last executing test programs: 6.653524832s ago: executing program 3 (id=4439): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbf525017c0000100036800c00020007000000000000000c00018008001600", @ANYRES32=0xee01], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000080)=0x5, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x141400, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f00000000c0)={'bridge0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}) sendto$inet6(r0, &(0x7f0000000040)="aa", 0x1, 0x4048084, &(0x7f0000000100)={0xa, 0x0, 0x100, @ipv4={'\x00', '\xff\xff', @private=0xa010105}, 0x2}, 0x1c) 6.396732288s ago: executing program 3 (id=4446): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'gretap0\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x700, 0x1, 0x5, 0x6, {{0x5, 0x4, 0x3, 0x0, 0x14, 0x62, 0x0, 0x5, 0x29, 0x0, @private=0xa010101, @multicast2}}}}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b036812e0ff64000200475400f6a13bb10000000800894f4820", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'veth0_virt_wifi\x00', 0x7105}) socket(0x400000000010, 0x3, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x74}}, 0x80) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r8, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r9, {0x2, 0x0, @multicast2}, 0x2}}, 0x26) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="14000000", @ANYRES16=r11, @ANYBLOB="2503000000000000000008"], 0x14}}, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000044000701fcffff7c00000c0004"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r12 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r12, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) r13 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r13, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @local, @empty}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x1b, 0x28, 0x64, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x1, 0x1000000}}}}}, 0x0) 6.02172571s ago: executing program 3 (id=4452): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r0, 0x0, &(0x7f0000000080)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, 0x0, 0x0) 5.745046515s ago: executing program 3 (id=4454): getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x3, &(0x7f00000000c0)=""/113, &(0x7f0000000040)=0x71) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x1, @any, 0x0, 0x1}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd70}, 0x2d) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffef}, [@RTA_DST={0x8, 0x1, @loopback}]}, 0x24}}, 0x0) r2 = socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1e00000000000000f8ff07000800000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000080000000000000000000000000000000046fd1141df424cba538ac564b46c5f1a5bb7b9f46db21a3e9ea49b2456098ca2f6e20dfa0f49f79c52e50838b9bbb2a2c4393d19565df11e3d9d7b41fec61d927fc6401530971c8b97754e94a628c0d2500c0f6641103e63c8ec392c9ff5d4c126916b19f325f780cc3ff37bbbc1745a1b67e891aa155a2040ab837ae90b75e737df16d490d978a8cec212f74b404e245f6fbe7ab1b085209a3d48cbe72aac368f71e398b19e41b658704574db561485758bf05c338daf3fbf11905dec6d38d31a25d279fa962a1861f120a58ae589ba48b16d"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r5, 0x0, &(0x7f0000000200)=""/76}, 0x20) sendmmsg$inet(r4, &(0x7f0000002300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4c001) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r6) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000100000000000000000000a38000000080a"], 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="310d2d45c9a82dc696359600000008000300", @ANYRES32=r9, @ANYBLOB="05000800050000000a00340001010101010100000800350000000000080026006c09000008003700020000000a000600"], 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x20000010) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @private=0xffffffff}, 0x10) recvmmsg(r2, &(0x7f000001ef40)=[{{0x0, 0x0, &(0x7f000001c980)=[{0x0}, {0x0}, {0x0}], 0x3, &(0x7f000001ca40)=""/4096, 0x1000}, 0x8}, {{0x0, 0x0, 0x0}, 0x100}], 0x2, 0x20, 0x0) 5.509315541s ago: executing program 3 (id=4459): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x44, 0x0, 0xa, 0x605, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000090a010400000000000000001000000008000a40000000000900010073797a30000000000900020073797a32000000000800054000000033080003400000001408000c40000000000800084040"], 0x7c}}, 0x0) 5.414510763s ago: executing program 3 (id=4462): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000060a0b0400000000004000000200080008000940000000010900010073797a30000000000900020073797a3205000000000000001100010000000000000000000000000a"], 0x5c}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) (async) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x7b, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r1, &(0x7f00000002c0)='E', 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xfffbffff}, 0x1c) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000003c0)={&(0x7f0000000000)=""/5, 0xe000, 0x1000, 0x6, 0x1}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'vlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'vlan0\x00', 0x0}) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r4, 0x600}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x4, 0xc, 0x8, 0x218, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x20, 0x0, 0x2}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x4, 0xc, 0x8, 0x218, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @local}, 0x700, 0x20, 0x0, 0x2}}) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) (async) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000340)={0x1d, r8, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r8, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) (async) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r8, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x4, 0x5, 0xc, @dev={0xfe, 0x80, '\x00', 0x40}, @mcast1, 0x8000, 0xf846, 0x6, 0x2}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x4, 0x5, 0xc, @dev={0xfe, 0x80, '\x00', 0x40}, @mcast1, 0x8000, 0xf846, 0x6, 0x2}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000440)={'gretap0\x00', &(0x7f0000000540)={'sit0\x00', 0x0, 0x0, 0x7803, 0x2, 0x1, {{0x2f, 0x4, 0x1, 0x37, 0xbc, 0x68, 0x0, 0x40, 0x29, 0x0, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@end, @timestamp_prespec={0x44, 0x4c, 0xc5, 0x3, 0x6, [{@empty, 0x4}, {@multicast2, 0x81}, {@remote, 0xf4}, {@local, 0xfff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@private=0xa010100, 0x9}, {@loopback, 0x3}, {@rand_addr=0x64010102, 0x4}, {@local}]}, @cipso={0x86, 0xd, 0x2, [{0x6, 0x4, "1dad"}, {0x7, 0x3, "9e"}]}, @cipso={0x86, 0xe, 0x2, [{0x6, 0x8, "f473cf4f902f"}]}, @ssrr={0x89, 0xb, 0xbb, [@local, @broadcast]}, @lsrr={0x83, 0x1b, 0x6f, [@private=0xa010102, @multicast2, @multicast2, @multicast1, @multicast2, @local]}, @noop, @rr={0x7, 0x17, 0x2, [@loopback, @multicast2, @remote, @dev={0xac, 0x14, 0x14, 0x1a}, @rand_addr=0x64010101]}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000440)={'gretap0\x00', &(0x7f0000000540)={'sit0\x00', 0x0, 0x0, 0x7803, 0x2, 0x1, {{0x2f, 0x4, 0x1, 0x37, 0xbc, 0x68, 0x0, 0x40, 0x29, 0x0, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@end, @timestamp_prespec={0x44, 0x4c, 0xc5, 0x3, 0x6, [{@empty, 0x4}, {@multicast2, 0x81}, {@remote, 0xf4}, {@local, 0xfff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@private=0xa010100, 0x9}, {@loopback, 0x3}, {@rand_addr=0x64010102, 0x4}, {@local}]}, @cipso={0x86, 0xd, 0x2, [{0x6, 0x4, "1dad"}, {0x7, 0x3, "9e"}]}, @cipso={0x86, 0xe, 0x2, [{0x6, 0x8, "f473cf4f902f"}]}, @ssrr={0x89, 0xb, 0xbb, [@local, @broadcast]}, @lsrr={0x83, 0x1b, 0x6f, [@private=0xa010102, @multicast2, @multicast2, @multicast1, @multicast2, @local]}, @noop, @rr={0x7, 0x17, 0x2, [@loopback, @multicast2, @remote, @dev={0xac, 0x14, 0x14, 0x1a}, @rand_addr=0x64010101]}]}}}}}) socket$nl_route(0x10, 0x3, 0x0) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001d000100000000000300000007000000", @ANYRES32=r13, @ANYBLOB="8000b2000a000200aaaaaaaaaa1f00000600050003"], 0x30}, 0x1, 0x0, 0x0, 0x4bd5c6fa5c6152b9}, 0x40800) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x44004a0}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)={0x270, 0x0, 0x10, 0x70bd25, 0x25dfdbfc, {}, [{{0x8, 0x1, r4}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8}, {0x208, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r10}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x5151, 0xc, 0xc0, 0x400}, {0x44, 0x78, 0x9, 0x9}, {0x5, 0xb, 0xa, 0x3b0}, {0xfff2, 0x95, 0x5, 0x7}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}]}}]}, 0x270}, 0x1, 0x0, 0x0, 0x891}, 0x40) 2.599255628s ago: executing program 0 (id=4504): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'erspan0\x00'}) socket(0x10, 0x80002, 0x0) close(0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, r2, 0x0, 0xffffffffffffff72, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000140), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB='+pids '], 0x6) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000500)}, 0x20) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0xf, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, [@jmp={0x5, 0x1, 0xb, 0x3, 0x6, 0x8, 0xfffffffffffffff0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x81}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ldst={0x0, 0x0, 0x2, 0x0, 0x7, 0x30, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}]}, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x6b, &(0x7f0000000240)=""/107, 0x41000, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0xc, 0x947, 0x101}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000640)=[{0x3, 0x1, 0x8, 0xc}], 0x10, 0xffff}, 0x94) socket$packet(0x11, 0x3, 0x300) r7 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x13, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000090000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000073000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0xa4, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x74, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_LOSS={0x44, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xa, 0x6, 0x0, 0x1200000}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x101, 0x9, 0x77f, 0xfffff000}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5, 0x0, 0x0, 0x2}}]}, @TCA_NETEM_RATE={0x14, 0x6, {0xdd07, 0x8, 0x9, 0x9}}]}}}]}, 0xa4}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x8}, [@ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xff00}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0xffff, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r6}, 0x94) 2.12865707s ago: executing program 4 (id=4507): bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000d00)={@cgroup, 0xffffffffffffffff, 0x1e, 0x8}, 0x20) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000d00)={@cgroup, 0xffffffffffffffff, 0x1e, 0x8}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000012b9c78fa67230ca3a3d6318d643c1dc49f85873c1b4e3e05202392f4832f3840b93aa6b98b1a15366f200a4f727a5d4b7ebe7ad1c40372c"], &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{0x1}, &(0x7f0000000140), 0x0}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{0x1}, &(0x7f0000000140), 0x0}, 0x20) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) mmap(&(0x7f0000196000/0x4000)=nil, 0x4000, 0xffffffffefffffff, 0x8032, 0xffffffffffffffff, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000c80)={0xffffffffffffffff, 0x20, &(0x7f0000000c40)={&(0x7f0000000a40)=""/203, 0xcb, 0x0, &(0x7f0000000b40)=""/212, 0xd4}}, 0x10) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000280)=@newlink={0x30, 0x10, 0x503, 0xfffffffc, 0x0, {}, [@IFLA_PHYS_PORT_ID={0x6, 0x22, "1d5a"}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x30}, 0x1, 0x0, 0x0, 0x400d0}, 0x0) 2.109245267s ago: executing program 4 (id=4508): r0 = socket(0x2a, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x5}}}}]}, 0x44}}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000100)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, &(0x7f0000000000)=0x100) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0x8001}]}}]}, 0x3c}}, 0x24000041) r3 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) recvfrom(r3, &(0x7f00000000c0)=""/49, 0x31, 0x2002, 0x0, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.027415072s ago: executing program 0 (id=4510): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a1c000000000a010200000000000000000100ffff08000240000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073017a320000000014000000060a0104000000000000000001"], 0x84}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc020000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00008088000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fdffffffffffffffffffffffffffffff00000000000000004fc4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000020000000000000000000000000000000000000000000000000000000000000084010500ac1414bb000000000000000000000000000000006c0000000a0000007f0000010000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb000004d63200000000000000200100000000000000000000000000000000000000000000000000000700000000000000fc020000000000000000000000000001000000003c00000002000000ac141425000000000000000000000000043500000100000000000000000000000000000000000000000000000000000000000000000000003300000002"], 0x23c}}, 0x4004000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r1, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x2c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x1c, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r9, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x2c, r10, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) r12 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r12, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r12, 0x84, 0x23, &(0x7f0000000240)={r13, 0x2}, 0x8) sendmsg$NL80211_CMD_ADD_TX_TS(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r6, 0x4, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x7}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x14) 1.796769982s ago: executing program 0 (id=4514): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000240)={0x0, 0x5}, &(0x7f0000000340)=0x8) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r3, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0xc851) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a09040000000000000000020000000900020073797a32000000000900010073797a300000000038000480140001800c0001006e6f747261636b000400028020000180070001006374000014000280080001400000000a080002400000009c"], 0x8c}}, 0x0) sendmmsg$inet_sctp(r3, &(0x7f0000000100)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@sndinfo={0x20, 0x84, 0x2, {0xc5e, 0x4, 0x1, 0x168c240b, r4}}], 0x20, 0xc005}], 0x1, 0x10) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000003c0)={r4, 0xf8, 0x18}, &(0x7f0000000400)=0xc) r6 = socket(0x2, 0x80805, 0x0) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000001c0)={r8, 0x9, 0x4, "1a0df80a"}, 0xc) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000900)={0x0, 0x8, 0xfd8}, &(0x7f0000000940)=0x8) sendmmsg$inet_sctp(r1, &(0x7f0000000a80)=[{&(0x7f0000000100)=@in={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000140)="148835a5efc95dc60f745bc94eefc044fb92504b931e13def6ef42121595bec5968ed539e5ab5e994ab8144aa98ed23d1469af19d8053ae5a02f480a0170f7010d6456fa9388f3dcd6d1a1f5ad94743ef1e76f1ee69328a7a8848aa208f9a17e931732af9a25360bc67810b24c378002e317210edbfa4be9b0da03cf8afd58a12cf45c253cbea13004c7eb8acb6dfbfd8cb345bf8a24d34a5d351b5d1613d081d34eec5723f8d2c99439c3f0ba6b64057d3e06ad6f3454b7384726f9fb9d35fcf13bbfa83d2a4f5bc8e2546fc7e785d3a3a42c828ec99016a150c413ef347a6f2c9c64dcce920de8f2429d8be655d7f2", 0xf0}, {&(0x7f00000003c0)="16c817fc93820eb65d0c8e7a7ad3a1dccee0221043bfae73e09d4a4ef608668a4d53233fa5082b65513f4c05dd5c92447ab2f5c88e8ebf3acd65852b9007e514e6b3197d6a3ca0a07e6e3cf0a6ccc59095a9f83988", 0x55}, {&(0x7f0000000440)="718c82f46970f8b0917e483d16b3577bbb6dbe9b0e64de130860a0e546e4586048c9063a66e79d1397a516ce1f04e69de653d41eee052a8cda865fe8e3542ee99b0004680985d1cead4fd2113626f929d65f736911188b05f5bc6bdc34270ce50382170b7d8321d4269e48b4f081c5ba0d96b63c0994e08e3838fa34148f879b7305aa858ae575525a73d5ec2c7c", 0x8e}, {&(0x7f0000000500)="250e5ea3543206e46ebb18b8eb97e5b734559228583ecc4712cb8226e1636a52b4703fbd504cdcd2c06061571fac7638fd52440d581faa239a129952ee8a7bb28ba96ccbb38e00ad428fd1e4089765d3986d3bf20cd193d7594e4d8f7e6655ce3767e38e42f99946d4321deeb3d58dc422e15563e1d27a9ef168312ddfc996fb0fc67209f2a59e9f5adc0f4d8b0e20caab2e0396a0", 0x95}, {&(0x7f00000005c0)="27747edc36266b76dd87ccd1f4bcd7f84203b018d71930467526113357b44464dfc04489129c38ea0cf705756ddccb623542afe707c8efd76ad3b25af888aaec88e51284b9b2aeedfd24959e94b6d16e4bd4537a689178064416b81f21b5ef6a3384e3e5ee925725715e4bb17f419b8f191406f0f367d63602210cea5699f19109410576ee07f5fcca04d665774496f03fe495175fa55324bd1876bdfc57f94c071518999e45", 0xa6}, {&(0x7f0000000680)="334e354817c8e74ee96d623543f9429a117c106fdf118e77d3a57335ccab550712dc688f71ae6169663640d21bf13c240f5a01bf980f615dd0c69ffd6a329a529d5c2905bda05ac102abf0db52aa33455dbc7a707df2f2c39a811878f05f5f17b00c6028e52fdb9cef020d9b70f4d1fb0818d4b609a38a11bf6eecb978979f8365ccdef8e849ed5c1948d09fa10ec56c0061766e1d6d4aaa7259623f83845d9605e117380b900b8c6e2bf6dd19fa77f4378a7d3ba74d76851af458610578cbda6304bd4aad8f75ca1b673813d82e572ad967d1824e", 0xd5}, {&(0x7f0000001180)="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", 0x1000}], 0x7, &(0x7f0000000800)=[@dstaddrv4={0x18, 0x84, 0x7, @dev={0xac, 0x14, 0x14, 0x3d}}, @dstaddrv6={0x20, 0x84, 0x8, @mcast1}, @sndinfo={0x20, 0x84, 0x2, {0x3, 0x0, 0x10, 0x3ff, r2}}, @authinfo={0x18, 0x84, 0x6, {0x2}}], 0x70, 0x4c800}, {&(0x7f0000000880)=@in6={0xa, 0x4e23, 0x9, @local, 0x3}, 0x1c, &(0x7f00000008c0)=[{&(0x7f0000002180)="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", 0x1000}], 0x1, &(0x7f0000000980)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x820a, 0x9, 0x2, r4}}, @authinfo={0x18, 0x84, 0x6, {0xfff}}, @sndrcv={0x30, 0x84, 0x1, {0x8, 0xf, 0x8000, 0x7, 0x10d8db6b, 0x9, 0x8, 0x2cd, r8}}, @dstaddrv4={0x18, 0x84, 0x7, @local}, @sndrcv={0x30, 0x84, 0x1, {0xfe, 0x311, 0x6, 0x863, 0xae6, 0xb, 0x34, 0x9, r9}}, @sndrcv={0x30, 0x84, 0x1, {0x6, 0x0, 0x840a, 0x4, 0x7fffffff, 0x0, 0x9, 0x7}}, @dstaddrv6={0x20, 0x84, 0x8, @remote}], 0x100, 0x4000}], 0x2, 0x40) sendmsg$netlink(r0, &(0x7f0000000080), 0x0) r10 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r10, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x56) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r11, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r11, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r11, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r11, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="82", 0x1}, {&(0x7f0000000180)="efd8", 0x2}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r11, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) connect$inet(r10, &(0x7f0000000380)={0x2, 0x4e25, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10) socket$unix(0x1, 0x5, 0x0) 1.796443029s ago: executing program 4 (id=4515): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0d022abd7000fddbdf2501000000400008803c00008024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b1400040002004e227f000001000000000000000008000100", @ANYRES32=r3], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 1.689494126s ago: executing program 0 (id=4517): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001b00)=ANY=[], 0x120}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmmsg$alg(r1, &(0x7f0000000300)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000140)="90f5e01bc7e58285e1bc161bb692d1c746bf1b92aba00eabc50e68424e821554f316d51895c8649e4974c759da703af7ab973e166b5fb95af3154bd13ebc1ddd1035e315995be8f19c1b7204b0102e95bf5d66994bc23f949179f04415134addfa34c7a53869888113c36ce34b726ec19cf03bba21e64d175f526f8ecc183c71e9cfc31d9a95ea03d578b8fdc826c7715cefad3cdc43fb89798bb8cf57d45518c8b2b09156bfc4b2e85ceac18bbf76c751e1", 0xb2}, {&(0x7f0000000200)}, {&(0x7f00000003c0)="3ead6164046e0a22e8e90374c56ca055f82fdd2d5c03e926aefb008bcd3956711272cf0d71410f755b8a027148b3cd05aca228d6c3c08c3b357688ebc7803435dda6af43c7af01d473b820d2ea5f8a56a02f8f8328808f566c4a53e25a29eb3c21e03eaadec9762bc4ae8c8cb6caf16507fcba54136babe012db5561033a6e90084d11b4af14352803e61e57c66491244d05c8439bc4e188c0137328f3b63f589c5fe34ec08d50002a7a69289d17c3871f6f0bc7a8d508ada8d9af06cd27571ad48e", 0xc2}, {&(0x7f0000000240)="2e1505a004e18048f4cb54c4c6e3f610c5f81918b8c7ec425d810c8cbd31112dce7c4ba4e41af66aa040bf", 0x2b}, {&(0x7f00000004c0)="f4b8b8f4fdc8daf12c49919284dd49e3caf1dd0c14f80a7f2a8deea4ebba7f1f565c85249239fc82ade4c7e8c2a5eaffa456e40fb1c125f6db1d8eb62cf216195289e3961b5a9e48611d54d8d0a0c39214ac8a5c979c51657b64f5a3191f8a753c6a238848951c91a76d29caecd600f0f6c5c179442dc5b9dcc60b4bb616f4455a35d5152700f01381c9ca8ae482469c7473c911eba53ed51e040bc8e21ffaea11", 0xa1}, {&(0x7f00000002c0)="0f83c3a1722cc1f7fe8c52556b294776727da02f3b0e753b2115b27a9ae1915596bf460c15c9acc2889687b15a4abe29", 0x30}], 0x6, &(0x7f0000000640)=ANY=[@ANYBLOB="e8000000000000001701000002000000cf00000031c6a18f9be893426625c09ddf1a4ddf014ebf69109722b22ea3084efbcd61482a4e1e28ffc1e2225c633ca80b7e65b8a935d1380db15d01535c5895b6080396ee3290802a95d113a648492d2f3d609fa90433c5a111da05033e290eeb6e98f60d62fd191c42cfcbbe3a5de7c7ca1e566ba06f62d31e19182fb7aae67027dffb5ecd0a309f21e107c02d8a841ed32351ae793a664cd543b7e1c780ee7aaa75457032989057140d7ec21cb42e4cfaaee8273f2e5087151d7d5d28e601b69c454b71b203625b3596d03787aa1d5f34ff0546612d2a"], 0xe8, 0x4}], 0x1, 0x4084) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r2, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r3, 0x4004743c, 0x20000000) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x50) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.675414584s ago: executing program 4 (id=4518): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000040)={0x2b, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x0, 'dh\x00', 0x3, 0x4, 0x64}, 0x2c) r1 = socket(0x8, 0x1, 0x8000000) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x618e, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES64=r1, @ANYBLOB="00bf4300000000001c0012000000"], 0x3c}}, 0x0) 1.44135696s ago: executing program 2 (id=4519): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x86}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$LINK_DETACH(0x22, &(0x7f0000000140), 0x4) 1.322464178s ago: executing program 1 (id=4520): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'erspan0\x00'}) socket(0x10, 0x80002, 0x0) close(0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, r2, 0x0, 0xffffffffffffff72, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000140), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB='+pids '], 0x6) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000500)}, 0x20) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0xf, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, [@jmp={0x5, 0x1, 0xb, 0x3, 0x6, 0x8, 0xfffffffffffffff0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x81}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ldst={0x0, 0x0, 0x2, 0x0, 0x7, 0x30, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}]}, &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x6b, &(0x7f0000000240)=""/107, 0x41000, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0xc, 0x947, 0x101}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000640)=[{0x3, 0x1, 0x8, 0xc}], 0x10, 0xffff}, 0x94) socket$packet(0x11, 0x3, 0x300) r7 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x13, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000090000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000073000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newqdisc={0xa4, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x74, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_LOSS={0x44, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xa, 0x6, 0x0, 0x1200000}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x101, 0x9, 0x77f, 0xfffff000}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5, 0x0, 0x0, 0x2}}]}, @TCA_NETEM_RATE={0x14, 0x6, {0xdd07, 0x8, 0x9, 0x9}}]}}}]}, 0xa4}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x8}, [@ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xff00}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0xffff, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r6}, 0x94) 1.284282053s ago: executing program 0 (id=4521): r0 = epoll_create1(0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000040)={0x80000017}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000940)=ANY=[@ANYRESOCT=r1, @ANYRES8=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000a000000000000000000000080400000000000000000080000000012000000000000000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffff0c0100000000000000000000000000000000030000000000000000000000000000e48cea4cbc082afffbaefd875be45d287522f6d481a88588a19b92073bc02bf06218556cf1213811109a0b4ebddb93127d99090f2ef78f95cd6eecc5a45b", @ANYRES16=r0, @ANYRES32=r1, @ANYRESDEC, @ANYRESOCT=r0, @ANYRESDEC=r1, @ANYBLOB="250ce9ea418baa1fe213000f7c4a912057a3f5f89311646db5515fcbece1c641310d084e743e869d2a8f842a3f8004e009ef97cb8f9b30c833c755fd2bcb1fe198db2028da6ef7c46834ce9d6a4e075a465024292a992f2c94714ad55214295f7a41e80963cb6aef213b7e71ecdceb2bd88966ade8e7b649f208472fba", @ANYRES64=r0, @ANYRES32=r1, @ANYRES32=0x0, @ANYRESOCT=r1, @ANYRES32=r1, @ANYRESHEX=0x0], 0xfc}, 0x1, 0x0, 0x0, 0x20004011}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r6, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r6, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x40) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r2) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r2) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000eeff120000000a0004007778616e3300000008001500", @ANYRES32, @ANYBLOB="080001"], 0x30}}, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000180)={0xbdb9, 0x0, 0x5, 0x5, 0x0}, &(0x7f00000001c0)=0x10) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x76, &(0x7f0000000200)={r9, 0x1edb}, 0x8) 1.192935629s ago: executing program 2 (id=4522): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="540100001800010000000000000000001d0100001500030000000000000000008ca5be073cff296e020000001e01060001", @ANYRESOCT], 0x154}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@delchain={0x64, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xa}}, [@TCA_RATE={0x6}, @filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x20, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5}]}}]}]}]}}]}, 0x64}}, 0x0) r2 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x6}, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="230f15390000000000000a00000008000280040004"], 0x1c}}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000200)={0x0, 0x8}, 0x8) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0x1000, 0x4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r4) sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="01002cbd7000fbdbdf251b00000008009a0002000000196d0901c4057c0c4130855cac7c9c5da31ffbdd457c51323f480da673dd505e1f768460ade1f02c5294a0c2a890dbd829f10eaa7edfa1dd9914d1b78e8817a59ffe17754733fc51c8c988e0ff4932409d9fbfe9ab4bfe6aaca8a19d4891d3e4bc1163547151c1aa127f1bdd8b4f10aee83b08051cd4717b0fb04735b36f102679302c0fe599acf15b12ebfccd0d9b0e9b486616b78950c5a46ae997f1ffc8e892a971f67452f9428df4ab3922fac582df321bc9baed16e286058d12c3ba93c27de46e42836f5c"], 0x1c}, 0x1, 0x0, 0x0, 0x4040080}, 0x20000090) 1.141779448s ago: executing program 1 (id=4523): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="14010000330001fff00000000000000003"], 0x114}], 0x1}, 0x20005040) 1.037597311s ago: executing program 2 (id=4524): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x1fc, 0x4) sendmmsg$inet6(r0, &(0x7f00000027c0)=[{{&(0x7f00000002c0)={0xa, 0x4e20, 0x0, @mcast2, 0x41}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000a40)="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", 0x1fd}], 0x1}, 0x3e8}], 0x1, 0x80) 973.065036ms ago: executing program 0 (id=4525): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x5}, 0x6e) (async) connect$unix(r0, &(0x7f0000000800)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002200)={&(0x7f0000002100)=ANY=[@ANYBLOB="3400000011000d0927bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000010c0200140003"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="23a69789598fcdd76fb8b02c0f7b0a8307ae93df4d2c1820bdfbe88c76d884ddb315511530526000e5c5a3086bf0f1cedd79cf56560ee0c9e97d1a498813570dc43c53726727f6fa9d35be72782f265c45a66d8a7c02ce37909a4bcf954bacdd262639e7ef24b60f6b7de3530378400467803a45d65b5daadb6fda0d37e07ff27a7d30631c2207ad601203e2f9fa92", 0x8f}], 0x1) 809.181009ms ago: executing program 1 (id=4526): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x58, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {}, {0xd, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x28, 0x2, [@TCA_CGROUP_EMATCHES={0x24, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x58}}, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c0000000000000e0021001400000002800000121f", 0x2e}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 808.664365ms ago: executing program 2 (id=4527): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'gretap0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x7809, 0x8000, 0x5, 0x5, {{0x1f, 0x4, 0x0, 0x2, 0x7c, 0x68, 0x0, 0x7, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x7, 0xd7, [@dev={0xac, 0x14, 0x14, 0x2d}]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0xc, 0x83, 0x3, 0x3, [{@remote}]}, @ra={0x94, 0x4}, @ssrr={0x89, 0x7, 0x4a, [@rand_addr=0x64010102]}, @ssrr={0x89, 0x2b, 0xe4, [@dev={0xac, 0x14, 0x14, 0x1e}, @remote, @loopback, @remote, @multicast2, @empty, @empty, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @lsrr={0x83, 0x17, 0xf4, [@broadcast, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @remote]}, @end]}}}}}) sendto$packet(0xffffffffffffffff, &(0x7f0000000280)="a9e9262a88e52e64a2a2e36c042fce264f986031128dd45a88b1356a455c30011a47d8420b5bca21b6", 0x29, 0x9001, &(0x7f00000002c0)={0x11, 0x1b, r0, 0x1, 0x5, 0x6, @local}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="61106c007fd2000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) 786.657638ms ago: executing program 2 (id=4528): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0d022abd7000fddbdf2501000000400008803c00008024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b1400040002004e227f000001000000000000000008000100", @ANYRES32=r3], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 741.844172ms ago: executing program 1 (id=4529): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r1}, &(0x7f0000000a00), &(0x7f0000000a40)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r1}, &(0x7f0000000880), &(0x7f00000008c0)=r0}, 0x20) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)={0x114, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4f}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x80}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xfff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1}]}, @NL80211_ATTR_CQM={0x6c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xe}, @NL80211_ATTR_CQM_RSSI_THOLD={0x4}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x81}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7fff}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5f6}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x4}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x6, 0x5, 0x1]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x24, 0x1, [0x3ee8, 0x6, 0xfffffffe, 0xffffffff, 0x7, 0xdf, 0x7fffffff, 0x4]}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x200}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xb}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x40}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x54}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x40a}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x9}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x3}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x5}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xff}, @NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x8, 0x8, 0x4, 0x5, 0xd]}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x4000010}, 0x20048114) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) getsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="0e00000000000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="cdb5496c7b87c4c8a5d639b5c043fabb4a2fb63f22c9388606a46e267e494584fae869cda4d529bb78d04ed595ef7b5621834717b4bc33b402ce4c7561ec40bc2f9ef729852c50f47c12115926d4c3bf0a7d7dea27515b738842eeb258efa3afa1e70b31fdbffe1a3d55861453a3eb164e339dc5ed6fc0e2a93dec688717ef04913454b12a7988162bd1cd43edac64ca341bd683d048e09326a5adbfca8227125e4e8bf0a98c0dd2dec4dd8fdd851897945fd630dbc6edc947b2d2e012681908d09b347670b4c89c9db44c2d4d", @ANYRES64=0x0], 0x20) socket$can_raw(0x1d, 0x3, 0x1) 537.139445ms ago: executing program 1 (id=4530): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x4e2a, @broadcast}, {0x0, @multicast}, 0x68, {0x2, 0xce23, @empty}, 'lo\x00'}) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) close(r2) r3 = socket(0x2, 0x3, 0xff) syz_emit_ethernet(0x22, &(0x7f0000000080)={@broadcast, @empty, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x3, 0xc, 0x14, 0x64, 0x0, 0x1, 0xff, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a200000001a0af900000000000000000001000400090001"], 0xd8}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = socket$kcm(0x2, 0x2, 0x2) sendmsg$inet(r5, 0x0, 0x4008804) socket(0x10, 0x3, 0x0) ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f0000000a00)) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff0100000000000000000000000000010600040001"], 0x58}}, 0x0) 524.134524ms ago: executing program 4 (id=4531): socket$l2tp6(0xa, 0x2, 0x73) (async) r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$sock_cred(r0, 0x1, 0x11, 0xfffffffffffffffd, &(0x7f0000000280)=0x7f) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0xf, 0x0, 0x0) (async) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0xf, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b000000000000007bfeefe27500080000000000243ecc5aad5116e48a1c4a252ecb2aae9864b23bb78087", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000050000000400"/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000300), &(0x7f0000000400)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000600)={0x1, 0xffffffffffffffff}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x2b, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000006000000000000000b00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000050a0001fcffffff4503000018000000950000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000d745e0fff0ffffff7a530100ffffffffb7080000000000007b8af8ff00000000b7080000160c00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="60413c82469bc2f2df24f437040000000000000000b70500000800000085000000a5000000bf91000000000000b7020000000000008500000085000000b70000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r7, 0xe8, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r7, 0xe8, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r8 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=@ipv4_newrule={0x38, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x20, 0x0, 0x3}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth0_macvtap\x00'}, @FRA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=@ipv4_newrule={0x38, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x20, 0x0, 0x3}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth0_macvtap\x00'}, @FRA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)={0x14, 0x0, 0x7d148e55d00ba80f, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x600c0}, 0x26008000) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)={0x14, 0x0, 0x7d148e55d00ba80f, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x600c0}, 0x26008000) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e02, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) (async) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) sendmmsg$inet6(r1, &(0x7f0000003cc0), 0x0, 0x48000) 517.068103ms ago: executing program 2 (id=4532): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x21, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7050000000000007b8af8ff00000000b7080000000000007b8af0ffffff0000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1e, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg(r0, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)="81b289d2746e8997d95ab9444f9e2d92bff8a2be7cd942b55235a107cc01ab4694f9c0d2fd87e8698677138a62a9122e01415aaedacb3b3607e72bc02b45ab381de774cbae7c8a6dbbd4a2745738232a4ab19fe14746ca2c4f2f00e8e75379c8240cb7057dcc63c4e2252eac212ad46698b0057e29aa6a45b69ff298802d429a350e2792001f120ad8345eca7685611efbabb9c2be4fc89b3c9c12ba72fff76086f9cfb3fdfffe4ce91e1a49390a22b54c09ac97e4a133112824", 0xba}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x1e8}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB], 0x120}}], 0x3, 0x11) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000731139000000000020000000000000009500200000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x44}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r6 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001300)=@newtfilter={0x2c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {}, {0x1, 0x2}}, [@TCA_CHAIN={0x8, 0xb, 0x80000000}]}, 0x2c}}, 0x8081) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0x0, 0xd}}}, 0x24}}, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r11 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r10, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x1, 0x3, 0x83, 0x2, 0x14, 0x6}, @ipv4=@tcp={{0x6, 0x4, 0x0, 0x4, 0x2c, 0x0, 0x0, 0x8, 0x2f, 0x0, @private=0xa010102, @broadcast, {[@noop]}}, {{0x8100, 0x88a8, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x8, 0x0, 0xb9}}}}, 0x3a) bind$packet(r4, &(0x7f0000000900)={0x11, 0xe6, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) write(0xffffffffffffffff, 0x0, 0x0) 269.217503ms ago: executing program 4 (id=4533): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MFC(r1, 0x29, 0xcd, 0x0, 0x5c) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x38, r0, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xf4, 0x2e}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x177f}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]]}, 0x38}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x0) 0s ago: executing program 1 (id=4534): getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6=@mcast1}}, &(0x7f0000000540)=0xe8) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffe3d}, 0x48) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000580)=0x536, 0x4) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@RTM_GETMDB={0x18, 0x56, 0x4, 0x70bd27, 0x25dfdbfc, {0x7, r2}}, 0x18}, 0x1, 0x0, 0x0, 0x41}, 0x4c004) sendmsg$nl_generic(r1, &(0x7f0000001840)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001800)={&(0x7f0000005340)=ANY=[@ANYBLOB="98130000240028082abd7000fbdbdf250600000098005480a9467248a53050b2ca6c54e492dfbd0e09c8456a6ff86611bdc26fa03fe778015190d01daefdcd3a83bf4cbdf0160445fe352652f004ea58fda5c0164c81b4b469fcfee7c858f943e66bf43837e0e60ee8b442eacde5cd0820a84291ea7d339830b155f21d629de49edc6c110f86aa7b91f5cc9a2628fded3029c814a79e758a3e3229921f2600dd8004009c80040056800c00bc00010000000000000004000080e376e1298ec76df182ff000008003e000100000008002e00f7797f5f4e4d75fc7e694d34ad01e1b887071b4e31affc405033583c75d506a060997d0031803ea61e70e93ad7418d9fc7f2c37c6dd338cd7faff2fe29d104792a9729f4b36052349bb634efb21308eb8f4eb2ad97dde106b16b4648b46ae333541b0e416fe63da6ad83cbd62462fe10dadae84f2cd94e7717aac68e8b1970ea17df1a40203bfeb9f0c32c29a8a3ff19cf9992080024000a01010204005a80000000b5012e80bdeb52d98374a00121783ea6eec6ad0cb843acbc33a585097c3cce0cebfa674ca6c66dd181814c7b12f53f8aa7dc090fbea562f4702defc07048ad1395b9d108a7ec1dd8d87c667ecc231527cd355b0aab4d43c647d6206406a351fafff3c0eb698ed3eceb4c285ff1ced57926dd3d51c3b33bafd56900cb98fca93671d29cd8a8814de4476fa32bbf5b24134500a5fe468756d45d1001a16657711cc70800be000ffc3ce5aa5ddc1b3afeb7009dcd53a124c898926dbb0e9aa93fd70994d276d7274bc5f1c4bf96df68bc6ef45ac91c70b20f469494c873ff9b970a4f892a8fa23426e36a4e41f77770f13a383b2894c718f6e9d24b369850b4c1de3a00"/643, @ANYRES32=r0, @ANYBLOB="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"], 0x1398}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r4 = socket$inet6(0xa, 0x3, 0x87) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'gre0\x00', &(0x7f00000000c0)={'sit0\x00', r5, 0x1, 0x10, 0x72be3565, 0x36, {{0x22, 0x4, 0x0, 0x1, 0x88, 0x64, 0x0, 0xa, 0x29, 0x0, @multicast1, @loopback, {[@generic={0x7, 0xf, "b51bde9aeb93768c2e18cbfe79"}, @ra={0x94, 0x4}, @cipso={0x86, 0x25, 0x0, [{0x0, 0x12, "e2084fe9a036e988accf120848000000"}, {0x1, 0xa, "1c318adc3dd3b747"}, {0x5, 0x3, "b6"}]}, @lsrr={0x83, 0x1b, 0x47, [@dev={0xac, 0x14, 0x14, 0xb}, @remote, @local, @local, @multicast2, @private=0xa010102]}, @noop, @timestamp_prespec={0x44, 0x1c, 0x8b, 0x3, 0x8, [{@loopback, 0x8000}, {@dev={0xac, 0x14, 0x14, 0x42}, 0x6}, {@loopback, 0x8}]}, @noop]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="74007aa29839a672d5d47000fbdbdf25000003000000ff2f88e38502166b4df88e", @ANYRES32=r6, @ANYBLOB="54000c8008000300070000000800020002000000080003000900000008000200010000000800030000000000080002008100000008000300ff0f0000060001003e4900000800020002000000080002003e667c6f"], 0x74}, 0x1, 0x0, 0x0, 0x4801}, 0x20000840) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000101c010012000000000000000700000a20000000000a0300"], 0x8c}}, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r8, 0x84, 0x73, &(0x7f0000001880)={0x0, 0xdb, 0x30, 0x4, 0x8}, &(0x7f00000018c0)=0x18) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@multicast1, 0xfffd, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x0, 0x9}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x1, 0x1, 0x0, 0x1, 0x1}, {{@in=@empty, 0x1, 0x32}, 0x2, @in6=@private0, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) kernel console output (not intermixed with test programs): 5075] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3146'. [ 304.880190][T15092] netlink: 'syz.1.3153': attribute type 3 has an invalid length. [ 304.937463][T15092] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3153'. [ 305.484920][T15116] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3161'. [ 305.770908][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 305.787268][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 305.804113][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 305.813716][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 305.821516][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 305.841936][T15132] bond2: entered promiscuous mode [ 305.874780][T15132] bond2: entered allmulticast mode [ 305.886999][T15132] 8021q: adding VLAN 0 to HW filter on device bond2 [ 306.039096][T14647] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.064909][T14647] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.225425][T14647] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.248155][T14647] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.319379][T15127] hsr0 speed is unknown, defaulting to 1000 [ 306.337681][T15127] lo speed is unknown, defaulting to 1000 [ 306.364682][T14647] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.390088][T14647] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.494692][T14647] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.503113][T15161] netlink: 'syz.1.3175': attribute type 21 has an invalid length. [ 306.504778][T14647] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.835008][T15172] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3180'. [ 306.940475][T15177] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3182'. [ 306.963593][T15127] vxcan1 speed is unknown, defaulting to 1000 [ 307.003868][T15177] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3182'. [ 307.059186][T14647] dummy0: left allmulticast mode [ 307.085993][T14647] bridge0: port 3(dummy0) entered disabled state [ 307.119730][T14647] bridge_slave_1: left allmulticast mode [ 307.125695][T14647] bridge_slave_1: left promiscuous mode [ 307.131616][T14647] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.160435][T14647] bridge_slave_0: left allmulticast mode [ 307.170636][T14647] bridge_slave_0: left promiscuous mode [ 307.180989][T14647] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.646909][T14647] team0: Port device geneve0 removed [ 307.903786][ T51] Bluetooth: hci3: command tx timeout [ 308.095082][T14647] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 308.110432][T14647] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 308.121790][T14647] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 308.136674][T14647] bond0 (unregistering): Released all slaves [ 308.269976][T14647] bond1 (unregistering): (slave veth3): Releasing active interface [ 308.278435][T14647] vlan2: entered promiscuous mode [ 308.295396][T14647] bond1 (unregistering): (slave vlan2): Releasing active interface [ 308.306902][T14647] bond1 (unregistering): Released all slaves [ 308.423268][T14647] bond2 (unregistering): (slave veth5): Releasing active interface [ 308.434127][T14647] bond2 (unregistering): Released all slaves [ 308.449574][T14647] bond3 (unregistering): Released all slaves [ 308.561201][T14647] bond4 (unregistering): (slave veth7): Releasing active interface [ 308.569620][T14647] veth0_to_bond: entered promiscuous mode [ 308.578070][T14647] bond4 (unregistering): (slave veth0_to_bond): Releasing active interface [ 308.588593][T14647] bond4 (unregistering): Released all slaves [ 308.606303][T14647] bond5 (unregistering): Released all slaves [ 308.981445][T15218] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3195'. [ 309.058671][T15220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3196'. [ 309.060432][T15127] chnl_net:caif_netlink_parms(): no params data found [ 309.067805][T15220] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3196'. [ 309.256674][T15232] netlink: 'syz.0.3199': attribute type 1 has an invalid length. [ 309.266317][T15232] netlink: 'syz.0.3199': attribute type 3 has an invalid length. [ 309.288270][T15232] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3199'. [ 309.357586][T15127] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.373773][T15127] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.386607][T15127] bridge_slave_0: entered allmulticast mode [ 309.395201][T15127] bridge_slave_0: entered promiscuous mode [ 309.409573][T15127] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.418386][T15127] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.436907][T15127] bridge_slave_1: entered allmulticast mode [ 309.445522][T15127] bridge_slave_1: entered promiscuous mode [ 309.598707][T15127] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.665650][T15127] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.793302][T15127] team0: Port device team_slave_0 added [ 309.807375][T15127] team0: Port device team_slave_1 added [ 309.926279][T15127] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.949196][T15127] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.983704][ T51] Bluetooth: hci3: command tx timeout [ 309.992258][T15127] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 310.011140][T15127] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 310.019020][T15127] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.047907][T15127] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.060224][T15269] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3211'. [ 310.143139][T15127] hsr_slave_0: entered promiscuous mode [ 310.151369][T15127] hsr_slave_1: entered promiscuous mode [ 310.157768][T15127] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 310.166184][T15127] Cannot create hsr debugfs directory [ 310.176805][T15275] netlink: 564 bytes leftover after parsing attributes in process `syz.1.3214'. [ 310.188604][T15275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3214'. [ 310.315455][T15273] can: request_module (can-proto-0) failed. [ 310.363266][T14647] tipc: Disabling bearer [ 310.379521][T14647] tipc: Left network mode [ 310.580791][T15285] batadv_slave_0 (unregistering): left promiscuous mode [ 311.461347][T15324] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3230'. [ 311.528496][T15321] dvmrp8: entered allmulticast mode [ 312.064086][ T51] Bluetooth: hci3: command tx timeout [ 312.228406][T14647] hsr_slave_0: left promiscuous mode [ 312.286997][T14647] hsr_slave_1: left promiscuous mode [ 312.357656][T14647] veth0_macvtap: left promiscuous mode [ 312.368278][T14647] veth1_vlan: left promiscuous mode [ 312.375592][T14647] veth0_vlan: left promiscuous mode [ 312.621441][T14647] pim6reg (unregistering): left allmulticast mode [ 313.010427][T14647] team0 (unregistering): Port device team_slave_1 removed [ 313.057450][T14647] team0 (unregistering): Port device team_slave_0 removed [ 313.297711][T14676] smc: removing ib device syz2 [ 313.626604][ T5853] hsr0 speed is unknown, defaulting to 1000 [ 313.632741][ T5853] infiniband syz1: ib_query_port failed (-19) [ 313.640503][ T5936] vxcan1 speed is unknown, defaulting to 1000 [ 313.694122][ T5936] syz2: Port: 1 Link DOWN [ 313.777543][T15127] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 313.878254][T15355] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3240'. [ 313.879681][T15127] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 313.943165][T15127] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 313.953634][T15362] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3237'. [ 314.057791][T15127] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 314.144529][ T5166] Bluetooth: hci3: command tx timeout [ 314.402827][T15378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3242'. [ 314.600358][T15127] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.731688][T15127] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.790566][ T1330] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.797826][ T1330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.855290][ T1330] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.862507][ T1330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.924843][T15394] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3247'. [ 314.948646][T15394] netlink: 49 bytes leftover after parsing attributes in process `syz.4.3247'. [ 314.963904][T15393] x_tables: duplicate underflow at hook 2 [ 315.287885][T15408] Cannot find add_set index 1 as target [ 315.366093][T15413] x_tables: ip_tables: osf match: only valid for protocol 6 [ 315.640634][T15420] netlink: 'syz.2.3255': attribute type 1 has an invalid length. [ 315.744373][T15425] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3257'. [ 315.785833][T15425] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3257'. [ 315.878001][T15127] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 316.146080][T15127] veth0_vlan: entered promiscuous mode [ 316.189520][T15127] veth1_vlan: entered promiscuous mode [ 316.242227][T15444] xt_nfacct: accounting object `syz1' does not exists [ 316.323597][T15127] veth0_macvtap: entered promiscuous mode [ 316.375557][T15127] veth1_macvtap: entered promiscuous mode [ 316.459442][T15127] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 316.511212][T15453] netlink: 'syz.0.3267': attribute type 9 has an invalid length. [ 316.511566][T15127] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 316.570461][T15454] netlink: 'syz.0.3267': attribute type 9 has an invalid length. [ 316.587564][T15127] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.610916][T15127] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.625075][T15457] netlink: 'syz.2.3269': attribute type 10 has an invalid length. [ 316.633167][T15127] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.644765][T15127] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.674584][T15457] batman_adv: batadv0: Adding interface: team0 [ 316.680789][T15457] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560. [ 316.729644][T15457] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 316.977120][T14647] IPVS: stop unused estimator thread 0... [ 317.018619][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.045490][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.202981][T14666] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.221896][T14666] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.276052][T15485] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3277'. [ 317.365726][T15486] dvmrp0: entered allmulticast mode [ 317.413551][T15491] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3278'. [ 317.814826][T15510] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3285'. [ 317.891623][T15513] nbd: socks must be embedded in a SOCK_ITEM attr [ 317.906725][T15512] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 317.917645][ T5936] IPVS: starting estimator thread 0... [ 318.070622][T15515] IPVS: using max 24 ests per chain, 57600 per kthread [ 318.198536][T15522] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3288'. [ 318.421889][T15530] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3292'. [ 318.476907][T15534] FAULT_INJECTION: forcing a failure. [ 318.476907][T15534] name failslab, interval 1, probability 0, space 0, times 0 [ 318.548768][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 318.558758][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 318.570101][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 318.580899][T15534] CPU: 1 UID: 0 PID: 15534 Comm: syz.4.3294 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(full) [ 318.580928][T15534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 318.580942][T15534] Call Trace: [ 318.580950][T15534] [ 318.580958][T15534] dump_stack_lvl+0x189/0x250 [ 318.580989][T15534] ? __pfx____ratelimit+0x10/0x10 [ 318.581014][T15534] ? __pfx_dump_stack_lvl+0x10/0x10 [ 318.581050][T15534] ? __pfx__printk+0x10/0x10 [ 318.581083][T15534] ? __pfx___might_resched+0x10/0x10 [ 318.581115][T15534] ? fs_reclaim_acquire+0x7d/0x100 [ 318.581140][T15534] should_fail_ex+0x414/0x560 [ 318.581184][T15534] should_failslab+0xa8/0x100 [ 318.581218][T15534] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 318.581245][T15534] ? __alloc_skb+0x112/0x2d0 [ 318.581268][T15534] __alloc_skb+0x112/0x2d0 [ 318.581291][T15534] netlink_ack+0x146/0xa50 [ 318.581310][T15534] ? __pfx_genl_rcv_msg+0x10/0x10 [ 318.581324][T15534] ? ref_tracker_free+0x63a/0x7d0 [ 318.581350][T15534] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 318.581364][T15534] ? __pfx_nl80211_post_doit+0x10/0x10 [ 318.581378][T15534] ? __pfx_ref_tracker_free+0x10/0x10 [ 318.581407][T15534] netlink_rcv_skb+0x28c/0x470 [ 318.581432][T15534] ? __pfx_genl_rcv_msg+0x10/0x10 [ 318.581449][T15534] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 318.581482][T15534] ? down_read+0x1ad/0x2e0 [ 318.581502][T15534] genl_rcv+0x28/0x40 [ 318.581516][T15534] netlink_unicast+0x75c/0x8e0 [ 318.581543][T15534] netlink_sendmsg+0x805/0xb30 [ 318.581572][T15534] ? __pfx_netlink_sendmsg+0x10/0x10 [ 318.581595][T15534] ? aa_sock_msg_perm+0x94/0x160 [ 318.581613][T15534] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 318.581629][T15534] ? __pfx_netlink_sendmsg+0x10/0x10 [ 318.581651][T15534] __sock_sendmsg+0x21c/0x270 [ 318.581671][T15534] ____sys_sendmsg+0x505/0x830 [ 318.581698][T15534] ? __pfx_____sys_sendmsg+0x10/0x10 [ 318.581728][T15534] ? import_iovec+0x74/0xa0 [ 318.581752][T15534] ___sys_sendmsg+0x21f/0x2a0 [ 318.581777][T15534] ? __pfx____sys_sendmsg+0x10/0x10 [ 318.581827][T15534] ? __fget_files+0x2a/0x420 [ 318.581840][T15534] ? __fget_files+0x3a0/0x420 [ 318.581863][T15534] __x64_sys_sendmsg+0x19b/0x260 [ 318.581888][T15534] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 318.581919][T15534] ? __pfx_ksys_write+0x10/0x10 [ 318.581944][T15534] ? do_syscall_64+0xbe/0x3b0 [ 318.581964][T15534] do_syscall_64+0xfa/0x3b0 [ 318.581979][T15534] ? lockdep_hardirqs_on+0x9c/0x150 [ 318.581994][T15534] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.582009][T15534] ? clear_bhb_loop+0x60/0xb0 [ 318.582027][T15534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.582041][T15534] RIP: 0033:0x7f061bd8e929 [ 318.582054][T15534] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 318.582067][T15534] RSP: 002b:00007f061cb2e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 318.582083][T15534] RAX: ffffffffffffffda RBX: 00007f061bfb5fa0 RCX: 00007f061bd8e929 [ 318.582094][T15534] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 318.582108][T15534] RBP: 00007f061cb2e090 R08: 0000000000000000 R09: 0000000000000000 [ 318.582118][T15534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 318.582132][T15534] R13: 0000000000000000 R14: 00007f061bfb5fa0 R15: 00007ffed7e65e08 [ 318.582165][T15534] [ 318.582539][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 318.938095][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 319.118702][T14676] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.143214][T14676] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.254950][T15536] lo speed is unknown, defaulting to 1000 [ 319.285390][T14676] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.324052][T14676] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.425780][T14676] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.453910][T14676] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.569892][T15580] __nla_validate_parse: 1 callbacks suppressed [ 319.569912][T15580] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3308'. [ 319.646081][T14676] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.685489][T14676] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.766325][T15580] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3308'. [ 320.091728][T15609] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3315'. [ 320.676094][T14676] bond3 (unregistering): (slave gretap1): Releasing active interface [ 320.805271][T14676] dvmrp0 (unregistering): left allmulticast mode [ 321.025260][ T51] Bluetooth: hci1: command tx timeout [ 321.081320][T14676] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 321.091773][T14676] bond_slave_0: left promiscuous mode [ 321.099856][T14676] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 321.111421][T14676] bond_slave_1: left promiscuous mode [ 321.120760][T14676] bond0 (unregistering): (slave team0): Releasing backup interface [ 321.129419][T14676] team0: left promiscuous mode [ 321.135158][T14676] team_slave_0: left promiscuous mode [ 321.141363][T14676] team_slave_1: left promiscuous mode [ 321.149684][T14676] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 321.158282][T14676] dummy0: left promiscuous mode [ 321.167247][T14676] bond0 (unregistering): Released all slaves [ 321.268074][T14676] bond1 (unregistering): (slave veth3): Releasing active interface [ 321.276430][T14676] vlan2: entered promiscuous mode [ 321.284690][T14676] bond1 (unregistering): (slave vlan2): Releasing active interface [ 321.296718][T14676] bond1 (unregistering): Released all slaves [ 321.392968][T14676] bond2 (unregistering): (slave veth5): Releasing active interface [ 321.404240][T14676] bond2 (unregistering): Released all slaves [ 321.420013][T14676] bond3 (unregistering): Released all slaves [ 321.434606][T14676] bond4 (unregistering): Released all slaves [ 321.538384][T14676] bond5 (unregistering): Released all slaves [ 321.552807][T14676] bond6 (unregistering): Released all slaves [ 321.659826][T14676] bond7 (unregistering): (slave veth7): Releasing active interface [ 321.669670][T14676] bond7 (unregistering): Released all slaves [ 321.773007][T14676] bond8 (unregistering): (slave veth9): Releasing active interface [ 321.781137][T14676] veth0_to_bond: entered promiscuous mode [ 321.790897][T14676] bond8 (unregistering): (slave veth0_to_bond): Releasing active interface [ 321.801068][T14676] bond8 (unregistering): Released all slaves [ 321.905523][T14676] bond9 (unregistering): Released all slaves [ 322.002676][T14676] bond10 (unregistering): Released all slaves [ 322.109031][T14676] bond11 (unregistering): Released all slaves [ 322.302373][T15536] chnl_net:caif_netlink_parms(): no params data found [ 322.442073][T15633] pim6reg: entered allmulticast mode [ 322.455557][T14676] tipc: Disabling bearer [ 322.465376][T15640] netlink: zone id is out of range [ 322.470536][T15640] netlink: zone id is out of range [ 322.476248][T14676] tipc: Left network mode [ 322.477539][T15638] pim6reg: left allmulticast mode [ 322.496237][T15640] netlink: zone id is out of range [ 322.511854][T15640] netlink: zone id is out of range [ 322.550732][T15640] netlink: zone id is out of range [ 322.557890][T15640] netlink: zone id is out of range [ 322.570545][T15640] netlink: zone id is out of range [ 322.581224][T15640] netlink: zone id is out of range [ 322.592410][T15640] netlink: zone id is out of range [ 322.785731][T15536] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.819675][T15536] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.829231][T15649] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3325'. [ 322.840125][T15536] bridge_slave_0: entered allmulticast mode [ 322.848261][T15536] bridge_slave_0: entered promiscuous mode [ 322.892388][T15649] bridge_slave_1: left allmulticast mode [ 322.900099][T15649] bridge_slave_1: left promiscuous mode [ 322.909092][T15649] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.921859][T15649] bridge_slave_0: left allmulticast mode [ 322.933558][T15649] bridge_slave_0: left promiscuous mode [ 322.961377][T15649] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.061183][T15536] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.071195][T15536] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.082401][T15536] bridge_slave_1: entered allmulticast mode [ 323.090931][T15536] bridge_slave_1: entered promiscuous mode [ 323.103897][ T5936] page_pool_release_retry() stalled pool shutdown: id 39, 2 inflight 60 sec [ 323.112663][ T51] Bluetooth: hci1: command tx timeout [ 323.286928][T15536] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.321119][T15536] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.493110][T15536] team0: Port device team_slave_0 added [ 323.504928][T15536] team0: Port device team_slave_1 added [ 323.578936][T15536] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 323.592966][T15536] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.698667][T15536] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 323.748209][T15536] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 323.778887][T15536] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.844338][T15536] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 323.888530][T15676] veth1_macvtap: left promiscuous mode [ 323.895750][T15676] macsec0: entered promiscuous mode [ 323.901215][T15676] macsec0: entered allmulticast mode [ 323.939028][T15681] veth1_macvtap: entered promiscuous mode [ 323.949529][T15681] veth1_macvtap: entered allmulticast mode [ 323.965974][T15681] macsec0: left promiscuous mode [ 323.971222][T15681] macsec0: left allmulticast mode [ 323.990445][T15681] veth1_macvtap: left allmulticast mode [ 324.081702][T14676] hsr_slave_0: left promiscuous mode [ 324.107819][T14676] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 324.126716][T14676] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 324.138203][T15693] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3344'. [ 324.163407][T14676] veth1_vlan: left promiscuous mode [ 324.179839][T14676] veth0_vlan: left promiscuous mode [ 324.212220][T15701] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3341'. [ 324.411874][T14676] pim6reg527 (unregistering): left allmulticast mode [ 324.560796][T15716] netlink: 'syz.1.3347': attribute type 7 has an invalid length. [ 324.893077][T14676] team0 (unregistering): Port device team_slave_1 removed [ 324.932855][T14676] team0 (unregistering): Port device team_slave_0 removed [ 325.187676][ T51] Bluetooth: hci1: command tx timeout [ 325.315238][T14664] smc: removing ib device syz0 [ 325.441691][T15699] bridge1: entered promiscuous mode [ 325.447086][T15699] bridge1: entered allmulticast mode [ 325.457253][ T9337] lo speed is unknown, defaulting to 1000 [ 325.463041][ T9337] syz0: Port: 1 Link DOWN [ 325.520543][T15716] : entered promiscuous mode [ 325.730958][T15536] hsr_slave_0: entered promiscuous mode [ 325.758009][T15536] hsr_slave_1: entered promiscuous mode [ 325.825886][T15536] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 325.843508][T15536] Cannot create hsr debugfs directory [ 326.799233][T15751] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 327.158759][T15766] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3366'. [ 327.257872][T15770] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3366'. [ 327.273585][ T51] Bluetooth: hci1: command tx timeout [ 327.295990][T15771] xt_nfacct: accounting object `syz1' does not exists [ 327.314213][T15770] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3366'. [ 327.546369][T15775] macvlan4: entered promiscuous mode [ 327.551736][T15775] macvlan4: entered allmulticast mode [ 327.647215][T15779] gre2: entered promiscuous mode [ 327.652285][T15779] gre2: entered allmulticast mode [ 327.986459][T15799] netlink: 'syz.1.3374': attribute type 3 has an invalid length. [ 328.038128][T15800] tipc: Started in network mode [ 328.044537][T15800] tipc: Node identity 9acd247ebc25, cluster identity 4711 [ 328.051870][T15800] tipc: Enabled bearer , priority 0 [ 328.071060][T15800] syzkaller0: entered promiscuous mode [ 328.078276][T15800] syzkaller0: entered allmulticast mode [ 328.110821][T14676] IPVS: stop unused estimator thread 0... [ 328.195523][T15805] tipc: Resetting bearer [ 328.285593][T15800] netlink: 'syz.3.3376': attribute type 4 has an invalid length. [ 328.300561][T15536] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 328.375642][T15815] xt_nfacct: accounting object `syz1' does not exists [ 328.392610][T15536] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 328.417087][T15798] tipc: Resetting bearer [ 328.461669][T15798] tipc: Disabling bearer [ 328.478736][T15536] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 328.542339][T15824] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3383'. [ 328.551813][T15536] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 328.647088][T15829] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3385'. [ 328.709679][T15838] net_ratelimit: 12 callbacks suppressed [ 328.709699][T15838] IPv4: Oversized IP packet from 172.20.20.10 [ 328.724222][ C1] IPv4: Oversized IP packet from 172.20.20.10 [ 328.730955][ C1] IPv4: Oversized IP packet from 172.20.20.10 [ 328.771121][T15840] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3385'. [ 328.972604][T15536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.007912][T15536] 8021q: adding VLAN 0 to HW filter on device team0 [ 329.026424][T15850] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3390'. [ 329.043439][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.050726][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.097262][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.104477][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.160741][T15857] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 329.306440][T15862] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3394'. [ 329.348443][T15862] netlink: 'syz.3.3394': attribute type 1 has an invalid length. [ 329.659803][T15876] bond6: entered promiscuous mode [ 329.688639][T15876] bond6: entered allmulticast mode [ 329.701434][T15876] 8021q: adding VLAN 0 to HW filter on device bond6 [ 329.884057][T15536] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.962370][T15891] xt_CT: You must specify a L4 protocol and not use inversions on it [ 330.017677][T15536] veth0_vlan: entered promiscuous mode [ 330.050330][T15898] netlink: 'syz.2.3401': attribute type 39 has an invalid length. [ 330.055371][T15536] veth1_vlan: entered promiscuous mode [ 330.300284][T15536] veth0_macvtap: entered promiscuous mode [ 330.366590][T15536] veth1_macvtap: entered promiscuous mode [ 330.498173][T15536] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.571864][T15536] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 330.596617][T15536] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.610266][T15536] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.627072][T15536] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.638522][T15536] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.676895][T15910] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3407'. [ 330.689797][T15908] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3407'. [ 330.721638][T15906] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 330.750266][T15906] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.758798][T15906] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.023689][ T51] Bluetooth: hci1: command tx timeout [ 331.126798][T14664] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.147895][T14664] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.237746][T15922] netlink: 'syz.3.3411': attribute type 10 has an invalid length. [ 331.310927][T15922] team0: Port device geneve0 added [ 331.348647][ T1330] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.367996][ T1330] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.638775][T15940] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 332.217228][T15961] __nla_validate_parse: 8 callbacks suppressed [ 332.217251][T15961] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3424'. [ 332.434487][ T5166] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 332.447850][T15961] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.456090][T15961] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.457937][ T5166] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 332.481968][ T5166] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 332.492693][ T5166] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 332.501799][ T5166] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 332.616369][T15969] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3426'. [ 333.165462][T15990] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3433'. [ 333.220455][T15965] chnl_net:caif_netlink_parms(): no params data found [ 333.257922][T15990] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3433'. [ 333.505000][T16003] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3435'. [ 333.521050][T15965] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.529559][T15965] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.551508][T15965] bridge_slave_0: entered allmulticast mode [ 333.560655][T15965] bridge_slave_0: entered promiscuous mode [ 333.569309][T15965] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.576701][T15965] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.587279][T15965] bridge_slave_1: entered allmulticast mode [ 333.602898][T15965] bridge_slave_1: entered promiscuous mode [ 333.695004][T15965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.718026][T15965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.720981][T16016] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3438'. [ 333.778529][T15965] team0: Port device team_slave_0 added [ 333.792339][T15965] team0: Port device team_slave_1 added [ 333.847892][T15965] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.860120][T15965] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.902518][T16020] netlink: 'syz.4.3441': attribute type 3 has an invalid length. [ 333.919385][T16020] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3441'. [ 333.933517][T15965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.956503][T15965] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.977930][T15965] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.018452][T15965] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.202853][T15965] hsr_slave_0: entered promiscuous mode [ 334.215894][T15965] hsr_slave_1: entered promiscuous mode [ 334.222428][T15965] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 334.230703][T15965] Cannot create hsr debugfs directory [ 334.240235][T16033] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3446'. [ 334.263834][T16033] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3446'. [ 334.282673][T16033] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3446'. [ 334.553760][ T51] Bluetooth: hci2: command tx timeout [ 334.667903][T15965] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 334.680297][T15965] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.755937][T15965] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 334.782791][T15965] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.880780][T15965] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 334.891772][T15965] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.941966][T15965] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 334.961864][T15965] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.248820][T15965] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 335.274968][T15965] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 335.303099][T15965] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 335.320324][T15965] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 335.342454][T16073] netlink: 'syz.4.3459': attribute type 10 has an invalid length. [ 335.405602][T16083] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x9 [ 335.496166][T16085] geneve1: entered promiscuous mode [ 335.501534][T16085] geneve1: entered allmulticast mode [ 335.508151][T16085] FAULT_INJECTION: forcing a failure. [ 335.508151][T16085] name failslab, interval 1, probability 0, space 0, times 0 [ 335.522281][T16085] CPU: 0 UID: 0 PID: 16085 Comm: syz.2.3461 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(full) [ 335.522310][T16085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 335.522323][T16085] Call Trace: [ 335.522332][T16085] [ 335.522341][T16085] dump_stack_lvl+0x189/0x250 [ 335.522372][T16085] ? __pfx____ratelimit+0x10/0x10 [ 335.522394][T16085] ? __pfx_dump_stack_lvl+0x10/0x10 [ 335.522427][T16085] ? __pfx__printk+0x10/0x10 [ 335.522472][T16085] should_fail_ex+0x414/0x560 [ 335.522511][T16085] should_failslab+0xa8/0x100 [ 335.522542][T16085] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 335.522570][T16085] ? __alloc_skb+0x112/0x2d0 [ 335.522603][T16085] __alloc_skb+0x112/0x2d0 [ 335.522633][T16085] ndisc_alloc_skb+0x9f/0x480 [ 335.522658][T16085] ndisc_send_rs+0x2b5/0x630 [ 335.522685][T16085] inet6_set_link_af+0x855/0xb00 [ 335.522722][T16085] ? __pfx_inet6_set_link_af+0x10/0x10 [ 335.522762][T16085] ? rtnl_af_lookup+0x49/0x2b0 [ 335.522784][T16085] ? rtnl_af_lookup+0x49/0x2b0 [ 335.522804][T16085] ? rtnl_af_lookup+0x49/0x2b0 [ 335.522827][T16085] ? rtnl_af_lookup+0x241/0x2b0 [ 335.522852][T16085] do_setlink+0x2bdb/0x41c0 [ 335.522896][T16085] ? __pfx_do_setlink+0x10/0x10 [ 335.522926][T16085] ? __lock_acquire+0xab9/0xd20 [ 335.522955][T16085] ? do_raw_spin_lock+0x121/0x290 [ 335.522993][T16085] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 335.523025][T16085] ? lockdep_hardirqs_on+0x9c/0x150 [ 335.523047][T16085] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 335.523079][T16085] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 335.523115][T16085] ? rcu_is_watching+0x15/0xb0 [ 335.523141][T16085] ? __mutex_lock+0xa6d/0xe80 [ 335.523164][T16085] ? __mutex_lock+0x51b/0xe80 [ 335.523192][T16085] ? rtnl_newlink+0x8db/0x1c70 [ 335.523220][T16085] ? __pfx___mutex_lock+0x10/0x10 [ 335.523248][T16085] ? full_name_hash+0x92/0xe0 [ 335.523272][T16085] ? netdev_name_node_lookup+0xdf/0x120 [ 335.523298][T16085] rtnl_newlink+0x160b/0x1c70 [ 335.523321][T16085] ? netlink_sendmsg+0x805/0xb30 [ 335.523363][T16085] ? __pfx_rtnl_newlink+0x10/0x10 [ 335.523432][T16085] ? kasan_quarantine_put+0xdd/0x220 [ 335.523456][T16085] ? lockdep_hardirqs_on+0x9c/0x150 [ 335.523498][T16085] ? nlmon_xmit+0xb0/0x100 [ 335.523521][T16085] ? kmem_cache_free+0x18f/0x400 [ 335.523556][T16085] ? __local_bh_enable_ip+0x12d/0x1c0 [ 335.523578][T16085] ? lockdep_hardirqs_on+0x9c/0x150 [ 335.523599][T16085] ? __local_bh_enable_ip+0x12d/0x1c0 [ 335.523621][T16085] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 335.523647][T16085] ? __dev_queue_xmit+0x27e/0x3a70 [ 335.523680][T16085] ? __lock_acquire+0xab9/0xd20 [ 335.523725][T16085] ? __pfx_rtnl_newlink+0x10/0x10 [ 335.523750][T16085] rtnetlink_rcv_msg+0x7cf/0xb70 [ 335.523779][T16085] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 335.523804][T16085] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 335.523827][T16085] ? ref_tracker_free+0x63a/0x7d0 [ 335.523847][T16085] ? __copy_skb_header+0xa7/0x550 [ 335.523880][T16085] ? __pfx_ref_tracker_free+0x10/0x10 [ 335.523914][T16085] netlink_rcv_skb+0x208/0x470 [ 335.523942][T16085] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 335.523970][T16085] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 335.524012][T16085] ? netlink_deliver_tap+0x2e/0x1b0 [ 335.524038][T16085] ? netlink_deliver_tap+0x2e/0x1b0 [ 335.524070][T16085] netlink_unicast+0x75c/0x8e0 [ 335.524106][T16085] netlink_sendmsg+0x805/0xb30 [ 335.524144][T16085] ? __pfx_netlink_sendmsg+0x10/0x10 [ 335.524175][T16085] ? aa_sock_msg_perm+0x94/0x160 [ 335.524198][T16085] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 335.524219][T16085] ? __pfx_netlink_sendmsg+0x10/0x10 [ 335.524248][T16085] __sock_sendmsg+0x21c/0x270 [ 335.524274][T16085] ____sys_sendmsg+0x505/0x830 [ 335.524309][T16085] ? __pfx_____sys_sendmsg+0x10/0x10 [ 335.524349][T16085] ? import_iovec+0x74/0xa0 [ 335.524380][T16085] ___sys_sendmsg+0x21f/0x2a0 [ 335.524413][T16085] ? __pfx____sys_sendmsg+0x10/0x10 [ 335.524489][T16085] ? __fget_files+0x2a/0x420 [ 335.524505][T16085] ? __fget_files+0x3a0/0x420 [ 335.524535][T16085] __x64_sys_sendmsg+0x19b/0x260 [ 335.524567][T16085] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 335.524608][T16085] ? __pfx_ksys_write+0x10/0x10 [ 335.524632][T16085] ? rcu_is_watching+0x15/0xb0 [ 335.524660][T16085] ? do_syscall_64+0xbe/0x3b0 [ 335.524699][T16085] do_syscall_64+0xfa/0x3b0 [ 335.524718][T16085] ? lockdep_hardirqs_on+0x9c/0x150 [ 335.524736][T16085] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.524755][T16085] ? clear_bhb_loop+0x60/0xb0 [ 335.524795][T16085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.524814][T16085] RIP: 0033:0x7f265bf8e929 [ 335.524831][T16085] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 335.524849][T16085] RSP: 002b:00007f265cde9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 335.524870][T16085] RAX: ffffffffffffffda RBX: 00007f265c1b5fa0 RCX: 00007f265bf8e929 [ 335.524884][T16085] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 335.524896][T16085] RBP: 00007f265cde9090 R08: 0000000000000000 R09: 0000000000000000 [ 335.524908][T16085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 335.524919][T16085] R13: 0000000000000000 R14: 00007f265c1b5fa0 R15: 00007ffe04862a88 [ 335.524949][T16085] [ 336.077310][T15965] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.103045][T15965] 8021q: adding VLAN 0 to HW filter on device team0 [ 336.124895][T14664] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.132082][T14664] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.141684][T14664] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.148886][T14664] bridge0: port 2(bridge_slave_1) entered forwarding state [ 336.209266][T15965] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 336.221030][T15965] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 336.402645][T16100] IPVS: ip_vs_add_dest(): server weight less than zero [ 336.434464][ T5853] IPVS: starting estimator thread 0... [ 336.553488][T16104] IPVS: using max 27 ests per chain, 64800 per kthread [ 336.629089][ T51] Bluetooth: hci2: command tx timeout [ 336.812924][T16117] netlink: 'syz.0.3471': attribute type 64 has an invalid length. [ 336.854400][T16123] syzkaller0: create flow: hash 4222623312 index 1 [ 337.006067][T16113] syzkaller0: delete flow: hash 4222623312 index 1 [ 337.486186][T16133] __nla_validate_parse: 5 callbacks suppressed [ 337.486203][T16133] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3475'. [ 337.598633][T16134] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3475'. [ 338.591451][T16126] geneve1: entered promiscuous mode [ 338.601481][T16126] geneve1: entered allmulticast mode [ 338.689871][T15965] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 338.705781][ T51] Bluetooth: hci2: command tx timeout [ 338.750251][T16137] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3476'. [ 338.829805][T16142] macvtap1: entered promiscuous mode [ 338.852633][T16142] vlan0: entered promiscuous mode [ 338.860469][T16144] netlink: 260 bytes leftover after parsing attributes in process `syz.0.3479'. [ 338.870975][T16144] netlink: 'syz.0.3479': attribute type 10 has an invalid length. [ 338.879509][T16142] macvtap1: entered allmulticast mode [ 338.885847][T16142] vlan0: entered allmulticast mode [ 338.891482][T16142] veth0_vlan: entered allmulticast mode [ 338.910891][T16142] vlan0: left allmulticast mode [ 338.916237][T16142] veth0_vlan: left allmulticast mode [ 338.923393][T16142] vlan0: left promiscuous mode [ 339.006647][T16144] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 339.073615][T16150] netlink: 'syz.4.3481': attribute type 1 has an invalid length. [ 339.082978][T16150] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3481'. [ 339.158079][T15965] veth0_vlan: entered promiscuous mode [ 339.188383][T16156] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 339.200927][T15965] veth1_vlan: entered promiscuous mode [ 339.329242][T15965] veth0_macvtap: entered promiscuous mode [ 339.361535][T15965] veth1_macvtap: entered promiscuous mode [ 339.431616][T15965] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 339.472531][T15965] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 339.509501][T15965] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.547281][T15965] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.563639][T15965] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.582707][T15965] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.625683][T16178] bridge0: mtu less than device minimum [ 339.762879][T16193] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3493'. [ 339.786778][T16193] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3493'. [ 340.087207][T16211] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 340.100748][T14666] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.123242][T14666] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.187252][T16213] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3497'. [ 340.201951][T14647] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.219724][T14647] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.222786][T16213] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 340.254519][T16213] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 340.285151][T16219] netlink: 348 bytes leftover after parsing attributes in process `syz.4.3497'. [ 340.434166][T16227] geneve1: entered promiscuous mode [ 340.448422][T16227] geneve1: entered allmulticast mode [ 340.468012][T16226] syzkaller1: entered promiscuous mode [ 340.497278][T16226] syzkaller1: entered allmulticast mode [ 340.723224][T16231] xt_l2tp: missing protocol rule (udp|l2tpip) [ 340.770029][T16231] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3505'. [ 340.770364][T16240] bond1: entered promiscuous mode [ 340.785451][T16240] bond1: entered allmulticast mode [ 340.792267][T16240] 8021q: adding VLAN 0 to HW filter on device bond1 [ 340.799123][ T51] Bluetooth: hci2: command tx timeout [ 341.104551][ T43] IPVS: starting estimator thread 0... [ 341.124353][T16261] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 341.157193][T16263] IPVS: set_ctl: invalid protocol: 49938 10.20.135.136:34816 [ 341.184692][ T51] Bluetooth: hci3: command 0x0401 tx timeout [ 341.204318][T16262] IPVS: using max 29 ests per chain, 69600 per kthread [ 341.291395][T16273] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 341.485518][T16282] bond2: entered promiscuous mode [ 341.490707][T16282] bond2: entered allmulticast mode [ 341.511300][T16282] 8021q: adding VLAN 0 to HW filter on device bond2 [ 342.674122][T16324] __nla_validate_parse: 7 callbacks suppressed [ 342.674141][T16324] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3531'. [ 342.750727][T16324] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3531'. [ 342.815199][T16334] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3535'. [ 342.859728][T16340] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3531'. [ 343.350478][T16363] netlink: 'syz.0.3541': attribute type 9 has an invalid length. [ 343.358879][T16363] netlink: 211988 bytes leftover after parsing attributes in process `syz.0.3541'. [ 343.381418][T16363] netlink: 'syz.0.3541': attribute type 6 has an invalid length. [ 343.535560][T16366] vlan0: entered promiscuous mode [ 343.554011][T16366] vlan0: entered allmulticast mode [ 343.559201][T16366] hsr_slave_1: entered allmulticast mode [ 343.607024][T16373] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3545'. [ 343.710160][T16378] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 343.847569][T16384] sctp: [Deprecated]: syz.1.3549 (pid 16384) Use of int in max_burst socket option. [ 343.847569][T16384] Use struct sctp_assoc_value instead [ 344.041139][T16394] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3552'. [ 344.074817][T16393] netlink: 11 bytes leftover after parsing attributes in process `syz.4.3553'. [ 344.299234][T16407] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3558'. [ 344.313435][T16409] batadv_slave_1: entered promiscuous mode [ 344.320270][T16407] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3558'. [ 344.369775][T16411] batadv_slave_1: left promiscuous mode [ 344.488076][T16418] netlink: 'syz.2.3561': attribute type 6 has an invalid length. [ 344.637889][T16423] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 344.702531][T16426] pimreg3: entered allmulticast mode [ 344.819781][T16433] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 345.053027][ T5907] IPVS: starting estimator thread 0... [ 345.105064][T16443] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 345.173787][T16454] IPVS: using max 27 ests per chain, 64800 per kthread [ 345.872888][T16488] netlink: 'syz.4.3584': attribute type 1 has an invalid length. [ 345.946576][T16493] netlink: 'syz.0.3586': attribute type 10 has an invalid length. [ 346.005690][T16493] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 346.131567][T16502] netlink: 'syz.2.3590': attribute type 1 has an invalid length. [ 346.256150][T16510] netlink: 'syz.3.3594': attribute type 7 has an invalid length. [ 346.274486][T16510] netlink: 'syz.3.3594': attribute type 8 has an invalid length. [ 346.609526][T16530] netlink: 'syz.3.3601': attribute type 5 has an invalid length. [ 346.742028][T16524] wg2: entered promiscuous mode [ 346.757376][T16524] wg2: entered allmulticast mode [ 347.352030][T16574] geneve1: entered promiscuous mode [ 347.359029][T16574] geneve1: entered allmulticast mode [ 347.860306][T16580] __nla_validate_parse: 14 callbacks suppressed [ 347.860328][T16580] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3617'. [ 348.222916][T16604] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3622'. [ 348.622860][T16628] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3631'. [ 348.798004][T16634] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3633'. [ 348.815096][T16635] FAULT_INJECTION: forcing a failure. [ 348.815096][T16635] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 348.834295][T16634] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3633'. [ 348.843731][T16635] CPU: 1 UID: 0 PID: 16635 Comm: syz.1.3634 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(full) [ 348.843759][T16635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 348.843772][T16635] Call Trace: [ 348.843779][T16635] [ 348.843788][T16635] dump_stack_lvl+0x189/0x250 [ 348.843817][T16635] ? __pfx____ratelimit+0x10/0x10 [ 348.843837][T16635] ? __pfx_dump_stack_lvl+0x10/0x10 [ 348.843858][T16635] ? __pfx__printk+0x10/0x10 [ 348.843902][T16635] ? __might_fault+0xb0/0x130 [ 348.843939][T16635] should_fail_ex+0x414/0x560 [ 348.843965][T16635] _copy_from_user+0x2d/0xb0 [ 348.843993][T16635] ___sys_sendmsg+0x158/0x2a0 [ 348.844026][T16635] ? __pfx____sys_sendmsg+0x10/0x10 [ 348.844094][T16635] ? __fget_files+0x2a/0x420 [ 348.844111][T16635] ? __fget_files+0x3a0/0x420 [ 348.844140][T16635] __sys_sendmmsg+0x227/0x430 [ 348.844186][T16635] ? __pfx___sys_sendmmsg+0x10/0x10 [ 348.844213][T16635] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 348.844263][T16635] ? ksys_write+0x22a/0x250 [ 348.844302][T16635] ? __pfx_ksys_write+0x10/0x10 [ 348.844333][T16635] __x64_sys_sendmmsg+0xa0/0xc0 [ 348.844366][T16635] do_syscall_64+0xfa/0x3b0 [ 348.844387][T16635] ? lockdep_hardirqs_on+0x9c/0x150 [ 348.844409][T16635] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.844430][T16635] ? clear_bhb_loop+0x60/0xb0 [ 348.844458][T16635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.844479][T16635] RIP: 0033:0x7f54f138e929 [ 348.844498][T16635] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 348.844518][T16635] RSP: 002b:00007f54f219f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 348.844540][T16635] RAX: ffffffffffffffda RBX: 00007f54f15b5fa0 RCX: 00007f54f138e929 [ 348.844556][T16635] RDX: 0000000000000001 RSI: 00002000000027c0 RDI: 0000000000000003 [ 348.844568][T16635] RBP: 00007f54f219f090 R08: 0000000000000000 R09: 0000000000000000 [ 348.844581][T16635] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000000000001 [ 348.844594][T16635] R13: 0000000000000000 R14: 00007f54f15b5fa0 R15: 00007ffd6dc41208 [ 348.844624][T16635] [ 348.911040][T16637] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3633'. [ 349.572887][T16663] FAULT_INJECTION: forcing a failure. [ 349.572887][T16663] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 349.592228][T16663] CPU: 1 UID: 0 PID: 16663 Comm: syz.4.3646 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(full) [ 349.592260][T16663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 349.592274][T16663] Call Trace: [ 349.592283][T16663] [ 349.592291][T16663] dump_stack_lvl+0x189/0x250 [ 349.592323][T16663] ? __pfx____ratelimit+0x10/0x10 [ 349.592346][T16663] ? __pfx_dump_stack_lvl+0x10/0x10 [ 349.592371][T16663] ? __pfx__printk+0x10/0x10 [ 349.592414][T16663] should_fail_ex+0x414/0x560 [ 349.592441][T16663] _copy_from_user+0x2d/0xb0 [ 349.592471][T16663] __copy_msghdr+0x3c5/0x5b0 [ 349.592508][T16663] ___sys_sendmsg+0x1a5/0x2a0 [ 349.592542][T16663] ? __pfx____sys_sendmsg+0x10/0x10 [ 349.592614][T16663] ? __fget_files+0x2a/0x420 [ 349.592632][T16663] ? __fget_files+0x3a0/0x420 [ 349.592663][T16663] __sys_sendmmsg+0x227/0x430 [ 349.592701][T16663] ? __pfx___sys_sendmmsg+0x10/0x10 [ 349.592731][T16663] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 349.592783][T16663] ? ksys_write+0x22a/0x250 [ 349.592814][T16663] ? __pfx_ksys_write+0x10/0x10 [ 349.592839][T16663] ? rcu_is_watching+0x15/0xb0 [ 349.592880][T16663] __x64_sys_sendmmsg+0xa0/0xc0 [ 349.592915][T16663] do_syscall_64+0xfa/0x3b0 [ 349.592937][T16663] ? lockdep_hardirqs_on+0x9c/0x150 [ 349.592958][T16663] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.592979][T16663] ? clear_bhb_loop+0x60/0xb0 [ 349.593004][T16663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.593025][T16663] RIP: 0033:0x7f061bd8e929 [ 349.593043][T16663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 349.593062][T16663] RSP: 002b:00007f061cb2e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 349.593084][T16663] RAX: ffffffffffffffda RBX: 00007f061bfb5fa0 RCX: 00007f061bd8e929 [ 349.593108][T16663] RDX: 0000000000000001 RSI: 00002000000027c0 RDI: 0000000000000003 [ 349.593128][T16663] RBP: 00007f061cb2e090 R08: 0000000000000000 R09: 0000000000000000 [ 349.593141][T16663] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000000000001 [ 349.593154][T16663] R13: 0000000000000000 R14: 00007f061bfb5fa0 R15: 00007ffed7e65e08 [ 349.593187][T16663] [ 349.867380][T16667] netlink: 'syz.1.3645': attribute type 29 has an invalid length. [ 350.129730][T16686] xt_nfacct: accounting object `syz1' does not exists [ 350.267320][T16691] pim6reg: entered allmulticast mode [ 350.614855][T16709] FAULT_INJECTION: forcing a failure. [ 350.614855][T16709] name failslab, interval 1, probability 0, space 0, times 0 [ 350.627616][T16709] CPU: 0 UID: 0 PID: 16709 Comm: syz.3.3661 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(full) [ 350.627644][T16709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 350.627657][T16709] Call Trace: [ 350.627665][T16709] [ 350.627675][T16709] dump_stack_lvl+0x189/0x250 [ 350.627705][T16709] ? __pfx____ratelimit+0x10/0x10 [ 350.627728][T16709] ? __pfx_dump_stack_lvl+0x10/0x10 [ 350.627764][T16709] ? __pfx__printk+0x10/0x10 [ 350.627803][T16709] ? __rt6_find_exception_rcu+0x127/0x4c0 [ 350.627832][T16709] should_fail_ex+0x414/0x560 [ 350.627859][T16709] should_failslab+0xa8/0x100 [ 350.627888][T16709] ? __pfx_ip6_dst_gc+0x10/0x10 [ 350.627910][T16709] kmem_cache_alloc_noprof+0x73/0x3c0 [ 350.627937][T16709] ? dst_alloc+0x105/0x170 [ 350.627975][T16709] ? __pfx_ip6_dst_gc+0x10/0x10 [ 350.627999][T16709] dst_alloc+0x105/0x170 [ 350.628025][T16709] ip6_pol_route+0xa21/0x1180 [ 350.628051][T16709] ? ip6_pol_route+0x162/0x1180 [ 350.628081][T16709] ? __pfx_ip6_pol_route+0x10/0x10 [ 350.628104][T16709] ? ip6_compressed_string+0xa9e/0xb70 [ 350.628133][T16709] ? __pfx_ip6_compressed_string+0x10/0x10 [ 350.628156][T16709] ? kernel_text_address+0xa5/0xe0 [ 350.628181][T16709] fib6_rule_lookup+0x1fc/0x6f0 [ 350.628209][T16709] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 350.628237][T16709] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 350.628278][T16709] ? dev_get_by_index_rcu+0xf4/0x110 [ 350.628311][T16709] ip6_route_output_flags+0x364/0x5d0 [ 350.628338][T16709] ? ip6_route_output_flags+0x2e/0x5d0 [ 350.628368][T16709] ip6_dst_lookup_tail+0x1ae/0x1510 [ 350.628414][T16709] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 350.628452][T16709] ? sk_dst_check+0x25/0x480 [ 350.628483][T16709] ? sk_dst_check+0x25/0x480 [ 350.628505][T16709] ? sk_dst_check+0x30e/0x480 [ 350.628535][T16709] ip6_sk_dst_lookup_flow+0x730/0x980 [ 350.628568][T16709] ? udpv6_sendmsg+0x165e/0x24c0 [ 350.628602][T16709] udpv6_sendmsg+0x1843/0x24c0 [ 350.628682][T16709] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 350.628712][T16709] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 350.628750][T16709] ? __lock_acquire+0xab9/0xd20 [ 350.628800][T16709] ? __local_bh_enable_ip+0x12d/0x1c0 [ 350.628825][T16709] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 350.628859][T16709] ? inet_send_prepare+0x1b9/0x270 [ 350.628887][T16709] ? inet_send_prepare+0x1b9/0x270 [ 350.628915][T16709] ? inet6_sendmsg+0xe4/0x120 [ 350.628944][T16709] __sock_sendmsg+0xe5/0x270 [ 350.628974][T16709] ____sys_sendmsg+0x52d/0x830 [ 350.629014][T16709] ? __pfx_____sys_sendmsg+0x10/0x10 [ 350.629057][T16709] ? import_iovec+0x74/0xa0 [ 350.629093][T16709] ___sys_sendmsg+0x21f/0x2a0 [ 350.629129][T16709] ? __pfx____sys_sendmsg+0x10/0x10 [ 350.629208][T16709] ? __fget_files+0x2a/0x420 [ 350.629228][T16709] ? __fget_files+0x3a0/0x420 [ 350.629260][T16709] __sys_sendmmsg+0x227/0x430 [ 350.629302][T16709] ? __pfx___sys_sendmmsg+0x10/0x10 [ 350.629333][T16709] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 350.629391][T16709] ? ksys_write+0x22a/0x250 [ 350.629424][T16709] ? __pfx_ksys_write+0x10/0x10 [ 350.629451][T16709] ? rcu_is_watching+0x15/0xb0 [ 350.629485][T16709] __x64_sys_sendmmsg+0xa0/0xc0 [ 350.629522][T16709] do_syscall_64+0xfa/0x3b0 [ 350.629545][T16709] ? lockdep_hardirqs_on+0x9c/0x150 [ 350.629567][T16709] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.629589][T16709] ? clear_bhb_loop+0x60/0xb0 [ 350.629617][T16709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.629638][T16709] RIP: 0033:0x7fbe5dd8e929 [ 350.629658][T16709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 350.629678][T16709] RSP: 002b:00007fbe5eb5b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 350.629701][T16709] RAX: ffffffffffffffda RBX: 00007fbe5dfb5fa0 RCX: 00007fbe5dd8e929 [ 350.629717][T16709] RDX: 0000000000000001 RSI: 00002000000027c0 RDI: 0000000000000003 [ 350.629732][T16709] RBP: 00007fbe5eb5b090 R08: 0000000000000000 R09: 0000000000000000 [ 350.629745][T16709] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000000000001 [ 350.629758][T16709] R13: 0000000000000000 R14: 00007fbe5dfb5fa0 R15: 00007fffd7ab1a38 [ 350.629801][T16709] [ 351.128156][T16716] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3664'. [ 351.373572][T16726] Cannot find add_set index 1 as target [ 351.404890][T16728] netlink: 'syz.3.3671': attribute type 12 has an invalid length. [ 351.446291][T16735] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3669'. [ 351.495232][T16728] dvmrp0: entered allmulticast mode [ 351.770234][T16749] pim6reg1: entered promiscuous mode [ 351.784315][T16749] pim6reg1: entered allmulticast mode [ 352.153692][T16771] IPv6: Can't replace route, no match found [ 352.161500][T16767] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3682'. [ 352.246130][T16779] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3684'. [ 352.283137][T16781] netlink: 'syz.1.3687': attribute type 10 has an invalid length. [ 352.324918][T16781] veth0_vlan: entered allmulticast mode [ 352.407988][T16781] veth0_vlan: left promiscuous mode [ 352.454377][T16781] veth0_vlan: entered promiscuous mode [ 352.490434][T16781] team0: Device veth0_vlan failed to register rx_handler [ 352.572163][ T5936] hid-generic 0005:0458:5505.0002: item fetching failed at offset 0/2 [ 352.585967][T16792] netlink: 'syz.0.3690': attribute type 1 has an invalid length. [ 352.595663][ T5936] hid-generic 0005:0458:5505.0002: probe with driver hid-generic failed with error -22 [ 352.605571][T16792] netlink: 'syz.0.3690': attribute type 3 has an invalid length. [ 352.742841][T16798] geneve2: entered promiscuous mode [ 352.792223][T16798] netlink: 'syz.1.3693': attribute type 2 has an invalid length. [ 352.894383][T16805] bond3: entered promiscuous mode [ 352.899581][T16805] bond3: entered allmulticast mode [ 352.906236][T16805] 8021q: adding VLAN 0 to HW filter on device bond3 [ 353.147772][T16819] __nla_validate_parse: 3 callbacks suppressed [ 353.147793][T16819] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3700'. [ 353.301263][T16829] netlink: 'syz.1.3704': attribute type 1 has an invalid length. [ 353.321335][T16829] netlink: 'syz.1.3704': attribute type 3 has an invalid length. [ 353.329844][T16829] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3704'. [ 353.405224][T16833] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3705'. [ 353.527424][T16839] tipc: Started in network mode [ 353.538871][T16839] tipc: Node identity 0a7cf790470f, cluster identity 4711 [ 353.562028][T16839] tipc: Enabled bearer , priority 0 [ 353.575539][T16838] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3706'. [ 353.575848][T16839] syzkaller0: entered promiscuous mode [ 353.591392][T16838] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 353.601597][T16839] syzkaller0: entered allmulticast mode [ 353.753845][T16846] bond1: entered promiscuous mode [ 353.769373][T16846] bond1: entered allmulticast mode [ 353.777032][T16846] 8021q: adding VLAN 0 to HW filter on device bond1 [ 353.792954][T16839] tipc: Resetting bearer [ 353.824947][T16857] netlink: 'syz.0.3712': attribute type 2 has an invalid length. [ 353.832778][T16857] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3712'. [ 353.896625][T16839] tipc: Resetting bearer [ 353.943006][T16839] tipc: Disabling bearer [ 354.149544][T16875] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 354.187322][T16875] vlan2: entered promiscuous mode [ 354.192623][T16875] vlan2: entered allmulticast mode [ 354.224652][T16875] hsr_slave_1: entered allmulticast mode [ 354.236816][T16877] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.3719'. [ 354.558632][T16897] openvswitch: netlink: Missing valid actions attribute. [ 354.568992][T16897] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 354.810735][T16909] FAULT_INJECTION: forcing a failure. [ 354.810735][T16909] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 354.848096][T16909] CPU: 0 UID: 0 PID: 16909 Comm: syz.1.3729 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(full) [ 354.848127][T16909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 354.848140][T16909] Call Trace: [ 354.848149][T16909] [ 354.848158][T16909] dump_stack_lvl+0x189/0x250 [ 354.848189][T16909] ? __pfx____ratelimit+0x10/0x10 [ 354.848230][T16909] ? __pfx_dump_stack_lvl+0x10/0x10 [ 354.848256][T16909] ? __pfx__printk+0x10/0x10 [ 354.848285][T16909] ? __might_fault+0xb0/0x130 [ 354.848326][T16909] should_fail_ex+0x414/0x560 [ 354.848354][T16909] _copy_from_user+0x2d/0xb0 [ 354.848391][T16909] do_ip_vs_set_ctl+0x2d3/0xa60 [ 354.848420][T16909] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 354.848438][T16909] ? rcu_is_watching+0x15/0xb0 [ 354.848480][T16909] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 354.848511][T16909] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 354.848534][T16909] ? aa_sk_perm+0x81e/0x950 [ 354.848559][T16909] ? __pfx_aa_sk_perm+0x10/0x10 [ 354.848585][T16909] nf_setsockopt+0x26c/0x290 [ 354.848619][T16909] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 354.848650][T16909] do_sock_setsockopt+0x17c/0x1b0 [ 354.848686][T16909] __x64_sys_setsockopt+0x13f/0x1b0 [ 354.848722][T16909] do_syscall_64+0xfa/0x3b0 [ 354.848745][T16909] ? lockdep_hardirqs_on+0x9c/0x150 [ 354.848765][T16909] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.848786][T16909] ? clear_bhb_loop+0x60/0xb0 [ 354.848812][T16909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.848832][T16909] RIP: 0033:0x7f54f138e929 [ 354.848849][T16909] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 354.848868][T16909] RSP: 002b:00007f54f219f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 354.848890][T16909] RAX: ffffffffffffffda RBX: 00007f54f15b5fa0 RCX: 00007f54f138e929 [ 354.848906][T16909] RDX: 0000000000000485 RSI: 0000000000000000 RDI: 0000000000000003 [ 354.848918][T16909] RBP: 00007f54f219f090 R08: 0000000000000000 R09: 0000000000000000 [ 354.848931][T16909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 354.848943][T16909] R13: 0000000000000000 R14: 00007f54f15b5fa0 R15: 00007ffd6dc41208 [ 354.848975][T16909] [ 355.223313][T16923] netlink: 'syz.1.3734': attribute type 1 has an invalid length. [ 355.275448][T16923] 8021q: adding VLAN 0 to HW filter on device bond2 [ 355.369957][T16928] 8021q: adding VLAN 0 to HW filter on device bond2 [ 355.379926][T16934] Cannot find add_set index 1 as target [ 355.398703][T16928] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 355.437399][T16928] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 355.513251][T16943] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3738'. [ 355.550666][T16923] veth3: entered promiscuous mode [ 355.567603][T16923] bond2: (slave veth3): Enslaving as an active interface with a down link [ 355.588358][T16942] vlan2: entered allmulticast mode [ 355.594216][T16942] bond2: entered allmulticast mode [ 355.810083][T16956] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3743'. [ 356.170755][T16975] Cannot find add_set index 1 as target [ 356.585293][T16997] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3761'. [ 356.855714][T17016] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3764'. [ 357.027661][T17023] netlink: 'syz.4.3770': attribute type 15 has an invalid length. [ 357.104078][ T5936] IPVS: starting estimator thread 0... [ 357.209959][T17037] IPVS: using max 24 ests per chain, 57600 per kthread [ 357.418908][T17052] netem: change failed [ 357.462763][T17054] netem: change failed [ 357.626861][T17062] FAULT_INJECTION: forcing a failure. [ 357.626861][T17062] name failslab, interval 1, probability 0, space 0, times 0 [ 357.630157][T17057] tap0: tun_chr_ioctl cmd 1074025672 [ 357.641507][T17062] CPU: 0 UID: 0 PID: 17062 Comm: syz.1.3783 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(full) [ 357.641539][T17062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 357.641555][T17062] Call Trace: [ 357.641564][T17062] [ 357.641574][T17062] dump_stack_lvl+0x189/0x250 [ 357.641607][T17062] ? __pfx____ratelimit+0x10/0x10 [ 357.641632][T17062] ? __pfx_dump_stack_lvl+0x10/0x10 [ 357.641659][T17062] ? __pfx__printk+0x10/0x10 [ 357.641693][T17062] ? __pfx___might_resched+0x10/0x10 [ 357.641722][T17062] ? fs_reclaim_acquire+0x7d/0x100 [ 357.641750][T17062] should_fail_ex+0x414/0x560 [ 357.641780][T17062] ? __nf_hook_entries_try_shrink+0x316/0x6e0 [ 357.641810][T17062] should_failslab+0xa8/0x100 [ 357.641848][T17062] __kvmalloc_node_noprof+0x161/0x5f0 [ 357.641900][T17062] ? __nf_hook_entries_try_shrink+0x316/0x6e0 [ 357.641940][T17062] __nf_hook_entries_try_shrink+0x316/0x6e0 [ 357.641990][T17062] __nf_unregister_net_hook+0x4f6/0x700 [ 357.642035][T17062] nf_unregister_net_hooks+0xcb/0x140 [ 357.642073][T17062] ip_vs_unregister_hooks+0xbc/0x120 [ 357.642109][T17062] ip_vs_unlink_service+0x40d/0xa30 [ 357.642162][T17062] ip_vs_flush+0x169/0x1c0 [ 357.642201][T17062] do_ip_vs_set_ctl+0x470/0xa60 [ 357.642235][T17062] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 357.642255][T17062] ? rcu_is_watching+0x15/0xb0 [ 357.642306][T17062] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 357.642350][T17062] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 357.642376][T17062] ? aa_sk_perm+0x81e/0x950 [ 357.642406][T17062] ? __pfx_aa_sk_perm+0x10/0x10 [ 357.642438][T17062] nf_setsockopt+0x26c/0x290 [ 357.642476][T17062] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 357.642511][T17062] do_sock_setsockopt+0x17c/0x1b0 [ 357.642553][T17062] __x64_sys_setsockopt+0x13f/0x1b0 [ 357.642596][T17062] do_syscall_64+0xfa/0x3b0 [ 357.642621][T17062] ? lockdep_hardirqs_on+0x9c/0x150 [ 357.642644][T17062] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.642668][T17062] ? clear_bhb_loop+0x60/0xb0 [ 357.642696][T17062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.642720][T17062] RIP: 0033:0x7f54f138e929 [ 357.642740][T17062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 357.642763][T17062] RSP: 002b:00007f54f219f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 357.642788][T17062] RAX: ffffffffffffffda RBX: 00007f54f15b5fa0 RCX: 00007f54f138e929 [ 357.642806][T17062] RDX: 0000000000000485 RSI: 0000000000000000 RDI: 0000000000000003 [ 357.642821][T17062] RBP: 00007f54f219f090 R08: 0000000000000000 R09: 0000000000000000 [ 357.642837][T17062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 357.642851][T17062] R13: 0000000000000000 R14: 00007f54f15b5fa0 R15: 00007ffd6dc41208 [ 357.642890][T17062] [ 357.937055][T17057] tap0: ignored: set checksum disabled [ 358.207072][T17084] __nla_validate_parse: 9 callbacks suppressed [ 358.207094][T17084] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3789'. [ 358.244409][T17084] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3789'. [ 358.396416][T17092] sctp: [Deprecated]: syz.3.3791 (pid 17092) Use of int in maxseg socket option. [ 358.396416][T17092] Use struct sctp_assoc_value instead [ 358.677280][T17073] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 358.815929][T17109] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3797'. [ 359.125718][T17111] geneve1: left promiscuous mode [ 359.137319][T17129] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3799'. [ 359.148711][T17128] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3800'. [ 359.168572][T17111] geneve1: left allmulticast mode [ 359.175466][T17111] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 359.193680][T17128] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3800'. [ 359.213300][T17111] bond_slave_0: entered promiscuous mode [ 359.222177][T17111] bond_slave_1: entered promiscuous mode [ 359.266076][T17111] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 359.305573][T17111] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 359.319452][T17135] netlink: 27 bytes leftover after parsing attributes in process `syz.1.3802'. [ 359.327308][T17111] bond1: left promiscuous mode [ 359.333492][T17111] bond1: left allmulticast mode [ 359.339426][T17111] bond2: left promiscuous mode [ 359.345165][T17111] bond2: left allmulticast mode [ 359.352832][T17111] bridge1: left promiscuous mode [ 359.358440][T17111] bridge1: left allmulticast mode [ 359.364590][T17111] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 359.372318][T17111] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 359.382258][T17111] macvlan4: left promiscuous mode [ 359.389607][T17111] macvlan4: left allmulticast mode [ 359.395398][T17111] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 359.407493][T17111] 8021q: adding VLAN 0 to HW filter on device bond3 [ 359.419258][T17111] vlan0: left promiscuous mode [ 359.450034][T17139] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 359.461445][T17111] vlan0: left allmulticast mode [ 359.467316][T17111] hsr_slave_1: left allmulticast mode [ 359.578354][T17129] 8021q: adding VLAN 0 to HW filter on device bond2 [ 359.707451][T17145] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3805'. [ 359.786735][T17136] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.966851][T17136] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.020545][T17157] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3810'. [ 360.142698][T17136] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.272784][T17165] Unknown options in mask 1f4 [ 360.313150][T17136] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.448979][T17136] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.507392][T17171] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3817'. [ 360.507788][T17136] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.560504][T17136] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.593182][T17136] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.765086][T17187] dvmrp8: entered allmulticast mode [ 361.130138][T17204] syz_tun: entered promiscuous mode [ 361.138566][T17204] syz_tun: left promiscuous mode [ 361.465414][T17180] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 361.686958][T17230] netlink: 'syz.1.3838': attribute type 9 has an invalid length. [ 361.921526][T17242] netlink: 'syz.1.3843': attribute type 12 has an invalid length. [ 362.068322][T17243] netlink: 'syz.1.3843': attribute type 12 has an invalid length. [ 362.639562][T17291] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 362.807938][T17298] Cannot find add_set index 1 as target [ 362.841467][T17301] xt_CT: You must specify a L4 protocol and not use inversions on it [ 362.861620][T17301] netlink: 'syz.0.3863': attribute type 1 has an invalid length. [ 362.888202][T17301] netlink: 'syz.0.3863': attribute type 3 has an invalid length. [ 362.913449][T17301] NCSI netlink: No device for ifindex 131080 [ 362.928650][T17301] SET target dimension over the limit! [ 363.152805][T17318] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 363.310452][T17325] __nla_validate_parse: 11 callbacks suppressed [ 363.310472][T17325] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3872'. [ 363.334366][T17325] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3872'. [ 363.396056][T17330] netlink: 'syz.2.3873': attribute type 3 has an invalid length. [ 363.418023][T17330] netlink: 'syz.2.3873': attribute type 1 has an invalid length. [ 363.476511][T17334] Cannot find add_set index 1 as target [ 363.655869][T17352] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3880'. [ 363.710035][T17352] bond0: entered promiscuous mode [ 363.741261][T17352] bond0: left promiscuous mode [ 363.769180][T17356] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3880'. [ 364.496259][T17357] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 364.637959][T17375] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3888'. [ 364.815668][T17381] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3891'. [ 364.895109][T17389] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3893'. [ 365.202484][T17409] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3899'. [ 365.255993][T17411] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3899'. [ 365.480857][T17415] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 365.620925][T17422] netlink: 22 bytes leftover after parsing attributes in process `syz.1.3901'. [ 366.501766][T17464] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 366.751885][T17477] sit2: entered promiscuous mode [ 366.765749][T17477] sit2: entered allmulticast mode [ 367.068880][T14670] nci: nci_rx_work: unknown MT 0x6 [ 367.419037][T17513] netlink: 'syz.4.3931': attribute type 10 has an invalid length. [ 367.436713][T17513] syz_tun: entered promiscuous mode [ 367.472804][T17513] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 368.069359][T17532] : entered promiscuous mode [ 368.151904][T17539] netdevsim netdevsim3: Firmware load for './file0/../file0' refused, path contains '..' component [ 368.322262][T17547] netlink: 'syz.2.3941': attribute type 1 has an invalid length. [ 368.340877][T17547] __nla_validate_parse: 7 callbacks suppressed [ 368.340896][T17547] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3941'. [ 368.365201][T17547] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3941'. [ 368.409868][T17547] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 368.432511][T17549] x_tables: duplicate underflow at hook 1 [ 368.439478][T17552] netlink: 'syz.0.3944': attribute type 1 has an invalid length. [ 368.447864][T17552] netlink: 784 bytes leftover after parsing attributes in process `syz.0.3944'. [ 368.639302][T17559] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 369.145695][T17589] Cannot find del_set index 17 as target [ 369.429959][T17605] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3965'. [ 369.440873][T17604] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3964'. [ 369.463802][T17604] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3964'. [ 369.579391][T17604] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.588635][T17604] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.597561][T17604] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.606349][T17604] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.069940][T17634] syzkaller0: refused to change device tx_queue_len [ 370.091539][T17634] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3974'. [ 370.143710][T17638] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3974'. [ 370.222676][T17641] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3977'. [ 370.565900][T17641] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 370.606679][T17641] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 370.630310][T17641] bond0 (unregistering): Released all slaves [ 370.932970][T17662] netlink: 'syz.0.3982': attribute type 1 has an invalid length. [ 371.071773][T17662] 8021q: adding VLAN 0 to HW filter on device bond1 [ 371.308922][T17685] xt_nfacct: accounting object `syz1' does not exists [ 371.474693][T17692] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3993'. [ 371.885271][T17716] openvswitch: netlink: Flow key attr not present in new flow. [ 372.319730][T17725] netlink: 'syz.3.4000': attribute type 4 has an invalid length. [ 372.369420][T17729] veth0: entered promiscuous mode [ 372.477444][T17740] netlink: 'syz.1.4003': attribute type 10 has an invalid length. [ 372.521073][T17740] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.553870][T17740] bridge_slave_1: left allmulticast mode [ 372.563245][T17740] bridge_slave_1: left promiscuous mode [ 372.575704][T17740] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.739436][T17752] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 373.113974][T17727] veth0: left promiscuous mode [ 373.376757][T17773] netlink: 'syz.2.4016': attribute type 11 has an invalid length. [ 373.440424][T17778] __nla_validate_parse: 4 callbacks suppressed [ 373.440445][T17778] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4019'. [ 374.131893][T17814] netlink: 'syz.0.4033': attribute type 10 has an invalid length. [ 374.148702][T17814] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.156027][T17814] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.163694][T17814] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.170911][T17814] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.216206][T17814] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 374.575812][T17833] netlink: 212404 bytes leftover after parsing attributes in process `syz.4.4041'. [ 374.668830][T17839] netlink: 13 bytes leftover after parsing attributes in process `syz.0.4042'. [ 375.212099][T17865] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4051'. [ 375.308113][T17870] netlink: 244 bytes leftover after parsing attributes in process `syz.2.4053'. [ 375.342370][T17871] netlink: 'syz.3.4054': attribute type 1 has an invalid length. [ 375.371767][T17871] netlink: 'syz.3.4054': attribute type 3 has an invalid length. [ 375.381263][T17871] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4054'. [ 375.392950][T17875] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 375.507827][T17878] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 375.595513][T17888] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4057'. [ 375.667957][T17891] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4059'. [ 375.774823][T17897] sctp: [Deprecated]: syz.4.4061 (pid 17897) Use of struct sctp_assoc_value in delayed_ack socket option. [ 375.774823][T17897] Use struct sctp_sack_info instead [ 376.052286][T17912] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4066'. [ 376.099621][T17912] bond0: entered promiscuous mode [ 376.111889][T17912] bond_slave_0: entered promiscuous mode [ 376.131474][T17912] bond_slave_1: entered promiscuous mode [ 376.147528][T17912] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 376.166680][T17912] bridge0: entered promiscuous mode [ 376.203264][T17912] batadv0: entered promiscuous mode [ 376.209323][T17918] netlink: 244 bytes leftover after parsing attributes in process `syz.1.4067'. [ 376.227222][T17912] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 376.321579][T17921] xt_CT: You must specify a L4 protocol and not use inversions on it [ 376.463229][T17927] block nbd3: not configured, cannot reconfigure [ 376.826515][T17949] netlink: 'syz.2.4080': attribute type 1 has an invalid length. [ 378.248584][T18013] bond2: entered promiscuous mode [ 378.253883][T18013] bond2: entered allmulticast mode [ 378.259614][T18013] 8021q: adding VLAN 0 to HW filter on device bond2 [ 416.543674][ T5166] Bluetooth: hci5: command 0x0406 tx timeout [ 431.906768][ T51] Bluetooth: hci3: command 0x0401 tx timeout [ 438.340228][T18043] veth0_to_bond: entered allmulticast mode [ 438.371132][T18045] TCP: tcp_parse_options: Illegal window scaling value 236 > 14 received [ 438.571802][T18054] netlink: 'syz.3.4111': attribute type 1 has an invalid length. [ 438.598409][T18054] __nla_validate_parse: 7 callbacks suppressed [ 438.602204][T18054] netlink: 228 bytes leftover after parsing attributes in process `syz.3.4111'. [ 438.766012][T18060] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.4115'. [ 438.819010][T18064] FAULT_INJECTION: forcing a failure. [ 438.819010][T18064] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 438.855460][T18064] CPU: 1 UID: 0 PID: 18064 Comm: syz.4.4117 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(full) [ 438.855492][T18064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 438.855511][T18064] Call Trace: [ 438.855520][T18064] [ 438.855529][T18064] dump_stack_lvl+0x189/0x250 [ 438.855563][T18064] ? __pfx____ratelimit+0x10/0x10 [ 438.855587][T18064] ? __pfx_dump_stack_lvl+0x10/0x10 [ 438.855613][T18064] ? __pfx__printk+0x10/0x10 [ 438.855643][T18064] ? __might_fault+0xb0/0x130 [ 438.855687][T18064] should_fail_ex+0x414/0x560 [ 438.855725][T18064] _copy_from_user+0x2d/0xb0 [ 438.855757][T18064] ___sys_recvmsg+0x12e/0x510 [ 438.855799][T18064] ? __pfx____sys_recvmsg+0x10/0x10 [ 438.855862][T18064] ? __fget_files+0x3a0/0x420 [ 438.855894][T18064] __x64_sys_recvmsg+0x198/0x260 [ 438.855917][T18064] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 438.855950][T18064] ? __pfx_ksys_write+0x10/0x10 [ 438.855976][T18064] ? rcu_is_watching+0x15/0xb0 [ 438.856008][T18064] ? do_syscall_64+0xbe/0x3b0 [ 438.856037][T18064] do_syscall_64+0xfa/0x3b0 [ 438.856059][T18064] ? lockdep_hardirqs_on+0x9c/0x150 [ 438.856081][T18064] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.856103][T18064] ? clear_bhb_loop+0x60/0xb0 [ 438.856129][T18064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.856154][T18064] RIP: 0033:0x7f061bd8e929 [ 438.856173][T18064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 438.856192][T18064] RSP: 002b:00007f061cb2e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 438.856216][T18064] RAX: ffffffffffffffda RBX: 00007f061bfb5fa0 RCX: 00007f061bd8e929 [ 438.856232][T18064] RDX: 0000000000000040 RSI: 0000200000000140 RDI: 0000000000000004 [ 438.856245][T18064] RBP: 00007f061cb2e090 R08: 0000000000000000 R09: 0000000000000000 [ 438.856258][T18064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 438.856271][T18064] R13: 0000000000000000 R14: 00007f061bfb5fa0 R15: 00007ffed7e65e08 [ 438.856304][T18064] [ 439.192988][T18073] veth0: entered promiscuous mode [ 439.222648][T18073] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4118'. [ 439.233907][T18076] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4122'. [ 439.402736][T18086] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4123'. [ 439.498750][T18086] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.4123'. [ 439.552775][T18058] infiniband syz0: set down [ 439.566917][T18058] infiniband syz0: added ipvlan1 [ 439.580637][T18058] syz0: rxe_create_cq: returned err = -12 [ 439.601039][T18058] infiniband syz0: Couldn't create ib_mad CQ [ 439.608735][T18058] infiniband syz0: Couldn't open port 1 [ 439.679960][T18058] RDS/IB: syz0: added [ 439.695847][T18058] smc: adding ib device syz0 with port count 1 [ 439.709338][T18058] smc: ib device syz0 port 1 has pnetid [ 439.750664][T18094] netlink: 'syz.1.4126': attribute type 1 has an invalid length. [ 439.773755][T18094] netlink: 'syz.1.4126': attribute type 2 has an invalid length. [ 439.966974][T18101] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4129'. [ 440.310218][T18113] Cannot find add_set index 1 as target [ 440.336032][T18118] netlink: 'syz.3.4137': attribute type 4 has an invalid length. [ 440.445425][T18120] xt_nat: multiple ranges no longer supported [ 441.185226][T18152] sctp: [Deprecated]: syz.4.4149 (pid 18152) Use of struct sctp_assoc_value in delayed_ack socket option. [ 441.185226][T18152] Use struct sctp_sack_info instead [ 441.204153][T18153] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4146'. [ 441.249109][T18155] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 441.399432][T18165] xt_nfacct: accounting object `syz1' does not exists [ 441.458607][T18168] netlink: 'syz.0.4151': attribute type 83 has an invalid length. [ 441.489359][T18170] netlink: 'syz.1.4152': attribute type 1 has an invalid length. [ 441.517310][T18170] netlink: 228 bytes leftover after parsing attributes in process `syz.1.4152'. [ 442.054021][T18188] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4158'. [ 442.859850][T18206] tipc: Started in network mode [ 442.871849][T18206] tipc: Node identity e, cluster identity 2 [ 442.884247][T18206] tipc: Node number set to 14 [ 442.890699][T18206] tipc: Cannot configure node identity twice [ 442.937077][T18208] netlink: 'syz.4.4165': attribute type 1 has an invalid length. [ 443.316636][T18225] netlink: 'syz.1.4171': attribute type 4 has an invalid length. [ 443.620036][T18243] __nla_validate_parse: 3 callbacks suppressed [ 443.620058][T18243] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4174'. [ 443.722393][T18242] bond3: entered promiscuous mode [ 443.727823][T18242] bond3: entered allmulticast mode [ 443.734461][T18242] 8021q: adding VLAN 0 to HW filter on device bond3 [ 444.896494][T18307] vxlan1: entered promiscuous mode [ 444.916913][T18307] vxlan1: entered allmulticast mode [ 445.348801][T18329] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4201'. [ 445.499915][T18336] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 445.519356][T18336] Cannot find del_set index 5 as target [ 445.527838][T18336] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4208'. [ 445.549239][T18336] xt_hashlimit: invalid rate [ 445.870780][T18357] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4215'. [ 445.891704][T18357] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4215'. [ 446.047823][T18363] Cannot find add_set index 1 as target [ 446.442564][T18381] netlink: 'syz.3.4222': attribute type 1 has an invalid length. [ 446.450827][T18381] netlink: 228 bytes leftover after parsing attributes in process `syz.3.4222'. [ 446.776579][T18392] netlink: 'syz.3.4226': attribute type 21 has an invalid length. [ 446.817694][T18392] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4226'. [ 446.840498][T18397] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4229'. [ 446.893213][T18402] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4229'. [ 447.004219][T18405] netlink: 160 bytes leftover after parsing attributes in process `syz.3.4232'. [ 447.005450][T18397] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 447.200957][T18414] netlink: 'syz.4.4234': attribute type 1 has an invalid length. [ 447.240668][T18415] tipc: Enabling of bearer rejected, failed to enable media [ 447.304086][T18415] netlink: 'syz.2.4236': attribute type 4 has an invalid length. [ 447.821870][T18440] bond4: entered promiscuous mode [ 447.857209][T18440] bond4: entered allmulticast mode [ 447.873038][T18440] 8021q: adding VLAN 0 to HW filter on device bond4 [ 448.002671][T18443] xt_hashlimit: size too large, truncated to 1048576 [ 448.018427][T18443] xt_hashlimit: size too large, truncated to 1048576 [ 448.029001][T18443] xt_hashlimit: size too large, truncated to 1048576 [ 448.040166][T18443] xt_hashlimit: size too large, truncated to 1048576 [ 448.058506][T18443] xt_hashlimit: size too large, truncated to 1048576 [ 448.322885][T18460] Cannot find add_set index 1 as target [ 448.628543][T18466] 8021q: VLANs not supported on ip_vti0 [ 448.726919][T18470] __nla_validate_parse: 4 callbacks suppressed [ 448.726940][T18470] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4256'. [ 448.784561][T18469] tipc: Enabled bearer , priority 0 [ 448.815096][T18469] syzkaller0: entered promiscuous mode [ 448.820646][T18469] syzkaller0: entered allmulticast mode [ 448.909831][T18469] tipc: Resetting bearer [ 448.940798][T18467] tipc: Resetting bearer [ 449.014219][T18467] tipc: Disabling bearer [ 449.051364][T18481] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4258'. [ 449.356899][T18493] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 449.390472][T18494] 8021q: adding VLAN 0 to HW filter on device ipvlan1 [ 449.643770][T18511] Cannot find add_set index 1 as target [ 449.812565][T18519] FAULT_INJECTION: forcing a failure. [ 449.812565][T18519] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 449.836400][T18519] CPU: 1 UID: 0 PID: 18519 Comm: syz.3.4276 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(full) [ 449.836434][T18519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 449.836448][T18519] Call Trace: [ 449.836457][T18519] [ 449.836466][T18519] dump_stack_lvl+0x189/0x250 [ 449.836498][T18519] ? __pfx____ratelimit+0x10/0x10 [ 449.836523][T18519] ? __pfx_dump_stack_lvl+0x10/0x10 [ 449.836550][T18519] ? __pfx__printk+0x10/0x10 [ 449.836580][T18519] ? __might_fault+0xb0/0x130 [ 449.836630][T18519] should_fail_ex+0x414/0x560 [ 449.836659][T18519] _copy_from_iter+0x1db/0x16f0 [ 449.836692][T18519] ? rcu_is_watching+0x15/0xb0 [ 449.836720][T18519] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 449.836753][T18519] ? __pfx__copy_from_iter+0x10/0x10 [ 449.836783][T18519] ? __build_skb_around+0x257/0x3e0 [ 449.836818][T18519] ? netlink_sendmsg+0x642/0xb30 [ 449.836847][T18519] ? skb_put+0x11b/0x210 [ 449.836882][T18519] netlink_sendmsg+0x6b2/0xb30 [ 449.836924][T18519] ? __pfx_netlink_sendmsg+0x10/0x10 [ 449.836958][T18519] ? aa_sock_msg_perm+0x94/0x160 [ 449.836982][T18519] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 449.837005][T18519] ? __pfx_netlink_sendmsg+0x10/0x10 [ 449.837038][T18519] __sock_sendmsg+0x21c/0x270 [ 449.837068][T18519] ____sys_sendmsg+0x505/0x830 [ 449.837108][T18519] ? __pfx_____sys_sendmsg+0x10/0x10 [ 449.837150][T18519] ? import_iovec+0x74/0xa0 [ 449.837183][T18519] ___sys_sendmsg+0x21f/0x2a0 [ 449.837219][T18519] ? __pfx____sys_sendmsg+0x10/0x10 [ 449.837291][T18519] ? __fget_files+0x2a/0x420 [ 449.837310][T18519] ? __fget_files+0x3a0/0x420 [ 449.837342][T18519] __x64_sys_sendmsg+0x19b/0x260 [ 449.837379][T18519] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 449.837423][T18519] ? __pfx_ksys_write+0x10/0x10 [ 449.837450][T18519] ? rcu_is_watching+0x15/0xb0 [ 449.837481][T18519] ? do_syscall_64+0xbe/0x3b0 [ 449.837509][T18519] do_syscall_64+0xfa/0x3b0 [ 449.837532][T18519] ? lockdep_hardirqs_on+0x9c/0x150 [ 449.837554][T18519] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.837575][T18519] ? clear_bhb_loop+0x60/0xb0 [ 449.837607][T18519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.837635][T18519] RIP: 0033:0x7fbe5dd8e929 [ 449.837654][T18519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 449.837673][T18519] RSP: 002b:00007fbe5eb5b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 449.837695][T18519] RAX: ffffffffffffffda RBX: 00007fbe5dfb5fa0 RCX: 00007fbe5dd8e929 [ 449.837711][T18519] RDX: 0000000020005000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 449.837726][T18519] RBP: 00007fbe5eb5b090 R08: 0000000000000000 R09: 0000000000000000 [ 449.837739][T18519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 449.837764][T18519] R13: 0000000000000000 R14: 00007fbe5dfb5fa0 R15: 00007fffd7ab1a38 [ 449.837798][T18519] [ 450.171985][T18523] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4277'. [ 450.482951][T18540] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4285'. [ 450.594736][T18546] Cannot find add_set index 1 as target [ 450.682991][T18552] : entered promiscuous mode [ 450.714845][T18552] netlink: 232 bytes leftover after parsing attributes in process `syz.0.4290'. [ 450.745605][T18556] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4288'. [ 450.746842][T18555] blkio.reset_stats is deprecated [ 450.764172][T18556] netlink: 'syz.3.4288': attribute type 1 has an invalid length. [ 450.771969][T18556] netlink: 108 bytes leftover after parsing attributes in process `syz.3.4288'. [ 450.802716][T18558] netlink: 120 bytes leftover after parsing attributes in process `syz.1.4292'. [ 450.859889][T18550] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4288'. [ 450.898078][T18561] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4293'. [ 451.431715][T18585] netlink: 'syz.3.4303': attribute type 33 has an invalid length. [ 451.604323][T18592] netlink: 'syz.0.4305': attribute type 1 has an invalid length. [ 451.681510][T18597] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 451.935586][T18603] ip6t_srh: unknown srh match flags 536B [ 452.343270][T18622] netlink: 'syz.0.4316': attribute type 33 has an invalid length. [ 452.385420][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 452.453428][T18626] netlink: 'syz.1.4317': attribute type 1 has an invalid length. [ 452.758258][T18645] Cannot find add_set index 1 as target [ 452.780891][T18650] netlink: 'syz.0.4327': attribute type 1 has an invalid length. [ 452.823209][T18652] x_tables: duplicate underflow at hook 1 [ 453.041963][T18656] 8021q: adding VLAN 0 to HW filter on device bond4 [ 453.078109][T18656] gretap1: entered promiscuous mode [ 453.106064][T18656] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 453.140963][T18657] vlan2: entered promiscuous mode [ 453.147448][T18657] vlan2: entered allmulticast mode [ 453.152652][T18657] bridge0: entered allmulticast mode [ 453.207303][T18665] macvlan0: entered promiscuous mode [ 453.212682][T18665] macvlan0: entered allmulticast mode [ 453.219169][T18665] bond4: (slave macvlan0): Error -98 calling set_mac_address [ 453.598513][T18692] x_tables: duplicate underflow at hook 1 [ 453.650019][T18692] netlink: 'syz.2.4340': attribute type 1 has an invalid length. [ 453.926386][T18707] __nla_validate_parse: 14 callbacks suppressed [ 453.926409][T18707] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4348'. [ 453.962894][T18707] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4348'. [ 454.012137][T18710] gre1: entered promiscuous mode [ 454.029563][T18710] gre1: entered allmulticast mode [ 454.269529][T18721] netlink: 11 bytes leftover after parsing attributes in process `syz.1.4353'. [ 454.367637][T18727] netlink: 100 bytes leftover after parsing attributes in process `syz.3.4354'. [ 454.402216][T18722] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4354'. [ 454.523801][T18734] netlink: 232 bytes leftover after parsing attributes in process `syz.1.4357'. [ 454.542322][T18737] netlink: 232 bytes leftover after parsing attributes in process `syz.1.4357'. [ 454.616979][T18744] FAULT_INJECTION: forcing a failure. [ 454.616979][T18744] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 454.660311][T18744] CPU: 0 UID: 0 PID: 18744 Comm: syz.4.4360 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(full) [ 454.660345][T18744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 454.660359][T18744] Call Trace: [ 454.660367][T18744] [ 454.660376][T18744] dump_stack_lvl+0x189/0x250 [ 454.660406][T18744] ? __pfx____ratelimit+0x10/0x10 [ 454.660429][T18744] ? __pfx_dump_stack_lvl+0x10/0x10 [ 454.660452][T18744] ? __pfx__printk+0x10/0x10 [ 454.660495][T18744] should_fail_ex+0x414/0x560 [ 454.660524][T18744] _copy_to_user+0x31/0xb0 [ 454.660557][T18744] simple_read_from_buffer+0xe1/0x170 [ 454.660595][T18744] proc_fail_nth_read+0x1df/0x250 [ 454.660621][T18744] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 454.660646][T18744] ? rw_verify_area+0x258/0x650 [ 454.660673][T18744] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 454.660696][T18744] vfs_read+0x200/0x980 [ 454.660731][T18744] ? __pfx___mutex_lock+0x10/0x10 [ 454.660761][T18744] ? __pfx_vfs_read+0x10/0x10 [ 454.660792][T18744] ? __fget_files+0x2a/0x420 [ 454.660816][T18744] ? __fget_files+0x3a0/0x420 [ 454.660834][T18744] ? __fget_files+0x2a/0x420 [ 454.660864][T18744] ksys_read+0x145/0x250 [ 454.660895][T18744] ? __pfx_ksys_read+0x10/0x10 [ 454.660924][T18744] ? rcu_is_watching+0x15/0xb0 [ 454.660958][T18744] ? trace_sys_enter+0x25/0x120 [ 454.660986][T18744] do_syscall_64+0xfa/0x3b0 [ 454.661009][T18744] ? lockdep_hardirqs_on+0x9c/0x150 [ 454.661030][T18744] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.661052][T18744] ? clear_bhb_loop+0x60/0xb0 [ 454.661078][T18744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.661099][T18744] RIP: 0033:0x7f061bd8d33c [ 454.661119][T18744] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 454.661137][T18744] RSP: 002b:00007f061cb2e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 454.661159][T18744] RAX: ffffffffffffffda RBX: 00007f061bfb5fa0 RCX: 00007f061bd8d33c [ 454.661174][T18744] RDX: 000000000000000f RSI: 00007f061cb2e0a0 RDI: 0000000000000003 [ 454.661187][T18744] RBP: 00007f061cb2e090 R08: 0000000000000000 R09: 0000000000000000 [ 454.661199][T18744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 454.661211][T18744] R13: 0000000000000000 R14: 00007f061bfb5fa0 R15: 00007ffed7e65e08 [ 454.661244][T18744] [ 455.010990][T18754] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4362'. [ 455.275713][T18763] netlink: 'syz.0.4364': attribute type 10 has an invalid length. [ 455.296535][T18763] bridge0: port 3(team0) entered blocking state [ 455.303177][T18763] bridge0: port 3(team0) entered disabled state [ 455.320969][T18763] team0: entered allmulticast mode [ 455.327375][T18763] team_slave_0: entered allmulticast mode [ 455.338739][T18763] team_slave_1: entered allmulticast mode [ 455.362062][T18763] team0: entered promiscuous mode [ 455.373167][T18763] team_slave_0: entered promiscuous mode [ 455.381784][T18763] team_slave_1: entered promiscuous mode [ 455.398566][T18765] mac80211_hwsim hwsim16 ÿ: renamed from wlan1 (while UP) [ 455.461612][T18771] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4367'. [ 455.481685][T18771] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4367'. [ 455.854477][T18784] FAULT_INJECTION: forcing a failure. [ 455.854477][T18784] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 455.885819][T18784] CPU: 0 UID: 0 PID: 18784 Comm: syz.0.4372 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(full) [ 455.885852][T18784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 455.885866][T18784] Call Trace: [ 455.885874][T18784] [ 455.885883][T18784] dump_stack_lvl+0x189/0x250 [ 455.885914][T18784] ? __pfx____ratelimit+0x10/0x10 [ 455.885937][T18784] ? __pfx_dump_stack_lvl+0x10/0x10 [ 455.885964][T18784] ? __pfx__printk+0x10/0x10 [ 455.886009][T18784] should_fail_ex+0x414/0x560 [ 455.886038][T18784] _copy_to_user+0x31/0xb0 [ 455.886073][T18784] simple_read_from_buffer+0xe1/0x170 [ 455.886111][T18784] proc_fail_nth_read+0x1df/0x250 [ 455.886146][T18784] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 455.886172][T18784] ? rw_verify_area+0x258/0x650 [ 455.886200][T18784] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 455.886224][T18784] vfs_read+0x200/0x980 [ 455.886259][T18784] ? __pfx___mutex_lock+0x10/0x10 [ 455.886285][T18784] ? __pfx_vfs_read+0x10/0x10 [ 455.886316][T18784] ? __fget_files+0x2a/0x420 [ 455.886341][T18784] ? __fget_files+0x3a0/0x420 [ 455.886359][T18784] ? __fget_files+0x2a/0x420 [ 455.886389][T18784] ksys_read+0x145/0x250 [ 455.886422][T18784] ? __pfx_ksys_read+0x10/0x10 [ 455.886448][T18784] ? rcu_is_watching+0x15/0xb0 [ 455.886480][T18784] ? do_syscall_64+0xbe/0x3b0 [ 455.886510][T18784] do_syscall_64+0xfa/0x3b0 [ 455.886532][T18784] ? lockdep_hardirqs_on+0x9c/0x150 [ 455.886554][T18784] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.886576][T18784] ? clear_bhb_loop+0x60/0xb0 [ 455.886604][T18784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.886625][T18784] RIP: 0033:0x7fd2e478d33c [ 455.886644][T18784] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 455.886664][T18784] RSP: 002b:00007fd2e56a2030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 455.886687][T18784] RAX: ffffffffffffffda RBX: 00007fd2e49b5fa0 RCX: 00007fd2e478d33c [ 455.886703][T18784] RDX: 000000000000000f RSI: 00007fd2e56a20a0 RDI: 000000000000000c [ 455.886717][T18784] RBP: 00007fd2e56a2090 R08: 0000000000000000 R09: 0000000000000000 [ 455.886730][T18784] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000002 [ 455.886744][T18784] R13: 0000000000000000 R14: 00007fd2e49b5fa0 R15: 00007fffa9972908 [ 455.886779][T18784] [ 456.492273][T18805] FAULT_INJECTION: forcing a failure. [ 456.492273][T18805] name failslab, interval 1, probability 0, space 0, times 0 [ 456.512771][T18805] CPU: 1 UID: 0 PID: 18805 Comm: syz.2.4378 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(full) [ 456.512806][T18805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 456.512832][T18805] Call Trace: [ 456.512841][T18805] [ 456.512850][T18805] dump_stack_lvl+0x189/0x250 [ 456.512882][T18805] ? __pfx____ratelimit+0x10/0x10 [ 456.512905][T18805] ? __pfx_dump_stack_lvl+0x10/0x10 [ 456.512931][T18805] ? __pfx__printk+0x10/0x10 [ 456.512967][T18805] ? __pfx___might_resched+0x10/0x10 [ 456.512997][T18805] should_fail_ex+0x414/0x560 [ 456.513024][T18805] should_failslab+0xa8/0x100 [ 456.513059][T18805] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 456.513091][T18805] ? __alloc_skb+0x112/0x2d0 [ 456.513125][T18805] __alloc_skb+0x112/0x2d0 [ 456.513159][T18805] netlink_sendmsg+0x5c6/0xb30 [ 456.513201][T18805] ? __pfx_netlink_sendmsg+0x10/0x10 [ 456.513236][T18805] ? aa_sock_msg_perm+0x94/0x160 [ 456.513261][T18805] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 456.513285][T18805] ? __pfx_netlink_sendmsg+0x10/0x10 [ 456.513321][T18805] __sock_sendmsg+0x21c/0x270 [ 456.513350][T18805] ____sys_sendmsg+0x505/0x830 [ 456.513389][T18805] ? __pfx_____sys_sendmsg+0x10/0x10 [ 456.513431][T18805] ? import_iovec+0x74/0xa0 [ 456.513466][T18805] ___sys_sendmsg+0x21f/0x2a0 [ 456.513503][T18805] ? __pfx____sys_sendmsg+0x10/0x10 [ 456.513577][T18805] ? __fget_files+0x2a/0x420 [ 456.513598][T18805] ? __fget_files+0x3a0/0x420 [ 456.513628][T18805] __x64_sys_sendmsg+0x19b/0x260 [ 456.513665][T18805] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 456.513708][T18805] ? __pfx_ksys_write+0x10/0x10 [ 456.513735][T18805] ? rcu_is_watching+0x15/0xb0 [ 456.513767][T18805] ? do_syscall_64+0xbe/0x3b0 [ 456.513796][T18805] do_syscall_64+0xfa/0x3b0 [ 456.513827][T18805] ? lockdep_hardirqs_on+0x9c/0x150 [ 456.513850][T18805] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.513873][T18805] ? clear_bhb_loop+0x60/0xb0 [ 456.513901][T18805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.513922][T18805] RIP: 0033:0x7f265bf8e929 [ 456.513943][T18805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 456.513964][T18805] RSP: 002b:00007f265cde9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 456.513987][T18805] RAX: ffffffffffffffda RBX: 00007f265c1b5fa0 RCX: 00007f265bf8e929 [ 456.514004][T18805] RDX: 0000000004000040 RSI: 0000200000000200 RDI: 0000000000000003 [ 456.514019][T18805] RBP: 00007f265cde9090 R08: 0000000000000000 R09: 0000000000000000 [ 456.514034][T18805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 456.514047][T18805] R13: 0000000000000000 R14: 00007f265c1b5fa0 R15: 00007ffe04862a88 [ 456.514081][T18805] [ 457.082603][T18823] tipc: Started in network mode [ 457.102366][T18823] tipc: Node identity fe80000000000000000000000000002a, cluster identity 4711 [ 457.114027][T18823] tipc: Enabled bearer , priority 10 [ 457.333928][T18838] bridge_slave_0: left allmulticast mode [ 457.359810][T18838] bridge_slave_0: left promiscuous mode [ 457.388710][T18838] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.485580][T18846] xt_CT: You must specify a L4 protocol and not use inversions on it [ 457.487351][T18848] xt_CT: You must specify a L4 protocol and not use inversions on it [ 457.539494][T18838] team0: Port device team_slave_0 removed [ 457.570868][T18838] team0: Port device team_slave_1 removed [ 457.585167][T18838] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 457.595504][T18838] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 457.607271][T18838] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 457.618560][T18838] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 457.667214][T18838] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 457.845824][T18861] xt_nfacct: accounting object `syz1' does not exists [ 457.959187][T18863] syz_tun: entered allmulticast mode [ 458.010051][T18862] syz_tun: left allmulticast mode [ 458.233498][ T923] tipc: Node number set to 4269801514 [ 458.849699][T18910] netlink: 'syz.4.4416': attribute type 10 has an invalid length. [ 458.856679][T18902] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 458.886112][T18910] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.912025][T18910] bridge_slave_1: left allmulticast mode [ 458.919279][T18910] bridge_slave_1: left promiscuous mode [ 458.930572][T18910] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.949117][T18910] bridge_slave_1: entered promiscuous mode [ 458.965452][T18910] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 459.145072][T18923] netlink: 'syz.0.4421': attribute type 10 has an invalid length. [ 459.153258][T18923] netlink: 'syz.0.4421': attribute type 10 has an invalid length. [ 459.178967][T18927] netlink: 'syz.3.4423': attribute type 8 has an invalid length. [ 459.269190][T18920] bond0: (slave bridge0): Releasing backup interface [ 459.283270][T18920] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.290823][T18920] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.307398][T18920] team0: left allmulticast mode [ 459.312422][T18920] team_slave_0: left allmulticast mode [ 459.325399][T18920] team_slave_1: left allmulticast mode [ 459.334277][T18920] team0: left promiscuous mode [ 459.339211][T18920] team_slave_0: left promiscuous mode [ 459.344986][T18920] team_slave_1: left promiscuous mode [ 459.351005][T18920] bridge0: port 3(team0) entered disabled state [ 459.368606][T18920] bridge_slave_0: left allmulticast mode [ 459.374424][T18920] bridge_slave_0: left promiscuous mode [ 459.380252][T18920] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.400131][T18920] bridge_slave_1: left allmulticast mode [ 459.411618][T18920] bridge_slave_1: left promiscuous mode [ 459.424978][T18920] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.456985][T18920] bond0: (slave bond_slave_0): Releasing backup interface [ 459.466785][T18932] netlink: 'syz.2.4424': attribute type 10 has an invalid length. [ 459.477346][T18920] bond_slave_0: left promiscuous mode [ 459.497023][T18920] bond0: (slave bond_slave_1): Releasing backup interface [ 459.505791][T18920] bond_slave_1: left promiscuous mode [ 459.538557][T18920] team0: Port device team_slave_0 removed [ 459.559442][T18920] team0: Port device team_slave_1 removed [ 459.574726][T18920] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 459.585233][T18920] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 459.608102][T18920] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 459.620192][T18920] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 459.649637][T18920] bond0: (slave netdevsim0): Releasing backup interface [ 459.667542][T18920] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 459.826875][T18932] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 459.862483][T18931] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 460.056302][T18955] __nla_validate_parse: 10 callbacks suppressed [ 460.056332][T18955] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4433'. [ 460.074760][T18956] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4432'. [ 460.424419][T18976] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 460.800212][T18999] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4446'. [ 461.750072][T19043] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4462'. [ 461.761752][T19045] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4462'. [ 461.766262][T19042] netlink: 'syz.1.4461': attribute type 11 has an invalid length. [ 462.300789][T19066] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4468'. [ 462.351758][T19066] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4468'. [ 462.602212][T19083] FAULT_INJECTION: forcing a failure. [ 462.602212][T19083] name failslab, interval 1, probability 0, space 0, times 0 [ 462.623765][T19083] CPU: 0 UID: 0 PID: 19083 Comm: syz.4.4475 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(full) [ 462.623806][T19083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 462.623819][T19083] Call Trace: [ 462.623828][T19083] [ 462.623837][T19083] dump_stack_lvl+0x189/0x250 [ 462.623868][T19083] ? __pfx____ratelimit+0x10/0x10 [ 462.623892][T19083] ? __pfx_dump_stack_lvl+0x10/0x10 [ 462.623918][T19083] ? __pfx__printk+0x10/0x10 [ 462.623954][T19083] ? __pfx___might_resched+0x10/0x10 [ 462.623979][T19083] ? fs_reclaim_acquire+0x7d/0x100 [ 462.624006][T19083] should_fail_ex+0x414/0x560 [ 462.624036][T19083] should_failslab+0xa8/0x100 [ 462.624072][T19083] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 462.624103][T19083] ? __alloc_skb+0x112/0x2d0 [ 462.624137][T19083] __alloc_skb+0x112/0x2d0 [ 462.624172][T19083] netlink_ack+0x146/0xa50 [ 462.624200][T19083] ? __pfx_genl_rcv_msg+0x10/0x10 [ 462.624221][T19083] ? ref_tracker_free+0x63a/0x7d0 [ 462.624245][T19083] ? __pfx_tipc_nl_net_set+0x10/0x10 [ 462.624279][T19083] ? __pfx_ref_tracker_free+0x10/0x10 [ 462.624317][T19083] netlink_rcv_skb+0x28c/0x470 [ 462.624348][T19083] ? __pfx_genl_rcv_msg+0x10/0x10 [ 462.624374][T19083] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 462.624425][T19083] ? down_read+0x1ad/0x2e0 [ 462.624456][T19083] genl_rcv+0x28/0x40 [ 462.624477][T19083] netlink_unicast+0x75c/0x8e0 [ 462.624528][T19083] netlink_sendmsg+0x805/0xb30 [ 462.624572][T19083] ? __pfx_netlink_sendmsg+0x10/0x10 [ 462.624607][T19083] ? aa_sock_msg_perm+0x94/0x160 [ 462.624634][T19083] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 462.624658][T19083] ? __pfx_netlink_sendmsg+0x10/0x10 [ 462.624691][T19083] __sock_sendmsg+0x21c/0x270 [ 462.624721][T19083] ____sys_sendmsg+0x505/0x830 [ 462.624761][T19083] ? __pfx_____sys_sendmsg+0x10/0x10 [ 462.624806][T19083] ? import_iovec+0x74/0xa0 [ 462.624863][T19083] ___sys_sendmsg+0x21f/0x2a0 [ 462.624908][T19083] ? __pfx____sys_sendmsg+0x10/0x10 [ 462.624985][T19083] ? __fget_files+0x2a/0x420 [ 462.625011][T19083] ? __fget_files+0x3a0/0x420 [ 462.625044][T19083] __x64_sys_sendmsg+0x19b/0x260 [ 462.625088][T19083] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 462.625141][T19083] ? __pfx_ksys_write+0x10/0x10 [ 462.625169][T19083] ? rcu_is_watching+0x15/0xb0 [ 462.625202][T19083] ? do_syscall_64+0xbe/0x3b0 [ 462.625232][T19083] do_syscall_64+0xfa/0x3b0 [ 462.625256][T19083] ? lockdep_hardirqs_on+0x9c/0x150 [ 462.625278][T19083] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.625301][T19083] ? clear_bhb_loop+0x60/0xb0 [ 462.625328][T19083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.625356][T19083] RIP: 0033:0x7f061bd8e929 [ 462.625384][T19083] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 462.625412][T19083] RSP: 002b:00007f061cb2e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 462.625443][T19083] RAX: ffffffffffffffda RBX: 00007f061bfb5fa0 RCX: 00007f061bd8e929 [ 462.625459][T19083] RDX: 0000000004000040 RSI: 0000200000000200 RDI: 0000000000000003 [ 462.625480][T19083] RBP: 00007f061cb2e090 R08: 0000000000000000 R09: 0000000000000000 [ 462.625508][T19083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 462.625522][T19083] R13: 0000000000000000 R14: 00007f061bfb5fa0 R15: 00007ffed7e65e08 [ 462.625554][T19083] [ 463.021633][T19087] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4478'. [ 463.229709][T19100] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4482'. [ 463.836342][T19132] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4491'. [ 463.991592][T19141] netlink: 'syz.0.4495': attribute type 1 has an invalid length. [ 464.011635][T19141] netlink: 'syz.0.4495': attribute type 2 has an invalid length. [ 464.237139][T19147] dvmrp0: entered allmulticast mode [ 464.254386][T19156] dvmrp0: left allmulticast mode [ 464.471108][T19164] FAULT_INJECTION: forcing a failure. [ 464.471108][T19164] name failslab, interval 1, probability 0, space 0, times 0 [ 464.489064][T19164] CPU: 1 UID: 0 PID: 19164 Comm: syz.1.4503 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(full) [ 464.489098][T19164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 464.489112][T19164] Call Trace: [ 464.489122][T19164] [ 464.489132][T19164] dump_stack_lvl+0x189/0x250 [ 464.489165][T19164] ? __pfx____ratelimit+0x10/0x10 [ 464.489189][T19164] ? __pfx_dump_stack_lvl+0x10/0x10 [ 464.489216][T19164] ? __pfx__printk+0x10/0x10 [ 464.489264][T19164] should_fail_ex+0x414/0x560 [ 464.489294][T19164] should_failslab+0xa8/0x100 [ 464.489330][T19164] kmem_cache_alloc_noprof+0x73/0x3c0 [ 464.489361][T19164] ? skb_clone+0x212/0x3a0 [ 464.489389][T19164] skb_clone+0x212/0x3a0 [ 464.489414][T19164] __netlink_deliver_tap+0x404/0x850 [ 464.489461][T19164] ? netlink_deliver_tap+0x2e/0x1b0 [ 464.489500][T19164] netlink_deliver_tap+0x19c/0x1b0 [ 464.489533][T19164] netlink_sendskb+0x68/0x140 [ 464.489563][T19164] netlink_rcv_skb+0x28c/0x470 [ 464.489595][T19164] ? __pfx_genl_rcv_msg+0x10/0x10 [ 464.489620][T19164] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 464.489673][T19164] ? down_read+0x1ad/0x2e0 [ 464.489704][T19164] genl_rcv+0x28/0x40 [ 464.489723][T19164] netlink_unicast+0x75c/0x8e0 [ 464.489765][T19164] netlink_sendmsg+0x805/0xb30 [ 464.489808][T19164] ? __pfx_netlink_sendmsg+0x10/0x10 [ 464.489844][T19164] ? aa_sock_msg_perm+0x94/0x160 [ 464.489870][T19164] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 464.489894][T19164] ? __pfx_netlink_sendmsg+0x10/0x10 [ 464.489927][T19164] __sock_sendmsg+0x21c/0x270 [ 464.489957][T19164] ____sys_sendmsg+0x505/0x830 [ 464.489997][T19164] ? __pfx_____sys_sendmsg+0x10/0x10 [ 464.490049][T19164] ? import_iovec+0x74/0xa0 [ 464.490085][T19164] ___sys_sendmsg+0x21f/0x2a0 [ 464.490122][T19164] ? __pfx____sys_sendmsg+0x10/0x10 [ 464.490201][T19164] ? __fget_files+0x2a/0x420 [ 464.490220][T19164] ? __fget_files+0x3a0/0x420 [ 464.490254][T19164] __x64_sys_sendmsg+0x19b/0x260 [ 464.490291][T19164] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 464.490338][T19164] ? __pfx_ksys_write+0x10/0x10 [ 464.490365][T19164] ? rcu_is_watching+0x15/0xb0 [ 464.490398][T19164] ? do_syscall_64+0xbe/0x3b0 [ 464.490428][T19164] do_syscall_64+0xfa/0x3b0 [ 464.490456][T19164] ? lockdep_hardirqs_on+0x9c/0x150 [ 464.490478][T19164] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.490500][T19164] ? clear_bhb_loop+0x60/0xb0 [ 464.490527][T19164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.490548][T19164] RIP: 0033:0x7f54f138e929 [ 464.490568][T19164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 464.490588][T19164] RSP: 002b:00007f54f219f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 464.490612][T19164] RAX: ffffffffffffffda RBX: 00007f54f15b5fa0 RCX: 00007f54f138e929 [ 464.490629][T19164] RDX: 0000000004000040 RSI: 0000200000000200 RDI: 0000000000000003 [ 464.490643][T19164] RBP: 00007f54f219f090 R08: 0000000000000000 R09: 0000000000000000 [ 464.490658][T19164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 464.490671][T19164] R13: 0000000000000000 R14: 00007f54f15b5fa0 R15: 00007ffd6dc41208 [ 464.490706][T19164] [ 465.367404][T19195] FAULT_INJECTION: forcing a failure. [ 465.367404][T19195] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 465.382091][T19195] CPU: 1 UID: 0 PID: 19195 Comm: syz.1.4516 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(full) [ 465.382123][T19195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 465.382138][T19195] Call Trace: [ 465.382156][T19195] [ 465.382166][T19195] dump_stack_lvl+0x189/0x250 [ 465.382199][T19195] ? __pfx____ratelimit+0x10/0x10 [ 465.382223][T19195] ? __pfx_dump_stack_lvl+0x10/0x10 [ 465.382251][T19195] ? __pfx__printk+0x10/0x10 [ 465.382292][T19195] should_fail_ex+0x414/0x560 [ 465.382321][T19195] _copy_to_user+0x31/0xb0 [ 465.382354][T19195] simple_read_from_buffer+0xe1/0x170 [ 465.382392][T19195] proc_fail_nth_read+0x1df/0x250 [ 465.382419][T19195] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 465.382446][T19195] ? rw_verify_area+0x258/0x650 [ 465.382475][T19195] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 465.382499][T19195] vfs_read+0x200/0x980 [ 465.382535][T19195] ? __pfx___mutex_lock+0x10/0x10 [ 465.382560][T19195] ? __pfx_vfs_read+0x10/0x10 [ 465.382590][T19195] ? __fget_files+0x2a/0x420 [ 465.382615][T19195] ? __fget_files+0x3a0/0x420 [ 465.382634][T19195] ? __fget_files+0x2a/0x420 [ 465.382665][T19195] ksys_read+0x145/0x250 [ 465.382697][T19195] ? __pfx_ksys_read+0x10/0x10 [ 465.382724][T19195] ? rcu_is_watching+0x15/0xb0 [ 465.382757][T19195] ? do_syscall_64+0xbe/0x3b0 [ 465.382788][T19195] do_syscall_64+0xfa/0x3b0 [ 465.382811][T19195] ? lockdep_hardirqs_on+0x9c/0x150 [ 465.382834][T19195] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.382857][T19195] ? clear_bhb_loop+0x60/0xb0 [ 465.382883][T19195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.382906][T19195] RIP: 0033:0x7f54f138d33c [ 465.382926][T19195] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 465.382947][T19195] RSP: 002b:00007f54f219f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 465.382970][T19195] RAX: ffffffffffffffda RBX: 00007f54f15b5fa0 RCX: 00007f54f138d33c [ 465.382987][T19195] RDX: 000000000000000f RSI: 00007f54f219f0a0 RDI: 0000000000000004 [ 465.383001][T19195] RBP: 00007f54f219f090 R08: 0000000000000000 R09: 0000000000000000 [ 465.383016][T19195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 465.383030][T19195] R13: 0000000000000000 R14: 00007f54f15b5fa0 R15: 00007ffd6dc41208 [ 465.383067][T19195] [ 465.828562][T19210] IPVS: set_ctl: invalid protocol: 43 172.30.0.5:20000 [ 465.837263][T19210] __nla_validate_parse: 4 callbacks suppressed [ 465.837285][T19210] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4518'. [ 465.844666][T19207] netlink: 'syz.0.4521': attribute type 4 has an invalid length. [ 465.876587][T19212] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4522'. [ 466.655460][T19241] IPVS: Error joining to the multicast group [ 466.662151][T19246] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4532'. [ 466.925002][T14659] smc: removing ib device syz0 [ 467.179539][T19220] infiniband syz!: set down [ 467.190730][T19220] infiniband syz!: added team_slave_0 [ 467.191074][T19256] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4534'. [ 467.209632][T19220] syz!: rxe_create_cq: returned err = -12 [ 467.218691][T19220] infiniband syz!: Couldn't create ib_mad CQ [ 467.227174][T19220] infiniband syz!: Couldn't open port 1 [ 467.288001][ T5853] ================================================================== [ 467.296131][ T5853] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x6e/0x190 [ 467.304955][ T5853] Read of size 8 at addr ffff88801cb5e2e8 by task kworker/0:3/5853 [ 467.312909][ T5853] [ 467.315279][ T5853] CPU: 0 UID: 0 PID: 5853 Comm: kworker/0:3 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(full) [ 467.315309][ T5853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 467.315325][ T5853] Workqueue: events smc_ib_port_event_work [ 467.315364][ T5853] Call Trace: [ 467.315373][ T5853] [ 467.315384][ T5853] dump_stack_lvl+0x189/0x250 [ 467.315411][ T5853] ? rcu_is_watching+0x15/0xb0 [ 467.315436][ T5853] ? __kasan_check_byte+0x12/0x40 [ 467.315469][ T5853] ? __pfx_dump_stack_lvl+0x10/0x10 [ 467.315493][ T5853] ? rcu_is_watching+0x15/0xb0 [ 467.315518][ T5853] ? lock_release+0x4b/0x3e0 [ 467.315544][ T5853] ? __virt_addr_valid+0x1c8/0x5c0 [ 467.315573][ T5853] ? __virt_addr_valid+0x4a5/0x5c0 [ 467.315603][ T5853] print_report+0xca/0x230 [ 467.315623][ T5853] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 467.315658][ T5853] kasan_report+0x118/0x150 [ 467.315691][ T5853] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 467.315731][ T5853] __ethtool_get_link_ksettings+0x6e/0x190 [ 467.315768][ T5853] ib_get_eth_speed+0x15e/0x7b0 [ 467.315793][ T5853] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 467.315820][ T5853] ? do_raw_spin_unlock+0x122/0x240 [ 467.315857][ T5853] rxe_query_port+0x93/0x3b0 [ 467.315889][ T5853] ib_query_port+0x170/0x830 [ 467.315915][ T5853] smc_ib_port_event_work+0x15a/0x940 [ 467.315955][ T5853] ? _raw_spin_unlock_irq+0x23/0x50 [ 467.315995][ T5853] ? process_scheduled_works+0x9ef/0x17b0 [ 467.316019][ T5853] ? process_scheduled_works+0x9ef/0x17b0 [ 467.316046][ T5853] process_scheduled_works+0xae1/0x17b0 [ 467.316089][ T5853] ? __pfx_process_scheduled_works+0x10/0x10 [ 467.316124][ T5853] worker_thread+0x8a0/0xda0 [ 467.316152][ T5853] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 467.316190][ T5853] ? __kthread_parkme+0x7b/0x200 [ 467.316223][ T5853] kthread+0x70e/0x8a0 [ 467.316254][ T5853] ? __pfx_worker_thread+0x10/0x10 [ 467.316279][ T5853] ? __pfx_kthread+0x10/0x10 [ 467.316310][ T5853] ? _raw_spin_unlock_irq+0x23/0x50 [ 467.316344][ T5853] ? lockdep_hardirqs_on+0x9c/0x150 [ 467.316366][ T5853] ? __pfx_kthread+0x10/0x10 [ 467.316396][ T5853] ret_from_fork+0x3fc/0x770 [ 467.316420][ T5853] ? __pfx_ret_from_fork+0x10/0x10 [ 467.316447][ T5853] ? __switch_to_asm+0x39/0x70 [ 467.316475][ T5853] ? __switch_to_asm+0x33/0x70 [ 467.316503][ T5853] ? __pfx_kthread+0x10/0x10 [ 467.316534][ T5853] ret_from_fork_asm+0x1a/0x30 [ 467.316572][ T5853] [ 467.316581][ T5853] [ 467.347304][T19220] RDS/IB: syz!: added [ 467.347864][ T5853] Allocated by task 14698: [ 467.350863][T19220] smc: adding ib device syz! with port count 1 [ 467.355489][ T5853] kasan_save_track+0x3e/0x80 [ 467.355521][ T5853] __kasan_kmalloc+0x93/0xb0 [ 467.355548][ T5853] __kvmalloc_node_noprof+0x30d/0x5f0 [ 467.355577][ T5853] alloc_netdev_mqs+0xa6/0x11e0 [ 467.355598][ T5853] rtnl_create_link+0x31f/0xd10 [ 467.355619][ T5853] rtnl_newlink_create+0x25c/0xb00 [ 467.355649][ T5853] rtnl_newlink+0x16d6/0x1c70 [ 467.355675][ T5853] rtnetlink_rcv_msg+0x7cf/0xb70 [ 467.355701][ T5853] netlink_rcv_skb+0x208/0x470 [ 467.355729][ T5853] netlink_unicast+0x75c/0x8e0 [ 467.355754][ T5853] netlink_sendmsg+0x805/0xb30 [ 467.355782][ T5853] __sock_sendmsg+0x21c/0x270 [ 467.355805][ T5853] __sys_sendto+0x3bd/0x520 [ 467.355832][ T5853] __x64_sys_sendto+0xde/0x100 [ 467.355859][ T5853] do_syscall_64+0xfa/0x3b0 [ 467.377595][T19220] smc: ib device syz! port 1 has pnetid [ 467.380308][ T5853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.380339][ T5853] [ 467.380346][ T5853] Freed by task 19246: [ 467.380359][ T5853] kasan_save_track+0x3e/0x80 [ 467.665359][ T5853] kasan_save_free_info+0x46/0x50 [ 467.670412][ T5853] __kasan_slab_free+0x62/0x70 [ 467.675203][ T5853] kfree+0x18e/0x440 [ 467.679118][ T5853] device_release+0x99/0x1c0 [ 467.683730][ T5853] kobject_put+0x22b/0x480 [ 467.688189][ T5853] netdev_run_todo+0xd2e/0xea0 [ 467.692966][ T5853] rtnl_dellink+0x537/0x710 [ 467.697499][ T5853] rtnetlink_rcv_msg+0x7cf/0xb70 [ 467.702479][ T5853] netlink_rcv_skb+0x208/0x470 [ 467.707277][ T5853] netlink_unicast+0x75c/0x8e0 [ 467.712326][ T5853] netlink_sendmsg+0x805/0xb30 [ 467.717197][ T5853] __sock_sendmsg+0x21c/0x270 [ 467.721959][ T5853] ____sys_sendmsg+0x505/0x830 [ 467.726977][ T5853] ___sys_sendmsg+0x21f/0x2a0 [ 467.731777][ T5853] __x64_sys_sendmsg+0x19b/0x260 [ 467.736841][ T5853] do_syscall_64+0xfa/0x3b0 [ 467.741417][ T5853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.747334][ T5853] [ 467.749677][ T5853] The buggy address belongs to the object at ffff88801cb5e000 [ 467.749677][ T5853] which belongs to the cache kmalloc-cg-4k of size 4096 [ 467.764009][ T5853] The buggy address is located 744 bytes inside of [ 467.764009][ T5853] freed 4096-byte region [ffff88801cb5e000, ffff88801cb5f000) [ 467.777924][ T5853] [ 467.780270][ T5853] The buggy address belongs to the physical page: [ 467.786703][ T5853] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1cb58 [ 467.796006][ T5853] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 467.804552][ T5853] memcg:ffff888078dd9841 [ 467.808825][ T5853] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 467.816900][ T5853] page_type: f5(slab) [ 467.821546][ T5853] raw: 00fff00000000040 ffff88801a44b500 dead000000000122 0000000000000000 [ 467.830313][ T5853] raw: 0000000000000000 0000000000040004 00000000f5000000 ffff888078dd9841 [ 467.838970][ T5853] head: 00fff00000000040 ffff88801a44b500 dead000000000122 0000000000000000 [ 467.847766][ T5853] head: 0000000000000000 0000000000040004 00000000f5000000 ffff888078dd9841 [ 467.856690][ T5853] head: 00fff00000000003 ffffea000072d601 00000000ffffffff 00000000ffffffff [ 467.865427][ T5853] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 467.874314][ T5853] page dumped because: kasan: bad access detected [ 467.880789][ T5853] page_owner tracks the page as allocated [ 467.886526][ T5853] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 14698, tgid 14698 (syz-executor), ts 299308862543, free_ts 299286318791 [ 467.908264][ T5853] post_alloc_hook+0x240/0x2a0 [ 467.913062][ T5853] get_page_from_freelist+0x21e4/0x22c0 [ 467.918631][ T5853] __alloc_frozen_pages_noprof+0x181/0x370 [ 467.924456][ T5853] alloc_pages_mpol+0x232/0x4a0 [ 467.929336][ T5853] allocate_slab+0x8a/0x3b0 [ 467.933857][ T5853] ___slab_alloc+0xbfc/0x1480 [ 467.938564][ T5853] __kmalloc_cache_noprof+0x296/0x3d0 [ 467.943978][ T5853] ipv6_add_dev+0x6ca/0x1370 [ 467.948715][ T5853] addrconf_notify+0x794/0x1010 [ 467.953641][ T5853] notifier_call_chain+0x1b3/0x3e0 [ 467.958802][ T5853] register_netdevice+0x1608/0x1ae0 [ 467.964105][ T5853] virt_wifi_newlink+0x428/0x860 [ 467.969095][ T5853] rtnl_newlink_create+0x310/0xb00 [ 467.974239][ T5853] rtnl_newlink+0x16d6/0x1c70 [ 467.978937][ T5853] rtnetlink_rcv_msg+0x7cf/0xb70 [ 467.983903][ T5853] netlink_rcv_skb+0x208/0x470 [ 467.988727][ T5853] page last free pid 14698 tgid 14698 stack trace: [ 467.995252][ T5853] __free_frozen_pages+0xc71/0xe70 [ 468.000486][ T5853] __slab_free+0x326/0x400 [ 468.004923][ T5853] qlist_free_all+0x97/0x140 [ 468.009544][ T5853] kasan_quarantine_reduce+0x148/0x160 [ 468.015021][ T5853] __kasan_slab_alloc+0x22/0x80 [ 468.019918][ T5853] __kmalloc_cache_noprof+0x1be/0x3d0 [ 468.025329][ T5853] register_netdevice+0x58b/0x1ae0 [ 468.030483][ T5853] veth_newlink+0x5cc/0xa50 [ 468.035032][ T5853] rtnl_newlink_create+0x310/0xb00 [ 468.040194][ T5853] rtnl_newlink+0x16d6/0x1c70 [ 468.044935][ T5853] rtnetlink_rcv_msg+0x7cf/0xb70 [ 468.049914][ T5853] netlink_rcv_skb+0x208/0x470 [ 468.054716][ T5853] netlink_unicast+0x75c/0x8e0 [ 468.059507][ T5853] netlink_sendmsg+0x805/0xb30 [ 468.064295][ T5853] __sock_sendmsg+0x21c/0x270 [ 468.068992][ T5853] __sys_sendto+0x3bd/0x520 [ 468.073601][ T5853] [ 468.076022][ T5853] Memory state around the buggy address: [ 468.081659][ T5853] ffff88801cb5e180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 468.089818][ T5853] ffff88801cb5e200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 468.097944][ T5853] >ffff88801cb5e280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 468.106121][ T5853] ^ [ 468.113594][ T5853] ffff88801cb5e300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 468.121671][ T5853] ffff88801cb5e380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 468.129920][ T5853] ================================================================== [ 468.174512][ T5853] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 468.181778][ T5853] CPU: 0 UID: 0 PID: 5853 Comm: kworker/0:3 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(full) [ 468.193890][ T5853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 468.204164][ T5853] Workqueue: events smc_ib_port_event_work [ 468.210044][ T5853] Call Trace: [ 468.213363][ T5853] [ 468.216328][ T5853] dump_stack_lvl+0x99/0x250 [ 468.220960][ T5853] ? __asan_memcpy+0x40/0x70 [ 468.225603][ T5853] ? __pfx_dump_stack_lvl+0x10/0x10 [ 468.230845][ T5853] ? __pfx__printk+0x10/0x10 [ 468.235472][ T5853] panic+0x2db/0x790 [ 468.239394][ T5853] ? __pfx_panic+0x10/0x10 [ 468.243846][ T5853] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 468.249782][ T5853] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 468.256145][ T5853] ? print_memory_metadata+0x314/0x400 [ 468.261624][ T5853] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 468.267663][ T5853] check_panic_on_warn+0x89/0xb0 [ 468.272646][ T5853] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 468.278679][ T5853] end_report+0x78/0x160 [ 468.282981][ T5853] kasan_report+0x129/0x150 [ 468.287543][ T5853] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 468.293587][ T5853] __ethtool_get_link_ksettings+0x6e/0x190 [ 468.299455][ T5853] ib_get_eth_speed+0x15e/0x7b0 [ 468.304364][ T5853] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 468.309763][ T5853] ? do_raw_spin_unlock+0x122/0x240 [ 468.315018][ T5853] rxe_query_port+0x93/0x3b0 [ 468.319679][ T5853] ib_query_port+0x170/0x830 [ 468.324322][ T5853] smc_ib_port_event_work+0x15a/0x940 [ 468.329773][ T5853] ? _raw_spin_unlock_irq+0x23/0x50 [ 468.335041][ T5853] ? process_scheduled_works+0x9ef/0x17b0 [ 468.340824][ T5853] ? process_scheduled_works+0x9ef/0x17b0 [ 468.346632][ T5853] process_scheduled_works+0xae1/0x17b0 [ 468.352267][ T5853] ? __pfx_process_scheduled_works+0x10/0x10 [ 468.358305][ T5853] worker_thread+0x8a0/0xda0 [ 468.363046][ T5853] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 468.369691][ T5853] ? __kthread_parkme+0x7b/0x200 [ 468.374697][ T5853] kthread+0x70e/0x8a0 [ 468.378859][ T5853] ? __pfx_worker_thread+0x10/0x10 [ 468.384017][ T5853] ? __pfx_kthread+0x10/0x10 [ 468.388674][ T5853] ? _raw_spin_unlock_irq+0x23/0x50 [ 468.393924][ T5853] ? lockdep_hardirqs_on+0x9c/0x150 [ 468.399247][ T5853] ? __pfx_kthread+0x10/0x10 [ 468.403885][ T5853] ret_from_fork+0x3fc/0x770 [ 468.408535][ T5853] ? __pfx_ret_from_fork+0x10/0x10 [ 468.413696][ T5853] ? __switch_to_asm+0x39/0x70 [ 468.418525][ T5853] ? __switch_to_asm+0x33/0x70 [ 468.423367][ T5853] ? __pfx_kthread+0x10/0x10 [ 468.428019][ T5853] ret_from_fork_asm+0x1a/0x30 [ 468.432840][ T5853] [ 468.436387][ T5853] Kernel Offset: disabled [ 468.440785][ T5853] Rebooting in 86400 seconds..