last executing test programs: 9.453189842s ago: executing program 4 (id=3062): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080), &(0x7f00000000c0)=@udp, 0x2}, 0x20) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x10}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x324) 9.415794388s ago: executing program 4 (id=3064): r0 = socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r3, 0x4, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x6e}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_SEQ={0x8, 0xa, "43642710"}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000800}, 0x10) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000140)=0x6, &(0x7f0000000180)=0x1) read(r1, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="28000000101401c25ca3f90e416dc654c2002cbd7000fedbdf2508000308000000081c004a000100000008000100000000008a9fe783854ab9cfc0c09e6a76fcfa6da016100bfd705a1d815fed66a98c78ba8ec3928bda8cf7621072360dff7c6251f75a97eb5f32a683db8d2b5fca1ba7e7a927546c4c74134613e2fe28a3215bc5f15516f605005737f06951fef7c6fb2eb4"], 0x28}, 0x1, 0x0, 0x0, 0x24044836}, 0x8894) 1.796234737s ago: executing program 1 (id=3185): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r2, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'wlan1\x00'}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x40884}, 0x40091) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000004c0)={0x20, 0x2, 0x7, 0x101, 0x0, 0x0, {}, [@NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8}]}]}, 0x20}}, 0x0) 1.62902352s ago: executing program 1 (id=3188): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8001600a400014002000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket(0x10, 0x80003, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0xc) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r6, 0x10e, 0x2, &(0x7f0000000000)=0x3, 0x4) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x32, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0xfffffffe}}]}, 0x38}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000100)={'syztnl2\x00', r5, 0x4, 0x0, 0x3, 0x2, 0xf, @private2, @rand_addr=' \x01\x00', 0x7800, 0x1, 0xe, 0xf8}}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'wlan0\x00', &(0x7f0000000680)=@ethtool_gstrings={0x1b, 0x4}}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x22}, [@ldst={0x6}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 1.521609528s ago: executing program 1 (id=3192): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@getneigh={0x14, 0x1e, 0x800, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x840) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000200)={r4}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000140)={r4, 0x10}, 0x8) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000100)={&(0x7f0000000040)=""/41, 0x29}) 1.396739286s ago: executing program 1 (id=3194): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x2) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) (async) 1.334114905s ago: executing program 4 (id=3065): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000700000000000a00000a70000000060a0b0400000000000000000200000244000480400001800b00010074617267657400003000028008000240000000010d000100434f4e4e4d41524b0000000014000300e4624777db9d97adbf2cd16d6fb1131f0900020073797a32000000000900010073797a30"], 0x98}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4, 0x4c202}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0xf}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.14933643s ago: executing program 2 (id=3199): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x6, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x4}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sched_kthread_stop\x00'}, 0x10) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000400)={0x2, &(0x7f00000003c0)=[{0x5, 0x9, 0xf2}, {0x6, 0x5, 0x80, 0x7f}]}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x880) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2d, 0x25dfdc03, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0x2, 0xfff1}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x240410c0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) 1.069182382s ago: executing program 4 (id=3201): ppoll(0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0)={[0xffffffffffffffff]}, 0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x48885, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 1.041356894s ago: executing program 1 (id=3202): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xa4, r2, 0x8, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x34, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_NOLEARN={0x5}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x8}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x2}, @NL80211_MESHCONF_TTL={0x5, 0x6, 0xff}, @NL80211_MESHCONF_AWAKE_WINDOW={0x6, 0x1b, 0x6}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x52}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x4, 0x23}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x63}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x61}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_TTL={0x5, 0x6, 0x5}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffffa1}, @NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x800}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$inet6(r5, &(0x7f00000002c0)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) connect$pppl2tp(r6, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r5, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x1, 0x1, 0x0, 0x1}}, 0x2e) socket$netlink(0x10, 0x3, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCBRDELBR(r8, 0x89a3, &(0x7f0000000200)='hsr0\x00') r9 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r10, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@gettclass={0x24, 0x2a, 0x1, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x9, 0xfff1}, {0xd, 0xffff}, {0xffe0, 0xfff3}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000000000000070000000000000000000000010500000008000000000000000000000300000000010000000200000000000000009ac55a50"], 0x0, 0x52}, 0x20) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001340), r11) sendmsg$IEEE802154_ADD_IFACE(r11, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000000)={0x20, r12, 0xa33, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x240400c0}, 0x8844) r13 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(r11, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x24, r13, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_CLPDOI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) r14 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r14, 0x8955, &(0x7f0000000000)={{0x2, 0x4e2a, @broadcast}, {0x0, @multicast}, 0x68, {0x2, 0xce23, @empty}, 'lo\x00'}) socket(0x2b, 0x80801, 0x1) 877.022628ms ago: executing program 0 (id=3204): connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r0, &(0x7f0000000040), 0x12) (async) bind$x25(r0, &(0x7f0000000040), 0x12) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$x25(r3, &(0x7f0000000080), 0x12) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x1, 0x4, 0xfffbfffd) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {}, {0x2, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}]}]}]}}]}, 0x44}}, 0x20040040) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e00)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="070000000000000000000800000008000300", @ANYRES32=r4], 0x1c}}, 0x0) 843.458385ms ago: executing program 1 (id=3206): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000006110000000000000620002000000000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x5}, 0x90) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newtaction={0x68, 0x30, 0x1, 0xfffffffe, 0x0, {}, [{0x54, 0x1, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_PRIO={0x4, 0x2, @void}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@newtfilter={0x2c, 0x2c, 0x400, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xe}, {0x2, 0x3}, {0x3, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x2}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004018}, 0x4140) (rerun: 64) 777.977253ms ago: executing program 0 (id=3207): r0 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2f}, 0x40, r1}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8936, &(0x7f0000000000)) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001000)=ANY=[@ANYBLOB="900100001900010000000000000000001d0109003201108025b57e35619bf20cb7f2934efacde0a223b473fe77f3e5ba76fb70fa1f414813a2a20005006f88d6e1db9b2b00000000000000000028002d802200be00c8ef6b8ced0c8ef9408a2c6c"], 0x190}}, 0x0) 696.986926ms ago: executing program 3 (id=3208): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet(0x2, 0x3, 0x29a) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, 0x0, 0x4000010) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004780), r0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_tracing={0x1a, 0x23, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x101}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf26}, @jmp={0x5, 0x1, 0x0, 0x0, 0x7, 0x40, 0x10}, @map_fd={0x18, 0x9}, @jmp={0x5, 0x0, 0x0, 0xa, 0xa265e6d2ec35cb42, 0x50, 0x4}, @map_val={0x18, 0x8, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x325}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @alu={0x4, 0x1, 0xd, 0xb, 0x6, 0x4, 0x4}]}, &(0x7f0000000540)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x4, 0x8, 0x7, 0x4}, 0x10, 0x27f15, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)=[0xffffffffffffffff], &(0x7f00000006c0)=[{0x4, 0x3, 0x8, 0x8}, {0x4, 0x2, 0x10, 0xa}, {0x4, 0x2, 0xe, 0x7}, {0x5, 0x2, 0x0, 0x6}, {0x5, 0x2, 0xc, 0x4}, {0x4, 0x1, 0xe, 0x8}, {0x3, 0x3, 0x0, 0x1}, {0x1, 0x5, 0x4, 0x5}], 0x10, 0xe}, 0x94) r5 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000100)={r5}) r7 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000340)={r7}) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) bind$xdp(r8, &(0x7f00000005c0)={0x2d, 0x0, r10, 0xc}, 0x10) bind$xdp(r6, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) close(r5) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=@delchain={0x5c, 0x65, 0x200, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0xf, 0xfff3}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_FD={0x8, 0x6, r4}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r11 = socket(0x10, 0x803, 0x0) sendto(r11, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r11, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000047c0)={'wlan0\x00', 0x0}) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000000040)="72332f8de69c7b67815b0dc76ac4535698071b3eb0e051c5ad09b6de1507f7f6f9f7ee8e8771111c6df71392d0a697a36768f5a8d848662803b48d39d6698b171b9f501ff2b3dc2262b8c066c0d5f52d2cb90a5a9720c15d52127188bd04365c8c40a96fd48815d4ce2e3d56e75760918e0e4ecb002f27cf385cafaa572476b40f9417743188abd4f24dd8d7117901befa67502c6ed8625f15fb59527a677b0d6d8a30230fa262e66357ba36838a89b0c9c3031f10a6131432f2f50c82af785cd4ae243a392ffc79", 0xc8) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f0000004880)={0x0, 0x0, &(0x7f0000004840)={&(0x7f0000000b40)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000ffdbdf254300000008000300", @ANYRES32=r12, @ANYBLOB="5c2d07cf0000000000000000f162ebac6da94b718155052400fd757e1412628442e0901f322461d005c864733157be11aa8c83aa8c8bf30aa2cf1a2c3878f73f46629ee9e3fdc1435fce0b8eab4238efac8bceaa85e4be39430a778695c1160c350338b23bc0cb1cd6243a0a6cea35a29ad67519e3dade7631c88ec6f883d17b76fd5be4dececdc47221c4b76a6f6b78a78f316ec4d09d005b9847ea0a14d1bd944d65021c9f66"], 0x28}, 0x1, 0x0, 0x0, 0x20009800}, 0x20008000) ioctl$SIOCGETVIFCNT(r1, 0x89e0, &(0x7f0000000000)={0xffffffffffffffff}) 696.647434ms ago: executing program 2 (id=3209): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000102030000000000000000000a0000000804000000000004"], 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x40840) 597.558024ms ago: executing program 0 (id=3210): r0 = socket$kcm(0x10, 0x2, 0x4) pipe(&(0x7f0000000000)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000004900010000000000000000000a00076e08000000e0000001140001800d2a79075827af5aa534d6815c2e93f10c0002"], 0x40}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) 566.699171ms ago: executing program 2 (id=3211): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)={0x44, r1, 0x1, 0x0, 0x0, {0x2c}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}]}, 0x44}}, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$packet(0x11, 0x2, 0x300) (async) unshare(0x22020600) (async) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) (async) unshare(0x20400) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) (async) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) (async) mmap$xdp(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4, 0x30, r5, 0x100000000) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f00000006c0)={{r4}, 0x6, 0x40, 0x4b}) (async) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@bridge_newvlan={0x60, 0x70, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_MCAST_ROUTER={0x5, 0x6, 0x8}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x2b, 0x2}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x1}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x2}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5}}]}, 0x60}}, 0x0) 508.961252ms ago: executing program 3 (id=3212): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x4, 0x8000000000000000, 0x9}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000c4000000009500000000000000000000000000000000005400000000"], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x1b, r0}, 0x94) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed}, &(0x7f00000000c0)=0xe, 0x100000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x28, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002440)=@delchain={0x24, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xe, 0x3}, {0xfff2, 0xffff}, {0xc, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000085}, 0x0) connect$bt_l2cap(r1, &(0x7f0000000200)={0x1f, 0x1, @none, 0x6}, 0xe) 433.056833ms ago: executing program 0 (id=3213): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) (async) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0xffffff5d}, 0x1c) listen(r1, 0x50) (async) r2 = socket$inet6(0xa, 0x5, 0x0) (async) r3 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r3, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) listen(r3, 0x3) (async) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) (async) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty, 0x4}, 0x1c) (async) listen(r2, 0x50) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@tmpl={0x104, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@dev}, {{@in6=@remote, 0x0, 0x33}, 0x0, @in=@multicast1}, {{@in=@multicast1, 0x0, 0x6c}, 0x0, @in=@local}, {{@in6=@mcast1, 0x0, 0x32}, 0x0, @in6=@private1}]}]}, 0x1bc}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='tlb_flush\x00', r4}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x32}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 432.493426ms ago: executing program 2 (id=3214): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f0000001d00)={0x0, 0x2710}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{0x0}], 0x1}}], 0x1, 0x20008000) shutdown(r1, 0x1) recvmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)}, 0x140) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000001a00010029bd700000000000022020050003c80000000000080002000a01010008000100ac1414aa08000300", @ANYRES32], 0x60}}, 0x0) 416.923359ms ago: executing program 3 (id=3215): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x9}, [@RTA_PRIORITY={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r1 = getpid() syz_open_procfs$namespace(r1, &(0x7f0000000a40)='ns/ipc\x00') r2 = syz_open_procfs$namespace(r1, &(0x7f0000000080)='ns/pid_for_children\x00') ioctl$NS_GET_OWNER_UID(r2, 0xb704, 0x0) 381.010374ms ago: executing program 0 (id=3216): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) unshare(0x2c060000) unshare(0x24020400) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) sendfile(r1, r1, 0x0, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x45, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r0], 0x7c}, 0x1, 0x0, 0x0, 0x40840}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000000400004803c0001800900010068617368000000002c00028008000640e80000ff08000140000000030800044020000003080003400000000408000240000000120900010073797a30000000000900020073797a32"], 0x94}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2c, &(0x7f00000001c0)=0x800, 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f00000000c0)='devices.list\x00', 0x0, 0x0) 277.104031ms ago: executing program 2 (id=3217): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@enum={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x2b, 0x0, 0x1}, 0x20) r4 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r4, 0x107, 0xb, &(0x7f0000000340), &(0x7f0000000380)=0x4) r5 = socket(0x2c, 0x3, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001400)=@base={0xb, 0x6, 0x4, 0x3a7, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x0, 0x1}, 0x48) r6 = socket$can_raw(0x1d, 0x3, 0x1) r7 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r7, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000140)='memory.events\x00'}, 0x30) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000000100)=@netrom={'nr', 0x0}, 0x10) close(r6) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newtfilter={0x24, 0x2c, 0x400, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xfff3, 0x1}, {0xfff2, 0xd}, {0x0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008045}, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000001c0)={0x400, 0x101, 0x8004, 0x3, 0x80, 0xd9d3, 0x0, 0x121f, 0x0}, &(0x7f0000000200)=0x20) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000280)={0xa, 0x9, 0x0, 0xf3be, 0xffffffff, 0x6, 0x6, 0x2, r8}, 0x20) 274.192584ms ago: executing program 3 (id=3218): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) unshare(0x6020400) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x20) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x50, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ad77b64318252d34"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="833fb84194e368870bfc54998fe9694cd18de03e9465264f02792630a63c1e18"}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004000}, 0x4004090) 271.426742ms ago: executing program 0 (id=3219): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], &(0x7f0000000100)=""/141, 0x19, 0x8d, 0x1, 0x7}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async, rerun: 64) r1 = socket$igmp6(0xa, 0x3, 0x2) (async, rerun: 64) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r4 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000011c0)=@newtaction={0x98, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x84, 0x1, [@m_tunnel_key={0x80, 0x1, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) (async) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$sock_int(r5, 0x1, 0xa, &(0x7f0000000080)=0x4, 0x4) ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f0000000100)) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.bfq.dequeue\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r6, 0x0, 0x61, &(0x7f0000000280)={'filter\x00', 0x31, "3b1d0363d9b0b197d1d83a67ad531df85d654e090ab729f5c2fd470a10beacc8678e28dcb3f9552efc352237eb78411ceb"}, &(0x7f0000000340)=0x55) sendmsg$nl_netfilter(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x78, 0xf, 0x8, 0x201, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x8}, [@generic="48de0550bb74f08dbf628f98aa7521279d0ea8058c34d85bc22d9b3bc818b0d9a17d01a20c68e0552902c74790c060aa7ded0a2ff8d392d373c535bd2eff3bda88beb4861fe787d9914dc6331271e96515f60124b631f46b7492c6424f2c58070b"]}, 0x78}, 0x1, 0x0, 0x0, 0x20000810}, 0x840) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 199.843695ms ago: executing program 2 (id=3220): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x2b, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @local}}}}}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x100) 166.612552ms ago: executing program 4 (id=3221): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="0c00990000000000000000000800a000c215000008009f000d000000080026000816"], 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0x184, r3, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x7f, 0x5b, "37aae5794422e82c5ffef4991c3ee0754e906528e18c474092a47632678eb1d03a57fd6c445e90fb379b8c2aa567d22d9edcbccb4e890226ac451aa99fc1996d5cbbba987902f709e26663af4e4f6158061263659e66e859a753a072b986708a176f897132cc0e0e3bc56e28f04448bc186f0ffb860d1da34cd1db"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x9}, @NL80211_ATTR_FRAME_MATCH={0xdd, 0x5b, "1ed67da6457314fb7535751eb5a8403f33a1a36cf6d20951356cce632025a212aa40e7dc37872cc6d3e67ae3223ddc66e91aea4b81b474deca75a79d2d9ec9598afb46da65793443bcea1b9671d32fcc825af78b2588650618a3fe904920b529bae2e2ab650a324eee6d624e2c487aace1a21c36908dc7474281c4c7746889241e67a0d79176019fd7e2d5c7755e7152e492a3d817fbfd980e40ea717560fa26dbd1d4fc447e4961b890db3ed3339f9b193eeaf8ad0cffcd31eaf46feadf1622c6acbdad9d94cb99d7c4461b10ddcdb40cf3f4d29c484d7c35"}]}, 0x184}, 0x1, 0x0, 0x0, 0x81}, 0x4000001) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x49920d862a92153b, 0x0, 0x4, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x1) 166.019692ms ago: executing program 3 (id=3222): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000008900000008000300", @ANYRES32, @ANYBLOB="180006"], 0x34}}, 0x0) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x20, r2, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x80000) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r3, 0x84, 0x83, &(0x7f00000002c0)="1a00000002000000", 0x8) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r6, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x4c0c4) setsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x10) sendmmsg$inet6(r4, &(0x7f00000071c0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000080)='H', 0x1}], 0x1}}], 0x1, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r5, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r6, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24004014}, 0x4050) 13.641868ms ago: executing program 4 (id=3223): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x10}, {0xc, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_IKEY={0x8}]]}}}]}, 0x38}, 0x1, 0x7500}, 0x0) r1 = socket(0x11, 0x2, 0x1) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f00000002c0)={0x98, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1, 0x5, [{{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x35}}}, {{0x2, 0x4e24, @private=0xa010101}}, {{0x2, 0x4e22, @local}}, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x4e23, @broadcast}}]}, 0x310) 0s ago: executing program 3 (id=3224): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = accept4(r2, &(0x7f00000007c0)=@ax25={{}, [@bcast, @rose, @bcast, @remote, @remote, @remote, @netrom, @null]}, &(0x7f0000000500)=0x80, 0x80000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl2\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x2f, 0x0, 0xe, 0x6, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80, 0x20, 0xfffffffa, 0x7}}) connect$packet(r3, &(0x7f0000000380)={0x11, 0x1b, r4, 0x1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}, 0x14) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYRES16=r0, @ANYRES32=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x800) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x5, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x2, 0x0, 0x8, 0x10000, 0x7}, 0x1, 0x1, 0x6, 0x2, 0x0, 0x16, 0x10, 0x13, 0x87, 0x0, {0x7fff, 0xfffffff8, 0xfff, 0x6, 0xb, 0x4}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r11 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r12 = accept4(r11, &(0x7f0000000540)=@hci, &(0x7f0000000100)=0xff98, 0x0) r13 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_INFO(r12, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f8000000", @ANYRES16=r13, @ANYBLOB="04002dbd7000fddbdf250f0000004800038014000600fc01000000000000000000000000000014000600fe80000000000000000000000000003414000600ff010000000000000000000000000001060007004e230000080005000400000020000380080001000000000014007b9d0600fc01000000000000000000000000000108000600000000005c0001800c0007000c00000018c9638b2bdde05800000008000600776c630007000600646800000c0007002b0000002000000014000300ac1414bb000000000000000000000000060002003200000008000500010000000c00070004000000080000000800060085a20000080006000200"], 0xf8}, 0x1, 0x0, 0x0, 0x4844}, 0x10) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4a24, @dev={0xac, 0x14, 0x14, 0x12}}, {0x2, 0x4e21, @empty}, 0x4, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200001, 0x1ff, 0x9}) r14 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x22, &(0x7f0000000080)=0x545, 0x4) listen(r14, 0x3) write$tun(r10, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) kernel console output (not intermixed with test programs): ? __fget_files+0x2a/0x420 [ 314.664175][T14163] ? __fget_files+0x3a0/0x420 [ 314.664206][T14163] __x64_sys_sendmsg+0x19b/0x260 [ 314.664225][T14163] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 314.664247][T14163] ? __pfx_ksys_write+0x10/0x10 [ 314.664268][T14163] ? rcu_is_watching+0x15/0xb0 [ 314.664287][T14163] ? rcu_is_watching+0x15/0xb0 [ 314.664305][T14163] do_syscall_64+0xfa/0x3b0 [ 314.664331][T14163] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.664348][T14163] ? clear_bhb_loop+0x60/0xb0 [ 314.664368][T14163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.664384][T14163] RIP: 0033:0x7f33e1d8ebe9 [ 314.664400][T14163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 314.664417][T14163] RSP: 002b:00007f33e2c03038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 314.664436][T14163] RAX: ffffffffffffffda RBX: 00007f33e1fb5fa0 RCX: 00007f33e1d8ebe9 [ 314.664449][T14163] RDX: 0000000004004090 RSI: 00002000000002c0 RDI: 0000000000000003 [ 314.664460][T14163] RBP: 00007f33e2c03090 R08: 0000000000000000 R09: 0000000000000000 [ 314.664472][T14163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 314.664482][T14163] R13: 00007f33e1fb6038 R14: 00007f33e1fb5fa0 R15: 00007ffdf3a71bc8 [ 314.664502][T14163] [ 315.071692][T14159] __nla_validate_parse: 14 callbacks suppressed [ 315.071713][T14159] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2357'. [ 315.203945][T14181] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2365'. [ 315.213026][T14181] netlink: 'syz.0.2365': attribute type 8 has an invalid length. [ 315.421461][T14201] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2371'. [ 315.576523][T14217] FAULT_INJECTION: forcing a failure. [ 315.576523][T14217] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 315.591486][T14217] CPU: 0 UID: 0 PID: 14217 Comm: syz.2.2374 Not tainted syzkaller #0 PREEMPT(full) [ 315.591519][T14217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 315.591531][T14217] Call Trace: [ 315.591539][T14217] [ 315.591547][T14217] dump_stack_lvl+0x189/0x250 [ 315.591578][T14217] ? __pfx____ratelimit+0x10/0x10 [ 315.591608][T14217] ? __pfx_dump_stack_lvl+0x10/0x10 [ 315.591633][T14217] ? __pfx__printk+0x10/0x10 [ 315.591660][T14217] ? __might_fault+0xb0/0x130 [ 315.591694][T14217] ? rcu_is_watching+0x15/0xb0 [ 315.591716][T14217] should_fail_ex+0x414/0x560 [ 315.591747][T14217] _copy_from_user+0x2d/0xb0 [ 315.591772][T14217] kstrtouint_from_user+0xc4/0x170 [ 315.591803][T14217] ? __might_fault+0xb0/0x130 [ 315.591832][T14217] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 315.591869][T14217] ? vfs_write+0x211/0xb30 [ 315.591902][T14217] ? rcu_is_watching+0x15/0xb0 [ 315.591924][T14217] proc_fail_nth_write+0x88/0x200 [ 315.591948][T14217] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 315.591971][T14217] ? security_file_permission+0x75/0x290 [ 315.591999][T14217] ? preempt_count_add+0x91/0x1a0 [ 315.592030][T14217] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 315.592054][T14217] vfs_write+0x27b/0xb30 [ 315.592084][T14217] ? __pfx_vfs_write+0x10/0x10 [ 315.592116][T14217] ? __fget_files+0x3a0/0x420 [ 315.592147][T14217] ? __fget_files+0x2a/0x420 [ 315.592183][T14217] ksys_write+0x145/0x250 [ 315.592210][T14217] ? __pfx_ksys_write+0x10/0x10 [ 315.592235][T14217] ? rcu_is_watching+0x15/0xb0 [ 315.592258][T14217] ? rcu_is_watching+0x15/0xb0 [ 315.592279][T14217] do_syscall_64+0xfa/0x3b0 [ 315.592311][T14217] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.592331][T14217] ? clear_bhb_loop+0x60/0xb0 [ 315.592355][T14217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.592375][T14217] RIP: 0033:0x7f33e1d8d69f [ 315.592411][T14217] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 315.592431][T14217] RSP: 002b:00007f33e2c03030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 315.592454][T14217] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f33e1d8d69f [ 315.592470][T14217] RDX: 0000000000000001 RSI: 00007f33e2c030a0 RDI: 0000000000000004 [ 315.592483][T14217] RBP: 00007f33e2c03090 R08: 0000000000000000 R09: 0000000000000000 [ 315.592497][T14217] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 315.592510][T14217] R13: 00007f33e1fb6038 R14: 00007f33e1fb5fa0 R15: 00007ffdf3a71bc8 [ 315.592535][T14217] [ 315.918356][T14227] bond0: left promiscuous mode [ 315.923363][T14227] bond_slave_0: left promiscuous mode [ 315.927473][T14230] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2380'. [ 315.948670][T14227] bond_slave_1: left promiscuous mode [ 315.987646][T14227] bridge_slave_1: left promiscuous mode [ 316.010444][T14227] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 316.061787][T14239] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2381'. [ 316.071513][T14229] syzkaller0: entered promiscuous mode [ 316.078144][T14229] syzkaller0: entered allmulticast mode [ 316.091228][T14226] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2379'. [ 316.109195][T14240] syzkaller1: entered promiscuous mode [ 316.119240][T14240] syzkaller1: entered allmulticast mode [ 316.137094][T14239] veth0_macvtap: left promiscuous mode [ 316.407757][T14267] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2389'. [ 316.413659][T14263] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2387'. [ 316.420566][T14266] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2388'. [ 316.550307][T14270] netlink: 'syz.4.2390': attribute type 1 has an invalid length. [ 316.619864][T14278] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2391'. [ 316.646757][T14279] bond5: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 316.723246][T14270] veth15: entered promiscuous mode [ 316.731702][T14270] bond5: (slave veth15): Enslaving as a backup interface with a down link [ 316.746950][T14270] 8021q: adding VLAN 0 to HW filter on device bond5 [ 316.747731][ T37] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 316.906253][T14295] lo speed is unknown, defaulting to 1000 [ 316.914265][ T37] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 316.989879][T14298] tipc: Enabling of bearer rejected, already enabled [ 317.305046][T14325] netlink: zone id is out of range [ 317.343338][T14325] netlink: zone id is out of range [ 317.357753][T14322] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 317.378085][T14325] netlink: zone id is out of range [ 317.395260][T14325] netlink: zone id is out of range [ 317.445432][ T8705] lo speed is unknown, defaulting to 1000 [ 317.455403][T14325] netlink: zone id is out of range [ 317.460568][T14325] netlink: zone id is out of range [ 317.468753][T14328] netlink: 'syz.4.2406': attribute type 21 has an invalid length. [ 317.504748][T14331] netlink: 'syz.3.2407': attribute type 1 has an invalid length. [ 317.542938][T14331] netlink: 'syz.3.2407': attribute type 1 has an invalid length. [ 317.724193][ C1] syz_tun: tun_net_xmit 70 [ 318.086377][T14383] netlink: 'syz.4.2419': attribute type 83 has an invalid length. [ 318.301208][T14404] netlink: 'syz.0.2427': attribute type 4 has an invalid length. [ 318.492020][T14411] netlink: 'syz.4.2430': attribute type 62 has an invalid length. [ 318.647660][T14431] veth1_to_bond: entered allmulticast mode [ 318.668468][T14430] veth1_to_bond: left allmulticast mode [ 318.705141][T14437] netlink: 'syz.1.2438': attribute type 1 has an invalid length. [ 318.757655][T14437] bond9 (unregistering): Released all slaves [ 319.348704][T14503] syzkaller1: entered promiscuous mode [ 319.356823][T14503] syzkaller1: entered allmulticast mode [ 319.535960][T14515] vlan3: entered promiscuous mode [ 319.541355][T14515] vlan3: entered allmulticast mode [ 319.553496][T14515] hsr_slave_1: entered allmulticast mode [ 319.708846][T14524] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.749734][T14524] bridge_slave_1 (unregistering): left allmulticast mode [ 319.763876][T14524] bridge_slave_1 (unregistering): left promiscuous mode [ 319.777414][T14524] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.220812][T14553] __nla_validate_parse: 23 callbacks suppressed [ 320.220834][T14553] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2472'. [ 320.245678][T14554] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2473'. [ 320.291209][T14554] macvtap1: entered promiscuous mode [ 320.306437][T14554] vlan0: entered promiscuous mode [ 320.312413][T14554] macvtap1: entered allmulticast mode [ 320.319680][T14554] vlan0: entered allmulticast mode [ 320.326776][T14554] veth0_vlan: entered allmulticast mode [ 320.448340][T14564] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2477'. [ 320.486796][T14564] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2477'. [ 320.501507][T14572] FAULT_INJECTION: forcing a failure. [ 320.501507][T14572] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 320.532248][T14572] CPU: 1 UID: 0 PID: 14572 Comm: syz.0.2478 Not tainted syzkaller #0 PREEMPT(full) [ 320.532285][T14572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 320.532299][T14572] Call Trace: [ 320.532308][T14572] [ 320.532317][T14572] dump_stack_lvl+0x189/0x250 [ 320.532358][T14572] ? __pfx____ratelimit+0x10/0x10 [ 320.532389][T14572] ? __pfx_dump_stack_lvl+0x10/0x10 [ 320.532414][T14572] ? __pfx__printk+0x10/0x10 [ 320.532441][T14572] ? __might_fault+0xb0/0x130 [ 320.532475][T14572] ? rcu_is_watching+0x15/0xb0 [ 320.532509][T14572] should_fail_ex+0x414/0x560 [ 320.532542][T14572] _copy_from_user+0x2d/0xb0 [ 320.532568][T14572] ___sys_sendmsg+0x158/0x2a0 [ 320.532592][T14572] ? __pfx____sys_sendmsg+0x10/0x10 [ 320.532634][T14572] ? __fget_files+0x2a/0x420 [ 320.532666][T14572] ? __fget_files+0x3a0/0x420 [ 320.532704][T14572] __x64_sys_sendmsg+0x19b/0x260 [ 320.532728][T14572] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 320.532755][T14572] ? __pfx_ksys_write+0x10/0x10 [ 320.532787][T14572] ? rcu_is_watching+0x15/0xb0 [ 320.532809][T14572] do_syscall_64+0xfa/0x3b0 [ 320.532842][T14572] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.532863][T14572] ? clear_bhb_loop+0x60/0xb0 [ 320.532886][T14572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.532907][T14572] RIP: 0033:0x7fafc318ebe9 [ 320.532927][T14572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 320.532946][T14572] RSP: 002b:00007fafc3fa1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 320.532970][T14572] RAX: ffffffffffffffda RBX: 00007fafc33b6090 RCX: 00007fafc318ebe9 [ 320.532986][T14572] RDX: 0000000004004090 RSI: 00002000000002c0 RDI: 0000000000000003 [ 320.533000][T14572] RBP: 00007fafc3fa1090 R08: 0000000000000000 R09: 0000000000000000 [ 320.533014][T14572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 320.533026][T14572] R13: 00007fafc33b6128 R14: 00007fafc33b6090 R15: 00007ffe20d40ae8 [ 320.533051][T14572] [ 320.750773][T14575] netlink: 'syz.2.2480': attribute type 1 has an invalid length. [ 320.998197][T14593] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2486'. [ 321.129517][T14604] veth7: entered promiscuous mode [ 321.143204][T14604] veth7: entered allmulticast mode [ 321.162082][T14608] FAULT_INJECTION: forcing a failure. [ 321.162082][T14608] name failslab, interval 1, probability 0, space 0, times 0 [ 321.180034][T14608] CPU: 1 UID: 0 PID: 14608 Comm: syz.1.2491 Not tainted syzkaller #0 PREEMPT(full) [ 321.180068][T14608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 321.180082][T14608] Call Trace: [ 321.180091][T14608] [ 321.180100][T14608] dump_stack_lvl+0x189/0x250 [ 321.180133][T14608] ? __pfx____ratelimit+0x10/0x10 [ 321.180164][T14608] ? __pfx_dump_stack_lvl+0x10/0x10 [ 321.180189][T14608] ? __pfx__printk+0x10/0x10 [ 321.180221][T14608] ? fs_reclaim_acquire+0x7d/0x100 [ 321.180253][T14608] ? rcu_is_watching+0x15/0xb0 [ 321.180274][T14608] ? __pfx___might_resched+0x10/0x10 [ 321.180294][T14608] ? lock_acquire+0x5f/0x360 [ 321.180326][T14608] should_fail_ex+0x414/0x560 [ 321.180357][T14608] should_failslab+0xa8/0x100 [ 321.180389][T14608] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 321.180418][T14608] ? __alloc_skb+0x112/0x2d0 [ 321.180453][T14608] __alloc_skb+0x112/0x2d0 [ 321.180486][T14608] netlink_sendmsg+0x5c6/0xb30 [ 321.180524][T14608] ? __pfx_netlink_sendmsg+0x10/0x10 [ 321.180569][T14608] ? aa_sock_msg_perm+0xf1/0x1d0 [ 321.180589][T14608] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 321.180613][T14608] ? __pfx_netlink_sendmsg+0x10/0x10 [ 321.180645][T14608] __sock_sendmsg+0x21c/0x270 [ 321.180673][T14608] ____sys_sendmsg+0x505/0x830 [ 321.180698][T14608] ? __pfx_____sys_sendmsg+0x10/0x10 [ 321.180725][T14608] ? import_iovec+0x74/0xa0 [ 321.180751][T14608] ___sys_sendmsg+0x21f/0x2a0 [ 321.180773][T14608] ? __pfx____sys_sendmsg+0x10/0x10 [ 321.180815][T14608] ? __fget_files+0x2a/0x420 [ 321.180847][T14608] ? __fget_files+0x3a0/0x420 [ 321.180884][T14608] __x64_sys_sendmsg+0x19b/0x260 [ 321.180907][T14608] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 321.180935][T14608] ? __pfx_ksys_write+0x10/0x10 [ 321.180961][T14608] ? rcu_is_watching+0x15/0xb0 [ 321.180984][T14608] ? rcu_is_watching+0x15/0xb0 [ 321.181006][T14608] do_syscall_64+0xfa/0x3b0 [ 321.181038][T14608] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.181059][T14608] ? clear_bhb_loop+0x60/0xb0 [ 321.181083][T14608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.181104][T14608] RIP: 0033:0x7f4876f8ebe9 [ 321.181123][T14608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 321.181142][T14608] RSP: 002b:00007f4877e42038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 321.181166][T14608] RAX: ffffffffffffffda RBX: 00007f48771b5fa0 RCX: 00007f4876f8ebe9 [ 321.181182][T14608] RDX: 0000000004004090 RSI: 00002000000002c0 RDI: 0000000000000003 [ 321.181195][T14608] RBP: 00007f4877e42090 R08: 0000000000000000 R09: 0000000000000000 [ 321.181208][T14608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 321.181220][T14608] R13: 00007f48771b6038 R14: 00007f48771b5fa0 R15: 00007ffeca51fef8 [ 321.181246][T14608] [ 321.621429][T14627] net_ratelimit: 405 callbacks suppressed [ 321.621451][T14627] openvswitch: netlink: Message has 4 unknown bytes. [ 321.656260][T14631] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2499'. [ 321.665676][T14631] netlink: 'syz.3.2499': attribute type 9 has an invalid length. [ 321.701169][T14637] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2501'. [ 321.748634][T14632] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 321.778969][T14632] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 321.807433][T14632] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2500'. [ 321.818203][T14632] netlink: 'syz.4.2500': attribute type 7 has an invalid length. [ 321.857369][T14632] netlink: 'syz.4.2500': attribute type 8 has an invalid length. [ 321.867368][T14632] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2500'. [ 321.957204][T14659] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2506'. [ 322.046985][T14663] can: request_module (can-proto-0) failed. [ 322.070208][T14663] geneve2: entered promiscuous mode [ 322.093563][T14663] geneve2: entered allmulticast mode [ 322.282423][T14685] netlink: 'syz.4.2513': attribute type 29 has an invalid length. [ 322.292480][T14685] netlink: 'syz.4.2513': attribute type 29 has an invalid length. [ 322.304761][T14685] netlink: 'syz.4.2513': attribute type 29 has an invalid length. [ 322.316647][T14685] netlink: 'syz.4.2513': attribute type 29 has an invalid length. [ 322.373590][T14691] netlink: 'syz.1.2515': attribute type 10 has an invalid length. [ 322.420702][T14691] batman_adv: batadv0: Adding interface: team0 [ 322.430308][T14691] batman_adv: batadv0: The MTU of interface team0 is too small (1536) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1596 would solve the problem. [ 322.459137][T14691] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 322.615065][T14720] netlink: 'syz.2.2524': attribute type 10 has an invalid length. [ 322.626094][T14720] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.634489][T14720] bridge_slave_1: left allmulticast mode [ 322.640168][T14720] bridge_slave_1: left promiscuous mode [ 322.646193][T14720] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.662717][T14720] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 322.833035][T14742] openvswitch: netlink: Flow actions attr not present in new flow. [ 323.042525][T14761] pim6reg1: entered promiscuous mode [ 323.068732][T14761] pim6reg1: entered allmulticast mode [ 323.151012][T14769] pim6reg1: entered promiscuous mode [ 323.157658][T14769] pim6reg1: entered allmulticast mode [ 323.176756][T14769] netlink: 'syz.1.2538': attribute type 62 has an invalid length. [ 324.407127][T14868] ip6gre1: entered allmulticast mode [ 324.593367][T14884] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 324.838931][T14911] netlink: zone id is out of range [ 324.851259][T14910] netlink: 'syz.4.2580': attribute type 11 has an invalid length. [ 324.854656][T14911] gtp0: entered promiscuous mode [ 324.866161][T14911] gtp0: entered allmulticast mode [ 325.239397][T14942] bridge: RTM_NEWNEIGH with invalid ether address [ 325.437898][T14962] __nla_validate_parse: 15 callbacks suppressed [ 325.437924][T14962] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2599'. [ 325.471638][T14962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2599'. [ 325.749624][T14993] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2610'. [ 325.778056][T14993] 8021q: adding VLAN 0 to HW filter on device bond11 [ 326.098835][T15019] rdma_rxe: rxe_newlink: failed to add lo [ 326.497421][T15040] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2621'. [ 326.517313][T15040] tipc: Enabling of bearer rejected, failed to enable media [ 326.650063][T15050] openvswitch: netlink: Key 9 has unexpected len 0 expected 4 [ 326.663080][T15049] netlink: 788 bytes leftover after parsing attributes in process `syz.0.2625'. [ 326.759382][T15050] netlink: 788 bytes leftover after parsing attributes in process `syz.0.2625'. [ 326.866043][T15059] netlink: 'syz.3.2626': attribute type 11 has an invalid length. [ 326.874943][T15059] netlink: 'syz.3.2626': attribute type 11 has an invalid length. [ 326.882898][T15059] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2626'. [ 327.127666][T15079] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2632'. [ 327.202419][T15087] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2635'. [ 327.577501][T15128] validate_nla: 7 callbacks suppressed [ 327.577527][T15128] netlink: 'syz.1.2647': attribute type 16 has an invalid length. [ 327.641313][T15133] vlan1: entered promiscuous mode [ 327.649296][T15133] vlan1: entered allmulticast mode [ 327.655513][T15133] hsr_slave_1: entered allmulticast mode [ 327.680394][T15136] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2650'. [ 327.737863][T15142] nbd: nbd0 already in use [ 327.873039][T15147] sit2: entered promiscuous mode [ 327.879498][T15147] sit2: entered allmulticast mode [ 327.894865][T15147] !: renamed from dummy0 (while UP) [ 327.983751][T15155] netlink: 'syz.0.2656': attribute type 1 has an invalid length. [ 328.002824][T15151] netlink: 'syz.2.2654': attribute type 33 has an invalid length. [ 328.043349][T15155] smc: adding net device bond0 with user defined pnetid SYZ2 [ 328.080891][T15160] 8021q: adding VLAN 0 to HW filter on device bond10 [ 328.097307][T15160] bond0: (slave bond10): making interface the new active one [ 328.109232][T15160] bond0: (slave bond10): Enslaving as an active interface with an up link [ 328.122570][T15161] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 328.152367][T15155] bond0: (slave gretap2): Enslaving as a backup interface with an up link [ 328.178664][T15155] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.392848][T15184] tipc: Enabled bearer , priority 0 [ 328.419904][T15184] syzkaller0: entered promiscuous mode [ 328.427242][T15184] syzkaller0: entered allmulticast mode [ 328.464188][T15184] tipc: Resetting bearer [ 328.492260][T15183] tipc: Resetting bearer [ 328.503715][T15183] tipc: Disabling bearer [ 328.650819][T15207] veth9: entered allmulticast mode [ 328.815991][T15222] netlink: 'syz.0.2676': attribute type 5 has an invalid length. [ 328.841713][T15220] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 328.975596][T15230] delete_channel: no stack [ 329.078424][T15239] netlink: 'syz.1.2682': attribute type 2 has an invalid length. [ 329.410994][T15272] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 329.501360][T15272] tipc: Resetting bearer [ 329.870012][T15307] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 330.196821][T15341] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 330.198174][T15340] veth0: entered promiscuous mode [ 330.243606][T15337] veth0: left promiscuous mode [ 330.474683][T15364] __nla_validate_parse: 18 callbacks suppressed [ 330.474711][T15364] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2721'. [ 330.528611][T15368] blkio.reset_stats is deprecated [ 330.535315][T15364] veth10: entered allmulticast mode [ 330.549658][T15372] netlink: 'syz.1.2725': attribute type 10 has an invalid length. [ 330.577634][T15372] bond0: (slave wlan1): Opening slave failed [ 330.804892][T15393] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2731'. [ 330.868530][T15399] netlink: 'syz.2.2734': attribute type 1 has an invalid length. [ 330.889261][T15399] netlink: 'syz.2.2734': attribute type 2 has an invalid length. [ 330.898146][T15397] netlink: 'syz.3.2733': attribute type 4 has an invalid length. [ 330.946365][T15399] netlink: 'syz.2.2734': attribute type 1 has an invalid length. [ 331.225992][T15430] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2742'. [ 331.249517][T15430] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2742'. [ 331.291422][T15426] lo speed is unknown, defaulting to 1000 [ 331.301636][T15433] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2745'. [ 331.305913][T15435] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2746'. [ 331.312111][T15433] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2745'. [ 331.335157][T15435] gretap0: entered promiscuous mode [ 331.351214][T15433] bridge0: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 331.365221][T15436] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2746'. [ 331.396699][T15433] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.396893][T15439] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 331.429241][T15436] 0ªî{X¹¦: renamed from gretap0 [ 331.438477][T15436] 0ªî{X¹¦: left promiscuous mode [ 331.443569][T15436] 0ªî{X¹¦: entered allmulticast mode [ 331.463225][T15436] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 331.647899][T15451] 8021q: adding VLAN 0 to HW filter on device bond12 [ 331.915090][T15431] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2744'. [ 332.244634][T15505] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2764'. [ 332.840924][T15546] : entered promiscuous mode [ 332.883568][T15551] sctp: [Deprecated]: syz.3.2781 (pid 15551) Use of int in maxseg socket option. [ 332.883568][T15551] Use struct sctp_assoc_value instead [ 332.911579][T15551] IPVS: set_ctl: invalid protocol: 137 172.20.20.170:20001 [ 333.375679][T15591] tipc: Enabling of bearer rejected, already enabled [ 333.405401][ T5874] Bluetooth: hci0: command tx timeout [ 333.425155][T15600] validate_nla: 5 callbacks suppressed [ 333.425170][T15600] netlink: 'syz.1.2796': attribute type 2 has an invalid length. [ 333.442392][T15600] netlink: 'syz.1.2796': attribute type 10 has an invalid length. [ 333.451584][T15600] bond0: (slave wlan1): Opening slave failed [ 333.692203][T15616] netlink: 'syz.3.2801': attribute type 7 has an invalid length. [ 333.702417][T15617] netlink: 'syz.3.2801': attribute type 7 has an invalid length. [ 333.774822][T15629] netlink: 'syz.3.2805': attribute type 1 has an invalid length. [ 333.820206][T15630] bond13 (unregistering): Released all slaves [ 334.088310][T15651] IPv6: sit1: Disabled Multicast RS [ 334.099399][T15651] sit1: entered allmulticast mode [ 334.382140][T15687] syz_tun: tun_net_xmit 42 [ 334.419178][T15687] syz_tun: tun_net_xmit 42 [ 334.442530][T15687] syz_tun: tun_net_xmit 42 [ 334.453455][T15687] syz_tun: tun_net_xmit 42 [ 334.475840][T15687] syz_tun: tun_net_xmit 42 [ 334.505852][T15687] syz_tun: tun_net_xmit 42 [ 334.511735][T15687] syz_tun: tun_net_xmit 42 [ 334.531759][T15687] syz_tun: tun_net_xmit 42 [ 334.537257][T15687] syz_tun: tun_net_xmit 42 [ 334.541966][T15687] syz_tun: tun_net_xmit 42 [ 334.552862][T15687] syz_tun: tun_net_xmit 42 [ 334.559825][T15687] syz_tun: tun_net_xmit 42 [ 334.583635][T15687] syz_tun: tun_net_xmit 42 [ 334.608703][T15687] syz_tun: tun_net_xmit 42 [ 334.613387][T15687] syz_tun: tun_net_xmit 42 [ 334.619648][T15687] syz_tun: tun_net_xmit 42 [ 334.631660][T15687] syz_tun: tun_net_xmit 42 [ 334.661820][T15687] syz_tun: tun_net_xmit 42 [ 334.668855][T15687] syz_tun: tun_net_xmit 42 [ 334.681546][T15687] syz_tun: tun_net_xmit 42 [ 334.690620][T15708] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 334.702481][T15687] syz_tun: tun_net_xmit 42 [ 334.710945][T15708] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 334.722184][T15687] syz_tun: tun_net_xmit 42 [ 334.732056][T15687] syz_tun: tun_net_xmit 42 [ 334.743056][T15708] IPv6: sit3: Disabled Multicast RS [ 334.745843][T15687] syz_tun: tun_net_xmit 42 [ 334.759793][T15708] sit3: entered allmulticast mode [ 334.763389][T15687] syz_tun: tun_net_xmit 42 [ 334.782257][T15687] syz_tun: tun_net_xmit 42 [ 334.799871][T15687] syz_tun: tun_net_xmit 42 [ 334.819876][T15687] syz_tun: tun_net_xmit 42 [ 334.837076][T15687] syz_tun: tun_net_xmit 42 [ 334.850269][T15687] syz_tun: tun_net_xmit 42 [ 334.867626][T15687] syz_tun: tun_net_xmit 42 [ 334.880674][T15687] syz_tun: tun_net_xmit 42 [ 334.899670][T15687] syz_tun: tun_net_xmit 42 [ 334.916615][T15687] syz_tun: tun_net_xmit 42 [ 334.929255][T15687] syz_tun: tun_net_xmit 42 [ 334.948500][T15687] syz_tun: tun_net_xmit 42 [ 334.958657][T15687] syz_tun: tun_net_xmit 42 [ 334.992360][T15687] syz_tun: tun_net_xmit 42 [ 335.016601][T15687] syz_tun: tun_net_xmit 42 [ 335.033476][T15687] syz_tun: tun_net_xmit 42 [ 335.055945][T15687] syz_tun: tun_net_xmit 42 [ 335.067856][T15687] syz_tun: tun_net_xmit 42 [ 335.076368][T15687] syz_tun: tun_net_xmit 42 [ 335.081121][T15687] syz_tun: tun_net_xmit 42 [ 335.092282][T15687] syz_tun: tun_net_xmit 42 [ 335.100519][T15687] syz_tun: tun_net_xmit 42 [ 335.123665][T15687] syz_tun: tun_net_xmit 42 [ 335.139324][T15687] syz_tun: tun_net_xmit 42 [ 335.163599][T15687] syz_tun: tun_net_xmit 42 [ 335.174909][T15687] syz_tun: tun_net_xmit 42 [ 335.184610][T15687] syz_tun: tun_net_xmit 42 [ 335.189258][T15687] syz_tun: tun_net_xmit 42 [ 335.226796][T15687] syz_tun: tun_net_xmit 42 [ 335.231475][T15687] syz_tun: tun_net_xmit 42 [ 335.254709][T15687] syz_tun: tun_net_xmit 42 [ 335.259833][T15687] syz_tun: tun_net_xmit 42 [ 335.265502][T15687] syz_tun: tun_net_xmit 42 [ 335.271134][T15687] syz_tun: tun_net_xmit 42 [ 335.279793][T15739] netlink: 'syz.3.2834': attribute type 10 has an invalid length. [ 335.333066][T15687] syz_tun: tun_net_xmit 42 [ 335.345499][T15687] syz_tun: tun_net_xmit 42 [ 335.350253][T15687] syz_tun: tun_net_xmit 42 [ 335.404724][T15687] syz_tun: tun_net_xmit 42 [ 335.409474][T15687] syz_tun: tun_net_xmit 42 [ 335.414772][T15687] syz_tun: tun_net_xmit 42 [ 335.419428][T15687] syz_tun: tun_net_xmit 42 [ 335.444189][T15687] syz_tun: tun_net_xmit 42 [ 335.449107][T15687] syz_tun: tun_net_xmit 42 [ 335.459193][T15687] syz_tun: tun_net_xmit 42 [ 335.494202][T15687] syz_tun: tun_net_xmit 42 [ 335.498911][T15687] syz_tun: tun_net_xmit 42 [ 335.503520][T15687] syz_tun: tun_net_xmit 42 [ 335.522915][T15748] __nla_validate_parse: 12 callbacks suppressed [ 335.522939][T15748] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2838'. [ 335.539261][T15687] syz_tun: tun_net_xmit 42 [ 335.551749][T15687] syz_tun: tun_net_xmit 42 [ 335.560372][T15687] syz_tun: tun_net_xmit 42 [ 335.570168][T15687] syz_tun: tun_net_xmit 42 [ 335.579863][T15687] syz_tun: tun_net_xmit 42 [ 335.584717][T15687] syz_tun: tun_net_xmit 42 [ 335.594723][T15687] syz_tun: tun_net_xmit 42 [ 335.605289][T15687] syz_tun: tun_net_xmit 42 [ 335.650774][T15687] syz_tun: tun_net_xmit 42 [ 335.658709][T15687] syz_tun: tun_net_xmit 42 [ 335.663498][T15687] syz_tun: tun_net_xmit 42 [ 335.669152][T15687] syz_tun: tun_net_xmit 42 [ 335.674087][T15687] syz_tun: tun_net_xmit 42 [ 335.678665][T15687] syz_tun: tun_net_xmit 42 [ 335.683225][T15687] syz_tun: tun_net_xmit 42 [ 335.705414][ T5183] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 335.712579][T15687] syz_tun: tun_net_xmit 42 [ 335.725302][T15755] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2840'. [ 335.734513][ T5183] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 335.741767][T15687] syz_tun: tun_net_xmit 42 [ 335.748963][ T5183] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 335.758901][T15687] syz_tun: tun_net_xmit 42 [ 335.767075][ T5183] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 335.775331][T15687] syz_tun: tun_net_xmit 42 [ 335.780096][T15687] syz_tun: tun_net_xmit 42 [ 335.785658][T15687] syz_tun: tun_net_xmit 42 [ 335.790356][ T5183] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 335.797958][T15687] syz_tun: tun_net_xmit 42 [ 335.803243][T15687] syz_tun: tun_net_xmit 42 [ 335.808594][T15687] syz_tun: tun_net_xmit 42 [ 335.813315][T15687] syz_tun: tun_net_xmit 42 [ 335.818887][T15687] syz_tun: tun_net_xmit 42 [ 335.821272][ T5874] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 335.823528][T15687] syz_tun: tun_net_xmit 42 [ 335.835035][ T5874] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 335.835314][ T5874] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 335.842670][T15687] syz_tun: tun_net_xmit 42 [ 335.852281][ T5874] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 335.863309][ T5874] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 335.864282][T15687] syz_tun: tun_net_xmit 42 [ 335.893816][T15687] syz_tun: tun_net_xmit 42 [ 335.903408][T15763] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2842'. [ 335.924084][T15687] syz_tun: tun_net_xmit 42 [ 335.934504][T15687] syz_tun: tun_net_xmit 42 [ 335.942654][ T801] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.955106][ T801] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.969481][T15687] syz_tun: tun_net_xmit 42 [ 335.977666][T15687] syz_tun: tun_net_xmit 42 [ 335.987710][T15687] syz_tun: tun_net_xmit 42 [ 335.992590][T15687] syz_tun: tun_net_xmit 42 [ 335.997707][T15687] syz_tun: tun_net_xmit 42 [ 336.002652][T15687] syz_tun: tun_net_xmit 42 [ 336.007690][T15687] syz_tun: tun_net_xmit 42 [ 336.012794][T15687] syz_tun: tun_net_xmit 42 [ 336.019550][T15752] lo speed is unknown, defaulting to 1000 [ 336.022934][T15687] syz_tun: tun_net_xmit 42 [ 336.030051][T15687] syz_tun: tun_net_xmit 42 [ 336.037459][T15687] syz_tun: tun_net_xmit 42 [ 336.042115][T15687] syz_tun: tun_net_xmit 42 [ 336.048226][T15687] syz_tun: tun_net_xmit 42 [ 336.052875][T15687] syz_tun: tun_net_xmit 42 [ 336.057568][T15687] syz_tun: tun_net_xmit 42 [ 336.062461][T15687] syz_tun: tun_net_xmit 42 [ 336.068112][T15687] syz_tun: tun_net_xmit 42 [ 336.072900][T15687] syz_tun: tun_net_xmit 42 [ 336.078408][T15687] syz_tun: tun_net_xmit 42 [ 336.083088][T15687] syz_tun: tun_net_xmit 42 [ 336.090393][T15687] syz_tun: tun_net_xmit 42 [ 336.096758][T15687] syz_tun: tun_net_xmit 42 [ 336.102456][ T801] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 336.127659][ T801] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.144951][T15687] syz_tun: tun_net_xmit 42 [ 336.149579][T15687] syz_tun: tun_net_xmit 42 [ 336.156330][T15687] syz_tun: tun_net_xmit 42 [ 336.162328][T15687] syz_tun: tun_net_xmit 42 [ 336.168629][T15687] syz_tun: tun_net_xmit 42 [ 336.170553][T15773] Bluetooth: MGMT ver 1.23 [ 336.180469][T15687] syz_tun: tun_net_xmit 42 [ 336.191576][T15770] wg2: entered promiscuous mode [ 336.196961][T15687] syz_tun: tun_net_xmit 42 [ 336.202696][T15770] wg2: entered allmulticast mode [ 336.212402][T15687] syz_tun: tun_net_xmit 42 [ 336.233096][T15687] syz_tun: tun_net_xmit 42 [ 336.253346][T15687] syz_tun: tun_net_xmit 42 [ 336.266138][T15687] syz_tun: tun_net_xmit 42 [ 336.267369][ T801] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 336.277113][T15687] syz_tun: tun_net_xmit 42 [ 336.291980][ T801] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.303039][T15687] syz_tun: tun_net_xmit 42 [ 336.319251][T15687] syz_tun: tun_net_xmit 42 [ 336.325646][T15687] syz_tun: tun_net_xmit 42 [ 336.330315][T15687] syz_tun: tun_net_xmit 42 [ 336.335417][T15687] syz_tun: tun_net_xmit 42 [ 336.340404][T15687] syz_tun: tun_net_xmit 42 [ 336.350546][T15687] syz_tun: tun_net_xmit 42 [ 336.356071][T15687] syz_tun: tun_net_xmit 42 [ 336.361793][T15687] syz_tun: tun_net_xmit 42 [ 336.369988][T15687] syz_tun: tun_net_xmit 42 [ 336.375869][T15687] syz_tun: tun_net_xmit 42 [ 336.381019][T15687] syz_tun: tun_net_xmit 42 [ 336.386503][T15687] syz_tun: tun_net_xmit 42 [ 336.391219][T15687] syz_tun: tun_net_xmit 42 [ 336.398691][T15687] syz_tun: tun_net_xmit 42 [ 336.400483][ T801] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 336.403418][T15687] syz_tun: tun_net_xmit 42 [ 336.418922][T15687] syz_tun: tun_net_xmit 42 [ 336.423568][T15687] syz_tun: tun_net_xmit 42 [ 336.424222][ T801] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.432798][T15687] syz_tun: tun_net_xmit 42 [ 336.443452][T15687] syz_tun: tun_net_xmit 42 [ 336.451204][T15687] syz_tun: tun_net_xmit 42 [ 336.456767][T15687] syz_tun: tun_net_xmit 42 [ 336.461453][T15687] syz_tun: tun_net_xmit 42 [ 336.466298][T15687] syz_tun: tun_net_xmit 42 [ 336.470977][T15687] syz_tun: tun_net_xmit 42 [ 336.476804][T15687] syz_tun: tun_net_xmit 42 [ 336.481514][T15687] syz_tun: tun_net_xmit 42 [ 336.515684][T15687] syz_tun: tun_net_xmit 42 [ 336.531680][T15687] syz_tun: tun_net_xmit 42 [ 336.565132][T15687] syz_tun: tun_net_xmit 42 [ 336.572071][T15687] syz_tun: tun_net_xmit 42 [ 336.596484][T15687] syz_tun: tun_net_xmit 42 [ 336.610127][T15687] syz_tun: tun_net_xmit 42 [ 336.617379][T15687] syz_tun: tun_net_xmit 42 [ 336.622252][T15687] syz_tun: tun_net_xmit 42 [ 336.630418][T15687] syz_tun: tun_net_xmit 42 [ 336.635847][T15687] syz_tun: tun_net_xmit 42 [ 336.640589][T15687] syz_tun: tun_net_xmit 42 [ 336.646588][T15687] syz_tun: tun_net_xmit 42 [ 336.651278][T15687] syz_tun: tun_net_xmit 42 [ 336.656790][T15687] syz_tun: tun_net_xmit 42 [ 336.661698][T15687] syz_tun: tun_net_xmit 42 [ 336.666934][T15687] syz_tun: tun_net_xmit 42 [ 336.671591][T15687] syz_tun: tun_net_xmit 42 [ 336.676543][T15687] syz_tun: tun_net_xmit 42 [ 336.681219][T15687] syz_tun: tun_net_xmit 42 [ 336.681403][T15798] veth15: entered allmulticast mode [ 336.689731][T15687] syz_tun: tun_net_xmit 42 [ 336.696696][T15687] syz_tun: tun_net_xmit 42 [ 336.701585][T15687] syz_tun: tun_net_xmit 42 [ 336.706247][T15687] syz_tun: tun_net_xmit 42 [ 336.710831][T15687] syz_tun: tun_net_xmit 42 [ 336.716466][T15687] syz_tun: tun_net_xmit 42 [ 336.721035][T15687] syz_tun: tun_net_xmit 42 [ 336.726097][T15687] syz_tun: tun_net_xmit 42 [ 336.730792][T15687] syz_tun: tun_net_xmit 42 [ 336.735469][T15687] syz_tun: tun_net_xmit 42 [ 336.740926][T15687] syz_tun: tun_net_xmit 42 [ 336.751088][T15687] syz_tun: tun_net_xmit 42 [ 336.761195][T15687] syz_tun: tun_net_xmit 42 [ 336.771318][T15687] syz_tun: tun_net_xmit 42 [ 336.781457][T15687] syz_tun: tun_net_xmit 42 [ 336.791560][T15687] syz_tun: tun_net_xmit 42 [ 336.806186][T15687] syz_tun: tun_net_xmit 42 [ 336.821073][T15687] syz_tun: tun_net_xmit 42 [ 336.827035][T15687] syz_tun: tun_net_xmit 42 [ 336.838324][T15687] syz_tun: tun_net_xmit 42 [ 336.843141][T15687] syz_tun: tun_net_xmit 42 [ 336.857131][T15752] chnl_net:caif_netlink_parms(): no params data found [ 336.859586][T15687] syz_tun: tun_net_xmit 42 [ 336.871450][T15687] syz_tun: tun_net_xmit 42 [ 336.877928][ T801] bridge_slave_0: left allmulticast mode [ 336.881566][T15687] syz_tun: tun_net_xmit 42 [ 336.888111][ T801] bridge_slave_0: left promiscuous mode [ 336.888377][ T801] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.901973][T15687] syz_tun: tun_net_xmit 42 [ 336.908013][T15687] syz_tun: tun_net_xmit 42 [ 336.911257][T15803] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2853'. [ 336.912846][T15687] syz_tun: tun_net_xmit 42 [ 336.931263][T15687] syz_tun: tun_net_xmit 42 [ 336.937656][T15687] syz_tun: tun_net_xmit 42 [ 336.942271][T15687] syz_tun: tun_net_xmit 42 [ 336.949288][T15687] syz_tun: tun_net_xmit 42 [ 336.954972][T15687] syz_tun: tun_net_xmit 42 [ 336.959735][T15687] syz_tun: tun_net_xmit 42 [ 336.966544][T15687] syz_tun: tun_net_xmit 42 [ 336.971271][T15687] syz_tun: tun_net_xmit 42 [ 336.977196][T15687] syz_tun: tun_net_xmit 42 [ 336.981981][T15687] syz_tun: tun_net_xmit 42 [ 336.987706][T15687] syz_tun: tun_net_xmit 42 [ 336.992396][T15687] syz_tun: tun_net_xmit 42 [ 336.997418][T15687] syz_tun: tun_net_xmit 42 [ 337.002168][T15687] syz_tun: tun_net_xmit 42 [ 337.007116][T15687] syz_tun: tun_net_xmit 42 [ 337.011782][T15687] syz_tun: tun_net_xmit 42 [ 337.017605][T15687] syz_tun: tun_net_xmit 42 [ 337.022272][T15687] syz_tun: tun_net_xmit 42 [ 337.027288][T15687] syz_tun: tun_net_xmit 42 [ 337.032224][T15687] syz_tun: tun_net_xmit 42 [ 337.037165][T15687] syz_tun: tun_net_xmit 42 [ 337.041949][T15687] syz_tun: tun_net_xmit 42 [ 337.047645][T15687] syz_tun: tun_net_xmit 42 [ 337.052305][T15687] syz_tun: tun_net_xmit 42 [ 337.067416][T15687] syz_tun: tun_net_xmit 42 [ 337.072202][T15687] syz_tun: tun_net_xmit 42 [ 337.094131][T15687] syz_tun: tun_net_xmit 42 [ 337.098965][T15687] syz_tun: tun_net_xmit 42 [ 337.103826][T15687] syz_tun: tun_net_xmit 42 [ 337.109298][T15687] syz_tun: tun_net_xmit 42 [ 337.114722][T15687] syz_tun: tun_net_xmit 42 [ 337.119666][T15687] syz_tun: tun_net_xmit 42 [ 337.124478][T15687] syz_tun: tun_net_xmit 42 [ 337.129136][T15687] syz_tun: tun_net_xmit 42 [ 337.135985][T15687] syz_tun: tun_net_xmit 42 [ 337.142491][T15687] syz_tun: tun_net_xmit 42 [ 337.148040][T15687] syz_tun: tun_net_xmit 42 [ 337.152835][T15687] syz_tun: tun_net_xmit 42 [ 337.159106][T15687] syz_tun: tun_net_xmit 42 [ 337.168135][T15687] syz_tun: tun_net_xmit 42 [ 337.173584][T15687] syz_tun: tun_net_xmit 42 [ 337.181215][T15687] syz_tun: tun_net_xmit 42 [ 337.186100][T15687] syz_tun: tun_net_xmit 42 [ 337.190886][T15687] syz_tun: tun_net_xmit 42 [ 337.199343][T15687] syz_tun: tun_net_xmit 42 [ 337.204791][T15687] syz_tun: tun_net_xmit 42 [ 337.209837][T15687] syz_tun: tun_net_xmit 42 [ 337.216404][T15687] syz_tun: tun_net_xmit 42 [ 337.221189][T15687] syz_tun: tun_net_xmit 42 [ 337.226806][T15687] syz_tun: tun_net_xmit 42 [ 337.231436][T15687] syz_tun: tun_net_xmit 42 [ 337.243816][T15687] syz_tun: tun_net_xmit 42 [ 337.249045][T15687] syz_tun: tun_net_xmit 42 [ 337.256301][T15687] syz_tun: tun_net_xmit 42 [ 337.261312][T15687] syz_tun: tun_net_xmit 42 [ 337.267008][T15687] syz_tun: tun_net_xmit 42 [ 337.271785][T15687] syz_tun: tun_net_xmit 42 [ 337.279048][T15687] syz_tun: tun_net_xmit 42 [ 337.285027][T15687] syz_tun: tun_net_xmit 42 [ 337.289900][T15687] syz_tun: tun_net_xmit 42 [ 337.296719][T15687] syz_tun: tun_net_xmit 42 [ 337.301521][T15687] syz_tun: tun_net_xmit 42 [ 337.306911][T15687] syz_tun: tun_net_xmit 42 [ 337.307177][ T801] bond0 (unregistering): (slave gretap2): Releasing backup interface [ 337.311648][T15687] syz_tun: tun_net_xmit 42 [ 337.327142][T15687] syz_tun: tun_net_xmit 42 [ 337.331882][T15687] syz_tun: tun_net_xmit 42 [ 337.337039][T15687] syz_tun: tun_net_xmit 42 [ 337.341752][T15687] syz_tun: tun_net_xmit 42 [ 337.349357][T15687] syz_tun: tun_net_xmit 42 [ 337.356073][T15687] syz_tun: tun_net_xmit 42 [ 337.361037][T15687] syz_tun: tun_net_xmit 42 [ 337.366016][T15687] syz_tun: tun_net_xmit 42 [ 337.370842][T15687] syz_tun: tun_net_xmit 42 [ 337.375724][T15687] syz_tun: tun_net_xmit 42 [ 337.375907][ T801] dvmrp1 (unregistering): left allmulticast mode [ 337.380371][T15687] syz_tun: tun_net_xmit 42 [ 337.392917][T15687] syz_tun: tun_net_xmit 42 [ 337.397947][T15687] syz_tun: tun_net_xmit 42 [ 337.402630][T15687] syz_tun: tun_net_xmit 42 [ 337.403022][ T801] bond1 (unregistering): (slave geneve2): Releasing active interface [ 337.407670][T15687] syz_tun: tun_net_xmit 42 [ 337.421922][T15687] syz_tun: tun_net_xmit 42 [ 337.426725][T15687] syz_tun: tun_net_xmit 42 [ 337.431460][T15687] syz_tun: tun_net_xmit 42 [ 337.436456][T15687] syz_tun: tun_net_xmit 42 [ 337.441378][T15687] syz_tun: tun_net_xmit 42 [ 337.447148][T15687] syz_tun: tun_net_xmit 42 [ 337.451954][T15687] syz_tun: tun_net_xmit 42 [ 337.456944][T15687] syz_tun: tun_net_xmit 42 [ 337.462056][T15687] syz_tun: tun_net_xmit 42 [ 337.467469][T15687] syz_tun: tun_net_xmit 42 [ 337.472293][T15687] syz_tun: tun_net_xmit 42 [ 337.478106][T15687] syz_tun: tun_net_xmit 42 [ 337.483094][T15687] syz_tun: tun_net_xmit 42 [ 337.488094][T15687] syz_tun: tun_net_xmit 42 [ 337.493135][T15687] syz_tun: tun_net_xmit 42 [ 337.498658][T15687] syz_tun: tun_net_xmit 42 [ 337.503374][T15687] syz_tun: tun_net_xmit 42 [ 337.508433][T15687] syz_tun: tun_net_xmit 42 [ 337.513104][T15687] syz_tun: tun_net_xmit 42 [ 337.517799][T15687] syz_tun: tun_net_xmit 42 [ 337.522353][T15687] syz_tun: tun_net_xmit 42 [ 337.527188][T15687] syz_tun: tun_net_xmit 42 [ 337.531977][T15687] syz_tun: tun_net_xmit 42 [ 337.536918][T15687] syz_tun: tun_net_xmit 42 [ 337.541502][T15687] syz_tun: tun_net_xmit 42 [ 337.546331][T15687] syz_tun: tun_net_xmit 42 [ 337.550950][T15687] syz_tun: tun_net_xmit 42 [ 337.555864][T15687] syz_tun: tun_net_xmit 42 [ 337.560526][T15687] syz_tun: tun_net_xmit 42 [ 337.566527][T15687] syz_tun: tun_net_xmit 42 [ 337.571318][T15687] syz_tun: tun_net_xmit 42 [ 337.576173][T15687] syz_tun: tun_net_xmit 42 [ 337.580750][T15687] syz_tun: tun_net_xmit 42 [ 337.586114][T15687] syz_tun: tun_net_xmit 42 [ 337.590735][T15687] syz_tun: tun_net_xmit 42 [ 337.595657][T15687] syz_tun: tun_net_xmit 42 [ 337.600360][T15687] syz_tun: tun_net_xmit 42 [ 337.605835][T15687] syz_tun: tun_net_xmit 42 [ 337.610603][T15687] syz_tun: tun_net_xmit 42 [ 337.616145][T15687] syz_tun: tun_net_xmit 42 [ 337.620930][T15687] syz_tun: tun_net_xmit 42 [ 337.626501][T15687] syz_tun: tun_net_xmit 42 [ 337.631199][T15687] syz_tun: tun_net_xmit 42 [ 337.636625][T15687] syz_tun: tun_net_xmit 42 [ 337.641398][T15687] syz_tun: tun_net_xmit 42 [ 337.646186][T15687] syz_tun: tun_net_xmit 42 [ 337.650769][T15687] syz_tun: tun_net_xmit 42 [ 337.655498][T15687] syz_tun: tun_net_xmit 42 [ 337.660148][T15687] syz_tun: tun_net_xmit 42 [ 337.665956][T15687] syz_tun: tun_net_xmit 42 [ 337.670603][T15687] syz_tun: tun_net_xmit 42 [ 337.675437][T15687] syz_tun: tun_net_xmit 42 [ 337.680106][T15687] syz_tun: tun_net_xmit 42 [ 337.685035][T15687] syz_tun: tun_net_xmit 42 [ 337.689803][T15687] syz_tun: tun_net_xmit 42 [ 337.695054][T15687] syz_tun: tun_net_xmit 42 [ 337.700205][T15687] syz_tun: tun_net_xmit 42 [ 337.705399][T15687] syz_tun: tun_net_xmit 42 [ 337.710131][T15687] syz_tun: tun_net_xmit 42 [ 337.715073][T15687] syz_tun: tun_net_xmit 42 [ 337.719936][T15687] syz_tun: tun_net_xmit 42 [ 337.725464][T15687] syz_tun: tun_net_xmit 42 [ 337.730080][T15687] syz_tun: tun_net_xmit 42 [ 337.734994][T15687] syz_tun: tun_net_xmit 42 [ 337.739684][T15687] syz_tun: tun_net_xmit 42 [ 337.744442][T15687] syz_tun: tun_net_xmit 42 [ 337.749251][T15687] syz_tun: tun_net_xmit 42 [ 337.754010][T15687] syz_tun: tun_net_xmit 42 [ 337.759512][T15687] syz_tun: tun_net_xmit 42 [ 337.764703][T15687] syz_tun: tun_net_xmit 42 [ 337.769381][T15687] syz_tun: tun_net_xmit 42 [ 337.774079][T15687] syz_tun: tun_net_xmit 42 [ 337.779083][T15687] syz_tun: tun_net_xmit 42 [ 337.783732][T15687] syz_tun: tun_net_xmit 42 [ 337.788398][T15687] syz_tun: tun_net_xmit 42 [ 337.792984][T15687] syz_tun: tun_net_xmit 42 [ 337.797932][T15687] syz_tun: tun_net_xmit 42 [ 337.802486][T15687] syz_tun: tun_net_xmit 42 [ 337.807285][T15687] syz_tun: tun_net_xmit 42 [ 337.812301][T15687] syz_tun: tun_net_xmit 42 [ 337.817282][T15687] syz_tun: tun_net_xmit 42 [ 337.822029][T15687] syz_tun: tun_net_xmit 42 [ 337.827254][T15687] syz_tun: tun_net_xmit 42 [ 337.831888][T15687] syz_tun: tun_net_xmit 42 [ 337.836630][T15687] syz_tun: tun_net_xmit 42 [ 337.841396][T15687] syz_tun: tun_net_xmit 42 [ 337.846165][T15687] syz_tun: tun_net_xmit 42 [ 337.850850][T15687] syz_tun: tun_net_xmit 42 [ 337.856111][T15687] syz_tun: tun_net_xmit 42 [ 337.861014][T15687] syz_tun: tun_net_xmit 42 [ 337.865732][T15687] syz_tun: tun_net_xmit 42 [ 337.870310][T15687] syz_tun: tun_net_xmit 42 [ 337.875324][T15687] syz_tun: tun_net_xmit 42 [ 337.880329][T15687] syz_tun: tun_net_xmit 42 [ 337.885463][T15687] syz_tun: tun_net_xmit 42 [ 337.890039][T15687] syz_tun: tun_net_xmit 42 [ 337.895618][T15687] syz_tun: tun_net_xmit 42 [ 337.900502][T15687] syz_tun: tun_net_xmit 42 [ 337.905236][T15687] syz_tun: tun_net_xmit 42 [ 337.910052][T15687] syz_tun: tun_net_xmit 42 [ 337.915229][T15687] syz_tun: tun_net_xmit 42 [ 337.920168][T15687] syz_tun: tun_net_xmit 42 [ 337.924999][T15687] syz_tun: tun_net_xmit 42 [ 337.929852][T15687] syz_tun: tun_net_xmit 42 [ 337.934619][T15687] syz_tun: tun_net_xmit 42 [ 337.939228][T15687] syz_tun: tun_net_xmit 42 [ 337.944795][T15687] syz_tun: tun_net_xmit 42 [ 337.950774][T15687] syz_tun: tun_net_xmit 42 [ 337.955487][T15687] syz_tun: tun_net_xmit 42 [ 337.960093][T15687] syz_tun: tun_net_xmit 42 [ 337.964558][ T5874] Bluetooth: hci0: command tx timeout [ 337.970510][T15687] syz_tun: tun_net_xmit 42 [ 337.975950][T15687] syz_tun: tun_net_xmit 42 [ 337.981276][T15687] syz_tun: tun_net_xmit 42 [ 337.982714][ T801] bond1 (unregistering): Released all slaves [ 337.986045][T15687] syz_tun: tun_net_xmit 42 [ 337.986180][T15687] syz_tun: tun_net_xmit 42 [ 337.986305][T15687] syz_tun: tun_net_xmit 42 [ 337.986451][T15687] syz_tun: tun_net_xmit 42 [ 337.986574][T15687] syz_tun: tun_net_xmit 42 [ 337.986730][T15687] syz_tun: tun_net_xmit 42 [ 337.986856][T15687] syz_tun: tun_net_xmit 42 [ 337.986979][T15687] syz_tun: tun_net_xmit 42 [ 337.987101][T15687] syz_tun: tun_net_xmit 42 [ 338.001875][ T801] bond2 (unregistering): Released all slaves [ 338.002531][T15687] syz_tun: tun_net_xmit 42 [ 338.013649][ T801] bond3 (unregistering): Released all slaves [ 338.017703][T15687] syz_tun: tun_net_xmit 42 [ 338.056342][T15687] syz_tun: tun_net_xmit 42 [ 338.061137][T15687] syz_tun: tun_net_xmit 42 [ 338.066607][T15687] syz_tun: tun_net_xmit 42 [ 338.072397][T15687] syz_tun: tun_net_xmit 42 [ 338.077445][T15687] syz_tun: tun_net_xmit 42 [ 338.082157][T15687] syz_tun: tun_net_xmit 42 [ 338.087091][T15687] syz_tun: tun_net_xmit 42 [ 338.092045][T15687] syz_tun: tun_net_xmit 42 [ 338.096809][T15687] syz_tun: tun_net_xmit 42 [ 338.101445][T15687] syz_tun: tun_net_xmit 42 [ 338.106096][T15687] syz_tun: tun_net_xmit 42 [ 338.106658][ T801] bond4 (unregistering): (slave veth5): Releasing active interface [ 338.110781][T15687] syz_tun: tun_net_xmit 42 [ 338.124013][T15687] syz_tun: tun_net_xmit 42 [ 338.128640][T15687] syz_tun: tun_net_xmit 42 [ 338.129733][ T801] bond4 (unregistering): Released all slaves [ 338.133281][T15687] syz_tun: tun_net_xmit 42 [ 338.144513][T15687] syz_tun: tun_net_xmit 42 [ 338.149325][T15687] syz_tun: tun_net_xmit 42 [ 338.154197][T15687] syz_tun: tun_net_xmit 42 [ 338.158846][T15687] syz_tun: tun_net_xmit 42 [ 338.163632][T15687] syz_tun: tun_net_xmit 42 [ 338.168501][T15687] syz_tun: tun_net_xmit 42 [ 338.173250][T15687] syz_tun: tun_net_xmit 42 [ 338.178306][T15687] syz_tun: tun_net_xmit 42 [ 338.182982][T15687] syz_tun: tun_net_xmit 42 [ 338.187889][T15687] syz_tun: tun_net_xmit 42 [ 338.192826][T15687] syz_tun: tun_net_xmit 42 [ 338.197534][T15687] syz_tun: tun_net_xmit 42 [ 338.202329][T15687] syz_tun: tun_net_xmit 42 [ 338.209360][T15687] syz_tun: tun_net_xmit 42 [ 338.211708][ T801] bond5 (unregistering): Released all slaves [ 338.214160][T15687] syz_tun: tun_net_xmit 42 [ 338.214367][T15687] syz_tun: tun_net_xmit 42 [ 338.230747][T15687] syz_tun: tun_net_xmit 42 [ 338.237380][T15687] syz_tun: tun_net_xmit 42 [ 338.242187][T15687] syz_tun: tun_net_xmit 42 [ 338.247293][T15687] syz_tun: tun_net_xmit 42 [ 338.252228][T15687] syz_tun: tun_net_xmit 42 [ 338.257351][ T801] bond6 (unregistering): Released all slaves [ 338.258609][T15687] syz_tun: tun_net_xmit 42 [ 338.268655][T15687] syz_tun: tun_net_xmit 42 [ 338.273344][T15687] syz_tun: tun_net_xmit 42 [ 338.278496][T15687] syz_tun: tun_net_xmit 42 [ 338.280667][ T801] bond7 (unregistering): Released all slaves [ 338.283164][T15687] syz_tun: tun_net_xmit 42 [ 338.299368][T15687] syz_tun: tun_net_xmit 42 [ 338.304983][T15687] syz_tun: tun_net_xmit 42 [ 338.309995][T15687] syz_tun: tun_net_xmit 42 [ 338.314925][T15687] syz_tun: tun_net_xmit 42 [ 338.320571][T15687] syz_tun: tun_net_xmit 42 [ 338.329861][T15687] syz_tun: tun_net_xmit 42 [ 338.335098][T15687] syz_tun: tun_net_xmit 42 [ 338.340061][T15687] syz_tun: tun_net_xmit 42 [ 338.345475][T15687] syz_tun: tun_net_xmit 42 [ 338.350418][T15687] syz_tun: tun_net_xmit 42 [ 338.357242][ T801] bond8 (unregistering): Released all slaves [ 338.369141][ T801] bond9 (unregistering): Released all slaves [ 338.375847][T15687] syz_tun: tun_net_xmit 42 [ 338.380497][T15687] syz_tun: tun_net_xmit 42 [ 338.389951][T15687] syz_tun: tun_net_xmit 42 [ 338.397016][ T801] smc: removing net device bond0 with user defined pnetid SYZ2 [ 338.406044][T15687] syz_tun: tun_net_xmit 42 [ 338.410685][T15687] syz_tun: tun_net_xmit 42 [ 338.418726][ T801] bond0 (unregistering): (slave bond10): Releasing backup interface [ 338.427110][T15687] syz_tun: tun_net_xmit 42 [ 338.431716][T15687] syz_tun: tun_net_xmit 42 [ 338.439578][ T801] bond0 (unregistering): Released all slaves [ 338.446271][T15687] syz_tun: tun_net_xmit 42 [ 338.451026][T15687] syz_tun: tun_net_xmit 42 [ 338.460428][T15687] syz_tun: tun_net_xmit 42 [ 338.465638][T15687] syz_tun: tun_net_xmit 42 [ 338.470303][T15687] syz_tun: tun_net_xmit 42 [ 338.475771][T15687] syz_tun: tun_net_xmit 42 [ 338.480580][T15687] syz_tun: tun_net_xmit 42 [ 338.485401][T15687] syz_tun: tun_net_xmit 42 [ 338.490048][T15687] syz_tun: tun_net_xmit 42 [ 338.496574][T15687] syz_tun: tun_net_xmit 42 [ 338.501246][T15687] syz_tun: tun_net_xmit 42 [ 338.506195][T15687] syz_tun: tun_net_xmit 42 [ 338.510945][T15687] syz_tun: tun_net_xmit 42 [ 338.515700][T15687] syz_tun: tun_net_xmit 42 [ 338.520319][T15687] syz_tun: tun_net_xmit 42 [ 338.521841][ T801] bond10 (unregistering): Released all slaves [ 338.526238][T15687] syz_tun: tun_net_xmit 42 [ 338.535995][T15687] syz_tun: tun_net_xmit 42 [ 338.540612][T15687] syz_tun: tun_net_xmit 42 [ 338.545567][T15687] syz_tun: tun_net_xmit 42 [ 338.547776][T15806] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2855'. [ 338.550238][T15687] syz_tun: tun_net_xmit 42 [ 338.559974][T15806] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2855'. [ 338.572908][T15687] syz_tun: tun_net_xmit 42 [ 338.585643][T15687] syz_tun: tun_net_xmit 42 [ 338.590315][T15687] syz_tun: tun_net_xmit 42 [ 338.596669][T15687] syz_tun: tun_net_xmit 42 [ 338.601395][T15687] syz_tun: tun_net_xmit 42 [ 338.608051][T15687] syz_tun: tun_net_xmit 42 [ 338.612668][T15687] syz_tun: tun_net_xmit 42 [ 338.617598][T15687] syz_tun: tun_net_xmit 42 [ 338.622235][T15687] syz_tun: tun_net_xmit 42 [ 338.629512][ T8705] syz_tun: tun_net_xmit 110 [ 338.635128][T15687] syz_tun: tun_net_xmit 42 [ 338.639878][T15687] syz_tun: tun_net_xmit 42 [ 338.644677][T15687] syz_tun: tun_net_xmit 42 [ 338.650512][T15687] syz_tun: tun_net_xmit 42 [ 338.657604][T15687] syz_tun: tun_net_xmit 42 [ 338.662265][T15687] syz_tun: tun_net_xmit 42 [ 338.667292][T15687] syz_tun: tun_net_xmit 42 [ 338.672233][T15687] syz_tun: tun_net_xmit 42 [ 338.677286][T15687] syz_tun: tun_net_xmit 42 [ 338.681947][T15687] syz_tun: tun_net_xmit 42 [ 338.688349][T15687] syz_tun: tun_net_xmit 42 [ 338.693128][T15687] syz_tun: tun_net_xmit 42 [ 338.698127][T15687] syz_tun: tun_net_xmit 42 [ 338.702841][T15687] syz_tun: tun_net_xmit 42 [ 338.707896][T15687] syz_tun: tun_net_xmit 42 [ 338.712627][T15687] syz_tun: tun_net_xmit 42 [ 338.719973][T15687] syz_tun: tun_net_xmit 42 [ 338.725375][T15687] syz_tun: tun_net_xmit 42 [ 338.730961][T15687] syz_tun: tun_net_xmit 42 [ 338.753340][T15687] syz_tun: tun_net_xmit 42 [ 338.773132][T15687] syz_tun: tun_net_xmit 42 [ 338.787602][ T801] tipc: Disabling bearer [ 338.788152][T15687] syz_tun: tun_net_xmit 42 [ 338.799316][ T801] tipc: Left network mode [ 338.800058][T15687] syz_tun: tun_net_xmit 42 [ 338.811620][T15687] syz_tun: tun_net_xmit 42 [ 338.816424][T15687] syz_tun: tun_net_xmit 42 [ 338.821106][T15687] syz_tun: tun_net_xmit 42 [ 338.826712][T15687] syz_tun: tun_net_xmit 42 [ 338.832201][T15687] syz_tun: tun_net_xmit 42 [ 338.838376][T15687] syz_tun: tun_net_xmit 42 [ 338.843181][T15687] syz_tun: tun_net_xmit 42 [ 338.880318][T15687] syz_tun: tun_net_xmit 42 [ 338.887151][T15687] syz_tun: tun_net_xmit 42 [ 338.891979][T15687] syz_tun: tun_net_xmit 42 [ 338.896904][T15687] syz_tun: tun_net_xmit 42 [ 338.901773][T15687] syz_tun: tun_net_xmit 42 [ 338.907549][T15687] syz_tun: tun_net_xmit 42 [ 338.912987][T15687] syz_tun: tun_net_xmit 42 [ 338.918475][T15687] syz_tun: tun_net_xmit 42 [ 338.923068][T15687] syz_tun: tun_net_xmit 42 [ 338.928408][T15687] syz_tun: tun_net_xmit 42 [ 338.933075][T15687] syz_tun: tun_net_xmit 42 [ 338.939994][T15687] syz_tun: tun_net_xmit 42 [ 338.954339][T15687] syz_tun: tun_net_xmit 42 [ 338.956313][T15825] netlink: 'syz.1.2858': attribute type 20 has an invalid length. [ 338.964031][T15687] syz_tun: tun_net_xmit 42 [ 338.981884][T15687] syz_tun: tun_net_xmit 42 [ 338.987094][T15687] syz_tun: tun_net_xmit 42 [ 338.996917][T15825] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2858'. [ 338.999061][T15687] syz_tun: tun_net_xmit 42 [ 339.006703][T15825] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2858'. [ 339.022472][T15825] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2858'. [ 339.033561][T15687] syz_tun: tun_net_xmit 42 [ 339.041600][T15687] syz_tun: tun_net_xmit 42 [ 339.049812][T15687] syz_tun: tun_net_xmit 42 [ 339.059934][T15687] syz_tun: tun_net_xmit 42 [ 339.065396][T15687] syz_tun: tun_net_xmit 42 [ 339.066882][T15752] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.070269][T15687] syz_tun: tun_net_xmit 42 [ 339.086407][T15687] syz_tun: tun_net_xmit 42 [ 339.090830][T15752] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.098610][T15687] syz_tun: tun_net_xmit 42 [ 339.109257][T15687] syz_tun: tun_net_xmit 42 [ 339.109318][T15752] bridge_slave_0: entered allmulticast mode [ 339.121744][T15687] syz_tun: tun_net_xmit 42 [ 339.126714][T15752] bridge_slave_0: entered promiscuous mode [ 339.133477][T15687] syz_tun: tun_net_xmit 42 [ 339.152297][T15687] syz_tun: tun_net_xmit 42 [ 339.159356][T15687] syz_tun: tun_net_xmit 42 [ 339.168881][T15687] syz_tun: tun_net_xmit 42 [ 339.173643][T15687] syz_tun: tun_net_xmit 42 [ 339.175956][T15752] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.178859][T15687] syz_tun: tun_net_xmit 42 [ 339.185970][T15752] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.194450][T15687] syz_tun: tun_net_xmit 42 [ 339.202540][T15687] syz_tun: tun_net_xmit 42 [ 339.202927][T15752] bridge_slave_1: entered allmulticast mode [ 339.211772][T15687] syz_tun: tun_net_xmit 42 [ 339.215955][T15752] bridge_slave_1: entered promiscuous mode [ 339.220950][T15687] syz_tun: tun_net_xmit 42 [ 339.235235][T15687] syz_tun: tun_net_xmit 42 [ 339.240026][T15687] syz_tun: tun_net_xmit 42 [ 339.250171][T15687] syz_tun: tun_net_xmit 42 [ 339.260670][T15687] syz_tun: tun_net_xmit 42 [ 339.265590][T15687] syz_tun: tun_net_xmit 42 [ 339.271006][T15687] syz_tun: tun_net_xmit 42 [ 339.297369][T15687] syz_tun: tun_net_xmit 42 [ 339.302257][T15687] syz_tun: tun_net_xmit 42 [ 339.308063][T15687] syz_tun: tun_net_xmit 42 [ 339.319697][T15687] syz_tun: tun_net_xmit 42 [ 339.330053][T15752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 339.341936][T15687] syz_tun: tun_net_xmit 42 [ 339.349237][T15687] syz_tun: tun_net_xmit 42 [ 339.360033][T15752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 339.369884][T15687] syz_tun: tun_net_xmit 42 [ 339.378222][T15687] syz_tun: tun_net_xmit 42 [ 339.384188][T15687] syz_tun: tun_net_xmit 42 [ 339.389483][T15687] syz_tun: tun_net_xmit 42 [ 339.394506][T15687] syz_tun: tun_net_xmit 42 [ 339.435152][T15687] syz_tun: tun_net_xmit 42 [ 339.448325][T15687] syz_tun: tun_net_xmit 42 [ 339.457917][T15687] syz_tun: tun_net_xmit 42 [ 339.462672][T15687] syz_tun: tun_net_xmit 42 [ 339.482740][T15687] syz_tun: tun_net_xmit 42 [ 339.487960][T15687] syz_tun: tun_net_xmit 42 [ 339.497809][T15687] syz_tun: tun_net_xmit 42 [ 339.507456][T15752] team0: Port device team_slave_0 added [ 339.515745][T15752] team0: Port device team_slave_1 added [ 339.526405][T15687] syz_tun: tun_net_xmit 42 [ 339.531066][T15687] syz_tun: tun_net_xmit 42 [ 339.535991][T15687] syz_tun: tun_net_xmit 42 [ 339.540730][T15687] syz_tun: tun_net_xmit 42 [ 339.553813][T15687] syz_tun: tun_net_xmit 42 [ 339.565185][T15687] syz_tun: tun_net_xmit 42 [ 339.575152][T15687] syz_tun: tun_net_xmit 42 [ 339.578786][T15854] IPVS: set_ctl: invalid protocol: 47 10.1.1.2:20001 [ 339.579931][T15687] syz_tun: tun_net_xmit 42 [ 339.597592][T15687] syz_tun: tun_net_xmit 42 [ 339.602320][T15687] syz_tun: tun_net_xmit 42 [ 339.608144][T15687] syz_tun: tun_net_xmit 42 [ 339.615062][T15687] syz_tun: tun_net_xmit 42 [ 339.620208][T15687] syz_tun: tun_net_xmit 42 [ 339.634040][T15687] syz_tun: tun_net_xmit 42 [ 339.639535][T15687] syz_tun: tun_net_xmit 42 [ 339.654823][T15687] syz_tun: tun_net_xmit 42 [ 339.661876][T15687] syz_tun: tun_net_xmit 42 [ 339.667364][T15687] syz_tun: tun_net_xmit 42 [ 339.675981][T15687] syz_tun: tun_net_xmit 42 [ 339.684255][T15752] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 339.686731][T15687] syz_tun: tun_net_xmit 42 [ 339.691240][T15752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.691271][T15752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 339.693165][T15752] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 339.731739][T15687] syz_tun: tun_net_xmit 42 [ 339.798205][T15687] syz_tun: tun_net_xmit 42 [ 339.808791][T15687] syz_tun: tun_net_xmit 42 [ 339.813598][T15687] syz_tun: tun_net_xmit 42 [ 339.831946][T15687] syz_tun: tun_net_xmit 42 [ 339.843989][T15752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.846822][T15687] syz_tun: tun_net_xmit 42 [ 339.874674][T15752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 339.890488][T15687] syz_tun: tun_net_xmit 42 [ 339.900308][T15687] syz_tun: tun_net_xmit 42 [ 339.905609][T15687] syz_tun: tun_net_xmit 42 [ 339.910282][T15687] syz_tun: tun_net_xmit 42 [ 339.915260][T15687] syz_tun: tun_net_xmit 42 [ 339.919912][T15687] syz_tun: tun_net_xmit 42 [ 339.927650][T15687] syz_tun: tun_net_xmit 42 [ 339.932268][T15687] syz_tun: tun_net_xmit 42 [ 339.937382][T15687] syz_tun: tun_net_xmit 42 [ 339.941996][T15687] syz_tun: tun_net_xmit 42 [ 339.948716][T15687] syz_tun: tun_net_xmit 42 [ 339.953400][T15687] syz_tun: tun_net_xmit 42 [ 339.960893][ T801] hsr_slave_0: left promiscuous mode [ 339.968342][T15687] syz_tun: tun_net_xmit 42 [ 339.973600][T15687] syz_tun: tun_net_xmit 42 [ 339.981843][T15687] syz_tun: tun_net_xmit 42 [ 339.987953][ T801] team_slave_0: left promiscuous mode [ 339.992637][T15687] syz_tun: tun_net_xmit 42 [ 339.993392][ T801] team_slave_1: left promiscuous mode [ 340.003731][ T801] veth0_macvtap: left promiscuous mode [ 340.009585][T15687] syz_tun: tun_net_xmit 42 [ 340.016374][T15687] syz_tun: tun_net_xmit 42 [ 340.021112][T15687] syz_tun: tun_net_xmit 42 [ 340.028103][T15687] syz_tun: tun_net_xmit 42 [ 340.032780][T15687] syz_tun: tun_net_xmit 42 [ 340.037614][T15687] syz_tun: tun_net_xmit 42 [ 340.042212][T15687] syz_tun: tun_net_xmit 42 [ 340.046888][ T5874] Bluetooth: hci0: command tx timeout [ 340.046943][T15687] syz_tun: tun_net_xmit 42 [ 340.057430][T15687] syz_tun: tun_net_xmit 42 [ 340.062101][T15687] syz_tun: tun_net_xmit 42 [ 340.067034][T15687] syz_tun: tun_net_xmit 42 [ 340.071736][T15687] syz_tun: tun_net_xmit 42 [ 340.076500][T15687] syz_tun: tun_net_xmit 42 [ 340.081085][T15687] syz_tun: tun_net_xmit 42 [ 340.086140][T15687] syz_tun: tun_net_xmit 42 [ 340.091022][T15687] syz_tun: tun_net_xmit 42 [ 340.091364][ T801] pim6reg (unregistering): left allmulticast mode [ 340.095753][T15687] syz_tun: tun_net_xmit 42 [ 340.095887][T15687] syz_tun: tun_net_xmit 42 [ 340.113350][T15687] syz_tun: tun_net_xmit 42 [ 340.118944][T15687] syz_tun: tun_net_xmit 42 [ 340.125984][T15687] syz_tun: tun_net_xmit 42 [ 340.130635][T15687] syz_tun: tun_net_xmit 42 [ 340.135680][T15687] syz_tun: tun_net_xmit 42 [ 340.140851][T15687] syz_tun: tun_net_xmit 42 [ 340.146341][T15687] syz_tun: tun_net_xmit 42 [ 340.151013][T15687] syz_tun: tun_net_xmit 42 [ 340.151200][ T801] pim6reg527 (unregistering): left allmulticast mode [ 340.159037][T15687] syz_tun: tun_net_xmit 42 [ 340.169531][T15687] syz_tun: tun_net_xmit 42 [ 340.174409][T15687] syz_tun: tun_net_xmit 42 [ 340.179026][T15687] syz_tun: tun_net_xmit 42 [ 340.183737][T15687] syz_tun: tun_net_xmit 42 [ 340.188400][T15687] syz_tun: tun_net_xmit 42 [ 340.192998][T15687] syz_tun: tun_net_xmit 42 [ 340.198427][T15687] syz_tun: tun_net_xmit 42 [ 340.203055][T15687] syz_tun: tun_net_xmit 42 [ 340.207866][T15687] syz_tun: tun_net_xmit 42 [ 340.212465][T15687] syz_tun: tun_net_xmit 42 [ 340.217578][T15687] syz_tun: tun_net_xmit 42 [ 340.222904][T15687] syz_tun: tun_net_xmit 42 [ 340.228906][T15687] syz_tun: tun_net_xmit 42 [ 340.233513][T15687] syz_tun: tun_net_xmit 42 [ 340.238579][T15687] syz_tun: tun_net_xmit 42 [ 340.243413][T15687] syz_tun: tun_net_xmit 42 [ 340.249782][T15687] syz_tun: tun_net_xmit 42 [ 340.255353][T15687] syz_tun: tun_net_xmit 42 [ 340.259981][T15687] syz_tun: tun_net_xmit 42 [ 340.264861][T15687] syz_tun: tun_net_xmit 42 [ 340.269479][T15687] syz_tun: tun_net_xmit 42 [ 340.274137][T15687] syz_tun: tun_net_xmit 42 [ 340.278730][T15687] syz_tun: tun_net_xmit 42 [ 340.283354][T15687] syz_tun: tun_net_xmit 42 [ 340.290287][T15687] syz_tun: tun_net_xmit 42 [ 340.295036][T15687] syz_tun: tun_net_xmit 42 [ 340.299663][T15687] syz_tun: tun_net_xmit 42 [ 340.304401][T15687] syz_tun: tun_net_xmit 42 [ 340.309025][T15687] syz_tun: tun_net_xmit 42 [ 340.309392][ T801] team0 (unregistering): Port device team_slave_1 removed [ 340.313638][T15687] syz_tun: tun_net_xmit 42 [ 340.326830][T15687] syz_tun: tun_net_xmit 42 [ 340.331483][T15687] syz_tun: tun_net_xmit 42 [ 340.336140][T15687] syz_tun: tun_net_xmit 42 [ 340.340876][T15687] syz_tun: tun_net_xmit 42 [ 340.345731][T15687] syz_tun: tun_net_xmit 42 [ 340.346283][ T801] team0 (unregistering): Port device team_slave_0 removed [ 340.350343][T15687] syz_tun: tun_net_xmit 42 [ 340.363695][T15687] syz_tun: tun_net_xmit 42 [ 340.368524][T15687] syz_tun: tun_net_xmit 42 [ 340.373136][T15687] syz_tun: tun_net_xmit 42 [ 340.377805][T15687] syz_tun: tun_net_xmit 42 [ 340.382406][T15687] syz_tun: tun_net_xmit 42 [ 340.388003][T15687] syz_tun: tun_net_xmit 42 [ 340.392715][T15687] syz_tun: tun_net_xmit 42 [ 340.397364][T15687] syz_tun: tun_net_xmit 42 [ 340.401960][T15687] syz_tun: tun_net_xmit 42 [ 340.406585][T15687] syz_tun: tun_net_xmit 42 [ 340.411333][T15687] syz_tun: tun_net_xmit 42 [ 340.416667][T15687] syz_tun: tun_net_xmit 42 [ 340.421386][T15687] syz_tun: tun_net_xmit 42 [ 340.426125][T15687] syz_tun: tun_net_xmit 42 [ 340.430751][T15687] syz_tun: tun_net_xmit 42 [ 340.435520][T15687] syz_tun: tun_net_xmit 42 [ 340.440297][T15687] syz_tun: tun_net_xmit 42 [ 340.446086][T15687] syz_tun: tun_net_xmit 42 [ 340.450806][T15687] syz_tun: tun_net_xmit 42 [ 340.456015][T15687] syz_tun: tun_net_xmit 42 [ 340.460668][T15687] syz_tun: tun_net_xmit 42 [ 340.465998][T15687] syz_tun: tun_net_xmit 42 [ 340.471150][T15687] syz_tun: tun_net_xmit 42 [ 340.477044][T15687] syz_tun: tun_net_xmit 42 [ 340.481725][T15687] syz_tun: tun_net_xmit 42 [ 340.487133][T15687] syz_tun: tun_net_xmit 42 [ 340.491816][T15687] syz_tun: tun_net_xmit 42 [ 340.496632][T15687] syz_tun: tun_net_xmit 42 [ 340.501222][T15687] syz_tun: tun_net_xmit 42 [ 340.506594][T15687] syz_tun: tun_net_xmit 42 [ 340.511296][T15687] syz_tun: tun_net_xmit 42 [ 340.516003][T15687] syz_tun: tun_net_xmit 42 [ 340.520590][T15687] syz_tun: tun_net_xmit 42 [ 340.525283][T15687] syz_tun: tun_net_xmit 42 [ 340.529883][T15687] syz_tun: tun_net_xmit 42 [ 340.535358][T15687] syz_tun: tun_net_xmit 42 [ 340.540116][T15687] syz_tun: tun_net_xmit 42 [ 340.544884][T15687] syz_tun: tun_net_xmit 42 [ 340.549574][T15687] syz_tun: tun_net_xmit 42 [ 340.554346][T15687] syz_tun: tun_net_xmit 42 [ 340.558935][T15687] syz_tun: tun_net_xmit 42 [ 340.563632][T15687] syz_tun: tun_net_xmit 42 [ 340.572956][T15687] syz_tun: tun_net_xmit 42 [ 340.583974][T15687] syz_tun: tun_net_xmit 42 [ 340.588808][T15687] syz_tun: tun_net_xmit 42 [ 340.593434][T15687] syz_tun: tun_net_xmit 42 [ 340.622335][T15687] syz_tun: tun_net_xmit 42 [ 340.647812][T15687] syz_tun: tun_net_xmit 42 [ 340.661548][T15687] syz_tun: tun_net_xmit 42 [ 340.674820][T15687] syz_tun: tun_net_xmit 42 [ 340.679454][T15687] syz_tun: tun_net_xmit 42 [ 340.687240][T15687] syz_tun: tun_net_xmit 42 [ 340.692020][T15687] syz_tun: tun_net_xmit 42 [ 340.697291][T15687] syz_tun: tun_net_xmit 42 [ 340.702006][T15687] syz_tun: tun_net_xmit 42 [ 340.711479][T15687] syz_tun: tun_net_xmit 42 [ 340.717213][T15687] syz_tun: tun_net_xmit 42 [ 340.727749][T15752] hsr_slave_0: entered promiscuous mode [ 340.734003][T15687] syz_tun: tun_net_xmit 42 [ 340.739339][T15687] syz_tun: tun_net_xmit 42 [ 340.746419][T15752] hsr_slave_1: entered promiscuous mode [ 340.752244][T15687] syz_tun: tun_net_xmit 42 [ 340.757691][T15752] debugfs: 'hsr0' already exists in 'hsr' [ 340.759469][T15687] syz_tun: tun_net_xmit 42 [ 340.764082][T15752] Cannot create hsr debugfs directory [ 340.786004][T15687] syz_tun: tun_net_xmit 42 [ 340.790803][T15687] syz_tun: tun_net_xmit 42 [ 340.797627][T15687] syz_tun: tun_net_xmit 42 [ 340.813122][T15894] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2875'. [ 340.814053][T15687] syz_tun: tun_net_xmit 42 [ 340.828362][T15687] syz_tun: tun_net_xmit 42 [ 340.833019][T15687] syz_tun: tun_net_xmit 42 [ 340.839159][T15687] syz_tun: tun_net_xmit 42 [ 340.847106][T15687] syz_tun: tun_net_xmit 42 [ 340.851827][T15687] syz_tun: tun_net_xmit 42 [ 340.856496][T15687] syz_tun: tun_net_xmit 42 [ 340.868107][T15687] syz_tun: tun_net_xmit 42 [ 340.878435][T15687] syz_tun: tun_net_xmit 42 [ 340.888921][T15892] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2874'. [ 340.889984][T15687] syz_tun: tun_net_xmit 42 [ 340.902919][T15687] syz_tun: tun_net_xmit 42 [ 340.923000][T15687] syz_tun: tun_net_xmit 42 [ 340.930466][T15687] syz_tun: tun_net_xmit 42 [ 340.942935][T15687] syz_tun: tun_net_xmit 42 [ 340.950198][T15687] syz_tun: tun_net_xmit 42 [ 340.954952][T15687] syz_tun: tun_net_xmit 42 [ 340.959623][T15687] syz_tun: tun_net_xmit 42 [ 340.975552][T15687] syz_tun: tun_net_xmit 42 [ 340.980427][T15687] syz_tun: tun_net_xmit 42 [ 340.987931][T15687] syz_tun: tun_net_xmit 42 [ 340.992771][T15687] syz_tun: tun_net_xmit 42 [ 341.003722][T15687] syz_tun: tun_net_xmit 42 [ 341.012122][T15687] syz_tun: tun_net_xmit 42 [ 341.017867][T15687] syz_tun: tun_net_xmit 42 [ 341.028383][T15687] syz_tun: tun_net_xmit 42 [ 341.033245][T15687] syz_tun: tun_net_xmit 42 [ 341.063495][T15687] syz_tun: tun_net_xmit 42 [ 341.084864][T15687] syz_tun: tun_net_xmit 42 [ 341.089732][T15687] syz_tun: tun_net_xmit 42 [ 341.117047][T15687] syz_tun: tun_net_xmit 42 [ 341.122800][T15687] syz_tun: tun_net_xmit 42 [ 341.128734][T15687] syz_tun: tun_net_xmit 42 [ 341.133556][T15687] syz_tun: tun_net_xmit 42 [ 341.136965][ T801] IPVS: stop unused estimator thread 0... [ 341.143167][T15687] syz_tun: tun_net_xmit 42 [ 341.151309][T15687] syz_tun: tun_net_xmit 42 [ 341.156305][T15687] syz_tun: tun_net_xmit 42 [ 341.156765][T15908] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2877'. [ 341.161217][T15687] syz_tun: tun_net_xmit 42 [ 341.175741][T15687] syz_tun: tun_net_xmit 42 [ 341.181559][T15687] syz_tun: tun_net_xmit 42 [ 341.188532][T15687] syz_tun: tun_net_xmit 42 [ 341.193468][T15687] syz_tun: tun_net_xmit 42 [ 341.198646][T15687] syz_tun: tun_net_xmit 42 [ 341.206730][T15687] syz_tun: tun_net_xmit 42 [ 341.211781][T15687] syz_tun: tun_net_xmit 42 [ 341.216894][T15687] syz_tun: tun_net_xmit 42 [ 341.222002][T15687] syz_tun: tun_net_xmit 42 [ 341.228065][T15687] syz_tun: tun_net_xmit 42 [ 341.235332][T15687] syz_tun: tun_net_xmit 42 [ 341.240157][T15687] syz_tun: tun_net_xmit 42 [ 341.266624][T15687] syz_tun: tun_net_xmit 42 [ 341.271885][T15687] syz_tun: tun_net_xmit 42 [ 341.279969][T15687] syz_tun: tun_net_xmit 42 [ 341.286854][T15687] syz_tun: tun_net_xmit 42 [ 341.298413][T15687] syz_tun: tun_net_xmit 42 [ 341.305098][T15687] syz_tun: tun_net_xmit 42 [ 341.309923][T15687] syz_tun: tun_net_xmit 42 [ 341.317751][T15687] syz_tun: tun_net_xmit 42 [ 341.322854][T15687] syz_tun: tun_net_xmit 42 [ 341.329300][T15687] syz_tun: tun_net_xmit 42 [ 341.345107][T15687] syz_tun: tun_net_xmit 42 [ 341.358116][T15687] syz_tun: tun_net_xmit 42 [ 341.371946][T15687] syz_tun: tun_net_xmit 42 [ 341.379213][T15687] syz_tun: tun_net_xmit 42 [ 341.384929][T15687] syz_tun: tun_net_xmit 42 [ 341.389659][T15687] syz_tun: tun_net_xmit 42 [ 341.395493][T15687] syz_tun: tun_net_xmit 42 [ 341.400598][T15687] syz_tun: tun_net_xmit 42 [ 341.408971][T15687] syz_tun: tun_net_xmit 42 [ 341.413728][T15687] syz_tun: tun_net_xmit 42 [ 341.427797][T15687] syz_tun: tun_net_xmit 42 [ 341.432640][T15687] syz_tun: tun_net_xmit 42 [ 341.438944][T15687] syz_tun: tun_net_xmit 42 [ 341.448528][T15687] syz_tun: tun_net_xmit 42 [ 341.453519][T15687] syz_tun: tun_net_xmit 42 [ 341.458973][T15687] syz_tun: tun_net_xmit 42 [ 341.474128][T15687] syz_tun: tun_net_xmit 42 [ 341.480075][T15687] syz_tun: tun_net_xmit 42 [ 341.501189][T15687] syz_tun: tun_net_xmit 42 [ 341.507390][T15687] syz_tun: tun_net_xmit 42 [ 341.512459][T15687] syz_tun: tun_net_xmit 42 [ 341.525123][T15687] syz_tun: tun_net_xmit 42 [ 341.529886][T15687] syz_tun: tun_net_xmit 42 [ 341.550523][T15687] syz_tun: tun_net_xmit 42 [ 341.574227][T15687] syz_tun: tun_net_xmit 42 [ 341.579043][T15687] syz_tun: tun_net_xmit 42 [ 341.583713][T15687] syz_tun: tun_net_xmit 42 [ 341.597328][T15752] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 341.605656][T15687] syz_tun: tun_net_xmit 42 [ 341.613298][T15687] syz_tun: tun_net_xmit 42 [ 341.620842][T15687] syz_tun: tun_net_xmit 42 [ 341.625967][T15687] syz_tun: tun_net_xmit 42 [ 341.631967][T15926] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2884'. [ 341.632364][T15687] syz_tun: tun_net_xmit 42 [ 341.647844][T15687] syz_tun: tun_net_xmit 42 [ 341.659958][T15687] syz_tun: tun_net_xmit 42 [ 341.666860][T15687] syz_tun: tun_net_xmit 42 [ 341.671679][T15687] syz_tun: tun_net_xmit 42 [ 341.677776][T15687] syz_tun: tun_net_xmit 42 [ 341.682664][T15752] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 341.691570][T15687] syz_tun: tun_net_xmit 42 [ 341.700966][T15687] syz_tun: tun_net_xmit 42 [ 341.709176][T15687] syz_tun: tun_net_xmit 42 [ 341.713298][T15752] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 341.717257][T15687] syz_tun: tun_net_xmit 42 [ 341.726791][T15687] syz_tun: tun_net_xmit 42 [ 341.731718][T15687] syz_tun: tun_net_xmit 42 [ 341.736717][T15687] syz_tun: tun_net_xmit 42 [ 341.741742][T15687] syz_tun: tun_net_xmit 42 [ 341.746602][T15687] syz_tun: tun_net_xmit 42 [ 341.751237][T15687] syz_tun: tun_net_xmit 42 [ 341.756552][T15687] syz_tun: tun_net_xmit 42 [ 341.761331][T15687] syz_tun: tun_net_xmit 42 [ 341.766004][T15752] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 341.771931][T15687] syz_tun: tun_net_xmit 42 [ 341.777528][T15687] syz_tun: tun_net_xmit 42 [ 341.782268][T15687] syz_tun: tun_net_xmit 42 [ 341.789256][T15687] syz_tun: tun_net_xmit 42 [ 341.800139][T15687] syz_tun: tun_net_xmit 42 [ 341.809604][T15687] syz_tun: tun_net_xmit 42 [ 341.814968][T15687] syz_tun: tun_net_xmit 42 [ 341.820976][T15687] syz_tun: tun_net_xmit 42 [ 341.827248][T15687] syz_tun: tun_net_xmit 42 [ 341.832751][T15687] syz_tun: tun_net_xmit 42 [ 341.837833][T15687] syz_tun: tun_net_xmit 42 [ 341.842547][T15687] syz_tun: tun_net_xmit 42 [ 341.847412][T15687] syz_tun: tun_net_xmit 42 [ 341.852055][T15687] syz_tun: tun_net_xmit 42 [ 341.857854][T15687] syz_tun: tun_net_xmit 42 [ 341.862466][T15687] syz_tun: tun_net_xmit 42 [ 341.867472][T15687] syz_tun: tun_net_xmit 42 [ 341.872085][T15687] syz_tun: tun_net_xmit 42 [ 341.890477][T15687] syz_tun: tun_net_xmit 42 [ 341.896082][T15687] syz_tun: tun_net_xmit 42 [ 341.900809][T15687] syz_tun: tun_net_xmit 42 [ 341.916124][T15687] syz_tun: tun_net_xmit 42 [ 341.927892][T15687] syz_tun: tun_net_xmit 42 [ 341.934543][T15687] syz_tun: tun_net_xmit 42 [ 341.939386][T15687] syz_tun: tun_net_xmit 42 [ 341.946789][T15687] syz_tun: tun_net_xmit 42 [ 341.951867][T15687] syz_tun: tun_net_xmit 42 [ 341.957263][T15687] syz_tun: tun_net_xmit 42 [ 341.957804][T15752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.962330][T15687] syz_tun: tun_net_xmit 42 [ 341.973543][T15687] syz_tun: tun_net_xmit 42 [ 341.980120][T15687] syz_tun: tun_net_xmit 42 [ 341.985539][T15687] syz_tun: tun_net_xmit 42 [ 341.990743][T15687] syz_tun: tun_net_xmit 42 [ 341.997719][T15687] syz_tun: tun_net_xmit 42 [ 341.998726][T15752] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.002854][T15687] syz_tun: tun_net_xmit 42 [ 342.017100][T15687] syz_tun: tun_net_xmit 42 [ 342.021903][T15687] syz_tun: tun_net_xmit 42 [ 342.029975][ T801] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.035856][T15687] syz_tun: tun_net_xmit 42 [ 342.037256][ T801] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.041968][T15687] syz_tun: tun_net_xmit 42 [ 342.057646][T15687] syz_tun: tun_net_xmit 42 [ 342.064744][T15687] syz_tun: tun_net_xmit 42 [ 342.083155][T15687] syz_tun: tun_net_xmit 42 [ 342.083617][ T801] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.089183][T15687] syz_tun: tun_net_xmit 42 [ 342.095027][ T801] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.100007][T15687] syz_tun: tun_net_xmit 42 [ 342.111893][T15687] syz_tun: tun_net_xmit 42 [ 342.120570][T15687] syz_tun: tun_net_xmit 42 [ 342.125368][ T5874] Bluetooth: hci0: command tx timeout [ 342.139944][T15687] syz_tun: tun_net_xmit 42 [ 342.145044][T15687] syz_tun: tun_net_xmit 42 [ 342.158029][T15687] syz_tun: tun_net_xmit 42 [ 342.164118][T15687] syz_tun: tun_net_xmit 42 [ 342.168817][T15687] syz_tun: tun_net_xmit 42 [ 342.173606][T15687] syz_tun: tun_net_xmit 42 [ 342.179832][T15752] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 342.197144][T15687] syz_tun: tun_net_xmit 42 [ 342.221492][T15687] syz_tun: tun_net_xmit 42 [ 342.237988][T15687] syz_tun: tun_net_xmit 42 [ 342.249058][T15687] syz_tun: tun_net_xmit 42 [ 342.259670][T15687] syz_tun: tun_net_xmit 42 [ 342.273798][T15687] syz_tun: tun_net_xmit 42 [ 342.286513][T15687] syz_tun: tun_net_xmit 42 [ 342.308487][T15687] syz_tun: tun_net_xmit 42 [ 342.317078][T15687] syz_tun: tun_net_xmit 42 [ 342.321912][T15687] syz_tun: tun_net_xmit 42 [ 342.329192][T15687] syz_tun: tun_net_xmit 42 [ 342.336566][T15687] syz_tun: tun_net_xmit 42 [ 342.341249][T15687] syz_tun: tun_net_xmit 42 [ 342.349839][T15687] syz_tun: tun_net_xmit 42 [ 342.364627][T15687] syz_tun: tun_net_xmit 42 [ 342.369321][T15687] syz_tun: tun_net_xmit 42 [ 342.382457][T15687] syz_tun: tun_net_xmit 42 [ 342.388996][T15687] syz_tun: tun_net_xmit 42 [ 342.395845][T15687] syz_tun: tun_net_xmit 42 [ 342.405910][T15687] syz_tun: tun_net_xmit 42 [ 342.410643][T15687] syz_tun: tun_net_xmit 42 [ 342.433921][T15752] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 342.434169][T15687] syz_tun: tun_net_xmit 42 [ 342.446096][T15687] syz_tun: tun_net_xmit 42 [ 342.454860][T15687] syz_tun: tun_net_xmit 42 [ 342.465793][T15687] syz_tun: tun_net_xmit 42 [ 342.475227][T15687] syz_tun: tun_net_xmit 42 [ 342.486230][T15687] syz_tun: tun_net_xmit 42 [ 342.491333][T15687] syz_tun: tun_net_xmit 42 [ 342.496448][T15687] syz_tun: tun_net_xmit 42 [ 342.511715][T15687] syz_tun: tun_net_xmit 42 [ 342.521609][T15687] syz_tun: tun_net_xmit 42 [ 342.531104][T15687] syz_tun: tun_net_xmit 42 [ 342.543090][T15687] syz_tun: tun_net_xmit 42 [ 342.549343][T15752] veth0_vlan: entered promiscuous mode [ 342.555797][T15687] syz_tun: tun_net_xmit 42 [ 342.560551][T15687] syz_tun: tun_net_xmit 42 [ 342.572039][T15687] syz_tun: tun_net_xmit 42 [ 342.574561][T15752] veth1_vlan: entered promiscuous mode [ 342.582190][T15687] syz_tun: tun_net_xmit 42 [ 342.588890][T15687] syz_tun: tun_net_xmit 42 [ 342.594177][T15687] syz_tun: tun_net_xmit 42 [ 342.599383][T15687] syz_tun: tun_net_xmit 42 [ 342.605638][T15687] syz_tun: tun_net_xmit 42 [ 342.610386][T15687] syz_tun: tun_net_xmit 42 [ 342.615474][T15687] syz_tun: tun_net_xmit 42 [ 342.620093][T15687] syz_tun: tun_net_xmit 42 [ 342.627428][T15687] syz_tun: tun_net_xmit 42 [ 342.627432][T15973] syzkaller0: entered promiscuous mode [ 342.627455][T15973] syzkaller0: entered allmulticast mode [ 342.632074][T15687] syz_tun: tun_net_xmit 42 [ 342.648859][T15687] syz_tun: tun_net_xmit 42 [ 342.653611][T15687] syz_tun: tun_net_xmit 42 [ 342.659162][T15687] syz_tun: tun_net_xmit 42 [ 342.661547][T15973] syzkaller1: entered promiscuous mode [ 342.674215][T15973] syzkaller1: entered allmulticast mode [ 342.680358][T15687] syz_tun: tun_net_xmit 42 [ 342.687798][T15687] syz_tun: tun_net_xmit 42 [ 342.696038][T15752] veth0_macvtap: entered promiscuous mode [ 342.704066][T15687] syz_tun: tun_net_xmit 42 [ 342.712305][T15752] veth1_macvtap: entered promiscuous mode [ 342.719048][T15687] syz_tun: tun_net_xmit 42 [ 342.732115][T15687] syz_tun: tun_net_xmit 42 [ 342.747215][T15979] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2899'. [ 342.749674][T15687] syz_tun: tun_net_xmit 42 [ 342.761862][T15687] syz_tun: tun_net_xmit 42 [ 342.768388][T15687] syz_tun: tun_net_xmit 42 [ 342.773249][T15687] syz_tun: tun_net_xmit 42 [ 342.779687][T15687] syz_tun: tun_net_xmit 42 [ 342.790336][T15687] syz_tun: tun_net_xmit 42 [ 342.798235][T15752] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 342.806904][T15687] syz_tun: tun_net_xmit 42 [ 342.811583][T15687] syz_tun: tun_net_xmit 42 [ 342.826037][T15687] syz_tun: tun_net_xmit 42 [ 342.830691][T15687] syz_tun: tun_net_xmit 42 [ 342.837732][T15752] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 342.858977][T12155] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.865366][T15687] syz_tun: tun_net_xmit 42 [ 342.874291][T15687] syz_tun: tun_net_xmit 42 [ 342.879048][T15687] syz_tun: tun_net_xmit 42 [ 342.883662][T15687] syz_tun: tun_net_xmit 42 [ 342.928603][T15687] syz_tun: tun_net_xmit 42 [ 342.931314][T15989] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2902'. [ 342.933273][T15687] syz_tun: tun_net_xmit 42 [ 342.950879][T12155] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.959981][T15687] syz_tun: tun_net_xmit 42 [ 342.962632][T15687] syz_tun: tun_net_xmit 42 [ 342.969538][T15687] syz_tun: tun_net_xmit 42 [ 342.980689][T15687] syz_tun: tun_net_xmit 42 [ 342.986133][T15687] syz_tun: tun_net_xmit 42 [ 342.991092][T15687] syz_tun: tun_net_xmit 42 [ 342.997844][T15687] syz_tun: tun_net_xmit 42 [ 343.002623][T15687] syz_tun: tun_net_xmit 42 [ 343.008576][T12155] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.018081][T15687] syz_tun: tun_net_xmit 42 [ 343.022976][T15687] syz_tun: tun_net_xmit 42 [ 343.027762][T12155] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.054783][T15687] syz_tun: tun_net_xmit 42 [ 343.059604][T15687] syz_tun: tun_net_xmit 42 [ 343.075084][T15687] syz_tun: tun_net_xmit 42 [ 343.080142][T15687] syz_tun: tun_net_xmit 42 [ 343.103478][T15687] syz_tun: tun_net_xmit 42 [ 343.117227][T12155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.118694][T15687] syz_tun: tun_net_xmit 42 [ 343.128955][T12155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.146729][T15687] syz_tun: tun_net_xmit 42 [ 343.159538][T15687] syz_tun: tun_net_xmit 42 [ 343.168879][T15687] syz_tun: tun_net_xmit 42 [ 343.173558][T15687] syz_tun: tun_net_xmit 42 [ 343.182040][ T3571] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.207325][T15687] syz_tun: tun_net_xmit 42 [ 343.223435][T15999] netlink: 'syz.2.2904': attribute type 2 has an invalid length. [ 343.231059][ T3571] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.239019][T15687] syz_tun: tun_net_xmit 42 [ 343.247965][T15687] syz_tun: tun_net_xmit 42 [ 343.255808][T15687] syz_tun: tun_net_xmit 42 [ 343.260565][T15687] syz_tun: tun_net_xmit 42 [ 343.271461][T15999] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2904'. [ 343.276202][T15687] syz_tun: tun_net_xmit 42 [ 343.290550][T15687] syz_tun: tun_net_xmit 42 [ 343.296451][T15687] syz_tun: tun_net_xmit 42 [ 343.327946][T15687] syz_tun: tun_net_xmit 42 [ 343.344998][T15687] syz_tun: tun_net_xmit 42 [ 343.364321][T15687] syz_tun: tun_net_xmit 42 [ 343.369207][T15687] syz_tun: tun_net_xmit 42 [ 343.386358][T15687] syz_tun: tun_net_xmit 42 [ 343.393120][T15687] syz_tun: tun_net_xmit 42 [ 343.427797][T16007] netlink: 'syz.0.2831': attribute type 32 has an invalid length. [ 343.530562][T16012] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2908'. [ 343.672355][T16022] TCP: TCP_TX_DELAY enabled [ 343.876578][T16030] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2912'. [ 344.121510][ T5183] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 344.133359][ T5183] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 344.152105][ T5183] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 344.160398][ T5183] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 344.168015][ T5183] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 344.204159][ T5874] Bluetooth: hci0: command tx timeout [ 344.260213][T16040] lo speed is unknown, defaulting to 1000 [ 344.300403][T16053] (unnamed net_device) (uninitialized): option mode: invalid value (133) [ 344.421131][T16061] netlink: 'syz.0.2920': attribute type 1 has an invalid length. [ 344.533666][T16060] bond6 (unregistering): Released all slaves [ 344.610698][T16071] tc_dump_action: action bad kind [ 344.707844][T16077] team_slave_0: mtu greater than device maximum [ 344.955891][T16040] chnl_net:caif_netlink_parms(): no params data found [ 344.956690][T16098] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2931'. [ 345.172928][T16040] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.188929][T16040] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.196823][T16040] bridge_slave_0: entered allmulticast mode [ 345.206625][T16040] bridge_slave_0: entered promiscuous mode [ 345.216392][T16040] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.234944][T16040] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.242338][T16040] bridge_slave_1: entered allmulticast mode [ 345.250071][T16040] bridge_slave_1: entered promiscuous mode [ 345.299720][T16109] tipc: Enabled bearer , priority 0 [ 345.332066][T16040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.348852][T16040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.359727][T16109] syzkaller0: entered promiscuous mode [ 345.377008][T16109] syzkaller0: entered allmulticast mode [ 345.431681][T16040] team0: Port device team_slave_0 added [ 345.489747][T16109] tipc: Resetting bearer [ 345.508013][T16040] team0: Port device team_slave_1 added [ 345.518941][T16108] tipc: Resetting bearer [ 345.532296][T16108] tipc: Disabling bearer [ 345.610050][T16127] netlink: 'syz.3.2941': attribute type 1 has an invalid length. [ 345.781444][T16040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.791403][T16040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.826023][T16040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.857787][T16040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.879643][T16040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.915755][T16040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.041042][T16152] __nla_validate_parse: 4 callbacks suppressed [ 346.041070][T16152] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2948'. [ 346.080419][T16152] veth0_macvtap: left promiscuous mode [ 346.105623][T16040] hsr_slave_0: entered promiscuous mode [ 346.113536][T16040] hsr_slave_1: entered promiscuous mode [ 346.121922][T16040] debugfs: 'hsr0' already exists in 'hsr' [ 346.135294][T16040] Cannot create hsr debugfs directory [ 346.204452][ T5874] Bluetooth: hci3: command tx timeout [ 346.398497][T16182] syz_tun: tun_net_xmit 42 [ 346.498058][T16192] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 346.648743][ T8708] lo speed is unknown, defaulting to 1000 [ 346.656183][ T8708] syz0: Port: 1 Link DOWN [ 346.661599][T15680] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 346.677558][T15680] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.690586][T15680] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 346.700907][T15680] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.711758][T16040] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.728574][ T8708] lo speed is unknown, defaulting to 1000 [ 346.739081][T15680] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 346.750309][T15680] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.759714][T15680] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 346.775146][T15680] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.788187][T16040] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.811451][T16203] delete_channel: no stack [ 346.853622][T16205] openvswitch: netlink: Key 6 has unexpected len 164 expected 2 [ 346.881678][T16040] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.912646][T16207] bond6: entered promiscuous mode [ 346.918525][T16207] bond6: entered allmulticast mode [ 346.930337][T16207] 8021q: adding VLAN 0 to HW filter on device bond6 [ 346.939612][T16040] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.958187][T16207] dvmrp0: entered allmulticast mode [ 347.050674][T16040] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 347.061591][T16040] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 347.074396][T16040] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 347.086723][T16040] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 347.133697][T16223] bridge: RTM_NEWNEIGH with invalid ether address [ 347.147604][T16223] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2967'. [ 347.159492][T16223] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2967'. [ 347.172857][T16213] netlink: 'syz.4.2967': attribute type 3 has an invalid length. [ 347.257206][T16040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.281876][T16040] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.306053][ T8355] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.313228][ T8355] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.328057][T16234] openvswitch: netlink: Missing key (keys=40, expected=80) [ 347.350858][ T8355] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.358281][ T8355] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.392904][T16240] sctp: [Deprecated]: syz.4.2970 (pid 16240) Use of struct sctp_assoc_value in delayed_ack socket option. [ 347.392904][T16240] Use struct sctp_sack_info instead [ 347.413966][ C0] syz_tun: tun_net_xmit 42 [ 347.428916][T16235] netlink: 27 bytes leftover after parsing attributes in process `syz.3.2972'. [ 347.698333][T16252] lo speed is unknown, defaulting to 1000 [ 347.744036][T16254] netlink: 788 bytes leftover after parsing attributes in process `syz.2.2976'. [ 347.860450][T16040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 347.869548][T16254] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2976'. [ 347.926845][T16040] veth0_vlan: entered promiscuous mode [ 347.942550][T16040] veth1_vlan: entered promiscuous mode [ 348.007722][T16040] veth0_macvtap: entered promiscuous mode [ 348.048731][T16247] lo speed is unknown, defaulting to 1000 [ 348.118007][T16040] veth1_macvtap: entered promiscuous mode [ 348.196817][T16040] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 348.240454][T16040] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 348.287636][ T5874] Bluetooth: hci3: command tx timeout [ 348.328616][T16278] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2983'. [ 348.390808][ T801] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.445007][ C0] syz_tun: tun_net_xmit 42 [ 348.501730][ T801] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.554589][ T801] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.583884][ T801] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.862528][T16317] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2992'. [ 348.922052][ T3571] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.956499][ T3571] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.039953][ T3571] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.040931][T16337] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 349.065211][ T3571] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.241634][T16349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2907'. [ 349.244885][ T8705] syz_tun: tun_net_xmit 110 [ 349.436735][T16358] netlink: 'syz.4.3003': attribute type 16 has an invalid length. [ 349.470788][ T5886] syz_tun: tun_net_xmit 110 [ 349.487324][T16358] netlink: 'syz.4.3003': attribute type 17 has an invalid length. [ 349.649628][ T801] bond5: (slave ip6gretap1): link status up again after 0 ms [ 349.666837][T16358] gretap0: left promiscuous mode [ 349.694197][ T801] bond5: (slave ip6gretap1): link status up again after 0 ms [ 349.725982][ T801] bond5: (slave ip6gretap1): link status up again after 0 ms [ 349.757684][T16358] sit0: left promiscuous mode [ 349.761441][T16365] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3006'. [ 349.794028][ T801] bond5: (slave ip6gretap1): link status up again after 0 ms [ 349.801850][ T5183] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 349.809610][ T5183] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 349.816717][T12155] bond5: (slave ip6gretap1): link status up again after 0 ms [ 349.824649][ T5183] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 349.832309][T16358] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 349.832815][ T5183] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 349.852599][ T5886] syz_tun: tun_net_xmit 110 [ 349.856989][ T5183] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 349.860047][T12155] bond5: (slave ip6gretap1): link status up again after 0 ms [ 349.911333][ T5863] bond0: (slave syz_tun): Releasing backup interface [ 349.918890][ T5927] syz_tun: tun_net_xmit 110 [ 349.923715][ T3571] bond5: (slave ip6gretap1): link status up again after 0 ms [ 349.955729][ T13] bond5: (slave ip6gretap1): link status up again after 0 ms [ 349.963660][T16365] vlan3: entered allmulticast mode [ 349.980498][T16365] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 349.995116][ T8355] bond5: (slave ip6gretap1): link status up again after 0 ms [ 350.043638][T16383] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 350.066438][ T801] bond5: (slave ip6gretap1): link status up again after 0 ms [ 350.094990][ T801] bond5: (slave ip6gretap1): link status up again after 0 ms [ 350.202791][T16368] lo speed is unknown, defaulting to 1000 [ 350.227477][T16397] netlink: 'syz.4.3013': attribute type 10 has an invalid length. [ 350.261412][T16398] netlink: 'syz.4.3013': attribute type 10 has an invalid length. [ 350.301307][T16397] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.316762][T16397] team0: entered allmulticast mode [ 350.329379][T16397] team_slave_0: entered allmulticast mode [ 350.335840][T16397] team_slave_1: entered allmulticast mode [ 350.342344][T16397] bond0: (slave team0): Enslaving as an active interface with an up link [ 350.354199][T16397] netlink: 'syz.4.3013': attribute type 10 has an invalid length. [ 350.370104][ T5183] Bluetooth: hci3: command tx timeout [ 350.406454][T16398] syz_tun: entered allmulticast mode [ 350.412536][T16398] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 350.860186][T16368] chnl_net:caif_netlink_parms(): no params data found [ 351.059769][T16368] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.069214][T16368] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.077524][T16368] bridge_slave_0: entered allmulticast mode [ 351.086369][T16368] bridge_slave_0: entered promiscuous mode [ 351.096891][T16368] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.104210][T16368] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.111784][T16368] bridge_slave_1: entered allmulticast mode [ 351.120102][T16368] bridge_slave_1: entered promiscuous mode [ 351.164360][T16461] __nla_validate_parse: 3 callbacks suppressed [ 351.164386][T16461] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3026'. [ 351.184303][T16368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.197081][T16368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.263684][T16368] team0: Port device team_slave_0 added [ 351.277882][T16368] team0: Port device team_slave_1 added [ 351.289392][T16468] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3032'. [ 351.310638][T16368] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.320237][T16368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.350091][T16368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.362751][T16368] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.372241][T16368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.399262][T16368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.399785][T16470] netlink: 'syz.1.3033': attribute type 1 has an invalid length. [ 351.457452][T16368] hsr_slave_0: entered promiscuous mode [ 351.475380][T16368] hsr_slave_1: entered promiscuous mode [ 351.485709][T16368] debugfs: 'hsr0' already exists in 'hsr' [ 351.491664][T16368] Cannot create hsr debugfs directory [ 351.618061][T16475] veth3: entered promiscuous mode [ 351.635700][T16480] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.3035'. [ 351.702399][T16368] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 351.716737][T16368] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.732932][T16489] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3038'. [ 351.802351][T16368] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 351.831275][T16368] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.891314][T16368] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 351.915392][T16368] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.938698][T16505] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3042'. [ 351.976614][ T5183] Bluetooth: hci2: command tx timeout [ 351.983435][T16368] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 351.995566][T16368] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.009395][T16507] tipc: Started in network mode [ 352.014531][T16507] tipc: Node identity da2f4a6c5c9b, cluster identity 4711 [ 352.021933][T16507] tipc: Enabled bearer , priority 0 [ 352.032212][T16506] tipc: Disabling bearer [ 352.110634][T16368] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 352.124225][T16368] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 352.151876][T16368] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 352.165342][T16368] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 352.180326][T16516] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3046'. [ 352.329190][T16368] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.345501][T16532] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3049'. [ 352.382287][T16368] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.397680][ T3571] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.405221][ T3571] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.426755][ T3571] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.429241][T16534] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.3050'. [ 352.434048][ T3571] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.445622][ T5183] Bluetooth: hci3: command tx timeout [ 352.581843][T16544] netlink: 596 bytes leftover after parsing attributes in process `syz.0.3051'. [ 352.715122][T16368] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.796185][T16368] veth0_vlan: entered promiscuous mode [ 352.807837][T16368] veth1_vlan: entered promiscuous mode [ 352.839563][T16368] veth0_macvtap: entered promiscuous mode [ 352.850166][T16368] veth1_macvtap: entered promiscuous mode [ 352.877591][T16368] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 352.899794][T16368] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 352.923728][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.944831][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.953597][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.972019][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.043030][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.069059][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.099282][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.108880][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 353.239488][T16581] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3002'. [ 353.761810][ T5875] bond0: (slave syz_tun): Releasing backup interface [ 353.789796][ T5875] syz_tun (unregistering): left allmulticast mode [ 353.824052][ T5874] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 353.831864][ T5874] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 353.840684][ T5874] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 353.850095][ T5874] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 353.858495][ T5874] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 353.907781][T16615] lo speed is unknown, defaulting to 1000 [ 354.044578][ T5874] Bluetooth: hci2: command tx timeout [ 354.172559][T16638] syzkaller1: entered promiscuous mode [ 354.180645][T16638] syzkaller1: entered allmulticast mode [ 354.256295][T16643] tipc: Started in network mode [ 354.263188][T16643] tipc: Node identity 866fa9a244b, cluster identity 4711 [ 354.274868][T16643] tipc: Enabled bearer , priority 0 [ 354.318018][T16646] tipc: Enabling of bearer rejected, already enabled [ 354.409474][T16646] tipc: Disabling bearer [ 354.437863][T16615] chnl_net:caif_netlink_parms(): no params data found [ 354.526153][T16658] tipc: Enabled bearer , priority 0 [ 354.541048][T16658] tipc: Resetting bearer [ 354.570114][T16658] tipc: Resetting bearer [ 354.597090][T16615] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.606913][T16615] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.616287][T16615] bridge_slave_0: entered allmulticast mode [ 354.623729][T16615] bridge_slave_0: entered promiscuous mode [ 354.645228][T16615] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.664382][T16615] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.671992][T16615] bridge_slave_1: entered allmulticast mode [ 354.702878][T16615] bridge_slave_1: entered promiscuous mode [ 354.736608][T16676] FAULT_INJECTION: forcing a failure. [ 354.736608][T16676] name failslab, interval 1, probability 0, space 0, times 0 [ 354.751664][T16676] CPU: 1 UID: 0 PID: 16676 Comm: syz.0.3096 Not tainted syzkaller #0 PREEMPT(full) [ 354.751693][T16676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 354.751709][T16676] Call Trace: [ 354.751716][T16676] [ 354.751725][T16676] dump_stack_lvl+0x189/0x250 [ 354.751757][T16676] ? __pfx____ratelimit+0x10/0x10 [ 354.751787][T16676] ? __pfx_dump_stack_lvl+0x10/0x10 [ 354.751811][T16676] ? __pfx__printk+0x10/0x10 [ 354.751840][T16676] ? fs_reclaim_acquire+0x7d/0x100 [ 354.751873][T16676] ? rcu_is_watching+0x15/0xb0 [ 354.751893][T16676] ? __pfx___might_resched+0x10/0x10 [ 354.751912][T16676] ? lock_acquire+0x5f/0x360 [ 354.751944][T16676] should_fail_ex+0x414/0x560 [ 354.751974][T16676] should_failslab+0xa8/0x100 [ 354.752006][T16676] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 354.752034][T16676] ? __alloc_skb+0x112/0x2d0 [ 354.752068][T16676] __alloc_skb+0x112/0x2d0 [ 354.752114][T16676] netlink_sendmsg+0x5c6/0xb30 [ 354.752153][T16676] ? __pfx_netlink_sendmsg+0x10/0x10 [ 354.752187][T16676] ? aa_sock_msg_perm+0xf1/0x1d0 [ 354.752208][T16676] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 354.752232][T16676] ? __pfx_netlink_sendmsg+0x10/0x10 [ 354.752265][T16676] __sock_sendmsg+0x21c/0x270 [ 354.752293][T16676] ____sys_sendmsg+0x505/0x830 [ 354.752318][T16676] ? __pfx_____sys_sendmsg+0x10/0x10 [ 354.752344][T16676] ? import_iovec+0x74/0xa0 [ 354.752375][T16676] ___sys_sendmsg+0x21f/0x2a0 [ 354.752398][T16676] ? __pfx____sys_sendmsg+0x10/0x10 [ 354.752439][T16676] ? __fget_files+0x2a/0x420 [ 354.752470][T16676] ? __fget_files+0x3a0/0x420 [ 354.752507][T16676] __x64_sys_sendmsg+0x19b/0x260 [ 354.752530][T16676] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 354.752557][T16676] ? __pfx_ksys_write+0x10/0x10 [ 354.752584][T16676] ? rcu_is_watching+0x15/0xb0 [ 354.752607][T16676] ? rcu_is_watching+0x15/0xb0 [ 354.752628][T16676] do_syscall_64+0xfa/0x3b0 [ 354.752666][T16676] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.752688][T16676] ? clear_bhb_loop+0x60/0xb0 [ 354.752711][T16676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.752732][T16676] RIP: 0033:0x7f1fd978ebe9 [ 354.752751][T16676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 354.752770][T16676] RSP: 002b:00007f1fda682038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 354.752793][T16676] RAX: ffffffffffffffda RBX: 00007f1fd99b5fa0 RCX: 00007f1fd978ebe9 [ 354.752807][T16676] RDX: 0000000004004090 RSI: 00002000000002c0 RDI: 0000000000000003 [ 354.752822][T16676] RBP: 00007f1fda682090 R08: 0000000000000000 R09: 0000000000000000 [ 354.752834][T16676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 354.752846][T16676] R13: 00007f1fd99b6038 R14: 00007f1fd99b5fa0 R15: 00007ffc399e18d8 [ 354.752871][T16676] [ 355.067912][T16615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 355.078046][ T13] net_ratelimit: 33 callbacks suppressed [ 355.078079][ T13] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 355.096500][ T801] tipc: Resetting bearer [ 355.113650][ T8355] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.147983][T16615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 355.170055][T16686] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 355.195461][T16684] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 355.210456][T16684] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 355.221563][T16684] bond0 (unregistering): Released all slaves [ 355.238755][T16693] netlink: 'syz.0.3098': attribute type 5 has an invalid length. [ 355.274429][ T3571] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 355.298207][ T8355] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.322118][T16615] team0: Port device team_slave_0 added [ 355.385839][ T8355] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.415629][T16615] team0: Port device team_slave_1 added [ 355.464538][ T3571] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 355.551310][ T8355] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.595215][ T801] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 355.625538][T16615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 355.632521][T16615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.661564][T16615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 355.664617][ T9] tipc: Node number set to 4142078811 [ 355.695347][T16615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 355.702547][T16615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.738765][T16615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 355.754570][ T3571] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 355.834376][T16724] netlink: zone id is out of range [ 355.857336][T16723] openvswitch: netlink: Flow key attr not present in new flow. [ 355.871300][T16615] hsr_slave_0: entered promiscuous mode [ 355.883896][ T5874] Bluetooth: hci4: command tx timeout [ 355.893329][T16615] hsr_slave_1: entered promiscuous mode [ 355.922827][T16615] debugfs: 'hsr0' already exists in 'hsr' [ 355.929770][T16615] Cannot create hsr debugfs directory [ 355.939779][T16730] tipc: Cannot configure node identity twice [ 356.018310][T16738] netlink: 'syz.2.3114': attribute type 26 has an invalid length. [ 356.033053][T16732] IPVS: length: 4096 != 8 [ 356.053350][T15680] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 356.078345][T16732] netlink: 'syz.1.3115': attribute type 7 has an invalid length. [ 356.095806][ T8355] veth0_to_bond: left promiscuous mode [ 356.101715][ T8355] bridge3: port 2(veth0_to_bond) entered disabled state [ 356.111477][ T8355] veth5: left allmulticast mode [ 356.117976][ T8355] veth5: left promiscuous mode [ 356.123195][ T8355] bridge3: port 1(veth5) entered disabled state [ 356.131005][ T5874] Bluetooth: hci2: command tx timeout [ 356.245717][ T8355] bond5 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 356.256518][ T8355] bond5 (unregistering): (slave ip6gretap1): Releasing backup interface [ 356.265573][ T8355] bond5 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - a2:33:27:37:c6:69 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 356.329314][T16751] __nla_validate_parse: 11 callbacks suppressed [ 356.329336][T16751] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3121'. [ 356.350416][ T8355] dvmrp0 (unregistering): left allmulticast mode [ 356.666827][ T8355] bond2 (unregistering): (slave bridge6): Releasing active interface [ 356.825820][T16756] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3123'. [ 356.888498][ T8355] bond0 (unregistering): (slave 1!€ÿ): Releasing backup interface [ 356.897619][ T8355] !€ÿ: left allmulticast mode [ 356.904054][ T8355] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 356.913134][ T8355] bond_slave_1: left allmulticast mode [ 356.920500][ T8355] bond0 (unregistering): (slave team0): Releasing backup interface [ 356.931615][ T8355] team0: left allmulticast mode [ 356.936592][ T8355] team_slave_0: left allmulticast mode [ 356.942101][ T8355] team_slave_1: left allmulticast mode [ 356.950551][ T8355] bond0 (unregistering): Released all slaves [ 356.962836][ T8355] bond1 (unregistering): (slave veth9): Releasing active interface [ 356.974487][ T8355] bond1 (unregistering): Released all slaves [ 356.986010][ T8355] bond2 (unregistering): Released all slaves [ 356.998232][ T8355] bond3 (unregistering): Released all slaves [ 357.010190][ T8355] bond4 (unregistering): Released all slaves [ 357.024249][ T8355] bond5 (unregistering): (slave veth15): Releasing backup interface [ 357.033578][ T8355] bond5 (unregistering): Released all slaves [ 357.050609][ T8355] bond6 (unregistering): Released all slaves [ 357.139134][ T8355] : left promiscuous mode [ 357.197939][T16760] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 357.198437][T16762] netlink: 'syz.1.3126': attribute type 23 has an invalid length. [ 357.205263][T16760] IPv6: NLM_F_CREATE should be set when creating new route [ 357.205315][T16760] IPv6: NLM_F_CREATE should be set when creating new route [ 357.205336][T16760] IPv6: NLM_F_CREATE should be set when creating new route [ 357.246357][T16760] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 357.256968][ T8355] tipc: Disabling bearer [ 357.263136][ T8355] tipc: Left network mode [ 357.297340][T16766] netlink: 'syz.2.3127': attribute type 1 has an invalid length. [ 357.308018][T16762] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3126'. [ 357.329752][ T8355] IPVS: stopping master sync thread 10807 ... [ 357.341033][T16771] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3127'. [ 357.348046][T16772] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3128'. [ 357.394863][T16766] veth3: entered promiscuous mode [ 357.463253][T16774] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3130'. [ 357.479356][T16776] netlink: 'syz.1.3131': attribute type 1 has an invalid length. [ 357.588719][T16780] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3133'. [ 357.739623][T16788] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3135'. [ 357.801147][T16795] FAULT_INJECTION: forcing a failure. [ 357.801147][T16795] name failslab, interval 1, probability 0, space 0, times 0 [ 357.820208][T16795] CPU: 0 UID: 0 PID: 16795 Comm: syz.1.3138 Not tainted syzkaller #0 PREEMPT(full) [ 357.820240][T16795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 357.820254][T16795] Call Trace: [ 357.820261][T16795] [ 357.820271][T16795] dump_stack_lvl+0x189/0x250 [ 357.820301][T16795] ? __pfx____ratelimit+0x10/0x10 [ 357.820331][T16795] ? __pfx_dump_stack_lvl+0x10/0x10 [ 357.820355][T16795] ? __pfx__printk+0x10/0x10 [ 357.820382][T16795] ? rcu_is_watching+0x15/0xb0 [ 357.820404][T16795] ? __pfx___might_resched+0x10/0x10 [ 357.820424][T16795] ? lock_acquire+0x5f/0x360 [ 357.820456][T16795] should_fail_ex+0x414/0x560 [ 357.820485][T16795] should_failslab+0xa8/0x100 [ 357.820517][T16795] __kmalloc_noprof+0xcb/0x4f0 [ 357.820557][T16795] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 357.820587][T16795] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 357.820617][T16795] genl_family_rcv_msg_doit+0xb8/0x300 [ 357.820645][T16795] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 357.820675][T16795] ? apparmor_capable+0x137/0x1b0 [ 357.820701][T16795] ? bpf_lsm_capable+0x9/0x20 [ 357.820729][T16795] ? security_capable+0x7e/0x2e0 [ 357.820775][T16795] genl_rcv_msg+0x60e/0x790 [ 357.820801][T16795] ? __pfx_genl_rcv_msg+0x10/0x10 [ 357.820823][T16795] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 357.820854][T16795] ? __pfx_nl80211_set_rekey_data+0x10/0x10 [ 357.820885][T16795] ? __pfx_nl80211_post_doit+0x10/0x10 [ 357.820909][T16795] ? __asan_memcpy+0x40/0x70 [ 357.820931][T16795] ? __pfx_ref_tracker_free+0x10/0x10 [ 357.820965][T16795] netlink_rcv_skb+0x208/0x470 [ 357.820996][T16795] ? __pfx_genl_rcv_msg+0x10/0x10 [ 357.821019][T16795] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 357.821055][T16795] ? lock_release+0x4b/0x3e0 [ 357.821087][T16795] ? down_read+0x1ad/0x2e0 [ 357.821108][T16795] genl_rcv+0x28/0x40 [ 357.821129][T16795] netlink_unicast+0x82c/0x9e0 [ 357.821161][T16795] ? __pfx_netlink_unicast+0x10/0x10 [ 357.821189][T16795] ? netlink_sendmsg+0x642/0xb30 [ 357.821222][T16795] ? skb_put+0x11b/0x210 [ 357.821242][T16795] netlink_sendmsg+0x805/0xb30 [ 357.821280][T16795] ? __pfx_netlink_sendmsg+0x10/0x10 [ 357.821312][T16795] ? aa_sock_msg_perm+0xf1/0x1d0 [ 357.821332][T16795] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 357.821355][T16795] ? __pfx_netlink_sendmsg+0x10/0x10 [ 357.821387][T16795] __sock_sendmsg+0x21c/0x270 [ 357.821416][T16795] ____sys_sendmsg+0x505/0x830 [ 357.821441][T16795] ? __pfx_____sys_sendmsg+0x10/0x10 [ 357.821467][T16795] ? import_iovec+0x74/0xa0 [ 357.821492][T16795] ___sys_sendmsg+0x21f/0x2a0 [ 357.821522][T16795] ? __pfx____sys_sendmsg+0x10/0x10 [ 357.821563][T16795] ? __fget_files+0x2a/0x420 [ 357.821595][T16795] ? __fget_files+0x3a0/0x420 [ 357.821632][T16795] __x64_sys_sendmsg+0x19b/0x260 [ 357.821655][T16795] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 357.821682][T16795] ? __pfx_ksys_write+0x10/0x10 [ 357.821708][T16795] ? rcu_is_watching+0x15/0xb0 [ 357.821730][T16795] ? rcu_is_watching+0x15/0xb0 [ 357.821752][T16795] do_syscall_64+0xfa/0x3b0 [ 357.821784][T16795] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.821805][T16795] ? clear_bhb_loop+0x60/0xb0 [ 357.821829][T16795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.821855][T16795] RIP: 0033:0x7fbe6878ebe9 [ 357.821873][T16795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 357.821893][T16795] RSP: 002b:00007fbe695a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 357.821916][T16795] RAX: ffffffffffffffda RBX: 00007fbe689b5fa0 RCX: 00007fbe6878ebe9 [ 357.821932][T16795] RDX: 0000000004004090 RSI: 00002000000002c0 RDI: 0000000000000003 [ 357.821946][T16795] RBP: 00007fbe695a7090 R08: 0000000000000000 R09: 0000000000000000 [ 357.821959][T16795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 357.821971][T16795] R13: 00007fbe689b6038 R14: 00007fbe689b5fa0 R15: 00007ffe4d6b64a8 [ 357.821996][T16795] [ 357.826593][T16790] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3137'. [ 357.965065][ T5874] Bluetooth: hci4: command tx timeout [ 358.208163][ T5874] Bluetooth: hci2: command tx timeout [ 358.257780][ T8355] hsr_slave_0: left promiscuous mode [ 358.276618][ T8355] hsr_slave_1: left promiscuous mode [ 358.308547][ T8355] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 358.326798][ T8355] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 358.340700][ T8355] vlan0: left allmulticast mode [ 358.351407][ T8355] veth0_vlan: left allmulticast mode [ 358.363193][ T8355] vlan0: left promiscuous mode [ 358.377509][ T8355] veth1_macvtap: left promiscuous mode [ 358.388965][ T8355] veth0_macvtap: left promiscuous mode [ 358.400789][ T8355] veth1_vlan: left promiscuous mode [ 358.408146][ T8355] veth0_vlan: left promiscuous mode [ 358.519915][ T8355] pim6reg (unregistering): left allmulticast mode [ 358.631898][ T8355] team0 (unregistering): Port device team_slave_1 removed [ 358.648346][ T8355] team0 (unregistering): Port device team_slave_0 removed [ 358.737059][T16802] tipc: Started in network mode [ 358.743279][T16802] tipc: Node identity 1216ef6da06f, cluster identity 4711 [ 358.753266][T16802] tipc: Enabled bearer , priority 0 [ 358.780868][T16803] syzkaller0: entered promiscuous mode [ 358.821718][T16803] syzkaller0: entered allmulticast mode [ 358.843371][T16823] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3143'. [ 358.848190][T16810] tipc: Resetting bearer [ 358.888419][T16826] netlink: 'syz.0.3144': attribute type 1 has an invalid length. [ 358.898176][T16798] tipc: Resetting bearer [ 358.917416][T16798] tipc: Disabling bearer [ 358.927505][T16829] xt_HMARK: proto mask must be zero with L3 mode [ 358.970043][T16615] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 359.007653][T16615] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 359.070414][T16615] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 359.091207][T16615] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 359.092737][T16837] netlink: 'syz.1.3149': attribute type 1 has an invalid length. [ 359.099024][T16835] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 359.343340][T16615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.389283][T16615] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.405735][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.412925][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.444979][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.452124][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.527967][T16615] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 359.538618][T16615] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 359.653561][T16880] veth3: entered promiscuous mode [ 359.675776][T16884] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 359.959315][T16615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 360.046836][ T5874] Bluetooth: hci4: command tx timeout [ 360.140871][T16912] IPVS: set_ctl: invalid protocol: 47 224.0.0.1:20003 [ 360.427483][T16934] netlink: 'syz.1.3174': attribute type 1 has an invalid length. [ 360.469250][T16615] veth0_vlan: entered promiscuous mode [ 360.497619][T16615] veth1_vlan: entered promiscuous mode [ 360.563134][T16615] veth0_macvtap: entered promiscuous mode [ 360.584586][T16615] veth1_macvtap: entered promiscuous mode [ 360.639329][T16615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 360.686120][T16954] openvswitch: netlink: Message has 5 unknown bytes. [ 360.696898][T16615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 360.717856][ T801] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.751858][ T37] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.762582][ T37] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.793579][ T37] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.962287][T16973] netlink: 'syz.1.3188': attribute type 21 has an invalid length. [ 360.963723][ T8355] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.999306][ T8355] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.041816][T16981] vxcan1: tx address claim with dlc 0 [ 361.088286][T15680] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.153891][T15680] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.227630][T16992] netlink: 'syz.0.3193': attribute type 1 has an invalid length. [ 361.292462][T16992] 8021q: adding VLAN 0 to HW filter on device bond1 [ 361.339284][T16994] bridge3: port 1(veth3) entered blocking state [ 361.346364][T16994] bridge3: port 1(veth3) entered disabled state [ 361.366493][T17005] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 361.380185][T16994] veth3: entered allmulticast mode [ 361.389381][T16994] veth3: entered promiscuous mode [ 361.449232][T17003] bridge3: port 2(veth0_to_bond) entered blocking state [ 361.467565][T17003] bridge3: port 2(veth0_to_bond) entered disabled state [ 361.479466][T17003] veth0_to_bond: entered allmulticast mode [ 361.489633][T17003] veth0_to_bond: entered promiscuous mode [ 361.517405][T17019] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 361.534110][T17018] __nla_validate_parse: 11 callbacks suppressed [ 361.534131][T17018] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3200'. [ 361.539153][T17019] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3201'. [ 361.544711][T17018] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3200'. [ 361.611359][T17024] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3202'. [ 361.615966][T17028] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3203'. [ 361.710771][T17035] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3205'. [ 361.861484][T17043] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3207'. [ 361.896602][T17046] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3209'. [ 361.966096][T17051] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3208'. [ 362.030378][T17054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3210'. [ 362.125863][ T5874] Bluetooth: hci4: command tx timeout [ 362.466319][T17094] netlink: 'syz.3.3222': attribute type 11 has an invalid length. [ 362.483547][T17089] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 362.527168][ T31] INFO: task kworker/1:0H:25 blocked for more than 143 seconds. [ 362.535962][ T31] Not tainted syzkaller #0 [ 362.552129][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 362.567104][T17089] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 362.578696][ T31] task:kworker/1:0H state:D stack:26152 pid:25 tgid:25 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 362.601812][ T31] Workqueue: kblockd blk_mq_requeue_work [ 362.607965][ T31] Call Trace: [ 362.611393][ T31] [ 362.614560][ T31] __schedule+0x1798/0x4cc0 [ 362.619128][ T31] ? do_raw_spin_lock+0x121/0x290 [ 362.625376][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 362.630812][ T31] ? __pfx___schedule+0x10/0x10 [ 362.635913][ T31] ? _raw_spin_lock_irq+0xae/0xf0 [ 362.641215][ T31] ? lock_release+0x4b/0x3e0 [ 362.646058][ T31] ? rcu_is_watching+0x15/0xb0 [ 362.650846][ T31] schedule+0x165/0x360 [ 362.656016][ T31] schedule_timeout+0x12b/0x270 [ 362.660953][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 362.667489][ T31] ? __pfx_process_timeout+0x10/0x10 [ 362.673572][ T31] ? prepare_to_wait_event+0x437/0x480 [ 362.679280][ T31] nbd_queue_rq+0x662/0xf10 [ 362.688918][ T31] ? __pfx_nbd_queue_rq+0x10/0x10 [ 362.694172][ T31] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 362.700040][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 362.706382][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 362.712523][ T31] blk_mq_dispatch_rq_list+0x4bd/0x1900 [ 362.718816][ T31] ? sbitmap_find_bit+0x47f/0x520 [ 362.724041][ T31] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 362.730055][ T31] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 362.736006][ T31] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 362.742470][ T31] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 362.749777][ T31] ? blk_mq_hw_queue_need_run+0x13c/0x670 [ 362.755634][ T31] ? rcu_is_watching+0x15/0xb0 [ 362.760439][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 362.766001][ T31] ? rcu_is_watching+0x15/0xb0 [ 362.770786][ T31] ? lock_acquire+0x5f/0x360 [ 362.776231][ T31] ? sbitmap_any_bit_set+0x101/0x140 [ 362.781584][ T31] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 362.788770][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 362.794315][ T31] blk_mq_run_hw_queue+0x348/0x4f0 [ 362.799677][ T31] blk_mq_run_hw_queues+0x33e/0x430 [ 362.805715][ T31] ? __pfx_blk_mq_run_hw_queues+0x10/0x10 [ 362.811816][ T31] ? rcu_is_watching+0x15/0xb0 [ 362.817088][ T31] blk_mq_requeue_work+0x717/0x760 [ 362.822390][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 362.828664][ T31] ? rcu_is_watching+0x15/0xb0 [ 362.834683][ T31] ? __pfx_blk_mq_requeue_work+0x10/0x10 [ 362.840857][ T31] ? lock_acquire+0x5f/0x360 [ 362.845978][ T31] ? rcu_is_watching+0x15/0xb0 [ 362.850956][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 362.857007][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 362.862790][ T31] process_scheduled_works+0xae1/0x17b0 [ 362.868559][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 362.874827][ T31] worker_thread+0x8a0/0xda0 [ 362.879526][ T31] kthread+0x70e/0x8a0 [ 362.883942][ T31] ? __pfx_worker_thread+0x10/0x10 [ 362.889694][ T31] ? __pfx_kthread+0x10/0x10 [ 362.896816][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 362.902319][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 362.907838][ T31] ? __pfx_kthread+0x10/0x10 [ 362.912545][ T31] ret_from_fork+0x3f9/0x770 [ 362.917322][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 362.922527][ T31] ? __switch_to_asm+0x39/0x70 [ 362.927746][ T31] ? __switch_to_asm+0x33/0x70 [ 362.933008][ T31] ? __pfx_kthread+0x10/0x10 [ 362.937749][ T31] ret_from_fork_asm+0x1a/0x30 [ 362.942557][ T31] [ 362.947355][ T31] INFO: lockdep is turned off. [ 362.954843][ T31] NMI backtrace for cpu 1 [ 362.954871][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 362.954897][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 362.954912][ T31] Call Trace: [ 362.954920][ T31] [ 362.954930][ T31] dump_stack_lvl+0x189/0x250 [ 362.954965][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 362.954992][ T31] ? __pfx__printk+0x10/0x10 [ 362.955029][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 362.955057][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 362.955083][ T31] ? __pfx__printk+0x10/0x10 [ 362.955115][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 362.955150][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 362.955174][ T31] watchdog+0xf93/0xfe0 [ 362.955205][ T31] ? watchdog+0x1de/0xfe0 [ 362.955236][ T31] kthread+0x70e/0x8a0 [ 362.955263][ T31] ? __pfx_watchdog+0x10/0x10 [ 362.955289][ T31] ? __pfx_kthread+0x10/0x10 [ 362.955314][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 362.955343][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 362.955370][ T31] ? __pfx_kthread+0x10/0x10 [ 362.955394][ T31] ret_from_fork+0x3f9/0x770 [ 362.955415][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 362.955437][ T31] ? __switch_to_asm+0x39/0x70 [ 362.955464][ T31] ? __switch_to_asm+0x33/0x70 [ 362.955490][ T31] ? __pfx_kthread+0x10/0x10 [ 362.955516][ T31] ret_from_fork_asm+0x1a/0x30 [ 362.955552][ T31] [ 362.955559][ T31] Sending NMI from CPU 1 to CPUs 0: [ 363.116048][ C0] NMI backtrace for cpu 0 [ 363.116071][ C0] CPU: 0 UID: 0 PID: 17107 Comm: modprobe Not tainted syzkaller #0 PREEMPT(full) [ 363.116092][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 363.116104][ C0] RIP: 0010:filter_irq_stacks+0x2d/0xa0 [ 363.116135][ C0] Code: fa 41 57 41 56 41 55 41 54 53 85 f6 74 70 49 89 fe 41 89 f4 31 db 49 bd 00 00 00 00 00 fc ff df 49 89 ff 4c 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 ff e8 94 d0 76 00 49 8b 04 de 48 3d 30 [ 363.116152][ C0] RSP: 0018:ffffc9001c67f908 EFLAGS: 00000a02 [ 363.116170][ C0] RAX: 1ffff920038cff37 RBX: 0000000000000003 RCX: 0000000000000001 [ 363.116182][ C0] RDX: 0000000000000000 RSI: 0000000000000009 RDI: ffffc9001c67f9a0 [ 363.116194][ C0] RBP: ffffc9001c67fbd0 R08: 0000000000000000 R09: 0000000000000000 [ 363.116205][ C0] R10: ffffc9001c67f8b8 R11: ffffffff81ac3810 R12: 0000000000000009 [ 363.116218][ C0] R13: dffffc0000000000 R14: ffffc9001c67f9a0 R15: ffffc9001c67f9b8 [ 363.116231][ C0] FS: 00007fafcd238c80(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000 [ 363.116246][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 363.116258][ C0] CR2: 00007fafcd2cd2fe CR3: 000000007ea52000 CR4: 00000000003526f0 [ 363.116274][ C0] Call Trace: [ 363.116281][ C0] [ 363.116290][ C0] stack_depot_save_flags+0x40/0x860 [ 363.116320][ C0] kasan_save_track+0x4f/0x80 [ 363.116343][ C0] ? kasan_save_track+0x3e/0x80 [ 363.116369][ C0] ? kasan_save_free_info+0x46/0x50 [ 363.116387][ C0] ? __kasan_slab_free+0x5b/0x80 [ 363.116409][ C0] ? kmem_cache_free+0x18f/0x400 [ 363.116434][ C0] ? user_path_at+0x44/0x60 [ 363.116453][ C0] ? user_statfs+0x94/0x170 [ 363.116476][ C0] ? __x64_sys_statfs+0xe0/0x1b0 [ 363.116497][ C0] ? do_syscall_64+0xfa/0x3b0 [ 363.116525][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.116565][ C0] ? user_path_at+0x44/0x60 [ 363.116583][ C0] kasan_save_free_info+0x46/0x50 [ 363.116601][ C0] __kasan_slab_free+0x5b/0x80 [ 363.116624][ C0] kmem_cache_free+0x18f/0x400 [ 363.116650][ C0] user_path_at+0x44/0x60 [ 363.116669][ C0] user_statfs+0x94/0x170 [ 363.116690][ C0] ? __pfx_user_statfs+0x10/0x10 [ 363.116747][ C0] ? __pfx___handle_mm_fault+0x10/0x10 [ 363.116776][ C0] __x64_sys_statfs+0xe0/0x1b0 [ 363.116797][ C0] ? __pfx___x64_sys_statfs+0x10/0x10 [ 363.116819][ C0] ? lock_release+0x4b/0x3e0 [ 363.116845][ C0] ? rcu_is_watching+0x15/0xb0 [ 363.116863][ C0] ? count_memcg_events+0x10b/0x270 [ 363.116880][ C0] ? count_memcg_event_mm+0x21/0x260 [ 363.116905][ C0] ? rcu_is_watching+0x15/0xb0 [ 363.116926][ C0] ? do_user_addr_fault+0xc8a/0x1390 [ 363.116957][ C0] ? rcu_is_watching+0x15/0xb0 [ 363.116975][ C0] do_syscall_64+0xfa/0x3b0 [ 363.117001][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.117019][ C0] ? clear_bhb_loop+0x60/0xb0 [ 363.117039][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.117056][ C0] RIP: 0033:0x7fafcd3f6487 [ 363.117071][ C0] Code: 1f 40 00 48 89 f2 31 c9 48 89 fe bf 9c ff ff ff e9 8e c6 ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 89 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 41 b9 0d 00 f7 d8 64 89 02 b8 [ 363.117086][ C0] RSP: 002b:00007ffea2409d58 EFLAGS: 00000246 ORIG_RAX: 0000000000000089 [ 363.117103][ C0] RAX: ffffffffffffffda RBX: 00007fafcd2cd2fe RCX: 00007fafcd3f6487 [ 363.117116][ C0] RDX: 00007fafcd2d61d4 RSI: 00007ffea2409de0 RDI: 00007fafcd2cd2fe [ 363.117129][ C0] RBP: 00007ffea2409de0 R08: 00007fafcd5e0af8 R09: 0000000000000000 [ 363.117141][ C0] R10: 00007ffea2409b90 R11: 0000000000000246 R12: 00007ffea2409f68 [ 363.117153][ C0] R13: 00007ffea2409f90 R14: 00007fafcd2d44d0 R15: 0000000000000000 [ 363.117173][ C0] [ 363.120577][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 363.490700][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 363.500553][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 363.510735][ T31] Call Trace: [ 363.514046][ T31] [ 363.516999][ T31] dump_stack_lvl+0x99/0x250 [ 363.521726][ T31] ? __asan_memcpy+0x40/0x70 [ 363.526346][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 363.531571][ T31] ? __pfx__printk+0x10/0x10 [ 363.536202][ T31] vpanic+0x281/0x750 [ 363.540218][ T31] ? __pfx_vpanic+0x10/0x10 [ 363.544917][ T31] ? preempt_schedule+0xae/0xc0 [ 363.549809][ T31] ? preempt_schedule_common+0x83/0xd0 [ 363.555395][ T31] panic+0xb9/0xc0 [ 363.559142][ T31] ? __pfx_panic+0x10/0x10 [ 363.563662][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 363.569073][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 363.575613][ T31] watchdog+0xfd2/0xfe0 [ 363.579833][ T31] ? watchdog+0x1de/0xfe0 [ 363.584225][ T31] kthread+0x70e/0x8a0 [ 363.588407][ T31] ? __pfx_watchdog+0x10/0x10 [ 363.593122][ T31] ? __pfx_kthread+0x10/0x10 [ 363.597768][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 363.603111][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 363.608515][ T31] ? __pfx_kthread+0x10/0x10 [ 363.613129][ T31] ret_from_fork+0x3f9/0x770 [ 363.617741][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 363.622868][ T31] ? __switch_to_asm+0x39/0x70 [ 363.627647][ T31] ? __switch_to_asm+0x33/0x70 [ 363.632445][ T31] ? __pfx_kthread+0x10/0x10 [ 363.637109][ T31] ret_from_fork_asm+0x1a/0x30 [ 363.641910][ T31] [ 363.645249][ T31] Kernel Offset: disabled [ 363.649599][ T31] Rebooting in 86400 seconds..