c81cd1b61acad9586d535ba953c235485242208b8ee6ff82a03d3a147f22158d08f206019a1501362a36b935778e75744989f8ae836e7526f4cb334e231f4ea0c9a9fa87302f04e89129dc677dc1902e0ac543d4e9cf425b30dc48200935fad1f6ace65d02331a90de162fb18a6df1479c9e3a8388bf9af47ff8c776d8170145e304f60138e21b0378c731553e363d67b3c9ce5ee63fc470d7ab931e4b00b499af4877fb8b9646f6f07be6197ee4cf530ff471786689c9597250b407f91d112c7039480976128f4f33d8aea7ae0fb144406289f46792a03831b29b2dcc4a60643055025ce3123f33b18ec3a627f92d821859168c0198efd69cd9381787c84f0ab3387e017c298afb3166d1f4276e1ad467edb6e903b565aafb2ef9778be464f723c4b9c8c36257ef159de87a8cd48da17d177a3660c8b5619ccb8e7004568a6e959bb8eb278e1fdb4ba5c9f7c82602b231b10f4e17c29dfde4668273a8214c2549f42cea5e2ec1b7c30d6a070b03a0009ee467a67a6678ddec2b4fba2dbacc522830bf41841ceaf15ba3d3308b15a379763316f901bfbb90482931702a9a8a792bf25884cc6baf977e2882335c830a77b5ec76458b6fa78aa2d212cd8db25c56c260c5985d449268ea599b25d7499a9e649428a1328b32eaced5743801a079776532a51191287b5255dcc37a1bdfe4669d4382a84bd5c1784455ebf45857af71e9620c7b598bf96e19a7503315912c1116eccd83850b01cfa83e804f54a023f7b736b2469ac7b92fa29185cadd2733afd9a944d5d009adfb44634ac0a50da991641a59976f942ca9fd5342d0974da25bef51a4e93f6c7b16036f193aa57388dadf03771a18f11b0b51400fe645dd699e777a8fabd15db171e4fd21e9292080a902a4f601cb8b9c93049560c748a32f15dc20ef42a00933dfbc8ef1f64fc9c66d2360ca572806985cca1490af41bac8954e7fc732541eb6e063c6588b6947550124ac39788895f085a0d283ad2b8f09f8f4fcf44e47e8490261b1d0734ce89f7da36a9561935d8ebba1f03ab26e3f082d4133819b51659952fdf8eb0e8ac06993af053f0e4e82dcc1f42a6f6ad927aaaf766ada72f512d57bbecdbf494026bd9c4a6ef643a6144a459856d62e5f15e4746a313b29d93b0ffae23dbf42053d9b63f4ebf627e80f3d6f8a181962c9c28fc1ea7aa65b205f6ab983356ada98d65865945d632112ba67ac8ce5634098c057f0b885fc7adf7e9c163a4ac79bcabad49d633143431e394cc70fdd67bebdb6c20dc08cdb56ca70ed396e9315751dc301b4a1950c06c0cfe48f858686ca1c528bf82e22aee219b5f48cb34c8848d08de012897b5a256115c689edddcd638f0957f3e59c42b3eef163dcb0e09ca157f7d12229b44e885b22e994b634e25b98e05205b0ca53a7115eedc6e4e360554cf8b8241f99b85df700fd177b702c478185382f70155aba6df61d7f9406f7ed1d358e6d003bf337c7978bcfd559e39692dac51220731038cee8ff092b1c8ee7cec88d59a71f52dc42548d55c7a5b7cb21f99428a77794320db98781b5760c61ba69447923f6e60fe729bd8460e368706bb4f77f5251e0f82c247a0feb0d34c7e0ccb80f277acc874288ae3ea7b00594c30e5abe36a807134ccc34813a5a9e1cbc674826181a144aeae72aea8cb163bcc2c02ef116568e3b733be5e7eeaeb13c3da53d6b0b954cc7d334c155ccc322de264a2c578d09172b731297bb871fc6f6840fb25a98db9e0e3f7b94787221a7d554771dbd4308f6fe819ef29623a83b32155f5d75767b117bbdb9aba7db8582a200158e06a3e6dc0c6cbde150ddd40b958ee6865ccbb99dd3505e7bbe4217a4236c272e736a047a4b2010a9fd81a5cd207f2258788cc5d4a3864da4a0f955ceed16c6e5ce8d38aaa431eba78b5eb2a4329b9b8d433de675e2c4da7b7bbc14d0d5996508bad40e69eb22cca57c42203ca8a7195141de4895970c666a1256b12b83ddd53122405294a5b24273807c67020ad25e624f9a3ccfff228a2bbe9943bd67ef4c293290ce65349a55a0be1ff78c0c931b25b35e7977a0f5dae872dd51ef49fc9595f5f0f8101c366f4afb90945efd88fad78f98c05c3554bfe9a788fece84ad461d72d77422588f2cb5030b8796c5a8663bbf425f1fc7be761e882cba625794a1577ba8255d3b31b2366ef463ce633ff0281771fe1c4d223337cf3eab378aaee6da6be91e6d7cd4c42b3c9eeec8fc2b3d495827b88cd56e09b5503273f16610d1380942d06cf5f27414998469ab1bd5defb0568458691a52f0322fb7afa35b7c3bafd589890d3d8e25a1f82a3f1fe1b17c218f6d7363172be8c7ac635b6cf837c3b81b4fe81647ffb7f952ee598fa4c5b3ed831933ee6fa4fa84b2634323404768719c73e7edda8ba1be12495a577c123b55d2976ce4c6e57da11917867e7c18a9a78153f6193c56feac3700219d016b494cd60bd7f52a4d4adf2bba62921fbe3a90e379fe3a8f1894113f2270b8aebf56c258cfbbf1d4faa0731b47f445985d7574215c09a92f3a46dfd26dde69ffcc20c5310e4ed206ff30803221731e4bd5c57a51099298f5fb9eeceeef591bb9a51417347772c9cf8793c9d5e46b42d7338fa9c612ea71e64609fd8f86da616b56e46ae84545c1aafae1be01f171bbb2163d59efc3451f35f867fd0f70700891c3e2086a6e66bf1325490ac3726d76e15498b3c2d611256422cac0e20936635f1ebf4b847999207a2149c78eafdc2bfb13229cc10dc3760d2a1caf70dda66cdcf81b9c4f03d1143a82425c7f5f57b4edcd9ee995b8361e11903c42c31ce211f0112cc78c0bac67e0a3f824184ab85e7a547d6d5200563319528552a59bdb0fb706e23334b079f16332d47da57bf8eead715280ce3f2305972f0681729407bd774bb8aa5bb8d61806dec173b5f0627e33592b7fd4b2101138fbafe98978114cadf94ebe0757cce8e4f496177bdbd7a4ef1a7d418f779dfabb9ad7c4824e50c5c83aef83ceb70e6658472e8cc836ac53ac81cd9fec3d19f9dcce60d1053ed7a4bab497b578d088174369755be7c2e91af6ff6aa09a5146340b55d813f8af022f2ab6e91b2e4aa46806ff77cee7221f9770729e53798b49f947bc6be20d29609a88eac378201977dec8fd5c4c661f8001e918a8f025d9110ea25f233a87bf7f39656aef2d56091c4e49f958e9a51f89da48b4c948167421f466989c4b1271da5d242e42018685efc6d713d738b5e9be1b5620777fa71b9d547c04f0e6c700d27500e8c625183a24e9eb15d01f99f91384d520f33afe52d2136f058af973d78d63e97ca6018baca73b5f83dbdaa3ec0a300ae889313806915c007805d539eb94866346ddd5114a6871f55b0df30b7694e9223daf11e0d8603ea09e2701f9a7a0ac20cd46fead3a101ff90c4e92f3795d227a802fe9be0b697e13e255644a41dea2c00a169f180c1a15bb9f1faef763f1da63b95faf2d18bc8aae10fd0755c2848bed55dc8699bf4cf3f3297a6cd37fe412b0c544b23c6538acd730fb6cbcd72711c5cb21125f8b992534eb6ae6adf436608dfe1db104672f8070"]}, @typed={0x8, 0xc6, 0x0, 0x0, @uid=r9}, @typed={0x8, 0xc9, 0x0, 0x0, @ipv4=@private=0xa010101}]}, 0x110c}], 0x2, 0x0, 0x0, 0x1}, 0x0) 71.365051ms ago: executing program 0 (id=4792): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000000002010400000000000000000a00000004000180300003802c00018014000300fc00000000000000000000100000000014004400fe800000001f610000000000000000bb3c0002800c00028005000100000000002c00018014000300fc020000000000000000000000000000140004"], 0x84}}, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x2c, 0x3e, 0x107, 0xfffffffe, 0x0, {0x4, 0x7c}, [@nested={0x8, 0x142, 0x0, 0x1, [@typed={0x4, 0x8}]}, @typed={0xc, 0x9, 0x0, 0x0, @u64=0x2}, @nested={0x4, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [], {0xfffffffffffffef8}}, 0x28}}, 0x4000040) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r2, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x13, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000001d71187a000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) 67.514185ms ago: executing program 4 (id=4793): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x3}, 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="500000002700010000000000000000000a010100000000000000000000000000ac1e010100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e1ffffffffffffff"], 0x50}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x12000000}]}}]}, 0x3c}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_pid(r2, &(0x7f0000000000), 0x2a979d) getpid() socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000700), 0xffffffffffffffff) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r3}, 0x8) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r5, 0x6, 0x2, 0x0, 0x0) r6 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r4}, 0x8) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r7, 0x29, 0xd4, 0x0, 0x0) close(r6) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x9) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000003c0)={@fallback=r8, r8, 0x2f}, 0x20) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) 0s ago: executing program 3 (id=4794): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200), r0) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r4 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r4, 0x6b, 0x2, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r5, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r6, 0x0, 0x0}, 0x10) ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f0000000040)={'bridge0\x00', 0x5}) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0x6, 0x1, '\x1d\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20040014) kernel console output (not intermixed with test programs): devsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 473.613470][ T5182] Bluetooth: hci2: command tx timeout [ 473.722200][T12762] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 473.732403][T12762] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 473.753172][T12762] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 473.784639][T12762] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 473.960736][T18269] netlink: 'syz.1.3249': attribute type 1 has an invalid length. [ 474.093541][T18277] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 474.293161][T18288] netlink: 'syz.4.3258': attribute type 10 has an invalid length. [ 474.310186][T18290] netlink: 'syz.4.3258': attribute type 10 has an invalid length. [ 474.322758][T18290] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3258'. [ 474.451807][T18297] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3259'. [ 474.508861][T18300] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3263'. [ 474.520970][T18300] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3263'. [ 474.583156][ T5926] IPVS: starting estimator thread 0... [ 474.611647][T18303] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3264'. [ 474.629571][T18306] lo speed is unknown, defaulting to 1000 [ 474.704376][T18304] IPVS: using max 25 ests per chain, 60000 per kthread [ 474.763753][T18313] netlink: 'syz.3.3267': attribute type 3 has an invalid length. [ 474.870573][T18318] netlink: 'syz.1.3266': attribute type 1 has an invalid length. [ 474.967985][T18309] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3266'. [ 475.030648][T18326] netlink: 'syz.3.3269': attribute type 1 has an invalid length. [ 475.092284][T18306] netlink: 'syz.4.3265': attribute type 13 has an invalid length. [ 475.123044][T18306] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 475.225239][T18337] netlink: 136 bytes leftover after parsing attributes in process `syz.2.3271'. [ 475.372276][T18346] Bluetooth: MGMT ver 1.23 [ 475.755191][T18369] macsec1: entered promiscuous mode [ 475.760635][T18369] macvlan1: entered promiscuous mode [ 475.787931][T18369] macvlan1: left promiscuous mode [ 477.048483][T18446] IPv6: sit1: Disabled Multicast RS [ 477.066446][T18446] sit1: entered allmulticast mode [ 477.094923][T18447] ip6tnl1: entered promiscuous mode [ 477.108468][T18446] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6 [ 477.126672][T18447] ip6tnl1: entered allmulticast mode [ 477.139726][T18447] team0: Device ip6tnl1 is of different type [ 477.497165][T18478] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003 [ 477.504094][T18477] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 477.566260][T18463] sctp: [Deprecated]: syz.4.3310 (pid 18463) Use of int in maxseg socket option. [ 477.566260][T18463] Use struct sctp_assoc_value instead [ 477.804539][T18460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 477.812623][T18485] syzkaller0: entered promiscuous mode [ 477.820161][T18485] syzkaller0: entered allmulticast mode [ 477.891932][T18490] __nla_validate_parse: 6 callbacks suppressed [ 477.891952][T18490] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.3317'. [ 477.910082][T18490] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3317'. [ 478.398101][T18507] Bluetooth: MGMT ver 1.23 [ 480.072656][T18534] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3328'. [ 480.244192][T18536] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.340510][T18545] netlink: 'syz.0.3331': attribute type 10 has an invalid length. [ 480.382363][T18545] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3331'. [ 480.419987][T18536] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.459708][T18545] dummy0: entered promiscuous mode [ 480.475674][T18545] dummy0: entered allmulticast mode [ 480.481838][T18545] bridge0: port 3(dummy0) entered blocking state [ 480.496120][T18545] bridge0: port 3(dummy0) entered disabled state [ 480.513874][T18545] bridge0: port 3(dummy0) entered blocking state [ 480.520382][T18545] bridge0: port 3(dummy0) entered forwarding state [ 480.639067][T18536] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.740204][T18536] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.797067][T18560] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3335'. [ 480.859303][T18566] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3336'. [ 480.894471][T18566] bond0: (slave ip_vti0): Error: Device type is different from other slaves [ 481.121824][T18576] pim6reg: entered allmulticast mode [ 481.131817][T18576] pim6reg: left allmulticast mode [ 481.228030][T12765] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.240957][T12765] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.286031][T12765] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.334088][T12766] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.442738][T18589] lo speed is unknown, defaulting to 1000 [ 481.689785][T18601] tipc: Started in network mode [ 481.747411][T18601] tipc: Node identity 9e88a00205b1, cluster identity 4711 [ 481.836466][T18601] tipc: Enabled bearer , priority 0 [ 481.979538][T18598] syzkaller0: entered promiscuous mode [ 482.069843][T18598] syzkaller0: entered allmulticast mode [ 482.369680][T18591] tipc: Resetting bearer [ 482.385516][T18622] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3354'. [ 482.422951][T18591] tipc: Disabling bearer [ 482.448908][T18624] tipc: Started in network mode [ 482.458771][T18624] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 482.468012][T18624] tipc: Enabling of bearer rejected, failed to enable media [ 482.530897][T18589] netlink: 'syz.2.3343': attribute type 13 has an invalid length. [ 482.603349][T18589] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 482.664478][T18639] sctp: [Deprecated]: syz.0.3360 (pid 18639) Use of struct sctp_assoc_value in delayed_ack socket option. [ 482.664478][T18639] Use struct sctp_sack_info instead [ 482.690851][T18636] mac80211_hwsim hwsim41 wlan1: entered allmulticast mode [ 482.720460][T18641] bridge_slave_0: left allmulticast mode [ 482.731721][T18641] bridge_slave_0: left promiscuous mode [ 482.753238][T18641] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.799834][T18641] bridge_slave_1: left allmulticast mode [ 482.823132][T18655] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3362'. [ 482.831877][T18641] bridge_slave_1: left promiscuous mode [ 482.852417][T18641] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.903384][T18641] bond0: (slave bond_slave_0): Releasing backup interface [ 482.929208][T18641] bond0: (slave bond_slave_1): Releasing backup interface [ 482.950233][T18641] team0: Port device team_slave_0 removed [ 482.962950][T18641] team0: Port device team_slave_1 removed [ 482.970806][T18641] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 482.979191][T18641] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 482.988851][T18641] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 482.996979][T18641] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 483.031575][T18659] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 1, id = 0 [ 483.264333][T18665] @ÿ: renamed from veth0_vlan (while UP) [ 483.536978][T18677] lo speed is unknown, defaulting to 1000 [ 483.829011][T18696] netlink: 'syz.0.3372': attribute type 9 has an invalid length. [ 484.102517][T18701] syzkaller0: entered promiscuous mode [ 484.132952][T18701] syzkaller0: entered allmulticast mode [ 484.364610][T18699] lo speed is unknown, defaulting to 1000 [ 484.708824][ T5939] IPVS: starting estimator thread 0... [ 484.806859][T18731] IPVS: using max 27 ests per chain, 64800 per kthread [ 487.082108][T18762] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3390'. [ 487.115494][T18762] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3390'. [ 487.270583][T18760] lo speed is unknown, defaulting to 1000 [ 487.518277][T18775] pimreg: entered allmulticast mode [ 487.546333][T18780] pimreg: left allmulticast mode [ 487.765735][T18788] lo speed is unknown, defaulting to 1000 [ 488.035053][T18804] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3402'. [ 488.495396][T18809] vlan0: entered allmulticast mode [ 488.500544][T18809] bond0: entered allmulticast mode [ 488.552004][T18809] bond_slave_0: entered allmulticast mode [ 488.559649][T18809] bond_slave_1: entered allmulticast mode [ 488.812975][T18825] netlink: 'syz.1.3411': attribute type 13 has an invalid length. [ 488.830728][T18825] netlink: 'syz.1.3411': attribute type 17 has an invalid length. [ 489.062933][T18844] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3411'. [ 489.109456][T18825] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 489.162820][T18849] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 489.186707][T18850] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3415'. [ 489.235128][T18850] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3415'. [ 489.318122][T18847] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 489.352402][T18830] lo speed is unknown, defaulting to 1000 [ 489.377822][T18847] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3415'. [ 489.445036][T18854] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3417'. [ 489.586790][T18858] netlink: 'syz.4.3418': attribute type 1 has an invalid length. [ 489.637559][T18866] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3420'. [ 489.689546][T18860] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.875100][T18860] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.025236][T18860] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.139455][T18860] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.320664][T18890] tipc: Enabled bearer , priority 0 [ 490.339405][T18882] syzkaller0: entered promiscuous mode [ 490.364355][T18882] syzkaller0: entered allmulticast mode [ 490.389282][T18882] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3423'. [ 490.537448][T12765] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.552638][T18879] tipc: Resetting bearer [ 490.601773][T18895] geneve2: entered promiscuous mode [ 490.639145][T18878] tipc: Resetting bearer [ 490.680247][T18878] tipc: Disabling bearer [ 490.695484][T12765] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.735002][T18900] kthread_run failed with err -4 [ 490.740428][T12765] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.796933][ T8268] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.825273][T18905] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 490.843850][T18905] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 490.954417][T18918] tipc: Started in network mode [ 490.965681][T18918] tipc: Node identity 22bcd28281e6, cluster identity 4711 [ 490.992948][T18918] tipc: Enabled bearer , priority 0 [ 491.008314][T18924] syzkaller0: entered promiscuous mode [ 491.025156][T18924] syzkaller0: entered allmulticast mode [ 491.066793][T18918] tipc: Resetting bearer [ 491.086723][T10611] IPVS: starting estimator thread 0... [ 491.097428][T18916] tipc: Resetting bearer [ 491.128956][T18916] tipc: Disabling bearer [ 491.150356][T18926] pim6reg1: entered promiscuous mode [ 491.157469][T18926] pim6reg1: entered allmulticast mode [ 491.181127][T18927] IPVS: using max 27 ests per chain, 64800 per kthread [ 491.638272][T18955] pim6reg: entered allmulticast mode [ 491.903818][T18968] pim6reg1: entered promiscuous mode [ 491.923731][T18968] pim6reg1: entered allmulticast mode [ 492.120969][T18983] lo speed is unknown, defaulting to 1000 [ 492.321235][T18996] __nla_validate_parse: 4 callbacks suppressed [ 492.321252][T18996] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3455'. [ 492.366611][T18986] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3446'. [ 492.384930][T18986] openvswitch: netlink: Flow key attr not present in new flow. [ 492.460624][T18998] pimreg: entered allmulticast mode [ 492.927199][T19007] syzkaller1: entered promiscuous mode [ 492.932704][T19007] syzkaller1: entered allmulticast mode [ 493.021965][T19011] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3456'. [ 493.032077][T18990] lo speed is unknown, defaulting to 1000 [ 493.055312][T19011] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3456'. [ 493.110075][T19004] syzkaller1: entered promiscuous mode [ 493.127456][T19004] syzkaller1: entered allmulticast mode [ 493.192844][T19013] tipc: Enabling of bearer rejected, failed to enable media [ 493.814748][T19031] syzkaller1: entered promiscuous mode [ 493.820308][T19031] syzkaller1: entered allmulticast mode [ 494.488657][T19075] netlink: 'syz.0.3474': attribute type 1 has an invalid length. [ 494.519169][T19075] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3474'. [ 494.529523][T19073] wireguard0: entered promiscuous mode [ 494.538434][T19073] wireguard0: entered allmulticast mode [ 494.608655][T19078] tipc: Enabled bearer , priority 0 [ 494.656095][T19078] syzkaller0: entered promiscuous mode [ 494.678114][T19078] syzkaller0: entered allmulticast mode [ 494.816998][T19078] tipc: Resetting bearer [ 494.881445][T19077] tipc: Resetting bearer [ 494.923709][T19077] tipc: Disabling bearer [ 494.955276][T19093] ip6gre1: entered allmulticast mode [ 494.971284][T19093] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3479'. [ 495.005959][T19091] lo speed is unknown, defaulting to 1000 [ 495.555349][T19123] netlink: 'syz.1.3487': attribute type 2 has an invalid length. [ 495.604265][T19123] þ`Ì: entered promiscuous mode [ 495.693456][T19130] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3490'. [ 495.720898][T19130] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3490'. [ 495.736292][T19131] netlink: 'syz.3.3489': attribute type 3 has an invalid length. [ 495.745024][T19131] netlink: 'syz.3.3489': attribute type 1 has an invalid length. [ 495.752761][T19131] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.3489'. [ 495.843105][T19131] netlink: 'syz.3.3489': attribute type 5 has an invalid length. [ 496.200243][T19149] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3494'. [ 496.273812][T19153] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 496.311223][T19153] bond2: entered promiscuous mode [ 496.316471][T19153] bond2: entered allmulticast mode [ 496.322039][T19153] 8021q: adding VLAN 0 to HW filter on device bond2 [ 496.370526][T19156] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 496.402523][T19156] batadv_slave_1: entered promiscuous mode [ 496.567058][T19164] tipc: Enabled bearer , priority 0 [ 496.574878][T19164] veth0_vlan: entered allmulticast mode [ 496.616395][T19164] tipc: Disabling bearer [ 496.748656][T19179] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 496.781794][T19181] Bluetooth: MGMT ver 1.23 [ 497.393129][T19220] netlink: 'syz.4.3517': attribute type 1 has an invalid length. [ 497.423680][T19224] __nla_validate_parse: 5 callbacks suppressed [ 497.423697][T19224] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3518'. [ 497.459446][T19220] bond3: entered promiscuous mode [ 497.465311][T19220] 8021q: adding VLAN 0 to HW filter on device bond3 [ 497.467188][T19228] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3519'. [ 497.499734][T19230] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3517'. [ 497.522763][T19228] netlink: 'syz.3.3519': attribute type 1 has an invalid length. [ 497.536238][T19228] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3519'. [ 497.547954][T19220] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 497.555234][T19220] IPv6: NLM_F_CREATE should be set when creating new route [ 497.562456][T19220] IPv6: NLM_F_CREATE should be set when creating new route [ 497.570712][T19220] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 497.579349][T19228] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3519'. [ 497.588670][T19228] netlink: 'syz.3.3519': attribute type 15 has an invalid length. [ 497.660090][T19235] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma? [ 497.825277][T19235] lo speed is unknown, defaulting to 1000 [ 498.216465][T19262] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3524'. [ 498.514422][T19274] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3530'. [ 498.577867][T19262] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 498.593398][T19262] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 498.607931][T19262] bond0 (unregistering): Released all slaves [ 498.647207][T19268] lo speed is unknown, defaulting to 1000 [ 498.862970][T19281] lo speed is unknown, defaulting to 1000 [ 498.874275][T19286] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3532'. [ 499.013202][T19292] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3534'. [ 499.037901][T19289] netlink: 'syz.0.3534': attribute type 1 has an invalid length. [ 499.048120][T19289] netlink: 'syz.0.3534': attribute type 2 has an invalid length. [ 499.059358][T19289] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3534'. [ 499.125498][T19294] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 499.162638][ T6071] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 499.181274][ T6071] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 499.200612][ T6071] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 499.227035][ T6071] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 499.756149][T19322] lo speed is unknown, defaulting to 1000 [ 500.313256][T19328] lo speed is unknown, defaulting to 1000 [ 500.382904][T19327] lo speed is unknown, defaulting to 1000 [ 500.722724][T19347] mac80211_hwsim hwsim37 syzkaller0: entered promiscuous mode [ 500.731599][T19347] mac80211_hwsim hwsim37 syzkaller0: entered allmulticast mode [ 501.041182][T19353] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7 [ 501.060926][T19355] lo speed is unknown, defaulting to 1000 [ 501.098300][T19363] validate_nla: 4 callbacks suppressed [ 501.098318][T19363] netlink: 'syz.0.3557': attribute type 4 has an invalid length. [ 501.216731][T19363] Ã: renamed from bond0 (while UP) [ 501.423620][T19385] netlink: 'syz.1.3560': attribute type 15 has an invalid length. [ 501.488938][T19375] netlink: 'syz.1.3560': attribute type 1 has an invalid length. [ 501.992860][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880287f6c00: rx timeout, send abort [ 502.055635][T19405] syzkaller0: entered promiscuous mode [ 502.076051][T19405] syzkaller0: entered allmulticast mode [ 502.253522][T19405] lo speed is unknown, defaulting to 1000 [ 502.492950][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880287f7000: rx timeout, send abort [ 502.502419][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880287f6c00: abort rx timeout. Force session deactivation [ 502.536040][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff8880287f7000: connection exists (fe ff). last cmd: 20 [ 502.633834][T19416] __nla_validate_parse: 8 callbacks suppressed [ 502.633850][T19416] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3569'. [ 502.695389][T19416] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3569'. [ 502.713077][T19416] bridge_slave_1: left allmulticast mode [ 502.728526][T19416] bridge_slave_1: left promiscuous mode [ 502.738861][T19416] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.780670][T19416] bridge_slave_0: left allmulticast mode [ 502.785911][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880287f7800: rx timeout, send abort [ 502.837145][T19416] bridge_slave_0: left promiscuous mode [ 502.879884][T19416] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.998522][T19417] lo speed is unknown, defaulting to 1000 [ 503.162101][T19426] lo speed is unknown, defaulting to 1000 [ 503.176564][T19434] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3573'. [ 503.193583][T19434] veth1_macvtap: left promiscuous mode [ 503.294585][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880287f7800: abort rx timeout. Force session deactivation [ 503.519969][T19452] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 503.879891][T19472] pimreg: entered allmulticast mode [ 504.083353][T19484] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3588'. [ 504.165093][T19487] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3585'. [ 504.185276][T19487] netlink: 'syz.1.3585': attribute type 62 has an invalid length. [ 504.285779][T19495] FAULT_INJECTION: forcing a failure. [ 504.285779][T19495] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 504.302947][T19495] CPU: 1 UID: 0 PID: 19495 Comm: syz.2.3591 Not tainted 6.16.0-syzkaller-12108-gfdbe93b7f0f8 #0 PREEMPT(full) [ 504.302975][T19495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 504.302986][T19495] Call Trace: [ 504.302993][T19495] [ 504.303002][T19495] dump_stack_lvl+0x189/0x250 [ 504.303029][T19495] ? __pfx____ratelimit+0x10/0x10 [ 504.303051][T19495] ? __pfx_dump_stack_lvl+0x10/0x10 [ 504.303072][T19495] ? __pfx__printk+0x10/0x10 [ 504.303097][T19495] ? __might_fault+0xb0/0x130 [ 504.303132][T19495] should_fail_ex+0x414/0x560 [ 504.303157][T19495] _copy_from_user+0x2d/0xb0 [ 504.303175][T19495] ___sys_sendmsg+0x158/0x2a0 [ 504.303203][T19495] ? __pfx____sys_sendmsg+0x10/0x10 [ 504.303263][T19495] ? __fget_files+0x2a/0x420 [ 504.303288][T19495] ? __fget_files+0x3a0/0x420 [ 504.303324][T19495] __x64_sys_sendmsg+0x19b/0x260 [ 504.303352][T19495] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 504.303388][T19495] ? __pfx_ksys_write+0x10/0x10 [ 504.303408][T19495] ? rcu_is_watching+0x15/0xb0 [ 504.303433][T19495] ? do_syscall_64+0xbe/0x3b0 [ 504.303459][T19495] do_syscall_64+0xfa/0x3b0 [ 504.303480][T19495] ? lockdep_hardirqs_on+0x9c/0x150 [ 504.303501][T19495] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.303519][T19495] ? clear_bhb_loop+0x60/0xb0 [ 504.303541][T19495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.303560][T19495] RIP: 0033:0x7fe2d2d8ebe9 [ 504.303577][T19495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 504.303593][T19495] RSP: 002b:00007fe2d3bf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 504.303613][T19495] RAX: ffffffffffffffda RBX: 00007fe2d2fb5fa0 RCX: 00007fe2d2d8ebe9 [ 504.303626][T19495] RDX: 0000000000000000 RSI: 0000200000000c40 RDI: 0000000000000004 [ 504.303638][T19495] RBP: 00007fe2d3bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 504.303649][T19495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 504.303660][T19495] R13: 00007fe2d2fb6038 R14: 00007fe2d2fb5fa0 R15: 00007fffa7929298 [ 504.303691][T19495] [ 504.415922][T19498] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 504.482176][T19501] netlink: 'syz.4.3593': attribute type 10 has an invalid length. [ 504.560269][T19498] netlink: 'syz.4.3593': attribute type 10 has an invalid length. [ 504.568944][T19498] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3593'. [ 504.768820][T19517] lo speed is unknown, defaulting to 1000 [ 504.995032][T19527] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3598'. [ 505.026696][T19527] 0ªX¹¦À: renamed from caif0 [ 505.050977][T19527] 0ªX¹¦À: entered allmulticast mode [ 505.058641][T19527] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 505.074894][T19529] netlink: 'syz.0.3599': attribute type 3 has an invalid length. [ 505.100094][T19529] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3599'. [ 505.109448][T19529] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3599'. [ 505.989894][T19582] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3612'. [ 506.066935][T19584] mac80211_hwsim hwsim37 syzkaller0: Caught tx_queue_len zero misconfig [ 506.123787][T19584] lo speed is unknown, defaulting to 1000 [ 506.745362][T19606] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 506.779468][T19606] team0: No ports can be present during mode change [ 506.801056][T19601] lo speed is unknown, defaulting to 1000 [ 507.098653][T19617] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.296571][T19617] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.368382][T19628] lo speed is unknown, defaulting to 1000 [ 507.471175][T19639] atomic_op ffff888024964998 conn xmit_atomic 0000000000000000 [ 507.562818][T19617] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.703673][T19617] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.815014][T19644] lo speed is unknown, defaulting to 1000 [ 508.022210][T19662] tipc: Enabled bearer , priority 0 [ 508.033701][T19662] syzkaller0: entered promiscuous mode [ 508.039453][T19662] syzkaller0: entered allmulticast mode [ 508.079778][T19662] tipc: Resetting bearer [ 508.116806][ T8285] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.245804][T19661] tipc: Resetting bearer [ 508.278091][T19668] netlink: 'syz.4.3635': attribute type 1 has an invalid length. [ 508.294318][T19668] __nla_validate_parse: 8 callbacks suppressed [ 508.294336][T19668] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3635'. [ 508.311012][T19661] tipc: Disabling bearer [ 508.319568][T19668] netlink: 'syz.4.3635': attribute type 2 has an invalid length. [ 508.334659][T19668] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3635'. [ 508.400127][ T6071] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.440523][ T8285] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.604239][T12762] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.877752][T19685] netlink: 'syz.1.3641': attribute type 16 has an invalid length. [ 508.892559][T19685] netlink: 'syz.1.3641': attribute type 17 has an invalid length. [ 509.069758][T19685] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.077633][T19685] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.245481][T19685] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 509.455789][T19685] bond0: left promiscuous mode [ 509.460687][T19685] bond_slave_0: left promiscuous mode [ 509.472470][T19685] bond_slave_1: left promiscuous mode [ 509.490905][T19685] batman_adv: batadv0: Interface deactivated: macvlan3 [ 509.513225][T19692] tc_dump_action: action bad kind [ 509.520230][T19702] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3647'. [ 509.545847][ T6071] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.573331][ T6071] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.610513][ T6071] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.625960][ T6071] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.687189][T19707] netlink: 'syz.3.3650': attribute type 2 has an invalid length. [ 509.740613][T19714] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3649'. [ 509.769804][T19709] workqueue: name exceeds WQ_NAME_LEN. Truncating to: žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»– [ 509.904190][T19728] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3656'. [ 509.923322][T19728] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3656'. [ 510.030181][T19733] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3659'. [ 510.059616][T19734] tipc: Enabled bearer , priority 0 [ 510.090661][T19734] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3658'. [ 510.111720][T19736] ip6tnl1: entered promiscuous mode [ 510.139321][T19734] tipc: Resetting bearer [ 510.276126][T19750] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3665'. [ 510.519991][T19763] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3670'. [ 510.707123][T19772] lo speed is unknown, defaulting to 1000 [ 510.861216][T19786] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 510.956206][T19767] mpoa:mpoad_close: () going down [ 511.134181][ T5939] tipc: Node number set to 1374547946 [ 511.388925][T19808] netlink: 'syz.1.3683': attribute type 4 has an invalid length. [ 511.809844][T19834] netlink: 'syz.2.3688': attribute type 4 has an invalid length. [ 511.847063][T19834] Ã: renamed from bond0 (while UP) [ 511.921808][T19840] netlink: 'syz.1.3691': attribute type 32 has an invalid length. [ 512.016715][T19843] batadv1: entered promiscuous mode [ 512.240634][T19856] batman_adv: batadv0: Adding interface: ip6gretap1 [ 512.281252][T19856] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 512.361800][T19856] batman_adv: batadv0: Interface activated: ip6gretap1 [ 512.392532][T19859] IPVS: Error connecting to the multicast addr [ 512.419979][T19863] mac80211_hwsim hwsim37 wlan0: entered promiscuous mode [ 512.535014][T19857] lo speed is unknown, defaulting to 1000 [ 512.559482][T19870] bridge0: entered promiscuous mode [ 512.849358][T19881] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 512.961134][T19886] netlink: 'syz.0.3705': attribute type 21 has an invalid length. [ 513.078298][T19886] netlink: 'syz.0.3705': attribute type 4 has an invalid length. [ 513.294675][T19905] pim6reg: entered allmulticast mode [ 513.382479][T19905] pim6reg: left allmulticast mode [ 513.806539][T19931] __nla_validate_parse: 19 callbacks suppressed [ 513.806558][T19931] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3713'. [ 514.083790][T19936] geneve2: entered promiscuous mode [ 514.112311][T19936] geneve2: entered allmulticast mode [ 514.451449][T19958] vlan2: entered promiscuous mode [ 514.457964][T19958] vlan2: entered allmulticast mode [ 514.463097][T19958] hsr_slave_1: entered allmulticast mode [ 514.556306][T19963] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3724'. [ 514.721164][T19961] lo speed is unknown, defaulting to 1000 [ 515.212819][T19981] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3730'. [ 515.233565][T19985] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3730'. [ 515.823311][T20003] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3735'. [ 515.966723][T20002] lo speed is unknown, defaulting to 1000 [ 516.189112][T20019] netlink: 'syz.0.3742': attribute type 2 has an invalid length. [ 516.221734][T20022] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3741'. [ 516.682988][T20041] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3746'. [ 516.733806][T20041] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3746'. [ 517.048808][T20057] sctp: [Deprecated]: syz.2.3750 (pid 20057) Use of int in max_burst socket option. [ 517.048808][T20057] Use struct sctp_assoc_value instead [ 517.283035][T20072] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3754'. [ 517.289892][T20005] openvswitch: netlink: VXLAN extension 274 out of range max 1 [ 517.303309][T20070] tipc: Enabled bearer , priority 0 [ 517.328922][T20069] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3756'. [ 517.458152][T20081] tipc: Resetting bearer [ 517.598326][T20067] tipc: Disabling bearer [ 518.240667][T12765] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.278118][T12765] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.309703][T12765] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.349494][ T6071] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.483086][T20126] lo speed is unknown, defaulting to 1000 [ 518.917162][T20157] __nla_validate_parse: 11 callbacks suppressed [ 518.917180][T20157] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3781'. [ 519.238750][T20172] netlink: 134788 bytes leftover after parsing attributes in process `syz.2.3784'. [ 519.719289][T20192] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 519.814826][T20194] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3792'. [ 519.830603][T20194] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3792'. [ 519.848573][T20194] bridge0: port 3(vlan2) entered blocking state [ 519.855778][T20194] bridge0: port 3(vlan2) entered disabled state [ 519.862589][T20194] vlan2: entered allmulticast mode [ 519.868597][T20194] bridge0: entered allmulticast mode [ 519.877751][T20194] vlan2: left allmulticast mode [ 519.882769][T20194] bridge0: left allmulticast mode [ 520.308837][T20224] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3803'. [ 520.449403][T20230] lo speed is unknown, defaulting to 1000 [ 520.559032][T20239] netlink: 'syz.3.3808': attribute type 1 has an invalid length. [ 520.583783][T20239] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3808'. [ 520.643327][T20245] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3809'. [ 520.902551][T20255] netlink: 'syz.4.3811': attribute type 1 has an invalid length. [ 520.930760][T20255] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3811'. [ 520.942432][T20255] 0·: renamed from hsr0 [ 520.965573][T20255] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 520.984195][T20255] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 521.009481][T20255] 0·: entered allmulticast mode [ 521.020001][T20255] hsr_slave_0: entered allmulticast mode [ 521.025955][T20255] hsr_slave_1: entered allmulticast mode [ 521.035215][T20255] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 521.322345][T20272] netlink: 248 bytes leftover after parsing attributes in process `syz.2.3817'. [ 521.408501][T20278] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3818'. [ 521.495613][T20288] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv_slave_1, syncid = 0, id = 0 [ 521.777815][T20301] syzkaller0: entered promiscuous mode [ 521.794087][T20301] syzkaller0: entered allmulticast mode [ 521.858211][T20305] can: request_module (can-proto-3) failed. [ 521.872505][T20311] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 522.025972][T20318] lo speed is unknown, defaulting to 1000 [ 522.318031][T20334] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 522.330379][T20334] openvswitch: netlink: Duplicate key (type 0). [ 522.709492][T20341] lo speed is unknown, defaulting to 1000 [ 522.751105][T20346] netlink: 'syz.2.3837': attribute type 1 has an invalid length. [ 522.811419][T20346] netlink: 'syz.2.3837': attribute type 1 has an invalid length. [ 522.820503][T20343] lo speed is unknown, defaulting to 1000 [ 522.924295][T12759] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 522.932346][T12759] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.980257][ T6071] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 522.994610][ T6071] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 523.131649][T20354] mac80211_hwsim hwsim33 wlan0: left promiscuous mode [ 523.152457][T20354] ip6tnl1: left promiscuous mode [ 523.541306][T20372] lo speed is unknown, defaulting to 1000 [ 523.612038][T20375] lo speed is unknown, defaulting to 1000 [ 524.123687][T20384] lo speed is unknown, defaulting to 1000 [ 524.686987][T20415] 8021q: adding VLAN 0 to HW filter on device bond0 [ 524.694276][T20419] __nla_validate_parse: 10 callbacks suppressed [ 524.694295][T20419] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3854'. [ 524.734609][T20415] bridge0: port 4(bond0) entered blocking state [ 524.761724][T20415] bridge0: port 4(bond0) entered disabled state [ 524.789229][T20415] bond0: entered allmulticast mode [ 524.798262][T20415] bond0: entered promiscuous mode [ 524.808678][T20415] bridge0: port 4(bond0) entered blocking state [ 524.809379][T20431] netlink: 'syz.1.3857': attribute type 17 has an invalid length. [ 524.816318][T20415] bridge0: port 4(bond0) entered forwarding state [ 524.831123][T20431] netlink: 'syz.1.3857': attribute type 27 has an invalid length. [ 524.843169][T20432] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3855'. [ 524.877926][T20430] tipc: Enabling of bearer rejected, failed to enable media [ 525.002066][T20431] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3857'. [ 525.027276][T20431] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 525.053107][T12759] bridge0: port 4(bond0) entered disabled state [ 525.068634][T20443] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3861'. [ 525.071359][T20439] lo speed is unknown, defaulting to 1000 [ 525.089079][T20441] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3860'. [ 525.435042][T20452] hsr0: entered promiscuous mode [ 525.447604][T20452] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3865'. [ 525.466415][T20452] hsr_slave_0: left promiscuous mode [ 525.486993][T20452] hsr_slave_1: left promiscuous mode [ 525.548898][T20452] hsr0 (unregistering): left promiscuous mode [ 525.618146][T20455] lo speed is unknown, defaulting to 1000 [ 525.658723][T20463] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3868'. [ 525.885673][T20473] netlink: 'syz.0.3872': attribute type 22 has an invalid length. [ 525.992720][T20482] nbd: couldn't find device at index 536870912 [ 526.022827][T20482] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3874'. [ 526.081918][T20486] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3876'. [ 526.092044][T20486] netlink: 'syz.0.3876': attribute type 19 has an invalid length. [ 526.191715][T20489] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3877'. [ 526.201701][T20489] netlink: 'syz.4.3877': attribute type 15 has an invalid length. [ 526.240573][T20491] netlink: 'syz.2.3879': attribute type 1 has an invalid length. [ 526.279607][T20486] netlink: 'syz.0.3876': attribute type 19 has an invalid length. [ 526.855943][T20523] lo speed is unknown, defaulting to 1000 [ 526.910266][T20528] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 526.917783][T20537] netlink: 'syz.1.3891': attribute type 15 has an invalid length. [ 526.928755][T20528] dvmrp1: linktype set to 805 [ 527.370420][T12759] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x4 [ 527.412905][T20563] veth1: entered promiscuous mode [ 527.454327][T20563] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 527.606836][T20567] syzkaller0: entered promiscuous mode [ 527.626615][T20567] syzkaller0: entered allmulticast mode [ 528.176538][T20589] validate_nla: 2 callbacks suppressed [ 528.176556][T20589] netlink: 'syz.1.3905': attribute type 8 has an invalid length. [ 528.278164][T20589] macsec0: entered allmulticast mode [ 528.289495][T20589] mac80211_hwsim hwsim37 wlan0: entered allmulticast mode [ 528.343694][T20589] mac80211_hwsim hwsim37 wlan0: left allmulticast mode [ 528.512913][T20597] batadv1: entered allmulticast mode [ 528.534545][T20597] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 528.857545][T20603] lo speed is unknown, defaulting to 1000 [ 529.739262][T20634] nbd1: detected capacity change from 0 to 127 [ 529.801767][ T5182] block nbd1: Receive control failed (result -32) [ 530.235315][T20665] netlink: 'syz.2.3929': attribute type 21 has an invalid length. [ 530.321308][T20661] lo speed is unknown, defaulting to 1000 [ 530.382025][T20658] lo speed is unknown, defaulting to 1000 [ 530.449551][T20675] netlink: 'syz.3.3933': attribute type 10 has an invalid length. [ 530.488606][T20675] batman_adv: batadv0: Adding interface: team0 [ 530.501584][T20675] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 530.527740][T20679] netlink: 'syz.3.3933': attribute type 10 has an invalid length. [ 530.536195][T20679] __nla_validate_parse: 11 callbacks suppressed [ 530.536210][T20679] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3933'. [ 530.552482][T20675] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 530.563534][T20680] netlink: 'syz.4.3934': attribute type 13 has an invalid length. [ 530.565203][T20679] team0: entered promiscuous mode [ 530.580660][T20679] 8021q: adding VLAN 0 to HW filter on device team0 [ 530.583697][T20680] netlink: 'syz.4.3934': attribute type 17 has an invalid length. [ 530.604602][T20679] batman_adv: batadv0: Interface activated: team0 [ 530.611257][T20679] batman_adv: batadv0: Interface deactivated: team0 [ 530.626945][T20679] batman_adv: batadv0: Removing interface: team0 [ 530.643554][T20679] bridge0: port 1(team0) entered blocking state [ 530.664923][T20679] bridge0: port 1(team0) entered disabled state [ 530.671575][T20679] team0: entered allmulticast mode [ 530.696369][T20687] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 530.760259][T20687] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 530.852196][T20691] netlink: 192 bytes leftover after parsing attributes in process `syz.3.3936'. [ 530.861974][T20691] netlink: zone id is out of range [ 530.867333][T20691] netlink: zone id is out of range [ 530.872599][T20691] netlink: zone id is out of range [ 530.876028][T20680] team0: left promiscuous mode [ 530.878295][T20691] netlink: zone id is out of range [ 530.882569][T20680] team_slave_0: left promiscuous mode [ 530.888595][T20691] netlink: zone id is out of range [ 530.888607][T20691] netlink: zone id is out of range [ 530.888616][T20691] netlink: zone id is out of range [ 530.900820][T20680] team_slave_1: left promiscuous mode [ 530.904719][T20691] netlink: zone id is out of range [ 530.904730][T20691] netlink: zone id is out of range [ 530.932246][T20680] 8021q: adding VLAN 0 to HW filter on device team0 [ 531.170505][T20684] lo speed is unknown, defaulting to 1000 [ 531.649652][T20728] tipc: Enabled bearer , priority 0 [ 531.674550][T20728] syzkaller0: entered promiscuous mode [ 531.688493][T20728] syzkaller0: entered allmulticast mode [ 531.807524][T20728] tipc: Resetting bearer [ 531.841858][T20724] tipc: Resetting bearer [ 531.970052][T20724] tipc: Disabling bearer [ 532.112998][T20753] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 532.190608][T20758] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3957'. [ 532.363649][T20767] netlink: 'syz.4.3960': attribute type 3 has an invalid length. [ 532.388879][T20774] IPVS: Error connecting to the multicast addr [ 532.415641][T20777] netlink: 'syz.0.3963': attribute type 1 has an invalid length. [ 532.443765][T20777] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3963'. [ 532.457379][T20778] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3961'. [ 532.505977][T20781] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.525062][T20767] syz_tun: entered allmulticast mode [ 532.531660][T20767] pimreg: left allmulticast mode [ 532.581850][T20772] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3961'. [ 532.582782][T20771] siw: device registration error -23 [ 532.601461][T20772] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3961'. [ 532.612566][T20772] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3961'. [ 532.622008][T20772] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3961'. [ 532.637096][T20778] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3961'. [ 532.678111][T20771] net_ratelimit: 30 callbacks suppressed [ 532.678118][T20771] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 532.703014][T20781] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.720709][T20790] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 532.748925][T20766] syz_tun: left allmulticast mode [ 532.769512][T20781] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.842046][T20781] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.983078][T20799] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 532.990375][T20799] IPv6: NLM_F_CREATE should be set when creating new route [ 532.997651][T20799] IPv6: NLM_F_CREATE should be set when creating new route [ 533.080540][T12765] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.127668][ T8285] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.171629][ T6071] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.306582][ T8285] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.365155][T20807] bond0: option lp_interval: invalid value (0) [ 533.371357][T20807] bond0: option lp_interval: allowed values 1 - 2147483647 [ 533.395030][T20808] syzkaller0: entered promiscuous mode [ 533.400590][T20808] syzkaller0: entered allmulticast mode [ 533.806756][T20827] netlink: 'syz.4.3977': attribute type 1 has an invalid length. [ 534.032636][T20836] bond5: (slave gretap1): making interface the new active one [ 534.043344][T20836] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 534.522932][T20875] lo speed is unknown, defaulting to 1000 [ 534.607506][T20881] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 534.651764][T20885] netlink: 'syz.1.3997': attribute type 1 has an invalid length. [ 534.886846][T20901] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 534.910756][T20901] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 534.935712][T20901] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 534.951131][T20901] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 535.115730][T20905] macvlan1: entered promiscuous mode [ 535.145744][T20905] ipvlan0: entered promiscuous mode [ 535.166986][T20905] ipvlan0: left promiscuous mode [ 535.218426][T20905] macvlan1: left promiscuous mode [ 535.288593][T20913] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 535.303759][T20913] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 535.317644][T20913] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 535.357579][T20928] netlink: 'syz.3.4008': attribute type 1 has an invalid length. [ 535.560048][T20935] bond1: (slave ip6gretap0): Enslaving as a backup interface with an up link [ 535.595891][T20937] 8021q: adding VLAN 0 to HW filter on device bond1 [ 535.603564][T12760] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 535.688538][T20928] veth3: entered promiscuous mode [ 535.745968][T12765] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 535.762354][T20935] team0: left allmulticast mode [ 535.791167][T20935] bridge0: port 1(team0) entered disabled state [ 535.885513][T20935] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 535.923015][T20935] batman_adv: batadv0: Removing interface: ip6gretap1 [ 535.944560][T20935] bond1: (slave ip6gretap0): Removing an active aggregator [ 535.961963][T20935] bond1: (slave ip6gretap0): Releasing backup interface [ 536.100791][T20921] lo speed is unknown, defaulting to 1000 [ 536.131212][T20941] lo speed is unknown, defaulting to 1000 [ 536.161307][T20957] __nla_validate_parse: 6 callbacks suppressed [ 536.161325][T20957] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4015'. [ 536.488270][T20972] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4019'. [ 536.512776][T20974] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4020'. [ 536.594323][T20974] IPv6: NLM_F_CREATE should be specified when creating new route [ 537.022923][T20998] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4028'. [ 537.066713][T21003] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4026'. [ 537.076251][T21003] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4026'. [ 537.086067][T21003] netlink: 'syz.3.4026': attribute type 18 has an invalid length. [ 537.388912][T21025] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4032'. [ 537.465093][T21027] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4032'. [ 537.868716][T21043] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4037'. [ 537.949202][T21052] netlink: 'syz.1.4041': attribute type 1 has an invalid length. [ 538.007692][T21054] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4040'. [ 538.322468][T21053] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 538.439072][T21079] netlink: 'syz.0.4048': attribute type 12 has an invalid length. [ 538.461368][T21079] netlink: 'syz.0.4048': attribute type 11 has an invalid length. [ 538.620894][T21084] policy can only be matched on NF_INET_PRE_ROUTING [ 538.620914][T21084] unable to load match [ 539.173895][T21110] syzkaller0: entered promiscuous mode [ 539.180043][T21110] syzkaller0: entered allmulticast mode [ 539.205015][T21119] netlink: 'syz.0.4061': attribute type 1 has an invalid length. [ 539.216700][T21119] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 539.324846][T21128] netlink: 'syz.1.4063': attribute type 142 has an invalid length. [ 539.360286][T21127] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 539.360440][ T8137] IPVS: starting estimator thread 0... [ 539.477397][T21130] IPVS: using max 32 ests per chain, 76800 per kthread [ 539.793532][T21142] netlink: 'syz.1.4068': attribute type 27 has an invalid length. [ 540.333263][T21158] netlink: 'syz.0.4074': attribute type 7 has an invalid length. [ 540.425056][T21160] netlink: 'syz.0.4074': attribute type 2 has an invalid length. [ 542.257448][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880562cd400: rx timeout, send abort [ 542.265976][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807be83c00: rx timeout, send abort [ 542.275461][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880562cd400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 542.289846][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807be83c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 542.741884][T21138] lo speed is unknown, defaulting to 1000 [ 542.759221][T21158] : entered promiscuous mode [ 542.764589][T21163] __nla_validate_parse: 5 callbacks suppressed [ 542.764604][T21163] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4074'. [ 543.135356][T21181] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4079'. [ 543.171656][T21181] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4079'. [ 543.180794][T21181] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4079'. [ 543.259544][T21189] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4080'. [ 543.382561][ T8285] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 543.407895][ T8285] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 543.567885][ T8285] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 543.614862][T21200] x_tables: ip_tables: udp match: only valid for protocol 17 [ 543.648608][T21199] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4083'. [ 543.671380][ T8285] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 543.687381][T21203] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4084'. [ 544.135246][T21211] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4085'. [ 544.342707][T21225] lo speed is unknown, defaulting to 1000 [ 544.609950][T21239] netlink: 244 bytes leftover after parsing attributes in process `syz.3.4095'. [ 544.626897][T21237] netlink: 'syz.2.4093': attribute type 1 has an invalid length. [ 544.674276][T21237] netlink: 'syz.2.4093': attribute type 4 has an invalid length. [ 544.832949][T21244] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4097'. [ 544.850326][T21244] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 544.955645][T21244] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 545.471042][T21277] veth0_to_team: entered promiscuous mode [ 545.685418][T21282] netlink: 'syz.3.4109': attribute type 1 has an invalid length. [ 545.805443][T21282] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 545.915286][T21293] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 545.964757][T21293] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 546.742933][T21321] netlink: 'syz.3.4119': attribute type 21 has an invalid length. [ 546.774749][T21321] netlink: 'syz.3.4119': attribute type 5 has an invalid length. [ 547.298685][T21333] netlink: 'syz.4.4123': attribute type 12 has an invalid length. [ 547.348466][T21335] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 547.626355][T21345] netlink: 'syz.3.4127': attribute type 1 has an invalid length. [ 547.780395][T21351] bond2: (slave gretap1): making interface the new active one [ 547.802946][T21351] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 547.937154][T21355] __nla_validate_parse: 9 callbacks suppressed [ 547.937172][T21355] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4131'. [ 547.967298][T21359] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4132'. [ 548.033858][T21359] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4132'. [ 548.436048][T21373] lo speed is unknown, defaulting to 1000 [ 548.514747][T21377] lo speed is unknown, defaulting to 1000 [ 548.732108][T21387] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 549.349578][T21398] syzkaller1: entered promiscuous mode [ 549.355398][T21398] syzkaller1: entered allmulticast mode [ 549.802735][T21433] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 549.837122][T21429] netlink: 'syz.4.4152': attribute type 3 has an invalid length. [ 549.848452][T21429] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4152'. [ 549.922850][T21440] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4157'. [ 550.230250][T21449] netlink: 'syz.4.4160': attribute type 1 has an invalid length. [ 550.243163][T21449] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4160'. [ 550.475103][T21440] à (unregistering): (slave bond_slave_0): Releasing backup interface [ 550.496499][T21454] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4162'. [ 550.512410][T21440] à (unregistering): (slave bond_slave_1): Releasing backup interface [ 550.524824][T21440] à (unregistering): Released all slaves [ 550.561591][T21456] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4163'. [ 550.805471][T21462] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4165'. [ 550.834539][T21460] lo speed is unknown, defaulting to 1000 [ 551.031331][T21477] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4170'. [ 551.084237][T21477] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 551.904106][T21502] veth5: entered promiscuous mode [ 552.569511][T21532] can: request_module (can-proto-5) failed. [ 552.959571][T21542] __nla_validate_parse: 2 callbacks suppressed [ 552.959590][T21542] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4187'. [ 553.487789][T21561] netlink: 'syz.4.4193': attribute type 1 has an invalid length. [ 553.518077][T21561] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4193'. [ 553.522580][T21566] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4195'. [ 553.528707][T21560] lo speed is unknown, defaulting to 1000 [ 553.703705][T21571] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4196'. [ 554.162211][T21586] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4199'. [ 554.335052][T21590] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4201'. [ 554.447576][T21594] netlink: 'syz.1.4205': attribute type 11 has an invalid length. [ 554.777052][T21617] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4210'. [ 554.803789][T21616] netlink: 'syz.2.4209': attribute type 4 has an invalid length. [ 554.807559][T21618] FAULT_INJECTION: forcing a failure. [ 554.807559][T21618] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 554.849971][T21614] lo speed is unknown, defaulting to 1000 [ 554.876620][T21618] CPU: 0 UID: 0 PID: 21618 Comm: syz.0.4208 Not tainted 6.16.0-syzkaller-12108-gfdbe93b7f0f8 #0 PREEMPT(full) [ 554.876649][T21618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 554.876660][T21618] Call Trace: [ 554.876667][T21618] [ 554.876675][T21618] dump_stack_lvl+0x189/0x250 [ 554.876700][T21618] ? __pfx____ratelimit+0x10/0x10 [ 554.876723][T21618] ? __pfx_dump_stack_lvl+0x10/0x10 [ 554.876744][T21618] ? __pfx__printk+0x10/0x10 [ 554.876768][T21618] ? __might_fault+0xb0/0x130 [ 554.876803][T21618] should_fail_ex+0x414/0x560 [ 554.876828][T21618] _copy_from_iter+0x1db/0x16f0 [ 554.876857][T21618] ? rcu_is_watching+0x15/0xb0 [ 554.876877][T21618] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 554.876902][T21618] ? __pfx__copy_from_iter+0x10/0x10 [ 554.876928][T21618] ? __build_skb_around+0x257/0x3e0 [ 554.876963][T21618] ? netlink_sendmsg+0x642/0xb30 [ 554.876983][T21618] ? skb_put+0x11b/0x210 [ 554.877009][T21618] netlink_sendmsg+0x6b2/0xb30 [ 554.877040][T21618] ? __pfx_netlink_sendmsg+0x10/0x10 [ 554.877066][T21618] ? aa_sock_msg_perm+0xf1/0x1d0 [ 554.877092][T21618] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 554.877112][T21618] ? __pfx_netlink_sendmsg+0x10/0x10 [ 554.877135][T21618] __sock_sendmsg+0x219/0x270 [ 554.877160][T21618] ____sys_sendmsg+0x505/0x830 [ 554.877191][T21618] ? __pfx_____sys_sendmsg+0x10/0x10 [ 554.877226][T21618] ? import_iovec+0x74/0xa0 [ 554.877247][T21618] ___sys_sendmsg+0x21f/0x2a0 [ 554.877275][T21618] ? __pfx____sys_sendmsg+0x10/0x10 [ 554.877338][T21618] ? __fget_files+0x2a/0x420 [ 554.877362][T21618] ? __fget_files+0x3a0/0x420 [ 554.877398][T21618] __x64_sys_sendmsg+0x19b/0x260 [ 554.877426][T21618] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 554.877462][T21618] ? __pfx_ksys_write+0x10/0x10 [ 554.877483][T21618] ? rcu_is_watching+0x15/0xb0 [ 554.877505][T21618] ? do_syscall_64+0xbe/0x3b0 [ 554.877532][T21618] do_syscall_64+0xfa/0x3b0 [ 554.877553][T21618] ? lockdep_hardirqs_on+0x9c/0x150 [ 554.877574][T21618] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.877593][T21618] ? clear_bhb_loop+0x60/0xb0 [ 554.877615][T21618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.877634][T21618] RIP: 0033:0x7f768c38ebe9 [ 554.877652][T21618] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 554.877668][T21618] RSP: 002b:00007f768d167038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 554.877688][T21618] RAX: ffffffffffffffda RBX: 00007f768c5b6180 RCX: 00007f768c38ebe9 [ 554.877702][T21618] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000005 [ 554.877713][T21618] RBP: 00007f768d167090 R08: 0000000000000000 R09: 0000000000000000 [ 554.877723][T21618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 554.877734][T21618] R13: 00007f768c5b6218 R14: 00007f768c5b6180 R15: 00007ffd9be54578 [ 554.877764][T21618] [ 555.576669][T21637] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4217'. [ 555.608817][T21637] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4217'. [ 555.668762][T21645] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4217'. [ 556.196473][T21673] netlink: 'syz.1.4224': attribute type 303 has an invalid length. [ 556.282810][T21671] FAULT_INJECTION: forcing a failure. [ 556.282810][T21671] name failslab, interval 1, probability 0, space 0, times 0 [ 556.336434][T21671] CPU: 1 UID: 0 PID: 21671 Comm: syz.3.4228 Not tainted 6.16.0-syzkaller-12108-gfdbe93b7f0f8 #0 PREEMPT(full) [ 556.336461][T21671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 556.336472][T21671] Call Trace: [ 556.336480][T21671] [ 556.336488][T21671] dump_stack_lvl+0x189/0x250 [ 556.336515][T21671] ? __pfx____ratelimit+0x10/0x10 [ 556.336538][T21671] ? __pfx_dump_stack_lvl+0x10/0x10 [ 556.336559][T21671] ? __pfx__printk+0x10/0x10 [ 556.336585][T21671] ? __pfx___might_resched+0x10/0x10 [ 556.336616][T21671] ? fs_reclaim_acquire+0x7d/0x100 [ 556.336648][T21671] should_fail_ex+0x414/0x560 [ 556.336675][T21671] should_failslab+0xa8/0x100 [ 556.336714][T21671] __kmalloc_noprof+0xcb/0x4f0 [ 556.336747][T21671] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 556.336773][T21671] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 556.336801][T21671] genl_start+0x180/0x6c0 [ 556.336817][T21671] ? netlink_lookup+0x30/0x200 [ 556.336853][T21671] __netlink_dump_start+0x466/0x7e0 [ 556.336885][T21671] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 556.336908][T21671] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 556.336935][T21671] ? __pfx_genl_start+0x10/0x10 [ 556.336950][T21671] ? __pfx_genl_dumpit+0x10/0x10 [ 556.336965][T21671] ? __pfx_genl_done+0x10/0x10 [ 556.336986][T21671] ? bpf_lsm_capable+0x9/0x20 [ 556.337009][T21671] ? security_capable+0x7e/0x2e0 [ 556.337039][T21671] genl_rcv_msg+0x5da/0x790 [ 556.337064][T21671] ? __pfx_genl_rcv_msg+0x10/0x10 [ 556.337081][T21671] ? __pfx_devlink_nl_health_reporter_dump_get_dumpit+0x10/0x10 [ 556.337127][T21671] netlink_rcv_skb+0x208/0x470 [ 556.337148][T21671] ? __lock_acquire+0xab9/0xd20 [ 556.337173][T21671] ? __pfx_genl_rcv_msg+0x10/0x10 [ 556.337193][T21671] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 556.337237][T21671] ? down_read+0x1ad/0x2e0 [ 556.337264][T21671] genl_rcv+0x28/0x40 [ 556.337288][T21671] netlink_unicast+0x82f/0x9e0 [ 556.337319][T21671] ? __pfx_netlink_unicast+0x10/0x10 [ 556.337343][T21671] ? netlink_sendmsg+0x642/0xb30 [ 556.337363][T21671] ? skb_put+0x11b/0x210 [ 556.337392][T21671] netlink_sendmsg+0x805/0xb30 [ 556.337425][T21671] ? __pfx_netlink_sendmsg+0x10/0x10 [ 556.337452][T21671] ? aa_sock_msg_perm+0xf1/0x1d0 [ 556.337484][T21671] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 556.337503][T21671] ? __pfx_netlink_sendmsg+0x10/0x10 [ 556.337527][T21671] __sock_sendmsg+0x219/0x270 [ 556.337552][T21671] ____sys_sendmsg+0x505/0x830 [ 556.337584][T21671] ? __pfx_____sys_sendmsg+0x10/0x10 [ 556.337619][T21671] ? import_iovec+0x74/0xa0 [ 556.337642][T21671] ___sys_sendmsg+0x21f/0x2a0 [ 556.337670][T21671] ? __pfx____sys_sendmsg+0x10/0x10 [ 556.337738][T21671] ? __fget_files+0x2a/0x420 [ 556.337762][T21671] ? __fget_files+0x3a0/0x420 [ 556.337800][T21671] __x64_sys_sendmsg+0x19b/0x260 [ 556.337834][T21671] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 556.337872][T21671] ? __pfx_ksys_write+0x10/0x10 [ 556.337892][T21671] ? rcu_is_watching+0x15/0xb0 [ 556.337917][T21671] ? do_syscall_64+0xbe/0x3b0 [ 556.337944][T21671] do_syscall_64+0xfa/0x3b0 [ 556.337965][T21671] ? lockdep_hardirqs_on+0x9c/0x150 [ 556.337986][T21671] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.338005][T21671] ? clear_bhb_loop+0x60/0xb0 [ 556.338028][T21671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.338047][T21671] RIP: 0033:0x7efe2a78ebe9 [ 556.338064][T21671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 556.338080][T21671] RSP: 002b:00007efe2b64e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 556.338100][T21671] RAX: ffffffffffffffda RBX: 00007efe2a9b5fa0 RCX: 00007efe2a78ebe9 [ 556.338114][T21671] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 556.338125][T21671] RBP: 00007efe2b64e090 R08: 0000000000000000 R09: 0000000000000000 [ 556.338136][T21671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 556.338147][T21671] R13: 00007efe2a9b6038 R14: 00007efe2a9b5fa0 R15: 00007fff0f341498 [ 556.338180][T21671] [ 556.908756][T21675] lo speed is unknown, defaulting to 1000 [ 558.275584][T21748] FAULT_INJECTION: forcing a failure. [ 558.275584][T21748] name failslab, interval 1, probability 0, space 0, times 0 [ 558.309526][T21758] 8021q: adding VLAN 0 to HW filter on device bond6 [ 558.318271][T21748] CPU: 0 UID: 0 PID: 21748 Comm: syz.3.4251 Not tainted 6.16.0-syzkaller-12108-gfdbe93b7f0f8 #0 PREEMPT(full) [ 558.318298][T21748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 558.318308][T21748] Call Trace: [ 558.318316][T21748] [ 558.318325][T21748] dump_stack_lvl+0x189/0x250 [ 558.318356][T21748] ? __pfx____ratelimit+0x10/0x10 [ 558.318378][T21748] ? __pfx_dump_stack_lvl+0x10/0x10 [ 558.318400][T21748] ? __pfx__printk+0x10/0x10 [ 558.318432][T21748] ? __pfx___might_resched+0x10/0x10 [ 558.318449][T21748] ? fs_reclaim_acquire+0x7d/0x100 [ 558.318481][T21748] should_fail_ex+0x414/0x560 [ 558.318507][T21748] should_failslab+0xa8/0x100 [ 558.318534][T21748] __kmalloc_cache_noprof+0x70/0x3d0 [ 558.318558][T21748] ? genl_start+0x1c9/0x6c0 [ 558.318582][T21748] genl_start+0x1c9/0x6c0 [ 558.318598][T21748] ? netlink_lookup+0x30/0x200 [ 558.318633][T21748] __netlink_dump_start+0x466/0x7e0 [ 558.318665][T21748] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 558.318689][T21748] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 558.318717][T21748] ? __pfx_genl_start+0x10/0x10 [ 558.318731][T21748] ? __pfx_genl_dumpit+0x10/0x10 [ 558.318747][T21748] ? __pfx_genl_done+0x10/0x10 [ 558.318769][T21748] ? bpf_lsm_capable+0x9/0x20 [ 558.318791][T21748] ? security_capable+0x7e/0x2e0 [ 558.318822][T21748] genl_rcv_msg+0x5da/0x790 [ 558.318847][T21748] ? __pfx_genl_rcv_msg+0x10/0x10 [ 558.318865][T21748] ? __pfx_devlink_nl_health_reporter_dump_get_dumpit+0x10/0x10 [ 558.318912][T21748] netlink_rcv_skb+0x208/0x470 [ 558.318933][T21748] ? __lock_acquire+0xab9/0xd20 [ 558.318958][T21748] ? __pfx_genl_rcv_msg+0x10/0x10 [ 558.318978][T21748] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 558.319022][T21748] ? down_read+0x1ad/0x2e0 [ 558.319049][T21748] genl_rcv+0x28/0x40 [ 558.319072][T21748] netlink_unicast+0x82f/0x9e0 [ 558.319103][T21748] ? __pfx_netlink_unicast+0x10/0x10 [ 558.319126][T21748] ? netlink_sendmsg+0x642/0xb30 [ 558.319147][T21748] ? skb_put+0x11b/0x210 [ 558.319174][T21748] netlink_sendmsg+0x805/0xb30 [ 558.319208][T21748] ? __pfx_netlink_sendmsg+0x10/0x10 [ 558.319234][T21748] ? aa_sock_msg_perm+0xf1/0x1d0 [ 558.319261][T21748] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 558.319280][T21748] ? __pfx_netlink_sendmsg+0x10/0x10 [ 558.319305][T21748] __sock_sendmsg+0x219/0x270 [ 558.319329][T21748] ____sys_sendmsg+0x505/0x830 [ 558.319360][T21748] ? __pfx_____sys_sendmsg+0x10/0x10 [ 558.319397][T21748] ? import_iovec+0x74/0xa0 [ 558.319419][T21748] ___sys_sendmsg+0x21f/0x2a0 [ 558.319448][T21748] ? __pfx____sys_sendmsg+0x10/0x10 [ 558.319515][T21748] ? __fget_files+0x2a/0x420 [ 558.319540][T21748] ? __fget_files+0x3a0/0x420 [ 558.319577][T21748] __x64_sys_sendmsg+0x19b/0x260 [ 558.319606][T21748] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 558.319649][T21748] ? __pfx_ksys_write+0x10/0x10 [ 558.319669][T21748] ? rcu_is_watching+0x15/0xb0 [ 558.319694][T21748] ? do_syscall_64+0xbe/0x3b0 [ 558.319721][T21748] do_syscall_64+0xfa/0x3b0 [ 558.319741][T21748] ? lockdep_hardirqs_on+0x9c/0x150 [ 558.319763][T21748] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.319782][T21748] ? clear_bhb_loop+0x60/0xb0 [ 558.319805][T21748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.319823][T21748] RIP: 0033:0x7efe2a78ebe9 [ 558.319840][T21748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 558.319856][T21748] RSP: 002b:00007efe2b64e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 558.319876][T21748] RAX: ffffffffffffffda RBX: 00007efe2a9b5fa0 RCX: 00007efe2a78ebe9 [ 558.319889][T21748] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 558.319901][T21748] RBP: 00007efe2b64e090 R08: 0000000000000000 R09: 0000000000000000 [ 558.319912][T21748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 558.319922][T21748] R13: 00007efe2a9b6038 R14: 00007efe2a9b5fa0 R15: 00007fff0f341498 [ 558.319953][T21748] [ 558.340333][T21761] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 558.728394][T21761] bond6: (slave macvlan2): Enslaving as a backup interface with a down link [ 558.770299][T21777] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 558.779988][T21771] IPVS: stopping backup sync thread 21777 ... [ 558.797508][T21754] lo speed is unknown, defaulting to 1000 [ 559.242607][T21795] __nla_validate_parse: 5 callbacks suppressed [ 559.242624][T21795] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4264'. [ 559.347309][T21808] sock: sock_timestamping_bind_phc: sock not bind to device [ 559.361485][T21796] lo speed is unknown, defaulting to 1000 [ 559.519420][T21818] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4269'. [ 559.529558][T21818] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4269'. [ 559.544366][T21818] netlink: 43 bytes leftover after parsing attributes in process `syz.4.4269'. [ 559.574762][T21818] netlink: 'syz.4.4269': attribute type 6 has an invalid length. [ 559.586992][T21818] netlink: 'syz.4.4269': attribute type 5 has an invalid length. [ 559.595079][T21818] netlink: 43 bytes leftover after parsing attributes in process `syz.4.4269'. [ 559.786237][T21819] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 560.010569][T21834] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4275'. [ 560.051925][T21840] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 560.136697][T21834] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 560.502062][T21854] netlink: 'syz.0.4284': attribute type 39 has an invalid length. [ 560.635309][T21865] !: renamed from dummy0 (while UP) [ 561.130568][T21885] lo speed is unknown, defaulting to 1000 [ 561.227019][T21891] netlink: 'syz.3.4293': attribute type 3 has an invalid length. [ 561.612469][T21905] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4299'. [ 561.945953][T21905] geneve2: entered promiscuous mode [ 561.951198][T21905] geneve2: entered allmulticast mode [ 561.970402][ T8285] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.005191][ T8285] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.105363][ T8285] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.133215][ T8285] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.272667][T21933] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4306'. [ 562.310588][T21936] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4308'. [ 562.329273][T21936] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 562.435339][T21948] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4310'. [ 562.441208][T21938] lo speed is unknown, defaulting to 1000 [ 562.496876][T21953] netlink: 'syz.3.4312': attribute type 5 has an invalid length. [ 562.544974][T21952] syzkaller1: entered promiscuous mode [ 562.550513][T21952] syzkaller1: entered allmulticast mode [ 563.290156][T21992] netlink: 'syz.2.4323': attribute type 1 has an invalid length. [ 563.519300][T22011] netlink: 'syz.4.4330': attribute type 3 has an invalid length. [ 563.533210][T22011] netlink: 'syz.4.4330': attribute type 3 has an invalid length. [ 563.649946][T22015] 8021q: adding VLAN 0 to HW filter on device bond3 [ 563.808314][T22025] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 564.336267][T22049] tipc: Can't bind to reserved service type 0 [ 564.430143][T22058] __nla_validate_parse: 5 callbacks suppressed [ 564.430160][T22058] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4344'. [ 564.451781][T22058] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 564.588084][T22058] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 564.700573][T22079] sysfs: cannot create duplicate filename '/class/ieee80211/žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»–_à›xDä±pj8¼•TTí!' [ 564.713212][T22079] CPU: 1 UID: 0 PID: 22079 Comm: syz.1.4349 Not tainted 6.16.0-syzkaller-12108-gfdbe93b7f0f8 #0 PREEMPT(full) [ 564.713261][T22079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 564.713285][T22079] Call Trace: [ 564.713300][T22079] [ 564.713317][T22079] dump_stack_lvl+0x189/0x250 [ 564.713375][T22079] ? __pfx_dump_stack_lvl+0x10/0x10 [ 564.713423][T22079] ? __pfx__printk+0x10/0x10 [ 564.713454][T22079] ? kernfs_path_from_node+0x2f/0x290 [ 564.713474][T22079] ? kernfs_path_from_node+0x250/0x290 [ 564.713492][T22079] ? kernfs_path_from_node+0x2f/0x290 [ 564.713517][T22079] sysfs_warn_dup+0x8e/0xa0 [ 564.713537][T22079] sysfs_do_create_link_sd+0xc0/0x110 [ 564.713560][T22079] device_add_class_symlinks+0x1cf/0x240 [ 564.713590][T22079] device_add+0x475/0xb50 [ 564.713620][T22079] wiphy_register+0x1ba6/0x28d0 [ 564.713663][T22079] ? __pfx_wiphy_register+0x10/0x10 [ 564.713683][T22079] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 564.713725][T22079] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 564.713758][T22079] ieee80211_register_hw+0x3425/0x4080 [ 564.713804][T22079] ? ieee80211_register_hw+0x14e1/0x4080 [ 564.713848][T22079] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 564.713880][T22079] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 564.713910][T22079] ? __hrtimer_setup+0x187/0x210 [ 564.713930][T22079] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 564.713956][T22079] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 564.714007][T22079] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 564.714026][T22079] ? trace_kmalloc+0x1f/0xd0 [ 564.714046][T22079] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 564.714070][T22079] ? kstrndup+0xbf/0x160 [ 564.714101][T22079] hwsim_new_radio_nl+0xea4/0x1b10 [ 564.714124][T22079] ? __pfx___nla_validate_parse+0x10/0x10 [ 564.714164][T22079] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 564.714199][T22079] ? __nla_parse+0x40/0x60 [ 564.714224][T22079] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 564.714254][T22079] genl_family_rcv_msg_doit+0x212/0x300 [ 564.714280][T22079] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 564.714314][T22079] ? bpf_lsm_capable+0x9/0x20 [ 564.714336][T22079] ? security_capable+0x7e/0x2e0 [ 564.714366][T22079] genl_rcv_msg+0x60e/0x790 [ 564.714392][T22079] ? __pfx_genl_rcv_msg+0x10/0x10 [ 564.714409][T22079] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 564.714445][T22079] netlink_rcv_skb+0x208/0x470 [ 564.714465][T22079] ? __lock_acquire+0xab9/0xd20 [ 564.714490][T22079] ? __pfx_genl_rcv_msg+0x10/0x10 [ 564.714511][T22079] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 564.714552][T22079] ? down_read+0x1ad/0x2e0 [ 564.714578][T22079] genl_rcv+0x28/0x40 [ 564.714601][T22079] netlink_unicast+0x82f/0x9e0 [ 564.714633][T22079] ? __pfx_netlink_unicast+0x10/0x10 [ 564.714656][T22079] ? netlink_sendmsg+0x642/0xb30 [ 564.714677][T22079] ? skb_put+0x11b/0x210 [ 564.714705][T22079] netlink_sendmsg+0x805/0xb30 [ 564.714745][T22079] ? __pfx_netlink_sendmsg+0x10/0x10 [ 564.714771][T22079] ? aa_sock_msg_perm+0xf1/0x1d0 [ 564.714796][T22079] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 564.714813][T22079] ? __pfx_netlink_sendmsg+0x10/0x10 [ 564.714836][T22079] __sock_sendmsg+0x219/0x270 [ 564.714860][T22079] ____sys_sendmsg+0x505/0x830 [ 564.714891][T22079] ? __pfx_____sys_sendmsg+0x10/0x10 [ 564.714927][T22079] ? import_iovec+0x74/0xa0 [ 564.714949][T22079] ___sys_sendmsg+0x21f/0x2a0 [ 564.714977][T22079] ? __pfx____sys_sendmsg+0x10/0x10 [ 564.715045][T22079] ? __fget_files+0x2a/0x420 [ 564.715069][T22079] ? __fget_files+0x3a0/0x420 [ 564.715105][T22079] __x64_sys_sendmsg+0x19b/0x260 [ 564.715134][T22079] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 564.715172][T22079] ? rcu_is_watching+0x15/0xb0 [ 564.715198][T22079] ? do_syscall_64+0xbe/0x3b0 [ 564.715225][T22079] do_syscall_64+0xfa/0x3b0 [ 564.715246][T22079] ? lockdep_hardirqs_on+0x9c/0x150 [ 564.715267][T22079] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.715286][T22079] ? clear_bhb_loop+0x60/0xb0 [ 564.715309][T22079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.715327][T22079] RIP: 0033:0x7eff4e18ebe9 [ 564.715344][T22079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 564.715360][T22079] RSP: 002b:00007eff4ef1a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 564.715380][T22079] RAX: ffffffffffffffda RBX: 00007eff4e3b5fa0 RCX: 00007eff4e18ebe9 [ 564.715393][T22079] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000005 [ 564.715405][T22079] RBP: 00007eff4e211e19 R08: 0000000000000000 R09: 0000000000000000 [ 564.715416][T22079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 564.715427][T22079] R13: 00007eff4e3b6038 R14: 00007eff4e3b5fa0 R15: 00007ffce31c6868 [ 564.715468][T22079] [ 565.377649][T22091] netlink: 'syz.0.4352': attribute type 11 has an invalid length. [ 565.389820][T22091] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4352'. [ 565.431841][T22092] FAULT_INJECTION: forcing a failure. [ 565.431841][T22092] name failslab, interval 1, probability 0, space 0, times 0 [ 565.445850][T22092] CPU: 1 UID: 0 PID: 22092 Comm: syz.2.4350 Not tainted 6.16.0-syzkaller-12108-gfdbe93b7f0f8 #0 PREEMPT(full) [ 565.445876][T22092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 565.445887][T22092] Call Trace: [ 565.445894][T22092] [ 565.445903][T22092] dump_stack_lvl+0x189/0x250 [ 565.445942][T22092] ? __pfx____ratelimit+0x10/0x10 [ 565.445966][T22092] ? __pfx_dump_stack_lvl+0x10/0x10 [ 565.445987][T22092] ? __pfx__printk+0x10/0x10 [ 565.446018][T22092] ? __pfx___might_resched+0x10/0x10 [ 565.446043][T22092] should_fail_ex+0x414/0x560 [ 565.446069][T22092] should_failslab+0xa8/0x100 [ 565.446096][T22092] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 565.446121][T22092] ? __alloc_skb+0x112/0x2d0 [ 565.446150][T22092] __alloc_skb+0x112/0x2d0 [ 565.446179][T22092] netlink_dump+0x1b7/0xe90 [ 565.446216][T22092] ? __pfx_netlink_dump+0x10/0x10 [ 565.446235][T22092] ? genl_start+0x1c9/0x6c0 [ 565.446271][T22092] ? genl_start+0x499/0x6c0 [ 565.446297][T22092] __netlink_dump_start+0x5cb/0x7e0 [ 565.446329][T22092] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 565.446352][T22092] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 565.446380][T22092] ? __pfx_genl_start+0x10/0x10 [ 565.446395][T22092] ? __pfx_genl_dumpit+0x10/0x10 [ 565.446410][T22092] ? __pfx_genl_done+0x10/0x10 [ 565.446432][T22092] ? bpf_lsm_capable+0x9/0x20 [ 565.446454][T22092] ? security_capable+0x7e/0x2e0 [ 565.446484][T22092] genl_rcv_msg+0x5da/0x790 [ 565.446513][T22092] ? __pfx_genl_rcv_msg+0x10/0x10 [ 565.446530][T22092] ? __pfx_devlink_nl_health_reporter_dump_get_dumpit+0x10/0x10 [ 565.446562][T22092] ? __asan_memcpy+0x40/0x70 [ 565.446582][T22092] ? __pfx_ref_tracker_free+0x10/0x10 [ 565.446613][T22092] netlink_rcv_skb+0x208/0x470 [ 565.446632][T22092] ? __lock_acquire+0xab9/0xd20 [ 565.446657][T22092] ? __pfx_genl_rcv_msg+0x10/0x10 [ 565.446676][T22092] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 565.446718][T22092] ? down_read+0x1ad/0x2e0 [ 565.446744][T22092] genl_rcv+0x28/0x40 [ 565.446768][T22092] netlink_unicast+0x82f/0x9e0 [ 565.446799][T22092] ? __pfx_netlink_unicast+0x10/0x10 [ 565.446823][T22092] ? netlink_sendmsg+0x642/0xb30 [ 565.446843][T22092] ? skb_put+0x11b/0x210 [ 565.446871][T22092] netlink_sendmsg+0x805/0xb30 [ 565.446910][T22092] ? __pfx_netlink_sendmsg+0x10/0x10 [ 565.446953][T22092] ? aa_sock_msg_perm+0xf1/0x1d0 [ 565.446979][T22092] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 565.446999][T22092] ? __pfx_netlink_sendmsg+0x10/0x10 [ 565.447035][T22092] __sock_sendmsg+0x219/0x270 [ 565.447058][T22092] ____sys_sendmsg+0x505/0x830 [ 565.447089][T22092] ? __pfx_____sys_sendmsg+0x10/0x10 [ 565.447126][T22092] ? import_iovec+0x74/0xa0 [ 565.447150][T22092] ___sys_sendmsg+0x21f/0x2a0 [ 565.447178][T22092] ? __pfx____sys_sendmsg+0x10/0x10 [ 565.447246][T22092] ? __fget_files+0x2a/0x420 [ 565.447270][T22092] ? __fget_files+0x3a0/0x420 [ 565.447307][T22092] __x64_sys_sendmsg+0x19b/0x260 [ 565.447336][T22092] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 565.447373][T22092] ? __pfx_ksys_write+0x10/0x10 [ 565.447393][T22092] ? rcu_is_watching+0x15/0xb0 [ 565.447418][T22092] ? do_syscall_64+0xbe/0x3b0 [ 565.447446][T22092] do_syscall_64+0xfa/0x3b0 [ 565.447466][T22092] ? lockdep_hardirqs_on+0x9c/0x150 [ 565.447487][T22092] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.447506][T22092] ? clear_bhb_loop+0x60/0xb0 [ 565.447529][T22092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.447547][T22092] RIP: 0033:0x7fe2d2d8ebe9 [ 565.447564][T22092] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 565.447580][T22092] RSP: 002b:00007fe2d3bb4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 565.447600][T22092] RAX: ffffffffffffffda RBX: 00007fe2d2fb6180 RCX: 00007fe2d2d8ebe9 [ 565.447613][T22092] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000005 [ 565.447625][T22092] RBP: 00007fe2d3bb4090 R08: 0000000000000000 R09: 0000000000000000 [ 565.447636][T22092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 565.447647][T22092] R13: 00007fe2d2fb6218 R14: 00007fe2d2fb6180 R15: 00007fffa7929298 [ 565.447679][T22092] [ 565.866452][T22089] lo speed is unknown, defaulting to 1000 [ 565.917657][T22096] netlink: 'syz.0.4355': attribute type 83 has an invalid length. [ 565.976926][ T5182] Bluetooth: hci0: command tx timeout [ 566.530854][T22131] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4365'. [ 566.558945][T22131] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4365'. [ 566.821542][T22141] lo speed is unknown, defaulting to 1000 [ 566.953146][ T5182] Bluetooth: hci2: link tx timeout [ 566.974298][ T5182] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 566.996464][T22154] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4371'. [ 567.012719][T22156] netlink: 112 bytes leftover after parsing attributes in process `syz.3.4372'. [ 567.024821][T22156] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4372'. [ 567.151905][T22162] netlink: 'syz.1.4375': attribute type 1 has an invalid length. [ 567.181675][T22162] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4375'. [ 568.611735][T22226] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4397'. [ 568.639933][T22226] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4397'. [ 568.719879][T22231] lo speed is unknown, defaulting to 1000 [ 568.804398][ T8137] syzkaller1: tun_net_xmit 90 [ 569.007548][T22250] netlink: del zone limit has 4 unknown bytes [ 569.055993][ T5182] Bluetooth: hci2: command 0x0406 tx timeout [ 569.370389][T22254] syzkaller1: entered promiscuous mode [ 569.381762][T22254] syzkaller1: entered allmulticast mode [ 569.460822][T22270] __nla_validate_parse: 2 callbacks suppressed [ 569.460839][T22270] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4409'. [ 569.505163][T22270] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4409'. [ 569.558425][T22270] bridge0: port 5(vlan2) entered blocking state [ 569.570889][T22270] bridge0: port 5(vlan2) entered disabled state [ 569.610305][T22270] vlan2: entered allmulticast mode [ 569.622595][T22270] bridge0: entered allmulticast mode [ 569.637317][T22270] vlan2: left allmulticast mode [ 569.642482][T22270] bridge0: left allmulticast mode [ 569.782703][T22285] lo speed is unknown, defaulting to 1000 [ 569.919929][T22292] sctp: [Deprecated]: syz.2.4414 (pid 22292) Use of struct sctp_assoc_value in delayed_ack socket option. [ 569.919929][T22292] Use struct sctp_sack_info instead [ 569.955849][T22294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4415'. [ 569.982177][T22294] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4415'. [ 570.681374][T22329] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4425'. [ 570.742117][T22335] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4425'. [ 570.808586][T22340] netlink: 'syz.2.4427': attribute type 9 has an invalid length. [ 570.868443][T22340] netlink: 'syz.2.4427': attribute type 6 has an invalid length. [ 570.911113][T22338] bond8: entered promiscuous mode [ 570.973647][T22338] bond8: entered allmulticast mode [ 570.994228][T22338] 8021q: adding VLAN 0 to HW filter on device bond8 [ 571.004876][T22346] openvswitch: netlink: Key type 30 is not supported [ 571.346661][T22358] lo speed is unknown, defaulting to 1000 [ 571.749471][T22374] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4436'. [ 571.831099][T22378] netlink: 'syz.1.4437': attribute type 1 has an invalid length. [ 572.086524][T22378] 8021q: adding VLAN 0 to HW filter on device bond4 [ 572.163304][T22383] bond4: (slave veth5): Enslaving as an active interface with a down link [ 572.363102][T22382] veth1: left promiscuous mode [ 572.549526][T22382] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 572.587211][T22384] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 572.612057][T22384] bond4: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 573.320621][T22420] lo speed is unknown, defaulting to 1000 [ 573.452881][T22430] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (65535) [ 573.476581][T22430] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 574.053526][T22451] netlink: 159784 bytes leftover after parsing attributes in process `syz.1.4454'. [ 574.171674][T22452] lo speed is unknown, defaulting to 1000 [ 574.253470][T22457] syzkaller0: entered promiscuous mode [ 574.272534][T22457] syzkaller0: entered allmulticast mode [ 574.493774][T22449] lo speed is unknown, defaulting to 1000 [ 574.530011][T22464] team0: Port device team_slave_0 removed [ 574.576542][T22464] team0: Port device team_slave_1 removed [ 574.597103][T22464] bond1: (slave batadv1): Releasing active interface [ 574.621768][T22464] bond5: (slave gretap1): Releasing active interface [ 574.642654][T22471] netlink: 488 bytes leftover after parsing attributes in process `syz.3.4461'. [ 574.679878][T22464] bond6: (slave macvlan2): Releasing backup interface [ 574.780805][T22466] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 575.415686][T22520] netlink: 'syz.4.4474': attribute type 1 has an invalid length. [ 575.468361][T22526] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4474'. [ 575.534140][T22526] bond9: (slave bridge0): making interface the new active one [ 575.542696][T22526] bond9: (slave bridge0): Enslaving as an active interface with an up link [ 575.567661][T22530] tipc: Enabled bearer , priority 0 [ 575.775070][T22550] openvswitch: netlink: Duplicate or invalid key (type 0). [ 575.809255][T22550] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 575.899875][T22550] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4480'. [ 576.250328][T22567] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 576.633477][T22582] netlink: 356 bytes leftover after parsing attributes in process `syz.1.4492'. [ 576.649632][T22579] netlink: 'syz.4.4490': attribute type 1 has an invalid length. [ 576.684201][ T8136] tipc: Node number set to 2740638338 [ 576.795082][T22589] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4490'. [ 576.871020][T22584] veth3: entered promiscuous mode [ 576.932990][T22579] syzkaller0: entered promiscuous mode [ 576.951923][T22579] syzkaller0: entered allmulticast mode [ 576.973013][T22594] mac80211_hwsim hwsim30 wlan0: entered promiscuous mode [ 576.998480][T22594] macsec1: entered allmulticast mode [ 577.007460][T22594] mac80211_hwsim hwsim30 wlan0: entered allmulticast mode [ 577.029857][T22594] mac80211_hwsim hwsim30 wlan0: left allmulticast mode [ 577.037775][T22594] mac80211_hwsim hwsim30 wlan0: left promiscuous mode [ 577.127248][T22583] lo speed is unknown, defaulting to 1000 [ 577.378014][T22601] mac80211_hwsim hwsim50 wlan1: entered allmulticast mode [ 577.463585][T22603] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4496'. [ 577.734152][T22616] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4500'. [ 577.780395][T22616] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4500'. [ 577.891012][T22621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4502'. [ 577.945875][T22621] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4502'. [ 577.981692][T22621] netlink: 'syz.0.4502': attribute type 15 has an invalid length. [ 578.023668][T22621] netlink: 'syz.0.4502': attribute type 18 has an invalid length. [ 578.085099][T22630] netlink: 'syz.2.4505': attribute type 10 has an invalid length. [ 578.173858][T22634] netlink: 'syz.4.4506': attribute type 2 has an invalid length. [ 578.185754][T22634] netlink: 'syz.4.4506': attribute type 1 has an invalid length. [ 578.202316][T22634] netlink: 'syz.4.4506': attribute type 2 has an invalid length. [ 578.223864][T22634] netlink: 'syz.4.4506': attribute type 2 has an invalid length. [ 578.256860][T22634] netlink: 'syz.4.4506': attribute type 2 has an invalid length. [ 578.369364][T22641] netlink: 'syz.0.4509': attribute type 11 has an invalid length. [ 578.670263][T22647] tipc: Resetting bearer [ 579.439639][T22689] lo speed is unknown, defaulting to 1000 [ 580.050224][T22698] lo speed is unknown, defaulting to 1000 [ 580.362698][T22718] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input8 [ 580.646182][T22727] validate_nla: 1 callbacks suppressed [ 580.646199][T22727] netlink: 'syz.4.4534': attribute type 1 has an invalid length. [ 580.777657][T22727] 8021q: adding VLAN 0 to HW filter on device bond10 [ 580.898254][T22750] __nla_validate_parse: 4 callbacks suppressed [ 580.898271][T22750] netlink: 248 bytes leftover after parsing attributes in process `syz.1.4538'. [ 580.928725][T22736] 8021q: adding VLAN 0 to HW filter on device bond10 [ 580.944725][T22736] bond10: (slave vxcan3): The slave device specified does not support setting the MAC address [ 580.968344][T22736] bond10: (slave vxcan3): Error -95 calling set_mac_address [ 581.062893][T22746] syzkaller0: entered promiscuous mode [ 581.070262][T22746] syzkaller0: entered allmulticast mode [ 581.292074][T22744] lo speed is unknown, defaulting to 1000 [ 581.339431][T22766] veth1: mtu greater than device maximum [ 581.346905][T22766] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4540'. [ 581.389421][T22767] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4540'. [ 581.648777][T22782] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4545'. [ 581.661103][T22782] netlink: 15 bytes leftover after parsing attributes in process `syz.3.4545'. [ 581.802210][T22789] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4546'. [ 581.802219][T22791] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4546'. [ 582.323876][T22809] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4554'. [ 582.578816][T22814] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4556'. [ 582.680765][T22819] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4558'. [ 583.035148][T22836] lo speed is unknown, defaulting to 1000 [ 583.517415][T22866] IPv6: Can't replace route, no match found [ 583.562166][T22849] lo speed is unknown, defaulting to 1000 [ 583.708853][T22876] tipc: Enabling of bearer rejected, already enabled [ 584.019084][T22887] syzkaller0: entered promiscuous mode [ 584.043665][T22887] syzkaller0: entered allmulticast mode [ 585.207677][T22930] netlink: 'syz.1.4587': attribute type 10 has an invalid length. [ 586.081983][T22930] team0: Port device geneve0 added [ 586.151997][T12759] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.190900][T12759] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.236043][T12759] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.259838][T12759] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.268551][T22939] __nla_validate_parse: 10 callbacks suppressed [ 586.268566][T22939] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4590'. [ 586.368609][T22934] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check. [ 586.419702][T22944] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4589'. [ 586.482833][T22934] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4588'. [ 586.503888][T22952] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4593'. [ 586.544424][T22944] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 586.668460][T22942] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 586.670781][T22937] lo speed is unknown, defaulting to 1000 [ 587.557620][T22995] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4604'. [ 587.608908][T22998] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4604'. [ 587.724308][T22996] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4602'. [ 588.083913][T23009] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4608'. [ 588.114881][T23011] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.199365][T23016] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4610'. [ 588.223590][T23018] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4607'. [ 588.226373][T23011] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.348935][T23011] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.499598][T23011] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.687525][ T8285] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.754038][T12766] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.784890][ T8285] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.820957][ T8285] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.898099][T23038] lo speed is unknown, defaulting to 1000 [ 589.181147][T12762] tipc: Resetting bearer [ 589.606643][ T5872] Bluetooth: hci2: command 0x0406 tx timeout [ 589.624930][T23063] tipc: Enabling of bearer rejected, failed to enable media [ 589.792343][T23067] block nbd4: not configured, cannot reconfigure [ 590.435758][T23091] IPVS: Error connecting to the multicast addr [ 590.476187][T23088] tipc: Enabled bearer , priority 0 [ 590.749393][T23088] syzkaller0: entered promiscuous mode [ 590.755716][T23088] syzkaller0: entered allmulticast mode [ 590.771235][T23107] tipc: Resetting bearer [ 590.902780][T23087] tipc: Resetting bearer [ 590.966486][T23087] tipc: Disabling bearer [ 591.422086][T23113] syzkaller1: entered promiscuous mode [ 591.436585][T23113] syzkaller1: entered allmulticast mode [ 591.634886][T23135] __nla_validate_parse: 6 callbacks suppressed [ 591.634903][T23135] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4645'. [ 591.854647][T23147] tipc: Enabled bearer , priority 0 [ 591.888619][T23147] syzkaller0: entered promiscuous mode [ 591.904457][T23147] syzkaller0: entered allmulticast mode [ 592.097744][T23149] 8021q: adding VLAN 0 to HW filter on device bond4 [ 592.106982][T23149] bond0: (slave bond4): Enslaving as an active interface with an up link [ 592.149919][T23157] tipc: Resetting bearer [ 592.189097][T23157] tipc: Disabling bearer [ 592.251036][T23164] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4653'. [ 592.332159][T23166] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4653'. [ 592.394572][T23167] netlink: 'syz.0.4654': attribute type 23 has an invalid length. [ 592.723114][T23174] netlink: 'syz.0.4654': attribute type 1 has an invalid length. [ 592.755019][T23174] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4654'. [ 593.098437][T23184] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 593.252808][T23189] veth1_macvtap: left promiscuous mode [ 593.272513][T23189] macsec0: entered allmulticast mode [ 593.295656][T23195] netlink: 'syz.2.4662': attribute type 7 has an invalid length. [ 593.344587][T23189] veth1_macvtap: entered promiscuous mode [ 593.352049][T23189] veth1_macvtap: entered allmulticast mode [ 593.373498][T23189] macsec0: left allmulticast mode [ 593.402245][T23189] veth1_macvtap: left allmulticast mode [ 593.536168][T23210] netlink: 8284 bytes leftover after parsing attributes in process `syz.1.4665'. [ 593.725740][T23221] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4668'. [ 593.753688][T23221] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4668'. [ 593.784197][T23221] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4668'. [ 593.791935][T23204] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4663'. [ 593.804847][T23221] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4668'. [ 593.984455][T23234] netlink: 'syz.2.4681': attribute type 83 has an invalid length. [ 594.397590][T23253] netlink: 'syz.2.4672': attribute type 13 has an invalid length. [ 594.431280][T23253] netlink: 'syz.2.4672': attribute type 17 has an invalid length. [ 594.464756][T23229] syzkaller0: entered promiscuous mode [ 594.484033][T23229] syzkaller0: entered allmulticast mode [ 595.062725][T23263] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 595.537486][T23269] netlink: 'syz.4.4676': attribute type 303 has an invalid length. [ 597.647104][T23277] netlink: 'syz.3.4678': attribute type 12 has an invalid length. [ 597.810900][T23282] netlink: 'syz.3.4679': attribute type 10 has an invalid length. [ 597.881023][T23253] 8021q: adding VLAN 0 to HW filter on device team0 [ 597.891508][T23253] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 597.944905][T23269] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 597.964281][T23269] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 597.983247][T23245] lo speed is unknown, defaulting to 1000 [ 597.994142][T23269] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 598.209872][T23297] netlink: 'syz.3.4682': attribute type 4 has an invalid length. [ 598.233353][T23301] __nla_validate_parse: 25 callbacks suppressed [ 598.233371][T23301] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4686'. [ 598.289975][T23290] netlink: 'syz.3.4682': attribute type 4 has an invalid length. [ 598.550233][T23313] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4688'. [ 598.614837][T23295] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 598.629090][T23295] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 598.641147][T23295] bond0 (unregistering): Released all slaves [ 598.662533][T23300] syzkaller0: entered promiscuous mode [ 598.668257][T23300] syzkaller0: entered allmulticast mode [ 598.842462][T12762] ¾x9ÿ: left allmulticast mode [ 598.852190][T12762] ¾x9ÿ: left promiscuous mode [ 598.867441][T12762] bridge0: port 1(1¾x9ÿ) entered disabled state [ 599.092524][T12762] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 599.111329][T12762] bond1 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 42:d5:1b:2e:40:f7 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 599.439023][T12762] bond0 (unregistering): (slave gretap1): Releasing active interface [ 600.028778][T12762] bond7 (unregistering): (slave bridge10): Releasing active interface [ 600.204758][T12762] bond1 (unregistering): (slave veth3): Releasing active interface [ 600.213510][T12762] bond1 (unregistering): Released all slaves [ 600.227128][T12762] bond2 (unregistering): Released all slaves [ 600.337566][T12762] bond3 (unregistering): Released all slaves [ 600.447949][T12762] bond4 (unregistering): (slave veth9): Releasing active interface [ 600.460143][T12762] bond4 (unregistering): Released all slaves [ 600.561342][T12762] bond5 (unregistering): Released all slaves [ 600.586148][T12762] bond0 (unregistering): Released all slaves [ 600.696940][T12762] bond6 (unregistering): Released all slaves [ 600.711987][T12762] bond7 (unregistering): Released all slaves [ 600.817179][T12762] bond8 (unregistering): Released all slaves [ 600.922159][T12762] bond9 (unregistering): Released all slaves [ 601.026055][T12762] bond10 (unregistering): Released all slaves [ 601.133424][T12762] bond11 (unregistering): Released all slaves [ 601.238767][T12762] bond12 (unregistering): Released all slaves [ 601.319148][T23329] lo speed is unknown, defaulting to 1000 [ 601.446154][T12762] : left promiscuous mode [ 601.553111][T23335] tipc: Enabled bearer , priority 0 [ 601.672079][T12762] : left promiscuous mode [ 601.714472][T23334] syzkaller0: entered promiscuous mode [ 601.720055][T23334] syzkaller0: entered allmulticast mode [ 601.789300][T12762] þ`Ì: left promiscuous mode [ 601.816337][T23334] tipc: Resetting bearer [ 601.833242][T23334] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4693'. [ 601.849579][T23334] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4693'. [ 601.860415][T23356] netlink: 'syz.2.4697': attribute type 39 has an invalid length. [ 601.890984][T23356] veth0_macvtap: left promiscuous mode [ 601.964695][T23334] vlan3: entered allmulticast mode [ 601.969983][T23334] veth1: entered allmulticast mode [ 601.976022][T12762] tipc: Disabling bearer [ 601.985171][T12762] tipc: Left network mode [ 602.002321][T23333] tipc: Resetting bearer [ 602.076274][T23333] tipc: Disabling bearer [ 602.135817][T23358] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4699'. [ 602.293037][T23369] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4701'. [ 602.420244][T23360] lo speed is unknown, defaulting to 1000 [ 602.547756][T23371] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4702'. [ 602.720342][T23377] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4703'. [ 602.809386][T12762] mac80211_hwsim hwsim6 wlan0 (unregistering): left promiscuous mode [ 603.018608][T23395] FAULT_INJECTION: forcing a failure. [ 603.018608][T23395] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 603.040862][T23395] CPU: 1 UID: 0 PID: 23395 Comm: syz.0.4709 Not tainted 6.16.0-syzkaller-12108-gfdbe93b7f0f8 #0 PREEMPT(full) [ 603.040887][T23395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 603.040898][T23395] Call Trace: [ 603.040906][T23395] [ 603.040914][T23395] dump_stack_lvl+0x189/0x250 [ 603.040940][T23395] ? __pfx____ratelimit+0x10/0x10 [ 603.040962][T23395] ? __pfx_dump_stack_lvl+0x10/0x10 [ 603.040983][T23395] ? __pfx__printk+0x10/0x10 [ 603.041007][T23395] ? __might_fault+0xb0/0x130 [ 603.041042][T23395] should_fail_ex+0x414/0x560 [ 603.041068][T23395] _copy_from_iter+0x1db/0x16f0 [ 603.041097][T23395] ? rcu_is_watching+0x15/0xb0 [ 603.041124][T23395] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 603.041149][T23395] ? __pfx__copy_from_iter+0x10/0x10 [ 603.041176][T23395] ? __build_skb_around+0x257/0x3e0 [ 603.041203][T23395] ? netlink_sendmsg+0x642/0xb30 [ 603.041223][T23395] ? skb_put+0x11b/0x210 [ 603.041249][T23395] netlink_sendmsg+0x6b2/0xb30 [ 603.041279][T23395] ? __pfx_netlink_sendmsg+0x10/0x10 [ 603.041305][T23395] ? aa_sock_msg_perm+0xf1/0x1d0 [ 603.041329][T23395] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 603.041353][T23395] ? __pfx_netlink_sendmsg+0x10/0x10 [ 603.041376][T23395] __sock_sendmsg+0x219/0x270 [ 603.041405][T23395] ____sys_sendmsg+0x505/0x830 [ 603.041435][T23395] ? __pfx_____sys_sendmsg+0x10/0x10 [ 603.041469][T23395] ? import_iovec+0x74/0xa0 [ 603.041490][T23395] ___sys_sendmsg+0x21f/0x2a0 [ 603.041517][T23395] ? __pfx____sys_sendmsg+0x10/0x10 [ 603.041577][T23395] ? __fget_files+0x2a/0x420 [ 603.041602][T23395] ? __fget_files+0x3a0/0x420 [ 603.041638][T23395] __x64_sys_sendmsg+0x19b/0x260 [ 603.041665][T23395] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 603.041700][T23395] ? __pfx_ksys_write+0x10/0x10 [ 603.041720][T23395] ? rcu_is_watching+0x15/0xb0 [ 603.041744][T23395] ? do_syscall_64+0xbe/0x3b0 [ 603.041771][T23395] do_syscall_64+0xfa/0x3b0 [ 603.041791][T23395] ? lockdep_hardirqs_on+0x9c/0x150 [ 603.041812][T23395] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.041837][T23395] ? clear_bhb_loop+0x60/0xb0 [ 603.041858][T23395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.041874][T23395] RIP: 0033:0x7f768c38ebe9 [ 603.041890][T23395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 603.041906][T23395] RSP: 002b:00007f768d1a9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 603.041925][T23395] RAX: ffffffffffffffda RBX: 00007f768c5b5fa0 RCX: 00007f768c38ebe9 [ 603.041938][T23395] RDX: 0000000004000084 RSI: 0000200000000000 RDI: 0000000000000003 [ 603.041950][T23395] RBP: 00007f768d1a9090 R08: 0000000000000000 R09: 0000000000000000 [ 603.041961][T23395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 603.041971][T23395] R13: 00007f768c5b6038 R14: 00007f768c5b5fa0 R15: 00007ffd9be54578 [ 603.042001][T23395] [ 604.744889][T23443] openvswitch: netlink: IP tunnel dst address not specified [ 605.153500][T12762] IPVS: stop unused estimator thread 0... [ 605.736697][T23496] sysfs: cannot create duplicate filename '/class/ieee80211/žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»–_à›xDä±pj8¼•TTí!' [ 605.738287][T23498] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4732'. [ 605.749294][T23496] CPU: 1 UID: 0 PID: 23496 Comm: syz.4.4731 Not tainted 6.16.0-syzkaller-12108-gfdbe93b7f0f8 #0 PREEMPT(full) [ 605.749319][T23496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 605.749330][T23496] Call Trace: [ 605.749337][T23496] [ 605.749345][T23496] dump_stack_lvl+0x189/0x250 [ 605.749381][T23496] ? __pfx_dump_stack_lvl+0x10/0x10 [ 605.749403][T23496] ? __pfx__printk+0x10/0x10 [ 605.749432][T23496] ? kernfs_path_from_node+0x2f/0x290 [ 605.749452][T23496] ? kernfs_path_from_node+0x250/0x290 [ 605.749470][T23496] ? kernfs_path_from_node+0x2f/0x290 [ 605.749493][T23496] sysfs_warn_dup+0x8e/0xa0 [ 605.749512][T23496] sysfs_do_create_link_sd+0xc0/0x110 [ 605.749535][T23496] device_add_class_symlinks+0x1cf/0x240 [ 605.749565][T23496] device_add+0x475/0xb50 [ 605.749600][T23496] wiphy_register+0x1ba6/0x28d0 [ 605.749641][T23496] ? __pfx_wiphy_register+0x10/0x10 [ 605.749662][T23496] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 605.749696][T23496] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 605.749726][T23496] ieee80211_register_hw+0x3425/0x4080 [ 605.749770][T23496] ? ieee80211_register_hw+0x14e1/0x4080 [ 605.749805][T23496] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 605.749835][T23496] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 605.749865][T23496] ? __hrtimer_setup+0x187/0x210 [ 605.749881][T23496] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 605.749907][T23496] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 605.749961][T23496] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 605.749979][T23496] ? trace_kmalloc+0x1f/0xd0 [ 605.749999][T23496] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 605.750023][T23496] ? kstrndup+0xbf/0x160 [ 605.750053][T23496] hwsim_new_radio_nl+0xea4/0x1b10 [ 605.750076][T23496] ? __pfx___nla_validate_parse+0x10/0x10 [ 605.750115][T23496] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 605.750150][T23496] ? __nla_parse+0x40/0x60 [ 605.750176][T23496] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 605.750205][T23496] genl_family_rcv_msg_doit+0x212/0x300 [ 605.750231][T23496] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 605.750269][T23496] ? bpf_lsm_capable+0x9/0x20 [ 605.750290][T23496] ? security_capable+0x7e/0x2e0 [ 605.750320][T23496] genl_rcv_msg+0x60e/0x790 [ 605.750345][T23496] ? __pfx_genl_rcv_msg+0x10/0x10 [ 605.750362][T23496] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 605.750398][T23496] netlink_rcv_skb+0x208/0x470 [ 605.750418][T23496] ? __lock_acquire+0xab9/0xd20 [ 605.750442][T23496] ? __pfx_genl_rcv_msg+0x10/0x10 [ 605.750461][T23496] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 605.750505][T23496] ? down_read+0x1ad/0x2e0 [ 605.750531][T23496] genl_rcv+0x28/0x40 [ 605.750554][T23496] netlink_unicast+0x82f/0x9e0 [ 605.750589][T23496] ? __pfx_netlink_unicast+0x10/0x10 [ 605.750611][T23496] ? netlink_sendmsg+0x642/0xb30 [ 605.750631][T23496] ? skb_put+0x11b/0x210 [ 605.750658][T23496] netlink_sendmsg+0x805/0xb30 [ 605.750691][T23496] ? __pfx_netlink_sendmsg+0x10/0x10 [ 605.750717][T23496] ? aa_sock_msg_perm+0xf1/0x1d0 [ 605.750743][T23496] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 605.750762][T23496] ? __pfx_netlink_sendmsg+0x10/0x10 [ 605.750786][T23496] __sock_sendmsg+0x219/0x270 [ 605.750809][T23496] ____sys_sendmsg+0x505/0x830 [ 605.750840][T23496] ? __pfx_____sys_sendmsg+0x10/0x10 [ 605.750875][T23496] ? import_iovec+0x74/0xa0 [ 605.750897][T23496] ___sys_sendmsg+0x21f/0x2a0 [ 605.750924][T23496] ? __pfx____sys_sendmsg+0x10/0x10 [ 605.750991][T23496] ? __fget_files+0x2a/0x420 [ 605.751015][T23496] ? __fget_files+0x3a0/0x420 [ 605.751051][T23496] __x64_sys_sendmsg+0x19b/0x260 [ 605.751079][T23496] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 605.751116][T23496] ? rcu_is_watching+0x15/0xb0 [ 605.751140][T23496] ? do_syscall_64+0xbe/0x3b0 [ 605.751167][T23496] do_syscall_64+0xfa/0x3b0 [ 605.751187][T23496] ? lockdep_hardirqs_on+0x9c/0x150 [ 605.751207][T23496] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.751225][T23496] ? clear_bhb_loop+0x60/0xb0 [ 605.751247][T23496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.751264][T23496] RIP: 0033:0x7f016dd8ebe9 [ 605.751282][T23496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 605.751297][T23496] RSP: 002b:00007f016eb79038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 605.751316][T23496] RAX: ffffffffffffffda RBX: 00007f016dfb5fa0 RCX: 00007f016dd8ebe9 [ 605.751328][T23496] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004 [ 605.751339][T23496] RBP: 00007f016de11e19 R08: 0000000000000000 R09: 0000000000000000 [ 605.751349][T23496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 605.751359][T23496] R13: 00007f016dfb6038 R14: 00007f016dfb5fa0 R15: 00007fffb95dc3e8 [ 605.751390][T23496] [ 605.873428][T23500] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4732'. [ 605.945138][T23498] 8021q: adding VLAN 0 to HW filter on device bond1 [ 606.400158][T23516] netlink: 'syz.2.4737': attribute type 1 has an invalid length. [ 606.443390][T23513] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4736'. [ 606.550471][T23521] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4738'. [ 606.701796][T23533] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 606.813890][T23542] sctp: [Deprecated]: syz.0.4744 (pid 23542) Use of int in maxseg socket option. [ 606.813890][T23542] Use struct sctp_assoc_value instead [ 606.845966][T23544] netlink: 'syz.2.4743': attribute type 1 has an invalid length. [ 606.867645][T23544] netlink: 'syz.2.4743': attribute type 2 has an invalid length. [ 607.087015][T23558] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4748'. [ 607.286960][ T5872] Bluetooth: hci2: command 0x0406 tx timeout [ 607.552989][T23569] pimreg: entered allmulticast mode [ 607.562464][T23571] pimreg: left allmulticast mode [ 607.648975][T23583] netlink: 'syz.4.4753': attribute type 1 has an invalid length. [ 607.755100][T23587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4754'. [ 607.812575][T23583] 8021q: adding VLAN 0 to HW filter on device bond11 [ 607.851861][T23591] netlink: 'syz.2.4756': attribute type 7 has an invalid length. [ 607.865054][T23591] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4756'. [ 607.979307][T23586] 8021q: adding VLAN 0 to HW filter on device bond11 [ 608.013793][T23586] bond11: (slave vxcan3): The slave device specified does not support setting the MAC address [ 608.066645][T23586] bond11: (slave vxcan3): Error -95 calling set_mac_address [ 608.152264][T23595] tipc: Enabled bearer , priority 0 [ 608.187961][T23589] tipc: Resetting bearer [ 608.219096][T23602] syzkaller0: entered promiscuous mode [ 608.231618][T23602] syzkaller0: entered allmulticast mode [ 608.243411][T23588] tipc: Resetting bearer [ 608.282400][T23588] tipc: Disabling bearer [ 608.310475][T23620] tipc: New replicast peer: 255.255.255.255 [ 608.328837][T23620] tipc: Enabled bearer , priority 26 [ 608.339745][T23619] tipc: Enabling of bearer rejected, already enabled [ 608.502350][T23631] netlink: 'syz.2.4763': attribute type 7 has an invalid length. [ 608.549402][T23631] netlink: 'syz.2.4763': attribute type 8 has an invalid length. [ 608.635578][T23640] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input9 [ 608.774816][T23651] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4767'. [ 608.783880][T23651] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4767'. [ 608.802857][T23651] netlink: 'syz.2.4767': attribute type 15 has an invalid length. [ 608.821325][T23651] FAULT_INJECTION: forcing a failure. [ 608.821325][T23651] name failslab, interval 1, probability 0, space 0, times 0 [ 608.836038][T23651] CPU: 1 UID: 0 PID: 23651 Comm: syz.2.4767 Not tainted 6.16.0-syzkaller-12108-gfdbe93b7f0f8 #0 PREEMPT(full) [ 608.836063][T23651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 608.836074][T23651] Call Trace: [ 608.836082][T23651] [ 608.836088][T23651] dump_stack_lvl+0x189/0x250 [ 608.836114][T23651] ? __pfx____ratelimit+0x10/0x10 [ 608.836137][T23651] ? __pfx_dump_stack_lvl+0x10/0x10 [ 608.836159][T23651] ? __pfx__printk+0x10/0x10 [ 608.836189][T23651] ? __pfx___might_resched+0x10/0x10 [ 608.836206][T23651] ? fs_reclaim_acquire+0x7d/0x100 [ 608.836261][T23651] should_fail_ex+0x414/0x560 [ 608.836288][T23651] should_failslab+0xa8/0x100 [ 608.836315][T23651] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 608.836339][T23651] ? __d_alloc+0x36/0x7a0 [ 608.836363][T23651] __d_alloc+0x36/0x7a0 [ 608.836389][T23651] d_alloc_parallel+0xe5/0x15e0 [ 608.836425][T23651] ? __lock_acquire+0xab9/0xd20 [ 608.836457][T23651] ? __pfx_d_alloc_parallel+0x10/0x10 [ 608.836484][T23651] ? __raw_spin_lock_init+0x45/0x100 [ 608.836507][T23651] ? __init_waitqueue_head+0xa9/0x150 [ 608.836534][T23651] __lookup_slow+0x116/0x3d0 [ 608.836558][T23651] ? __pfx___lookup_slow+0x10/0x10 [ 608.836590][T23651] ? d_lookup+0x8a/0xa0 [ 608.836610][T23651] ? lookup_noperm+0x112/0x220 [ 608.836634][T23651] simple_start_creating+0xfd/0x1e0 [ 608.836662][T23651] ? __pfx_simple_start_creating+0x10/0x10 [ 608.836702][T23651] start_creating+0x10f/0x180 [ 608.836727][T23651] __debugfs_create_file+0x79/0x4f0 [ 608.836756][T23651] debugfs_create_file_full+0x3f/0x60 [ 608.836783][T23651] ref_tracker_dir_debugfs+0x14e/0x270 [ 608.836807][T23651] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 608.836860][T23651] ? rcu_is_watching+0x15/0xb0 [ 608.836877][T23651] ? alloc_netdev_mqs+0xa3/0x1170 [ 608.836903][T23651] ? __raw_spin_lock_init+0x45/0x100 [ 608.836928][T23651] alloc_netdev_mqs+0x26f/0x1170 [ 608.836946][T23651] ? __pfx_vxlan_setup+0x10/0x10 [ 608.836980][T23651] rtnl_create_link+0x31f/0xd10 [ 608.837006][T23651] rtnl_newlink_create+0x25c/0xb00 [ 608.837036][T23651] ? __mutex_lock+0x5b6/0x1360 [ 608.837070][T23651] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 608.837099][T23651] ? __pfx___mutex_lock+0x10/0x10 [ 608.837134][T23651] ? ns_capable+0x8a/0xf0 [ 608.837156][T23651] rtnl_newlink+0x16d6/0x1c70 [ 608.837181][T23651] ? netlink_sendmsg+0x805/0xb30 [ 608.837217][T23651] ? __pfx_rtnl_newlink+0x10/0x10 [ 608.837272][T23651] ? kasan_quarantine_put+0xdd/0x220 [ 608.837294][T23651] ? lockdep_hardirqs_on+0x9c/0x150 [ 608.837323][T23651] ? nlmon_xmit+0xb0/0x100 [ 608.837345][T23651] ? kmem_cache_free+0x18f/0x400 [ 608.837377][T23651] ? __local_bh_enable_ip+0x12d/0x1c0 [ 608.837395][T23651] ? lockdep_hardirqs_on+0x9c/0x150 [ 608.837418][T23651] ? __local_bh_enable_ip+0x12d/0x1c0 [ 608.837436][T23651] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 608.837459][T23651] ? __dev_queue_xmit+0x27b/0x3b50 [ 608.837478][T23651] ? __dev_queue_xmit+0x27b/0x3b50 [ 608.837494][T23651] ? __dev_queue_xmit+0x27b/0x3b50 [ 608.837513][T23651] ? __dev_queue_xmit+0x1d79/0x3b50 [ 608.837538][T23651] ? __lock_acquire+0xab9/0xd20 [ 608.837591][T23651] ? __pfx_rtnl_newlink+0x10/0x10 [ 608.837613][T23651] rtnetlink_rcv_msg+0x7cf/0xb70 [ 608.837640][T23651] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 608.837662][T23651] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 608.837682][T23651] ? ref_tracker_free+0x63a/0x7d0 [ 608.837704][T23651] ? __asan_memcpy+0x40/0x70 [ 608.837723][T23651] ? __pfx_ref_tracker_free+0x10/0x10 [ 608.837757][T23651] netlink_rcv_skb+0x208/0x470 [ 608.837781][T23651] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 608.837806][T23651] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 608.837843][T23651] ? netlink_deliver_tap+0x2e/0x1b0 [ 608.837875][T23651] netlink_unicast+0x82f/0x9e0 [ 608.837906][T23651] ? __pfx_netlink_unicast+0x10/0x10 [ 608.837929][T23651] ? netlink_sendmsg+0x642/0xb30 [ 608.837948][T23651] ? skb_put+0x11b/0x210 [ 608.837976][T23651] netlink_sendmsg+0x805/0xb30 [ 608.838009][T23651] ? __pfx_netlink_sendmsg+0x10/0x10 [ 608.838036][T23651] ? aa_sock_msg_perm+0xf1/0x1d0 [ 608.838062][T23651] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 608.838082][T23651] ? __pfx_netlink_sendmsg+0x10/0x10 [ 608.838106][T23651] __sock_sendmsg+0x219/0x270 [ 608.838130][T23651] ____sys_sendmsg+0x505/0x830 [ 608.838163][T23651] ? __pfx_____sys_sendmsg+0x10/0x10 [ 608.838199][T23651] ? import_iovec+0x74/0xa0 [ 608.838222][T23651] ___sys_sendmsg+0x21f/0x2a0 [ 608.838255][T23651] ? __pfx____sys_sendmsg+0x10/0x10 [ 608.838322][T23651] ? __fget_files+0x2a/0x420 [ 608.838346][T23651] ? __fget_files+0x3a0/0x420 [ 608.838384][T23651] __x64_sys_sendmsg+0x19b/0x260 [ 608.838413][T23651] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 608.838450][T23651] ? __pfx_ksys_write+0x10/0x10 [ 608.838470][T23651] ? rcu_is_watching+0x15/0xb0 [ 608.838494][T23651] ? do_syscall_64+0xbe/0x3b0 [ 608.838520][T23651] do_syscall_64+0xfa/0x3b0 [ 608.838541][T23651] ? lockdep_hardirqs_on+0x9c/0x150 [ 608.838562][T23651] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.838580][T23651] ? clear_bhb_loop+0x60/0xb0 [ 608.838603][T23651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.838621][T23651] RIP: 0033:0x7fe2d2d8ebe9 [ 608.838638][T23651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 608.838653][T23651] RSP: 002b:00007fe2d3bf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 608.838672][T23651] RAX: ffffffffffffffda RBX: 00007fe2d2fb5fa0 RCX: 00007fe2d2d8ebe9 [ 608.838685][T23651] RDX: 0000000004000084 RSI: 0000200000000000 RDI: 0000000000000003 [ 608.838697][T23651] RBP: 00007fe2d3bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 608.838708][T23651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 608.838719][T23651] R13: 00007fe2d2fb6038 R14: 00007fe2d2fb5fa0 R15: 00007fffa7929298 [ 608.838751][T23651] [ 609.409111][ T8142] tipc: Node number set to 2604244994 [ 609.548210][T23657] netlink: 424 bytes leftover after parsing attributes in process `syz.0.4769'. [ 609.627594][ T30] audit: type=1800 audit(1755136990.648:11): pid=23659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4770" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1786 res=0 errno=0 [ 609.917478][T23686] tipc: Enabling of bearer rejected, already enabled [ 609.961343][T23684] netlink: 'syz.0.4776': attribute type 10 has an invalid length. [ 609.978168][T23687] netlink: 'syz.0.4776': attribute type 10 has an invalid length. [ 610.000538][T23684] bridge0: port 3(0!) entered disabled state [ 610.008852][T23684] !: left allmulticast mode [ 610.013472][T23684] !: left promiscuous mode [ 610.018725][T23684] bridge0: port 3(0!) entered disabled state [ 610.049944][T23684] team0: Port device 0! added [ 613.139040][T23725] IPVS: Error connecting to the multicast addr [ 613.269767][T23728] IPVS: Error connecting to the multicast addr [ 613.404900][T23741] netlink: 'syz.0.4792': attribute type 1 has an invalid length. [ 613.424529][T23741] __nla_validate_parse: 7 callbacks suppressed [ 613.424547][T23741] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4792'. [ 613.459081][T23744] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4793'. [ 613.459120][T23742] Oops: general protection fault, probably for non-canonical address 0xdffffc001fffe1ac: 0000 [#1] SMP KASAN PTI [ 613.479925][T23742] KASAN: probably user-memory-access in range [0x00000000ffff0d60-0x00000000ffff0d67] [ 613.482373][T23744] unsupported nlmsg_type 40 [ 613.489464][T23742] CPU: 1 UID: 0 PID: 23742 Comm: syz.2.4791 Not tainted 6.16.0-syzkaller-12108-gfdbe93b7f0f8 #0 PREEMPT(full) [ 613.489487][T23742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 613.489498][T23742] RIP: 0010:__ip_mc_dec_group+0x2fd/0x690 [ 613.489527][T23742] Code: 49 11 bc f7 c6 05 68 89 89 05 01 48 c7 c7 00 90 9e 8c be 97 05 00 00 48 c7 c2 80 90 9e 8c e8 7a eb 99 f7 4c 89 e3 48 c1 eb 03 <42> 80 3c 2b 00 74 08 4c 89 e7 e8 b4 7b 1f f8 4d 8b 2c 24 4d 39 f5 [ 613.489542][T23742] RSP: 0000:ffffc9000e88e8f8 EFLAGS: 00010206 [ 613.489559][T23742] RAX: ffffffff8a039a2e RBX: 000000001fffe1ac RCX: 0000000000080000 [ 613.489571][T23742] RDX: ffffc90020a09000 RSI: 0000000000009cdb RDI: 0000000000009cdc [ 613.489584][T23742] RBP: ffff8880564b1820 R08: ffffffff8f534967 R09: 1ffffffff1ea692c [ 613.489596][T23742] R10: dffffc0000000000 R11: fffffbfff1ea692d R12: 00000000ffff0d60 [ 613.489608][T23742] R13: dffffc0000000000 R14: ffff888059d19400 R15: 1ffff1100ac96304 [ 613.489623][T23742] FS: 00007fe2d3bf66c0(0000) GS:ffff888125d21000(0000) knlGS:0000000000000000 [ 613.489637][T23742] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 613.489649][T23742] CR2: 00007f016dfb7dac CR3: 0000000036c14000 CR4: 00000000003526f0 [ 613.610253][T23742] Call Trace: [ 613.613517][T23742] [ 613.616434][T23742] inetdev_event+0x2a7/0x15b0 [ 613.621104][T23742] ? __pfx_inetdev_event+0x10/0x10 [ 613.626207][T23742] notifier_call_chain+0x1b6/0x3e0 [ 613.631306][T23742] __dev_notify_flags+0x18d/0x2e0 [ 613.636320][T23742] ? __pfx___dev_notify_flags+0x10/0x10 [ 613.641853][T23742] ? __dev_change_flags+0x4cc/0x6d0 [ 613.647043][T23742] ? __pfx___dev_change_flags+0x10/0x10 [ 613.652582][T23742] ? netif_state_change+0x256/0x3a0 [ 613.657771][T23742] ? __pfx_netif_state_change+0x10/0x10 [ 613.663311][T23742] netif_change_flags+0xe8/0x1a0 [ 613.668236][T23742] do_setlink+0xc55/0x41c0 [ 613.672639][T23742] ? __kernel_text_address+0xd/0x40 [ 613.677823][T23742] ? arch_stack_walk+0xfc/0x150 [ 613.682660][T23742] ? __pfx_do_setlink+0x10/0x10 [ 613.687505][T23742] ? __lock_acquire+0xab9/0xd20 [ 613.692363][T23742] ? __mutex_trylock_common+0x153/0x260 [ 613.697891][T23742] ? __pfx___mutex_trylock_common+0x10/0x10 [ 613.703770][T23742] ? rcu_is_watching+0x15/0xb0 [ 613.708516][T23742] ? trace_contention_end+0x39/0x120 [ 613.713782][T23742] ? __mutex_lock+0x335/0x1360 [ 613.718544][T23742] ? __pfx___nla_validate_parse+0x10/0x10 [ 613.724252][T23742] ? rtnl_newlink+0x8db/0x1c70 [ 613.729004][T23742] ? __pfx___mutex_lock+0x10/0x10 [ 613.734017][T23742] ? ns_capable+0x8a/0xf0 [ 613.738331][T23742] ? rtnl_link_get_net_capable+0x16a/0x350 [ 613.744122][T23742] rtnl_newlink+0x149f/0x1c70 [ 613.748784][T23742] ? netlink_sendmsg+0x805/0xb30 [ 613.753733][T23742] ? __pfx_rtnl_newlink+0x10/0x10 [ 613.758752][T23742] ? kasan_quarantine_put+0xdd/0x220 [ 613.764032][T23742] ? lockdep_hardirqs_on+0x9c/0x150 [ 613.769231][T23742] ? nlmon_xmit+0xb0/0x100 [ 613.773635][T23742] ? kmem_cache_free+0x18f/0x400 [ 613.778563][T23742] ? __local_bh_enable_ip+0x12d/0x1c0 [ 613.783916][T23742] ? lockdep_hardirqs_on+0x9c/0x150 [ 613.789108][T23742] ? __local_bh_enable_ip+0x12d/0x1c0 [ 613.794464][T23742] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 613.800269][T23742] ? __dev_queue_xmit+0x27b/0x3b50 [ 613.805377][T23742] ? __dev_queue_xmit+0x27b/0x3b50 [ 613.810475][T23742] ? __dev_queue_xmit+0x27b/0x3b50 [ 613.815574][T23742] ? __dev_queue_xmit+0x1d79/0x3b50 [ 613.820757][T23742] ? __lock_acquire+0xab9/0xd20 [ 613.825611][T23742] ? __pfx_rtnl_newlink+0x10/0x10 [ 613.830625][T23742] rtnetlink_rcv_msg+0x7cf/0xb70 [ 613.835555][T23742] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 613.840655][T23742] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 613.846098][T23742] ? ref_tracker_free+0x63a/0x7d0 [ 613.851112][T23742] ? __asan_memcpy+0x40/0x70 [ 613.855684][T23742] ? __pfx_ref_tracker_free+0x10/0x10 [ 613.861045][T23742] netlink_rcv_skb+0x208/0x470 [ 613.865798][T23742] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 613.871259][T23742] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 613.876538][T23742] ? netlink_deliver_tap+0x2e/0x1b0 [ 613.881726][T23742] netlink_unicast+0x82f/0x9e0 [ 613.886477][T23742] ? __pfx_netlink_unicast+0x10/0x10 [ 613.891748][T23742] ? netlink_sendmsg+0x642/0xb30 [ 613.896676][T23742] ? skb_put+0x11b/0x210 [ 613.900938][T23742] netlink_sendmsg+0x805/0xb30 [ 613.905693][T23742] ? __pfx_netlink_sendmsg+0x10/0x10 [ 613.910963][T23742] ? aa_sock_msg_perm+0xf1/0x1d0 [ 613.915889][T23742] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 613.921157][T23742] ? __pfx_netlink_sendmsg+0x10/0x10 [ 613.926426][T23742] __sock_sendmsg+0x219/0x270 [ 613.931090][T23742] ____sys_sendmsg+0x505/0x830 [ 613.935847][T23742] ? __pfx_____sys_sendmsg+0x10/0x10 [ 613.941122][T23742] ? import_iovec+0x74/0xa0 [ 613.945608][T23742] ___sys_sendmsg+0x21f/0x2a0 [ 613.950273][T23742] ? __pfx____sys_sendmsg+0x10/0x10 [ 613.955471][T23742] ? __fget_files+0x2a/0x420 [ 613.960050][T23742] ? __fget_files+0x3a0/0x420 [ 613.964719][T23742] __x64_sys_sendmsg+0x19b/0x260 [ 613.969645][T23742] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 613.975096][T23742] ? rcu_is_watching+0x15/0xb0 [ 613.979843][T23742] ? do_syscall_64+0xbe/0x3b0 [ 613.984508][T23742] do_syscall_64+0xfa/0x3b0 [ 613.988995][T23742] ? lockdep_hardirqs_on+0x9c/0x150 [ 613.994181][T23742] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.000232][T23742] ? clear_bhb_loop+0x60/0xb0 [ 614.004895][T23742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.010774][T23742] RIP: 0033:0x7fe2d2d8ebe9 [ 614.015174][T23742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 614.034768][T23742] RSP: 002b:00007fe2d3bf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 614.043167][T23742] RAX: ffffffffffffffda RBX: 00007fe2d2fb5fa0 RCX: 00007fe2d2d8ebe9 [ 614.051120][T23742] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000006 [ 614.059075][T23742] RBP: 00007fe2d2e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 614.067027][T23742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 614.074980][T23742] R13: 00007fe2d2fb6038 R14: 00007fe2d2fb5fa0 R15: 00007fffa7929298 [ 614.082941][T23742] [ 614.085956][T23742] Modules linked in: [ 614.092562][T23742] ---[ end trace 0000000000000000 ]--- [ 614.119425][T23742] RIP: 0010:__ip_mc_dec_group+0x2fd/0x690 [ 614.125444][T23742] Code: 49 11 bc f7 c6 05 68 89 89 05 01 48 c7 c7 00 90 9e 8c be 97 05 00 00 48 c7 c2 80 90 9e 8c e8 7a eb 99 f7 4c 89 e3 48 c1 eb 03 <42> 80 3c 2b 00 74 08 4c 89 e7 e8 b4 7b 1f f8 4d 8b 2c 24 4d 39 f5 [ 614.145506][T23742] RSP: 0000:ffffc9000e88e8f8 EFLAGS: 00010206 [ 614.151693][T23742] RAX: ffffffff8a039a2e RBX: 000000001fffe1ac RCX: 0000000000080000 [ 614.163123][T23742] RDX: ffffc90020a09000 RSI: 0000000000009cdb RDI: 0000000000009cdc [ 614.171367][T23742] RBP: ffff8880564b1820 R08: ffffffff8f534967 R09: 1ffffffff1ea692c [ 614.179479][T23742] R10: dffffc0000000000 R11: fffffbfff1ea692d R12: 00000000ffff0d60 [ 614.187832][T23742] R13: dffffc0000000000 R14: ffff888059d19400 R15: 1ffff1100ac96304 [ 614.197900][T23742] FS: 00007fe2d3bf66c0(0000) GS:ffff888125c21000(0000) knlGS:0000000000000000 [ 614.208024][T23742] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 614.215105][T23742] CR2: 00007fe2d3bb4d58 CR3: 0000000036c14000 CR4: 00000000003526f0 [ 614.224453][T23742] Kernel panic - not syncing: Fatal exception [ 614.230787][T23742] Kernel Offset: disabled [ 614.235096][T23742] Rebooting in 86400 seconds..