last executing test programs: 5.353026155s ago: executing program 2 (id=6518): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newlink={0x40, 0x10, 0x403, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x88a8faa3, 0x52001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x75793}]}, 0x40}}, 0x440088c4) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x40009, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r2, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f0000000000080022"], 0x54}}, 0x0) ioctl$FIONCLEX(r0, 0x5450) 5.161632357s ago: executing program 2 (id=6522): listen(0xffffffffffffffff, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000000000)={0x50, r4, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}]}, 0x50}}, 0x4040045) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000006c000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000400003802c00038004000100766c616e31000000000000000000000014000100776c616e3100000000000000000000000800014000000000080002"], 0xfc}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="186835b640000000db5f39f5885160100000000000e4a5b10a00000000377d4456206f44fffdfee565000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300015b993dde440113e90005"], 0x14}], 0x1}, 0x0) r7 = socket(0x11, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r7, &(0x7f0000000180)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r7, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0xdd12}], 0x1}, 0x10) r10 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r10, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b8500000007000000850000000700000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='sys_exit\x00', r13, 0x0, 0x100000000}, 0x18) tee(r13, 0xffffffffffffffff, 0x0, 0x4) splice(r11, 0x0, r12, 0x0, 0x10500, 0x0) listen(r12, 0x4) 4.595750971s ago: executing program 2 (id=6533): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x14, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000040)={'pimreg0\x00', {0x2, 0x0, @private}}) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x8, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x2}, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}], 0x2, 0x24000045) shutdown(r3, 0x1) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff, 0x24}, 0xc) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x3c, r6, 0x207, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1041}, 0x4040000) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@gettfilter={0x64, 0x2e, 0x200, 0x70bd27, 0x1, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0x5, 0x9}, {0x8, 0xb}}, [{0x8, 0xb, 0x40}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x71}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xffff}]}, 0x64}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 4.187003488s ago: executing program 2 (id=6539): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x70, 0x0, &(0x7f0000000300)=0xaf00) syz_emit_ethernet(0x46, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60fca33f00103c00fe800000000000000000000000000000fe808f010000000000000000000000aa0000fd00660000003b00040005000180"], 0x0) 4.042199085s ago: executing program 2 (id=6541): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x21018}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x50}}, 0x80) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) getsockopt$IP_SET_OP_GET_FNAME(r1, 0x1, 0x53, &(0x7f0000000240)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000300)=0x2c) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000640), 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000180)=""/8, 0x8}, {&(0x7f00000006c0)=""/140, 0x8c}, {&(0x7f0000001800)=""/4096, 0x1000}, {&(0x7f0000000780)=""/4, 0x4}], 0x4, &(0x7f0000000800)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd0}, 0x40000100) getsockname(r3, 0x0, &(0x7f0000000a80)) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@gettfilter={0x3c, 0x2e, 0x100, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xfff2}, {0x7, 0x2}, {0x7}}, [{0x8, 0xb, 0x993f}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x10001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x810) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="190000000200000008000000f10f000000100400", @ANYRES32, @ANYBLOB='/\b\x00'/20, @ANYRES32=r5, @ANYRES32, @ANYBLOB="020000000000000050af31d5657191a105000000ff0f0000000000008cf0a6d000000000ec000000"], 0x50) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000001280)=@mangle={'mangle\x00', 0x8, 0x6, 0x520, 0x120, 0x0, 0x1f0, 0x1f0, 0x120, 0x510, 0x510, 0x510, 0x510, 0x510, 0x6, 0x0, {[{{@ipv6={@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff000000, 0x0, 0xffffff00, 0xff000000], [0xff, 0xff, 0xff000000, 0xffffffff], 'ipvlan1\x00', 'ipvlan1\x00', {}, {}, 0x0, 0x9, 0x2, 0x2}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x5002}}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty, @ipv4=@private=0xa010100, 0x0, 0x32, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 0xff}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r7) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r7) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r10, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r10, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) setsockopt$inet6_MCAST_MSFILTER(r10, 0x29, 0x30, &(0x7f0000000400)={0x3, {{0xa, 0x4e23, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x1, 0x3, [{{0xa, 0x4e24, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x22}}, {{0xa, 0x4e21, 0x5ac3, @remote, 0x64b}}, {{0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0xe87}}]}, 0x210) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@mpls_getroute={0x1c, 0x1a, 0x9e8a232eead7a86d, 0x0, 0x0, {0x1c, 0x20}}, 0x1c}}, 0x0) sendmmsg(r10, &(0x7f00000092c0), 0x4ff, 0x0) splice(r10, 0x0, r9, 0x0, 0x7ffff000, 0x6) 4.041590255s ago: executing program 0 (id=6542): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, 0x0, 0x44080) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0xe}, @TCA_CAKE_TARGET={0x8, 0x8, 0x3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x7c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r8, {}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x44, 0x2, [@TCA_FLOW_POLICE={0x40, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x7, 0x0, 0x1, 0x5, {0x9, 0x0, 0x401, 0xfffb, 0x8000}, {0x9, 0x0, 0x4, 0x2, 0x66f, 0x5}, 0x6, 0x4, 0x3c2}}]}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0x5}}]}, 0x7c}}, 0x0) 3.612948088s ago: executing program 0 (id=6544): sendmsg$sock(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000300)=@in6={0xa, 0x4e23, 0x41d, @loopback, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[@mark={{0x14, 0x1, 0x51, 0x1}}], 0x18}, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'erspan0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x7800, 0x700, 0x0, 0xe, {{0x19, 0x4, 0x2, 0x0, 0x64, 0x66, 0x0, 0x7, 0x38, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x13, 0x87, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @loopback, @local]}, @timestamp_prespec={0x44, 0x3c, 0xbd, 0x3, 0xa, [{@multicast2, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@local, 0x5}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x1}, {@multicast1, 0x2}, {@rand_addr=0x64010101, 0x3935}, {@multicast2, 0x1}]}]}}}}}) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000140)={r1, 0x1, 0x6, @local}, 0x10) 3.447844799s ago: executing program 0 (id=6546): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) socket$alg(0x26, 0x5, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r1, 0x0, 0x4020) r2 = socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$can_raw(0x1d, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x8, &(0x7f0000000d40)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x20000000, 0xf, 0x10}, [@tail_call], {0x95, 0x0, 0x5}}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f0000000040)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51, 0x0, 0xffffffffffffffff, 0x6}, 0x22) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000000)={0x1d, r4}, 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000000c0), 0xf00) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r7, {0x7, 0x1}, {0xffff}, {0x1}}}, 0x24}}, 0x0) 3.398766045s ago: executing program 4 (id=6548): r0 = socket(0x8, 0x0, 0x8000) ioctl$sock_netrom_SIOCADDRT(r0, 0x6180, 0x0) sendmmsg$inet6(r0, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f00000002c0)=[{0x0}, {&(0x7f00000000c0)="55242684a20874", 0x7}], 0x2}}], 0x1, 0x20088880) sendmsg$key(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x2, 0x9, 0x73, 0x6, 0x1a, 0x0, 0x70bd2d, 0x25dfdbfb, [@sadb_key={0x18, 0x9, 0x5c0, 0x0, "912a4823e27b7174273635c555d964eca070afe7a00e5d6b5204a2ead4e6e1b077417b24d1f077072ed5ab3f6d315b8f3af1adcc9bbd780813d46de793014ea7ad7e8cbc2cefd4ca3baefb61a958162b2a03607b751c3e0e76c969a6a91c00dae26590aa6306ac58ff43fd90fcfbfbf5ea93fa1f5a4beba2ea6cc5d3610bab25948c5497f11880cb2275eec92f2b1e5fdb8193a3ba5cfd842392c15a92a4855c5ca51aa6be475ac7d6903f42f28e7fe7fb07c0809661778e"}]}, 0xd0}}, 0x200c00d0) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000040)=0x1c, 0x80800) recvfrom$inet6(r1, &(0x7f0000000080)=""/222, 0xde, 0x2000, &(0x7f0000000180)={0xa, 0x4e24, 0x80000000, @loopback, 0x2}, 0x1c) socket(0x8, 0x0, 0x8000) (async) ioctl$sock_netrom_SIOCADDRT(r0, 0x6180, 0x0) (async) sendmmsg$inet6(r0, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f00000002c0)=[{0x0}, {&(0x7f00000000c0)="55242684a20874", 0x7}], 0x2}}], 0x1, 0x20088880) (async) sendmsg$key(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x2, 0x9, 0x73, 0x6, 0x1a, 0x0, 0x70bd2d, 0x25dfdbfb, [@sadb_key={0x18, 0x9, 0x5c0, 0x0, "912a4823e27b7174273635c555d964eca070afe7a00e5d6b5204a2ead4e6e1b077417b24d1f077072ed5ab3f6d315b8f3af1adcc9bbd780813d46de793014ea7ad7e8cbc2cefd4ca3baefb61a958162b2a03607b751c3e0e76c969a6a91c00dae26590aa6306ac58ff43fd90fcfbfbf5ea93fa1f5a4beba2ea6cc5d3610bab25948c5497f11880cb2275eec92f2b1e5fdb8193a3ba5cfd842392c15a92a4855c5ca51aa6be475ac7d6903f42f28e7fe7fb07c0809661778e"}]}, 0xd0}}, 0x200c00d0) (async) accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000040)=0x1c, 0x80800) (async) recvfrom$inet6(r1, &(0x7f0000000080)=""/222, 0xde, 0x2000, &(0x7f0000000180)={0xa, 0x4e24, 0x80000000, @loopback, 0x2}, 0x1c) (async) 3.27205423s ago: executing program 4 (id=6549): unshare(0x22020600) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000000)=0x2a49, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) r2 = socket(0x22, 0x2, 0x3) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r3, 0x0, 0x6, &(0x7f0000000040)='\a', 0x1) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r3, &(0x7f0000003180)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000000800), 0x62, 0x12141, 0x0) getsockname$packet(r2, 0x0, 0x0) r4 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0x4e21, @remote}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000080)='@', 0x1}], 0x1, &(0x7f0000000040)=[{0x18, 0x84, 0x0, 'r'}], 0x18}, 0x41) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r4, 0x8982, &(0x7f0000000180)={0x2, 'geneve0\x00', {0x5}, 0x5}) 3.111882164s ago: executing program 4 (id=6552): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000006000000000000000000000902000000040000000000000700000000000000005f"], 0x0, 0x36}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b00)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r0, 0x0, 0x1}, 0x48) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'hsr0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="640000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="ffc30000000000003c0012800c0001006d6163766c616e002c0002800a000900ffffbfffffff00000a000400aaaaaaaaaabb00000600020001000000440003000000000008000500", @ANYRES32=r2], 0x64}}, 0x0) 2.783945891s ago: executing program 0 (id=6556): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000069000010000000004000050018010000696c6c2500000000002020207b1af8ff00000000bfa1000000000000070100fef7ffffffb702000008000000b703000064000000620000001000000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0xfcc, &(0x7f0000001e00)=""/4044, 0x100, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xbd}, 0x94) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func={0x0, 0x0, 0x0, 0x2}]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000600)={r1, 0x2, 0x0}, 0x10) socket$xdp(0x2c, 0x3, 0x0) 2.76210779s ago: executing program 0 (id=6557): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x0, @dev}, @in={0x2, 0x0, @local}, @in={0x2, 0x0, @multicast1}], 0x40) sendto$inet(r0, &(0x7f0000000080)="d301a5305d2c228e0971beb36946c576fa379f", 0x13, 0x0, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r2, 0x890c, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(0x0, r3) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYBLOB, @ANYBLOB="13974be3f869c7c3eb2ffbf8268dd0b8f02a665ae90029afa20297e23c6a82e053054f649443b60b3e47255d4b50884d5c8dbef1d10d63f0ec3f1742b492274a68f7896d863aaae246f10f4d5288d65d68ce046338"], 0x1c}, 0x1, 0x0, 0x0, 0x4008080}, 0x4040) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0xb, 0x2, @vifc_lcl_addr=@loopback, @loopback}, 0x10) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000080)={0x1d, r5}, 0x10) unshare(0x400) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') readv(r7, 0x0, 0x0) r8 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xff}, 0x7}, 0x1c) setsockopt$inet6_buf(r8, 0x29, 0x32, &(0x7f0000000200)="95de66096bcc111518d3640f969ee0f145ae77ab", 0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newtfilter={0x24, 0x11, 0x405, 0x691522eb, 0x800000, {0x0, 0x0, 0x74, r5, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r10, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r10, 0x0) r11 = socket$rds(0x15, 0x5, 0x0) bind$rds(r11, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r11, &(0x7f0000001600)={&(0x7f0000000400)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000340), 0x0, 0x40014}, 0x0) 2.749748272s ago: executing program 4 (id=6558): r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x409, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x31}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x84}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000954a000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000e20000001801000020786c2500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x5, 0xb, &(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRES16, @ANYRES32=0x0, @ANYRES8=r4], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) (async, rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) (async) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000fbfbdf25270000000e0001006e655f64657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) (async, rerun: 64) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000000)={r0, 0x80000001, 0x255, 0xfffffffffffffffe}) (rerun: 64) 2.346167176s ago: executing program 4 (id=6561): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000ed6a00142c00fe8000000000000000000000000000bb20321649fd3b8dff7cb9f8164f25fe80000000000be7282798d872aa31cd0e83fcc4d9b6464a043233f4a9a12ca14bc0b608b4c987792fdc2da702c22c09f06249051bab4d2ddcbea5b550e1f33a3cd76f62f6a464f29028503b28da6f3fa566ff9dd2157a7adc64e2503f3dc718231dcba0c6fddcdbb1def1d22918fb416636089fb161942c3e9f842e072ec0c49ab5b4424ad4ae05517399069f1f46f0c691e6ed73", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) sendmmsg(r0, &(0x7f0000007c00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000014c0)=@l2tp={0x2, 0x0, @multicast1}, 0x80, 0x0}}], 0x2, 0x0) 2.227724205s ago: executing program 4 (id=6563): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @short={0x2, 0x3}}, 0xa) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@newnexthop={0x24, 0x68, 0x1, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x1, 0x0, 0x4}, [@NHA_GROUP={0x4}, @NHA_ID={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000de80)={0x0, 0x0, &(0x7f000000de40)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x20, 0x9, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_SET_EXPRESSIONS={0x4}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x94, 0xe, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x58, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @notrack={{0xc}, @val={0x4}}}]}, {0x4}, {0x38, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @target={{0xb}, @val={0x4}}}, @NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_USERDATA={0xd, 0x6, 0x1, 0x0, "b665b88e1104a9e19e"}, @NFTA_SET_ELEM_USERDATA={0x9, 0x6, 0x1, 0x0, "7175914e1c"}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}}, @NFT_MSG_DELTABLE={0xe8, 0x2, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0xc7, 0x6, "53fdf90585b0060c79335fac683e9329c7f427428c0bfb7be57f6b860562a2d59ec73e123aabe53644f33ed1ca7dd8159a7b16aaa0c48204948e71c31f63ef5a4e01f4dbd5d2c9e3939cda61f02d8bfe29cc5958de91790965b4dda79dc4671012815213dd1e67c9d6ad5627635b7598531853ef882773b027a4707e52b1b49737dff1a4d0d83df43a65f520be39d5b64ca88626a09ba5605ab496b6333ef4428ee8601388a7b5680615229f88b17bb648114bef94a0af4ac2187fe6b77164eca334ae"}]}, @NFT_MSG_NEWCHAIN={0x9c, 0x3, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_DEV={0x14, 0x3, 'vxcan1\x00'}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x34, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_DEV={0x14, 0x3, 'vlan0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_vlan\x00'}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWOBJ={0x18, 0x12, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_DATA={0x4}}, @NFT_MSG_DELOBJ={0x28, 0x14, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x300}, 0x1, 0x0, 0x0, 0x8040}, 0x894) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) (async) r6 = socket$can_j1939(0x1d, 0x2, 0x7) r7 = bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000001540)=ANY=[@ANYBLOB="180300000000002000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70200001400ffb0b5020000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000000700000085000000b7000000"], 0x0, 0x7, 0x1003, &(0x7f0000001e40)=""/4099, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) (async) bind$can_j1939(r6, &(0x7f0000000080)={0x1d, r5, 0x0, {0x0, 0x0, 0x4}}, 0x18) (async) sendmsg$can_j1939(r6, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) (async) close(r6) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r5, {0xa, 0xb}, {0x5, 0xfff3}, {0xfff1, 0xffe0}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) (async) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000010640)={'tunl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x42, 0x0, 0x0, 0x0, 0xf8, 0x0, 0xfc, 0xfe, 0x0, 0x4, 0x0, 0x0, 0x0, 0xff, 0xff, 0x45, [0x0, 0x89ff]}}) 2.194507719s ago: executing program 3 (id=6564): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="480000001000030500dbbb004edbdf2500000001", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000400000100c28000050006"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000025c0)=@delchain={0x1f8, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x1bc, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_CLASSID={0x8, 0x3, {0x0, 0xfff1}}, @TCA_BPF_ACT={0xd4, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_ctinfo={0xa0, 0x1b, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x401}, @TCA_CTINFO_ACT={0x18, 0x3, {0xd, 0x6, 0x3, 0x101, 0x1}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x8, 0x8, 0x5, 0x0, 0x9}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x8}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x400}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xffffffb4}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x3}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x0, 0xe, 0x8, 0x512ce089}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FD={0x8}, @TCA_BPF_ACT={0xc0, 0x1, [@m_ct={0xbc, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x92, 0x6, "a616d32bc9a40ffc05a9cfa844689a40a38f9c9dde823878dadbebac8dfeb6c0573014ab9b67ca56390a49810c141041aa1ce1a4a552f838935a2c6a0c7e50caf726971b4e3a5e4a890a708d5ff8cc5782730d6c40a80692655341d51186010bd7ac039c5590977b6209427e7f3ac341d7c17699720b480343199351638cf1aaa801e3ac2d7f47644169b0fb5df7"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) (async) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), r0) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000b00)={'syztnl1\x00', &(0x7f0000000a80)={'gretap0\x00', 0x0, 0x25b097a271d14cf, 0x80, 0x4e2, 0x6, {{0x9, 0x4, 0x3, 0x14, 0x24, 0x64, 0x0, 0x80, 0x29, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x35}, {[@generic={0x88, 0xb, "f957073cf180b70fba"}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000bc0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x3c, r4, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040000) (async) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26}, 0x20) sendmsg$inet(r6, &(0x7f00000009c0)={&(0x7f0000000180)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000240)="40ec0d34c79bc831efea74918ab6f0311d3517d6815e1ab278042523128d29a422266b1232fac4322f7d2901dafea1648b4b12e367705e31cf1535e8c29b13aa14f1bcba88cd547553b06fca0d3e1cf6baaf5e3111b84fcd3f57e984797aafdb5c97c4132d0a145978a9916984b07ede1cc0fcfca13967451658cf41754c69", 0x7f}, {&(0x7f0000000380)="3a2eb1a7cd65e07c9cc63d7e662cd6e66bb8b632a9c1edaf99863317c36d0049f54844793fc4d4f73988d83775a093381921751159350f5f252bef1a967ded33b9dbdb1cbe12915d37c3b7c9d8026ab649921bda5c012fd9b23449efacd8916fe00cb071a59858d6da9dbfdeecfd26c7e730e860fb474d07fdb3dbf7a7f789c4e1bb92ddd03bc1cc76ebc87a1c512da92a272d358c19954ea1252b884a43b3a4bca5261acc", 0xa5}, {&(0x7f0000000440)="9cca4fbbd994466f16c9def8bfe40d33a3eaa2ee9c421b0840f4b401ece1f1e7ab8b3bb25b71ad558f0fa15d283cd1959098b3f69a46536050cd834d3cfb5a547c462802c0c58b9702f831105c5c1f4933d324a6b7f630dc981bddc9c9106da28f6644fdfb44e984412df40a03c4cf48edc5da810c69511e6e603def38cb642e340c7d7641127ba7150e02e850e98f02f6168f87c7e209731e8827b0e48264400dc66e59330ff2893c89c875119fb926951493a8c2e0bb5491b4809c713c148ab0591064cd322aa921ecb0af3d957c8be272dd3aac6a139aa98652467179212e2862a4a3870fa5", 0xe7}, {&(0x7f0000000540)="946ad0bd67c9d3d3e722f99a612b35972e818118c7e1af5c5d7e3f98d1e8ffa61a335592108ce9c272eb3d72e4c867fdb4ebbd248af44a3ac7a510e95ec890204dea195043b98b52d1eb319b5eba8a57aa6a8f172745261a4ea427b87b6b37d12c9effb4ff7f", 0x66}, {&(0x7f00000005c0)="51a6e2ebf6aa35f2f6428bd9494a0dd1c50b424142c0008b3cfa9826a38a520157a81036a63fcafb497f57743e13fb04f777c619af4f80198cbd77234db2ad862c519ea940bb42181642c992216c7bc60d65e4a2066fbfc28ef6fbda34818212d8f424b52cb7ed3095daf21b56edd293f9d498c7260d47e6295e5eecad11e371d4d2ce7b1ff26666f074118db614baaa52db40a22dbc1e98ac7c81d84659187c3b2175435edc1982527d611a9e8d8a9dbf246451abbd50718b82b1f17a15f94c0a56d108b1f4b017bfcbad69eb29a8a15fe964", 0xd3}], 0x5, &(0x7f0000000740)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x72}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffffffe}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8000000}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6cc}}, @ip_retopts={{0xe4, 0x0, 0x7, {[@rr={0x7, 0x1f, 0xc2, [@loopback, @empty, @multicast2, @dev={0xac, 0x14, 0x14, 0xe}, @rand_addr=0x64010100, @rand_addr=0x64010101, @loopback]}, @rr={0x7, 0xb, 0x87, [@empty, @multicast2]}, @cipso={0x86, 0x24, 0xffffffffffffffff, [{0x2, 0x10, "ec5375726212c5f490227e0495c0"}, {0x0, 0xe, "9e6a9ac5800e1ddea9f75aac"}]}, @timestamp_prespec={0x44, 0x34, 0x9c, 0x3, 0xf, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x10}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@dev={0xac, 0x14, 0x14, 0x3d}, 0xffffffff}, {@broadcast, 0xfffffffa}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xb9}, {@remote, 0x101}]}, @noop, @lsrr={0x83, 0x2b, 0x6c, [@private=0xa010101, @rand_addr=0x64010102, @multicast1, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @private=0xa010101, @private=0xa010101, @private=0xa010101, @local]}, @rr={0x7, 0xb, 0x6, [@multicast2, @remote]}, @lsrr={0x83, 0x1b, 0x9d, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x27}]}]}}}, @ip_retopts={{0x34, 0x0, 0x7, {[@generic={0x94, 0xd, "ddd3e0e12ce396014bab5c"}, @timestamp_prespec={0x44, 0x14, 0xb9, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x24}, 0xec}, {@loopback, 0x3ff}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_retopts={{0xd0, 0x0, 0x7, {[@timestamp_addr={0x44, 0x3c, 0x79, 0x1, 0x0, [{@remote, 0xa}, {@dev={0xac, 0x14, 0x14, 0x19}, 0x4}, {@broadcast, 0x3}, {@private=0xa010101, 0x8}, {@local, 0x9}, {@multicast2, 0x8}, {@multicast1, 0xfffff000}]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x2c, 0x72, 0x1, 0x6, [{@multicast2}, {@broadcast, 0x1}, {@multicast2, 0xffffffff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@multicast2, 0x9}]}, @generic={0x86, 0x9, "1a0f71d227b43b"}, @timestamp_prespec={0x44, 0x44, 0xc3, 0x3, 0x8, [{@private=0xa010101, 0x8b88}, {@private=0xa010101, 0x10000}, {@local, 0x7}, {@remote, 0x5}, {@loopback, 0x76}, {@local, 0x7ff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@private=0xa010100, 0x6}]}]}}}], 0x268}, 0x0) syz_emit_ethernet(0x102, &(0x7f0000000080)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "f84ec0", 0x4, 0x2f, 0x0, @ipv4, @local, {[@srh={0x3a, 0x10, 0x4, 0x8, 0x0, 0x0, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, @remote, @remote, @dev, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, @private1]}]}}}}}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0x9, &(0x7f0000000080)=0x2, 0x4) (async) r8 = socket$netlink(0x10, 0x3, 0x4) write(r8, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x30, &(0x7f00000001c0), 0x10}, 0x71) 2.063804215s ago: executing program 3 (id=6565): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'hsr0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffe, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0x16}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "09000000000000208f29d158039b90627d7b60f0d5ca47f33eed46409b7c8722ce020df6b24c2e6ac7b97dc04d01be2092874115214b1ebb764511f69cd1e9f6263346363d2c639c76000067af25166c2f0f85f36aa8867406119c010400002e31dea98204000000d560eae59ea49ef95d73202a6e3b5e1eb38244e694e7410d33bc92794ad27031f2a19698b5142ddf36e2a876a4fc871207bf12a84f1d4d132f5bb7edcf2d08d677e6a7268e106b6ced3c7f53df24092ddb9e0fac6a1153c3fc88bfd1404fef22cf3e825a6e19c6a48a5444eabb459ac3ec9a278df4011773d2f2e6529ed0ad424b47ec67522477f979360b76d1008000"}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x7, 0x81, 0xc, 0xb, 0x14, 0x5}}]}}]}, 0x148}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, r3, 0x800, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0xd584, 0x9, 0x2, 0x2}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000805}, 0x1) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000080)='io.pressure\x00', 0x2, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x20, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x3, 0xff}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) 1.928018437s ago: executing program 1 (id=6566): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="3800000010000108fdffffff11581ceb8c8e58fd", @ANYRES32=0x0, @ANYBLOB="000000002104020008001b000000000010001a80080002800400018004002d"], 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) 1.886046674s ago: executing program 3 (id=6567): socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) (async) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) syz_emit_ethernet(0xa3, &(0x7f0000000040)={@multicast, @empty, @void, {@llc_tr={0x11, {@llc={0x7e, 0x80, "3819", "822212fcd36d50692440e7a9e5a24800444b69451d529e848fdf73395699be0f876c563df242e295f838eb8c28f6712f9b24f39b9c68f73cfd12dad0dc09e040644a6c9d1ce04618dc58e27b13877c67f046cf7625be4ece9da1d3e8447a8c7464afbff43d49d6749bcc3545134153c705b8253c5e90f5efc4f1c94ce2b5c2439e2409361591a6e74f4e39dea317eca3f4"}}}}}, 0x0) socket$netlink(0x10, 0x3, 0xc) (async) r1 = socket$netlink(0x10, 0x3, 0xc) syz_genetlink_get_family_id$gtp(&(0x7f0000000100), r1) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000000140)={0x370, 0x8, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) r2 = socket$l2tp6(0xa, 0x2, 0x73) syz_genetlink_get_family_id$ipvs(&(0x7f0000005440), r1) (async) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000005440), r1) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000005540)={&(0x7f0000005400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000005500)={&(0x7f0000005480)={0x78, r3, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5c97e0cd}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffcf}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000000}, 0x20044400) (async) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000005540)={&(0x7f0000005400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000005500)={&(0x7f0000005480)={0x78, r3, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5c97e0cd}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffcf}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000000}, 0x20044400) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000055c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000005600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000005700)={&(0x7f0000005580)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000056c0)={&(0x7f0000005640)={0x50, r4, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x23, 0x13, [{0x4}, {0x76, 0x1}, {0x1d}, {0x1}, {}, {0xc, 0x1}, {0xb}, {0x6}, {0x1b, 0x1}, {0xb}, {0xc}, {}, {0x30}, {0xc, 0x1}, {0x3}, {0x1d, 0x1}, {0xc, 0x1}, {0x1}, {0x6c, 0x1}, {0x36, 0x1}, {0x9}, {0x3}, {0x48, 0x1}, {0x6}, {0x1}, {0xc, 0x1}, {0x0, 0x1}, {0x48, 0x1}, {0x30}, {0x16}, {0x24}]}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x8, 0xbd, [0x4, 0x10]}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x7ff}]}, 0x50}}, 0x2004c054) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000005800)={&(0x7f0000005740)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000057c0)={&(0x7f0000005780)={0x1c, r4, 0x4, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000058c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000005840), &(0x7f0000005880)}, 0x20) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000005900)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xe3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x3}, 0x50) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000005c00)={'sit0\x00', &(0x7f0000005b80)={'syztnl1\x00', 0x0, 0x1, 0x7, 0x8000, 0x34, {{0x13, 0x4, 0x0, 0x1, 0x4c, 0x68, 0x0, 0x2, 0x4, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x12}, {[@ssrr={0x89, 0x1f, 0x2b, [@empty, @empty, @broadcast, @private=0xa010102, @multicast1, @remote, @dev={0xac, 0x14, 0x14, 0x26}]}, @generic={0x88, 0x12, "157ad264e9a040133f38d1c958149f61"}, @ra={0x94, 0x4, 0x1}]}}}}}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000005cc0)={0x3, 0x0}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000005f80)={0x6, 0x24, &(0x7f0000005d00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1aa9, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @map_val={0x18, 0x8, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @generic={0x8, 0x3, 0x4, 0x8, 0x400}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffd}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000005e40)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000005e80)={0x0, 0x9}, 0x8, 0x10, &(0x7f0000005ec0)={0x3, 0xb, 0x2}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000005f00)=[0x1, 0x1], &(0x7f0000005f40)=[{0x1, 0x4, 0x9, 0x5}, {0x1, 0x4, 0x2, 0x4}], 0x10, 0xb947}, 0x94) (async) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000005f80)={0x6, 0x24, &(0x7f0000005d00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1aa9, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @map_val={0x18, 0x8, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @generic={0x8, 0x3, 0x4, 0x8, 0x400}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffd}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000005e40)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000005e80)={0x0, 0x9}, 0x8, 0x10, &(0x7f0000005ec0)={0x3, 0xb, 0x2}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000005f00)=[0x1, 0x1], &(0x7f0000005f40)=[{0x1, 0x4, 0x9, 0x5}, {0x1, 0x4, 0x2, 0x4}], 0x10, 0xb947}, 0x94) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000006040)=@base={0x1d, 0xfff, 0x8, 0x1aa2, 0x10001, 0x1, 0x2, '\x00', 0x0, r2, 0x4, 0x1}, 0x50) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000060c0)={0x1b, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x2c, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x5}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000006140)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x963, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x4}, 0x50) (async) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000006140)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x963, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000006240)={0x20, 0x24, &(0x7f0000005980)=@raw=[@map_idx_val={0x18, 0x9, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x2}, @exit, @cb_func={0x18, 0xc}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x3}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}], &(0x7f0000005ac0)='GPL\x00', 0x3, 0x7d, &(0x7f0000005b00)=""/125, 0x41000, 0x4b, '\x00', r8, @fallback=0x9, 0xffffffffffffffff, 0x8, &(0x7f0000005c40)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000005c80)={0x2, 0x10, 0xfffffffa, 0x1}, 0x10, r9, r10, 0x2, &(0x7f00000061c0)=[0x1, r11, r12, r1, r13, 0xffffffffffffffff], &(0x7f0000006200)=[{0x0, 0x2, 0x5, 0x8}, {0x1, 0x2, 0x5, 0x8}], 0x10, 0xfffff286}, 0x94) ioctl$sock_netdev_private(r2, 0x89f3, &(0x7f0000006300)="6971cfc1abf067a06d417eeb3ada40e87f4fb8ab4407a5901173bbc0d6c910d0bfd95763f7") ioctl$FS_IOC_READ_VERITY_METADATA(r12, 0xc0286687, &(0x7f0000006440)={0x2, 0x1000000000, 0xf6, &(0x7f0000006340)=""/246}) (async) ioctl$FS_IOC_READ_VERITY_METADATA(r12, 0xc0286687, &(0x7f0000006440)={0x2, 0x1000000000, 0xf6, &(0x7f0000006340)=""/246}) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000006480), 0x20000, 0x0) write$tun(r14, &(0x7f00000064c0)={@val={0x0, 0x8100}, @val={0x2, 0x80, 0x4, 0x7a, 0x66, 0xfff}, @x25={0x2, 0x2, 0xf1, "979258e3f1cbcc9b69f3db5d48c146db0b327a9970c8f726ee4dcda10fe76beb8d9f24e355f62038b8f5a309e419bd2b565b9be92d226130c0a14ff08dd0b9dd634ef8ef960a8222211b6ff42922a285b8a6d246f582374d245fa69f41c65ea5350bb1b3ae7f0cd0"}}, 0x79) syz_genetlink_get_family_id$ethtool(&(0x7f0000006580), r1) (async) r15 = syz_genetlink_get_family_id$ethtool(&(0x7f0000006580), r1) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r10, &(0x7f0000006640)={&(0x7f0000006540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000006600)={&(0x7f00000065c0)={0x1c, r15, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000001) r16 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000006800)={&(0x7f0000006680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x57, 0x57, 0xb, [@datasec={0x1, 0x6, 0x0, 0xf, 0x3, [{0x4, 0x40, 0x75}, {0x4, 0xd8, 0x8}, {0xee, 0x7, 0x9}, {0x5, 0xb1, 0xf11}, {0x3, 0x5, 0x7}, {0x4, 0x7, 0x5}], "398b7a"}]}, {0x0, [0x2e, 0x0, 0x2e, 0x5f, 0x61, 0x2e, 0x0, 0x2e, 0x5f]}}, &(0x7f0000006700)=""/220, 0x7b, 0xdc, 0x1, 0x6, 0x10000}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000006840)={0x1b, 0x0, 0x0, 0x9, 0x0, r12, 0x3, '\x00', r8, r16, 0x2, 0x1}, 0x50) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000006840)={0x1b, 0x0, 0x0, 0x9, 0x0, r12, 0x3, '\x00', r8, r16, 0x2, 0x1}, 0x50) 1.760749729s ago: executing program 0 (id=6568): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3577], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000180)={@private=0xa010102, @multicast2, 0x0, "941621a61c5815f4678d8fd403f2f30229a88d74d71fd55708016d20fd419884", 0x0, 0x1}, 0x3c) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000067b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000800)=ANY=[@ANYBLOB="140100002e00010000000000fcdbdf2503"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="84010000", @ANYRES16=r6, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b800800090000fffe00080009000000000008000a000000000008000a00000002"], 0x184}}, 0x0) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x1, 0x0) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)=ANY=[@ANYBLOB="880000000314010000000000000000000900020073795a3100000000080041007278650014003300627269646765300000000000000000000900020073797a300000000008004100736977001400330076657468305f746f5f7465616d0000000900020073797a30000000000800410072786500140033006c6f00"/136], 0x88}}, 0x20000000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2033}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) bind$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x30b, 0x5, 0x8, 0x7, 0x2e, @broadcast}, 0x10) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x20) 1.575454801s ago: executing program 1 (id=6569): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x240000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000084}, 0x84) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1, 0x3032, r0, 0xffffc000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f0000000000)=0x7, 0x4) setsockopt$inet6_int(r1, 0x29, 0x42, &(0x7f0000000040)=0xf2b, 0x4) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000001500)=""/17, &(0x7f0000000080)=0x11) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000611150000000000006004000000000009500000000000000df99e95e1bd912b66d4bcdcb9cb8666a203cc6d587f44583213c5e55e8abc6a2d3365d8789886b64194a8dea2978377653c014c3fa19"], &(0x7f0000000080)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 1.527110397s ago: executing program 3 (id=6570): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r1}, 0x50) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0xe, r2, 0x4}, 0x38) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}, 0x1, 0x0, 0x0, 0x24000090}, 0x0) 1.172268312s ago: executing program 3 (id=6571): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000008080040000a80000020000000f95067786331ac8c9d859777ffb22673abfee7a5aafe2aff955c1534ec4788d7060000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6d}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe80, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 824.003909ms ago: executing program 1 (id=6572): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c, 0x0, 0x0, 0x101}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r0, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000001380)}}, 0x10) 823.468353ms ago: executing program 3 (id=6573): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00'], 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000002000010000000000000000000a100000000000000000000008001000f5ffffff08000a0000000000"], 0x2c}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={r3, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(r4, 0x1, 0x10, &(0x7f0000000740)=0x76d5, 0x4) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000240), &(0x7f0000000280)=0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000ec0), r4) 811.777615ms ago: executing program 2 (id=6574): socket$packet(0x11, 0x3, 0x300) syz_80211_inject_frame(0x0, &(0x7f0000000b40)=@mgmt_frame=@probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x3}, @device_b, @broadcast, @from_mac, {0x5, 0x3}}, 0xffffffff, @default, 0x8, @val={0x0, 0x11, @random="e5641960bb7391fd31cb424dc6ec7d9e4e"}, @val, @void, @void, @void, @void, @void, @void, [{0xdd, 0x82, "ede61ff4067136502e31270c60b5fd362333c946a75c045c449cbb275ac14088cd01395489260083926b7aa2e4fe845bc6263229585ac56fc2ab1c4f07b7282b64709eca43788a198ad51ae1a5f87ff16307f3aab0f9dbca4b22cd7f9bf62d8eb87adaea0ac02b392db116eda5e9a983f6c0c3666467bffde71ff59ce8d93bb88745"}, {0xdd, 0x6, "1fcaba0eb115"}, {0xdd, 0x6, "6da4d4dab7d2"}, {0xdd, 0x16, "c5fa696c2f83867121e6fb4dfed42b451c58f592cef7"}, {0xdd, 0xc7, "e7606aa393b429ba77e6548f49099ce1c98ec69c265eaab00f35cb4f85ffcee618e7c755c7cd8c3e8395647acbbb4e4edf07f55cc2ada98d0e087f41889a1dd09c5f575ba66ad82058f729e3928079a7a5011a9b545f7298b00ff012f41ef03fa23f1f9ba4aa5bc3c151203e224d51f1d6bd05a99c1b8f57cd9fcd2c6d29a168c3945976b8c564257a9a50ee42766ee02f191af3647e54fceb06fb26565272fb6afb0fec43e42c2b95134c50675481de0db79831c62daad294792fa56f65297b30d52916dc1ac1"}, {0xdd, 0x43, "28f2d76563d60c24843b8a128a0f38f21e3dc97b53aaf262dafa53b263af06141fa122d8a08de0b8c35d1db15a5da1f2463f5567e85f7ea224609d005e7ddef787487f"}, {0xdd, 0x16, "8fb09f942f8682dc0b50dda4062527fb8275c2446ae4"}, {0xdd, 0x59, "234feafef0735a9533f875942c227fcd396b164d9598ea98268b5667c6cef369d8047b462941099ac17fbae9eeddd8751bf547292161440a3ebb3b33d963225e04d727467b2fd5bf7791f1195046fb4b213c7d87b21b1f50ea"}]}, 0x266) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r4, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000600)=ANY=[], 0x8) recvmmsg(r4, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=""/19, 0x13}, 0xe0000003}], 0x1, 0x102, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r7 = accept4$tipc(r5, &(0x7f0000000180), &(0x7f0000000240)=0x10, 0x80800) getsockopt$IP_VS_SO_GET_TIMEOUT(r7, 0x0, 0x486, &(0x7f0000000340), &(0x7f00000003c0)=0xc) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610428000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) 610.03913ms ago: executing program 1 (id=6575): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r1, 0x4) getsockname$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000140)=0x10) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0f0000003021000000000000", @ANYRES32=r1, @ANYBLOB, @ANYRES64=0x0], 0x20) 390.062263ms ago: executing program 1 (id=6576): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r1 = socket$inet6(0xa, 0x2, 0x0) (rerun: 32) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x89}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) (async, rerun: 64) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}, 0x9}, 0x1c) (async, rerun: 64) close(r1) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ba000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005600000095"], &(0x7f0000000140)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES16=r1, @ANYRES16=r2], 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x68000090) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='net_prio.prioidx\x00', 0x7a05, 0x1700) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x2, 0x10010, 0xffffffffffffffff, 0x6b5c6000) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) (async) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCDELRT(r5, 0x890c, &(0x7f0000000080)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xfb, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @null]}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f00000001c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff620500000000070058000b480400945f640094272d7061d328b91f0000000000008000f0fffeffe809000000ffd9dd00000010000100000808004149004006040800", 0x58}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='tlb_flush\x00', r6, 0x0, 0x9}, 0x18) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c000000020605000a0005b38290f90e9ab40000100003006269746d61703a706f72740005000400000000000900020073797a30000000000500050003000000050001000600000014000780060004400004000006000540"], 0x5c}}, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000005c0)={'syztnl0\x00', &(0x7f00000003c0)={'gre0\x00', 0x0, 0x1, 0x10, 0x101, 0x3, {{0x2e, 0x4, 0x0, 0x35, 0xb8, 0x64, 0x0, 0x40, 0x4, 0x0, @broadcast, @multicast2, {[@cipso={0x86, 0x34, 0x2, [{0x0, 0x2}, {0x6, 0x11, "305ba125062b6965197c47b2bf0d38"}, {0x5, 0x11, "b38f103d8fe65e057c65bb710644d5"}, {0x6, 0xa, "4b444e2f5ea2bfda"}]}, @timestamp_addr={0x44, 0x44, 0x61, 0x1, 0x7, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x10}, {@multicast2, 0xffffff6d}, {@loopback, 0xffffffff}, {@rand_addr=0x64010102, 0x1}, {@multicast2, 0x5}, {@broadcast, 0x6}, {@local, 0x8}, {@remote, 0x3}]}, @end, @timestamp={0x44, 0xc, 0x93, 0x0, 0x7, [0xd, 0x2]}, @noop, @rr={0x7, 0xf, 0xff, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @empty]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x8, 0x71, 0x0, 0x4, [0x554]}]}}}}}) (rerun: 64) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c0000006c0020002bbd7000ffdbdf50d0c63e5b6338b24ab0e6ac052dc72500000000", @ANYRES32=r10, @ANYBLOB="80000400204000000a000200ffffffffffff0000080020000900008008001c00", @ANYRES32=r3, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) (async, rerun: 64) r11 = socket(0x10, 0x803, 0x0) (rerun: 64) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r12, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) (async) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}, 0x1, 0x0, 0x0, 0x84}, 0x40000) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001d00)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) (async) poll(&(0x7f00000002c0)=[{r6, 0x12}, {r5, 0xba}, {r5}], 0x3, 0x7ae6) 0s ago: executing program 1 (id=6577): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000650000000600000085100000010000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x3}, 0x94) r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x2c, 0x0, 0x802e2e, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x401}}) kernel console output (not intermixed with test programs): 512kB 0*1024kB 0*2048kB 0*4096kB = 28kB [ 648.533339][T26733] Node 1 Normal: 70*4kB (UE) 53*8kB (UME) 46*16kB (UME) 133*32kB (UME) 25*64kB (UME) 10*128kB (UME) 4*256kB (UME) 3*512kB (UM) 2*1024kB (ME) 1*2048kB (E) 948*4096kB (M) = 3898240kB [ 648.552669][T26733] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 648.563156][T26733] Node 0 hugepages_total=3 hugepages_free=0 hugepages_surp=1 hugepages_size=2048kB [ 648.573547][T26733] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 648.584482][T26733] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 648.595108][T26733] 43318 total pagecache pages [ 648.599893][T26733] 0 pages in swap cache [ 648.609844][T26733] Free swap = 124996kB [ 648.616624][T26733] Total swap = 124996kB [ 648.627220][T26733] 2097051 pages RAM [ 648.631583][T26733] 0 pages HighMem/MovableOnly [ 648.636515][T26733] 424872 pages reserved [ 648.645706][T26733] 0 pages cma reserved [ 648.665354][T26752] vti1: entered promiscuous mode [ 648.670600][T26752] vti1: entered allmulticast mode [ 648.729301][T26701] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 648.754432][T26701] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 648.878122][T26701] team0: Port device team_slave_0 added [ 648.894600][T26701] team0: Port device team_slave_1 added [ 648.901227][ T5848] Bluetooth: hci3: command tx timeout [ 648.909266][T26763] nbd: must specify at least one socket [ 649.041669][T26701] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 649.049810][T26701] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 649.090461][T26701] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 649.104319][T26782] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5602'. [ 649.107956][T26701] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 649.128018][T26701] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 649.139887][T26771] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5600'. [ 649.170545][T26780] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5600'. [ 649.180464][T26701] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 649.203153][T26784] macsec2: entered promiscuous mode [ 649.208499][T26784] mac80211_hwsim hwsim62 wlan0: entered promiscuous mode [ 649.215969][T26784] macsec2: entered allmulticast mode [ 649.222096][T26784] mac80211_hwsim hwsim62 wlan0: entered allmulticast mode [ 649.382821][T26797] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5608'. [ 649.472054][T26701] hsr_slave_0: entered promiscuous mode [ 649.486989][T26701] hsr_slave_1: entered promiscuous mode [ 650.317892][T26701] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 650.344349][T26701] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 650.377241][T26830] syz.2.5616 uses old SIOCAX25GETINFO [ 650.380584][T26701] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 650.469314][T26831] lo speed is unknown, defaulting to 1000 [ 650.486034][T26701] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 650.522022][T26701] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 650.547994][T26701] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 650.651573][T26701] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 650.664047][T26701] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 650.670464][T26836] netlink: 'syz.2.5617': attribute type 13 has an invalid length. [ 650.674297][T26701] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 650.814700][T26701] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 650.834324][T26701] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 650.844967][T26701] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 650.981106][ T5848] Bluetooth: hci3: command tx timeout [ 651.361788][T26869] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5625'. [ 651.428993][T26701] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 651.438013][T26868] netlink: 'syz.2.5624': attribute type 1 has an invalid length. [ 651.457690][T26868] netlink: 244 bytes leftover after parsing attributes in process `syz.2.5624'. [ 651.477996][T26701] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 651.572613][T26701] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 651.602855][T26701] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 651.835977][T26701] 8021q: adding VLAN 0 to HW filter on device bond0 [ 651.886904][T26701] 8021q: adding VLAN 0 to HW filter on device team0 [ 651.923947][T24518] bridge0: port 1(bridge_slave_0) entered blocking state [ 651.931362][T24518] bridge0: port 1(bridge_slave_0) entered forwarding state [ 651.970678][T24518] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.977907][T24518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 652.030307][T26901] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 652.067483][T26901] syzkaller1: entered promiscuous mode [ 652.075517][T26901] syzkaller1: entered allmulticast mode [ 652.339270][T26914] netlink: 'syz.4.5636': attribute type 1 has an invalid length. [ 652.475470][T26924] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 652.544683][T26926] tipc: Resetting bearer [ 652.555116][T26926] netlink: 'syz.0.5635': attribute type 11 has an invalid length. [ 652.665959][T26701] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 652.676683][T26929] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5637'. [ 652.826191][T26701] veth0_vlan: entered promiscuous mode [ 652.876424][T26701] veth1_vlan: entered promiscuous mode [ 652.985554][T26701] veth0_macvtap: entered promiscuous mode [ 653.013495][T26941] netlink: 180 bytes leftover after parsing attributes in process `syz.4.5643'. [ 653.028175][T26701] veth1_macvtap: entered promiscuous mode [ 653.055073][T26946] netlink: 356 bytes leftover after parsing attributes in process `syz.2.5644'. [ 653.071163][ T5848] Bluetooth: hci3: command tx timeout [ 653.088079][T26701] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 653.108955][T26701] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 653.145555][T24521] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.187838][T24521] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.246961][T24521] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.272791][T24521] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.511255][T26965] syzkaller1: entered promiscuous mode [ 653.516896][T26965] syzkaller1: entered allmulticast mode [ 653.536061][T26973] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 653.548798][T26967] 8021q: VLANs not supported on sit0 [ 653.558851][T24518] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 653.581395][T24518] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 653.703877][T24529] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 653.753368][T26981] netlink: 'syz.2.5653': attribute type 4 has an invalid length. [ 653.781527][T24529] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 653.789529][T26986] sctp: [Deprecated]: syz.0.5651 (pid 26986) Use of int in max_burst socket option deprecated. [ 653.789529][T26986] Use struct sctp_assoc_value instead [ 653.818162][T26984] netlink: 'syz.2.5653': attribute type 4 has an invalid length. [ 653.843399][T26989] netlink: 'syz.2.5653': attribute type 4 has an invalid length. [ 653.872126][T26994] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5654'. [ 654.173304][T27005] FAULT_INJECTION: forcing a failure. [ 654.173304][T27005] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 654.187675][T27005] CPU: 0 UID: 0 PID: 27005 Comm: syz.0.5658 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 654.187702][T27005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 654.187713][T27005] Call Trace: [ 654.187719][T27005] [ 654.187728][T27005] dump_stack_lvl+0x189/0x250 [ 654.187748][T27005] ? __pfx____ratelimit+0x10/0x10 [ 654.187771][T27005] ? __pfx_dump_stack_lvl+0x10/0x10 [ 654.187788][T27005] ? __pfx__printk+0x10/0x10 [ 654.187808][T27005] ? __might_fault+0xb0/0x130 [ 654.187841][T27005] should_fail_ex+0x414/0x560 [ 654.187869][T27005] _copy_from_iter+0x1db/0x16f0 [ 654.187893][T27005] ? rcu_is_watching+0x15/0xb0 [ 654.187917][T27005] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 654.187944][T27005] ? __pfx__copy_from_iter+0x10/0x10 [ 654.187965][T27005] ? __build_skb_around+0x257/0x3e0 [ 654.187993][T27005] ? netlink_sendmsg+0x642/0xb30 [ 654.188013][T27005] ? skb_put+0x11b/0x210 [ 654.188031][T27005] netlink_sendmsg+0x6b2/0xb30 [ 654.188062][T27005] ? __pfx_netlink_sendmsg+0x10/0x10 [ 654.188098][T27005] ? aa_sock_msg_perm+0x94/0x160 [ 654.188121][T27005] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 654.188140][T27005] ? __pfx_netlink_sendmsg+0x10/0x10 [ 654.188163][T27005] __sock_sendmsg+0x219/0x270 [ 654.188188][T27005] ____sys_sendmsg+0x505/0x830 [ 654.188211][T27005] ? __pfx_____sys_sendmsg+0x10/0x10 [ 654.188237][T27005] ? import_iovec+0x74/0xa0 [ 654.188261][T27005] ___sys_sendmsg+0x21f/0x2a0 [ 654.188281][T27005] ? __pfx____sys_sendmsg+0x10/0x10 [ 654.188334][T27005] ? __fget_files+0x2a/0x420 [ 654.188350][T27005] ? __fget_files+0x3a0/0x420 [ 654.188377][T27005] __x64_sys_sendmsg+0x19b/0x260 [ 654.188398][T27005] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 654.188425][T27005] ? __pfx_ksys_write+0x10/0x10 [ 654.188446][T27005] ? rcu_is_watching+0x15/0xb0 [ 654.188474][T27005] ? do_syscall_64+0xbe/0x3b0 [ 654.188502][T27005] do_syscall_64+0xfa/0x3b0 [ 654.188523][T27005] ? lockdep_hardirqs_on+0x9c/0x150 [ 654.188545][T27005] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.188562][T27005] ? clear_bhb_loop+0x60/0xb0 [ 654.188582][T27005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.188598][T27005] RIP: 0033:0x7f2c2e98eb69 [ 654.188615][T27005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 654.188630][T27005] RSP: 002b:00007f2c2f739038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 654.188650][T27005] RAX: ffffffffffffffda RBX: 00007f2c2ebb5fa0 RCX: 00007f2c2e98eb69 [ 654.188664][T27005] RDX: 0000000000000000 RSI: 00002000000018c0 RDI: 000000000000000b [ 654.188675][T27005] RBP: 00007f2c2f739090 R08: 0000000000000000 R09: 0000000000000000 [ 654.188686][T27005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 654.188696][T27005] R13: 0000000000000000 R14: 00007f2c2ebb5fa0 R15: 00007ffd10c66188 [ 654.188726][T27005] [ 654.213156][T27004] lo speed is unknown, defaulting to 1000 [ 654.675554][T27024] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 655.036928][T27045] tipc: Enabling of bearer rejected, already enabled [ 655.142629][ T51] Bluetooth: hci3: command tx timeout [ 655.195703][T27052] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5667'. [ 655.516988][T27071] mac80211_hwsim hwsim63 wlan0: entered promiscuous mode [ 655.528538][T27071] macsec1: entered promiscuous mode [ 655.534259][T27071] macsec1: entered allmulticast mode [ 655.539568][T27071] mac80211_hwsim hwsim63 wlan0: entered allmulticast mode [ 655.551204][T27063] smc: net device bond0 applied user defined pnetid SYZ2 [ 655.639963][T27076] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5676'. [ 655.739867][T27084] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 655.866906][T27090] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5679'. [ 656.046316][T27097] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5681'. [ 656.421633][T27121] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5689'. [ 656.682257][T27131] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5693'. [ 656.848052][T27145] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 657.114288][T27155] IPVS: stopping backup sync thread 27157 ... [ 657.117952][T27157] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0 [ 657.216058][T27162] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 657.227487][T27162] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 657.248243][T27167] netem: change failed [ 657.340490][T27172] netlink: 'syz.2.5703': attribute type 4 has an invalid length. [ 657.457348][T27177] FAULT_INJECTION: forcing a failure. [ 657.457348][T27177] name failslab, interval 1, probability 0, space 0, times 0 [ 657.486832][T27177] CPU: 0 UID: 0 PID: 27177 Comm: syz.1.5705 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 657.486861][T27177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 657.486873][T27177] Call Trace: [ 657.486881][T27177] [ 657.486889][T27177] dump_stack_lvl+0x189/0x250 [ 657.486913][T27177] ? __pfx____ratelimit+0x10/0x10 [ 657.486937][T27177] ? __pfx_dump_stack_lvl+0x10/0x10 [ 657.486955][T27177] ? __pfx__printk+0x10/0x10 [ 657.486983][T27177] ? __pfx___might_resched+0x10/0x10 [ 657.487013][T27177] should_fail_ex+0x414/0x560 [ 657.487044][T27177] should_failslab+0xa8/0x100 [ 657.487064][T27177] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 657.487088][T27177] ? __nla_parse+0x40/0x60 [ 657.487104][T27177] ? __alloc_skb+0x112/0x2d0 [ 657.487134][T27177] __alloc_skb+0x112/0x2d0 [ 657.487163][T27177] rtnl_fdb_get+0x918/0xc70 [ 657.487179][T27177] ? __dev_queue_xmit+0x27b/0x3b50 [ 657.487197][T27177] ? __dev_queue_xmit+0x27b/0x3b50 [ 657.487224][T27177] ? __pfx_rtnl_fdb_get+0x10/0x10 [ 657.487272][T27177] ? __pfx_rtnl_fdb_get+0x10/0x10 [ 657.487287][T27177] rtnetlink_rcv_msg+0x779/0xb70 [ 657.487316][T27177] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 657.487339][T27177] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 657.487360][T27177] ? ref_tracker_free+0x63a/0x7d0 [ 657.487380][T27177] ? __asan_memcpy+0x40/0x70 [ 657.487401][T27177] ? __pfx_ref_tracker_free+0x10/0x10 [ 657.487431][T27177] netlink_rcv_skb+0x205/0x470 [ 657.487457][T27177] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 657.487483][T27177] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 657.487518][T27177] ? netlink_deliver_tap+0x2e/0x1b0 [ 657.487551][T27177] netlink_unicast+0x82c/0x9e0 [ 657.487584][T27177] ? __pfx_netlink_unicast+0x10/0x10 [ 657.487608][T27177] ? netlink_sendmsg+0x642/0xb30 [ 657.487630][T27177] ? skb_put+0x11b/0x210 [ 657.487650][T27177] netlink_sendmsg+0x805/0xb30 [ 657.487684][T27177] ? __pfx_netlink_sendmsg+0x10/0x10 [ 657.487712][T27177] ? aa_sock_msg_perm+0x94/0x160 [ 657.487750][T27177] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 657.487773][T27177] ? __pfx_netlink_sendmsg+0x10/0x10 [ 657.487798][T27177] __sock_sendmsg+0x219/0x270 [ 657.487824][T27177] ____sys_sendmsg+0x505/0x830 [ 657.487850][T27177] ? __pfx_____sys_sendmsg+0x10/0x10 [ 657.487879][T27177] ? import_iovec+0x74/0xa0 [ 657.487906][T27177] ___sys_sendmsg+0x21f/0x2a0 [ 657.487928][T27177] ? __pfx____sys_sendmsg+0x10/0x10 [ 657.487987][T27177] ? __fget_files+0x2a/0x420 [ 657.488003][T27177] ? __fget_files+0x3a0/0x420 [ 657.488033][T27177] __x64_sys_sendmsg+0x19b/0x260 [ 657.488054][T27177] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 657.488083][T27177] ? __pfx_ksys_write+0x10/0x10 [ 657.488104][T27177] ? rcu_is_watching+0x15/0xb0 [ 657.488134][T27177] ? do_syscall_64+0xbe/0x3b0 [ 657.488162][T27177] do_syscall_64+0xfa/0x3b0 [ 657.488184][T27177] ? lockdep_hardirqs_on+0x9c/0x150 [ 657.488206][T27177] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.488223][T27177] ? clear_bhb_loop+0x60/0xb0 [ 657.488245][T27177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.488262][T27177] RIP: 0033:0x7f3bd418eb69 [ 657.488278][T27177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 657.488294][T27177] RSP: 002b:00007f3bd4f23038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 657.488315][T27177] RAX: ffffffffffffffda RBX: 00007f3bd43b5fa0 RCX: 00007f3bd418eb69 [ 657.488328][T27177] RDX: 0000000000000000 RSI: 00002000000018c0 RDI: 000000000000000b [ 657.488340][T27177] RBP: 00007f3bd4f23090 R08: 0000000000000000 R09: 0000000000000000 [ 657.488351][T27177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 657.488362][T27177] R13: 0000000000000000 R14: 00007f3bd43b5fa0 R15: 00007ffccced5ad8 [ 657.488393][T27177] [ 657.518876][T27182] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551612) [ 657.884829][T27182] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 657.965009][T27190] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 658.149298][T27201] Bluetooth: MGMT ver 1.23 [ 658.194338][T27207] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0) [ 658.252017][T27207] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535 [ 658.427809][T27217] lo speed is unknown, defaulting to 1000 [ 658.524266][T27226] __nla_validate_parse: 3 callbacks suppressed [ 658.524284][T27226] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5718'. [ 658.890295][T27244] lo speed is unknown, defaulting to 1000 [ 659.347271][T27267] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5724'. [ 659.488175][T27256] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5723'. [ 659.637262][T27278] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 659.901801][T27290] Bluetooth: MGMT ver 1.23 [ 660.028479][T27302] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5735'. [ 660.099702][T27301] veth7: entered promiscuous mode [ 660.173443][T27302] erspan0: entered allmulticast mode [ 660.290518][T27312] tun0: tun_chr_ioctl cmd 1074025675 [ 660.309841][T27312] tun0: persist enabled [ 660.341310][T27312] tun0: tun_chr_ioctl cmd 1074025675 [ 660.355980][T27312] tun0: persist disabled [ 660.360569][T27322] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 660.414894][T27319] lo speed is unknown, defaulting to 1000 [ 661.047086][T27352] tipc: Started in network mode [ 661.059950][T27352] tipc: Node identity 0a7b7ec73adb, cluster identity 4711 [ 661.083592][T27352] tipc: Enabled bearer , priority 0 [ 661.100201][T27353] syzkaller0: entered promiscuous mode [ 661.113839][T27353] syzkaller0: entered allmulticast mode [ 661.490918][ T24] IPVS: starting estimator thread 0... [ 661.511754][T27354] tipc: Resetting bearer [ 661.543957][T27350] tipc: Resetting bearer [ 661.582006][T27358] IPVS: using max 30 ests per chain, 72000 per kthread [ 661.596816][T27350] tipc: Disabling bearer [ 661.645697][T27368] sctp: [Deprecated]: syz.3.5753 (pid 27368) Use of int in max_burst socket option. [ 661.645697][T27368] Use struct sctp_assoc_value instead [ 661.779247][T27375] sch_tbf: burst 19869 is lower than device lo mtu (11337746) ! [ 661.900422][T27380] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5756'. [ 661.935492][T27380] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5756'. [ 661.986819][T27383] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 662.060452][T27387] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5757'. [ 662.105982][T27387] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5757'. [ 662.150187][T27387] ip6gretap0: entered promiscuous mode [ 662.194233][T27387] syz_tun: entered promiscuous mode [ 662.446274][T27402] tipc: Enabled bearer , priority 10 [ 662.980558][T27417] netlink: 'syz.4.5770': attribute type 12 has an invalid length. [ 663.151587][T27424] netlink: 'syz.4.5770': attribute type 11 has an invalid length. [ 663.181287][T27424] netlink: 140 bytes leftover after parsing attributes in process `syz.4.5770'. [ 663.250236][ T5848] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 663.264300][ T5848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 663.274177][ T5848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 663.284303][ T5848] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 663.292704][ T5848] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 663.389569][T27439] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5773'. [ 663.561011][ T6829] tipc: Node number set to 2058166867 [ 663.873181][T27428] lo speed is unknown, defaulting to 1000 [ 663.922159][T27460] __nla_validate_parse: 1 callbacks suppressed [ 663.922179][T27460] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5779'. [ 664.710493][T27493] lo speed is unknown, defaulting to 1000 [ 664.740427][T27428] chnl_net:caif_netlink_parms(): no params data found [ 664.962635][T27505] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 665.041368][T27509] netlink: 'syz.3.5793': attribute type 1 has an invalid length. [ 665.088716][T27512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5792'. [ 665.246740][T27428] bridge0: port 1(bridge_slave_0) entered blocking state [ 665.254806][T27428] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.263137][T27428] bridge_slave_0: entered allmulticast mode [ 665.273040][T27428] bridge_slave_0: entered promiscuous mode [ 665.377379][T27428] bridge0: port 2(bridge_slave_1) entered blocking state [ 665.390527][ T5848] Bluetooth: hci4: command tx timeout [ 665.420831][T27428] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.429196][T27428] bridge_slave_1: entered allmulticast mode [ 665.443567][T27428] bridge_slave_1: entered promiscuous mode [ 665.552769][T27428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 665.584375][T27428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 665.729866][T27541] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5799'. [ 665.895731][T27428] team0: Port device team_slave_0 added [ 665.922453][T27428] team0: Port device team_slave_1 added [ 665.945116][T27540] lo speed is unknown, defaulting to 1000 [ 666.068198][T27428] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 666.085340][T27428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 666.125024][T27428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 666.143310][T27556] tipc: New replicast peer: 255.255.255.83 [ 666.149424][T27556] tipc: Enabled bearer , priority 10 [ 666.158865][T27428] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 666.166989][T27428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 666.195096][T27428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 666.490020][T27428] hsr_slave_0: entered promiscuous mode [ 666.500088][T27428] hsr_slave_1: entered promiscuous mode [ 666.513599][T27428] debugfs: 'hsr0' already exists in 'hsr' [ 666.519537][T27428] Cannot create hsr debugfs directory [ 666.649209][T27579] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5808'. [ 666.713822][ T30] audit: type=1800 audit(1754026803.464:14): pid=27577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5807" name="memory.events" dev="tmpfs" ino=201 res=0 errno=0 [ 666.783433][ T30] audit: type=1804 audit(1754026803.464:15): pid=27577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.5807" name="/newroot/35/memory.events" dev="tmpfs" ino=201 res=1 errno=0 [ 666.964585][T27587] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5811'. [ 667.046439][T27590] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5811'. [ 667.084451][T27589] vxcan1: entered allmulticast mode [ 667.095724][T27592] netlink: 'syz.1.5813': attribute type 10 has an invalid length. [ 667.169897][T27594] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5813'. [ 667.201030][T27595] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5813'. [ 667.262547][ T5849] tipc: Node number set to 815824583 [ 667.471409][ T5848] Bluetooth: hci4: command tx timeout [ 667.525644][T27428] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 667.604081][T27608] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5818'. [ 667.668005][T27611] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5819'. [ 667.760473][T27428] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 667.797063][T27428] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 667.840536][T27428] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 668.126356][T27428] 8021q: adding VLAN 0 to HW filter on device bond0 [ 668.165214][T27428] 8021q: adding VLAN 0 to HW filter on device team0 [ 668.221390][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.228583][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 668.233650][T27644] netlink: 'syz.3.5828': attribute type 5 has an invalid length. [ 668.275701][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.283012][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 668.307801][T27649] netlink: 'syz.4.5829': attribute type 1 has an invalid length. [ 668.833185][T27663] bond0: entered promiscuous mode [ 668.846749][T27663] bond_slave_0: entered promiscuous mode [ 668.855276][T27663] bond_slave_1: entered promiscuous mode [ 669.042863][T27679] __nla_validate_parse: 5 callbacks suppressed [ 669.042880][T27679] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5838'. [ 669.075504][T27676] pimreg: entered allmulticast mode [ 669.099887][T27676] pimreg: left allmulticast mode [ 669.177694][T27684] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5840'. [ 669.195522][T27682] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5839'. [ 669.218217][T27428] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 669.296035][T27684] erspan0: left allmulticast mode [ 669.541530][ T51] Bluetooth: hci4: command tx timeout [ 669.568938][T27684] bridge0: port 1(dummy0) entered disabled state [ 669.636574][T27684] tipc: Resetting bearer [ 669.660950][T27684] bridge_slave_0: left allmulticast mode [ 669.667276][T27684] vlan0: left promiscuous mode [ 669.674990][T27684] macvlan0: left promiscuous mode [ 669.696052][T27684] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 669.741898][T27684] vlan2: left promiscuous mode [ 669.746914][T27684] bond0: left promiscuous mode [ 669.752157][T27684] vlan2: left allmulticast mode [ 669.757325][T27684] bond0: left allmulticast mode [ 669.762674][T27684] geneve2: left promiscuous mode [ 669.767791][T27684] geneve2: left allmulticast mode [ 669.773529][T27684] sit2: left allmulticast mode [ 669.778612][T27684] bond3: left promiscuous mode [ 669.790454][T27684] bond4: left promiscuous mode [ 669.796979][T27684] bond5: left promiscuous mode [ 669.837948][T27684] bond6: left promiscuous mode [ 669.848412][T27684] bond6: left allmulticast mode [ 669.859309][T27684] hsr0: left allmulticast mode [ 669.873707][T27684] hsr_slave_0: left allmulticast mode [ 669.879254][T27684] hsr0: left promiscuous mode [ 669.889524][T27684] macvlan2: left promiscuous mode [ 669.903206][T27684] macvlan2: left allmulticast mode [ 669.955262][ T1209] lo speed is unknown, defaulting to 1000 [ 669.968476][ T1209] syz2: Port: 1 Link DOWN [ 670.137478][T27428] veth0_vlan: entered promiscuous mode [ 670.168873][T27428] veth1_vlan: entered promiscuous mode [ 670.322033][T27428] veth0_macvtap: entered promiscuous mode [ 670.361484][T27428] veth1_macvtap: entered promiscuous mode [ 670.414627][T27428] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 670.440360][T27711] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 670.464850][T27713] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5850'. [ 670.507857][T27428] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 670.536745][T24521] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.673504][T24521] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.686209][T24521] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 670.728598][T27719] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5852'. [ 670.739028][T24521] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.139425][T24521] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 671.183668][T24521] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 671.363738][T27729] vti0: entered promiscuous mode [ 671.383988][T27729] vti0: entered allmulticast mode [ 671.441477][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 671.449513][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 671.542787][T27733] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5856'. [ 671.621893][ T51] Bluetooth: hci4: command 0x0419 tx timeout [ 671.979089][T27750] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 671.991569][T27750] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 672.406220][T27778] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5864'. [ 672.407478][T27779] FAULT_INJECTION: forcing a failure. [ 672.407478][T27779] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 672.451643][T27779] CPU: 1 UID: 0 PID: 27779 Comm: syz.3.5866 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 672.451672][T27779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 672.451683][T27779] Call Trace: [ 672.451692][T27779] [ 672.451701][T27779] dump_stack_lvl+0x189/0x250 [ 672.451725][T27779] ? __pfx____ratelimit+0x10/0x10 [ 672.451747][T27779] ? __pfx_dump_stack_lvl+0x10/0x10 [ 672.451764][T27779] ? __pfx__printk+0x10/0x10 [ 672.451785][T27779] ? __might_fault+0xb0/0x130 [ 672.451820][T27779] should_fail_ex+0x414/0x560 [ 672.451850][T27779] _copy_from_user+0x2d/0xb0 [ 672.451872][T27779] ___sys_sendmsg+0x158/0x2a0 [ 672.451890][T27779] ? __pfx____sys_sendmsg+0x10/0x10 [ 672.451941][T27779] ? __fget_files+0x2a/0x420 [ 672.451958][T27779] ? __fget_files+0x3a0/0x420 [ 672.451983][T27779] __x64_sys_sendmsg+0x19b/0x260 [ 672.452003][T27779] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 672.452029][T27779] ? __pfx_ksys_write+0x10/0x10 [ 672.452050][T27779] ? rcu_is_watching+0x15/0xb0 [ 672.452077][T27779] ? do_syscall_64+0xbe/0x3b0 [ 672.452106][T27779] do_syscall_64+0xfa/0x3b0 [ 672.452126][T27779] ? lockdep_hardirqs_on+0x9c/0x150 [ 672.452147][T27779] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.452162][T27779] ? clear_bhb_loop+0x60/0xb0 [ 672.452183][T27779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.452212][T27779] RIP: 0033:0x7f991d18eb69 [ 672.452226][T27779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 672.452241][T27779] RSP: 002b:00007f991dfa8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 672.452261][T27779] RAX: ffffffffffffffda RBX: 00007f991d3b5fa0 RCX: 00007f991d18eb69 [ 672.452274][T27779] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 672.452286][T27779] RBP: 00007f991dfa8090 R08: 0000000000000000 R09: 0000000000000000 [ 672.452296][T27779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 672.452307][T27779] R13: 0000000000000000 R14: 00007f991d3b5fa0 R15: 00007ffe2d624308 [ 672.452331][T27779] [ 672.696649][T27781] netlink: 'syz.1.5867': attribute type 83 has an invalid length. [ 672.806201][T27786] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5868'. [ 672.815852][T27786] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5868'. [ 673.303224][T27806] lo speed is unknown, defaulting to 1000 [ 673.712787][ T5848] Bluetooth: hci4: command 0x0419 tx timeout [ 673.901246][T27825] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5881'. [ 673.938085][T27808] 8021q: VLANs not supported on ip6_vti0 [ 673.963687][T27825] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 674.074825][T27835] sctp: [Deprecated]: syz.0.5883 (pid 27835) Use of int in maxseg socket option. [ 674.074825][T27835] Use struct sctp_assoc_value instead [ 674.250602][T27842] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5884'. [ 674.312976][T27842] siw: device registration error -23 [ 674.739433][T27859] syzkaller1: entered promiscuous mode [ 674.783869][T27861] openvswitch: netlink: Multiple metadata blocks provided [ 674.799936][T27859] syzkaller1: entered allmulticast mode [ 675.279205][T27869] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5893'. [ 675.343161][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 675.366346][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 675.383330][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 675.392436][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 675.400477][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 675.491791][T27873] netlink: 244 bytes leftover after parsing attributes in process `syz.1.5894'. [ 675.620311][T27870] lo speed is unknown, defaulting to 1000 [ 676.338852][T24518] tipc: Resetting bearer [ 676.452096][T27920] sctp: [Deprecated]: syz.4.5905 (pid 27920) Use of int in maxseg socket option. [ 676.452096][T27920] Use struct sctp_assoc_value instead [ 676.594463][T27927] netlink: 'syz.4.5907': attribute type 2 has an invalid length. [ 676.783457][T24518] tipc: Disabling bearer [ 677.098006][T24518] tipc: Disabling bearer [ 677.468332][ T51] Bluetooth: hci0: command tx timeout [ 677.525751][T24518] bond0 (unregistering): Released all slaves [ 677.698226][T24518] bond1 (unregistering): Released all slaves [ 677.868512][T24518] bond2 (unregistering): Released all slaves [ 677.883045][T24518] bond3 (unregistering): Released all slaves [ 678.076591][T24518] bond4 (unregistering): Released all slaves [ 678.239390][T24518] bond5 (unregistering): Released all slaves [ 678.251463][T27915] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 678.264848][T27915] bond0: (slave lo): Error: Device can not be enslaved while up [ 678.307554][T27870] chnl_net:caif_netlink_parms(): no params data found [ 678.525372][T27939] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5910'. [ 678.547868][T24518] : left promiscuous mode [ 678.717816][T24518] tipc: Disabling bearer [ 678.729432][T24518] tipc: Left network mode [ 679.024226][T27870] bridge0: port 1(bridge_slave_0) entered blocking state [ 679.046187][T27870] bridge0: port 1(bridge_slave_0) entered disabled state [ 679.060550][T27961] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5914'. [ 679.098486][T27870] bridge_slave_0: entered allmulticast mode [ 679.138820][T27870] bridge_slave_0: entered promiscuous mode [ 679.224293][T27870] bridge0: port 2(bridge_slave_1) entered blocking state [ 679.252764][T27870] bridge0: port 2(bridge_slave_1) entered disabled state [ 679.264623][T27870] bridge_slave_1: entered allmulticast mode [ 679.289018][T27870] bridge_slave_1: entered promiscuous mode [ 679.346312][T27940] lo speed is unknown, defaulting to 1000 [ 679.542636][ T51] Bluetooth: hci0: command tx timeout [ 679.717631][T27870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 679.766779][T27870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 680.103515][T24518] hsr_slave_0: left promiscuous mode [ 680.121778][T24518] hsr_slave_1: left promiscuous mode [ 680.824655][T27997] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5924'. [ 680.857310][T27997] netlink: 'syz.4.5924': attribute type 1 has an invalid length. [ 681.632674][ T51] Bluetooth: hci0: command tx timeout [ 681.883542][T27870] team0: Port device team_slave_0 added [ 681.905730][T27870] team0: Port device team_slave_1 added [ 682.124086][T28007] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5926'. [ 682.132500][T27870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 682.142763][T28007] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5926'. [ 682.152000][T27870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 682.187689][T27870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 682.213604][T27870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 682.224177][T27870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 682.256614][T27870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 682.592781][T27870] hsr_slave_0: entered promiscuous mode [ 682.600256][T27870] hsr_slave_1: entered promiscuous mode [ 682.620059][T27870] debugfs: 'hsr0' already exists in 'hsr' [ 682.630681][T27870] Cannot create hsr debugfs directory [ 682.903869][T28022] tipc: Enabled bearer , priority 0 [ 682.944733][T28022] syzkaller0: entered promiscuous mode [ 682.950528][T28022] syzkaller0: entered allmulticast mode [ 683.076679][T28034] netlink: 'syz.2.5935': attribute type 20 has an invalid length. [ 683.078658][T28029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5934'. [ 683.094539][T28019] tipc: Resetting bearer [ 683.132676][T28038] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5934'. [ 683.144976][T28039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5935'. [ 683.165161][T28019] tipc: Disabling bearer [ 683.319545][T28043] netlink: 'syz.3.5938': attribute type 21 has an invalid length. [ 683.328545][T28043] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5938'. [ 683.335095][T28041] netlink: 'syz.4.5937': attribute type 1 has an invalid length. [ 683.357559][T28043] netlink: 'syz.3.5938': attribute type 11 has an invalid length. [ 683.366321][T28041] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5937'. [ 683.379057][T28043] netlink: 149476 bytes leftover after parsing attributes in process `syz.3.5938'. [ 683.419201][T28048] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5937'. [ 683.492452][T28051] netlink: 'syz.1.5940': attribute type 13 has an invalid length. [ 683.523360][T28051] netlink: 'syz.1.5940': attribute type 17 has an invalid length. [ 683.622785][T28053] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 683.711423][ T51] Bluetooth: hci0: command tx timeout [ 683.720083][T28051] bond0: left promiscuous mode [ 683.736080][T28051] bond_slave_0: left promiscuous mode [ 683.746416][T28051] bond_slave_1: left promiscuous mode [ 683.767079][T28051] 8021q: adding VLAN 0 to HW filter on device bond0 [ 683.807711][T28051] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 683.861549][T28063] 8021q: VLANs not supported on ipvlan1 [ 684.088279][T28047] lo speed is unknown, defaulting to 1000 [ 684.539089][T28099] IPv6: Can't replace route, no match found [ 684.711510][T28093] syzkaller1: entered promiscuous mode [ 684.729922][T28093] syzkaller1: entered allmulticast mode [ 685.026069][T28109] openvswitch: netlink: Key 9 has unexpected len 2 expected 4 [ 685.044698][T27870] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 685.101516][T27870] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 685.141797][T27870] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 685.186465][T28113] 8021q: VLANs not supported on gre0 [ 685.194225][T27870] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 685.677657][T27870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 685.747049][T27870] 8021q: adding VLAN 0 to HW filter on device team0 [ 685.795780][T28144] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 685.851080][T28141] lo speed is unknown, defaulting to 1000 [ 685.858999][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.866214][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 685.950224][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.957511][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 686.153049][T27870] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 686.167620][T28151] __nla_validate_parse: 6 callbacks suppressed [ 686.167638][T28151] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5962'. [ 686.201288][T27870] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 686.291888][T28153] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5963'. [ 686.913194][T27870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 687.140182][T28181] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5968'. [ 687.163643][T28175] lo speed is unknown, defaulting to 1000 [ 687.215586][T28187] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5967'. [ 687.273999][T28180] vlan2: entered allmulticast mode [ 687.279388][T28180] bond1: entered allmulticast mode [ 687.353902][T27870] veth0_vlan: entered promiscuous mode [ 687.393954][T28190] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5970'. [ 687.448349][T27870] veth1_vlan: entered promiscuous mode [ 687.471869][T28194] netlink: 'syz.4.5970': attribute type 10 has an invalid length. [ 687.497711][T28194] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5970'. [ 687.537728][T28194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 687.563638][T28196] netlink: 186440 bytes leftover after parsing attributes in process `syz.1.5971'. [ 687.571350][T28190] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5970'. [ 687.575351][T28194] bridge0: port 2(batadv0) entered blocking state [ 687.602643][T28194] bridge0: port 2(batadv0) entered disabled state [ 687.612181][T28190] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5970'. [ 687.625639][T28194] bridge0: port 2(batadv0) entered blocking state [ 687.632302][T28194] bridge0: port 2(batadv0) entered forwarding state [ 687.673037][T28190] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5970'. [ 687.864547][T27870] veth0_macvtap: entered promiscuous mode [ 687.920331][T27870] veth1_macvtap: entered promiscuous mode [ 688.063435][T27870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 688.112048][ T1145] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 688.122411][ T1145] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 688.158718][T27870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 688.229866][T28217] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 688.328693][T28216] lo speed is unknown, defaulting to 1000 [ 688.352577][T24521] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.368789][T24521] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.524748][ T9522] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.659925][T28239] netlink: 'syz.3.5981': attribute type 1 has an invalid length. [ 688.670593][T24521] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.929149][T28236] lo speed is unknown, defaulting to 1000 [ 689.042428][T24523] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 689.070837][T24523] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 689.198391][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 689.222905][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 689.890120][T28276] lo speed is unknown, defaulting to 1000 [ 690.600929][ T30] audit: type=1804 audit(1754026827.344:16): pid=28299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.5992" name="/newroot/2/x000000000000000400000000000000000000004" dev="tmpfs" ino=29 res=1 errno=0 [ 690.637832][ T30] audit: type=1800 audit(1754026827.354:17): pid=28299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5992" name="x000000000000000400000000000000000000004" dev="tmpfs" ino=29 res=0 errno=0 [ 690.663759][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 690.678089][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 690.690239][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 690.699860][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 690.712533][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 690.769945][T28300] lo speed is unknown, defaulting to 1000 [ 690.887292][T28308] bridge0: port 1(team0) entered disabled state [ 690.894973][T28308] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 691.149156][T28300] chnl_net:caif_netlink_parms(): no params data found [ 691.244037][T28320] lo speed is unknown, defaulting to 1000 [ 691.269381][T28325] __nla_validate_parse: 67 callbacks suppressed [ 691.269400][T28325] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5999'. [ 691.456357][T28300] bridge0: port 1(bridge_slave_0) entered blocking state [ 691.483592][T28300] bridge0: port 1(bridge_slave_0) entered disabled state [ 691.502044][T28300] bridge_slave_0: entered allmulticast mode [ 691.512481][T28300] bridge_slave_0: entered promiscuous mode [ 691.522345][T28300] bridge0: port 2(bridge_slave_1) entered blocking state [ 691.529717][T28300] bridge0: port 2(bridge_slave_1) entered disabled state [ 691.538821][T28300] bridge_slave_1: entered allmulticast mode [ 691.549651][T28300] bridge_slave_1: entered promiscuous mode [ 691.714695][T28300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 691.747343][T28300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 691.924632][T28300] team0: Port device team_slave_0 added [ 691.954071][T28300] team0: Port device team_slave_1 added [ 692.096167][T28347] lo speed is unknown, defaulting to 1000 [ 692.112039][T28300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 692.129344][T28300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 692.169521][T28360] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6009'. [ 692.177214][T28300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 692.203153][T28361] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6006'. [ 692.210498][T28300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 692.223496][T28300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 692.230541][T28361] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6006'. [ 692.278385][T28300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 692.343092][T28349] lo speed is unknown, defaulting to 1000 [ 692.396263][T28364] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6010'. [ 692.530128][T28364] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6010'. [ 692.758170][ T5848] Bluetooth: hci1: command tx timeout [ 692.858668][T28300] hsr_slave_0: entered promiscuous mode [ 692.897463][T28300] hsr_slave_1: entered promiscuous mode [ 692.944198][T28300] debugfs: 'hsr0' already exists in 'hsr' [ 692.969586][T28300] Cannot create hsr debugfs directory [ 693.776758][T28381] lo speed is unknown, defaulting to 1000 [ 693.812762][T28387] tipc: Started in network mode [ 693.817676][T28387] tipc: Node identity 06e66e9453d7, cluster identity 4711 [ 693.840210][T28387] tipc: Enabled bearer , priority 0 [ 693.848702][T28393] netlink: 'syz.2.6018': attribute type 1 has an invalid length. [ 693.967795][T28388] syzkaller0: entered promiscuous mode [ 693.977084][T28388] syzkaller0: entered allmulticast mode [ 694.039127][T28383] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6014'. [ 694.212711][T28391] tipc: Resetting bearer [ 694.333352][T28386] tipc: Resetting bearer [ 694.364387][T28386] tipc: Disabling bearer [ 694.821450][ T5848] Bluetooth: hci1: command tx timeout [ 694.941966][T28300] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 694.982059][T28300] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 695.019450][T28300] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 695.064977][T28300] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 695.602015][T28442] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.823293][T28443] macsec1: entered promiscuous mode [ 695.884234][T28443] macsec1: entered allmulticast mode [ 695.957624][T28300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 696.091265][T28442] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.296521][T28442] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.394285][T28300] 8021q: adding VLAN 0 to HW filter on device team0 [ 696.516115][T28442] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.614391][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 696.621714][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 696.695713][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 696.702930][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 696.900914][ T51] Bluetooth: hci1: command tx timeout [ 696.943543][T24521] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.052378][T24518] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.105748][T24523] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.389277][T24521] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 697.445110][T28487] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6038'. [ 697.523738][T28483] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 697.784622][T28509] syz.2.6043: vmalloc error: size 16781312, failed to allocated page array size 32776, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 697.846556][T28509] CPU: 0 UID: 0 PID: 28509 Comm: syz.2.6043 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 697.846584][T28509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 697.846596][T28509] Call Trace: [ 697.846604][T28509] [ 697.846612][T28509] dump_stack_lvl+0x189/0x250 [ 697.846640][T28509] ? __pfx_dump_stack_lvl+0x10/0x10 [ 697.846659][T28509] ? __pfx__printk+0x10/0x10 [ 697.846681][T28509] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 697.846702][T28509] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 697.846723][T28509] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 697.846746][T28509] warn_alloc+0x214/0x310 [ 697.846771][T28509] ? __pfx_warn_alloc+0x10/0x10 [ 697.846800][T28509] ? __get_vm_area_node+0x28f/0x300 [ 697.846832][T28509] ? xskq_create+0xbf/0x170 [ 697.846859][T28509] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 697.846909][T28509] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 697.846934][T28509] ? __kasan_kmalloc+0x93/0xb0 [ 697.846961][T28509] vmalloc_user_noprof+0xad/0xf0 [ 697.846979][T28509] ? xskq_create+0xbf/0x170 [ 697.847002][T28509] xskq_create+0xbf/0x170 [ 697.847028][T28509] xsk_init_queue+0xb0/0x110 [ 697.847053][T28509] xsk_setsockopt+0x57b/0x8d0 [ 697.847077][T28509] ? __pfx_xsk_setsockopt+0x10/0x10 [ 697.847099][T28509] ? __pfx_aa_sk_perm+0x10/0x10 [ 697.847123][T28509] ? __fget_files+0x2a/0x420 [ 697.847151][T28509] ? aa_sock_opt_perm+0x74/0x110 [ 697.847175][T28509] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 697.847194][T28509] ? __pfx_xsk_setsockopt+0x10/0x10 [ 697.847217][T28509] do_sock_setsockopt+0x17c/0x1b0 [ 697.847240][T28509] __x64_sys_setsockopt+0x13f/0x1b0 [ 697.847264][T28509] do_syscall_64+0xfa/0x3b0 [ 697.847286][T28509] ? lockdep_hardirqs_on+0x9c/0x150 [ 697.847309][T28509] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.847326][T28509] ? clear_bhb_loop+0x60/0xb0 [ 697.847348][T28509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.847364][T28509] RIP: 0033:0x7fc2b3f8eb69 [ 697.847381][T28509] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 697.847396][T28509] RSP: 002b:00007fc2b1df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 697.847417][T28509] RAX: ffffffffffffffda RBX: 00007fc2b41b6160 RCX: 00007fc2b3f8eb69 [ 697.847431][T28509] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000007 [ 697.847442][T28509] RBP: 00007fc2b4011df1 R08: 0000000000000004 R09: 0000000000000000 [ 697.847453][T28509] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 697.847464][T28509] R13: 0000000000000000 R14: 00007fc2b41b6160 R15: 00007fff49b4da58 [ 697.847495][T28509] [ 697.847502][T28509] Mem-Info: [ 697.863384][T28300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 697.891193][T28509] active_anon:13913 inactive_anon:0 isolated_anon:0 [ 697.891193][T28509] active_file:1852 inactive_file:40096 isolated_file:0 [ 697.891193][T28509] unevictable:768 dirty:138 writeback:0 [ 697.891193][T28509] slab_reclaimable:13803 slab_unreclaimable:316989 [ 697.891193][T28509] mapped:29245 shmem:1358 pagetables:1258 [ 697.891193][T28509] sec_pagetables:0 bounce:0 [ 697.891193][T28509] kernel_misc_reclaimable:0 [ 697.891193][T28509] free:1083056 free_pcp:18776 free_cma:0 [ 698.146503][T28300] veth0_vlan: entered promiscuous mode [ 698.196895][T28509] Node 0 active_anon:55524kB inactive_anon:0kB active_file:7408kB inactive_file:160180kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116856kB dirty:556kB writeback:0kB shmem:3896kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:15956kB pagetables:4808kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 698.220104][T28300] veth1_vlan: entered promiscuous mode [ 698.237629][T28509] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 698.285836][T28509] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 698.328063][T28509] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 698.335938][T28509] Node 0 DMA32 free:468552kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:55480kB inactive_anon:0kB active_file:7408kB inactive_file:158360kB unevictable:1536kB writepending:552kB present:3129332kB managed:2560292kB mlocked:0kB bounce:0kB free_pcp:53956kB local_pcp:31936kB free_cma:0kB [ 698.405709][T28509] lowmem_reserve[]: 0 0 1 1 1 [ 698.428021][T28509] Node 0 Normal free:28kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1820kB unevictable:0kB writepending:4kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 698.480094][T28300] veth0_macvtap: entered promiscuous mode [ 698.505622][T28300] veth1_macvtap: entered promiscuous mode [ 698.552888][T28509] lowmem_reserve[]: 0 0 0 0 0 [ 698.557656][T28509] Node 1 Normal free:3849616kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:19768kB local_pcp:7488kB free_cma:0kB [ 698.616219][T28509] lowmem_reserve[]: 0 0 0 0 0 [ 698.622073][T28509] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (UM) = 15360kB [ 698.643084][T28509] Node 0 DMA32: 80*4kB (UME) 22*8kB (UM) 145*16kB (UME) 90*32kB (UM) 27*64kB (M) 48*128kB (UM) 475*256kB (UME) 300*512kB (UME) 140*1024kB (UME) 6*2048kB (UME) 6*4096kB (U) = 468992kB [ 698.656538][T28300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 698.673642][T28533] netlink: 'syz.1.6049': attribute type 1 has an invalid length. [ 698.701693][T28531] bpq0: entered promiscuous mode [ 698.707798][T28531] bpq0: entered allmulticast mode [ 698.751627][T28509] Node 0 Normal: 1*4kB (M) 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28kB [ 698.774001][T28533] bond3: entered promiscuous mode [ 698.780059][T28533] 8021q: adding VLAN 0 to HW filter on device bond3 [ 698.783418][T28509] Node 1 Normal: 130*4kB (UE) 53*8kB (UME) 46*16kB (UME) 136*32kB (UME) 26*64kB (UME) 11*128kB (UME) 4*256kB (UME) 3*512kB (UM) 2*1024kB (ME) 1*2048kB (E) 936*4096kB (UM) = 3849616kB [ 698.812484][T28300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 698.876492][T28509] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 698.896863][ T65] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 698.920237][T28509] Node 0 hugepages_total=3 hugepages_free=0 hugepages_surp=1 hugepages_size=2048kB [ 698.929463][T28528] netlink: 'syz.4.6048': attribute type 16 has an invalid length. [ 698.949607][T28528] netlink: 'syz.4.6048': attribute type 17 has an invalid length. [ 698.976262][T28509] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 698.987582][ T51] Bluetooth: hci1: command tx timeout [ 699.024464][T28509] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 699.029711][ T65] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.044462][T28509] 43994 total pagecache pages [ 699.049173][T28509] 0 pages in swap cache [ 699.062721][T28509] Free swap = 124996kB [ 699.070312][T28509] Total swap = 124996kB [ 699.078263][ T65] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.090976][T28509] 2097051 pages RAM [ 699.100355][T28509] 0 pages HighMem/MovableOnly [ 699.109410][T28509] 424872 pages reserved [ 699.119519][T28509] 0 pages cma reserved [ 699.243582][T28528] 8021q: adding VLAN 0 to HW filter on device team0 [ 699.272131][T28528] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 699.318886][T28545] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6052'. [ 699.326113][T28538] lo speed is unknown, defaulting to 1000 [ 699.352916][ T65] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 699.428671][T28548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6051'. [ 699.656181][ T9522] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 699.697597][ T9522] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 699.806756][T28561] bpq0: left promiscuous mode [ 699.811712][T28561] bpq0: left allmulticast mode [ 699.870439][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 699.894739][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 700.507142][T28590] netlink: 'syz.1.6063': attribute type 7 has an invalid length. [ 700.541361][T28590] netlink: 'syz.1.6063': attribute type 4 has an invalid length. [ 700.585981][T28590] netlink: 204 bytes leftover after parsing attributes in process `syz.1.6063'. [ 700.692871][T28588] netlink: 148 bytes leftover after parsing attributes in process `syz.1.6063'. [ 700.776907][T28590] netlink: 364 bytes leftover after parsing attributes in process `syz.1.6063'. [ 700.807845][T28591] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6061'. [ 700.830507][T28590] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 700.920139][ T24] IPVS: starting estimator thread 0... [ 700.920314][T28604] IPv6: Can't replace route, no match found [ 701.022856][T28605] IPVS: using max 31 ests per chain, 74400 per kthread [ 701.260575][T28609] netlink: 'syz.3.6066': attribute type 1 has an invalid length. [ 701.928625][T28626] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6074'. [ 702.015097][T28630] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6075'. [ 702.151946][T28628] lo speed is unknown, defaulting to 1000 [ 702.193108][T28639] sctp: [Deprecated]: syz.3.6077 (pid 28639) Use of int in maxseg socket option. [ 702.193108][T28639] Use struct sctp_assoc_value instead [ 702.250827][T28633] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6076'. [ 702.301243][T28640] sctp: [Deprecated]: syz.3.6077 (pid 28640) Use of int in maxseg socket option. [ 702.301243][T28640] Use struct sctp_assoc_value instead [ 702.503385][T28640] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20004 [ 702.510963][T28647] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20004 [ 702.869561][T28658] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6080'. [ 702.952177][T28658] bridge_slave_0: left allmulticast mode [ 702.968194][T28658] bridge_slave_0: left promiscuous mode [ 703.017160][T28658] bridge0: port 1(bridge_slave_0) entered disabled state [ 703.132050][T28667] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6083'. [ 703.157624][T28658] bridge_slave_1: left allmulticast mode [ 703.196706][T28672] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6083'. [ 703.206050][T28658] bridge_slave_1: left promiscuous mode [ 703.226987][T28658] bridge0: port 2(bridge_slave_1) entered disabled state [ 703.283167][T28658] bond0: (slave bond_slave_0): Releasing backup interface [ 703.314518][T28658] bond0: (slave bond_slave_1): Releasing backup interface [ 703.367999][T28658] team0: Port device team_slave_0 removed [ 703.420141][T28658] team0: Port device team_slave_1 removed [ 703.438627][T28658] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 703.457884][T28658] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 703.480536][T28658] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 703.511603][T28658] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 703.589194][ C1] vcan0 (unregistered): j1939_tp_rxtimer: 0xffff888098710c00: rx timeout, send abort [ 703.590694][T28664] team0: Mode changed to "broadcast" [ 703.636158][T28669] vlan0: entered promiscuous mode [ 703.715641][T28669] team0: Port device vlan0 added [ 703.761242][T28674] tipc: Started in network mode [ 703.766316][T28674] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 703.777018][T28674] tipc: Enabled bearer , priority 31 [ 704.098870][ C1] vcan0 (unregistered): j1939_tp_rxtimer: 0xffff888098710c00: abort rx timeout. Force session deactivation [ 704.149571][T28696] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744073701165882) [ 704.169542][T28696] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 704.383617][T28708] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6091'. [ 704.409829][T28709] vlan2: entered promiscuous mode [ 704.420507][T28708] netlink: 120 bytes leftover after parsing attributes in process `syz.0.6091'. [ 704.438520][T28709] vlan2: entered allmulticast mode [ 704.444785][T28709] hsr_slave_1: entered allmulticast mode [ 704.462135][T28708] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6091'. [ 704.537099][T28710] lo speed is unknown, defaulting to 1000 [ 704.623828][T28708] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 704.779270][T28726] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6096'. [ 704.795180][T28726] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6096'. [ 704.805025][T28726] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6096'. [ 704.891051][ T5851] tipc: Node number set to 11578026 [ 704.966278][T28736] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6096'. [ 705.427801][T28749] (unnamed net_device) (uninitialized): option ad_select: invalid value (34) [ 705.998694][T28774] sch_tbf: burst 19869 is lower than device lo mtu (39799) ! [ 706.064426][T28783] macvlan2: entered allmulticast mode [ 706.089476][T28783] veth1_vlan: entered allmulticast mode [ 706.130511][T28783] veth1_vlan: left allmulticast mode [ 706.245922][T28791] smc: net device bond0 applied user defined pnetid SYZ2 [ 706.305450][T28791] smc: net device bond0 erased user defined pnetid SYZ2 [ 706.597664][T28804] netlink: 'syz.2.6120': attribute type 2 has an invalid length. [ 706.688062][T28797] infiniband syz1: set active [ 706.694471][T28797] infiniband syz1: added veth1_to_bond [ 706.749565][T28797] RDS/IB: syz1: added [ 706.754612][T28797] smc: adding ib device syz1 with port count 1 [ 706.761507][T28797] smc: ib device syz1 port 1 has pnetid [ 706.851108][T28815] netlink: 'syz.2.6124': attribute type 29 has an invalid length. [ 707.568271][ T30] audit: type=1800 audit(1754026844.314:18): pid=28839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6133" name="blkio.bfq.time_recursive" dev="tmpfs" ino=361 res=0 errno=0 [ 707.639163][ T30] audit: type=1800 audit(1754026844.314:19): pid=28840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6133" name="blkio.bfq.time_recursive" dev="tmpfs" ino=361 res=0 errno=0 [ 707.656969][T28846] netlink: 'syz.3.6134': attribute type 1 has an invalid length. [ 707.730858][ T30] audit: type=1800 audit(1754026844.344:20): pid=28839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6133" name="blkio.bfq.time_recursive" dev="tmpfs" ino=361 res=0 errno=0 [ 707.933712][T28859] __nla_validate_parse: 10 callbacks suppressed [ 707.933731][T28859] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6140'. [ 708.004981][T28858] gretap1: entered promiscuous mode [ 708.010241][T28858] gretap1: entered allmulticast mode [ 708.052718][T28862] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6141'. [ 708.639264][T28891] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6150'. [ 708.871436][T28898] openvswitch: netlink: VXLAN extension message has 9 unknown bytes. [ 709.016340][T28901] tipc: Started in network mode [ 709.029935][T28901] tipc: Node identity 4, cluster identity 4711 [ 709.039635][T28901] tipc: Node number set to 4 [ 709.064903][T28902] tipc: Enabled bearer , priority 0 [ 709.104364][T28902] syzkaller0: entered promiscuous mode [ 709.116025][T28902] syzkaller0: entered allmulticast mode [ 709.226125][T28902] veth1_virt_wifi: mtu less than device minimum [ 709.259569][T28900] tipc: Resetting bearer [ 709.307113][T28900] tipc: Disabling bearer [ 709.342657][T28906] netlink: 'syz.3.6156': attribute type 7 has an invalid length. [ 709.407924][T28906] netlink: 'syz.3.6156': attribute type 7 has an invalid length. [ 709.479166][T28907] lo speed is unknown, defaulting to 1000 [ 709.689789][T28920] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6161'. [ 709.755086][T28918] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6159'. [ 709.858727][T28928] veth1_to_bond: entered allmulticast mode [ 709.868600][T28926] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6162'. [ 709.878675][T28928] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6162'. [ 710.026459][T28936] netlink: 'syz.1.6163': attribute type 10 has an invalid length. [ 710.053508][T28926] veth1_to_bond (unregistering): left allmulticast mode [ 710.144967][T28936] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 710.604915][T28962] netlink: 17 bytes leftover after parsing attributes in process `syz.2.6172'. [ 710.620314][T28962] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6172'. [ 710.725946][T28966] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6173'. [ 712.201492][T29025] netlink: 'syz.4.6187': attribute type 3 has an invalid length. [ 712.674605][T29036] mac80211_hwsim hwsim44 wlan1: entered allmulticast mode [ 712.729893][T29036] team0: left allmulticast mode [ 712.753806][T29037] sctp: [Deprecated]: syz.4.6190 (pid 29037) Use of int in max_burst socket option deprecated. [ 712.753806][T29037] Use struct sctp_assoc_value instead [ 712.757218][T29036] bridge0: port 1(team0) entered disabled state [ 712.864994][T29038] netlink: 'syz.4.6190': attribute type 10 has an invalid length. [ 713.138600][T29036] bridge0: port 2(batadv0) entered disabled state [ 713.278001][T29038] mac80211_hwsim hwsim44 wlan1: left allmulticast mode [ 713.479573][T29056] __nla_validate_parse: 7 callbacks suppressed [ 713.479592][T29056] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6194'. [ 713.480263][T29057] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6194'. [ 713.584508][T29045] lo speed is unknown, defaulting to 1000 [ 713.703479][T29059] lo speed is unknown, defaulting to 1000 [ 714.969230][T29108] netlink: 'syz.3.6211': attribute type 39 has an invalid length. [ 715.108830][T29112] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6210'. [ 715.721490][T29123] nbd3: detected capacity change from 0 to 127 [ 715.729812][ T51] block nbd3: Receive control failed (result -32) [ 715.859143][T29127] syzkaller0: entered promiscuous mode [ 715.876137][T29127] syzkaller0: entered allmulticast mode [ 716.362375][T29163] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6229'. [ 716.463904][T29171] netlink: 6032 bytes leftover after parsing attributes in process `syz.3.6232'. [ 716.549566][T29176] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6233'. [ 716.608184][T29176] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6233'. [ 716.641926][T29176] netlink: 5 bytes leftover after parsing attributes in process `syz.1.6233'. [ 717.005335][T28992] dummy0: left allmulticast mode [ 717.010416][T28992] dummy0: left promiscuous mode [ 717.029243][T28992] bridge0: port 1(dummy0) entered disabled state [ 717.325517][T29214] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6243'. [ 718.083192][T28992] bond0 (unregistering): Released all slaves [ 718.096856][T28992] bond1 (unregistering): Released all slaves [ 718.255677][T28992] bond2 (unregistering): Released all slaves [ 718.438861][T28992] bond3 (unregistering): Released all slaves [ 718.608762][T28992] bond4 (unregistering): (slave bond5): Releasing backup interface [ 718.618494][T28992] bond4 (unregistering): Released all slaves [ 718.784175][T28992] bond5 (unregistering): Released all slaves [ 718.799840][T28992] bond6 (unregistering): Released all slaves [ 718.812587][T29193] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.6237'. [ 719.021410][T28992] tipc: Disabling bearer [ 719.054333][T28992] tipc: Left network mode [ 719.849937][T29245] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6253'. [ 719.967320][T29243] mac80211_hwsim hwsim70 wlan1: entered allmulticast mode [ 720.133756][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 720.149557][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 720.158969][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 720.168679][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 720.169168][T29246] bridge_slave_0: left allmulticast mode [ 720.190839][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 720.213065][T29246] bridge_slave_0: left promiscuous mode [ 720.246031][T29246] bridge0: port 1(bridge_slave_0) entered disabled state [ 720.288342][T29246] bridge_slave_1: left allmulticast mode [ 720.387767][T29246] bridge_slave_1: left promiscuous mode [ 720.394630][T29246] bridge0: port 2(bridge_slave_1) entered disabled state [ 720.424997][T29246] bond0: (slave bond_slave_0): Releasing backup interface [ 720.449389][T29246] bond0: (slave bond_slave_1): Releasing backup interface [ 720.486919][T29246] team0: Port device team_slave_0 removed [ 720.528890][T29246] team0: Port device team_slave_1 removed [ 720.543953][T29246] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 720.552520][T29246] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 720.568243][T29246] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 720.589055][T29246] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 720.666317][T29245] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 720.702383][T28992] hsr_slave_0: left promiscuous mode [ 720.963814][T29276] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6259'. [ 720.974907][T29276] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6259'. [ 720.996681][T29276] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6259'. [ 721.160152][T28992] team0 (unregistering): Port device vlan0 removed [ 722.261893][ T51] Bluetooth: hci2: command tx timeout [ 722.287796][T28992] vxcan1 (unregistering): left allmulticast mode [ 722.768590][ T5996] syz1: Port: 1 Link DOWN [ 722.932671][T29284] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6261'. [ 722.972304][T29284] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6261'. [ 723.421321][T29309] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6263'. [ 723.868974][T29320] netlink: 172 bytes leftover after parsing attributes in process `syz.1.6269'. [ 724.215666][ T36] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.246179][ T36] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.282003][T28992] IPVS: stop unused estimator thread 0... [ 724.340311][ T36] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.351238][ T51] Bluetooth: hci2: command tx timeout [ 724.371554][ T36] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.477147][T29323] bridge0: port 1(bridge_slave_0) entered disabled state [ 724.498594][T29323] bridge0: port 2(bridge_slave_1) entered disabled state [ 724.576841][T29328] bridge0: entered allmulticast mode [ 724.768610][T29334] netlink: 'syz.1.6274': attribute type 21 has an invalid length. [ 724.797599][T29334] netlink: 'syz.1.6274': attribute type 1 has an invalid length. [ 724.805865][T29334] netlink: 144 bytes leftover after parsing attributes in process `syz.1.6274'. [ 724.826303][T29334] netlink: 'syz.1.6274': attribute type 32 has an invalid length. [ 724.865001][T29334] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6274'. [ 724.907787][T29255] chnl_net:caif_netlink_parms(): no params data found [ 725.032407][T29340] netlink: 'syz.3.6275': attribute type 2 has an invalid length. [ 725.339613][T29347] sock: sock_set_timeout: `syz.0.6276' (pid 29347) tries to set negative timeout [ 725.815151][T24525] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 725.901146][T24525] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.961435][T24525] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 19997 - 0 [ 726.103772][T24525] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 726.140350][T24525] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.174106][T24525] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 19997 - 0 [ 726.312979][T29255] bridge0: port 1(bridge_slave_0) entered blocking state [ 726.337629][T29255] bridge0: port 1(bridge_slave_0) entered disabled state [ 726.359547][T29255] bridge_slave_0: entered allmulticast mode [ 726.383633][T29255] bridge_slave_0: entered promiscuous mode [ 726.421798][ T51] Bluetooth: hci2: command tx timeout [ 726.444687][T24525] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 726.481239][T24525] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.492995][T24525] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 19997 - 0 [ 726.538129][T29255] bridge0: port 2(bridge_slave_1) entered blocking state [ 726.557201][T29255] bridge0: port 2(bridge_slave_1) entered disabled state [ 726.577832][T29255] bridge_slave_1: entered allmulticast mode [ 726.606224][T29255] bridge_slave_1: entered promiscuous mode [ 726.633631][T24525] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 726.656293][T24525] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.683092][T24525] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 19997 - 0 [ 727.028488][T29255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 727.094425][T29255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 727.151314][T29383] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 727.181957][T29384] Bluetooth: MGMT ver 1.23 [ 727.384567][T29255] team0: Port device team_slave_0 added [ 727.414976][T29255] team0: Port device team_slave_1 added [ 727.658006][T29255] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 727.679533][T29255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 727.715256][T29255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 727.774096][T29255] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 727.785214][T29255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 727.823691][T29255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 727.935660][T29406] macsec2: entered promiscuous mode [ 727.976244][T29406] ip6gretap0: entered promiscuous mode [ 727.994411][T29406] macsec2: entered allmulticast mode [ 728.001416][T29406] ip6gretap0: entered allmulticast mode [ 728.164533][T29418] netlink: 209840 bytes leftover after parsing attributes in process `syz.0.6296'. [ 728.233119][T29255] hsr_slave_0: entered promiscuous mode [ 728.254934][T29255] hsr_slave_1: entered promiscuous mode [ 728.280473][T29255] debugfs: 'hsr0' already exists in 'hsr' [ 728.308780][T29255] Cannot create hsr debugfs directory [ 728.509617][ T51] Bluetooth: hci2: command tx timeout [ 728.787416][T29430] netlink: 536 bytes leftover after parsing attributes in process `syz.2.6293'. [ 729.786157][T24525] bond1 (unregistering): Released all slaves [ 729.954644][T24525] bond0 (unregistering): Released all slaves [ 729.969844][T24525] bond2 (unregistering): Released all slaves [ 729.984210][T24525] bond3 (unregistering): Released all slaves [ 730.167337][T24525] bond4 (unregistering): Released all slaves [ 730.181880][T24525] bond5 (unregistering): Released all slaves [ 730.349391][T24525] bond6 (unregistering): Released all slaves [ 730.384181][T29422] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6298'. [ 730.655581][T29436] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 730.746482][T29442] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6303'. [ 730.878830][T24525] k›*·]‘: left promiscuous mode [ 730.987394][T24525] tipc: Disabling bearer [ 731.030880][T24525] tipc: Left network mode [ 731.073065][T29449] team0: Device gtp1 is of different type [ 731.297237][T29461] 8021q: adding VLAN 0 to HW filter on device bond3 [ 731.427462][T29464] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 731.478530][T29464] bond3: (slave macvlan2): Enslaving as a backup interface with a down link [ 731.593798][T29470] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6311'. [ 731.661872][T29472] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 731.692885][T29467] team0: Port device vlan0 removed [ 731.761198][T29467] bond3: (slave macvlan2): Releasing backup interface [ 731.860282][T24518] tipc: Resetting bearer [ 731.974525][ T65] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 731.993874][ T65] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 732.076543][ T65] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 732.092662][ T65] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 732.195882][T29489] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6317'. [ 732.237587][T29493] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 732.302561][T29493] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6318'. [ 732.573281][T24518] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 732.699254][T24518] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 732.719742][T29502] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 732.794962][T24525] hsr_slave_0: left promiscuous mode [ 732.840995][T24525] hsr_slave_1: left promiscuous mode [ 732.907052][T24525] macsec0: left allmulticast mode [ 732.940942][T24525] veth0_macvtap: left promiscuous mode [ 732.949885][T24525] veth1_vlan: left promiscuous mode [ 732.961999][T24525] veth0_vlan: left promiscuous mode [ 734.190409][T24518] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 734.199656][T24518] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 734.209648][T29516] kthread_run failed with err -4 [ 734.272706][T29255] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 734.324819][T29255] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 734.364864][T29255] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 734.423875][T29255] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 734.807320][T29255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 735.192029][T29255] 8021q: adding VLAN 0 to HW filter on device team0 [ 735.266505][T24518] bridge0: port 1(bridge_slave_0) entered blocking state [ 735.273848][T24518] bridge0: port 1(bridge_slave_0) entered forwarding state [ 735.350440][T24530] bridge0: port 2(bridge_slave_1) entered blocking state [ 735.357890][T24530] bridge0: port 2(bridge_slave_1) entered forwarding state [ 735.567760][T29580] FAULT_INJECTION: forcing a failure. [ 735.567760][T29580] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 735.615174][T29255] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 735.626969][T29255] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 735.640977][T29580] CPU: 1 UID: 0 PID: 29580 Comm: syz.2.6338 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 735.641004][T29580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 735.641015][T29580] Call Trace: [ 735.641023][T29580] [ 735.641032][T29580] dump_stack_lvl+0x189/0x250 [ 735.641057][T29580] ? __pfx____ratelimit+0x10/0x10 [ 735.641082][T29580] ? __pfx_dump_stack_lvl+0x10/0x10 [ 735.641100][T29580] ? __pfx__printk+0x10/0x10 [ 735.641121][T29580] ? __might_fault+0xb0/0x130 [ 735.641161][T29580] should_fail_ex+0x414/0x560 [ 735.641193][T29580] _copy_from_user+0x2d/0xb0 [ 735.641218][T29580] ___sys_sendmsg+0x158/0x2a0 [ 735.641240][T29580] ? __pfx____sys_sendmsg+0x10/0x10 [ 735.641291][T29580] ? __fget_files+0x2a/0x420 [ 735.641306][T29580] ? __fget_files+0x3a0/0x420 [ 735.641331][T29580] __x64_sys_sendmsg+0x19b/0x260 [ 735.641349][T29580] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 735.641374][T29580] ? __pfx_ksys_write+0x10/0x10 [ 735.641393][T29580] ? rcu_is_watching+0x15/0xb0 [ 735.641419][T29580] ? do_syscall_64+0xbe/0x3b0 [ 735.641444][T29580] do_syscall_64+0xfa/0x3b0 [ 735.641466][T29580] ? lockdep_hardirqs_on+0x9c/0x150 [ 735.641487][T29580] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.641503][T29580] ? clear_bhb_loop+0x60/0xb0 [ 735.641522][T29580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.641539][T29580] RIP: 0033:0x7fc2b3f8eb69 [ 735.641555][T29580] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 735.641570][T29580] RSP: 002b:00007fc2b4d3b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 735.641590][T29580] RAX: ffffffffffffffda RBX: 00007fc2b41b5fa0 RCX: 00007fc2b3f8eb69 [ 735.641603][T29580] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 735.641613][T29580] RBP: 00007fc2b4d3b090 R08: 0000000000000000 R09: 0000000000000000 [ 735.641623][T29580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 735.641634][T29580] R13: 0000000000000000 R14: 00007fc2b41b5fa0 R15: 00007fff49b4da58 [ 735.641663][T29580] [ 735.925358][T24525] IPVS: stop unused estimator thread 0... [ 736.125615][T29595] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6341'. [ 736.363945][T29600] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 736.396098][T29600] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 736.546905][T29611] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 736.555207][T29255] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 736.953080][T29621] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6346'. [ 737.034738][T29622] netlink: 'syz.3.6345': attribute type 1 has an invalid length. [ 737.382826][T29634] FAULT_INJECTION: forcing a failure. [ 737.382826][T29634] name failslab, interval 1, probability 0, space 0, times 0 [ 737.401802][T29634] CPU: 1 UID: 0 PID: 29634 Comm: syz.2.6350 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 737.401830][T29634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 737.401841][T29634] Call Trace: [ 737.401849][T29634] [ 737.401858][T29634] dump_stack_lvl+0x189/0x250 [ 737.401882][T29634] ? __pfx____ratelimit+0x10/0x10 [ 737.401906][T29634] ? __pfx_dump_stack_lvl+0x10/0x10 [ 737.401925][T29634] ? __pfx__printk+0x10/0x10 [ 737.401952][T29634] ? __pfx___might_resched+0x10/0x10 [ 737.401983][T29634] should_fail_ex+0x414/0x560 [ 737.402013][T29634] should_failslab+0xa8/0x100 [ 737.402034][T29634] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 737.402060][T29634] ? __alloc_skb+0x112/0x2d0 [ 737.402093][T29634] __alloc_skb+0x112/0x2d0 [ 737.402122][T29634] netlink_sendmsg+0x5c6/0xb30 [ 737.402157][T29634] ? __pfx_netlink_sendmsg+0x10/0x10 [ 737.402185][T29634] ? aa_sock_msg_perm+0x94/0x160 [ 737.402209][T29634] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 737.402228][T29634] ? __pfx_netlink_sendmsg+0x10/0x10 [ 737.402253][T29634] __sock_sendmsg+0x219/0x270 [ 737.402279][T29634] ____sys_sendmsg+0x505/0x830 [ 737.402304][T29634] ? __pfx_____sys_sendmsg+0x10/0x10 [ 737.402332][T29634] ? import_iovec+0x74/0xa0 [ 737.402358][T29634] ___sys_sendmsg+0x21f/0x2a0 [ 737.402380][T29634] ? __pfx____sys_sendmsg+0x10/0x10 [ 737.402435][T29634] ? __fget_files+0x2a/0x420 [ 737.402452][T29634] ? __fget_files+0x3a0/0x420 [ 737.402479][T29634] __x64_sys_sendmsg+0x19b/0x260 [ 737.402501][T29634] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 737.402530][T29634] ? __pfx_ksys_write+0x10/0x10 [ 737.402551][T29634] ? rcu_is_watching+0x15/0xb0 [ 737.402582][T29634] ? do_syscall_64+0xbe/0x3b0 [ 737.402609][T29634] do_syscall_64+0xfa/0x3b0 [ 737.402631][T29634] ? lockdep_hardirqs_on+0x9c/0x150 [ 737.402653][T29634] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.402672][T29634] ? clear_bhb_loop+0x60/0xb0 [ 737.402693][T29634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.402709][T29634] RIP: 0033:0x7fc2b3f8eb69 [ 737.402734][T29634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 737.402748][T29634] RSP: 002b:00007fc2b4d3b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 737.402771][T29634] RAX: ffffffffffffffda RBX: 00007fc2b41b5fa0 RCX: 00007fc2b3f8eb69 [ 737.402784][T29634] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 737.402796][T29634] RBP: 00007fc2b4d3b090 R08: 0000000000000000 R09: 0000000000000000 [ 737.402808][T29634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 737.402819][T29634] R13: 0000000000000000 R14: 00007fc2b41b5fa0 R15: 00007fff49b4da58 [ 737.402843][T29634] [ 737.694811][T29636] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6349'. [ 737.705781][T29636] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 737.713561][T29636] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 737.723150][T29636] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 737.734427][T29636] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 737.829537][T29255] veth0_vlan: entered promiscuous mode [ 737.894796][T29641] netlink: 'syz.2.6351': attribute type 12 has an invalid length. [ 737.926125][T29255] veth1_vlan: entered promiscuous mode [ 737.943234][T29641] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.6351'. [ 738.146130][T29255] veth0_macvtap: entered promiscuous mode [ 738.167629][T29255] veth1_macvtap: entered promiscuous mode [ 738.224762][T29255] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 738.266034][T29255] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 738.310127][T24525] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.337451][T24525] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.374942][T24525] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.401818][T24525] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.426900][T29654] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6356'. [ 738.599177][T29660] netlink: 724 bytes leftover after parsing attributes in process `syz.3.6358'. [ 738.608994][T29660] netlink: 83 bytes leftover after parsing attributes in process `syz.3.6358'. [ 738.627380][T29660] mac80211_hwsim hwsim72 wlan1: entered allmulticast mode [ 738.638990][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 738.655809][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 738.770201][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 738.783913][T29667] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 738.789069][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 738.892514][T29669] IPv6: addrconf: prefix option has invalid lifetime [ 739.244067][T29693] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 739.419391][T29702] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6371'. [ 739.479074][T29698] netlink: 'syz.2.6372': attribute type 83 has an invalid length. [ 739.891762][T29719] IPv6: Can't replace route, no match found [ 740.043078][T29720] netlink: 248 bytes leftover after parsing attributes in process `syz.0.6376'. [ 740.880963][T29737] FAULT_INJECTION: forcing a failure. [ 740.880963][T29737] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 740.905428][T29737] CPU: 0 UID: 0 PID: 29737 Comm: syz.3.6381 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 740.905457][T29737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 740.905468][T29737] Call Trace: [ 740.905476][T29737] [ 740.905484][T29737] dump_stack_lvl+0x189/0x250 [ 740.905508][T29737] ? __pfx____ratelimit+0x10/0x10 [ 740.905531][T29737] ? __pfx_dump_stack_lvl+0x10/0x10 [ 740.905550][T29737] ? __pfx__printk+0x10/0x10 [ 740.905571][T29737] ? __might_fault+0xb0/0x130 [ 740.905606][T29737] should_fail_ex+0x414/0x560 [ 740.905636][T29737] _copy_from_iter+0x1db/0x16f0 [ 740.905662][T29737] ? rcu_is_watching+0x15/0xb0 [ 740.905689][T29737] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 740.905720][T29737] ? __pfx__copy_from_iter+0x10/0x10 [ 740.905743][T29737] ? __build_skb_around+0x257/0x3e0 [ 740.905772][T29737] ? netlink_sendmsg+0x642/0xb30 [ 740.905794][T29737] ? skb_put+0x11b/0x210 [ 740.905815][T29737] netlink_sendmsg+0x6b2/0xb30 [ 740.905849][T29737] ? __pfx_netlink_sendmsg+0x10/0x10 [ 740.905875][T29737] ? aa_sock_msg_perm+0x94/0x160 [ 740.905900][T29737] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 740.905918][T29737] ? __pfx_netlink_sendmsg+0x10/0x10 [ 740.905943][T29737] __sock_sendmsg+0x219/0x270 [ 740.905968][T29737] ____sys_sendmsg+0x505/0x830 [ 740.905993][T29737] ? __pfx_____sys_sendmsg+0x10/0x10 [ 740.906020][T29737] ? import_iovec+0x74/0xa0 [ 740.906047][T29737] ___sys_sendmsg+0x21f/0x2a0 [ 740.906136][T29737] ? __pfx____sys_sendmsg+0x10/0x10 [ 740.906192][T29737] ? __fget_files+0x2a/0x420 [ 740.906208][T29737] ? __fget_files+0x3a0/0x420 [ 740.906236][T29737] __x64_sys_sendmsg+0x19b/0x260 [ 740.906257][T29737] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 740.906285][T29737] ? __pfx_ksys_write+0x10/0x10 [ 740.906306][T29737] ? rcu_is_watching+0x15/0xb0 [ 740.906335][T29737] ? do_syscall_64+0xbe/0x3b0 [ 740.906363][T29737] do_syscall_64+0xfa/0x3b0 [ 740.906384][T29737] ? lockdep_hardirqs_on+0x9c/0x150 [ 740.906405][T29737] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.906421][T29737] ? clear_bhb_loop+0x60/0xb0 [ 740.906442][T29737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.906458][T29737] RIP: 0033:0x7fdc19d8eb69 [ 740.906475][T29737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 740.906489][T29737] RSP: 002b:00007fdc1ac1a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 740.906510][T29737] RAX: ffffffffffffffda RBX: 00007fdc19fb5fa0 RCX: 00007fdc19d8eb69 [ 740.906523][T29737] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 740.906535][T29737] RBP: 00007fdc1ac1a090 R08: 0000000000000000 R09: 0000000000000000 [ 740.906546][T29737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 740.906557][T29737] R13: 0000000000000000 R14: 00007fdc19fb5fa0 R15: 00007ffc34092fa8 [ 740.906587][T29737] [ 741.657012][T29759] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6389'. [ 741.860120][T29759] team0: Port device team_slave_0 removed [ 742.049403][T29785] FAULT_INJECTION: forcing a failure. [ 742.049403][T29785] name failslab, interval 1, probability 0, space 0, times 0 [ 742.089473][T29785] CPU: 0 UID: 0 PID: 29785 Comm: syz.0.6396 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 742.089499][T29785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 742.089510][T29785] Call Trace: [ 742.089518][T29785] [ 742.089526][T29785] dump_stack_lvl+0x189/0x250 [ 742.089548][T29785] ? __pfx____ratelimit+0x10/0x10 [ 742.089572][T29785] ? __pfx_dump_stack_lvl+0x10/0x10 [ 742.089588][T29785] ? __pfx__printk+0x10/0x10 [ 742.089625][T29785] ? __pfx___might_resched+0x10/0x10 [ 742.089648][T29785] ? fs_reclaim_acquire+0x7d/0x100 [ 742.089671][T29785] should_fail_ex+0x414/0x560 [ 742.089699][T29785] should_failslab+0xa8/0x100 [ 742.089718][T29785] kmem_cache_alloc_noprof+0x73/0x3c0 [ 742.089740][T29785] ? skb_clone+0x212/0x3a0 [ 742.089764][T29785] skb_clone+0x212/0x3a0 [ 742.089779][T29785] ? nfnetlink_rcv+0x486/0x2520 [ 742.089803][T29785] nfnetlink_rcv+0x4b4/0x2520 [ 742.089825][T29785] ? is_bpf_text_address+0x26/0x2b0 [ 742.089851][T29785] ? kernel_text_address+0xa5/0xe0 [ 742.089871][T29785] ? __kernel_text_address+0xd/0x40 [ 742.089890][T29785] ? unwind_get_return_address+0x4d/0x90 [ 742.089917][T29785] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 742.089934][T29785] ? arch_stack_walk+0xfc/0x150 [ 742.089966][T29785] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 742.090021][T29785] ? __lock_acquire+0xab9/0xd20 [ 742.090054][T29785] ? netlink_deliver_tap+0x2e/0x1b0 [ 742.090095][T29785] netlink_unicast+0x82c/0x9e0 [ 742.090125][T29785] ? __pfx_netlink_unicast+0x10/0x10 [ 742.090149][T29785] ? netlink_sendmsg+0x642/0xb30 [ 742.090170][T29785] ? skb_put+0x11b/0x210 [ 742.090191][T29785] netlink_sendmsg+0x805/0xb30 [ 742.090224][T29785] ? __pfx_netlink_sendmsg+0x10/0x10 [ 742.090250][T29785] ? aa_sock_msg_perm+0x94/0x160 [ 742.090275][T29785] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 742.090294][T29785] ? __pfx_netlink_sendmsg+0x10/0x10 [ 742.090319][T29785] __sock_sendmsg+0x219/0x270 [ 742.090345][T29785] ____sys_sendmsg+0x505/0x830 [ 742.090370][T29785] ? __pfx_____sys_sendmsg+0x10/0x10 [ 742.090398][T29785] ? import_iovec+0x74/0xa0 [ 742.090423][T29785] ___sys_sendmsg+0x21f/0x2a0 [ 742.090443][T29785] ? __pfx____sys_sendmsg+0x10/0x10 [ 742.090500][T29785] ? __fget_files+0x2a/0x420 [ 742.090515][T29785] ? __fget_files+0x3a0/0x420 [ 742.090543][T29785] __x64_sys_sendmsg+0x19b/0x260 [ 742.090564][T29785] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 742.090595][T29785] ? __pfx_ksys_write+0x10/0x10 [ 742.090614][T29785] ? rcu_is_watching+0x15/0xb0 [ 742.090641][T29785] ? do_syscall_64+0xbe/0x3b0 [ 742.090667][T29785] do_syscall_64+0xfa/0x3b0 [ 742.090686][T29785] ? lockdep_hardirqs_on+0x9c/0x150 [ 742.090707][T29785] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.090725][T29785] ? clear_bhb_loop+0x60/0xb0 [ 742.090746][T29785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.090762][T29785] RIP: 0033:0x7f89ec18eb69 [ 742.090780][T29785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 742.090795][T29785] RSP: 002b:00007f89ecf36038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 742.090816][T29785] RAX: ffffffffffffffda RBX: 00007f89ec3b5fa0 RCX: 00007f89ec18eb69 [ 742.090830][T29785] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 742.090841][T29785] RBP: 00007f89ecf36090 R08: 0000000000000000 R09: 0000000000000000 [ 742.090852][T29785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 742.090863][T29785] R13: 0000000000000000 R14: 00007f89ec3b5fa0 R15: 00007ffdaec06808 [ 742.090893][T29785] [ 742.584354][T29797] netlink: 'syz.1.6400': attribute type 21 has an invalid length. [ 742.594427][T29797] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6400'. [ 742.605795][T29797] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6400'. [ 742.701313][T29804] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6401'. [ 742.724850][T29804] netlink: 108 bytes leftover after parsing attributes in process `syz.2.6401'. [ 742.743976][T29804] vlan2: entered allmulticast mode [ 742.749175][T29804] veth1: entered allmulticast mode [ 742.879906][T29818] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6404'. [ 742.907814][T29819] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 742.954691][T29822] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6407'. [ 743.067031][T29818] netdevsim netdevsim0: Direct firmware load for .. failed with error -2 [ 743.085811][T29828] netdevsim netdevsim3: Direct firmware load for ./file0/file1 failed with error -2 [ 743.095965][T29818] netdevsim netdevsim0: Falling back to sysfs fallback for: .. [ 743.121489][T29828] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0/file1 [ 743.146401][T29833] FAULT_INJECTION: forcing a failure. [ 743.146401][T29833] name failslab, interval 1, probability 0, space 0, times 0 [ 743.159630][T29833] CPU: 1 UID: 0 PID: 29833 Comm: syz.1.6410 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 743.159657][T29833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 743.159668][T29833] Call Trace: [ 743.159676][T29833] [ 743.159683][T29833] dump_stack_lvl+0x189/0x250 [ 743.159706][T29833] ? __pfx____ratelimit+0x10/0x10 [ 743.159729][T29833] ? __pfx_dump_stack_lvl+0x10/0x10 [ 743.159748][T29833] ? __pfx__printk+0x10/0x10 [ 743.159773][T29833] ? __pfx___might_resched+0x10/0x10 [ 743.159797][T29833] ? fs_reclaim_acquire+0x7d/0x100 [ 743.159828][T29833] should_fail_ex+0x414/0x560 [ 743.159858][T29833] should_failslab+0xa8/0x100 [ 743.159876][T29833] kmem_cache_alloc_noprof+0x73/0x3c0 [ 743.159898][T29833] ? skb_clone+0x212/0x3a0 [ 743.159921][T29833] skb_clone+0x212/0x3a0 [ 743.159935][T29833] ? nfnetlink_rcv+0x486/0x2520 [ 743.159958][T29833] nfnetlink_rcv+0x4b4/0x2520 [ 743.159980][T29833] ? __dev_queue_xmit+0x1d79/0x3b50 [ 743.160008][T29833] ? __dev_queue_xmit+0x27b/0x3b50 [ 743.160038][T29833] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 743.160074][T29833] ? ref_tracker_free+0x63a/0x7d0 [ 743.160093][T29833] ? __asan_memcpy+0x40/0x70 [ 743.160111][T29833] ? __pfx_ref_tracker_free+0x10/0x10 [ 743.160143][T29833] ? skb_clone+0x246/0x3a0 [ 743.160165][T29833] ? __netlink_deliver_tap+0x807/0x850 [ 743.160188][T29833] ? netlink_deliver_tap+0x2e/0x1b0 [ 743.160227][T29833] netlink_unicast+0x82c/0x9e0 [ 743.160256][T29833] ? __pfx_netlink_unicast+0x10/0x10 [ 743.160278][T29833] ? netlink_sendmsg+0x642/0xb30 [ 743.160298][T29833] ? skb_put+0x11b/0x210 [ 743.160317][T29833] netlink_sendmsg+0x805/0xb30 [ 743.160349][T29833] ? __pfx_netlink_sendmsg+0x10/0x10 [ 743.160375][T29833] ? aa_sock_msg_perm+0x94/0x160 [ 743.160397][T29833] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 743.160416][T29833] ? __pfx_netlink_sendmsg+0x10/0x10 [ 743.160438][T29833] __sock_sendmsg+0x219/0x270 [ 743.160467][T29833] ____sys_sendmsg+0x505/0x830 [ 743.160490][T29833] ? __pfx_____sys_sendmsg+0x10/0x10 [ 743.160514][T29833] ? import_iovec+0x74/0xa0 [ 743.160541][T29833] ___sys_sendmsg+0x21f/0x2a0 [ 743.160561][T29833] ? __pfx____sys_sendmsg+0x10/0x10 [ 743.160610][T29833] ? __fget_files+0x2a/0x420 [ 743.160625][T29833] ? __fget_files+0x3a0/0x420 [ 743.160652][T29833] __x64_sys_sendmsg+0x19b/0x260 [ 743.160673][T29833] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 743.160702][T29833] ? __pfx_ksys_write+0x10/0x10 [ 743.160723][T29833] ? rcu_is_watching+0x15/0xb0 [ 743.160753][T29833] ? do_syscall_64+0xbe/0x3b0 [ 743.160781][T29833] do_syscall_64+0xfa/0x3b0 [ 743.160803][T29833] ? lockdep_hardirqs_on+0x9c/0x150 [ 743.160833][T29833] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.160850][T29833] ? clear_bhb_loop+0x60/0xb0 [ 743.160871][T29833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.160887][T29833] RIP: 0033:0x7f3bd418eb69 [ 743.160902][T29833] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 743.160916][T29833] RSP: 002b:00007f3bd4f23038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 743.160935][T29833] RAX: ffffffffffffffda RBX: 00007f3bd43b5fa0 RCX: 00007f3bd418eb69 [ 743.160947][T29833] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 743.160957][T29833] RBP: 00007f3bd4f23090 R08: 0000000000000000 R09: 0000000000000000 [ 743.160967][T29833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 743.160977][T29833] R13: 0000000000000000 R14: 00007f3bd43b5fa0 R15: 00007ffccced5ad8 [ 743.161004][T29833] [ 743.223038][T29831] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 743.549818][T29839] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6411'. [ 744.745685][T29883] netlink: 'syz.1.6417': attribute type 4 has an invalid length. [ 744.762868][T29887] netlink: 'syz.1.6417': attribute type 4 has an invalid length. [ 744.815890][T29890] netlink: 'syz.1.6417': attribute type 4 has an invalid length. [ 745.016053][T29900] FAULT_INJECTION: forcing a failure. [ 745.016053][T29900] name failslab, interval 1, probability 0, space 0, times 0 [ 745.049764][T29900] CPU: 1 UID: 0 PID: 29900 Comm: syz.4.6421 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 745.049793][T29900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 745.049805][T29900] Call Trace: [ 745.049812][T29900] [ 745.049821][T29900] dump_stack_lvl+0x189/0x250 [ 745.049843][T29900] ? __pfx____ratelimit+0x10/0x10 [ 745.049866][T29900] ? __pfx_dump_stack_lvl+0x10/0x10 [ 745.049884][T29900] ? __pfx__printk+0x10/0x10 [ 745.049909][T29900] ? __pfx___might_resched+0x10/0x10 [ 745.049931][T29900] ? fs_reclaim_acquire+0x7d/0x100 [ 745.049953][T29900] should_fail_ex+0x414/0x560 [ 745.049980][T29900] should_failslab+0xa8/0x100 [ 745.049998][T29900] __kmalloc_cache_noprof+0x70/0x3d0 [ 745.050020][T29900] ? nfnetlink_rcv+0xeff/0x2520 [ 745.050046][T29900] nfnetlink_rcv+0xeff/0x2520 [ 745.050100][T29900] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 745.050136][T29900] ? ref_tracker_free+0x63a/0x7d0 [ 745.050181][T29900] ? __netlink_deliver_tap+0x807/0x850 [ 745.050205][T29900] ? netlink_deliver_tap+0x2e/0x1b0 [ 745.050248][T29900] netlink_unicast+0x82c/0x9e0 [ 745.050277][T29900] ? __pfx_netlink_unicast+0x10/0x10 [ 745.050300][T29900] ? netlink_sendmsg+0x642/0xb30 [ 745.050321][T29900] ? skb_put+0x11b/0x210 [ 745.050342][T29900] netlink_sendmsg+0x805/0xb30 [ 745.050375][T29900] ? __pfx_netlink_sendmsg+0x10/0x10 [ 745.050402][T29900] ? aa_sock_msg_perm+0x94/0x160 [ 745.050426][T29900] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 745.050445][T29900] ? __pfx_netlink_sendmsg+0x10/0x10 [ 745.050469][T29900] __sock_sendmsg+0x219/0x270 [ 745.050495][T29900] ____sys_sendmsg+0x505/0x830 [ 745.050519][T29900] ? __pfx_____sys_sendmsg+0x10/0x10 [ 745.050548][T29900] ? import_iovec+0x74/0xa0 [ 745.050573][T29900] ___sys_sendmsg+0x21f/0x2a0 [ 745.050596][T29900] ? __pfx____sys_sendmsg+0x10/0x10 [ 745.050654][T29900] ? __fget_files+0x2a/0x420 [ 745.050677][T29900] ? __fget_files+0x3a0/0x420 [ 745.050706][T29900] __x64_sys_sendmsg+0x19b/0x260 [ 745.050729][T29900] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 745.050760][T29900] ? rcu_is_watching+0x15/0xb0 [ 745.050785][T29900] ? trace_sys_enter+0x25/0x100 [ 745.050812][T29900] do_syscall_64+0xfa/0x3b0 [ 745.050834][T29900] ? lockdep_hardirqs_on+0x9c/0x150 [ 745.050855][T29900] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.050870][T29900] ? clear_bhb_loop+0x60/0xb0 [ 745.050890][T29900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.050906][T29900] RIP: 0033:0x7f9f00d8eb69 [ 745.050921][T29900] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 745.050935][T29900] RSP: 002b:00007f9f01c97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 745.050956][T29900] RAX: ffffffffffffffda RBX: 00007f9f00fb5fa0 RCX: 00007f9f00d8eb69 [ 745.050969][T29900] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 745.050980][T29900] RBP: 00007f9f01c97090 R08: 0000000000000000 R09: 0000000000000000 [ 745.050991][T29900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 745.051002][T29900] R13: 0000000000000000 R14: 00007f9f00fb5fa0 R15: 00007ffc745ba238 [ 745.051031][T29900] [ 746.458217][T29938] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6429'. [ 746.490427][T29938] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6429'. [ 746.632224][T29944] netlink: 'syz.2.6431': attribute type 21 has an invalid length. [ 746.640142][T29944] netlink: 'syz.2.6431': attribute type 4 has an invalid length. [ 746.719267][T29944] netlink: 'syz.2.6431': attribute type 5 has an invalid length. [ 746.736963][T29944] __nla_validate_parse: 1 callbacks suppressed [ 746.736983][T29944] netlink: 3 bytes leftover after parsing attributes in process `syz.2.6431'. [ 747.005209][T29962] netlink: 'syz.0.6437': attribute type 3 has an invalid length. [ 747.026464][T29962] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6437'. [ 747.041454][T29964] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6439'. [ 747.109204][T29962] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6437'. [ 747.131407][T29962] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6437'. [ 747.153190][T28993] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 747.167852][T28993] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 747.308416][T29981] netlink: 'syz.2.6440': attribute type 1 has an invalid length. [ 747.328937][T29981] netlink: 208 bytes leftover after parsing attributes in process `syz.2.6440'. [ 747.349836][T29981] netlink: 'syz.2.6440': attribute type 1 has an invalid length. [ 747.383895][T29973] tipc: Enabled bearer , priority 0 [ 747.392540][T29973] syzkaller0: entered promiscuous mode [ 747.398518][T29973] syzkaller0: entered allmulticast mode [ 747.412818][T29973] tipc: Resetting bearer [ 747.607447][T29983] netlink: 440 bytes leftover after parsing attributes in process `syz.4.6441'. [ 747.639895][T29995] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6445'. [ 747.909565][T29973] tipc: Resetting bearer [ 747.986885][T29973] tipc: Disabling bearer [ 748.107296][ T30] audit: type=1800 audit(1754026884.854:21): pid=29999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.6444" name="memory.events" dev="tmpfs" ino=473 res=0 errno=0 [ 748.225584][T29990] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 748.461455][T30023] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6451'. [ 748.588300][T30029] veth1_to_team: entered allmulticast mode [ 748.664619][T30034] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6453'. [ 748.675340][T30034] validate_nla: 4 callbacks suppressed [ 748.675360][T30034] netlink: 'syz.0.6453': attribute type 6 has an invalid length. [ 748.697158][T30034] netlink: 'syz.0.6453': attribute type 4 has an invalid length. [ 748.822809][T30043] netlink: 'syz.1.6457': attribute type 13 has an invalid length. [ 749.539189][T30076] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 749.629383][ T5851] IPVS: starting estimator thread 0... [ 749.637138][T30082] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 749.712625][T30080] team0: Mode "" not found [ 749.761081][T30091] IPVS: using max 26 ests per chain, 62400 per kthread [ 749.917242][T30102] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 749.939880][T30102] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 750.261376][ T51] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 750.395039][T30128] tipc: Started in network mode [ 750.400524][T30128] tipc: Node identity 2ea6d51921f4, cluster identity 4711 [ 750.415766][T30128] tipc: Enabled bearer , priority 0 [ 750.434254][T30129] syzkaller0: entered promiscuous mode [ 750.439793][T30129] syzkaller0: entered allmulticast mode [ 750.441726][T30132] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 750.491691][T30129] tipc: Resetting bearer [ 750.555666][T30129] tipc: Disabling bearer [ 750.622853][T30140] bridge1: entered allmulticast mode [ 751.009411][T30164] bridge0: port 2(bridge_slave_1) entered disabled state [ 751.020865][T30171] FAULT_INJECTION: forcing a failure. [ 751.020865][T30171] name failslab, interval 1, probability 0, space 0, times 0 [ 751.043848][T30171] CPU: 1 UID: 0 PID: 30171 Comm: syz.2.6490 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 751.043873][T30171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 751.043885][T30171] Call Trace: [ 751.043892][T30171] [ 751.043901][T30171] dump_stack_lvl+0x189/0x250 [ 751.043924][T30171] ? __pfx____ratelimit+0x10/0x10 [ 751.043949][T30171] ? __pfx_dump_stack_lvl+0x10/0x10 [ 751.043967][T30171] ? __pfx__printk+0x10/0x10 [ 751.043996][T30171] ? netlink_unicast+0x82c/0x9e0 [ 751.044019][T30171] ? ___sys_sendmsg+0x21f/0x2a0 [ 751.044037][T30171] ? do_syscall_64+0xfa/0x3b0 [ 751.044072][T30171] should_fail_ex+0x414/0x560 [ 751.044104][T30171] should_failslab+0xa8/0x100 [ 751.044123][T30171] kmem_cache_alloc_noprof+0x73/0x3c0 [ 751.044146][T30171] ? skb_clone+0x212/0x3a0 [ 751.044170][T30171] skb_clone+0x212/0x3a0 [ 751.044194][T30171] __netlink_deliver_tap+0x404/0x850 [ 751.044229][T30171] ? netlink_deliver_tap+0x2e/0x1b0 [ 751.044254][T30171] netlink_deliver_tap+0x19c/0x1b0 [ 751.044278][T30171] netlink_sendskb+0x68/0x140 [ 751.044303][T30171] netlink_unicast+0x397/0x9e0 [ 751.044323][T30171] ? __asan_memcpy+0x40/0x70 [ 751.044352][T30171] ? __pfx_netlink_unicast+0x10/0x10 [ 751.044385][T30171] nfnetlink_rcv+0x2290/0x2520 [ 751.044442][T30171] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 751.044481][T30171] ? ref_tracker_free+0x63a/0x7d0 [ 751.044531][T30171] ? __netlink_deliver_tap+0x807/0x850 [ 751.044555][T30171] ? netlink_deliver_tap+0x2e/0x1b0 [ 751.044597][T30171] netlink_unicast+0x82c/0x9e0 [ 751.044629][T30171] ? __pfx_netlink_unicast+0x10/0x10 [ 751.044653][T30171] ? netlink_sendmsg+0x642/0xb30 [ 751.044675][T30171] ? skb_put+0x11b/0x210 [ 751.044695][T30171] netlink_sendmsg+0x805/0xb30 [ 751.044730][T30171] ? __pfx_netlink_sendmsg+0x10/0x10 [ 751.044860][T30171] ? aa_sock_msg_perm+0x94/0x160 [ 751.044885][T30171] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 751.044905][T30171] ? __pfx_netlink_sendmsg+0x10/0x10 [ 751.044928][T30171] __sock_sendmsg+0x219/0x270 [ 751.044954][T30171] ____sys_sendmsg+0x505/0x830 [ 751.044980][T30171] ? __pfx_____sys_sendmsg+0x10/0x10 [ 751.045009][T30171] ? import_iovec+0x74/0xa0 [ 751.045094][T30171] ___sys_sendmsg+0x21f/0x2a0 [ 751.045118][T30171] ? __pfx____sys_sendmsg+0x10/0x10 [ 751.045177][T30171] ? __fget_files+0x2a/0x420 [ 751.045195][T30171] ? __fget_files+0x3a0/0x420 [ 751.045224][T30171] __x64_sys_sendmsg+0x19b/0x260 [ 751.045247][T30171] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 751.045277][T30171] ? __pfx_ksys_write+0x10/0x10 [ 751.045296][T30171] ? rcu_is_watching+0x15/0xb0 [ 751.045328][T30171] ? do_syscall_64+0xbe/0x3b0 [ 751.045357][T30171] do_syscall_64+0xfa/0x3b0 [ 751.045383][T30171] ? lockdep_hardirqs_on+0x9c/0x150 [ 751.045407][T30171] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.045425][T30171] ? clear_bhb_loop+0x60/0xb0 [ 751.045448][T30171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.045466][T30171] RIP: 0033:0x7fc2b3f8eb69 [ 751.045484][T30171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 751.045500][T30171] RSP: 002b:00007fc2b4d3b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 751.045522][T30171] RAX: ffffffffffffffda RBX: 00007fc2b41b5fa0 RCX: 00007fc2b3f8eb69 [ 751.045537][T30171] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 751.045549][T30171] RBP: 00007fc2b4d3b090 R08: 0000000000000000 R09: 0000000000000000 [ 751.045560][T30171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 751.045572][T30171] R13: 0000000000000000 R14: 00007fc2b41b5fa0 R15: 00007fff49b4da58 [ 751.045604][T30171] [ 752.133364][T30193] tipc: Trying to set illegal importance in message [ 752.201510][T30193] Bluetooth: MGMT ver 1.23 [ 752.653519][T30208] hsr0: entered allmulticast mode [ 752.658855][T30208] hsr_slave_0: entered allmulticast mode [ 752.675405][T30208] hsr_slave_1: entered allmulticast mode [ 752.773780][T30213] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 753.002238][T30225] __nla_validate_parse: 11 callbacks suppressed [ 753.002257][T30225] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6508'. [ 753.050331][T30231] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6506'. [ 753.365758][T30248] FAULT_INJECTION: forcing a failure. [ 753.365758][T30248] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 753.400045][T30248] CPU: 0 UID: 0 PID: 30248 Comm: syz.0.6516 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 753.400079][T30248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 753.400091][T30248] Call Trace: [ 753.400099][T30248] [ 753.400108][T30248] dump_stack_lvl+0x189/0x250 [ 753.400132][T30248] ? __pfx____ratelimit+0x10/0x10 [ 753.400156][T30248] ? __pfx_dump_stack_lvl+0x10/0x10 [ 753.400174][T30248] ? __pfx__printk+0x10/0x10 [ 753.400196][T30248] ? __might_fault+0xb0/0x130 [ 753.400233][T30248] should_fail_ex+0x414/0x560 [ 753.400261][T30248] _copy_from_user+0x2d/0xb0 [ 753.400285][T30248] kstrtouint_from_user+0xc4/0x170 [ 753.400306][T30248] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 753.400341][T30248] proc_fail_nth_write+0x88/0x200 [ 753.400361][T30248] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 753.400388][T30248] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 753.400410][T30248] vfs_write+0x27b/0xa90 [ 753.400444][T30248] ? __pfx_vfs_write+0x10/0x10 [ 753.400491][T30248] ? __fget_files+0x2a/0x420 [ 753.400519][T30248] ? __fget_files+0x3a0/0x420 [ 753.400538][T30248] ? __fget_files+0x2a/0x420 [ 753.400566][T30248] ksys_write+0x145/0x250 [ 753.400591][T30248] ? __pfx_ksys_write+0x10/0x10 [ 753.400615][T30248] ? rcu_is_watching+0x15/0xb0 [ 753.400643][T30248] ? do_syscall_64+0xbe/0x3b0 [ 753.400670][T30248] do_syscall_64+0xfa/0x3b0 [ 753.400691][T30248] ? lockdep_hardirqs_on+0x9c/0x150 [ 753.400713][T30248] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 753.400730][T30248] ? clear_bhb_loop+0x60/0xb0 [ 753.400760][T30248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 753.400777][T30248] RIP: 0033:0x7f89ec18d61f [ 753.400794][T30248] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 753.400809][T30248] RSP: 002b:00007f89ecf36030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 753.400830][T30248] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f89ec18d61f [ 753.400843][T30248] RDX: 0000000000000001 RSI: 00007f89ecf360a0 RDI: 0000000000000004 [ 753.400854][T30248] RBP: 00007f89ecf36090 R08: 0000000000000000 R09: 0000000000000000 [ 753.400866][T30248] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 753.400875][T30248] R13: 0000000000000000 R14: 00007f89ec3b5fa0 R15: 00007ffdaec06808 [ 753.400906][T30248] [ 753.656728][T30242] block nbd4: server does not support multiple connections per device. [ 753.668067][T30242] block nbd4: shutting down sockets [ 754.130811][T30279] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6525'. [ 754.157972][T30279] macsec0: entered allmulticast mode [ 754.188893][T30279] veth1_macvtap: entered allmulticast mode [ 754.213997][T30279] macsec0: left allmulticast mode [ 754.241182][T30279] veth1_macvtap: left allmulticast mode [ 754.269497][ T5848] Bluetooth: hci2: command 0x0401 tx timeout [ 754.269913][ T51] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 754.418093][T30291] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 754.504581][T30294] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6532'. [ 754.616239][T30305] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6534'. [ 754.839755][T30318] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6537'. [ 754.859941][T30318] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6537'. [ 754.897057][T30320] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 754.919485][T30320] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 755.122380][T30334] netlink: 'syz.1.6540': attribute type 21 has an invalid length. [ 755.174175][T30338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6540'. [ 755.245691][T30338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6540'. [ 755.403946][T30334] netlink: 'syz.1.6540': attribute type 6 has an invalid length. [ 755.412269][T30334] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6540'. [ 755.745808][T30349] tipc: New replicast peer: 255.255.255.255 [ 755.752795][T30349] tipc: Enabled bearer , priority 10 [ 755.767468][T30349] tipc: Enabling of bearer rejected, already enabled [ 755.982155][T30366] openvswitch: netlink: Unknown key attributes 2 [ 756.079647][T30374] netlink: 'syz.4.6552': attribute type 9 has an invalid length. [ 756.136723][T30374] macvlan2: entered promiscuous mode [ 756.180768][T30374] hsr0: entered promiscuous mode [ 756.194146][T30374] macvlan2: entered allmulticast mode [ 756.462621][T30389] netlink: 'syz.4.6558': attribute type 83 has an invalid length. [ 756.499444][T30389] netlink: 'syz.4.6558': attribute type 83 has an invalid length. [ 756.547836][T30389] netlink: 'syz.4.6558': attribute type 83 has an invalid length. [ 756.557772][T30389] netlink: 'syz.4.6558': attribute type 83 has an invalid length. [ 756.574675][T30389] netlink: 'syz.4.6558': attribute type 83 has an invalid length. [ 756.585028][T30389] netlink: 'syz.4.6558': attribute type 83 has an invalid length. [ 756.600127][T30389] netlink: 'syz.4.6558': attribute type 83 has an invalid length. [ 756.767682][T30403] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 757.211432][T30420] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 757.607894][T30432] lo speed is unknown, defaulting to 1000 [ 757.867890][T30436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 757.927500][T30436] 8021q: adding VLAN 0 to HW filter on device team0 [ 757.998792][T30436] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 758.047607][T30432] lo speed is unknown, defaulting to 1000 [ 758.089675][T30432] lo speed is unknown, defaulting to 1000 [ 758.579881][T30452] 8021q: adding VLAN 0 to HW filter on device bond4 [ 758.915458][T30455] bond4: (slave veth3): Enslaving as an active interface with a down link [ 759.091442][T30432] infiniband syz0: set active [ 759.096252][ T5849] lo speed is unknown, defaulting to 1000 [ 759.111431][T30432] infiniband syz0: added lo [ 759.118965][T30465] [ 759.119522][T30432] syz0: rxe_create_cq: returned err = -12 [ 759.121315][T30465] ============================================ [ 759.121324][T30465] WARNING: possible recursive locking detected [ 759.121340][T30465] 6.16.0-syzkaller-06574-gd9104cec3e8f #0 Not tainted [ 759.121351][T30465] -------------------------------------------- [ 759.121358][T30465] syz.1.6577/30465 is trying to acquire lock: [ 759.121375][T30465] ffff88807abd4d28 (&dev_instance_lock_key [ 759.127382][T30432] infiniband syz0: Couldn't create ib_mad CQ [ 759.133360][T30465] #20){+.+.}-{4:4}, at: __netdev_update_features+0xcb1/0x1be0 [ 759.133408][T30465] [ 759.133408][T30465] but task is already holding lock: [ 759.139784][T30432] infiniband syz0: Couldn't open port 1 [ 759.146285][T30465] ffff88807abd4d28 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: dev_ethtool+0x716/0x19b0 [ 759.146339][T30465] and the lock comparison function returns 0: [ 759.146347][T30465] [ 759.146347][T30465] other info that might help us debug this: [ 759.146354][T30465] Possible unsafe locking scenario: [ 759.146354][T30465] [ 759.146361][T30465] CPU0 [ 759.146374][T30465] ---- [ 759.146378][T30465] lock(&dev_instance_lock_key#20); [ 759.146396][T30465] lock(&dev_instance_lock_key#20); [ 759.146414][T30465] [ 759.146414][T30465] *** DEADLOCK *** [ 759.146414][T30465] [ 759.146419][T30465] May be due to missing lock nesting notation [ 759.146419][T30465] [ 759.146425][T30465] 2 locks held by syz.1.6577/30465: [ 759.146435][T30465] #0: ffffffff8f509008 (rtnl_mutex){+.+.}-{4:4}, at: dev_ethtool+0x1d0/0x19b0 [ 759.161730][T30432] RDS/IB: syz0: added [ 759.164694][T30465] #1: ffff88807abd4d28 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: dev_ethtool+0x716/0x19b0 [ 759.176192][T30432] smc: adding ib device syz0 with port count 1 [ 759.178120][T30465] [ 759.178120][T30465] stack backtrace: [ 759.178134][T30465] CPU: 1 UID: 0 PID: 30465 Comm: syz.1.6577 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 759.178156][T30465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 759.178165][T30465] Call Trace: [ 759.178172][T30465] [ 759.178180][T30465] dump_stack_lvl+0x189/0x250 [ 759.178206][T30465] ? __pfx_dump_stack_lvl+0x10/0x10 [ 759.178224][T30465] ? __pfx__printk+0x10/0x10 [ 759.178246][T30465] ? print_lock_name+0xde/0x100 [ 759.178268][T30465] print_deadlock_bug+0x28b/0x2a0 [ 759.178286][T30465] validate_chain+0x1a3f/0x2140 [ 759.178305][T30465] ? __kernel_text_address+0xd/0x40 [ 759.178327][T30465] ? unwind_get_return_address+0x4d/0x90 [ 759.178345][T30465] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 759.178372][T30465] ? arch_stack_walk+0xfc/0x150 [ 759.178397][T30465] __lock_acquire+0xab9/0xd20 [ 759.178423][T30465] ? __netdev_update_features+0xcb1/0x1be0 [ 759.178443][T30465] lock_acquire+0x120/0x360 [ 759.178464][T30465] ? __netdev_update_features+0xcb1/0x1be0 [ 759.178485][T30465] ? kasan_save_free_info+0x46/0x50 [ 759.178505][T30465] ? kmem_cache_free+0x18f/0x400 [ 759.178529][T30465] ? ethnl_multicast+0xb6/0x100 [ 759.178556][T30465] __mutex_lock+0x187/0x1340 [ 759.178580][T30465] ? __netdev_update_features+0xcb1/0x1be0 [ 759.178602][T30465] ? do_raw_spin_lock+0x121/0x290 [ 759.178623][T30465] ? __netdev_update_features+0xcb1/0x1be0 [ 759.178644][T30465] ? __pfx___mutex_lock+0x10/0x10 [ 759.178666][T30465] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 759.178688][T30465] ? lockdep_hardirqs_on+0x9c/0x150 [ 759.178718][T30465] __netdev_update_features+0xcb1/0x1be0 [ 759.178745][T30465] ? __pfx___netdev_update_features+0x10/0x10 [ 759.178766][T30465] ? cfg80211_netdev_notifier_call+0x1ea/0x13c0 [ 759.178801][T30465] ? __pfx_cfg80211_netdev_notifier_call+0x10/0x10 [ 759.178828][T30465] ? __lock_acquire+0xab9/0xd20 [ 759.178854][T30465] ? do_raw_spin_lock+0x121/0x290 [ 759.178875][T30465] netdev_update_features+0x6d/0xe0 [ 759.178899][T30465] ? __pfx_netdev_update_features+0x10/0x10 [ 759.178928][T30465] macsec_notify+0x2f5/0x660 [ 759.178950][T30465] ? __pfx_macsec_notify+0x10/0x10 [ 759.178974][T30465] notifier_call_chain+0x1b3/0x3e0 [ 759.178994][T30465] netdev_features_change+0x85/0xc0 [ 759.179017][T30465] ? __pfx_netdev_features_change+0x10/0x10 [ 759.179040][T30465] ? security_capable+0x7e/0x2e0 [ 759.179065][T30465] dev_ethtool+0x1536/0x19b0 [ 759.179088][T30465] ? __pfx_dev_ethtool+0x10/0x10 [ 759.179113][T30465] ? dev_load+0x21/0x1f0 [ 759.179137][T30465] dev_ioctl+0x392/0x1150 [ 759.179173][T30465] sock_do_ioctl+0x22c/0x300 [ 759.179196][T30465] ? __pfx_sock_do_ioctl+0x10/0x10 [ 759.179215][T30465] ? __lock_acquire+0xab9/0xd20 [ 759.179244][T30465] sock_ioctl+0x576/0x790 [ 759.179265][T30465] ? __pfx_sock_ioctl+0x10/0x10 [ 759.179285][T30465] ? __fget_files+0x2a/0x420 [ 759.179302][T30465] ? __fget_files+0x3a0/0x420 [ 759.179317][T30465] ? __fget_files+0x2a/0x420 [ 759.179335][T30465] ? bpf_lsm_file_ioctl+0x9/0x20 [ 759.179357][T30465] ? __pfx_sock_ioctl+0x10/0x10 [ 759.179381][T30465] __se_sys_ioctl+0xf9/0x170 [ 759.179404][T30465] do_syscall_64+0xfa/0x3b0 [ 759.179427][T30465] ? lockdep_hardirqs_on+0x9c/0x150 [ 759.179448][T30465] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.179467][T30465] ? clear_bhb_loop+0x60/0xb0 [ 759.179486][T30465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.179503][T30465] RIP: 0033:0x7f3bd418eb69 [ 759.179519][T30465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 759.179535][T30465] RSP: 002b:00007f3bd4f23038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 759.179564][T30465] RAX: ffffffffffffffda RBX: 00007f3bd43b5fa0 RCX: 00007f3bd418eb69 [ 759.179577][T30465] RDX: 0000200000000100 RSI: 0000000000008946 RDI: 0000000000000003 [ 759.179590][T30465] RBP: 00007f3bd4211df1 R08: 0000000000000000 R09: 0000000000000000 [ 759.179602][T30465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 759.179613][T30465] R13: 0000000000000000 R14: 00007f3bd43b5fa0 R15: 00007ffccced5ad8 [ 759.179634][T30465] [ 759.708805][T30432] smc: ib device syz0 port 1 has pnetid [ 759.735756][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801e364400: rx timeout, send abort [ 759.744604][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801e365800: rx timeout, send abort [ 759.753456][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88801e364400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 759.767947][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88801e365800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.