last executing test programs: 2.51881518s ago: executing program 1 (id=3448): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f00000002c0)=@nl=@unspec, 0x80, &(0x7f0000000180)=[{&(0x7f0000000c40)="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", 0x227}, {&(0x7f0000001440)="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", 0x38d}], 0x2}, 0x8400) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000004ac0)=0x2c, 0x4) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, &(0x7f0000000000)=[{&(0x7f00000000c0)="9d", 0x1}], 0x1}, 0x0) 2.518209476s ago: executing program 1 (id=3449): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c00)={0x18, 0x3e, 0x1, 0x7fffc, 0x4, {0x1}, [@typed={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) sendmmsg$inet(r3, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) bind$can_raw(r2, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000040)=[{{0x0, 0x0, 0x0, 0x1}, {0x0, 0x1, 0x0, 0x1}}, {{0x2, 0x1, 0x1}, {0x4, 0x1, 0x0, 0x1}}, {{0x1, 0x1, 0x1}, {0x1, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x3, 0x1}}], 0x20) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x3}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8041}, 0x40044) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {}, {0xfff1, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400028008000100010000000800020011000000050021000000000008000a00", @ANYRES32, @ANYBLOB='\n\x00:'], 0x74}}, 0x0) 2.513778266s ago: executing program 0 (id=3451): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r0, 0x0) socket$rxrpc(0x21, 0x2, 0xa) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x3, &(0x7f0000001040)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000"], &(0x7f0000000580)='GPL\x00'}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3, 0x10, r1, 0xc0e8000) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$kcm(0x29, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000000980)={0x10, 0x32, 0x4, 0x70bd25, 0x25dfdbff}, 0x10}], 0x1, &(0x7f0000002900)=[@cred={{0x1c}}], 0x20, 0x50}, 0x40880) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000007780)) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@ipv6_getaddrlabel={0x1c, 0x4a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x80}}, 0x1c}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000077c0)={{{@in=@loopback, @in6=@private1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f00000078c0)=0xe8) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000007900), &(0x7f0000007940)=0xc) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000007980)) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f00000079c0)={{{@in=@multicast1, @in6=@mcast1}}, {{@in=@local}, 0x0, @in=@empty}}, &(0x7f0000007ac0)=0xe8) getgid() r9 = socket$netlink(0x10, 0x3, 0x12) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000007b80)={{r3}, &(0x7f0000007b00), &(0x7f0000007b40)='%pi6 \x00'}, 0x20) 2.513361065s ago: executing program 1 (id=3452): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0x1}], 0x1}}], 0x1, 0x0) 2.407354414s ago: executing program 1 (id=3456): ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg2\x00', 0x0}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x68002, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a0000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000008b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'md5\x00'}, 0x58) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000000)={{0x2, 0x4e24, @rand_addr=0x64010100}, {0x1, @multicast}, 0x0, {0x2, 0x4e23, @private=0xa010100}, 'xfrm0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r5}, 0x10) r6 = epoll_create(0x7) epoll_pwait(r6, &(0x7f0000000380)=[{}], 0x1, 0x3f38, &(0x7f00000002c0), 0x8) ioctl$SIOCRSACCEPT(0xffffffffffffffff, 0x89e3) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@ipv4_newrule={0x34, 0x20, 0x20, 0x70bd2c, 0x25dfdbfe, {0x2, 0x10, 0x10, 0xfc, 0x1, 0x0, 0x0, 0x3, 0x4}, [@FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3b}}, @FRA_DST={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FRA_GENERIC_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x3}]}, 0x34}}, 0x0) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r7, &(0x7f0000000000)={0x27}, 0x62) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r7, 0x118, 0x1, 0x0, 0x0) sendmsg$AUDIT_USER_TTY(r2, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xb0, 0x464, 0x1, 0x70bd2d, 0x25dfdbfc, "ca1bd9375043ea7b1cd7a720f15396ebc29be68f120f5fab59310da4db77c27573a844bb606c3e17546c7c3db42d852d017cad455d5c22e409179de43c78d596bed08580374dff47b4e0812670044d6d6de25dbd6fae849204d909f895a5273ee785332345df35ed2676a4dc61dacee99881aab790d197adfc29380a797e3cca3d5d48b8f082bbba104ed07fe25d3098acb919bf6bac27079758931fa8", ["", "", "", ""]}, 0xb0}, 0x1, 0x0, 0x0, 0x8004}, 0x24009050) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x0, 0xa, 0x400, 0x7880, 0xffffffffffffffff, 0x0, '\x00', r0, 0xffffffffffffffff, 0x4, 0x0, 0x2}, 0x50) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x15, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000070000009500000000000000183300000500000000000000000000000a573000f0ffffffbd91fcff08000000b7080000000000007b8af8ff00000000b7080000018000007b8af0ff18000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300000519", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x37, &(0x7f0000000180)=""/55, 0x40f00, 0x4, '\x00', r0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000001c0)=[0x1, 0x1, r8, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000200)=[{0x1, 0x3, 0xf, 0xc}, {0x5, 0x4, 0x10, 0x5}, {0x0, 0x3, 0xa, 0xc}, {0x1, 0x2}, {0x2, 0x3, 0x2, 0x7}, {0x3, 0x5, 0xf, 0x4}, {0x1, 0x1, 0x8, 0x2}, {0x0, 0x4, 0x5, 0x8}, {0x1, 0x2, 0xa, 0x7}, {0x3, 0x5, 0xe, 0x1}], 0x10, 0xe46}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000380)={0x5, 0x0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000017c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xb2}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r8}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYRESOCT=0x0], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x2a, '\x00', r0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000000), 0x10, r10, r9}, 0x94) 2.358488345s ago: executing program 0 (id=3457): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) 2.351790822s ago: executing program 2 (id=3458): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f00000035c0)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="b180dccc16eb676ff09b3e4ef26f701d8f128e12dbcad855d38159a05a2fd506", 0x20}, {&(0x7f0000001ac0)="185f70788926e08ce31809863a7db4d975e887eea5dcd974fef9c6ed45a821773237e5d2d329c07c7e1bb2e75ecccfb76e11781c5daab14253f6959a0400da0bf98a0ab829816250cf32206089785600f7c3ee056ab6fdd436f0c3e71740000000d5d70f35c3c55403e6a22e4560ac693ad7777ee6fa583bb090b16aa683c43622ac905f4d784acecc00c00683a9ee1b3366dd0bfbe10544fca550e261a88e69abcb8a9157800055a417f68e377afb1bcb4369605e3d1299c60f888f9c374fb6", 0xc0}], 0x2, 0x0, 0x0, 0x10}], 0x1, 0x84) recvmsg$can_raw(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000ac0)=""/4096, 0x1000}], 0x1}, 0x40) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="3c000000100009062abd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="b5ffa88800000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r8], 0x3c}}, 0x0) r9 = socket(0x10, 0x803, 0x8) r10 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_LIST_RULES(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x10, 0x3f5, 0x20, 0x4, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x20000880}, 0x40000) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000180)={0x40, r12, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r14}, @val={0xc, 0x99, {0x9, 0x74}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x99e}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]]}, 0x40}}, 0x20000000) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r11], 0x5c}}, 0x40) 2.317011732s ago: executing program 0 (id=3460): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="310300000000fbdbdf250b00000008000300", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x18801000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x10, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x10000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8804) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x7c, 0x30, 0x9, 0x0, 0x0, {}, [{0x68, 0x1, [@m_mpls={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x2}}, @TCA_MPLS_TTL={0x5, 0x7, 0x40}, @TCA_MPLS_LABEL={0x8}, @TCA_MPLS_TC={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000300)=@newlinkprop={0x94, 0x6c, 0x0, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x4400, 0x14c4}, [@IFLA_LINKMODE={0x5, 0x11, 0x6}, @IFLA_VF_PORTS={0x18, 0x18, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x8}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xf}]}]}, @IFLA_PORT_SELF={0x18, 0x19, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "55c29bd3c4fb04b364eec6acd81bae77"}]}, @IFLA_PHYS_PORT_ID={0x4}, @IFLA_CARRIER={0x5, 0x21, 0xc}, @IFLA_PHYS_SWITCH_ID={0x19, 0x24, "1fe8e85ffda91b8f3e0b6900728e80f8b93c466d14"}, @IFLA_BROADCAST={0xa, 0x2, @broadcast}, @IFLA_NET_NS_FD={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x8800}, 0x50) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0xfffffffffffffd14, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x5, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0x0, 0x802e2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}}) 2.162339222s ago: executing program 1 (id=3463): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000400", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = socket(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000800000000000000000000000000000002"]) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r2, 0x1, 0x2, 0x0, 0x48) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x82, &(0x7f00000001c0)={r5, 0x0, 0x3ff}, 0x8) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4ea0}, 0x10) recvmsg(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2001) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x7, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r6}, 0x20) getpeername$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000480)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="ff1100"/15, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000"], &(0x7f0000000380)='syzkaller\x00', 0x44, 0x49, &(0x7f00000003c0)=""/73, 0x41000, 0x42, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x10, 0x7, 0x5ee9}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000540), &(0x7f0000000580)=[{0x1, 0x2, 0x8, 0xb}, {0x4, 0x4, 0x9, 0x5}, {0x3, 0x1, 0x2, 0x9}, {0x3, 0x2, 0x0, 0x6}, {0x5, 0x1, 0x5, 0x3105bf3c9560e101}], 0x10, 0xd748}, 0x94) 1.935157971s ago: executing program 1 (id=3464): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000000000)=0x8, 0x4) close(r0) close(0x4) r1 = getpid() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x17, 0x300, 0x70bd2b, 0x25dfdbfb, {0x1}, [@nested={0xc, 0x141, 0x0, 0x1, [@nested={0x4, 0x14f}, @nested={0x4, 0x1f}]}, @generic]}, 0x20}, 0x1, 0x0, 0x0, 0x4040004}, 0x8000) syz_open_procfs$namespace(r1, &(0x7f0000000080)='ns/mnt\x00') unshare(0x6a040000) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x8, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r4, 0x0, 0x2b, &(0x7f0000000240)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x2, @empty}}}, 0x108) poll(&(0x7f0000000000)=[{r3, 0x8a20}, {r2, 0x1a0}], 0x2, 0xf72) 1.932411693s ago: executing program 2 (id=3465): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000180)={@empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @val={@void, {0x8100, 0x4, 0x1}}, {@mpls_mc={0x8848, {[{0x8aa9}, {0xff}, {0xffc01}, {}, {0xffffb}, {0x7}], @llc={@snap={0xab, 0x1, "f6", "350b99", 0xc, "a51e8a9cf25fb45006584d41ecc9b6edbff8838aff2c9018b0318bfdbdbcd209dc2e00a61b3011a9a0f6144d7e4c951c7fb76ecb"}}}}}}, &(0x7f0000000080)={0x0, 0x1, [0xfab, 0xde7, 0x9cd, 0xdc2]}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, 0x0, &(0x7f0000000240)) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000001000)=ANY=[@ANYBLOB="80010000100001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000ffff00000000000000006c000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480001007467723136302d67656e65726963000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000480003"], 0x180}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_LEN={0x8}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x0) 1.92160592s ago: executing program 4 (id=3466): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000002000)=[{{0x0, 0x11, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0x1}], 0x1}}], 0x1, 0x0) 1.790416071s ago: executing program 2 (id=3468): r0 = socket$inet(0x2, 0x2, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000040)={0x28, r3, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5}]}]}, 0x28}}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000143e007d3629bd7000fedbdf250a000000f3"], 0x14}, 0x1, 0x0, 0x0, 0x48094}, 0x240400c0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000400)="08001efbb07d586e", 0xffe8}], 0x1, &(0x7f0000000040)=[@ip_tos_int={{0x14, 0x0, 0x7}}], 0x18}, 0x0) 1.772744315s ago: executing program 4 (id=3469): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c1000000000080001000a010100"], 0x1c}}, 0x0) (async) sendmsg$key(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r0], 0x80}}, 0x0) (async) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000061105e000000000006000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = socket$inet6(0xa, 0xa, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f0000000340)={0x2, 0x4e25, 0x200, @remote, 0x10000002}, 0x14) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000380)={0x0, 'pim6reg1\x00', 0x1}, 0x18) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000140), 0x4) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80802, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syz_tun\x00', 0x2}) sendmsg$nl_xfrm(r5, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=ANY=[@ANYBLOB="6001000010000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb0000fff720000001000000003b000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="64010102000000000000000000000000000000006c000000ac1414bb00000000000000000000000000000000000000000000008000000000000000000000000000000000000000000300000000000000000000000000000004000000000000e3ff000000000000000000000000000000040000000000000000000040000000000000000000000000000000ba9b55090000000000fcffffff0000000002000001000000000000000008001f0004000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000008001f0003000000150008"], 0x160}}, 0x4810) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0x400}]]}}}]}, 0x38}, 0x1, 0x7500}, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, 0x0, 0x0) (async) sendmmsg$inet(r2, &(0x7f0000000240)=[{{&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xfd}}, 0x10, &(0x7f00000016c0)=[{&(0x7f00000003c0)='X;', 0x2}], 0x1}}, {{0x0, 0x0, 0x0}}, {{&(0x7f00000000c0)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000300)="476b62f98fd83496c22fd1d6aca281b9c27246628d4fae4a389d9bbbc904e4a70821445c2dc18a0d8de240", 0x2b}, {&(0x7f0000000140)="d264c0446446b399d5f4cc5ad017b3b0424e7071ffc21b9942cdde80eacc03a6e8decd5d339ef349b2ccd1780ab57aece57a95cadc5898883eea25ce0af9b4479286d014e111bf6389e14df23493901bd5babb62ec1682158baefbcac9db06c2e67b4a447c19fb8deca28f1839429427aaac2155c715416828005c17dc3498903fc518b9bbc329fe807759792392cf0f", 0x90}], 0x2}}], 0x3, 0x80) 1.629390671s ago: executing program 2 (id=3470): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) 1.598422974s ago: executing program 4 (id=3471): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0x1}], 0x1}}], 0x1, 0x0) (fail_nth: 3) 1.121845955s ago: executing program 2 (id=3472): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x4c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1d}}, @NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x1}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x21}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x19}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x16}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4042}, 0x4000) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$netlink(0x10, 0x3, 0x5) 1.068579447s ago: executing program 4 (id=3474): socket$inet6(0xa, 0x1, 0x100) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x10, 0x803, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x1, r3, 0x7, r0}, 0x10) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r4, &(0x7f00000002c0)={&(0x7f0000000100)={0x1d, r5}, 0x10, &(0x7f0000000280)={&(0x7f0000000200)={0x1, 0x59b, 0x8, {0x0, 0xea60}, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x1, 0x1}, 0x1, 0x3, 0x0, 0x0, "60001706111000"}}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 1.048434618s ago: executing program 0 (id=3475): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x7, 0x0) socket$phonet(0x23, 0x2, 0x1) sendmsg$kcm(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000018007b18e00212ba0d8105040a601100fe0f040b067c55a1bc00090009000500000000001500150005000000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbecbf29d746e7372f2a00001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) syz_emit_ethernet(0x66, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000003b40)={0x0, 0x0, &(0x7f0000003b00)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000002b40), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x54, r5, 0x1, 0x70bd2a, 0xfffffffe, {0x6}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x958}, {0x6, 0x16, 0x794}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x24008004) syz_emit_ethernet(0x42, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa290800450e00340064000007069078ac1414bbac1414bb4e224e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="80106071907800ea080a09df168a000000000000"], 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="840000001000f5a40000000000dbdf2500000000", @ANYRESOCT=r1, @ANYBLOB="00000000000000006400128009000100626f6e640000000054000280050001000500000005000d000200000008000200", @ANYRES32=0x0, @ANYBLOB="06001800030000000500060004000000050016000100000008001c"], 0x84}, 0x1, 0x0, 0x0, 0x40090}, 0x0) r6 = accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000240)=0x14) setsockopt$packet_int(r6, 0x107, 0x18, &(0x7f0000000280)=0x10, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) 930.359749ms ago: executing program 3 (id=3476): r0 = socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYRES32=r2, @ANYRES16=r2, @ANYBLOB="010326bd6000000000002d"], 0x20}, 0x1, 0x0, 0x0, 0x40954}, 0x20040814) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}}, 0x24}}, 0x800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=@newtfilter={0x24, 0x28, 0xd27, 0x1003ffd, 0x0, {0x0, 0x0, 0x0, 0x0, {0xd, 0x9}, {}, {0x2, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x200008c0) sendmmsg(r1, &(0x7f0000000000), 0x400000000000235, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000012006b47880000d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4080003680601000008000300ff000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=@bridge_getvlan={0x18, 0x72, 0x333, 0x6, 0x4}, 0x18}}, 0x20000010) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, 0x0) ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f0000000300)={0x0, @default, @bpq0, 0x7218, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x7, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) 840.620732ms ago: executing program 4 (id=3477): r0 = socket(0x29, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'udp\x00'}, @NFTA_MATCH_INFO={0xe, 0x3, "7acc6338a90000b03bd9"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x5c}]}]}], {0x14}}, 0x98}}, 0x4) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000019c0)=@newtfilter={0x38, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x2}}, [@TCA_RATE={0x6, 0x5, {0xb9, 0x80}}, @filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x38}}, 0x10004800) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xc6da5938055fa6fd}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_cmd={0x1, 0x9, 0x8, 0x82e8, 0x2, 0x2, 0x4, 0x9, 0x8, 0x1, 0x5, 0x3, 0x5ef, 0x9, 0xbe, 0xd1, [0x3, 0xf2]}}) 721.715737ms ago: executing program 2 (id=3478): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x23d7, 0x7f}}]}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x600}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1a, 0x1, &(0x7f0000000000)=@raw=[@exit], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x2001, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "dbdd9ede7e2313a7a23925f03dbbcf5cde982cab6b38bf7b463ae5f42c35dd1d", "6a7710ebcf55344ae76b375fa62e3502b74659d7dbde072d61b6238412ad5f1a0a4f358515e45cea781c9e9b26806f68", "dd72b3bd460f4ebd662f8cd823dfd0d963970deffa6dd57d8176d2b5", {"4e3bc06c34c945e45e27e747494b407f", "256d9ddc3e6e1f7c5f7b4c5e69c1dd72"}}}}}}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001c00070c000000000000000002000000", @ANYRES32=r8, @ANYBLOB="020000000a000100aaaaaaaaaabb"], 0x30}, 0x1, 0x0, 0x0, 0x68eaadec908dc23b}, 0x20024090) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket(0x2a, 0x2, 0x0) getsockname$packet(r10, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x2000000, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x6, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x6}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x6}]}}]}, 0x48}}, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r12, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000003a80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'vlan0\x00'}]}]}], {0x14}}, 0xa4}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000001580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000015c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000001a80)={'vcan0\x00'}) socket$vsock_stream(0x28, 0x1, 0x0) r13 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r13, 0x0, &(0x7f00000000c0)=0x0) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r15) sendmsg$NFC_CMD_DEV_UP(r15, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r16, @ANYBLOB="010023010000050000000200000008000100", @ANYRES32=r14], 0x1c}}, 0x0) 610.130986ms ago: executing program 3 (id=3479): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b40)={0x34, r2, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004004}, 0x20000000) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1008738}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xc0, r2, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_NODE_NAME={0x80, 0xa8, @random="3f0a6f6914afb4371e65bfe589531df8d0867fc43002e57dcfd8f1ddd3878fa06207bd3f71534e643e614f3224c4646ca54494a1066240281326ba36515fa795f3736509960ea12bc296d5fa742b6f0349dbe48c728c7380f8947dad6d670f474fe61756143fa37abeb085b03e89474a653620198a55d5d671182336"}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4008090}, 0x24002000) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x17, &(0x7f0000000080)=0x1, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000b00), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_GET(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b40)={0x34, r2, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004004}, 0x20000000) (async) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1008738}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xc0, r2, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_NODE_NAME={0x80, 0xa8, @random="3f0a6f6914afb4371e65bfe589531df8d0867fc43002e57dcfd8f1ddd3878fa06207bd3f71534e643e614f3224c4646ca54494a1066240281326ba36515fa795f3736509960ea12bc296d5fa742b6f0349dbe48c728c7380f8947dad6d670f474fe61756143fa37abeb085b03e89474a653620198a55d5d671182336"}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4008090}, 0x24002000) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_int(r3, 0x107, 0x17, &(0x7f0000000080)=0x1, 0x4) (async) 518.949588ms ago: executing program 3 (id=3480): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) 422.616695ms ago: executing program 3 (id=3481): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x2046}, {{0x0, 0x0, 0x0}, 0x10001}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000800)=""/197, 0xc5}, {&(0x7f0000000900)=""/242, 0xf2}, {&(0x7f0000003e00)=""/4098, 0x1002}, {&(0x7f0000000440)=""/234, 0xea}, {&(0x7f0000000000)=""/26, 0x1a}], 0x5}, 0xfff}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001900)=""/229, 0xe5}, {&(0x7f0000002e00)=""/4094, 0xffe}, {&(0x7f0000006080)=""/4072, 0xfe8}, {&(0x7f00000003c0)=""/124, 0x7c}, {&(0x7f0000000340)=""/113, 0x71}], 0x5}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x40010020, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001940)=@newlink={0x50, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x28000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_IP_TARGET={0x8, 0x8, 0x0, 0x1, [@loopback]}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x24048800}, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f00000004c0)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000000c0)="33d702f6741d64298eab3dc282428f8a", 0x10}], 0x1, 0x0, 0x0, 0x18800}], 0x1, 0x20044000) (async) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000a00)={0x204, r7, 0x100, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_REF={0x8}]}, @TIPC_NLA_NODE={0x19c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x3b, 0x3, "dbf87edac494b90154f6786d2616d49da70b3861dc84f2d65df12e0af2075b08bc1575fef7f8051877e7c6707b421f31c5a47ceaf902c1"}, @TIPC_NLA_NODE_ID={0x101, 0x3, "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"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "92e67689fe0d194f81a40af4123c0d93c7c914f936b7a42eb16faaec5c0e"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x81}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xaee}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe589}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x4000040}, 0x8004) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x2, 0x3}, @TCA_FQ_QUANTUM={0x8}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40040d5}, 0x0) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r8) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@ipv4_delrule={0x30, 0x21, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'netdevsim0\x00'}]}, 0x30}}, 0x0) (async) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x4c, r9, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xffffffff}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}]}, 0x4c}}, 0x0) 270.293024ms ago: executing program 4 (id=3482): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, r2, 0x9fe4a776c35cd1bf, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x884}, 0x4048002) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) socket$netlink(0x10, 0x3, 0x15) (async) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) (async, rerun: 32) setsockopt$inet_tcp_int(r4, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) (async, rerun: 32) connect$inet(r4, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r4, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r4, 0x0, r3, 0x0, 0x9, 0x8) (async) mmap(&(0x7f0000616000/0x1000)=nil, 0x1000, 0x0, 0x4010, r4, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async, rerun: 64) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (rerun: 64) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r6, 0x1000) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xb, &(0x7f0000000240)=0x5da2333f, 0x4) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={r7, &(0x7f0000000240), 0x0}, 0x20) (async) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r5, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000002, 0x13, r8, 0x0) r9 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f000042a000/0x800000)=nil, 0x800000, 0x0, 0x11, r9, 0x0) (async) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r10, 0x84, 0x78, &(0x7f00000001c0), 0x4) (async, rerun: 64) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001"], 0x64}}, 0x0) (async, rerun: 64) getsockname$packet(r11, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) 266.533264ms ago: executing program 3 (id=3483): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x20, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000010000000000000000000000791209000000000095"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$F2FS_IOC_DEFRAGMENT(0xffffffffffffffff, 0xc010f508, &(0x7f0000000040)={0x7, 0x8000000000000001}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x13, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001c000100000000000300000007000000", @ANYRES32=r1, @ANYBLOB="f2aa1f0000060005000300"/24], 0x30}, 0x1, 0x0, 0x0, 0x4bd5c6fa5c6152b9}, 0x40800) 119.408533ms ago: executing program 3 (id=3484): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6c00000002060500000000000000000000000000120003006269746d61703a69702c6d616300000005000400000000000900020073797a310000000020000780050003001f0000000c0001800800014000000000080006000400000005000500020000000500010006"], 0x6c}}, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x80}}, 0x0) sendmmsg(r2, &(0x7f0000000180), 0x400008a, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000008c0)="b6b7", 0x2}], 0x1, 0x0, 0x0, 0x20000000}, 0x4005) recvmsg$unix(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0xe5}], 0x1}, 0x2) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44010}, 0x0) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f91624fc60100c214002000014050582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r8, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x84, r9, 0x400, 0x70bd28, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x2}, 0x40400) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r11 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r11, &(0x7f0000000000)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0102}}}, 0x14) setsockopt$bt_l2cap_L2CAP_LM(r10, 0x12, 0x3, 0x0, 0x0) sendto$unix(r6, &(0x7f00000001c0)="cf7cbcf08d933214cecd7febb7c81687710060b7bae8", 0x16, 0x20008005, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) 66.523198ms ago: executing program 0 (id=3485): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0x1}], 0x1}}], 0x1, 0x0) (fail_nth: 4) 0s ago: executing program 0 (id=3486): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000040), 0xc) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r3, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) read(r2, &(0x7f0000000100)=""/19, 0x13) syz_genetlink_get_family_id$batadv(&(0x7f0000003000), r1) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d000200080001400400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000400)=0x640a, 0x4) shutdown(r2, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f00000001c0)=0xc, 0x4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711011000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) connect$bt_rfcomm(r4, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) r9 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r11, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x634}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x84}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x44880) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000003140)={0x0, 0x39, &(0x7f0000003100)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES64=r7, @ANYBLOB="01002bbd7000fbaaaaaaaa44000008000300"/30, @ANYRES32=r8], 0x30}, 0x1, 0x0, 0x0, 0x4004040}, 0x20040084) socket$inet6_udplite(0xa, 0x2, 0x88) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000040)="a61d0615fa224b6bcf5f0721cec90ac63449d151019d038591f483d43305fe0922f1f3c4dc3ba279cab094cda9b75bfe2b2dd099564d230292b5cb4ba061047aa55249283eb2eeae7962b14202c45d0e8597a38dba3b64e4b64d7a706402faba33230c6bf8404fca97267457e4603193607d77cd393ea1c491bb83e53d8e581c6093bb11fbeb4edb40767aaac35d41c883af2093d8f3cb5481fc2ae725771adefeb499158d50ab87f9ad288d7e198e0814dbcaf64747465b7c962c5f0dce8f99021cc4556484e3c91748c76c9bed72b18e8ce1c26cd2f34bf5186cc8f7705e358b52712dee9024923576b97377", 0xed}, {&(0x7f0000000200)="4e550bfbe8c247b84b60be954a30b8423c76ccbf8da222c7a8b3b276876e256270ff88f4aad140437859fc25e220a476feafa3cc3b9168d06932f49e127d0bed45e453057aaf7efd99ea29f0a2ff7485acbeb0cee95f07f6086bf0c485fe30f8b29ca1e7ab923e219964c966d3e39e3afd3ad7b46fa25695b16b62c1df99423b1a0a68b76dd60951256b165049c06090ec0c86fd8843b056143dbe7f8a17109f37983feb4e6c", 0xa6}, {&(0x7f00000002c0)="7dbafd65a5b14bc8bb58366cb6c142b822940779e900ed1b382180e90a7e34a8d9ccaeb26ee4d970fc167bf897820b842deb13409a1cdddeab47d4f24e90893c91412d119c4cb9e4daffcc2969051e58105fd427de8d10dc181e3d1551605e40b5a67801d6244ca53b3049fe24dd133531c37d7cf3bd7461f3911dcf5598e57e44beb3f8115ba1dbb1f26b40dd587398228a777a97574fe6d7b06de826fca39a3ad23a8b9a20ab154245cdef8e4b77b5a43a465e5052fb3183ff21fd3e2bbef5eb20c3ff8eecd615b8b19b09f6fd0d80a086972fdea9d284ce8cd8527328e889344096c7dda3642d0dcf45f21050d401b938bf07a4be8b", 0xf7}], 0x3) kernel console output (not intermixed with test programs): 2.504421][T12186] bridge0: entered allmulticast mode [ 202.634810][T12196] veth0_macvtap: left promiscuous mode [ 202.662329][T12196] macvtap0: entered allmulticast mode [ 202.708380][T12196] macvtap0: refused to change device tx_queue_len [ 202.921596][T12207] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1903'. [ 203.107653][T12216] validate_nla: 62 callbacks suppressed [ 203.107670][T12216] netlink: 'syz.1.1905': attribute type 3 has an invalid length. [ 203.484104][T12248] syzkaller0: entered promiscuous mode [ 203.489820][T12248] syzkaller0: entered allmulticast mode [ 203.874463][T12213] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 204.117392][T12269] C: renamed from lo (while UP) [ 204.119617][T12271] netlink: 'syz.3.1918': attribute type 10 has an invalid length. [ 204.143099][T12269] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 204.159967][T12271] macvtap0: left allmulticast mode [ 204.247944][T12277] netlink: 'syz.0.1920': attribute type 3 has an invalid length. [ 204.350620][T12285] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1922'. [ 204.354513][T12287] netlink: 'syz.0.1923': attribute type 21 has an invalid length. [ 204.367924][T12287] IPv6: NLM_F_CREATE should be specified when creating new route [ 204.409720][T12292] skbuff: bad partial csum: csum=65506/2 headroom=178 headlen=65526 [ 205.049213][T12302] veth1_to_team: entered promiscuous mode [ 205.056653][T12302] veth1_to_team: entered allmulticast mode [ 205.057983][T12312] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1931'. [ 205.075352][T12312] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1931'. [ 205.435551][T12331] macsec0 speed is unknown, defaulting to 1000 [ 205.778036][T12342] smc: net device erspan0 applied user defined pnetid SYZ0 [ 206.046368][T12338] netlink: 'syz.3.1935': attribute type 6 has an invalid length. [ 206.283544][T12331] vxcan1 speed is unknown, defaulting to 1000 [ 206.552856][T12368] vcan0 (unregistering): left allmulticast mode [ 206.832317][T12384] __nla_validate_parse: 3 callbacks suppressed [ 206.832334][T12384] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1954'. [ 206.903915][T12384] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1954'. [ 207.214552][T12406] netlink: 'syz.1.1959': attribute type 1 has an invalid length. [ 207.254159][T12406] netlink: 'syz.1.1959': attribute type 1 has an invalid length. [ 207.279451][T12406] netlink: 216 bytes leftover after parsing attributes in process `syz.1.1959'. [ 207.345739][T12406] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1959'. [ 207.355898][T12411] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1960'. [ 207.367939][T12412] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1961'. [ 207.388040][T12411] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 207.451049][T12412] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 207.594230][T12421] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1962'. [ 207.649800][T12424] netlink: 'syz.4.1964': attribute type 21 has an invalid length. [ 207.658334][T12424] IPv6: NLM_F_CREATE should be specified when creating new route [ 207.699557][T12424] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 207.706833][T12424] IPv6: NLM_F_CREATE should be set when creating new route [ 207.714255][T12424] IPv6: NLM_F_CREATE should be set when creating new route [ 207.721532][T12424] IPv6: NLM_F_CREATE should be set when creating new route [ 207.945921][T12435] bond_slave_0: entered allmulticast mode [ 208.196731][T12443] veth0_virt_wifi: renamed from veth0_vlan [ 208.227877][T12453] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 208.262251][T12453] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 208.272936][T12460] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1976'. [ 208.307303][T12453] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1973'. [ 208.346644][T12463] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1977'. [ 208.609083][T12479] netlink: 'syz.0.1982': attribute type 3 has an invalid length. [ 208.996236][T12506] raw_sendmsg: syz.2.1987 forgot to set AF_INET. Fix it! [ 209.400312][T12525] netlink: 'syz.4.1995': attribute type 3 has an invalid length. [ 209.620992][T12541] netlink: 'syz.0.2001': attribute type 4 has an invalid length. [ 209.653309][T12541] netlink: 'syz.0.2001': attribute type 4 has an invalid length. [ 209.798417][T12545] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 209.809240][T12545] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 209.819153][T12545] bond0 (unregistering): Released all slaves [ 209.844501][T12555] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 210.255974][T12583] macsec0 speed is unknown, defaulting to 1000 [ 210.405621][T12597] veth0: entered promiscuous mode [ 210.472767][T12597] veth0: left promiscuous mode [ 210.750949][T12605] block nbd3: server does not support multiple connections per device. [ 210.803335][T12605] block nbd3: shutting down sockets [ 210.820979][T12583] vxcan1 speed is unknown, defaulting to 1000 [ 210.919181][T12617] netlink: 'syz.2.2023': attribute type 1 has an invalid length. [ 211.049521][T12616] Can't find ip_set type hash:net,port,Íôt [ 211.793333][T12649] netlink: 'syz.2.2033': attribute type 6 has an invalid length. [ 211.981669][T12658] __nla_validate_parse: 16 callbacks suppressed [ 211.981690][T12658] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2033'. [ 212.042976][T12658] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2033'. [ 212.482505][T12674] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2037'. [ 212.815186][T12695] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2045'. [ 212.851971][T12697] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2046'. [ 212.887846][T12697] netlink: 'syz.2.2046': attribute type 6 has an invalid length. [ 213.058849][T12710] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2046'. [ 213.076423][T12710] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2046'. [ 213.108320][T12715] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2049'. [ 213.112413][T12709] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 213.172150][T12709] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.206284][T12709] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 213.339180][T12709] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 213.383729][T12709] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.407907][T12709] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 213.522152][T12737] netlink: 348 bytes leftover after parsing attributes in process `syz.4.2060'. [ 213.561217][T12709] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 213.575742][T12709] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.586728][T12744] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2060'. [ 213.598376][T12709] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 213.755434][T12709] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 213.793719][T12709] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.809088][T12709] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 213.878611][T12753] netlink: 'syz.1.2065': attribute type 6 has an invalid length. [ 214.130933][ T13] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.164305][ T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20002 - 0 [ 214.196916][ T13] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 214.264167][T10547] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.276313][T10547] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20002 - 0 [ 214.288318][T10547] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 214.506491][ T13] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.517655][ T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20002 - 0 [ 214.546625][ T13] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 214.584882][T12817] IPVS: set_ctl: invalid protocol: 50 172.20.20.41:20001 [ 214.637189][ T6122] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 214.656717][ T6122] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20002 - 0 [ 214.666419][ T6122] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 214.814077][T12823] netlink: 'syz.1.2080': attribute type 11 has an invalid length. [ 214.986220][T12844] sit3: entered allmulticast mode [ 215.142262][T12859] team0: Device ip6gre3 is of different type [ 215.254947][T12866] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 215.426406][T12879] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 217.398253][T12980] netlink: 'syz.2.2131': attribute type 1 has an invalid length. [ 217.520439][T12980] 8021q: adding VLAN 0 to HW filter on device bond5 [ 217.528642][T12991] __nla_validate_parse: 11 callbacks suppressed [ 217.528659][T12991] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2130'. [ 217.835756][T13017] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2141'. [ 218.275304][T13055] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2154'. [ 218.294231][T13056] netlink: 'syz.0.2152': attribute type 21 has an invalid length. [ 218.331026][T13056] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2152'. [ 218.376388][T13059] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2155'. [ 218.378803][T13061] netlink: 'syz.3.2156': attribute type 83 has an invalid length. [ 218.404008][T13061] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2156'. [ 218.416091][T13061] netlink: 'syz.3.2156': attribute type 7 has an invalid length. [ 218.425436][T13061] netlink: 'syz.3.2156': attribute type 8 has an invalid length. [ 218.435794][T13061] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2156'. [ 218.705869][T13051] netlink: 124 bytes leftover after parsing attributes in process `syz.2.2153'. [ 218.718193][T13051] netlink: 2948 bytes leftover after parsing attributes in process `syz.2.2153'. [ 218.810057][T13063] netlink: 'syz.2.2157': attribute type 27 has an invalid length. [ 218.902194][T13072] netlink: 'syz.0.2159': attribute type 16 has an invalid length. [ 218.912822][T13072] netlink: 'syz.0.2159': attribute type 17 has an invalid length. [ 218.921530][T13070] netlink: 'syz.1.2158': attribute type 4 has an invalid length. [ 218.943843][T13070] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2158'. [ 218.996415][T13063] sit0: left promiscuous mode [ 219.392179][T13063] macvtap0: left allmulticast mode [ 219.412299][T13063] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 219.488161][T13063] vlan2: left allmulticast mode [ 219.493202][T13063] veth1: left allmulticast mode [ 219.766696][T10543] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 219.802193][T10543] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.822169][T10543] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 219.846175][T10543] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.882975][T10543] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 219.912313][T10543] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.942624][T10543] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 219.962775][T13117] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 219.969972][T10543] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.115529][T13106] macsec0 speed is unknown, defaulting to 1000 [ 220.133358][T13127] netlink: 'syz.3.2172': attribute type 24 has an invalid length. [ 220.157514][T13120] netlink: 'syz.1.2168': attribute type 6 has an invalid length. [ 220.185339][T13130] netlink: 'syz.3.2172': attribute type 24 has an invalid length. [ 220.300007][T13135] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 220.307300][T13135] IPv6: NLM_F_CREATE should be set when creating new route [ 220.418302][T13135] (unnamed net_device) (uninitialized): down delay (4) is not a multiple of miimon (100), value rounded to 0 ms [ 220.485702][T13135] (unnamed net_device) (uninitialized): peer notification delay (32769) is not a multiple of miimon (100), value rounded to 32700 ms [ 220.523017][T13135] (unnamed net_device) (uninitialized): option use_carrier: invalid value (16) [ 220.826285][T13106] vxcan1 speed is unknown, defaulting to 1000 [ 220.826322][T13136] macsec0 speed is unknown, defaulting to 1000 [ 221.376389][T13191] netlink: 'syz.3.2191': attribute type 10 has an invalid length. [ 221.380329][T13136] vxcan1 speed is unknown, defaulting to 1000 [ 221.408964][T13193] netlink: 'syz.4.2192': attribute type 12 has an invalid length. [ 221.418624][T13193] netlink: 'syz.4.2192': attribute type 29 has an invalid length. [ 221.428352][T13193] netlink: 'syz.4.2192': attribute type 2 has an invalid length. [ 221.438198][T13191] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 221.453041][T13191] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 221.524730][T13193] bond3: entered promiscuous mode [ 221.537036][T13193] bond3: entered allmulticast mode [ 221.551513][T13193] 8021q: adding VLAN 0 to HW filter on device bond3 [ 222.229702][T13223] openvswitch: netlink: IP tunnel TTL not specified. [ 222.547597][T13236] can: request_module (can-proto-0) failed. [ 222.565725][T13242] can: request_module (can-proto-0) failed. [ 222.984780][T13261] __nla_validate_parse: 40 callbacks suppressed [ 222.984795][T13261] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2212'. [ 223.138227][T13273] tipc: Enabled bearer , priority 0 [ 223.169111][T13274] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2215'. [ 223.208494][T13273] tipc: Resetting bearer [ 223.238054][T13274] team0: Port device geneve0 added [ 223.271656][T13269] tipc: Disabling bearer [ 223.377524][T13289] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2219'. [ 223.428001][T13289] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2219'. [ 223.458739][T13289] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 223.494451][T13289] 0ªî{X¹¦: entered allmulticast mode [ 223.517613][T13289] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 223.608672][T13295] openvswitch: netlink: Missing key (keys=40, expected=80) [ 225.066345][T13314] macsec0 speed is unknown, defaulting to 1000 [ 225.186163][T13323] gtp0: entered promiscuous mode [ 225.192336][T13327] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 225.200975][T13323] gtp0: entered allmulticast mode [ 225.544419][T13314] vxcan1 speed is unknown, defaulting to 1000 [ 225.792072][T13357] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2240'. [ 225.856907][T13359] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 225.897625][T13361] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2242'. [ 225.933039][T13361] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 225.957798][T13361] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 225.967079][T13361] gretap2: entered promiscuous mode [ 225.976381][T13361] gretap2: entered allmulticast mode [ 226.093761][T13372] validate_nla: 5 callbacks suppressed [ 226.093777][T13372] netlink: 'syz.3.2246': attribute type 4 has an invalid length. [ 226.155422][T13378] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2244'. [ 226.233332][T13381] FAULT_INJECTION: forcing a failure. [ 226.233332][T13381] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 226.254429][T13381] CPU: 0 UID: 0 PID: 13381 Comm: syz.3.2248 Not tainted 6.16.0-syzkaller-06588-g759dfc7d04ba #0 PREEMPT(full) [ 226.254458][T13381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 226.254469][T13381] Call Trace: [ 226.254475][T13381] [ 226.254482][T13381] dump_stack_lvl+0x189/0x250 [ 226.254506][T13381] ? __pfx____ratelimit+0x10/0x10 [ 226.254529][T13381] ? __pfx_dump_stack_lvl+0x10/0x10 [ 226.254546][T13381] ? __pfx__printk+0x10/0x10 [ 226.254578][T13381] should_fail_ex+0x414/0x560 [ 226.254608][T13381] strncpy_from_user+0x36/0x290 [ 226.254635][T13381] getname_flags+0xf3/0x540 [ 226.254657][T13381] do_sys_openat2+0xbc/0x1c0 [ 226.254680][T13381] ? __pfx_do_sys_openat2+0x10/0x10 [ 226.254699][T13381] ? ksys_write+0x22a/0x250 [ 226.254723][T13381] ? __pfx_ksys_write+0x10/0x10 [ 226.254742][T13381] ? rcu_is_watching+0x15/0xb0 [ 226.254770][T13381] __x64_sys_openat+0x138/0x170 [ 226.254795][T13381] do_syscall_64+0xfa/0x3b0 [ 226.254816][T13381] ? lockdep_hardirqs_on+0x9c/0x150 [ 226.254837][T13381] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.254853][T13381] ? clear_bhb_loop+0x60/0xb0 [ 226.254873][T13381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.254886][T13381] RIP: 0033:0x7f7c1738eb69 [ 226.254910][T13381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.254923][T13381] RSP: 002b:00007f7c181cb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 226.254942][T13381] RAX: ffffffffffffffda RBX: 00007f7c175b5fa0 RCX: 00007f7c1738eb69 [ 226.254955][T13381] RDX: 000000000000275a RSI: 0000200000000040 RDI: ffffffffffffff9c [ 226.254967][T13381] RBP: 00007f7c181cb090 R08: 0000000000000000 R09: 0000000000000000 [ 226.254978][T13381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.254988][T13381] R13: 0000000000000000 R14: 00007f7c175b5fa0 R15: 00007ffca09b2f38 [ 226.255010][T13381] [ 227.226704][T13423] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2260'. [ 249.053305][T13429] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 249.086836][T13429] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2263'. [ 249.232959][T13444] netlink: 'syz.2.2268': attribute type 11 has an invalid length. [ 249.241641][T13444] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2268'. [ 249.263697][T13444] openvswitch: netlink: Tunnel attr 1 has unexpected len 16 expected 4 [ 249.371003][T13456] tipc: Enabling of bearer rejected, failed to enable media [ 249.475586][T13460] macsec0 speed is unknown, defaulting to 1000 [ 249.702409][T13476] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2280'. [ 249.843415][T13482] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2282'. [ 249.910180][T13485] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2281'. [ 250.002880][T13460] vxcan1 speed is unknown, defaulting to 1000 [ 250.056954][T13497] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2285'. [ 250.263695][T13509] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2288'. [ 250.273082][T13509] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2288'. [ 250.699014][T13522] ip_vti0: entered allmulticast mode [ 251.056114][T13539] tipc: Enabled bearer , priority 0 [ 251.123660][T13547] syzkaller0: entered promiscuous mode [ 251.138088][T13547] syzkaller0: entered allmulticast mode [ 251.175206][T13551] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2302'. [ 251.237653][T13552] tipc: Resetting bearer [ 251.265580][T13536] tipc: Resetting bearer [ 251.361631][T13560] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2305'. [ 251.379624][T13536] tipc: Disabling bearer [ 251.457320][T13564] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 251.754617][T13580] netlink: 'syz.3.2312': attribute type 1 has an invalid length. [ 251.819652][T13580] netlink: 'syz.3.2312': attribute type 2 has an invalid length. [ 251.954777][T13582] macsec0 speed is unknown, defaulting to 1000 [ 252.418875][T13607] netlink: 'syz.3.2323': attribute type 11 has an invalid length. [ 252.524515][T13611] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 252.534416][T13582] vxcan1 speed is unknown, defaulting to 1000 [ 252.795292][T13632] netlink: 'syz.1.2331': attribute type 1 has an invalid length. [ 252.807055][T13634] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 252.816031][T13632] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 253.103739][T13650] netlink: 'syz.4.2338': attribute type 10 has an invalid length. [ 253.551457][T13683] netlink: 'syz.1.2346': attribute type 5 has an invalid length. [ 253.698506][T13689] netlink: 'syz.0.2349': attribute type 1 has an invalid length. [ 253.986031][T13703] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 254.099629][T13707] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 254.200909][T13710] __nla_validate_parse: 19 callbacks suppressed [ 254.200928][T13710] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2356'. [ 254.279496][T13716] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2358'. [ 254.322782][T13716] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2358'. [ 254.334574][T13710] v: left allmulticast mode [ 254.339358][T13710] bridge0: port 3(v) entered disabled state [ 254.349139][T13710] bridge_slave_1: left allmulticast mode [ 254.356227][T13710] bridge_slave_1: left promiscuous mode [ 254.379724][T13710] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.421753][T13710] bridge_slave_0: left allmulticast mode [ 254.427444][T13710] bridge_slave_0: left promiscuous mode [ 254.449560][T13710] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.497187][T13726] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2361'. [ 254.565362][T13710] vlan2 (unregistering): left promiscuous mode [ 254.574285][T13710] bridge1: port 1(vlan2) entered disabled state [ 254.645474][T13735] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2364'. [ 254.796215][T13740] netlink: 'syz.1.2366': attribute type 64 has an invalid length. [ 254.803119][T13742] netlink: 'syz.3.2367': attribute type 1 has an invalid length. [ 254.862513][T13742] 8021q: adding VLAN 0 to HW filter on device bond7 [ 254.872395][T13745] netlink: 87 bytes leftover after parsing attributes in process `syz.2.2369'. [ 254.879413][T13740] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2366'. [ 254.883818][T13745] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2369'. [ 254.924350][T13745] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2369'. [ 254.942129][T13742] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2367'. [ 254.986558][T13747] macvlan0: entered promiscuous mode [ 254.992691][T13747] macvlan0: entered allmulticast mode [ 255.002376][T13747] bond7: entered promiscuous mode [ 255.009548][T13747] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 255.018352][T13747] bond7: left promiscuous mode [ 255.041834][T13750] macvlan0: entered promiscuous mode [ 255.047268][T13750] macvlan0: entered allmulticast mode [ 255.053915][T13750] bond7: entered promiscuous mode [ 255.060675][T13750] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 255.069732][T13750] bond7: left promiscuous mode [ 255.365822][T13772] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 255.457450][T13782] macsec0 speed is unknown, defaulting to 1000 [ 255.744589][ T1302] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 255.757141][T13782] vxcan1 speed is unknown, defaulting to 1000 [ 255.819611][ T5840] Bluetooth: hci4: command 0x0405 tx timeout [ 256.058521][T13807] syzkaller0: entered promiscuous mode [ 256.070486][T13807] syzkaller0: entered allmulticast mode [ 256.320878][ T7396] hid-generic 0005:046D:FFF9.0002: item fetching failed at offset 0/1 [ 256.330605][ T7396] hid-generic 0005:046D:FFF9.0002: probe with driver hid-generic failed with error -22 [ 257.777611][T13840] tipc: Enabling of bearer rejected, media not registered [ 257.795078][T13853] lo: entered allmulticast mode [ 257.855846][T13850] lo: left allmulticast mode [ 258.281818][T13874] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 258.443983][T13885] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ûÌÌULÙvy¸ÚØ¢…D£øUDŒžóúz [ 260.208855][T13975] netlink: 'syz.3.2433': attribute type 23 has an invalid length. [ 260.221985][T13976] __nla_validate_parse: 16 callbacks suppressed [ 260.222004][T13976] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2433'. [ 260.247544][T13977] macsec0 speed is unknown, defaulting to 1000 [ 260.275255][T13980] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2434'. [ 260.286136][T13975] netlink: 'syz.3.2433': attribute type 23 has an invalid length. [ 260.288993][T13976] netlink: 'syz.3.2433': attribute type 9 has an invalid length. [ 260.327641][T13975] netlink: 'syz.3.2433': attribute type 23 has an invalid length. [ 260.337977][T13976] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2433'. [ 260.373203][T13976] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2433'. [ 260.376450][T13975] netlink: 'syz.3.2433': attribute type 23 has an invalid length. [ 260.397280][T13976] netlink: 'syz.3.2433': attribute type 9 has an invalid length. [ 260.413829][T13976] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2433'. [ 260.424921][T13975] netlink: 'syz.3.2433': attribute type 23 has an invalid length. [ 260.451557][T13975] netlink: 'syz.3.2433': attribute type 23 has an invalid length. [ 260.486002][T13975] netlink: 'syz.3.2433': attribute type 23 has an invalid length. [ 260.529120][T13975] netlink: 'syz.3.2433': attribute type 23 has an invalid length. [ 260.547206][T13991] veth0_vlan: left promiscuous mode [ 260.563171][T13988] netlink: 19 bytes leftover after parsing attributes in process `syz.2.2438'. [ 260.574429][T13991] veth0_vlan: entered promiscuous mode [ 260.580283][T13988] netlink: 19 bytes leftover after parsing attributes in process `syz.2.2438'. [ 260.595509][T13991] team0: Device veth0_vlan failed to register rx_handler [ 260.619658][T13993] veth0_vlan: left promiscuous mode [ 260.631882][T13993] veth0_vlan: entered promiscuous mode [ 260.656699][T13993] team0: Device veth0_vlan failed to register rx_handler [ 260.779231][T13977] vxcan1 speed is unknown, defaulting to 1000 [ 260.824888][T14002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2442'. [ 260.861154][T14005] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2444'. [ 261.023318][T14013] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.040481][T14013] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.127480][T14021] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2445'. [ 261.201786][T14013] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.214305][T14013] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.315980][T14013] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.350032][T14013] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.438581][T14013] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.452581][T14013] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.728426][T10547] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.759431][T10547] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.806960][T10547] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.829128][T10547] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.887363][T10547] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.927787][T10547] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.987090][T10547] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.996631][T10547] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.331045][T14072] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 262.639027][T14089] macvlan0: entered promiscuous mode [ 262.683305][T14089] macvlan0: entered allmulticast mode [ 263.650213][T14137] macsec0 speed is unknown, defaulting to 1000 [ 263.896030][T14168] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 264.122037][T14137] vxcan1 speed is unknown, defaulting to 1000 [ 264.984613][T14222] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 265.167634][T14235] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 265.189577][T14235] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 265.201915][T14236] sit0: entered promiscuous mode [ 265.363627][T14242] __nla_validate_parse: 12 callbacks suppressed [ 265.363645][T14242] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2518'. [ 265.384234][T14242] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2518'. [ 265.467352][T14246] macsec0 speed is unknown, defaulting to 1000 [ 265.606847][T14253] can: request_module (can-proto-3) failed. [ 265.691608][T14257] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2522'. [ 265.710188][T14246] vxcan1 speed is unknown, defaulting to 1000 [ 265.715906][T14257] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 265.735684][T14257] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 266.182084][T14277] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2527'. [ 266.218296][T14277] validate_nla: 30 callbacks suppressed [ 266.218316][T14277] netlink: 'syz.2.2527': attribute type 6 has an invalid length. [ 266.296517][T14284] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2527'. [ 266.465716][T14290] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2529'. [ 266.771049][T14297] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2530'. [ 266.789163][T14295] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2532'. [ 266.820310][T14297] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2530'. [ 266.861624][T14297] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2530'. [ 266.908198][T14311] netlink: 'syz.4.2530': attribute type 83 has an invalid length. [ 267.147899][T14320] macsec0 speed is unknown, defaulting to 1000 [ 267.464499][T14337] netlink: 'syz.3.2541': attribute type 6 has an invalid length. [ 267.531414][T14320] vxcan1 speed is unknown, defaulting to 1000 [ 268.034457][T14359] netlink: 'syz.0.2550': attribute type 29 has an invalid length. [ 268.070419][T14369] netlink: 'syz.0.2550': attribute type 29 has an invalid length. [ 268.260321][T14379] netlink: 'syz.4.2554': attribute type 6 has an invalid length. [ 268.565588][T14392] macsec0 speed is unknown, defaulting to 1000 [ 268.942591][T14413] team_slave_0: mtu greater than device maximum [ 268.993595][T14415] netlink: 'syz.3.2566': attribute type 1 has an invalid length. [ 269.191632][T14392] vxcan1 speed is unknown, defaulting to 1000 [ 269.317206][T14437] netlink: 'syz.3.2573': attribute type 5 has an invalid length. [ 269.996251][T14475] nbd: couldn't find a device at index 59842 [ 270.375258][T14483] __nla_validate_parse: 16 callbacks suppressed [ 270.375276][T14483] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2585'. [ 271.018163][T14494] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2590'. [ 271.078391][T14497] netlink: 'syz.4.2591': attribute type 1 has an invalid length. [ 271.347169][T14505] macsec0 speed is unknown, defaulting to 1000 [ 271.403315][T14515] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2597'. [ 271.538761][T14521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2598'. [ 271.580526][T14521] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2598'. [ 271.603476][T14521] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2598'. [ 271.850582][T14535] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 271.956407][T14545] netlink: 'syz.3.2606': attribute type 1 has an invalid length. [ 271.974149][T14505] vxcan1 speed is unknown, defaulting to 1000 [ 271.984082][T14536] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 272.180064][T14557] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2608'. [ 272.202989][T14560] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2609'. [ 272.287532][T14563] netlink: 'syz.0.2610': attribute type 11 has an invalid length. [ 272.302964][T14563] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2610'. [ 272.340323][T14566] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2611'. [ 272.363769][T14566] netlink: 'syz.3.2611': attribute type 6 has an invalid length. [ 272.632627][T14584] nbd: must specify a size in bytes for the device [ 293.834048][T14600] openvswitch: netlink: Duplicate or invalid key (type 0). [ 293.841933][T14600] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 293.855257][T14601] __nla_validate_parse: 3 callbacks suppressed [ 293.855273][T14601] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2619'. [ 293.945294][T14604] C: entered allmulticast mode [ 293.969683][T14604] tunl0: entered allmulticast mode [ 293.992296][T14610] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2621'. [ 293.997417][T14604] gre0: entered allmulticast mode [ 294.100676][T14604] erspan0: left promiscuous mode [ 294.106789][T14604] ip_vti0: entered allmulticast mode [ 294.120100][T14621] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2624'. [ 294.175379][T14624] netlink: 'syz.0.2624': attribute type 6 has an invalid length. [ 294.193998][T14604] ip6_vti0: entered allmulticast mode [ 294.213866][T14604] sit0: entered allmulticast mode [ 294.257441][T14604] ip6tnl0: entered allmulticast mode [ 294.294494][T14631] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2624'. [ 294.302827][T14604] ip6gre0: entered allmulticast mode [ 294.322411][T14604] syz_tun: entered allmulticast mode [ 294.341591][T14604] ip6gretap0: entered allmulticast mode [ 294.363271][T14604] vcan0: entered allmulticast mode [ 294.374396][T14604] team0: entered allmulticast mode [ 294.380781][T14604] team_slave_0: entered allmulticast mode [ 294.386628][T14604] team_slave_1: entered allmulticast mode [ 294.394898][T14604] v: left promiscuous mode [ 294.402425][T14604] v: entered allmulticast mode [ 294.407893][T14604] nlmon0: entered allmulticast mode [ 294.415686][T14604] caif0: entered allmulticast mode [ 294.421539][T14604] veth0: entered allmulticast mode [ 294.433077][T14604] veth1: entered allmulticast mode [ 294.446026][T14604] wg0: entered allmulticast mode [ 294.461276][T14604] wg1: entered allmulticast mode [ 294.470766][T14604] wg2: entered allmulticast mode [ 294.482239][T14604] veth0_to_bridge: entered allmulticast mode [ 294.493771][T14604] bridge_slave_0: entered allmulticast mode [ 294.504087][T14604] veth0_to_bond: entered allmulticast mode [ 294.519040][T14604] bond_slave_0: entered allmulticast mode [ 294.528639][T14604] veth1_to_bond: entered allmulticast mode [ 294.539122][T14604] bond_slave_1: entered allmulticast mode [ 294.545698][T14604] veth0_to_team: entered allmulticast mode [ 294.564101][T14604] veth1_to_team: left promiscuous mode [ 294.577542][T14604] veth0_to_batadv: entered allmulticast mode [ 294.587989][T14604] batadv_slave_0: entered allmulticast mode [ 294.603369][T14604] veth1_to_batadv: entered allmulticast mode [ 294.616737][T14604] batadv_slave_1: entered allmulticast mode [ 294.628823][T14604] xfrm0: entered allmulticast mode [ 294.642529][T14604] veth0_to_hsr: entered allmulticast mode [ 294.656580][T14604] hsr_slave_0: entered allmulticast mode [ 294.672295][T14604] veth1_to_hsr: entered allmulticast mode [ 294.681441][T14604] hsr_slave_1: entered allmulticast mode [ 294.690807][T14604] hsr0: entered allmulticast mode [ 294.704615][T14604] veth1_virt_wifi: entered allmulticast mode [ 294.725232][T14604] veth0_virt_wifi: entered allmulticast mode [ 294.748043][T14604] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 294.775688][T14604] veth1_vlan: entered allmulticast mode [ 294.794730][T14604] vlan0: entered allmulticast mode [ 294.824487][T14604] veth0_virt_wifi: entered allmulticast mode [ 294.835772][T14604] vlan1: entered allmulticast mode [ 294.843361][T14604] macvlan0: left promiscuous mode [ 294.855848][T14604] macvlan1: entered allmulticast mode [ 294.874255][T14604] ipvlan0: entered allmulticast mode [ 294.901314][T14604] ipvlan1: entered allmulticast mode [ 294.910992][T14604] veth1_macvtap: entered allmulticast mode [ 294.938851][T14604] veth0_macvtap: entered allmulticast mode [ 294.978437][T14604] macsec0: entered allmulticast mode [ 295.000866][T14604] geneve0: entered allmulticast mode [ 295.021698][T14604] geneve1: entered allmulticast mode [ 295.032006][T14604] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 295.039259][T14604] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 295.048206][T14604] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 295.064275][T14604] netdevsim netdevsim4 netdevsim2: entered allmulticast mode [ 295.079631][T14604] netdevsim netdevsim4 netdevsim3: entered allmulticast mode [ 295.102875][T14604] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 295.112791][T14604] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 295.121425][T14604] geneve2: entered allmulticast mode [ 295.127115][T14604] : entered allmulticast mode [ 295.132934][T14604] nicvf0: entered allmulticast mode [ 295.138850][T14604] bridge1: entered allmulticast mode [ 295.148659][T14604] gretap1: left promiscuous mode [ 295.160483][T14604] ip6erspan0: entered allmulticast mode [ 295.166318][T14604] bridge2: entered allmulticast mode [ 295.171979][T14604] erspan1: entered allmulticast mode [ 295.177514][T14604] macvlan2: entered allmulticast mode [ 295.184161][T14604] @: entered allmulticast mode [ 295.193609][T14604] bond0: entered allmulticast mode [ 295.198983][T14604] gretap2: entered allmulticast mode [ 295.211520][T14604] macvlan3: entered allmulticast mode [ 295.217504][T14604] bond1: entered allmulticast mode [ 295.225154][T14604] batadv0: entered allmulticast mode [ 295.232301][T14604] gre1: entered allmulticast mode [ 295.247366][T14604] vlan3: left promiscuous mode [ 295.252834][T14604] bond2: left promiscuous mode [ 295.257954][T14604] ip6tnl1: entered allmulticast mode [ 295.268846][T14604] ip6erspan1: left promiscuous mode [ 295.274363][T14604] ip6erspan1: entered allmulticast mode [ 295.281665][T14604] bridge4: entered allmulticast mode [ 295.287084][T14604] vlan4: entered allmulticast mode [ 295.292827][T14604] syztnl1: entered allmulticast mode [ 295.298515][T14604] vlan0002: entered allmulticast mode [ 295.304248][T14604] veth2: entered allmulticast mode [ 295.310208][T14604] veth3: entered allmulticast mode [ 295.315907][T14604] bond3: left promiscuous mode [ 295.323060][T14604] wireguard0: entered allmulticast mode [ 295.331841][T14604] gtp0: left promiscuous mode [ 295.338691][T14604] vlan0001: entered allmulticast mode [ 295.345273][T14604] macvtap0.4094: entered allmulticast mode [ 295.351501][T14604] veth4: entered allmulticast mode [ 295.356937][T14604] veth5: entered allmulticast mode [ 295.362609][T14604] mac80211_hwsim hwsim7 pim6reg0: entered allmulticast mode [ 295.370413][T14604] sit1: entered allmulticast mode [ 295.394370][T14604] bridge0: entered allmulticast mode [ 295.407282][T14604] veth0.2: entered allmulticast mode [ 295.510901][T10543] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 295.510908][ T7382] macsec0 speed is unknown, defaulting to 1000 [ 295.510932][T10543] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.537378][ T7382] syz0: Port: 1 Link DOWN [ 295.581480][T10543] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 295.603067][T10543] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.649180][ T5928] macsec0 speed is unknown, defaulting to 1000 [ 295.656193][T14652] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2630'. [ 295.658672][T10543] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 295.685338][T10543] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.697443][T10543] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 295.707936][T10543] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.722562][T14642] macsec0 speed is unknown, defaulting to 1000 [ 295.851853][T14661] netlink: 'syz.4.2632': attribute type 1 has an invalid length. [ 295.861501][T14661] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2632'. [ 296.093267][T14642] vxcan1 speed is unknown, defaulting to 1000 [ 296.315868][T14696] tipc: Can't bind to reserved service type 3 [ 296.470171][T14702] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2642'. [ 296.491030][T14702] netlink: 'syz.2.2642': attribute type 6 has an invalid length. [ 296.514921][T14704] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2641'. [ 296.661450][T14706] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2642'. [ 297.510131][ T5928] hid-generic 0005:16C0:5507.0003: hidraw0: BLUETOOTH HID v0.8d Device [syz0] on aa:aa:aa:aa:aa:aa [ 297.659849][T14756] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2655'. [ 297.689474][T14758] gretap0: left allmulticast mode [ 297.708322][T14756] netlink: 'syz.2.2655': attribute type 6 has an invalid length. [ 298.313081][T14813] macsec0 speed is unknown, defaulting to 1000 [ 298.528483][T14813] vxcan1 speed is unknown, defaulting to 1000 [ 298.646062][T14832] netlink: 'syz.2.2674': attribute type 6 has an invalid length. [ 299.086477][T14852] IPVS: persistence engine module ip_vs_pe_À not found [ 299.242636][T14867] __nla_validate_parse: 7 callbacks suppressed [ 299.242653][T14867] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2683'. [ 299.263815][ T5928] IPVS: starting estimator thread 0... [ 299.272801][T14869] tipc: Enabling of bearer rejected, media not registered [ 299.372661][T14870] IPVS: using max 26 ests per chain, 62400 per kthread [ 299.407654][T14882] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2688'. [ 299.445503][T14880] netlink: 'syz.3.2687': attribute type 33 has an invalid length. [ 299.537756][T14885] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2689'. [ 299.567988][T14885] netlink: 'syz.0.2689': attribute type 6 has an invalid length. [ 299.651109][T14887] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2690'. [ 299.661007][T14887] netlink: 'syz.4.2690': attribute type 26 has an invalid length. [ 299.668844][T14887] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2690'. [ 299.710178][T14898] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2689'. [ 299.757315][T14887] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2690'. [ 299.805974][T14887] netlink: 'syz.4.2690': attribute type 26 has an invalid length. [ 299.817778][T14887] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2690'. [ 299.846611][T14901] netlink: 'syz.4.2690': attribute type 83 has an invalid length. [ 299.937002][T14899] 8021q: adding VLAN 0 to HW filter on device bond8 [ 299.957450][T14901] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2690'. [ 300.004604][T14901] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2690'. [ 300.143634][T14917] netlink: 'syz.3.2695': attribute type 11 has an invalid length. [ 300.496488][T14941] netlink: 'syz.3.2704': attribute type 6 has an invalid length. [ 300.568131][T14943] syzkaller0: entered promiscuous mode [ 300.583676][T14943] syzkaller0: entered allmulticast mode [ 300.671678][T14951] Bluetooth: MGMT ver 1.23 [ 300.791612][T14964] netlink: 'syz.2.2710': attribute type 11 has an invalid length. [ 300.848784][T14972] sock: sock_timestamping_bind_phc: sock not bind to device [ 300.858336][T14973] tipc: Enabled bearer , priority 0 [ 300.868736][T14973] syzkaller0: entered promiscuous mode [ 300.875738][T14973] syzkaller0: entered allmulticast mode [ 301.115107][T14970] tipc: Resetting bearer [ 301.186029][T14970] tipc: Disabling bearer [ 301.346501][T14999] syzkaller1: entered promiscuous mode [ 301.352572][T14999] syzkaller1: entered allmulticast mode [ 301.525044][T15015] syzkaller0: entered promiscuous mode [ 301.531720][T15015] syzkaller0: entered allmulticast mode [ 301.539023][T15014] tipc: Enabled bearer , priority 0 [ 301.570398][T15015] tipc: Resetting bearer [ 301.588537][T15013] tipc: Resetting bearer [ 301.614354][T15013] tipc: Disabling bearer [ 301.635887][T15022] vlan2: entered promiscuous mode [ 301.642976][T15022] bridge0: entered promiscuous mode [ 301.648457][T15022] vlan2: entered allmulticast mode [ 301.967717][T15056] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 302.043066][T15064] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 302.107126][T15056] netlink: 'syz.3.2735': attribute type 32 has an invalid length. [ 302.486918][T15085] macsec0 speed is unknown, defaulting to 1000 [ 302.545535][T15091] netlink: 'syz.1.2742': attribute type 21 has an invalid length. [ 302.574377][T15091] netlink: 'syz.1.2742': attribute type 1 has an invalid length. [ 302.612986][T15100] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 302.896264][T15111] netlink: 'syz.2.2745': attribute type 6 has an invalid length. [ 303.223150][T15085] vxcan1 speed is unknown, defaulting to 1000 [ 303.555338][T15141] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 303.585023][T15140] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 303.632085][T15149] Bluetooth: MGMT ver 1.23 [ 304.289191][T15176] 8021q: adding VLAN 0 to HW filter on device bond4 [ 305.248036][T15230] macsec0 speed is unknown, defaulting to 1000 [ 305.520784][ T5157] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 305.543877][ T5157] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 305.553958][ T5157] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 305.565299][ T5157] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 305.574368][ T5157] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 305.757173][T15239] tunl0: left allmulticast mode [ 305.771246][T15239] gre0: left allmulticast mode [ 305.782943][T15239] gretap0: left allmulticast mode [ 305.792164][T15239] erspan0: left allmulticast mode [ 305.800568][T15239] ip_vti0: left allmulticast mode [ 305.807391][T15239] ip6_vti0: left allmulticast mode [ 305.844961][T15239] sit0: left allmulticast mode [ 305.882725][T15239] ip6tnl0: left allmulticast mode [ 305.890064][T15239] ip6gre0: left allmulticast mode [ 305.897293][T15239] ip6gretap0: left allmulticast mode [ 305.905984][T15239] vcan0: left allmulticast mode [ 305.912770][T15239] team0: left allmulticast mode [ 305.917748][T15239] geneve0: left allmulticast mode [ 305.928168][T15239] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.937011][T15239] dummy0: left promiscuous mode [ 305.943146][T15239] nlmon0: left allmulticast mode [ 305.950404][T15239] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 305.975855][T15230] vxcan1 speed is unknown, defaulting to 1000 [ 306.009724][T15238] macsec0 speed is unknown, defaulting to 1000 [ 306.328791][T15269] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 306.457028][T15245] macsec0 speed is unknown, defaulting to 1000 [ 306.537696][T15238] vxcan1 speed is unknown, defaulting to 1000 [ 306.842588][T15279] __nla_validate_parse: 19 callbacks suppressed [ 306.842606][T15279] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2791'. [ 307.082963][T15245] vxcan1 speed is unknown, defaulting to 1000 [ 307.195262][T15287] netdevsim netdevsim4: Direct firmware load for /.€ failed with error -2 [ 307.208621][T15287] netdevsim netdevsim4: Falling back to sysfs fallback for: /.€ [ 307.295010][T15293] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2793'. [ 307.573352][T15297] validate_nla: 2 callbacks suppressed [ 307.573372][T15297] netlink: 'syz.0.2794': attribute type 13 has an invalid length. [ 307.659668][ T5157] Bluetooth: hci5: command tx timeout [ 307.723870][T15297] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 307.744057][ T12] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 308.298345][T15245] chnl_net:caif_netlink_parms(): no params data found [ 308.548084][T15245] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.559514][T15245] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.581873][T15245] bridge_slave_0: entered allmulticast mode [ 308.600287][T15245] bridge_slave_0: entered promiscuous mode [ 308.628976][T15245] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.641256][T15245] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.660256][T15245] bridge_slave_1: entered allmulticast mode [ 308.668208][T15245] bridge_slave_1: entered promiscuous mode [ 308.817233][T15331] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2802'. [ 308.891367][T15331] gretap0: entered promiscuous mode [ 308.920611][T15245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 308.955432][T15245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.193057][T15245] team0: Port device team_slave_0 added [ 309.202351][T15340] macsec0 speed is unknown, defaulting to 1000 [ 309.205428][T15245] team0: Port device team_slave_1 added [ 309.393469][T15245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.420227][T15245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.455159][T15245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.469566][T15340] vxcan1 speed is unknown, defaulting to 1000 [ 309.478555][T15245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.501348][T15245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.546524][T15245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 309.568366][T15356] netlink: 300 bytes leftover after parsing attributes in process `syz.2.2810'. [ 309.740660][ T5157] Bluetooth: hci5: command tx timeout [ 309.766594][T15245] hsr_slave_0: entered promiscuous mode [ 309.785553][T15245] hsr_slave_1: entered promiscuous mode [ 309.800386][T15245] debugfs: 'hsr0' already exists in 'hsr' [ 309.806338][T15245] Cannot create hsr debugfs directory [ 310.029852][T15376] syzkaller1: entered promiscuous mode [ 310.036147][T15376] syzkaller1: entered allmulticast mode [ 310.155734][T15382] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 310.284192][T15245] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 310.301187][T15388] netlink: 'syz.4.2819': attribute type 19 has an invalid length. [ 310.311400][T15245] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 310.347048][T15245] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 310.401890][T15388] syzkaller0: entered promiscuous mode [ 310.410971][T15388] syzkaller0: entered allmulticast mode [ 310.435728][T15245] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 310.449198][T15395] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2821'. [ 310.458311][T15245] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 310.480383][T15245] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 310.588816][T15245] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 310.598994][T15245] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 310.609047][T15245] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 310.693047][T15398] bond5: entered allmulticast mode [ 310.704981][T15245] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 310.722310][T15245] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0 [ 310.739078][T15245] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 310.783819][T15404] netlink: 'syz.1.2824': attribute type 32 has an invalid length. [ 310.856828][T15407] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 310.880236][T15407] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.973055][T15407] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 310.995974][T15407] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.033735][T15415] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2825'. [ 311.049117][T15415] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2825'. [ 311.059003][T15410] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2825'. [ 311.106902][T15407] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 311.148001][T15407] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.274188][T15426] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2827'. [ 311.322044][T15407] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 311.335514][T15430] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2828'. [ 311.354799][T15407] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.502075][T15436] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 311.513131][T15434] team0 (unregistering): Port device team_slave_0 removed [ 311.529065][T15434] team0 (unregistering): Port device team_slave_1 removed [ 311.539759][T15434] syz_tun: left allmulticast mode [ 311.550053][T15434] syz_tun: left promiscuous mode [ 311.577535][T15434] team0 (unregistering): Port device macvlan2 removed [ 311.603521][T15434] team0 (unregistering): Port device geneve0 removed [ 311.635678][T15245] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 311.653153][T15245] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 311.688370][T15245] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 311.725180][T15245] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 311.788028][ T10] hid-generic 0005:0C45:1012.0004: item fetching failed at offset 0/1 [ 311.797236][ T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.797829][ T10] hid-generic 0005:0C45:1012.0004: probe with driver hid-generic failed with error -22 [ 311.818897][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.833288][ T5157] Bluetooth: hci5: command tx timeout [ 311.848329][ T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.859398][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.927684][ T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.944322][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.983745][ T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.993994][T15464] __nla_validate_parse: 4 callbacks suppressed [ 311.994011][T15464] netlink: 1196 bytes leftover after parsing attributes in process `syz.0.2836'. [ 312.012353][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.015581][T15466] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2837'. [ 312.049717][T15467] pimreg: left allmulticast mode [ 312.226246][T15245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.298981][T15245] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.336698][T15485] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2843'. [ 312.356540][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.363836][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.444046][T10546] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.451598][T10546] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.811249][T15508] IPv6: NLM_F_REPLACE set, but no existing node found! [ 312.864169][T15507] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2850'. [ 312.927857][T15508] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2850'. [ 312.995640][T15519] macsec0 speed is unknown, defaulting to 1000 [ 313.057141][T15245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.188364][T15534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2855'. [ 313.203640][T15245] veth0_vlan: entered promiscuous mode [ 313.224523][T15245] veth1_vlan: entered promiscuous mode [ 313.236695][T15534] netlink: 'syz.2.2855': attribute type 30 has an invalid length. [ 313.285199][T15534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2855'. [ 313.303359][T10546] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.328737][T10546] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.343422][T15534] netlink: 'syz.2.2855': attribute type 30 has an invalid length. [ 313.353465][T15539] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 313.369643][ T6122] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.393727][ T6122] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.414457][T15245] veth0_macvtap: entered promiscuous mode [ 313.443444][T15245] veth1_macvtap: entered promiscuous mode [ 313.483529][T15245] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 313.525842][T15245] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 313.573070][T15546] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2858'. [ 313.589401][T10546] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.614591][T10547] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.633197][T10547] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.657484][T10547] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.695136][T15519] vxcan1 speed is unknown, defaulting to 1000 [ 313.804670][T15553] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 313.811965][T15553] IPv6: NLM_F_CREATE should be set when creating new route [ 313.868997][ T6122] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.882811][ T6122] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.900798][ T5157] Bluetooth: hci5: command tx timeout [ 313.986952][T15559] netlink: 596 bytes leftover after parsing attributes in process `syz.1.2864'. [ 314.010828][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.018698][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.274779][T15574] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2867'. [ 314.308202][T15574] tipc: Enabled bearer , priority 0 [ 314.497381][T15574] syzkaller0: entered promiscuous mode [ 314.507387][T15574] syzkaller0: entered allmulticast mode [ 314.559229][T15573] tipc: Resetting bearer [ 314.896960][T15610] netlink: 'syz.0.2874': attribute type 7 has an invalid length. [ 315.421945][ T7386] tipc: Node number set to 1419169261 [ 315.426087][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 315.463738][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 315.484094][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 315.506574][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 315.515601][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 315.979963][ T5840] Bluetooth: hci5: command tx timeout [ 316.487694][T15573] tipc: Disabling bearer [ 316.836359][T15629] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.872717][T15612] macsec0 speed is unknown, defaulting to 1000 [ 317.183342][ T1302] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 317.281885][T15612] vxcan1 speed is unknown, defaulting to 1000 [ 317.479239][T15629] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.486796][T15659] __nla_validate_parse: 5 callbacks suppressed [ 317.486813][T15659] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2889'. [ 317.510348][T15659] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2889'. [ 317.528061][T15657] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2890'. [ 317.539776][T15661] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2889'. [ 317.549036][T15661] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2889'. [ 317.619077][T15629] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.662908][ T5840] Bluetooth: hci0: command tx timeout [ 317.755685][T15629] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.205109][T10547] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.240598][T15683] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2896'. [ 318.272041][T10547] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.317749][T10547] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.353108][T15612] chnl_net:caif_netlink_parms(): no params data found [ 318.378161][ T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.656928][T15612] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.694853][T15612] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.712636][T15717] openvswitch: netlink: Flow key attr not present in new flow. [ 318.735983][T15716] netlink: 268 bytes leftover after parsing attributes in process `syz.3.2904'. [ 318.747931][T15612] bridge_slave_0: entered allmulticast mode [ 318.758291][T15612] bridge_slave_0: entered promiscuous mode [ 318.791863][T15612] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.802627][T15612] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.819180][T15612] bridge_slave_1: entered allmulticast mode [ 318.842389][T15612] bridge_slave_1: entered promiscuous mode [ 318.943143][T15612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.965557][T15612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.054567][T15612] team0: Port device team_slave_0 added [ 319.078917][T15612] team0: Port device team_slave_1 added [ 319.151798][T15612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.158903][T15612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.188834][T15612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.213219][T15733] netlink: 'syz.1.2908': attribute type 10 has an invalid length. [ 319.213364][T15612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.229020][T15612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.255768][T15612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 319.277403][T15733] geneve1: left allmulticast mode [ 319.590938][T15612] hsr_slave_0: entered promiscuous mode [ 319.608019][T15612] hsr_slave_1: entered promiscuous mode [ 319.658223][T15612] debugfs: 'hsr0' already exists in 'hsr' [ 319.671093][T15612] Cannot create hsr debugfs directory [ 319.735119][T15758] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2913'. [ 319.744716][T15758] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2913'. [ 319.746922][ T5840] Bluetooth: hci0: command tx timeout [ 319.754953][T15753] macsec0 speed is unknown, defaulting to 1000 [ 319.982581][ T106] IPVS: starting estimator thread 0... [ 319.988372][T15767] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 320.011174][T15767] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2917'. [ 320.069527][T15768] IPVS: using max 34 ests per chain, 81600 per kthread [ 320.127597][T15753] vxcan1 speed is unknown, defaulting to 1000 [ 320.214136][T15612] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.234890][T15778] netlink: 'syz.2.2920': attribute type 4 has an invalid length. [ 320.341483][T15612] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.420833][T15782] netlink: 'syz.3.2922': attribute type 6 has an invalid length. [ 320.452383][T15612] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.962536][T15810] netlink: 'syz.3.2930': attribute type 10 has an invalid length. [ 320.998174][T15810] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 321.058710][T15812] netlink: 'syz.4.2929': attribute type 4 has an invalid length. [ 321.127781][T15612] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 321.200484][T15612] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 321.250132][T15820] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 321.418505][T15612] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 321.449199][T15822] netlink: 'syz.2.2934': attribute type 6 has an invalid length. [ 321.461506][T15612] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 321.666012][T15612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.713292][T15612] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.752501][ T6122] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.759755][ T6122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.785426][T10547] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.792714][T10547] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.823085][ T5840] Bluetooth: hci0: command tx timeout [ 321.957716][T15846] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 322.016841][T15612] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 322.205144][T15864] netlink: 'syz.3.2944': attribute type 9 has an invalid length. [ 322.327918][T15872] netlink: 'syz.3.2948': attribute type 8 has an invalid length. [ 322.447593][T15612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.568533][T15612] veth0_vlan: entered promiscuous mode [ 322.642131][T15612] veth1_vlan: entered promiscuous mode [ 322.677931][T15889] netlink: 'syz.1.2953': attribute type 2 has an invalid length. [ 322.737078][T15612] veth0_macvtap: entered promiscuous mode [ 322.768204][T15892] tipc: Enabled bearer , priority 0 [ 322.813299][T15892] syzkaller0: entered promiscuous mode [ 322.818837][T15892] syzkaller0: entered allmulticast mode [ 322.886828][T15612] veth1_macvtap: entered promiscuous mode [ 322.960876][T15892] tipc: Resetting bearer [ 323.040437][T15915] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-": -EINTR [ 323.069730][T15891] tipc: Resetting bearer [ 323.152795][T15891] tipc: Disabling bearer [ 323.183814][T15612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.208325][T15612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.275046][ T6122] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.299410][ T6122] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.337427][T15931] __nla_validate_parse: 7 callbacks suppressed [ 323.337444][T15931] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2962'. [ 323.353252][ T6122] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.373378][ T6122] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.437981][T15931] netlink: 'syz.2.2962': attribute type 6 has an invalid length. [ 323.581553][T15931] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2962'. [ 323.656501][T10546] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.692523][T10546] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.781828][T15950] macsec0 speed is unknown, defaulting to 1000 [ 323.821501][T10546] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.855922][T10546] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.901582][ T5840] Bluetooth: hci0: command tx timeout [ 323.909173][T15959] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2971'. [ 323.956334][T15960] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2971'. [ 323.980255][T15962] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2972'. [ 324.004265][T15962] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2972'. [ 324.235356][T15980] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2975'. [ 324.256128][T15950] vxcan1 speed is unknown, defaulting to 1000 [ 324.268486][T15979] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2975'. [ 324.318930][T15979] netlink: 'syz.1.2975': attribute type 18 has an invalid length. [ 324.416272][T15990] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2980'. [ 324.440053][T15979] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2975'. [ 324.450359][T15990] netlink: 'syz.2.2980': attribute type 6 has an invalid length. [ 324.458490][T15979] netlink: 'syz.1.2975': attribute type 18 has an invalid length. [ 324.975975][T16013] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 325.008346][T16004] macsec0 speed is unknown, defaulting to 1000 [ 325.182840][T16024] ip6tnl1: entered promiscuous mode [ 325.283563][T16029] 8021q: VLANs not supported on ip_vti0 [ 325.427005][T16033] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 325.672918][T16004] vxcan1 speed is unknown, defaulting to 1000 [ 325.715848][T16049] netlink: 'syz.1.2995': attribute type 6 has an invalid length. [ 325.858346][T16053] macsec0 speed is unknown, defaulting to 1000 [ 326.088828][T16065] tap0: tun_chr_ioctl cmd 1074025677 [ 326.107734][T16065] tap0: linktype set to 65534 [ 326.116478][T16065] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 326.434518][T16053] vxcan1 speed is unknown, defaulting to 1000 [ 326.769790][T16082] Bluetooth: MGMT ver 1.23 [ 327.087699][T16091] netlink: 'syz.1.3009': attribute type 6 has an invalid length. [ 327.921401][T16108] bridge: RTM_NEWNEIGH with invalid ether address [ 328.220471][T16117] netlink: 'syz.1.3017': attribute type 83 has an invalid length. [ 328.381474][T16134] __nla_validate_parse: 16 callbacks suppressed [ 328.381492][T16134] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3020'. [ 328.405002][T16131] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3022'. [ 328.414822][T16135] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3021'. [ 328.416174][T16137] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3023'. [ 328.505556][T16140] netlink: 'syz.4.3023': attribute type 6 has an invalid length. [ 328.551618][T16143] netlink: 208 bytes leftover after parsing attributes in process `syz.0.3025'. [ 328.558051][T16137] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3023'. [ 328.947484][T16157] macsec0 speed is unknown, defaulting to 1000 [ 329.447991][T16185] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3038'. [ 329.465343][T16185] syzkaller1: entered promiscuous mode [ 329.471040][T16185] syzkaller1: entered allmulticast mode [ 329.543166][ T5157] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 329.554445][ T5157] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 329.564018][ T5157] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 329.573892][ T5157] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 329.585383][ T5157] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 329.655895][T16157] vxcan1 speed is unknown, defaulting to 1000 [ 329.660231][T16189] macsec0 speed is unknown, defaulting to 1000 [ 329.978934][T16207] tun0: tun_chr_ioctl cmd 1074025675 [ 329.986515][T16207] tun0: persist disabled [ 330.018325][T16210] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 330.203608][T16213] batman_adv: batadv0: Adding interface: dummy0 [ 330.210105][T16213] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.236776][T16213] batman_adv: batadv0: Interface activated: dummy0 [ 330.282588][T16189] vxcan1 speed is unknown, defaulting to 1000 [ 330.398454][T16219] batadv0: mtu less than device minimum [ 330.411393][T16219] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 330.423726][T16219] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 330.435586][T16219] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 330.447462][T16219] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 330.459412][T16219] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 330.471325][T16219] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 330.483160][T16219] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 330.495027][T16219] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 330.506868][T16219] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 330.518741][T16219] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 330.530626][T16219] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 330.542484][T16219] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 330.636277][T16225] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3049'. [ 330.648864][T16225] gretap0: entered promiscuous mode [ 330.662099][T16224] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3049'. [ 330.674906][T16225] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3049'. [ 330.684433][T16224] 0ªî{X¹¦: renamed from gretap0 [ 330.696457][T16224] 0ªî{X¹¦: left promiscuous mode [ 330.702644][T16224] 0ªî{X¹¦: entered allmulticast mode [ 330.714643][T16225] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 330.998703][T16233] netlink: 'syz.3.3052': attribute type 1 has an invalid length. [ 331.387132][T16254] bridge6: entered promiscuous mode [ 331.396360][T16254] bridge6: entered allmulticast mode [ 331.489157][T16189] chnl_net:caif_netlink_parms(): no params data found [ 331.604327][T16265] netlink: 'syz.3.3061': attribute type 10 has an invalid length. [ 331.657328][T16189] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.659805][ T5840] Bluetooth: hci2: command tx timeout [ 331.666126][T16189] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.677803][T16189] bridge_slave_0: entered allmulticast mode [ 331.686224][T16189] bridge_slave_0: entered promiscuous mode [ 331.702629][T16189] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.710914][T16189] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.718792][T16189] bridge_slave_1: entered allmulticast mode [ 331.732218][T16189] bridge_slave_1: entered promiscuous mode [ 331.822592][T16189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.840294][T16189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.885430][T16189] team0: Port device team_slave_0 added [ 331.898432][T16189] team0: Port device team_slave_1 added [ 331.958368][T16189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 331.965706][T16189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.995824][T16189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 332.007615][T16283] netlink: 'syz.1.3067': attribute type 10 has an invalid length. [ 332.020004][T16189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 332.027204][T16189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.055027][T16189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 332.150173][T16189] hsr_slave_0: entered promiscuous mode [ 332.171277][T16189] hsr_slave_1: entered promiscuous mode [ 332.177928][T16189] debugfs: 'hsr0' already exists in 'hsr' [ 332.185314][T16189] Cannot create hsr debugfs directory [ 332.203915][T16286] macsec0 speed is unknown, defaulting to 1000 [ 332.416945][T16295] 8021q: adding VLAN 0 to HW filter on device bond1 [ 332.516405][T16189] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 332.554826][T16286] vxcan1 speed is unknown, defaulting to 1000 [ 332.645951][T16189] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 332.753984][T16189] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 332.883966][T16189] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 333.177506][T16189] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 333.228841][T16189] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 333.285518][T16189] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 333.381210][T16189] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 333.542316][T16348] __nla_validate_parse: 120 callbacks suppressed [ 333.542334][T16348] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3083'. [ 333.628697][T16350] geneve2: entered promiscuous mode [ 333.645997][T16350] geneve2: entered allmulticast mode [ 333.739859][ T5840] Bluetooth: hci2: command tx timeout [ 333.884347][T16189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 333.958697][T16189] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.997973][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.005209][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.029098][T16372] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3091'. [ 334.050864][T16364] tipc: Enabled bearer , priority 0 [ 334.073571][T16365] syzkaller0: entered promiscuous mode [ 334.083459][T16365] syzkaller0: entered allmulticast mode [ 334.088974][T16377] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3093'. [ 334.111382][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.118644][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.140279][T16365] tipc: Resetting bearer [ 334.165837][T16365] tipc: Disabling bearer [ 334.192942][T16377] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3093'. [ 334.202793][T16373] macsec0 speed is unknown, defaulting to 1000 [ 334.357589][T16385] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3095'. [ 334.512568][T16373] vxcan1 speed is unknown, defaulting to 1000 [ 334.512992][T16376] macsec0 speed is unknown, defaulting to 1000 [ 334.585689][T16389] netlink: 'syz.4.3096': attribute type 1 has an invalid length. [ 334.722699][T16391] 8021q: adding VLAN 0 to HW filter on device bond5 [ 334.744057][T16391] bond4: (slave bond5): making interface the new active one [ 334.756209][T16391] bond4: (slave bond5): Enslaving as an active interface with an up link [ 334.798847][T16189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.863542][T16391] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3096'. [ 334.878479][T16389] bond4: (slave gretap0): Enslaving as a backup interface with an up link [ 334.927397][T16391] 8021q: adding VLAN 0 to HW filter on device bond4 [ 334.963903][T16189] veth0_vlan: entered promiscuous mode [ 334.986905][T16189] veth1_vlan: entered promiscuous mode [ 335.016625][T16394] IPVS: set_ctl: invalid protocol: 22 255.255.255.255:20000 [ 335.040984][T16376] vxcan1 speed is unknown, defaulting to 1000 [ 335.201464][T16189] veth0_macvtap: entered promiscuous mode [ 335.233544][T16189] veth1_macvtap: entered promiscuous mode [ 335.283480][T16189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 335.335420][T16407] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3101'. [ 335.358410][T16189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.408954][T10546] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.431629][T10546] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.476310][T10546] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.666207][T16438] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3105'. [ 335.685241][T10538] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.728640][T16426] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.775938][T16426] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.827063][ T5840] Bluetooth: hci2: command tx timeout [ 335.895436][T16443] sctp: [Deprecated]: syz.0.3107 (pid 16443) Use of int in max_burst socket option. [ 335.895436][T16443] Use struct sctp_assoc_value instead [ 336.017699][T16433] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.039887][T16433] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.276468][T16453] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3111'. [ 336.340829][T16453] netlink: 'syz.0.3111': attribute type 6 has an invalid length. [ 336.416256][T16457] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3111'. [ 336.926415][T16464] macsec0 speed is unknown, defaulting to 1000 [ 337.159892][T16472] veth1_to_bond: entered allmulticast mode [ 337.208463][T16474] veth0: entered promiscuous mode [ 337.220150][T16471] net_ratelimit: 9 callbacks suppressed [ 337.220169][T16471] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 337.331848][ T5157] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 337.341725][T16471] bond0: (slave bond_slave_1): Releasing backup interface [ 337.351261][ T5157] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 337.366413][ T5157] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 337.376935][ T5157] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 337.386193][ T5157] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 337.404562][T16471] veth1_to_bond (unregistering): left allmulticast mode [ 337.434329][T16464] vxcan1 speed is unknown, defaulting to 1000 [ 337.436407][T16473] veth0: left promiscuous mode [ 337.503969][T16480] macsec0 speed is unknown, defaulting to 1000 [ 337.780178][ T7382] hid-generic 0005:10CF:0009.0005: unknown main item tag 0x0 [ 337.798082][ T7382] hid-generic 0005:10CF:0009.0005: hidraw0: BLUETOOTH HID v0.09 Device [syz0] on aa:aa:aa:aa:aa:aa [ 337.901351][ T5157] Bluetooth: hci2: command tx timeout [ 337.955474][T16503] netlink: 'syz.0.3125': attribute type 6 has an invalid length. [ 338.076022][T16512] netlink: 'syz.3.3128': attribute type 1 has an invalid length. [ 338.124733][T16480] vxcan1 speed is unknown, defaulting to 1000 [ 338.312592][T16522] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 338.533774][T16534] netlink: 'syz.1.3134': attribute type 5 has an invalid length. [ 338.788193][T16543] __nla_validate_parse: 5 callbacks suppressed [ 338.788211][T16543] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3138'. [ 338.888764][T16543] netlink: 'syz.1.3138': attribute type 6 has an invalid length. [ 339.035611][T16547] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3138'. [ 339.185626][T16562] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 339.375966][T16480] chnl_net:caif_netlink_parms(): no params data found [ 339.420361][ T5157] Bluetooth: hci3: command tx timeout [ 339.572369][T16480] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.584315][T16480] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.592751][T16480] bridge_slave_0: entered allmulticast mode [ 339.597002][T16581] netlink: 'syz.1.3146': attribute type 1 has an invalid length. [ 339.601371][T16480] bridge_slave_0: entered promiscuous mode [ 339.612664][T16581] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3146'. [ 339.643365][T16480] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.651093][T16480] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.658357][T16480] bridge_slave_1: entered allmulticast mode [ 339.668386][T16480] bridge_slave_1: entered promiscuous mode [ 339.771171][T16579] sit0: entered promiscuous mode [ 339.786575][T16589] netlink: 'syz.1.3148': attribute type 1 has an invalid length. [ 339.802497][T16579] netlink: 'syz.2.3145': attribute type 1 has an invalid length. [ 339.814499][T16579] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3145'. [ 339.830437][T16480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 339.877278][T16589] 8021q: adding VLAN 0 to HW filter on device bond7 [ 339.924145][T16589] bond7: (slave gretap3): making interface the new active one [ 339.943399][T16589] bond7: (slave gretap3): Enslaving as an active interface with an up link [ 339.973103][T16592] gretap3: entered promiscuous mode [ 339.983405][T16592] macvtap1: entered promiscuous mode [ 339.988922][T16592] bond7: entered promiscuous mode [ 339.994877][T16592] macvtap1: entered allmulticast mode [ 340.000500][T16592] bond7: entered allmulticast mode [ 340.005941][T16592] gretap3: entered allmulticast mode [ 340.018329][T16592] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 340.037511][T16480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 340.058738][ T5157] block nbd3: Receive control failed (result -32) [ 340.092531][T16601] mac80211_hwsim hwsim26 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 340.194035][T16608] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3152'. [ 340.214818][T16605] netlink: 'syz.1.3152': attribute type 6 has an invalid length. [ 340.273625][T16480] team0: Port device team_slave_0 added [ 340.298277][T16616] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3155'. [ 340.340866][T16480] team0: Port device team_slave_1 added [ 340.386541][T16619] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3156'. [ 340.398712][T16605] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3152'. [ 340.457311][T16480] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 340.466196][T16480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 340.496003][T16480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 340.517479][T16619] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3156'. [ 340.527212][T16619] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3156'. [ 340.543441][T16615] macsec0 speed is unknown, defaulting to 1000 [ 340.550524][T16480] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 340.562366][T16480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 340.615416][T16480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 340.874071][T16480] hsr_slave_0: entered promiscuous mode [ 340.898970][T16480] hsr_slave_1: entered promiscuous mode [ 340.925276][T16480] debugfs: 'hsr0' already exists in 'hsr' [ 340.934578][T16480] Cannot create hsr debugfs directory [ 340.945092][T16615] vxcan1 speed is unknown, defaulting to 1000 [ 341.034714][T10537] tipc: Subscription rejected, illegal request [ 341.275518][T16645] netem: change failed [ 341.431796][T16653] bond1: entered promiscuous mode [ 341.437413][T16653] bond1: entered allmulticast mode [ 341.444142][T16653] 8021q: adding VLAN 0 to HW filter on device bond1 [ 341.500931][ T5157] Bluetooth: hci3: command tx timeout [ 341.632000][T16653] bond1 (unregistering): Released all slaves [ 342.400591][T16686] netlink: 'syz.1.3177': attribute type 6 has an invalid length. [ 342.544328][T16480] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 342.597265][T16480] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 342.674792][T16480] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 342.734657][T16480] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 342.791486][T16703] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 343.031660][T16723] sctp: [Deprecated]: syz.1.3187 (pid 16723) Use of struct sctp_assoc_value in delayed_ack socket option. [ 343.031660][T16723] Use struct sctp_sack_info instead [ 343.069507][T16723] sctp: [Deprecated]: syz.1.3187 (pid 16723) Use of struct sctp_assoc_value in delayed_ack socket option. [ 343.069507][T16723] Use struct sctp_sack_info instead [ 343.074780][T16480] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.091952][T16723] sctp: [Deprecated]: syz.1.3187 (pid 16723) Use of struct sctp_assoc_value in delayed_ack socket option. [ 343.091952][T16723] Use struct sctp_sack_info instead [ 343.126810][T16723] sctp: [Deprecated]: syz.1.3187 (pid 16723) Use of struct sctp_assoc_value in delayed_ack socket option. [ 343.126810][T16723] Use struct sctp_sack_info instead [ 343.136862][T16728] team_slave_0: entered promiscuous mode [ 343.149472][T16728] team_slave_1: entered promiscuous mode [ 343.169692][T16723] sctp: [Deprecated]: syz.1.3187 (pid 16723) Use of struct sctp_assoc_value in delayed_ack socket option. [ 343.169692][T16723] Use struct sctp_sack_info instead [ 343.223963][T16480] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.246392][T16723] sctp: [Deprecated]: syz.1.3187 (pid 16723) Use of struct sctp_assoc_value in delayed_ack socket option. [ 343.246392][T16723] Use struct sctp_sack_info instead [ 343.255453][T16426] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.270145][T16426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.274001][T16741] IPVS: set_ctl: invalid protocol: 41 127.0.0.1:20001 [ 343.290627][T16723] sctp: [Deprecated]: syz.1.3187 (pid 16723) Use of struct sctp_assoc_value in delayed_ack socket option. [ 343.290627][T16723] Use struct sctp_sack_info instead [ 343.321496][T16426] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.328752][T16426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.368327][T16723] sctp: [Deprecated]: syz.1.3187 (pid 16723) Use of struct sctp_assoc_value in delayed_ack socket option. [ 343.368327][T16723] Use struct sctp_sack_info instead [ 343.434805][T16723] sctp: [Deprecated]: syz.1.3187 (pid 16723) Use of struct sctp_assoc_value in delayed_ack socket option. [ 343.434805][T16723] Use struct sctp_sack_info instead [ 343.460413][T16723] sctp: [Deprecated]: syz.1.3187 (pid 16723) Use of struct sctp_assoc_value in delayed_ack socket option. [ 343.460413][T16723] Use struct sctp_sack_info instead [ 343.521158][T16741] macsec0 speed is unknown, defaulting to 1000 [ 343.579481][ T5840] Bluetooth: hci3: command tx timeout [ 343.878235][T16764] __nla_validate_parse: 8 callbacks suppressed [ 343.878254][T16764] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3197'. [ 343.902462][T16426] wlan1: Trigger new scan to find an IBSS to join [ 343.925271][T16480] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 344.046993][T16776] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3201'. [ 344.200883][T16781] tipc: Started in network mode [ 344.205800][T16781] tipc: Node identity 9aa60c640641, cluster identity 4711 [ 344.213280][T16781] tipc: Enabled bearer , priority 0 [ 344.235403][T16781] syzkaller0: entered promiscuous mode [ 344.246562][T16781] syzkaller0: entered allmulticast mode [ 344.283638][T16781] tipc: Resetting bearer [ 344.292908][T16780] tipc: Resetting bearer [ 344.413692][T16780] tipc: Disabling bearer [ 344.429470][T16741] vxcan1 speed is unknown, defaulting to 1000 [ 344.765428][T16480] veth0_vlan: entered promiscuous mode [ 344.812892][T16480] veth1_vlan: entered promiscuous mode [ 344.937872][T16480] veth0_macvtap: entered promiscuous mode [ 344.964623][T16480] veth1_macvtap: entered promiscuous mode [ 345.025771][T16820] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3213'. [ 345.038329][T16820] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3213'. [ 345.049167][T16818] bond0: Error: Cannot enslave bond to itself. [ 345.156409][T16480] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.165928][T16822] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 345.200879][T16480] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.237759][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.289647][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.374828][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.399790][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.501882][T16834] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 345.515904][T16835] erspan0: entered allmulticast mode [ 345.664948][ T5840] Bluetooth: hci3: command tx timeout [ 345.706274][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.717282][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.846539][T16840] macsec0 speed is unknown, defaulting to 1000 [ 345.877694][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.018833][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.119809][T16840] vxcan1 speed is unknown, defaulting to 1000 [ 346.409950][T16852] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3224'. [ 346.439933][T16852] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.3224'. [ 346.499867][T16855] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3221'. [ 346.737478][T16864] netlink: 'syz.0.3227': attribute type 1 has an invalid length. [ 346.830821][T16864] 8021q: adding VLAN 0 to HW filter on device bond1 [ 347.212499][ T5157] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 347.223029][ T5157] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 347.235332][ T5157] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 347.244765][ T5157] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 347.254830][ T5157] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 347.389067][T16890] macsec0 speed is unknown, defaulting to 1000 [ 347.757903][T16906] netlink: 'syz.2.3237': attribute type 11 has an invalid length. [ 347.769661][T16907] tipc: Failed to remove unknown binding: 66,1,1/0:2520971339/2520971341 [ 347.784017][T16907] tipc: Failed to remove unknown binding: 66,1,1/0:2520971339/2520971341 [ 347.798745][T16907] tipc: Failed to remove unknown binding: 66,1,1/0:2520971339/2520971341 [ 347.823552][T16906] netlink: 'syz.2.3237': attribute type 11 has an invalid length. [ 347.843550][T16906] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3237'. [ 348.259733][T16890] vxcan1 speed is unknown, defaulting to 1000 [ 348.370684][T16931] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.3243'. [ 348.413978][T16931] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3243'. [ 348.829980][T16956] netlink: 'syz.3.3252': attribute type 1 has an invalid length. [ 348.896484][T16960] __nla_validate_parse: 3 callbacks suppressed [ 348.896502][T16960] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3253'. [ 348.919672][T16960] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3253'. [ 348.942327][ T13] wlan1: Trigger new scan to find an IBSS to join [ 348.972694][T16967] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 348.973503][T16965] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 349.061331][T16980] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3257'. [ 349.116892][T16984] netlink: 'syz.3.3257': attribute type 6 has an invalid length. [ 349.249610][T16984] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3257'. [ 349.265266][T16991] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3261'. [ 349.342407][ T5157] Bluetooth: hci1: command tx timeout [ 349.384874][T17000] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3263'. [ 349.667916][T17000] : renamed from veth0_to_batadv (while UP) [ 349.698045][T16890] chnl_net:caif_netlink_parms(): no params data found [ 349.886060][T16433] wlan1: Creating new IBSS network, BSSID 1e:7b:27:b4:f2:2c [ 349.957391][T17010] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3266'. [ 350.073401][T16890] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.090597][T16890] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.107290][T16890] bridge_slave_0: entered allmulticast mode [ 350.125032][T16890] bridge_slave_0: entered promiscuous mode [ 350.139055][T17015] tc_dump_action: action bad kind [ 350.171525][T17017] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 350.192809][T16890] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.216892][T16890] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.234704][T16890] bridge_slave_1: entered allmulticast mode [ 350.245764][T16890] bridge_slave_1: entered promiscuous mode [ 350.362383][T16890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.382671][T17037] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3275'. [ 350.390901][T16890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.479075][T17047] netlink: 'syz.3.3275': attribute type 6 has an invalid length. [ 350.538312][T16890] team0: Port device team_slave_0 added [ 350.551277][T16890] team0: Port device team_slave_1 added [ 350.585585][T17051] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3279'. [ 350.622473][T17047] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3275'. [ 350.648272][T17051] bond_slave_1: entered promiscuous mode [ 350.660685][T17051] bond_slave_1: entered allmulticast mode [ 350.685877][T17061] bridge_slave_1: left allmulticast mode [ 350.719676][T17061] bridge_slave_1: left promiscuous mode [ 350.753542][T17061] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.778468][T17061] bridge_slave_0: left allmulticast mode [ 350.787582][T17061] bridge_slave_0: left promiscuous mode [ 350.802276][T17061] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.915019][T17041] vlan0: entered promiscuous mode [ 350.928470][T17041] team0: Port device vlan0 added [ 350.942284][T17065] macsec0 speed is unknown, defaulting to 1000 [ 350.942587][T17072] !: renamed from dummy0 (while UP) [ 350.976481][T16890] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.995178][T16890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.061409][T16890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.074782][T10537] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 351.086107][T10537] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 351.148033][T16890] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.157193][T16890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.204585][T16890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.232935][T10537] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 351.255130][T10537] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 351.419520][ T5157] Bluetooth: hci1: command tx timeout [ 351.438722][T16890] hsr_slave_0: entered promiscuous mode [ 351.454029][T16890] hsr_slave_1: entered promiscuous mode [ 351.475892][T16890] debugfs: 'hsr0' already exists in 'hsr' [ 351.488903][T16890] Cannot create hsr debugfs directory [ 351.520726][T17096] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 351.844114][T16890] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 351.855638][T16890] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.942107][T16890] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 351.953646][T16890] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.021826][T16890] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 352.058415][T16890] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.124193][T16890] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 352.156772][T16890] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.248320][T17127] team0: Device gtp0 is of different type [ 352.555714][T16890] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 352.616085][T16890] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 352.656033][T16890] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 352.743102][T17150] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 352.819680][T16890] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 353.112700][T16890] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.171733][T16890] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.218926][T16432] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.226187][T16432] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.271241][T10537] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.278427][T10537] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.500369][ T5157] Bluetooth: hci1: command tx timeout [ 353.974208][T16890] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 354.034340][T17234] veth0: entered promiscuous mode [ 354.063315][T17234] netlink: 'syz.3.3337': attribute type 39 has an invalid length. [ 354.138755][T16890] veth0_vlan: entered promiscuous mode [ 354.186725][T16890] veth1_vlan: entered promiscuous mode [ 354.246604][T17232] veth0: left promiscuous mode [ 354.257732][T16890] veth0_macvtap: entered promiscuous mode [ 354.281700][T16890] veth1_macvtap: entered promiscuous mode [ 354.352719][T17242] __nla_validate_parse: 12 callbacks suppressed [ 354.352737][T17242] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3341'. [ 354.361398][T16890] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 354.396670][T17242] netlink: 'syz.4.3341': attribute type 6 has an invalid length. [ 354.403700][T16890] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 354.503808][T17250] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3341'. [ 354.557468][T16432] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.560445][T17252] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3344'. [ 354.577935][T16432] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.598997][T16432] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.633800][T16432] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.804666][T16432] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.837868][T16432] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.926582][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.956433][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.000115][T17272] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3350'. [ 355.055890][T17274] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3351'. [ 355.076098][T17275] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3351'. [ 355.124758][T17280] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3351'. [ 355.153583][T17275] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3351'. [ 355.236725][T17286] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3225'. [ 355.283479][T17286] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3225'. [ 355.288707][T17285] macsec0 speed is unknown, defaulting to 1000 [ 355.345260][T17292] dvmrp1: entered allmulticast mode [ 355.390390][T10537] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.402748][T17296] FAULT_INJECTION: forcing a failure. [ 355.402748][T17296] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 355.423043][T17296] CPU: 1 UID: 0 PID: 17296 Comm: syz.4.3355 Not tainted 6.16.0-syzkaller-06588-g759dfc7d04ba #0 PREEMPT(full) [ 355.423070][T17296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 355.423093][T17296] Call Trace: [ 355.423100][T17296] [ 355.423108][T17296] dump_stack_lvl+0x189/0x250 [ 355.423132][T17296] ? __pfx____ratelimit+0x10/0x10 [ 355.423155][T17296] ? __pfx_dump_stack_lvl+0x10/0x10 [ 355.423173][T17296] ? __pfx__printk+0x10/0x10 [ 355.423193][T17296] ? __might_fault+0xb0/0x130 [ 355.423228][T17296] should_fail_ex+0x414/0x560 [ 355.423258][T17296] _copy_from_user+0x2d/0xb0 [ 355.423281][T17296] do_sys_poll+0x242/0x1070 [ 355.423314][T17296] ? __pfx_do_sys_poll+0x10/0x10 [ 355.423344][T17296] ? __lock_acquire+0xab9/0xd20 [ 355.423428][T17296] ? ktime_get_ts64+0xa2/0x3d0 [ 355.423455][T17296] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 355.423503][T17296] ? __pfx_timespec64_add_safe+0x10/0x10 [ 355.423534][T17296] __se_sys_poll+0x128/0x320 [ 355.423560][T17296] ? __pfx___se_sys_poll+0x10/0x10 [ 355.423579][T17296] ? rcu_is_watching+0x15/0xb0 [ 355.423608][T17296] ? do_syscall_64+0xbe/0x3b0 [ 355.423634][T17296] do_syscall_64+0xfa/0x3b0 [ 355.423654][T17296] ? lockdep_hardirqs_on+0x9c/0x150 [ 355.423674][T17296] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.423690][T17296] ? clear_bhb_loop+0x60/0xb0 [ 355.423710][T17296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.423726][T17296] RIP: 0033:0x7fab7238eb69 [ 355.423741][T17296] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 355.423756][T17296] RSP: 002b:00007fab73145038 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 355.423777][T17296] RAX: ffffffffffffffda RBX: 00007fab725b6160 RCX: 00007fab7238eb69 [ 355.423789][T17296] RDX: 0000000000000f72 RSI: 0000000000000002 RDI: 0000200000000000 [ 355.423800][T17296] RBP: 00007fab73145090 R08: 0000000000000000 R09: 0000000000000000 [ 355.423811][T17296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 355.423821][T17296] R13: 0000000000000000 R14: 00007fab725b6160 R15: 00007ffc64855808 [ 355.423850][T17296] [ 355.500260][T10537] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.678377][ T5157] Bluetooth: hci1: command tx timeout [ 355.700590][T17293] macsec0 speed is unknown, defaulting to 1000 [ 355.706975][T10537] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.722188][T17285] vxcan1 speed is unknown, defaulting to 1000 [ 355.725152][T10537] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.422827][T17293] vxcan1 speed is unknown, defaulting to 1000 [ 358.410733][T17392] netlink: 'syz.2.3389': attribute type 2 has an invalid length. [ 358.418570][T17392] netlink: 'syz.2.3389': attribute type 1 has an invalid length. [ 358.450598][T17392] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 358.480306][T17396] netlink: 'syz.4.3390': attribute type 6 has an invalid length. [ 358.493922][T17392] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 358.682220][T17407] sctp: [Deprecated]: syz.2.3392 (pid 17407) Use of struct sctp_assoc_value in delayed_ack socket option. [ 358.682220][T17407] Use struct sctp_sack_info instead [ 359.415411][T17452] __nla_validate_parse: 13 callbacks suppressed [ 359.415430][T17452] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3406'. [ 359.453020][T17452] netlink: 'syz.3.3406': attribute type 6 has an invalid length. [ 359.603716][T17464] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3406'. [ 359.650257][T17466] netlink: 484 bytes leftover after parsing attributes in process `syz.2.3409'. [ 359.897631][T17478] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3415'. [ 359.914720][T17478] netlink: 50 bytes leftover after parsing attributes in process `syz.2.3415'. [ 359.929890][T17478] netlink: 50 bytes leftover after parsing attributes in process `syz.2.3415'. [ 360.071636][T17483] macsec0 speed is unknown, defaulting to 1000 [ 360.193509][T17492] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3418'. [ 360.363352][T17504] netlink: ct family unspecified [ 360.409596][T17504] openvswitch: netlink: Actions may not be safe on all matching packets [ 360.536082][T17512] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3423'. [ 360.559694][T17511] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3424'. [ 360.588061][T17516] netlink: 212340 bytes leftover after parsing attributes in process `syz.0.3426'. [ 360.601034][T17509] netlink: 'syz.1.3423': attribute type 6 has an invalid length. [ 360.602501][T17511] team_slave_0: entered promiscuous mode [ 360.614778][T17511] team_slave_1: entered promiscuous mode [ 360.625175][T17511] macsec1: entered allmulticast mode [ 360.634222][T17511] team0: entered allmulticast mode [ 360.639611][T17511] team_slave_0: entered allmulticast mode [ 360.646810][T17511] team_slave_1: entered allmulticast mode [ 360.655384][T17511] vlan0: entered allmulticast mode [ 360.661321][T17511] veth0_vlan: entered allmulticast mode [ 360.671041][T17511] team0: left allmulticast mode [ 360.676485][T17511] team_slave_0: left allmulticast mode [ 360.682555][T17511] team_slave_1: left allmulticast mode [ 360.688357][T17511] vlan0: left allmulticast mode [ 360.699067][T17511] veth0_vlan: left allmulticast mode [ 360.706245][T17511] team_slave_0: left promiscuous mode [ 360.711921][T17511] team_slave_1: left promiscuous mode [ 360.758565][T17483] vxcan1 speed is unknown, defaulting to 1000 [ 361.457505][T17549] mac80211_hwsim hwsim32 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 361.473363][T17552] netlink: 'syz.0.3435': attribute type 21 has an invalid length. [ 362.023245][T17576] FAULT_INJECTION: forcing a failure. [ 362.023245][T17576] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 362.059497][T17576] CPU: 1 UID: 0 PID: 17576 Comm: syz.1.3441 Not tainted 6.16.0-syzkaller-06588-g759dfc7d04ba #0 PREEMPT(full) [ 362.059525][T17576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 362.059536][T17576] Call Trace: [ 362.059543][T17576] [ 362.059551][T17576] dump_stack_lvl+0x189/0x250 [ 362.059574][T17576] ? __pfx____ratelimit+0x10/0x10 [ 362.059598][T17576] ? __pfx_dump_stack_lvl+0x10/0x10 [ 362.059615][T17576] ? __pfx__printk+0x10/0x10 [ 362.059637][T17576] ? __might_fault+0xb0/0x130 [ 362.059677][T17576] should_fail_ex+0x414/0x560 [ 362.059705][T17576] _copy_from_user+0x2d/0xb0 [ 362.059729][T17576] ___sys_sendmsg+0x158/0x2a0 [ 362.059749][T17576] ? __pfx____sys_sendmsg+0x10/0x10 [ 362.059800][T17576] ? __fget_files+0x2a/0x420 [ 362.059816][T17576] ? __fget_files+0x3a0/0x420 [ 362.059842][T17576] __sys_sendmmsg+0x227/0x430 [ 362.059862][T17576] ? __pfx___sys_sendmmsg+0x10/0x10 [ 362.059875][T17576] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 362.059923][T17576] ? ksys_write+0x22a/0x250 [ 362.059947][T17576] ? __pfx_ksys_write+0x10/0x10 [ 362.059966][T17576] ? rcu_is_watching+0x15/0xb0 [ 362.059994][T17576] __x64_sys_sendmmsg+0xa0/0xc0 [ 362.060011][T17576] do_syscall_64+0xfa/0x3b0 [ 362.060031][T17576] ? lockdep_hardirqs_on+0x9c/0x150 [ 362.060052][T17576] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.060068][T17576] ? clear_bhb_loop+0x60/0xb0 [ 362.060088][T17576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.060104][T17576] RIP: 0033:0x7f6016d8eb69 [ 362.060119][T17576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 362.060134][T17576] RSP: 002b:00007f6017b72038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 362.060153][T17576] RAX: ffffffffffffffda RBX: 00007f6016fb5fa0 RCX: 00007f6016d8eb69 [ 362.060165][T17576] RDX: 0000000000000001 RSI: 0000200000002000 RDI: 0000000000000004 [ 362.060175][T17576] RBP: 00007f6017b72090 R08: 0000000000000000 R09: 0000000000000000 [ 362.060186][T17576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 362.060197][T17576] R13: 0000000000000000 R14: 00007f6016fb5fa0 R15: 00007ffe86163448 [ 362.060226][T17576] [ 362.628252][T17595] openvswitch: netlink: Flow key attr not present in new flow. [ 362.785603][T17596] netlink: 'syz.1.3449': attribute type 58 has an invalid length. [ 363.155820][T17619] netlink: 'syz.2.3458': attribute type 1 has an invalid length. [ 363.182081][T17620] netlink: 'syz.0.3460': attribute type 6 has an invalid length. [ 363.205044][T17620] netdevsim netdevsim0: Direct firmware load for ..€ failed with error -2 [ 363.230087][T17620] netdevsim netdevsim0: Falling back to sysfs fallback for: ..€ [ 363.274854][T17619] 8021q: adding VLAN 0 to HW filter on device bond1 [ 363.296564][T17626] macvtap1: entered promiscuous mode [ 363.314528][T17626] bond1: entered promiscuous mode [ 363.320392][T17626] macvtap1: entered allmulticast mode [ 363.329449][T17626] bond1: entered allmulticast mode [ 363.335138][T17626] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 363.397182][T17619] bond1: (slave gretap1): making interface the new active one [ 363.404848][T17619] gretap1: entered promiscuous mode [ 363.418843][T17619] gretap1: entered allmulticast mode [ 363.427486][T17619] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 363.608602][T17644] macsec0 speed is unknown, defaulting to 1000 [ 363.656731][T17648] netlink: 'syz.3.3467': attribute type 5 has an invalid length. [ 363.752713][T17656] IPVS: Unknown mcast interface: pim6reg1 [ 363.900827][ T13] wlan1: Trigger new scan to find an IBSS to join [ 363.931496][T17664] FAULT_INJECTION: forcing a failure. [ 363.931496][T17664] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 363.975465][T17664] CPU: 1 UID: 0 PID: 17664 Comm: syz.4.3471 Not tainted 6.16.0-syzkaller-06588-g759dfc7d04ba #0 PREEMPT(full) [ 363.975492][T17664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 363.975506][T17664] Call Trace: [ 363.975514][T17664] [ 363.975525][T17664] dump_stack_lvl+0x189/0x250 [ 363.975548][T17664] ? __pfx____ratelimit+0x10/0x10 [ 363.975570][T17664] ? __pfx_dump_stack_lvl+0x10/0x10 [ 363.975587][T17664] ? __pfx__printk+0x10/0x10 [ 363.975606][T17664] ? __might_fault+0xb0/0x130 [ 363.975640][T17664] should_fail_ex+0x414/0x560 [ 363.975669][T17664] _copy_from_iter+0x1db/0x16f0 [ 363.975693][T17664] ? tcp_leave_memory_pressure+0xea/0x100 [ 363.975711][T17664] ? __pfx_tcp_leave_memory_pressure+0x10/0x10 [ 363.975737][T17664] ? __pfx__copy_from_iter+0x10/0x10 [ 363.975764][T17664] ? get_page+0xdc/0x220 [ 363.975788][T17664] ? sk_msg_alloc+0x8e9/0x980 [ 363.975812][T17664] sk_msg_memcopy_from_iter+0x360/0x710 [ 363.975850][T17664] tcp_bpf_sendmsg+0x5ec/0x1a40 [ 363.975887][T17664] ? process_measurement+0x3d8/0x1a40 [ 363.975924][T17664] ? __pfx_tcp_bpf_sendmsg+0x10/0x10 [ 363.976021][T17664] ? __lock_acquire+0xab9/0xd20 [ 363.976043][T17664] ? __pfx_aa_sk_perm+0x10/0x10 [ 363.976061][T17664] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 363.976083][T17664] ? sock_rps_record_flow+0x19/0x410 [ 363.976106][T17664] ? inet_send_prepare+0x5c/0x270 [ 363.976130][T17664] ? inet6_sendmsg+0x101/0x120 [ 363.976150][T17664] __sock_sendmsg+0xe5/0x270 [ 363.976175][T17664] ____sys_sendmsg+0x52d/0x830 [ 363.976200][T17664] ? __pfx_____sys_sendmsg+0x10/0x10 [ 363.976229][T17664] ? import_iovec+0x74/0xa0 [ 363.976254][T17664] ___sys_sendmsg+0x21f/0x2a0 [ 363.976275][T17664] ? __pfx____sys_sendmsg+0x10/0x10 [ 363.976334][T17664] ? __fget_files+0x2a/0x420 [ 363.976349][T17664] ? __fget_files+0x3a0/0x420 [ 363.976378][T17664] __sys_sendmmsg+0x227/0x430 [ 363.976403][T17664] ? __pfx___sys_sendmmsg+0x10/0x10 [ 363.976426][T17664] ? __mutex_unlock_slowpath+0x1a1/0x760 [ 363.976483][T17664] ? ksys_write+0x22a/0x250 [ 363.976509][T17664] ? __pfx_ksys_write+0x10/0x10 [ 363.976529][T17664] ? rcu_is_watching+0x15/0xb0 [ 363.976562][T17664] __x64_sys_sendmmsg+0xa0/0xc0 [ 363.976583][T17664] do_syscall_64+0xfa/0x3b0 [ 363.976604][T17664] ? lockdep_hardirqs_on+0x9c/0x150 [ 363.976626][T17664] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.976643][T17664] ? clear_bhb_loop+0x60/0xb0 [ 363.976665][T17664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.976680][T17664] RIP: 0033:0x7fab7238eb69 [ 363.976697][T17664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 363.976712][T17664] RSP: 002b:00007fab73187038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 363.976733][T17664] RAX: ffffffffffffffda RBX: 00007fab725b5fa0 RCX: 00007fab7238eb69 [ 363.976746][T17664] RDX: 0000000000000001 RSI: 0000200000002000 RDI: 0000000000000004 [ 363.976757][T17664] RBP: 00007fab73187090 R08: 0000000000000000 R09: 0000000000000000 [ 363.976768][T17664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 363.976779][T17664] R13: 0000000000000000 R14: 00007fab725b5fa0 R15: 00007ffc64855808 [ 363.976809][T17664] [ 364.379185][T17644] vxcan1 speed is unknown, defaulting to 1000 [ 364.498703][T17670] 8021q: adding VLAN 0 to HW filter on device bond2 [ 364.516987][T17674] __nla_validate_parse: 11 callbacks suppressed [ 364.517005][T17674] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3475'. [ 364.568119][T17676] 8021q: adding VLAN 0 to HW filter on device bond2 [ 364.577938][T17676] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 364.590709][T17676] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 364.627115][T17683] netlink: 'syz.3.3476': attribute type 10 has an invalid length. [ 364.641495][T17686] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3477'. [ 364.656889][T17683] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3476'. [ 364.688290][T17685] dvmrp8: entered allmulticast mode [ 364.694541][T17687] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3477'. [ 364.731292][T17689] netlink: 'syz.2.3478': attribute type 1 has an invalid length. [ 364.811239][T17689] 8021q: adding VLAN 0 to HW filter on device bond3 [ 364.835151][T17693] vlan0: entered allmulticast mode [ 364.841652][T17693] veth1: entered allmulticast mode [ 364.851611][T17693] bond3: (slave vlan0): making interface the new active one [ 364.861454][T17693] bond3: (slave vlan0): Enslaving as an active interface with an up link [ 364.938168][T17687] bond1: entered allmulticast mode [ 364.953476][T17687] 8021q: adding VLAN 0 to HW filter on device bond1 [ 364.960563][T17700] netlink: 'syz.3.3480': attribute type 83 has an invalid length. [ 364.962385][T17687] bridge0: port 3(bond1) entered blocking state [ 364.997382][T17687] bridge0: port 3(bond1) entered disabled state [ 365.010110][T17687] bond1: entered promiscuous mode [ 365.015968][T17687] bridge0: port 3(bond1) entered blocking state [ 365.022410][T17687] bridge0: port 3(bond1) entered forwarding state [ 365.049414][T10535] bridge0: port 3(bond1) entered disabled state [ 365.068038][T17697] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3478'. [ 365.226810][T17714] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3483'. [ 365.433649][ C1] ------------[ cut here ]------------ [ 365.439502][ C1] WARNING: CPU: 1 PID: 23 at net/ipv4/af_inet.c:156 inet_sock_destruct+0x623/0x730 [ 365.448869][ C1] Modules linked in: [ 365.453108][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted 6.16.0-syzkaller-06588-g759dfc7d04ba #0 PREEMPT(full) [ 365.464776][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 365.474878][ C1] RIP: 0010:inet_sock_destruct+0x623/0x730 [ 365.480745][ C1] Code: 0f 0b 90 e9 62 fe ff ff e8 0a 08 c6 f7 90 0f 0b 90 e9 95 fe ff ff e8 fc 07 c6 f7 90 0f 0b 90 e9 bb fe ff ff e8 ee 07 c6 f7 90 <0f> 0b 90 e9 e1 fe ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 9f fc [ 365.500415][ C1] RSP: 0018:ffffc900001d7868 EFLAGS: 00010246 [ 365.506513][ C1] RAX: ffffffff89f9a8c2 RBX: dffffc0000000000 RCX: ffff88801daa5a00 [ 365.514625][ C1] RDX: 0000000000000100 RSI: 0000000000000fff RDI: 0000000000000000 [ 365.522663][ C1] RBP: 0000000000000fff R08: ffff88807aca101f R09: 1ffff1100f594203 [ 365.530683][ C1] R10: dffffc0000000000 R11: ffffed100f594204 R12: ffff88807aca0d80 [ 365.538867][ C1] R13: dffffc0000000000 R14: ffff88807aca1004 R15: 1ffff1100f5941b2 [ 365.546889][ C1] FS: 0000000000000000(0000) GS:ffff888125d80000(0000) knlGS:0000000000000000 [ 365.555859][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 365.562493][ C1] CR2: 00007f4b762aef98 CR3: 000000007542e000 CR4: 00000000003526f0 [ 365.570520][ C1] Call Trace: [ 365.573820][ C1] [ 365.576765][ C1] ? inet6_cleanup_sock+0x197/0x230 [ 365.582483][ C1] ? __pfx_inet6_sock_destruct+0x10/0x10 [ 365.588136][ C1] __sk_destruct+0x89/0x660 [ 365.592699][ C1] ? __pfx___sk_destruct+0x10/0x10 [ 365.597836][ C1] ? rcu_core+0xc34/0x1710 [ 365.602303][ C1] rcu_core+0xca8/0x1710 [ 365.606712][ C1] ? __pfx_rcu_core+0x10/0x10 [ 365.611457][ C1] ? rcu_qs+0xc4/0x170 [ 365.612803][T17719] netlink: 'syz.3.3484': attribute type 33 has an invalid length. [ 365.615722][ C1] ? __pfx_rcu_qs+0x10/0x10 [ 365.628243][ C1] ? sched_clock_cpu+0x74/0x430 [ 365.633264][ C1] ? rcu_softirq_qs+0xf2/0x350 [ 365.638082][ C1] ? __pfx_rcu_softirq_qs+0x10/0x10 [ 365.643385][ C1] handle_softirqs+0x283/0x870 [ 365.648192][ C1] ? run_ksoftirqd+0x9b/0x100 [ 365.652942][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 365.658283][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 365.663385][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 365.668456][ C1] run_ksoftirqd+0x9b/0x100 [ 365.673023][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 365.678175][ C1] smpboot_thread_fn+0x53f/0xa60 [ 365.683178][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 365.688245][ C1] kthread+0x70e/0x8a0 [ 365.692379][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 365.697875][ C1] ? __pfx_kthread+0x10/0x10 [ 365.702535][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 365.707778][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 365.713043][ C1] ? __pfx_kthread+0x10/0x10 [ 365.717745][ C1] ret_from_fork+0x3fc/0x770 [ 365.722407][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 365.727562][ C1] ? __switch_to_asm+0x39/0x70 [ 365.732380][ C1] ? __switch_to_asm+0x33/0x70 [ 365.737167][ C1] ? __pfx_kthread+0x10/0x10 [ 365.741807][ C1] ret_from_fork_asm+0x1a/0x30 [ 365.746618][ C1] [ 365.749694][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 365.757075][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted 6.16.0-syzkaller-06588-g759dfc7d04ba #0 PREEMPT(full) [ 365.768627][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 365.778682][ C1] Call Trace: [ 365.781961][ C1] [ 365.784985][ C1] dump_stack_lvl+0x99/0x250 [ 365.789586][ C1] ? __asan_memcpy+0x40/0x70 [ 365.794221][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 365.799419][ C1] ? __pfx__printk+0x10/0x10 [ 365.804011][ C1] panic+0x2db/0x790 [ 365.807927][ C1] ? __pfx_panic+0x10/0x10 [ 365.812330][ C1] ? show_trace_log_lvl+0x4fb/0x550 [ 365.817797][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 365.822738][ C1] __warn+0x31b/0x4b0 [ 365.826720][ C1] ? inet_sock_destruct+0x623/0x730 [ 365.831913][ C1] ? inet_sock_destruct+0x623/0x730 [ 365.837106][ C1] report_bug+0x2be/0x4f0 [ 365.841431][ C1] ? inet_sock_destruct+0x623/0x730 [ 365.846620][ C1] ? inet_sock_destruct+0x623/0x730 [ 365.851822][ C1] ? inet_sock_destruct+0x625/0x730 [ 365.857035][ C1] handle_bug+0x84/0x160 [ 365.861277][ C1] exc_invalid_op+0x1a/0x50 [ 365.865784][ C1] asm_exc_invalid_op+0x1a/0x20 [ 365.870652][ C1] RIP: 0010:inet_sock_destruct+0x623/0x730 [ 365.876498][ C1] Code: 0f 0b 90 e9 62 fe ff ff e8 0a 08 c6 f7 90 0f 0b 90 e9 95 fe ff ff e8 fc 07 c6 f7 90 0f 0b 90 e9 bb fe ff ff e8 ee 07 c6 f7 90 <0f> 0b 90 e9 e1 fe ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 9f fc [ 365.896453][ C1] RSP: 0018:ffffc900001d7868 EFLAGS: 00010246 [ 365.902543][ C1] RAX: ffffffff89f9a8c2 RBX: dffffc0000000000 RCX: ffff88801daa5a00 [ 365.910515][ C1] RDX: 0000000000000100 RSI: 0000000000000fff RDI: 0000000000000000 [ 365.918650][ C1] RBP: 0000000000000fff R08: ffff88807aca101f R09: 1ffff1100f594203 [ 365.926621][ C1] R10: dffffc0000000000 R11: ffffed100f594204 R12: ffff88807aca0d80 [ 365.934600][ C1] R13: dffffc0000000000 R14: ffff88807aca1004 R15: 1ffff1100f5941b2 [ 365.942574][ C1] ? inet_sock_destruct+0x622/0x730 [ 365.947777][ C1] ? inet_sock_destruct+0x622/0x730 [ 365.952982][ C1] ? inet6_cleanup_sock+0x197/0x230 [ 365.958168][ C1] ? __pfx_inet6_sock_destruct+0x10/0x10 [ 365.963789][ C1] __sk_destruct+0x89/0x660 [ 365.968285][ C1] ? __pfx___sk_destruct+0x10/0x10 [ 365.973382][ C1] ? rcu_core+0xc34/0x1710 [ 365.977804][ C1] rcu_core+0xca8/0x1710 [ 365.982063][ C1] ? __pfx_rcu_core+0x10/0x10 [ 365.986742][ C1] ? rcu_qs+0xc4/0x170 [ 365.990805][ C1] ? __pfx_rcu_qs+0x10/0x10 [ 365.995298][ C1] ? sched_clock_cpu+0x74/0x430 [ 366.000153][ C1] ? rcu_softirq_qs+0xf2/0x350 [ 366.004995][ C1] ? __pfx_rcu_softirq_qs+0x10/0x10 [ 366.010195][ C1] handle_softirqs+0x283/0x870 [ 366.014974][ C1] ? run_ksoftirqd+0x9b/0x100 [ 366.019647][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 366.024933][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 366.029957][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 366.034983][ C1] run_ksoftirqd+0x9b/0x100 [ 366.039491][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 366.044595][ C1] smpboot_thread_fn+0x53f/0xa60 [ 366.049533][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 366.054593][ C1] kthread+0x70e/0x8a0 [ 366.058687][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 366.064147][ C1] ? __pfx_kthread+0x10/0x10 [ 366.068732][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 366.073930][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 366.079125][ C1] ? __pfx_kthread+0x10/0x10 [ 366.083806][ C1] ret_from_fork+0x3fc/0x770 [ 366.088440][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 366.093560][ C1] ? __switch_to_asm+0x39/0x70 [ 366.098320][ C1] ? __switch_to_asm+0x33/0x70 [ 366.103075][ C1] ? __pfx_kthread+0x10/0x10 [ 366.107758][ C1] ret_from_fork_asm+0x1a/0x30 [ 366.112525][ C1] [ 366.115779][ C1] Kernel Offset: disabled [ 366.120257][ C1] Rebooting in 86400 seconds..