last executing test programs: 5.903204406s ago: executing program 2 (id=4771): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 5.838014426s ago: executing program 2 (id=4772): r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x6, 0x2, 0x0, 0x2}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd}}, @TCA_NETEM_RATE64={0xc, 0x8, 0xc1160cbda5ab1ab}, @TCA_NETEM_RATE={0x14, 0x6, {0x1, 0x80, 0x7, 0x7a7}}]}}}]}, 0x78}}, 0x20000000) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 5.191806504s ago: executing program 0 (id=4777): r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$alg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000ac0)="f8a5699a732b3154b4011926016b723e13d8a24b7fa88ffb2e4c0005ca5dfb779f3a3e0fd68376e80c4b8abe050c2e2790406cee057b51db254628fad36643588ea6d52756949ba4deb6b0f79146095cb2d15feeace7509d7c4fa7e5450be032517b18a83b90c8c10a9df275e18c25f7ab8b439ed9034233a3fac52494cd1b76f7253142edba30f85e7be114082bbfbaa5831113aabf548c955b423cbd49ca4fad6efdbd13e1f696a4b88bc69474cd70bb14b99defe08d5a05bbcfc6c060c0d6992875e3ba4e017eea02abcbd7c42c7b6d197315082103ac0839842fcb57fbd9de4940e17a0045e0c2e7f7f54ce486543c91539b6f04a9045ee238916cc7a7e174276d253cf151d36c50a52f1e4c89ed618df66e0036e449a0de1da3db6966bffcb3e2e88514413b7e143018a47d0f520c1505a2c217ececd049cf451a7089f00311b9baf8f53b6d4f067bf487c17eb1b39a958d59c170c464f16e32fd3b94943779bcdb0584d057d8550a9aad67f3db7fa43d947b2e25bfe41560ba044a539fa9969723e521849daa329266d703c7f1723154fe24a539a638b16005124128aeedf5aba2bf509fbf08fb6b97bbd2ea25ab3256809da950b59e3628ebe0ea6440b4ece0cfa72ba7f0aec2e79fe841f737ae582c00cb13914b1222373e25136358f574a7f918d908f08bdb591d088362c599d5a511ded075c7006d364f809c5eacd004e51cd3c4931a6b0fe029fb7f6377717233149472f6db8044c861f582fb0ff4627cb801695f01451b5a7c1fa3cf2ad694970dc5324572ac28277a2db58f4c5194fe2ca508302bb2a6fa5182ef6ec41cbd57db9d7059c0c019380844722476571c3408b88a1625c67e18709d6f7aa86dd9c43c839580ffa3d85bd4f7a9de9215beb31417f216320b6fd466c63371e3e016859d9e37fdaae3d22d65cd1b5b56984759aa93bf4a175de9a8f14c1c9eda804de3588a10ed1c0eb0e1b0a39c043ba0c4da9210656b5a5391ab0a7806e210cbf78abad2ea5f4aea74e67b6c03b8ee5ddf9b1abafc0cf0c7f4374069e4cd09dc078751b86d669e4bce181767d3d310339793b9f2d4671a7f8b34cac34d0d19c089a2d5fc611e99d53bd6a089bb55fc9fe655ed6395f0e1de2b109f2621fd6829677885da0415683ac94b25d41a7cae731775110d0a120759a41e735eb30accdda5306d304f0d8e0deb38671929d1e2eb8ae293ccee43c61066495754cd5f85044e8a353f9dd4b703e321f3d9042f775b4fc14a51c5d0ff14d4f0ff5206fceba71b60762b04dee77bdab4eed64f2474f499d07d92d9a44cb05fc7b4274bcc0ff02ed5b26c0484ae09cb1ba52de1b0d5543d28e8dc5a67c572194a8f18967784e0de5856c036244f6fb34bb054cba68ba7631a70dc5687097c7ddabe7f34f52a20b2debfbff4a245a227fa49819193bafe87a947a1572c6e9ab766d4e951f87f438a183063428a0551a87615b4288ec106a1594900a351cc5bbcdabee280f30355cce62000f5e10204166935b38a7af2ddd060905ee3f5a14494e653a936e01683192854e283d1137590f39e0fbd60dbd1c3c10431c469789eed1533e67ca042541e9e7606c3cac40bd9c73ed94fdd53e880068c9e9e9e19d25d5f4096a92e050cf25d877c96377d273b4e1db5e2534d80a547057e5c2f918d762b37de441341324b756deeec9a6565e9670c274bc2242c24378d3d83294a2c213bb915a88a1eaf187aac7e5d5a0a9dcdee4138f7288d4293f26f48d76830be431911e4c6af86a12d01b9a7d9016bdca9e2a8d9db8a8e717a5d717f090b002e4a194765206b1408e1df33578f733b1f7c680970ee8d99431d1c2995ce9cdd96fdb2ef1c97395ab9905c2b3460ed3c41423847c19a6f50e2f0e6a11c0de6a9f73b56d31a809356f9652218fdc58141705cab4d277d4714ad16d31a28499d519eaa5bb7eb1dd620657398bd65505d3fb4748e9eee3c794029aa0b020cf7a4a8ef1b79ee60d6b807bb6006e091b406d8e21e83335b1357a21c82046a918f9e912145afadd1c0ae31f2b01278558bea3d7cc6dd4561af26ffcb14df415c32b2abcbaf41bbda87d1c672b759762a123a2c2e4e1415bd4420e56e7163cb714e5c6ede8ecd404835e3cfa8a20a1e7427bee40a7332f061093ba42072ab94934c25b1caa35e09f4a6ea7bbc462cc97503b814cc4af0472816f6bf5130cabc8ebe55e555690b819fe7726d789b74dd5fba1d0c90e2ad07bbc222e0bdd4013882bb696ab91c00b77cb7c48f02c1afa695bf5288d1f184d864ae3b92dda3adc4702a341bf8d630949f1ffd8a9ec546365db24feef915c010e07adedcc2bebd9961b61db9fb8e33701fe13fce0c10cb0cf7eefaa9be59512c78dbc995d71bf165c387554a6cc9722c6a3b29dabb45d6e6ed63a2142115e4bf6a329b80f4b4b4443cbe04892b91f9c4c102f27b1d6a8ae60527f6be8593ee1b0bb8dbb9477843f815c92b0d8a8d8eaabeec4a2cd8cbf8df62a9cb84a92dac82229b826375efa8887aa3b84c5b36ab1034754a6df095e09a802db28b9b32b08555b6ca16a0f3d46a4c9f4ee535070405f0b334a5d8cbdd4819e9c9f2b343aa4478c875b5016b0bbcb4c8eadc4faaf492cd6a49c40ebe8da911832746149bc4da92074536095f332eb0a1c081d2eb38eaf8d0c24374bdd70553e465539761e0a0822db940a8bbeedc04fa90e6ecac04dca719d4976d1ee9f1f94ef25efb34d6f50b8f3222bef3b2e819dd97f1e4152c6bad0c31c3fbf933ee2a45c8c5a7181799aab250d6f08f60ff308bb541be7dccd0dc415200f38d7119949afdb9feb930e8003a421c25286c97ddaacfe6d9fe814ff2c3bf96194d59d5ac1ca10e2b0dc1eabd158f67afdd358a6f003aedca59db7d42d1cc75148868fd1465e13512387b0cc05b741582d0d73dcc33d87e3addee8a0d267d3ccefa6aff7c87cb7d334a1dc24a1099a3163b974e977657a8818084f2795b981d580b897fe373acf550829a569b090f6937b95220f53735f1e973a5b8817c82017d3629a83269b68ccbc2336100ee9014743e7966c4a8c9babca3e27f88f59a31dc1c984e97220621c89ab3c09ec9fa926b6f566cad63b9ab7afceb52accf1e35e36e9948a76c6569e368ed911ae99e0f66a8bea3185e60c19cd7acb7b9a73dee9c37c5bdb27f7aae567e8dad4abb1e14beb126d2d0b254f948312a50ca40084e2cf0356485d7538e3f2b2bfa2abb5996b10ab21d5c02660ed89e3a2c26e7f04bac85c423ed12145c02ae1846b0de51c129c9cda4bc19ee0cc70bfd3c0eb2d792800cb6dc64c3f15e1128f8f942e8dfc4b512f27fc8a895560bc2f5dcae953d716e0f1bf9f762fa01d62d02a78efcbf0d0d019403239cbf082bfb92cfcbe676ffff1753d34ea8c2d12499f9fb6f4c9322f551a07648814eec94d0c82314359469e05187924f8d9b7dfd66e75b48fdab9c9ce8d94d1782ff56cbbc2c812be88e0851f91868f0d5a9ce473ed77d5af1052895169d4aea68ee38541b52e662dc2c12cc3eae11877eb1f8227c782fe472e8e5aa8b14cab84266665b5b5b34c61f538c32a8a32021c310502d1e2735dffc62c741ded84f411dc837a36c97d9065b7e5490e5f9dc6224c80e26ef37e4de76bde1da0c84f4afa253d3d9cf7ff48702df454e9be2623fbad2edc5f7f4fd7750cefcbaeda4938734a9cb5c9377eabd017ef9120fe79f9b6ab6c164ccacb3f23efcec4fa4998bf9324fc55ab1ab45785a72d49675fea96904d1d141a608522b40fcf8cfd65420062726fdae12240621ec89621c5f511dfd14fe8237b1921334add8aba577a01e08a6361cfd825961b7e01b04a72668bcc0c4774fd86612c88a3a52c5c2a41a0d9f25c69341edf758fadcf3835fbebfcfb3a0f4bafb877d53d4f2f1a15145a472ba51386d9b05fc00257fa4c50242daabecbe632e000e1cf9fec0b1bffb89145183db6f8a4c1971d304fe324635db2780bba786aba091feb1c2a46be5fd4e89123ac3e564e5d3a6f08b1b655a18a0ca36742951aa52667cc9afa5179df7756eb31494b31a1ff048be3e7f9ffbedf051296bdac2e9f7888da1a516982f03c52c44a102798f5f9ef9d29ae289a87213c8879d0e8e527472f75b24ca1b9c9d631abbc2581098dd3ee3160502d27c0586b3b9e3f8853725a60c66ee01b13f740ede19c5926a09442c8e40a8721f46bac170988103a70c4a0029e75d76ee29053b2a8b5880cca24b6b36deae003a51dc167769b562f7eb2c3ae966a58efee8d400340851028d888ac4ab9288695cd1f3d9d8f30055cf36d4836044fed11b40addb8ff12deb152feb2d8f47e28cc803b813f205262da9b6c92497cbc50a27c75dd22511e8a9dfdac7f377608eefb73723ab601190ecbc08e15d028b6373010fe52c6a8278da90ac06ad9a42e802324a469b95907624e4e139462528baa047e1dac53f9346331266568e6193fd246a2914fda18f6969109f7e9683d74858c364b5f6087729f1e26821f3677f5d03106a3780c55a759545d690d13c5a67d4ff8d6aaa1a3aed8cc4e2ca9d91c9686cfac44e5cad7a837c54ced6f1df807fa55e6eeb544c6acad0c902bef546a242cf4a849f04e493902a520d4953bd611eaaf90a2831367e90db5fa5fd51410b532ef11b48251d321c5084c43a1cd7df406114024893f7e19a3672ccb82de417251ad5c266159750b5a53bed95fef51a8134528ba7d321912aedc0eba4c07d92a7b98d86851da2d9b2dd63db6144474c537f90087dc81d1a63c859580ddd5e280a07390351bfd75741dc0990bb22a799039ac12dd45bec196be5af30faaa1a2a26ece77cbc0146fb3bccdfb3f8543f2437690a67789d0fdc534fcef57325870ef3aeb2db047f2d7ca17b9b34cf9ebd162475a107dfa633d9ee28b065c6d88f7ada07cfec7dbbd38515b076bb6b583f37df019cfe897ba04f7cfc0bb36dcfc47962084dd081b3dbea7959223e74b5506a6c5d6ce8e8babfa7eba1c22f4b2c6ac363f127ff90dcea1a771613854c0ab82f0c056d652a273fe2c58759c8f0c85d80515fa8cec3b92b78e54243bccce115428e1444dafe91a1f0d081488759cbdca41bbb862fa11f3cd6f422d8ed258d272220a6a16286ba26f4db3f65ed9f0cd7cfb5af5084e155bb1e7032fe2edb6d225df92548e6dee1b10543560bf4be4b698925cc9d7a40c6601246149c79559176e0354db4454fe2132ea41aa7a7a76fb4ce13eea12e12d9ae9fc90f57b05376b0ea82f4bd98086e02a6573128a2e26ae0a61956bfe7a27536a9fed20ae9abec014a1b21e8aab1bd4f1ab92817cc49cdeb3d5c4a2bb1fb2b0b09b98d9c8a4af0a70cd1256c03c78a2a05db5bc24431db34ae6e7dc8a468ad15343d317753018886d297627e91a9aa17d8a73cf8de22ddd3209c07c9bcc1d8a1c35f195630bad048dc25b0ce93221024f649ae4401b113835712d999e4dfe324321a228f91db172dfb4e14c5ae60d79ecdb254c8d63e66987a5012c2ea88a3ed42445f04a00976ec1731c9b29917d9375655e3feb75cc0854877cee8affc763166ab7e44a0f2b365ebbe7757444d61588b0007ff4039d2241d99c3d33963f1bbc50c08f609eceebb084da4f71ef630f311682368658eb19ebbf2bbf80f58e0c6438260c2e3c48903e440db8493428f8fa18fae030594c6162737039ea5abf8b88ae798db0f2089f123a666b1a44f0b085e5887830fafd2ff9bbb84017183f506cc80769091e2eff259230f85a8", 0x1000}, {&(0x7f0000000640)="035ded963e2c910261d9664ffc4c7d2f2d881df764366214b3223806523762271ebf6acdc3007e4aabe573815047fefa9d506cecb8b7027df0b57ec1819e9e8b10d3dd52dbbe46da90ec7514568b4bf215e3c6d914e0f696a57fbe77ec11c786b3ca9e28f56866f63e76d998755343511c98989fcb997102135dbca9e7409e6602e8f3059d6ccf", 0x87}, {&(0x7f0000000700)="44a6f96489384cadd8f425ce61f444c43b255af489e6960571f69516c3be71b89e29d974b24f6444665143d3b00f98e13aa2d6f009e5099a8e55802e2e1329b0dd56c459a3a2d5b62b2758970aa74b75eb48ed87be275ca58e40837ed55705124795c47dfeaad16eb038d68660bc8290781c0ae0859b5efda81872fbc3950bb0e3f7281d804485d668d7422a2ddc1d82c21100b99c97e8559fea4131229f71fd4ee9017d426c", 0xa6}, {&(0x7f0000000800)="f417b3a78b1cd1527648da7203d5f812b11e94ebb0ec6e7e22292eb4d3c8414b305463451871f36b06bd00a2239951dca4fcf2b41732ad487a39c4b38ae5cc20cee2c5b1431cee456cbb85773a9bcadc9a51de1dc914ecf6a088ca64", 0x5c}, {&(0x7f0000000000)="7785e1b499cba6956cf307d10256eba175af328c67db45568626aefde2cc2af60911000c", 0x24}], 0x5, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], 0x10e8, 0x8000}, 0x4000) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000a80)={{r1}, 0x1, 0x1, 0x9}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)="92dfd32099d8b80acac0f65cd0fd5575821fab4f578a507a257bc753c838548f7067b1fdf069139bcf8ffd0ba66e35d778bcc663ae860601efc19368291cfb7a7c5e7cc765c41798e32addad3030", 0x4e}], 0x1}, 0x48081) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r6, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000004c0)={0x20, 0x2, 0x7, 0x101, 0x0, 0x0, {}, [@NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}]}]}, 0x20}}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @empty}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@tmpl={0x84, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast}, {{@in6=@mcast2, 0x0, 0x6c}, 0x0, @in=@local, 0x0, 0x5, 0x3}]}]}, 0x13c}}, 0x0) setsockopt$SO_J1939_FILTER(r3, 0x6b, 0x1, &(0x7f0000000580)=[{0x3, 0x2, {0x0, 0x1, 0x2}, {}, 0x2}, {0x2, 0x3, {0x2, 0xff, 0x2}, {0x2, 0x1, 0x1}, 0x1, 0x2}, {0x2, 0x2, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, 0x1, 0x2}, {0x1, 0x1, {0x0, 0x1, 0x1}, {0x2}, 0xfd, 0xfd}, {0x0, 0x2, {0x2, 0x0, 0x4}, {0x1, 0xf0, 0x3}, 0xff}], 0xa0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r4, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) 4.959218485s ago: executing program 3 (id=4779): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000004) r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x271a, 0x0, &(0x7f0000000040)) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r5}, 0x38) r6 = socket$key(0xf, 0x3, 0x2) r7 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r9, 0x114, 0x6, &(0x7f0000000300), 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x7}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000084}, 0x8890) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x3, 0x8001, 0x10001, 0x6, 0x1, 0x7, '\x00', r10, 0xffffffffffffffff, 0x4, 0x4, 0x4}, 0x50) sendmsg$key(r6, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x3, 0x0, 0x2, 0x1c, 0x0, 0x0, 0x0, [@sadb_key={0x12, 0x8, 0x438, 0x0, "45ce2da34e8b174ab0a75a2a9dd3346e8d4d210aed43312688e05565e7b42a870604b55907b7d9f5cc440a9461ae68370c0bbcf5149af3682dcbc74f89e9b0787d764ffa8a37ebd0a7e367bdbea738b3b79284c36dc342aebcfeec094805402a912ca6471c4cd604307fdd628ee60c85d749598ac313fecd1e4ec6e8dd1995db3286855f34db39"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6, 0xfc}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0xe0}, 0x1, 0x7}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r11}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="421c00000000000024001280090001007866726d000000001400028008000100030000000800020001000000140003007866726d30"], 0x58}}, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) r12 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001a80)=@newtaction={0x48, 0x5a, 0x1, 0x0, 0x0, {0x2}, [{0x34, 0x1, [@m_pedit={0x30, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 4.914619109s ago: executing program 2 (id=4780): r0 = socket(0x2, 0x3, 0xff) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmsg$inet(r0, &(0x7f0000001480)={&(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f00000013c0)=[{&(0x7f0000000200)="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", 0x5dd}], 0x1}, 0x40800) socket$inet6(0xa, 0x1, 0x100) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x11, 0x4, 0x4, 0x9}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xd, 0x2, 0x4, 0x3, 0x0, r1, 0xfffffffe}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r3}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r7, {}, {}, {0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) (async) r8 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r8, 0x29, 0x39, &(0x7f0000000040)="ff0204000000000100000000000000000000000000000205", 0x18) getsockopt$inet6_opts(r8, 0x29, 0x39, 0x0, &(0x7f0000000080)=0x35) (async) socket(0x1d, 0x2, 0x8) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1, 0x0, 0xffffffd5, 0x1f000000}, 0x600) 2.580013621s ago: executing program 1 (id=4781): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) writev(r0, &(0x7f0000000940)=[{0x0}, {&(0x7f0000000480)="672a65b775e19823d096145eb641c6bd22f498c8036aa132b4f24a6f7687f4026ed56f5113b91f226a6efc213d3ac896b488b9b640b32b10e6c7e378e7c44872b7c205719ca650349fe26b1891552822be62375a544be37c89c4db45371f9fe9028adb3d4c045d9a96f461b49b1772286397703f75fd5d2109f97d8d4d88592ef15a854b49d6", 0x86}, {&(0x7f0000000540)="fc618b0f9e49bd548b24922c3ef045b81fc94b1ac3fa804cf20ac6d4d2abdd0944b5a9100e186faad53f9c2da88f0a283860b5933ecde86205bab662fdb559715dda118083a15120cf931385179eed6007faedb1bd7d44366f7a7525cf2af7357ea741263907990dc7e0232ae28b2092da303e95a5c75cae1c7551fab995dba4d2873204805d50d490fab75b35b5c6cd8888b720b36f70380fbb2817e9766dff6ab21886e7a283a6eeb2c52f1916", 0xae}, {&(0x7f00000000c0)="e7277cd19da39d7f9157e30ff07bf8f41ddaddfa095eaf73d4dd3554c0448d3691adb4df67ed3b97600f825fbe56086fefcc9fb3d39af227cd4118534284ca72c7998cb7809515a3081e35c6c0de124cf330ff931c4d7a9af4e0ba5051b92130a57f234c6016ee", 0x67}, {&(0x7f0000000640)="fc8af0cab351cc55952e7b63add7d74860b07389e7d9431fa9919cc324419cd927128dd62ab33cf53c8f62680bfeddc64e9081df62b29d", 0x37}, {&(0x7f0000000680)="705fe406108636b20d", 0x9}, {0x0}, {0x0}, {&(0x7f00000007c0)="fb651be2faf412f01c533ce4774c4ca2883842388083b451a5661d99f5f2b2ca7ed0", 0x22}, {&(0x7f0000000840)="e63dacfa0f9bda4fdf8c3bfccd56cb2574d569ebb380a5fa996390cd7e883d449ec34e47911418edac921fcb3ef56d4841add8a26478a5aa19dd4bfa09ba5ca2b4ab29288b93fd1bf79d1ad80263b3c98814c59e71696e4c8fe7e1123d56c0b61d23cfd63221431c8726d2a16ff7146410261a9df6eb815ac54479d5444fca7d33406ca5ac45bc30f0352db070137402f67becc4fdbc3dcb24775e98e2a266b639a6c6ae116dd964792625916ef9ee67299c22cd396cdea68ff527f1c77292d5946692146f8759d80608527f3fd9d8e8e807c5fde91e6cb7134aeffb3c24ae913cf62bccf6a33b1deab6986f72bbb46a91a01f2588", 0xf5}], 0xa) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x1f, 0xf, &(0x7f0000000680)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x25}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.518986711s ago: executing program 0 (id=4782): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 2.459122779s ago: executing program 1 (id=4783): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x8001, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f00000002c0)={'dvmrp1\x00', @broadcast}) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000080)=0x401, 0x4) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xd, @empty=0x1000000}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) sendto(r0, &(0x7f0000000100)="b5936cbe2fdbe23abe75b3467a73281221d8a007341d0ce6c71ab59ece8e494737552eb5ce7a4e505e126b95dd8c8db925ab13636008aad974da2dd8a7f26dd6010f084e4d1f6842fe4813b638e13680cc07e9be4b71b9584840da50716e5228879b302c3a8dd74febeb02f27ffcc6accab67212f11d67b75e8521e6cd7e2c627e5e095f46d0c7cb50dfeb2d873dd3c954e7ad0c77d644b91b901e8252", 0x9d, 0x48000, &(0x7f0000000200)=@sco={0x1f, @none}, 0x80) 2.319986149s ago: executing program 0 (id=4784): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, &(0x7f0000001700)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x20}, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000240)="1b448dac9204daa8dd927a231145e8b1221e9cdd5877e4c7434434ca252710fc3722610161e2609d4e3bb219d5a7842565845411407bd8497f4e958025ba2d7dc5aad54d66a6eee6ce301f22872656d2645c32df87848a25deb10b1eb7bcbce907a7fe284cb13a08bc7f441ba3f86b03cd57d15fd12a9e6a2c86f2c697711e6837634b558ba8b1338b1fb653e4ce3e0981de1eb34dc2cfff8a5741907abc1f9df545924bfd4509b4711da4cc1bee490f1e35a3e4b2c15f871bd96d7c1a1e2482e91a8f9f8731f36de9d5e6021d73bff24c10e8132578332a9c1a18c4791875921b58c3ee", 0xe4}, {&(0x7f0000000340)="bc577218eda97ee4d3598140db97151db32c09fecb41eb8f3d74b633f70e21d4e9a910965b71f9747a5eacf6fb01cf1fbbe6a52b0364ceb02377cc94bfa97dac0032747cf9b7374f87aa426ee87b1de65499f645e28412e2e4cc369f4c532f2b9fcfc7ba21f515967755a6feb9183cffdb0fbcd29b72afac6534b0cc74a1e569c3d25ac0c77837", 0x87}, {&(0x7f0000000400)="a2909b06a802cd0895402d88228645fc8bf68a13184b98b90aa0c08710a5ecbcf16a404b8ed96a2ad036dd7b7bd8ab2f2eb63ab1cf405b20955f3b0f0ac614e4740ed3d8e8b2c2408027da9883d0e59a2d411259991fea901fbacc1fc18029f7803be186550a8f78e8989ab86260df3d783e6b5a5a9735bf9ceeb150b8dd06152d4962d798e4ea9d2dd661ba02770a3510edf9f365f53695f690f4aa51495396239b802eb8bc8cf654671c50331d2d522a21f0203fa2aee8030007be1ee770504dc902d15a", 0xc5}, {&(0x7f00000000c0)="7b2a705083f6c71c91f3672c94454f376ff71a0ffe039e740a239d3aa8573450e5e8f4b2", 0x24}, {&(0x7f0000000500)="bbe25391bdf3e4dd6d8adfe4e05b60ce83d18e24eb86adad080625e5ef8834030226a3f27d67465008bbaf16d40d48ecc9519c3606ec62cae64f8bc67bb58d6b96913fd1e73974a89a4af2bd04d24d3c07620d3dbe3cf51e0c2bb316f7cbf4cdbbe39d5a8512f06f42849bcbd304869d3c6c8d133df8044b7082e6523d3e2ab88d42d5c68a378896af2e3c7c68f66be1bd5c2c8c2d2a5a218d012d686e6f55d34ba77847a8e14d550842f9f14f0312963fd9f49fba52ec10100273ab13ced3326e25c322b22226a561dd56859010256a3e3b3d4769536a3fc800c77a1f33b103c9143c34af5817114f3c68d4ee34574f485d6d8a7d4a477158353a39059f3b7855a80132bf0e920045e74159ee263a585eb2dd5460dcaecb82998d44b3907fd79b189038a29886df228400dc1d3e0fdf45700f1e0f64bcdf474e9e3328b7f11423689ef066318b3192a17180dc122ce212954b580ee71584646de5656cb03782edd3d7ae232800c779cdf32b4ec3abb9704c7ea40387e0f80482b224ee5949822933f6a12c8990bd5611436d62e32ae6aaf883215563a1b366e60cb8f840a29b0f7496dd5c6e867ab6ec3c3c7334843a485a7b502f5aa38dd5301c927420e8acc481ec4e39da3d7d2fcbcf936d94f7cab3a9074978bdb29e8efa770ee7f0ef63e37da698a2008929dcb6b21732fd3ac631137613cd9443b43f259d22d7663f8d60365660ef7280dd68e82ae48a4ff3d19cf12830eb7b9b8854ac04928d0b548d827fa3fd93038b97cf83a14b639b01d025641a62935c75aa5b4df4506013052c7139d83bb255b3f34e3f69ad312b56651e4606d998bd65dc177b962340d6c4e8c46526084bf2c4820f4351c5c1cd7fba537bf8c334d1d608ce9eb3e2b382c7addf133efc0c49d8e8b4b4988731364512d4c569fd8d8e53760ce1d8bf22ef4ec178e9ca6a5bc90c3cfe58a3108a457daafe1cb25519518c93a66a03330867013f1ee5b400631fc9e61271fbf096fbbd2519519529473d26ae00151d0cd2974c850d89709180015361cdcb76e00553d1adbf0f09d4c3fc21162a091f208788d0856ea95a1ff41ae94bf63916ed26e9fc7f6654d610b3dc8290e0dc943db35e8261f65f14db521121fd66ab3295a2b37692c8c0c60c51fd43539797fdc17f149ecae46199cabaaa6dc4e6c321e385b7624e89dec35685fac60b2989786e4d6da4ab0d1f79c5e72abeabc459d584497b2f229ba2b987e5fabe471c9c87045640a51ad2e4b39a5bbbb1f88ccf7ad020c3620d1def324e60c8291f3652e8c13f224a687b72b6d02e19c0e6187d61b4d14ed16157c342d852704e70a9e3be10c1c1c76a7dd5cbd67d1a190660999552f7b320728c9d8ab8884318ce68c595ea4ae07ee7590ff2c1b3d7fb7cc043827feffd7ef67d91aac5f522b4b947da836f20a7efe02156ed65424977d803664692540bc318e0eafa897998a8bf7b13cb8b0d0f96c00153a30feaf159b25baf7001d1ab29350afda88c9805b0b0f7ddb91985911759106f59680dda261f0a49af2fbeb9dbd0dd5b75675efe5fade984e6f849c445c284e03eb3c806d82ff4536e03be403e409d364f644183b31357c8eb63909e09b2a23ea04d8b70918ecabde8eb9f5710ca7fed4647f6d0650c458120dae326f0d346f62ae5a313bb785f9f0019ed958868af814b4f8d94f5d862aea1a28a953796c77dcc8dcb16f35db4fba97fde407b1be5769800a75422e8a4137b49d5be600085ca999601602ccd83014cc6218ff252adc20d8050074e075d9803a46f3ebef7e047fc068e015fb312ebea0eb49e51edfdd4ab07b7cfdc1d42069a4ff9564be1fe94ea5ea9437ebb3077036286cb35af12977cea4c119f59c779bc42991e3037be7a8f298deb667e7b6ebdbf6d573fd76919441c652ef151292a6a37b88e3f497a387a6a82484955e600720de14644ac175af0f28f4b96b80c8891216140a1359fb112a276628019be8a5d8d170631d172694bf24acec32825c87f68ff3e21f52c19b700f164944cd06764a59246747ab1094cafdf6a1fe501d70e4d8691419688284733794b3fb9313733ea1ebab8d3398005b187895e10fa3bffffbf835b4eff9910f3bb594daeb81fe49c0d37cb7eefb819fa5e2b80631f6bc28be86bf86ec563923b9910ed6685be4cd4f3409f15bb221f4e77dd720897d0fcaccf7c08cfc2c9aa2921d0d53db7d85891031ac8d87f884d72a1c212e780c5614d4205b28ebf05582fc2478d5f9d4af9ab3f1714adc8693f854c42a4ae58ffddde675c38612e567f8665dd06f4b870bcbf427ba71f3374c2f4022b08c569b28c7f1c770645ffbb6adbe3e8fdf2687c8a63cc8a76ac33483daaa7261277f678a4e31f2e604141cbd258cd71eece72d4f83d21da0eff50a28116fe51117ed1b75fae6ad709f95af0bc15b6b89a13386fdacd8ec5d1deccd78d89b62d5f97821c9ac388276c5a12d9ce9121181828cee2279f57d04edb3b45e107c42165932fd8fac8c2fd0a11751a9dbc0d1aa3df031f85b02171d4a8f011b220d08ee84f142761d76a2bd7679387afea656a3a2604404fdaed4b98ee465bc9527d43b97a5133212e50631b4ea3191e4ed3cd8f95e8cc8c82dd35575f50cc85a836104febf8a0ef68eafe0ef5f5c470ce87abf5b699430d927cb94a3535d95e375642fa49fb52bfb6168e5da5b41ed26b3881e6393c6d15134b512719dc7ba6b7ec8342c56c24bf2381fdc13527c272ca960ea48ee5b437113a5f06c95a85e83787bec218f8dc0bb0cb61248837cb0c045e48a6f87f43c441f4af8321544ae24c604c71a69cca913b0d2ffa718fde7a03eb36461d22dfaab2cabaf9dfc35dcb185fe5413df04d4a26de78c57bf4f346d36c596e36fa947e8c0f3777bc1bc2ca7d262dffa4b7126d0b4163075cd138452c6c1048198748117f9122fe10e899393774c37a346204400e5e489a9788574f85abcbf2719936cf2e651ce20b07bc137d7a5431af00ab5875eed6a31dc2e3081eb92476d5aa4574e3a98a14c9171513e7abf9b48c8696efdc0e85880dfedf037f082b80b22154e4c2d0df66dd2e0191742e4b6866fe9ebb5718fedfe61e35ab68ff7ae3df0f65d0fe3a96ab8a9f6748be0c3abcfd8dc2929f6e73c03420da0c4d148eb27a88b59c4e2c738158fdfabf0e2f660d10ab0bc3e0b9fbf483ddbe26c6355e3fd923262d5ec684dc2db9cd892229feae3d96c6c3c9e02bfb3aab95b699894eb4b312e88a6c01ec78151d760945247ed73fed5942e9641930d1add7d78035c040381491dffbd11342d4345ec1fc59cba8ca36220b9aa6fe7d10eab62a5b4f8ceb481789a397deac24d6dd695e13a6115e224a93fe922c702e5725a47921971d3334ce855b7ae6c37f942f7504d9ada1748bfc0b1cdf0e80f1a851c7ff7851e61fb8cdd670dd28a673cf68c83281c3c1a5d1e542823526ec2d09f64c506442bee150338b20998c705d30b3a3dee2784f65db7ffecdbafd498ca04e0f35cf6901f156409a540f58b9a8f50e7f1162900fd7adcd486bb2dd89183576cf65f88f16a04a7dc01e0f31e014d1fe837513497723abfee249af5b88b903f02c971f30ce8c93f2ced8fe28e7f456c093cd3d574c66ad901e9956cd2575b0e0297a688ecb765683b19a3698e83a841c902438cda667dc02a5cded2bcb85d2b2af61ac32a0e9caaae0d4d6549fdd416eb6ce8a4191cadc9562af8110a42819c9233dcb6c144758b6c8200dc9a42c4919ef219f4e97c1ea463c919ddded2050cc74a170e9f6bbfcd30e8aae020d91d9418afe743bcc1b81bc0de4cf25c23efc26b74ddd4cb6333e07b571e75108f734c609cacab9736de1fb8c000f6f308d2014bbc29707ef240f20f4e277441113a3b562f6e1c91d8d78ec30776394e1c6a7d511fe198d10c2f801b10b3c914467463707449443f87c9fe83817370d11c73206aaec748d2d563311cee184450612586a39eaa45aedcc1a56856d4771e91b1530cce1e2cc0ac6ef622c6dc5c94e7d72aaa038a9cf9bdb2262469153328c6b1742435659970c808a022f04947107f93f9f3cd18babe1de7f916eaab50150da89d7244f58d8f545dcc51fcfb16e89b9458fd3696149445434b2f9b18427f976da21f16f57608ecfd67c263763b11fc155ae8d70fa3c92c1f11edfa930ac7f1e7b8f6ce64e012715320b5fa5c37c4a981b6585caf4efaad87dd206489e587f601dd93f2a62e7eda73c675706e7d2eec5bd96189470397b7a211a3dd4f0f735ba646bb5da48c8e9d65b4f5d0d9f0a08b02e700793c2db33e1a73b83e63229bf4e5d93886c86522448b02a09d1a4a76b417ad6e58d65c3f208d632de88deced1a76167a00854a54c440cb4ab94c50019df2a94422e71f2a3b79337cede4a4fe284f4421098c8bf6fe559e28156c334465e6a9bb856a0d0bbb87f6d4cdf5f1c2a0bea6b365c025a3874d04d696cd29cf6a69a1ca562a6a43fa2d5fb5f769dd7e4399a6e093cf72cc09bd7e64d30496d617d936a45293cfec86bd17b4a13622e36f27404103aa39b265d6bd1f3b6fed08ac18c315df627e0cb04aa95bae1b667a463623fa250370936038f45f214114285c97a0cfbdf79f9a9d7ee78f9f4e4d5f33e913137897e66f5784e30a4ebd6fe890efbef6a2a1514e36a9268332c33624804d6e5bde5df780e72e95dad6b383b20f414665e5325f9c006443d2b1841d5358c5535997d9454e80229cb1456cdf0e1755dc35e82d27233c5313c2c0e29a6c6c1b43c935cbc81b49cb945430a708fb629bcfc86a4dbc03c0ece92fab863d4fb796515882de3cd27eec94d4ed125662e82762355dab6f02653cb55bab0ddbcb80cd767fd872eb06b2e050268243fec5557e43aa7b30b9308e2fd1e78a162d6d879c0d6c09ec0497e536e0180de846a287591b1d69ce68479a5eed97ba8b74eaa1398b080b6ce1c25a8c9ca646c503f21e9f236a804997b5d6bb588f7763b0bb95fea6b7c524007c9805414b05ca5049648ed1ea132c61027e6962edad598561c049e67d6b92b3d291575f20ef7a87dfa646a5bb0b2d48a518b44efa54cc3b89b3dcd5391c03b12a1fc6e9b4412eb309af2226ec90ab610cf0a1c67a0054e02ab46e1139da64abb488e148e49cc193156f432bccf5638ef635cd83d2c75332fdd13bc44680df70009ed39d7649f60cf1675504aa2edf0d6d6fe20a8d62d9ff70e90ea162ca9800334330776ea80b0f79be2a019956f79d268ff66d3e1b37421704999f4d36f737b7962c47f743bd5a9344315782d606f7c01fdc0bbe0dffaaf7512e0c80dd8f61ef949f358454e44adf545303d13275b0ebffaa3294001433479bb58fc72a0315917355202b841e49d894cc93095b95008739afc9e27138bdbf60b4cfe5945cdec6d93b889e4d9a62317a836fc5efd99f741d4aa30d4c45f4de05da30dace7bb0b8de1d13604b78e4881154ac8320abae4ea8f75689028e7de6e2c245af74870ac891e3bc1537603d711a7364b3eb3bb2d26daf748bb7d2e61362dd9f0a2afcf46614db985a864b05423f17a1b978e06b8064d2a64efa574965b6caae9c73742d9d8ffca35fea31e806c6c534899fe1cb4c9656f3485142677b84f1e347652f12e6f2244a9de51422b4a2d452099af2fb08a47f4bf37d810d02299589da5102e966acb4b0f8c05462932eb3636a3c4c81d71c49fae08220afdb9ccac2ec541d8c63cc5fc0c4e80ed988b5ef6ffb07e333a3c1454caa41b17bc164a22", 0x1000}, {&(0x7f0000001500)="03cf5be19c7c7cac7db45187bd239a3fc947925c6d34329b285137b059b6b22d1abe9f0b9e0f9c24048037d3934c11456319774369c8ad3fc347a86c81c61b731283643fa425c5362d7e265c4bc68cbd5898921f4c16", 0x56}, {&(0x7f0000001580)="1fdbaf0e0c046af1e5439ccd053f64fa29c5a08989a2773920d2a53d5fd16c1d4b92f1450cdbd3a1a7b475e96f76dbd50f897dda74f37e4811e4f5666a3a4ca6c9c74e7ff1efe3b96443ddf4b9009e457d6beb0cee8aae41558a475f711e1281203f0772ae2d91af389ec31e585e98a7274673e4fb8b96e704958b73213c2bfc54b91c0262e023c8fd50793b8a2eb91aa5df5ae6429d3f1441c5a299dec0c2a25ee22553c96f23f9ac9c0193c90679c44c002bc24feb3ed205cd1b9d7c5b775bf3c63250cafb915ec39185b4", 0xcc}, {&(0x7f0000002680)="491d9667ee6cde0d3bdab84334df10e0597e3c8fcf05ec439f7a4fc946220991dc4c94719c16806b7b851e60ddcb395012238a735ba40b5aaac62c4ba930ef3d0fe4c811ab6d099d6133b9eecca1ca9fb1db8669ad35715e83c702a3dc411760b59f61dcba781696b78c372add79975eb9443badd7d1bc642ad1301fb6bae13e23b870fd99bda5aa11e03f3a26af362e007bab45dbae9d59f5a3a244cd08d5ce67a511b9220a3d3449b686c9270efed22f0393f05dab33cd70c0045fc171c55bac69c10d659b61fcd89162bfadc09e5430d2f5fe8f5c948f6d83630a4b772f03edec8b2746ec789ed484f490c0cba1174ae7e658c9686019d43dd0182a2982a2a18ddffc68f38fc4aed0873033bdd68d7303e94396b3adb6d3779fb550825ffd78e5dc328f7f84207ddb8fa394ea3d214ef396b6fb6b6d833ad767badd5a78b60563ab4796f5e4d5a23c229a7fdbcc178e479421c85e9a245b013e58fd69c6cf1fe9ae1ab5bf7bd477fa0a6c6b8981daa85d0be3a3d5eb28191ccbdb4fa2b0c4dde0a18773648f15fdbdf17c354ea5ad5eff677f099e27968f547c0c4066143157c61b34cf7d26d67ac849e0a39f74f319f99657c6fedddfdbfe2b6f389ee9d3e2b8806d65512a7bdf55b56bc9fbbe6c2573b740ff557f1b601b6e5679ad5fe3d29bbe02ec190bd6e4f8cbc27b698ab1232df4fdd6737e28d7724712e91e64493e905acb5454ff481e69c8443a67557ff75baae25f481657c1fe49c3ba6276f033535ecf8634f3c2f7991a38931045015c5a0a2ffcfea37ecd19dc236d9a63026d4e1f5906e6a93f8808f3043738d2d3aacb95fb129287429833c2d74d0252163525ae828da66bd5fe144573380d4a1f4d5b787e1fa1021a4fc7c4508f751b5d273ccfa7fa244167ae377da9a788f3c2e86753fc2b7fbf3adb2a089bac258bb592261113ec133b89c9494248ad0b05c60cde2fc96940dca99e7d6b2521ba002a927bd551cfdc94946b132808e9cffda2181e66583f21b5544d0f746b25aa3ae124957051fea4ff91fb9f569406b0dc5f5f7de199b18973017a873c98ca5137f15634e7170713a8c8de5d3b6f21e7f1934cd281b77787226f0822c989b6ffc201e8b8680f7dc045efe824bef78359b7a7c32951ed2c1ac361455ba365b0c31333eee782511c759d7702c1a99def0fb2aee954a7e8c267007e7c59201e2ebadb736189c8feeea15635122064f694238fc6191e6945363b5d3f4c9eca95f6970bc2052a8e08fea3c17ff6de6a593bcc966950bdf3cb1367a77c3e16f25a031f3ff82593aeeaf210556176fec48776793c1afc2747d9718638978a08a13fb274db24afbbf8e488e41453a3a8e9d7afa395a9889d5e7926bb05aeb137ee78ab9994da82b9a5dabdcf36b3123f8baab9cb5898e18c157aef263b8fe677ab97fa1ae134257bb1b017d760eec9c367e0383f4451eaed8cad16e4f384c60acd730e0abbd34ccd3fe708a10302c5bd8e9385746ce874a0f96864fddba50a577a38a5e23c8943812b3e0737f1a759101d1fcf3a743760e3e558c59b9d74ea4ad492bb5358f03f441ffb3dc1af1ee7459d5a858339d2ce0b6c274605f818345ce41e580a13c31978eeef792afd55d966d75da63b99671d105a8a07a2218e98d302d7f39fcf04b77017fab1bca73084311b2a93d5f3eac4bb8fc07c7952ed9438d51189c88f7240abaad580dd5b36acd07bd94dfc932980283918868aff641a68f9784cca00bce65845599d6722b4e62fe196009e5c7d41d6b6d15a7d0912dd1ada38d04581ebbef29f028e2baf04d929c059a2ffe0ee1254441bf0f380fe6b34e9889b3869d7cdc03e5b89ab795e97ee12b6430badd3f2b3267f08bef651113a29b43dbf56907de5f1f70c648fd64561eb81e882429c06241adcc77b386c2e96a9e770072bcb6c47fbed6c6d637cd225b9f57aade7a5c2c1fb96826031b741b1cf535a4885218b371be9e88cf4e03cf35467770fb2d7ec6b661a0a3c8b42b07dcc8721ba6f884fa0617700a51924504270f1e7a54db8595e58d961b23a238aa44f49e46f4954748cb97e62d3af650ef82e6a35198fa990a9f0e010de1ca8d57666727158bf99530e3038bc4809f54285c13545e334517ad92358c045e460cad88ae4b640978111f0c0a8e1afde8011a1a250b10d607d1205cb1189c6c33a0d7b6872cd7d2490a90b39cd00054724a7550c992b30e2f2742c3964168f592b968667be50d8e52f8d988de34f3f7208909de4e3809657371c9360e01d47f4754df1f8e69bcab66718b8d431b3286a01309577e127b55816b8f8f411d25ff12a869f99c8003580337202a804388662f674d04454c8c630fac1849f80e7c332ff37b72bfa4ab498f55817a96d52fce3e553ce9c9bc296f1cf6c34f826129d1a046e24d52c453f968cfc795a969b10d0226927ffd5cd1d411760e0b400835aece4c1f217877449dca9217f99690a0e34f50facd40cae0bbfdda9ae9938daded7a2c9455db5d414e7ebc191d3d51467766892e5021ebaa92a5b3ca0b13d22349d73b9e7b32b19417fa029bcdb4ceee5fd6f0a8954b66f61a6a5b8e323bf57ff69618ca1cd59642cecc84aba85d6cc39433f5b771c675cac5527064469e76158524f236ad6b52801811529bc95ee0ccd4ccd9e0d4b9be67cb9c9bc5dd4c5253426d636191e121a918c26d6f6537ebc4bbe88199956ddd3ad0973e69982b1c32ed774309d8482141e57aedfb37bace5769977602338147c8c519f1973f471e98b68127bfcb60da2ee615d1767216593761aec29281a4fd92ce5594ef810dcf7ccc811d3387b5a1e523fcd4f7bca9c8c783b28d7165a8f962720c914879aa3a69651e472db34f5c71d940f7d0a259addf40227e43936445b21cd414a1a6b35874f8b000ce12fe68d04fe9fe8f61e1310d299ab6ce851e845a8ea0f49199deb2a0b8dd3e571fbc60e2ffafab4e81ce00861f5ace74ed6133c987e67a16d13451bb0990d17e55cd3a8f32e6618c6ed4b963fd963f1c5bb88c2887f931bf5cd1fb5cf075a49078019190b0c62d4f62ad4ca6c58ce2b43b34a43fd8301520f5b6a0d1677550e8057a6b5b9dd960b747dd1f135376712158004186b5673423f9499f3d9ece769590ad4de33f46958eea5a799538d98a8f3deddc2fb0419550c79f4c584a0a08bc3f01a845a60585cf6fd486259c23ce2178c43204e4c0151eefcb160be7873df0310a5442f1c79e0bef5ec9f8a7ba4b20f77f68cb9ed004376303737f7f8704cb9657b84f2aecabaa4b106455871f4280cb7fc04cf1b5f7f9df6a26efdb75b9e836fc63122510b8fe383a8f95e019d7fb97ea9d2ce0ca3a84d21f6bedf04bef14504ab27248440f8754327ad92182cf31a03", 0x96b}], 0x8, &(0x7f0000000180)=ANY=[], 0x18}}], 0x2, 0x8008801) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bind$unix(r2, &(0x7f0000001280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000000414010027bd7000fbdbdf25080001000000000008000300"], 0x30}}, 0x0) 2.270925166s ago: executing program 3 (id=4785): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x94, 0x0, 0x1, 0x409, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) r2 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, 0x40000) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x10, &(0x7f00000000c0), 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x20, 0x13, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="6daa0000000000007910080000000200000000000000000028ec9d44e33f9892ce3c587b601a2181270f0565e6f8e6923eac716a735dc2c97c6e0bd20ccade0f45de95bb29f5559491d43a0c408f3923d157d2a1dee9000000000000dc4933cee53a5dbb565295111d70ef01d9c3fcf42fbf09c9fc98a00d42c1e22545b985ad4191fb284f7b5fb2b7c46714ca6bb466a2388276c62f201ab7a28efcd3c39c944f95f6e10262087bfa8c8ddf07ed6e41804d809850756e11b7df5926cedfa584f4bc3529218ff5050c0af98a7d5a7a6ebccc8cce3b66b7ab0f9c0ef81d30b2bbd05bdc582587c41710d0c803efa4f7b07cff791122e300f7"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r7, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200101}, {{0x0, 0x0, 0x0}, 0x2044}, {{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)=""/213, 0xd5}, {&(0x7f0000000900)=""/242, 0xf2}, {&(0x7f0000002e00)=""/4095, 0xfff}, {&(0x7f0000000340)=""/240, 0xf0}], 0x4}, 0x101}, {{0x0, 0x0, 0x0}, 0xd}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000540)=""/129, 0x81}, {&(0x7f0000001900)=""/229, 0xe5}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4076, 0xfec}, {&(0x7f0000000600)=""/135, 0x87}], 0x5}, 0x3}, {{0x0, 0x0, 0x0}, 0xa}], 0x8, 0x40010020, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r8, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000001800028014000380"], 0x44}}, 0x0) r10 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r10, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x2}, &(0x7f0000000080)=0x8) 2.257789957s ago: executing program 4 (id=4786): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket(0x1d, 0x2, 0x6) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48}, 0x8) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) (async) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x134, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0x8}, {0x1, 0xf}}, [@TCA_STAB={0x110, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0xf7, 0x7, 0x80000001, 0x1, 0x1, 0x9, 0x2}}, {0x8, 0x2, [0x1, 0x2]}}, {{0x1c, 0x1, {0x2, 0xb, 0x5, 0x2, 0x2, 0x0, 0xc4df, 0x9}}, {0x16, 0x2, [0xfff5, 0x8, 0xfffb, 0x9, 0x8001, 0xfffd, 0x401, 0xf8, 0x9]}}, {{0x1c, 0x1, {0x5, 0x4b, 0x3, 0x9, 0x0, 0x240, 0x6, 0x3}}, {0xa, 0x2, [0x3, 0xf000, 0x4]}}, {{0x1c, 0x1, {0x7, 0x7, 0x1, 0x7f, 0x1, 0x8, 0x5, 0x7}}, {0x12, 0x2, [0x6, 0x9, 0x0, 0x0, 0x7, 0x4, 0x0]}}, {{0x1c, 0x1, {0x5, 0x20, 0xc, 0x2, 0x1, 0x10, 0x7, 0x6}}, {0x10, 0x2, [0x6, 0x45fd, 0x1ff, 0xaa08, 0x4, 0x27]}}, {{0x1c, 0x1, {0x4, 0x6, 0x5, 0x4, 0x0, 0x41d, 0x2, 0x7}}, {0x12, 0x2, [0xfffc, 0x5, 0x52, 0x5, 0x1, 0x800, 0x1]}}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001680)=@deltfilter={0x2c, 0x2d, 0x1, 0x70bd2c, 0x25dfdbf7, {0x0, 0x0, 0x0, r11, {0xb, 0x19}, {0x0, 0xfff1}, {0xe, 0x1}}, [@TCA_CHAIN={0x8, 0xb, 0xffff0000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) r13 = socket$nl_generic(0x10, 0x3, 0x10) (async) r14 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r14, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f00000007c0)=@newtclass={0x878, 0x28, 0x2, 0x70bd22, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x10, 0x10}, {0x5, 0xc}, {0xfff4, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x7a}}, @tclass_kind_options=@c_sfb={0x8}, @tclass_kind_options=@c_htb={{0x8}, {0x80c, 0x2, [@TCA_HTB_CTAB={0x404, 0x3, [0x4, 0x5, 0x3, 0x3ff, 0x5, 0x80000001, 0x6, 0x0, 0x60b4, 0xa, 0x33e, 0x5, 0xc, 0x3b3b7d5d, 0x1, 0x400, 0xfffffffc, 0x99, 0x9, 0x101, 0xc, 0x8, 0x3, 0x9, 0x5, 0x1, 0xffffff01, 0xfffffffe, 0x8, 0xfe, 0x8, 0x6, 0x9, 0x84, 0x401, 0x6, 0x8001, 0x7f, 0xd, 0x7, 0x7, 0x7fff, 0x7e1, 0x2, 0x6, 0xff, 0x8, 0x9, 0xfff, 0x3, 0x1, 0x1000, 0x9, 0x9, 0x5, 0x7, 0x4, 0x7022, 0x842, 0x3ff, 0x4, 0xfffffff0, 0x7, 0x8b8, 0x6, 0x6, 0x5, 0x2, 0xf4, 0x7, 0xa7, 0x0, 0x3, 0x0, 0xd, 0x3, 0xfd8e, 0x3, 0xa, 0x5c1, 0x3, 0x157c, 0x146, 0x5, 0x0, 0x5, 0x3, 0x4, 0xb, 0x7bc, 0x3, 0x1, 0x8, 0x3, 0x2, 0x1, 0x1, 0xbd8, 0x100, 0x6, 0x1ff, 0x1, 0x9, 0x8, 0x0, 0x3, 0xf, 0x6, 0x8, 0x1, 0x4, 0x7, 0x8, 0x6, 0x2, 0x3, 0x1, 0x4, 0x80000000, 0x2, 0x8001, 0x1, 0x70, 0x1, 0x3ff, 0xc, 0x3, 0x5, 0x5, 0x4, 0x6, 0x1000, 0x1, 0x9, 0x6, 0xffffffff, 0x8, 0x9, 0x8, 0x7fffffff, 0x40, 0x0, 0x1, 0x4, 0x0, 0x7e53, 0x674a, 0xdd, 0x0, 0x58, 0x8, 0x2, 0xffffffff, 0x0, 0x9, 0x9, 0xfff, 0x8, 0x33e, 0x6a, 0x3, 0x5, 0x9879, 0xe476, 0x8, 0xff, 0xe, 0x1, 0x4, 0x80, 0x1, 0x0, 0x8, 0x5, 0x6, 0x9a7, 0x9, 0x1, 0x8, 0xd, 0x8, 0x1000, 0xefdc, 0x8, 0x4, 0x3, 0x72e, 0x5, 0x91ad, 0x3, 0xfffffff7, 0x100, 0x1, 0x3ff, 0x4, 0xffff, 0xb0000000, 0x1ff, 0x80000000, 0x8, 0x2, 0x3, 0x1, 0x81, 0x401, 0x5, 0x2, 0x4, 0x6, 0x1000, 0x2, 0xd3, 0x1, 0x1, 0x7, 0x0, 0x3, 0x400, 0x6, 0x4, 0x8001, 0xfffff9d0, 0x44eb, 0x3, 0x8, 0x4, 0x401, 0x80, 0x9, 0x9, 0xfb, 0x800, 0xc, 0x6b5e, 0xb, 0x2, 0x1, 0x7, 0xa85b, 0x3, 0xfff, 0x1, 0x3a0, 0x81, 0x9, 0x4ea, 0x4112, 0x1, 0x2, 0x1, 0x200, 0x3, 0x1, 0x8328, 0x7, 0x6d46704]}, @TCA_HTB_CTAB={0x404, 0x3, [0xfffffffe, 0x81, 0xfffff18a, 0x1, 0x6f675299, 0x2, 0x6, 0x2, 0x7, 0x6, 0x5, 0xffff5693, 0x9, 0x9, 0xbe11, 0x1, 0xfffffffc, 0x101, 0x5, 0x1, 0x2, 0x9, 0x0, 0x1, 0x3, 0x4, 0x3, 0x0, 0x5, 0xffff8854, 0x3, 0x9, 0x200, 0x0, 0x3, 0x7, 0x3, 0x8, 0x9, 0xed, 0x3, 0x10000000, 0x4, 0x1629, 0xff, 0x6, 0x4, 0x8, 0x2, 0x1, 0x2, 0xe, 0x3, 0x1, 0x5, 0x73d8, 0x4, 0x8c45, 0x9, 0x8, 0x1c70, 0xc, 0xbbe9, 0x6, 0x7b7d, 0x1, 0x9, 0x7, 0xf64, 0xc67, 0x8, 0x4, 0x4, 0x9a4, 0x9, 0x7fffffff, 0xb, 0x4, 0xb, 0xff, 0x80000000, 0x1, 0xfffffff6, 0x0, 0x6, 0x1, 0x2, 0x4, 0xfffffff7, 0x9, 0x8, 0x2, 0xd61d, 0x2, 0x28, 0x4e71, 0xffffffff, 0x6, 0x3, 0x8, 0x40, 0x1, 0x8, 0x80000000, 0x7, 0x9, 0xb0b, 0x9, 0x4, 0xff, 0x1, 0x2, 0x4, 0x6c4, 0x0, 0x3, 0x60000000, 0xfffffff9, 0x80000000, 0x9da, 0x0, 0x1, 0x8, 0xa, 0x10, 0x0, 0x4, 0x7, 0xfffffff3, 0x6f27, 0xc, 0x9, 0x4, 0x5, 0x9, 0x2, 0xfffffffa, 0x7fc, 0xfffffffd, 0x0, 0x80000000, 0x0, 0xfff, 0x0, 0x1e3f4745, 0x4, 0xa, 0x6, 0x5, 0x0, 0x3, 0x0, 0x5, 0x1, 0x3, 0x6, 0x3, 0x2, 0x4, 0x8, 0xb6, 0x0, 0x0, 0x2d, 0x3, 0x6, 0xffffff01, 0x2, 0x9, 0x4, 0x9, 0x5, 0x6, 0x2, 0x6, 0x5, 0x3, 0x8, 0x1000200, 0x8, 0x6, 0xffffd2ff, 0x6, 0x2, 0x3, 0x3ff, 0x0, 0x8, 0x40, 0x43, 0x3, 0x7fffffff, 0x1, 0x80000000, 0xe9c, 0x400, 0x40, 0x8001, 0x6, 0x0, 0x1, 0x8, 0x3, 0xff, 0x4, 0x9, 0x1dc6, 0x4, 0x7, 0x624, 0x6, 0x6, 0x2, 0x0, 0x8, 0xead, 0x693abb8d, 0x8, 0x7, 0x0, 0x78ee, 0x7, 0x7ff, 0xfffff800, 0xfffffffd, 0x5, 0x769, 0x8000, 0x0, 0x9, 0x7, 0x101, 0x80000000, 0x400, 0x4, 0x400, 0x0, 0x6787, 0xfe, 0xa7, 0x57, 0x6, 0x7, 0x8, 0x8, 0x8001, 0xfffffffe, 0x2, 0x9, 0xdf, 0x80, 0x5, 0x100, 0xa, 0x400, 0xff8]}]}}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x40}}}, @TCA_RATE={0x6, 0x5, {0x7, 0x6}}, @TCA_RATE={0x6, 0x5, {0x2, 0xce}}, @tclass_kind_options=@c_ingress={0xc}]}, 0x878}, 0x1, 0x0, 0x0, 0x40044000}, 0xa0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r7, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f0000000140)={0x14, r14, 0x2, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x800) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000380)={0x1d, r15, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x20040050) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffddd) (async) r16 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r17 = openat$cgroup_int(r16, &(0x7f0000000440)='pids.max\x00', 0x2, 0x0) sendfile(r17, r17, 0x0, 0x9) 2.176085478s ago: executing program 1 (id=4787): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = accept4(r0, 0x0, &(0x7f00000004c0), 0x80000) bind$can_j1939(r1, &(0x7f0000000500)={0x1d, 0x0, 0x0, {0x1, 0x1}, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[], 0x6c}}, 0x0) sendmsg$nl_netfilter(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x50, 0xf, 0x2, 0x201, 0x70bd27, 0x25dfdbfd, {0x2, 0x0, 0x1}, [@typed={0x8, 0x12b, 0x0, 0x0, @fd=r0}, @generic="8e1779e45bd1be4a5b2b90d6008f2351abaf39262c94df4d8f7f535cae2132972f241d9a462a4a9090af6ed8322ca55914e0c5"]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e220000060005"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 2.175831691s ago: executing program 2 (id=4788): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = accept4(r0, 0x0, &(0x7f00000004c0), 0x80000) bind$can_j1939(r1, &(0x7f0000000500)={0x1d, 0x0, 0x0, {0x1, 0x1}, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[], 0x6c}}, 0x0) sendmsg$nl_netfilter(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x50, 0xf, 0x2, 0x201, 0x70bd27, 0x25dfdbfd, {0x2, 0x0, 0x1}, [@typed={0x8, 0x12b, 0x0, 0x0, @fd=r0}, @generic="8e1779e45bd1be4a5b2b90d6008f2351abaf39262c94df4d8f7f535cae2132972f241d9a462a4a9090af6ed8322ca55914e0c5"]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e220000060005"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 2.103688227s ago: executing program 0 (id=4789): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xf}, 0x3}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000200)=[@in6={0xa, 0x0, 0x0, @local, 0x7}], 0x1c) sendto$inet6(r1, &(0x7f0000000140)='l', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0, 0x2}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1c, &(0x7f0000000100), &(0x7f0000000180)=0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000240), &(0x7f0000000280)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x3e, 0x0, 0x60}, 0x90) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000280)={0x3, &(0x7f0000000100)=[{0x28, 0x0, 0xf9, 0xfffff030}, {0x4d, 0x0, 0x0, 0x3}, {0x6}]}, 0x10) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="cb2edf9e0ff899b90e680dd3da0086584445fd372f424afe018745f6057a49619dbb3a3ae535fbcddb9c2c29c3c37a68386e09dff3dd94bd06691f2360666f8261c1d988412c635f55b6f411326268ce649c19cdede5fed87651c1a93376c2522c048703d176cc6142ffaa25fea29786c44445acb9a52fef0f840423b6f5e4ecf589df415fc1d7eba71708457d02d7850fea157dbd1bcd912823a0db75605bf1bebbed02844a207edc8761d37e22dfe094f8f8ca8e93245c209470f20888bb0845dd126a6ece033f4876b53d9f18ec6509de7a7e86f11caa3ad43d340585b629384003c1d571ba6152efa4", 0xeb}, {}], 0x2, &(0x7f00000007c0)=[{0xa8, 0x84, 0xccf0, "f6d09b294408417c8eb3c5d1a36bc5beecab7d3c2565110c86881185bf5f89fb62be9118790f91eb508b8bb645eb60ce3b80a830c095164cd12bb7eb42b58adb61666769082efd6399a8a2e7b8e6c7c938f2cf85fd62d13368608e89137fe38318ea7d9b3e6ca58cc169229c3f4374cd9a400f318b6682b460faba885c54881cb38816a663f878ce3fffdea2b5fb26a32607f4ac"}, {0x40, 0x88, 0xc2, "c749fc743dedb3dfd57701461793a450327686bc2ea1c71b9c0dd10272e786f11764c4ad163298c6ee3b2a0d41a22af6"}, {0x140, 0x11, 0x5, "5fcc5b5771ba2c7d645fd79ff8ce65875680681bcd76ff66c34056019ee12c99b7ee3e12bb4f49690155a9f15988c638acb723f39df640c78bd015fef5400b05cbf5c5e4927160207f7fd46947b067d9f61492ef1059ce241824144bcf8c8bca53235dda020d69de8aa02eb34baeb382045bd497b72be1cbc628d5810708000000aabfa90f82ee5a73f1ff88661954ac8765898da27d512d7a90686e01f8d040c69919a935bb7783678dbcbf2b8fb66c71f4520801a9f078fe7c0203f2d368ea42e9931065c1f746187fbf11681aa341158fa783291ea52a13935252be1c1ff9732fd6e443482f0d4578adbb92c009c48550bc2816f1caf932c9d42783c9b2ac7618fc9f8402ab43d42318663dd5c2f73a2d068e34552636c75f32ccd536b0315c7539bd1c7d5cd2355b13"}, {0x138, 0x10f, 0x5, "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"}], 0x360}, 0x24000851) 2.066793654s ago: executing program 1 (id=4790): r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x6, 0x2, 0x0, 0x2}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd}}, @TCA_NETEM_RATE64={0xc, 0x8, 0xc1160cbda5ab1ab}, @TCA_NETEM_RATE={0x14, 0x6, {0x1, 0x80, 0x7, 0x7a7}}]}}}]}, 0x78}}, 0x20000000) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 2.065863979s ago: executing program 2 (id=4791): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, 0x0, 0x0) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000000), 0x4) sendmsg$802154_dgram(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x24, @short={0x2, 0x0, 0xaaa3}}, 0x14, &(0x7f0000000100)={&(0x7f00000003c0)="d682f39c86fed22b0fb1e398412d7958da07dc0f18de72076fdbd11017c1a40f6f56bd41d59dcbabc1440634b9c7d6c12128a25de47cd5f85b9eecdacf10621e9dafb7a304208d2a10a3c99837", 0x4d}}, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000002e09000018000180140002006261746164765f736c617665"], 0x2c}}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events\x00', 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000180)={0x0, 0x2, 0x8, 0x7100000}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1, r6}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000740)={@fallback=r7, 0xc, 0x1, 0x2, &(0x7f0000000500)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, &(0x7f0000000700)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000004c0)={@fallback=r8, r7, 0x6, 0x0, 0x0, @void, @value=r8, @void, @void, r9}, 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffd51, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = openat$cgroup_int(r11, &(0x7f0000000040)='cpu.max\x00', 0x2, 0x0) write$cgroup_subtree(r12, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r10], 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@fallback, r4, 0x11, 0x20, 0x0, @void, @void, @void, @value=r10, r9}, 0x20) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000080)={0x4, 0xfc}, 0x2) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB="0000000000060000000008000000000000001100", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.675797194s ago: executing program 3 (id=4792): socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0xfffd, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xe, 0x9}}}}}}, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r0}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='rcu_utilization\x00', r3, 0x0, 0x4}, 0x18) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x8}, 0x20) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x4000, 0x0, 0x5, 0x2}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)}, 0x3) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090200000300ffe5000d0000000000b702000000000000739af0ff00000000c509000000010000c3aaf0fff1000000bf8720000000000037080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) socket$pppl2tp(0x18, 0x1, 0x1) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000380)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, [@call={0x85, 0x0, 0x0, 0x53}, @printk={@i, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x102, &(0x7f0000003c80)) 1.640635237s ago: executing program 4 (id=4793): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x800) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000100)={'gre0\x00', 0x0, 0x8000, 0x1, 0x2, 0x3, {{0x6, 0x4, 0x1, 0x6, 0x18, 0x66, 0x0, 0x2, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x35}, {[@noop]}}}}}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x3c, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000e80)=@raw={'raw\x00', 0x8, 0x3, 0xa50, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x9d8, 0xffffffff, 0xffffffff, 0x9d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x73, 0x0, 0x0, 0x45}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x43}}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, [], [0x0, 0xffffffff, 0xff000000], 'wg1\x00', 'gre0\x00'}, 0x0, 0x888, 0x8b0, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x7fff, 0x1}, {0x8, 0x3}, {0xfffff7ec, 0x1}, {0xfff, 0xbd3626e1c8b1df09}, {0x5, 0x2}, {0xb34c, 0x3}, {0x2}, {0xe48b, 0x2}, {0x101, 0x2}, {0x5, 0x2}, {0x5}], [{0x400}, {0x6, 0x8001}, {0x401, 0x40}, {0x7fff}, {0xffffc1b1, 0x32de}, {0xfff, 0x8}, {0x2, 0x9}, {0x1, 0xbbca}, {0x83, 0x1}, {0x5, 0x7}, {0x3}], 0x1, 0x7}, {[{0x9, 0x3}, {0x6, 0x3}, {0x4, 0x3}, {0x1, 0x2}, {0x9, 0x1}, {0xfffffffa}, {0x0, 0x2}, {0x80000000, 0x3}, {0x80000001}, {0x8001, 0x2}, {0xff, 0x3}], [{0x7, 0x5}, {0x3, 0x6b6}, {0x4, 0x400}, {0x3}, {0x4, 0xfff}, {0x3ff, 0xe5d7}, {0x6, 0x3ff}, {0xa78, 0xffffffff}, {0xa9e1, 0x3}, {0x8, 0x1000}, {0xc7, 0xf385}], 0x6, 0x3}, {[{0x101, 0x2}, {0x9}, {0x3, 0x3}, {0x2, 0x3}, {0x48}, {0x9, 0x2}, {0x1, 0x2}, {0x7, 0x2}, {0x9}, {0x7, 0x1}, {0x0, 0x3}], [{0xfffffffb, 0x5}, {0x8, 0xa17}, {0x80, 0x4}, {0x8}, {0x3, 0x7}, {0x5e18, 0x7}, {0x4, 0x101}, {0x7, 0xfff}, {0xd, 0x7f}, {0x2, 0x2}, {0xfb3, 0xa94}], 0xb, 0x4}, {[{0x8, 0x1}, {0x4, 0x2}, {0x4e, 0xc781c4f1f9c1fa4f}, {0x8, 0x1}, {0x4e5, 0x2}, {0x3, 0x3}, {0x6, 0x1}, {0x7, 0x1}, {0x5, 0x2}, {0xfff}, {0x4}], [{0x9, 0x8001}, {0xffff, 0x4}, {0x7fff, 0xf}, {0x66d, 0x9}, {0x92, 0xb}, {0x3, 0x6}, {0x7, 0xfff}, {0x1, 0xff}, {0x1, 0x1}, {0x0, 0x8}, {0x1, 0xff}], 0xa}, {[{0x5, 0x2}, {0x7a3, 0x2}, {0x1, 0x3}, {0x100, 0x3}, {0x40}, {0x8d, 0x1}, {0x8, 0x3}, {0x9, 0x3}, {0x8, 0x2}, {0x1, 0x1}, {0x7}], [{0x854f, 0x6b}, {0x7, 0x7}, {0x6, 0x80}, {0x3, 0xffc00000}, {0x7}, {0x3, 0x6}, {0x2, 0xf17}, {0x25, 0x401}, {0x200, 0x84b}, {0x7fff, 0x80}, {0x3, 0x1}], 0x4, 0x8}, {[{0xc3d, 0x147d12363fe5c40a}, {0x64, 0x1}, {0xf, 0x3}, {0x5, 0x1}, {0x7fffffff, 0x2}, {0x5}, {0x2af0, 0x2}, {0x1bd6, 0x2}, {0x1, 0x2}, {0x7, 0x1}, {0x7, 0x2}], [{0x92b, 0x1ff}, {0x1, 0xf458}, {0x5, 0x3}, {0x84, 0x1}, {0xe923, 0x7fff}, {0x4, 0xe}, {0x3, 0x6}, {0xad3f, 0x59f}, {0x4, 0xfffffffc}, {0x6}, {0x5, 0x6f}], 0x9}, {[{0x8}, {0x2f, 0x1}, {0x7, 0x1}, {0x0, 0x2}, {0x3, 0x3}, {0x0, 0x1}, {0x1, 0x3}, {0x8, 0x3}, {0x7}, {0x2}, {0x2, 0x3}], [{0x101, 0x80000000}, {0x1, 0x9}, {0x40, 0xff}, {0x4, 0x2}, {0x5, 0x6}, {0x2, 0x5}, {0x0, 0x3}, {0xe, 0x5}, {0x6, 0x1ff}, {0xc, 0x7}, {0x1, 0x4}], 0xb, 0x7}, {[{0x8c, 0x1}, {0xd}, {0x10000, 0x2}, {0x8, 0x2}, {0x3, 0x3}, {0x0, 0x3}, {0x1ff, 0x1}, {}, {0xc, 0x1}, {0xf0f}, {0xf629}], [{0x4, 0x5}, {0x35f7, 0x1}, {0x401, 0xf6}, {0x94, 0xd16}, {0x8, 0x5}, {0x35, 0x4929}, {0x8001, 0x5}, {0x1000, 0x9}, {0x9f, 0x65}, {0x9, 0x4}, {0x9, 0xf0a9}], 0x1, 0x4}, {[{0x9, 0x1}, {0x9, 0x2}, {0x7, 0x1}, {0x4, 0x4adbb8db8b6f3087}, {0x3}, {0x3, 0x3}, {0x7ff}, {0x7, 0x1}, {0x10000, 0x3}, {0x0, 0x2}, {0x80000000, 0x1}], [{0xf767, 0x8}, {0xc, 0x5}, {0x9, 0x8}, {0x6, 0xb23}, {0x101, 0x4}, {0xfffffff7, 0xb98}, {0x10001, 0x8f}, {0x9, 0xa83}, {0xd, 0x1}, {0x4, 0xe00}, {0x7, 0x444}], 0x6, 0x4}, {[{0x2, 0x3}, {0x2}, {0x26914786, 0x3}, {0x3}, {0xd7f, 0x1}, {0x7fffffff}, {0xf}, {0x4, 0x2}, {0x8, 0x1}, {0x4, 0x3}, {0xe, 0x1}], [{0xb59, 0x6}, {0x4, 0x70c063f5}, {0x2, 0xfffffffe}, {0x5, 0x6}, {0x10000, 0x872}, {0x6, 0x8}, {0xffff, 0x7}, {0x7, 0x4}, {0x6, 0x10}, {0xfff, 0xa}, {0x81, 0x4}], 0xb, 0x4}, {[{0x200, 0x1}, {0x2, 0x3}, {0xa, 0x1}, {0x3ff, 0x1}, {0x7}, {0x1, 0x2}, {0x6, 0x3}, {0x7}, {0x92, 0x3}, {0x6, 0x1}, {0x7fffffff, 0x2}], [{0x3, 0xbbb9}, {0x4, 0x400}, {0xdec, 0x9}, {0x7, 0x1d}, {0x0, 0x9a}, {0x1, 0x7}, {0x1, 0xf580}, {0x4, 0x9f}, {0x2, 0x4}, {0x5, 0x7}, {0xfff, 0x1}], 0x5, 0x7}], 0x4, 0x1}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x8, 0xff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0xab0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c0260000410007010000000007000000017c00000400fc80a72601"], 0x26c0}}, 0x4010) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r8, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) sendmsg$L2TP_CMD_TUNNEL_GET(r7, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r1, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008044}, 0x40800) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r4, 0x0, 0xd}, 0x18) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004a40)=ANY=[@ANYBLOB="c0260000410007010000000007000000027c00000400fc80a72601"], 0x26c0}}, 0x4010) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) 1.326556948s ago: executing program 3 (id=4794): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 1.088503881s ago: executing program 3 (id=4795): socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000020c0)='ns/ipc\x00') r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) listen(r0, 0x4) 1.088075446s ago: executing program 0 (id=4796): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000003540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x34000041) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x2, &(0x7f0000000000)=""/158, &(0x7f00000000c0)=0x9e) 1.045073738s ago: executing program 4 (id=4797): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0x6}]}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB="5000000010"], 0x50}}, 0x0) 999.916101ms ago: executing program 1 (id=4798): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x39, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) 868.036367ms ago: executing program 0 (id=4799): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x28, r0, 0x801, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}]}]}, 0x28}}, 0x0) 831.998382ms ago: executing program 4 (id=4800): unshare(0x22020600) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000001d80), 0x80800, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) 807.288031ms ago: executing program 1 (id=4801): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000010c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x20, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVKEY={0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) 596.099814ms ago: executing program 4 (id=4802): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff0000000094080000000017"], 0x0, 0xc}, 0x94) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd60"], 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 472.0256ms ago: executing program 2 (id=4803): unshare(0x2040400) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, 0x0, 0x0) 62.132434ms ago: executing program 3 (id=4804): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000003300)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000a00)=""/16}, {&(0x7f0000002180)=""/4096}, {&(0x7f0000000a40)=""/248}, {&(0x7f0000000b40)=""/190}], 0x0, &(0x7f0000000c40)=""/114}, 0x800}, {{&(0x7f0000000cc0)=@vsock={0x28, 0x0, 0x0, @local}, 0x0, &(0x7f00000032c0)=[{&(0x7f0000000d40)=""/189}, {&(0x7f0000003180)=""/176}, {&(0x7f0000003240)=""/90}]}, 0x2}], 0xf00, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000000)=0x400000d2, 0x4) shutdown(r1, 0x0) socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000080)=r0) 0s ago: executing program 4 (id=4805): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0xc8}, 0x1, 0x0, 0x0, 0x4080}, 0x0) socket(0x10, 0x80002, 0x0) socket$inet6(0xa, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002100), 0x0, 0x2, 0x0) epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000280)={0x10000010}) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r2}, 0x18) bpf$ENABLE_STATS(0x20, 0x0, 0x0) close(0xffffffffffffffff) socket$inet(0x2, 0x2, 0x1) socket$alg(0x26, 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r4], 0x3c}}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001000010700020100000000000a00000006000100"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) kernel console output (not intermixed with test programs): port 2(bridge_slave_1) entered disabled state [ 392.211402][T15863] bridge_slave_1: entered allmulticast mode [ 392.233493][T15907] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3128'. [ 392.236826][T15863] bridge_slave_1: entered promiscuous mode [ 392.387719][T15863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 392.416702][T15863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 392.434398][T15924] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3133'. [ 392.964422][ T5873] Bluetooth: hci5: command tx timeout [ 393.273894][T15938] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3138'. [ 393.317464][T15935] veth3: entered promiscuous mode [ 393.322560][T15935] veth3: entered allmulticast mode [ 393.370323][T15863] team0: Port device team_slave_0 added [ 393.385515][T15863] team0: Port device team_slave_1 added [ 393.682235][T15863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 393.749336][T15951] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3137'. [ 393.755309][T15863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 393.892839][T15863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 393.905925][T15863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 393.913217][T15863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 393.940210][T15863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 394.308413][T15863] hsr_slave_0: entered promiscuous mode [ 394.321093][T15863] hsr_slave_1: entered promiscuous mode [ 394.333385][T15863] debugfs: 'hsr0' already exists in 'hsr' [ 394.339397][T15863] Cannot create hsr debugfs directory [ 394.728934][T15956] netlink: 'syz.3.3143': attribute type 33 has an invalid length. [ 394.742725][T15956] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3143'. [ 395.046210][ T5873] Bluetooth: hci5: command tx timeout [ 395.498498][T15996] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3156'. [ 395.577076][T16001] netlink: 'syz.2.3158': attribute type 30 has an invalid length. [ 395.596513][T16001] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 395.627724][T16001] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 395.746221][T15863] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 395.747166][T16007] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3161'. [ 395.775461][T15863] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 395.801260][T15863] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 395.823156][T16007] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3161'. [ 395.823858][T15863] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 396.054916][T15863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 396.126322][T15863] 8021q: adding VLAN 0 to HW filter on device team0 [ 396.155150][ T7314] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.162407][ T7314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 396.206686][ T7314] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.213932][ T7314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 396.547599][T16045] netlink: 'syz.4.3171': attribute type 10 has an invalid length. [ 396.572083][T16045] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.584678][T16045] bridge_slave_1: left allmulticast mode [ 396.612923][T16045] bridge_slave_1: left promiscuous mode [ 396.622693][T16045] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.652954][T16045] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 396.827124][T16056] __nla_validate_parse: 7 callbacks suppressed [ 396.827146][T16056] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3175'. [ 396.857404][T15863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 396.871289][T16057] netlink: 'syz.4.3176': attribute type 1 has an invalid length. [ 396.923056][T16057] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3176'. [ 396.938889][T16060] netlink: 'syz.4.3176': attribute type 39 has an invalid length. [ 397.047765][T15863] veth0_vlan: entered promiscuous mode [ 397.070539][T15863] veth1_vlan: entered promiscuous mode [ 397.080269][T16066] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3179'. [ 397.124592][ T5873] Bluetooth: hci5: command tx timeout [ 397.165991][T16068] netlink: 'syz.1.3181': attribute type 1 has an invalid length. [ 397.177818][T15863] veth0_macvtap: entered promiscuous mode [ 397.188328][T16068] netlink: 'syz.1.3181': attribute type 4 has an invalid length. [ 397.198449][T15863] veth1_macvtap: entered promiscuous mode [ 397.210966][T16068] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.3181'. [ 397.239462][T15863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 397.316396][T15863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 397.338349][ T7315] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.351018][ T7315] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.379308][T16077] nbd: must specify an index to disconnect [ 397.391999][ T7315] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.410333][ T7315] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.433933][T16077] nbd: device at index 1 is going down [ 397.549677][T16084] FAULT_INJECTION: forcing a failure. [ 397.549677][T16084] name failslab, interval 1, probability 0, space 0, times 0 [ 397.567541][T16084] CPU: 1 UID: 0 PID: 16084 Comm: syz.3.3185 Not tainted syzkaller #0 PREEMPT(full) [ 397.567568][T16084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 397.567580][T16084] Call Trace: [ 397.567597][T16084] [ 397.567604][T16084] dump_stack_lvl+0x189/0x250 [ 397.567631][T16084] ? __pfx____ratelimit+0x10/0x10 [ 397.567657][T16084] ? __pfx_dump_stack_lvl+0x10/0x10 [ 397.567678][T16084] ? __pfx__printk+0x10/0x10 [ 397.567709][T16084] ? __pfx___might_resched+0x10/0x10 [ 397.567732][T16084] should_fail_ex+0x414/0x560 [ 397.567761][T16084] should_failslab+0xa8/0x100 [ 397.567789][T16084] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 397.567815][T16084] ? __alloc_skb+0x112/0x2d0 [ 397.567848][T16084] __alloc_skb+0x112/0x2d0 [ 397.567879][T16084] tcp_stream_alloc_skb+0x3d/0x340 [ 397.567906][T16084] tcp_sendmsg_locked+0xf38/0x5620 [ 397.567983][T16084] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 397.568003][T16084] ? __local_bh_enable_ip+0x12d/0x1c0 [ 397.568026][T16084] ? __local_bh_enable_ip+0x12d/0x1c0 [ 397.568056][T16084] tcp_sendmsg+0x2f/0x50 [ 397.568079][T16084] __sock_sendmsg+0x19c/0x270 [ 397.568105][T16084] __sys_sendto+0x3bd/0x520 [ 397.568135][T16084] ? __pfx___sys_sendto+0x10/0x10 [ 397.568159][T16084] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 397.568218][T16084] ? __fget_files+0x3a0/0x420 [ 397.568257][T16084] ? ksys_write+0x22a/0x250 [ 397.568285][T16084] ? __pfx_ksys_write+0x10/0x10 [ 397.568307][T16084] ? rcu_is_watching+0x15/0xb0 [ 397.568332][T16084] __x64_sys_sendto+0xde/0x100 [ 397.568363][T16084] do_syscall_64+0xfa/0x3b0 [ 397.568390][T16084] ? lockdep_hardirqs_on+0x9c/0x150 [ 397.568414][T16084] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.568433][T16084] ? clear_bhb_loop+0x60/0xb0 [ 397.568456][T16084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.568474][T16084] RIP: 0033:0x7ff2d998ebe9 [ 397.568492][T16084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 397.568508][T16084] RSP: 002b:00007ff2da83c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 397.568528][T16084] RAX: ffffffffffffffda RBX: 00007ff2d9bb5fa0 RCX: 00007ff2d998ebe9 [ 397.568542][T16084] RDX: 000000000000fdef RSI: 0000200000000580 RDI: 0000000000000003 [ 397.568559][T16084] RBP: 00007ff2da83c090 R08: 0000000000000000 R09: 0000000000000000 [ 397.568571][T16084] R10: 0000000010008095 R11: 0000000000000246 R12: 0000000000000001 [ 397.568590][T16084] R13: 00007ff2d9bb6038 R14: 00007ff2d9bb5fa0 R15: 00007ffd4e4a3268 [ 397.568621][T16084] [ 398.141391][ T7317] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.167408][ T7317] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.257310][T16096] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3188'. [ 398.575524][T16096] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 398.596358][T16096] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 398.620465][T16096] bond0 (unregistering): Released all slaves [ 398.654118][T16101] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 398.655923][ T7315] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.663229][T16101] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 398.672169][ T7315] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.796418][T16103] bond2: entered promiscuous mode [ 398.801848][T16103] bond2: entered allmulticast mode [ 398.811355][T16103] 8021q: adding VLAN 0 to HW filter on device bond2 [ 398.991090][T16123] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3194'. [ 399.111296][T16116] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.119105][T16116] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.204535][ T5873] Bluetooth: hci5: command tx timeout [ 399.306602][T16127] netlink: 'syz.0.3109': attribute type 1 has an invalid length. [ 399.337281][T16127] netlink: 172 bytes leftover after parsing attributes in process `syz.0.3109'. [ 399.430210][T16132] netlink: 'syz.1.3195': attribute type 10 has an invalid length. [ 399.748688][T16116] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 399.803967][T16116] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 400.126809][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 400.138128][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 400.146667][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 400.155861][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 400.176868][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 400.248274][T16123] bridge_slave_1: left allmulticast mode [ 400.254502][T16123] bridge_slave_1: left promiscuous mode [ 400.260448][T16123] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.271459][T16123] bridge_slave_0: left allmulticast mode [ 400.277611][T16123] bridge_slave_0: left promiscuous mode [ 400.283939][T16123] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.343507][ T7315] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.367158][ T7315] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.380362][ T7315] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 400.389583][ T7315] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.389656][T16139] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3198'. [ 400.398919][ T7315] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.398954][ T7315] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 400.467947][T16143] netlink: 'syz.0.3199': attribute type 12 has an invalid length. [ 400.477454][T16145] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3199'. [ 400.477561][ T5870] bond0: (slave syz_tun): Releasing backup interface [ 400.506114][T16147] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3198'. [ 400.525927][T16148] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 400.548995][ T7315] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.558830][ T7315] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.568981][ T7315] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 400.588697][T16143] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255) [ 400.605836][ T7315] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.641815][ T7315] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.659265][ T7315] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 400.705415][T16133] lo speed is unknown, defaulting to 1000 [ 401.172611][T16168] tipc: Started in network mode [ 401.177932][T16168] tipc: Node identity 720919d620cc, cluster identity 4711 [ 401.190284][T16168] tipc: Enabled bearer , priority 0 [ 401.198724][T16179] netlink: 'syz.4.3210': attribute type 1 has an invalid length. [ 401.221005][T16173] syzkaller0: entered promiscuous mode [ 401.249354][T16179] netlink: 'syz.4.3210': attribute type 1 has an invalid length. [ 401.273383][T16173] syzkaller0: entered allmulticast mode [ 401.392009][T16168] tipc: Resetting bearer [ 401.405616][T16164] tipc: Resetting bearer [ 401.559680][T16164] tipc: Disabling bearer [ 401.646777][T16133] chnl_net:caif_netlink_parms(): no params data found [ 401.892071][T16133] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.900551][T16133] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.920192][T16133] bridge_slave_0: entered allmulticast mode [ 401.937623][T16133] bridge_slave_0: entered promiscuous mode [ 401.963519][T16202] syzkaller1: entered promiscuous mode [ 401.983981][T16202] syzkaller1: entered allmulticast mode [ 402.013400][T16204] netlink: 'syz.1.3216': attribute type 29 has an invalid length. [ 402.043979][T16133] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.062471][T16133] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.070006][T16133] bridge_slave_1: entered allmulticast mode [ 402.090796][T16133] bridge_slave_1: entered promiscuous mode [ 402.282836][ T51] Bluetooth: hci2: command tx timeout [ 402.285603][T16217] __nla_validate_parse: 7 callbacks suppressed [ 402.285628][T16217] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3218'. [ 402.462273][T16133] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 402.490793][T16133] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 402.617290][T16133] team0: Port device team_slave_0 added [ 402.637466][T16133] team0: Port device team_slave_1 added [ 402.788817][T16133] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 402.807957][T16133] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 402.856368][T16133] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 402.898111][T16133] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 402.910587][T16133] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 402.947367][T16133] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 402.972627][T16233] pim6reg1: entered promiscuous mode [ 402.987627][T16233] pim6reg1: entered allmulticast mode [ 403.198575][T16133] hsr_slave_0: entered promiscuous mode [ 403.214132][T16133] hsr_slave_1: entered promiscuous mode [ 403.220516][T16133] debugfs: 'hsr0' already exists in 'hsr' [ 403.226884][T16133] Cannot create hsr debugfs directory [ 403.233188][T16249] netlink: 'syz.3.3228': attribute type 10 has an invalid length. [ 403.347294][T16254] FAULT_INJECTION: forcing a failure. [ 403.347294][T16254] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 403.402452][T16254] CPU: 1 UID: 0 PID: 16254 Comm: syz.4.3230 Not tainted syzkaller #0 PREEMPT(full) [ 403.402483][T16254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 403.402498][T16254] Call Trace: [ 403.402506][T16254] [ 403.402515][T16254] dump_stack_lvl+0x189/0x250 [ 403.402546][T16254] ? __pfx____ratelimit+0x10/0x10 [ 403.402576][T16254] ? __pfx_dump_stack_lvl+0x10/0x10 [ 403.402602][T16254] ? __pfx__printk+0x10/0x10 [ 403.402631][T16254] ? __might_fault+0xb0/0x130 [ 403.402678][T16254] should_fail_ex+0x414/0x560 [ 403.402712][T16254] _copy_to_iter+0x575/0x16f0 [ 403.402745][T16254] ? __pfx__copy_to_iter+0x10/0x10 [ 403.402764][T16254] ? __skb_try_recv_from_queue+0x2b2/0x730 [ 403.402796][T16254] ? __skb_try_recv_datagram+0x3da/0x4e0 [ 403.402828][T16254] __skb_datagram_iter+0xf8/0x990 [ 403.402853][T16254] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 403.402886][T16254] skb_copy_datagram_iter+0xc5/0x230 [ 403.402915][T16254] netlink_recvmsg+0x2ab/0xa30 [ 403.402955][T16254] ? __pfx_netlink_recvmsg+0x10/0x10 [ 403.402991][T16254] ? __lock_acquire+0xab9/0xd20 [ 403.403019][T16254] ? aa_sock_msg_perm+0xf1/0x1d0 [ 403.403053][T16254] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 403.403077][T16254] ? __pfx_netlink_recvmsg+0x10/0x10 [ 403.403109][T16254] sock_recvmsg_nosec+0x186/0x1c0 [ 403.403142][T16254] ____sys_recvmsg+0x3aa/0x460 [ 403.403186][T16254] ? __pfx_____sys_recvmsg+0x10/0x10 [ 403.403227][T16254] ? import_iovec+0x74/0xa0 [ 403.403255][T16254] ___sys_recvmsg+0x1b5/0x510 [ 403.403283][T16254] ? __pfx____sys_recvmsg+0x10/0x10 [ 403.403341][T16254] ? __might_fault+0xb0/0x130 [ 403.403376][T16254] do_recvmmsg+0x307/0x770 [ 403.403408][T16254] ? __pfx_do_recvmmsg+0x10/0x10 [ 403.403445][T16254] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 403.403496][T16254] __x64_sys_recvmmsg+0x190/0x240 [ 403.403524][T16254] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 403.403545][T16254] ? rcu_is_watching+0x15/0xb0 [ 403.403572][T16254] ? do_syscall_64+0xbe/0x3b0 [ 403.403608][T16254] do_syscall_64+0xfa/0x3b0 [ 403.403636][T16254] ? lockdep_hardirqs_on+0x9c/0x150 [ 403.403665][T16254] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.403686][T16254] ? clear_bhb_loop+0x60/0xb0 [ 403.403711][T16254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.403732][T16254] RIP: 0033:0x7f100398ebe9 [ 403.403750][T16254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 403.403775][T16254] RSP: 002b:00007f1004814038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 403.403798][T16254] RAX: ffffffffffffffda RBX: 00007f1003bb5fa0 RCX: 00007f100398ebe9 [ 403.403813][T16254] RDX: 0000000000000008 RSI: 0000200000002c00 RDI: 0000000000000003 [ 403.403827][T16254] RBP: 00007f1004814090 R08: 0000000000000000 R09: 0000000000000000 [ 403.403840][T16254] R10: 0000000040010020 R11: 0000000000000246 R12: 0000000000000002 [ 403.403853][T16254] R13: 00007f1003bb6038 R14: 00007f1003bb5fa0 R15: 00007ffd30adae18 [ 403.403886][T16254] [ 403.454679][T16258] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3232'. [ 404.212332][T16262] bond3: entered promiscuous mode [ 404.232860][T16262] bond3: entered allmulticast mode [ 404.244510][T16262] 8021q: adding VLAN 0 to HW filter on device bond3 [ 404.323118][ T51] Bluetooth: hci2: command tx timeout [ 404.333421][T16283] sctp: [Deprecated]: syz.0.3236 (pid 16283) Use of struct sctp_assoc_value in delayed_ack socket option. [ 404.333421][T16283] Use struct sctp_sack_info instead [ 404.408624][T16133] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 404.437009][T16133] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 404.523170][T16288] netlink: 'syz.4.3237': attribute type 4 has an invalid length. [ 404.567242][T16288] netlink: 'syz.4.3237': attribute type 4 has an invalid length. [ 404.635995][T16133] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 404.665975][T16133] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 404.890241][T16133] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 404.932225][T16133] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 405.026265][T16288] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3237'. [ 405.038944][T16133] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 405.056183][T16133] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 405.208796][T16308] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3241'. [ 405.446217][T16314] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3244'. [ 405.465597][T16314] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3244'. [ 405.478353][T16316] FAULT_INJECTION: forcing a failure. [ 405.478353][T16316] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 405.493355][T16314] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 405.511474][T16316] CPU: 0 UID: 0 PID: 16316 Comm: syz.0.3243 Not tainted syzkaller #0 PREEMPT(full) [ 405.511504][T16316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 405.511516][T16316] Call Trace: [ 405.511525][T16316] [ 405.511534][T16316] dump_stack_lvl+0x189/0x250 [ 405.511564][T16316] ? __pfx____ratelimit+0x10/0x10 [ 405.511595][T16316] ? __pfx_dump_stack_lvl+0x10/0x10 [ 405.511621][T16316] ? __pfx__printk+0x10/0x10 [ 405.511654][T16316] ? fs_reclaim_acquire+0x7d/0x100 [ 405.511698][T16316] should_fail_ex+0x414/0x560 [ 405.511733][T16316] prepare_alloc_pages+0x213/0x610 [ 405.511764][T16316] __alloc_frozen_pages_noprof+0x123/0x370 [ 405.511792][T16316] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 405.511826][T16316] ? policy_nodemask+0x27c/0x720 [ 405.511853][T16316] ? __lock_acquire+0xab9/0xd20 [ 405.511889][T16316] alloc_pages_mpol+0x232/0x4a0 [ 405.511928][T16316] vma_alloc_folio_noprof+0xe4/0x200 [ 405.511963][T16316] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 405.512020][T16316] folio_prealloc+0x30/0x180 [ 405.512054][T16316] __handle_mm_fault+0x2ab9/0x5440 [ 405.512102][T16316] ? __pfx___handle_mm_fault+0x10/0x10 [ 405.512156][T16316] ? find_vma+0xe7/0x160 [ 405.512185][T16316] ? __pfx_find_vma+0x10/0x10 [ 405.512217][T16316] handle_mm_fault+0x40a/0x8e0 [ 405.512260][T16316] do_user_addr_fault+0x764/0x1390 [ 405.512314][T16316] exc_page_fault+0x76/0xf0 [ 405.512347][T16316] asm_exc_page_fault+0x26/0x30 [ 405.512367][T16316] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 405.512391][T16316] Code: 0a 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 405.512409][T16316] RSP: 0018:ffffc9000e3674f8 EFLAGS: 00050202 [ 405.512429][T16316] RAX: ffff888027bcc001 RBX: ffff888027bcc1b0 RCX: 0000000000000cbc [ 405.512445][T16316] RDX: 0000000000000000 RSI: ffff888027bcc1b0 RDI: 0000200000004e40 [ 405.512459][T16316] RBP: ffffc9000e367650 R08: ffff888027bcce6b R09: 1ffff11004f799cd [ 405.512474][T16316] R10: dffffc0000000000 R11: ffffed1004f799ce R12: dffffc0000000000 [ 405.512490][T16316] R13: 0000000000000cbc R14: 00007ffffffff000 R15: 0000200000005afc [ 405.512527][T16316] _copy_to_iter+0x5f6/0x16f0 [ 405.512564][T16316] ? __pfx__copy_to_iter+0x10/0x10 [ 405.512583][T16316] ? __skb_try_recv_from_queue+0x2b2/0x730 [ 405.512617][T16316] ? __skb_try_recv_datagram+0x3da/0x4e0 [ 405.512653][T16316] __skb_datagram_iter+0xf8/0x990 [ 405.512679][T16316] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 405.512714][T16316] skb_copy_datagram_iter+0xc5/0x230 [ 405.512743][T16316] netlink_recvmsg+0x2ab/0xa30 [ 405.512787][T16316] ? __pfx_netlink_recvmsg+0x10/0x10 [ 405.512825][T16316] ? __lock_acquire+0xab9/0xd20 [ 405.512854][T16316] ? aa_sock_msg_perm+0xf1/0x1d0 [ 405.512890][T16316] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 405.512916][T16316] ? __pfx_netlink_recvmsg+0x10/0x10 [ 405.512949][T16316] sock_recvmsg_nosec+0x186/0x1c0 [ 405.512982][T16316] ____sys_recvmsg+0x3aa/0x460 [ 405.513022][T16316] ? __pfx_____sys_recvmsg+0x10/0x10 [ 405.513064][T16316] ? import_iovec+0x74/0xa0 [ 405.513093][T16316] ___sys_recvmsg+0x1b5/0x510 [ 405.513122][T16316] ? __pfx____sys_recvmsg+0x10/0x10 [ 405.513183][T16316] ? __might_fault+0xb0/0x130 [ 405.513219][T16316] do_recvmmsg+0x307/0x770 [ 405.513253][T16316] ? __pfx_do_recvmmsg+0x10/0x10 [ 405.513292][T16316] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 405.513345][T16316] __x64_sys_recvmmsg+0x190/0x240 [ 405.513373][T16316] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 405.513394][T16316] ? rcu_is_watching+0x15/0xb0 [ 405.513422][T16316] ? do_syscall_64+0xbe/0x3b0 [ 405.513458][T16316] do_syscall_64+0xfa/0x3b0 [ 405.513488][T16316] ? lockdep_hardirqs_on+0x9c/0x150 [ 405.513516][T16316] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.513538][T16316] ? clear_bhb_loop+0x60/0xb0 [ 405.513564][T16316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.513585][T16316] RIP: 0033:0x7f164958ebe9 [ 405.513604][T16316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 405.513623][T16316] RSP: 002b:00007f164a394038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 405.513644][T16316] RAX: ffffffffffffffda RBX: 00007f16497b5fa0 RCX: 00007f164958ebe9 [ 405.513660][T16316] RDX: 0000000000000008 RSI: 0000200000002c00 RDI: 0000000000000003 [ 405.513674][T16316] RBP: 00007f164a394090 R08: 0000000000000000 R09: 0000000000000000 [ 405.513687][T16316] R10: 0000000040010020 R11: 0000000000000246 R12: 0000000000000002 [ 405.513700][T16316] R13: 00007f16497b6038 R14: 00007f16497b5fa0 R15: 00007ffcf472d4e8 [ 405.513736][T16316] [ 405.966347][T16133] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 405.990834][T16319] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3244'. [ 406.071683][T16133] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 406.129156][T16133] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 406.177700][T16133] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 406.403058][ T51] Bluetooth: hci2: command tx timeout [ 406.422130][T16133] 8021q: adding VLAN 0 to HW filter on device bond0 [ 406.467137][T16133] 8021q: adding VLAN 0 to HW filter on device team0 [ 406.471373][T16344] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3252'. [ 406.501672][ T7317] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.508892][ T7317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 406.543275][ T7317] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.550556][ T7317] bridge0: port 2(bridge_slave_1) entered forwarding state [ 406.705203][T16353] tipc: Started in network mode [ 406.720979][T16353] tipc: Node identity 426ec01812a3, cluster identity 4711 [ 406.728760][T16353] tipc: Enabled bearer , priority 0 [ 406.763679][T16353] tipc: Resetting bearer [ 406.876556][T16351] tipc: Disabling bearer [ 406.912981][T16368] netlink: 'syz.3.3260': attribute type 1 has an invalid length. [ 406.920780][T16368] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3260'. [ 407.263415][T16133] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 407.295209][T16383] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3264'. [ 407.469818][T16133] veth0_vlan: entered promiscuous mode [ 407.493596][T16388] bridge_slave_0: default FDB implementation only supports local addresses [ 407.512205][T16133] veth1_vlan: entered promiscuous mode [ 407.614475][T16133] veth0_macvtap: entered promiscuous mode [ 407.636217][T16133] veth1_macvtap: entered promiscuous mode [ 407.679803][T16133] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 407.717399][T16133] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 407.752130][ T7318] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.774402][ T30] audit: type=1800 audit(1755642766.835:3): pid=16401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3272" name="memory.events" dev="tmpfs" ino=273 res=0 errno=0 [ 407.788494][ T7318] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.836214][ T7318] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.845814][ T30] audit: type=1804 audit(1755642766.895:4): pid=16401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.3272" name="/newroot/50/memory.events" dev="tmpfs" ino=273 res=1 errno=0 [ 407.903166][ T7318] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.067370][T16413] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.3274'. [ 408.105038][ T7318] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.134595][ T7318] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.208589][ T7317] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.223035][ T7317] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.268949][T16422] netlink: 'syz.1.3279': attribute type 1 has an invalid length. [ 408.297595][T16422] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3279'. [ 408.351036][T16429] vlan2: entered promiscuous mode [ 408.361937][T16429] vlan2: entered allmulticast mode [ 408.381709][T16429] hsr_slave_1: entered allmulticast mode [ 408.408469][T16431] netdevsim netdevsim0: Direct firmware load for /.€ failed with error -2 [ 408.424531][T16431] netdevsim netdevsim0: Falling back to sysfs fallback for: /.€ [ 408.457725][T16433] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3282'. [ 408.482955][ T51] Bluetooth: hci2: command tx timeout [ 408.696723][T16444] netlink: 'syz.2.3286': attribute type 10 has an invalid length. [ 408.711272][T16442] netlink: 'syz.2.3286': attribute type 10 has an invalid length. [ 409.100206][T16450] netlink: 'syz.3.3289': attribute type 10 has an invalid length. [ 409.349530][T16460] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3294'. [ 409.391039][T16462] netlink: 191164 bytes leftover after parsing attributes in process `syz.0.3295'. [ 409.415916][T16462] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.842151][T16484] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3304'. [ 409.918217][T16486] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3306'. [ 409.990751][T16490] netlink: 236 bytes leftover after parsing attributes in process `syz.3.3305'. [ 410.000728][T16490] NCSI netlink: No device for ifindex 0 [ 410.053940][T16492] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3308'. [ 410.190870][T16499] bond0: (slave bond_slave_1): Releasing backup interface [ 411.054452][T16541] bridge_slave_0: entered promiscuous mode [ 411.686137][T16579] vxcan1: entered promiscuous mode [ 411.719975][T16579] vxcan1: entered allmulticast mode [ 412.099202][T16596] netlink: 'syz.3.3346': attribute type 10 has an invalid length. [ 412.149810][T16596] team0: Port device geneve0 added [ 412.157665][ T7315] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.241456][ T7315] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.269194][ T7315] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.323048][ T7315] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.396298][T16616] siw: device registration error -23 [ 412.400358][T16620] __nla_validate_parse: 10 callbacks suppressed [ 412.400383][T16620] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3353'. [ 412.510546][T16619] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3352'. [ 412.764850][T16647] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3359'. [ 412.777898][T16646] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3360'. [ 412.812874][T16646] netlink: 'syz.0.3360': attribute type 1 has an invalid length. [ 412.837253][T16647] netlink: 'syz.4.3359': attribute type 21 has an invalid length. [ 412.845559][T16646] netlink: 'syz.0.3360': attribute type 2 has an invalid length. [ 412.847698][T16649] FAULT_INJECTION: forcing a failure. [ 412.847698][T16649] name failslab, interval 1, probability 0, space 0, times 0 [ 412.853620][T16647] IPv6: NLM_F_CREATE should be specified when creating new route [ 412.854584][T16646] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3360'. [ 412.875730][T16649] CPU: 1 UID: 0 PID: 16649 Comm: syz.2.3361 Not tainted syzkaller #0 PREEMPT(full) [ 412.875770][T16649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 412.875786][T16649] Call Trace: [ 412.875796][T16649] [ 412.875807][T16649] dump_stack_lvl+0x189/0x250 [ 412.875843][T16649] ? __pfx____ratelimit+0x10/0x10 [ 412.875879][T16649] ? __pfx_dump_stack_lvl+0x10/0x10 [ 412.875910][T16649] ? __pfx__printk+0x10/0x10 [ 412.875951][T16649] ? __pfx___might_resched+0x10/0x10 [ 412.875975][T16649] ? fs_reclaim_acquire+0x7d/0x100 [ 412.876020][T16649] should_fail_ex+0x414/0x560 [ 412.876062][T16649] should_failslab+0xa8/0x100 [ 412.876102][T16649] __kmalloc_noprof+0xcb/0x4f0 [ 412.876136][T16649] ? fib6_info_alloc+0x30/0xf0 [ 412.876172][T16649] fib6_info_alloc+0x30/0xf0 [ 412.876200][T16649] ip6_route_info_create+0x142/0x860 [ 412.876229][T16649] ? inet6_rtm_newroute+0x2ee/0x18c0 [ 412.876260][T16649] inet6_rtm_newroute+0x47e/0x18c0 [ 412.876294][T16649] ? nlmon_xmit+0xb0/0x100 [ 412.876314][T16649] ? kmem_cache_free+0x18f/0x400 [ 412.876354][T16649] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 412.876381][T16649] ? __local_bh_enable_ip+0x12d/0x1c0 [ 412.876427][T16649] ? __dev_queue_xmit+0x27b/0x3b50 [ 412.876457][T16649] ? __dev_queue_xmit+0x1d79/0x3b50 [ 412.876527][T16649] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 412.876552][T16649] rtnetlink_rcv_msg+0x7cc/0xb70 [ 412.876592][T16649] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 412.876626][T16649] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 412.876659][T16649] ? ref_tracker_free+0x63a/0x7d0 [ 412.876693][T16649] ? __asan_memcpy+0x40/0x70 [ 412.876720][T16649] ? __pfx_ref_tracker_free+0x10/0x10 [ 412.876779][T16649] netlink_rcv_skb+0x205/0x470 [ 412.876817][T16649] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 412.876854][T16649] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 412.876905][T16649] ? netlink_deliver_tap+0x2e/0x1b0 [ 412.876951][T16649] netlink_unicast+0x82c/0x9e0 [ 412.876993][T16649] ? __pfx_netlink_unicast+0x10/0x10 [ 412.877027][T16649] ? netlink_sendmsg+0x642/0xb30 [ 412.877061][T16649] ? skb_put+0x11b/0x210 [ 412.877102][T16649] netlink_sendmsg+0x805/0xb30 [ 412.877152][T16649] ? __pfx_netlink_sendmsg+0x10/0x10 [ 412.877192][T16649] ? aa_sock_msg_perm+0xf1/0x1d0 [ 412.877232][T16649] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 412.877259][T16649] ? __pfx_netlink_sendmsg+0x10/0x10 [ 412.877297][T16649] __sock_sendmsg+0x219/0x270 [ 412.877331][T16649] ____sys_sendmsg+0x505/0x830 [ 412.877364][T16649] ? __pfx_____sys_sendmsg+0x10/0x10 [ 412.877401][T16649] ? import_iovec+0x74/0xa0 [ 412.877435][T16649] ___sys_sendmsg+0x21f/0x2a0 [ 412.877465][T16649] ? __pfx____sys_sendmsg+0x10/0x10 [ 412.877537][T16649] ? __fget_files+0x2a/0x420 [ 412.877573][T16649] ? __fget_files+0x3a0/0x420 [ 412.877625][T16649] __x64_sys_sendmsg+0x19b/0x260 [ 412.877654][T16649] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 412.877691][T16649] ? __pfx_ksys_write+0x10/0x10 [ 412.877721][T16649] ? rcu_is_watching+0x15/0xb0 [ 412.877758][T16649] ? do_syscall_64+0xbe/0x3b0 [ 412.877800][T16649] do_syscall_64+0xfa/0x3b0 [ 412.877832][T16649] ? lockdep_hardirqs_on+0x9c/0x150 [ 412.877865][T16649] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.877890][T16649] ? clear_bhb_loop+0x60/0xb0 [ 412.877921][T16649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.877945][T16649] RIP: 0033:0x7f991d78ebe9 [ 412.877966][T16649] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 412.877987][T16649] RSP: 002b:00007f991e663038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 412.878013][T16649] RAX: ffffffffffffffda RBX: 00007f991d9b5fa0 RCX: 00007f991d78ebe9 [ 412.878031][T16649] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 412.878047][T16649] RBP: 00007f991e663090 R08: 0000000000000000 R09: 0000000000000000 [ 412.878063][T16649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 412.878077][T16649] R13: 00007f991d9b6038 R14: 00007f991d9b5fa0 R15: 00007ffd0b72a0b8 [ 412.878116][T16649] [ 413.556884][T16663] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 413.564581][T16665] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 413.587772][T16663] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 413.963186][T16677] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3371'. [ 414.370533][T16695] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3379'. [ 414.631020][T16702] FAULT_INJECTION: forcing a failure. [ 414.631020][T16702] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 414.662852][T16702] CPU: 1 UID: 0 PID: 16702 Comm: syz.0.3380 Not tainted syzkaller #0 PREEMPT(full) [ 414.662884][T16702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 414.662898][T16702] Call Trace: [ 414.662906][T16702] [ 414.662920][T16702] dump_stack_lvl+0x189/0x250 [ 414.662951][T16702] ? __pfx____ratelimit+0x10/0x10 [ 414.662982][T16702] ? __pfx_dump_stack_lvl+0x10/0x10 [ 414.663008][T16702] ? __pfx__printk+0x10/0x10 [ 414.663039][T16702] ? __might_fault+0xb0/0x130 [ 414.663082][T16702] should_fail_ex+0x414/0x560 [ 414.663116][T16702] _copy_from_user+0x2d/0xb0 [ 414.663143][T16702] ___sys_recvmsg+0x12e/0x510 [ 414.663173][T16702] ? __pfx____sys_recvmsg+0x10/0x10 [ 414.663233][T16702] ? __might_fault+0xb0/0x130 [ 414.663267][T16702] do_recvmmsg+0x307/0x770 [ 414.663301][T16702] ? __pfx_do_recvmmsg+0x10/0x10 [ 414.663339][T16702] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 414.663391][T16702] __x64_sys_recvmmsg+0x190/0x240 [ 414.663418][T16702] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 414.663449][T16702] ? do_syscall_64+0xbe/0x3b0 [ 414.663484][T16702] do_syscall_64+0xfa/0x3b0 [ 414.663516][T16702] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.663537][T16702] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 414.663558][T16702] ? clear_bhb_loop+0x60/0xb0 [ 414.663585][T16702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.663607][T16702] RIP: 0033:0x7f164958ebe9 [ 414.663636][T16702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 414.663655][T16702] RSP: 002b:00007f164a373038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 414.663678][T16702] RAX: ffffffffffffffda RBX: 00007f16497b6090 RCX: 00007f164958ebe9 [ 414.663694][T16702] RDX: 0000000000000008 RSI: 0000200000002c00 RDI: 0000000000000003 [ 414.663708][T16702] RBP: 00007f164a373090 R08: 0000000000000000 R09: 0000000000000000 [ 414.663721][T16702] R10: 0000000040010020 R11: 0000000000000246 R12: 0000000000000002 [ 414.663734][T16702] R13: 00007f16497b6128 R14: 00007f16497b6090 R15: 00007ffcf472d4e8 [ 414.663769][T16702] [ 415.023980][T16708] FAULT_INJECTION: forcing a failure. [ 415.023980][T16708] name failslab, interval 1, probability 0, space 0, times 0 [ 415.057260][T16708] CPU: 0 UID: 0 PID: 16708 Comm: syz.1.3385 Not tainted syzkaller #0 PREEMPT(full) [ 415.057306][T16708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 415.057320][T16708] Call Trace: [ 415.057328][T16708] [ 415.057338][T16708] dump_stack_lvl+0x189/0x250 [ 415.057369][T16708] ? __pfx____ratelimit+0x10/0x10 [ 415.057399][T16708] ? __pfx_dump_stack_lvl+0x10/0x10 [ 415.057426][T16708] ? __pfx__printk+0x10/0x10 [ 415.057463][T16708] ? __pfx___might_resched+0x10/0x10 [ 415.057483][T16708] ? fs_reclaim_acquire+0x7d/0x100 [ 415.057522][T16708] should_fail_ex+0x414/0x560 [ 415.057557][T16708] should_failslab+0xa8/0x100 [ 415.057591][T16708] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 415.057622][T16708] ? __alloc_skb+0x112/0x2d0 [ 415.057659][T16708] __alloc_skb+0x112/0x2d0 [ 415.057696][T16708] netlink_ack+0x146/0xa50 [ 415.057723][T16708] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 415.057752][T16708] ? ref_tracker_free+0x63a/0x7d0 [ 415.057783][T16708] ? __asan_memcpy+0x40/0x70 [ 415.057807][T16708] ? __pfx_ref_tracker_free+0x10/0x10 [ 415.057850][T16708] netlink_rcv_skb+0x28c/0x470 [ 415.057882][T16708] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 415.057915][T16708] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 415.057972][T16708] ? netlink_deliver_tap+0x2e/0x1b0 [ 415.058010][T16708] netlink_unicast+0x82c/0x9e0 [ 415.058048][T16708] ? __pfx_netlink_unicast+0x10/0x10 [ 415.058077][T16708] ? netlink_sendmsg+0x642/0xb30 [ 415.058104][T16708] ? skb_put+0x11b/0x210 [ 415.058140][T16708] netlink_sendmsg+0x805/0xb30 [ 415.058181][T16708] ? __pfx_netlink_sendmsg+0x10/0x10 [ 415.058215][T16708] ? aa_sock_msg_perm+0xf1/0x1d0 [ 415.058250][T16708] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 415.058278][T16708] ? __pfx_netlink_sendmsg+0x10/0x10 [ 415.058311][T16708] __sock_sendmsg+0x219/0x270 [ 415.058340][T16708] ____sys_sendmsg+0x505/0x830 [ 415.058369][T16708] ? __pfx_____sys_sendmsg+0x10/0x10 [ 415.058401][T16708] ? import_iovec+0x74/0xa0 [ 415.058429][T16708] ___sys_sendmsg+0x21f/0x2a0 [ 415.058453][T16708] ? __pfx____sys_sendmsg+0x10/0x10 [ 415.058516][T16708] ? __fget_files+0x2a/0x420 [ 415.058548][T16708] ? __fget_files+0x3a0/0x420 [ 415.058609][T16708] __x64_sys_sendmsg+0x19b/0x260 [ 415.058635][T16708] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 415.058670][T16708] ? __pfx_ksys_write+0x10/0x10 [ 415.058695][T16708] ? rcu_is_watching+0x15/0xb0 [ 415.058723][T16708] ? do_syscall_64+0xbe/0x3b0 [ 415.058759][T16708] do_syscall_64+0xfa/0x3b0 [ 415.058788][T16708] ? lockdep_hardirqs_on+0x9c/0x150 [ 415.058817][T16708] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.058838][T16708] ? clear_bhb_loop+0x60/0xb0 [ 415.058865][T16708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.058886][T16708] RIP: 0033:0x7f194fb8ebe9 [ 415.058905][T16708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 415.058924][T16708] RSP: 002b:00007f1950993038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 415.058946][T16708] RAX: ffffffffffffffda RBX: 00007f194fdb5fa0 RCX: 00007f194fb8ebe9 [ 415.058962][T16708] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 415.058975][T16708] RBP: 00007f1950993090 R08: 0000000000000000 R09: 0000000000000000 [ 415.058989][T16708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 415.059001][T16708] R13: 00007f194fdb6038 R14: 00007f194fdb5fa0 R15: 00007ffd890795d8 [ 415.059037][T16708] [ 415.538628][T16715] netlink: 'syz.2.3387': attribute type 2 has an invalid length. [ 415.602978][ T51] Bluetooth: hci0: command tx timeout [ 415.931293][T16738] FAULT_INJECTION: forcing a failure. [ 415.931293][T16738] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 415.971576][T16738] CPU: 0 UID: 0 PID: 16738 Comm: syz.4.3394 Not tainted syzkaller #0 PREEMPT(full) [ 415.971608][T16738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 415.971621][T16738] Call Trace: [ 415.971630][T16738] [ 415.971639][T16738] dump_stack_lvl+0x189/0x250 [ 415.971671][T16738] ? __pfx____ratelimit+0x10/0x10 [ 415.971700][T16738] ? __pfx_dump_stack_lvl+0x10/0x10 [ 415.971727][T16738] ? __pfx__printk+0x10/0x10 [ 415.971757][T16738] ? __might_fault+0xb0/0x130 [ 415.971800][T16738] should_fail_ex+0x414/0x560 [ 415.971834][T16738] _copy_from_user+0x2d/0xb0 [ 415.971860][T16738] ___sys_recvmsg+0x12e/0x510 [ 415.971891][T16738] ? __pfx____sys_recvmsg+0x10/0x10 [ 415.971950][T16738] ? __might_fault+0xb0/0x130 [ 415.971985][T16738] do_recvmmsg+0x307/0x770 [ 415.972019][T16738] ? __pfx_do_recvmmsg+0x10/0x10 [ 415.972056][T16738] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 415.972108][T16738] __x64_sys_recvmmsg+0x190/0x240 [ 415.972135][T16738] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 415.972156][T16738] ? rcu_is_watching+0x15/0xb0 [ 415.972185][T16738] ? do_syscall_64+0xbe/0x3b0 [ 415.972220][T16738] do_syscall_64+0xfa/0x3b0 [ 415.972249][T16738] ? lockdep_hardirqs_on+0x9c/0x150 [ 415.972278][T16738] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.972300][T16738] ? clear_bhb_loop+0x60/0xb0 [ 415.972327][T16738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.972348][T16738] RIP: 0033:0x7f100398ebe9 [ 415.972368][T16738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 415.972387][T16738] RSP: 002b:00007f1004814038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 415.972409][T16738] RAX: ffffffffffffffda RBX: 00007f1003bb5fa0 RCX: 00007f100398ebe9 [ 415.972426][T16738] RDX: 0000000000000008 RSI: 0000200000002c00 RDI: 0000000000000003 [ 415.972439][T16738] RBP: 00007f1004814090 R08: 0000000000000000 R09: 0000000000000000 [ 415.972452][T16738] R10: 0000000040010020 R11: 0000000000000246 R12: 0000000000000002 [ 415.972465][T16738] R13: 00007f1003bb6038 R14: 00007f1003bb5fa0 R15: 00007ffd30adae18 [ 415.972500][T16738] [ 416.354769][T16752] netlink: 'syz.4.3400': attribute type 4 has an invalid length. [ 416.767804][T16769] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 416.775154][T16769] IPv6: NLM_F_CREATE should be set when creating new route [ 416.805607][T16769] FAULT_INJECTION: forcing a failure. [ 416.805607][T16769] name failslab, interval 1, probability 0, space 0, times 0 [ 416.824963][T16769] CPU: 1 UID: 0 PID: 16769 Comm: syz.4.3408 Not tainted syzkaller #0 PREEMPT(full) [ 416.824993][T16769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 416.825007][T16769] Call Trace: [ 416.825016][T16769] [ 416.825025][T16769] dump_stack_lvl+0x189/0x250 [ 416.825064][T16769] ? __pfx____ratelimit+0x10/0x10 [ 416.825095][T16769] ? __pfx_dump_stack_lvl+0x10/0x10 [ 416.825128][T16769] ? __pfx__printk+0x10/0x10 [ 416.825175][T16769] should_fail_ex+0x414/0x560 [ 416.825210][T16769] should_failslab+0xa8/0x100 [ 416.825245][T16769] __kmalloc_noprof+0xcb/0x4f0 [ 416.825274][T16769] ? nsim_fib_event_nb+0x295/0x1080 [ 416.825301][T16769] nsim_fib_event_nb+0x295/0x1080 [ 416.825335][T16769] notifier_call_chain+0x1b3/0x3e0 [ 416.825363][T16769] ? atomic_notifier_call_chain+0x26/0x180 [ 416.825389][T16769] atomic_notifier_call_chain+0xda/0x180 [ 416.825416][T16769] call_fib_notifiers+0x31/0x60 [ 416.825451][T16769] call_fib6_multipath_entry_notifiers+0xe6/0x150 [ 416.825484][T16769] ? __pfx_call_fib6_multipath_entry_notifiers+0x10/0x10 [ 416.825519][T16769] ? inet6_rtm_newroute+0xe8b/0x18c0 [ 416.825547][T16769] inet6_rtm_newroute+0x12f5/0x18c0 [ 416.825578][T16769] ? finish_task_switch+0x266/0x950 [ 416.825612][T16769] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 416.825633][T16769] ? trace_sched_exit_tp+0x36/0x110 [ 416.825661][T16769] ? __schedule+0x17ae/0x4cc0 [ 416.825708][T16769] ? __dev_queue_xmit+0x27b/0x3b50 [ 416.825779][T16769] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 416.825800][T16769] rtnetlink_rcv_msg+0x7cc/0xb70 [ 416.825837][T16769] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 416.825866][T16769] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 416.825919][T16769] netlink_rcv_skb+0x205/0x470 [ 416.825952][T16769] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 416.825991][T16769] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 416.826037][T16769] ? netlink_deliver_tap+0x2e/0x1b0 [ 416.826078][T16769] netlink_unicast+0x82c/0x9e0 [ 416.826123][T16769] ? __pfx_netlink_unicast+0x10/0x10 [ 416.826154][T16769] ? netlink_sendmsg+0x642/0xb30 [ 416.826183][T16769] ? skb_put+0x11b/0x210 [ 416.826222][T16769] netlink_sendmsg+0x805/0xb30 [ 416.826266][T16769] ? __pfx_netlink_sendmsg+0x10/0x10 [ 416.826302][T16769] ? aa_sock_msg_perm+0xf1/0x1d0 [ 416.826339][T16769] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 416.826362][T16769] ? __pfx_netlink_sendmsg+0x10/0x10 [ 416.826396][T16769] __sock_sendmsg+0x219/0x270 [ 416.826428][T16769] ____sys_sendmsg+0x505/0x830 [ 416.826456][T16769] ? __pfx_____sys_sendmsg+0x10/0x10 [ 416.826491][T16769] ? import_iovec+0x74/0xa0 [ 416.826520][T16769] ___sys_sendmsg+0x21f/0x2a0 [ 416.826545][T16769] ? __pfx____sys_sendmsg+0x10/0x10 [ 416.826612][T16769] ? __fget_files+0x2a/0x420 [ 416.826643][T16769] ? __fget_files+0x3a0/0x420 [ 416.826689][T16769] __x64_sys_sendmsg+0x19b/0x260 [ 416.826715][T16769] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 416.826750][T16769] ? __pfx_ksys_write+0x10/0x10 [ 416.826776][T16769] ? rcu_is_watching+0x15/0xb0 [ 416.826804][T16769] ? do_syscall_64+0xbe/0x3b0 [ 416.826840][T16769] do_syscall_64+0xfa/0x3b0 [ 416.826869][T16769] ? lockdep_hardirqs_on+0x9c/0x150 [ 416.826898][T16769] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.826919][T16769] ? clear_bhb_loop+0x60/0xb0 [ 416.826947][T16769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.826967][T16769] RIP: 0033:0x7f100398ebe9 [ 416.826987][T16769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 416.827005][T16769] RSP: 002b:00007f1004814038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 416.827028][T16769] RAX: ffffffffffffffda RBX: 00007f1003bb5fa0 RCX: 00007f100398ebe9 [ 416.827043][T16769] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 416.827056][T16769] RBP: 00007f1004814090 R08: 0000000000000000 R09: 0000000000000000 [ 416.827070][T16769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 416.827083][T16769] R13: 00007f1003bb6038 R14: 00007f1003bb5fa0 R15: 00007ffd30adae18 [ 416.827126][T16769] [ 417.282116][T16773] bond1: entered promiscuous mode [ 417.287272][T16773] bond1: entered allmulticast mode [ 417.293375][T16773] 8021q: adding VLAN 0 to HW filter on device bond1 [ 417.763799][T16788] nbd0: detected capacity change from 0 to 127 [ 417.861924][ T51] block nbd0: Receive control failed (result -32) [ 417.868164][T16797] netlink: 'syz.0.3413': attribute type 10 has an invalid length. [ 418.150323][T16812] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3418'. [ 418.192115][T16811] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3419'. [ 418.389388][T16816] FAULT_INJECTION: forcing a failure. [ 418.389388][T16816] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 418.410170][T16816] CPU: 1 UID: 0 PID: 16816 Comm: syz.1.3420 Not tainted syzkaller #0 PREEMPT(full) [ 418.410201][T16816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 418.410215][T16816] Call Trace: [ 418.410224][T16816] [ 418.410233][T16816] dump_stack_lvl+0x189/0x250 [ 418.410265][T16816] ? __pfx____ratelimit+0x10/0x10 [ 418.410297][T16816] ? __pfx_dump_stack_lvl+0x10/0x10 [ 418.410323][T16816] ? __pfx__printk+0x10/0x10 [ 418.410369][T16816] should_fail_ex+0x414/0x560 [ 418.410404][T16816] _copy_to_user+0x31/0xb0 [ 418.410432][T16816] simple_read_from_buffer+0xe1/0x170 [ 418.410469][T16816] proc_fail_nth_read+0x1b3/0x220 [ 418.410498][T16816] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 418.410528][T16816] ? rw_verify_area+0x2a6/0x4d0 [ 418.410554][T16816] ? __lock_acquire+0xab9/0xd20 [ 418.410584][T16816] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 418.410610][T16816] vfs_read+0x200/0xa30 [ 418.410638][T16816] ? fdget_pos+0x247/0x320 [ 418.410662][T16816] ? __pfx___mutex_lock+0x10/0x10 [ 418.410694][T16816] ? __pfx_vfs_read+0x10/0x10 [ 418.410725][T16816] ? __fget_files+0x2a/0x420 [ 418.410763][T16816] ? __fget_files+0x3a0/0x420 [ 418.410795][T16816] ? __fget_files+0x2a/0x420 [ 418.410836][T16816] ksys_read+0x145/0x250 [ 418.410867][T16816] ? __pfx_ksys_read+0x10/0x10 [ 418.410892][T16816] ? rcu_is_watching+0x15/0xb0 [ 418.410919][T16816] ? do_syscall_64+0xbe/0x3b0 [ 418.410952][T16816] do_syscall_64+0xfa/0x3b0 [ 418.410980][T16816] ? lockdep_hardirqs_on+0x9c/0x150 [ 418.411008][T16816] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.411038][T16816] ? clear_bhb_loop+0x60/0xb0 [ 418.411064][T16816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.411084][T16816] RIP: 0033:0x7f194fb8d5fc [ 418.411102][T16816] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 418.411124][T16816] RSP: 002b:00007f1950993030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 418.411147][T16816] RAX: ffffffffffffffda RBX: 00007f194fdb5fa0 RCX: 00007f194fb8d5fc [ 418.411163][T16816] RDX: 000000000000000f RSI: 00007f19509930a0 RDI: 0000000000000004 [ 418.411176][T16816] RBP: 00007f1950993090 R08: 0000000000000000 R09: 0000000000000000 [ 418.411190][T16816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 418.411203][T16816] R13: 00007f194fdb6038 R14: 00007f194fdb5fa0 R15: 00007ffd890795d8 [ 418.411237][T16816] [ 418.887826][T16825] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 418.895192][T16825] IPv6: NLM_F_CREATE should be set when creating new route [ 419.053665][T16832] netlink: 'syz.0.3428': attribute type 10 has an invalid length. [ 419.157207][T16839] netlink: 'syz.3.3431': attribute type 1 has an invalid length. [ 419.198012][T16839] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3431'. [ 419.434534][T16851] pim6reg1: entered promiscuous mode [ 419.439901][T16851] pim6reg1: entered allmulticast mode [ 419.967080][T16876] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3443'. [ 420.208837][T16893] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3450'. [ 420.462559][T16895] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.718075][T16895] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.813122][T16916] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 420.864484][T16895] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.971439][T16895] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.161763][ T7319] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.232595][ T7315] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.241913][T16925] sctp: [Deprecated]: syz.2.3460 (pid 16925) Use of struct sctp_assoc_value in delayed_ack socket option. [ 421.241913][T16925] Use struct sctp_sack_info instead [ 421.287396][ T7319] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.299464][ T7319] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.340091][T16929] netlink: 'syz.0.3462': attribute type 10 has an invalid length. [ 421.531341][T16936] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 421.625981][T16936] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 422.300410][T16981] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3482'. [ 422.317217][T16984] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3483'. [ 422.337533][T16981] netlink: 'syz.0.3482': attribute type 15 has an invalid length. [ 422.365166][T16981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3482'. [ 422.427534][ T1006] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 422.427686][T16981] netlink: 'syz.0.3482': attribute type 15 has an invalid length. [ 422.456180][ T1006] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 422.472596][T16981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3482'. [ 422.492607][ T7319] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 422.513475][T16993] netlink: 'syz.4.3485': attribute type 3 has an invalid length. [ 422.521491][T16993] netlink: 766 bytes leftover after parsing attributes in process `syz.4.3485'. [ 422.556429][ T7319] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 422.708253][T17006] netlink: 'syz.0.3491': attribute type 1 has an invalid length. [ 422.721581][T17006] nbd: couldn't find device at index 1048576 [ 422.749235][T17006] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 422.768126][T17013] netlink: 'syz.0.3491': attribute type 1 has an invalid length. [ 422.778673][T17013] nbd: couldn't find device at index 1048576 [ 422.780488][T17012] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 422.818872][T17015] FAULT_INJECTION: forcing a failure. [ 422.818872][T17015] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 422.855879][T17015] CPU: 1 UID: 0 PID: 17015 Comm: syz.3.3490 Not tainted syzkaller #0 PREEMPT(full) [ 422.855915][T17015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 422.855926][T17015] Call Trace: [ 422.855933][T17015] [ 422.855941][T17015] dump_stack_lvl+0x189/0x250 [ 422.855968][T17015] ? __pfx____ratelimit+0x10/0x10 [ 422.855993][T17015] ? __pfx_dump_stack_lvl+0x10/0x10 [ 422.856014][T17015] ? __pfx__printk+0x10/0x10 [ 422.856040][T17015] ? __might_fault+0xb0/0x130 [ 422.856075][T17015] should_fail_ex+0x414/0x560 [ 422.856104][T17015] _copy_from_user+0x2d/0xb0 [ 422.856126][T17015] do_tcp_setsockopt+0x47d/0x1f10 [ 422.856160][T17015] ? __pfx_do_tcp_setsockopt+0x10/0x10 [ 422.856189][T17015] ? __pfx_aa_sk_perm+0x10/0x10 [ 422.856218][T17015] ? __fget_files+0x2a/0x420 [ 422.856244][T17015] ? aa_sock_opt_perm+0xff/0x1b0 [ 422.856261][T17015] ? sock_common_setsockopt+0x36/0xc0 [ 422.856285][T17015] ? tcp_setsockopt+0x3d/0xe0 [ 422.856310][T17015] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 422.856336][T17015] do_sock_setsockopt+0x17c/0x1b0 [ 422.856369][T17015] __x64_sys_setsockopt+0x13f/0x1b0 [ 422.856391][T17015] do_syscall_64+0xfa/0x3b0 [ 422.856416][T17015] ? lockdep_hardirqs_on+0x9c/0x150 [ 422.856440][T17015] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.856458][T17015] ? clear_bhb_loop+0x60/0xb0 [ 422.856480][T17015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.856497][T17015] RIP: 0033:0x7ff2d998ebe9 [ 422.856513][T17015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 422.856529][T17015] RSP: 002b:00007ff2da7fa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 422.856548][T17015] RAX: ffffffffffffffda RBX: 00007ff2d9bb6180 RCX: 00007ff2d998ebe9 [ 422.856561][T17015] RDX: 0000000000000013 RSI: 0000000000000006 RDI: 0000000000000003 [ 422.856572][T17015] RBP: 00007ff2da7fa090 R08: 0000000000000004 R09: 0000000000000000 [ 422.856583][T17015] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 422.856594][T17015] R13: 00007ff2d9bb6218 R14: 00007ff2d9bb6180 R15: 00007ffd4e4a3268 [ 422.856622][T17015] [ 423.206384][T17027] __nla_validate_parse: 2 callbacks suppressed [ 423.206406][T17027] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3496'. [ 423.739553][T17061] netlink: 'syz.3.3509': attribute type 9 has an invalid length. [ 423.772375][T17064] netlink: 212 bytes leftover after parsing attributes in process `syz.2.3511'. [ 423.808307][T17069] netlink: 'syz.3.3509': attribute type 9 has an invalid length. [ 423.915531][T17076] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3512'. [ 423.925498][T17068] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3512'. [ 423.949936][T17076] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3512'. [ 423.960775][T17064] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3511'. [ 424.402019][T17100] netdevsim netdevsim2: Firmware load for './file0/../file0' refused, path contains '..' component [ 424.596411][T17112] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3525'. [ 424.707607][T17115] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 424.770941][T17119] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3528'. [ 425.086588][T17103] C: renamed from lo (while UP) [ 425.336623][T17140] syzkaller1: entered promiscuous mode [ 425.346110][T17143] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3539'. [ 425.353319][T17140] syzkaller1: entered allmulticast mode [ 425.559559][T17147] bond0: entered promiscuous mode [ 425.564772][T17147] bond0: entered allmulticast mode [ 425.570556][T17147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 425.717633][ T7311] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 425.735197][T17164] netlink: 'syz.1.3542': attribute type 13 has an invalid length. [ 425.797534][ T7311] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 426.368877][T17164] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 426.504316][ T7311] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 426.629003][ T7311] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 426.808376][T17194] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.3551'. [ 427.471571][T17224] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 428.022959][T17249] netlink: 'syz.3.3571': attribute type 11 has an invalid length. [ 428.062285][T17249] netlink: 'syz.3.3571': attribute type 11 has an invalid length. [ 428.131579][T17252] bond3: entered promiscuous mode [ 428.154931][T17252] bond3: entered allmulticast mode [ 428.184697][T17252] 8021q: adding VLAN 0 to HW filter on device bond3 [ 428.357988][T17275] __nla_validate_parse: 6 callbacks suppressed [ 428.358011][T17275] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3579'. [ 428.418808][T17280] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3578'. [ 428.497899][T17283] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 428.505256][T17283] IPv6: NLM_F_CREATE should be set when creating new route [ 428.532202][T17285] netlink: 'syz.3.3580': attribute type 1 has an invalid length. [ 428.564365][T17285] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3580'. [ 428.710641][T17303] IPVS: set_ctl: invalid protocol: 43 172.30.0.4:20000 [ 428.760276][T17299] lo speed is unknown, defaulting to 1000 [ 428.768987][T17285] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 428.795022][T17285] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3580'. [ 428.824180][T17285] ip6gretap0: entered promiscuous mode [ 428.829901][T17285] ip6gretap0: entered allmulticast mode [ 429.469609][T17335] bond2: entered promiscuous mode [ 429.481555][T17335] bond2: entered allmulticast mode [ 429.514896][T17335] 8021q: adding VLAN 0 to HW filter on device bond2 [ 429.540384][T17348] sctp: [Deprecated]: syz.3.3596 (pid 17348) Use of int in max_burst socket option deprecated. [ 429.540384][T17348] Use struct sctp_assoc_value instead [ 429.615707][T17345] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3594'. [ 429.642814][T17345] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3594'. [ 429.769368][T17358] netlink: 'syz.0.3599': attribute type 2 has an invalid length. [ 429.788952][T17358] (unnamed net_device) (uninitialized): option mode: invalid value (133) [ 430.004150][T17373] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3605'. [ 430.015433][T17373] sctp: [Deprecated]: syz.0.3605 (pid 17373) Use of int in maxseg socket option. [ 430.015433][T17373] Use struct sctp_assoc_value instead [ 430.032538][T17373] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3605'. [ 430.620538][T17402] netlink: 'syz.1.3614': attribute type 1 has an invalid length. [ 430.684684][T17402] 8021q: adding VLAN 0 to HW filter on device bond4 [ 430.740613][T17402] xt_limit: Overflow, try lower: 271964/0 [ 430.746767][T17406] 8021q: adding VLAN 0 to HW filter on device bond4 [ 430.773654][T17406] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 430.786629][T17406] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 430.829996][T17402] veth5: entered promiscuous mode [ 430.840297][T17402] bond4: (slave veth5): Enslaving as an active interface with a down link [ 430.866537][T17413] vlan0: entered allmulticast mode [ 430.871732][T17413] bond4: entered allmulticast mode [ 430.938335][T17417] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 431.204659][T17424] bond4: entered promiscuous mode [ 431.216489][T17424] bond4: entered allmulticast mode [ 431.254832][T17424] 8021q: adding VLAN 0 to HW filter on device bond4 [ 431.366967][T17441] IPv6: sit1: Disabled Multicast RS [ 431.383909][T17441] sit1: entered allmulticast mode [ 431.609900][T17457] netlink: 'syz.3.3631': attribute type 7 has an invalid length. [ 431.636788][T17457] netlink: 'syz.3.3631': attribute type 8 has an invalid length. [ 431.687885][T17462] netlink: 'syz.4.3632': attribute type 11 has an invalid length. [ 431.712338][T17462] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ûÌÌULÙvy¸ÚØ¢…D£øUDŒw˜}zë' [ 431.753679][T17462] CPU: 0 UID: 0 PID: 17462 Comm: syz.4.3632 Not tainted syzkaller #0 PREEMPT(full) [ 431.753710][T17462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 431.753723][T17462] Call Trace: [ 431.753732][T17462] [ 431.753741][T17462] dump_stack_lvl+0x189/0x250 [ 431.753777][T17462] ? __pfx_dump_stack_lvl+0x10/0x10 [ 431.753805][T17462] ? __pfx__printk+0x10/0x10 [ 431.753843][T17462] ? kernfs_path_from_node+0x2f/0x290 [ 431.753867][T17462] ? kernfs_path_from_node+0x250/0x290 [ 431.753889][T17462] ? kernfs_path_from_node+0x2f/0x290 [ 431.753918][T17462] sysfs_warn_dup+0x8e/0xa0 [ 431.753941][T17462] sysfs_do_create_link_sd+0xc0/0x110 [ 431.753968][T17462] device_add_class_symlinks+0x1cf/0x240 [ 431.753997][T17462] device_add+0x475/0xb50 [ 431.754026][T17462] wiphy_register+0x1ba6/0x28d0 [ 431.754078][T17462] ? __pfx_wiphy_register+0x10/0x10 [ 431.754112][T17462] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 431.754145][T17462] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 431.754186][T17462] ieee80211_register_hw+0x3425/0x4080 [ 431.754239][T17462] ? ieee80211_register_hw+0x1441/0x4080 [ 431.754274][T17462] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 431.754304][T17462] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 431.754342][T17462] ? __hrtimer_setup+0x187/0x210 [ 431.754362][T17462] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 431.754398][T17462] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 431.754462][T17462] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 431.754489][T17462] ? trace_kmalloc+0x1f/0xd0 [ 431.754514][T17462] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 431.754546][T17462] ? kstrndup+0xbf/0x160 [ 431.754581][T17462] hwsim_new_radio_nl+0xea4/0x1b10 [ 431.754613][T17462] ? __pfx___nla_validate_parse+0x10/0x10 [ 431.754665][T17462] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 431.754709][T17462] ? __nla_parse+0x40/0x60 [ 431.754747][T17462] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 431.754783][T17462] genl_family_rcv_msg_doit+0x215/0x300 [ 431.754818][T17462] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 431.754860][T17462] ? bpf_lsm_capable+0x9/0x20 [ 431.754888][T17462] ? security_capable+0x7e/0x2e0 [ 431.754928][T17462] genl_rcv_msg+0x60e/0x790 [ 431.754962][T17462] ? __pfx_genl_rcv_msg+0x10/0x10 [ 431.754985][T17462] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 431.755032][T17462] netlink_rcv_skb+0x205/0x470 [ 431.755060][T17462] ? __lock_acquire+0xab9/0xd20 [ 431.755092][T17462] ? __pfx_genl_rcv_msg+0x10/0x10 [ 431.755118][T17462] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 431.755174][T17462] ? down_read+0x1ad/0x2e0 [ 431.755210][T17462] genl_rcv+0x28/0x40 [ 431.755240][T17462] netlink_unicast+0x82c/0x9e0 [ 431.755281][T17462] ? __pfx_netlink_unicast+0x10/0x10 [ 431.755313][T17462] ? netlink_sendmsg+0x642/0xb30 [ 431.755341][T17462] ? skb_put+0x11b/0x210 [ 431.755380][T17462] netlink_sendmsg+0x805/0xb30 [ 431.755425][T17462] ? __pfx_netlink_sendmsg+0x10/0x10 [ 431.755463][T17462] ? aa_sock_msg_perm+0xf1/0x1d0 [ 431.755499][T17462] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 431.755522][T17462] ? __pfx_netlink_sendmsg+0x10/0x10 [ 431.755556][T17462] __sock_sendmsg+0x219/0x270 [ 431.755589][T17462] ____sys_sendmsg+0x505/0x830 [ 431.755619][T17462] ? __pfx_____sys_sendmsg+0x10/0x10 [ 431.755654][T17462] ? import_iovec+0x74/0xa0 [ 431.755684][T17462] ___sys_sendmsg+0x21f/0x2a0 [ 431.755710][T17462] ? __pfx____sys_sendmsg+0x10/0x10 [ 431.755782][T17462] ? __fget_files+0x2a/0x420 [ 431.755813][T17462] ? __fget_files+0x3a0/0x420 [ 431.755861][T17462] __x64_sys_sendmsg+0x19b/0x260 [ 431.755887][T17462] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 431.755923][T17462] ? rcu_is_watching+0x15/0xb0 [ 431.755951][T17462] ? do_syscall_64+0xbe/0x3b0 [ 431.755988][T17462] do_syscall_64+0xfa/0x3b0 [ 431.756019][T17462] ? lockdep_hardirqs_on+0x9c/0x150 [ 431.756047][T17462] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.756069][T17462] ? clear_bhb_loop+0x60/0xb0 [ 431.756096][T17462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.756119][T17462] RIP: 0033:0x7f100398ebe9 [ 431.756139][T17462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 431.756158][T17462] RSP: 002b:00007f1004814038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 431.756181][T17462] RAX: ffffffffffffffda RBX: 00007f1003bb5fa0 RCX: 00007f100398ebe9 [ 431.756197][T17462] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 431.756211][T17462] RBP: 00007f1003a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 431.756224][T17462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 431.756246][T17462] R13: 00007f1003bb6038 R14: 00007f1003bb5fa0 R15: 00007ffd30adae18 [ 431.756283][T17462] [ 432.223512][T17467] veth1_macvtap: left promiscuous mode [ 432.229148][T17467] macsec0: entered promiscuous mode [ 432.234424][T17467] macsec0: entered allmulticast mode [ 432.247184][T17467] veth1_macvtap: entered promiscuous mode [ 432.262754][T17467] veth1_macvtap: entered allmulticast mode [ 432.268905][T17467] macsec0: left promiscuous mode [ 432.288864][T17467] macsec0: left allmulticast mode [ 432.296307][T17467] veth1_macvtap: left allmulticast mode [ 432.328378][ T5873] Bluetooth: hci1: command 0x0406 tx timeout [ 432.427653][T17472] netlink: 'syz.1.3635': attribute type 10 has an invalid length. [ 432.442117][T17472] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 432.453986][T17472] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 432.549025][T17477] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3636'. [ 432.777277][T17496] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3644'. [ 432.907405][T17501] openvswitch: netlink: Key type 85 is out of range max 32 [ 432.924311][T17505] ieee802154 phy0 wpan0: encryption failed: -22 [ 432.955169][T17511] netlink: 'syz.0.3649': attribute type 10 has an invalid length. [ 432.979624][T17511] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 432.991973][T17511] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 433.177667][T17518] 8021q: adding VLAN 0 to HW filter on device bond2 [ 433.185648][T17520] lo: entered allmulticast mode [ 433.495977][T17528] bond5: entered promiscuous mode [ 433.518336][T17528] bond5: entered allmulticast mode [ 433.550442][T17528] 8021q: adding VLAN 0 to HW filter on device bond5 [ 433.799893][T17565] __nla_validate_parse: 2 callbacks suppressed [ 433.799917][T17565] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3665'. [ 434.130400][T17576] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3667'. [ 434.141486][T17576] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3667'. [ 434.287008][T17582] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma? [ 434.587298][T17598] netlink: del zone limit has 4 unknown bytes [ 434.824735][T17616] 8021q: adding VLAN 0 to HW filter on device bond4 [ 435.137002][T17627] bond5: entered promiscuous mode [ 435.142111][T17627] bond5: entered allmulticast mode [ 435.147989][T17627] 8021q: adding VLAN 0 to HW filter on device bond5 [ 435.261025][T17642] IPVS: set_ctl: invalid protocol: 180 172.20.20.170:20002 [ 435.439871][T17654] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3687'. [ 435.546889][T17660] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3687'. [ 435.648754][T17660] bridge_slave_1: left allmulticast mode [ 435.658903][T17660] bridge_slave_1: left promiscuous mode [ 435.667858][T17660] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.680933][T17660] bridge_slave_0: left allmulticast mode [ 435.690453][T17660] bridge_slave_0: left promiscuous mode [ 435.699341][T17660] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.810643][T17673] netlink: 'syz.0.3694': attribute type 1 has an invalid length. [ 435.868479][T17673] bond3: entered promiscuous mode [ 435.874477][T17673] 8021q: adding VLAN 0 to HW filter on device bond3 [ 435.975248][T17675] 8021q: adding VLAN 0 to HW filter on device bond3 [ 435.993466][T17675] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 436.012821][T17675] bond3: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 436.057980][T17675] bond3: (slave wireguard0): making interface the new active one [ 436.081621][T17675] wireguard0: entered promiscuous mode [ 436.093457][T17675] bond3: (slave wireguard0): Enslaving as an active interface with an up link [ 436.126307][T17672] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3694'. [ 436.237841][T17691] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3700'. [ 436.358751][T17693] netlink: 'syz.1.3701': attribute type 6 has an invalid length. [ 436.378438][T17693] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3701'. [ 436.554239][T17713] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 436.576081][T17713] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 436.890632][T17730] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3712'. [ 436.924769][T17729] delete_channel: no stack [ 436.932521][T17730] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3712'. [ 437.009129][T17735] netlink: 'syz.4.3715': attribute type 6 has an invalid length. [ 437.017247][T17735] netlink: 'syz.4.3715': attribute type 1 has an invalid length. [ 437.195280][T17745] gre1: entered promiscuous mode [ 437.200500][T17745] gre1: entered allmulticast mode [ 437.225297][T17747] netlink: 'syz.1.3719': attribute type 10 has an invalid length. [ 437.417379][T17759] openvswitch: netlink: Unknown nsh attribute 0 [ 437.423893][T17759] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 437.983037][T17787] netlink: 'syz.0.3732': attribute type 10 has an invalid length. [ 438.095051][T17792] sctp: [Deprecated]: syz.2.3734 (pid 17792) Use of int in max_burst socket option deprecated. [ 438.095051][T17792] Use struct sctp_assoc_value instead [ 438.211988][T17798] tap0: tun_chr_ioctl cmd 1074025672 [ 438.217686][T17798] tap0: ignored: set checksum disabled [ 438.488754][T17809] macvlan1: entered promiscuous mode [ 438.511025][T17809] macvlan1: left promiscuous mode [ 438.549302][T17816] netlink: 'syz.0.3745': attribute type 10 has an invalid length. [ 438.561188][T17812] nbd: nbd0 already in use [ 438.801761][T17830] netlink: 'syz.3.3751': attribute type 1 has an invalid length. [ 438.841359][T17830] __nla_validate_parse: 12 callbacks suppressed [ 438.841380][T17830] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3751'. [ 438.998446][T17838] bond4: entered promiscuous mode [ 439.003769][T17838] bond4: entered allmulticast mode [ 439.009575][T17838] 8021q: adding VLAN 0 to HW filter on device bond4 [ 439.324060][T17855] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 439.340065][T17855] netlink: 'syz.4.3752': attribute type 1 has an invalid length. [ 439.355400][T17855] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3752'. [ 439.373046][T17855] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3752'. [ 439.702406][T17865] netlink: 'syz.4.3757': attribute type 10 has an invalid length. [ 439.760329][T17865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 439.808011][T17865] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 439.973082][T17879] Bluetooth: MGMT ver 1.23 [ 440.090052][ T1305] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 440.099496][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.252367][T17891] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3765'. [ 440.260769][T17895] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3766'. [ 440.281406][T17894] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3766'. [ 440.324198][T17894] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3766'. [ 440.337209][T17895] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3766'. [ 440.361358][T17900] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3766'. [ 440.364326][T17899] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3767'. [ 440.381474][T17895] veth3: entered promiscuous mode [ 440.435890][T17900] veth5: entered promiscuous mode [ 440.662859][T17910] 8021q: adding VLAN 0 to HW filter on device bond7 [ 441.373227][T17919] pim6reg1: entered promiscuous mode [ 441.378678][T17919] pim6reg1: entered allmulticast mode [ 441.449933][T17928] validate_nla: 2 callbacks suppressed [ 441.449954][T17928] netlink: 'syz.2.3776': attribute type 2 has an invalid length. [ 441.999145][T17952] bond5: entered promiscuous mode [ 442.014457][T17952] bond5: entered allmulticast mode [ 442.021495][T17952] 8021q: adding VLAN 0 to HW filter on device bond5 [ 442.064196][T17962] sctp: [Deprecated]: syz.2.3786 (pid 17962) Use of int in maxseg socket option. [ 442.064196][T17962] Use struct sctp_assoc_value instead [ 442.878141][T18018] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 442.978651][T18014] bond8: entered promiscuous mode [ 442.983916][T18014] bond8: entered allmulticast mode [ 442.989492][T18014] 8021q: adding VLAN 0 to HW filter on device bond8 [ 443.067225][ T51] block nbd2: Receive control failed (result -32) [ 443.489213][T18056] dummy0: entered promiscuous mode [ 443.507749][T18056] batadv_slave_1: entered promiscuous mode [ 443.765123][T18074] bond3: entered promiscuous mode [ 443.770311][T18074] bond3: entered allmulticast mode [ 443.776207][T18074] 8021q: adding VLAN 0 to HW filter on device bond3 [ 443.921982][T18092] __nla_validate_parse: 16 callbacks suppressed [ 443.922005][T18092] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3825'. [ 444.089000][T18098] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 444.280488][T18103] 8021q: adding VLAN 0 to HW filter on device bond7 [ 444.441905][T18106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3828'. [ 444.733170][T18125] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3832'. [ 444.768860][T18125] openvswitch: netlink: Unknown nsh attribute 0 [ 444.801124][T18125] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 445.094330][T18142] sctp: [Deprecated]: syz.1.3842 (pid 18142) Use of struct sctp_assoc_value in delayed_ack socket option. [ 445.094330][T18142] Use struct sctp_sack_info instead [ 445.190581][T18149] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3845'. [ 445.192424][T18144] netlink: 'syz.3.3843': attribute type 21 has an invalid length. [ 445.295122][T18153] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3846'. [ 445.314329][T18153] siw: device registration error -23 [ 445.352768][T18153] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6 [ 445.607609][T18179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3851'. [ 445.632428][T18181] raw_sendmsg: syz.2.3853 forgot to set AF_INET. Fix it! [ 445.663548][T18179] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3851'. [ 445.822700][T18176] team_slave_0: entered promiscuous mode [ 445.828470][T18176] team_slave_1: entered promiscuous mode [ 445.866601][T18182] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3850'. [ 446.133941][T18205] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 446.237730][T18211] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3863'. [ 446.252238][T18211] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3863'. [ 447.021123][T18261] delete_channel: no stack [ 447.050640][T18263] netlink: 'syz.0.3880': attribute type 4 has an invalid length. [ 447.198106][T18263] netlink: 'syz.0.3880': attribute type 4 has an invalid length. [ 447.497285][T18288] tipc: Enabling of bearer rejected, failed to enable media [ 447.766702][T18304] macsec0: entered promiscuous mode [ 447.801332][T18304] macsec0: entered allmulticast mode [ 447.830689][T18304] veth1_macvtap: entered allmulticast mode [ 448.131667][T18326] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 448.149129][T18325] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 448.156583][T18325] IPv6: NLM_F_CREATE should be set when creating new route [ 448.163870][T18325] IPv6: NLM_F_CREATE should be set when creating new route [ 448.671204][T18356] netlink: 'syz.3.3909': attribute type 2 has an invalid length. [ 449.179029][T18382] netlink: 'syz.4.3917': attribute type 1 has an invalid length. [ 449.214727][T18388] tipc: Started in network mode [ 449.219460][T18382] netlink: 'syz.4.3917': attribute type 2 has an invalid length. [ 449.224699][T18388] tipc: Node identity ac14140f, cluster identity 4711 [ 449.230101][T18382] __nla_validate_parse: 12 callbacks suppressed [ 449.230122][T18382] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3917'. [ 449.249818][T18388] tipc: New replicast peer: 255.255.255.255 [ 449.256094][T18388] tipc: Enabled bearer , priority 10 [ 449.434368][T18398] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3923'. [ 449.458180][T18398] bridge0: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 449.482117][T18398] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.573299][T18404] 8021q: adding VLAN 0 to HW filter on device bond4 [ 449.858788][T18422] netlink: 'syz.2.3929': attribute type 24 has an invalid length. [ 449.900342][T18424] netlink: 'syz.2.3929': attribute type 24 has an invalid length. [ 450.089093][T18432] netlink: 'syz.2.3932': attribute type 4 has an invalid length. [ 450.335382][T18443] 8021q: adding VLAN 0 to HW filter on device bond5 [ 450.363097][T13988] tipc: Node number set to 2886997007 [ 450.398582][T18450] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3939'. [ 450.564877][T18461] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3943'. [ 450.595719][T18463] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3945'. [ 450.615530][T18461] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3943'. [ 450.645926][T18461] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3943'. [ 450.673173][T18461] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3943'. [ 450.713177][T18461] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3943'. [ 450.750819][T18461] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3943'. [ 450.984345][T18486] netlink: 'syz.3.3950': attribute type 12 has an invalid length. [ 451.016503][T18486] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255) [ 451.172987][T18494] IPv6: NLM_F_CREATE should be specified when creating new route [ 451.187682][T18493] netlink: 'syz.1.3953': attribute type 10 has an invalid length. [ 451.492388][T18515] bond0: (slave batadv0): Releasing backup interface [ 451.519086][T18515] bridge_slave_0: left allmulticast mode [ 451.525648][T18515] bridge_slave_0: left promiscuous mode [ 451.532602][T18515] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.571786][T18515] bridge_slave_1: left allmulticast mode [ 451.579829][T18515] bridge_slave_1: left promiscuous mode [ 451.586041][T18515] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.647091][T18515] bond0: (slave bond_slave_0): Releasing backup interface [ 451.715273][T18515] bond0: (slave bond_slave_1): Releasing backup interface [ 451.739873][T18515] team0: Port device team_slave_0 removed [ 451.755178][T18515] team0: Port device team_slave_1 removed [ 451.761790][T18515] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 451.770322][T18515] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 451.781779][T18515] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 451.789843][T18515] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 451.808351][T18515] bond4: (slave veth5): Releasing active interface [ 451.937295][T18537] IPv6: NLM_F_CREATE should be specified when creating new route [ 451.988689][T18539] tipc: Invalid UDP bearer configuration [ 451.988746][T18539] tipc: Enabling of bearer rejected, failed to enable media [ 452.033784][T18542] bond0: (slave batadv0): Error -22 calling dev_set_mtu [ 452.640715][T18570] bond8: entered promiscuous mode [ 452.646015][T18570] bond8: entered allmulticast mode [ 452.651808][T18570] 8021q: adding VLAN 0 to HW filter on device bond8 [ 453.382010][T18606] netlink: 'syz.0.3988': attribute type 11 has an invalid length. [ 453.640903][T18611] tipc: New replicast peer: 255.255.255.255 [ 453.649942][T18611] tipc: Enabled bearer , priority 10 [ 454.041887][T18638] bond0: (slave bond_slave_1): Releasing backup interface [ 454.051507][T18640] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 454.080247][T18638] validate_nla: 1 callbacks suppressed [ 454.080278][T18638] netlink: 'syz.0.3998': attribute type 8 has an invalid length. [ 454.279546][T18649] __nla_validate_parse: 38 callbacks suppressed [ 454.279567][T18649] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4002'. [ 454.339282][T18651] 8021q: adding VLAN 0 to HW filter on device bond6 [ 454.342025][T18655] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4003'. [ 454.762784][ T5945] tipc: Node number set to 1388648918 [ 454.914701][T18682] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4013'. [ 455.068577][T18691] netlink: 'syz.2.4017': attribute type 10 has an invalid length. [ 455.080165][T18691] bond0: (slave batadv0): Error -22 calling dev_set_mtu [ 455.137848][T18693] tipc: Enabling of bearer rejected, failed to enable media [ 455.225582][T18698] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.4020'. [ 455.632237][T18719] 8021q: adding VLAN 0 to HW filter on device bond9 [ 455.749832][T18729] netlink: 'syz.4.4032': attribute type 1 has an invalid length. [ 455.758071][T18729] netlink: 204 bytes leftover after parsing attributes in process `syz.4.4032'. [ 456.074447][T18745] netlink: 240 bytes leftover after parsing attributes in process `syz.1.4036'. [ 456.250165][T18745] netlink: 248 bytes leftover after parsing attributes in process `syz.1.4036'. [ 456.262894][T18750] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 456.447108][T18767] sctp: [Deprecated]: syz.1.4042 (pid 18767) Use of struct sctp_assoc_value in delayed_ack socket option. [ 456.447108][T18767] Use struct sctp_sack_info instead [ 456.628652][T18773] 8021q: adding VLAN 0 to HW filter on device bond7 [ 456.730858][T18780] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4045'. [ 456.831023][T18786] delete_channel: no stack [ 457.120601][T18800] lo speed is unknown, defaulting to 1000 [ 457.248243][T18806] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4056'. [ 457.365981][T18810] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4059'. [ 457.676597][T18827] netlink: 'syz.4.4066': attribute type 10 has an invalid length. [ 457.821087][T18833] bond9: entered promiscuous mode [ 457.871549][T18833] bond9: entered allmulticast mode [ 457.897165][T18833] 8021q: adding VLAN 0 to HW filter on device bond9 [ 458.054259][T18852] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 458.387863][T18868] gretap1: entered promiscuous mode [ 458.403320][T18868] gretap1: entered allmulticast mode [ 458.832431][T18893] vlan2: entered allmulticast mode [ 458.846509][T18893] hsr0: entered allmulticast mode [ 458.862029][T18893] hsr_slave_0: entered allmulticast mode [ 458.875896][T18893] hsr_slave_1: entered allmulticast mode [ 459.141579][T18910] netlink: 'syz.3.4089': attribute type 10 has an invalid length. [ 459.255062][T18915] bond0: (slave batadv0): Releasing backup interface [ 459.295570][T18915] bridge_slave_0: left allmulticast mode [ 459.301283][T18915] bridge_slave_0: left promiscuous mode [ 459.316735][T18915] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.338570][T18915] bond0: (slave bridge_slave_1): Releasing backup interface [ 459.376921][T18915] bond0: (slave bond_slave_0): Releasing backup interface [ 459.394208][T18915] bond0: (slave bond_slave_1): Releasing backup interface [ 459.412354][T18915] team_slave_0: left promiscuous mode [ 459.425214][T18915] team0: Port device team_slave_0 removed [ 459.437297][T18915] team_slave_1: left promiscuous mode [ 459.447693][T18915] team0: Port device team_slave_1 removed [ 459.461002][T18915] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 459.468969][T18915] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 459.478477][T18915] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 459.486889][T18915] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 459.495303][T18926] __nla_validate_parse: 5 callbacks suppressed [ 459.495324][T18926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4094'. [ 459.523238][T18915] bond1: left promiscuous mode [ 459.528760][T18915] bridge0: port 3(bond1) entered disabled state [ 460.001336][T18940] veth0_virt_wifi: renamed from vlan0 [ 460.126760][T18952] netlink: 'syz.3.4101': attribute type 11 has an invalid length. [ 460.172418][T18952] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4101'. [ 460.361629][T18967] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4108'. [ 460.431490][T18969] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4108'. [ 460.876533][T18980] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 461.417122][T18998] bond6: entered promiscuous mode [ 461.426694][T18998] bond6: entered allmulticast mode [ 461.459053][T18998] 8021q: adding VLAN 0 to HW filter on device bond6 [ 461.475333][ T51] Bluetooth: hci2: link tx timeout [ 461.483636][ T51] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 461.652455][T19013] netlink: 'syz.2.4120': attribute type 10 has an invalid length. [ 461.661404][T19013] bond0: (slave batadv0): Error -22 calling dev_set_mtu [ 461.669355][T19014] netlink: 140 bytes leftover after parsing attributes in process `syz.3.4119'. [ 462.248444][T19037] lo speed is unknown, defaulting to 1000 [ 462.362501][T19041] netlink: 'syz.0.4131': attribute type 10 has an invalid length. [ 462.785433][T19057] netlink: 'syz.0.4136': attribute type 10 has an invalid length. [ 462.813935][T19057] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.841070][T19057] bridge_slave_1: left allmulticast mode [ 462.859857][T19057] bridge_slave_1: left promiscuous mode [ 462.873890][T19057] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.910264][T19057] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 463.042268][T19070] netlink: 'syz.4.4140': attribute type 6 has an invalid length. [ 463.061387][T19070] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4140'. [ 463.338947][T19085] netlink: 'syz.0.4143': attribute type 12 has an invalid length. [ 463.360066][T19085] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255) [ 463.523956][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 463.841439][T19113] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.4152'. [ 464.238754][T19129] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4157'. [ 464.731212][T19154] netlink: 'syz.1.4162': attribute type 1 has an invalid length. [ 464.814732][T19154] 8021q: adding VLAN 0 to HW filter on device bond10 [ 464.887807][T19158] bond10: (slave gretap0): making interface the new active one [ 464.936567][T19163] netlink: 'syz.3.4165': attribute type 1 has an invalid length. [ 464.944946][T19163] netlink: 212 bytes leftover after parsing attributes in process `syz.3.4165'. [ 464.954344][T19163] netlink: 'syz.3.4165': attribute type 1 has an invalid length. [ 464.967777][T19158] bond10: (slave gretap0): Enslaving as an active interface with an up link [ 465.489889][T13969] IPVS: starting estimator thread 0... [ 465.594541][T19205] IPVS: using max 26 ests per chain, 62400 per kthread [ 465.851044][T19222] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4183'. [ 465.889687][T19219] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4181'. [ 466.406531][T19251] netlink: 'syz.0.4190': attribute type 1 has an invalid length. [ 466.554167][T19259] netlink: 'syz.2.4193': attribute type 15 has an invalid length. [ 466.716445][T19268] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4196'. [ 466.765290][T19270] 8021q: adding VLAN 0 to HW filter on device bond7 [ 466.833380][T19276] lo speed is unknown, defaulting to 1000 [ 467.247709][T19287] bond8: entered promiscuous mode [ 467.257971][T19287] bond8: entered allmulticast mode [ 467.264556][T19287] 8021q: adding VLAN 0 to HW filter on device bond8 [ 467.326217][T19303] netlink: 'syz.3.4208': attribute type 1 has an invalid length. [ 467.337516][T19313] netlink: 'syz.1.4209': attribute type 10 has an invalid length. [ 467.505587][T19313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 467.518439][T19313] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 467.691304][T19322] 8021q: adding VLAN 0 to HW filter on device bond11 [ 467.879668][T19337] netlink: 'syz.2.4215': attribute type 27 has an invalid length. [ 467.973224][T19340] netlink: 'syz.4.4217': attribute type 1 has an invalid length. [ 468.214631][T19348] bond10: entered promiscuous mode [ 468.220950][T19348] bond10: entered allmulticast mode [ 468.228777][T19348] 8021q: adding VLAN 0 to HW filter on device bond10 [ 468.251236][T19355] veth1_to_bond: entered allmulticast mode [ 468.259909][T19352] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4223'. [ 468.274097][T19355] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4221'. [ 468.369775][T19355] veth1_to_bond (unregistering): left allmulticast mode [ 468.415819][T19351] syzkaller0: entered promiscuous mode [ 468.421717][T19351] syzkaller0: entered allmulticast mode [ 468.791180][T19379] 8021q: adding VLAN 0 to HW filter on device bond9 [ 468.865625][T19383] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4227'. [ 469.103376][T19391] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4229'. [ 469.135766][T19391] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4229'. [ 469.156013][T19391] netlink: 'syz.1.4229': attribute type 7 has an invalid length. [ 469.163925][T19393] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4231'. [ 469.192091][T19391] team0: entered promiscuous mode [ 469.217838][T19391] bond0: entered promiscuous mode [ 469.242021][T19391] batadv0: entered promiscuous mode [ 469.265295][T19391] team0: left promiscuous mode [ 469.281038][T19391] bond0: left promiscuous mode [ 469.289994][T19391] batadv0: left promiscuous mode [ 469.507227][ T36] netdevsim netdevsim0 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 469.541535][ T36] netdevsim netdevsim0 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 469.568052][ T36] netdevsim netdevsim0 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 469.626683][ T36] netdevsim netdevsim0 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 469.760913][T19424] tipc: Enabled bearer , priority 0 [ 469.775658][T19424] syzkaller0: entered promiscuous mode [ 469.781287][T19424] syzkaller0: entered allmulticast mode [ 469.805783][T19434] IPVS: length: 199 != 8 [ 469.826947][T19424] tipc: Resetting bearer [ 469.885292][T19424] tipc: Disabling bearer [ 498.483326][ T51] Bluetooth: hci3: command 0x0405 tx timeout [ 501.529322][ T1305] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 501.538484][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 513.842883][ T51] Bluetooth: hci5: command 0x0406 tx timeout [ 526.967597][T19445] __nla_validate_parse: 9 callbacks suppressed [ 526.967619][T19445] netlink: 64985 bytes leftover after parsing attributes in process `syz.4.4249'. [ 527.035035][T19446] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4246'. [ 527.094807][T19446] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4246'. [ 527.339542][T19452] bond10: entered promiscuous mode [ 527.346411][T19452] bond10: entered allmulticast mode [ 527.352184][T19452] 8021q: adding VLAN 0 to HW filter on device bond10 [ 527.468116][T19472] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 528.131243][T19488] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4260'. [ 528.336077][T19492] tipc: Started in network mode [ 528.341010][T19492] tipc: Node identity c277a50f18fb, cluster identity 4711 [ 528.377224][T19492] tipc: Enabled bearer , priority 0 [ 528.561937][T19508] syzkaller0: entered promiscuous mode [ 528.587853][T19508] syzkaller0: entered allmulticast mode [ 528.599434][T19508] tipc: Resetting bearer [ 528.627822][T19516] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 528.736259][T19491] tipc: Resetting bearer [ 528.815117][T19527] validate_nla: 1 callbacks suppressed [ 528.815138][T19527] netlink: 'syz.1.4270': attribute type 8 has an invalid length. [ 528.866040][T19531] IPVS: length: 4096 != 24 [ 529.453277][T13969] tipc: Node number set to 3666650383 [ 529.459996][T19548] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 530.667643][T19491] tipc: Disabling bearer [ 530.740545][T19551] gtp0: entered promiscuous mode [ 531.033535][T19569] pim6reg1: entered promiscuous mode [ 531.038987][T19569] pim6reg1: entered allmulticast mode [ 531.060901][T19569] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4282'. [ 531.296240][T19587] netlink: 'syz.2.4286': attribute type 1 has an invalid length. [ 531.414604][T19593] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 531.730108][T19608] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 531.777228][T19615] tipc: Enabling of bearer rejected, already enabled [ 531.801705][T19616] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 531.857046][T19615] netlink: 'syz.2.4296': attribute type 1 has an invalid length. [ 531.988022][T19625] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4298'. [ 532.030968][T19625] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4298'. [ 532.271671][T19640] netlink: 'syz.2.4301': attribute type 16 has an invalid length. [ 532.329334][T19640] netlink: 'syz.2.4301': attribute type 17 has an invalid length. [ 532.419166][T19640] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 533.159193][T19674] bond6: entered promiscuous mode [ 533.164546][T19674] bond6: entered allmulticast mode [ 533.170173][T19674] 8021q: adding VLAN 0 to HW filter on device bond6 [ 533.212196][T19678] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4317'. [ 533.254360][T19678] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4317'. [ 533.741509][T19715] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 533.748875][T19715] IPv6: NLM_F_CREATE should be set when creating new route [ 534.143868][T19725] bond0: Error: Cannot enslave bond to itself. [ 534.150337][T19723] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4326'. [ 534.210451][T19728] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4329'. [ 534.302267][T19723] vlan1: entered allmulticast mode [ 534.331401][T19723] bridge0: entered allmulticast mode [ 534.337847][T19723] bridge1: port 1(vlan1) entered blocking state [ 534.346457][T19723] bridge1: port 1(vlan1) entered disabled state [ 534.356640][T19723] vlan1: entered promiscuous mode [ 534.361812][T19723] bridge0: entered promiscuous mode [ 534.443466][T19736] pim6reg: entered allmulticast mode [ 534.456408][T19734] pim6reg: left allmulticast mode [ 534.845581][T19759] bond8: entered promiscuous mode [ 534.877357][T19759] bond8: entered allmulticast mode [ 534.899343][T19759] 8021q: adding VLAN 0 to HW filter on device bond8 [ 534.917041][T19771] netlink: 'syz.3.4340': attribute type 1 has an invalid length. [ 534.957382][T19774] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4341'. [ 534.968384][T19774] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4341'. [ 534.993431][T19771] 8021q: adding VLAN 0 to HW filter on device bond7 [ 535.009989][T19774] bridge0: port 1(vlan0) entered blocking state [ 535.019184][T19774] bridge0: port 1(vlan0) entered disabled state [ 535.026769][T19774] vlan0: entered allmulticast mode [ 535.032019][T19774] bridge0: entered allmulticast mode [ 535.044195][T19774] vlan0: left allmulticast mode [ 535.049105][T19774] bridge0: left allmulticast mode [ 535.073665][T19776] vlan2: entered promiscuous mode [ 535.078834][T19776] bond7: entered promiscuous mode [ 535.085241][T19776] vlan2: entered allmulticast mode [ 535.090566][T19776] bond7: entered allmulticast mode [ 535.109994][T19771] bond7: (slave gretap1): making interface the new active one [ 535.117970][T19771] gretap1: entered promiscuous mode [ 535.124144][T19771] gretap1: entered allmulticast mode [ 535.131595][T19771] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 535.344162][T19787] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 535.364686][T19787] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 535.450150][T19782] infiniband syz!: set down [ 535.468943][T19782] infiniband syz!: added team_slave_0 [ 535.557157][T19782] RDS/IB: syz!: added [ 535.561828][T19782] smc: adding ib device syz! with port count 1 [ 535.568585][T19782] smc: ib device syz! port 1 has pnetid [ 536.975578][T19826] bond11: entered promiscuous mode [ 536.981042][T19826] bond11: entered allmulticast mode [ 536.988049][T19826] 8021q: adding VLAN 0 to HW filter on device bond11 [ 537.527007][T19854] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4364'. [ 537.550586][T19854] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4364'. [ 537.560248][T13988] IPVS: starting estimator thread 0... [ 537.652879][T19855] IPVS: using max 23 ests per chain, 55200 per kthread [ 537.670474][T19858] netlink: 'syz.0.4365': attribute type 8 has an invalid length. [ 538.124212][T13969] IPVS: starting estimator thread 0... [ 538.212819][T19873] IPVS: using max 25 ests per chain, 60000 per kthread [ 538.857395][T19898] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 538.889949][T19898] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4378'. [ 538.915050][T19898] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4378'. [ 538.928476][T19898] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 539.493649][T19933] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4388'. [ 539.544537][T19938] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4389'. [ 539.554986][T19938] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4389'. [ 539.555196][T19933] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4388'. [ 539.629430][T19933] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4388'. [ 539.676296][T19933] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4388'. [ 539.866593][T19947] tipc: Started in network mode [ 539.891964][T19947] tipc: Node identity b633091a5c3d, cluster identity 4711 [ 539.919183][T19947] tipc: Enabled bearer , priority 0 [ 539.937669][T19956] syzkaller0: entered promiscuous mode [ 539.953041][T19956] syzkaller0: entered allmulticast mode [ 539.955895][T19968] netlink: zone id is out of range [ 539.988857][T19968] netlink: zone id is out of range [ 540.009747][T19968] netlink: zone id is out of range [ 540.021982][T19968] netlink: zone id is out of range [ 540.033041][T19968] netlink: zone id is out of range [ 540.041192][T19968] netlink: zone id is out of range [ 540.048045][T19968] netlink: zone id is out of range [ 540.062028][T19968] netlink: zone id is out of range [ 540.071427][T19956] tipc: Resetting bearer [ 540.230524][T19977] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 540.500614][T19946] tipc: Resetting bearer [ 540.559837][T19946] tipc: Disabling bearer [ 540.560609][T19994] netlink: 'syz.2.4405': attribute type 1 has an invalid length. [ 541.381290][T20021] netlink: 'syz.3.4415': attribute type 5 has an invalid length. [ 541.667398][T20035] tipc: Enabled bearer , priority 0 [ 541.726423][T20035] tipc: Disabling bearer [ 541.809981][T20045] netlink: 'syz.4.4423': attribute type 1 has an invalid length. [ 541.897781][T20052] bond11: (slave bridge2): making interface the new active one [ 541.906529][T20052] bond11: (slave bridge2): Enslaving as an active interface with an up link [ 542.065463][T20064] Bluetooth: MGMT ver 1.23 [ 542.176688][T20063] tipc: Enabling of bearer rejected, failed to enable media [ 543.130330][T20112] syzkaller1: entered promiscuous mode [ 543.169996][T20112] syzkaller1: entered allmulticast mode [ 543.408835][T20124] __nla_validate_parse: 138 callbacks suppressed [ 543.408857][T20124] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4448'. [ 543.439160][T20124] netlink: 'syz.3.4448': attribute type 23 has an invalid length. [ 543.562016][T20135] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4451'. [ 543.619576][T20135] netlink: 'syz.0.4451': attribute type 26 has an invalid length. [ 543.645680][T20135] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4451'. [ 543.693453][T20135] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4451'. [ 543.716432][T20135] netlink: 'syz.0.4451': attribute type 26 has an invalid length. [ 543.737303][T20135] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4451'. [ 543.907082][T20150] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4456'. [ 543.922851][T20148] netlink: 'syz.0.4455': attribute type 1 has an invalid length. [ 544.023775][T20148] bond9: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 544.068922][T20148] veth5: entered promiscuous mode [ 544.089987][T20158] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4455'. [ 544.091414][T20148] bond9: (slave veth5): Enslaving as a backup interface with a down link [ 544.129443][T20158] 8021q: adding VLAN 0 to HW filter on device bond9 [ 544.141484][ T36] net_ratelimit: 14814 callbacks suppressed [ 544.141506][ T36] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 544.313900][ T7316] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 544.528353][T20171] netlink: 'syz.2.4462': attribute type 21 has an invalid length. [ 544.730297][T20178] bond12: entered promiscuous mode [ 544.744988][T20178] bond12: entered allmulticast mode [ 544.760606][T20178] 8021q: adding VLAN 0 to HW filter on device bond12 [ 545.023709][T20210] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4470'. [ 545.140162][T20218] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4475'. [ 545.344818][T20226] netlink: 'syz.0.4477': attribute type 4 has an invalid length. [ 545.583536][T20236] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4480'. [ 545.886669][T20242] dvmrp1: entered allmulticast mode [ 546.392194][T20269] bond8: entered promiscuous mode [ 546.405923][T20269] bond8: entered allmulticast mode [ 546.411692][T20269] 8021q: adding VLAN 0 to HW filter on device bond8 [ 546.634422][T20284] netlink: 'syz.4.4497': attribute type 32 has an invalid length. [ 546.645391][T20284] (unnamed net_device) (uninitialized): option coupled_control: invalid value (52) [ 547.480526][ T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 547.495058][ T7311] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 547.515104][T20335] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 547.522488][T20335] IPv6: NLM_F_CREATE should be set when creating new route [ 547.564605][ T7311] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 547.583766][ T7311] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 548.193448][T20370] macsec2: entered promiscuous mode [ 548.198897][T20370] team0: entered promiscuous mode [ 548.205363][T20370] macsec2: entered allmulticast mode [ 548.236735][T20370] team0: entered allmulticast mode [ 548.260548][T20370] team0: Device macsec2 is already an upper device of the team interface [ 548.311012][T20370] team0: left allmulticast mode [ 548.323837][T20370] team0: left promiscuous mode [ 548.473539][T20377] batman_adv: batadv0: Adding interface: wlan1 [ 548.488755][T20377] batman_adv: batadv0: Not using interface wlan1 (retrying later): interface not active [ 548.661363][T20395] __nla_validate_parse: 15 callbacks suppressed [ 548.662172][T20395] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4533'. [ 548.765092][T20393] netlink: 'syz.2.4536': attribute type 3 has an invalid length. [ 548.773492][T20393] netlink: 666 bytes leftover after parsing attributes in process `syz.2.4536'. [ 549.029580][T20417] netlink: 'syz.0.4544': attribute type 12 has an invalid length. [ 549.033643][T20415] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4542'. [ 549.165247][T20420] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767) [ 549.195407][T20420] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 549.213209][T20424] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4547'. [ 549.223742][T20426] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4546'. [ 549.243911][T20427] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4546'. [ 549.244944][T20420] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4545'. [ 549.275132][T20427] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 549.305778][T20427] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 549.343688][T20431] IPVS: set_ctl: invalid protocol: 108 100.1.1.3:20004 [ 549.345381][T20433] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4550'. [ 549.747619][T20458] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4560'. [ 549.749815][T20456] pim6reg: entered allmulticast mode [ 550.061348][T20476] tipc: Enabled bearer , priority 0 [ 550.092307][T20476] syzkaller0: entered promiscuous mode [ 550.101421][T20476] syzkaller0: entered allmulticast mode [ 550.225490][T20475] tipc: Resetting bearer [ 550.321380][T20475] tipc: Disabling bearer [ 550.507564][T20495] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4572'. [ 550.961271][T20522] 8021q: VLANs not supported on ip_vti0 [ 551.002527][T20524] 8021q: VLANs not supported on ip_vti0 [ 551.194630][T20540] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 551.206530][T20540] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 551.348137][T20547] netlink: 'syz.4.4588': attribute type 10 has an invalid length. [ 551.391060][T20547] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 551.608842][T20562] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 551.656325][T20565] vlan3: entered promiscuous mode [ 551.669213][T20562] netlink: zone id is out of range [ 551.682754][T20565] bridge0: entered promiscuous mode [ 551.690631][T20562] netlink: zone id is out of range [ 551.699762][T20568] netlink: 'syz.3.4592': attribute type 1 has an invalid length. [ 551.732771][T20562] netlink: zone id is out of range [ 551.738117][T20562] netlink: zone id is out of range [ 551.744544][T20568] netlink: 'syz.3.4592': attribute type 2 has an invalid length. [ 551.763295][T20562] netlink: zone id is out of range [ 551.768929][T20562] netlink: zone id is out of range [ 551.775617][T20568] netlink: 'syz.3.4592': attribute type 1 has an invalid length. [ 551.808604][T20562] netlink: zone id is out of range [ 552.109505][T20580] bond10: entered promiscuous mode [ 552.120154][T20580] bond10: entered allmulticast mode [ 552.127170][T20580] 8021q: adding VLAN 0 to HW filter on device bond10 [ 552.411545][T20580] bond10 (unregistering): Released all slaves [ 552.730757][T20608] tipc: Enabled bearer , priority 0 [ 552.851391][T20608] tipc: Disabling bearer [ 553.709281][T20673] __nla_validate_parse: 16 callbacks suppressed [ 553.709306][T20673] netlink: 512 bytes leftover after parsing attributes in process `syz.1.4625'. [ 553.985932][T20683] netlink: 'syz.1.4629': attribute type 1 has an invalid length. [ 554.053262][T20683] netlink: 'syz.1.4629': attribute type 3 has an invalid length. [ 554.061911][T20683] netlink: 'syz.1.4629': attribute type 235 has an invalid length. [ 554.856418][T20704] sctp: [Deprecated]: syz.1.4638 (pid 20704) Use of struct sctp_assoc_value in delayed_ack socket option. [ 554.856418][T20704] Use struct sctp_sack_info instead [ 555.112485][T20723] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4644'. [ 555.152916][T20725] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4643'. [ 555.165355][T20725] netlink: 43 bytes leftover after parsing attributes in process `syz.0.4643'. [ 555.171063][T20721] bond0: (slave batadv0): Releasing backup interface [ 555.175124][T20725] netlink: 'syz.0.4643': attribute type 6 has an invalid length. [ 555.189700][T20725] netlink: 'syz.0.4643': attribute type 5 has an invalid length. [ 555.197867][T20725] netlink: 43 bytes leftover after parsing attributes in process `syz.0.4643'. [ 555.570905][T20750] netlink: 'syz.1.4652': attribute type 9 has an invalid length. [ 555.607759][T20750] netlink: 211988 bytes leftover after parsing attributes in process `syz.1.4652'. [ 555.677653][T20762] syz_tun: entered allmulticast mode [ 555.686063][T20762] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4655'. [ 555.722492][T20762] syz_tun (unregistering): left allmulticast mode [ 555.771391][T20770] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4657'. [ 556.081154][T20783] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 556.266297][ T36] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.278877][ T36] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 556.298967][ T36] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.308466][ T36] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 556.318395][ T36] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.330177][ T36] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 556.350994][T20796] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4666'. [ 556.403770][T20797] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4663'. [ 556.415513][ T36] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.428714][ T36] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 556.979818][T20829] netem: unknown loss type 0 [ 557.211634][T20840] gretap0: entered promiscuous mode [ 557.236548][T20840] 0ªî{X¹¦: renamed from gretap0 [ 557.269683][T20840] 0ªî{X¹¦: left promiscuous mode [ 557.278489][T20840] 0ªî{X¹¦: entered allmulticast mode [ 557.292117][T20840] net_ratelimit: 238 callbacks suppressed [ 557.292137][T20840] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 557.467632][ T30] audit: type=1804 audit(1755642916.525:5): pid=20850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4681" name="/newroot/330/cgroup.controllers" dev="tmpfs" ino=1687 res=1 errno=0 [ 557.496748][ T30] audit: type=1800 audit(1755642916.555:6): pid=20850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4681" name="cgroup.controllers" dev="tmpfs" ino=1687 res=0 errno=0 [ 558.351394][T20899] lo speed is unknown, defaulting to 1000 [ 558.741078][T20913] netlink: 'syz.1.4699': attribute type 29 has an invalid length. [ 558.765698][T20913] netlink: 'syz.1.4699': attribute type 29 has an invalid length. [ 559.036860][T20921] __nla_validate_parse: 12 callbacks suppressed [ 559.036881][T20921] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4702'. [ 559.350684][T20936] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4706'. [ 559.388513][T20936] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 559.428772][T20936] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4706'. [ 559.622354][T20945] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4710'. [ 559.636084][T20945] netlink: 'syz.1.4710': attribute type 1 has an invalid length. [ 559.662024][T20945] netlink: 208 bytes leftover after parsing attributes in process `syz.1.4710'. [ 559.672026][T20945] netlink: 'syz.1.4710': attribute type 1 has an invalid length. [ 559.681633][T20945] netlink: 'syz.1.4710': attribute type 2 has an invalid length. [ 559.891450][T20959] netlink: 'syz.1.4714': attribute type 6 has an invalid length. [ 559.901821][T20959] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4714'. [ 560.378956][T20975] netlink: 'syz.0.4720': attribute type 1 has an invalid length. [ 560.387272][T20975] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4720'. [ 560.468198][T20982] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4723'. [ 560.588460][T20990] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4723'. [ 560.735216][T20997] netlink: 'syz.2.4726': attribute type 10 has an invalid length. [ 560.759261][T20998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4726'. [ 560.870389][T20998] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 561.505947][T21048] netlink: 'syz.4.4742': attribute type 29 has an invalid length. [ 561.637705][T21054] tipc: Enabled bearer , priority 0 [ 561.648017][T21055] syzkaller0: entered promiscuous mode [ 561.666254][T21055] syzkaller0: entered allmulticast mode [ 561.723293][T21054] tipc: Resetting bearer [ 561.750894][T21052] tipc: Resetting bearer [ 561.801015][T21052] tipc: Disabling bearer [ 561.897116][T21068] team0: Device gtp0 is of different type [ 562.428829][T21099] IPVS: set_ctl: invalid protocol: 100 224.0.0.2:20001 [ 562.966047][ T1305] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 562.975650][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.181055][ T7316] bond14 (unregistering): (slave gretap1): Releasing active interface [ 563.652339][ T7316] bond1 (unregistering): Released all slaves [ 563.799752][ T7316] bond0 (unregistering): (slave bond2): Releasing backup interface [ 563.820148][ T7316] bond0 (unregistering): Released all slaves [ 563.956233][ T7316] bond2 (unregistering): Released all slaves [ 564.107434][ T7316] bond3 (unregistering): Released all slaves [ 564.113359][T21160] netlink: 'syz.3.4779': attribute type 1 has an invalid length. [ 564.122032][T21160] netlink: 'syz.3.4779': attribute type 4 has an invalid length. [ 564.219008][ T7316] bond4 (unregistering): (slave veth5): Releasing active interface [ 564.228803][ T7316] bond4 (unregistering): (slave veth0_to_bond): Releasing active interface [ 564.238944][ T7316] bond4 (unregistering): Released all slaves [ 564.348701][ T7316] bond5 (unregistering): Released all slaves [ 564.365574][ T7316] bond6 (unregistering): Released all slaves [ 564.477913][ T7316] bond7 (unregistering): Released all slaves [ 564.494779][ T7316] bond8 (unregistering): Released all slaves [ 564.602000][ T7316] bond9 (unregistering): Released all slaves [ 564.716389][ T7316] bond10 (unregistering): Released all slaves [ 564.815026][ T7316] bond11 (unregistering): Released all slaves [ 564.914641][ T7316] bond12 (unregistering): Released all slaves [ 564.930942][ T7316] bond13 (unregistering): Released all slaves [ 565.035237][ T7316] bond14 (unregistering): Released all slaves [ 565.138582][ T7316] bond15 (unregistering): Released all slaves [ 565.239934][ T7316] bond16 (unregistering): Released all slaves [ 565.339197][ T7316] bond17 (unregistering): Released all slaves [ 565.445791][ T7316] bond18 (unregistering): Released all slaves [ 565.551892][ T7316] bond19 (unregistering): Released all slaves [ 565.671407][ T7316] bond20 (unregistering): Released all slaves [ 565.795389][ T7316] bond21 (unregistering): Released all slaves [ 565.900377][ T7316] bond22 (unregistering): Released all slaves [ 566.007191][ T7316] bond23 (unregistering): Released all slaves [ 566.290161][ T7316] tipc: Left network mode [ 566.296145][T21166] netlink: 'syz.1.4783': attribute type 13 has an invalid length. [ 566.394642][T21168] __nla_validate_parse: 13 callbacks suppressed [ 566.394662][T21168] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4784'. [ 566.477036][T21170] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4785'. [ 566.771774][T21170] team0 (unregistering): Port device team_slave_0 removed [ 566.800965][T21170] team0 (unregistering): Port device team_slave_1 removed [ 566.821804][T21170] team0 (unregistering): Port device geneve0 removed [ 567.121832][T21198] netlink: zone id is out of range [ 567.128156][T21198] netlink: zone id is out of range [ 567.134092][T21198] netlink: zone id is out of range [ 567.140177][T21198] netlink: zone id is out of range [ 567.148705][T21198] netlink: zone id is out of range [ 567.154452][T21198] netlink: zone id is out of range [ 567.161602][T21198] netlink: zone id is out of range [ 567.289344][T21198] netlink: zone id is out of range [ 567.349775][T21198] netlink: zone id is out of range [ 568.927832][ T7316] Oops: general protection fault, probably for non-canonical address 0xdffffc001fffe000: 0000 [#1] SMP KASAN PTI [ 568.939782][ T7316] KASAN: probably user-memory-access in range [0x00000000ffff0000-0x00000000ffff0007] [ 568.949342][ T7316] CPU: 0 UID: 0 PID: 7316 Comm: kworker/u8:15 Not tainted syzkaller #0 PREEMPT(full) [ 568.958884][ T7316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 568.968942][ T7316] Workqueue: netns cleanup_net [ 568.973724][ T7316] RIP: 0010:ip6_mc_clear_src+0x18f/0x580 [ 568.979377][ T7316] Code: ff ff ff e8 93 e6 41 01 89 c5 31 ff 89 c6 e8 08 2c 88 f7 85 ed 74 45 e8 bf 27 88 f7 eb 05 e8 b8 27 88 f7 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 f2 90 eb f7 49 8b 2c 24 49 8d 7c [ 568.998985][ T7316] RSP: 0018:ffffc90003abf340 EFLAGS: 00010206 [ 569.005059][ T7316] RAX: 000000001fffe000 RBX: 1ffff1100ab85e02 RCX: ffff888052d9bc00 [ 569.013032][ T7316] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 569.021000][ T7316] RBP: 0000000000000001 R08: ffffffff8fa37e37 R09: 1ffffffff1f46fc6 [ 569.028968][ T7316] R10: dffffc0000000000 R11: fffffbfff1f46fc7 R12: 00000000ffff0000 [ 569.037032][ T7316] R13: dffffc0000000000 R14: 0000000000000538 R15: ffff888055c2f010 [ 569.045010][ T7316] FS: 0000000000000000(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000 [ 569.053944][ T7316] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 569.060532][ T7316] CR2: 0000200000033030 CR3: 0000000037320000 CR4: 00000000003526f0 [ 569.068520][ T7316] Call Trace: [ 569.071835][ T7316] [ 569.074774][ T7316] mld_clear_delrec+0x160/0x660 [ 569.079641][ T7316] ipv6_mc_destroy_dev+0x45/0x5a0 [ 569.084673][ T7316] ? addrconf_ifdown+0x1396/0x1880 [ 569.089797][ T7316] addrconf_ifdown+0x139e/0x1880 [ 569.094744][ T7316] ? tls_dev_event+0x717/0xec0 [ 569.099522][ T7316] ? __pfx_addrconf_ifdown+0x10/0x10 [ 569.104816][ T7316] addrconf_notify+0x1bc/0x1010 [ 569.109679][ T7316] notifier_call_chain+0x1b3/0x3e0 [ 569.114800][ T7316] unregister_netdevice_many_notify+0x14d7/0x1ff0 [ 569.121234][ T7316] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 569.128022][ T7316] ? unregister_netdevice_queue+0x1b3/0x380 [ 569.133925][ T7316] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 569.140171][ T7316] ? __pfx_vxcan_dellink+0x10/0x10 [ 569.145472][ T7316] default_device_exit_batch+0x819/0x890 [ 569.151124][ T7316] ? __pfx___might_resched+0x10/0x10 [ 569.156427][ T7316] ? __pfx_default_device_exit_batch+0x10/0x10 [ 569.162598][ T7316] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 569.168092][ T7316] ? net_generic+0x1e/0x240 [ 569.172611][ T7316] ? __pfx_default_device_exit_batch+0x10/0x10 [ 569.178776][ T7316] ops_undo_list+0x525/0x990 [ 569.183379][ T7316] ? __pfx_ops_undo_list+0x10/0x10 [ 569.188597][ T7316] ? do_raw_spin_unlock+0x122/0x240 [ 569.193803][ T7316] cleanup_net+0x4c5/0x800 [ 569.198235][ T7316] ? __pfx_cleanup_net+0x10/0x10 [ 569.203187][ T7316] ? _raw_spin_unlock_irq+0x23/0x50 [ 569.208391][ T7316] ? process_scheduled_works+0x9ef/0x17b0 [ 569.214115][ T7316] ? process_scheduled_works+0x9ef/0x17b0 [ 569.219855][ T7316] process_scheduled_works+0xae1/0x17b0 [ 569.225418][ T7316] ? __pfx_process_scheduled_works+0x10/0x10 [ 569.231425][ T7316] worker_thread+0x8a0/0xda0 [ 569.236116][ T7316] kthread+0x711/0x8a0 [ 569.240197][ T7316] ? __pfx_worker_thread+0x10/0x10 [ 569.245314][ T7316] ? __pfx_kthread+0x10/0x10 [ 569.249910][ T7316] ? _raw_spin_unlock_irq+0x23/0x50 [ 569.255114][ T7316] ? lockdep_hardirqs_on+0x9c/0x150 [ 569.260320][ T7316] ? __pfx_kthread+0x10/0x10 [ 569.264921][ T7316] ret_from_fork+0x3f9/0x770 [ 569.269609][ T7316] ? __pfx_ret_from_fork+0x10/0x10 [ 569.274724][ T7316] ? __switch_to_asm+0x39/0x70 [ 569.279513][ T7316] ? __switch_to_asm+0x33/0x70 [ 569.284303][ T7316] ? __pfx_kthread+0x10/0x10 [ 569.289003][ T7316] ret_from_fork_asm+0x1a/0x30 [ 569.293796][ T7316] [ 569.296832][ T7316] Modules linked in: [ 569.302254][ T7316] ---[ end trace 0000000000000000 ]--- [ 569.308277][ T7316] RIP: 0010:ip6_mc_clear_src+0x18f/0x580 [ 569.316162][ T7316] Code: ff ff ff e8 93 e6 41 01 89 c5 31 ff 89 c6 e8 08 2c 88 f7 85 ed 74 45 e8 bf 27 88 f7 eb 05 e8 b8 27 88 f7 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 f2 90 eb f7 49 8b 2c 24 49 8d 7c [ 569.336108][ T7316] RSP: 0018:ffffc90003abf340 EFLAGS: 00010206 [ 569.342199][ T7316] RAX: 000000001fffe000 RBX: 1ffff1100ab85e02 RCX: ffff888052d9bc00 [ 569.350217][ T7316] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 569.358256][ T7316] RBP: 0000000000000001 R08: ffffffff8fa37e37 R09: 1ffffffff1f46fc6 [ 569.366824][ T7316] R10: dffffc0000000000 R11: fffffbfff1f46fc7 R12: 00000000ffff0000 [ 569.374925][ T7316] R13: dffffc0000000000 R14: 0000000000000538 R15: ffff888055c2f010 [ 569.383072][ T7316] FS: 0000000000000000(0000) GS:ffff888125d1b000(0000) knlGS:0000000000000000 [ 569.392040][ T7316] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 569.398780][ T7316] CR2: 000000110c34e4b3 CR3: 000000000df36000 CR4: 00000000003526f0 [ 569.407704][ T7316] Kernel panic - not syncing: Fatal exception [ 569.414184][ T7316] Kernel Offset: disabled [ 569.418539][ T7316] Rebooting in 86400 seconds..