last executing test programs: 2.37197959s ago: executing program 3 (id=1663): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000040)="290000002000190f00003fffffffda060200007ffee80001dd0048040d000600fe7f00000005000500", 0x29}], 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = accept(r0, &(0x7f0000000140)=@xdp, &(0x7f0000000080)=0x80) sendmsg$kcm(r3, &(0x7f0000000480)={&(0x7f00000001c0)=@ethernet={0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000240)="64057354a80e94ffc99d27425dcf52b41e4199205c9e48f9efc579d68484dc1297ab66c16acc874d041e7eb002093c0326b34e12c026d2589efc4da1f89987741744152e79e89418c67b5b534e08690b09989ea67e52b57a184c4565dcc0b7dcaf1b584464", 0x65}, {&(0x7f00000002c0)="47194b09fdd50ab9aee509f68c475d362719341651b5dd8c4cd84ed806328e38e510b4f799a3885e6d12d5f343e13926eb5c04cbe3fa2b1ba48cfcceea15954e96e1373506c2ce1869952a851fda0a9448ead0286377dc1b53f04b3113adff289110b6c69625abbdcf4b8e72c8a0daff3306fe2ed663d5325bb8a3f9bbe041", 0x7f}, {&(0x7f0000000340)="31968f90c37f3ee5ed30373ce83bd7247b66dcb8f5f8ea1bbdb4eb3571e41e057548fac5fa6dc13648e81d964ba5bb74dc3f1da4f217ca0867751ac8ea21e47a25d3cba198a2eb8d5ab5ee87615c838281948b7624f1732489aa77c0bb56674fbe34569c0be94bd3706dc1bafc9cbed413066bbbca9add1ed7048ac4138acb8d6ae3e1003a13eb52d5e69ddf800b7cb9eeebd37f0bf34219dd0641aab533989d8eba4c318350f1e19d7a2ea0e75dd2595c451fb5c815fedfb64fe3b94420d17a3c8ec1786ba7c8bd78db28ed95ef97e83a8fd164de055633199e33582afd", 0xde}], 0x3, &(0x7f00000005c0)=[{0xe0, 0x6, 0x9, "9495281956e8e4086c6b2a23574182ab27dbbb793ac7913abad1d88705559e674b9f592570cc4adca7ba78cc0c1e8fc869351733d54de960e92e6940c7eec1c7f3efb188750dd8acf7b76919302b12c8f92c8b25fca84fabae7822ab9b22616b3af85cff13817b4be313baeeecd94d6bf5bdb4d6e215c03f18715506b53ff1487b3407bdd20846a3ee0170eebe28197b55b9c63ae51670d5bd70e8dc773e34a2d3be03504464ef68be12d2be52133fb3252c8529fa69f0f50f8332a6902b9d2d1402542fe53f8653d4"}, {0x40, 0x88, 0x7fffffff, "adab4d88c1d2ae9d8634a298335d6c16df194f78551bc32002ddc99f6ddd09e3f13764dc1d8dea5f29a5e5918e51"}, {0x30, 0x114, 0x5, "a058cc7b39ce4d828890cbd83df84a8563e54ec7177d05aa8b65d5756583d4"}, {0x20, 0x3a, 0x7, "abbf230ef7923d6ad3fe7d02"}, {0x108, 0x0, 0x6, "016fc71c81c23e3ba3fd58b487b5a8a2f3b3a3f85f91232a7fb380e1d4db4e95dd41ad60513a31aa110c0e6252a0dc1d1189543095d85149f27935105c71c36a2a26b95f520c321b030b9e5cc3a636a746afc6fb743b16253415c8d53af143ec59fc8df4a37e75182f900060fd5f180802c61482b007ab8ff5661901f656303ba25ee86b69a3ee1a95225fbdf16e0574d1d15f5f7782eb34186617239ef085a211f9b623feead7fac11a8a8c416d9906a0bc4aaae996f7cec5b770cf60a6c8656b4f9bc426efa4118273ed9ac69c78c79cc088b59fd495136c3750a6c9b8f3482e3ea8051f41540cc622f70d9d33de5ffc2d49eb321d75ec"}, {0x30, 0x112, 0xffff7fff, "9cf2b96afacf3e031973f9c29604f036d7aa2244106983d8def62a4d1b8e5e72"}], 0x2a8}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1, 0x12}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}, 0x1, 0xba01}, 0x40040) 2.124037667s ago: executing program 2 (id=1666): r0 = socket$kcm(0x10, 0x2, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x1}]}}}]}, 0x3c}}, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x8408, &(0x7f0000000680)=[{&(0x7f0000000180)="5c00000014006b03c84e21008bf32c19021800f80200000044000200ac14140e05251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 2.024208205s ago: executing program 3 (id=1669): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) connect$vsock_stream(r1, &(0x7f0000000000), 0x10) listen(r0, 0x2) socket$caif_stream(0x25, 0x1, 0x3) (async) r2 = socket$caif_stream(0x25, 0x1, 0x3) shutdown(r2, 0x0) (async) shutdown(r2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) (async) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='inet_sock_set_state\x00', r4, 0x0, 0x3}, 0x18) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r5, &(0x7f00000007c0)=[{{&(0x7f0000000380)=@in={0x2, 0x4e24, @local}, 0x80, 0x0}}], 0x1, 0x2c000011) (async) sendmmsg(r5, &(0x7f00000007c0)=[{{&(0x7f0000000380)=@in={0x2, 0x4e24, @local}, 0x80, 0x0}}], 0x1, 0x2c000011) socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x3, 0x300) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r6 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r6, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r6, 0xfff) r7 = accept4(r6, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005d000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000040), 0x8) accept4$unix(r1, 0x0, 0x0, 0x0) (async) accept4$unix(r1, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x1c, 0xff, 0xfffff014}, {0x6}]}, 0x10) 2.021414034s ago: executing program 2 (id=1671): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x4) accept4$unix(r0, 0x0, 0x0, 0x0) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r2}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) splice(r1, 0x0, r3, 0x0, 0x1140000000f336, 0x9) close(0xffffffffffffffff) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r4, &(0x7f0000000880)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x4e22, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=[@hoplimit={{0x14, 0x29, 0x34, 0xf9b}}], 0x18}}], 0x2, 0x4001) 1.502545396s ago: executing program 0 (id=1678): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x41}}, &(0x7f0000000480)='GPL\x00', 0x7}, 0x90) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1f}, @NFTA_META_DREG={0x8}]}}}]}]}], {0x14}}, 0x7c}}, 0x0) 1.386157332s ago: executing program 0 (id=1679): r0 = socket(0x1e, 0x2, 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000002700), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r2, 0x1, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4c010}, 0x8080) accept$inet(r0, 0x0, 0x0) 1.275992808s ago: executing program 0 (id=1681): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000009c0)=ANY=[@ANYBLOB="180000002d00090026bd7000000000000400000004001d"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r3, 0x8b2a, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000006c0)={0x2c, r2, 0x1, 0xf0bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_HOP_PENALTY={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4800}, 0x4005804) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r2, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000014}, 0x0) 1.176197487s ago: executing program 4 (id=1683): r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000480)={0x89, 0x0, 0x1, 0x80}, 0x8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000010c0)=@newchain={0x24, 0x24}, 0x24}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073114100000000008510000002000000b70000000000000000000000ffffffff9500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={r2, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000f, 0x0, &(0x7f0000001640)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f000000e0c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x0, 0xfff2}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 1.119987804s ago: executing program 1 (id=1684): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000080)={'gretap0\x00', 0x0, 0x1, 0x20, 0x4, 0x200, {{0x20, 0x4, 0x3, 0xa, 0x80, 0x68, 0x0, 0xf6, 0x0, 0x0, @multicast2, @remote, {[@timestamp={0x44, 0x14, 0xcf, 0x0, 0xe, [0x9, 0x5, 0x0, 0x9]}, @lsrr={0x83, 0xb, 0xd5, [@empty, @dev={0xac, 0x14, 0x14, 0x29}]}, @rr={0x7, 0x17, 0x40, [@loopback, @multicast2, @empty, @multicast2, @local]}, @timestamp_prespec={0x44, 0x2c, 0x7a, 0x3, 0x1, [{@multicast2, 0x6}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x25}, 0xb1}, {@remote, 0x3}, {@private=0xa010101, 0x8e}]}, @rr={0x7, 0x7, 0x7f, [@dev={0xac, 0x14, 0x14, 0x3c}]}]}}}}}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000180)={{{@in=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@dev}}, &(0x7f0000000280)=0xe8) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newsa={0x274, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0xfffd, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee00}, {@in=@private=0xa010101, 0xfe, 0x32}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {}, 0x70bd28, 0x3500, 0xa, 0x4}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "217d66d38547aa140db8a200000000c538c7cb7a"}}, @encap={0x1c, 0x4, {0x19, 0x4e24, 0x4e24, @in6=@dev={0xfe, 0x80, '\x00', 0x2e}}}, @sa={0xe4, 0x6, {{@in6=@mcast2, @in6=@local, 0x4e21, 0xf29d, 0x4e22, 0x7, 0x2, 0xa0, 0x0, 0x2, r1, r2}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d2, 0x2b}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {0x92, 0x4, 0xb16, 0x4000000000000000, 0x2, 0x3b7, 0xfffffffffffffff9, 0x8}, {0x81, 0x4, 0xc, 0x2}, {0xe, 0x6, 0x20000}, 0x70bd27, 0x3506, 0xa, 0x4, 0x7, 0x80}}, @lifetime_val={0x24, 0x9, {0x4, 0x2, 0x9, 0x2}}]}, 0x274}, 0x1, 0x0, 0x0, 0x880}, 0x0) 1.035850504s ago: executing program 3 (id=1685): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r3}, 0x10) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c000000000d8c00950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r6, 0x11, 0x0, 0x0, @void, @value=r5}, 0x20) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x2}, 0x50) sendmmsg$unix(r5, &(0x7f0000000600)=[{{&(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000340)=[{&(0x7f00000009c0)="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", 0x1000}, {&(0x7f0000000500)="828603be77fd014bdeef073d39cf2634fc5dca3d8584cd2488c3afd5ad41f6f73efc5e894f548d1f824b648c971be0c960cc2b0f6c1ddcb2259047d752416162fe4b2ff3316c336983eff7edfa88a1a6d222cd93fe6e6a7450b4c5fc215e75d704d89ed1ac45cf8dd45ab6704a77322cfaf426179ab99033f50787ff513198e1206d2cf6f37f38396331b332a1c8b946dc3088750a7d7f955793d33e2bd672158200eb4ccc27a92da0e424123af8708a24fd1cf02160fe9e50738a6f976da5225048c4c044282768", 0xc8}, {&(0x7f0000000280)="5242fc76a6ac428e382ccaa806a136c6875363c35ca30f7abc76ad06ef9a66ed933f5ed01a78e583d953ea45c9fdd88f6252219c6020bfca9deae6d454a2", 0x3e}, {&(0x7f0000000300)="3ff7e696910e831b4abc6691a24936fd2b5316a35489653942", 0x19}], 0x4, &(0x7f0000000480)=[@rights={{0x38, 0x1, 0x1, [r0, r0, r0, r2, r2, r2, r0, r7, r2, r8]}}], 0x38, 0x804}}], 0x1, 0xe2cab06a106f05ce) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000400000004000000d5140000", @ANYRES32, @ANYBLOB="00000000000000000000011e0a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000100"/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r11}, 0x38) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r11}, 0x20) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r10, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0xffff}, {0x0, 0x0, 0x0, 0x8, 0x2, 0x3}, 0xfffffffe, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x4000080) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r1, &(0x7f0000000800)="4103082c1116480401020200c52cf7c25975e005b02f000006892f000300897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305fbe258161b6fd8f2428652265d94c6fdbaefc57376a57c2feffff188be9427c323ef024a37016d2a7f9ab6e7941a6fc4f95aa73c1dfff4941f6503b5bd8c91db22cd33795481c94085fa12cdc679ac2a5d7b5d99b93fb07acb0da680e78b74c74aae8d7690d5986a9af81622a0ac210bc7b5ca5fed11cb54d046642670041e846bb184ff5d39fe8516d2d2a8d84e6e7dfcb2b8a8023444db513a3d7a124b59f0a5cd36489dbbb75cce3145d0ea3c3aa21af7cbcbc7a7575db782e757ca543109f5ddcec4930aa91f4119ea3d1f56140cb86cfe0724b23904ef5d05c725ee23918a502b1afe09fb0757d", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 1.03519447s ago: executing program 4 (id=1686): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x30, 0x3e, 0x200, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0xc, 0x6, 0x0, 0x0, @u64=0x2}]}, @typed={0x8, 0x8c, 0x0, 0x0, @fd=r0}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 1.03455574s ago: executing program 2 (id=1687): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x34004000) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) connect$can_bcm(r1, &(0x7f0000000380)={0x1d, r3}, 0x10) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000080), 0x4) r4 = socket$pppoe(0x18, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'ip6_vti0\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0x2f, 0x8, 0x4, 0x8001, 0x40, @remote, @local, 0x8, 0x7800, 0x40000000, 0x1}}) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000002380)={{r4}, "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"}) sendmsg$inet(r0, &(0x7f0000000b40)={&(0x7f0000000300)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10, &(0x7f0000000940)=[{&(0x7f0000000340)="eaf03e8b79dd333c32cfd01bb4a2e10404e7e97feb970a37c088a4cec781bec60aba464ee2a81488732c0c5639879d064f96b1d0ccaec55212ff445c1c2ad79dd38eb6da70d3de7d2d02c6b7ebdfe8c5fd16b3c649d19212e8dbdbfb0e2a9e1b1b08f741410390f087f78bac972e3d600c7047500be499f4dbfcaf2a781d5b89fc8c992f1e0463542e9a94b14913e8e9d47d0313037f6111f73005cc16042fd4740fe9750e4fa1edaa91b5f4b7895e5cb678d4", 0xb3}, {&(0x7f0000000400)="b3761a810a4eac49b5554cb4e7dfb653df4ec61f01d9e858af12157d0ac40f7ce40d7867fcf973bd56232a3748a0b48808c01597a45e1c6a89f119156241843698e21ca8bb6a8f49403a7a986cef1f4930c174c282ba5bad456b592a2b6d3cabc377e7ed70eba4dd3110933817d292ed991e593f492f121a5346c7ad61d136adc7f513ff6b43bcf16674f24967dff552b26fc108f1b67e6359c075908091047f50e5bb3299c4", 0xa6}, {&(0x7f00000004c0)="d3040c10406275840751b8c52b8db4a63d87d42f30562607ddb43f42a70259ca7abed26d0ac6b3eb721ab88eb8b4a442fea7d3cf181630328c4977e4cf1f890e137ef1afff618cfc1309c7604422bb87b14f73a4c266762809b326ee31d89809ba8ee37f5cac85c9a46df16e77e8507080471f9ec9406c9bc0978fce9123b0c73927c8a24feec4fd088e17d3adc68ad0b4aec5480340f11aa27cd4c862e657f6fba3e4739c912777d641051ca1c2bb3eb55d5730c0e94328", 0xb8}, {&(0x7f0000000580)="67c162bf75560275fe08e267caf71187f4a2d0fd48cabf0a16ce50d874de5e4421f43c5255926e7a7038f981c165b561b13def51622e3b54c4714a4c4a35e06f31995dda1644b1b41bf96f37bb82b48b4e4e66f4f0bdbbed8cfcd76dac4490f6868dad4c7ab1f7ce2212d96aae7b09c0967b2fa05f1a106fa339b88c06fe725e15aae38b42168d5dad3fec", 0x8b}, {&(0x7f0000000640)="8e0f2ecfae074e0c2a31b8f8d1f49ee4eee4c26f6ec1d6a3b946b5e5c5f767af003fd3856015f8152ad5338b41457aa4a01c1be79544d96c0ce14ebdcea3c1ca5a2c4018a40c999bb62bdca6ce50d5f53894e3e9b2f55f44c4973a5653e1de", 0x5f}, {&(0x7f0000001380)="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", 0x1000}, {&(0x7f00000006c0)="5a659fd5ffca06f2dc9dde8bc9801a5fd74c3e68427698e07189daac3061f0a7fb1b4fb6b0eeab1968e3d41fff6a37b0db28d8cbc6f5104a4c", 0x39}, {&(0x7f0000000700)="0eca773cfdefa4114fe7faad113628c39c9a73a15fe02e555c3f3a6cb9aebcc992441341a1b4f2dc0c4949241506129a9a83621fc068fb5c7b0f5bcce63079779cdeed3611e27605c1ff3c65f267bb6f2684729c284033a24da415562fe7553a33f2e43de73eabd4c888c081c510cc95ed284dad8b8b44a12635cb7d484f012b3414f16665121c6dc87ab146285b12d649e3d573f0805b38868cb345e1fdb9c7f139f3c32effd1c53e12cd99991963be75844d63f2da988b5ff83f2c06ce843eb5615027d70deac558da117e33378c22a3a239ce3b002f8f2f3831fc0c7a6fc773ab849c0433b4ed0b65a1601636e5b35614339e6adb8d", 0xf7}, {&(0x7f0000000800)="bf0c2af8eb8a36b92fef018301fa81a377922d2b7a27ba8020b64c8a5375dc", 0x1f}, {&(0x7f0000000840)="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", 0xfd}], 0xa, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x110}, 0x4000080) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x500}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x7c, 0x24, 0x400, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x8, 0x7}, {0xfff2, 0x6}, {0x2, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x28}}, @TCA_STAB={0x50, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7f, 0x91, 0x48, 0x6, 0x2, 0x6, 0x274, 0x1}}, {0x6, 0x2, [0x6]}}, {{0x1c, 0x1, {0xff, 0x90, 0x2, 0xba0f, 0x1, 0x4, 0x6, 0x3}}, {0xa, 0x2, [0x0, 0x9, 0x1]}}]}]}, 0x7c}}, 0x4000844) close(0x3) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000080)=ANY=[@ANYBLOB="c40000001900f3fe0000000000000000fe8000000000000000000000000000bbac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff00000000b86b6e0000000000000000000c0008"], 0xc4}}, 0x0) 1.01805909s ago: executing program 1 (id=1688): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x1, 0x7fe2, 0x1, 0x12}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000640)={r0, 0x0, 0x0, 0x4}, 0x20) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000000c0)={@multicast2, @remote, 0x0}, &(0x7f0000000200)=0xc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3000000010d780aaa0f9864b6d00000000000000fd5b6cc8408b115b761ead8b41a69d6318cf53eb73380a08fa7ea3880665ad7d66848bdc21385271032f2e6781392ea00c27159edbe5070ae9b8f5f2e00ee73339b3e2f52545b92901423901783a6e0265d7ae518a7968a74e71467bbdafab4c3512023e31d2b7252950705540e9ec6be62b628d231c12a8f07cb5832cf078d2ea4afd1b2e2eb45c0ea9316f321d", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'pim6reg\x00', 0x0}) syz_emit_ethernet(0x86, &(0x7f00000010c0)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb08004500007800000000000190780a010102ac1414aa03049038010000004700000000000000001100000000000000000000440c0001ac1414bb4e210000443c0001e0030001000000000000000000000000ac1414000000000000000000000000000000000000000000ac1e000100000000ac14140000000000"], 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000041c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYRESHEX=r6, @ANYRES16=r9, @ANYBLOB="01000000000000000000040000001400018086802bf1baf8a8607379b390b3"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x40004) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x7a05, 0x1700) pwritev(r10, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000b00)="0f29b6ee4321f6c328d2ba52a9d1c60d755e60358e052e0b3b3d789665d0a2eb19c1b3fc2f913c5c65e7624dde0d9a7513a3171f6dba8d91ce82082fb633df532dece717fb8104f73f5d75b8fd04a818260ba6ca782f6cf58120dbd6478ba6d79a7fce8202b787cdbf9988654a44c402db2f3c176757f7d8f6bb4792579d5cd05274627c260172ad62153412240631ee3d9f8d737a124df54de4c2b8336720fef3", 0xa1}], 0x3, 0x8040000, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000900)={r10, 0x20, &(0x7f00000003c0)={&(0x7f0000000480)=""/171, 0xab, 0x0, &(0x7f0000000780)=""/94, 0x5e}}, 0x10) r12 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r13 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x40, r12, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x40}}, 0xc800) sendmsg$SMC_PNETID_DEL(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r12, @ANYBLOB="270e000000000002000004"], 0x14}, 0x1, 0x40030000000000}, 0x0) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, r12, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x8800}, 0x20000000) r14 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="d52a99295b2f"}, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r14, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x19, 0x1e, 0x0, &(0x7f00000001c0)='GPL\x00', 0x6, 0xf0, &(0x7f0000000bc0)=""/240, 0x40f00, 0xe, '\x00', r7, @fallback=0x23, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0xc, 0x40, 0x800}, 0x10, r11, 0xffffffffffffffff, 0xa, 0x0, &(0x7f0000000940)=[{0x0, 0x2, 0xd, 0x7}, {0x1, 0x1, 0xa, 0x2}, {0x0, 0x3, 0xa, 0x7}, {0x4, 0x5, 0x6, 0x7}, {0x3, 0x5, 0x10, 0x3}, {0x5, 0x2, 0x7, 0x4}, {0x0, 0x2, 0x6, 0x1}, {0x4, 0x1, 0xb, 0x2}, {0x1, 0x4, 0x9}, {0x4, 0x1, 0x9, 0x7}], 0x10, 0x7fffffff}, 0x94) r15 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r15}, 0x10) socket$igmp6(0xa, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0xa}, [@map_idx={0x18, 0x9, 0x5, 0x0, 0xc}, @call={0x85, 0x0, 0x0, 0x73}, @alu={0x4, 0x1, 0x4, 0x4, 0xb, 0x40}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000080)='syzkaller\x00', 0xd18, 0x6d, &(0x7f0000000180)=""/109, 0x40f00, 0x1b, '\x00', r1, @fallback=0x11, r4, 0x8, &(0x7f0000000240)={0x7, 0x5}, 0x8, 0x10, 0x0, 0x0, r11, r15, 0x2, &(0x7f0000000280)=[r0, r0], &(0x7f00000002c0)=[{0x0, 0x3, 0x0, 0x6}, {0x5, 0x3, 0x3}], 0x10, 0x4}, 0x94) 982.311171ms ago: executing program 0 (id=1689): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f00000002c0)="a609a89c9edd34187123b5adceb3968557f4e107445a53c0815c9636d00f896d1e8cd8de77a79f1e3e2c53ddf1bb9f8ac5cb5257ff4e8b960026bc4244c4b09179a97dffdf02563e23546d3e78f944e7e2fee2a00b6313048fe354223318badb21d8c086669c5f7772f4a6d90d0997babdf79f7d557e055b3e6f2e4f41ec06a39a57b9ccc00bbca22395e41f9e9652af665f0e1603fb85d4799d54d44c706ff8df9bb805b182a1260b5936ae44f649b5e2fdca240984dcd0033ec28aeaaa686608c5c50538eea153", 0xc8}, {&(0x7f00000004c0)="7ee25c099579d92f8da721f68a8100b6adf04e0cd543f7d26019d57e6a3ecf7ef34486da35c482845d517dc801cca9e4f248b15413a7e252b00a3878a791f64bd79d1d7cc97eed1cb0ad91426115a3b3bf2738347b0acfb01a5aeb09818f35ba6f394fcc023050ec0fab5b7405e7ce33e50e3efb3f9373ce372307160e67a6ab", 0x80}], 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYRES32=r0], 0x0, 0x27, 0x0, 0x0, 0x3}, 0x28) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x89fd, &(0x7f0000000040)={'bond0\x00'}) ioctl$BTRFS_IOC_FS_INFO(r1, 0x8400941f, &(0x7f0000000400)) 932.475855ms ago: executing program 4 (id=1690): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x13, 0x10, 0x8, 0x0, 0x0, 0x1, 0x3}, 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x0}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00"/48], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) socket$inet6(0xa, 0x3, 0x8000000003c) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x60980, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 863.793839ms ago: executing program 2 (id=1691): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f00000002c0), &(0x7f0000000340)=0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6(0x10, 0x3, 0x0) write(r2, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="010b000000000000000011"], 0x14}}, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="440000004fda649e38e615fab0000e860ca65ee02e9c10025fd3971dc5b58befaad760ed13cb5f13d7b257419fbfd524d39723ee0aaa3db1bb33d96be67bbe5b8cd421b20b7cb14d9f7105264fe6e0b74819f83a5d17b57d0e965e841cbafbdf04646c26f144feeac51c994c57567e77c454cd0951437b06c855d09849dcc78a9e722625b90a62b340463a372a6a653d293a80c8af08c47179be47635222bac6d2e08ecb24830657367f6764f10d", @ANYRES16=r3, @ANYBLOB="000227bd7000fedbdf250a0000001c0001800800030003000000080003000300000008000300010000001400028008000200090000000800020000000100"], 0x44}, 0x1, 0x0, 0x0, 0x248d0}, 0x40045) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x20, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x47}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x90}, 0x408c0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r5 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r5, &(0x7f0000000640)={&(0x7f0000000080)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0xe}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x60, 0x0, 0x1, 0x0, 0x0, {0x39}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x60}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900"], 0x48}}, 0x0) getsockopt$llc_int(r4, 0x10c, 0x2, &(0x7f0000001b00), &(0x7f00000004c0)=0x4) socket(0x3, 0x80005, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x14, 0x13, &(0x7f0000000040)=ANY=[@ANYRESDEC=r4], &(0x7f0000000080)='syzkaller\x00', 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f0000000240), 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0ff4000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r8, &(0x7f00000001c0), &(0x7f0000000080)=""/52}, 0x20) sendmsg$can_bcm(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="05000000000000", @ANYRES64=r7, @ANYRESDEC=r3, @ANYRES64=r3, @ANYRES64=0x2710, @ANYBLOB="0000000003"], 0x38}, 0x300, 0x0, 0x0, 0x40804}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000580)=0x2004242, 0x4) sendmsg$nl_netfilter(r9, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000006080)=ANY=[@ANYRES32=r4, @ANYBLOB="faf42492b762199369cb15c42728cce016c3cc9ce3f3a13562a6debc4b727098562d2925eaf619430e15e775416520c9918fad1252203c9deab41ee6e694d30b0f02e2833ad38a40d6be92aad47fe1c86d0e4f8bf019f698a7762f8d92a7b97d619fcc4a69f56960477030f81cf75938", @ANYBLOB="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"], 0x2220}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) getpeername$l2tp6(r2, &(0x7f00000003c0)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000600)=0x20) getsockopt$llc_int(r4, 0x10c, 0x1, &(0x7f0000000000), &(0x7f0000000140)=0x4) 647.516827ms ago: executing program 4 (id=1692): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r5) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="328cc7e69b9df33797ac654794a88ce9ff5e3b7b932de6bf8117e25cd4e923c64f01687925f8bb77f156f76d4fb556072ad80b8a73931738e03c54aa3a01ac8ffc5f4e232f94d35d6d6067ae705971c313c6f01a3704ef4ab0d18aeb40f2442be80cc14c0f6e03000000000000000724c43d1bb735173abb0f20aa4d8f4f6e443432c7eb0f50a1aa468fb7c7adb1f9ecf739c97c9022cdc0", @ANYRES16=r3, @ANYBLOB="010000000000fbdbdf25010000004c0008804800008024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b200004000a004e220000000100000000000000000000000000000001021000001400020077673000"/110], 0x74}}, 0x0) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000001c0)='mm_page_alloc_extfrag\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffa}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, r6, 0x0, 0x7, &(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00'}, 0x30) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_subtree(r7, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000540)=ANY=[@ANYBLOB='+cpu'], 0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_int(r9, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000040)=ANY=[@ANYBLOB='-cpu'], 0x5) close(r10) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x200, 0x2f}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) syz_emit_ethernet(0x1106, &(0x7f0000002100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6730836310d02101fc010000000000000000000000000000000000000000000000000000000000002114040a81"], 0x0) 567.56212ms ago: executing program 0 (id=1693): r0 = socket(0x10, 0x2, 0x6) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, 0x5, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0xc8c1}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'gretap0\x00', &(0x7f0000000040)={'erspan0\x00', 0x0, 0x20, 0x8000, 0x7, 0x7, {{0xb, 0x4, 0x3, 0x7, 0x2c, 0x65, 0x0, 0x8, 0x29, 0x0, @private=0xa010102, @multicast2, {[@ssrr={0x89, 0x17, 0x87, [@remote, @remote, @dev={0xac, 0x14, 0x14, 0x35}, @empty, @empty]}]}}}}}) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x38c5290a8e779abe}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@mpls_getnetconf={0x1c, 0x52, 0x0, 0x70bd27, 0x25dfdbfb, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4880) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000005700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f00000059c0)={0x0, 0x0, &(0x7f0000005980)={&(0x7f0000005740)={0x28, r3, 0x105, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20008804) 474.647706ms ago: executing program 1 (id=1694): syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/uts\x00') (async) r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x8) (async) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="020300000a000000000000000000000003000600000000000200000000000000000000000000000002000100000000000000000600000000030005000000000002"], 0x50}, 0x1, 0x7}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004"], 0x48) (rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x5}, 0x8}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000000010000000100000900000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r5}, 0x38) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) (async) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r5}, 0x38) (async) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'nr0\x00', 0x100}) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x34, r2, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) (async) socket$inet_sctp(0x2, 0x5, 0x84) 473.022493ms ago: executing program 4 (id=1695): ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000080)={0xf4b, 0x1, 0x9, 0x7, 0xb, 0xd}) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xfffd, 0xe, @mcast2, 0x9}, 0x1c) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x31, &(0x7f0000001600), 0x4) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9506, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x5, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r5, {0xe, 0x7}, {}, {0x8, 0xffff}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x7, 0x8}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24004804}, 0x4000) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x300, 0x0, 0x150}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 471.546363ms ago: executing program 3 (id=1696): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) 411.966697ms ago: executing program 2 (id=1697): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) recvfrom$netrom(r2, 0x0, 0x0, 0x10000, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010027bd7000fddbdf2500000000", @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) r4 = socket(0x11, 0x800000003, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f00000001c0)={'ip6gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x61, r3, 0x1, 0xfd, 0x6, @broadcast}, 0x14) r5 = socket$netlink(0x10, 0x3, 0x4) write(r5, 0x0, 0x0) 407.2056ms ago: executing program 0 (id=1698): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x1}, 0x10}, 0x94) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000140)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000080)={@broadcast, @private, 0x0}, &(0x7f00000000c0)=0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x0, 0xff, 0x5, 0x30, 0x88, @remote, @empty, 0x7800, 0x7, 0x1, 0x7}}) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xed27c9fa5277b9b7}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ALPHA={0x8, 0x5, 0xd}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0xfffffff8}]}}]}, 0x44}}, 0x20008000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000002c0)={'ip6gre0\x00', 0x0, 0x2f, 0x5, 0x40, 0x7, 0x2, @dev={0xfe, 0x80, '\x00', 0xe}, @dev={0xfe, 0x80, '\x00', 0x32}, 0x10, 0x80, 0x6, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000340)={'ip6gre0\x00', 0x0, 0x4, 0x7, 0x9, 0x8, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x1, 0x747, 0xff, 0x5}}) r11 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r11, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r11, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r11, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r11, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r11, &(0x7f0000000100)={0x2c, 0x0, r13}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'macsec0\x00', 0x0}) r15 = socket(0x400000000010, 0x3, 0x0) r16 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r15, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r17, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r18 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r18, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r17, {}, {0xfff2, 0x2}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000080}, 0x8850) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x40, 0x80, 0x10000, 0x5, {{0xc, 0x4, 0x1, 0x3a, 0x30, 0x66, 0x0, 0x5, 0x2f, 0x0, @private=0xa010101, @private=0xa010101, {[@lsrr={0x83, 0x1b, 0x11, [@multicast1, @broadcast, @local, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x15}, @multicast2]}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000c00)=ANY=[@ANYBLOB="48050000", @ANYRES16=r2, @ANYBLOB="040029bd7000ffdbdf250100000008000100", @ANYRES32=r4, @ANYBLOB="bc02028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400000400000800070000000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000900000008000600", @ANYRES32=r5, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000000000038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400040000007c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000004c00040002004a61010000000100029c080000007f000502040004000000060e000000004a000209000800005b00000508000000080034800700000001000bfb06000000060007090200000038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400480f00004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004008100000008000600", @ANYRES32=r7, @ANYBLOB="3c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000005000300050000000900040068617368000000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e67000000000800010005cde1cfcd05a36b0e7f4100ac858de813b155c27c774d229ef0a09dc1ae77caad0c89449ee8e7762e1eb03e1ce946e01b1a41a5ba794c8662a716f1fd1857d501d470c44bdfd27e55aebcedee7beb29df941e0e6b106f503d5e5126573661461e76245720e9d3ca8e22f0ce396bcce12649a98b5bb23cd2ed09cfff7faa11b7990f55add75a2fcf2fb9bcbbdffb168b57d82f893af06535280652ac0eaf2b1d8455d8272f8f0e139704a0806de66bb4f619a66b0e3b976fa47d6c9f7ee1dd67d94537f366f7efa1270bad01542843f9f553856c9b6827e52e29e1f02bfcd405abcc25684c59620f3cd8385c25df44ac5141d662841d", @ANYRES32=r9, @ANYBLOB="4001028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000500000008000600", @ANYRES32=r10, @ANYBLOB="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", @ANYRES32=r13, @ANYBLOB="200102805c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000002c00040009000305030000000300ff0909000000050003070600000004000c0507000000050008d50900000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000700000008000600", @ANYRES32=r14, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004009518000008000600", @ANYRES32=r17, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000500000008000600", @ANYRES32=r19, @ANYBLOB], 0x548}, 0x1, 0x0, 0x0, 0x80}, 0x801) 351.679202ms ago: executing program 1 (id=1699): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) (async) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) ioctl$SIOCX25GCAUSEDIAG(r0, 0x89e6, &(0x7f0000000000)={0x0, 0x2}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfffa, 0xfff3}, {0x0, 0xffe0}, {0x10, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) setsockopt$MRT_TABLE(r1, 0x0, 0xcf, &(0x7f0000000040)=0xfe, 0x4) 319.932146ms ago: executing program 3 (id=1700): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c010000100013070000000000000000fc020000000000000000000000000000ff02000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000000000000000000000000000000000000032000000fe8000000000000000000000000000aa000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff000000000a00000000000000000000004c001200726663343130362867636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000"], 0x13c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000190001090000000000100000021800000000fd000000000008000100ac141400080005000a01010208000b0060"], 0x34}}, 0x0) 171.727781ms ago: executing program 1 (id=1701): r0 = socket(0x2a, 0x2, 0x0) (async) r1 = socket$kcm(0x2, 0x1, 0x84) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffd51, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='cpu.max\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000280)=ANY=[@ANYBLOB='\n'], 0x1) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000080)={0x4c, r5, 0x1, 0x400, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'rose0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}]}]}, 0x4c}}, 0x44890) sendmsg$inet(r1, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) (async) sendmsg$inet(r1, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f92d", 0x2}], 0x1}, 0x4000080) sendmsg$inet(r1, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="cd", 0x1}], 0x1}, 0x240448c4) (async) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r7, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r10 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r9, @ANYBLOB="050000000000000200000200000008000300", @ANYRES32=r10], 0x80}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x29a83a768e447add) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd31, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x5}, {0x7}, {0x2, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0xc4, 0x7}}]}, 0x2c}}, 0x101) (async) recvmsg(r7, &(0x7f0000001400)={&(0x7f0000001180)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000001200)=""/195, 0xc3}, {&(0x7f0000001300)=""/133, 0x85}], 0x3}, 0x10061) (async) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000180)={0x1c, 0x0, 0x1, 0x10000, 0x200, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x40440c4) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r12 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) write$tun(r11, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001440)={0x0, 0x4, 0x10}, 0xc) 140.66459ms ago: executing program 3 (id=1702): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x13, 0x10, 0x8, 0x0, 0x0, 0x1, 0x3}, 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x0}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00"/48], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) socket$inet6(0xa, 0x3, 0x8000000003c) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x60980, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 136.370583ms ago: executing program 4 (id=1703): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000005c0)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@getqdisc={0x24, 0x26, 0x4, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x4, 0x8}, {0x2, 0xf}, {0xf, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0xc820}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x29a83a768e447add) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd31, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x5, 0x9}, {}, {0x2, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @broadcast}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4048001}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000005000000050000000000000b0400000010000000000000101000000009000000000000100c0000000c00000000000010100040100061005f00"], &(0x7f0000000180)=""/119, 0x4d, 0x77, 0x0, 0x7, 0x10000}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={r5, 0x20, &(0x7f0000000200)={&(0x7f0000000400)=""/179, 0xb3, 0x0, &(0x7f00000004c0)=""/211, 0xd3}}, 0x10) r6 = socket(0x10, 0x803, 0x0) sendto(r6, &(0x7f0000000000)="120000003200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000000340)=0x3, 0x4) 86.598376ms ago: executing program 2 (id=1704): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x20}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x0, 0x1, 0x0, 0x1, @dup={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x0, 0x2, 0x1, 0x0, 0xe}, @NFTA_DUP_SREG_DEV={0x0, 0x2, 0x1, 0x0, 0xe}, @NFTA_DUP_SREG_DEV={0x0, 0x2, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_DEV={0x0, 0x2, 0x1, 0x0, 0xe}]}}}, {0x0, 0x1, 0x0, 0x1, @tproxy={{}, @void}}]}]}], {0x14}}, 0x88}, 0x1, 0x0, 0x0, 0x2404c880}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x20}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x0, 0x1, 0x0, 0x1, @dup={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x0, 0x2, 0x1, 0x0, 0xe}, @NFTA_DUP_SREG_DEV={0x0, 0x2, 0x1, 0x0, 0xe}, @NFTA_DUP_SREG_DEV={0x0, 0x2, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_DEV={0x0, 0x2, 0x1, 0x0, 0xe}]}}}, {0x0, 0x1, 0x0, 0x1, @tproxy={{}, @void}}]}]}], {0x14}}, 0x88}, 0x1, 0x0, 0x0, 0x2404c880}, 0x0) (async) 0s ago: executing program 1 (id=1705): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000e00)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x300, 0x4e20, 0x8}}}}}, 0x0) r1 = accept4$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'macsec0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES32=r3], 0x54}}, 0x800) ioctl$sock_ax25_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={@null, @null, 0x7, [@default, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) kernel console output (not intermixed with test programs): hich could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.065523][ T5844] Bluetooth: hci4: command tx timeout [ 72.091372][ T5847] Bluetooth: hci3: command tx timeout [ 72.102495][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.126431][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.138845][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.191996][ T5842] team0: Port device team_slave_0 added [ 72.201132][ T5842] team0: Port device team_slave_1 added [ 72.210353][ T5837] team0: Port device team_slave_0 added [ 72.219874][ T5837] team0: Port device team_slave_1 added [ 72.277939][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.285322][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.311704][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.324075][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.331210][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.357373][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.410285][ T5828] hsr_slave_0: entered promiscuous mode [ 72.417352][ T5828] hsr_slave_1: entered promiscuous mode [ 72.456539][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.463514][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.490029][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.518856][ T5827] hsr_slave_0: entered promiscuous mode [ 72.525887][ T5827] hsr_slave_1: entered promiscuous mode [ 72.532160][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.540118][ T5827] Cannot create hsr debugfs directory [ 72.574119][ T5836] hsr_slave_0: entered promiscuous mode [ 72.580994][ T5836] hsr_slave_1: entered promiscuous mode [ 72.587448][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.595253][ T5836] Cannot create hsr debugfs directory [ 72.602208][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.609230][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.635677][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.730263][ T5842] hsr_slave_0: entered promiscuous mode [ 72.736974][ T5842] hsr_slave_1: entered promiscuous mode [ 72.742971][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.750852][ T5842] Cannot create hsr debugfs directory [ 72.883878][ T5837] hsr_slave_0: entered promiscuous mode [ 72.890335][ T5837] hsr_slave_1: entered promiscuous mode [ 72.896603][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.904143][ T5837] Cannot create hsr debugfs directory [ 73.322153][ T5836] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.333906][ T5836] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.344453][ T5836] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.357365][ T5836] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.416595][ T5827] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.439959][ T5827] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.460574][ T5827] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.482209][ T5827] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.539359][ T5842] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.550533][ T5842] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.580049][ T5842] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.591716][ T5842] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.690530][ T5828] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.713773][ T5828] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.749917][ T5828] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.771006][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.792512][ T5828] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.853243][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.863495][ T5837] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.889405][ T5837] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.906961][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.917869][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.925179][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.934158][ T5837] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.952932][ T5837] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.981558][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.988691][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.030698][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.036053][ T5840] Bluetooth: hci1: command tx timeout [ 74.099674][ T3505] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.106823][ T3505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.114290][ T5840] Bluetooth: hci2: command tx timeout [ 74.116430][ T5830] Bluetooth: hci0: command tx timeout [ 74.120511][ T5840] Bluetooth: hci3: command tx timeout [ 74.125241][ T5830] Bluetooth: hci4: command tx timeout [ 74.151849][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.193465][ T3505] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.200642][ T3505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.282358][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.309813][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.336367][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.343541][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.359628][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.366773][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.441694][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.492520][ T3505] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.499741][ T3505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.514353][ T3505] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.521549][ T3505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.584181][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.601659][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.653490][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.716049][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.723224][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.735657][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.742798][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.882412][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.935078][ T5836] veth0_vlan: entered promiscuous mode [ 75.003935][ T5836] veth1_vlan: entered promiscuous mode [ 75.130029][ T5836] veth0_macvtap: entered promiscuous mode [ 75.165872][ T5836] veth1_macvtap: entered promiscuous mode [ 75.276785][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.288060][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.323847][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.368766][ T5836] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.381773][ T5836] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.391531][ T5836] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.406376][ T5836] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.488260][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.537884][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.626277][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.634233][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.668088][ T5827] veth0_vlan: entered promiscuous mode [ 75.692541][ T5842] veth0_vlan: entered promiscuous mode [ 75.723546][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.731306][ T5842] veth1_vlan: entered promiscuous mode [ 75.735825][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.756297][ T5837] veth0_vlan: entered promiscuous mode [ 75.773628][ T5827] veth1_vlan: entered promiscuous mode [ 75.809091][ T5837] veth1_vlan: entered promiscuous mode [ 75.834222][ T5836] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 75.838433][ T5828] veth0_vlan: entered promiscuous mode [ 75.895918][ T5828] veth1_vlan: entered promiscuous mode [ 75.956789][ T5842] veth0_macvtap: entered promiscuous mode [ 75.992256][ T5842] veth1_macvtap: entered promiscuous mode [ 76.004594][ T5827] veth0_macvtap: entered promiscuous mode [ 76.025474][ T5947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 76.048452][ T5837] veth0_macvtap: entered promiscuous mode [ 76.064486][ T5827] veth1_macvtap: entered promiscuous mode [ 76.090338][ T5828] veth0_macvtap: entered promiscuous mode [ 76.107556][ T5830] Bluetooth: hci1: command tx timeout [ 76.140451][ T5828] veth1_macvtap: entered promiscuous mode [ 76.152700][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.162928][ T5837] veth1_macvtap: entered promiscuous mode [ 76.186148][ T5830] Bluetooth: hci3: command tx timeout [ 76.186359][ T5840] Bluetooth: hci0: command tx timeout [ 76.191559][ T5830] Bluetooth: hci2: command tx timeout [ 76.197387][ T5844] Bluetooth: hci4: command tx timeout [ 76.222797][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.249522][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.279258][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.294604][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.311422][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.322751][ T5827] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.338532][ T5827] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.349294][ T5827] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.362847][ T5827] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.404151][ T5842] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.414350][ T5842] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.426743][ T5842] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.435684][ T5842] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.446397][ T5954] syz.2.7 uses obsolete (PF_INET,SOCK_PACKET) [ 76.468376][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.489674][ T5828] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.503178][ T5828] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.521110][ T5828] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.530187][ T5828] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.531188][ T5952] netlink: 4552 bytes leftover after parsing attributes in process `syz.2.7'. [ 76.551812][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.566319][ T5952] netlink: 4552 bytes leftover after parsing attributes in process `syz.2.7'. [ 76.598274][ T5837] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.607075][ T5837] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.615899][ T5837] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.624593][ T5837] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.785962][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.793832][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.886174][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.894055][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.950941][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.961683][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.009907][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.033077][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.109545][ T5966] netlink: 'syz.2.10': attribute type 21 has an invalid length. [ 77.122059][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.147816][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.162036][ T5967] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 77.178707][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.187815][ T5966] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10'. [ 77.192579][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.366194][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.374058][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.437611][ T5971] netlink: 1036 bytes leftover after parsing attributes in process `syz.2.11'. [ 77.452730][ T5971] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 77.623169][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.664458][ T5984] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4'. [ 77.673608][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.062569][ T5997] netlink: 28 bytes leftover after parsing attributes in process `syz.4.15'. [ 78.091863][ T6001] netlink: 52 bytes leftover after parsing attributes in process `syz.2.16'. [ 78.119200][ T6001] netlink: 52 bytes leftover after parsing attributes in process `syz.2.16'. [ 78.187486][ T5840] Bluetooth: hci1: command tx timeout [ 78.270073][ T5840] Bluetooth: hci2: command tx timeout [ 78.275050][ T5844] Bluetooth: hci0: command tx timeout [ 78.276324][ T5847] Bluetooth: hci3: command tx timeout [ 78.281545][ T5844] Bluetooth: hci4: command tx timeout [ 78.318382][ T6001] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16'. [ 78.974274][ T6035] bridge: RTM_NEWNEIGH with invalid ether address [ 79.123010][ T6042] xt_hashlimit: size too large, truncated to 1048576 [ 79.136384][ T6046] netlink: 'syz.3.31': attribute type 21 has an invalid length. [ 79.165338][ T6042] netlink: 'syz.4.29': attribute type 10 has an invalid length. [ 79.226482][ T6051] Zero length message leads to an empty skb [ 79.236988][ T6042] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.268997][ T6042] bridge_slave_1: left allmulticast mode [ 79.280290][ T6042] bridge_slave_1: left promiscuous mode [ 79.290106][ T6042] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.312265][ T6046] xt_CT: No such helper "netbios-ns" [ 79.337672][ T6042] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 79.639107][ T6067] sctp: failed to load transform for md5: -2 [ 79.652455][ T6079] syzkaller0: entered promiscuous mode [ 79.661560][ T6083] x_tables: duplicate underflow at hook 1 [ 79.669593][ T6079] syzkaller0: entered allmulticast mode [ 79.831526][ T6086] 8021q: VLANs not supported on ip_vti0 [ 80.029742][ T30] audit: type=1800 audit(1751528322.757:2): pid=6093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.42" name="memory.events" dev="tmpfs" ino=53 res=0 errno=0 [ 80.077354][ T30] audit: type=1804 audit(1751528322.777:3): pid=6093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.42" name="/newroot/7/memory.events" dev="tmpfs" ino=53 res=1 errno=0 [ 80.093218][ T6101] netlink: 'syz.1.46': attribute type 10 has an invalid length. [ 80.153367][ T6098] pimreg: entered allmulticast mode [ 80.226163][ T6110] xt_l2tp: v2 sid > 0xffff: 262144 [ 80.301220][ T6116] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 80.487374][ T6123] xt_hashlimit: max too large, truncated to 1048576 [ 80.499231][ T6123] xt_policy: output policy not valid in PREROUTING and INPUT [ 80.512585][ T6123] x_tables: duplicate underflow at hook 1 [ 80.711073][ T6128] Illegal XDP return value 4294967274 on prog (id 17) dev N/A, expect packet loss! [ 80.986723][ T6145] wg0: entered allmulticast mode [ 80.998630][ T6148] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 81.071550][ T6148] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98 [ 81.083080][ T6152] netlink: 'syz.2.61': attribute type 33 has an invalid length. [ 81.166331][ T6159] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 81.424269][ T6170] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 81.479935][ T6174] openvswitch: netlink: IPv4 tun info is not correct [ 81.502440][ T6175] warning: `syz.2.69' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 81.610729][ T6181] netlink: 'syz.0.71': attribute type 1 has an invalid length. [ 81.636075][ T6181] __nla_validate_parse: 7 callbacks suppressed [ 81.636091][ T6181] netlink: 224 bytes leftover after parsing attributes in process `syz.0.71'. [ 81.643502][ T6185] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 81.775911][ T6189] netlink: 32 bytes leftover after parsing attributes in process `syz.1.72'. [ 81.851647][ T6185] netlink: 'syz.3.70': attribute type 15 has an invalid length. [ 81.889333][ T6191] netlink: 32 bytes leftover after parsing attributes in process `syz.1.72'. [ 81.906510][ T6185] netlink: 24 bytes leftover after parsing attributes in process `syz.3.70'. [ 82.233910][ T6207] netlink: 24 bytes leftover after parsing attributes in process `syz.3.75'. [ 82.282069][ T6205] Cannot find set identified by id 0 to match [ 82.588762][ T6219] netlink: 8 bytes leftover after parsing attributes in process `syz.4.81'. [ 82.661100][ T6223] bridge0: port 3(gretap0) entered blocking state [ 82.694319][ T6223] bridge0: port 3(gretap0) entered disabled state [ 82.711976][ T6223] gretap0: entered allmulticast mode [ 82.735207][ T6223] gretap0: entered promiscuous mode [ 82.741127][ T6223] bridge0: port 3(gretap0) entered blocking state [ 82.747800][ T6223] bridge0: port 3(gretap0) entered forwarding state [ 82.883537][ T6227] netlink: 'syz.4.83': attribute type 12 has an invalid length. [ 82.977165][ T6227] netlink: 'syz.4.83': attribute type 29 has an invalid length. [ 83.041738][ T6227] netlink: 148 bytes leftover after parsing attributes in process `syz.4.83'. [ 83.097614][ T6227] netlink: 59 bytes leftover after parsing attributes in process `syz.4.83'. [ 83.310645][ T6242] batadv1: entered allmulticast mode [ 83.680188][ T2152] IPVS: starting estimator thread 0... [ 83.690832][ T6251] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 83.702937][ T6256] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 83.709097][ T6259] netlink: 'syz.3.94': attribute type 2 has an invalid length. [ 83.784343][ T6259] netlink: 40 bytes leftover after parsing attributes in process `syz.3.94'. [ 83.794021][ T6257] IPVS: using max 28 ests per chain, 67200 per kthread [ 83.806027][ T6261] netlink: 'syz.0.93': attribute type 1 has an invalid length. [ 83.821965][ T6261] netlink: 'syz.0.93': attribute type 11 has an invalid length. [ 83.836282][ T6261] netlink: 220 bytes leftover after parsing attributes in process `syz.0.93'. [ 83.944733][ T5840] Bluetooth: hci4: command 0x0405 tx timeout [ 84.070526][ T6274] openvswitch: netlink: Missing valid actions attribute. [ 84.081653][ T6274] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 84.198381][ T6281] netlink: 'syz.0.101': attribute type 8 has an invalid length. [ 84.534081][ T6289] 8021q: adding VLAN 0 to HW filter on device bond2 [ 84.543775][ T6289] bond0: (slave bond2): Enslaving as an active interface with an up link [ 84.647578][ T6291] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.660521][ T6291] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.667827][ T6291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.887454][ T6302] netlink: 'syz.3.109': attribute type 2 has an invalid length. [ 85.438209][ T6336] netlink: 'syz.4.120': attribute type 6 has an invalid length. [ 85.448587][ T6336] netlink: 'syz.4.120': attribute type 5 has an invalid length. [ 85.799049][ T6359] IPVS: Scheduler module ip_vs_sip not found [ 85.821904][ T6363] raw_sendmsg: syz.4.126 forgot to set AF_INET. Fix it! [ 85.852700][ T6357] netlink: 'syz.4.126': attribute type 4 has an invalid length. [ 86.245557][ T6379] bridge0: port 3(gretap0) entered disabled state [ 86.330632][ T6379] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.338757][ T6379] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.529102][ T6379] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.566860][ T6379] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.640665][ T6379] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.650634][ T6379] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.661134][ T6379] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.685448][ T977] cfg80211: failed to load regulatory.db [ 86.693354][ T6379] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.796922][ T6390] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 87.066348][ T6422] __nla_validate_parse: 32 callbacks suppressed [ 87.066366][ T6422] netlink: 8 bytes leftover after parsing attributes in process `syz.2.144'. [ 87.349877][ T6440] netlink: 12 bytes leftover after parsing attributes in process `syz.1.150'. [ 87.575359][ T6450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.154'. [ 87.597527][ T6451] IPv6: NLM_F_REPLACE set, but no existing node found! [ 87.647764][ T6450] netlink: 40 bytes leftover after parsing attributes in process `syz.2.154'. [ 87.825522][ T6456] pimreg: left allmulticast mode [ 87.940704][ T6466] validate_nla: 1 callbacks suppressed [ 87.940722][ T6466] netlink: 'syz.4.159': attribute type 29 has an invalid length. [ 87.991191][ T6466] netlink: 8 bytes leftover after parsing attributes in process `syz.4.159'. [ 88.023221][ T6461] sctp: failed to load transform for md5: -2 [ 88.298120][ T6466] syzkaller0: entered promiscuous mode [ 88.311038][ T6492] netlink: 4 bytes leftover after parsing attributes in process `syz.1.165'. [ 88.322707][ T6466] syzkaller0: entered allmulticast mode [ 89.612996][ T6506] netlink: 'syz.1.167': attribute type 1 has an invalid length. [ 89.660540][ T6508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.169'. [ 89.703002][ T6506] bond1: entered promiscuous mode [ 89.708656][ T6506] 8021q: adding VLAN 0 to HW filter on device bond1 [ 89.720367][ T6517] netlink: 4 bytes leftover after parsing attributes in process `syz.0.169'. [ 89.748466][ T6518] netlink: 40 bytes leftover after parsing attributes in process `syz.4.170'. [ 89.801634][ T6512] 8021q: adding VLAN 0 to HW filter on device bond1 [ 89.815744][ T6512] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 89.834980][ T6512] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 89.893635][ T6512] bond1: (slave wireguard0): making interface the new active one [ 89.902754][ T6512] wireguard0: entered promiscuous mode [ 89.910065][ T6512] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 89.924548][ T6521] netlink: 168 bytes leftover after parsing attributes in process `syz.3.168'. [ 90.129429][ T6531] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 90.148882][ T6531] openvswitch: netlink: Tunnel attr 0 has unexpected len 16 expected 8 [ 90.158692][ T6537] openvswitch: netlink: Tunnel attr 0 has unexpected len 16 expected 8 [ 90.309745][ T6531] team1: entered promiscuous mode [ 90.325735][ T6531] team1: entered allmulticast mode [ 90.471641][ T6537] team2: entered promiscuous mode [ 90.491174][ T6537] team2: entered allmulticast mode [ 90.817701][ T6566] Bluetooth: MGMT ver 1.23 [ 90.904274][ T6570] xt_CT: You must specify a L4 protocol and not use inversions on it [ 91.540687][ T6598] netlink: 'syz.4.194': attribute type 9 has an invalid length. [ 91.607644][ T6596] netlink: zone id is out of range [ 92.008562][ T5897] IPVS: starting estimator thread 0... [ 92.014208][ T6616] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 92.136074][ T6621] IPVS: using max 27 ests per chain, 64800 per kthread [ 92.137404][ T6627] __nla_validate_parse: 8 callbacks suppressed [ 92.137419][ T6627] netlink: 4 bytes leftover after parsing attributes in process `syz.2.201'. [ 92.219754][ T6629] netlink: 'syz.4.202': attribute type 11 has an invalid length. [ 92.238711][ T6629] netlink: 224 bytes leftover after parsing attributes in process `syz.4.202'. [ 92.462976][ T6636] syzkaller1: entered promiscuous mode [ 92.472586][ T6636] syzkaller1: entered allmulticast mode [ 92.480179][ T6638] netlink: 12 bytes leftover after parsing attributes in process `syz.0.205'. [ 92.594267][ T6638] netlink: 200 bytes leftover after parsing attributes in process `syz.0.205'. [ 93.220434][ T6675] netlink: 100 bytes leftover after parsing attributes in process `syz.0.213'. [ 93.230667][ T6681] netlink: 'syz.3.215': attribute type 9 has an invalid length. [ 93.395916][ T6683] netlink: 56 bytes leftover after parsing attributes in process `syz.1.216'. [ 93.975818][ T6717] Bluetooth: MGMT ver 1.23 [ 94.618645][ T6748] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 94.643152][ T6748] Cannot find add_set index 0 as target [ 94.675299][ T6747] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 94.802650][ T6757] netlink: 'syz.0.237': attribute type 1 has an invalid length. [ 94.818784][ T6757] netlink: 'syz.0.237': attribute type 3 has an invalid length. [ 94.830175][ T6757] netlink: 216 bytes leftover after parsing attributes in process `syz.0.237'. [ 94.848342][ T6757] NCSI netlink: No device for ifindex 813332851 [ 94.859353][ T6757] netlink: 'syz.0.237': attribute type 10 has an invalid length. [ 94.901907][ T6757] batman_adv: batadv0: Adding interface: team0 [ 94.911617][ T6757] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.935602][ T6761] netlink: 12 bytes leftover after parsing attributes in process `syz.1.239'. [ 94.951768][ T6757] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 95.151075][ T6772] netlink: 192 bytes leftover after parsing attributes in process `syz.0.241'. [ 95.310874][ T6779] netlink: 40 bytes leftover after parsing attributes in process `syz.0.242'. [ 95.419116][ T6783] netlink: 'syz.4.244': attribute type 10 has an invalid length. [ 95.460287][ T6783] batman_adv: batadv0: Adding interface: team0 [ 95.479548][ T6783] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.528210][ T6789] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 95.548785][ T6783] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 95.608696][ T6789] lo: entered allmulticast mode [ 96.145372][ T6819] netlink: 'syz.3.254': attribute type 4 has an invalid length. [ 96.500956][ T6832] netlink: 'syz.2.256': attribute type 3 has an invalid length. [ 96.513940][ T6832] netlink: 'syz.2.256': attribute type 3 has an invalid length. [ 97.418603][ T6868] __nla_validate_parse: 2 callbacks suppressed [ 97.418623][ T6868] netlink: 165 bytes leftover after parsing attributes in process `syz.3.265'. [ 97.599167][ T6877] netlink: 'syz.0.268': attribute type 3 has an invalid length. [ 97.628756][ T6877] netlink: 224 bytes leftover after parsing attributes in process `syz.0.268'. [ 97.676059][ T6877] xt_cluster: node mask cannot exceed total number of nodes [ 97.775222][ T6881] netlink: 12 bytes leftover after parsing attributes in process `syz.3.269'. [ 97.875184][ T6889] netlink: 20 bytes leftover after parsing attributes in process `syz.4.271'. [ 98.023819][ T6899] netlink: 28 bytes leftover after parsing attributes in process `syz.1.272'. [ 98.035495][ T6899] Cannot find add_set index 0 as target [ 99.177928][ T6945] SET target dimension over the limit! [ 99.214355][ T6958] netlink: 36 bytes leftover after parsing attributes in process `syz.4.284'. [ 99.264371][ T6945] netlink: 36 bytes leftover after parsing attributes in process `syz.4.284'. [ 99.443012][ T6971] tipc: Started in network mode [ 99.472955][ T6971] tipc: Node identity 0ef6a20000cd, cluster identity 4711 [ 99.528072][ T6971] tipc: Enabled bearer , priority 0 [ 99.651501][ T6981] batman_adv: batadv0: Adding interface: ipvlan2 [ 99.667421][ T6981] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.707430][ T6981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.734803][ T6981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.774812][ T6981] batman_adv: batadv0: Interface activated: ipvlan2 [ 99.850646][ T6988] tipc: Resetting bearer [ 99.903894][ T6967] tipc: Disabling bearer [ 100.526992][ T7018] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96 [ 100.671147][ T7029] trusted_key: syz.0.303 sent an empty control message without MSG_MORE. [ 100.894202][ T7036] netlink: 8 bytes leftover after parsing attributes in process `syz.4.306'. [ 101.127217][ T7044] xt_CT: You must specify a L4 protocol and not use inversions on it [ 101.362346][ T7054] netlink: 4 bytes leftover after parsing attributes in process `syz.1.315'. [ 101.913201][ T7054] team_slave_0: entered promiscuous mode [ 101.919155][ T7054] team_slave_1: entered promiscuous mode [ 102.039161][ T7075] netlink: 'syz.4.319': attribute type 3 has an invalid length. [ 102.047416][ T7075] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.319'. [ 102.090514][ T7076] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.194125][ T7078] netlink: 'syz.2.320': attribute type 1 has an invalid length. [ 102.255581][ T7078] netlink: 'syz.2.320': attribute type 2 has an invalid length. [ 102.370922][ T7089] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 102.508795][ T7096] __nla_validate_parse: 1 callbacks suppressed [ 102.508886][ T7096] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.327'. [ 102.554982][ T7096] veth0: entered promiscuous mode [ 102.567132][ T7096] veth0: left promiscuous mode [ 102.651182][ T7102] netlink: 8 bytes leftover after parsing attributes in process `syz.2.329'. [ 102.662634][ T7100] netlink: 80 bytes leftover after parsing attributes in process `syz.4.328'. [ 102.729081][ T7104] netlink: 4 bytes leftover after parsing attributes in process `syz.0.330'. [ 102.741738][ T7104] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.799838][ T7104] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.043655][ T7117] netlink: 32 bytes leftover after parsing attributes in process `syz.0.335'. [ 103.453563][ T7139] netlink: 8 bytes leftover after parsing attributes in process `syz.3.341'. [ 103.585977][ T7143] netlink: 4 bytes leftover after parsing attributes in process `syz.4.342'. [ 103.623176][ T7144] netlink: 4 bytes leftover after parsing attributes in process `syz.4.342'. [ 104.042074][ T7163] IPVS: set_ctl: invalid protocol: 47 224.0.0.1:20000 [ 104.572837][ T7198] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 104.912692][ T7228] netlink: 8 bytes leftover after parsing attributes in process `syz.0.363'. [ 105.096314][ T7233] veth0: entered promiscuous mode [ 105.162287][ T7236] netlink: 'syz.0.367': attribute type 1 has an invalid length. [ 105.188972][ T7232] veth0: left promiscuous mode [ 105.333498][ T7242] bond3: (slave gretap1): making interface the new active one [ 105.392506][ T7242] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 105.502707][ T7253] netlink: 4 bytes leftover after parsing attributes in process `syz.2.373'. [ 105.635456][ T7259] veth1_macvtap: left promiscuous mode [ 106.101238][ T7285] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 106.117282][ T7285] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 106.125718][ T7280] netlink: 'syz.4.382': attribute type 10 has an invalid length. [ 106.277287][ T7294] openvswitch: netlink: Tunnel attr 303 out of range max 16 [ 106.482301][ T7303] C: renamed from lo (while UP) [ 106.726698][ T7316] tipc: Started in network mode [ 106.732853][ T7316] tipc: Node identity 2000007, cluster identity 4711 [ 106.743316][ T7316] tipc: Node number set to 33554439 [ 107.115665][ T7321] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.133603][ T7335] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 107.258513][ T7321] wg0: left allmulticast mode [ 107.292510][ T7346] DRBG: could not allocate digest TFM handle: hmac(sha384) [ 107.321094][ T7321] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.361914][ T7321] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.463066][ T7321] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.495158][ T7321] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.504087][ T7321] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.522984][ T7321] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.536975][ T7321] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 107.684051][ T7355] __nla_validate_parse: 7 callbacks suppressed [ 107.684073][ T7355] netlink: 24 bytes leftover after parsing attributes in process `syz.3.403'. [ 107.896808][ T7361] netlink: 'syz.1.406': attribute type 10 has an invalid length. [ 107.923696][ T7364] netlink: 'syz.2.407': attribute type 1 has an invalid length. [ 107.932355][ T7361] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 107.970618][ T7364] netlink: 'syz.2.407': attribute type 11 has an invalid length. [ 107.995554][ T7364] netlink: 224 bytes leftover after parsing attributes in process `syz.2.407'. [ 108.318542][ T7384] netlink: 16 bytes leftover after parsing attributes in process `syz.0.413'. [ 108.700009][ T7406] tipc: MTU too low for tipc bearer [ 108.855808][ T7414] netlink: 64 bytes leftover after parsing attributes in process `syz.0.422'. [ 108.881176][ T7413] netlink: 248 bytes leftover after parsing attributes in process `syz.2.421'. [ 108.987786][ T7420] netlink: 64 bytes leftover after parsing attributes in process `syz.3.423'. [ 108.997882][ T7420] netlink: 64 bytes leftover after parsing attributes in process `syz.3.423'. [ 109.022983][ T7414] netlink: 'syz.0.422': attribute type 29 has an invalid length. [ 109.803486][ T7452] netlink: 28 bytes leftover after parsing attributes in process `syz.3.433'. [ 109.824701][ T7452] netlink: 28 bytes leftover after parsing attributes in process `syz.3.433'. [ 109.905397][ T7458] netlink: 68 bytes leftover after parsing attributes in process `syz.1.435'. [ 110.307515][ T7476] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 110.314944][ T7476] IPv6: NLM_F_CREATE should be set when creating new route [ 110.322215][ T7476] IPv6: NLM_F_CREATE should be set when creating new route [ 110.398830][ T7476] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 110.554448][ T7486] netlink: 'syz.4.444': attribute type 1 has an invalid length. [ 110.680362][ T7488] openvswitch: netlink: Flow key attr not present in new flow. [ 110.767070][ T7498] netlink: 'syz.0.448': attribute type 4 has an invalid length. [ 110.827303][ T7498] : renamed from bond0 (while UP) [ 110.828013][ T7503] netlink: 'syz.1.447': attribute type 2 has an invalid length. [ 112.225977][ T7589] Cannot find set identified by id 0 to match [ 112.446836][ T7598] nftables ruleset with unbound set [ 112.877043][ T7620] __nla_validate_parse: 8 callbacks suppressed [ 112.877060][ T7620] netlink: 8 bytes leftover after parsing attributes in process `syz.2.479'. [ 112.909573][ T7622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.976818][ T7617] IPVS: set_ctl: invalid protocol: 136 255.255.255.255:20000 [ 113.015399][ T7624] netlink: 14 bytes leftover after parsing attributes in process `syz.4.480'. [ 113.119841][ T7627] veth0: entered promiscuous mode [ 113.238452][ T7633] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.483'. [ 113.266910][ T7626] veth0: left promiscuous mode [ 113.296981][ T7634] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.483'. [ 113.342174][ T7637] netlink: 32 bytes leftover after parsing attributes in process `syz.0.484'. [ 113.511515][ T7644] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 113.727440][ T7659] netlink: 8 bytes leftover after parsing attributes in process `syz.4.491'. [ 113.746914][ T7657] netlink: 12 bytes leftover after parsing attributes in process `syz.3.490'. [ 113.782510][ T7659] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 113.797997][ T7659] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 113.808828][ T7659] gretap1: entered promiscuous mode [ 113.819756][ T7659] gretap1: entered allmulticast mode [ 114.086427][ T7667] netlink: 8 bytes leftover after parsing attributes in process `syz.4.493'. [ 114.259834][ T7675] netlink: 256 bytes leftover after parsing attributes in process `syz.1.497'. [ 114.320513][ T7675] team0: Device is already in use. [ 114.340633][ T7675] netlink: 'syz.1.497': attribute type 1 has an invalid length. [ 114.374400][ T7678] xt_l2tp: unknown flags: 18 [ 114.626248][ T7687] netlink: 28 bytes leftover after parsing attributes in process `syz.3.502'. [ 115.052766][ T7716] netlink: 'syz.4.509': attribute type 1 has an invalid length. [ 115.302319][ T7726] netlink: 'syz.0.513': attribute type 3 has an invalid length. [ 115.559355][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805aa39800: rx timeout, send abort [ 115.569570][ T7742] xt_CT: You must specify a L4 protocol and not use inversions on it [ 115.794531][ T7756] netlink: 'syz.0.523': attribute type 1 has an invalid length. [ 115.873234][ T7756] 8021q: adding VLAN 0 to HW filter on device bond4 [ 116.068587][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805aa39800: abort rx timeout. Force session deactivation [ 116.166542][ T7767] netlink: zone id is out of range [ 116.172423][ T7767] netlink: del zone limit has 4 unknown bytes [ 116.340032][ T7776] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.349678][ T7776] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.358532][ T7776] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.367400][ T7776] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.378750][ T7776] vxlan0: entered promiscuous mode [ 116.383902][ T7776] vxlan0: entered allmulticast mode [ 117.158677][ T7808] can: request_module (can-proto-3) failed. [ 117.511846][ T7837] bridge_slave_0: default FDB implementation only supports local addresses [ 117.531921][ T7837] bridge_slave_0: default FDB implementation only supports local addresses [ 117.678605][ T7842] No such timeout policy "syz0" [ 117.895818][ T7851] __nla_validate_parse: 142 callbacks suppressed [ 117.895837][ T7851] netlink: 16 bytes leftover after parsing attributes in process `syz.2.548'. [ 117.959882][ T7856] netlink: 71 bytes leftover after parsing attributes in process `syz.0.551'. [ 118.029439][ T7859] netlink: 4 bytes leftover after parsing attributes in process `syz.0.551'. [ 118.350251][ T7872] netlink: 4 bytes leftover after parsing attributes in process `syz.0.558'. [ 118.516795][ T7884] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 118.538214][ T7884] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 119.041695][ T7910] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 119.274444][ T7917] netlink: 8 bytes leftover after parsing attributes in process `syz.4.573'. [ 119.330445][ T7917] FAULT_INJECTION: forcing a failure. [ 119.330445][ T7917] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 119.345369][ T7919] netlink: 'syz.2.572': attribute type 1 has an invalid length. [ 119.353891][ T7919] netlink: 'syz.2.572': attribute type 2 has an invalid length. [ 119.364334][ T7917] CPU: 0 UID: 0 PID: 7917 Comm: syz.4.573 Not tainted 6.16.0-rc3-syzkaller-00144-gbd475eeaaf3c #0 PREEMPT(full) [ 119.364357][ T7917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 119.364375][ T7917] Call Trace: [ 119.364382][ T7917] [ 119.364390][ T7917] dump_stack_lvl+0x189/0x250 [ 119.364426][ T7917] ? __pfx____ratelimit+0x10/0x10 [ 119.364450][ T7917] ? __pfx_dump_stack_lvl+0x10/0x10 [ 119.364474][ T7917] ? __pfx__printk+0x10/0x10 [ 119.364493][ T7917] ? __might_fault+0xb0/0x130 [ 119.364522][ T7917] should_fail_ex+0x414/0x560 [ 119.364548][ T7917] _copy_from_user+0x2d/0xb0 [ 119.364567][ T7917] ___sys_sendmsg+0x158/0x2a0 [ 119.364595][ T7917] ? __pfx____sys_sendmsg+0x10/0x10 [ 119.364649][ T7917] ? __fget_files+0x2a/0x420 [ 119.364667][ T7917] ? __fget_files+0x3a0/0x420 [ 119.364696][ T7917] __x64_sys_sendmsg+0x19b/0x260 [ 119.364719][ T7917] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 119.364750][ T7917] ? __pfx_ksys_write+0x10/0x10 [ 119.364763][ T7917] ? rcu_is_watching+0x15/0xb0 [ 119.364793][ T7917] ? do_syscall_64+0xbe/0x3b0 [ 119.364813][ T7917] do_syscall_64+0xfa/0x3b0 [ 119.364826][ T7917] ? lockdep_hardirqs_on+0x9c/0x150 [ 119.364848][ T7917] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.364864][ T7917] ? clear_bhb_loop+0x60/0xb0 [ 119.364885][ T7917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.364901][ T7917] RIP: 0033:0x7f682778e929 [ 119.364922][ T7917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.364934][ T7917] RSP: 002b:00007f68255f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 119.364952][ T7917] RAX: ffffffffffffffda RBX: 00007f68279b5fa0 RCX: 00007f682778e929 [ 119.364964][ T7917] RDX: 00000000000040c4 RSI: 0000200000000440 RDI: 0000000000000005 [ 119.364975][ T7917] RBP: 00007f68255f6090 R08: 0000000000000000 R09: 0000000000000000 [ 119.364985][ T7917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.364995][ T7917] R13: 0000000000000000 R14: 00007f68279b5fa0 R15: 00007ffd23a46f78 [ 119.365023][ T7917] [ 119.594226][ T7919] syz.2.572: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 119.654469][ T7919] CPU: 0 UID: 0 PID: 7919 Comm: syz.2.572 Not tainted 6.16.0-rc3-syzkaller-00144-gbd475eeaaf3c #0 PREEMPT(full) [ 119.654495][ T7919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 119.654506][ T7919] Call Trace: [ 119.654513][ T7919] [ 119.654521][ T7919] dump_stack_lvl+0x189/0x250 [ 119.654552][ T7919] ? __pfx_dump_stack_lvl+0x10/0x10 [ 119.654575][ T7919] ? __pfx__printk+0x10/0x10 [ 119.654596][ T7919] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 119.654614][ T7919] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 119.654635][ T7919] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 119.654655][ T7919] warn_alloc+0x214/0x310 [ 119.654673][ T7919] ? stack_depot_save_flags+0x40/0x900 [ 119.654699][ T7919] ? __pfx_warn_alloc+0x10/0x10 [ 119.654721][ T7919] ? kasan_save_track+0x4f/0x80 [ 119.654745][ T7919] ? xskq_create+0x56/0x170 [ 119.654766][ T7919] ? xsk_init_queue+0xb0/0x110 [ 119.654785][ T7919] ? xsk_setsockopt+0x43f/0x710 [ 119.654804][ T7919] ? do_sock_setsockopt+0x257/0x3e0 [ 119.654821][ T7919] ? __x64_sys_setsockopt+0x18b/0x220 [ 119.654838][ T7919] ? do_syscall_64+0xfa/0x3b0 [ 119.654852][ T7919] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.654879][ T7919] __vmalloc_node_range_noprof+0x125/0x12f0 [ 119.654930][ T7919] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 119.654950][ T7919] ? xskq_create+0x56/0x170 [ 119.654984][ T7919] ? __kasan_kmalloc+0x93/0xb0 [ 119.655005][ T7919] vmalloc_user_noprof+0xad/0xf0 [ 119.655025][ T7919] ? xskq_create+0xbf/0x170 [ 119.655049][ T7919] xskq_create+0xbf/0x170 [ 119.655076][ T7919] xsk_init_queue+0xb0/0x110 [ 119.655101][ T7919] xsk_setsockopt+0x43f/0x710 [ 119.655125][ T7919] ? __pfx_xsk_setsockopt+0x10/0x10 [ 119.655145][ T7919] ? __lock_acquire+0xab9/0xd20 [ 119.655178][ T7919] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 119.655198][ T7919] ? __pfx_xsk_setsockopt+0x10/0x10 [ 119.655221][ T7919] do_sock_setsockopt+0x257/0x3e0 [ 119.655245][ T7919] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 119.655272][ T7919] ? __fget_files+0x2a/0x420 [ 119.655300][ T7919] __x64_sys_setsockopt+0x18b/0x220 [ 119.655327][ T7919] do_syscall_64+0xfa/0x3b0 [ 119.655342][ T7919] ? lockdep_hardirqs_on+0x9c/0x150 [ 119.655365][ T7919] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.655383][ T7919] ? clear_bhb_loop+0x60/0xb0 [ 119.655403][ T7919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.655420][ T7919] RIP: 0033:0x7eff06f8e929 [ 119.655437][ T7919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.655450][ T7919] RSP: 002b:00007eff07d16038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 119.655469][ T7919] RAX: ffffffffffffffda RBX: 00007eff071b5fa0 RCX: 00007eff06f8e929 [ 119.655482][ T7919] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000d [ 119.655493][ T7919] RBP: 00007eff07010b39 R08: 0000000000000004 R09: 0000000000000000 [ 119.655504][ T7919] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 119.655514][ T7919] R13: 0000000000000000 R14: 00007eff071b5fa0 R15: 00007ffe1a40db18 [ 119.655544][ T7919] [ 119.966602][ T7919] Mem-Info: [ 119.984356][ T7919] active_anon:4521 inactive_anon:0 isolated_anon:0 [ 119.984356][ T7919] active_file:1230 inactive_file:39839 isolated_file:0 [ 119.984356][ T7919] unevictable:768 dirty:108 writeback:0 [ 119.984356][ T7919] slab_reclaimable:9994 slab_unreclaimable:98450 [ 119.984356][ T7919] mapped:29283 shmem:1355 pagetables:1026 [ 119.984356][ T7919] sec_pagetables:0 bounce:0 [ 119.984356][ T7919] kernel_misc_reclaimable:0 [ 119.984356][ T7919] free:1330210 free_pcp:17657 free_cma:0 [ 120.016140][ T7925] netlink: 24 bytes leftover after parsing attributes in process `syz.1.575'. [ 120.031835][ T7919] Node 0 active_anon:17984kB inactive_anon:0kB active_file:4920kB inactive_file:159152kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117132kB dirty:432kB writeback:0kB shmem:3884kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12500kB pagetables:3852kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 120.082461][ T7919] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 120.167337][ T7919] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 120.203521][ T7919] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 120.216041][ T7919] Node 0 DMA32 free:1403988kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18236kB inactive_anon:0kB active_file:4920kB inactive_file:157312kB unevictable:1536kB writepending:432kB present:3129332kB managed:2561004kB mlocked:0kB bounce:0kB free_pcp:50420kB local_pcp:30176kB free_cma:0kB [ 120.248720][ T7919] lowmem_reserve[]: 0 0 1 1 1 [ 120.264273][ T7919] Node 0 Normal free:4kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1840kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 120.328089][ T7942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.575'. [ 120.339175][ T7919] lowmem_reserve[]: 0 0 0 0 0 [ 120.343944][ T7919] Node 1 Normal free:3901688kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:18704kB local_pcp:10084kB free_cma:0kB [ 120.391141][ T7919] lowmem_reserve[]: 0 0 0 0 0 [ 120.401187][ T7940] batman_adv: batadv0: Removing interface: team0 [ 120.422065][ T7919] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 120.423977][ T7940] bridge_slave_0: left allmulticast mode [ 120.446304][ T7919] Node 0 DMA32: 1346*4kB (UM) 359*8kB (UME) 127*16kB (UME) 1038*32kB (UME) 575*64kB (UME) 98*128kB (UM) 19*256kB (UM) 3*512kB (UME) 2*1024kB (UM) 6*2048kB (UME) 315*4096kB (M) = 1403824kB [ 120.472270][ T7940] bridge_slave_0: left promiscuous mode [ 120.479862][ T7940] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.489459][ T7919] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 120.504370][ T7919] Node 1 Normal: 204*4kB (UE) 51*8kB (UME) 41*16kB (UME) 37*32kB (UME) 12*64kB (UME) 6*128kB (UME) 3*256kB (UM) 4*512kB (UME) 3*1024kB [ 120.509387][ T7940] bridge_slave_1: left allmulticast mode [ 120.509493][ T7919] (UME) 2*2048kB (UE) 949*4096kB (M) = 3901688kB [ 120.538639][ T7940] bridge_slave_1: left promiscuous mode [ 120.542079][ T7919] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 120.556480][ T7940] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.560558][ T7919] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 120.579595][ T7919] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 120.589618][ T7919] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 120.603028][ T7940] : (slave bond_slave_0): Releasing backup interface [ 120.604496][ T7919] 42471 total pagecache pages [ 120.619404][ T7919] 0 pages in swap cache [ 120.619922][ T7940] : (slave bond_slave_1): Releasing backup interface [ 120.623629][ T7919] Free swap = 124996kB [ 120.623641][ T7919] Total swap = 124996kB [ 120.644449][ T7919] 2097051 pages RAM [ 120.649356][ T7919] 0 pages HighMem/MovableOnly [ 120.654056][ T7919] 424694 pages reserved [ 120.658785][ T7940] team0: Port device team_slave_0 removed [ 120.663208][ T7919] 0 pages cma reserved [ 120.674560][ T7940] team0: Port device team_slave_1 removed [ 120.688235][ T7940] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.698098][ T7940] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.731798][ T7940] : (slave bond2): Releasing backup interface [ 120.746875][ T7940] bond3: (slave gretap1): Releasing active interface [ 120.768403][ T7941] lo: left allmulticast mode [ 120.854547][ T7339] srz1: Port: 1 Link DOWN [ 121.140557][ T7963] netlink: 'syz.1.582': attribute type 10 has an invalid length. [ 122.072985][ T8006] syzkaller0: entered promiscuous mode [ 122.085121][ T8015] netlink: 72 bytes leftover after parsing attributes in process `syz.2.595'. [ 122.089011][ T8006] syzkaller0: entered allmulticast mode [ 122.163162][ T8015] netlink: 'syz.2.595': attribute type 10 has an invalid length. [ 122.258432][ T8027] netlink: 8 bytes leftover after parsing attributes in process `syz.4.601'. [ 122.471860][ T8036] netlink: 32 bytes leftover after parsing attributes in process `syz.1.603'. [ 123.430818][ T8015] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 123.696361][ T8046] netdevsim netdevsim1: Direct firmware load for /.€ failed with error -2 [ 123.722097][ T8046] netdevsim netdevsim1: Falling back to sysfs fallback for: /.€ [ 124.892270][ T8100] netlink: 4 bytes leftover after parsing attributes in process `syz.4.624'. [ 125.166177][ T8110] netlink: 8 bytes leftover after parsing attributes in process `syz.1.630'. [ 125.229597][ T8112] netlink: 104 bytes leftover after parsing attributes in process `syz.4.631'. [ 125.238704][ T8115] netlink: 4 bytes leftover after parsing attributes in process `syz.3.632'. [ 125.238773][ T8115] bridge_slave_1: left allmulticast mode [ 125.238790][ T8115] bridge_slave_1: left promiscuous mode [ 125.239019][ T8115] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.269357][ T8115] bridge_slave_0: left allmulticast mode [ 125.277510][ T8115] bridge_slave_0: left promiscuous mode [ 125.283565][ T8115] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.296671][ T8117] netlink: 8 bytes leftover after parsing attributes in process `syz.3.632'. [ 125.346746][ T8119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.633'. [ 125.515279][ T8122] vlan2: entered allmulticast mode [ 125.526165][ T8127] netlink: 8 bytes leftover after parsing attributes in process `syz.0.635'. [ 125.544755][ T8122] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 125.616203][ T8127] FAULT_INJECTION: forcing a failure. [ 125.616203][ T8127] name failslab, interval 1, probability 0, space 0, times 1 [ 125.670027][ T8127] CPU: 0 UID: 0 PID: 8127 Comm: syz.0.635 Not tainted 6.16.0-rc3-syzkaller-00144-gbd475eeaaf3c #0 PREEMPT(full) [ 125.670051][ T8127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 125.670059][ T8127] Call Trace: [ 125.670066][ T8127] [ 125.670073][ T8127] dump_stack_lvl+0x189/0x250 [ 125.670102][ T8127] ? __pfx____ratelimit+0x10/0x10 [ 125.670125][ T8127] ? __pfx_dump_stack_lvl+0x10/0x10 [ 125.670146][ T8127] ? __pfx__printk+0x10/0x10 [ 125.670169][ T8127] ? ref_tracker_alloc+0x318/0x460 [ 125.670192][ T8127] should_fail_ex+0x414/0x560 [ 125.670217][ T8127] should_failslab+0xa8/0x100 [ 125.670237][ T8127] kmem_cache_alloc_noprof+0x73/0x3c0 [ 125.670260][ T8127] ? skb_clone+0x212/0x3a0 [ 125.670293][ T8127] skb_clone+0x212/0x3a0 [ 125.670317][ T8127] __netlink_deliver_tap+0x404/0x850 [ 125.670347][ T8127] ? netlink_deliver_tap+0x2e/0x1b0 [ 125.670367][ T8127] netlink_deliver_tap+0x19c/0x1b0 [ 125.670386][ T8127] netlink_unicast+0x72f/0x8d0 [ 125.670414][ T8127] netlink_sendmsg+0x805/0xb30 [ 125.670441][ T8127] ? __pfx_netlink_sendmsg+0x10/0x10 [ 125.670463][ T8127] ? aa_sock_msg_perm+0x94/0x160 [ 125.670486][ T8127] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 125.670507][ T8127] ? __pfx_netlink_sendmsg+0x10/0x10 [ 125.670525][ T8127] __sock_sendmsg+0x21c/0x270 [ 125.670552][ T8127] ____sys_sendmsg+0x505/0x830 [ 125.670579][ T8127] ? __pfx_____sys_sendmsg+0x10/0x10 [ 125.670610][ T8127] ? import_iovec+0x74/0xa0 [ 125.670631][ T8127] ___sys_sendmsg+0x21f/0x2a0 [ 125.670654][ T8127] ? __pfx____sys_sendmsg+0x10/0x10 [ 125.670721][ T8127] ? __fget_files+0x2a/0x420 [ 125.670738][ T8127] ? __fget_files+0x3a0/0x420 [ 125.670768][ T8127] __x64_sys_sendmsg+0x19b/0x260 [ 125.670792][ T8127] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 125.670823][ T8127] ? __pfx_ksys_write+0x10/0x10 [ 125.670837][ T8127] ? rcu_is_watching+0x15/0xb0 [ 125.670867][ T8127] ? do_syscall_64+0xbe/0x3b0 [ 125.670887][ T8127] do_syscall_64+0xfa/0x3b0 [ 125.670901][ T8127] ? lockdep_hardirqs_on+0x9c/0x150 [ 125.670924][ T8127] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.670941][ T8127] ? clear_bhb_loop+0x60/0xb0 [ 125.670962][ T8127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.670977][ T8127] RIP: 0033:0x7f8362b8e929 [ 125.670993][ T8127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.671013][ T8127] RSP: 002b:00007f8363a6a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 125.671031][ T8127] RAX: ffffffffffffffda RBX: 00007f8362db5fa0 RCX: 00007f8362b8e929 [ 125.671043][ T8127] RDX: 00000000000040c4 RSI: 0000200000000440 RDI: 0000000000000005 [ 125.671054][ T8127] RBP: 00007f8363a6a090 R08: 0000000000000000 R09: 0000000000000000 [ 125.671064][ T8127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.671074][ T8127] R13: 0000000000000000 R14: 00007f8362db5fa0 R15: 00007fff0425d638 [ 125.671104][ T8127] [ 126.037674][ T8135] netlink: 4 bytes leftover after parsing attributes in process `syz.3.638'. [ 126.105992][ T8140] netlink: 256 bytes leftover after parsing attributes in process `syz.1.636'. [ 126.138421][ T8140] unsupported nlmsg_type 40 [ 126.183482][ T8134] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 126.277967][ T8148] netlink: 576 bytes leftover after parsing attributes in process `syz.3.640'. [ 126.597836][ T8164] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 127.009220][ T8187] FAULT_INJECTION: forcing a failure. [ 127.009220][ T8187] name failslab, interval 1, probability 0, space 0, times 0 [ 127.041662][ T8187] CPU: 1 UID: 0 PID: 8187 Comm: syz.3.649 Not tainted 6.16.0-rc3-syzkaller-00144-gbd475eeaaf3c #0 PREEMPT(full) [ 127.041683][ T8187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 127.041691][ T8187] Call Trace: [ 127.041696][ T8187] [ 127.041702][ T8187] dump_stack_lvl+0x189/0x250 [ 127.041729][ T8187] ? __pfx____ratelimit+0x10/0x10 [ 127.041753][ T8187] ? __pfx_dump_stack_lvl+0x10/0x10 [ 127.041776][ T8187] ? __pfx__printk+0x10/0x10 [ 127.041797][ T8187] ? __pfx___might_resched+0x10/0x10 [ 127.041821][ T8187] ? fs_reclaim_acquire+0x7d/0x100 [ 127.041844][ T8187] should_fail_ex+0x414/0x560 [ 127.041870][ T8187] should_failslab+0xa8/0x100 [ 127.041889][ T8187] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 127.041906][ T8187] ? __alloc_skb+0x112/0x2d0 [ 127.041925][ T8187] __alloc_skb+0x112/0x2d0 [ 127.041946][ T8187] netlink_ack+0x146/0xa50 [ 127.041963][ T8187] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 127.041979][ T8187] ? ref_tracker_free+0x63a/0x7d0 [ 127.041999][ T8187] ? __copy_skb_header+0xa7/0x550 [ 127.042028][ T8187] ? __pfx_ref_tracker_free+0x10/0x10 [ 127.042046][ T8187] ? __skb_clone+0x63/0x7a0 [ 127.042070][ T8187] netlink_rcv_skb+0x28c/0x470 [ 127.042095][ T8187] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 127.042112][ T8187] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 127.042144][ T8187] ? netlink_deliver_tap+0x2e/0x1b0 [ 127.042161][ T8187] ? netlink_deliver_tap+0x2e/0x1b0 [ 127.042182][ T8187] netlink_unicast+0x75b/0x8d0 [ 127.042210][ T8187] netlink_sendmsg+0x805/0xb30 [ 127.042237][ T8187] ? __pfx_netlink_sendmsg+0x10/0x10 [ 127.042258][ T8187] ? aa_sock_msg_perm+0x94/0x160 [ 127.042280][ T8187] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 127.042299][ T8187] ? __pfx_netlink_sendmsg+0x10/0x10 [ 127.042317][ T8187] __sock_sendmsg+0x21c/0x270 [ 127.042342][ T8187] ____sys_sendmsg+0x505/0x830 [ 127.042374][ T8187] ? __pfx_____sys_sendmsg+0x10/0x10 [ 127.042401][ T8187] ? import_iovec+0x74/0xa0 [ 127.042422][ T8187] ___sys_sendmsg+0x21f/0x2a0 [ 127.042444][ T8187] ? __pfx____sys_sendmsg+0x10/0x10 [ 127.042501][ T8187] ? __fget_files+0x2a/0x420 [ 127.042518][ T8187] ? __fget_files+0x3a0/0x420 [ 127.042547][ T8187] __x64_sys_sendmsg+0x19b/0x260 [ 127.042570][ T8187] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 127.042600][ T8187] ? __pfx_ksys_write+0x10/0x10 [ 127.042614][ T8187] ? rcu_is_watching+0x15/0xb0 [ 127.042642][ T8187] ? do_syscall_64+0xbe/0x3b0 [ 127.042661][ T8187] do_syscall_64+0xfa/0x3b0 [ 127.042674][ T8187] ? lockdep_hardirqs_on+0x9c/0x150 [ 127.042696][ T8187] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.042713][ T8187] ? clear_bhb_loop+0x60/0xb0 [ 127.042733][ T8187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.042749][ T8187] RIP: 0033:0x7f0c88b8e929 [ 127.042766][ T8187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.042779][ T8187] RSP: 002b:00007f0c89a42038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 127.042798][ T8187] RAX: ffffffffffffffda RBX: 00007f0c88db5fa0 RCX: 00007f0c88b8e929 [ 127.042811][ T8187] RDX: 00000000000040c4 RSI: 0000200000000440 RDI: 0000000000000005 [ 127.042822][ T8187] RBP: 00007f0c89a42090 R08: 0000000000000000 R09: 0000000000000000 [ 127.042832][ T8187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.042842][ T8187] R13: 0000000000000000 R14: 00007f0c88db5fa0 R15: 00007fffe1f16888 [ 127.042871][ T8187] [ 127.477203][ T8195] xt_CT: No such helper "pptp" [ 127.543723][ T8202] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551585) [ 127.582586][ T8202] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 127.605565][ T8204] Bluetooth: MGMT ver 1.23 [ 127.619531][ T8204] syz_tun: entered allmulticast mode [ 127.929005][ T8222] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.937037][ T8222] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.950887][ T8222] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.959300][ T8222] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.402858][ T8200] syz_tun: left allmulticast mode [ 128.903961][ T8277] lo speed is unknown, defaulting to 1000 [ 128.923452][ T8277] lo speed is unknown, defaulting to 1000 [ 128.966555][ T8277] lo speed is unknown, defaulting to 1000 [ 129.064131][ T8277] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 129.171763][ T8277] lo speed is unknown, defaulting to 1000 [ 129.200127][ T8277] lo speed is unknown, defaulting to 1000 [ 129.209943][ T8277] lo speed is unknown, defaulting to 1000 [ 129.221588][ T8277] lo speed is unknown, defaulting to 1000 [ 129.240461][ T8277] lo speed is unknown, defaulting to 1000 [ 129.406508][ T8300] netlink: 'syz.4.687': attribute type 83 has an invalid length. [ 129.696102][ T8313] netlink: 'syz.3.692': attribute type 83 has an invalid length. [ 129.942253][ T8328] openvswitch: netlink: Tunnel attr 16370 out of range max 16 [ 130.141068][ T8338] __nla_validate_parse: 17 callbacks suppressed [ 130.141085][ T8338] netlink: 12 bytes leftover after parsing attributes in process `syz.2.703'. [ 130.192980][ T8338] netlink: 56 bytes leftover after parsing attributes in process `syz.2.703'. [ 130.203960][ T8338] netlink: 8 bytes leftover after parsing attributes in process `syz.2.703'. [ 130.381453][ T8351] netlink: 8 bytes leftover after parsing attributes in process `syz.0.707'. [ 130.429122][ T8351] netlink: 4 bytes leftover after parsing attributes in process `syz.0.707'. [ 130.437906][ T8353] sctp: [Deprecated]: syz.0.707 (pid 8353) Use of struct sctp_assoc_value in delayed_ack socket option. [ 130.437906][ T8353] Use struct sctp_sack_info instead [ 130.549453][ T8360] netlink: 4 bytes leftover after parsing attributes in process `syz.2.711'. [ 130.602580][ T8360] vlan2: entered promiscuous mode [ 130.618129][ T8360] vlan2: entered allmulticast mode [ 130.632466][ T8360] hsr_slave_1: entered allmulticast mode [ 130.796641][ T8367] mac80211_hwsim hwsim7 ÿ: renamed from wlan1 [ 130.937509][ T8378] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 131.140641][ T8388] openvswitch: netlink: Unknown key attributes 2 [ 131.166738][ T8388] netlink: 196 bytes leftover after parsing attributes in process `syz.2.720'. [ 131.385941][ T8393] x_tables: duplicate underflow at hook 1 [ 131.484892][ T8405] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 131.533346][ T8407] netlink: 60 bytes leftover after parsing attributes in process `syz.0.726'. [ 132.004275][ T8429] netlink: 248 bytes leftover after parsing attributes in process `syz.0.731'. [ 132.011287][ T8431] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 132.329098][ T8448] netlink: 20 bytes leftover after parsing attributes in process `syz.0.738'. [ 132.455611][ T8461] netlink: 'syz.3.741': attribute type 12 has an invalid length. [ 132.463714][ T8461] netlink: 'syz.3.741': attribute type 11 has an invalid length. [ 132.465846][ T8458] bond_slave_1: mtu less than device minimum [ 133.610830][ T8522] netlink: 'syz.4.761': attribute type 5 has an invalid length. [ 133.740818][ T8529] netlink: 'syz.4.766': attribute type 29 has an invalid length. [ 133.830428][ T8536] netlink: 'syz.0.767': attribute type 13 has an invalid length. [ 133.842296][ T8536] lo: entered promiscuous mode [ 133.856541][ T8536] lo: entered allmulticast mode [ 133.887843][ T8536] tunl0: entered promiscuous mode [ 133.920255][ T8536] tunl0: entered allmulticast mode [ 133.944197][ T8536] gre0: entered promiscuous mode [ 133.955821][ T8539] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.969340][ T8536] gre0: entered allmulticast mode [ 134.021857][ T8536] gretap0: entered promiscuous mode [ 134.031396][ T8536] gretap0: entered allmulticast mode [ 134.041956][ T8536] gretap0: refused to change device tx_queue_len [ 134.048672][ T8536] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 134.094306][ T8540] netlink: 'syz.0.767': attribute type 1 has an invalid length. [ 134.112856][ T8540] netlink: 'syz.0.767': attribute type 2 has an invalid length. [ 134.491219][ T8577] sch_fq: defrate 0 ignored. [ 134.533108][ T8577] netlink: 'syz.1.777': attribute type 1 has an invalid length. [ 134.574852][ T8577] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 134.873820][ T8595] xt_time: unknown flags 0x4 [ 134.892760][ T8594] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 135.364060][ T8614] xt_CT: No such helper "pptp" [ 135.590952][ T8626] __nla_validate_parse: 13 callbacks suppressed [ 135.590971][ T8626] netlink: 32 bytes leftover after parsing attributes in process `syz.0.792'. [ 135.698411][ T8631] netlink: 'syz.2.796': attribute type 1 has an invalid length. [ 135.834992][ T8641] netlink: 12 bytes leftover after parsing attributes in process `syz.4.799'. [ 135.853603][ T8645] netlink: 8 bytes leftover after parsing attributes in process `syz.3.798'. [ 135.883483][ T8645] netlink: 'syz.3.798': attribute type 5 has an invalid length. [ 135.902899][ T8645] netlink: 20 bytes leftover after parsing attributes in process `syz.3.798'. [ 135.943208][ T8645] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 135.984732][ T8645] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 135.999811][ T8645] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 136.012535][ T8645] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 136.029377][ T8645] geneve2: entered promiscuous mode [ 136.046097][ T8645] geneve2: entered allmulticast mode [ 136.549730][ T8666] netlink: 8 bytes leftover after parsing attributes in process `syz.0.807'. [ 136.808502][ T8688] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 137.087696][ T8707] netlink: 12 bytes leftover after parsing attributes in process `syz.0.816'. [ 137.166197][ T8713] netlink: 3 bytes leftover after parsing attributes in process `syz.0.816'. [ 137.176106][ T8713] openvswitch: netlink: Actions may not be safe on all matching packets [ 137.216528][ T8715] netlink: 248 bytes leftover after parsing attributes in process `syz.1.819'. [ 137.236775][ T8715] netlink: 52 bytes leftover after parsing attributes in process `syz.1.819'. [ 137.290012][ T8715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.819'. [ 137.307624][ T8721] tipc: Enabling of bearer rejected, failed to enable media [ 137.400923][ T8725] sctp: [Deprecated]: syz.4.823 (pid 8725) Use of int in max_burst socket option deprecated. [ 137.400923][ T8725] Use struct sctp_assoc_value instead [ 137.933885][ T8760] IPVS: ovf: UDP 224.0.0.2:20004 - no destination available [ 137.934422][ T5897] IPVS: starting estimator thread 0... [ 138.034764][ T8765] IPVS: using max 27 ests per chain, 64800 per kthread [ 138.631451][ T8803] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:5 [ 138.791207][ T8811] netlink: 'syz.2.850': attribute type 1 has an invalid length. [ 138.807301][ T8812] netlink: 'syz.0.848': attribute type 1 has an invalid length. [ 138.886874][ T8811] lo speed is unknown, defaulting to 1000 [ 138.942946][ T8821] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 139.020519][ T8820] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 139.842099][ T8861] openvswitch: netlink: Missing key (keys=40, expected=100) [ 140.161863][ T8879] netlink: 'syz.2.872': attribute type 1 has an invalid length. [ 140.176897][ T8879] netlink: 'syz.2.872': attribute type 2 has an invalid length. [ 140.210607][ T8886] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 140.250892][ T8888] macsec0: entered promiscuous mode [ 140.304880][ T8883] syz.0.873 (8883) used greatest stack depth: 17992 bytes left [ 140.587675][ T8910] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 140.719629][ T8913] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 140.720507][ T8919] __nla_validate_parse: 51 callbacks suppressed [ 140.720521][ T8919] netlink: 132 bytes leftover after parsing attributes in process `syz.0.883'. [ 140.783479][ T8913] Bluetooth: MGMT ver 1.23 [ 141.182096][ T8950] netlink: 'syz.0.896': attribute type 1 has an invalid length. [ 141.190378][ T8952] netlink: 'syz.2.894': attribute type 1 has an invalid length. [ 141.191247][ T8950] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.896'. [ 141.200080][ T8953] Unsupported ieee802154 address type: 0 [ 141.212458][ T8950] sch_fq: defrate 0 ignored. [ 141.216676][ T8952] netlink: 'syz.2.894': attribute type 1 has an invalid length. [ 141.462368][ T8964] netlink: 12 bytes leftover after parsing attributes in process `syz.0.900'. [ 144.403434][ T8978] netlink: 16 bytes leftover after parsing attributes in process `syz.4.906'. [ 144.422114][ T6018] IPVS: starting estimator thread 0... [ 144.442017][ T8978] netlink: 16 bytes leftover after parsing attributes in process `syz.4.906'. [ 144.452137][ T8976] netlink: 252 bytes leftover after parsing attributes in process `syz.1.903'. [ 144.514973][ T8980] IPVS: using max 29 ests per chain, 69600 per kthread [ 144.685355][ T8994] netlink: 24 bytes leftover after parsing attributes in process `syz.2.910'. [ 144.698104][ T8970] delete_channel: no stack [ 145.157487][ T9023] netlink: 8 bytes leftover after parsing attributes in process `syz.1.919'. [ 145.201035][ T9023] netlink: 8 bytes leftover after parsing attributes in process `syz.1.919'. [ 145.324298][ T9029] netlink: 108 bytes leftover after parsing attributes in process `syz.4.921'. [ 145.895010][ T9062] netlink: 'syz.3.932': attribute type 1 has an invalid length. [ 146.183539][ T9080] __nla_validate_parse: 4 callbacks suppressed [ 146.183556][ T9080] netlink: 24 bytes leftover after parsing attributes in process `syz.2.940'. [ 146.242403][ T9080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.940'. [ 146.380051][ T9092] netlink: 32 bytes leftover after parsing attributes in process `syz.0.944'. [ 146.513721][ T9101] netlink: 'syz.0.947': attribute type 13 has an invalid length. [ 146.618508][ T9101] veth0_macvtap: left promiscuous mode [ 146.685231][ T9101] macvtap0: entered allmulticast mode [ 146.723560][ T9101] macvtap0: refused to change device tx_queue_len [ 146.816151][ T9116] xt_HMARK: proto mask must be zero with L3 mode [ 146.839849][ T9116] netlink: 8 bytes leftover after parsing attributes in process `syz.2.952'. [ 146.873702][ T9116] netlink: 4 bytes leftover after parsing attributes in process `syz.2.952'. [ 146.921197][ T9116] netlink: 'syz.2.952': attribute type 13 has an invalid length. [ 146.929517][ T9120] bond4: entered promiscuous mode [ 146.931868][ T9126] netlink: 8 bytes leftover after parsing attributes in process `syz.4.956'. [ 146.939818][ T9120] bond4: entered allmulticast mode [ 146.949794][ T9120] 8021q: adding VLAN 0 to HW filter on device bond4 [ 146.964559][ T9116] netlink: 'syz.2.952': attribute type 17 has an invalid length. [ 147.087400][ T9116] bridge0: port 3(gretap0) entered blocking state [ 147.094011][ T9116] bridge0: port 3(gretap0) entered listening state [ 147.103314][ T9135] netlink: 4 bytes leftover after parsing attributes in process `syz.1.957'. [ 147.130948][ T9116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.150390][ T9116] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.177385][ T9116] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 147.451482][ T9146] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.740812][ T43] hid-generic 0005:046D:FFF9.0001: item fetching failed at offset 0/1 [ 147.752129][ T9164] netlink: 112 bytes leftover after parsing attributes in process `syz.3.967'. [ 147.774565][ T43] hid-generic 0005:046D:FFF9.0001: probe with driver hid-generic failed with error -22 [ 147.828559][ T9167] netlink: 88 bytes leftover after parsing attributes in process `syz.4.968'. [ 147.971481][ T9171] netlink: 4 bytes leftover after parsing attributes in process `syz.3.970'. [ 147.990473][ T9171] netlink: 'syz.3.970': attribute type 1 has an invalid length. [ 148.493794][ T9205] netlink: 'syz.3.979': attribute type 13 has an invalid length. [ 148.835471][ T9222] gretap0: entered promiscuous mode [ 149.740384][ T9286] netlink: 'syz.3.1006': attribute type 12 has an invalid length. [ 149.786697][ T9288] tc_dump_action: action bad kind [ 150.056428][ T9297] openvswitch: netlink: IP tunnel dst address not specified [ 150.090708][ T9297] openvswitch: netlink: VXLAN extension 173 out of range max 1 [ 150.586672][ T9333] netlink: 'syz.3.1021': attribute type 21 has an invalid length. [ 150.610257][ T9334] syzkaller1: entered promiscuous mode [ 150.618376][ T9334] syzkaller1: entered allmulticast mode [ 151.484510][ T9395] __nla_validate_parse: 17 callbacks suppressed [ 151.484528][ T9395] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1038'. [ 151.738321][ T9413] ip6t_rpfilter: unknown options [ 151.859931][ T9416] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1049'. [ 151.874293][ T9421] openvswitch: netlink: Tunnel attr 0 has unexpected len 16 expected 8 [ 151.876487][ T9416] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1049'. [ 151.885899][ T9420] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 151.912056][ T9416] netlink: 31 bytes leftover after parsing attributes in process `syz.4.1049'. [ 151.926137][ T9416] netlink: 'syz.4.1049': attribute type 2 has an invalid length. [ 151.934090][ T9416] netlink: 31 bytes leftover after parsing attributes in process `syz.4.1049'. [ 152.315442][ T9455] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 152.364239][ T9461] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1062'. [ 152.480029][ T9467] netlink: 'syz.4.1065': attribute type 21 has an invalid length. [ 152.572687][ T9471] netlink: 'syz.1.1067': attribute type 2 has an invalid length. [ 152.657207][ T9461] gre0: Master is either lo or non-ether device [ 152.790416][ T9482] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1068'. [ 152.845141][ T9483] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1068'. [ 152.872084][ T9482] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1068'. [ 153.177490][ T9514] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1079'. [ 153.287176][ T9523] netlink: 'syz.4.1079': attribute type 1 has an invalid length. [ 153.331034][ T9525] netlink: 'syz.2.1082': attribute type 21 has an invalid length. [ 153.689132][ T9545] netlink: 'syz.4.1089': attribute type 1 has an invalid length. [ 153.943674][ T9561] veth0: entered promiscuous mode [ 153.969979][ T9560] veth0: left promiscuous mode [ 154.003599][ T9563] 8021q: adding VLAN 0 to HW filter on device bond6 [ 154.022741][ T9563] bridge0: port 1(bond6) entered blocking state [ 154.029385][ T9563] bridge0: port 1(bond6) entered disabled state [ 154.037473][ T9563] bond6: entered allmulticast mode [ 154.048179][ T9563] bond6: entered promiscuous mode [ 154.057335][ T9563] bridge0: port 1(bond6) entered blocking state [ 154.063993][ T9563] bridge0: port 1(bond6) entered forwarding state [ 154.078859][ T9572] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 154.086238][ T9572] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 154.117355][ T7570] bridge0: port 1(bond6) entered disabled state [ 154.295679][ T9585] 8021q: adding VLAN 0 to HW filter on device bond7 [ 154.400041][ T9590] netlink: 'syz.0.1107': attribute type 1 has an invalid length. [ 154.416359][ T9590] gretap2: entered promiscuous mode [ 154.933965][ T9632] netlink: 'syz.1.1118': attribute type 7 has an invalid length. [ 154.943386][ T9631] netlink: 'syz.2.1119': attribute type 1 has an invalid length. [ 154.966410][ T9632] netlink: 'syz.1.1118': attribute type 8 has an invalid length. [ 154.983551][ T9631] openvswitch: netlink: Message has -1 unknown bytes. [ 155.150155][ T9648] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 155.368262][ T9665] xt_hashlimit: max too large, truncated to 1048576 [ 155.539591][ T9682] Cannot find set identified by id 0 to match [ 155.575898][ T9687] Cannot find set identified by id 0 to match [ 155.739590][ T9696] tipc: Failed to obtain node identity [ 155.750220][ T9696] tipc: Enabling of bearer rejected, failed to enable media [ 156.048209][ T9717] FAULT_INJECTION: forcing a failure. [ 156.048209][ T9717] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.063343][ T9717] CPU: 1 UID: 0 PID: 9717 Comm: syz.3.1147 Not tainted 6.16.0-rc3-syzkaller-00144-gbd475eeaaf3c #0 PREEMPT(full) [ 156.063370][ T9717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 156.063380][ T9717] Call Trace: [ 156.063387][ T9717] [ 156.063395][ T9717] dump_stack_lvl+0x189/0x250 [ 156.063424][ T9717] ? __pfx____ratelimit+0x10/0x10 [ 156.063449][ T9717] ? __pfx_dump_stack_lvl+0x10/0x10 [ 156.063473][ T9717] ? __pfx__printk+0x10/0x10 [ 156.063492][ T9717] ? __might_fault+0xb0/0x130 [ 156.063521][ T9717] should_fail_ex+0x414/0x560 [ 156.063547][ T9717] _copy_from_iter+0x1db/0x16f0 [ 156.063584][ T9717] ? __pfx__copy_from_iter+0x10/0x10 [ 156.063610][ T9717] ? __pfx___irq_work_queue_local+0x10/0x10 [ 156.063634][ T9717] ? __pfx_bpf_bprintf_prepare+0x10/0x10 [ 156.063663][ T9717] bcm_sendmsg+0x15b/0x6a0 [ 156.063693][ T9717] ? __pfx_bcm_sendmsg+0x10/0x10 [ 156.063721][ T9717] ? aa_sock_msg_perm+0x94/0x160 [ 156.063745][ T9717] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 156.063764][ T9717] ? __pfx_bcm_sendmsg+0x10/0x10 [ 156.063785][ T9717] __sock_sendmsg+0x21c/0x270 [ 156.063812][ T9717] ____sys_sendmsg+0x505/0x830 [ 156.063837][ T9717] ? __pfx_____sys_sendmsg+0x10/0x10 [ 156.063867][ T9717] ? import_iovec+0x74/0xa0 [ 156.063886][ T9717] ___sys_sendmsg+0x21f/0x2a0 [ 156.063909][ T9717] ? __pfx____sys_sendmsg+0x10/0x10 [ 156.063962][ T9717] ? __fget_files+0x2a/0x420 [ 156.063979][ T9717] ? __fget_files+0x3a0/0x420 [ 156.064008][ T9717] __x64_sys_sendmsg+0x19b/0x260 [ 156.064029][ T9717] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 156.064059][ T9717] ? __pfx_ksys_write+0x10/0x10 [ 156.064073][ T9717] ? rcu_is_watching+0x15/0xb0 [ 156.064102][ T9717] ? do_syscall_64+0xbe/0x3b0 [ 156.064129][ T9717] do_syscall_64+0xfa/0x3b0 [ 156.064143][ T9717] ? lockdep_hardirqs_on+0x9c/0x150 [ 156.064166][ T9717] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.064183][ T9717] ? clear_bhb_loop+0x60/0xb0 [ 156.064204][ T9717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.064221][ T9717] RIP: 0033:0x7f0c88b8e929 [ 156.064237][ T9717] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.064250][ T9717] RSP: 002b:00007f0c89a42038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 156.064269][ T9717] RAX: ffffffffffffffda RBX: 00007f0c88db5fa0 RCX: 00007f0c88b8e929 [ 156.064281][ T9717] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 156.064292][ T9717] RBP: 00007f0c89a42090 R08: 0000000000000000 R09: 0000000000000000 [ 156.064303][ T9717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.064312][ T9717] R13: 0000000000000000 R14: 00007f0c88db5fa0 R15: 00007fffe1f16888 [ 156.064341][ T9717] [ 156.429897][ T9722] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 156.524748][ T9730] __nla_validate_parse: 57 callbacks suppressed [ 156.524760][ T9730] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1150'. [ 156.597455][ T9732] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1151'. [ 156.609140][ T9732] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.1151'. [ 156.754691][ T9741] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1154'. [ 157.051593][ T9761] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1159'. [ 157.072643][ T9764] FAULT_INJECTION: forcing a failure. [ 157.072643][ T9764] name failslab, interval 1, probability 0, space 0, times 0 [ 157.086813][ T9764] CPU: 1 UID: 0 PID: 9764 Comm: syz.3.1160 Not tainted 6.16.0-rc3-syzkaller-00144-gbd475eeaaf3c #0 PREEMPT(full) [ 157.086837][ T9764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 157.086848][ T9764] Call Trace: [ 157.086855][ T9764] [ 157.086863][ T9764] dump_stack_lvl+0x189/0x250 [ 157.086892][ T9764] ? __pfx____ratelimit+0x10/0x10 [ 157.086916][ T9764] ? __pfx_dump_stack_lvl+0x10/0x10 [ 157.086941][ T9764] ? __pfx__printk+0x10/0x10 [ 157.086966][ T9764] ? __pfx___might_resched+0x10/0x10 [ 157.086996][ T9764] should_fail_ex+0x414/0x560 [ 157.087023][ T9764] should_failslab+0xa8/0x100 [ 157.087053][ T9764] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 157.087071][ T9764] ? __alloc_skb+0x112/0x2d0 [ 157.087094][ T9764] __alloc_skb+0x112/0x2d0 [ 157.087117][ T9764] bcm_tx_send+0xa9/0x5f0 [ 157.087140][ T9764] ? lockdep_hardirqs_on+0x9c/0x150 [ 157.087167][ T9764] ? __pfx_bcm_tx_send+0x10/0x10 [ 157.087202][ T9764] bcm_sendmsg+0x4c8/0x6a0 [ 157.087230][ T9764] ? __pfx_bcm_sendmsg+0x10/0x10 [ 157.087259][ T9764] ? aa_sock_msg_perm+0x94/0x160 [ 157.087283][ T9764] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 157.087304][ T9764] ? __pfx_bcm_sendmsg+0x10/0x10 [ 157.087326][ T9764] __sock_sendmsg+0x21c/0x270 [ 157.087355][ T9764] ____sys_sendmsg+0x505/0x830 [ 157.087381][ T9764] ? __pfx_____sys_sendmsg+0x10/0x10 [ 157.087412][ T9764] ? import_iovec+0x74/0xa0 [ 157.087433][ T9764] ___sys_sendmsg+0x21f/0x2a0 [ 157.087456][ T9764] ? __pfx____sys_sendmsg+0x10/0x10 [ 157.087517][ T9764] ? __fget_files+0x2a/0x420 [ 157.087534][ T9764] ? __fget_files+0x3a0/0x420 [ 157.087564][ T9764] __x64_sys_sendmsg+0x19b/0x260 [ 157.087588][ T9764] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 157.087620][ T9764] ? __pfx_ksys_write+0x10/0x10 [ 157.087633][ T9764] ? rcu_is_watching+0x15/0xb0 [ 157.087664][ T9764] ? do_syscall_64+0xbe/0x3b0 [ 157.087684][ T9764] do_syscall_64+0xfa/0x3b0 [ 157.087698][ T9764] ? lockdep_hardirqs_on+0x9c/0x150 [ 157.087720][ T9764] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.087738][ T9764] ? clear_bhb_loop+0x60/0xb0 [ 157.087759][ T9764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.087779][ T9764] RIP: 0033:0x7f0c88b8e929 [ 157.087794][ T9764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.087808][ T9764] RSP: 002b:00007f0c89a42038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 157.087827][ T9764] RAX: ffffffffffffffda RBX: 00007f0c88db5fa0 RCX: 00007f0c88b8e929 [ 157.087839][ T9764] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 157.087850][ T9764] RBP: 00007f0c89a42090 R08: 0000000000000000 R09: 0000000000000000 [ 157.087861][ T9764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.087871][ T9764] R13: 0000000000000000 R14: 00007f0c88db5fa0 R15: 00007fffe1f16888 [ 157.087901][ T9764] [ 157.500527][ T9771] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1163'. [ 157.516569][ T9774] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1163'. [ 157.728582][ T9789] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1167'. [ 157.858603][ T9793] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1168'. [ 157.869172][ T9796] openvswitch: netlink: Multiple metadata blocks provided [ 157.887376][ T9793] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1168'. [ 157.917447][ T9800] validate_nla: 2 callbacks suppressed [ 157.917463][ T9800] netlink: 'syz.4.1172': attribute type 1 has an invalid length. [ 158.136790][ T9817] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 158.161948][ T9814] bridge_slave_1: entered allmulticast mode [ 158.170161][ T9817] netlink: 'syz.3.1178': attribute type 83 has an invalid length. [ 158.378260][ T9833] netlink: 'syz.2.1182': attribute type 2 has an invalid length. [ 158.538813][ T9842] xt_cgroup: xt_cgroup: no path or classid specified [ 158.669657][ T9852] FAULT_INJECTION: forcing a failure. [ 158.669657][ T9852] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 158.686446][ T9852] CPU: 1 UID: 0 PID: 9852 Comm: syz.1.1188 Not tainted 6.16.0-rc3-syzkaller-00144-gbd475eeaaf3c #0 PREEMPT(full) [ 158.686490][ T9852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 158.686505][ T9852] Call Trace: [ 158.686516][ T9852] [ 158.686529][ T9852] dump_stack_lvl+0x189/0x250 [ 158.686571][ T9852] ? __pfx____ratelimit+0x10/0x10 [ 158.686596][ T9852] ? __pfx_dump_stack_lvl+0x10/0x10 [ 158.686620][ T9852] ? __pfx__printk+0x10/0x10 [ 158.686637][ T9852] ? __might_fault+0xb0/0x130 [ 158.686673][ T9852] should_fail_ex+0x414/0x560 [ 158.686699][ T9852] _copy_from_iter+0x1db/0x16f0 [ 158.686727][ T9852] ? rcu_is_watching+0x15/0xb0 [ 158.686752][ T9852] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 158.686770][ T9852] ? __pfx__copy_from_iter+0x10/0x10 [ 158.686795][ T9852] ? __build_skb_around+0x257/0x3e0 [ 158.686818][ T9852] ? skb_put+0x11b/0x210 [ 158.686840][ T9852] bcm_tx_send+0x14f/0x5f0 [ 158.686870][ T9852] ? __pfx_bcm_tx_send+0x10/0x10 [ 158.686904][ T9852] bcm_sendmsg+0x4c8/0x6a0 [ 158.686933][ T9852] ? __pfx_bcm_sendmsg+0x10/0x10 [ 158.686961][ T9852] ? aa_sock_msg_perm+0x94/0x160 [ 158.686985][ T9852] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 158.687006][ T9852] ? __pfx_bcm_sendmsg+0x10/0x10 [ 158.687028][ T9852] __sock_sendmsg+0x21c/0x270 [ 158.687055][ T9852] ____sys_sendmsg+0x505/0x830 [ 158.687082][ T9852] ? __pfx_____sys_sendmsg+0x10/0x10 [ 158.687113][ T9852] ? import_iovec+0x74/0xa0 [ 158.687134][ T9852] ___sys_sendmsg+0x21f/0x2a0 [ 158.687157][ T9852] ? __pfx____sys_sendmsg+0x10/0x10 [ 158.687218][ T9852] ? __fget_files+0x2a/0x420 [ 158.687235][ T9852] ? __fget_files+0x3a0/0x420 [ 158.687266][ T9852] __x64_sys_sendmsg+0x19b/0x260 [ 158.687289][ T9852] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 158.687321][ T9852] ? __pfx_ksys_write+0x10/0x10 [ 158.687335][ T9852] ? rcu_is_watching+0x15/0xb0 [ 158.687364][ T9852] ? do_syscall_64+0xbe/0x3b0 [ 158.687384][ T9852] do_syscall_64+0xfa/0x3b0 [ 158.687398][ T9852] ? lockdep_hardirqs_on+0x9c/0x150 [ 158.687421][ T9852] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.687438][ T9852] ? clear_bhb_loop+0x60/0xb0 [ 158.687459][ T9852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.687476][ T9852] RIP: 0033:0x7fbd1ab8e929 [ 158.687492][ T9852] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.687505][ T9852] RSP: 002b:00007fbd1b9c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 158.687524][ T9852] RAX: ffffffffffffffda RBX: 00007fbd1adb5fa0 RCX: 00007fbd1ab8e929 [ 158.687537][ T9852] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 158.687548][ T9852] RBP: 00007fbd1b9c7090 R08: 0000000000000000 R09: 0000000000000000 [ 158.687558][ T9852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.687568][ T9852] R13: 0000000000000000 R14: 00007fbd1adb5fa0 R15: 00007ffdd9862938 [ 158.687598][ T9852] [ 159.014110][ T9856] netlink: 'syz.4.1189': attribute type 34 has an invalid length. [ 159.099505][ T9856] gre3: entered promiscuous mode [ 159.109837][ T9856] gre3: entered allmulticast mode [ 159.137737][ T9863] xt_SECMARK: invalid mode: 0 [ 159.143977][ T9860] netlink: 'syz.4.1189': attribute type 34 has an invalid length. [ 159.171240][ T9864] xt_SECMARK: invalid mode: 0 [ 159.442423][ T9881] netlink: 'syz.0.1201': attribute type 1 has an invalid length. [ 159.671515][ T9895] FAULT_INJECTION: forcing a failure. [ 159.671515][ T9895] name failslab, interval 1, probability 0, space 0, times 0 [ 159.731343][ T9895] CPU: 1 UID: 0 PID: 9895 Comm: syz.1.1206 Not tainted 6.16.0-rc3-syzkaller-00144-gbd475eeaaf3c #0 PREEMPT(full) [ 159.731370][ T9895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 159.731380][ T9895] Call Trace: [ 159.731387][ T9895] [ 159.731395][ T9895] dump_stack_lvl+0x189/0x250 [ 159.731425][ T9895] ? __pfx____ratelimit+0x10/0x10 [ 159.731448][ T9895] ? __pfx_dump_stack_lvl+0x10/0x10 [ 159.731472][ T9895] ? __pfx__printk+0x10/0x10 [ 159.731504][ T9895] should_fail_ex+0x414/0x560 [ 159.731531][ T9895] should_failslab+0xa8/0x100 [ 159.731552][ T9895] kmem_cache_alloc_noprof+0x73/0x3c0 [ 159.731578][ T9895] ? skb_clone+0x212/0x3a0 [ 159.731597][ T9895] ? ref_tracker_alloc+0x318/0x460 [ 159.731621][ T9895] skb_clone+0x212/0x3a0 [ 159.731640][ T9895] ? can_send+0x655/0xd00 [ 159.731662][ T9895] can_send+0x673/0xd00 [ 159.731691][ T9895] ? __pfx_can_send+0x10/0x10 [ 159.731717][ T9895] ? dev_get_by_index+0x22/0x2e0 [ 159.731739][ T9895] ? dev_get_by_index+0x22/0x2e0 [ 159.731769][ T9895] bcm_tx_send+0x406/0x5f0 [ 159.731795][ T9895] ? __pfx_bcm_tx_send+0x10/0x10 [ 159.731826][ T9895] bcm_sendmsg+0x4c8/0x6a0 [ 159.731855][ T9895] ? __pfx_bcm_sendmsg+0x10/0x10 [ 159.731885][ T9895] ? aa_sock_msg_perm+0x94/0x160 [ 159.731907][ T9895] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 159.731928][ T9895] ? __pfx_bcm_sendmsg+0x10/0x10 [ 159.731952][ T9895] __sock_sendmsg+0x21c/0x270 [ 159.731979][ T9895] ____sys_sendmsg+0x505/0x830 [ 159.732006][ T9895] ? __pfx_____sys_sendmsg+0x10/0x10 [ 159.732036][ T9895] ? import_iovec+0x74/0xa0 [ 159.732058][ T9895] ___sys_sendmsg+0x21f/0x2a0 [ 159.732081][ T9895] ? __pfx____sys_sendmsg+0x10/0x10 [ 159.732141][ T9895] ? __fget_files+0x2a/0x420 [ 159.732159][ T9895] ? __fget_files+0x3a0/0x420 [ 159.732189][ T9895] __x64_sys_sendmsg+0x19b/0x260 [ 159.732213][ T9895] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 159.732244][ T9895] ? __pfx_ksys_write+0x10/0x10 [ 159.732267][ T9895] ? do_syscall_64+0xbe/0x3b0 [ 159.732287][ T9895] do_syscall_64+0xfa/0x3b0 [ 159.732301][ T9895] ? lockdep_hardirqs_on+0x9c/0x150 [ 159.732323][ T9895] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.732341][ T9895] ? clear_bhb_loop+0x60/0xb0 [ 159.732362][ T9895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.732379][ T9895] RIP: 0033:0x7fbd1ab8e929 [ 159.732395][ T9895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.732408][ T9895] RSP: 002b:00007fbd1b9c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 159.732425][ T9895] RAX: ffffffffffffffda RBX: 00007fbd1adb5fa0 RCX: 00007fbd1ab8e929 [ 159.732438][ T9895] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 159.732448][ T9895] RBP: 00007fbd1b9c7090 R08: 0000000000000000 R09: 0000000000000000 [ 159.732457][ T9895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.732466][ T9895] R13: 0000000000000000 R14: 00007fbd1adb5fa0 R15: 00007ffdd9862938 [ 159.732493][ T9895] [ 160.104879][ T5847] Bluetooth: hci4: command 0x0405 tx timeout [ 160.282203][ T9920] netlink: 'syz.1.1212': attribute type 1 has an invalid length. [ 160.294261][ T9921] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 160.310084][ T9916] netlink: 'syz.2.1213': attribute type 1 has an invalid length. [ 160.320718][ T9916] netlink: 'syz.2.1213': attribute type 1 has an invalid length. [ 160.337076][ T9916] netlink: 'syz.2.1213': attribute type 2 has an invalid length. [ 160.811995][ T9944] FAULT_INJECTION: forcing a failure. [ 160.811995][ T9944] name failslab, interval 1, probability 0, space 0, times 0 [ 160.825006][ T9944] CPU: 1 UID: 0 PID: 9944 Comm: syz.0.1220 Not tainted 6.16.0-rc3-syzkaller-00144-gbd475eeaaf3c #0 PREEMPT(full) [ 160.825030][ T9944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 160.825040][ T9944] Call Trace: [ 160.825056][ T9944] [ 160.825065][ T9944] dump_stack_lvl+0x189/0x250 [ 160.825094][ T9944] ? __pfx____ratelimit+0x10/0x10 [ 160.825118][ T9944] ? __pfx_dump_stack_lvl+0x10/0x10 [ 160.825142][ T9944] ? __pfx__printk+0x10/0x10 [ 160.825163][ T9944] ? __lock_acquire+0xab9/0xd20 [ 160.825193][ T9944] should_fail_ex+0x414/0x560 [ 160.825218][ T9944] should_failslab+0xa8/0x100 [ 160.825238][ T9944] kmem_cache_alloc_noprof+0x73/0x3c0 [ 160.825258][ T9944] ? skb_clone+0x212/0x3a0 [ 160.825278][ T9944] ? __pfx_skb_network_protocol+0x10/0x10 [ 160.825292][ T9944] skb_clone+0x212/0x3a0 [ 160.825302][ T9944] ? dev_queue_xmit_nit+0x26f/0xcc0 [ 160.825314][ T9944] dev_queue_xmit_nit+0x416/0xcc0 [ 160.825325][ T9944] ? dev_queue_xmit_nit+0x2d/0xcc0 [ 160.825341][ T9944] dev_hard_start_xmit+0x1be/0x830 [ 160.825368][ T9944] __dev_queue_xmit+0x1adf/0x3a70 [ 160.825383][ T9944] ? can_send+0x673/0xd00 [ 160.825396][ T9944] ? __dev_queue_xmit+0x27e/0x3a70 [ 160.825417][ T9944] ? __pfx___dev_queue_xmit+0x10/0x10 [ 160.825437][ T9944] ? __copy_skb_header+0xa7/0x550 [ 160.825448][ T9944] ? __asan_memcpy+0x40/0x70 [ 160.825471][ T9944] ? skb_clone+0x246/0x3a0 [ 160.825481][ T9944] ? can_send+0x655/0xd00 [ 160.825493][ T9944] can_send+0x905/0xd00 [ 160.825508][ T9944] ? __pfx_can_send+0x10/0x10 [ 160.825519][ T9944] ? dev_get_by_index+0x22/0x2e0 [ 160.825536][ T9944] bcm_tx_send+0x406/0x5f0 [ 160.825552][ T9944] ? __pfx_bcm_tx_send+0x10/0x10 [ 160.825571][ T9944] bcm_sendmsg+0x4c8/0x6a0 [ 160.825586][ T9944] ? __pfx_bcm_sendmsg+0x10/0x10 [ 160.825605][ T9944] ? aa_sock_msg_perm+0x94/0x160 [ 160.825618][ T9944] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 160.825630][ T9944] ? __pfx_bcm_sendmsg+0x10/0x10 [ 160.825643][ T9944] __sock_sendmsg+0x21c/0x270 [ 160.825659][ T9944] ____sys_sendmsg+0x505/0x830 [ 160.825673][ T9944] ? __pfx_____sys_sendmsg+0x10/0x10 [ 160.825690][ T9944] ? import_iovec+0x74/0xa0 [ 160.825701][ T9944] ___sys_sendmsg+0x21f/0x2a0 [ 160.825714][ T9944] ? __pfx____sys_sendmsg+0x10/0x10 [ 160.825744][ T9944] ? __fget_files+0x2a/0x420 [ 160.825754][ T9944] ? __fget_files+0x3a0/0x420 [ 160.825770][ T9944] __x64_sys_sendmsg+0x19b/0x260 [ 160.825783][ T9944] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 160.825800][ T9944] ? __pfx_ksys_write+0x10/0x10 [ 160.825807][ T9944] ? rcu_is_watching+0x15/0xb0 [ 160.825824][ T9944] ? do_syscall_64+0xbe/0x3b0 [ 160.825835][ T9944] do_syscall_64+0xfa/0x3b0 [ 160.825843][ T9944] ? lockdep_hardirqs_on+0x9c/0x150 [ 160.825856][ T9944] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.825865][ T9944] ? clear_bhb_loop+0x60/0xb0 [ 160.825877][ T9944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.825887][ T9944] RIP: 0033:0x7f8362b8e929 [ 160.825896][ T9944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.825904][ T9944] RSP: 002b:00007f8363a6a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 160.825915][ T9944] RAX: ffffffffffffffda RBX: 00007f8362db5fa0 RCX: 00007f8362b8e929 [ 160.825922][ T9944] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 160.825928][ T9944] RBP: 00007f8363a6a090 R08: 0000000000000000 R09: 0000000000000000 [ 160.825933][ T9944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.825938][ T9944] R13: 0000000000000000 R14: 00007f8362db5fa0 R15: 00007fff0425d638 [ 160.825953][ T9944] [ 161.358701][ T9948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.369540][ T9948] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 161.379173][ T5847] Bluetooth: hci4: link tx timeout [ 161.390109][ T5847] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 161.399702][ T5847] Bluetooth: hci4: link tx timeout [ 161.405147][ T5847] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 161.798437][ T9976] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255) [ 161.829865][ T9977] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255) [ 162.137192][T10006] __nla_validate_parse: 13 callbacks suppressed [ 162.137209][T10006] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1239'. [ 162.185339][ C1] bridge0: port 3(gretap0) entered learning state [ 162.466631][T10021] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1244'. [ 162.475846][T10021] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1244'. [ 162.492893][T10021] gretap0: left promiscuous mode [ 162.581502][T10032] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1243'. [ 162.644504][T10021] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.665334][T10021] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.761994][T10021] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.784745][T10021] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.793621][T10021] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.803690][T10021] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.873978][T10021] team1: left promiscuous mode [ 162.879292][T10021] team1: left allmulticast mode [ 162.885398][T10021] team2: left promiscuous mode [ 162.890294][T10021] team2: left allmulticast mode [ 162.906357][T10021] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 162.915589][T10021] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 162.925768][T10021] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 162.934690][T10021] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 162.943767][T10021] geneve2: left promiscuous mode [ 162.949231][T10021] geneve2: left allmulticast mode [ 162.991034][T10043] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1250'. [ 163.141621][T10052] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1253'. [ 163.408740][T10065] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 163.464979][T10065] netlink: 'syz.4.1257': attribute type 11 has an invalid length. [ 163.473151][ T5847] Bluetooth: hci4: command 0x0405 tx timeout [ 163.494829][T10065] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1257'. [ 163.817135][T10093] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1266'. [ 163.866050][T10088] openvswitch: netlink: Message has 199 unknown bytes. [ 163.873121][T10088] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 164.089062][T10107] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1268'. [ 164.115285][T10107] openvswitch: netlink: Actions may not be safe on all matching packets [ 164.171733][T10117] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1271'. [ 164.330231][T10127] validate_nla: 4 callbacks suppressed [ 164.330249][T10127] netlink: 'syz.2.1274': attribute type 24 has an invalid length. [ 164.460216][T10137] netlink: 'syz.3.1277': attribute type 13 has an invalid length. [ 164.601902][T10150] openvswitch: netlink: Unknown nsh attribute 0 [ 164.612630][T10150] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 164.907511][T10165] netdevsim netdevsim4 ÿÿÿÿÿÿ: renamed from netdevsim0 [ 165.060827][T10179] IPVS: set_ctl: invalid protocol: 29 0.0.0.0:20002 [ 165.100309][T10186] netlink: 'syz.3.1294': attribute type 3 has an invalid length. [ 165.544738][ T5847] Bluetooth: hci4: command 0x0405 tx timeout [ 165.926372][T10243] IPv6: sit1: Disabled Multicast RS [ 165.933465][T10243] sit1: entered allmulticast mode [ 166.221402][T10265] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 166.273353][T10265] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 166.294857][T10265] gretap1: entered promiscuous mode [ 166.300113][T10265] gretap1: entered allmulticast mode [ 166.428676][T10265] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 166.458674][T10265] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 166.602073][T10297] tc_dump_action: action bad kind [ 167.190166][T10335] netlink: 'syz.2.1340': attribute type 10 has an invalid length. [ 167.198287][T10335] __nla_validate_parse: 19 callbacks suppressed [ 167.198301][T10335] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1340'. [ 167.215949][T10335] tc_dump_action: action bad kind [ 167.235140][T10335] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1340'. [ 167.298524][T10340] netlink: 'syz.3.1342': attribute type 24 has an invalid length. [ 167.561996][T10359] netlink: 'syz.3.1348': attribute type 1 has an invalid length. [ 167.566443][T10362] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1349'. [ 167.636398][T10366] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1350'. [ 167.672705][T10366] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1350'. [ 167.703068][T10367] netlink: 'syz.2.1350': attribute type 12 has an invalid length. [ 167.717429][T10372] netlink: 'syz.3.1351': attribute type 10 has an invalid length. [ 167.728923][T10367] netlink: 'syz.2.1350': attribute type 29 has an invalid length. [ 167.744814][T10367] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1350'. [ 167.770795][T10367] netlink: 51 bytes leftover after parsing attributes in process `syz.2.1350'. [ 167.785643][T10376] netlink: 'syz.3.1351': attribute type 7 has an invalid length. [ 167.795840][T10372] team0: Device ipvlan1 failed to register rx_handler [ 168.298694][T10411] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1366'. [ 168.512151][T10423] team0 (unregistering): Port device team_slave_0 removed [ 168.520501][T10423] team0 (unregistering): Port device team_slave_1 removed [ 168.764042][T10441] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1372'. [ 168.860787][T10445] IPVS: Scheduler module ip_vs_sip not found [ 169.036949][T10458] 8021q: adding VLAN 0 to HW filter on device bond2 [ 169.044295][T10452] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1376'. [ 169.196210][T10460] smc: net device erspan0 applied user defined pnetid SYZ0 [ 169.216994][T10464] batman_adv: batadv0: Removing interface: team0 [ 169.269125][T10464] bridge_slave_0: left allmulticast mode [ 169.304532][T10464] bridge_slave_0: left promiscuous mode [ 169.321546][T10464] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.372589][T10464] bond0: (slave bridge_slave_1): Releasing backup interface [ 169.385390][T10464] bond0: (slave bond_slave_0): Releasing backup interface [ 169.397120][T10464] bond0: (slave bond_slave_1): Releasing backup interface [ 169.410081][T10464] team0: Port device team_slave_0 removed [ 169.432057][T10464] team0: Port device team_slave_1 removed [ 169.439431][T10464] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.447748][T10464] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.462796][T10473] team0: Mode changed to "activebackup" [ 169.480044][T10478] sit0: entered promiscuous mode [ 169.491410][T10478] validate_nla: 2 callbacks suppressed [ 169.491425][T10478] netlink: 'syz.0.1381': attribute type 1 has an invalid length. [ 169.524207][T10486] IPVS: length: 24 != 55320 [ 169.577950][T10489] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.613492][T10500] FAULT_INJECTION: forcing a failure. [ 169.613492][T10500] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.641750][T10500] CPU: 1 UID: 0 PID: 10500 Comm: syz.0.1386 Not tainted 6.16.0-rc3-syzkaller-00144-gbd475eeaaf3c #0 PREEMPT(full) [ 169.641776][T10500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 169.641787][T10500] Call Trace: [ 169.641794][T10500] [ 169.641802][T10500] dump_stack_lvl+0x189/0x250 [ 169.641829][T10500] ? __pfx____ratelimit+0x10/0x10 [ 169.641851][T10500] ? __pfx_dump_stack_lvl+0x10/0x10 [ 169.641872][T10500] ? __pfx__printk+0x10/0x10 [ 169.641887][T10500] ? __might_fault+0xb0/0x130 [ 169.641911][T10500] should_fail_ex+0x414/0x560 [ 169.641934][T10500] _copy_from_user+0x2d/0xb0 [ 169.641949][T10500] __x64_sys_epoll_ctl+0x126/0x1a0 [ 169.641966][T10500] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 169.641978][T10500] ? rcu_is_watching+0x15/0xb0 [ 169.642004][T10500] ? do_syscall_64+0xbe/0x3b0 [ 169.642021][T10500] do_syscall_64+0xfa/0x3b0 [ 169.642032][T10500] ? lockdep_hardirqs_on+0x9c/0x150 [ 169.642052][T10500] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.642066][T10500] ? clear_bhb_loop+0x60/0xb0 [ 169.642084][T10500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.642097][T10500] RIP: 0033:0x7f8362b8e929 [ 169.642111][T10500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.642122][T10500] RSP: 002b:00007f8363a6a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 169.642139][T10500] RAX: ffffffffffffffda RBX: 00007f8362db5fa0 RCX: 00007f8362b8e929 [ 169.642150][T10500] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000006 [ 169.642158][T10500] RBP: 00007f8363a6a090 R08: 0000000000000000 R09: 0000000000000000 [ 169.642167][T10500] R10: 0000200000000600 R11: 0000000000000246 R12: 0000000000000001 [ 169.642175][T10500] R13: 0000000000000000 R14: 00007f8362db5fa0 R15: 00007fff0425d638 [ 169.642200][T10500] [ 169.864768][T10458] tipc: Started in network mode [ 169.869763][T10458] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 169.877702][T10458] tipc: Enabled bearer , priority 0 [ 170.326482][T10537] FAULT_INJECTION: forcing a failure. [ 170.326482][T10537] name failslab, interval 1, probability 0, space 0, times 0 [ 170.379529][T10537] CPU: 0 UID: 0 PID: 10537 Comm: syz.1.1398 Not tainted 6.16.0-rc3-syzkaller-00144-gbd475eeaaf3c #0 PREEMPT(full) [ 170.379564][T10537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 170.379573][T10537] Call Trace: [ 170.379585][T10537] [ 170.379593][T10537] dump_stack_lvl+0x189/0x250 [ 170.379621][T10537] ? __pfx____ratelimit+0x10/0x10 [ 170.379644][T10537] ? __pfx_dump_stack_lvl+0x10/0x10 [ 170.379668][T10537] ? __pfx__printk+0x10/0x10 [ 170.379691][T10537] ? __pfx___might_resched+0x10/0x10 [ 170.379714][T10537] ? fs_reclaim_acquire+0x7d/0x100 [ 170.379738][T10537] should_fail_ex+0x414/0x560 [ 170.379765][T10537] should_failslab+0xa8/0x100 [ 170.379784][T10537] kmem_cache_alloc_noprof+0x73/0x3c0 [ 170.379807][T10537] ? ep_insert+0x272/0x1a00 [ 170.379836][T10537] ep_insert+0x272/0x1a00 [ 170.379864][T10537] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 170.379890][T10537] ? epoll_mutex_lock+0x4d/0x60 [ 170.379916][T10537] ? __pfx_ep_insert+0x10/0x10 [ 170.379963][T10537] do_epoll_ctl+0x7f4/0xe90 [ 170.379996][T10537] __x64_sys_epoll_ctl+0x163/0x1a0 [ 170.380015][T10537] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 170.380030][T10537] ? rcu_is_watching+0x15/0xb0 [ 170.380057][T10537] ? do_syscall_64+0xbe/0x3b0 [ 170.380076][T10537] do_syscall_64+0xfa/0x3b0 [ 170.380088][T10537] ? lockdep_hardirqs_on+0x9c/0x150 [ 170.380110][T10537] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.380126][T10537] ? clear_bhb_loop+0x60/0xb0 [ 170.380146][T10537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.380162][T10537] RIP: 0033:0x7fbd1ab8e929 [ 170.380177][T10537] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.380190][T10537] RSP: 002b:00007fbd1b9c7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 170.380208][T10537] RAX: ffffffffffffffda RBX: 00007fbd1adb5fa0 RCX: 00007fbd1ab8e929 [ 170.380221][T10537] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000006 [ 170.380230][T10537] RBP: 00007fbd1b9c7090 R08: 0000000000000000 R09: 0000000000000000 [ 170.380240][T10537] R10: 0000200000000600 R11: 0000000000000246 R12: 0000000000000001 [ 170.380249][T10537] R13: 0000000000000000 R14: 00007fbd1adb5fa0 R15: 00007ffdd9862938 [ 170.380277][T10537] [ 170.394790][T10539] openvswitch: netlink: Missing key (keys=40, expected=80) [ 170.850598][T10561] netlink: 'syz.1.1406': attribute type 4 has an invalid length. [ 170.996360][ T7338] tipc: Node number set to 11578026 [ 171.171900][T10579] FAULT_INJECTION: forcing a failure. [ 171.171900][T10579] name failslab, interval 1, probability 0, space 0, times 0 [ 171.204785][T10579] CPU: 1 UID: 0 PID: 10579 Comm: syz.4.1414 Not tainted 6.16.0-rc3-syzkaller-00144-gbd475eeaaf3c #0 PREEMPT(full) [ 171.204812][T10579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 171.204821][T10579] Call Trace: [ 171.204829][T10579] [ 171.204836][T10579] dump_stack_lvl+0x189/0x250 [ 171.204865][T10579] ? __pfx____ratelimit+0x10/0x10 [ 171.204889][T10579] ? __pfx_dump_stack_lvl+0x10/0x10 [ 171.204912][T10579] ? __pfx__printk+0x10/0x10 [ 171.204933][T10579] ? __pfx___might_resched+0x10/0x10 [ 171.204958][T10579] ? fs_reclaim_acquire+0x7d/0x100 [ 171.204983][T10579] should_fail_ex+0x414/0x560 [ 171.205009][T10579] should_failslab+0xa8/0x100 [ 171.205029][T10579] kmem_cache_alloc_noprof+0x73/0x3c0 [ 171.205074][T10579] ? ep_ptable_queue_proc+0x5c/0x200 [ 171.205096][T10579] ep_ptable_queue_proc+0x5c/0x200 [ 171.205118][T10579] ? __pfx_ep_ptable_queue_proc+0x10/0x10 [ 171.205138][T10579] __ep_eventpoll_poll+0x14f/0x7c0 [ 171.205163][T10579] ? reverse_path_check_proc+0x208/0x230 [ 171.205180][T10579] ? __pfx___ep_eventpoll_poll+0x10/0x10 [ 171.205202][T10579] ? ep_insert+0xb93/0x1a00 [ 171.205231][T10579] ep_insert+0x1187/0x1a00 [ 171.205269][T10579] ? __pfx_ep_insert+0x10/0x10 [ 171.205301][T10579] ? __pfx_ep_ptable_queue_proc+0x10/0x10 [ 171.205333][T10579] do_epoll_ctl+0x7f4/0xe90 [ 171.205367][T10579] __x64_sys_epoll_ctl+0x163/0x1a0 [ 171.205388][T10579] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 171.205401][T10579] ? rcu_is_watching+0x15/0xb0 [ 171.205429][T10579] ? do_syscall_64+0xbe/0x3b0 [ 171.205457][T10579] do_syscall_64+0xfa/0x3b0 [ 171.205469][T10579] ? lockdep_hardirqs_on+0x9c/0x150 [ 171.205491][T10579] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.205506][T10579] ? clear_bhb_loop+0x60/0xb0 [ 171.205526][T10579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.205541][T10579] RIP: 0033:0x7f682778e929 [ 171.205558][T10579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.205572][T10579] RSP: 002b:00007f68255f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 171.205592][T10579] RAX: ffffffffffffffda RBX: 00007f68279b5fa0 RCX: 00007f682778e929 [ 171.205605][T10579] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000006 [ 171.205614][T10579] RBP: 00007f68255f6090 R08: 0000000000000000 R09: 0000000000000000 [ 171.205625][T10579] R10: 0000200000000600 R11: 0000000000000246 R12: 0000000000000001 [ 171.205635][T10579] R13: 0000000000000000 R14: 00007f68279b5fa0 R15: 00007ffd23a46f78 [ 171.205665][T10579] [ 171.582405][T10586] netlink: 'syz.2.1418': attribute type 5 has an invalid length. [ 171.730534][T10595] bridge_slave_1: left allmulticast mode [ 171.752740][T10595] bridge_slave_1: left promiscuous mode [ 171.758774][T10595] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.790459][T10595] bridge_slave_0: left allmulticast mode [ 171.806602][T10595] bridge_slave_0: left promiscuous mode [ 171.831082][T10595] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.359753][T10633] netlink: 'syz.4.1427': attribute type 21 has an invalid length. [ 172.375493][T10633] __nla_validate_parse: 14 callbacks suppressed [ 172.375509][T10633] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1427'. [ 172.597690][T10645] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.862672][T10665] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1437'. [ 172.874914][T10665] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1437'. [ 172.884201][T10665] netem: invalid attributes len -24 [ 172.889745][T10665] netem: change failed [ 173.096780][T10680] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1444'. [ 173.178253][T10683] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1445'. [ 173.188382][T10683] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1445'. [ 173.381846][T10693] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1449'. [ 173.490436][T10697] netlink: 'syz.1.1452': attribute type 1 has an invalid length. [ 173.573603][T10697] 8021q: adding VLAN 0 to HW filter on device bond5 [ 173.617554][T10706] xt_policy: output policy not valid in PREROUTING and INPUT [ 173.648794][T10704] veth7: entered promiscuous mode [ 173.663668][T10704] bond5: (slave veth7): Enslaving as an active interface with a down link [ 173.691301][T10697] vlan2: entered allmulticast mode [ 173.699893][T10697] bond5: entered allmulticast mode [ 173.719582][T10697] bond5: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 173.753945][T10714] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1457'. [ 173.873006][T10718] netlink: 'syz.4.1458': attribute type 1 has an invalid length. [ 173.882567][T10718] netlink: 228 bytes leftover after parsing attributes in process `syz.4.1458'. [ 173.893915][T10718] netlink: 'syz.4.1458': attribute type 2 has an invalid length. [ 173.955266][T10722] netlink: 'syz.1.1460': attribute type 12 has an invalid length. [ 173.985060][T10722] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1460'. [ 174.091949][T10729] bridge_slave_1: left allmulticast mode [ 174.105587][T10729] gretap1: left promiscuous mode [ 174.110596][T10729] gretap1: left allmulticast mode [ 174.137594][T10729] vlan2: left allmulticast mode [ 174.144469][T10729] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 174.373222][T10751] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 174.550814][T10761] xt_hashlimit: size too large, truncated to 1048576 [ 174.560950][T10761] netlink: 'syz.3.1475': attribute type 33 has an invalid length. [ 174.670343][T10766] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 174.699199][T10766] netlink: 'syz.0.1476': attribute type 12 has an invalid length. [ 175.202030][T10803] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 175.590025][T10820] xt_CT: You must specify a L4 protocol and not use inversions on it [ 175.774101][T10849] netlink: 'syz.3.1507': attribute type 10 has an invalid length. [ 176.362993][T10883] xt_limit: Overflow, try lower: 0/0 [ 176.425176][T10889] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 176.444203][T10889] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 176.495158][T10889] gretap1: entered promiscuous mode [ 176.504813][T10889] gretap1: entered allmulticast mode [ 177.038079][T10932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 177.283221][T10937] bond0 (unregistering): Released all slaves [ 177.300425][T10941] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 177.545811][ C1] bridge0: port 3(gretap0) entered forwarding state [ 177.552474][ C1] bridge0: topology change detected, propagating [ 177.652673][T10975] __nla_validate_parse: 13 callbacks suppressed [ 177.652692][T10975] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1542'. [ 177.710664][T10975] netlink: 'syz.4.1542': attribute type 1 has an invalid length. [ 177.722092][T10975] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1542'. [ 177.818588][T10984] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20003 [ 177.894433][T10982] xt_CT: No such helper "pptp" [ 178.138680][T11016] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1553'. [ 178.440177][T11040] IPVS: set_ctl: invalid protocol: 30 172.20.20.170:20001 [ 178.488079][T11042] openvswitch: netlink: IP tunnel dst address not specified [ 178.518388][T11040] openvswitch: netlink: IP tunnel dst address not specified [ 178.570839][T11050] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1565'. [ 179.168489][T11092] netlink: 'syz.3.1578': attribute type 11 has an invalid length. [ 179.183442][T11092] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1578'. [ 179.207874][T11097] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1577'. [ 179.405372][T11110] netlink: 'syz.3.1582': attribute type 1 has an invalid length. [ 179.576372][T11113] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 179.585791][T11113] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 179.597934][T11113] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 179.606973][T11113] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 179.609074][T11110] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1582'. [ 179.622527][T11113] bond1: (slave geneve3): making interface the new active one [ 179.633605][T11113] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 179.734385][T11110] 8021q: adding VLAN 0 to HW filter on device bond1 [ 180.077459][T11139] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1590'. [ 180.099426][T11143] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1591'. [ 180.216990][T11151] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1594'. [ 181.403368][T11212] netlink: 'syz.3.1612': attribute type 5 has an invalid length. [ 182.203202][T11242] netlink: 'syz.0.1621': attribute type 33 has an invalid length. [ 182.746988][T11267] tipc: Started in network mode [ 182.754722][T11267] tipc: Node identity 4a415105f132, cluster identity 4711 [ 182.762303][T11267] tipc: Enabled bearer , priority 0 [ 182.803305][T11272] netlink: 'syz.1.1631': attribute type 10 has an invalid length. [ 182.839437][T11272] team0: Device ipvlan1 failed to register rx_handler [ 182.872224][T11264] tipc: Resetting bearer [ 183.100845][T11296] __nla_validate_parse: 8 callbacks suppressed [ 183.100863][T11296] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1636'. [ 183.135429][T11296] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 183.192200][T11301] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1634'. [ 183.743276][T11312] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1638'. [ 183.875529][ T7338] tipc: Node number set to 3144896773 [ 184.328493][T11264] tipc: Disabling bearer [ 184.340797][T11296] tipc: Enabled bearer , priority 0 [ 184.353605][T11300] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 184.361236][T11300] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 184.414245][T11309] tipc: Resetting bearer [ 184.635359][T11330] netlink: 'syz.2.1641': attribute type 1 has an invalid length. [ 184.675495][T11330] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 184.857198][T11346] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1646'. [ 184.891532][T11352] netlink: 'syz.2.1647': attribute type 1 has an invalid length. [ 184.916127][T11352] netlink: 'syz.2.1647': attribute type 11 has an invalid length. [ 185.002449][T11350] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 185.053949][T11350] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1649'. [ 185.069263][T11364] netlink: 'syz.0.1650': attribute type 1 has an invalid length. [ 185.087724][T11350] 0ªX¹¦D: renamed from gretap0 [ 185.108430][T11350] 0ªX¹¦D: entered allmulticast mode [ 185.121149][T11350] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 185.608974][T11401] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1662'. [ 185.619146][T11403] netlink: 'syz.3.1663': attribute type 6 has an invalid length. [ 185.874148][T11415] netlink: 'syz.2.1666': attribute type 2 has an invalid length. [ 186.584339][T11460] xt_l2tp: missing protocol rule (udp|l2tpip) [ 186.999042][T11481] netlink: 'syz.3.1685': attribute type 10 has an invalid length. [ 187.094310][T11488] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1685'. [ 187.324432][T11489] smc: net device bond0 applied user defined pnetid SYZ2 [ 187.332291][T11495] smc: net device erspan0 erased user defined pnetid SYZ0 [ 187.360279][T11495] smc: net device bond0 erased user defined pnetid SYZ2 [ 187.633436][T11520] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.649557][T11520] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 187.657805][T11520] batman_adv: batadv0: Removing interface: ipvlan2 [ 187.681954][T11520] bond0: (slave batadv0): Releasing backup interface [ 187.706127][T11514] lo: entered promiscuous mode [ 187.724048][T11514] netlink: 'syz.4.1695': attribute type 2 has an invalid length. [ 187.732143][T11514] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 187.926334][T11542] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1704'. [ 187.955989][T11544] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1705'. [ 187.973641][T11544] macsec0: entered promiscuous mode [ 187.979276][T11544] team0: entered promiscuous mode [ 187.984330][T11544] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:579 [ 187.993697][T11544] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 11544, name: syz.1.1705 [ 188.002881][T11544] preempt_count: 201, expected: 0 [ 188.007975][T11544] RCU nest depth: 0, expected: 0 [ 188.012941][T11544] 3 locks held by syz.1.1705/11544: [ 188.018210][T11544] #0: ffffffff8fa149b8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 188.027832][T11544] #1: ffffffff8f50ff48 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 188.036977][T11544] #2: ffff888057692368 (&macsec_netdev_addr_lock_key#2/2){+...}-{3:3}, at: dev_uc_add+0x67/0x120 [ 188.047760][T11544] Preemption disabled at: [ 188.047775][T11544] [] dev_uc_add+0x56/0x120 [ 188.058181][T11544] CPU: 1 UID: 0 PID: 11544 Comm: syz.1.1705 Not tainted 6.16.0-rc3-syzkaller-00144-gbd475eeaaf3c #0 PREEMPT(full) [ 188.058208][T11544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 188.058220][T11544] Call Trace: [ 188.058228][T11544] [ 188.058236][T11544] dump_stack_lvl+0x189/0x250 [ 188.058278][T11544] ? __pfx_dump_stack_lvl+0x10/0x10 [ 188.058306][T11544] ? __pfx__printk+0x10/0x10 [ 188.058331][T11544] ? print_lock_name+0xde/0x100 [ 188.058350][T11544] ? dev_uc_add+0x56/0x120 [ 188.058377][T11544] __might_resched+0x495/0x610 [ 188.058408][T11544] ? dev_uc_add+0x56/0x120 [ 188.058429][T11544] ? __pfx___might_resched+0x10/0x10 [ 188.058456][T11544] ? is_printk_cpu_sync_owner+0x32/0x40 [ 188.058494][T11544] __mutex_lock+0x106/0xe80 [ 188.058530][T11544] ? team_change_rx_flags+0x38/0x220 [ 188.058560][T11544] ? __pfx___mutex_lock+0x10/0x10 [ 188.058583][T11544] ? netdev_info+0x10a/0x160 [ 188.058604][T11544] ? __sock_sendmsg+0x21c/0x270 [ 188.058633][T11544] ? __pfx_netdev_info+0x10/0x10 [ 188.058666][T11544] team_change_rx_flags+0x38/0x220 [ 188.058697][T11544] ? __pfx_team_change_rx_flags+0x10/0x10 [ 188.058721][T11544] __dev_set_promiscuity+0x531/0x740 [ 188.058744][T11544] ? __pfx_netdev_info+0x10/0x10 [ 188.058770][T11544] netif_set_promiscuity+0x50/0xe0 [ 188.058792][T11544] dev_set_promiscuity+0x126/0x260 [ 188.058813][T11544] ? __pfx_macsec_dev_change_rx_flags+0x10/0x10 [ 188.058839][T11544] __dev_set_promiscuity+0x531/0x740 [ 188.058864][T11544] ? __hw_addr_add_ex+0x3c5/0x770 [ 188.058887][T11544] __dev_set_rx_mode+0x17c/0x260 [ 188.058910][T11544] dev_uc_add+0xc8/0x120 [ 188.058934][T11544] macsec_dev_open+0xd9/0x530 [ 188.058959][T11544] ? ib_device_get_by_netdev+0x46b/0x4d0 [ 188.058983][T11544] ? __pfx_macsec_dev_open+0x10/0x10 [ 188.059010][T11544] ? ib_device_get_by_netdev+0x84/0x4d0 [ 188.059031][T11544] ? hsr_netdev_notify+0x29e/0xcf0 [ 188.059051][T11544] ? __pfx_ib_device_get_by_netdev+0x10/0x10 [ 188.059078][T11544] ? udp_tunnel_nic_netdevice_event+0x1b6/0x1500 [ 188.059105][T11544] ? ip6_route_dev_notify+0x9a/0x5b0 [ 188.059129][T11544] ? notifier_call_chain+0x3bf/0x3e0 [ 188.059164][T11544] __dev_open+0x46d/0x880 [ 188.059189][T11544] ? __pfx___dev_open+0x10/0x10 [ 188.059219][T11544] __dev_change_flags+0x1ea/0x6d0 [ 188.059242][T11544] ? validate_linkmsg+0x765/0x950 [ 188.059268][T11544] ? __pfx___dev_change_flags+0x10/0x10 [ 188.059310][T11544] rtnl_newlink_create+0x555/0xb00 [ 188.059347][T11544] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 188.059366][T11544] ? rtnl_newlink+0x8db/0x1c70 [ 188.059388][T11544] ? __pfx___mutex_lock+0x10/0x10 [ 188.059426][T11544] ? ns_capable+0x8a/0xf0 [ 188.059455][T11544] rtnl_newlink+0x16d6/0x1c70 [ 188.059476][T11544] ? netlink_sendmsg+0x805/0xb30 [ 188.059510][T11544] ? __pfx_rtnl_newlink+0x10/0x10 [ 188.059555][T11544] ? kasan_quarantine_put+0xdd/0x220 [ 188.059580][T11544] ? lockdep_hardirqs_on+0x9c/0x150 [ 188.059612][T11544] ? nlmon_xmit+0xb0/0x100 [ 188.059635][T11544] ? kmem_cache_free+0x18f/0x400 [ 188.059663][T11544] ? __local_bh_enable_ip+0x12d/0x1c0 [ 188.059688][T11544] ? lockdep_hardirqs_on+0x9c/0x150 [ 188.059714][T11544] ? __local_bh_enable_ip+0x12d/0x1c0 [ 188.059739][T11544] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 188.059765][T11544] ? __dev_queue_xmit+0x27e/0x3a70 [ 188.059803][T11544] ? __lock_acquire+0xab9/0xd20 [ 188.059855][T11544] ? __pfx_rtnl_newlink+0x10/0x10 [ 188.059873][T11544] rtnetlink_rcv_msg+0x7cf/0xb70 [ 188.059896][T11544] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 188.059913][T11544] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 188.059929][T11544] ? ref_tracker_free+0x63a/0x7d0 [ 188.059951][T11544] ? __copy_skb_header+0xa7/0x550 [ 188.059975][T11544] ? __pfx_ref_tracker_free+0x10/0x10 [ 188.060010][T11544] netlink_rcv_skb+0x208/0x470 [ 188.060032][T11544] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 188.060053][T11544] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 188.060094][T11544] ? netlink_deliver_tap+0x2e/0x1b0 [ 188.060115][T11544] ? netlink_deliver_tap+0x2e/0x1b0 [ 188.060141][T11544] netlink_unicast+0x75b/0x8d0 [ 188.060172][T11544] netlink_sendmsg+0x805/0xb30 [ 188.060198][T11544] ? __pfx_netlink_sendmsg+0x10/0x10 [ 188.060218][T11544] ? aa_sock_msg_perm+0x94/0x160 [ 188.060239][T11544] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 188.060260][T11544] ? __pfx_netlink_sendmsg+0x10/0x10 [ 188.060292][T11544] __sock_sendmsg+0x21c/0x270 [ 188.060318][T11544] ____sys_sendmsg+0x505/0x830 [ 188.060345][T11544] ? __pfx_____sys_sendmsg+0x10/0x10 [ 188.060377][T11544] ? import_iovec+0x74/0xa0 [ 188.060399][T11544] ___sys_sendmsg+0x21f/0x2a0 [ 188.060423][T11544] ? __pfx____sys_sendmsg+0x10/0x10 [ 188.060486][T11544] ? __fget_files+0x2a/0x420 [ 188.060504][T11544] ? __fget_files+0x3a0/0x420 [ 188.060532][T11544] __x64_sys_sendmsg+0x19b/0x260 [ 188.060557][T11544] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 188.060591][T11544] ? rcu_is_watching+0x15/0xb0 [ 188.060623][T11544] ? do_syscall_64+0xbe/0x3b0 [ 188.060644][T11544] do_syscall_64+0xfa/0x3b0 [ 188.060658][T11544] ? lockdep_hardirqs_on+0x9c/0x150 [ 188.060682][T11544] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.060701][T11544] ? clear_bhb_loop+0x60/0xb0 [ 188.060722][T11544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.060740][T11544] RIP: 0033:0x7fbd1ab8e929 [ 188.060768][T11544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.060784][T11544] RSP: 002b:00007fbd1b9c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 188.060803][T11544] RAX: ffffffffffffffda RBX: 00007fbd1adb5fa0 RCX: 00007fbd1ab8e929 [ 188.060817][T11544] RDX: 0000000000000800 RSI: 0000200000000280 RDI: 0000000000000006 [ 188.060829][T11544] RBP: 00007fbd1ac10b39 R08: 0000000000000000 R09: 0000000000000000 [ 188.060841][T11544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.060852][T11544] R13: 0000000000000000 R14: 00007fbd1adb5fa0 R15: 00007ffdd9862938 [ 188.060884][T11544] [ 188.060901][T11544] [ 188.636694][T11544] ============================= [ 188.641533][T11544] [ BUG: Invalid wait context ] [ 188.646370][T11544] 6.16.0-rc3-syzkaller-00144-gbd475eeaaf3c #0 Tainted: G W [ 188.655039][T11544] ----------------------------- [ 188.659968][T11544] syz.1.1705/11544 is trying to lock: [ 188.665324][T11544] ffff8880349d4e00 (team->team_lock_key#4){+.+.}-{4:4}, at: team_change_rx_flags+0x38/0x220 [ 188.675423][T11544] other info that might help us debug this: [ 188.681301][T11544] context-{5:5} [ 188.684745][T11544] 3 locks held by syz.1.1705/11544: [ 188.689929][T11544] #0: ffffffff8fa149b8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 188.699445][T11544] #1: ffffffff8f50ff48 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 188.708504][T11544] #2: ffff888057692368 (&macsec_netdev_addr_lock_key#2/2){+...}-{3:3}, at: dev_uc_add+0x67/0x120 [ 188.719132][T11544] stack backtrace: [ 188.722853][T11544] CPU: 1 UID: 0 PID: 11544 Comm: syz.1.1705 Tainted: G W 6.16.0-rc3-syzkaller-00144-gbd475eeaaf3c #0 PREEMPT(full) [ 188.722874][T11544] Tainted: [W]=WARN [ 188.722880][T11544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 188.722889][T11544] Call Trace: [ 188.722896][T11544] [ 188.722904][T11544] dump_stack_lvl+0x189/0x250 [ 188.722930][T11544] ? __pfx_dump_stack_lvl+0x10/0x10 [ 188.722951][T11544] ? __pfx__printk+0x10/0x10 [ 188.722968][T11544] ? print_lock_name+0xde/0x100 [ 188.722983][T11544] __lock_acquire+0xbcb/0xd20 [ 188.723005][T11544] ? team_change_rx_flags+0x38/0x220 [ 188.723026][T11544] lock_acquire+0x120/0x360 [ 188.723043][T11544] ? team_change_rx_flags+0x38/0x220 [ 188.723069][T11544] __mutex_lock+0x182/0xe80 [ 188.723090][T11544] ? team_change_rx_flags+0x38/0x220 [ 188.723114][T11544] ? team_change_rx_flags+0x38/0x220 [ 188.723134][T11544] ? __pfx___mutex_lock+0x10/0x10 [ 188.723154][T11544] ? netdev_info+0x10a/0x160 [ 188.723170][T11544] ? __sock_sendmsg+0x21c/0x270 [ 188.723192][T11544] ? __pfx_netdev_info+0x10/0x10 [ 188.723216][T11544] team_change_rx_flags+0x38/0x220 [ 188.723238][T11544] ? __pfx_team_change_rx_flags+0x10/0x10 [ 188.723258][T11544] __dev_set_promiscuity+0x531/0x740 [ 188.723275][T11544] ? __pfx_netdev_info+0x10/0x10 [ 188.723293][T11544] netif_set_promiscuity+0x50/0xe0 [ 188.723309][T11544] dev_set_promiscuity+0x126/0x260 [ 188.723327][T11544] ? __pfx_macsec_dev_change_rx_flags+0x10/0x10 [ 188.723348][T11544] __dev_set_promiscuity+0x531/0x740 [ 188.723365][T11544] ? __hw_addr_add_ex+0x3c5/0x770 [ 188.723382][T11544] __dev_set_rx_mode+0x17c/0x260 [ 188.723399][T11544] dev_uc_add+0xc8/0x120 [ 188.723416][T11544] macsec_dev_open+0xd9/0x530 [ 188.723436][T11544] ? ib_device_get_by_netdev+0x46b/0x4d0 [ 188.723455][T11544] ? __pfx_macsec_dev_open+0x10/0x10 [ 188.723475][T11544] ? ib_device_get_by_netdev+0x84/0x4d0 [ 188.723493][T11544] ? hsr_netdev_notify+0x29e/0xcf0 [ 188.723509][T11544] ? __pfx_ib_device_get_by_netdev+0x10/0x10 [ 188.723529][T11544] ? udp_tunnel_nic_netdevice_event+0x1b6/0x1500 [ 188.723547][T11544] ? ip6_route_dev_notify+0x9a/0x5b0 [ 188.723563][T11544] ? notifier_call_chain+0x3bf/0x3e0 [ 188.723587][T11544] __dev_open+0x46d/0x880 [ 188.723602][T11544] ? __pfx___dev_open+0x10/0x10 [ 188.723619][T11544] __dev_change_flags+0x1ea/0x6d0 [ 188.723635][T11544] ? validate_linkmsg+0x765/0x950 [ 188.723655][T11544] ? __pfx___dev_change_flags+0x10/0x10 [ 188.723675][T11544] rtnl_newlink_create+0x555/0xb00 [ 188.723697][T11544] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 188.723712][T11544] ? rtnl_newlink+0x8db/0x1c70 [ 188.723726][T11544] ? __pfx___mutex_lock+0x10/0x10 [ 188.723750][T11544] ? ns_capable+0x8a/0xf0 [ 188.723772][T11544] rtnl_newlink+0x16d6/0x1c70 [ 188.723786][T11544] ? netlink_sendmsg+0x805/0xb30 [ 188.723807][T11544] ? __pfx_rtnl_newlink+0x10/0x10 [ 188.723829][T11544] ? kasan_quarantine_put+0xdd/0x220 [ 188.723850][T11544] ? lockdep_hardirqs_on+0x9c/0x150 [ 188.723872][T11544] ? nlmon_xmit+0xb0/0x100 [ 188.723891][T11544] ? kmem_cache_free+0x18f/0x400 [ 188.723908][T11544] ? __local_bh_enable_ip+0x12d/0x1c0 [ 188.723928][T11544] ? lockdep_hardirqs_on+0x9c/0x150 [ 188.723947][T11544] ? __local_bh_enable_ip+0x12d/0x1c0 [ 188.723967][T11544] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 188.723988][T11544] ? __dev_queue_xmit+0x27e/0x3a70 [ 188.724012][T11544] ? __lock_acquire+0xab9/0xd20 [ 188.724039][T11544] ? __pfx_rtnl_newlink+0x10/0x10 [ 188.724053][T11544] rtnetlink_rcv_msg+0x7cf/0xb70 [ 188.724067][T11544] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 188.724081][T11544] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 188.724094][T11544] ? ref_tracker_free+0x63a/0x7d0 [ 188.724111][T11544] ? __copy_skb_header+0xa7/0x550 [ 188.724129][T11544] ? __pfx_ref_tracker_free+0x10/0x10 [ 188.724151][T11544] netlink_rcv_skb+0x208/0x470 [ 188.724166][T11544] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 188.724181][T11544] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 188.724201][T11544] ? netlink_deliver_tap+0x2e/0x1b0 [ 188.724220][T11544] ? netlink_deliver_tap+0x2e/0x1b0 [ 188.724237][T11544] netlink_unicast+0x75b/0x8d0 [ 188.724255][T11544] netlink_sendmsg+0x805/0xb30 [ 188.724274][T11544] ? __pfx_netlink_sendmsg+0x10/0x10 [ 188.724291][T11544] ? aa_sock_msg_perm+0x94/0x160 [ 188.724310][T11544] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 188.724328][T11544] ? __pfx_netlink_sendmsg+0x10/0x10 [ 188.724344][T11544] __sock_sendmsg+0x21c/0x270 [ 188.724365][T11544] ____sys_sendmsg+0x505/0x830 [ 188.724384][T11544] ? __pfx_____sys_sendmsg+0x10/0x10 [ 188.724404][T11544] ? import_iovec+0x74/0xa0 [ 188.724419][T11544] ___sys_sendmsg+0x21f/0x2a0 [ 188.724436][T11544] ? __pfx____sys_sendmsg+0x10/0x10 [ 188.724467][T11544] ? __fget_files+0x2a/0x420 [ 188.724482][T11544] ? __fget_files+0x3a0/0x420 [ 188.724500][T11544] __x64_sys_sendmsg+0x19b/0x260 [ 188.724518][T11544] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 188.724539][T11544] ? rcu_is_watching+0x15/0xb0 [ 188.724562][T11544] ? do_syscall_64+0xbe/0x3b0 [ 188.724576][T11544] do_syscall_64+0xfa/0x3b0 [ 188.724588][T11544] ? lockdep_hardirqs_on+0x9c/0x150 [ 188.724608][T11544] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.724622][T11544] ? clear_bhb_loop+0x60/0xb0 [ 188.724638][T11544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.724652][T11544] RIP: 0033:0x7fbd1ab8e929 [ 188.724666][T11544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.724679][T11544] RSP: 002b:00007fbd1b9c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 188.724694][T11544] RAX: ffffffffffffffda RBX: 00007fbd1adb5fa0 RCX: 00007fbd1ab8e929 [ 188.724706][T11544] RDX: 0000000000000800 RSI: 0000200000000280 RDI: 0000000000000006 [ 188.724715][T11544] RBP: 00007fbd1ac10b39 R08: 0000000000000000 R09: 0000000000000000 [ 188.724724][T11544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.724734][T11544] R13: 0000000000000000 R14: 00007fbd1adb5fa0 R15: 00007ffdd9862938 [ 188.724750][T11544] [ 189.310175][T11549] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1704'. [ 196.265343][ T5840] Bluetooth: hci2: command 0x0406 tx timeout [ 196.266010][ T5844] Bluetooth: hci3: command 0x0406 tx timeout [ 196.271388][ T5840] Bluetooth: hci1: command 0x0406 tx timeout