last executing test programs: 2.590463759s ago: executing program 0 (id=6982): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x12}, 0x28) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0x4}, {0xfff1, 0xffff}, {0xfff3}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x39}, @qdisc_kind_options=@q_ingress={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x8004001}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x138, 0x24, 0xd0f, 0x200003, 0x25dfdbff, {0x60, 0x0, 0x0, r6, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}, 0x1, 0x0, 0x0, 0x240400d0}, 0x24008004) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000012c0)=@nat={'nat\x00', 0x670, 0x5, 0x3d0, 0x270, 0x0, 0xfeffffff, 0x270, 0xf8, 0x338, 0x338, 0xffffffff, 0x338, 0x338, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0xffffffff, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x7, 0x3, 0xa}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x4}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @broadcast, 0xff, 0x0, 'lo\x00', 'veth1_to_batadv\x00', {0xff}}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0xe, "8a1c"}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={{0x20}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @private=0xa010101, @rand_addr, @gre_key, @gre_key}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x430) socket$inet_tcp(0x2, 0x1, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x12}, 0x28) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0x4}, {0xfff1, 0xffff}, {0xfff3}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x39}, @qdisc_kind_options=@q_ingress={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x8004001}, 0x0) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x138, 0x24, 0xd0f, 0x200003, 0x25dfdbff, {0x60, 0x0, 0x0, r6, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "abcc61b4e508c02286f1bafc7a22c407a52b0e13291c865d493f15736245f220cd4e40006df455836aa3bd3aaa2c9b95578719c46f89e01798d28b6d63cf7465ea95bd97b018b7afaccdcb28bb42d677b73c44e790f0875fb4b795ca95b7dd712d2c5d69945535f92f74a71236743acd06103cd77bd07f2df5989ee40e409b077cc85e96554beb53c986a216051bd5979a8cfcfe9f98be58ffcf44f6cfda8579dbaedceee578bfd1fb554b6e185e9315425ef0a3fc69d17ede93fc7c46357990f7acfdb8216ea52f604b9f12033688caa4b04adecfc926b3f6ca25bcb5432905e3f30ccbf10cf0f2d00858ba2bbd2702b8d4a7a7c744fbaa2fa35b1c586020d6"}]}}]}, 0x138}, 0x1, 0x0, 0x0, 0x240400d0}, 0x24008004) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000012c0)=@nat={'nat\x00', 0x670, 0x5, 0x3d0, 0x270, 0x0, 0xfeffffff, 0x270, 0xf8, 0x338, 0x338, 0xffffffff, 0x338, 0x338, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0xffffffff, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x7, 0x3, 0xa}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x4}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @broadcast, 0xff, 0x0, 'lo\x00', 'veth1_to_batadv\x00', {0xff}}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0xe, "8a1c"}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={{0x20}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @private=0xa010101, @rand_addr, @gre_key, @gre_key}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x430) (async) 2.253022668s ago: executing program 3 (id=6987): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0xa0001, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xb00}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}]}], {0x14, 0x10}}, 0x90}, 0x1, 0x0, 0x0, 0x20000050}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) r4 = socket(0x10, 0x3, 0x9) (async, rerun: 64) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) (rerun: 64) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'pimreg\x00', 0x5005}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) (async, rerun: 32) r7 = socket$inet_udplite(0x2, 0x2, 0x88) (rerun: 32) setsockopt$IP_VS_SO_SET_FLUSH(r7, 0x0, 0xd, 0x0, 0x0) (async) write$tun(r5, &(0x7f0000001400)={@void, @val={0x3, 0x3, 0x8, 0x6, 0x16, 0xc}, @ipv4=@generic={{0x8, 0x4, 0x2, 0x16, 0xfc0, 0x68, 0x0, 0x9, 0x11, 0x0, @empty, @broadcast, {[@end, @noop, @lsrr={0x83, 0x7, 0x4f, [@dev={0xac, 0x14, 0x14, 0x2e}]}]}}, "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"}}, 0xfca) (async) sendmsg$netlink(r4, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000003680)=[{&(0x7f00000001c0)={0x10}, 0x10}, {&(0x7f0000000400)={0x10, 0x3f2}, 0x10}], 0x2}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000fc0)={'syztnl1\x00', &(0x7f0000000740)={'sit0\x00', 0x0, 0x1, 0x1, 0x7, 0x8, {{0x17, 0x4, 0x0, 0x2, 0x5c, 0x65, 0x0, 0xf, 0x29, 0x0, @empty, @multicast1, {[@generic={0x89, 0xc, "62e7c1446597695046e6"}, @cipso={0x86, 0x15, 0x2, [{0x0, 0xf, "bc1e9cf1dba3afb9ae56e98e1f"}]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0xc, 0xdc, 0x1, 0x4, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}]}, @ssrr={0x89, 0x17, 0xe, [@multicast2, @remote, @private=0xa010101, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) getpeername$packet(r2, &(0x7f0000001000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001040)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001100)={'syztnl2\x00', &(0x7f0000001080)={'syztnl0\x00', 0x0, 0x0, 0x8, 0x7, 0x9, 0x0, @mcast2, @local, 0x7800, 0x80, 0x9, 0xc6}}) (async, rerun: 32) socket$inet6(0xa, 0x2, 0x0) (async, rerun: 32) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_SECURITY(r8, 0x6, 0x4, 0x0, 0xf0ff1f00000000) (async, rerun: 64) r9 = socket$l2tp6(0xa, 0x2, 0x73) (rerun: 64) sendmmsg$inet(r9, &(0x7f0000000880)=[{{&(0x7f0000000580)={0x2, 0x4e1c, @broadcast}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @dev={0xac, 0x14, 0x14, 0x1d}}}}], 0x20}}], 0x1, 0x4880) (async) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000001000000018000180140002006e657464657673696d3000000000000005000b0000000000080011"], 0x3c}}, 0x0) (async, rerun: 32) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) (rerun: 32) 2.252166155s ago: executing program 0 (id=6989): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x4a) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001300)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000000)="b9ff03076844268cb8be14f088470f", 0x0, 0x20000005, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="002dbd7000fddbdf250000000000000000000000c09c5a58fe533d5d3fdca1ccf5490b5929ee00d0148fc6060dbdc9b685aa605e272183ca9c216d74710a612ded446cad1901430c4470f88d8a598662ca5632dd4301ed74c7f34dfc", @ANYRES32=0x0, @ANYBLOB="18430100000000001400030065727370616e300000000000000000001c001a8018000a8014000700"/56], 0x50}, 0x1, 0x0, 0x0, 0x4000884}, 0x4000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_IBSS(r2, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x20, r3, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6f92, 0x9}}}}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40090}, 0x840) r4 = socket(0x27, 0x3, 0x1) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f0000000180)=0x6, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000000c0)}, 0x39) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x12, 0x4, 0x4, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_ext={0x1c, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="851000000500000035598000fcffffff049b09000200000053c226457c0a10ee1a7f92bc70959e4703f2a1bcf489e027a25f9f401d9caa2182bb9a92"], &(0x7f00000002c0)='GPL\x00', 0x0, 0xce, &(0x7f0000000540)=""/206, 0x41100, 0x30, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x3, 0xb, 0x6272, 0x4d0f}, 0x10, 0x1da54, r0, 0x0, &(0x7f0000000480)=[r7], 0x0, 0x10, 0x8001}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r5}, &(0x7f0000000140), &(0x7f00000004c0), 0x8}, 0x20) socket$kcm(0x29, 0x7, 0x0) 1.888199426s ago: executing program 4 (id=6993): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {}, {0xfff1, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000000)=0xffff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x1401, 0x1, 0x70bd2c, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x50) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f00000003c0)={'ah\x00'}, &(0x7f0000000400)=0x1e) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000180)=@nat={'nat\x00', 0x19, 0x3, 0x39a, [0x200000000640, 0x0, 0x0, 0x20000000074e, 0x20000000077e], 0x0, &(0x7f00000000c0), &(0x7f0000000640)=ANY=[@ANYBLOB="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"]}, 0x412) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) writev(r4, &(0x7f0000000280)=[{&(0x7f0000000100)='B', 0x1}], 0x100000000000004b) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400028008000100010000000800020011000000050021000000000008000a00", @ANYRES32, @ANYBLOB='\n\x00:'], 0x74}}, 0x0) 1.760441133s ago: executing program 2 (id=6995): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x5, 0x6, 0x64}) (async, rerun: 32) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (rerun: 32) setsockopt$inet_int(r1, 0x0, 0x7, &(0x7f0000000240)=0xffffffff, 0x4) (async, rerun: 32) bind$l2tp(r0, &(0x7f0000000180)={0x2, 0x0, @remote, 0x1}, 0x10) (async, rerun: 32) recvmmsg(r1, &(0x7f000000e280), 0x58a, 0x42, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010014000000000000000200e70308000300", @ANYRES32=r4, @ANYBLOB="0c00990000000000000000000800a0002616000008009f0005000000080026000816"], 0x40}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(0x0, r5) (async) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) (async) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x85, &(0x7f0000000000)={r9, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x85, &(0x7f00000001c0)={r9, @in6={{0xa, 0x4e20, 0xffffffff, @private2, 0xffffffff}}, 0x0, 0x1}, 0x90) (async) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="3103fefffffffadbdf250b00000001010300", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r6, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000}, 0x4) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610448000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) (async, rerun: 32) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x10, 0x11, 0x3ffe}, @TCA_FQ_QUANTUM={0x25, 0x3, 0x4000}]}}]}, 0x40}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000003d00), 0x10080, 0x0) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r13, &(0x7f0000000200)=[{&(0x7f00000000c0)='X\x00', 0x2}], 0x1) 1.694176283s ago: executing program 2 (id=6996): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x94, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x2f, 0x7, 'system_u:object_r:semanage_trans_lock_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:modules_object_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip_vti0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x94}, 0x1, 0x0, 0x0, 0x40041}, 0x20000000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000c40)=ANY=[@ANYBLOB="580000001000010009000000000000000000ffff", @ANYRES32=r1, @ANYBLOB="00000000da44000024001a8020000a8014000700fe8000000000000000020040000000000500080002000000140003007866726d30"], 0x58}}, 0x240488c4) 1.238145443s ago: executing program 0 (id=6999): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)={0x1c, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x26000000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) close(r6) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x5dc}], 0x1}, 0x4) 1.231636175s ago: executing program 1 (id=7000): r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0x0, @fixed}, &(0x7f00000001c0)=0xe, 0x80000) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, 0x36) getpeername(r0, &(0x7f00000002c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000240)=0x80) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000481c) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="2c0000003f00070dfeffffff00000000017c0000040077000c0003"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0x4044000) sendmsg$sock(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000003c0)='oe', 0x2}], 0x1, &(0x7f0000000400)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x18}, 0x4000081) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000080)=0x4, 0x4) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r5, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f00000004c0)={r6, 0x3, 0x3, "2a9a9e"}, 0xb) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r6, 0xd41, 0xffffffff}, 0xc) 1.185470451s ago: executing program 3 (id=7001): r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0x10000, 0x82e2e, 0x100, 0x7, 0x3, 0x0, 0x0, 0x401}}) r1 = socket(0x400000000010, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x6, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x17996}]}}]}, 0x3c}}, 0x8000) ioctl$PPPIOCGFLAGS(r1, 0x8004745a, &(0x7f0000000040)) 1.184766094s ago: executing program 2 (id=7002): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r1, 0x4, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x5e2b7e25, 0xed85}}}}, [@chandef_params]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r3 = socket$kcm(0x10, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000700014002020c600e41b0000900ac000a0501000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x40000) 1.184334567s ago: executing program 4 (id=7003): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0), 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x38, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x8c}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e24, 0x0, @mcast2, 0xc}, 0x1c) getsockopt$sock_buf(r2, 0x1, 0x19, 0x0, &(0x7f0000003080)=0x7a) r3 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r3, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x1, @dev}, 0x1c, 0x0}, 0xfdff) setsockopt$inet6_tcp_int(r3, 0x6, 0x9, &(0x7f0000000040)=0xfb1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.041974356s ago: executing program 1 (id=7004): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x20000000}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) (async) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x19, 0x20, 0x301, 0x70bd2a, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_FWMARK={0x8, 0xa, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x800) (async) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x19, 0x20, 0x301, 0x70bd2a, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_FWMARK={0x8, 0xa, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x800) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000340)=0x3, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200000000000000000000239a950000000000006d71fe4381adda2bebb98d21525c77d312b4417ccb8b13d703abdd45cf5bff26fd52f3dca2be08557676c5b0726f5fcdcca58a29ded62244d4d5403bee24"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 974.750491ms ago: executing program 4 (id=7005): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) (async) syz_emit_ethernet(0x6e, &(0x7f0000000240)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x38, 0x2b, 0x0, @private2, @local, {[@hopopts={0x67}], {0x2100, 0x0, 0xffffffffffffff98, 0x0, @opaque="0d87aedaaa7fc9a56dc2d42b221003a116fd256378e5e186d69b1c57326a7371394d0c6bae77d286"}}}}}}, 0x0) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept$alg(r0, 0x0, 0x0) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) (async, rerun: 32) sendmmsg$alg(r1, &(0x7f00000011c0)=[{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f00000022c0)="2c2b74fddbc858e42edcd12037e5751c680f2e3099edf8f9d5a3a3e83d9a78c4b9e8c4324c327477723fc69642803d0ed4f42e83d068a0cbe1038c574676809bcd3eb9c8abe84cf07e74bc76c679f56293ca909551c6bc396200608271a4cc09e0c90c686fe2d3b5ecbcffbcde51f51ef184793dccaa40c9a0edc00a09274506ec60853df9ca40b59166853c6019bd046e19", 0x92}, {&(0x7f0000003cc0)="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", 0xf6e}], 0x2, &(0x7f00000024c0)=ANY=[@ANYBLOB="18000000000000001701000004000000fcffffff00000000180000000000000017010000030000000100000000000000e0000000"], 0x110, 0x4000}], 0x1, 0x8081) (async, rerun: 32) recvmmsg(r1, &(0x7f0000003c80)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1}, 0xffffff0b}], 0x1, 0x2001, 0x0) 877.442032ms ago: executing program 2 (id=7006): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x8, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x3, 0x2}}, @ptr={0x0, 0x0, 0x0, 0x2, 0x3}, @func={0x6}]}, {0x0, [0x0, 0x61, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x50}, 0x28) r0 = socket(0x22, 0x2, 0x3) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = socket(0x2d, 0x2, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x119, 0x487, &(0x7f0000000500), &(0x7f0000000480)=0xfffffffffffffd69) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2c, r4, 0x5, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000040)={0x114, r4, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME={0xff, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x1}, @device_a, @broadcast, @from_mac=@device_b, {0xa, 0x5}}, 0x4000, 0xe491, {0x0, 0x6, @default_ibss_ssid}, @void, @val={0x2d, 0x1a, {0x1, 0x1, 0x0, 0x0, {0x7, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x400, 0x800, 0xf}}, [{0xdd, 0xf, "b7b1a027e4d9158ccea030d2c8ccaf"}, {0xdd, 0x33, "1bc6ddd8312bd8c109166ebfb91cbbe55b669ec79953d95f27316251b0a8bd27b30c38010b7e664c20ee465dd4f09fa3b96bf7"}, {0xdd, 0x73, "d64fb6c0f2a3959001e1c9d03e2c58283771a9c2a9a383935354ff079c677323a4534e27bb7d2a082cef0453b07ea919688371b300a9fbea03fcd26fc2d5aa2853ff79a5fc9f411d7490949a9336d02035e894094b42bd27b646da29ca17ccbc2885c2e15f4cc46d7ddf491712d1c199e58a28"}]}}, @chandef_params]}, 0x114}, 0x1, 0x0, 0x0, 0xc000}, 0x0) ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f00000003c0)) 719.976566ms ago: executing program 1 (id=7007): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_SECURITY(r4, 0x11, 0x4, 0x0, 0x1000000000000) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r3, 0x8982, &(0x7f0000000040)={0x1, 'syzkaller0\x00', {}, 0xf783}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000000c0)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x2, 0x1, 0x16}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000000) recvmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff64}, 0x40000040) 714.627793ms ago: executing program 3 (id=7008): ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000300)={{0xffffffffffffffff, &(0x7f0000000000)='].\x00', 0x4a601, &(0x7f0000000040)={@align=0x5a2, {0x5, 0x3, 0x2, 0x9}}, 0xd, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x3}, 0x2, &(0x7f00000002c0)=[{0x2, 0xe, &(0x7f0000000100)='\\\x8b\x00', &(0x7f0000000140)="1455378c41721ff46af047dafb41aadce82a384bc902a12f11cb0c10efede830c9541e5f20a95c03857cbfb8960dc89134fb6a3606dbec6df96e4476ec58ede2ad8b4f532c8624b83f134dfda4a5acad4ef770778ead1c4b51fc6a2554c1d3e3e7aed3afe3b5464c8b811aadcb2c3f712ad1d7d0c7b6fc1ab41ffdb8be7365a2c10c7e8b46293dda4180021865bded02417fe7453c846085ee1297d3a05e2a409ddbc63c7ccb4eba2af3b06020178baefa25a3eb90787ed7e5008952b54e63e4fb3980f1af3c926d63fab963239ab3e53f6664cf18255f8a091fa0a008d9b33a4725e260eb00b1a13f1cadf276538d8eddb2", 0xf2, 0x22}, {0x0, 0x10001, &(0x7f0000000240)='\\\x00', &(0x7f0000000280)="7bc7b45b9f7b5925a0394065ce6e07f5fb8a46b19b247e2f298816c38de17902ad7692e8bfb031fb679b", 0x2a, 0x30}]}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380)={0x0}, &(0x7f00000003c0)=0xc) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0, 0x0}, &(0x7f0000000440)=0xc) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r1, 0xffffffffffffffff, r2}, 0xc) (async) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x2) (async) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f00000004c0)=0xfd5) (async, rerun: 64) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000540)={'tunl0\x00', &(0x7f0000000500)=@ethtool_sset_info={0x37, 0xfffffe00, 0x7fb, [0xe50, 0xff, 0x3, 0x0, 0x0, 0x3, 0x9]}}) (async, rerun: 64) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000580)) r4 = socket$inet_sctp(0x2, 0x5, 0x84) ppoll(&(0x7f00000005c0)=[{r3, 0x2}, {r3, 0x2}, {r0, 0x8}, {r0, 0x400}, {r4, 0x104}], 0x5, &(0x7f0000000600), &(0x7f0000000640)={[0x2]}, 0x8) r5 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$xdp(r5, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000001680)="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", 0xfc}, {&(0x7f0000001780)="9e237693253108d93acb38e527eb12f4051028ffbdaf413a75a0a26b7bcdf3a3a19a03477bb1e9e9a87fac052de6419be7ac4d46bdc319ec1e105d894d655cad6f9f1840ce0d9ca051741ef7ffdf621503fa6d5b65653c0357d0a0d1a57acb46cd4132e57c724d251b18efd18261919bdca0e243e2c1124a607a700edaf01929570a4f9482074004e6eb19fa7e08f167d3cb36a24d4954fa98cdab67fa8dc90bf5b37b665ba048152cf15adec361331e3fba37242bb187885df1a03964ee14a9412b5483021b976ac9c2143653b8c21195d0759a40c431e9e667f45445adea58e0f915cd", 0xe4}, {&(0x7f0000001880)="f316f95830eab97a73af760d4071373e4c319ebf3bd2227fbed7e7fe11888d667e402607b94699283c0f496a1257e9f3eb41126e99ffc3608b8e4eb5e885b2ee9bcf98f343c414d277bdb99669964ef9d60c6a6229f891b0ad21", 0x5a}, {&(0x7f0000001900)="fddc67d52a58a24fc15637c3db43d39c6e77fcee11c0a99f8de6355e9fd9075bfa08e2579ff7d38ca016ed23ba66567463ed566cfa04d00c70d30866849b956d13b215b6dea81f00d252d8ee4e6cdb76214358e08d3f4d9cfd6252c60d5b5f27b49c7c", 0x63}, {&(0x7f0000001980)="2d150f778a55aa171fb0741836d597a39364c629e3ccce4e23085e3aa04e0e1378e1855300fa92a5fab3cd862ab36d4a8c5ab7957782b458719254f6b2e9d82cca51d7221cc3bc938c57dddaf140ff9f", 0x50}, {&(0x7f0000001a00)="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", 0x1000}, {&(0x7f0000002a00)="4dc5497cc21106263197e09bb4c2c421689a8211242792b7a4e3cf01e9b198", 0x1f}, {&(0x7f0000002a40)="3f3861b03a8164e9b7427bf11cf08ae6fa05489205a808f87d20d135b4ef3d92c109941cdfcaf7faa19d72cdfb9dcbba0a44f589ff399d3c585572a7ff936cfa12f31e2526031b98e80de042af86de9d7179a646b5fbfa30c41e8ac4eab59e7c98bbc4f2c2d4e44e8c", 0x69}, {&(0x7f0000002ac0)="9379fe6ed094ec727f2ae43cc0b00da67db3d21ee7e77a17804514c5b5de74e41d5b9ca2ed4a496d346d01e13db7e6d3c516aba2c430220b36126697777048ea2de6280c776000643108667162a504bad34ecc1b28242728dfe1851513c5bdde35f5ca13a36db3665b82929b4152f5658ae2753695ab0a628ab5cf83cfcf9b5421dfd77bbb9c302c", 0x88}], 0xa, 0x0, 0x0, 0x4000}, 0x40014) sendmsg$sock(r3, &(0x7f0000003140)={&(0x7f0000002c80)=@vsock={0x28, 0x0, 0x2710, @my=0x1}, 0x80, &(0x7f0000003080)=[{&(0x7f0000002d00)="0b54354ec1447054cd47ea0e0fcf", 0xe}, {&(0x7f0000002d40)="f8a6e978590bb458ae5037119231e4e6504ae2a47b98347fbcd3f647e7352a306915eec4a4757d40416f71b209a3b35466bc479e70ab3f4130f621a9bf82733e5faaadec2ea8974632282540d346c0a72eeffc18497303db983af7128335ba349734248f2bcef6823d0288b865a14a4c3de8f0282859cb3c32cb3c02a95a8222002c809d639dbca6b53b7b75d796198e4e9aa6a249ad29fe0cdd8a1d61b935c3249a09fd0844ce0b10acf6bb9b31cde1ef6fcbc4b155cb458671002d7af6c28c8f9e217e6b21cf11b03d5aaa5b56f3abd10ac9b6781a0949", 0xd8}, {&(0x7f0000002e40)="042ffac5dcd3c8a9ea914f839af7e1ff3c1a925e5e5b47b5f9c6fbaf9fe65dbf33aac67ca6ebefe9118566d9ef50590e35a1879d4aa7f98f9b1023831e97e7b1e74b1396cd9e92c6d3c06c231b79c11c884c903d23ae8ae7237994b20f014b038e92d39baef6042f14990d77f94c74ecaaa8f920b096b51c54ecc215915926474a66d76259903bcf3fc8", 0x8a}, {&(0x7f0000002f00)="4d12e03dc77f2febf8b5bfe97ae06c731af8c77b7b3a8598d8db9b78bba157390dc6b8af82d33fbee2b13a271a176fda8d9db693f61cabdf442c0e8bc0a449cbeb5626f752ceba1600dc80ddc31eef70cf40ce02f1ae9865595fb7b5f1977ed8bce672645f835c33ee35a3dc51b9edeb3ad56483893ddc08bf96c7a7eb6de41dedc854f05fb28d601d26bd0f7573c5b92fa3eb61c6cf61e22d2ae3091ba6d22b", 0xa0}, {&(0x7f0000002fc0)="eb47bffde7d3e2ddc6f1965d3d0c924b105d42be9aee8b4bf2e769205778633f3269a92f5cc46fdd56c4025655871c0bbd3de6f7fd75079fc2865331930c23efa4d9a1deefe345c57485eddbbfe45a83bca40ed11956802d7560a11ac3e29037da7c4bbeb2a472e04bd8fc4f0e74445ac872f2af9900e77a645ef721ade38cabd01e2f8feb5520790b24fae387", 0x8d}], 0x5, &(0x7f0000003100)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0xf911}}], 0x30}, 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000031c0), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000003200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000003300)={&(0x7f0000003180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000032c0)={&(0x7f0000003240)={0x58, r6, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x1}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x1}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x7}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x20000004) (async) ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f0000003340)=0x6) (async) r8 = openat$cgroup_ro(r0, &(0x7f0000003380)='cpuset.effective_cpus\x00', 0x0, 0x0) bind$inet6(r8, &(0x7f00000033c0)={0xa, 0x4e23, 0x0, @empty, 0x10}, 0x1c) (async, rerun: 64) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x4000010, r5, 0x80000000) (async, rerun: 64) r9 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000003440)=@o_path={&(0x7f0000003400)='./file0\x00', 0x0, 0x4000, r4}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000003780)={r9, 0xe0, &(0x7f0000003680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000003480)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, &(0x7f00000034c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000003500)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x3d, &(0x7f0000003540)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f00000035c0), &(0x7f0000003600), 0x8, 0xc1, 0x8, 0x8, &(0x7f0000003640)}}, 0x10) socket$kcm(0x29, 0x1, 0x0) (async) sendmsg$NFNL_MSG_COMPAT_GET(r8, &(0x7f0000003880)={&(0x7f00000037c0), 0xc, &(0x7f0000003840)={&(0x7f0000003800)={0x1c, 0x0, 0xb, 0x3, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x20004080) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000038c0)=r0, 0x4) (async) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) (async, rerun: 32) setsockopt$netlink_NETLINK_NO_ENOBUFS(r8, 0x10e, 0x5, &(0x7f0000003900)=0x6, 0x4) (async, rerun: 32) sendmsg$NL80211_CMD_DEL_PMKSA(r8, &(0x7f0000003a40)={&(0x7f0000003940)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f0000003a00)={&(0x7f0000003980)={0x7c, r6, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xa, 0x5e}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "f32bf4e73e65ee2711e7d4db60019c09"}, @NL80211_ATTR_PMK={0x14, 0xfe, "eba11e6623f71e9f52519d08f0bb3680"}, @NL80211_ATTR_PMK={0x14, 0xfe, "b5f79bfa27b0a1866f26a70f68cc8c30"}, @NL80211_ATTR_PMK={0x14, 0xfe, "018e63a2282a7ff1319c9daa942f4abf"}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20008001}, 0x10) (async) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000003c40)={&(0x7f0000003a80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000003c00)={&(0x7f0000003b00)={0x100, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xac, 0xa8, @random="7d35200c95a255233f2f69dff507433a3818dfed74687fe6cfbff7640eadab818405af283d0d833394ea43eb00462e07a9ef8ffc372e4ce33354369e62c75f0872b4f1d3ab2f41200475ce5be4f6f63d81bc02aae1b4c8cf4294607a84d7f56104b232177c6b2394e305c04b93197d92baab3742824d34a750b9b0e17075cbedc1c7ad0556335322f52c2c86628401080dfa07ce348e13c6b1569a1ca1e0a5afb1b3d91a4bea72c3"}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x100}, 0x1, 0x0, 0x0, 0x1}, 0x840) 629.55535ms ago: executing program 0 (id=7009): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010000104000000000000000045be8ea000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028005001100de000000"], 0x3c}}, 0x0) 625.14487ms ago: executing program 2 (id=7010): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000440)={0x1, 0x3, 0x1000, 0xb2, &(0x7f0000000280)="05a31f1c3a91c7877406b1668356d77400dfad03478fe2456620064d8a6377e1e46332a0d4fd090d921f07c08b0f2612123b36c4925be47a23558fd4c410838eee096643aae5f79cdc461586479e9d52c36447f2402b4e70c0a2ba9490122df080f59830987c6df769dee593083466fd905d7a6d878e6cce7523f50e918326e4f5ae279c9a1bbe02b3290813fc2b6d6ee1946990b2953b7bbb342f82f2b478c6da8b0bb1cb4c9ca9e5c257255772028ea284", 0xcf, 0x0, &(0x7f0000000340)="6fb6bf5cdb1211aef7af37c7bfa5bab927fc1885ee722e75a2ae16756b310fcceb70ee027a80c7af7156db728966ba45e9be2c1691b6897f0c91c729bfcb2417661842c6ff166d3ec721ff2d50063f4dba3dc73dfff5ec55aae2fe39936034e444f1529bcf9243cc9f1c5eaa326050215cdfc53df915ed6f02b6670fa1213ba9677f52acb17c8d430fd5c7018152e7d19436e0e5c5504f173f751cdfd4521123b5b5d226a56549a2e6e53c70866a4e8923934c5fbc52c4bcdf9eebc58a87a33e1013d2dcd6d04e3be9dfb601f370f1"}) r1 = socket(0x10, 0x803, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1) sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x54, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x5}, {0x8, 0x13, 0x6}, {0x5, 0x14, 0x1}}]}, 0x54}}, 0x5) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x20, 0x1402, 0x1, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0xfffffffffffffeb4}, 0x1, 0x0, 0x0, 0x4000805}, 0x4000) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000140)={'sit0\x00', 0x0}) 519.88895ms ago: executing program 4 (id=7011): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) r3 = getpid() syz_open_procfs$namespace(r3, &(0x7f0000000680)='ns/time_for_children\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x38, r5, 0x601, 0x0, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x6, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x1}]}]}]}, 0x38}}, 0x4000) recvmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)=""/132, 0x84}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000000580)=""/113, 0x71}], 0x3}, 0x2000) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup, 0xa, 0x1, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], 0x0}, 0x40) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@cgroup=r7, r1, 0x27, 0x2014, 0x0, @value, @void, @void, @void, r6}, 0x20) getsockopt$inet6_tcp_int(r0, 0x6, 0x2, 0xfffffffffffffffd, &(0x7f0000000340)) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r2, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0x98, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004800) 515.667997ms ago: executing program 3 (id=7012): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) (async) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a98000000060a0b040000000000000000020000000900020073797a32000000006c000480680001800b00010074617267657400005800028040000300cd4b6abe42030763d02899c7e9ee2bcc9b6a37b458a8056dd9a87f963d140d7a9d3ac869f3a860917523c7000000000000006422a633a39f030000000a000100484d41524b00000008000240000000000900010073797a30"], 0xc0}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) (async, rerun: 64) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@empty, @in6=@mcast2, 0xfffd, 0x1, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x2, 0x2, 0x6, 0x0, 0x7, 0x4, 0x1, 0xfffffffffffffffc}, {0x2, 0x7, 0xfffffffffffffff9, 0xff}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x456, 0x2b}, 0xa, @in=@empty, 0xffffffde, 0x0, 0x2, 0x81, 0x7}}, 0xe8) (async, rerun: 64) sendmmsg$inet6(r1, &(0x7f0000000300)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x52700000, @mcast2}, 0x1c, 0x0}}], 0x1, 0x8015) 469.30145ms ago: executing program 1 (id=7013): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000140)="a3", 0x2}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xa, 0xd, &(0x7f0000000040)=@raw=[@generic={0x2, 0xa, 0x8, 0x6, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @jmp={0x5, 0x1, 0x5, 0x9, 0x6, 0x6, 0xfffffffffffffff0}, @jmp={0x5, 0x1, 0x0, 0x0, 0x7, 0x30, 0xa86df4935fa3b74b}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}], &(0x7f0000000000)='syzkaller\x00'}, 0x94) 413.170994ms ago: executing program 2 (id=7014): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000a40)="118db76e8efb27d530b26a8302bad647e35540226c4052b6d573165d39ad8ead67632e8fe108cf55473bc22914286359c3bb3decf99ed04d34d1a73ae48dae0e69ee69fe", 0x44}], 0x4}}], 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010001fff001201000006000043be4354", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e00000004000280080004"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r1, 0xe) listen(r1, 0x80) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xa3}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket(0xa, 0x3, 0x3a) ioctl$SIOCGETVIFCNT(r3, 0x89e0, &(0x7f0000000000)) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000d00)=""/266, 0x10a}, {&(0x7f0000000600)=""/245, 0xf5}, {&(0x7f0000002340)=""/4057, 0xfd9}, {&(0x7f00000009c0)=""/219, 0xdb}, {&(0x7f0000000500)=""/245, 0xf5}, {&(0x7f0000001f00)=""/203, 0xcb}, {&(0x7f0000000240)=""/166, 0xa6}, {&(0x7f0000000300)=""/205, 0xcd}, {&(0x7f00000000c0)=""/26, 0x1a}, {&(0x7f00000007c0)=""/158, 0x9e}, {&(0x7f0000000140)=""/95, 0x5f}, {&(0x7f0000000880)=""/59, 0x3b}, {&(0x7f0000000700)=""/135, 0x87}], 0xd}, 0x40002060) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000a40)="118db76e8efb27d530b26a8302bad647e35540226c4052b6d573165d39ad8ead67632e8fe108cf55473bc22914286359c3bb3decf99ed04d34d1a73ae48dae0e69ee69fe", 0x44}], 0x4}}], 0x1, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010001fff001201000006000043be4354", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e00000004000280080004"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) listen(r1, 0xe) (async) listen(r1, 0x80) (async) socket(0x10, 0x80002, 0x0) (async) sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xa3}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) socket(0xa, 0x3, 0x3a) (async) ioctl$SIOCGETVIFCNT(r3, 0x89e0, &(0x7f0000000000)) (async) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000d00)=""/266, 0x10a}, {&(0x7f0000000600)=""/245, 0xf5}, {&(0x7f0000002340)=""/4057, 0xfd9}, {&(0x7f00000009c0)=""/219, 0xdb}, {&(0x7f0000000500)=""/245, 0xf5}, {&(0x7f0000001f00)=""/203, 0xcb}, {&(0x7f0000000240)=""/166, 0xa6}, {&(0x7f0000000300)=""/205, 0xcd}, {&(0x7f00000000c0)=""/26, 0x1a}, {&(0x7f00000007c0)=""/158, 0x9e}, {&(0x7f0000000140)=""/95, 0x5f}, {&(0x7f0000000880)=""/59, 0x3b}, {&(0x7f0000000700)=""/135, 0x87}], 0xd}, 0x40002060) (async) 385.026821ms ago: executing program 0 (id=7015): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r0, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x3a}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001100)={&(0x7f0000001080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@typedef={0x9, 0x0, 0x0, 0x8, 0x4}]}, {0x0, [0x61, 0x30, 0x5f, 0x0]}}, 0x0, 0xfffffffffffffec9, 0x0, 0x0, 0xfffffffe}, 0x28) 321.383022ms ago: executing program 1 (id=7016): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) close(r1) socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c0000007a006bcd9e3fe3dc6e08000007000004000000027ea60864160af36504005425198bc3488bc3a0e69ee517d34460bc24eab556a705251e4e82949a3651f668c3664402682fb6e27bbfa83b5cae0300c9fcd1938037e786a6", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40448c0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x49920d862a92153b, 0xc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2, 0x5c83}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x48010) 300.362434ms ago: executing program 4 (id=7017): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x68, r1, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x2, @media='udp\x00'}}}, ["", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4004001}, 0x4) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001a80)=@newtaction={0x48, 0x5a, 0x1, 0x0, 0x0, {0x2}, [{0x34, 0x1, [@m_pedit={0x30, 0x0, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) 269.272353ms ago: executing program 3 (id=7018): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)=0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x21, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xf}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@exit, @call={0x85, 0x0, 0x0, 0x7c}, @generic={0x7f, 0x4, 0xc, 0x7fff, 0xfffffff3}, @exit, @alu={0x7, 0x1, 0xa, 0xb, 0x3, 0xfffffffffffffefa, 0x4}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x8}, 0x94) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x220000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r1, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x14000041}, 0x40000) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="000000e8ff07000014000300000000000000000000000000000000001800128008"], 0x4c}}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYRESOCT], 0x188}}, 0x4005) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e21, 0x7ff, @private2, 0xeb2}]}, &(0x7f0000000180)=0x10) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x2, 0x400000000000003, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local}}, @sadb_lifetime={0x4, 0x4}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}, 0xb0}}, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={r6, 0x1000, 0x3, 0xc, 0x1000008, 0x7}, 0x14) 120.527633ms ago: executing program 0 (id=7019): syz_emit_ethernet(0x7c, &(0x7f0000000600)=ANY=[@ANYBLOB="ffffffffffffffffffffffff08004502006e00000000002f9078ac1414bbe0000001248086dd0000000010000800000086dd0800880000000000080022eb0000000020000000020000000000000000000000080065580000000058741ab31efa00000000000000000000000000000000000000000000000000000000d18c3de7b34ae3892d0fb272cf4ce5a8a56daa5ceec1802d23f6e1d94e11bc39cfaed4a1844ecc4a8a92fc546498d747921dc279719d8afb01aee0d07b7262b4982078aaae52ab67ecc911d52dc98b3edc8ee34303bfc2d4b1d265d358d159a169f7d32e58e6396f70a0f2ae2559d5911ed31889df4333a27f294651b6056393d5e82f9d729b8c2357ed73a411d30e1a297aa4560cd670c666919674302cf7aed49f"], 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000100)}}], 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="5c000000020601030000000000000000000000000c00078008001240000000060500010006000000050001000700000005000400400000000900020073797a30000000001500f853f846ba77c9673629910300686173683a69702c706f72742c6e087400000000"], 0x5c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) (async) getsockopt$sock_buf(r2, 0x1, 0x4d, 0xffffffffffffffff, &(0x7f0000000000)) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xd}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000f00000100000e00"}}}]}, 0x48}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010001fff001201000006000043be4354", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e00000004000280080004"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) (async, rerun: 64) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x39b001, 0x0) (async, rerun: 64) r7 = socket(0x3, 0x2, 0xcab1) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'wlan1\x00', 0x400}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xd, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) (async) r9 = accept4$llc(r7, 0x0, &(0x7f00000002c0), 0x81800) getsockopt$SO_TIMESTAMP(r9, 0x1, 0x23, &(0x7f0000000300), &(0x7f0000000340)=0x4) (async) r10 = accept4(r8, 0x0, 0x0, 0x800) sendmsg$nl_generic(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xd80}}, 0x2004c880) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = openat$cgroup_int(r11, &(0x7f0000000400)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r12, &(0x7f0000000040)=ANY=[], 0x27) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@gettfilter={0x34, 0x2e, 0x800, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r13, {0xc, 0xb}, {0x16, 0x1}, {0xffe0, 0xffff}}, [{0x8, 0xb, 0x7fff}, {0x8, 0xb, 0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4) (async, rerun: 32) r14 = socket(0x10, 0x80002, 0x0) (rerun: 32) sendmmsg$alg(r14, &(0x7f00000000c0), 0x492492492492627, 0x0) 119.45037ms ago: executing program 1 (id=7020): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) syz_emit_ethernet(0x42, &(0x7f0000000040)={@multicast, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "76b2af", 0x4, 0x2f, 0x0, @private0, @mcast2, {[], {0x0, 0x883e, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000800000000000000000850000004100000085000000d000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000003440)={0x0, 0x0, &(0x7f0000003400)={&(0x7f0000000100)=ANY=[@ANYRES8=r1, @ANYRESDEC=r0], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4000082) sendmsg$netlink(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000006c00)={0x28, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @typed={0x5, 0x37, 0x0, 0x0, @binary="1b"}]}, 0x28}], 0x1}, 0x0) 87.511172ms ago: executing program 4 (id=7021): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000480)="b7028d7a89a1a9e34b7acba3d9bff1ab77e1", 0x12}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5000009, 0x10012, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="200000006a0083130000000000000000000000000000000008000500d768d9f8"], 0x20}}, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000003c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, 0xc) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(r5, &(0x7f0000000000)={[{0x6, 'net'}]}, 0x5) splice(r4, 0x0, r6, 0x0, 0x3, 0x4) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) 0s ago: executing program 3 (id=7022): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000280)={0x3a, @empty, 0x4e20, 0x0, 'sed\x00', 0x0, 0x0, 0x11}, 0x2c) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000800000000014001280090001007665746800000000040002800800290041010000"], 0x3c}}, 0x0) kernel console output (not intermixed with test programs): : -EINTR [ 615.194018][T25011] tipc: Enabling of bearer rejected, already enabled [ 615.218384][T25011] mac80211_hwsim hwsim32 syzkaller0: entered promiscuous mode [ 615.226151][T25011] mac80211_hwsim hwsim32 syzkaller0: entered allmulticast mode [ 615.235387][T25011] tipc: Resetting bearer [ 615.246238][T25011] bridge0: Device is already in use. [ 615.330227][T25024] batadv2: entered allmulticast mode [ 615.713979][T25039] team0: Device gtp0 is up. Set it down before adding it as a team port [ 615.939673][T25064] __nla_validate_parse: 15 callbacks suppressed [ 615.939694][T25064] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5220'. [ 615.981388][T25064] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5220'. [ 616.014316][T25064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5220'. [ 616.320870][T25095] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5230'. [ 616.387088][T25099] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5229'. [ 616.411194][T25100] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5231'. [ 616.438609][T25102] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5229'. [ 616.467381][T25102] block nbd1: Unsupported socket: should be TCP or UNIX. [ 616.631533][T25111] netlink: 'syz.3.5233': attribute type 25 has an invalid length. [ 616.652751][T25110] netlink: 165 bytes leftover after parsing attributes in process `syz.1.5232'. [ 616.953415][T25119] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5235'. [ 617.208968][T25134] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048) [ 617.297453][T25135] netlink: 'syz.1.5240': attribute type 62 has an invalid length. [ 617.423442][T25141] macvlan1: entered allmulticast mode [ 617.450028][T25144] veth1_vlan: entered allmulticast mode [ 617.467505][T25144] macvlan1: entered promiscuous mode [ 617.838394][T25171] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5250'. [ 617.883627][T25175] macvtap1: entered promiscuous mode [ 617.926815][T25175] macvtap1: entered allmulticast mode [ 617.932275][T25175] erspan0: entered allmulticast mode [ 618.150813][T25191] veth0_vlan: left promiscuous mode [ 618.157389][T25191] veth0_vlan: entered promiscuous mode [ 618.163293][T25191] veth0_vlan: entered allmulticast mode [ 618.281054][T25198] netlink: 'syz.3.5261': attribute type 5 has an invalid length. [ 618.730003][T25229] syzkaller0: entered promiscuous mode [ 618.740390][T25229] syzkaller0: entered allmulticast mode [ 618.818434][T25239] tun0: tun_chr_ioctl cmd 1074025675 [ 618.823892][T25239] tun0: persist disabled [ 619.851364][ T12] dvmrp0 (unregistering): left allmulticast mode [ 619.876253][ T12] bond10 (unregistering): (slave geneve3): Releasing active interface [ 619.948208][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 620.081691][ T12] bond2 (unregistering): (slave bridge5): Releasing active interface [ 620.228448][ T12] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 620.238125][ T12] bridge_slave_1: left allmulticast mode [ 620.244238][ T12] bond0 (unregistering): Released all slaves [ 620.261531][ T12] bond1 (unregistering): Released all slaves [ 620.279396][ T12] bond2 (unregistering): Released all slaves [ 620.296534][ T12] bond3 (unregistering): Released all slaves [ 620.313989][ T12] bond4 (unregistering): Released all slaves [ 620.334080][ T12] bond5 (unregistering): Released all slaves [ 620.368825][ T12] bond6 (unregistering): Released all slaves [ 620.384839][ T12] bond7 (unregistering): Released all slaves [ 620.400204][ T12] bond8 (unregistering): Released all slaves [ 620.423912][ T12] bond9 (unregistering): Released all slaves [ 620.438954][ T12] bond10 (unregistering): Released all slaves [ 620.460063][T25278] IPv6: sit2: Disabled Multicast RS [ 620.576144][ T12] : left promiscuous mode [ 620.704513][ T12] tipc: Left network mode [ 620.760244][T25316] tipc: Can't bind to reserved service type 2 [ 621.011978][T25332] __nla_validate_parse: 63 callbacks suppressed [ 621.012001][T25332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5298'. [ 621.209996][T25348] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5302'. [ 621.240077][T25344] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5302'. [ 621.267048][T25348] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.5302'. [ 621.469284][T25359] netlink: 'syz.3.5307': attribute type 1 has an invalid length. [ 621.666965][T25369] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 621.726381][T25376] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5312'. [ 621.833028][T25376] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5312'. [ 621.860975][T25376] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5312'. [ 621.903372][T25382] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5313'. [ 621.914644][T25376] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5312'. [ 621.940726][T25376] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5312'. [ 622.145914][T25400] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 622.152495][T25400] syzkaller1: Refused to change device type [ 622.207528][ T12] hsr_slave_0: left promiscuous mode [ 622.220306][ T12] hsr_slave_1: left promiscuous mode [ 622.639383][T25407] sctp: [Deprecated]: syz.3.5319 (pid 25407) Use of struct sctp_assoc_value in delayed_ack socket option. [ 622.639383][T25407] Use struct sctp_sack_info instead [ 622.668143][T25421] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 623.191400][T25447] netlink: 'syz.0.5329': attribute type 3 has an invalid length. [ 624.071885][T25503] netlink: 'syz.0.5344': attribute type 3 has an invalid length. [ 624.244282][T25512] netlink: 'syz.4.5347': attribute type 142 has an invalid length. [ 624.515044][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.560124][T25522] netlink: 'syz.4.5351': attribute type 16 has an invalid length. [ 624.571697][T25522] netlink: 'syz.4.5351': attribute type 17 has an invalid length. [ 624.619290][T25522] tunl0: left promiscuous mode [ 624.697011][T25522] erspan0: left promiscuous mode [ 624.702118][T25522] erspan0: left allmulticast mode [ 624.721060][T25522] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 624.757269][T25524] netlink: 'syz.1.5353': attribute type 5 has an invalid length. [ 625.066103][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5120 ms [ 625.074223][ C0] lec:lec_tx_timeout: lec0 [ 625.079970][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 625.155794][T25549] syzkaller1: entered promiscuous mode [ 625.170625][T25549] syzkaller1: entered allmulticast mode [ 625.328223][T25528] FAULT_INJECTION: forcing a failure. [ 625.328223][T25528] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 625.375124][T25528] CPU: 1 UID: 0 PID: 25528 Comm: syz.2.5352 Not tainted syzkaller #0 PREEMPT(full) [ 625.375164][T25528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 625.375178][T25528] Call Trace: [ 625.375187][T25528] [ 625.375196][T25528] dump_stack_lvl+0xe8/0x150 [ 625.375233][T25528] should_fail_ex+0x412/0x560 [ 625.375264][T25528] _copy_from_user+0x2d/0xb0 [ 625.375297][T25528] kstrtouint_from_user+0xd6/0x180 [ 625.375327][T25528] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 625.375373][T25528] proc_fail_nth_write+0x8e/0x210 [ 625.375405][T25528] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 625.375441][T25528] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 625.375474][T25528] vfs_write+0x29a/0xb90 [ 625.375507][T25528] ? __pfx_vfs_write+0x10/0x10 [ 625.375532][T25528] ? __fget_files+0x2a/0x420 [ 625.375572][T25528] ? __fget_files+0x3a0/0x420 [ 625.375601][T25528] ? __fget_files+0x2a/0x420 [ 625.375640][T25528] ksys_write+0x150/0x270 [ 625.375666][T25528] ? __pfx_ksys_write+0x10/0x10 [ 625.375702][T25528] do_syscall_64+0x14d/0xf80 [ 625.375734][T25528] ? trace_irq_disable+0x3b/0x150 [ 625.375764][T25528] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.375787][T25528] ? clear_bhb_loop+0x40/0x90 [ 625.375814][T25528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.375835][T25528] RIP: 0033:0x7f7b4c35cfce [ 625.375855][T25528] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 625.375874][T25528] RSP: 002b:00007f7b4d31dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 625.375897][T25528] RAX: ffffffffffffffda RBX: 00007f7b4d31e6c0 RCX: 00007f7b4c35cfce [ 625.375913][T25528] RDX: 0000000000000001 RSI: 00007f7b4d31e0a0 RDI: 0000000000000007 [ 625.375926][T25528] RBP: 00007f7b4d31e090 R08: 0000000000000000 R09: 0000000000000000 [ 625.375940][T25528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 625.375952][T25528] R13: 00007f7b4c616038 R14: 00007f7b4c615fa0 R15: 00007ffc8d8ea158 [ 625.375988][T25528] [ 625.384824][T25557] nbd: must specify at least one socket [ 625.772158][T25572] syzkaller0: entered promiscuous mode [ 625.805773][T25572] syzkaller0: entered allmulticast mode [ 626.093243][T25589] __nla_validate_parse: 11 callbacks suppressed [ 626.093262][T25589] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5370'. [ 626.379909][T25610] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 626.410330][T25610] bond4 (unregistering): Released all slaves [ 626.718241][T25625] FAULT_INJECTION: forcing a failure. [ 626.718241][T25625] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 626.763104][T25625] CPU: 1 UID: 0 PID: 25625 Comm: syz.2.5382 Not tainted syzkaller #0 PREEMPT(full) [ 626.763134][T25625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 626.763148][T25625] Call Trace: [ 626.763156][T25625] [ 626.763166][T25625] dump_stack_lvl+0xe8/0x150 [ 626.763202][T25625] should_fail_ex+0x412/0x560 [ 626.763240][T25625] _copy_from_iter+0x1d3/0x1670 [ 626.763268][T25625] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 626.763305][T25625] ? __pfx_policy_nodemask+0x10/0x10 [ 626.763332][T25625] ? __pfx__copy_from_iter+0x10/0x10 [ 626.763343][T25629] 8021q: adding VLAN 0 to HW filter on device team0 [ 626.763366][T25625] ? set_page_refcounted+0xa0/0x1e0 [ 626.763443][T25625] ? page_copy_sane+0x4e/0x270 [ 626.763599][T25625] copy_page_from_iter+0xdd/0x170 [ 626.763721][T25625] tun_get_user+0x1d4b/0x3dd0 [ 626.763795][T25625] ? tun_get_user+0x6ff/0x3dd0 [ 626.763933][T25625] ? aa_file_perm+0x50e/0x15e0 [ 626.764001][T25625] ? __pfx_tun_get_user+0x10/0x10 [ 626.764072][T25625] ? aa_file_perm+0x192/0x15e0 [ 626.764200][T25625] ? ref_tracker_alloc+0x35c/0x4c0 [ 626.764285][T25625] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 626.764371][T25625] ? tun_get+0x1c/0x2f0 [ 626.764455][T25625] ? tun_get+0x1c/0x2f0 [ 626.764527][T25625] ? tun_get+0x1c/0x2f0 [ 626.764611][T25625] tun_chr_write_iter+0x113/0x200 [ 626.764688][T25625] vfs_write+0x61d/0xb90 [ 626.764772][T25625] ? __pfx_vfs_write+0x10/0x10 [ 626.764872][T25625] ? __fget_files+0x2a/0x420 [ 626.764997][T25625] ksys_write+0x150/0x270 [ 626.765060][T25625] ? __pfx_ksys_write+0x10/0x10 [ 626.765148][T25625] do_syscall_64+0x14d/0xf80 [ 626.765240][T25625] ? trace_irq_disable+0x3b/0x150 [ 626.765317][T25625] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.765378][T25625] ? clear_bhb_loop+0x40/0x90 [ 626.765450][T25625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.765504][T25625] RIP: 0033:0x7f7b4c35cfce [ 626.765556][T25625] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 626.765595][T25625] RSP: 002b:00007f7b4d31dfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 626.765657][T25625] RAX: ffffffffffffffda RBX: 00007f7b4d31e6c0 RCX: 00007f7b4c35cfce [ 626.765700][T25625] RDX: 0000000000000083 RSI: 0000200000000240 RDI: 00000000000000c8 [ 626.765733][T25625] RBP: 00007f7b4d31e090 R08: 0000000000000000 R09: 0000000000000000 [ 626.765772][T25625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 626.765805][T25625] R13: 00007f7b4c616038 R14: 00007f7b4c615fa0 R15: 00007ffc8d8ea158 [ 626.765891][T25625] [ 627.071722][T25629] team0: Cannot enslave team device to itself [ 627.346363][T25651] netlink: 184 bytes leftover after parsing attributes in process `syz.2.5390'. [ 627.557993][T25665] FAULT_INJECTION: forcing a failure. [ 627.557993][T25665] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 627.595348][T25665] CPU: 1 UID: 0 PID: 25665 Comm: syz.2.5395 Not tainted syzkaller #0 PREEMPT(full) [ 627.595380][T25665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 627.595393][T25665] Call Trace: [ 627.595402][T25665] [ 627.595411][T25665] dump_stack_lvl+0xe8/0x150 [ 627.595451][T25665] should_fail_ex+0x412/0x560 [ 627.595483][T25665] _copy_to_user+0x31/0xb0 [ 627.595516][T25665] simple_read_from_buffer+0xe1/0x170 [ 627.595552][T25665] proc_fail_nth_read+0x1bb/0x230 [ 627.595589][T25665] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 627.595622][T25665] ? rw_verify_area+0x2a6/0x4d0 [ 627.595642][T25665] ? tun_chr_write_iter+0x18a/0x200 [ 627.595668][T25665] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 627.595697][T25665] vfs_read+0x20c/0xa70 [ 627.595717][T25665] ? fdget_pos+0x246/0x320 [ 627.595752][T25665] ? __pfx___mutex_lock+0x10/0x10 [ 627.595784][T25665] ? __pfx_vfs_read+0x10/0x10 [ 627.595807][T25665] ? __fget_files+0x2a/0x420 [ 627.595841][T25665] ? __fget_files+0x3a0/0x420 [ 627.595869][T25665] ? __fget_files+0x2a/0x420 [ 627.595908][T25665] ksys_read+0x150/0x270 [ 627.595933][T25665] ? __pfx_ksys_read+0x10/0x10 [ 627.595967][T25665] do_syscall_64+0x14d/0xf80 [ 627.596000][T25665] ? trace_irq_disable+0x3b/0x150 [ 627.596030][T25665] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.596052][T25665] ? clear_bhb_loop+0x40/0x90 [ 627.596080][T25665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.596102][T25665] RIP: 0033:0x7f7b4c35cfce [ 627.596122][T25665] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 627.596142][T25665] RSP: 002b:00007f7b4d31dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 627.596165][T25665] RAX: ffffffffffffffda RBX: 00007f7b4d31e6c0 RCX: 00007f7b4c35cfce [ 627.596181][T25665] RDX: 000000000000000f RSI: 00007f7b4d31e0a0 RDI: 0000000000000004 [ 627.596195][T25665] RBP: 00007f7b4d31e090 R08: 0000000000000000 R09: 0000000000000000 [ 627.596208][T25665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 627.596221][T25665] R13: 00007f7b4c616038 R14: 00007f7b4c615fa0 R15: 00007ffc8d8ea158 [ 627.596257][T25665] [ 627.890051][T25672] netlink: 'syz.1.5394': attribute type 1 has an invalid length. [ 628.358696][T25689] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 628.375126][T25692] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5404'. [ 628.588408][T25703] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5407'. [ 628.987571][T25724] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5414'. [ 629.424444][T25736] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5419'. [ 629.559750][T25740] netlink: 'syz.1.5420': attribute type 13 has an invalid length. [ 630.095644][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 630.103781][ C0] lec:lec_tx_timeout: lec0 [ 630.639233][T25799] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5438'. [ 633.283750][T25785] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 633.688281][T25840] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5451'. [ 633.817418][T25847] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5450'. [ 633.965236][T25855] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5457'. [ 634.566013][T25880] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5464'. [ 634.620400][T25884] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5465'. [ 634.718008][T25884] workqueue: Failed to create a rescuer kthread for wq "bond16": -EINTR [ 634.864059][T25896] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1500) ! [ 634.897153][T25893] syzkaller0: entered promiscuous mode [ 634.902779][T25893] syzkaller0: entered allmulticast mode [ 634.942577][T25891] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5466'. [ 635.076328][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 635.259544][T25920] veth0: entered promiscuous mode [ 635.268684][T25922] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5472'. [ 635.426740][T25924] netlink: 'syz.1.5473': attribute type 3 has an invalid length. [ 635.447014][T25924] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5473'. [ 635.477221][T25924] netlink: 'syz.1.5473': attribute type 29 has an invalid length. [ 635.505856][T25924] netlink: 'syz.1.5473': attribute type 29 has an invalid length. [ 635.528527][T25926] netlink: 'syz.1.5473': attribute type 3 has an invalid length. [ 635.682585][T25932] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5474'. [ 635.711045][T25932] openvswitch: netlink: Geneve opt len 3 is not a multiple of 4. [ 636.133759][T25950] bond4: ARP target 1.0.0.0 is already present [ 636.147174][T25950] bond4: option arp_ip_target: invalid value (1) [ 636.180540][T25950] bond4 (unregistering): Released all slaves [ 636.249657][T25953] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5480'. [ 636.271523][T25956] tc_dump_action: action bad kind [ 636.314848][T25968] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 636.888117][T25994] openvswitch: netlink: Missing key (keys=40, expected=100) [ 637.374784][T26023] openvswitch: netlink: IP tunnel dst address not specified [ 637.410961][T26022] tipc: Enabling of bearer rejected, failed to enable media [ 637.554726][T26034] ieee802154 phy1 wpan1: encryption failed: -22 [ 640.086527][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 640.094888][ C0] lec:lec_tx_timeout: lec0 [ 640.106258][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 640.304341][T26031] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 640.315063][T26033] netlink: 'syz.2.5495': attribute type 4 has an invalid length. [ 640.326433][T26033] __nla_validate_parse: 16 callbacks suppressed [ 640.326452][T26033] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5495'. [ 640.347245][T26062] netlink: 256 bytes leftover after parsing attributes in process `syz.4.5504'. [ 640.613813][T26086] IPv6: NLM_F_REPLACE set, but no existing node found! [ 640.640876][T26086] IPv6: NLM_F_REPLACE set, but no existing node found! [ 640.671862][T26090] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5513'. [ 640.673956][T26092] netlink: 'syz.0.5514': attribute type 1 has an invalid length. [ 640.801887][T26094] netlink: 212 bytes leftover after parsing attributes in process `syz.0.5515'. [ 640.828100][T26100] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5516'. [ 640.845497][T26100] xt_CT: You must specify a L4 protocol and not use inversions on it [ 640.971583][T26105] bridge0: port 1(ipvlan2) entered blocking state [ 640.979567][T26105] bridge0: port 1(ipvlan2) entered disabled state [ 640.986650][T26105] ipvlan2: entered allmulticast mode [ 640.992256][T26105] bridge0: entered allmulticast mode [ 641.000048][T26105] ipvlan2: left allmulticast mode [ 641.005133][T26105] bridge0: left allmulticast mode [ 641.044326][T26108] netlink: 'syz.0.5519': attribute type 3 has an invalid length. [ 641.054845][T26103] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5520'. [ 641.064308][T26103] hsr_slave_0: left promiscuous mode [ 641.075025][T26103] hsr_slave_1: left promiscuous mode [ 641.385018][T26125] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5526'. [ 641.391364][T26120] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5524'. [ 641.409541][T26125] openvswitch: netlink: Flow key attr not present in new flow. [ 641.434754][T26120] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5524'. [ 641.458532][T26120] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5524'. [ 641.489733][T26125] bridge0: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 641.667591][T26135] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 641.908546][T26149] Bluetooth: MGMT ver 1.23 [ 642.068686][T26160] netlink: 'syz.3.5534': attribute type 4 has an invalid length. [ 642.094134][T26160] netlink: 'syz.3.5534': attribute type 1 has an invalid length. [ 642.126192][T26163] netlink: 'syz.3.5534': attribute type 1 has an invalid length. [ 642.372740][T26188] netlink: 'syz.3.5544': attribute type 7 has an invalid length. [ 642.398394][T26188] erspan0: entered promiscuous mode [ 642.416037][T26188] gretap0: entered promiscuous mode [ 642.438753][T26188] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 642.459700][T26188] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 642.808350][T26218] syzkaller0: entered promiscuous mode [ 642.825312][T26218] syzkaller0: entered allmulticast mode [ 643.025223][T26237] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 643.060649][T26237] tipc: Enabling of bearer rejected, already enabled [ 643.568923][T26263] netlink: 'syz.4.5566': attribute type 9 has an invalid length. [ 643.582097][T26263] netlink: 'syz.4.5566': attribute type 11 has an invalid length. [ 643.601628][T26263] netlink: 'syz.4.5566': attribute type 12 has an invalid length. [ 644.592950][T26316] team0: Port device team_slave_0 removed [ 644.664275][T26334] veth9: entered promiscuous mode [ 644.673110][T26334] veth9: entered allmulticast mode [ 644.773569][T26345] ip6gre0: Master is either lo or non-ether device [ 644.939428][T26352] bond4: Invalid ad_actor_system MAC address. [ 644.958461][T26352] bond4: option ad_actor_system: invalid value (1) [ 644.975463][T26352] bond4 (unregistering): Released all slaves [ 645.115642][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 645.123810][ C0] lec:lec_tx_timeout: lec0 [ 645.146094][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 645.521217][T26405] netlink: 'syz.3.5603': attribute type 27 has an invalid length. [ 645.554069][T26407] __nla_validate_parse: 17 callbacks suppressed [ 645.554091][T26407] netlink: 244 bytes leftover after parsing attributes in process `syz.2.5604'. [ 645.721653][T26413] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5606'. [ 645.815504][T26419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5607'. [ 645.852429][T26425] validate_nla: 1 callbacks suppressed [ 645.852451][T26425] netlink: 'syz.3.5609': attribute type 21 has an invalid length. [ 645.881505][T26425] IPv6: NLM_F_CREATE should be specified when creating new route [ 645.978942][T26431] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5610'. [ 646.084030][T26443] netlink: 324 bytes leftover after parsing attributes in process `syz.4.5613'. [ 646.151321][T26428] bond8 (unregistering): Released all slaves [ 646.292507][T26450] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 646.386918][T26455] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5615'. [ 646.404933][T26455] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5615'. [ 646.418291][T26455] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5615'. [ 646.448417][T26455] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5615'. [ 646.690870][T26474] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5621'. [ 646.711930][T26474] gtp1: entered promiscuous mode [ 646.717981][T26474] gtp1: entered allmulticast mode [ 646.857812][T26477] tipc: New replicast peer: 255.255.255.255 [ 646.865387][T26477] tipc: Enabled bearer , priority 24 [ 647.025134][T26486] netlink: 'syz.0.5627': attribute type 1 has an invalid length. [ 647.056141][T26488] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 647.214429][T26499] ieee802154 phy1 wpan1: encryption failed: -22 [ 647.244436][T26499] ieee802154 phy1 wpan1: encryption failed: -22 [ 647.251186][T26503] openvswitch: netlink: IP tunnel dst address not specified [ 647.258507][T26501] tipc: Failed to remove unknown binding: 66,1,1/2886997007:3935849350/3935849352 [ 647.258579][T26501] tipc: Failed to remove unknown binding: 66,1,1/2886997007:3935849350/3935849352 [ 647.293033][T26499] ieee802154 phy1 wpan1: encryption failed: -22 [ 647.359228][T26507] batman_adv: batadv0: Adding interface: dummy0 [ 647.376966][T26507] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 647.422913][T26507] batman_adv: batadv0: Interface activated: dummy0 [ 647.486248][T26511] batadv0: mtu less than device minimum [ 647.529424][T26511] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 647.541104][T26515] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 647.542881][T26511] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 647.562622][T26511] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 647.574487][T26511] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 647.586348][T26511] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 647.597906][T26511] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 647.609731][T26511] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 647.621629][T26511] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 647.914776][T26523] tipc: Resetting bearer [ 648.734865][T26585] netlink: 'syz.4.5650': attribute type 2 has an invalid length. [ 649.033117][T26596] netlink: 'syz.3.5655': attribute type 30 has an invalid length. [ 649.632860][T26629] netlink: 'syz.1.5669': attribute type 2 has an invalid length. [ 649.647230][T26629] netlink: 'syz.1.5669': attribute type 2 has an invalid length. [ 649.660725][T26629] netlink: 'syz.1.5669': attribute type 2 has an invalid length. [ 649.686910][T26629] netlink: 'syz.1.5669': attribute type 2 has an invalid length. [ 649.710573][T26629] netlink: 'syz.1.5669': attribute type 1 has an invalid length. [ 649.992954][T26649] Cannot find add_set index 2 as target [ 650.016510][T26652] Cannot find add_set index 2 as target [ 650.155761][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 650.163918][ C0] lec:lec_tx_timeout: lec0 [ 650.185955][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 650.732571][T26681] lo speed is unknown, defaulting to 1000 [ 650.752712][T26681] lo speed is unknown, defaulting to 1000 [ 650.759722][T26681] lo speed is unknown, defaulting to 1000 [ 650.864988][T26692] __nla_validate_parse: 11 callbacks suppressed [ 650.865012][T26692] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5687'. [ 650.900483][T26698] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5686'. [ 650.963738][T26692] netlink: 'syz.4.5687': attribute type 7 has an invalid length. [ 650.980120][T26692] netlink: 'syz.4.5687': attribute type 8 has an invalid length. [ 650.990074][T26692] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5687'. [ 651.079904][T26705] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5690'. [ 651.277675][T26713] tunl0: entered promiscuous mode [ 651.309197][T26713] netlink: 'syz.1.5691': attribute type 3 has an invalid length. [ 651.339960][T26713] netlink: 9 bytes leftover after parsing attributes in process `syz.1.5691'. [ 651.414161][ T24] lo speed is unknown, defaulting to 1000 [ 651.424289][T26681] infiniband syz0: set active [ 651.438855][T26681] infiniband syz0: added lo [ 651.575104][T26681] RDS/IB: syz0: added [ 651.588500][T26681] smc: adding ib device syz0 with port count 1 [ 651.608700][T26681] smc: ib device syz0 port 1 has no pnetid [ 651.620158][ T5832] lo speed is unknown, defaulting to 1000 [ 651.632358][T26681] lo speed is unknown, defaulting to 1000 [ 651.780830][T26735] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5698'. [ 651.837041][T26735] hsr_slave_0 (unregistering): left promiscuous mode [ 651.936345][T26742] netlink: 'syz.1.5700': attribute type 1 has an invalid length. [ 651.960149][T26742] nbd: error processing sock list [ 651.987930][T26742] netlink: 'syz.1.5700': attribute type 1 has an invalid length. [ 651.998347][T26742] nbd: error processing sock list [ 652.009984][T26742] netlink: 'syz.1.5700': attribute type 1 has an invalid length. [ 652.049094][T26742] nbd: error processing sock list [ 652.250382][T26756] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5703'. [ 652.293065][T26752] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5702'. [ 652.379198][T26760] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:7 [ 652.439978][T26681] lo speed is unknown, defaulting to 1000 [ 652.994396][T26783] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5712'. [ 653.013642][T26681] lo speed is unknown, defaulting to 1000 [ 653.033279][T26774] delete_channel: no stack [ 653.042312][T26785] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5713'. [ 653.360622][T26798] netlink: 'syz.0.5719': attribute type 83 has an invalid length. [ 653.378088][T26800] IPVS: ip_vs_add_dest(): server weight less than zero [ 653.391647][T26801] IPVS: ip_vs_add_dest(): server weight less than zero [ 653.561434][T26681] lo speed is unknown, defaulting to 1000 [ 653.846367][T26828] ieee802154 phy1 wpan1: encryption failed: -22 [ 654.172377][T26681] lo speed is unknown, defaulting to 1000 [ 654.629146][T26681] lo speed is unknown, defaulting to 1000 [ 654.938495][T26874] netlink: 'syz.3.5741': attribute type 33 has an invalid length. [ 655.012169][T26874] bond8: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 655.025512][T26874] bond8 (unregistering): Released all slaves [ 655.205612][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 655.213822][ C0] lec:lec_tx_timeout: lec0 [ 655.219476][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 655.260198][T26681] lo speed is unknown, defaulting to 1000 [ 655.299507][T26892] netlink: 'syz.4.5747': attribute type 1 has an invalid length. [ 655.316627][T26891] netlink: 'syz.3.5748': attribute type 1 has an invalid length. [ 655.962221][T26915] __nla_validate_parse: 40 callbacks suppressed [ 655.962244][T26915] netlink: 666 bytes leftover after parsing attributes in process `syz.3.5755'. [ 656.007992][T26918] net_ratelimit: 14 callbacks suppressed [ 656.008014][T26918] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 656.094782][T26917] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 656.198965][T26926] lo speed is unknown, defaulting to 1000 [ 656.661611][T26944] Unsupported ieee802154 address type: 0 [ 657.611149][T26984] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.5778'. [ 657.639739][T26982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5777'. [ 657.683354][T26988] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5779'. [ 657.737435][T26991] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5779'. [ 658.136522][T27010] lo speed is unknown, defaulting to 1000 [ 658.382606][T27023] ipvlan4: entered allmulticast mode [ 658.858622][T27043] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5790'. [ 659.224934][T27056] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 659.274924][T27056] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 659.291775][T27059] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5796'. [ 659.325056][T27063] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5797'. [ 659.369634][T27056] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5795'. [ 659.379833][T27059] netlink: 43 bytes leftover after parsing attributes in process `syz.4.5796'. [ 659.409946][T27059] validate_nla: 1 callbacks suppressed [ 659.409967][T27059] netlink: 'syz.4.5796': attribute type 5 has an invalid length. [ 659.517380][T27073] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 659.682257][T27083] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 660.003127][T27091] netlink: 'syz.1.5806': attribute type 10 has an invalid length. [ 660.225609][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 660.233710][ C0] lec:lec_tx_timeout: lec0 [ 660.266563][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 660.362013][T27112] syz_tun: entered allmulticast mode [ 660.680115][T27121] netlink: 'syz.4.5813': attribute type 1 has an invalid length. [ 660.728385][T27121] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.915452][T27121] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.034158][T27121] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.098217][T27140] __nla_validate_parse: 4 callbacks suppressed [ 661.098240][T27140] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5819'. [ 661.168375][T27140] openvswitch: netlink: IP tunnel dst address not specified [ 661.213884][T27121] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.392339][T27148] lo speed is unknown, defaulting to 1000 [ 661.460449][T10561] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.476769][T10561] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.526947][T10790] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.663511][T27157] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.5824'. [ 661.683015][T10561] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.201546][T27176] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5829'. [ 662.211066][T27176] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 662.358911][T27176] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 662.670140][T27195] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5834'. [ 662.960183][T27214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5838'. [ 662.977478][T27214] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5838'. [ 663.216938][T27232] netlink: 'syz.2.5844': attribute type 2 has an invalid length. [ 663.224744][T27232] netlink: 'syz.2.5844': attribute type 5 has an invalid length. [ 663.278346][T27237] xt_hashlimit: size too large, truncated to 1048576 [ 663.329945][T27245] rdma_op ffff888036f1c9f0 conn xmit_rdma 0000000000000000 [ 663.800497][T27269] bond16 (unregistering): Released all slaves [ 663.881546][T27280] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5857'. [ 663.893600][T27279] geneve3: entered promiscuous mode [ 663.928415][ T13] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 2 - 0 [ 663.946720][ T13] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 2 - 0 [ 663.983698][ T13] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 2 - 0 [ 664.016609][ T13] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 2 - 0 [ 664.089263][T27286] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5859'. [ 664.109643][T27290] netlink: 256 bytes leftover after parsing attributes in process `syz.2.5861'. [ 664.220028][T27296] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5862'. [ 664.233474][ T36] tipc: Subscription rejected, illegal request [ 665.084298][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 665.095509][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 665.110564][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 665.126271][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 665.148514][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 665.277392][T27335] lo speed is unknown, defaulting to 1000 [ 665.286217][T27343] netlink: 'syz.2.5876': attribute type 29 has an invalid length. [ 665.380437][T27350] openvswitch: netlink: IP tunnel dst address not specified [ 665.583705][T27358] netlink: 'syz.1.5881': attribute type 1 has an invalid length. [ 665.603509][T16692] syz_tun (unregistering): left allmulticast mode [ 665.682886][T27359] netlink: 'syz.1.5881': attribute type 29 has an invalid length. [ 665.716461][T27358] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 666.026628][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5760 ms [ 666.043137][ C0] lec:lec_tx_timeout: lec0 [ 666.048539][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 666.209212][T27390] __nla_validate_parse: 9 callbacks suppressed [ 666.209232][T27390] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5888'. [ 666.228915][T27390] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5888'. [ 666.917753][T27335] chnl_net:caif_netlink_parms(): no params data found [ 667.189333][T27436] syzkaller0: entered promiscuous mode [ 667.211212][T27436] syzkaller0: entered allmulticast mode [ 667.223815][T27446] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5902'. [ 667.228069][ T5845] Bluetooth: hci3: command tx timeout [ 667.286019][T27450] ieee802154 phy1 wpan1: encryption failed: -22 [ 667.292485][T27450] ieee802154 phy1 wpan1: encryption failed: -22 [ 667.317350][T27436] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5899'. [ 667.348368][T27447] tipc: Enabled bearer , priority 0 [ 667.374692][T27435] tipc: Resetting bearer [ 667.469596][T27435] tipc: Disabling bearer [ 667.526917][T27335] bridge0: port 1(bridge_slave_0) entered blocking state [ 667.548765][T27335] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.567074][T27335] bridge_slave_0: entered allmulticast mode [ 667.576873][T27335] bridge_slave_0: entered promiscuous mode [ 667.592478][T27335] bridge0: port 2(bridge_slave_1) entered blocking state [ 667.640647][T27335] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.649550][T27335] bridge_slave_1: entered allmulticast mode [ 667.659401][T27335] bridge_slave_1: entered promiscuous mode [ 667.715177][T27335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 667.787060][T27335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 667.871497][T27335] team0: Port device team_slave_0 added [ 667.950520][T27335] team0: Port device team_slave_1 added [ 668.023966][T27335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 668.052116][T27335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 668.142623][T27335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 668.170753][T27491] SET target dimension over the limit! [ 668.189233][T27335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 668.207998][T27335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 668.240977][T27484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5912'. [ 668.296668][T27335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 668.434629][T27502] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 668.499917][T27335] hsr_slave_0: entered promiscuous mode [ 668.515158][T27335] hsr_slave_1: entered promiscuous mode [ 668.531668][T27335] debugfs: 'hsr0' already exists in 'hsr' [ 668.544660][T27335] Cannot create hsr debugfs directory [ 669.085081][T27534] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5925'. [ 669.169902][T27536] netlink: 'syz.1.5926': attribute type 12 has an invalid length. [ 669.222635][T27536] bond4: option primary_reselect: invalid value (255) [ 669.233000][T27536] bond4 (unregistering): Released all slaves [ 669.307756][ T5845] Bluetooth: hci3: command tx timeout [ 669.548608][T27335] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 669.563887][T27335] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 669.581324][T27547] netlink: 'syz.4.5929': attribute type 29 has an invalid length. [ 669.590696][T27547] netlink: 'syz.4.5929': attribute type 29 has an invalid length. [ 669.599875][T27335] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 669.602012][T27547] netlink: 596 bytes leftover after parsing attributes in process `syz.4.5929'. [ 669.621425][T27335] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 669.878693][T27335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 669.921179][T27335] 8021q: adding VLAN 0 to HW filter on device team0 [ 669.950763][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 669.958011][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 669.988022][T10564] bridge0: port 2(bridge_slave_1) entered blocking state [ 669.995216][T10564] bridge0: port 2(bridge_slave_1) entered forwarding state [ 670.047725][T27567] netlink: 190972 bytes leftover after parsing attributes in process `syz.4.5935'. [ 670.095231][T27571] FAULT_INJECTION: forcing a failure. [ 670.095231][T27571] name failslab, interval 1, probability 0, space 0, times 1 [ 670.114467][T27571] CPU: 0 UID: 0 PID: 27571 Comm: syz.2.5936 Not tainted syzkaller #0 PREEMPT(full) [ 670.114496][T27571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 670.114510][T27571] Call Trace: [ 670.114518][T27571] [ 670.114528][T27571] dump_stack_lvl+0xe8/0x150 [ 670.114600][T27571] should_fail_ex+0x412/0x560 [ 670.114632][T27571] should_failslab+0xa8/0x100 [ 670.114659][T27571] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 670.114698][T27571] ? __alloc_skb+0x1d0/0x7d0 [ 670.114723][T27571] ? __local_bh_enable_ip+0xd0/0x130 [ 670.114755][T27571] __alloc_skb+0x1d0/0x7d0 [ 670.114783][T27571] ? netlink_ack_tlv_len+0x6c/0x210 [ 670.114812][T27571] netlink_ack+0x146/0xa50 [ 670.114834][T27571] ? __pfx_genl_rcv_msg+0x10/0x10 [ 670.114863][T27571] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 670.114898][T27571] ? __pfx_nl80211_post_doit+0x10/0x10 [ 670.114919][T27571] ? __lock_acquire+0x6b5/0x2cf0 [ 670.114960][T27571] netlink_rcv_skb+0x2b6/0x4b0 [ 670.114987][T27571] ? __pfx_genl_rcv_msg+0x10/0x10 [ 670.115021][T27571] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 670.115066][T27571] ? down_read+0x272/0x2e0 [ 670.115088][T27571] ? genl_rcv+0xd/0x40 [ 670.115119][T27571] genl_rcv+0x28/0x40 [ 670.115149][T27571] netlink_unicast+0x80f/0x9b0 [ 670.115181][T27571] ? __pfx_netlink_unicast+0x10/0x10 [ 670.115216][T27571] ? netlink_sendmsg+0x650/0xb40 [ 670.115241][T27571] ? skb_put+0x11b/0x210 [ 670.115274][T27571] netlink_sendmsg+0x813/0xb40 [ 670.115313][T27571] ? __pfx_netlink_sendmsg+0x10/0x10 [ 670.115344][T27571] ? aa_sock_msg_perm+0xf1/0x1b0 [ 670.115372][T27571] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 670.115399][T27571] ? __pfx_netlink_sendmsg+0x10/0x10 [ 670.115424][T27571] ____sys_sendmsg+0xa68/0xad0 [ 670.115468][T27571] ? __pfx_____sys_sendmsg+0x10/0x10 [ 670.115511][T27571] ? import_iovec+0x73/0xa0 [ 670.115549][T27571] ___sys_sendmsg+0x2a5/0x360 [ 670.115592][T27571] ? __pfx____sys_sendmsg+0x10/0x10 [ 670.115663][T27571] ? __fget_files+0x2a/0x420 [ 670.115692][T27571] ? __fget_files+0x3a0/0x420 [ 670.115733][T27571] __x64_sys_sendmsg+0x1bd/0x2a0 [ 670.115768][T27571] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 670.115826][T27571] ? __pfx_ksys_write+0x10/0x10 [ 670.115862][T27571] do_syscall_64+0x14d/0xf80 [ 670.115893][T27571] ? trace_irq_disable+0x3b/0x150 [ 670.115923][T27571] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.115946][T27571] ? clear_bhb_loop+0x40/0x90 [ 670.115972][T27571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.115994][T27571] RIP: 0033:0x7f7b4c39c799 [ 670.116014][T27571] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 670.116033][T27571] RSP: 002b:00007f7b4d31e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 670.116056][T27571] RAX: ffffffffffffffda RBX: 00007f7b4c615fa0 RCX: 00007f7b4c39c799 [ 670.116072][T27571] RDX: 0000000024004000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 670.116086][T27571] RBP: 00007f7b4d31e090 R08: 0000000000000000 R09: 0000000000000000 [ 670.116099][T27571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 670.116111][T27571] R13: 00007f7b4c616038 R14: 00007f7b4c615fa0 R15: 00007ffc8d8ea158 [ 670.116147][T27571] [ 670.576555][T27580] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5938'. [ 670.781380][T27335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 670.930012][T27335] veth0_vlan: entered promiscuous mode [ 670.949900][T27335] veth1_vlan: entered promiscuous mode [ 671.065853][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 671.073965][ C0] lec:lec_tx_timeout: lec0 [ 671.082273][T27335] veth0_macvtap: entered promiscuous mode [ 671.124940][T27335] veth1_macvtap: entered promiscuous mode [ 671.185833][T27601] netlink: 'syz.3.5946': attribute type 11 has an invalid length. [ 671.190986][T27335] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 671.207528][T27601] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5946'. [ 671.260836][T27601] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5946'. [ 671.282054][T27335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 671.301306][T27608] netlink: 92 bytes leftover after parsing attributes in process `syz.4.5947'. [ 671.328397][T27608] netlink: 'syz.4.5947': attribute type 1 has an invalid length. [ 671.351806][T10790] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.363331][T10790] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.375452][T10790] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.388400][ T5843] Bluetooth: hci3: command tx timeout [ 671.404216][T27601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 671.414162][T27601] team0: Failed to send port change of device batadv0 via netlink (err -105) [ 671.423677][T27601] team0: Failed to send options change via netlink (err -105) [ 671.431565][T27601] team0: Port device batadv0 added [ 671.443214][T10790] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.663871][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 671.684180][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 671.730558][T27622] netlink: 'syz.2.5952': attribute type 1 has an invalid length. [ 671.812674][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 671.845743][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 671.907785][T27622] 8021q: adding VLAN 0 to HW filter on device bond4 [ 671.928357][T27625] bond4: (slave ip6erspan0): making interface the new active one [ 671.938306][T27625] bond4: (slave ip6erspan0): Enslaving as an active interface with an up link [ 671.951317][T27638] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5955'. [ 671.962303][T27629] tipc: Enabling of bearer rejected, failed to enable media [ 672.086719][T27640] sctp: [Deprecated]: syz.4.5958 (pid 27640) Use of struct sctp_assoc_value in delayed_ack socket option. [ 672.086719][T27640] Use struct sctp_sack_info instead [ 672.218874][T27646] vlan4: entered promiscuous mode [ 672.288809][T27653] FAULT_INJECTION: forcing a failure. [ 672.288809][T27653] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 672.314682][T27653] CPU: 0 UID: 0 PID: 27653 Comm: syz.3.5960 Not tainted syzkaller #0 PREEMPT(full) [ 672.314725][T27653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 672.314739][T27653] Call Trace: [ 672.314748][T27653] [ 672.314761][T27653] dump_stack_lvl+0xe8/0x150 [ 672.314798][T27653] should_fail_ex+0x412/0x560 [ 672.314836][T27653] _copy_from_user+0x2d/0xb0 [ 672.314869][T27653] kstrtouint_from_user+0xd6/0x180 [ 672.314899][T27653] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 672.314943][T27653] proc_fail_nth_write+0x8e/0x210 [ 672.314974][T27653] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 672.315010][T27653] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 672.315042][T27653] vfs_write+0x29a/0xb90 [ 672.315074][T27653] ? __pfx_vfs_write+0x10/0x10 [ 672.315099][T27653] ? __fget_files+0x2a/0x420 [ 672.315134][T27653] ? __fget_files+0x3a0/0x420 [ 672.315162][T27653] ? __fget_files+0x2a/0x420 [ 672.315202][T27653] ksys_write+0x150/0x270 [ 672.315228][T27653] ? __pfx_ksys_write+0x10/0x10 [ 672.315263][T27653] do_syscall_64+0x14d/0xf80 [ 672.315296][T27653] ? trace_irq_disable+0x3b/0x150 [ 672.315326][T27653] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.315348][T27653] ? clear_bhb_loop+0x40/0x90 [ 672.315375][T27653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.315396][T27653] RIP: 0033:0x7f2e32d5cfce [ 672.315416][T27653] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 672.315434][T27653] RSP: 002b:00007f2e30fedfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 672.315456][T27653] RAX: ffffffffffffffda RBX: 00007f2e30fee6c0 RCX: 00007f2e32d5cfce [ 672.315472][T27653] RDX: 0000000000000001 RSI: 00007f2e30fee0a0 RDI: 0000000000000005 [ 672.315485][T27653] RBP: 00007f2e30fee090 R08: 0000000000000000 R09: 0000000000000000 [ 672.315499][T27653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 672.315511][T27653] R13: 00007f2e33016038 R14: 00007f2e33015fa0 R15: 00007ffeab0bd1d8 [ 672.315551][T27653] [ 672.679531][T27670] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 672.762310][T27674] bridge1: entered promiscuous mode [ 672.767983][T27674] bridge1: entered allmulticast mode [ 672.780516][T27674] team0: Port device bridge1 added [ 672.790655][T27674] bridge0: port 3(team0) entered blocking state [ 672.826320][T27674] bridge0: port 3(team0) entered disabled state [ 672.832999][T27674] team0: entered allmulticast mode [ 672.839500][T27674] team_slave_0: entered allmulticast mode [ 672.845822][T27674] team_slave_1: entered allmulticast mode [ 672.869967][T27674] team0: entered promiscuous mode [ 672.875166][T27674] team_slave_0: entered promiscuous mode [ 672.886981][T27674] team_slave_1: entered promiscuous mode [ 672.898392][T27674] bridge0: port 3(team0) entered blocking state [ 672.905210][T27674] bridge0: port 3(team0) entered forwarding state [ 673.237987][T27695] A link change request failed with some changes committed already. Interface ªªªªª9 may have been left with an inconsistent configuration, please check. [ 673.298435][T27696] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 673.304620][T27696] syzkaller1: Refused to change device type [ 673.311985][T27696] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5973'. [ 673.394055][T27659] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 673.466184][ T5843] Bluetooth: hci3: command 0x0419 tx timeout [ 673.767412][T27724] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5982'. [ 673.788716][T27724] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5982'. [ 673.813111][T27724] netlink: 5460 bytes leftover after parsing attributes in process `syz.3.5982'. [ 673.883619][T27729] netlink: 'syz.0.5984': attribute type 2 has an invalid length. [ 673.910300][T27729] 9: entered promiscuous mode [ 674.106077][T27740] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5986'. [ 674.130296][T27740] bridge: RTM_NEWNEIGH with invalid ether address [ 674.400022][T27759] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5991'. [ 674.493264][T27758] delete_channel: no stack [ 674.612180][T27775] netlink: 'syz.1.5996': attribute type 3 has an invalid length. [ 674.772833][T27783] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 675.213879][T27804] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6006'. [ 675.235331][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 675.254396][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 675.263924][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 675.273308][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 675.282171][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 675.339081][T27811] netlink: 'syz.1.6006': attribute type 1 has an invalid length. [ 675.373413][T27809] macsec0: entered promiscuous mode [ 675.378867][T27809] macsec0: entered allmulticast mode [ 675.427062][T27815] veth1_macvtap: entered allmulticast mode [ 675.451909][T27815] macsec0: left promiscuous mode [ 675.458455][T27815] macsec0: left allmulticast mode [ 675.465059][T27815] veth1_macvtap: left allmulticast mode [ 675.549675][ T5843] Bluetooth: hci3: command 0x0419 tx timeout [ 675.564701][T27811] syzkaller0: entered promiscuous mode [ 675.576123][T27811] syzkaller0: entered allmulticast mode [ 675.595220][T27805] lo speed is unknown, defaulting to 1000 [ 675.707153][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 676.030323][T27835] netlink: 'syz.0.6013': attribute type 10 has an invalid length. [ 676.102277][T27836] netlink: 'syz.0.6013': attribute type 10 has an invalid length. [ 676.146260][T27835] vxcan1: entered promiscuous mode [ 676.151920][T27835] vxcan1: entered allmulticast mode [ 676.158873][T27835] team0: Device vxcan1 is of different type [ 676.191319][T27836] team0: Device vxcan1 is of different type [ 676.221105][T27836] netlink: 'syz.0.6013': attribute type 10 has an invalid length. [ 676.270612][T27836] team0: Device vxcan1 is of different type [ 676.342160][T27846] __nla_validate_parse: 6 callbacks suppressed [ 676.342187][T27846] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6015'. [ 676.437951][T27857] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 676.452311][T27857] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 676.509903][T27859] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6017'. [ 676.561088][T27859] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6017'. [ 676.688876][T27805] chnl_net:caif_netlink_parms(): no params data found [ 676.829840][T27805] bridge0: port 1(bridge_slave_0) entered blocking state [ 676.838184][T27805] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.846635][T27805] bridge_slave_0: entered allmulticast mode [ 676.864811][T27805] bridge_slave_0: entered promiscuous mode [ 676.886550][T27805] bridge0: port 2(bridge_slave_1) entered blocking state [ 676.905203][T27805] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.928672][T27805] bridge_slave_1: entered allmulticast mode [ 676.953435][T27805] bridge_slave_1: entered promiscuous mode [ 677.122620][T27890] netlink: 'syz.0.6026': attribute type 1 has an invalid length. [ 677.150246][T27805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 677.186880][T27805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 677.271943][T27890] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.305863][ T5843] Bluetooth: hci1: command tx timeout [ 677.382346][T27805] team0: Port device team_slave_0 added [ 677.394219][T27805] team0: Port device team_slave_1 added [ 677.495221][T27890] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.554900][T27805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 677.573452][T27805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 677.609637][T27805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 677.655444][T27890] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.705252][T27805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 677.713053][T27805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 677.748007][T27805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 677.903330][T27890] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.982856][T27805] hsr_slave_0: entered promiscuous mode [ 677.998357][T27805] hsr_slave_1: entered promiscuous mode [ 678.024670][T27805] debugfs: 'hsr0' already exists in 'hsr' [ 678.035250][T27805] Cannot create hsr debugfs directory [ 678.394156][ T1139] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.431480][ T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.486677][ T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.525500][ T1139] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.948847][T27959] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6046'. [ 678.984893][T27959] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6046'. [ 679.011675][T27963] netlink: 220 bytes leftover after parsing attributes in process `syz.2.6047'. [ 679.109273][T27971] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6046'. [ 679.122763][T27971] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6046'. [ 679.223370][T27969] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input5 [ 679.324198][T27983] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6049'. [ 679.389930][ T5843] Bluetooth: hci1: command tx timeout [ 679.472280][T27978] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6049'. [ 679.703442][T27805] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 679.772617][T27805] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 679.814783][T27805] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 679.864293][T27805] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 680.251563][T27805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 680.407985][T28018] 8021q: adding VLAN 0 to HW filter on device bond5 [ 680.527239][T27805] 8021q: adding VLAN 0 to HW filter on device team0 [ 680.540691][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 680.547986][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 680.589874][T27977] infiniband : set down [ 680.608612][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 680.615948][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 680.627873][T27977] infiniband : added ipvlan0 [ 680.634875][T27977] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 680.649421][T27977] infiniband : Couldn't open port 1 [ 680.807704][T28043] nbd: couldn't find a device at index 0 [ 680.824453][T27977] RDS/IB: : added [ 680.862641][T27977] smc: adding ib device  with port count 1 [ 680.878944][T27977] smc: ib device  port 1 has no pnetid [ 681.039712][T28050] A link change request failed with some changes committed already. Interface ªªªªª9 may have been left with an inconsistent configuration, please check. [ 681.065860][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5360 ms [ 681.074371][ C0] lec:lec_tx_timeout: lec0 [ 681.102536][T28050] x_tables: duplicate underflow at hook 3 [ 681.172953][T28051] geneve2: entered promiscuous mode [ 681.250763][T27805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 681.368025][T27805] veth0_vlan: entered promiscuous mode [ 681.402451][T27805] veth1_vlan: entered promiscuous mode [ 681.474081][ T5843] Bluetooth: hci1: command tx timeout [ 681.482091][T27805] veth0_macvtap: entered promiscuous mode [ 681.502186][T27805] veth1_macvtap: entered promiscuous mode [ 681.542226][T27805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 681.573477][T27805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 681.594538][T10790] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.603780][T10790] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.614819][T10790] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.625025][T10790] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.842760][T28079] __nla_validate_parse: 68 callbacks suppressed [ 681.842784][T28079] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6071'. [ 681.861140][T28079] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6071'. [ 681.875238][T28079] netlink: 'syz.4.6071': attribute type 1 has an invalid length. [ 681.968959][T28083] netlink: 'syz.2.6072': attribute type 3 has an invalid length. [ 682.000047][T28083] netlink: 'syz.2.6072': attribute type 3 has an invalid length. [ 682.089178][T28091] netlink: 256 bytes leftover after parsing attributes in process `syz.2.6074'. [ 682.211084][T28095] bridge9: entered promiscuous mode [ 682.219993][T28095] bridge9: entered allmulticast mode [ 682.398671][T28098] syzkaller0: entered promiscuous mode [ 682.404219][T28098] syzkaller0: entered allmulticast mode [ 683.556315][ T5843] Bluetooth: hci1: command tx timeout [ 684.074839][T28103] netlink: 'syz.1.6077': attribute type 3 has an invalid length. [ 684.083594][T28103] netlink: 'syz.1.6077': attribute type 3 has an invalid length. [ 684.339248][T28063] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 684.389327][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 684.410478][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 684.484001][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 684.504667][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 684.618247][T28112] netlink: 'syz.1.6080': attribute type 2 has an invalid length. [ 684.646256][T28114] netlink: 84 bytes leftover after parsing attributes in process `syz.2.6081'. [ 684.883622][T28131] netem: incorrect gi model size [ 684.912313][T28131] netem: change failed [ 685.095272][ T5845] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 685.107123][ T5845] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 685.118385][ T5845] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 685.127963][ T5845] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 685.139798][ T5845] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 685.159948][T28144] netlink: 27 bytes leftover after parsing attributes in process `syz.2.6089'. [ 685.200575][T28147] netlink: 'syz.3.6090': attribute type 1 has an invalid length. [ 685.300441][T28140] lo speed is unknown, defaulting to 1000 [ 685.829177][T28177] syzkaller0: entered promiscuous mode [ 685.834727][T28177] syzkaller0: entered allmulticast mode [ 685.909061][T28157] lo speed is unknown, defaulting to 1000 [ 685.953172][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.969257][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 686.282863][T28201] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6100'. [ 686.304197][T28201] openvswitch: netlink: Key type 31 is not supported [ 686.509181][T28212] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6103'. [ 686.645005][T28211] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6102'. [ 686.935834][T28223] bridge0: port 2(bridge_slave_1) entered disabled state [ 686.943623][T28223] bridge0: port 1(bridge_slave_0) entered disabled state [ 687.079444][T28223] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 687.094007][T28223] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 687.225958][ T5843] Bluetooth: hci5: command tx timeout [ 687.273885][ T13] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.284002][ T13] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.294373][ T13] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.325479][ T13] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.442683][T28140] chnl_net:caif_netlink_parms(): no params data found [ 687.478919][T28235] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6108'. [ 687.576968][T28235] bond0: entered promiscuous mode [ 687.583072][T28235] bond_slave_0: entered promiscuous mode [ 687.595974][T28235] bond_slave_1: entered promiscuous mode [ 687.614875][T28235] mac80211_hwsim hwsim36 wlan1: entered promiscuous mode [ 687.633183][T28235] gretap0: entered promiscuous mode [ 687.651313][T28235] debugfs: 'hsr0' already exists in 'hsr' [ 687.667127][T28235] Cannot create hsr debugfs directory [ 687.676071][T28235] hsr0: entered promiscuous mode [ 687.807803][T28243] bond5: Removing last ns target with arp_interval on [ 688.041049][T28254] mac80211_hwsim hwsim42 syzkaller0: left promiscuous mode [ 688.048947][T28254] mac80211_hwsim hwsim42 syzkaller0: left allmulticast mode [ 688.057306][T28257] netlink: 64985 bytes leftover after parsing attributes in process `syz.2.6115'. [ 688.237195][T28140] bridge0: port 1(bridge_slave_0) entered blocking state [ 688.244787][T28140] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.253415][T28140] bridge_slave_0: entered allmulticast mode [ 688.272110][T28140] bridge_slave_0: entered promiscuous mode [ 688.289009][T28140] bridge0: port 2(bridge_slave_1) entered blocking state [ 688.300235][T28140] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.308526][T28140] bridge_slave_1: entered allmulticast mode [ 688.322718][T28140] bridge_slave_1: entered promiscuous mode [ 688.398206][T28260] lo speed is unknown, defaulting to 1000 [ 688.433209][T28140] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 688.494524][T28140] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 688.559471][T28140] team0: Port device team_slave_0 added [ 688.570774][T28140] team0: Port device team_slave_1 added [ 688.624929][T28140] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 688.632703][T28140] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 688.682706][T28140] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 688.718644][T28140] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 688.734277][T28140] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 688.765159][T28140] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 688.961609][T28279] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6121'. [ 689.082383][T28140] hsr_slave_0: entered promiscuous mode [ 689.121184][T28140] hsr_slave_1: entered promiscuous mode [ 689.140170][T28140] debugfs: 'hsr0' already exists in 'hsr' [ 689.163493][T28140] Cannot create hsr debugfs directory [ 689.305897][ T5843] Bluetooth: hci5: command tx timeout [ 689.332104][T28289] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6124'. [ 689.609222][T28140] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.624104][T28140] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 2 - 0 [ 689.812639][T28140] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.824209][T28140] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 2 - 0 [ 689.925004][T28140] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.938700][T28140] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 2 - 0 [ 690.054043][T28140] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.080760][T28140] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 2 - 0 [ 690.121616][T28301] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6126'. [ 690.133921][T28301] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6126'. [ 690.188407][T28301] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6126'. [ 690.221359][ T36] tipc: Subscription rejected, illegal request [ 690.405063][T28310] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 690.521506][T28140] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 690.569743][T28140] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 690.582096][T28317] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6132'. [ 690.599355][T28140] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 690.649265][T28140] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 690.815482][T28327] netlink: 'syz.2.6133': attribute type 4 has an invalid length. [ 690.897314][T28140] 8021q: adding VLAN 0 to HW filter on device bond0 [ 691.008998][T28335] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6137'. [ 691.037171][T28140] 8021q: adding VLAN 0 to HW filter on device team0 [ 691.068067][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5100 ms [ 691.076554][ C0] lec:lec_tx_timeout: lec0 [ 691.153404][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 691.160668][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 691.175358][T28338] netem: change failed [ 691.211575][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 691.218857][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 691.386676][ T5843] Bluetooth: hci5: command tx timeout [ 691.670455][T28140] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 691.753950][T28374] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6149'. [ 691.812462][T28140] veth0_vlan: entered promiscuous mode [ 691.851372][T28140] veth1_vlan: entered promiscuous mode [ 691.973792][T28140] veth0_macvtap: entered promiscuous mode [ 691.995187][T28140] veth1_macvtap: entered promiscuous mode [ 692.060593][T28140] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 692.090372][T28140] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 692.140749][ T293] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.161108][T28389] netlink: 'syz.2.6156': attribute type 9 has an invalid length. [ 692.165144][ T293] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.184539][ T293] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 692.210136][T28389] rose2: left promiscuous mode [ 692.274902][T28388] syzkaller0: entered promiscuous mode [ 692.285887][T28388] syzkaller0: entered allmulticast mode [ 692.306813][ T293] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.467758][ T5843] Bluetooth: hci5: command tx timeout [ 694.384001][T28423] macsec0: entered promiscuous mode [ 694.389608][T28423] macsec0: entered allmulticast mode [ 694.400422][T28425] veth1_macvtap: entered allmulticast mode [ 694.414679][T28425] macsec0: left promiscuous mode [ 694.421495][T28425] macsec0: left allmulticast mode [ 694.427375][T28425] veth1_macvtap: left allmulticast mode [ 694.589673][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 694.610074][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 694.640702][T28435] __nla_validate_parse: 5 callbacks suppressed [ 694.640724][T28435] netlink: 84 bytes leftover after parsing attributes in process `syz.0.6167'. [ 694.688449][T28433] syzkaller0: entered promiscuous mode [ 694.705855][T28433] syzkaller0: entered allmulticast mode [ 694.749848][T28442] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6168'. [ 694.794004][T28445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6171'. [ 694.808353][T10564] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 694.823193][T10564] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 695.353389][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 695.366206][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 695.376375][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 695.384466][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 695.393516][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 695.464277][T28475] lo speed is unknown, defaulting to 1000 [ 696.320414][T28500] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6183'. [ 696.338645][T28492] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6184'. [ 696.780603][T28475] chnl_net:caif_netlink_parms(): no params data found [ 697.012783][T28475] bridge0: port 1(bridge_slave_0) entered blocking state [ 697.022281][T28475] bridge0: port 1(bridge_slave_0) entered disabled state [ 697.029823][T28475] bridge_slave_0: entered allmulticast mode [ 697.039152][T28475] bridge_slave_0: entered promiscuous mode [ 697.048451][T28475] bridge0: port 2(bridge_slave_1) entered blocking state [ 697.056452][T28475] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.068791][T28475] bridge_slave_1: entered allmulticast mode [ 697.079130][T28475] bridge_slave_1: entered promiscuous mode [ 697.142774][T28475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 697.160217][T28475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 697.203206][T28546] mac80211_hwsim hwsim60 ÿ: renamed from wlan1 (while UP) [ 697.221114][T28475] team0: Port device team_slave_0 added [ 697.227804][T28550] netlink: 'syz.3.6196': attribute type 8 has an invalid length. [ 697.239283][T28475] team0: Port device team_slave_1 added [ 697.246516][T28550] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6196'. [ 697.276764][T28552] netlink: 'syz.3.6196': attribute type 8 has an invalid length. [ 697.284567][T28552] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6196'. [ 697.309488][T28475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 697.317872][T28475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 697.346100][T28475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 697.376783][T28475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 697.383790][T28475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 697.417480][T28475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 697.466637][ T5845] Bluetooth: hci4: command tx timeout [ 697.475522][T28554] lo speed is unknown, defaulting to 1000 [ 697.509499][T28475] hsr_slave_0: entered promiscuous mode [ 697.517298][T28475] hsr_slave_1: entered promiscuous mode [ 697.523923][T28475] debugfs: 'hsr0' already exists in 'hsr' [ 697.530526][T28475] Cannot create hsr debugfs directory [ 697.771986][T28475] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.847416][T28475] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.924943][T28475] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.993050][T28475] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.768183][T28571] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6203'. [ 698.782491][T28571] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6203'. [ 698.837221][T28575] netlink: 'syz.1.6204': attribute type 1 has an invalid length. [ 699.256456][T28494] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 699.295240][T28475] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 699.381665][T28475] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 699.442507][T28595] xt_hashlimit: size too large, truncated to 1048576 [ 699.460760][T28475] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 699.500177][T28475] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 699.545710][ T5845] Bluetooth: hci4: command tx timeout [ 699.551865][T28596] –: renamed from vxcan1 [ 699.598484][T28606] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6211'. [ 699.683903][T28601] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6212'. [ 699.735428][T28601] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6212'. [ 699.763075][T28601] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 699.847605][T28601] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 700.039026][T28475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 700.101829][T28475] 8021q: adding VLAN 0 to HW filter on device team0 [ 700.106919][T28625] syz.0.6219 uses old SIOCAX25GETINFO [ 700.143306][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 700.150678][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 700.225121][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state [ 700.232479][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 700.607301][T28652] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6227'. [ 700.617952][T28647] netlink: 'syz.3.6226': attribute type 32 has an invalid length. [ 701.043797][T28671] bond1: (slave erspan0): Device is not bonding slave [ 701.063050][T28671] bond1: option active_slave: invalid value (erspan0) [ 701.089570][T28671] bond1 (unregistering): Released all slaves [ 701.253624][T28475] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 701.372625][T28689] netlink: 'syz.2.6233': attribute type 10 has an invalid length. [ 701.385399][T28691] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6234'. [ 701.414669][T28693] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6235'. [ 701.427850][T28690] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6234'. [ 701.626679][ T5845] Bluetooth: hci4: command tx timeout [ 701.670361][T28706] netlink: 'syz.0.6239': attribute type 2 has an invalid length. [ 701.688648][T28708] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6237'. [ 702.379171][T28475] veth0_vlan: entered promiscuous mode [ 702.545000][T28475] veth1_vlan: entered promiscuous mode [ 702.672028][T28475] veth0_macvtap: entered promiscuous mode [ 702.708623][T28475] veth1_macvtap: entered promiscuous mode [ 702.723517][T28762] syzkaller0: entered promiscuous mode [ 702.731480][T28762] syzkaller0: entered allmulticast mode [ 702.779965][T28766] tap0: tun_chr_ioctl cmd 1074025676 [ 702.786367][T28766] tap0: owner set to 0 [ 702.808526][T28475] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 702.833193][T28475] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 702.851733][T10564] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.874310][T10564] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.903380][T28771] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6254'. [ 702.915086][T28771] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6254'. [ 702.915101][T10564] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.948603][T10564] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.058881][T28775] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.6256'. [ 703.070202][T28775] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 703.098107][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 703.125773][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 703.179781][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 703.188516][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 703.352710][T28786] netlink: 'syz.0.6259': attribute type 2 has an invalid length. [ 703.397161][T28786] netlink: 'syz.0.6259': attribute type 2 has an invalid length. [ 703.447009][T28791] bridge0: entered allmulticast mode [ 703.705903][ T5845] Bluetooth: hci4: command tx timeout [ 703.940917][T28819] syzkaller0: entered promiscuous mode [ 703.947127][T28819] syzkaller0: entered allmulticast mode [ 704.231638][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 704.241957][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 704.250658][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 704.264201][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 704.273638][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 704.494603][T28834] lo speed is unknown, defaulting to 1000 [ 704.588181][T28847] bridge0: port 3(team0) entered disabled state [ 704.595040][T28847] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.602768][T28847] bridge0: port 1(bridge_slave_0) entered disabled state [ 705.046342][T28834] chnl_net:caif_netlink_parms(): no params data found [ 705.138806][T28834] bridge0: port 1(bridge_slave_0) entered blocking state [ 705.149085][T28834] bridge0: port 1(bridge_slave_0) entered disabled state [ 705.156968][T28834] bridge_slave_0: entered allmulticast mode [ 705.165139][T28834] bridge_slave_0: entered promiscuous mode [ 705.174216][T28834] bridge0: port 2(bridge_slave_1) entered blocking state [ 705.181702][T28834] bridge0: port 2(bridge_slave_1) entered disabled state [ 705.189854][T28834] bridge_slave_1: entered allmulticast mode [ 705.198973][T28834] bridge_slave_1: entered promiscuous mode [ 705.240223][T28834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 705.253449][T28834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 705.289611][T28834] team0: Port device team_slave_0 added [ 705.300110][T28834] team0: Port device team_slave_1 added [ 705.339013][T28834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 705.346214][T28834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 705.373093][T28834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 705.386299][T28834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 705.393285][T28834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 705.424134][T28834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 705.488508][T28834] hsr_slave_0: entered promiscuous mode [ 705.495170][T28834] hsr_slave_1: entered promiscuous mode [ 705.503207][T28834] debugfs: 'hsr0' already exists in 'hsr' [ 705.509541][T28834] Cannot create hsr debugfs directory [ 705.525517][T28864] Bluetooth: MGMT ver 1.23 [ 705.533827][T28864] netlink: 'syz.4.6282': attribute type 4 has an invalid length. [ 705.673328][T28834] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.752026][T28834] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.818017][T28834] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.871288][T28834] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.345951][ T5845] Bluetooth: hci2: command tx timeout [ 706.864016][T28825] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 706.874944][T28839] ksmbd: Unknown IPC event: 3, ignore. [ 706.901048][T28834] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 706.970817][T28834] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 707.019810][T28834] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 707.050452][T28834] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 707.381370][T28897] lo speed is unknown, defaulting to 1000 [ 707.442528][T28834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 707.505081][T28834] 8021q: adding VLAN 0 to HW filter on device team0 [ 707.533520][T10564] bridge0: port 1(bridge_slave_0) entered blocking state [ 707.540804][T10564] bridge0: port 1(bridge_slave_0) entered forwarding state [ 707.573333][T10564] bridge0: port 2(bridge_slave_1) entered blocking state [ 707.580587][T10564] bridge0: port 2(bridge_slave_1) entered forwarding state [ 707.872261][T28834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 707.937909][T28834] veth0_vlan: entered promiscuous mode [ 707.962677][T28834] veth1_vlan: entered promiscuous mode [ 708.008675][T28834] veth0_macvtap: entered promiscuous mode [ 708.031039][T28834] veth1_macvtap: entered promiscuous mode [ 708.059629][T28834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 708.145040][T28834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 708.169294][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.179008][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.193408][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.203898][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.426637][ T5845] Bluetooth: hci2: command tx timeout [ 710.121866][T28884] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 710.297942][T10790] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 710.310894][T28913] xt_CT: You must specify a L4 protocol and not use inversions on it [ 710.326896][T10790] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 710.433535][T10790] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 710.444140][T28921] __nla_validate_parse: 8 callbacks suppressed [ 710.444166][T28921] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6294'. [ 710.487475][T10790] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 710.515714][ T5845] Bluetooth: hci2: command tx timeout [ 710.552951][T28927] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6295'. [ 710.639753][T28932] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6296'. [ 710.729312][T15561] IPVS: starting estimator thread 0... [ 710.759351][T28939] IPVS: ip_vs_edit_dest(): server weight less than zero [ 710.835804][T28940] IPVS: using max 26 ests per chain, 62400 per kthread [ 711.152820][T28963] netlink: 240 bytes leftover after parsing attributes in process `syz.1.6304'. [ 711.279752][T28968] bond1: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 711.299226][T28968] bond1 (unregistering): Released all slaves [ 711.481693][T28985] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.6309'. [ 711.520094][T28985] netlink: Unknown conntrack attr (0) [ 711.656292][T28993] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6312'. [ 711.721365][T28995] veth3: entered allmulticast mode [ 711.778029][T28999] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6313'. [ 711.956867][T28999] netlink: 'syz.1.6313': attribute type 58 has an invalid length. [ 711.964757][T28999] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6313'. [ 712.098105][T29026] ipt_rpfilter: unknown options [ 712.112408][T29024] ipt_rpfilter: unknown options [ 712.178523][T29028] vlan2: entered promiscuous mode [ 712.183640][T29028] geneve1: entered promiscuous mode [ 712.240719][T29031] ieee802154 phy1 wpan1: encryption failed: -22 [ 712.251152][T29028] vlan2: entered allmulticast mode [ 712.257495][T29028] geneve1: entered allmulticast mode [ 712.327596][T29039] veth1_to_bond: entered allmulticast mode [ 712.367775][T29039] veth1_to_bond: left allmulticast mode [ 712.373864][ T293] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x6d [ 712.559089][T29051] lo speed is unknown, defaulting to 1000 [ 712.587714][ T5845] Bluetooth: hci2: command tx timeout [ 712.703754][T29062] netlink: 256 bytes leftover after parsing attributes in process `syz.3.6327'. [ 712.762724][T29064] IPv6: NLM_F_CREATE should be specified when creating new route [ 712.787909][T29064] netlink: 'syz.4.6332': attribute type 3 has an invalid length. [ 712.802795][T29064] netlink: 666 bytes leftover after parsing attributes in process `syz.4.6332'. [ 712.859049][T29065] IPv6: sit1: Disabled Multicast RS [ 713.345057][ T58] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 713.367620][ T58] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 713.398448][ T58] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 713.419085][ T58] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 714.218007][T29127] veth0_to_bridge: entered promiscuous mode [ 714.225166][T29127] syzkaller0: entered promiscuous mode [ 714.231925][T29127] syzkaller0: entered allmulticast mode [ 714.424479][T29125] veth0_to_bridge: left promiscuous mode [ 714.826994][T29149] netlink: 'syz.0.6354': attribute type 1 has an invalid length. [ 714.845769][T29149] netlink: 'syz.0.6354': attribute type 1 has an invalid length. [ 714.923745][T29153] netlink: 'syz.4.6355': attribute type 11 has an invalid length. [ 715.040382][T29157] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6 [ 715.059323][T29160] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 715.073416][T29158] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 715.506462][T29190] __nla_validate_parse: 3 callbacks suppressed [ 715.506485][T29190] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6365'. [ 715.614326][T29193] can: request_module (can-proto-0) failed. [ 715.654740][T29198] netlink: 'syz.1.6367': attribute type 1 has an invalid length. [ 715.779853][T29206] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6370'. [ 715.887901][T29206] vlan2: entered allmulticast mode [ 715.974058][T29206] mac80211_hwsim hwsim63 wlan0: entered allmulticast mode [ 716.806822][T29264] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 716.838424][T29271] sctp: [Deprecated]: syz.4.6387 (pid 29271) Use of int in maxseg socket option. [ 716.838424][T29271] Use struct sctp_assoc_value instead [ 716.877661][T29269] netlink: 'syz.3.6388': attribute type 3 has an invalid length. [ 716.911309][T29275] netlink: 'syz.0.6389': attribute type 33 has an invalid length. [ 717.077589][T29275] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 717.124671][T29275] bond1 (unregistering): Released all slaves [ 717.399872][ T7902] lec:lec_start_xmit: lec0:No lecd attached [ 717.401622][T29296] tipc: Enabling of bearer rejected, media not registered [ 717.538712][T29312] netlink: 'syz.2.6401': attribute type 1 has an invalid length. [ 717.577965][T29312] netlink: 'syz.2.6401': attribute type 1 has an invalid length. [ 717.590954][T29318] netlink: 'syz.2.6401': attribute type 4 has an invalid length. [ 717.600880][T29316] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6403'. [ 717.642404][T29312] netlink: 'syz.2.6401': attribute type 4 has an invalid length. [ 717.681342][T29315] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6400'. [ 717.769557][T29324] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6404'. [ 717.927496][T29334] netlink: 96 bytes leftover after parsing attributes in process `syz.0.6408'. [ 717.943149][T29334] 8021q: VLANs not supported on gre0 [ 717.970475][T29337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6409'. [ 717.990242][T29337] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6409'. [ 718.007483][T29338] netlink: 'syz.2.6410': attribute type 32 has an invalid length. [ 718.031283][T29338] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6410'. [ 718.106817][T29338] bond1: option coupled_control: invalid value (52) [ 718.120279][T29338] bond1 (unregistering): Released all slaves [ 718.158245][T29348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6412'. [ 718.245059][T29348] bond1: option xmit_hash_policy: invalid value (64) [ 718.278118][T29348] bond1 (unregistering): Released all slaves [ 718.743245][T29378] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 718.832318][T29378] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 718.887576][T29378] bond1 (unregistering): Released all slaves [ 719.011578][T29394] erspan0: entered promiscuous mode [ 719.689422][T29435] openvswitch: netlink: Duplicate or invalid key (type 0). [ 719.698175][T29435] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 719.813343][T29439] lo speed is unknown, defaulting to 1000 [ 719.860930][T29446] geneve2: entered promiscuous mode [ 719.879197][T29446] geneve2: entered allmulticast mode [ 719.886433][ T58] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.895407][ T58] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.918773][ T58] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.927556][ T58] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.203861][T29467] netlink: 'syz.3.6451': attribute type 9 has an invalid length. [ 720.255808][T29467] netlink: 'syz.3.6451': attribute type 11 has an invalid length. [ 720.274883][T29467] netlink: 'syz.3.6451': attribute type 12 has an invalid length. [ 720.476381][T29477] netlink: 'syz.2.6454': attribute type 58 has an invalid length. [ 720.752296][T29493] netlink: 'syz.1.6460': attribute type 1 has an invalid length. [ 720.811273][T29492] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 720.818739][T29493] bond1: entered promiscuous mode [ 720.824587][T29493] 8021q: adding VLAN 0 to HW filter on device bond1 [ 720.939755][T29505] xt_CT: You must specify a L4 protocol and not use inversions on it [ 720.957940][T29506] __nla_validate_parse: 12 callbacks suppressed [ 720.957958][T29506] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6463'. [ 721.003692][T29506] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6463'. [ 721.302486][T29531] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6469'. [ 721.336307][T29531] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6469'. [ 721.950977][T29568] openvswitch: netlink: EtherType 50a is less than min 600 [ 722.116845][T29575] x_tables: duplicate underflow at hook 1 [ 722.324217][T29588] ip6gre0: entered promiscuous mode [ 722.337258][T29588] ip6gre0: entered allmulticast mode [ 722.681186][T29609] netlink: 'syz.0.6489': attribute type 21 has an invalid length. [ 722.826075][ T5845] Bluetooth: hci2: command 0x0401 tx timeout [ 723.057771][T29623] syz_tun: entered allmulticast mode [ 723.068152][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5660 ms [ 723.076320][ C0] lec:lec_tx_timeout: lec0 [ 723.095260][T29613] lo speed is unknown, defaulting to 1000 [ 723.101712][T29625] tunl0: entered promiscuous mode [ 723.119402][T29625] netlink: 'syz.4.6494': attribute type 3 has an invalid length. [ 723.127436][T29625] netlink: 9 bytes leftover after parsing attributes in process `syz.4.6494'. [ 723.162348][T29607] syz_tun: left allmulticast mode [ 723.388842][T29637] x_tables: duplicate underflow at hook 3 [ 723.455934][T29640] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6498'. [ 723.737186][T29649] syzkaller0: entered promiscuous mode [ 723.753066][T29649] syzkaller0: entered allmulticast mode [ 724.471854][T29671] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 724.489867][T29671] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 724.517406][T29671] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 724.532889][T29671] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 725.190538][T29697] netlink: set zone limit has 4 unknown bytes [ 725.671551][T29718] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 725.714571][T29718] bond2: (slave lo): Enslaving as an active interface with an up link [ 725.727176][T29718] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 725.818082][T29728] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6523'. [ 726.002349][T29750] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6530'. [ 726.039033][T29739] netlink: 'syz.2.6527': attribute type 23 has an invalid length. [ 726.047994][T29742] netlink: 'syz.2.6527': attribute type 23 has an invalid length. [ 726.261200][T29767] netlink: 'syz.4.6536': attribute type 3 has an invalid length. [ 726.399663][T29773] netlink: 'syz.2.6537': attribute type 4 has an invalid length. [ 726.436566][T29773] netlink: 224 bytes leftover after parsing attributes in process `syz.2.6537'. [ 727.231551][T29824] netlink: 'syz.2.6550': attribute type 2 has an invalid length. [ 727.266290][T29824] netlink: 244 bytes leftover after parsing attributes in process `syz.2.6550'. [ 727.563538][T29840] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6553'. [ 727.863032][T29858] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6558'. [ 727.877865][T29858] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6558'. [ 727.960097][T29868] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6561'. [ 728.087313][T29878] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6563'. [ 728.127295][T29879] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6564'. [ 728.403547][T29888] veth3: entered allmulticast mode [ 728.553718][T29903] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6568'. [ 728.621767][T29895] bond1: (slave ip6_vti0): Device is not bonding slave [ 728.676540][T29895] bond1: option active_slave: invalid value (ip6_vti0) [ 728.690608][T29895] bond1 (unregistering): Released all slaves [ 729.725449][T29971] xt_ecn: cannot match TCP bits for non-tcp packets [ 729.834287][T29975] ieee802154 phy1 wpan1: encryption failed: -22 [ 730.022690][T29986] netlink: 'syz.2.6586': attribute type 10 has an invalid length. [ 730.157317][T29999] netlink: 'syz.3.6587': attribute type 6 has an invalid length. [ 730.168713][T29999] netlink: 'syz.3.6587': attribute type 5 has an invalid length. [ 730.503324][T30015] syzkaller0: entered promiscuous mode [ 730.538207][T30015] syzkaller0: entered allmulticast mode [ 731.117911][T30053] __nla_validate_parse: 10 callbacks suppressed [ 731.117935][T30053] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6602'. [ 731.136983][T30053] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6602'. [ 731.424022][T30068] IPVS: Unknown mcast interface: syzkaller1 [ 731.515605][T30070] syzkaller0: entered promiscuous mode [ 731.521167][T30070] syzkaller0: entered allmulticast mode [ 731.647749][T30075] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6609'. [ 731.673116][T30075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6609'. [ 731.763796][T30079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6610'. [ 731.895989][T30083] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 731.924014][T30083] bridge0: entered allmulticast mode [ 732.181932][T30106] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6616'. [ 732.431005][T30125] netlink: 4096 bytes leftover after parsing attributes in process `syz.2.6621'. [ 732.558050][T30129] erspan0: entered promiscuous mode [ 732.787631][T30135] netlink: 80 bytes leftover after parsing attributes in process `syz.2.6626'. [ 733.034303][T30141] netlink: 484 bytes leftover after parsing attributes in process `syz.1.6628'. [ 733.585462][T30186] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 733.732414][T30191] tipc: Started in network mode [ 733.745710][T30191] tipc: Node identity 068cca3adc1, cluster identity 4711 [ 733.766225][T30191] tipc: Enabled bearer , priority 0 [ 733.797933][T30192] syzkaller0: MTU too low for tipc bearer [ 733.803727][T30192] tipc: Disabling bearer [ 733.848696][T30199] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 733.957741][T30204] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6645'. [ 734.502350][T30248] xt_l2tp: missing protocol rule (udp|l2tpip) [ 734.535315][T30249] xt_l2tp: missing protocol rule (udp|l2tpip) [ 734.591243][T30237] bond2: entered allmulticast mode [ 734.642682][T30253] bridge2: entered promiscuous mode [ 734.648213][T30253] bridge2: entered allmulticast mode [ 734.660173][T30253] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 734.679880][T30257] syzkaller0: entered promiscuous mode [ 734.687411][T30257] syzkaller0: entered allmulticast mode [ 734.700429][T30257] tipc: Enabled bearer , priority 0 [ 734.717359][T30255] tipc: Resetting bearer [ 734.783670][T30255] tipc: Disabling bearer [ 735.036770][T30277] netlink: 'syz.2.6664': attribute type 1 has an invalid length. [ 735.044803][T30277] NCSI netlink: No device for ifindex 0 [ 735.151411][T30279] netlink: 'syz.2.6666': attribute type 21 has an invalid length. [ 735.261816][T30287] bridge0: port 3(veth0_to_bridge) entered blocking state [ 735.269515][T30287] bridge0: port 3(veth0_to_bridge) entered disabled state [ 735.277562][T30287] veth0_to_bridge: entered allmulticast mode [ 735.304507][T30287] veth0_to_bridge: entered promiscuous mode [ 735.689210][T30313] netlink: 'syz.3.6678': attribute type 24 has an invalid length. [ 735.913040][T30335] vlan4: entered allmulticast mode [ 735.966775][T30335] hsr0: entered allmulticast mode [ 735.971882][T30335] hsr_slave_0: entered allmulticast mode [ 736.007719][T30335] hsr_slave_1: entered allmulticast mode [ 736.137996][T30352] netlink: 'syz.2.6688': attribute type 1 has an invalid length. [ 736.194708][T30352] bond1: entered promiscuous mode [ 736.202246][T30352] 8021q: adding VLAN 0 to HW filter on device bond1 [ 736.327242][T30362] netlink: 'syz.2.6691': attribute type 29 has an invalid length. [ 736.354527][T30364] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 736.374779][T30364] netlink: 'syz.3.6692': attribute type 11 has an invalid length. [ 736.389863][T30364] netlink: 'syz.3.6692': attribute type 11 has an invalid length. [ 736.399558][T30364] __nla_validate_parse: 16 callbacks suppressed [ 736.399576][T30364] netlink: 204 bytes leftover after parsing attributes in process `syz.3.6692'. [ 736.439420][T30365] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6692'. [ 736.458490][T30371] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6692'. [ 736.495813][T30364] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6692'. [ 736.706316][T30381] netlink: 212340 bytes leftover after parsing attributes in process `syz.0.6697'. [ 736.729869][T30381] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 736.829900][T30394] netlink: 'syz.3.6701': attribute type 11 has an invalid length. [ 736.861331][T30394] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6701'. [ 736.880821][T30399] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.6702'. [ 736.995250][T30405] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 737.047507][T30405] team0: Port device batadv2 added [ 737.139742][T10561] tipc: Subscription rejected, illegal request [ 737.216271][T30423] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 737.250421][T30423] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 737.323700][T30431] netlink: 3648 bytes leftover after parsing attributes in process `syz.4.6711'. [ 737.338492][T30431] netlink: 3648 bytes leftover after parsing attributes in process `syz.4.6711'. [ 737.508373][T30439] sctp: [Deprecated]: syz.0.6713 (pid 30439) Use of struct sctp_assoc_value in delayed_ack socket option. [ 737.508373][T30439] Use struct sctp_sack_info instead [ 737.705017][T30449] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6714'. [ 738.090959][T30470] bond1: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 738.159771][T30470] bond1 (unregistering): Released all slaves [ 738.218956][T30486] tipc: Enabling of bearer rejected, failed to enable media [ 738.264659][T30486] delete_channel: no stack [ 738.309107][T30484] delete_channel: no stack [ 738.774505][T30521] netlink: zone id is out of range [ 738.787635][T30521] netlink: zone id is out of range [ 738.792856][T30521] netlink: zone id is out of range [ 738.807033][T30521] netlink: zone id is out of range [ 738.812556][T30521] netlink: zone id is out of range [ 738.818622][T30521] netlink: zone id is out of range [ 738.823990][T30521] netlink: zone id is out of range [ 738.847513][T30521] netlink: zone id is out of range [ 738.869383][T30525] netlink: 'syz.4.6735': attribute type 11 has an invalid length. [ 738.884001][T30521] netlink: zone id is out of range [ 738.902675][T30521] netlink: zone id is out of range [ 740.071070][T30595] syzkaller0: entered promiscuous mode [ 740.085915][T30595] syzkaller0: entered allmulticast mode [ 740.178581][T30595] rdma_op ffff88805d4789f0 conn xmit_rdma 0000000000000000 [ 740.221829][T30604] netlink: 'syz.4.6756': attribute type 1 has an invalid length. [ 740.559689][T30616] netlink: 'syz.4.6761': attribute type 33 has an invalid length. [ 740.695719][T30608] sctp: [Deprecated]: syz.0.6759 (pid 30608) Use of struct sctp_assoc_value in delayed_ack socket option. [ 740.695719][T30608] Use struct sctp_sack_info instead [ 741.436734][T30644] __nla_validate_parse: 10 callbacks suppressed [ 741.436755][T30644] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6766'. [ 741.635166][T30661] syzkaller1: entered promiscuous mode [ 741.640909][T30661] syzkaller1: entered allmulticast mode [ 741.676775][T30661] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 741.714286][T30661] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 742.007733][T30694] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6772'. [ 742.230750][T30705] netlink: 'syz.4.6776': attribute type 10 has an invalid length. [ 742.326928][T30705] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 742.440949][T30716] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6778'. [ 742.692399][T30730] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6782'. [ 742.708332][T30730] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6782'. [ 743.417741][T30770] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6788'. [ 743.454920][T30773] bridge_slave_0: invalid flags given to default FDB implementation [ 743.793990][T30793] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6796'. [ 743.893349][T30799] vcan0: entered allmulticast mode [ 744.024178][T30815] netlink: 244 bytes leftover after parsing attributes in process `syz.4.6803'. [ 744.045211][T30815] bond2: (slave lo): Releasing backup interface [ 744.054719][T30815] bond2: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 744.088138][T30815] bridge_slave_0: left allmulticast mode [ 744.093948][T30815] bridge_slave_0: left promiscuous mode [ 744.100953][T30815] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.123815][T30815] bridge_slave_1: left allmulticast mode [ 744.130143][T30815] bridge_slave_1: left promiscuous mode [ 744.136761][T30815] bridge0: port 2(bridge_slave_1) entered disabled state [ 744.151791][T30815] bond0: (slave bond_slave_0): Releasing backup interface [ 744.183599][T30821] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6803'. [ 744.202671][T30815] bond0: (slave bond_slave_1): Releasing backup interface [ 744.241146][T30815] team0: Port device team_slave_0 removed [ 744.267875][T30815] team0: Port device team_slave_1 removed [ 744.274688][T30815] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 744.298206][T30815] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 744.308135][T30815] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 744.318775][T30815] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 744.329167][T30815] net_ratelimit: 136 callbacks suppressed [ 744.329182][T30815] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 744.361387][T30820] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6802'. [ 744.384952][T30813] delete_channel: no stack [ 744.843800][T30844] team0: Device batadv2 failed to change mtu [ 744.983790][ C1] vcan0: j1939_tp_rxtimer: 0xffff88808dfef400: rx timeout, send abort [ 745.029846][T30855] netlink: 'syz.1.6814': attribute type 8 has an invalid length. [ 745.080816][T30850] lo speed is unknown, defaulting to 1000 [ 745.483927][ C1] vcan0: j1939_tp_rxtimer: 0xffff88808dfef000: rx timeout, send abort [ 745.493066][ C1] vcan0: j1939_tp_rxtimer: 0xffff88808dfef400: abort rx timeout. Force session deactivation [ 745.540348][T30874] netem: change failed [ 745.992304][ C1] vcan0: j1939_tp_rxtimer: 0xffff88808dfef000: abort rx timeout. Force session deactivation [ 746.432155][T30916] netlink: 'syz.1.6832': attribute type 3 has an invalid length. [ 746.454023][T30916] __nla_validate_parse: 8 callbacks suppressed [ 746.454041][T30916] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6832'. [ 746.757825][T30930] xt_policy: output policy not valid in PREROUTING and INPUT [ 746.929725][T30934] netlink: 'syz.1.6838': attribute type 4 has an invalid length. [ 746.937867][T30934] netlink: 240 bytes leftover after parsing attributes in process `syz.1.6838'. [ 746.991249][T30948] IPVS: Error connecting to the multicast addr [ 746.994576][T30930] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6836'. [ 747.009627][T30950] IPVS: Error connecting to the multicast addr [ 747.268850][T30964] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6846'. [ 747.286897][T30964] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6846'. [ 747.393795][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.404620][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 747.821254][T30971] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 748.005074][T30983] netlink: 212360 bytes leftover after parsing attributes in process `syz.0.6852'. [ 748.034745][T30983] netlink: 'syz.0.6852': attribute type 1 has an invalid length. [ 748.147042][ T5845] block nbd0: Receive control failed (result -32) [ 748.560812][T31002] bridge3: entered promiscuous mode [ 748.570328][T31002] bridge3: entered allmulticast mode [ 748.580005][T31002] team0: Port device bridge3 added [ 748.651509][T31018] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6858'. [ 748.794006][T31025] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 748.821271][T31025] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 748.951705][T31033] xt_hashlimit: size too large, truncated to 1048576 [ 749.070812][T31047] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6870'. [ 749.086958][T31047] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 749.157886][T31047] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 749.289626][T31057] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6868'. [ 749.326478][T31061] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6874'. [ 749.335625][T31057] tipc: Invalid UDP bearer configuration [ 749.335681][T31057] tipc: Enabling of bearer rejected, failed to enable media [ 749.513442][T31067] veth0: entered promiscuous mode [ 749.558808][T31059] bond2: option all_slaves_active: invalid value (9) [ 749.571805][T31058] veth0: left promiscuous mode [ 749.699970][T31080] bridge0: port 3(veth0_to_bridge) entered blocking state [ 749.715135][T31080] bridge0: port 3(veth0_to_bridge) entered disabled state [ 749.750124][T31080] veth0_to_bridge: entered allmulticast mode [ 749.783153][T31080] veth0_to_bridge: entered promiscuous mode [ 749.793029][T31080] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 749.817594][T31080] bridge0: port 3(veth0_to_bridge) entered blocking state [ 749.825024][T31080] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 750.214057][T31112] mac80211_hwsim hwsim62 syzkaller0: entered promiscuous mode [ 750.246769][T31112] mac80211_hwsim hwsim62 syzkaller0: entered allmulticast mode [ 750.358324][T31125] netlink: 'syz.3.6889': attribute type 4 has an invalid length. [ 750.675351][T31143] netlink: 'syz.3.6894': attribute type 3 has an invalid length. [ 750.775253][T31141] bond5: entered promiscuous mode [ 750.800131][T31141] 8021q: adding VLAN 0 to HW filter on device bond5 [ 750.919947][T31147] bond5: (slave ip6tnl1): refused to change device type [ 751.324943][T31178] netlink: 'syz.2.6903': attribute type 1 has an invalid length. [ 751.334630][T31177] IPVS: set_ctl: invalid protocol: 0 172.30.0.4:20004 [ 751.353776][T31178] netlink: 'syz.2.6903': attribute type 1 has an invalid length. [ 751.365402][T31179] bridge0: port 4(ipvlan2) entered blocking state [ 751.372600][T31179] bridge0: port 4(ipvlan2) entered disabled state [ 751.381497][T31179] ipvlan2: entered allmulticast mode [ 751.381620][T31177] IPVS: set_ctl: invalid protocol: 1 172.30.1.4:20004 [ 751.388412][T31179] bridge0: entered allmulticast mode [ 751.421166][T31179] ipvlan2: left allmulticast mode [ 751.426757][T31179] bridge0: left allmulticast mode [ 751.471340][T31187] syzkaller0: entered promiscuous mode [ 751.477019][T31187] syzkaller0: entered allmulticast mode [ 751.759063][T31198] __nla_validate_parse: 7 callbacks suppressed [ 751.759084][T31198] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6909'. [ 751.847983][T31205] openvswitch: netlink: IP tunnel dst address not specified [ 751.876070][T31205] openvswitch: netlink: IP tunnel dst address not specified [ 751.885227][T31205] openvswitch: netlink: IP tunnel dst address not specified [ 751.921630][T31205] openvswitch: netlink: IP tunnel dst address not specified [ 751.968098][T31205] openvswitch: netlink: IP tunnel dst address not specified [ 751.994254][T31205] openvswitch: netlink: IP tunnel dst address not specified [ 752.005321][T31205] openvswitch: netlink: IP tunnel dst address not specified [ 752.030741][T31205] openvswitch: netlink: IP tunnel dst address not specified [ 752.054751][T31205] openvswitch: netlink: IP tunnel dst address not specified [ 752.084295][T31205] openvswitch: netlink: IP tunnel dst address not specified [ 752.125084][T31211] syzkaller0: entered promiscuous mode [ 752.133719][T31211] syzkaller0: entered allmulticast mode [ 752.231030][T31221] netlink: 5496 bytes leftover after parsing attributes in process `syz.3.6915'. [ 752.407496][T31226] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6916'. [ 752.523348][T31232] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6916'. [ 753.077204][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5670 ms [ 753.085402][ C0] lec:lec_tx_timeout: lec0 [ 754.734811][T31254] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6921'. [ 754.763758][T31260] netlink: 'syz.4.6924': attribute type 58 has an invalid length. [ 754.775766][T31260] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6924'. [ 754.818090][T31254] syzkaller0: entered promiscuous mode [ 754.831448][T31254] syzkaller0: entered allmulticast mode [ 755.301264][T31283] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6930'. [ 755.318642][T31283] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6930'. [ 755.374108][T31288] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6933'. [ 755.492290][T31303] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6935'. [ 755.516150][T31287] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 755.795223][T31319] netlink: 'syz.3.6938': attribute type 1 has an invalid length. [ 755.908232][T31319] bond1: entered promiscuous mode [ 755.914002][T31319] 8021q: adding VLAN 0 to HW filter on device bond1 [ 756.027757][T31319] bond1: (slave bridge1): making interface the new active one [ 756.035790][T31319] bridge1: entered promiscuous mode [ 756.042744][T31319] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 756.156153][T31333] wireguard0: entered promiscuous mode [ 756.161938][T31333] wireguard0: entered allmulticast mode [ 756.181849][T31333] team0: Port device wireguard0 added [ 756.240729][T31339] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 756.274614][T31349] netlink: 'syz.2.6945': attribute type 12 has an invalid length. [ 756.293492][T31349] netlink: 'syz.2.6945': attribute type 29 has an invalid length. [ 756.304685][T31349] netlink: 'syz.2.6945': attribute type 1 has an invalid length. [ 756.313401][T31349] netlink: 'syz.2.6945': attribute type 2 has an invalid length. [ 756.481069][T31364] netlink: 'syz.0.6950': attribute type 1 has an invalid length. [ 756.494819][T31365] IPv6: NLM_F_CREATE should be specified when creating new route [ 756.527155][T31364] 8021q: adding VLAN 0 to HW filter on device bond1 [ 756.558754][T31367] 8021q: adding VLAN 0 to HW filter on device bond1 [ 756.567813][T31367] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 756.605860][T31367] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 756.674089][T31364] veth3: entered promiscuous mode [ 756.690392][T31364] bond1: (slave veth3): Enslaving as an active interface with a down link [ 756.705154][T31376] netlink: 'syz.3.6953': attribute type 14 has an invalid length. [ 756.755494][T31377] netlink: 'syz.3.6953': attribute type 14 has an invalid length. [ 757.146077][T31390] lo speed is unknown, defaulting to 1000 [ 757.161979][T31392] netlink: 'syz.0.6956': attribute type 3 has an invalid length. [ 757.170957][T31392] __nla_validate_parse: 4 callbacks suppressed [ 757.170977][T31392] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.6956'. [ 757.216615][T31394] net_ratelimit: 56 callbacks suppressed [ 757.216631][T31394] openvswitch: netlink: Key type 199 is out of range max 32 [ 757.320809][T31397] xt_cluster_mt_checkentry: 1 callbacks suppressed [ 757.320826][T31397] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 759.272132][T31349] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 759.311121][T31392] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6956'. [ 759.444682][T31409] tipc: Started in network mode [ 759.471638][T31409] tipc: Node identity 8a03fbeb4eed, cluster identity 4711 [ 759.509629][T31409] tipc: Enabled bearer , priority 0 [ 759.539556][T31415] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6963'. [ 759.622672][T31409] +: renamed from syzkaller0 [ 759.642101][T31409] tipc: Disabling bearer [ 760.491713][T31443] validate_nla: 4 callbacks suppressed [ 760.491737][T31443] netlink: 'syz.0.6971': attribute type 1 has an invalid length. [ 760.569179][T31443] bond2: entered promiscuous mode [ 760.575193][T31443] 8021q: adding VLAN 0 to HW filter on device bond2 [ 760.622651][T31455] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6971'. [ 760.638454][T31456] delete_channel: no stack [ 760.645098][T31455] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6971'. [ 760.770275][T31443] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6971'. [ 761.061739][T31485] syzkaller0: entered promiscuous mode [ 761.068587][T31485] syzkaller0: entered allmulticast mode [ 761.097990][T31485] tipc: Started in network mode [ 761.117814][T31485] tipc: Node identity a6cabdd030ad, cluster identity 4711 [ 761.155438][T31485] tipc: Enabled bearer , priority 0 [ 761.203721][T31482] tipc: Resetting bearer [ 761.218314][T31496] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.6983'. [ 761.277351][T31482] tipc: Disabling bearer [ 761.358945][T31492] xt_TCPMSS: Only works on TCP SYN packets [ 761.433555][T31505] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6986'. [ 761.813729][T31512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 761.849598][T31512] 8021q: adding VLAN 0 to HW filter on device team0 [ 761.948751][T31532] netlink: 'syz.4.6993': attribute type 58 has an invalid length. [ 761.985629][T31532] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6993'. [ 762.295328][T31512] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 762.543433][T31549] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7000'. [ 762.616595][T31558] netlink: 'syz.2.7002': attribute type 7 has an invalid length. [ 762.712780][T31557] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 762.735472][T31557] syzkaller0: entered promiscuous mode [ 762.741501][T31557] syzkaller0: entered allmulticast mode [ 762.782523][T31563] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7004'. [ 763.142380][T31583] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7009'. [ 763.414789][T31598] netlink: 'syz.2.7014': attribute type 29 has an invalid length. [ 763.495984][T31602] netlink: 'syz.4.7017': attribute type 1 has an invalid length. [ 763.526809][T31601] vxlan0: entered promiscuous mode [ 763.546797][T31601] vxlan0: entered allmulticast mode [ 763.557097][T30672] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 763.597889][T30672] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 763.618862][T31598] netlink: 'syz.2.7014': attribute type 29 has an invalid length. [ 763.665080][T30672] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 763.686980][T30672] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 763.717659][ T12] unregister_netdevice: waiting for lo to become free. Usage count = 2 [ 763.746238][ T12] ref_tracker: netdev@ffff888079b02620 has 1/1 users at [ 763.746238][ T12] dst_init+0xd9/0x480 [ 763.746238][ T12] dst_alloc+0x12a/0x170 [ 763.746238][ T12] ip_route_input_rcu+0x23e5/0x3130 [ 763.746238][ T12] ip_route_input_noref+0x17c/0x270 [ 763.746238][ T12] ip_rcv_finish_core+0x5af/0x1c00 [ 763.746238][ T12] ip_rcv_finish+0x14c/0x2f0 [ 763.746238][ T12] NF_HOOK+0x336/0x3c0 [ 763.746238][ T12] netif_receive_skb+0x45b/0xc50 [ 763.746238][ T12] tun_rx_batched+0x1de/0x790 [ 763.746238][ T12] tun_get_user+0x2a78/0x3dd0 [ 763.746238][ T12] tun_chr_write_iter+0x113/0x200 [ 763.746238][ T12] vfs_write+0x61d/0xb90 [ 763.746238][ T12] ksys_write+0x150/0x270 [ 763.746238][ T12] do_syscall_64+0x14d/0xf80 [ 763.746238][ T12] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 763.746238][ T12] [ 763.928495][T31623] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 766.594663][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 766.608527][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 766.621882][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 766.635283][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 766.648530][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 766.661863][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 766.674978][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 766.688336][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 766.701385][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 767.295861][ C0] net_ratelimit: 590 callbacks suppressed [ 767.295885][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 767.315479][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 767.328684][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 767.341856][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 767.357456][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 767.370573][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 767.384083][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 767.397926][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 767.411350][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 767.425003][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 772.305940][ C0] net_ratelimit: 4948 callbacks suppressed [ 772.305964][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 772.325387][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 772.338654][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 772.351984][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 772.365327][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 772.378514][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 772.391596][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 772.404503][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 772.417816][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 772.431054][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)