last executing test programs: 6.340904511s ago: executing program 1 (id=1269): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'nr0\x00'}) syz_emit_ethernet(0x282, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x24c, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0xdb0b, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af03"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb04619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f604d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x3, 0x5, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545"}, {}]}}}}}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@remote, 0x8000000, 0x0, 0xff, 0x1, 0x66}, 0x20) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd0900300003003000000060ce902d120c2f0081e949b93897bc3b0000000000007d01ff020000000000000000000000000001120022eb"], 0xfdef) 5.529187639s ago: executing program 0 (id=1283): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000013c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x803, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x2a, 0x0, 0x1}, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x11, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x5, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0x401, 0x600, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'geneve1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x58840}, 0xd48a6aa11ac58053) 5.296632505s ago: executing program 1 (id=1287): syz_emit_ethernet(0x56, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86ddf8e54e27608c0c0000200601fe8000000000000000000000000000aafe8000000000000000000000000000a8fffa4001faf5391ee81db0239666d805d6f0c88d8dc0f4a8bb7056d00d264434c9f92e678645b4a3a18aefaf67533d75fedd66b9e478618aa9fac6f1fb617f99fa1e0785950e20983e30801182e7d24fed32a4ef35af0f2c82399dceea6537e61f1c874409c27779a7a3ffa23c20f7e4e22bb7b5c2831a9fac6e5e753e000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="80020008907800001e0aa007e000000200b70302"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x55, 0x2e5, 0x0, 0x0, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0x700, {@ip4=@empty}}}]}, 0x38}}, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0xc7ec}, 0x1c) r4 = socket$igmp6(0xa, 0x3, 0x2) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, 0x0, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x10000}}, 0x24) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="240000001e000505000000000000000012002b00461dc071caf2d43500d1f6c8a6ef0000968f7310db9f8bd5b27312c583dfdd5e9b24a98b645fa0cb754b282210c9c9b1dcb0d4a4de18079c56704cb037153284011556bcb1fa2c33826cd6d03afb99d072ae856e11c41792494724e49b6fe8"], 0x24}], 0x1}, 0x0) accept4(r4, &(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @private0}, &(0x7f0000000240)=0x80, 0x80800) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x1, 0x1, 0x101, 0x0, 0x0, {0x5, 0x0, 0x8}, [@CTA_PROTOINFO={0x30, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x2c, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0x7c0e9638}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0xd1}, @CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x2c93}, @CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0xa}, @CTA_PROTOINFO_SCTP_VTAG_ORIGINAL={0x8, 0x2, 0x1, 0x0, 0xfff}]}}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x800}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8880}, 0x48810) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000000000", @ANYRES32, @ANYBLOB="06001500"], 0x38}}, 0x8000) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=@newlink={0x40, 0x10, 0x49920d862a92143b, 0x100000, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x40}, 0x1, 0x0, 0x0, 0x8004}, 0x24000800) 4.650080824s ago: executing program 0 (id=1293): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000b00)=@filter={'filter\x00', 0x42, 0x4, 0x348, 0xffffffff, 0xd0, 0x1b8, 0x1b8, 0xffffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0, 0x0, {0x100000000000000}}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, [0x0, 0xffffff00, 0x0, 0xffffffff], 0x4e22, 0x4e20, 0x4e21, 0x4e23, 0x25, 0x81, 0xb, 0xfffffffa, 0x7f}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@inet=@socket3={{0x28, 'socket\x00', 0x2}}, @common=@unspec=@addrtype1={{0x28}}]}, @REJECT={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'wlan1\x00', 'pim6reg1\x00', {}, {}, 0x67}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x2000}}, @common=@ttl={{0x28}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x503, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x0) getsockopt$inet6_buf(r2, 0x29, 0x44, 0x0, &(0x7f0000000900)) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1e8}}, 0x0) 4.582604547s ago: executing program 4 (id=1294): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}, @IFLA_GRE_LINK={0x8, 0x1, r4}]}}}]}, 0x40}}, 0x0) sendto$packet(r1, &(0x7f0000000000)='1', 0x26, 0x0, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=@newlink={0x40, 0x10, 0x503, 0x4000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x20008040) 4.236281369s ago: executing program 0 (id=1297): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c00000020000103000000000002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) unshare(0x20000000) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f00000000c0)=0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) connect$netrom(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @bcast, 0x2}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x89b1, &(0x7f0000000040)={'bond0\x00', 0x7fff}) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r2, &(0x7f0000000640)=[{{0x0, 0xa00, &(0x7f0000000580)=[{&(0x7f0000000200)='$r', 0x2}], 0xfe, &(0x7f0000001a80)=[{0xc, 0x1}], 0xc}}], 0x1, 0x4004804) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa3, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x82, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), r3) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000880)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r4, @ANYBLOB="010000000000000000000100000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d7843e40108802800208024000100000000000100000000000000fdffff01000000000000000000000000000000001400040003000000ac1414bb00000000000000000600050000000000000100802400020073e591ec06154031d3954ac0e16752e72640f08b5281a8461d17d26d12f2bbb6060005000021000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39228c00098028000080060001000a0000001400020020010000000000000000000002000001050003000000000088000080060001000a000000140002002001000000f800000000000000000002050003000000001003800080060001008c0e000008000200ac1414aa05000300000000001c000080060001000200000008000200ac1414bb0500030000000000200004000e00000000000000fe800000000000000000000000000000000000009c0000802400020073961633df6dc9cb418b15afd0bae7b90f1e6cfed8bb423cf9285c474163154908000a00010000002400010000000000000000000000000000000000000000000000000000000000000000004800098028000080060001000a00000014000200fe8000000000000000000000000000bb05000300000000001c000080060001000200000008000200000000000500030000000000080005000100000008000100", @ANYRES32=r5], 0x22c}}, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x500000d, 0x810, 0xffffffffffffffff, 0x8981d000) 4.164866734s ago: executing program 4 (id=1298): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0) unshare(0x22020600) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYRES32], 0x50) socket$tipc(0x1e, 0x2, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16, @ANYBLOB="0000000000000000b7020000cb5e00008500000086000000b7080000000000007b8af8ff00000000b7080000540000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007", @ANYRES32=r3], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001d00070f000000000000000007000000", @ANYRES32=r4], 0x24}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="300000001600000328bd7000ffdbdf25021f04fe", @ANYRES32=r5, @ANYBLOB="0800080000001500ff08000100ac1414bb185ef4a631344c2bb7367fc3d8ccd4325eb93edc1a6d023f4a2568c5a1941906ae8b7d3a93416ad3ef3815fa12fd5634e9410978e339106563564aff6aeaf01579d83a8ef5507f9120123a3c98c27c7d3840e288c0f47a162a16552bc36b622385ed5b5b0c4f77a83dcdb0fc79139ba32f8cc8fb48c3"], 0x30}, 0x1, 0x0, 0x0, 0x44801}, 0x40) r6 = socket$inet(0x2, 0x80000, 0x100) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r8, &(0x7f0000000080)=ANY=[], 0x6) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f0000000380)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc804f9fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) sendmmsg$inet(r6, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @loopback}}}], 0x20}}], 0x1, 0x4040880) r10 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c00000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="00100000001480d5dd0012800a0001007678306f0000616e00864f0400028008001c00", @ANYRES32=r10, @ANYBLOB], 0x3c}}, 0x40090) socket$inet_tcp(0x2, 0x1, 0x0) 4.1640043s ago: executing program 3 (id=1299): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f0000000040)=@framed={{}, [@alu={0x4, 0x1, 0x4, 0x5, 0x5, 0x1}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000002000010027bd7000400000000a402080000000031000000014000200fc0200000000000000000000000000011400010020010000000000000000000000d1623fe70000007b207d7b05ec75f8837ced719552ac982eac"], 0x44}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c0000001000390400000000001b2347ea000000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc"], 0x5c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r2, 0x913e0000) r3 = openat$cgroup_ro(r2, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d7000/0x3000)=nil, 0x3000, 0x0, 0x13, r3, 0xedeca000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r4, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140)={0xa, 0x0}, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1d, 0x4, &(0x7f0000000300)=ANY=[@ANYRES16=r6], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x6}, 0x4) setsockopt$packet_fanout_data(r10, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500001c00000000fb028e7800000000e0000300"], 0x0) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000680)=r7, 0x4) r11 = socket(0x2c, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r11, 0x84, 0x72, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r11, 0x89e0, &(0x7f0000000080)={r8, r0}) sendmsg$inet(r8, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) socket$kcm(0x29, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) socket$inet_smc(0x2b, 0x1, 0x0) 4.163132928s ago: executing program 1 (id=1300): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000071163a000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f00)={r0, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="0a00000a51f09f852f0009000000080000000200", @ANYRES32, @ANYBLOB="0000000000000000000000000000ed0000000000", @ANYRES32=0x0, @ANYRES32], 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000071000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r5, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x2a, &(0x7f0000000040)=0x26d, 0x4) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r6}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0040009d0000cc800001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r7, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_devices(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="1e0308003c5ca601288763"], 0xffdd) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r8 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4e29, 0x6, @dev={0xfe, 0x80, '\x00', 0x2d}, 0xf}, 0x1c) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000100)=0xc081, 0x4) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) r9 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r9, 0x0, 0x40, &(0x7f0000000040)={'security\x00', 0x0, [0x3, 0x4e, 0x3f, 0x5, 0x6]}, &(0x7f00000000c0)=0x54) 3.956561634s ago: executing program 3 (id=1301): r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @default}, [@rose, @bcast, @netrom, @bcast, @null, @remote, @rose, @default]}, &(0x7f0000000080)=0x48, 0x800) accept4$netrom(r0, &(0x7f00000000c0)={{0x3, @default}, [@remote, @remote, @netrom, @bcast, @remote, @remote, @null, @null]}, &(0x7f0000000140)=0x48, 0x80000) (async) r1 = accept4$netrom(r0, &(0x7f00000000c0)={{0x3, @default}, [@remote, @remote, @netrom, @bcast, @remote, @remote, @null, @null]}, &(0x7f0000000140)=0x48, 0x80000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0xc) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000200), 0x10) (async) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000200), 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r2, r3, 0x0, 0x8, &(0x7f0000000240)='.,{\'!,/\x00'}, 0x30) close(r1) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x101000, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000300)={'pim6reg\x00', 0x10}) (async) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000300)={'pim6reg\x00', 0x10}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='memory.events\x00', 0x0, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='memory.events\x00', 0x0, 0x0) sendmsg$FOU_CMD_DEL(r6, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x68, 0x0, 0x110c, 0x70bd25, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x32}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @rand_addr=0x64010101}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private2}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x4c040) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f00000004c0)={0x0, 0x7ff}, &(0x7f0000000500)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000580)={r7, 0x3c, &(0x7f0000000540)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e20, @multicast2}, @in6={0xa, 0x4e20, 0x8, @empty, 0x8000}]}, &(0x7f00000005c0)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000580)={r7, 0x3c, &(0x7f0000000540)=[@in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e20, @multicast2}, @in6={0xa, 0x4e20, 0x8, @empty, 0x8000}]}, &(0x7f00000005c0)=0x10) getsockopt$inet_sctp6_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f0000000600)={r8, 0x2}, &(0x7f0000000640)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r6, 0x84, 0xf, &(0x7f0000000680)={r9, @in6={{0xa, 0x4e22, 0x8, @mcast1, 0x9}}, 0x429, 0x2, 0x1, 0x80000000, 0x2}, &(0x7f0000000740)=0x98) (async) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r6, 0x84, 0xf, &(0x7f0000000680)={r9, @in6={{0xa, 0x4e22, 0x8, @mcast1, 0x9}}, 0x429, 0x2, 0x1, 0x80000000, 0x2}, &(0x7f0000000740)=0x98) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000780)={'team0\x00', 0x0}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f00000007c0)={@remote, 0x3, 0x2, 0x0, 0x0, 0x5, 0x2e}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f00000007c0)={@remote, 0x3, 0x2, 0x0, 0x0, 0x5, 0x2e}, 0x20) socket$inet6_udplite(0xa, 0x2, 0x88) (async) socket$inet6_udplite(0xa, 0x2, 0x88) pwritev(r0, &(0x7f0000001800)=[{&(0x7f0000000800)="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", 0x1000}], 0x1, 0x7, 0x9) getsockname$packet(0xffffffffffffffff, &(0x7f0000001840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001880)=0x14) r12 = socket$nl_rdma(0x10, 0x3, 0x14) bind$netlink(r12, &(0x7f00000018c0)={0x10, 0x0, 0x25dfdbff, 0x40000000}, 0xc) r13 = bpf$ITER_CREATE(0x21, &(0x7f0000001a40)={r6}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b40)={0x18, 0x10, &(0x7f0000001900)=@raw=[@map_idx={0x18, 0xa, 0x5, 0x0, 0x9}, @ldst={0x3, 0x2, 0x2, 0xa, 0x8, 0x100, 0x4}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfa0}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_val={0x18, 0x7, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0xaf0}, @ldst={0x1, 0x2, 0x6, 0x8, 0x8, 0x2, 0xfffffffffffffff0}, @jmp={0x5, 0x1, 0xa, 0x1, 0x6, 0x0, 0x8}], &(0x7f0000001980)='GPL\x00', 0x2, 0x80, &(0x7f00000019c0)=""/128, 0x40f00, 0x51, '\x00', r10, 0x0, r13, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001a80)={0x5, 0x8, 0x6}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000001ac0)=[r6, r6, r6, r12, r6, r6], &(0x7f0000001b00)=[{0x2, 0x3, 0x3, 0x7}, {0x2, 0x4, 0xd, 0x1}], 0x10, 0x4}, 0x94) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r14 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_tcp_SIOCINQ(r14, 0x541b, &(0x7f0000001c00)) close(r3) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r12, 0x8933, &(0x7f0000001d40)={'batadv_slave_1\x00', 0x0}) sendmsg$inet(r0, &(0x7f0000001f40)={&(0x7f0000001c40)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f0000001d00)=[{&(0x7f0000001c80)="cbac683fd1e7773bbd7ec5fd312bc15bfa5d191c6e6aa5cfd8caffbb17cc90767e445e2ca3", 0x25}, {&(0x7f0000001cc0)="b4ceef1d78c68ba9c42a5232c72adf4a0ac7851e7b8ca1bade91eb61336b144ca93635", 0x23}], 0x2, &(0x7f0000001d80)=[@ip_tos_u8={{0x11}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x65}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @private=0xa010101, @empty}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r15, @dev={0xac, 0x14, 0x14, 0x29}, @private=0x8}}}, @ip_retopts={{0xf8, 0x0, 0x7, {[@noop, @end, @ssrr={0x89, 0x13, 0xba, [@rand_addr=0x64010102, @broadcast, @remote, @multicast2]}, @ssrr={0x89, 0x1b, 0x29, [@multicast1, @rand_addr=0x64010100, @multicast1, @empty, @remote, @local]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x3c, 0x5, 0x1, 0x5, [{@multicast1, 0x4}, {@loopback, 0x3}, {@multicast1, 0x33}, {@broadcast, 0x101}, {@loopback, 0x2}, {@loopback, 0x4}, {@empty, 0xa0}]}, @timestamp_prespec={0x44, 0x34, 0x4b, 0x3, 0x8, [{@dev={0xac, 0x14, 0x14, 0x44}, 0x4}, {@broadcast, 0x9}, {@private=0xa010101, 0xfffffffa}, {@local, 0x3}, {@empty, 0xfffffffe}, {@loopback, 0x3}]}, @timestamp={0x44, 0x14, 0x14, 0x0, 0x3, [0x85b, 0x11, 0x8, 0x7]}, @end, @timestamp_addr={0x44, 0x2c, 0xb9, 0x1, 0x9, [{@private=0xa010101, 0x4}, {@rand_addr=0x64010102, 0xfa}, {@loopback, 0xffffffff}, {@empty, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x400}]}]}}}], 0x198}, 0x40) ioctl$BTRFS_IOC_BALANCE(r6, 0x5000940c, 0x0) 3.794173438s ago: executing program 2 (id=1303): epoll_pwait(0xffffffffffffffff, 0x0, 0xffffff12, 0xfe, &(0x7f00000001c0), 0xffffffffffffffa1) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) connect$netlink(0xffffffffffffffff, &(0x7f0000000140)=@proc={0x10, 0x0, 0x25dfdbfe, 0x80}, 0xc) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r1) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, r2, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x22008800}, 0x8) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000005c0)='sched_switch\x00', r4, 0x0, 0x2}, 0x18) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8) write$cgroup_int(r6, &(0x7f00000001c0)=0x8200000000000000, 0xfffffdef) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000400)=ANY=[@ANYRES8=r6, @ANYRESOCT=r5, @ANYRESOCT=r2, @ANYRES8=r3, @ANYRESOCT], 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8b04, &(0x7f0000000040)={'virt_wifi0\x00', @link_local}) getpeername$unix(r6, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="5800000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000008d020600300012800b000100697036746e6c000020000280050009000400000014000200fe8000000000000000000000000000bb0800040009", @ANYRESDEC], 0x58}}, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f00000003c0)={0x8a80, 0x0, 0xb, 0x8000, 0x2}) 3.679545183s ago: executing program 3 (id=1304): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth0_vlan\x00', 0x0}) socket(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e3, &(0x7f0000000180)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r2 = gettid() r3 = socket(0x10, 0x803, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r4, 0x0, 0x10, &(0x7f00000006c0)="170000000200020000ffbe8c5ee17688a2003c000303000afdff0230040000d90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff0100000001000000", 0xc0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000304f9ffbffffedbdf2500007400", @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1400030076"], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) 3.564796131s ago: executing program 4 (id=1305): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0xa6, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x4000) write(r3, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000", 0x17) sendmsg$can_bcm(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d6fe682c6100000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x1d, r4, 0x0, 0x4000}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x4044001) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r6, 0x28, 0x2, &(0x7f0000000000), 0x8) socket$inet6_sctp(0xa, 0x801, 0x84) unshare(0x400) bpf$PROG_LOAD(0x23, 0x0, 0x0) getsockopt$SO_TIMESTAMP(r6, 0x1, 0x1d, &(0x7f0000000080), &(0x7f0000000100)=0x4) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f00000005c0)={0x0, @in6={{0xa, 0x4e24, 0x1, @mcast2, 0x10001}}, [0x2, 0x8, 0x2, 0xffffffffffffffff, 0x7, 0x5, 0x8, 0x9, 0x7, 0xc, 0x1, 0x6, 0x2, 0x7, 0x5]}, &(0x7f0000000140)=0x100) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000180)={0x6, 0x4, 0x3, 0x19, r7}, 0x10) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r8}, 0x10) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r9, &(0x7f0000000000)="05000000010001", 0x7) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e746572009c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a300000000070000380680000800800034000000002"], 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0x8880) 3.394882645s ago: executing program 3 (id=1306): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(0xffffffffffffffff, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002e00)={0x1c, 0x0, 0xba960a2220112c19, 0x70bd2f, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x840) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)={0x14, 0x3, 0x1, 0x301, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0xc014}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)={0x14, 0x3, 0x1, 0x301, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0xc014}, 0x0) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x4804) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1) (async) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r0, &(0x7f0000000580)="8ec6b1ee58ca086c1650eb9aff0300000000000041bedf1145bb9b3a049dc5f35a05b9fc944a17802a5fdf559669f0a89c28db4d911720f368d3ed2d2ed06396b7d4db9611ee1eac8fedc33624e74db8132eb72e5597540da0e132c70a459ee4bdf7c11943165d410ee244413fd50ea20314a1606edfc194b676d720d59daf97c48a58e5b03e32015a61dd1f25d0bb27670b359a621f7e633bab5ad1dc74b534c792046ea7146144d80b4f389897a1bcbed6545158815bde9fb27bc5", &(0x7f0000000740)=""/4096}, 0x20) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r0, &(0x7f0000000580)="8ec6b1ee58ca086c1650eb9aff0300000000000041bedf1145bb9b3a049dc5f35a05b9fc944a17802a5fdf559669f0a89c28db4d911720f368d3ed2d2ed06396b7d4db9611ee1eac8fedc33624e74db8132eb72e5597540da0e132c70a459ee4bdf7c11943165d410ee244413fd50ea20314a1606edfc194b676d720d59daf97c48a58e5b03e32015a61dd1f25d0bb27670b359a621f7e633bab5ad1dc74b534c792046ea7146144d80b4f389897a1bcbed6545158815bde9fb27bc5", &(0x7f0000000740)=""/4096}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x4000000}, [@map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4000000}, @generic={0x66, 0x8, 0x0, 0x0, 0xff000000}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x200}, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}, {0x85, 0x0, 0x0, 0xb4}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) 2.849549995s ago: executing program 2 (id=1307): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079109700000000007b0ae8ff000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3f}, 0x48) (async) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000000), &(0x7f0000000080)=0x4) 2.849072673s ago: executing program 4 (id=1308): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) unshare(0x60600) socket$kcm(0xa, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) socket$inet(0x2, 0x2, 0x1) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, 0x0, &(0x7f0000000140)=r8}, 0x20) write$cgroup_subtree(r6, &(0x7f0000000140)=ANY=[], 0x48) splice(r5, 0x0, r7, 0x0, 0x3000, 0x100000000000000d) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r9, r4, 0x4, r4}, 0x7) close(r3) r10 = socket$unix(0x1, 0x1, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x800003, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r12, {}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.721016235s ago: executing program 3 (id=1309): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'geneve0\x00', 0x0}) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000180)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0), 0x50) r4 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(r4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000009"], 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000006000000040000000100000000000000", @ANYRES32=r5], 0x50) close(r5) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r6}, &(0x7f0000000840), &(0x7f0000000880)=r5}, 0x20) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e1d, @rand_addr=0x64010101}, 0x10) r7 = accept$unix(r3, &(0x7f00000000c0)=@abs, &(0x7f0000000000)=0x6e) ioctl$BTRFS_IOC_SEND(r7, 0x40489426, &(0x7f0000000200)={{r3}, 0x1, &(0x7f0000000140)=[0x8], 0x6, 0x8, 0x1}) getpeername$packet(r3, 0x0, &(0x7f00000002c0)) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x13}}}, 0x24}}, 0x20044810) 2.71971886s ago: executing program 2 (id=1310): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_TXQLEN={0x8, 0xd, 0x4}, @IFLA_OPERSTATE={0x5, 0x10, 0x7a}]}, 0x44}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0) unshare(0x22020600) r2 = socket$inet6(0xa, 0x3, 0x38) setsockopt$inet6_int(r2, 0x29, 0x7, &(0x7f0000000040)=0xeffe, 0x4) r3 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$sock(r3, &(0x7f0000003240)={0x0, 0x0, 0x0}, 0x1) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0xfff}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r5, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f00000001c0)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x13, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2c, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r9 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r9, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) setsockopt$sock_int(r9, 0x1, 0x21, &(0x7f0000000940)=0x8, 0x4) sendmmsg$alg(r9, &(0x7f0000000600)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, {0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)="6da995a9182b34dfc2cc63ff0b558c2e141ad35a71474f52da71b02366050e", 0x1f}], 0x1, &(0x7f0000000980)=[@assoc={0x18, 0x117, 0x4, 0x10000006}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0xf8, 0x117, 0x2, 0xdd, "6cb8d07a205f8b5c1c3130141d8ab2e6cc75b8f8d3a9b4e00c660440cbb4ca3122bb75dcdee9daea65205532ad6a8ee9ad4d6559d19234632a65135e3b52acd3c4231af3057578f311f53ac26202e93ac41bbde95999f171c4cc772e5489f573cfdc1c62032fafbd40a0a17964557507cae6de12e08fee1a330d040288fce12eb59509293ee37a12d8041a75c53ce96b8219199941d8028e29e16db73b92aecbd2eba38d96b0b8bbc3833d064d007008f0a9e607bb36a3a4bc129c3017cda1637e0a86add154106dfb2c4923781d2926658f9b08603bc55b6eed735f48"}, @iv={0x108, 0x117, 0x2, 0xef, "1c97717bbed47e3ee6637b9ef0c23fabbe45617d033585b20c9e4d14fb301b6980d075dbe189d486713409d6bd8fbf38bdc8eb4fd0db74168518242ea6cb8494e30233747b48976411c477a464b7feebec0a86ca3ec17236e2a4808aa33ddf8e3740417c8452f642fe2dfc4880ea6e50ff844fe984df0d2397885ee7390f3c011a6df335dcd512e7367ae11becbcea4f4b233067ee17c1bd30b9720873d64c1e4c3b24d4017eda8357c0e79aeb71d73e52cfd508faddf9dd20bd313a495675117be02cd5a4e9773b9c9f4afc1fbc44bc09af87e70e3366689f55aff7707e66439d36d38ba635c2a510abe86e000000"}], 0x230, 0x20008000}], 0x2, 0x40800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 1.146163843s ago: executing program 2 (id=1311): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="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", 0x1b3}, {&(0x7f0000000300)="9f1ac09f155c1291fc8baa01adb9b575263c1a877ef8644bccc1143c6da61222f05eacf50665f3905cc2fd3e4e81e2a13e7fcca4b10085ea82589f9511a2f87ee914c9e0894139310b5457cfe7ca3ae3dade5d7a11f014f2bbdec62e2df3daf9875c79c6763fdcb8830f378346bd7c5c71ab8fffc299f6aea8ae05a727e64cbf8c3de5c36604fa3a7f43c2d51832aa29a52a9dd46c823bc89a7cc268e91fff716052173384c4e76c9921c2accb039cbf2cfb99a47371db803c3dce71aa0555a2c0fdb6c8e812ac6974d7b3d749bbc7f90a6a79dd2d20ff1637187bf9b58377bd5ae528ea9724f55170710f20afb05daee9af157462e409255943c5beacc8f0c9140b82f1a835cfd1675c0a833032324dd37a901d33d11497fcc9cb469297b1631d0e09b00497628399389129d30e098b5547c985ae9ac28c6cd154fe71cfddd82fb86bf475a11ec273", 0x149}, {&(0x7f00000012c0)="8e39308f7428bb361aa0e207e2191e9248da9eac174411869ef60059a981c6a11223cca963f4b365a2419adcb920c2a14965defd6186c5bfc157b6c1c219985ea4badc7bf93f3c939e452c503f86abee100fd05e2367155747876bd524b58bf60f115d5ac1d8bcd3dc85840f8ee47f46c74a4d11f53e68baa8de704b0d9b419407f8ddf3ec6b5dffa0d41dea9381328cacda24d9a3abd058062ad7ad510b02816e20128a7dedd60e86cb5e679599faad3d09e770721f2d5db2e56b1e0972c331f365076d7bdeff03a3ca3f9926227c5a8cd0a4353819b0d37240503464cea7ad56fcdd32a12249d89d50685ff6742a95f669b780b80cfb70e90dee859d9ba7cf3481464ec7c3caefd5c605e66a3d78b6009a7ff6a92ae0fb552ea843ab8f734ffa9d9c09cf3880d8c2fb2d69c43a2f226b82540e3d5ff90ab3dfebea678aefae560a219fc38ec4003d06d073f7d0c0b00e507ab3434fd940f78b533fa8a1b87eb1ef9ab834231322cec017924a", 0x16d}], 0x3, 0x0, 0x0, 0x44000}], 0x1, 0x8000) recvmmsg(r1, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0xffffff0b}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000028c0)=""/4096, 0x1000}], 0x1}, 0xf}], 0x2, 0x2101, 0x0) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) (async) accept$alg(r0, 0x0, 0x0) (async) sendmmsg$alg(r1, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="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", 0x1b3}, {&(0x7f0000000300)="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", 0x149}, {&(0x7f00000012c0)="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", 0x16d}], 0x3, 0x0, 0x0, 0x44000}], 0x1, 0x8000) (async) recvmmsg(r1, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0xffffff0b}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000028c0)=""/4096, 0x1000}], 0x1}, 0xf}], 0x2, 0x2101, 0x0) (async) 998.664431ms ago: executing program 1 (id=1312): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x1014, &(0x7f0000000fc0)=""/4116, 0x0, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="dc010000100000001800000000000000000000000000000095000000000000008d9062820b805b34b78cd182a01ecb91883b0a35102f01324235980ad30eec31c3ef5aa5f388d90180b341fe855c2dd81ed8f08c8d0a5e7e73f550d9461d75cb56882bcd494988742cec70bccbc32951d3f9d772b8a3d31048f518cc3e2ac4b79c989dd9a916d196984bd6d75f6f1a8931038fafd5a689297fee3cca9cc34c2a263835e34e09ae067cea299ac864ec133ab03255cd082d9d5386e5b6a48cec6913e6ea6e7c8a7df69b8e5bdeafa1a00934784c00"], &(0x7f00000003c0)='syzkaller\x00', 0x5, 0x9c, &(0x7f0000000540)=""/156, 0x0, 0x4}, 0x2f) 916.591156ms ago: executing program 3 (id=1313): r0 = socket(0x10, 0x3, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) listen(r1, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000200)=0x2, 0x43) shutdown(r1, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000280)={'syztnl1\x00', &(0x7f00000005c0)={'gretap0\x00', 0x0, 0x8, 0x700, 0x8001, 0x5, {{0x32, 0x4, 0x0, 0x3a, 0xc8, 0x64, 0x0, 0x3, 0x2, 0x0, @multicast1, @broadcast, {[@timestamp_addr={0x44, 0x44, 0x75, 0x1, 0x7, [{@empty, 0xe}, {@broadcast, 0x5b}, {@private=0xa010101, 0x5}, {@multicast1, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty, 0xfffffffe}, {@multicast1, 0xa00}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}]}, @end, @rr={0x7, 0x13, 0xe4, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @local]}, @generic={0x82, 0x3, 'v'}, @timestamp_addr={0x44, 0x3c, 0x8b, 0x1, 0xc, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@multicast1, 0x4}, {@rand_addr=0x64010102, 0x6}, {@dev={0xac, 0x14, 0x14, 0x31}, 0x2}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x3}, {@multicast2, 0x5}, {@loopback, 0x149fea77}]}, @ssrr={0x89, 0x17, 0x5b, [@private=0xa010102, @multicast1, @remote, @multicast2, @remote]}, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000000)={0x5, 0x4, 0x9, 0x59, 0x1}) r6 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r6, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r7, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0x3, &(0x7f0000000600)=ANY=[@ANYRES32, @ANYRES16=r8], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x14, 0x13, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18f5000040000000e8fffffffe7f00e71bf82036e181b485a97fc80018110000c85f460de904cf9cb1c8b6f561bcce84c3a5d79883c76ca1a6ea6b6237f813acfa9554204c1fd838cb7a64386fc9603c5c7b9b4c64a5c7e42f5845509cf5ab864313f8d9536851d923ceb172fe40c1ecd3f3786cf6291da2e4126a6b2017744029df64d3018968f36c853905744d4ab87cdcfe86eecee439a37bdbfb82f0e15a20154f41e6d19e41d9c744b33a62eb04aca7d9450c4f97ce8d10c8765b752797d717233558cf7dede8fd22d1c4", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001852000008000000000000000000000018310000020000000000000000000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x6, 0xbc, &(0x7f0000000480)=""/188, 0x41000, 0x46, '\x00', r5, @fallback=0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x0, 0xb, 0xdd, 0x9}, 0x10, r7, r2, 0x0, &(0x7f0000000780)=[r3, r0, r3, r3, r3, r3, r3], 0x0, 0x10, 0x48}, 0x94) ppoll(&(0x7f0000000080)=[{r3}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r9}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r10 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r10, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x40, r11}) ioctl$sock_inet6_tcp_SIOCINQ(r10, 0x8936, &(0x7f0000000000)) 916.174085ms ago: executing program 4 (id=1314): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0x6, 0xffff}, {0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007663616e000000000400028008000a"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x4008840) (async, rerun: 32) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x43}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async, rerun: 64) r1 = socket$can_raw(0x1d, 0x3, 0x1) (rerun: 64) sendmsg$can_raw(r1, &(0x7f0000000240)={&(0x7f0000000080), 0x10, &(0x7f0000000100)={&(0x7f00000000c0)=@can={{0x3}, 0x0, 0x3, 0x0, 0x0, "42c68941fa3efcc0"}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 884.635209ms ago: executing program 2 (id=1315): unshare(0x22020600) unshare(0xa010600) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x10012, r2, 0x0) openat$cgroup_ro(r2, &(0x7f0000000000)='cgroup.controllers\x00', 0x0, 0x0) 866.063227ms ago: executing program 1 (id=1316): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth0_vlan\x00', 0x0}) socket(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e3, &(0x7f0000000180)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r2 = gettid() r3 = socket(0x10, 0x803, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r4, 0x0, 0x10, &(0x7f00000006c0)="170000000200020000ffbe8c5ee17688a2003c000303000afdff0230040000d90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff0100000001000000", 0xc0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000304f9ffbffffedbdf2500007400", @ANYRES32=r1, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="1400030076"], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) 780.802214ms ago: executing program 0 (id=1317): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r2, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) r3 = socket$nl_generic(0x10, 0x3, 0x10) pwritev(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f00000005c0)="7623ef2829e01dc13938ecd4609ecc076f48be439b5cab841ecb854119331a106cd8244ac55e2b61d6089cad78d197d9ad82b11e41dcdbb548fb7bed7593073434ef27e716982247f3ba1706cc9f60a20692905f04c0a45f1dbdfa207e0db361", 0x60}], 0x1, 0x6, 0x4) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="800100003e000701feffffff00000000047c00000800428004000800"], 0x180}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f0000000080)={0x10001, {{0xa, 0x4e24, 0x101, @mcast2, 0x80000001}}}, 0x88) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r5, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) 636.669228ms ago: executing program 2 (id=1318): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r1) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x40, r2, 0x1, 0x0, 0xffffffff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000d0}, 0x0) shutdown(r0, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f00000001c0)) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@alu={0x4, 0x1, 0xb, 0x0, 0x5, 0x8, 0x10}]}, &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) connect$inet6(r0, &(0x7f0000000dc0)={0xa, 0x3, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='dctcp\x00', 0x6) 364.282771ms ago: executing program 4 (id=1319): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) unshare(0x22020600) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) unshare(0x12010000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00', r1}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) ppoll(0x0, 0x0, 0x0, &(0x7f0000000580), 0x8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r3, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x2e8}}], 0x2, 0x800) pread64(r2, 0x0, 0x0, 0x100000000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) r4 = accept(r0, 0x0, 0x0) sendmsg$inet6(r4, &(0x7f0000000240)={&(0x7f0000000040)={0xa, 0x4e20, 0x6, @local, 0x4}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000080)="f40f3085494c17294d226a174e8cf1ed7a4bc2f47e837c598e66aebec4360db5f01e6f9d1b9bd22fdd2a92e9f33b2aa8b75349ed6befdc87c5e83804cfcd63cded66002a9c3bd1daabbadb55eabcf9b45a5dae7104b8886a680a09371ae6bd5c04bb45625f96c4c53d651286ba33c4f05aaee59562b73e2c6b596958bbcee364ebe5e6b481b779e52f91cefec07a9ead67d08d5e87657600b329b9aa4f52694dd814f23b8a961a6c9caecda6779230aeb7e22c106ee52cd3b09cbf45096c541879fbb8d9a36256ead8b50d7ac655eec50d4f045ae178429a0eb0", 0xda}], 0x1}, 0x8014) syz_genetlink_get_family_id$wireguard(&(0x7f00000013c0), r4) recvmmsg$unix(r4, &(0x7f0000006cc0)=[{{&(0x7f00000002c0), 0x6e, &(0x7f0000000780)=[{&(0x7f0000000380)=""/159, 0x9f}, {&(0x7f0000000440)=""/120, 0x78}, {&(0x7f00000005c0)=""/194, 0xc2}, {&(0x7f00000004c0)=""/138, 0x8a}, {&(0x7f00000006c0)=""/52, 0x34}, {&(0x7f0000000700)=""/121, 0x79}], 0x6, &(0x7f0000000800)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xe0}}, {{&(0x7f0000000900), 0x6e, &(0x7f0000000cc0)=[{&(0x7f0000000980)=""/139, 0x8b}, {&(0x7f0000000a40)=""/149, 0x95}, {&(0x7f0000000b00)=""/192, 0xc0}, {&(0x7f0000000bc0)=""/202, 0xca}, {&(0x7f0000000dc0)=""/152, 0x98}, {&(0x7f0000001400)=""/4096, 0x1000}], 0x6, &(0x7f0000000e80)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}}, {{&(0x7f0000000f00), 0x6e, &(0x7f0000001240)=[{&(0x7f0000000f80)=""/42, 0x2a}, {&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000000fc0)=""/28, 0x1c}, {&(0x7f0000001000)=""/79, 0x4f}, {&(0x7f0000001080)=""/174, 0xae}, {&(0x7f0000001140)=""/198, 0xc6}], 0x6, &(0x7f00000012c0)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}}, {{&(0x7f0000003400), 0x6e, &(0x7f0000003980)=[{&(0x7f0000003480)=""/47, 0x2f}, {&(0x7f00000034c0)=""/221, 0xdd}, {&(0x7f00000035c0)=""/247, 0xf7}, {&(0x7f00000036c0)=""/203, 0xcb}, {&(0x7f00000037c0)=""/253, 0xfd}, {&(0x7f00000038c0)=""/31, 0x1f}, {&(0x7f0000003900)=""/89, 0x59}], 0x7}}, {{&(0x7f0000003a00)=@abs, 0x6e, &(0x7f0000005dc0)=[{&(0x7f0000003a80)=""/63, 0x3f}, {&(0x7f0000003ac0)=""/4096, 0x1000}, {&(0x7f0000004ac0)=""/252, 0xfc}, {&(0x7f0000004bc0)=""/4096, 0x1000}, {&(0x7f0000005bc0)=""/6, 0x6}, {&(0x7f0000005c00)=""/170, 0xaa}, {&(0x7f0000005cc0)=""/131, 0x83}, {&(0x7f0000005d80)=""/38, 0x26}], 0x8, &(0x7f0000005e40)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x138}}, {{&(0x7f0000005f80), 0x6e, &(0x7f0000006140)=[{&(0x7f0000006000)=""/114, 0x72}, {&(0x7f0000006080)=""/135, 0x87}], 0x2, &(0x7f0000006180)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}}, {{&(0x7f00000061c0)=@abs, 0x6e, &(0x7f00000066c0)=[{&(0x7f0000006240)=""/228, 0xe4}, {&(0x7f0000006340)=""/202, 0xca}, {&(0x7f0000006440)=""/145, 0x91}, {&(0x7f0000006500)=""/127, 0x7f}, {&(0x7f0000006580)=""/188, 0xbc}, {&(0x7f0000006640)=""/11, 0xb}, {&(0x7f0000006680)=""/62, 0x3e}], 0x7, &(0x7f0000006740)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{0x0, 0x0, &(0x7f0000006a80)=[{&(0x7f0000006780)=""/229, 0xe5}, {&(0x7f0000006880)=""/29, 0x1d}, {&(0x7f00000068c0)=""/54, 0x36}, {&(0x7f0000006900)}, {&(0x7f0000006940)=""/70, 0x46}, {&(0x7f00000069c0)=""/168, 0xa8}], 0x6, &(0x7f0000006c00)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}}], 0x8, 0x20, &(0x7f0000006b00)={0x77359400}) 264.650431ms ago: executing program 0 (id=1320): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1, 0xe, &(0x7f0000000b00)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0xfffffffd}, 0x10}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) (async) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r2, &(0x7f0000001140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@sndinfo={0x20, 0x84, 0x2, {0x3, 0x200, 0x2, 0x3c}}], 0x20, 0x8000}], 0x1, 0x0) (async) sendmmsg$inet_sctp(r2, &(0x7f0000001140)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@sndinfo={0x20, 0x84, 0x2, {0x3, 0x200, 0x2, 0x3c}}], 0x20, 0x8000}], 0x1, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x401, 0xfffffffe, 0x0, 0xffffffff}, 0x10) close(r3) (async) close(r3) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) (async) bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r5, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r5, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r5, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) (async) bind$tipc(r5, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) bind$tipc(r4, 0x0, 0x0) (async) bind$tipc(r4, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000080)={0x0, 0x401, 0x1, [0x7]}, &(0x7f00000000c0)=0xa) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000100)={r6, 0x4}, 0x8) (async) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000100)={r6, 0x4}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071121400000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3) sendmsg$NL80211_CMD_SET_PMK(r3, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x84, r7, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x69}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "1db8d624977ad18d5be10fbf18babf6b"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "d621d6e1bdebf1489bbc3e2cac598e4a"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "74ed9fcb333fbabb7914c9075464add5"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "289c84dcb229d7e624719c62e2078ae7"}]}, 0x84}, 0x1, 0x0, 0x0, 0xc050}, 0x1) (async) sendmsg$NL80211_CMD_SET_PMK(r3, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x84, r7, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x69}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "1db8d624977ad18d5be10fbf18babf6b"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "d621d6e1bdebf1489bbc3e2cac598e4a"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "74ed9fcb333fbabb7914c9075464add5"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "289c84dcb229d7e624719c62e2078ae7"}]}, 0x84}, 0x1, 0x0, 0x0, 0xc050}, 0x1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x94) (async) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r8}, 0x10) 191.445823ms ago: executing program 1 (id=1321): r0 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x7, 0xc, 0x0, 0x1, 0x3, 0x9, 0x7, 0x1, 0x0}, &(0x7f00000003c0)=0x20) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={r1, 0x80, 0x2, 0x9}, 0x10) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, @ipv4={'\x00', '\xff\xff', @dev}, @mcast1}}) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x600, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xf8, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0xe4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x52, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x5}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0x2c, 0x3, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf8}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="0902000000000000000001000000050002000a00000014000700ff00000000000000000000000000000108000b00", @ANYRESOCT], 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) unshare(0x6a040000) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) socket$l2tp(0x2, 0x2, 0x73) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_NET_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[], 0x30}}, 0x20088006) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r7, &(0x7f0000000280)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}, 0x1c) socket$nl_sock_diag(0x10, 0x3, 0x4) 0s ago: executing program 0 (id=1322): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='rcu_utilization\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x8}, 0x20) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x4000, 0x0, 0x5, 0x2}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000300), r2) sendmsg$NET_DM_CMD_START(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r3, 0x1}, 0x14}}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, 0x0, &(0x7f0000000300)) bind$netlink(0xffffffffffffffff, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000700)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @rand_addr=0xe0000000}}}}}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x4804) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="e00000000001010400000000000000000a000000440001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c000280050001000000000006000340000200003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000070000000000000000010c00028005000100000000000800074000000000440010800800024000000fff080002400000000708"], 0xe0}}, 0x0) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f00000001c0)={'broute\x00', 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x1, 0x10000000000000], 0x0, 0x0}, 0x78) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) unshare(0x68040200) r7 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$EBT_SO_SET_COUNTERS(r5, 0x0, 0x81, &(0x7f0000000340)={'filter\x00', 0x0, 0x0, 0x0, [0x1, 0xfffffffffffffffa, 0x475d, 0x8, 0x3, 0x4], 0x3, &(0x7f0000000180)=[{}], 0x0, [{}, {}, {}]}, 0xa8) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r7, 0x0, 0x10) kernel console output (not intermixed with test programs): : (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.633807][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.642076][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.649541][ T5851] bridge_slave_1: entered allmulticast mode [ 72.657649][ T5851] bridge_slave_1: entered promiscuous mode [ 72.664443][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.671584][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.678987][ T5852] bridge_slave_0: entered allmulticast mode [ 72.685991][ T5852] bridge_slave_0: entered promiscuous mode [ 72.740107][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.765191][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.772532][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.780103][ T5852] bridge_slave_1: entered allmulticast mode [ 72.787767][ T5852] bridge_slave_1: entered promiscuous mode [ 72.795837][ T5844] team0: Port device team_slave_0 added [ 72.805191][ T5844] team0: Port device team_slave_1 added [ 72.812878][ T5850] team0: Port device team_slave_0 added [ 72.821799][ T5850] team0: Port device team_slave_1 added [ 72.829710][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.914471][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.950213][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.957639][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.984016][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.010566][ T5845] team0: Port device team_slave_0 added [ 73.022627][ T5845] team0: Port device team_slave_1 added [ 73.031265][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.058224][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.068106][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.075068][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.101517][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.113243][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.120452][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.146886][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.183448][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.201730][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.208846][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.235675][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.247515][ T5849] Bluetooth: hci0: command tx timeout [ 73.256768][ T51] Bluetooth: hci1: command tx timeout [ 73.262482][ T51] Bluetooth: hci3: command tx timeout [ 73.268103][ T5862] Bluetooth: hci4: command tx timeout [ 73.272324][ T5849] Bluetooth: hci2: command tx timeout [ 73.282350][ T5851] team0: Port device team_slave_0 added [ 73.318446][ T5852] team0: Port device team_slave_0 added [ 73.330477][ T5852] team0: Port device team_slave_1 added [ 73.349251][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.356376][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.382701][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.396445][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.403397][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.429683][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.443907][ T5851] team0: Port device team_slave_1 added [ 73.493607][ T5850] hsr_slave_0: entered promiscuous mode [ 73.501486][ T5850] hsr_slave_1: entered promiscuous mode [ 73.553042][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.560381][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.586875][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.619016][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.626010][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.652419][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.668247][ T5844] hsr_slave_0: entered promiscuous mode [ 73.674495][ T5844] hsr_slave_1: entered promiscuous mode [ 73.682996][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.691327][ T5844] Cannot create hsr debugfs directory [ 73.714826][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.721809][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.747970][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.768869][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.775823][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.802392][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.909904][ T5845] hsr_slave_0: entered promiscuous mode [ 73.916927][ T5845] hsr_slave_1: entered promiscuous mode [ 73.923116][ T5845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.930948][ T5845] Cannot create hsr debugfs directory [ 73.975754][ T5852] hsr_slave_0: entered promiscuous mode [ 73.984221][ T5852] hsr_slave_1: entered promiscuous mode [ 73.990636][ T5852] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.999291][ T5852] Cannot create hsr debugfs directory [ 74.091888][ T5851] hsr_slave_0: entered promiscuous mode [ 74.098520][ T5851] hsr_slave_1: entered promiscuous mode [ 74.105237][ T5851] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.113295][ T5851] Cannot create hsr debugfs directory [ 74.599312][ T5844] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.620110][ T5844] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.640909][ T5844] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.659440][ T5844] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.710353][ T5850] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.721579][ T5850] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.745381][ T5850] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.767083][ T5850] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.823994][ T5845] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.853534][ T5845] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.870928][ T5845] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.887853][ T5845] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.987831][ T5852] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.997849][ T5852] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 75.034000][ T5852] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 75.044119][ T5852] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 75.131052][ T5851] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 75.143276][ T5851] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 75.155115][ T5851] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 75.165096][ T5851] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 75.221741][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.300766][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.320437][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.327234][ T5849] Bluetooth: hci3: command tx timeout [ 75.327308][ T5862] Bluetooth: hci0: command tx timeout [ 75.332624][ T5167] Bluetooth: hci2: command tx timeout [ 75.339898][ T51] Bluetooth: hci4: command tx timeout [ 75.344019][ T5167] Bluetooth: hci1: command tx timeout [ 75.367593][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.374882][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.403404][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.410525][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.437647][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.470243][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.483241][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.490428][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.519575][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.532568][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.539840][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.582408][ T1079] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.589534][ T1079] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.640150][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.647328][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.673297][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.715116][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.745045][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.803070][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.822637][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.829848][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.902860][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.910069][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.941923][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.949113][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.011416][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.018609][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.159436][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.252145][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.395492][ T5844] veth0_vlan: entered promiscuous mode [ 76.452888][ T5844] veth1_vlan: entered promiscuous mode [ 76.540349][ T5850] veth0_vlan: entered promiscuous mode [ 76.622080][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.654850][ T5850] veth1_vlan: entered promiscuous mode [ 76.665997][ T5844] veth0_macvtap: entered promiscuous mode [ 76.698930][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.733749][ T5844] veth1_macvtap: entered promiscuous mode [ 76.783749][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.807992][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.840574][ T5850] veth0_macvtap: entered promiscuous mode [ 76.860754][ T5850] veth1_macvtap: entered promiscuous mode [ 76.873908][ T5845] veth0_vlan: entered promiscuous mode [ 76.883398][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.913478][ T5845] veth1_vlan: entered promiscuous mode [ 76.932510][ T1137] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.954457][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.975504][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.990583][ T1137] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.000865][ T1137] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.025328][ T1137] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.034231][ T1137] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.094154][ T1137] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.113151][ T1137] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.138589][ T1137] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.162718][ T5852] veth0_vlan: entered promiscuous mode [ 77.221401][ T5845] veth0_macvtap: entered promiscuous mode [ 77.242468][ T5845] veth1_macvtap: entered promiscuous mode [ 77.251431][ T5852] veth1_vlan: entered promiscuous mode [ 77.321977][ T5851] veth0_vlan: entered promiscuous mode [ 77.357947][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.359247][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.365876][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.381927][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.407173][ T5849] Bluetooth: hci3: command tx timeout [ 77.408997][ T5167] Bluetooth: hci1: command tx timeout [ 77.412610][ T5854] Bluetooth: hci4: command tx timeout [ 77.418175][ T51] Bluetooth: hci0: command tx timeout [ 77.424680][ T5849] Bluetooth: hci2: command tx timeout [ 77.453003][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.461311][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.471350][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.482329][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.493448][ T5851] veth1_vlan: entered promiscuous mode [ 77.518547][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.528132][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.585077][ T5852] veth0_macvtap: entered promiscuous mode [ 77.610359][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.618594][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.619649][ T5852] veth1_macvtap: entered promiscuous mode [ 77.638193][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.661596][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.734342][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.772364][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.780824][ T5850] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 77.800611][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.815085][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.825902][ T5851] veth0_macvtap: entered promiscuous mode [ 77.880422][ T5851] veth1_macvtap: entered promiscuous mode [ 77.906181][ T3481] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.969470][ T1165] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.983109][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.983639][ T1165] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.003813][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.020706][ T5965] x_tables: duplicate underflow at hook 1 [ 78.030600][ T1165] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.042894][ T5965] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 78.074898][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.132404][ T5968] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 78.133629][ T9] IPVS: starting estimator thread 0... [ 78.145590][ T5967] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 78.160727][ T5966] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2'. [ 78.236797][ T5970] IPVS: using max 37 ests per chain, 88800 per kthread [ 78.420951][ T5969] veth0_to_bridge: entered promiscuous mode [ 78.487373][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.532068][ T3481] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.591230][ T5982] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3'. [ 78.608244][ T3481] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.628332][ T1079] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.640022][ T1079] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.641117][ T5963] veth0_to_bridge: left promiscuous mode [ 78.672837][ T3481] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.683402][ T3481] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.829114][ T5985] netlink: 'syz.1.8': attribute type 11 has an invalid length. [ 78.846245][ T5989] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 78.853253][ T5985] netlink: 'syz.1.8': attribute type 4 has an invalid length. [ 78.901741][ T1079] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.913307][ T5985] netlink: 224 bytes leftover after parsing attributes in process `syz.1.8'. [ 78.917669][ T1079] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.132035][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.165399][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.403406][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.477631][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.489845][ T5849] Bluetooth: hci0: command tx timeout [ 79.495295][ T5849] Bluetooth: hci1: command tx timeout [ 79.500780][ T5854] Bluetooth: hci3: command tx timeout [ 79.500831][ T5854] Bluetooth: hci2: command tx timeout [ 79.507044][ T5849] Bluetooth: hci4: command tx timeout [ 79.761224][ T5993] netlink: 'syz.2.10': attribute type 6 has an invalid length. [ 80.469973][ T6043] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20002 [ 80.624183][ T6041] netlink: 60 bytes leftover after parsing attributes in process `syz.1.15'. [ 80.758704][ T6036] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.927253][ T6054] netlink: 76 bytes leftover after parsing attributes in process `syz.4.18'. [ 80.955954][ T6036] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.040970][ T6056] tipc: Enabling of bearer rejected, failed to enable media [ 81.187990][ T6036] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.247571][ T6065] netlink: 'syz.0.21': attribute type 21 has an invalid length. [ 81.264000][ T6063] bridge_slave_0: left allmulticast mode [ 81.269984][ T6065] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21'. [ 81.312619][ T6063] bridge_slave_0: left promiscuous mode [ 81.343567][ T6063] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.423635][ T6063] bridge_slave_1: left allmulticast mode [ 81.438306][ T6063] bridge_slave_1: left promiscuous mode [ 81.444638][ T6063] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.483598][ T6063] bond0: (slave bond_slave_0): Releasing backup interface [ 81.533378][ T6063] bond0: (slave bond_slave_1): Releasing backup interface [ 81.593048][ T6063] team0: Port device team_slave_0 removed [ 81.620851][ T6063] team0: Port device team_slave_1 removed [ 81.630134][ T6063] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.641732][ T6063] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.684155][ T6063] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.723196][ T6063] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.744764][ T6092] netlink: 20 bytes leftover after parsing attributes in process `syz.3.23'. [ 81.832260][ T6036] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.904671][ T6063] syz.0.21 (6063) used greatest stack depth: 20032 bytes left [ 81.958520][ T6073] Zero length message leads to an empty skb [ 82.380560][ T6096] dvmrp8: entered allmulticast mode [ 82.417064][ T6096] dvmrp8: left allmulticast mode [ 83.502070][ T6151] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 83.525068][ T6155] netlink: 14 bytes leftover after parsing attributes in process `syz.0.36'. [ 83.791820][ T6166] netlink: 6040 bytes leftover after parsing attributes in process `syz.4.39'. [ 83.824865][ T6155] bond0 (unregistering): Released all slaves [ 83.867481][ T6168] netlink: 6040 bytes leftover after parsing attributes in process `syz.4.39'. [ 83.902228][ T6161] warning: `syz.2.38' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 84.205861][ T6185] netlink: 4 bytes leftover after parsing attributes in process `syz.2.42'. [ 84.252653][ T6187] netlink: 12 bytes leftover after parsing attributes in process `syz.4.43'. [ 84.269933][ T6187] netlink: 12 bytes leftover after parsing attributes in process `syz.4.43'. [ 84.370092][ T6178] syz.2.42 uses obsolete (PF_INET,SOCK_PACKET) [ 84.395276][ T6185] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.509361][ T6185] bridge_slave_1 (unregistering): left allmulticast mode [ 84.536482][ T6185] bridge_slave_1 (unregistering): left promiscuous mode [ 84.543748][ T6185] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.580690][ T6187] bridge0: port 3(vlan2) entered blocking state [ 84.592422][ T6187] bridge0: port 3(vlan2) entered disabled state [ 84.602991][ T6187] vlan2: entered allmulticast mode [ 84.613778][ T6187] bridge0: entered allmulticast mode [ 84.622777][ T6187] vlan2: left allmulticast mode [ 84.631777][ T6187] bridge0: left allmulticast mode [ 84.901038][ T6209] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 84.970874][ T6214] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 85.014293][ T6217] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 85.168223][ T6225] netlink: 24 bytes leftover after parsing attributes in process `syz.2.48'. [ 85.229866][ T6224] Bluetooth: MGMT ver 1.23 [ 85.241313][ T6227] netlink: 12 bytes leftover after parsing attributes in process `syz.3.50'. [ 85.261314][ T6227] netlink: 'syz.3.50': attribute type 2 has an invalid length. [ 85.295582][ T6227] netlink: 'syz.3.50': attribute type 1 has an invalid length. [ 85.371346][ T6232] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 85.550649][ T6243] netlink: 16 bytes leftover after parsing attributes in process `syz.3.53'. [ 85.666067][ T36] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.791676][ T13] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.796460][ T6250] netlink: 'syz.3.55': attribute type 1 has an invalid length. [ 85.855005][ T36] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.891336][ T6256] netlink: 8 bytes leftover after parsing attributes in process `syz.2.56'. [ 85.922815][ T36] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.215108][ T6270] x_tables: duplicate underflow at hook 2 [ 86.283560][ T6270] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 86.283885][ T5855] IPVS: starting estimator thread 0... [ 86.358473][ T6271] dvmrp0: entered allmulticast mode [ 86.428513][ T6273] IPVS: using max 38 ests per chain, 91200 per kthread [ 86.512361][ T3094] IPVS: starting estimator thread 0... [ 86.617469][ T6283] IPVS: using max 32 ests per chain, 76800 per kthread [ 86.775376][ T10] cfg80211: failed to load regulatory.db [ 86.779585][ T6291] netlink: 'syz.3.65': attribute type 1 has an invalid length. [ 86.872732][ T6295] trusted_key: syz.4.68 sent an empty control message without MSG_MORE. [ 87.135058][ T6305] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.314264][ T6305] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.378102][ T6315] netlink: 'syz.2.73': attribute type 10 has an invalid length. [ 87.454655][ T6305] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.693832][ T6305] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.911529][ T1137] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.023068][ T1137] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.093856][ T1137] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.168783][ T1137] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.353802][ T6344] netlink: 'syz.2.82': attribute type 2 has an invalid length. [ 88.393163][ T6344] netlink: 'syz.2.82': attribute type 1 has an invalid length. [ 88.820161][ T6361] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 88.851632][ T6361] netlink: 'syz.3.86': attribute type 6 has an invalid length. [ 89.104528][ T6373] workqueue: name exceeds WQ_NAME_LEN. Truncating to: žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»– [ 89.758967][ T6394] __nla_validate_parse: 12 callbacks suppressed [ 89.758995][ T6394] netlink: 4 bytes leftover after parsing attributes in process `syz.1.95'. [ 89.930034][ T6402] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 89.944891][ T6402] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 90.089538][ T6408] Bluetooth: MGMT ver 1.23 [ 90.385718][ T6418] netlink: 148 bytes leftover after parsing attributes in process `syz.2.102'. [ 90.402505][ T5217] udevd[5217]: worker [6021] terminated by signal 33 (Unknown signal 33) [ 90.441993][ T5217] udevd[5217]: worker [6021] failed while handling '/devices/virtual/net/lapb5' [ 90.471681][ T6418] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 90.580382][ T6423] netlink: 60 bytes leftover after parsing attributes in process `syz.1.104'. [ 90.605085][ T6438] netlink: 104 bytes leftover after parsing attributes in process `syz.0.107'. [ 90.711124][ T6439] netlink: 8 bytes leftover after parsing attributes in process `syz.4.106'. [ 90.757035][ T6439] netlink: 64 bytes leftover after parsing attributes in process `syz.4.106'. [ 91.099704][ T6471] netlink: 28 bytes leftover after parsing attributes in process `syz.4.116'. [ 91.150764][ T6468] xt_TPROXY: Can be used only with -p tcp or -p udp [ 91.173403][ T6474] netlink: 28 bytes leftover after parsing attributes in process `syz.4.116'. [ 91.230931][ T6471] netlink: 8 bytes leftover after parsing attributes in process `syz.4.116'. [ 91.240034][ T6471] netlink: 24 bytes leftover after parsing attributes in process `syz.4.116'. [ 92.053512][ T6510] netlink: 'syz.2.126': attribute type 13 has an invalid length. [ 92.097999][ T6509] v: renamed from veth0_vlan [ 93.120334][ T6543] !: renamed from dummy0 (while UP) [ 93.394669][ T6523] Cannot find add_set index 0 as target [ 93.401174][ T6522] x_tables: duplicate underflow at hook 1 [ 93.664615][ T6559] x_tables: duplicate underflow at hook 1 [ 95.238374][ T6637] __nla_validate_parse: 5 callbacks suppressed [ 95.238390][ T6637] netlink: 44 bytes leftover after parsing attributes in process `syz.0.144'. [ 95.384759][ T6577] netlink: 136 bytes leftover after parsing attributes in process `syz.1.139'. [ 95.401351][ T6608] netlink: 8 bytes leftover after parsing attributes in process `syz.4.140'. [ 95.435531][ T5512] v: left promiscuous mode [ 95.529283][ T5512] v: entered promiscuous mode [ 95.792090][ T6655] netlink: 40 bytes leftover after parsing attributes in process `syz.2.146'. [ 96.150287][ T6665] netlink: 'syz.2.148': attribute type 1 has an invalid length. [ 96.193237][ T6668] netlink: 'syz.1.149': attribute type 2 has an invalid length. [ 96.201096][ T6668] netlink: 119 bytes leftover after parsing attributes in process `syz.1.149'. [ 96.382739][ T6665] 8021q: adding VLAN 0 to HW filter on device bond1 [ 96.442909][ T6670] vlan2: entered promiscuous mode [ 96.460165][ T6670] bond1: entered promiscuous mode [ 96.478955][ T6670] vlan2: entered allmulticast mode [ 96.514634][ T6670] bond1: entered allmulticast mode [ 96.810158][ T6697] xt_hashlimit: max too large, truncated to 1048576 [ 96.883054][ T6697] Cannot find add_set index 3 as target [ 97.097994][ T6710] netlink: 4 bytes leftover after parsing attributes in process `syz.0.160'. [ 97.297532][ T6721] openvswitch: netlink: Tunnel attr 1 has unexpected len 8 expected 4 [ 97.404252][ T6721] IPVS: stopping backup sync thread 6728 ... [ 97.411316][ T6728] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan0, syncid = 1, id = 0 [ 97.530518][ T6714] pim6reg1: entered promiscuous mode [ 97.547245][ T6714] pim6reg1: entered allmulticast mode [ 97.845983][ T6729] netlink: 'syz.1.163': attribute type 3 has an invalid length. [ 97.909575][ T6749] netlink: 'syz.3.168': attribute type 1 has an invalid length. [ 98.125812][ T6763] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 98.154810][ T6749] 8021q: adding VLAN 0 to HW filter on device bond1 [ 98.195110][ T6765] netlink: 20 bytes leftover after parsing attributes in process `syz.2.172'. [ 98.321074][ T6765] bond2: entered promiscuous mode [ 98.326941][ T6765] bond2: entered allmulticast mode [ 98.332636][ T6765] 8021q: adding VLAN 0 to HW filter on device bond2 [ 98.383957][ T6751] bond1: (slave wlan0): Enslaving as an active interface with a down link [ 98.467176][ T6780] netlink: 20 bytes leftover after parsing attributes in process `syz.0.175'. [ 98.535351][ T6756] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.543572][ T6756] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.580928][ T6784] Bluetooth: MGMT ver 1.23 [ 98.635869][ T6788] netlink: 4 bytes leftover after parsing attributes in process `syz.0.175'. [ 98.684158][ T6756] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.742457][ T6756] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.998834][ T6756] syz.1.170 (6756) used greatest stack depth: 19832 bytes left [ 99.155871][ T6604] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.279830][ T6804] netlink: 4 bytes leftover after parsing attributes in process `syz.3.179'. [ 99.340202][ T6795] team0: Port device vxlan0 added [ 99.381389][ T6604] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.423191][ T6604] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.445345][ T6604] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.478589][ T6604] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.611318][ T6609] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.646866][ T6609] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.701167][ T6609] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.824109][ T6807] syzkaller0: entered promiscuous mode [ 99.830212][ T6807] syzkaller0: entered allmulticast mode [ 99.848090][ T6822] ip6gretap0: entered promiscuous mode [ 99.860780][ T6822] ip6gretap0: left promiscuous mode [ 99.951248][ T6833] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 100.282711][ T6850] __nla_validate_parse: 2 callbacks suppressed [ 100.282727][ T6850] netlink: 28 bytes leftover after parsing attributes in process `syz.4.188'. [ 100.340850][ T6853] netlink: 12 bytes leftover after parsing attributes in process `syz.4.188'. [ 100.549380][ T6861] netlink: 16 bytes leftover after parsing attributes in process `syz.2.193'. [ 100.583350][ T6861] netlink: 'syz.2.193': attribute type 1 has an invalid length. [ 101.668296][ T6845] veth3: entered promiscuous mode [ 102.028429][ T6886] netlink: 12 bytes leftover after parsing attributes in process `syz.0.197'. [ 102.067272][ T5512] veth0_vlan: left promiscuous mode [ 102.122521][ T5512] veth0_vlan: entered promiscuous mode [ 102.173082][ T6889] netlink: 12 bytes leftover after parsing attributes in process `syz.0.197'. [ 102.326159][ T6901] netlink: 'syz.1.202': attribute type 5 has an invalid length. [ 102.499780][ T6908] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 102.507307][ T6908] IPv6: NLM_F_CREATE should be set when creating new route [ 102.640596][ T6913] netlink: 248 bytes leftover after parsing attributes in process `syz.1.205'. [ 102.800698][ T6933] netlink: 8 bytes leftover after parsing attributes in process `syz.4.209'. [ 102.822367][ T6923] netlink: 4 bytes leftover after parsing attributes in process `syz.1.205'. [ 103.094444][ T6945] netlink: 'syz.2.211': attribute type 1 has an invalid length. [ 103.154062][ T6945] 8021q: adding VLAN 0 to HW filter on device bond3 [ 103.215496][ T6949] bond3: (slave bridge1): making interface the new active one [ 103.225554][ T6949] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 103.256260][ T6945] gretap1: entered promiscuous mode [ 103.281968][ T6945] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 103.335851][ T6949] macvlan2: entered promiscuous mode [ 103.341442][ T6949] macvlan2: entered allmulticast mode [ 103.348099][ T6949] bond3: entered promiscuous mode [ 103.353170][ T6949] bridge1: entered promiscuous mode [ 103.415760][ T6949] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 103.448575][ T6949] bond3: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 103.476587][ T6965] netlink: 12 bytes leftover after parsing attributes in process `syz.1.220'. [ 103.493154][ T6949] bond3: left promiscuous mode [ 103.500679][ T6949] bridge1: left promiscuous mode [ 103.501434][ T6968] netlink: 4 bytes leftover after parsing attributes in process `syz.0.219'. [ 103.551503][ T6955] vlan2: entered promiscuous mode [ 103.562136][ T6955] vlan2: entered allmulticast mode [ 103.568062][ T6955] hsr_slave_1: entered allmulticast mode [ 104.001246][ T6989] netlink: 'syz.0.227': attribute type 11 has an invalid length. [ 105.431391][ T7020] veth0_to_bond: entered allmulticast mode [ 105.437731][ T7038] Illegal XDP return value 4294967262 on prog (id 84) dev N/A, expect packet loss! [ 105.703466][ T7052] __nla_validate_parse: 5 callbacks suppressed [ 105.703482][ T7052] netlink: 8 bytes leftover after parsing attributes in process `syz.4.244'. [ 105.704774][ T7051] netlink: 8 bytes leftover after parsing attributes in process `syz.4.244'. [ 105.721055][ T7052] netlink: 24 bytes leftover after parsing attributes in process `syz.4.244'. [ 105.778410][ T7051] netlink: 24 bytes leftover after parsing attributes in process `syz.4.244'. [ 106.016046][ T7074] openvswitch: netlink: Key type 8208 is out of range max 32 [ 106.036972][ T7074] ieee802154 phy0 wpan0: encryption failed: -22 [ 106.223190][ T7088] veth0_to_batadv: entered promiscuous mode [ 106.490359][ T7099] netlink: 32 bytes leftover after parsing attributes in process `syz.4.254'. [ 106.713051][ T7104] syzkaller1: entered promiscuous mode [ 106.726412][ T7104] syzkaller1: entered allmulticast mode [ 106.734336][ T7106] syzkaller0: entered promiscuous mode [ 106.754330][ T7106] syzkaller0: entered allmulticast mode [ 106.761964][ T7105] tipc: Started in network mode [ 106.770734][ T7105] tipc: Node identity a69f93a621a4, cluster identity 4711 [ 106.780267][ T7105] tipc: Enabled bearer , priority 0 [ 106.854111][ T7105] tipc: Resetting bearer [ 106.903672][ T7105] tipc: Disabling bearer [ 107.391955][ T7145] netlink: 24 bytes leftover after parsing attributes in process `syz.1.266'. [ 107.460555][ T7145] netlink: 52 bytes leftover after parsing attributes in process `syz.1.266'. [ 107.709950][ T7163] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 107.737879][ T7163] netlink: 32 bytes leftover after parsing attributes in process `syz.1.272'. [ 107.757019][ T7163] netlink: 28 bytes leftover after parsing attributes in process `syz.1.272'. [ 107.836993][ T7168] netlink: 4 bytes leftover after parsing attributes in process `syz.0.274'. [ 108.281935][ T7182] netlink: 'syz.0.278': attribute type 1 has an invalid length. [ 108.290061][ T5854] Bluetooth: hci4: command 0x0405 tx timeout [ 108.377505][ T7194] netlink: 'syz.1.279': attribute type 4 has an invalid length. [ 108.430623][ T7194] netlink: 'syz.1.279': attribute type 4 has an invalid length. [ 108.498723][ T7194] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 108.813374][ T7216] IPVS: Unknown mcast interface: vcan0 [ 109.395960][ T7236] openvswitch: netlink: IP tunnel dst address not specified [ 109.916394][ T7258] RDS: rds_bind could not find a transport for ::ffff:172.20.20.19, load rds_tcp or rds_rdma? [ 110.044351][ T7258] 8021q: adding VLAN 0 to HW filter on device bond1 [ 110.162421][ T7270] 8021q: adding VLAN 0 to HW filter on device bond1 [ 110.170956][ T7270] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 110.183687][ T7270] bond1: (slave vxcan1): Error -95 calling set_mac_address [ 110.283842][ T7267] syz.0.302 (7267) used greatest stack depth: 15096 bytes left [ 110.741572][ T7304] __nla_validate_parse: 9 callbacks suppressed [ 110.741590][ T7304] netlink: 12 bytes leftover after parsing attributes in process `syz.1.308'. [ 111.330036][ T7320] netlink: 14568 bytes leftover after parsing attributes in process `syz.4.315'. [ 111.440274][ T7323] tipc: Started in network mode [ 111.452579][ T7323] tipc: Node identity 9a7268edb695, cluster identity 4711 [ 111.483263][ T7323] tipc: Enabled bearer , priority 0 [ 111.529019][ T7326] netlink: 20 bytes leftover after parsing attributes in process `syz.4.319'. [ 111.530826][ T7333] syzkaller0: entered promiscuous mode [ 111.549183][ T7333] syzkaller0: entered allmulticast mode [ 111.605301][ T7323] tipc: Resetting bearer [ 111.626134][ T7321] tipc: Resetting bearer [ 111.702263][ T7321] tipc: Disabling bearer [ 112.084762][ T7355] netlink: zone id is out of range [ 112.090170][ T7355] netlink: zone id is out of range [ 112.095341][ T7355] netlink: set zone limit has 4 unknown bytes [ 112.102911][ T7355] netlink: 24 bytes leftover after parsing attributes in process `syz.0.327'. [ 112.159498][ T7352] syzkaller0: entered promiscuous mode [ 112.165014][ T7352] syzkaller0: entered allmulticast mode [ 113.053379][ T7383] netlink: 44 bytes leftover after parsing attributes in process `syz.3.334'. [ 113.598840][ T7355] bridge_slave_0: entered promiscuous mode [ 113.604884][ T7355] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 113.654481][ T7380] bridge0: entered promiscuous mode [ 113.677563][ T7380] batadv0: entered promiscuous mode [ 113.824675][ T7391] netlink: 248 bytes leftover after parsing attributes in process `syz.2.337'. [ 113.834353][ T7393] netlink: 8 bytes leftover after parsing attributes in process `syz.1.335'. [ 113.967357][ T7403] macsec1: entered promiscuous mode [ 113.972735][ T7403] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode [ 113.981059][ T7403] macsec1: entered allmulticast mode [ 113.987030][ T7403] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 114.008490][ T7405] netlink: 8 bytes leftover after parsing attributes in process `syz.4.339'. [ 114.040144][ T7407] netlink: 24 bytes leftover after parsing attributes in process `syz.0.341'. [ 114.136460][ T7411] netlink: 4 bytes leftover after parsing attributes in process `syz.0.341'. [ 114.992104][ T7425] net veth1_virt_wifi ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 115.776517][ T7467] syzkaller0: entered promiscuous mode [ 115.782048][ T7467] syzkaller0: entered allmulticast mode [ 116.163950][ T7480] __nla_validate_parse: 5 callbacks suppressed [ 116.163967][ T7480] netlink: 4 bytes leftover after parsing attributes in process `syz.2.362'. [ 116.713263][ T7513] bridge1: entered allmulticast mode [ 116.748082][ T7513] netlink: 12 bytes leftover after parsing attributes in process `syz.1.371'. [ 116.903247][ T7519] netlink: 8 bytes leftover after parsing attributes in process `syz.0.373'. [ 117.177058][ T7539] netlink: 8 bytes leftover after parsing attributes in process `syz.1.377'. [ 117.216626][ T7539] netlink: 44 bytes leftover after parsing attributes in process `syz.1.377'. [ 117.339174][ T7548] netlink: 12 bytes leftover after parsing attributes in process `syz.2.378'. [ 117.357063][ T7549] netlink: 'syz.3.380': attribute type 3 has an invalid length. [ 118.293403][ T7571] netlink: 4 bytes leftover after parsing attributes in process `syz.4.383'. [ 118.371488][ T7571] bridge_slave_1: left allmulticast mode [ 118.381704][ T7571] bridge_slave_1: left promiscuous mode [ 118.387686][ T7571] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.415662][ T7571] bridge_slave_0: left allmulticast mode [ 118.429596][ T7571] bridge_slave_0: left promiscuous mode [ 118.435563][ T7571] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.459681][ T7578] netlink: 12 bytes leftover after parsing attributes in process `syz.3.385'. [ 118.488809][ T7571] bridge0 (unregistering): left promiscuous mode [ 118.568010][ T7589] af_packet: tpacket_rcv: packet too big, clamped from 65638 to 3710. macoff=82 [ 118.707744][ T7578] 8021q: adding VLAN 0 to HW filter on device bond2 [ 118.760372][ T7588] 8021q: adding VLAN 0 to HW filter on device bond2 [ 118.768207][ T7588] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address [ 118.782055][ T7588] bond2: (slave vxcan1): Error -95 calling set_mac_address [ 119.023526][ T7601] tipc: Started in network mode [ 119.028614][ T7601] tipc: Node identity 1eb3a939cb7, cluster identity 4711 [ 119.035972][ T7601] tipc: Enabled bearer , priority 0 [ 119.049595][ T7601] syzkaller0: entered promiscuous mode [ 119.055119][ T7601] syzkaller0: entered allmulticast mode [ 119.075456][ T7607] netlink: 'syz.3.392': attribute type 32 has an invalid length. [ 119.085566][ T7607] netlink: 88 bytes leftover after parsing attributes in process `syz.3.392'. [ 119.110649][ T7607] netlink: 'syz.3.392': attribute type 11 has an invalid length. [ 119.180889][ T7613] netlink: 28 bytes leftover after parsing attributes in process `syz.1.393'. [ 119.252894][ T7604] tipc: Resetting bearer [ 119.298005][ T7600] tipc: Resetting bearer [ 119.403837][ T7600] tipc: Disabling bearer [ 119.495799][ T7629] netlink: 'syz.0.397': attribute type 1 has an invalid length. [ 119.710201][ T7643] netlink: 'syz.4.402': attribute type 7 has an invalid length. [ 119.718321][ T7643] netlink: 'syz.4.402': attribute type 8 has an invalid length. [ 119.727274][ T7643] netlink: 'syz.4.402': attribute type 4 has an invalid length. [ 119.964553][ T5962] IPVS: starting estimator thread 0... [ 120.076479][ T7658] IPVS: using max 28 ests per chain, 67200 per kthread [ 120.233825][ T7673] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 121.086209][ T7717] netlink: 'syz.0.422': attribute type 11 has an invalid length. [ 121.413989][ T7732] __nla_validate_parse: 6 callbacks suppressed [ 121.414008][ T7732] netlink: 40 bytes leftover after parsing attributes in process `syz.2.426'. [ 121.456290][ T7735] netlink: 16 bytes leftover after parsing attributes in process `syz.4.427'. [ 121.476111][ T7735] netlink: 'syz.4.427': attribute type 4 has an invalid length. [ 121.497991][ T7735] netlink: 'syz.4.427': attribute type 17 has an invalid length. [ 121.664868][ T7745] netlink: 16 bytes leftover after parsing attributes in process `syz.2.430'. [ 121.689337][ T7745] IPv6: sit1: Disabled Multicast RS [ 121.696170][ T7745] sit1: entered allmulticast mode [ 122.088755][ T7760] IPVS: set_ctl: invalid protocol: 1 224.0.0.1:20003 [ 122.191158][ T7766] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.437'. [ 122.229724][ T7767] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 122.330253][ T7767] bridge_slave_0: left allmulticast mode [ 122.353554][ T7767] bridge_slave_0: left promiscuous mode [ 122.380793][ T7767] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.404452][ T7777] netlink: 'syz.2.438': attribute type 10 has an invalid length. [ 122.451034][ T7767] bond0: (slave bond_slave_0): Releasing backup interface [ 122.473645][ T7767] bond0: (slave bond_slave_1): Releasing backup interface [ 122.514042][ T7767] team0: Port device team_slave_0 removed [ 122.533698][ T7767] team0: Port device team_slave_1 removed [ 122.543528][ T7767] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.556845][ T7767] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.576194][ T7767] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.596470][ T7767] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.628411][ T7767] bond3: (slave bridge1): Releasing active interface [ 122.635132][ T7767] bond3: (slave bridge1): the permanent HWaddr of slave - 7a:2a:38:92:0a:bc - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 122.665064][ T7767] bond3: (slave gretap1): making interface the new active one [ 122.680175][ T7767] bond3: (slave gretap1): Releasing active interface [ 122.695625][ T7777] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 122.713835][ T7777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.732047][ T7777] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 123.157948][ T7814] netlink: 12 bytes leftover after parsing attributes in process `syz.2.450'. [ 123.210260][ T7818] netlink: 348 bytes leftover after parsing attributes in process `syz.4.449'. [ 123.218811][ T7814] xfrm1: entered promiscuous mode [ 123.224411][ T7814] xfrm1: entered allmulticast mode [ 123.232312][ T7817] netlink: 'syz.3.451': attribute type 1 has an invalid length. [ 123.276004][ T7814] bond0: (slave wlan1): Releasing backup interface [ 123.331515][ T7817] netlink: 24 bytes leftover after parsing attributes in process `syz.3.451'. [ 123.602679][ T7825] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.698501][ T7834] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.771687][ T7831] netlink: 'syz.3.455': attribute type 1 has an invalid length. [ 123.787700][ T7831] netlink: 5624 bytes leftover after parsing attributes in process `syz.3.455'. [ 123.866273][ T7825] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.060049][ T7846] netlink: 20 bytes leftover after parsing attributes in process `syz.4.458'. [ 124.504146][ T7866] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.557140][ T7877] netlink: 8 bytes leftover after parsing attributes in process `syz.4.464'. [ 124.717398][ T7884] sctp: [Deprecated]: syz.0.468 (pid 7884) Use of int in max_burst socket option deprecated. [ 124.717398][ T7884] Use struct sctp_assoc_value instead [ 124.755309][ T7866] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.049773][ T7866] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.127604][ T7897] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma? [ 125.194818][ T7895] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.204218][ T7902] GUP no longer grows the stack in syz.1.474 (7902): 200000006000-20000000a000 (200000005000) [ 125.217237][ T7902] CPU: 0 UID: 0 PID: 7902 Comm: syz.1.474 Not tainted 6.16.0-rc6-syzkaller-01646-g56613001dfc9 #0 PREEMPT(full) [ 125.217262][ T7902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 125.217277][ T7902] Call Trace: [ 125.217284][ T7902] [ 125.217291][ T7902] dump_stack_lvl+0x189/0x250 [ 125.217325][ T7902] ? __pfx_dump_stack_lvl+0x10/0x10 [ 125.217342][ T7902] ? __pfx__printk+0x10/0x10 [ 125.217359][ T7902] ? find_vma+0xe7/0x160 [ 125.217391][ T7902] __get_user_pages+0x2a60/0x30b0 [ 125.217460][ T7902] ? __pfx___get_user_pages+0x10/0x10 [ 125.217480][ T7902] ? __gup_longterm_locked+0xbf7/0x15b0 [ 125.217500][ T7902] ? down_read_killable+0x1d1/0x350 [ 125.217518][ T7902] ? try_get_folio+0x633/0x660 [ 125.217543][ T7902] __gup_longterm_locked+0xd66/0x15b0 [ 125.217568][ T7902] ? try_grab_folio_fast+0x1be/0x4f0 [ 125.217599][ T7902] ? gup_fast_fallback+0x1afc/0x2260 [ 125.217623][ T7902] gup_fast_fallback+0x1cd4/0x2260 [ 125.217682][ T7902] ? __pfx_gup_fast_fallback+0x10/0x10 [ 125.217699][ T7902] ? trace_contention_end+0x39/0x120 [ 125.217720][ T7902] ? __mutex_lock+0x330/0xe80 [ 125.217743][ T7902] ? is_valid_gup_args+0x11f/0x200 [ 125.217766][ T7902] ? get_user_pages_fast+0x4d/0xb0 [ 125.217788][ T7902] __iov_iter_get_pages_alloc+0x39a/0xb40 [ 125.217819][ T7902] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 125.217842][ T7902] ? wait_for_space+0x24d/0x2d0 [ 125.217867][ T7902] iov_iter_get_pages2+0x5e/0xa0 [ 125.217893][ T7902] __se_sys_vmsplice+0x548/0x10d0 [ 125.217929][ T7902] ? wake_up_q+0xca/0x110 [ 125.217953][ T7902] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 125.217980][ T7902] ? __pfx_futex_wake+0x10/0x10 [ 125.218012][ T7902] ? __lock_acquire+0xab9/0xd20 [ 125.218070][ T7902] ? rcu_is_watching+0x15/0xb0 [ 125.218095][ T7902] ? do_syscall_64+0xbe/0x3b0 [ 125.218128][ T7902] do_syscall_64+0xfa/0x3b0 [ 125.218145][ T7902] ? lockdep_hardirqs_on+0x9c/0x150 [ 125.218161][ T7902] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.218178][ T7902] ? clear_bhb_loop+0x60/0xb0 [ 125.218200][ T7902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.218217][ T7902] RIP: 0033:0x7f5c22f8e9a9 [ 125.218240][ T7902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.218253][ T7902] RSP: 002b:00007f5c23d6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 125.218279][ T7902] RAX: ffffffffffffffda RBX: 00007f5c231b6080 RCX: 00007f5c22f8e9a9 [ 125.218293][ T7902] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000012 [ 125.218304][ T7902] RBP: 00007f5c23010d69 R08: 0000000000000000 R09: 0000000000000000 [ 125.218315][ T7902] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 125.218325][ T7902] R13: 0000000000000000 R14: 00007f5c231b6080 R15: 00007ffc89f19b58 [ 125.218357][ T7902] [ 125.510746][ T7908] netlink: 'syz.2.475': attribute type 2 has an invalid length. [ 125.540176][ T7866] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.611451][ T7908] k›*·]‘: entered promiscuous mode [ 125.731554][ T7895] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.908351][ T7895] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.964083][ T6623] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.016683][ T6615] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.051164][ T7895] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.072779][ T6623] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.104211][ T6623] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.169372][ T7925] batadv_slave_0: entered promiscuous mode [ 126.188762][ T7925] batadv_slave_0: entered allmulticast mode [ 126.310036][ T6623] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.362762][ T6611] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.410616][ T6611] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.464375][ T6623] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.848269][ T7971] tap0: tun_chr_ioctl cmd 1074025677 [ 127.853821][ T7971] tap0: linktype set to 769 [ 127.899349][ T7972] nbd: socks must be embedded in a SOCK_ITEM attr [ 127.909156][ T7972] block nbd0: shutting down sockets [ 128.051526][ T7983] tipc: Started in network mode [ 128.076995][ T7983] tipc: Node identity 4, cluster identity 4711 [ 128.092039][ T7983] tipc: Node number set to 4 [ 128.113444][ T7982] __nla_validate_parse: 5 callbacks suppressed [ 128.113461][ T7982] netlink: 32 bytes leftover after parsing attributes in process `syz.2.503'. [ 128.490520][ T8004] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 128.525187][ T8006] macsec2: entered allmulticast mode [ 128.556506][ T8006] ip6gretap0: entered allmulticast mode [ 128.603630][ T8006] ip6gretap0: left allmulticast mode [ 128.656999][ T8007] netlink: 168 bytes leftover after parsing attributes in process `syz.1.509'. [ 129.521515][ T8049] netlink: 240 bytes leftover after parsing attributes in process `syz.1.518'. [ 129.555429][ T8049] netlink: 48 bytes leftover after parsing attributes in process `syz.1.518'. [ 129.752513][ T8058] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 129.887976][ T8065] tipc: Enabling of bearer rejected, failed to enable media [ 129.937151][ T8065] netlink: 12 bytes leftover after parsing attributes in process `syz.3.526'. [ 130.043278][ T8073] netlink: 8 bytes leftover after parsing attributes in process `syz.3.528'. [ 130.054717][ T8073] netlink: 4 bytes leftover after parsing attributes in process `syz.3.528'. [ 130.259126][ T8084] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 130.383960][ T8095] netlink: 'syz.4.534': attribute type 13 has an invalid length. [ 130.436469][ T8095] netlink: 'syz.4.534': attribute type 17 has an invalid length. [ 130.622755][ T8095] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 130.671010][ T8105] tipc: Enabled bearer , priority 0 [ 130.679106][ T8107] tipc: Enabling of bearer rejected, already enabled [ 130.752050][ T8087] netlink: 'syz.0.533': attribute type 11 has an invalid length. [ 130.763836][ T8105] syzkaller0: entered promiscuous mode [ 130.792007][ T8105] syzkaller0: entered allmulticast mode [ 130.885188][ T8105] tipc: Resetting bearer [ 130.934430][ T8105] tipc: Disabling bearer [ 130.953901][ T8120] netlink: 60 bytes leftover after parsing attributes in process `syz.4.541'. [ 130.996384][ T8120] netlink: 56 bytes leftover after parsing attributes in process `syz.4.541'. [ 131.025410][ T8122] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 131.055794][ T8120] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 131.117193][ T8120] gretap1: entered promiscuous mode [ 131.122446][ T8120] gretap1: entered allmulticast mode [ 131.324746][ T8134] netlink: 248 bytes leftover after parsing attributes in process `syz.0.547'. [ 131.659287][ T8159] netlink: 'syz.3.553': attribute type 10 has an invalid length. [ 131.678878][ T8159] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 132.241571][ T8192] openvswitch: netlink: Missing key (keys=40, expected=100) [ 132.460078][ T8201] xt_policy: too many policy elements [ 132.851807][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.858785][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.887875][ T8223] netlink: 'syz.1.569': attribute type 4 has an invalid length. [ 133.188005][ T8233] __nla_validate_parse: 5 callbacks suppressed [ 133.188023][ T8233] netlink: 104 bytes leftover after parsing attributes in process `syz.0.572'. [ 133.219496][ T8236] netlink: 4 bytes leftover after parsing attributes in process `syz.3.574'. [ 133.245598][ T8236] netlink: 4 bytes leftover after parsing attributes in process `syz.3.574'. [ 133.584287][ T8228] infiniband syz1: set down [ 133.596464][ T8228] infiniband syz1: added macvlan1 [ 133.675430][ T8247] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.680465][ T8228] RDS/IB: syz1: added [ 133.694034][ T8228] smc: adding ib device syz1 with port count 1 [ 133.700506][ T8228] smc: ib device syz1 port 1 has pnetid [ 133.761106][ T8251] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 133.775635][ T8251] team0: Failed to send port change of device batadv2 via netlink (err -105) [ 133.788218][ T8251] team0: Failed to send options change via netlink (err -105) [ 133.795702][ T8251] team0: Port device batadv2 added [ 133.810207][ T8255] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 133.844754][ T8247] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.984557][ T8247] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.014900][ T8258] Â: renamed from pim6reg1 [ 134.053351][ T8247] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.233620][ T6611] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.250477][ T8265] netlink: 36 bytes leftover after parsing attributes in process `syz.3.584'. [ 134.260565][ T8265] netlink: 16 bytes leftover after parsing attributes in process `syz.3.584'. [ 134.265701][ T1165] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.270574][ T8265] netlink: 36 bytes leftover after parsing attributes in process `syz.3.584'. [ 134.295047][ T1165] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.303887][ T8265] netlink: 36 bytes leftover after parsing attributes in process `syz.3.584'. [ 134.342230][ T1165] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.350327][ T8266] netlink: 'syz.2.583': attribute type 1 has an invalid length. [ 134.419688][ T8266] netlink: 'syz.2.583': attribute type 1 has an invalid length. [ 134.448763][ T8266] netlink: 224 bytes leftover after parsing attributes in process `syz.2.583'. [ 134.714934][ T8270] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.723072][ T8270] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.968128][ T8270] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.003315][ T8270] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.269008][ T8295] netlink: 120 bytes leftover after parsing attributes in process `syz.2.587'. [ 135.349631][ T8298] veth3: entered promiscuous mode [ 135.366922][ T6615] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.384393][ T6615] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.495264][ T6615] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.565666][ T6615] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.691493][ T8310] netlink: 8 bytes leftover after parsing attributes in process `syz.0.590'. [ 135.797491][ T30] audit: type=1107 audit(1753283943.241:2): pid=8315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 135.845971][ T8319] netlink: 'syz.4.593': attribute type 11 has an invalid length. [ 136.867651][ T8352] netlink: zone id is out of range [ 136.895686][ T8352] netlink: zone id is out of range [ 136.906999][ T8352] netlink: zone id is out of range [ 136.923385][ T8352] netlink: zone id is out of range [ 136.960819][ T8352] netlink: zone id is out of range [ 136.982667][ T8352] netlink: zone id is out of range [ 137.006597][ T8352] netlink: zone id is out of range [ 137.030611][ T8352] netlink: zone id is out of range [ 137.061162][ T8352] netlink: zone id is out of range [ 137.083231][ T8352] netlink: zone id is out of range [ 137.183274][ T8372] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 137.200499][ T8372] Cannot find set identified by id 0 to match [ 137.543622][ T8390] tipc: Enabled bearer , priority 10 [ 137.860407][ T8406] tipc: Enabled bearer , priority 0 [ 137.868074][ T8406] syzkaller0: entered promiscuous mode [ 137.873623][ T8406] syzkaller0: entered allmulticast mode [ 137.905292][ T8406] tipc: Resetting bearer [ 137.931580][ T8404] tipc: Resetting bearer [ 137.977749][ T8404] tipc: Disabling bearer [ 137.984355][ T8410] netlink: 'syz.0.622': attribute type 1 has an invalid length. [ 138.258781][ T8424] __nla_validate_parse: 11 callbacks suppressed [ 138.258798][ T8424] netlink: 4 bytes leftover after parsing attributes in process `syz.0.628'. [ 138.659931][ T8444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.634'. [ 138.660657][ T24] tipc: Node number set to 753363181 [ 138.685520][ T8444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.634'. [ 138.714545][ T8444] team0: entered promiscuous mode [ 138.724124][ T8444] batadv2: entered promiscuous mode [ 138.769149][ T8447] netlink: 'syz.1.635': attribute type 1 has an invalid length. [ 138.769617][ T8444] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 138.819750][ T8444] team0: left promiscuous mode [ 138.824563][ T8444] batadv2: left promiscuous mode [ 138.839610][ T8449] netlink: 16 bytes leftover after parsing attributes in process `syz.2.636'. [ 138.994064][ T8451] netlink: 187428 bytes leftover after parsing attributes in process `syz.2.636'. [ 139.072527][ T8453] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.637'. [ 139.258795][ T8460] netlink: 'syz.1.640': attribute type 1 has an invalid length. [ 139.287009][ T8460] netlink: 228 bytes leftover after parsing attributes in process `syz.1.640'. [ 139.651355][ T8481] netlink: 396 bytes leftover after parsing attributes in process `syz.3.648'. [ 139.701994][ T8481] netlink: 'syz.3.648': attribute type 1 has an invalid length. [ 139.753846][ T8496] netlink: 8 bytes leftover after parsing attributes in process `syz.3.648'. [ 139.777231][ T8481] bond2: entered promiscuous mode [ 139.782785][ T8481] 8021q: adding VLAN 0 to HW filter on device bond2 [ 139.790607][ T8496] netlink: 24 bytes leftover after parsing attributes in process `syz.3.648'. [ 139.821892][ T8494] geneve2: entered promiscuous mode [ 139.832232][ T6615] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.857898][ T6615] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.937286][ T6615] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.950087][ T6615] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.996543][ T8509] tipc: Invalid UDP bearer configuration [ 139.996601][ T8509] tipc: Enabling of bearer rejected, failed to enable media [ 142.251885][ T8575] bridge_slave_1: left allmulticast mode [ 142.261884][ T8575] bridge_slave_1: left promiscuous mode [ 142.272957][ T8575] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.292838][ T8575] bridge_slave_0: left allmulticast mode [ 142.303330][ T8575] bridge_slave_0: left promiscuous mode [ 142.324128][ T8575] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.419081][ T8580] netlink: 'syz.4.672': attribute type 5 has an invalid length. [ 142.466078][ T8580] netlink: 'syz.4.672': attribute type 7 has an invalid length. [ 142.969678][ T8580] : entered promiscuous mode [ 143.431131][ T8595] __nla_validate_parse: 8 callbacks suppressed [ 143.431150][ T8595] netlink: 24 bytes leftover after parsing attributes in process `syz.2.676'. [ 144.311731][ T8623] netlink: 4 bytes leftover after parsing attributes in process `syz.4.686'. [ 144.332163][ T8624] netlink: 4 bytes leftover after parsing attributes in process `syz.4.686'. [ 144.642321][ T8640] pim6reg: entered allmulticast mode [ 144.663429][ T30] audit: type=1804 audit(1753283952.101:3): pid=8642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.689" name="x000000000000000500000000000000000000005" dev="tmpfs" ino=778 res=1 errno=0 [ 144.704372][ T8647] pim6reg: left allmulticast mode [ 144.728405][ T30] audit: type=1800 audit(1753283952.101:4): pid=8642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.689" name="x000000000000000500000000000000000000005" dev="tmpfs" ino=778 res=0 errno=0 [ 144.815538][ T8651] nbd: must specify an index to disconnect [ 145.381625][ T8667] netlink: 52 bytes leftover after parsing attributes in process `syz.1.697'. [ 145.394306][ T8667] netlink: 52 bytes leftover after parsing attributes in process `syz.1.697'. [ 145.415324][ T8667] netlink: 52 bytes leftover after parsing attributes in process `syz.1.697'. [ 145.434923][ T8670] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20001 [ 145.476416][ T8670] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20001 [ 145.540812][ T8679] sch_tbf: burst 480 is lower than device lo mtu (65550) ! [ 145.668915][ T8675] netlink: 16 bytes leftover after parsing attributes in process `syz.1.697'. [ 145.916670][ T8687] IPVS: set_ctl: invalid protocol: 90 172.30.0.1:20001 [ 145.937609][ T8687] netlink: 12 bytes leftover after parsing attributes in process `syz.0.701'. [ 145.967249][ T8689] netlink: 'syz.4.702': attribute type 2 has an invalid length. [ 146.002767][ T8692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.703'. [ 146.014072][ T8693] No such timeout policy "syz0" [ 146.030873][ T8692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.703'. [ 146.298776][ T8703] team0: No ports can be present during mode change [ 147.453662][ T8735] Cannot find del_set index 0 as target [ 147.827027][ T8748] x_tables: duplicate underflow at hook 2 [ 148.325826][ T8716] team0: No ports can be present during mode change [ 148.997639][ T8793] wireguard0: entered promiscuous mode [ 149.018169][ T8793] wireguard0: entered allmulticast mode [ 149.184440][ T8800] xt_CT: No such helper "netbios-ns" [ 149.190151][ T8812] xt_TPROXY: Can be used only with -p tcp or -p udp [ 149.294007][ T8816] xt_TPROXY: Can be used only with -p tcp or -p udp [ 149.510031][ T8822] netlink: 'syz.1.736': attribute type 1 has an invalid length. [ 149.776178][ T8828] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 149.794824][ T6609] net_ratelimit: 76 callbacks suppressed [ 149.794843][ T6609] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 149.814951][ T8822] 8021q: adding VLAN 0 to HW filter on device bond1 [ 149.824911][ T8831] __nla_validate_parse: 5 callbacks suppressed [ 149.824930][ T8831] netlink: 8 bytes leftover after parsing attributes in process `syz.2.737'. [ 149.928802][ T8822] veth3: entered promiscuous mode [ 149.937853][ T6609] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 149.949861][ T8822] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 149.961906][ T8833] netlink: 8 bytes leftover after parsing attributes in process `syz.3.739'. [ 150.012443][ T8828] bridge_slave_0: left allmulticast mode [ 150.019034][ T8828] bridge_slave_0: left promiscuous mode [ 150.025751][ T8828] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.043428][ T8828] bridge_slave_1: left allmulticast mode [ 150.050298][ T8828] bridge_slave_1: left promiscuous mode [ 150.056200][ T8828] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.082328][ T8828] bond0: (slave bond_slave_0): Releasing backup interface [ 150.101725][ T8828] bond0: (slave bond_slave_1): Releasing backup interface [ 150.130957][ T8828] team0: Port device team_slave_0 removed [ 150.140327][ T8828] team0: Port device team_slave_1 removed [ 150.148221][ T8828] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.159824][ T8828] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.209801][ T8828] team0: Port device vxlan0 removed [ 150.219643][ T8828] bond1: (slave ip6gretap1): Removing an active aggregator [ 150.231421][ T8828] bond1: (slave ip6gretap1): Releasing backup interface [ 150.240062][ T8828] bond1: (slave ip6gretap1): the permanent HWaddr of slave - 1e:a5:81:5a:d0:fd - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 150.307362][ T8828] bond1: (slave veth3): Releasing backup interface [ 150.335779][ T6609] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.382491][ T6609] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.431211][ T6609] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.462972][ T6609] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 150.489675][ T8846] netlink: 4 bytes leftover after parsing attributes in process `syz.0.743'. [ 150.570755][ T8848] netlink: 187436 bytes leftover after parsing attributes in process `syz.0.743'. [ 151.183539][ T8889] netlink: 72 bytes leftover after parsing attributes in process `syz.1.755'. [ 151.472414][ T8906] ieee802154 phy0 wpan0: encryption failed: -22 [ 151.723470][ T8921] netlink: 4 bytes leftover after parsing attributes in process `syz.1.765'. [ 152.121326][ T8939] tun0: tun_chr_ioctl cmd 2147767520 [ 152.169462][ T8942] xt_ecn: cannot match TCP bits for non-tcp packets [ 152.172570][ T8927] IPVS: Error connecting to the multicast addr [ 152.315913][ T8947] tipc: Enabled bearer , priority 0 [ 152.330889][ T8947] syzkaller0: entered promiscuous mode [ 152.344864][ T8947] syzkaller0: entered allmulticast mode [ 152.349227][ T8953] netlink: 36 bytes leftover after parsing attributes in process `syz.2.770'. [ 152.500932][ T8961] netlink: 68 bytes leftover after parsing attributes in process `syz.0.773'. [ 152.515155][ T8959] syzkaller0: entered promiscuous mode [ 152.529951][ T8959] syzkaller0: entered allmulticast mode [ 152.543899][ T8959] syzkaller0: mtu less than device minimum [ 152.814598][ T8969] netlink: 'syz.4.777': attribute type 13 has an invalid length. [ 152.826051][ T8969] netlink: 'syz.4.777': attribute type 17 has an invalid length. [ 152.872391][ T8969] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 153.054205][ T8978] openvswitch: netlink: EtherType 10 is less than min 600 [ 153.134349][ T8946] tipc: Resetting bearer [ 153.148423][ T8978] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 153.168937][ T8946] tipc: Disabling bearer [ 153.189442][ T8980] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 153.239664][ T8981] netlink: 156 bytes leftover after parsing attributes in process `syz.0.773'. [ 153.413513][ T8991] netlink: 96 bytes leftover after parsing attributes in process `syz.1.784'. [ 154.137928][ T9019] sctp: [Deprecated]: syz.1.791 (pid 9019) Use of int in maxseg socket option. [ 154.137928][ T9019] Use struct sctp_assoc_value instead [ 154.592229][ T9032] netlink: 'syz.2.795': attribute type 8 has an invalid length. [ 154.632721][ T9035] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 155.428033][ T9058] __nla_validate_parse: 2 callbacks suppressed [ 155.428052][ T9058] netlink: 12 bytes leftover after parsing attributes in process `syz.2.803'. [ 155.475060][ T9058] vlan3: entered promiscuous mode [ 155.495739][ T9058] gretap0: entered promiscuous mode [ 155.600210][ T9064] netlink: 28 bytes leftover after parsing attributes in process `syz.3.801'. [ 155.652514][ T9064] netlink: 28 bytes leftover after parsing attributes in process `syz.3.801'. [ 155.797471][ T9073] tipc: Enabling of bearer rejected, already enabled [ 155.882953][ T9075] bond0: entered promiscuous mode [ 155.904457][ T9075] batadv0: entered promiscuous mode [ 155.947791][ T9075] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 155.955394][ T9075] Cannot create hsr debugfs directory [ 156.014378][ T9075] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 156.031942][ T9075] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 156.044981][ T9086] netlink: 'syz.4.812': attribute type 3 has an invalid length. [ 156.058839][ T9075] hsr1: entered allmulticast mode [ 156.064967][ T9075] bond0: entered allmulticast mode [ 156.072154][ T9086] netlink: 'syz.4.812': attribute type 3 has an invalid length. [ 156.082171][ T9090] netlink: 52 bytes leftover after parsing attributes in process `syz.3.813'. [ 156.094156][ T9075] batadv0: entered allmulticast mode [ 156.108128][ T9086] netlink: 16 bytes leftover after parsing attributes in process `syz.4.812'. [ 156.127011][ T9075] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 156.156486][ T9075] bond0: left promiscuous mode [ 156.181350][ T9075] batadv0: left promiscuous mode [ 156.186867][ T9094] netlink: 12 bytes leftover after parsing attributes in process `syz.4.812'. [ 156.548472][ T9111] netlink: 20 bytes leftover after parsing attributes in process `syz.0.819'. [ 156.591084][ T9111] netlink: 20 bytes leftover after parsing attributes in process `syz.0.819'. [ 156.655050][ T9125] netlink: 'syz.3.822': attribute type 21 has an invalid length. [ 156.663487][ T9125] netlink: 156 bytes leftover after parsing attributes in process `syz.3.822'. [ 156.707188][ T9127] netlink: 8 bytes leftover after parsing attributes in process `syz.4.823'. [ 156.788552][ T9127] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 156.788825][ T1165] bond0: (slave bond_slave_0): interface is now down [ 156.824169][ T1165] bond0: (slave bond_slave_1): interface is now down [ 156.846640][ T9129] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 156.887686][ T1165] bond0: (slave bond_slave_0): interface is now down [ 156.908827][ T1165] bond0: (slave bond_slave_1): interface is now down [ 156.945535][ T1165] bond0: now running without any active interface! [ 157.052630][ T9144] bond_slave_0: mtu less than device minimum [ 157.508035][ T9174] bond_slave_0: entered promiscuous mode [ 157.514128][ T9174] bond_slave_1: entered promiscuous mode [ 157.548025][ T9174] vlan2: entered promiscuous mode [ 157.569367][ T9174] bond0: entered promiscuous mode [ 157.714450][ T9183] netlink: 'syz.1.839': attribute type 12 has an invalid length. [ 157.780503][ T9187] bond3: entered promiscuous mode [ 157.964879][ T9199] bridge0: entered allmulticast mode [ 158.031057][ T9195] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 158.347765][ T9224] netlink: 'syz.3.850': attribute type 21 has an invalid length. [ 158.374831][ T9224] netlink: 'syz.3.850': attribute type 1 has an invalid length. [ 158.545398][ T9238] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 158.612288][ T9240] gtp0: entered promiscuous mode [ 158.621877][ T9240] gtp0: entered allmulticast mode [ 158.861727][ T9253] tipc: Enabled bearer , priority 0 [ 158.869917][ T9253] syzkaller0: entered promiscuous mode [ 158.875410][ T9253] syzkaller0: entered allmulticast mode [ 158.993907][ T9261] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 159.651120][ T9277] tipc: Started in network mode [ 159.660735][ T9277] tipc: Node identity b29656176677, cluster identity 4711 [ 159.686582][ T9277] tipc: Enabled bearer , priority 0 [ 159.716830][ T9277] syzkaller0: entered promiscuous mode [ 159.722341][ T9277] syzkaller0: entered allmulticast mode [ 159.772949][ T9277] tipc: Resetting bearer [ 159.823040][ T9250] tipc: Resetting bearer [ 159.897206][ T9250] tipc: Disabling bearer [ 159.947188][ T9274] tipc: Resetting bearer [ 159.977814][ T9274] tipc: Disabling bearer [ 160.100648][ T9298] netlink: 'syz.0.871': attribute type 1 has an invalid length. [ 160.232687][ T9301] pimreg: entered allmulticast mode [ 160.253327][ T9301] pimreg: left allmulticast mode [ 160.513795][ T9316] lo: entered promiscuous mode [ 160.547367][ T9316] __nla_validate_parse: 22 callbacks suppressed [ 160.547385][ T9316] netlink: 4 bytes leftover after parsing attributes in process `syz.3.877'. [ 160.598306][ T9314] netlink: 40 bytes leftover after parsing attributes in process `syz.2.876'. [ 160.605788][ T9320] netlink: 20 bytes leftover after parsing attributes in process `syz.3.877'. [ 160.624474][ T9322] FAULT_INJECTION: forcing a failure. [ 160.624474][ T9322] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 160.652349][ T9322] CPU: 1 UID: 0 PID: 9322 Comm: syz.1.879 Not tainted 6.16.0-rc6-syzkaller-01646-g56613001dfc9 #0 PREEMPT(full) [ 160.652375][ T9322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 160.652385][ T9322] Call Trace: [ 160.652392][ T9322] [ 160.652400][ T9322] dump_stack_lvl+0x189/0x250 [ 160.652435][ T9322] ? __pfx____ratelimit+0x10/0x10 [ 160.652454][ T9322] ? __pfx_dump_stack_lvl+0x10/0x10 [ 160.652474][ T9322] ? __pfx__printk+0x10/0x10 [ 160.652496][ T9322] ? __might_fault+0xb0/0x130 [ 160.652529][ T9322] should_fail_ex+0x414/0x560 [ 160.652552][ T9322] _copy_from_user+0x2d/0xb0 [ 160.652575][ T9322] ___sys_sendmsg+0x158/0x2a0 [ 160.652598][ T9322] ? __pfx____sys_sendmsg+0x10/0x10 [ 160.652655][ T9322] ? __fget_files+0x2a/0x420 [ 160.652669][ T9322] ? __fget_files+0x3a0/0x420 [ 160.652695][ T9322] __x64_sys_sendmsg+0x19b/0x260 [ 160.652717][ T9322] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 160.652747][ T9322] ? __pfx_ksys_write+0x10/0x10 [ 160.652765][ T9322] ? rcu_is_watching+0x15/0xb0 [ 160.652791][ T9322] ? do_syscall_64+0xbe/0x3b0 [ 160.652812][ T9322] do_syscall_64+0xfa/0x3b0 [ 160.652828][ T9322] ? lockdep_hardirqs_on+0x9c/0x150 [ 160.652844][ T9322] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.652861][ T9322] ? clear_bhb_loop+0x60/0xb0 [ 160.652882][ T9322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.652898][ T9322] RIP: 0033:0x7f5c22f8e9a9 [ 160.652913][ T9322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.652926][ T9322] RSP: 002b:00007f5c23d90038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 160.652945][ T9322] RAX: ffffffffffffffda RBX: 00007f5c231b5fa0 RCX: 00007f5c22f8e9a9 [ 160.652957][ T9322] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 160.652968][ T9322] RBP: 00007f5c23d90090 R08: 0000000000000000 R09: 0000000000000000 [ 160.652978][ T9322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.652988][ T9322] R13: 0000000000000000 R14: 00007f5c231b5fa0 R15: 00007ffc89f19b58 [ 160.653017][ T9322] [ 161.062250][ T9331] netlink: 'syz.4.884': attribute type 1 has an invalid length. [ 161.143618][ T9331] 8021q: adding VLAN 0 to HW filter on device bond1 [ 161.224274][ T9335] 8021q: adding VLAN 0 to HW filter on device bond1 [ 161.231745][ T9335] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 161.244070][ T9335] bond1: (slave vxcan1): Error -95 calling set_mac_address [ 161.303796][ T9331] gretap2: entered promiscuous mode [ 161.356063][ T9331] bond1: (slave gretap2): making interface the new active one [ 161.380608][ T9331] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 161.412338][ T9341] macvlan2: entered promiscuous mode [ 161.419627][ T9341] macvlan2: entered allmulticast mode [ 161.445232][ T9341] bond1: entered promiscuous mode [ 161.467582][ T9341] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 161.507854][ T9341] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap2 [ 161.542890][ T9341] bond1: left promiscuous mode [ 161.672038][ T9351] netlink: 96 bytes leftover after parsing attributes in process `syz.0.885'. [ 161.711236][ T9346] syzkaller1: entered promiscuous mode [ 161.723064][ T9346] syzkaller1: entered allmulticast mode [ 161.784674][ T9315] lo: left promiscuous mode [ 162.352932][ T9373] FAULT_INJECTION: forcing a failure. [ 162.352932][ T9373] name failslab, interval 1, probability 0, space 0, times 1 [ 162.391585][ T9373] CPU: 1 UID: 0 PID: 9373 Comm: syz.2.892 Not tainted 6.16.0-rc6-syzkaller-01646-g56613001dfc9 #0 PREEMPT(full) [ 162.391611][ T9373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 162.391621][ T9373] Call Trace: [ 162.391629][ T9373] [ 162.391636][ T9373] dump_stack_lvl+0x189/0x250 [ 162.391662][ T9373] ? __pfx____ratelimit+0x10/0x10 [ 162.391680][ T9373] ? __pfx_dump_stack_lvl+0x10/0x10 [ 162.391699][ T9373] ? __pfx__printk+0x10/0x10 [ 162.391727][ T9373] ? __pfx___might_resched+0x10/0x10 [ 162.391752][ T9373] should_fail_ex+0x414/0x560 [ 162.391775][ T9373] should_failslab+0xa8/0x100 [ 162.391800][ T9373] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 162.391823][ T9373] ? __alloc_skb+0x112/0x2d0 [ 162.391845][ T9373] __alloc_skb+0x112/0x2d0 [ 162.391866][ T9373] netlink_sendmsg+0x5c6/0xb30 [ 162.391895][ T9373] ? __pfx_netlink_sendmsg+0x10/0x10 [ 162.391915][ T9373] ? aa_sock_msg_perm+0x94/0x160 [ 162.391935][ T9373] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 162.391953][ T9373] ? __pfx_netlink_sendmsg+0x10/0x10 [ 162.391971][ T9373] __sock_sendmsg+0x21c/0x270 [ 162.391997][ T9373] ____sys_sendmsg+0x505/0x830 [ 162.392023][ T9373] ? __pfx_____sys_sendmsg+0x10/0x10 [ 162.392052][ T9373] ? import_iovec+0x74/0xa0 [ 162.392077][ T9373] ___sys_sendmsg+0x21f/0x2a0 [ 162.392099][ T9373] ? __pfx____sys_sendmsg+0x10/0x10 [ 162.392166][ T9373] ? __fget_files+0x2a/0x420 [ 162.392180][ T9373] ? __fget_files+0x3a0/0x420 [ 162.392206][ T9373] __x64_sys_sendmsg+0x19b/0x260 [ 162.392228][ T9373] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 162.392257][ T9373] ? __pfx_ksys_write+0x10/0x10 [ 162.392276][ T9373] ? rcu_is_watching+0x15/0xb0 [ 162.392300][ T9373] ? do_syscall_64+0xbe/0x3b0 [ 162.392323][ T9373] do_syscall_64+0xfa/0x3b0 [ 162.392339][ T9373] ? lockdep_hardirqs_on+0x9c/0x150 [ 162.392355][ T9373] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.392371][ T9373] ? clear_bhb_loop+0x60/0xb0 [ 162.392391][ T9373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.392407][ T9373] RIP: 0033:0x7f313998e9a9 [ 162.392423][ T9373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.392435][ T9373] RSP: 002b:00007f313a7d1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 162.392453][ T9373] RAX: ffffffffffffffda RBX: 00007f3139bb5fa0 RCX: 00007f313998e9a9 [ 162.392465][ T9373] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 162.392476][ T9373] RBP: 00007f313a7d1090 R08: 0000000000000000 R09: 0000000000000000 [ 162.392486][ T9373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.392496][ T9373] R13: 0000000000000000 R14: 00007f3139bb5fa0 R15: 00007fff7661f188 [ 162.392525][ T9373] [ 163.085685][ T9386] netlink: 248 bytes leftover after parsing attributes in process `syz.3.897'. [ 163.406216][ T9393] veth5: entered promiscuous mode [ 164.087915][ T9437] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.910'. [ 164.205298][ T9446] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.912'. [ 164.310555][ T9455] netlink: 'syz.4.914': attribute type 4 has an invalid length. [ 164.333095][ T9452] netlink: 4 bytes leftover after parsing attributes in process `syz.1.915'. [ 164.378436][ T9458] netlink: 'syz.4.914': attribute type 4 has an invalid length. [ 164.388983][ T9460] FAULT_INJECTION: forcing a failure. [ 164.388983][ T9460] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 164.408319][ T9460] CPU: 0 UID: 0 PID: 9460 Comm: syz.0.916 Not tainted 6.16.0-rc6-syzkaller-01646-g56613001dfc9 #0 PREEMPT(full) [ 164.408342][ T9460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 164.408351][ T9460] Call Trace: [ 164.408358][ T9460] [ 164.408365][ T9460] dump_stack_lvl+0x189/0x250 [ 164.408388][ T9460] ? __pfx____ratelimit+0x10/0x10 [ 164.408406][ T9460] ? __pfx_dump_stack_lvl+0x10/0x10 [ 164.408424][ T9460] ? __pfx__printk+0x10/0x10 [ 164.408445][ T9460] ? __might_fault+0xb0/0x130 [ 164.408476][ T9460] should_fail_ex+0x414/0x560 [ 164.408498][ T9460] _copy_from_iter+0x575/0x16f0 [ 164.408526][ T9460] ? __pfx__copy_from_iter+0x10/0x10 [ 164.408546][ T9460] ? __build_skb_around+0x257/0x3e0 [ 164.408566][ T9460] ? netlink_sendmsg+0x642/0xb30 [ 164.408581][ T9460] ? skb_put+0x11b/0x210 [ 164.408600][ T9460] netlink_sendmsg+0x6b2/0xb30 [ 164.408626][ T9460] ? __pfx_netlink_sendmsg+0x10/0x10 [ 164.408644][ T9460] ? aa_sock_msg_perm+0x94/0x160 [ 164.408662][ T9460] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 164.408679][ T9460] ? __pfx_netlink_sendmsg+0x10/0x10 [ 164.408694][ T9460] __sock_sendmsg+0x21c/0x270 [ 164.408719][ T9460] ____sys_sendmsg+0x505/0x830 [ 164.408742][ T9460] ? __pfx_____sys_sendmsg+0x10/0x10 [ 164.408769][ T9460] ? import_iovec+0x74/0xa0 [ 164.408793][ T9460] ___sys_sendmsg+0x21f/0x2a0 [ 164.408814][ T9460] ? __pfx____sys_sendmsg+0x10/0x10 [ 164.408866][ T9460] ? __fget_files+0x2a/0x420 [ 164.408880][ T9460] ? __fget_files+0x3a0/0x420 [ 164.408903][ T9459] netlink: 4 bytes leftover after parsing attributes in process `syz.1.915'. [ 164.408904][ T9460] __x64_sys_sendmsg+0x19b/0x260 [ 164.408925][ T9460] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 164.408949][ T9460] ? __pfx_ksys_write+0x10/0x10 [ 164.408964][ T9460] ? rcu_is_watching+0x15/0xb0 [ 164.408986][ T9460] ? do_syscall_64+0xbe/0x3b0 [ 164.409013][ T9460] do_syscall_64+0xfa/0x3b0 [ 164.409027][ T9460] ? lockdep_hardirqs_on+0x9c/0x150 [ 164.409043][ T9460] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.409059][ T9460] ? clear_bhb_loop+0x60/0xb0 [ 164.409078][ T9460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.409094][ T9460] RIP: 0033:0x7fedbf78e9a9 [ 164.409109][ T9460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.409122][ T9460] RSP: 002b:00007fedc05a0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 164.409139][ T9460] RAX: ffffffffffffffda RBX: 00007fedbf9b5fa0 RCX: 00007fedbf78e9a9 [ 164.409151][ T9460] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 164.409161][ T9460] RBP: 00007fedc05a0090 R08: 0000000000000000 R09: 0000000000000000 [ 164.409171][ T9460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.409180][ T9460] R13: 0000000000000000 R14: 00007fedbf9b5fa0 R15: 00007ffc173811a8 [ 164.409207][ T9460] [ 164.891816][ T9470] syzkaller1: entered promiscuous mode [ 164.910886][ T9470] syzkaller1: entered allmulticast mode [ 165.288312][ T9491] netlink: 256 bytes leftover after parsing attributes in process `syz.1.923'. [ 165.344894][ T9492] netlink: 'syz.4.925': attribute type 322 has an invalid length. [ 165.598114][ T9509] __nla_validate_parse: 1 callbacks suppressed [ 165.598127][ T9509] netlink: 4 bytes leftover after parsing attributes in process `syz.1.929'. [ 165.660340][ T9503] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 165.759333][ T9506] tipc: Enabled bearer , priority 0 [ 165.915789][ T9505] tipc: Disabling bearer [ 165.924356][ T9525] netlink: 8 bytes leftover after parsing attributes in process `syz.2.934'. [ 166.281631][ T9536] netlink: 16 bytes leftover after parsing attributes in process `syz.0.936'. [ 166.314468][ T9536] netlink: 16 bytes leftover after parsing attributes in process `syz.0.936'. [ 166.353943][ T9533] batman_adv: batadv0: Adding interface: macvlan2 [ 166.380312][ T9533] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.417119][ T9533] batman_adv: batadv0: Interface activated: macvlan2 [ 166.982140][ T9559] netlink: 48 bytes leftover after parsing attributes in process `syz.2.943'. [ 166.997661][ T9559] bridge_slave_0: entered allmulticast mode [ 167.020346][ T9561] Cannot find del_set index 0 as target [ 167.151610][ T9568] netlink: 'syz.2.946': attribute type 2 has an invalid length. [ 167.163268][ T9568] netlink: 132 bytes leftover after parsing attributes in process `syz.2.946'. [ 167.794630][ T9579] netlink: 40 bytes leftover after parsing attributes in process `syz.1.950'. [ 168.066347][ T9590] netlink: 24 bytes leftover after parsing attributes in process `syz.2.955'. [ 168.190814][ T9599] netlink: 14 bytes leftover after parsing attributes in process `syz.1.956'. [ 168.907968][ T9633] netlink: 20 bytes leftover after parsing attributes in process `syz.3.965'. [ 169.178853][ T9648] netlink: 'syz.2.967': attribute type 29 has an invalid length. [ 169.196913][ T9650] netlink: 'syz.2.967': attribute type 29 has an invalid length. [ 169.275556][ T9665] netlink: 'syz.1.972': attribute type 6 has an invalid length. [ 169.737421][ T9685] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 170.020340][ T9700] veth0: entered promiscuous mode [ 170.026836][ T9700] macsec0: entered promiscuous mode [ 170.036676][ T9700] macsec0: entered allmulticast mode [ 170.043569][ T9700] veth0: entered allmulticast mode [ 170.059749][ T9700] veth0: left allmulticast mode [ 170.065188][ T9700] veth0: left promiscuous mode [ 170.076173][ T9707] netlink: 'syz.4.984': attribute type 1 has an invalid length. [ 170.098500][ T9707] netlink: 'syz.4.984': attribute type 11 has an invalid length. [ 170.184868][ T9712] tipc: Enabled bearer , priority 0 [ 170.242322][ T9712] tipc: Resetting bearer [ 170.258815][ T9716] tipc: Enabling of bearer rejected, already enabled [ 170.312389][ T9719] netlink: 'syz.4.987': attribute type 21 has an invalid length. [ 170.321910][ T9716] tipc: Disabling bearer [ 171.178462][ T9752] netlink: 'syz.2.995': attribute type 10 has an invalid length. [ 171.189442][ T9752] __nla_validate_parse: 14 callbacks suppressed [ 171.189461][ T9752] netlink: 40 bytes leftover after parsing attributes in process `syz.2.995'. [ 172.219282][ T9752] dummy0: entered promiscuous mode [ 172.225402][ T9752] dummy0: entered allmulticast mode [ 172.245902][ T9752] bridge0: port 1(dummy0) entered blocking state [ 172.258889][ T9752] bridge0: port 1(dummy0) entered disabled state [ 172.293780][ T9752] bridge0: port 1(dummy0) entered blocking state [ 172.300486][ T9752] bridge0: port 1(dummy0) entered forwarding state [ 172.360132][ T9762] netlink: 8 bytes leftover after parsing attributes in process `syz.1.996'. [ 172.433462][ T9765] netlink: 4 bytes leftover after parsing attributes in process `syz.2.999'. [ 172.461379][ T9768] nbd: must specify a size in bytes for the device [ 172.548260][ T9771] netlink: 'syz.1.1001': attribute type 2 has an invalid length. [ 172.604335][ T9774] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1002'. [ 172.684742][ T9780] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1005'. [ 172.695730][ T9780] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1005'. [ 172.724026][ T9780] dvmrp0: left allmulticast mode [ 172.848983][ T9787] netlink: 'syz.0.1006': attribute type 4 has an invalid length. [ 172.876832][ T9787] netlink: 'syz.0.1006': attribute type 17 has an invalid length. [ 173.137352][ T9796] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1011'. [ 173.160062][ T9798] debugfs: Directory 'žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»–_à›xDä±pj8¼•TTí!' with parent 'ieee80211' already present! [ 173.190062][ T9804] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1011'. [ 173.393175][ T9806] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1014'. [ 173.426717][ T9812] netlink: 'syz.1.1016': attribute type 11 has an invalid length. [ 173.557078][ T9812] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1016'. [ 174.124725][ T9855] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode [ 174.363967][ T9864] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 175.184963][ T9895] C: renamed from lo (while UP) [ 175.207612][ T9895] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 175.251943][ T9896] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 176.486069][ T9970] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 177.495299][T10025] __nla_validate_parse: 10 callbacks suppressed [ 177.495317][T10025] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1072'. [ 177.517046][T10025] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1072'. [ 177.549354][T10028] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1072'. [ 177.575632][T10028] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma? [ 177.828695][T10040] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1074'. [ 177.881234][T10041] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1075'. [ 177.911286][T10041] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1075'. [ 177.930880][T10041] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 177.944676][T10044] netlink: 'syz.3.1077': attribute type 21 has an invalid length. [ 177.964360][T10044] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1077'. [ 178.112278][T10054] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1081'. [ 178.113874][T10051] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 178.123981][T10056] FAULT_INJECTION: forcing a failure. [ 178.123981][T10056] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 178.128761][T10051] IPv6: NLM_F_CREATE should be set when creating new route [ 178.128937][T10051] IPv6: NLM_F_CREATE should be set when creating new route [ 178.144395][T10054] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 178.169425][T10056] CPU: 1 UID: 0 PID: 10056 Comm: syz.3.1082 Not tainted 6.16.0-rc6-syzkaller-01646-g56613001dfc9 #0 PREEMPT(full) [ 178.169450][T10056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 178.169459][T10056] Call Trace: [ 178.169465][T10056] [ 178.169473][T10056] dump_stack_lvl+0x189/0x250 [ 178.169498][T10056] ? __pfx____ratelimit+0x10/0x10 [ 178.169514][T10056] ? __pfx_dump_stack_lvl+0x10/0x10 [ 178.169531][T10056] ? __pfx__printk+0x10/0x10 [ 178.169550][T10056] ? __might_fault+0xb0/0x130 [ 178.169580][T10056] should_fail_ex+0x414/0x560 [ 178.169600][T10056] _copy_from_iter+0x575/0x16f0 [ 178.169628][T10056] ? __pfx__copy_from_iter+0x10/0x10 [ 178.169647][T10056] ? __build_skb_around+0x257/0x3e0 [ 178.169666][T10056] ? netlink_sendmsg+0x642/0xb30 [ 178.169679][T10056] ? skb_put+0x11b/0x210 [ 178.169698][T10056] netlink_sendmsg+0x6b2/0xb30 [ 178.169721][T10056] ? __pfx_netlink_sendmsg+0x10/0x10 [ 178.169739][T10056] ? aa_sock_msg_perm+0x94/0x160 [ 178.169758][T10056] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 178.169773][T10056] ? __pfx_netlink_sendmsg+0x10/0x10 [ 178.169789][T10056] __sock_sendmsg+0x21c/0x270 [ 178.169812][T10056] ____sys_sendmsg+0x505/0x830 [ 178.169836][T10056] ? __pfx_____sys_sendmsg+0x10/0x10 [ 178.169861][T10056] ? import_iovec+0x74/0xa0 [ 178.169885][T10056] ___sys_sendmsg+0x21f/0x2a0 [ 178.169905][T10056] ? __pfx____sys_sendmsg+0x10/0x10 [ 178.169956][T10056] ? __fget_files+0x2a/0x420 [ 178.169969][T10056] ? __fget_files+0x3a0/0x420 [ 178.169991][T10056] __x64_sys_sendmsg+0x19b/0x260 [ 178.170011][T10056] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 178.170037][T10056] ? __pfx_ksys_write+0x10/0x10 [ 178.170054][T10056] ? rcu_is_watching+0x15/0xb0 [ 178.170084][T10056] ? do_syscall_64+0xbe/0x3b0 [ 178.170103][T10056] do_syscall_64+0xfa/0x3b0 [ 178.170118][T10056] ? lockdep_hardirqs_on+0x9c/0x150 [ 178.170133][T10056] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.170148][T10056] ? clear_bhb_loop+0x60/0xb0 [ 178.170168][T10056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.170183][T10056] RIP: 0033:0x7ff755b8e9a9 [ 178.170198][T10056] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.170211][T10056] RSP: 002b:00007ff756a73038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 178.170229][T10056] RAX: ffffffffffffffda RBX: 00007ff755db5fa0 RCX: 00007ff755b8e9a9 [ 178.170241][T10056] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 178.170251][T10056] RBP: 00007ff756a73090 R08: 0000000000000000 R09: 0000000000000000 [ 178.170261][T10056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.170270][T10056] R13: 0000000000000000 R14: 00007ff755db5fa0 R15: 00007fff0be984a8 [ 178.170298][T10056] [ 178.190518][T10060] netlink: 'syz.4.1083': attribute type 3 has an invalid length. [ 178.488474][T10069] tipc: Enabled bearer , priority 0 [ 178.498292][T10070] syzkaller0: entered promiscuous mode [ 178.509518][T10070] syzkaller0: entered allmulticast mode [ 178.523318][T10073] netlink: ct family unspecified [ 178.529937][T10073] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 178.529990][T10069] tipc: Enabling of bearer rejected, already enabled [ 178.590475][T10069] tipc: Resetting bearer [ 178.614834][T10069] tipc: Disabling bearer [ 178.734318][T10083] ip6tnl2: entered promiscuous mode [ 178.740764][T10083] ip6tnl2: entered allmulticast mode [ 178.861486][T10094] FAULT_INJECTION: forcing a failure. [ 178.861486][T10094] name failslab, interval 1, probability 0, space 0, times 0 [ 178.874431][T10094] CPU: 1 UID: 0 PID: 10094 Comm: syz.3.1094 Not tainted 6.16.0-rc6-syzkaller-01646-g56613001dfc9 #0 PREEMPT(full) [ 178.874454][T10094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 178.874463][T10094] Call Trace: [ 178.874469][T10094] [ 178.874477][T10094] dump_stack_lvl+0x189/0x250 [ 178.874501][T10094] ? __pfx____ratelimit+0x10/0x10 [ 178.874519][T10094] ? __pfx_dump_stack_lvl+0x10/0x10 [ 178.874537][T10094] ? __pfx__printk+0x10/0x10 [ 178.874560][T10094] ? __pfx___might_resched+0x10/0x10 [ 178.874580][T10094] ? fs_reclaim_acquire+0x7d/0x100 [ 178.874599][T10094] should_fail_ex+0x414/0x560 [ 178.874623][T10094] should_failslab+0xa8/0x100 [ 178.874646][T10094] __kmalloc_noprof+0xcb/0x4f0 [ 178.874667][T10094] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 178.874695][T10094] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 178.874724][T10094] genl_family_rcv_msg_doit+0xb8/0x300 [ 178.874752][T10094] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 178.874773][T10094] ? __pfx_genl_get_cmd+0x10/0x10 [ 178.874798][T10094] ? stack_trace_save+0x9c/0xe0 [ 178.874825][T10094] genl_rcv_msg+0x60e/0x790 [ 178.874852][T10094] ? __pfx_genl_rcv_msg+0x10/0x10 [ 178.874870][T10094] ? __pfx_netdev_nl_queue_get_doit+0x10/0x10 [ 178.874901][T10094] netlink_rcv_skb+0x208/0x470 [ 178.874915][T10094] ? __lock_acquire+0xab9/0xd20 [ 178.874931][T10094] ? __pfx_genl_rcv_msg+0x10/0x10 [ 178.874952][T10094] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 178.874987][T10094] ? down_read+0x1ad/0x2e0 [ 178.875006][T10094] genl_rcv+0x28/0x40 [ 178.875023][T10094] netlink_unicast+0x82c/0x9e0 [ 178.875052][T10094] ? __pfx_netlink_unicast+0x10/0x10 [ 178.875076][T10094] ? netlink_sendmsg+0x642/0xb30 [ 178.875089][T10094] ? skb_put+0x11b/0x210 [ 178.875110][T10094] netlink_sendmsg+0x805/0xb30 [ 178.875136][T10094] ? __pfx_netlink_sendmsg+0x10/0x10 [ 178.875155][T10094] ? aa_sock_msg_perm+0x94/0x160 [ 178.875175][T10094] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 178.875192][T10094] ? __pfx_netlink_sendmsg+0x10/0x10 [ 178.875209][T10094] __sock_sendmsg+0x21c/0x270 [ 178.875234][T10094] ____sys_sendmsg+0x505/0x830 [ 178.875268][T10094] ? __pfx_____sys_sendmsg+0x10/0x10 [ 178.875296][T10094] ? import_iovec+0x74/0xa0 [ 178.875321][T10094] ___sys_sendmsg+0x21f/0x2a0 [ 178.875343][T10094] ? __pfx____sys_sendmsg+0x10/0x10 [ 178.875398][T10094] ? __fget_files+0x2a/0x420 [ 178.875413][T10094] ? __fget_files+0x3a0/0x420 [ 178.875439][T10094] __x64_sys_sendmsg+0x19b/0x260 [ 178.875462][T10094] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 178.875492][T10094] ? __pfx_ksys_write+0x10/0x10 [ 178.875510][T10094] ? rcu_is_watching+0x15/0xb0 [ 178.875535][T10094] ? do_syscall_64+0xbe/0x3b0 [ 178.875555][T10094] do_syscall_64+0xfa/0x3b0 [ 178.875570][T10094] ? lockdep_hardirqs_on+0x9c/0x150 [ 178.875585][T10094] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.875600][T10094] ? clear_bhb_loop+0x60/0xb0 [ 178.875621][T10094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.875637][T10094] RIP: 0033:0x7ff755b8e9a9 [ 178.875652][T10094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.875665][T10094] RSP: 002b:00007ff756a73038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 178.875681][T10094] RAX: ffffffffffffffda RBX: 00007ff755db5fa0 RCX: 00007ff755b8e9a9 [ 178.875693][T10094] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 178.875703][T10094] RBP: 00007ff756a73090 R08: 0000000000000000 R09: 0000000000000000 [ 178.875713][T10094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.875723][T10094] R13: 0000000000000000 R14: 00007ff755db5fa0 R15: 00007fff0be984a8 [ 178.875752][T10094] [ 179.238217][T10095] syzkaller1: entered allmulticast mode [ 179.262011][T10099] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1096'. [ 179.271360][T10099] tc_dump_action: action bad kind [ 179.385815][T10101] tipc: Enabled bearer , priority 0 [ 179.417990][T10101] syzkaller0: entered promiscuous mode [ 179.423509][T10101] syzkaller0: entered allmulticast mode [ 179.459959][T10108] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1100'. [ 179.486121][T10101] tipc: Resetting bearer [ 179.727101][T10100] tipc: Resetting bearer [ 179.791976][T10100] tipc: Disabling bearer [ 179.925791][T10128] ipt_rpfilter: unknown options [ 179.984001][T10134] FAULT_INJECTION: forcing a failure. [ 179.984001][T10134] name failslab, interval 1, probability 0, space 0, times 0 [ 180.012473][T10134] CPU: 1 UID: 0 PID: 10134 Comm: syz.0.1107 Not tainted 6.16.0-rc6-syzkaller-01646-g56613001dfc9 #0 PREEMPT(full) [ 180.012499][T10134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 180.012509][T10134] Call Trace: [ 180.012516][T10134] [ 180.012524][T10134] dump_stack_lvl+0x189/0x250 [ 180.012549][T10134] ? __pfx____ratelimit+0x10/0x10 [ 180.012568][T10134] ? __pfx_dump_stack_lvl+0x10/0x10 [ 180.012587][T10134] ? __pfx__printk+0x10/0x10 [ 180.012615][T10134] ? __pfx___might_resched+0x10/0x10 [ 180.012634][T10134] ? fs_reclaim_acquire+0x7d/0x100 [ 180.012655][T10134] should_fail_ex+0x414/0x560 [ 180.012678][T10134] should_failslab+0xa8/0x100 [ 180.012703][T10134] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 180.012732][T10134] ? __alloc_skb+0x112/0x2d0 [ 180.012754][T10134] __alloc_skb+0x112/0x2d0 [ 180.012776][T10134] netlink_ack+0x146/0xa50 [ 180.012791][T10134] ? __pfx_genl_rcv_msg+0x10/0x10 [ 180.012829][T10134] netlink_rcv_skb+0x28c/0x470 [ 180.012844][T10134] ? __lock_acquire+0xab9/0xd20 [ 180.012867][T10134] ? __pfx_genl_rcv_msg+0x10/0x10 [ 180.012889][T10134] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 180.012929][T10134] ? down_read+0x1ad/0x2e0 [ 180.012951][T10134] genl_rcv+0x28/0x40 [ 180.012970][T10134] netlink_unicast+0x82c/0x9e0 [ 180.013001][T10134] ? __pfx_netlink_unicast+0x10/0x10 [ 180.013027][T10134] ? netlink_sendmsg+0x642/0xb30 [ 180.013041][T10134] ? skb_put+0x11b/0x210 [ 180.013063][T10134] netlink_sendmsg+0x805/0xb30 [ 180.013090][T10134] ? __pfx_netlink_sendmsg+0x10/0x10 [ 180.013110][T10134] ? aa_sock_msg_perm+0x94/0x160 [ 180.013130][T10134] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 180.013148][T10134] ? __pfx_netlink_sendmsg+0x10/0x10 [ 180.013166][T10134] __sock_sendmsg+0x21c/0x270 [ 180.013193][T10134] ____sys_sendmsg+0x505/0x830 [ 180.013219][T10134] ? __pfx_____sys_sendmsg+0x10/0x10 [ 180.013256][T10134] ? import_iovec+0x74/0xa0 [ 180.013281][T10134] ___sys_sendmsg+0x21f/0x2a0 [ 180.013304][T10134] ? __pfx____sys_sendmsg+0x10/0x10 [ 180.013370][T10134] ? __fget_files+0x2a/0x420 [ 180.013385][T10134] ? __fget_files+0x3a0/0x420 [ 180.013411][T10134] __x64_sys_sendmsg+0x19b/0x260 [ 180.013433][T10134] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 180.013463][T10134] ? __pfx_ksys_write+0x10/0x10 [ 180.013482][T10134] ? rcu_is_watching+0x15/0xb0 [ 180.013507][T10134] ? do_syscall_64+0xbe/0x3b0 [ 180.013528][T10134] do_syscall_64+0xfa/0x3b0 [ 180.013543][T10134] ? lockdep_hardirqs_on+0x9c/0x150 [ 180.013560][T10134] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.013576][T10134] ? clear_bhb_loop+0x60/0xb0 [ 180.013597][T10134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.013613][T10134] RIP: 0033:0x7fedbf78e9a9 [ 180.013629][T10134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.013642][T10134] RSP: 002b:00007fedc05a0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 180.013659][T10134] RAX: ffffffffffffffda RBX: 00007fedbf9b5fa0 RCX: 00007fedbf78e9a9 [ 180.013671][T10134] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 180.013682][T10134] RBP: 00007fedc05a0090 R08: 0000000000000000 R09: 0000000000000000 [ 180.013692][T10134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.013702][T10134] R13: 0000000000000000 R14: 00007fedbf9b5fa0 R15: 00007ffc173811a8 [ 180.013730][T10134] [ 180.381549][T10135] vlan2: left promiscuous mode [ 180.386652][T10135] vlan2: left allmulticast mode [ 180.391519][T10135] hsr_slave_1: left allmulticast mode [ 180.442769][T10135] bond2: left promiscuous mode [ 180.579931][T10135] bond3: left promiscuous mode [ 181.904127][T10225] netlink: 'syz.4.1129': attribute type 1 has an invalid length. [ 181.968969][T10228] netlink: 'syz.1.1131': attribute type 1 has an invalid length. [ 181.978192][T10228] block nbd0: Unsupported socket: shutdown callout must be supported. [ 182.022632][T10231] netlink: 'syz.3.1132': attribute type 13 has an invalid length. [ 182.065257][T10237] FAULT_INJECTION: forcing a failure. [ 182.065257][T10237] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 182.084613][T10237] CPU: 1 UID: 0 PID: 10237 Comm: syz.0.1133 Not tainted 6.16.0-rc6-syzkaller-01646-g56613001dfc9 #0 PREEMPT(full) [ 182.084638][T10237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 182.084647][T10237] Call Trace: [ 182.084654][T10237] [ 182.084661][T10237] dump_stack_lvl+0x189/0x250 [ 182.084686][T10237] ? __pfx____ratelimit+0x10/0x10 [ 182.084704][T10237] ? __pfx_dump_stack_lvl+0x10/0x10 [ 182.084721][T10237] ? __pfx__printk+0x10/0x10 [ 182.084755][T10237] should_fail_ex+0x414/0x560 [ 182.084778][T10237] _copy_to_user+0x31/0xb0 [ 182.084800][T10237] simple_read_from_buffer+0xe1/0x170 [ 182.084896][T10237] proc_fail_nth_read+0x1df/0x250 [ 182.084917][T10237] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 182.084936][T10237] ? rw_verify_area+0x258/0x650 [ 182.084956][T10237] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 182.084971][T10237] vfs_read+0x200/0x980 [ 182.084998][T10237] ? __pfx___mutex_lock+0x10/0x10 [ 182.085016][T10237] ? __pfx_vfs_read+0x10/0x10 [ 182.085038][T10237] ? __fget_files+0x2a/0x420 [ 182.085057][T10237] ? __fget_files+0x3a0/0x420 [ 182.085170][T10237] ? __fget_files+0x2a/0x420 [ 182.085199][T10237] ksys_read+0x145/0x250 [ 182.085224][T10237] ? __pfx_ksys_read+0x10/0x10 [ 182.085255][T10237] ? rcu_is_watching+0x15/0xb0 [ 182.085281][T10237] ? do_syscall_64+0xbe/0x3b0 [ 182.085303][T10237] do_syscall_64+0xfa/0x3b0 [ 182.085319][T10237] ? lockdep_hardirqs_on+0x9c/0x150 [ 182.085336][T10237] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.085351][T10237] ? clear_bhb_loop+0x60/0xb0 [ 182.085373][T10237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.085390][T10237] RIP: 0033:0x7fedbf78d3bc [ 182.085406][T10237] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 182.085419][T10237] RSP: 002b:00007fedc05a0030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 182.085437][T10237] RAX: ffffffffffffffda RBX: 00007fedbf9b5fa0 RCX: 00007fedbf78d3bc [ 182.085450][T10237] RDX: 000000000000000f RSI: 00007fedc05a00a0 RDI: 0000000000000003 [ 182.085461][T10237] RBP: 00007fedc05a0090 R08: 0000000000000000 R09: 0000000000000000 [ 182.085471][T10237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.085481][T10237] R13: 0000000000000000 R14: 00007fedbf9b5fa0 R15: 00007ffc173811a8 [ 182.085511][T10237] [ 182.100492][T10233] bond3: (slave gretap3): making interface the new active one [ 182.202631][T10241] netlink: 'syz.0.1135': attribute type 1 has an invalid length. [ 182.241945][T10233] bond3: (slave gretap3): Enslaving as an active interface with an up link [ 182.387274][T10228] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 183.054173][T10254] xt_bpf: check failed: parse error [ 183.553973][T10256] tun0: tun_chr_ioctl cmd 2147767520 [ 183.619104][T10262] __nla_validate_parse: 8 callbacks suppressed [ 183.619121][T10262] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1140'. [ 183.674506][T10262] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1140'. [ 184.205187][ T6609] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 184.953289][T10305] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1152'. [ 185.171063][T10309] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1153'. [ 185.362779][T10357] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1158'. [ 185.569662][T10368] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1162'. [ 185.574770][T10370] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 185.616446][T10368] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1162'. [ 185.634815][T10368] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1162'. [ 186.490730][T10401] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 186.645312][T10401] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1170'. [ 186.684985][T10401] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1170'. [ 187.368946][T10417] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.897927][ T30] audit: type=1800 audit(1753283995.281:5): pid=10440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1183" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1204 res=0 errno=0 [ 187.947384][T10436] 8021q: adding VLAN 0 to HW filter on device bond4 [ 187.955158][ T30] audit: type=1800 audit(1753283995.281:6): pid=10440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1183" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1204 res=0 errno=0 [ 187.962308][T10443] macvlan2: entered promiscuous mode [ 187.977736][ T30] audit: type=1800 audit(1753283995.301:7): pid=10440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1183" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1204 res=0 errno=0 [ 187.977785][ T30] audit: type=1800 audit(1753283995.301:8): pid=10442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1183" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1204 res=0 errno=0 [ 188.064619][T10443] macvlan2: entered allmulticast mode [ 188.093794][T10443] bond4: entered promiscuous mode [ 188.112762][T10443] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 188.162874][T10443] bond4: left promiscuous mode [ 188.653105][T10477] __nla_validate_parse: 5 callbacks suppressed [ 188.653123][T10477] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1192'. [ 188.684131][T10477] pim6reg: entered allmulticast mode [ 188.740739][T10477] pim6reg: left allmulticast mode [ 188.793374][T10486] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1194'. [ 188.822232][T10483] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1195'. [ 188.851571][T10485] netlink: 'syz.2.1195': attribute type 39 has an invalid length. [ 188.873530][T10483] netlink: 'syz.2.1195': attribute type 39 has an invalid length. [ 188.943480][T10488] 8021q: VLANs not supported on ip_vti0 [ 189.051901][T10492] IPVS: set_ctl: invalid protocol: 27767 49.0.0.0:0 [ 189.154837][T10500] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 189.659980][T10518] netlink: 'syz.2.1203': attribute type 1 has an invalid length. [ 189.686446][T10518] netlink: 'syz.2.1203': attribute type 3 has an invalid length. [ 189.717478][T10518] netlink: 'syz.2.1203': attribute type 1 has an invalid length. [ 189.765590][T10518] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1203'. [ 189.791695][T10518] NCSI netlink: No device for ifindex 0 [ 189.974067][T10531] netlink: 'syz.3.1205': attribute type 1 has an invalid length. [ 190.054113][T10531] 8021q: adding VLAN 0 to HW filter on device bond5 [ 190.164100][T10533] 8021q: adding VLAN 0 to HW filter on device bond5 [ 190.175724][T10533] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 190.217894][T10533] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 190.300775][T10536] netlink: 'syz.3.1205': attribute type 11 has an invalid length. [ 190.359640][T10531] veth7: entered promiscuous mode [ 190.417179][T10531] bond5: (slave veth7): Enslaving as an active interface with a down link [ 190.445714][T10534] erspan0: entered allmulticast mode [ 190.665812][T10545] sctp: [Deprecated]: syz.2.1207 (pid 10545) Use of int in maxseg socket option. [ 190.665812][T10545] Use struct sctp_assoc_value instead [ 191.417281][T10574] netlink: 'syz.2.1216': attribute type 1 has an invalid length. [ 191.639135][T10579] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1217'. [ 191.657046][T10577] bond4: (slave bridge4): making interface the new active one [ 191.678502][T10577] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 191.758071][T10579] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.1217'. [ 191.948967][T10585] netlink: 788 bytes leftover after parsing attributes in process `syz.2.1218'. [ 192.483596][T10597] netlink: 240 bytes leftover after parsing attributes in process `syz.3.1221'. [ 193.139905][T10616] tipc: Enabling of bearer rejected, failed to enable media [ 193.851420][T10638] syzkaller0: entered promiscuous mode [ 193.866407][T10638] syzkaller0: entered allmulticast mode [ 194.123341][T10641] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1233'. [ 194.240083][T10645] tipc: Enabled bearer , priority 0 [ 194.259777][T10645] syzkaller0: entered promiscuous mode [ 194.265455][T10645] syzkaller0: entered allmulticast mode [ 194.280594][T10650] @ÿ: renamed from bond_slave_0 [ 194.295393][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.301931][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.333401][T10644] tipc: Resetting bearer [ 194.390315][T10644] tipc: Disabling bearer [ 194.473188][T10661] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1240'. [ 194.488324][T10661] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1240'. [ 194.516083][T10663] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1240'. [ 194.530051][T10665] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1239'. [ 194.557712][T10666] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1241'. [ 194.586146][T10666] netlink: 37 bytes leftover after parsing attributes in process `syz.4.1241'. [ 194.603972][T10666] netlink: 37 bytes leftover after parsing attributes in process `syz.4.1241'. [ 194.685159][T10672] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.696817][T10676] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1243'. [ 194.736468][T10679] netlink: 'syz.0.1245': attribute type 1 has an invalid length. [ 194.763425][T10680] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1244'. [ 194.813552][T10670] gretap0: entered promiscuous mode [ 194.830745][T10683] netlink: 'syz.3.1246': attribute type 3 has an invalid length. [ 194.880962][T10670] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.891900][T10670] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 194.929637][T10672] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.994311][T10672] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.095604][T10672] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.634760][T10696] team0 (unregistering): Port device team_slave_0 removed [ 195.683665][T10696] team0 (unregistering): Port device team_slave_1 removed [ 195.880332][ T6609] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.931030][ T6609] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.970742][ T13] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.003744][ T9820] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.371027][ T5854] Bluetooth: hci2: command 0x0406 tx timeout [ 196.378509][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 196.378519][ T5864] Bluetooth: hci1: command 0x0406 tx timeout [ 197.190854][T10819] x_tables: duplicate underflow at hook 2 [ 197.197651][T10819] x_tables: duplicate underflow at hook 2 [ 197.203542][T10819] x_tables: duplicate underflow at hook 2 [ 197.221656][T10819] x_tables: duplicate underflow at hook 2 [ 197.331294][T10819] x_tables: duplicate underflow at hook 2 [ 197.542581][T10834] netlink: 'syz.3.1285': attribute type 1 has an invalid length. [ 197.887205][ T30] audit: type=1800 audit(1753284005.301:9): pid=10832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1283" name="memory.events" dev="tmpfs" ino=1317 res=0 errno=0 [ 198.186038][T10844] team0: Port device gtp0 added [ 198.351477][T10869] xt_HMARK: spi-set and port-set can't be combined [ 198.408392][T10869] macvtap1: entered promiscuous mode [ 198.419300][T10869] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode [ 198.475274][T10869] mac80211_hwsim hwsim4 wlan1: left promiscuous mode [ 198.580824][T10878] geneve2: entered allmulticast mode [ 198.992554][T10893] syzkaller0: entered promiscuous mode [ 199.015304][T10893] syzkaller0: entered allmulticast mode [ 199.048642][ T8292] hid-generic 0005:04F3:1010.0001: item fetching failed at offset 0/1 [ 199.077575][ T8292] hid-generic 0005:04F3:1010.0001: probe with driver hid-generic failed with error -22 [ 199.347660][T10911] __nla_validate_parse: 20 callbacks suppressed [ 199.347678][T10911] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1304'. [ 199.463932][T10915] netlink: 'syz.4.1305': attribute type 10 has an invalid length. [ 199.591890][T10918] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1305'. [ 199.604048][T10918] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1305'. [ 200.202445][T10939] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1309'. [ 201.648501][ T5849] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 202.130566][T10964] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1314'. [ 202.233418][T10964] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1314'. [ 202.256217][T10977] netlink: 356 bytes leftover after parsing attributes in process `syz.0.1317'. [ 202.335351][T10980] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1316'. [ 202.434797][T10983] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1317'. [ 202.483414][T10983] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1317'. [ 203.550948][ T9823] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.759231][ T9823] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.919196][ T9823] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.054219][ T9823] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.649018][ T9823] bond1 (unregistering): (slave gretap2): Releasing active interface [ 204.680122][ T9823] bond3 (unregistering): (slave gretap3): Releasing active interface [ 204.975739][ T9823] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 204.984941][ T9823] bond_slave_0: left promiscuous mode [ 204.993147][ T9823] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 205.002502][ T9823] bond_slave_1: left promiscuous mode [ 205.010380][ T9823] bond0 (unregistering): Released all slaves [ 205.105831][ T9823] bond1 (unregistering): Released all slaves [ 205.119625][ T9823] bond2 (unregistering): Released all slaves [ 205.133719][ T9823] bond3 (unregistering): Released all slaves [ 205.249756][ T9823] : left promiscuous mode [ 205.354452][ T9823] tipc: Left network mode [ 205.995370][ T9823] batadv0: left promiscuous mode [ 206.006213][ T9823] hsr_slave_0: left promiscuous mode [ 206.012904][ T9823] hsr_slave_1: left promiscuous mode [ 206.019719][ T9823] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.028066][ T9823] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.036035][ T9823] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 206.043969][ T9823] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.065464][ T9823] veth1_vlan: left promiscuous mode [ 206.071468][ T9823] v: left promiscuous mode [ 207.080448][ T9823] IPVS: stop unused estimator thread 0... [ 207.126956][ T9823] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.194732][ T9823] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.241292][ T9823] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.314207][ T9823] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.549486][ T9823] batman_adv: batadv0: Interface deactivated: macvlan2 [ 207.570954][ T9823] batman_adv: batadv0: Removing interface: macvlan2 [ 207.609991][ T9823] team0: Port device gtp0 removed [ 207.837508][ T9823] bond0 (unregistering): Released all slaves [ 207.934141][ T9823] bond1 (unregistering): Released all slaves [ 208.004972][ T9823] tipc: Left network mode [ 208.248121][ T9823] mac80211_hwsim hwsim3 wlan0 (unregistering): left allmulticast mode [ 208.257229][ T9823] mac80211_hwsim hwsim3 wlan0 (unregistering): left promiscuous mode [ 208.372333][ T9823] ------------[ cut here ]------------ [ 208.377939][ T9823] WARNING: CPU: 1 PID: 9823 at net/wireless/core.c:204 cfg80211_switch_netns+0x560/0x590 [ 208.387836][ T9823] Modules linked in: [ 208.392040][ T9823] CPU: 1 UID: 0 PID: 9823 Comm: kworker/u8:29 Not tainted 6.16.0-rc6-syzkaller-01646-g56613001dfc9 #0 PREEMPT(full) [ 208.404442][ T9823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 208.414595][ T9823] Workqueue: netns cleanup_net [ 208.419539][ T9823] RIP: 0010:cfg80211_switch_netns+0x560/0x590 [ 208.425638][ T9823] Code: e1 07 38 c1 7c 8c 4c 89 e7 e8 cc 4a 63 f7 eb 82 e8 35 3c 01 f7 e9 63 fe ff ff e8 2b 3c 01 f7 e9 59 fe ff ff e8 21 3c 01 f7 90 <0f> 0b 90 e9 a9 fd ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c cb fa [ 208.445447][ T9823] RSP: 0018:ffffc9000e63f860 EFLAGS: 00010293 [ 208.451933][ T9823] RAX: ffffffff8abeee2f RBX: ffff888032e80d78 RCX: ffff88805d95da00 [ 208.460088][ T9823] RDX: 0000000000000000 RSI: 00000000ffffffef RDI: 0000000000000000 [ 208.468394][ T9823] RBP: 00000000ffffffef R08: ffffffff8fa22cf7 R09: 1ffffffff1f4459e [ 208.476688][ T9823] R10: dffffc0000000000 R11: fffffbfff1f4459f R12: ffff888032e80700 [ 208.484770][ T9823] R13: ffff88805f6a8a00 R14: dffffc0000000000 R15: ffff888032e808f0 [ 208.492788][ T9823] FS: 0000000000000000(0000) GS:ffff888125d15000(0000) knlGS:0000000000000000 [ 208.501791][ T9823] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 208.508428][ T9823] CR2: 0000562d624dd000 CR3: 000000000df38000 CR4: 00000000003526f0 [ 208.516520][ T9823] Call Trace: [ 208.519840][ T9823] [ 208.522784][ T9823] cfg80211_pernet_exit+0xa2/0x140 [ 208.528105][ T9823] ops_undo_list+0x497/0x990 [ 208.532726][ T9823] ? __pfx_ops_undo_list+0x10/0x10 [ 208.538002][ T9823] ? do_raw_spin_unlock+0x122/0x240 [ 208.543214][ T9823] cleanup_net+0x4c5/0x800 [ 208.547678][ T9823] ? __pfx_cleanup_net+0x10/0x10 [ 208.552635][ T9823] ? _raw_spin_unlock_irq+0x23/0x50 [ 208.557922][ T9823] ? process_scheduled_works+0x9ef/0x17b0 [ 208.563655][ T9823] ? process_scheduled_works+0x9ef/0x17b0 [ 208.569457][ T9823] process_scheduled_works+0xae1/0x17b0 [ 208.575179][ T9823] ? __pfx_process_scheduled_works+0x10/0x10 [ 208.581276][ T9823] worker_thread+0x8a0/0xda0 [ 208.585911][ T9823] kthread+0x70e/0x8a0 [ 208.590067][ T9823] ? __pfx_worker_thread+0x10/0x10 [ 208.595210][ T9823] ? __pfx_kthread+0x10/0x10 [ 208.599881][ T9823] ? _raw_spin_unlock_irq+0x23/0x50 [ 208.605101][ T9823] ? lockdep_hardirqs_on+0x9c/0x150 [ 208.610344][ T9823] ? __pfx_kthread+0x10/0x10 [ 208.614951][ T9823] ret_from_fork+0x3fc/0x770 [ 208.619602][ T9823] ? __pfx_ret_from_fork+0x10/0x10 [ 208.624729][ T9823] ? __switch_to_asm+0x39/0x70 [ 208.629561][ T9823] ? __switch_to_asm+0x33/0x70 [ 208.634360][ T9823] ? __pfx_kthread+0x10/0x10 [ 208.639034][ T9823] ret_from_fork_asm+0x1a/0x30 [ 208.643819][ T9823] [ 208.646921][ T9823] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 208.654205][ T9823] CPU: 1 UID: 0 PID: 9823 Comm: kworker/u8:29 Not tainted 6.16.0-rc6-syzkaller-01646-g56613001dfc9 #0 PREEMPT(full) [ 208.666525][ T9823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 208.676589][ T9823] Workqueue: netns cleanup_net [ 208.681455][ T9823] Call Trace: [ 208.684736][ T9823] [ 208.687831][ T9823] dump_stack_lvl+0x99/0x250 [ 208.692427][ T9823] ? __asan_memcpy+0x40/0x70 [ 208.697010][ T9823] ? __pfx_dump_stack_lvl+0x10/0x10 [ 208.702209][ T9823] ? __pfx__printk+0x10/0x10 [ 208.706808][ T9823] panic+0x2db/0x790 [ 208.710705][ T9823] ? __pfx_panic+0x10/0x10 [ 208.715108][ T9823] ? show_trace_log_lvl+0x4fb/0x550 [ 208.720304][ T9823] ? ret_from_fork_asm+0x1a/0x30 [ 208.725241][ T9823] __warn+0x31b/0x4b0 [ 208.729210][ T9823] ? cfg80211_switch_netns+0x560/0x590 [ 208.734661][ T9823] ? cfg80211_switch_netns+0x560/0x590 [ 208.740101][ T9823] report_bug+0x2be/0x4f0 [ 208.744417][ T9823] ? cfg80211_switch_netns+0x560/0x590 [ 208.749860][ T9823] ? cfg80211_switch_netns+0x560/0x590 [ 208.755303][ T9823] ? cfg80211_switch_netns+0x562/0x590 [ 208.760750][ T9823] handle_bug+0x84/0x160 [ 208.764984][ T9823] exc_invalid_op+0x1a/0x50 [ 208.769481][ T9823] asm_exc_invalid_op+0x1a/0x20 [ 208.774317][ T9823] RIP: 0010:cfg80211_switch_netns+0x560/0x590 [ 208.780456][ T9823] Code: e1 07 38 c1 7c 8c 4c 89 e7 e8 cc 4a 63 f7 eb 82 e8 35 3c 01 f7 e9 63 fe ff ff e8 2b 3c 01 f7 e9 59 fe ff ff e8 21 3c 01 f7 90 <0f> 0b 90 e9 a9 fd ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c cb fa [ 208.800319][ T9823] RSP: 0018:ffffc9000e63f860 EFLAGS: 00010293 [ 208.806556][ T9823] RAX: ffffffff8abeee2f RBX: ffff888032e80d78 RCX: ffff88805d95da00 [ 208.814613][ T9823] RDX: 0000000000000000 RSI: 00000000ffffffef RDI: 0000000000000000 [ 208.822581][ T9823] RBP: 00000000ffffffef R08: ffffffff8fa22cf7 R09: 1ffffffff1f4459e [ 208.830634][ T9823] R10: dffffc0000000000 R11: fffffbfff1f4459f R12: ffff888032e80700 [ 208.838601][ T9823] R13: ffff88805f6a8a00 R14: dffffc0000000000 R15: ffff888032e808f0 [ 208.846582][ T9823] ? cfg80211_switch_netns+0x55f/0x590 [ 208.852065][ T9823] cfg80211_pernet_exit+0xa2/0x140 [ 208.857173][ T9823] ops_undo_list+0x497/0x990 [ 208.861755][ T9823] ? __pfx_ops_undo_list+0x10/0x10 [ 208.866860][ T9823] ? do_raw_spin_unlock+0x122/0x240 [ 208.872057][ T9823] cleanup_net+0x4c5/0x800 [ 208.876734][ T9823] ? __pfx_cleanup_net+0x10/0x10 [ 208.881681][ T9823] ? _raw_spin_unlock_irq+0x23/0x50 [ 208.886872][ T9823] ? process_scheduled_works+0x9ef/0x17b0 [ 208.892578][ T9823] ? process_scheduled_works+0x9ef/0x17b0 [ 208.898308][ T9823] process_scheduled_works+0xae1/0x17b0 [ 208.903871][ T9823] ? __pfx_process_scheduled_works+0x10/0x10 [ 208.909863][ T9823] worker_thread+0x8a0/0xda0 [ 208.914473][ T9823] kthread+0x70e/0x8a0 [ 208.918540][ T9823] ? __pfx_worker_thread+0x10/0x10 [ 208.923641][ T9823] ? __pfx_kthread+0x10/0x10 [ 208.928222][ T9823] ? _raw_spin_unlock_irq+0x23/0x50 [ 208.933566][ T9823] ? lockdep_hardirqs_on+0x9c/0x150 [ 208.938748][ T9823] ? __pfx_kthread+0x10/0x10 [ 208.943343][ T9823] ret_from_fork+0x3fc/0x770 [ 208.947936][ T9823] ? __pfx_ret_from_fork+0x10/0x10 [ 208.953063][ T9823] ? __switch_to_asm+0x39/0x70 [ 208.957831][ T9823] ? __switch_to_asm+0x33/0x70 [ 208.962592][ T9823] ? __pfx_kthread+0x10/0x10 [ 208.967184][ T9823] ret_from_fork_asm+0x1a/0x30 [ 208.971960][ T9823] [ 208.976471][ T9823] Kernel Offset: disabled [ 208.980783][ T9823] Rebooting in 86400 seconds..