last executing test programs: 11.058090712s ago: executing program 0 (id=2892): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f00000000c0), 0x10) sendto$l2tp(r0, &(0x7f0000000280)="e5786a0d000000000000003b", 0xc, 0x8000, &(0x7f0000000240)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000000)=0x81, 0x4) recvmsg(r0, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x2) 10.160975621s ago: executing program 0 (id=2899): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept(r0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x14, 0x0, 0x300, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8010) recvmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f00000001c0)=""/15, 0xf}, {&(0x7f0000000300)=""/92, 0x5c}], 0x2}, 0x30845aa81b581fea) 10.046428061s ago: executing program 0 (id=2900): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x893}, 0x24040084) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000006080)=@newtfilter={0x24, 0x2c, 0x1, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x1}, {}, {0xe, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x893}, 0x24040084) 9.802316576s ago: executing program 0 (id=2903): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, 0x0, 0x0) 9.46674552s ago: executing program 0 (id=2906): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x2, 0x8, 0x8}, 0x48) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x30}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000c00)={0x20, r3, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x20008040) close(r1) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8) r5 = socket(0x840000000002, 0x3, 0x100) ioctl$SIOCGETVIFCNT(r5, 0x89e0, &(0x7f00000001c0)={0x1}) getsockopt$inet_mreqn(r5, 0x0, 0x33, 0x0, &(0x7f0000000740)=0x2) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e21, @empty}], 0x10) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x5}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000000)='N', 0x1}], 0x1, 0x0, 0x0, 0xc04c000}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f00000000c0)={0x0, 0x6, 0x102}, 0x8) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) sendmmsg$inet(r7, &(0x7f0000001c40)=[{{&(0x7f0000000140)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10, &(0x7f0000000440)=[{&(0x7f00000004c0)="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", 0xfc}, {&(0x7f0000000340)="d019d1f9eb239dc079fd2234d864ac82905f4b9900aa5ff9072c2f730c6180039c9a4e5c48327dedc3a9d270f944220ec094ac5f93c57027bf9ef28741da9f69c49908e4a8a6f2636800074a211b595fcaa10f515cd2139c6ff811cdb74ff750ade68202e720b60f507e4d0c402108fdfd69e89b27ac76f59e084a272ca4283b84e5ee131e9e1b1e744e319547ff08279d18005fe0c761e6b60e119b8fade284a4123dff2aa050e2d492a4402a1323f5f7d584", 0xb3}, {&(0x7f0000000840)="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", 0xe42}, {&(0x7f0000001c80)="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", 0x1000}, {&(0x7f0000000280)="be5684ee8e3ddac96a39f7bd6d94c09e", 0x10}], 0x5}}], 0x1, 0x4000800) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r10, @ANYBLOB="1c005a801800018014000300060010000c000100000000000000b6b2"], 0x38}}, 0x0) connect$inet(r7, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="b7000000647029b774c57daf510d32f29921a9e7d3b1891352b4fae7a4b3cf3631772c8f4d7075df4913d295cf218e269a2e98dbcb37916100875c21aafc4235839d93a8e9e328bf912ad2e25341fc1531691460ccc12d5f813171b0bf9b6506dbde7d914f5143719258f31090b9bf99e6c75be3bba7f7e1f11494147968091868323d796f30cd0b376e7b0453d89b297de61e94f9a7564897467145c6b540a6ef1ece613716caaa8aecd5bd00193d2e66cf6787b35879a7c2512756a8049e1759faa045498706626f02"], 0x8) 8.484423446s ago: executing program 0 (id=2912): r0 = socket(0x8, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r2, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0) setsockopt$sock_int(r3, 0x1, 0xa, &(0x7f00000000c0)=0x514, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x4, 0x1, 0x101}, 0x14}}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000940), r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xabf003f11acee6dd}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r7, 0x452ce65da61078c5, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x49}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x55}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x64}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x17}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x79}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004005}, 0x8800) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x14, 0x3, "f4f03b0200000000000000116b61979e"}, @NFTA_MATCH_NAME={0x9, 0x1, 'l2tp\x00'}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) connect$unix(r4, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) 4.323548205s ago: executing program 3 (id=2937): socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x40000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={0x1d, r0}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x5, 0x182, 0x9, {0x77359400}, {}, {0x2, 0x0, 0x1}, 0x1, @can={{0x4, 0x1, 0x1, 0x1}, 0x5, 0x1, 0x0, 0x0, "c251541693f8cfd1"}}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4004844) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0x6}, {0x3, 0xfff9}, {0x2}}}, 0x24}}, 0x0) close(0x4) 3.617089645s ago: executing program 4 (id=2943): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x7c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0x3}, {}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4c, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x0, 0x5, 0x1}}, @TCA_GRED_PARMS={0x38, 0x1, {0x7786, 0xe, 0x7, 0x8, 0x1, 0x91d5, 0x9, 0x80000001, 0x9, 0x9c, 0x1e, 0xe, 0xc, 0xb, 0xd32, 0x93}}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) 3.546057451s ago: executing program 3 (id=2944): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x10) r1 = accept(r0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000300)=""/92, 0x5c}], 0x1}, 0x30845aa81b581fea) 3.495429371s ago: executing program 3 (id=2946): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x40050}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000440)={@broadcast, @local, @void, {@llc={0x8864, {@snap={0xab, 0xaa, '\"', "fd27a7", 0x21, "8cdfa39ffafc1e8cdcdb426f0cba6cb1ae75b69f"}}}}}, 0x0) 3.322173653s ago: executing program 1 (id=2948): socket$packet(0x11, 0xa, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000009500160000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r3, 0x0, 0x2d, 0x0, @void}, 0x10) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73"], 0x54}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000086dd0004110004000000b9a66eec00be00442ffffe8000000000000000000000000000aaff0200000000000001042088be000000030c000800050086dd88a888be0000000216096604f7ffffffffff8000080022eb00020000200cf002020000000000000200049403080065580000000200000000000000"], 0x7a) 3.316899064s ago: executing program 3 (id=2949): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x50}}, 0x4000850) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) sendmmsg(r0, &(0x7f0000007c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000050) 3.009866524s ago: executing program 3 (id=2951): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002000000"], 0x7c}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x16, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) 2.898919094s ago: executing program 4 (id=2953): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003a80)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x9, @local, 0xd}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000100)="b5", 0x1}], 0x1}}], 0x1, 0x4001) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000540)={@map=0x1, 0x2f, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) sendto(r0, &(0x7f0000000140)="d5b37c3cadb6674c9338451685ec7ea3664ae4f803e852d691a6fdfe0f4f14fd8412292b19be745f6df643399d6bc852ce886259dd16edb2d470d1ffb288b585c2ece078741b6925315c4b256c923bb9e8d56acf00224fe6107e2be7256c340b5c359735bc04912c26e278cc42bbc30e92aa693b92e89e9aa8b219807b96b2890a6f6146f6cb922e5112ec92e1ea82e7da9e1932571eaa7c0b0bf0dc692a883824d6c2a632f4a9800f55d11d9868184eb788c71f992dd520af", 0xb9, 0x20040000, &(0x7f0000000200)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x80) r2 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r3, &(0x7f0000000a80)="87", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r3, 0x1) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000140)={0x0, 0xe67}, 0x8) ioctl$INCFS_IOC_PERMIT_FILL(r1, 0x40046721, &(0x7f0000000280)={r2}) 2.484843864s ago: executing program 2 (id=2956): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x0, 'vxcan1\x00', {0x1}, 0x3}) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) recvmmsg(r0, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x100, 0x0) 1.358332517s ago: executing program 4 (id=2957): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003a80)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x9, @local, 0xd}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000100)="b5", 0x1}], 0x1}}], 0x1, 0x4001) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) (fail_nth: 2) 1.031400634s ago: executing program 4 (id=2958): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080)={0x7ff, 0x10, 0x8, 0x2}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000005400000054000000080000000000000000000003000000000100000003000000020000000200000000000008"], 0x0, 0x74, 0x0, 0x1, 0x8}, 0x28) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r1, 0x89f4, &(0x7f0000000000)) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f00000000c0), &(0x7f0000000140)=0x30) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x2}, 0x8) sendto$inet6(r0, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) 1.021718019s ago: executing program 2 (id=2959): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd, 0xd, 0x2, [@datasec={0x1, 0x0, 0x0, 0xf, 0x1, [], "f8"}]}}, &(0x7f0000000300)=""/2, 0x2a, 0x2, 0x1}, 0x20) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) accept4(r1, &(0x7f0000000600)=@vsock={0x28, 0x0, 0x0, @local}, 0x0, 0x40000) 950.175027ms ago: executing program 1 (id=2960): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x50}}, 0x4000850) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) sendmmsg(r0, &(0x7f0000007c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000050) 904.482426ms ago: executing program 2 (id=2961): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, 0x0, 0x0) 892.602259ms ago: executing program 1 (id=2962): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@ipv4={'\x00', '\xff\xff', @empty}, @in6=@private1, 0x0, 0x7ff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3c, 0x0, 0xee01}, {0x2e6, 0x0, 0x1, 0x5}, {0x5770, 0x0, 0x0, 0x2000000002}}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x32}, 0x0, @in=@broadcast, 0x0, 0x3, 0x1, 0x0, 0xf800000, 0x8000000}}, 0xe8) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) (fail_nth: 2) 837.574931ms ago: executing program 3 (id=2963): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="720ac4ff0000000071101b00000000009500000000000028082830de1110b6361676286a2bbd0e999652291eaf692c7450b34ec9e77c6e1ed56ae7a5b929dfbbdc9f162ca275c7f4fd4df9934451106aef3ec912a26f987effc64df5c29d756c10ba9d402ac9332619b8d05a4271e8168801d7b1737cac15942be0a98b987d232f394b16c059f9c83002d852cd8707ac4da961597fad5e12d7877a291c65b5acc3a45e1e484ea782d53e2bae8883ff0c3418046f71f451ab04d1cb27b31e05a8b031e9d63d4f75165a45057c4a6e913f11313c0af0d4c4306d43c1ebe6cf"], &(0x7f0000000480)='GPL\x00'}, 0x80) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r8, {}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x80, 0x0, 0x5, 0x1, 0xc}, 0xb, 0xfffffffe, 0x8, 0x5, 0x9, 0x2, 0x9, 0xd, 0x5, 0x1, {0xffff1c72, 0x3, 0x1000, 0x101, 0xfffffffe, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r9 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMSETDEVNAME(r9, 0x80184947, &(0x7f0000000080)={0x1000, 'syz0\x00'}) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r10, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r10, 0x84, 0x10, &(0x7f0000000180)=@sack_info={r11, 0x1, 0x4}, &(0x7f00000000c0)=0x5a) r12 = socket(0x10, 0x3, 0x0) write(r12, &(0x7f00000000c0)="1c0000001e005f0214fffffffffffff8073f00001d00000000000000", 0x1c) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000040)=0x5, 0x4) sendto$inet6(r0, &(0x7f0000000000)='\x00', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) recvmmsg(r0, &(0x7f0000002140)=[{{0x0, 0x0, 0x0}, 0xc12f}], 0x1, 0x40010042, 0x0) 750.093682ms ago: executing program 2 (id=2964): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003d00)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000b40)="8b5a9c7390", 0x5}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000240)=' ', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000bc0)="71f7c7", 0x3}], 0x1}}], 0x3, 0x48800) shutdown(r0, 0x1) 730.38969ms ago: executing program 2 (id=2965): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x10) r1 = accept(r0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000300)=""/92, 0x5c}], 0x1}, 0x30845aa81b581fea) 382.560595ms ago: executing program 1 (id=2966): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x4e24, 0x22a07f46, @mcast2, 0x80d}}}, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_emit_ethernet(0x42, &(0x7f0000000380)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0xc, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 299.290824ms ago: executing program 2 (id=2967): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1, 0x1000000000000}}], 0x48}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000480)="8f10238e6b616000000000000006", 0x0, 0x4aa2, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_80211_inject_frame(0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80001, 0x5) r5 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4e21, 0x0, @empty, 0x8}}}, 0x108) r6 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r6, 0x8983, &(0x7f0000000140)={0x7, 'vlan0\x00', {0xf}}) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f00000000c0)=ANY=[@ANYRES64=r5, @ANYRES64=r6, @ANYBLOB="0471849f0e41d5321f72e82987c9b9efdfbada965f5130393093649b3d72a0d0714c38e34fc0bb2421ec480ea1ba20dfe73c2b940d6b81bb3926be50318e469ed9126ee78418f445f561e7faeced6739685fe26219c6335bafd5834709b7448efa490f0767217bb4a88fe825ff82c413ea6f70e6bd8edb0a7dd432a93c2489aada914658df717563cac58247403e50c5640c4a67128482cc48ae95cc", @ANYRESDEC=r0], 0x190) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="d8000000180081084e81f783db4cb9040a07080006007c09e8fc55a10a0015000600142603600e120800020081000401a8000100fcc0ffff000000fd035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) close(0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000760001"], 0x18}}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r9 = socket(0x8, 0x3, 0x0) ioctl$SIOCGETMIFCNT_IN6(r9, 0x89e0, &(0x7f0000000080)) connect$netlink(r9, &(0x7f0000000000)=@unspec, 0xc) 298.461781ms ago: executing program 1 (id=2968): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x13, 0x0, 0x124281536f7e18fd) 73.798829ms ago: executing program 1 (id=2969): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@ipv4={'\x00', '\xff\xff', @empty}, @in6=@private1, 0x0, 0x7ff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3c, 0x0, 0xee01}, {0x2e6, 0x0, 0x1, 0x5}, {0x5770, 0x0, 0x0, 0x2000000002}}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x32}, 0x0, @in=@broadcast, 0x0, 0x3, 0x1, 0x0, 0xf800000, 0x8000000}}, 0xe8) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x5}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x0, 0xfff2}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'gretap0\x00'}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) 73.343364ms ago: executing program 4 (id=2970): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x1, 0x4, 0x0, 0x8, 0x3e, 0x9, 0xe8, 0xa0, 0x4, 0x3, 0x0, 0x3, 0x6, 0x1}, 0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e1f, @local}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000240)={r1, 0x21, 0x2, "7f16"}, 0xa) 0s ago: executing program 4 (id=2971): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103fe"], 0x50}}, 0x4000850) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) sendmmsg(r0, &(0x7f0000007c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000050) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.204' (ED25519) to the list of known hosts. [ 70.171983][ T5851] cgroup: Unknown subsys name 'net' [ 70.300669][ T5851] cgroup: Unknown subsys name 'cpuset' [ 70.309538][ T5851] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.500799][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.507305][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.713246][ T5851] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.828306][ T5866] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.838573][ T5866] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.846775][ T5866] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.854973][ T5866] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.862924][ T5866] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.872267][ T5869] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.880950][ T5869] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.892094][ T5869] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.900510][ T5869] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.910231][ T5869] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.911028][ T5878] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.919567][ T5869] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.926864][ T5878] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.941151][ T5878] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.950746][ T5878] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.958568][ T5878] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.968632][ T5878] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 75.977081][ T5866] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.988206][ T5878] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.988331][ T5881] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.003729][ T5881] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.005195][ T5878] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.019275][ T5878] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.028463][ T5185] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.036237][ T5185] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 76.648591][ T5864] chnl_net:caif_netlink_parms(): no params data found [ 76.749727][ T5861] chnl_net:caif_netlink_parms(): no params data found [ 76.842461][ T5874] chnl_net:caif_netlink_parms(): no params data found [ 77.024230][ T5862] chnl_net:caif_netlink_parms(): no params data found [ 77.036006][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.043508][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.051341][ T5861] bridge_slave_0: entered allmulticast mode [ 77.058755][ T5861] bridge_slave_0: entered promiscuous mode [ 77.068468][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.076418][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.083929][ T5861] bridge_slave_1: entered allmulticast mode [ 77.091546][ T5861] bridge_slave_1: entered promiscuous mode [ 77.099845][ T5876] chnl_net:caif_netlink_parms(): no params data found [ 77.110557][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.118423][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.125791][ T5864] bridge_slave_0: entered allmulticast mode [ 77.134188][ T5864] bridge_slave_0: entered promiscuous mode [ 77.192880][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.200714][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.208358][ T5864] bridge_slave_1: entered allmulticast mode [ 77.215432][ T5864] bridge_slave_1: entered promiscuous mode [ 77.242611][ T5874] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.250086][ T5874] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.258242][ T5874] bridge_slave_0: entered allmulticast mode [ 77.265304][ T5874] bridge_slave_0: entered promiscuous mode [ 77.298515][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.341679][ T5874] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.349429][ T5874] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.357116][ T5874] bridge_slave_1: entered allmulticast mode [ 77.365009][ T5874] bridge_slave_1: entered promiscuous mode [ 77.386946][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.400028][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.448052][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.551045][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.558749][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.566103][ T5862] bridge_slave_0: entered allmulticast mode [ 77.574622][ T5862] bridge_slave_0: entered promiscuous mode [ 77.585203][ T5874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.602853][ T5861] team0: Port device team_slave_0 added [ 77.611245][ T5861] team0: Port device team_slave_1 added [ 77.620358][ T5864] team0: Port device team_slave_0 added [ 77.627452][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.635252][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.642793][ T5862] bridge_slave_1: entered allmulticast mode [ 77.650372][ T5862] bridge_slave_1: entered promiscuous mode [ 77.659583][ T5874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.708167][ T5864] team0: Port device team_slave_1 added [ 77.740333][ T5874] team0: Port device team_slave_0 added [ 77.796887][ T5874] team0: Port device team_slave_1 added [ 77.803133][ T5876] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.811439][ T5876] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.819466][ T5876] bridge_slave_0: entered allmulticast mode [ 77.826552][ T5876] bridge_slave_0: entered promiscuous mode [ 77.834537][ T5876] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.842318][ T5876] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.850018][ T5876] bridge_slave_1: entered allmulticast mode [ 77.857102][ T5876] bridge_slave_1: entered promiscuous mode [ 77.865314][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.872694][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.898975][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.925547][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.938828][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.978321][ T5185] Bluetooth: hci0: command tx timeout [ 77.994477][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.001960][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.028020][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.048259][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.055366][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.082148][ T5185] Bluetooth: hci3: command tx timeout [ 78.088123][ T5185] Bluetooth: hci2: command tx timeout [ 78.090999][ T5870] Bluetooth: hci1: command tx timeout [ 78.094372][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.124987][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.132791][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.159167][ T5874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.167731][ T5870] Bluetooth: hci4: command tx timeout [ 78.172079][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.182469][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.209496][ T5874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.237975][ T5876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.250921][ T5876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.261523][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.269161][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.295343][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.381948][ T5862] team0: Port device team_slave_0 added [ 78.391612][ T5862] team0: Port device team_slave_1 added [ 78.431452][ T5861] hsr_slave_0: entered promiscuous mode [ 78.438493][ T5861] hsr_slave_1: entered promiscuous mode [ 78.449420][ T5876] team0: Port device team_slave_0 added [ 78.480373][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.487561][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.514487][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.543091][ T5876] team0: Port device team_slave_1 added [ 78.574498][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.582092][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.608259][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.657695][ T5874] hsr_slave_0: entered promiscuous mode [ 78.664499][ T5874] hsr_slave_1: entered promiscuous mode [ 78.671750][ T5874] debugfs: 'hsr0' already exists in 'hsr' [ 78.678923][ T5874] Cannot create hsr debugfs directory [ 78.726447][ T5876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.733795][ T5876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.760178][ T5876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.779002][ T5864] hsr_slave_0: entered promiscuous mode [ 78.785998][ T5864] hsr_slave_1: entered promiscuous mode [ 78.792615][ T5864] debugfs: 'hsr0' already exists in 'hsr' [ 78.798466][ T5864] Cannot create hsr debugfs directory [ 78.819380][ T5876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.826389][ T5876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.853313][ T5876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.934618][ T5862] hsr_slave_0: entered promiscuous mode [ 78.942635][ T5862] hsr_slave_1: entered promiscuous mode [ 78.949760][ T5862] debugfs: 'hsr0' already exists in 'hsr' [ 78.955509][ T5862] Cannot create hsr debugfs directory [ 79.084883][ T5876] hsr_slave_0: entered promiscuous mode [ 79.092368][ T5876] hsr_slave_1: entered promiscuous mode [ 79.098714][ T5876] debugfs: 'hsr0' already exists in 'hsr' [ 79.104646][ T5876] Cannot create hsr debugfs directory [ 79.483676][ T5861] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.529719][ T5861] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.544365][ T5861] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.581522][ T5861] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.683055][ T5874] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.695835][ T5874] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.710428][ T5874] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.722672][ T5874] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.813179][ T5864] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.845931][ T5864] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.860658][ T5864] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.871776][ T5864] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.975551][ T5862] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.996007][ T5862] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.024895][ T5862] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.061620][ T5862] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.061696][ T5870] Bluetooth: hci0: command tx timeout [ 80.137781][ T5870] Bluetooth: hci1: command tx timeout [ 80.143753][ T5878] Bluetooth: hci3: command tx timeout [ 80.149333][ T5185] Bluetooth: hci2: command tx timeout [ 80.173405][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.202322][ T5876] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 80.213190][ T5876] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 80.223713][ T5870] Bluetooth: hci4: command tx timeout [ 80.234383][ T5876] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 80.253400][ T5874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.269831][ T5876] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 80.304124][ T5861] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.334164][ T5874] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.364697][ T3546] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.372270][ T3546] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.404281][ T3546] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.411472][ T3546] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.422397][ T3546] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.429747][ T3546] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.473192][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.482480][ T3546] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.490047][ T3546] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.572669][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.631774][ T5864] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.704884][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.728943][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.736214][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.785833][ T3546] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.793150][ T3546] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.811550][ T3546] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.819309][ T3546] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.884041][ T3546] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.891355][ T3546] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.930946][ T5876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.083851][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.101972][ T5876] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.138799][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.146568][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.173302][ T5862] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.192030][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.199302][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.232355][ T5874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.450587][ T5861] veth0_vlan: entered promiscuous mode [ 81.483759][ T5874] veth0_vlan: entered promiscuous mode [ 81.552221][ T5874] veth1_vlan: entered promiscuous mode [ 81.562623][ T5861] veth1_vlan: entered promiscuous mode [ 81.693969][ T5874] veth0_macvtap: entered promiscuous mode [ 81.747950][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.766739][ T5874] veth1_macvtap: entered promiscuous mode [ 81.849506][ T5861] veth0_macvtap: entered promiscuous mode [ 81.892279][ T5861] veth1_macvtap: entered promiscuous mode [ 81.906289][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.946638][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.973186][ T5876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.002444][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.042088][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.083690][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.116840][ T5864] veth0_vlan: entered promiscuous mode [ 82.149578][ T5870] Bluetooth: hci0: command tx timeout [ 82.156569][ T4607] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.166696][ T4607] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.210069][ T4607] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.220823][ T5870] Bluetooth: hci1: command tx timeout [ 82.226347][ T5870] Bluetooth: hci2: command tx timeout [ 82.232722][ T5870] Bluetooth: hci3: command tx timeout [ 82.258019][ T3032] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.293217][ T5864] veth1_vlan: entered promiscuous mode [ 82.298971][ T5878] Bluetooth: hci4: command tx timeout [ 82.329699][ T3032] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.392217][ T3032] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.423035][ T3032] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.479715][ T3032] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.496164][ T5862] veth0_vlan: entered promiscuous mode [ 82.591237][ T5862] veth1_vlan: entered promiscuous mode [ 82.591619][ T1054] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.620029][ T1054] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.637684][ T3546] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.644044][ T5864] veth0_macvtap: entered promiscuous mode [ 82.645530][ T3546] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.709395][ T5864] veth1_macvtap: entered promiscuous mode [ 82.724346][ T1054] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.732883][ T5862] veth0_macvtap: entered promiscuous mode [ 82.739120][ T1054] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.790895][ T5862] veth1_macvtap: entered promiscuous mode [ 82.806060][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.843016][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.851346][ T1054] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.863456][ T1054] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.865375][ T5876] veth0_vlan: entered promiscuous mode [ 82.884116][ T5874] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 82.914232][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.935996][ T5876] veth1_vlan: entered promiscuous mode [ 82.945523][ T4607] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.956600][ T4607] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.975607][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.068413][ T4607] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.098792][ T4607] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.181596][ T59] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.208192][ T59] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.237443][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.277979][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.459690][ T5876] veth0_macvtap: entered promiscuous mode [ 83.515385][ T5876] veth1_macvtap: entered promiscuous mode [ 83.997108][ T4607] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.005070][ T4607] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.109410][ T5876] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.159773][ T5876] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.181359][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.212315][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.257845][ T5878] Bluetooth: hci0: command tx timeout [ 84.318693][ T5878] Bluetooth: hci3: command tx timeout [ 84.327738][ T5870] Bluetooth: hci2: command tx timeout [ 84.342240][ T5185] Bluetooth: hci1: command tx timeout [ 84.365910][ T1054] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.377769][ T5878] Bluetooth: hci4: command tx timeout [ 84.408263][ T1054] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.417462][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.425410][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.471130][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.490597][ T1054] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.513561][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.524650][ T1054] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.818279][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.851570][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.989736][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.044785][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.535900][ T6022] netlink: 28 bytes leftover after parsing attributes in process `syz.3.19'. [ 86.198195][ T6039] netlink: 4 bytes leftover after parsing attributes in process `syz.3.27'. [ 86.284450][ T6039] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.510071][ T6039] bridge_slave_0 (unregistering): left allmulticast mode [ 86.525004][ T6039] bridge_slave_0 (unregistering): left promiscuous mode [ 86.529364][ T6045] netlink: 104 bytes leftover after parsing attributes in process `syz.0.29'. [ 86.536239][ T6039] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.868952][ T9] cfg80211: failed to load regulatory.db [ 88.010213][ T6083] netlink: 'syz.0.42': attribute type 4 has an invalid length. [ 88.446773][ T6094] netlink: 76 bytes leftover after parsing attributes in process `syz.1.48'. [ 89.487079][ T6121] netlink: 48 bytes leftover after parsing attributes in process `syz.0.53'. [ 90.065440][ T6142] syz.0.60 uses obsolete (PF_INET,SOCK_PACKET) [ 91.731031][ T6183] netlink: 4 bytes leftover after parsing attributes in process `syz.1.78'. [ 91.783475][ T6183] openvswitch: netlink: Flow key attr not present in new flow. [ 92.062021][ T6191] netlink: 24 bytes leftover after parsing attributes in process `syz.1.81'. [ 93.005023][ T6228] netlink: 40 bytes leftover after parsing attributes in process `syz.0.96'. [ 93.089232][ T6230] netlink: 'syz.1.97': attribute type 30 has an invalid length. [ 93.288598][ T6230] Zero length message leads to an empty skb [ 93.491197][ T6246] netlink: 64 bytes leftover after parsing attributes in process `syz.3.103'. [ 93.806883][ T6251] netlink: 8 bytes leftover after parsing attributes in process `syz.3.105'. [ 93.838507][ T6251] netlink: 8 bytes leftover after parsing attributes in process `syz.3.105'. [ 93.858284][ T6251] netlink: 8 bytes leftover after parsing attributes in process `syz.3.105'. [ 93.882007][ T6251] netlink: 8 bytes leftover after parsing attributes in process `syz.3.105'. [ 93.943744][ T5986] Set syz1 is full, maxelem 65536 reached [ 94.131915][ T6254] macvtap0: refused to change device tx_queue_len [ 94.154650][ T6256] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 95.156130][ T6289] IPv6: Can't replace route, no match found [ 95.494205][ T6303] netlink: 36 bytes leftover after parsing attributes in process `syz.2.126'. [ 95.905523][ T6316] netlink: 20 bytes leftover after parsing attributes in process `syz.0.130'. [ 96.892133][ T6347] __nla_validate_parse: 2 callbacks suppressed [ 96.892150][ T6347] netlink: 8 bytes leftover after parsing attributes in process `syz.2.140'. [ 98.448849][ T6381] syzkaller0: entered promiscuous mode [ 98.462583][ T6381] syzkaller0: entered allmulticast mode [ 98.473179][ T6387] netlink: 28 bytes leftover after parsing attributes in process `syz.3.157'. [ 98.484974][ T6387] netlink: 196 bytes leftover after parsing attributes in process `syz.3.157'. [ 98.497044][ T6387] netlink: 28 bytes leftover after parsing attributes in process `syz.3.157'. [ 98.507090][ T6387] netlink: 196 bytes leftover after parsing attributes in process `syz.3.157'. [ 99.457842][ T6409] netlink: 12 bytes leftover after parsing attributes in process `syz.1.168'. [ 99.806906][ T6027] Set syz1 is full, maxelem 65536 reached [ 101.255910][ T6429] IPv6: Can't replace route, no match found [ 101.499559][ T6436] netlink: 12 bytes leftover after parsing attributes in process `syz.0.180'. [ 102.025040][ T6463] netlink: 71 bytes leftover after parsing attributes in process `syz.2.190'. [ 102.156005][ T6467] rdma_op ffff88814d8da1f0 conn xmit_rdma 0000000000000000 [ 103.955428][ T6526] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.963840][ T6526] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.981671][ T6526] bridge0: entered allmulticast mode [ 104.006948][ T6528] bridge_slave_1: left allmulticast mode [ 104.021886][ T6528] bridge_slave_1: left promiscuous mode [ 104.028747][ T6528] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.040191][ T6528] bridge_slave_0: left allmulticast mode [ 104.045868][ T6528] bridge_slave_0: left promiscuous mode [ 104.052294][ T6528] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.632485][ T6540] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 107.303079][ T6503] Set syz1 is full, maxelem 65536 reached [ 107.492254][ T6530] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.208577][ T6586] netlink: 4 bytes leftover after parsing attributes in process `syz.3.244'. [ 108.271637][ T6586] netlink: 8 bytes leftover after parsing attributes in process `syz.3.244'. [ 108.567874][ T6604] netlink: 71 bytes leftover after parsing attributes in process `syz.4.252'. [ 108.598648][ T6599] syzkaller1: entered promiscuous mode [ 108.610163][ T6599] syzkaller1: entered allmulticast mode [ 108.898820][ T6618] tls_set_device_offload: netdev not found [ 109.016945][ T6593] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 109.052192][ T6625] rdma_op ffff88807cf2f1f0 conn xmit_rdma 0000000000000000 [ 109.062471][ T6593] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 109.233157][ T6593] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 109.253990][ T6593] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 109.377226][ T6593] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 109.383180][ T6593] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 109.473627][ T6593] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 109.516415][ T6593] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 110.802847][ T6593] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 110.837311][ T6593] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 112.088174][ T6715] netlink: 12 bytes leftover after parsing attributes in process `syz.0.287'. [ 112.263230][ T6720] netlink: 4 bytes leftover after parsing attributes in process `syz.0.288'. [ 112.512484][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807ae73800: rx timeout, send abort [ 112.716351][ T6725] sctp: [Deprecated]: syz.2.289 (pid 6725) Use of int in maxseg socket option. [ 112.716351][ T6725] Use struct sctp_assoc_value instead [ 113.196548][ T6738] netlink: 24 bytes leftover after parsing attributes in process `syz.2.294'. [ 114.695382][ T6803] netlink: 12 bytes leftover after parsing attributes in process `syz.2.318'. [ 115.341654][ T6838] netlink: 4 bytes leftover after parsing attributes in process `syz.3.330'. [ 115.808142][ T6851] netlink: 96 bytes leftover after parsing attributes in process `syz.4.336'. [ 116.302886][ T6871] netlink: 4 bytes leftover after parsing attributes in process `syz.4.344'. [ 117.051999][ T6875] netlink: 12 bytes leftover after parsing attributes in process `syz.0.345'. [ 117.063727][ T6875] netlink: 36 bytes leftover after parsing attributes in process `syz.0.345'. [ 117.089039][ T6884] netlink: 28 bytes leftover after parsing attributes in process `syz.2.348'. [ 117.132575][ T6884] netlink: 28 bytes leftover after parsing attributes in process `syz.2.348'. [ 117.293769][ T6875] bridge0: port 3(vlan2) entered blocking state [ 117.325947][ T6875] bridge0: port 3(vlan2) entered disabled state [ 117.362595][ T6893] netlink: 24 bytes leftover after parsing attributes in process `syz.1.350'. [ 117.401756][ T6875] vlan2: entered allmulticast mode [ 117.430404][ T6875] bridge0: entered allmulticast mode [ 117.480893][ T6875] vlan2: left allmulticast mode [ 117.486261][ T6875] bridge0: left allmulticast mode [ 117.517943][ T6899] netlink: 12 bytes leftover after parsing attributes in process `syz.2.352'. [ 118.516143][ T6929] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.006600][ T6929] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.408805][ T6929] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.735180][ T6929] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.896064][ T6987] __nla_validate_parse: 2 callbacks suppressed [ 119.896082][ T6987] netlink: 272 bytes leftover after parsing attributes in process `syz.0.388'. [ 120.102797][ T6995] netlink: 'syz.2.391': attribute type 39 has an invalid length. [ 120.353288][ T59] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.441780][ T49] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.535583][ T59] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.596944][ T59] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.754356][ T7018] netlink: 12 bytes leftover after parsing attributes in process `syz.3.401'. [ 120.792969][ T7017] netlink: 28 bytes leftover after parsing attributes in process `syz.1.400'. [ 121.031600][ T7026] netlink: 268 bytes leftover after parsing attributes in process `syz.4.405'. [ 121.072165][ T7026] unsupported nla_type 65024 [ 121.082705][ T7034] netlink: 8 bytes leftover after parsing attributes in process `syz.2.409'. [ 121.254434][ T7034] netlink: 8 bytes leftover after parsing attributes in process `syz.2.409'. [ 121.342594][ T7044] netlink: 4 bytes leftover after parsing attributes in process `syz.1.413'. [ 121.395545][ T7044] netlink: 4 bytes leftover after parsing attributes in process `syz.1.413'. [ 121.512715][ T7034] netlink: 8 bytes leftover after parsing attributes in process `syz.2.409'. [ 121.631856][ T7055] atomic_op ffff888022371998 conn xmit_atomic 0000000000000000 [ 121.693133][ T7059] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.419'. [ 121.875656][ T7066] IPVS: Unknown mcast interface: vcan0 [ 122.247100][ T7078] lo speed is unknown, defaulting to 1000 [ 122.278715][ T7078] lo speed is unknown, defaulting to 1000 [ 122.329719][ T7078] lo speed is unknown, defaulting to 1000 [ 122.485589][ T7078] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 122.515698][ T7078] infiniband 3yz0: RDMA CMA: cma_listen_on_dev, error -98 [ 122.605834][ T7078] lo speed is unknown, defaulting to 1000 [ 122.639844][ T7078] lo speed is unknown, defaulting to 1000 [ 122.671758][ T7078] lo speed is unknown, defaulting to 1000 [ 122.705484][ T7078] lo speed is unknown, defaulting to 1000 [ 122.754855][ T7078] lo speed is unknown, defaulting to 1000 [ 123.741582][ T7126] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.891637][ T7126] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.998458][ T7139] erspan0: entered promiscuous mode [ 124.025376][ T7139] macsec1: entered promiscuous mode [ 124.048480][ T7139] macsec1: entered allmulticast mode [ 124.054064][ T7139] erspan0: entered allmulticast mode [ 124.136692][ T7139] erspan0: left allmulticast mode [ 124.143098][ T7139] erspan0: left promiscuous mode [ 124.196286][ T7147] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 124.206655][ T7151] netlink: 'syz.1.464': attribute type 6 has an invalid length. [ 124.269746][ T7126] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.496648][ T7126] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.678789][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.745843][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.795955][ T7171] netlink: 'syz.1.474': attribute type 4 has an invalid length. [ 124.805869][ T49] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.851909][ T7174] netlink: 'syz.1.474': attribute type 4 has an invalid length. [ 124.906615][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.907126][ T7176] __nla_validate_parse: 10 callbacks suppressed [ 124.907221][ T7176] netlink: 8 bytes leftover after parsing attributes in process `syz.3.476'. [ 125.073610][ T7181] netlink: 3 bytes leftover after parsing attributes in process `syz.4.478'. [ 125.128092][ T7181] 0ªX¹¦À: renamed from caif0 [ 125.186335][ T7181] 0ªX¹¦À: entered allmulticast mode [ 125.209125][ T7181] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 125.376478][ T7186] lo speed is unknown, defaulting to 1000 [ 125.951909][ T7210] netlink: 4 bytes leftover after parsing attributes in process `syz.0.490'. [ 127.055100][ T7257] netlink: 5448 bytes leftover after parsing attributes in process `syz.4.513'. [ 127.600629][ T7279] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.757959][ T7287] macvlan1: entered promiscuous mode [ 127.779449][ T7287] ipvlan0: entered promiscuous mode [ 127.804535][ T7287] ipvlan0: left promiscuous mode [ 127.823448][ T7287] macvlan1: left promiscuous mode [ 127.938371][ T7279] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.161422][ T7279] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.313050][ T30] audit: type=1107 audit(1757191841.717:2): pid=7311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 128.316151][ T7312] netlink: 12 bytes leftover after parsing attributes in process `syz.0.539'. [ 128.424093][ T7279] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.579020][ T7322] netlink: 'syz.0.545': attribute type 3 has an invalid length. [ 128.790677][ T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.034009][ T7341] netlink: 16 bytes leftover after parsing attributes in process `syz.1.551'. [ 129.064595][ T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.105342][ T3546] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.185472][ T3546] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.240148][ T7349] netlink: 12 bytes leftover after parsing attributes in process `syz.1.555'. [ 129.298275][ T7351] syzkaller1: entered promiscuous mode [ 129.303802][ T7351] syzkaller1: entered allmulticast mode [ 129.698568][ T30] audit: type=1107 audit(1757191843.087:3): pid=7370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 129.859564][ T7369] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.066230][ T7387] netlink: 8 bytes leftover after parsing attributes in process `syz.2.573'. [ 130.101310][ T7369] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.148889][ T7389] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 130.260077][ T7369] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.533541][ T7369] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.704339][ T7404] wg2: entered promiscuous mode [ 130.710831][ T7404] wg2: entered allmulticast mode [ 130.716415][ T7410] tipc: Started in network mode [ 130.740834][ T7410] tipc: Node identity 82736f39ef9c, cluster identity 4711 [ 130.750298][ T7410] tipc: Enabled bearer , priority 0 [ 130.766042][ T7402] tipc: Resetting bearer [ 130.862161][ T7413] syzkaller0: entered promiscuous mode [ 130.875165][ T7413] syzkaller0: entered allmulticast mode [ 130.946630][ T7401] tipc: Resetting bearer [ 131.045069][ T7401] tipc: Disabling bearer [ 131.081221][ T1054] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.149642][ T7369] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.345404][ T7436] netlink: 'syz.1.594': attribute type 10 has an invalid length. [ 131.364880][ T7440] netlink: 8 bytes leftover after parsing attributes in process `syz.3.595'. [ 131.367482][ T7436] macvlan1: entered allmulticast mode [ 131.383849][ T7440] openvswitch: netlink: Flow key attr not present in new flow. [ 131.395002][ T7440] netlink: 8 bytes leftover after parsing attributes in process `syz.3.595'. [ 131.410290][ T7436] veth1_vlan: entered allmulticast mode [ 131.414520][ T7440] openvswitch: netlink: Flow key attr not present in new flow. [ 131.475483][ T7436] team0: Device macvlan1 is up. Set it down before adding it as a team port [ 133.022407][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.025610][ T7496] netlink: 12 bytes leftover after parsing attributes in process `syz.2.619'. [ 133.030499][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.194782][ T7501] netlink: 'syz.3.621': attribute type 1 has an invalid length. [ 133.202895][ T7501] netlink: 224 bytes leftover after parsing attributes in process `syz.3.621'. [ 134.053824][ T7530] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 134.884468][ T7541] tipc: Started in network mode [ 134.911023][ T7541] tipc: Node identity ac141441, cluster identity 4711 [ 134.920098][ T7541] tipc: Enabled bearer , priority 10 [ 135.420227][ T7554] netlink: 8 bytes leftover after parsing attributes in process `syz.4.645'. [ 135.577998][ T7556] syzkaller0: entered promiscuous mode [ 135.583511][ T7556] syzkaller0: entered allmulticast mode [ 135.654251][ T7558] tipc: Enabling of bearer rejected, failed to enable media [ 135.924724][ T5973] tipc: Node number set to 2886997057 [ 136.443133][ T7582] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.710738][ T7582] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.900891][ T7582] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.014562][ T7601] netlink: 28 bytes leftover after parsing attributes in process `syz.2.664'. [ 137.089416][ T7582] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.229991][ T7605] tipc: Enabled bearer , priority 0 [ 137.237896][ T7605] syzkaller0: entered promiscuous mode [ 137.243478][ T7605] syzkaller0: entered allmulticast mode [ 137.311470][ T7605] tipc: Resetting bearer [ 137.326544][ T7605] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.400041][ T7604] tipc: Resetting bearer [ 137.423030][ T7604] tipc: Disabling bearer [ 137.453992][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.511994][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.553048][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.570928][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.216229][ T979] lo speed is unknown, defaulting to 1000 [ 138.258461][ T7634] netlink: 'syz.2.679': attribute type 13 has an invalid length. [ 138.289037][ T7634] gretap0: refused to change device tx_queue_len [ 138.298385][ T7634] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 138.315193][ T979] lo speed is unknown, defaulting to 1000 [ 138.397062][ T7638] netlink: 16 bytes leftover after parsing attributes in process `syz.3.681'. [ 138.532427][ T7446] Set syz1 is full, maxelem 65536 reached [ 139.113047][ T7668] tipc: Enabling of bearer rejected, already enabled [ 139.514738][ T7682] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.593633][ T7688] netlink: 4 bytes leftover after parsing attributes in process `syz.3.702'. [ 139.631958][ T7682] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.768879][ T7671] Set syz1 is full, maxelem 65536 reached [ 139.782132][ T7694] netlink: 80 bytes leftover after parsing attributes in process `syz.0.707'. [ 139.784488][ T7682] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.792183][ T7694] netlink: 12 bytes leftover after parsing attributes in process `syz.0.707'. [ 139.814079][ T7694] netlink: 8 bytes leftover after parsing attributes in process `syz.0.707'. [ 139.904222][ T7682] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.141095][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.153157][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.269910][ T3546] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.281757][ T3546] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.538622][ T7749] netlink: 20 bytes leftover after parsing attributes in process `syz.0.731'. [ 141.624592][ T7758] netlink: 'syz.3.734': attribute type 3 has an invalid length. [ 142.024024][ T7778] IPv6: Can't replace route, no match found [ 142.238914][ T7785] netlink: 4 bytes leftover after parsing attributes in process `syz.1.748'. [ 142.468643][ T10] IPVS: starting estimator thread 0... [ 142.567342][ T7795] IPVS: using max 28 ests per chain, 67200 per kthread [ 142.619544][ T7805] netlink: 12 bytes leftover after parsing attributes in process `syz.3.758'. [ 142.971584][ T7827] netlink: 'syz.1.767': attribute type 298 has an invalid length. [ 144.279004][ T7866] netlink: 4 bytes leftover after parsing attributes in process `syz.2.783'. [ 144.323593][ T7866] netlink: 32 bytes leftover after parsing attributes in process `syz.2.783'. [ 144.593620][ T7877] netdevsim netdevsim1: Direct firmware load for ./file0/file1 failed with error -2 [ 144.638342][ T7877] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0/file1 [ 145.603734][ T7919] netlink: 'syz.2.809': attribute type 3 has an invalid length. [ 145.980341][ T7946] netlink: 256 bytes leftover after parsing attributes in process `syz.2.822'. [ 145.994831][ T7946] ksmbd: Unknown IPC event: 3, ignore. [ 147.037064][ T8018] netlink: 'syz.2.855': attribute type 21 has an invalid length. [ 147.053006][ T8018] netlink: 132 bytes leftover after parsing attributes in process `syz.2.855'. [ 147.066229][ T8018] netlink: 'syz.2.855': attribute type 1 has an invalid length. [ 147.976662][ T8066] netlink: 96 bytes leftover after parsing attributes in process `syz.3.877'. [ 148.084717][ T8069] IPv6: Can't replace route, no match found [ 148.719800][ T8037] Set syz1 is full, maxelem 65536 reached [ 148.896855][ T8115] netlink: 80 bytes leftover after parsing attributes in process `syz.4.899'. [ 148.903979][ T8113] vlan2: entered promiscuous mode [ 148.912765][ T8115] netlink: 12 bytes leftover after parsing attributes in process `syz.4.899'. [ 148.917353][ T8113] bridge0: entered promiscuous mode [ 148.921897][ T8115] netlink: 8 bytes leftover after parsing attributes in process `syz.4.899'. [ 149.233841][ T8136] netlink: 120 bytes leftover after parsing attributes in process `syz.4.909'. [ 151.070283][ T8189] netlink: 132 bytes leftover after parsing attributes in process `syz.1.933'. [ 153.370774][ T8354] bond1: entered promiscuous mode [ 153.375945][ T8354] bond1: entered allmulticast mode [ 153.382324][ T8354] 8021q: adding VLAN 0 to HW filter on device bond1 [ 153.581112][ T8369] netlink: 'syz.2.1012': attribute type 21 has an invalid length. [ 153.772730][ T8354] bond1 (unregistering): Released all slaves [ 153.795770][ T8369] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1012'. [ 154.086543][ T8398] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 154.893742][ T8448] netlink: 'syz.3.1047': attribute type 3 has an invalid length. [ 155.118886][ T8459] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1051'. [ 155.130021][ T8457] lo speed is unknown, defaulting to 1000 [ 155.362410][ T8464] syzkaller0: entered promiscuous mode [ 155.368219][ T8464] syzkaller0: entered allmulticast mode [ 155.638035][ T8489] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1063'. [ 157.452033][ T8533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1083'. [ 157.536394][ T8537] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.704233][ T8537] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.806219][ T8537] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.888867][ T8537] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.025084][ T1054] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.047237][ T1054] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.067982][ T1054] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.094144][ T1054] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.154080][ T8560] IPv6: Can't replace route, no match found [ 158.354085][ T8572] netlink: 'syz.2.1099': attribute type 1 has an invalid length. [ 158.488236][ T8580] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1103'. [ 158.608983][ T8580] team1: entered promiscuous mode [ 158.614504][ T8580] team1: entered allmulticast mode [ 158.915939][ T8606] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1114'. [ 158.944508][ T8606] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1114'. [ 160.846277][ T8690] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 160.919529][ T8693] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.941644][ T8697] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1151'. [ 160.952297][ T8697] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 160.979552][ T8693] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.038141][ T8693] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.105055][ T8693] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.163566][ T8706] netlink: 'syz.4.1155': attribute type 3 has an invalid length. [ 161.222631][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.254554][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.290394][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.316124][ T49] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.444772][ T8718] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1161'. [ 161.456829][ T8718] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1161'. [ 161.560483][ T8727] $Hÿ: renamed from bond0 (while UP) [ 161.572156][ T8727] $Hÿ: entered promiscuous mode [ 161.578669][ T8727] bond_slave_0: entered promiscuous mode [ 161.585739][ T8727] bond_slave_1: entered promiscuous mode [ 162.027520][ T8749] sch_tbf: burst 3 is lower than device geneve1 mtu (1514) ! [ 162.056820][ T8752] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1177'. [ 162.074367][ T8752] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1177'. [ 164.050037][ T8826] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1208'. [ 165.463309][ T8878] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 165.491764][ T8880] netlink: 'syz.2.1232': attribute type 4 has an invalid length. [ 165.523675][ T979] lo speed is unknown, defaulting to 1000 [ 165.531383][ T8880] netlink: 'syz.2.1232': attribute type 4 has an invalid length. [ 165.541022][ T979] 3yz0: Port: 1 Link DOWN [ 165.589891][ T979] lo speed is unknown, defaulting to 1000 [ 165.610431][ T979] 3yz0: Port: 1 Link ACTIVE [ 165.901932][ T8897] netlink: 'syz.2.1240': attribute type 6 has an invalid length. [ 166.385089][ T8916] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1249'. [ 166.426591][ T8916] netem: unknown loss type 12 [ 166.431981][ T8916] netem: change failed [ 166.779785][ T8934] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1259'. [ 166.887677][ T8933] veth0_to_team: entered promiscuous mode [ 167.207066][ T8951] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1265'. [ 167.805402][ T8980] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1278'. [ 168.492302][ T8807] Set syz1 is full, maxelem 65536 reached [ 169.123406][ T9054] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1312'. [ 169.149852][ T9054] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.159066][ T9054] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.325472][ T9065] netlink: 212 bytes leftover after parsing attributes in process `syz.1.1318'. [ 169.873567][ T9102] trusted_key: syz.2.1333 sent an empty control message without MSG_MORE. [ 170.444862][ T9120] syz_tun: entered promiscuous mode [ 170.451871][ T9120] batadv_slave_0: entered promiscuous mode [ 170.934111][ T9152] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1353'. [ 171.204207][ T9170] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.279972][ T9170] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.534834][ T9189] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1371'. [ 171.563435][ T9191] netlink: 'syz.1.1375': attribute type 49 has an invalid length. [ 171.572031][ T9189] vlan2: entered promiscuous mode [ 171.572054][ T9189] batadv0: entered promiscuous mode [ 171.698977][ T9198] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1376'. [ 172.116262][ T9227] netlink: 'syz.2.1390': attribute type 10 has an invalid length. [ 172.164171][ T9227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.190378][ T9227] team0: Port device bond0 added [ 172.297739][ T9236] netlink: 'syz.3.1395': attribute type 10 has an invalid length. [ 172.306698][ T9236] $Hÿ: (slave wlan1): Opening slave failed [ 172.541279][ T9252] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1403'. [ 172.907028][ T9278] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1416'. [ 172.991793][ T9284] tipc: Started in network mode [ 172.996928][ T9284] tipc: Node identity 6a5896bf96ac, cluster identity 4711 [ 173.020725][ T9284] tipc: Enabled bearer , priority 0 [ 173.051319][ T9291] syzkaller0: entered promiscuous mode [ 173.065805][ T9293] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1422'. [ 173.066850][ T9291] syzkaller0: entered allmulticast mode [ 173.136979][ T9284] tipc: Resetting bearer [ 173.164516][ T9281] tipc: Resetting bearer [ 173.199212][ T9281] tipc: Disabling bearer [ 173.249600][ T9293] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 173.270776][ T9293] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 173.362427][ T9296] macvlan2: entered promiscuous mode [ 173.378794][ T9296] macvlan2: entered allmulticast mode [ 173.384813][ T9296] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 173.704613][ T9321] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1434'. [ 173.918112][ T9335] netlink: 'syz.0.1441': attribute type 7 has an invalid length. [ 173.927677][ T9335] netlink: 'syz.0.1441': attribute type 8 has an invalid length. [ 174.131142][ T9351] IPv6: NLM_F_REPLACE set, but no existing node found! [ 174.801327][ T9387] netlink: 'syz.1.1465': attribute type 1 has an invalid length. [ 174.818033][ T9389] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1466'. [ 174.961774][ T9398] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 175.371846][ T9429] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1484'. [ 176.163774][ T9478] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1509'. [ 176.573195][ T9505] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1522'. [ 177.351252][ T9537] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1536'. [ 177.370658][ T9539] syzkaller1: entered promiscuous mode [ 177.385609][ T9539] syzkaller1: entered allmulticast mode [ 178.220133][ T9589] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 178.801847][ T9620] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1573'. [ 179.584120][ T9666] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1592'. [ 179.902398][ T9688] team0: No ports can be present during mode change [ 180.053329][ T9699] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 180.193335][ T9709] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1614'. [ 180.251184][ T9713] macvtap0: refused to change device tx_queue_len [ 180.542974][ T9734] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1627'. [ 180.585141][ T3546] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.593859][ T9734] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1627'. [ 180.614546][ T3546] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.624889][ T3032] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.662090][ T3032] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 180.982850][ T9761] warning: `syz.2.1638' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 181.371164][ T9785] netlink: 'syz.4.1650': attribute type 12 has an invalid length. [ 181.490488][ T9790] team0: No ports can be present during mode change [ 181.581173][ T9797] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1656'. [ 181.899830][ T9825] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 182.220319][ T9846] tipc: Enabled bearer , priority 0 [ 182.239225][ T9846] syzkaller0: entered promiscuous mode [ 182.244748][ T9846] syzkaller0: entered allmulticast mode [ 182.293943][ T9846] tipc: Resetting bearer [ 182.306910][ T9845] tipc: Resetting bearer [ 182.332596][ T9845] tipc: Disabling bearer [ 182.463399][ T9859] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1684'. [ 182.883675][ T9890] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1694'. [ 182.982258][ T9896] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1697'. [ 183.115830][ T9906] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1700'. [ 183.368752][ T9920] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 183.966146][ T9957] netlink: 'syz.3.1723': attribute type 1 has an invalid length. [ 184.042906][ T9963] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1726'. [ 184.462588][ T9990] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1739'. [ 184.722034][T10007] lo speed is unknown, defaulting to 1000 [ 184.731910][T10007] lo speed is unknown, defaulting to 1000 [ 184.740980][T10007] lo speed is unknown, defaulting to 1000 [ 184.816274][T10010] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 185.015430][ T24] lo speed is unknown, defaulting to 1000 [ 185.028884][T10007] infiniband syz0: set active [ 185.035166][T10007] infiniband syz0: added lo [ 185.093136][T10007] RDS/IB: syz0: added [ 185.098268][T10007] smc: adding ib device syz0 with port count 1 [ 185.105060][T10007] smc: ib device syz0 port 1 has pnetid [ 185.114885][ T5865] lo speed is unknown, defaulting to 1000 [ 185.126264][T10007] lo speed is unknown, defaulting to 1000 [ 185.426262][T10007] lo speed is unknown, defaulting to 1000 [ 185.614044][T10036] netlink: 4400 bytes leftover after parsing attributes in process `syz.2.1760'. [ 185.629747][T10036] workqueue: name exceeds WQ_NAME_LEN. Truncating to: Ç`]Š •Iöq¯!¾>Ýsó³Îú*Š®!)\Ç+` [ 185.864222][T10007] lo speed is unknown, defaulting to 1000 [ 186.102562][T10064] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1771'. [ 186.310609][T10007] lo speed is unknown, defaulting to 1000 [ 186.608199][T10007] lo speed is unknown, defaulting to 1000 [ 187.091582][T10100] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1789'. [ 187.285159][T10114] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 187.896053][T10155] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1813'. [ 188.053781][T10165] netlink: 'syz.4.1817': attribute type 1 has an invalid length. [ 188.464850][T10189] atomic_op ffff88802ff47198 conn xmit_atomic 0000000000000000 [ 188.533179][T10184] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1830'. [ 188.832818][T10217] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1842'. [ 189.381197][T10250] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 189.463343][T10256] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1857'. [ 189.480587][T10256] IPVS: Error connecting to the multicast addr [ 189.997684][T10277] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1867'. [ 190.241382][T10300] lo speed is unknown, defaulting to 1000 [ 190.249972][T10300] lo speed is unknown, defaulting to 1000 [ 190.366101][T10304] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1877'. [ 190.821590][T10301] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1876'. [ 190.896864][T10327] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1887'. [ 191.510188][T10361] netlink: 'syz.0.1902': attribute type 1 has an invalid length. [ 191.722897][T10363] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 191.739763][T10367] tipc: Enabled bearer , priority 0 [ 191.756778][T10369] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 191.783503][T10369] bond1 (unregistering): Released all slaves [ 191.814823][T10357] syzkaller0: entered promiscuous mode [ 191.829288][T10357] syzkaller0: entered allmulticast mode [ 191.876802][T10367] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 191.930630][T10357] tipc: Resetting bearer [ 191.971031][T10356] tipc: Resetting bearer [ 192.011667][T10356] tipc: Disabling bearer [ 192.817873][T10442] lo speed is unknown, defaulting to 1000 [ 192.825636][T10442] lo speed is unknown, defaulting to 1000 [ 193.938952][T10499] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1953'. [ 194.296912][T10493] infiniband syz2: set down [ 194.311455][T10493] infiniband syz2: added ipvlan0 [ 194.383293][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.389846][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.403470][T10493] RDS/IB: syz2: added [ 194.408080][T10493] smc: adding ib device syz2 with port count 1 [ 194.414429][T10493] smc: ib device syz2 port 1 has pnetid [ 194.534756][T10525] syz_tun: entered allmulticast mode [ 194.611158][T10525] dvmrp8: entered allmulticast mode [ 194.678089][T10521] syz_tun: left allmulticast mode [ 194.912521][T10542] Set syz0 is full, maxelem 0 reached [ 194.919898][T10545] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1972'. [ 195.175043][T10558] smc: net device bond0 applied user defined pnetid SYZ2 [ 195.373272][T10567] tipc: Started in network mode [ 195.382928][T10567] tipc: Node identity 7286522b343d, cluster identity 4711 [ 195.394246][T10567] tipc: Enabled bearer , priority 0 [ 195.403044][T10567] syzkaller0: entered promiscuous mode [ 195.411741][T10567] syzkaller0: entered allmulticast mode [ 195.444796][T10567] tipc: Resetting bearer [ 195.460049][T10565] tipc: Resetting bearer [ 195.507883][T10565] tipc: Disabling bearer [ 195.984136][T10588] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1991'. [ 196.107271][ T10] IPVS: starting estimator thread 0... [ 196.197852][T10603] IPVS: using max 31 ests per chain, 74400 per kthread [ 197.131575][T10656] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 197.384076][T10674] netlink: 'syz.3.2026': attribute type 3 has an invalid length. [ 197.392634][T10674] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 197.516757][T10681] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2029'. [ 197.653402][T10692] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2034'. [ 198.181673][T10709] Set syz0 is full, maxelem 0 reached [ 198.201677][T10711] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2040'. [ 198.981220][T10753] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2059'. [ 199.113835][T10766] dvmrp8: entered allmulticast mode [ 199.755939][T10809] netlink: 'syz.1.2086': attribute type 8 has an invalid length. [ 200.914181][T10855] lo speed is unknown, defaulting to 1000 [ 200.922395][T10855] lo speed is unknown, defaulting to 1000 [ 201.663785][T10885] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2120'. [ 202.199521][T10903] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 202.676467][T10931] tipc: Cannot configure node identity twice [ 203.000727][T10955] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2153'. [ 203.124854][T10965] Set syz0 is full, maxelem 0 reached [ 203.283430][T10972] netlink: 292 bytes leftover after parsing attributes in process `syz.4.2160'. [ 203.736581][T11002] Set syz0 is full, maxelem 0 reached [ 204.195480][T11031] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2186'. [ 204.528614][T11055] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2197'. [ 204.567977][T11056] Set syz0 is full, maxelem 0 reached [ 205.085321][T11082] Set syz0 is full, maxelem 0 reached [ 205.365143][T11098] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2219'. [ 205.384871][T11098] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2219'. [ 205.493273][T11107] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2223'. [ 206.152180][T11147] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2245'. [ 206.639483][T11177] veth1_virt_wifi: entered promiscuous mode [ 206.878194][T11192] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2266'. [ 206.905659][T11194] tipc: Enabling of bearer rejected, failed to enable media [ 207.098368][T11208] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2271'. [ 207.149526][T11208] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2271'. [ 207.925197][T11261] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2294'. [ 208.182489][T11273] tipc: Enabled bearer , priority 0 [ 208.228362][T11273] tipc: Resetting bearer [ 208.282731][T11272] tipc: Disabling bearer [ 208.431566][T11288] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 208.708398][T11304] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2314'. [ 209.341046][T11347] lo speed is unknown, defaulting to 1000 [ 209.372152][T11347] lo speed is unknown, defaulting to 1000 [ 209.378322][T11352] netlink: 'syz.2.2334': attribute type 2 has an invalid length. [ 209.785923][T11374] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2346'. [ 210.236341][T11397] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2357'. [ 210.270156][T11398] tipc: Enabled bearer , priority 0 [ 210.295075][T11398] syzkaller0: entered promiscuous mode [ 210.301299][T11398] syzkaller0: entered allmulticast mode [ 210.354805][T11400] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2358'. [ 210.368694][T11398] tipc: Resetting bearer [ 210.410808][T11395] tipc: Resetting bearer [ 210.434382][T11395] tipc: Disabling bearer [ 211.034567][T11430] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2372'. [ 211.194945][T11438] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2373'. [ 211.250882][T11441] tipc: Enabling of bearer rejected, failed to enable media [ 211.271725][T11441] tipc: Enabling of bearer rejected, failed to enable media [ 211.416814][T11445] lo speed is unknown, defaulting to 1000 [ 211.454467][T11445] lo speed is unknown, defaulting to 1000 [ 212.524447][T11489] __nla_validate_parse: 4 callbacks suppressed [ 212.524467][T11489] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2396'. [ 212.647546][T11491] lo: entered allmulticast mode [ 212.756335][T11490] lo: left allmulticast mode [ 213.003039][T11513] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2407'. [ 213.509172][T11543] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2419'. [ 215.165079][T11561] syzkaller0: entered promiscuous mode [ 215.207318][T11561] syzkaller0: entered allmulticast mode [ 215.303731][T11573] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2431'. [ 215.465096][T11584] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.2435'. [ 215.610112][T11595] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2439'. [ 215.701694][T11603] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2444'. [ 215.850509][T11611] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 216.104758][T11627] sch_tbf: peakrate 8 is lower than or equals to rate 14474258326200451944 ! [ 216.148158][T11629] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2455'. [ 216.480755][T11649] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 216.761332][T11673] netlink: 'syz.0.2476': attribute type 4 has an invalid length. [ 217.300440][T11700] IPv6: NLM_F_CREATE should be specified when creating new route [ 218.188821][T11763] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2518'. [ 218.324301][T11773] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2521'. [ 218.601458][T11791] dvmrp8: entered allmulticast mode [ 218.989901][T11818] syz_tun: entered allmulticast mode [ 219.636328][T11854] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2560'. [ 219.821620][T11868] syz_tun: entered allmulticast mode [ 219.957492][T11878] netlink: 'syz.0.2572': attribute type 1 has an invalid length. [ 220.184935][T11891] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2578'. [ 220.918740][ T5874] syz_tun (unregistering): left promiscuous mode [ 220.945591][ T5185] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 220.955471][ T5185] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 220.966113][ T5185] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 220.984627][ T5185] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 220.996133][ T5185] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 221.018240][ T979] page_pool_release_retry() stalled pool shutdown: id 33, 1 inflight 60 sec [ 221.031193][ T5878] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 221.041657][ T5878] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 221.049937][ T5878] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 221.076125][ T5878] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 221.090795][T11921] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2592'. [ 221.103421][ T5878] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 221.213565][T11914] lo speed is unknown, defaulting to 1000 [ 221.243059][T11914] lo speed is unknown, defaulting to 1000 [ 222.060959][T11972] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2616'. [ 222.446948][T11976] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.463164][T11976] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.630204][ T49] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.652811][ T49] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.672279][ T49] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.690110][ T49] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.726309][ T49] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.750635][ T49] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.780363][ T49] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.804598][ T49] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.840005][T12012] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2629'. [ 222.976761][T12019] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 223.055411][T11914] chnl_net:caif_netlink_parms(): no params data found [ 223.173449][T11914] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.180925][T11914] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.188692][ T5185] Bluetooth: hci3: command tx timeout [ 223.194594][T11914] bridge_slave_0: entered allmulticast mode [ 223.203728][T11914] bridge_slave_0: entered promiscuous mode [ 223.219064][T11914] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.226487][T11914] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.234326][T11914] bridge_slave_1: entered allmulticast mode [ 223.242671][T11914] bridge_slave_1: entered promiscuous mode [ 223.295128][T11914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.320730][T11914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.396019][T11914] team0: Port device team_slave_0 added [ 223.409138][T11914] team0: Port device team_slave_1 added [ 223.466633][T11914] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.474002][T11914] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.500724][T11914] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.514358][T11914] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.521384][T11914] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.549001][T11914] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.708640][T11914] hsr_slave_0: entered promiscuous mode [ 223.715296][T11914] hsr_slave_1: entered promiscuous mode [ 223.723749][T12041] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2639'. [ 223.739728][T11914] debugfs: 'hsr0' already exists in 'hsr' [ 223.745497][T11914] Cannot create hsr debugfs directory [ 224.002573][T11914] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.123901][T11914] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.201428][T11914] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.251531][T11914] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.291715][T12066] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2651'. [ 224.412011][T11914] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 224.423827][T11914] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 224.435866][T11914] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 224.449110][T11914] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 224.605530][T11914] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.651394][T11914] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.687540][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.694827][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.738691][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.745866][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.221901][T12110] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2668'. [ 225.230485][T12112] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2669'. [ 225.262528][ T5185] Bluetooth: hci3: command tx timeout [ 225.401231][T12124] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2672'. [ 225.402308][T12123] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2673'. [ 225.436247][T11914] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.616861][T11914] veth0_vlan: entered promiscuous mode [ 225.650872][T11914] veth1_vlan: entered promiscuous mode [ 225.709713][T11914] veth0_macvtap: entered promiscuous mode [ 225.731719][T11914] veth1_macvtap: entered promiscuous mode [ 225.779200][T12142] bridge0: port 3(veth0) entered blocking state [ 225.785681][T12142] bridge0: port 3(veth0) entered disabled state [ 225.796492][T12142] veth0: entered allmulticast mode [ 225.805742][T12142] veth0: entered promiscuous mode [ 225.832332][T11914] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.863228][T11914] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.955340][ T1054] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.979634][ T1054] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.024899][ T1054] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.054186][ T1054] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.054268][T12154] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2688'. [ 226.116936][T12152] lo speed is unknown, defaulting to 1000 [ 226.136563][T12152] lo speed is unknown, defaulting to 1000 [ 226.315561][ T1054] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.344065][ T1054] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.436589][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.475169][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.722326][T12162] lo speed is unknown, defaulting to 1000 [ 226.736274][T12162] lo speed is unknown, defaulting to 1000 [ 226.976889][T12181] netlink: 'syz.4.2697': attribute type 1 has an invalid length. [ 227.337469][ T5185] Bluetooth: hci3: command tx timeout [ 227.908753][T12215] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2716'. [ 228.129152][T12216] nbd4: detected capacity change from 0 to 63 [ 228.159951][ T5185] block nbd4: Receive control failed (result -32) [ 229.254775][T12283] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2748'. [ 229.417566][ T5185] Bluetooth: hci3: command tx timeout [ 229.694740][T12312] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2761'. [ 229.710699][T12312] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2761'. [ 231.706788][T12348] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2774'. [ 231.933162][T12361] lo: entered promiscuous mode [ 232.220056][T12377] mac80211_hwsim hwsim14 wlan0: entered promiscuous mode [ 232.288411][T12380] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2790'. [ 232.366854][T12384] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2792'. [ 232.670229][T12399] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2799'. [ 232.710464][T12399] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2799'. [ 232.774992][T12408] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2803'. [ 232.798903][T12406] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2804'. [ 233.092221][T12421] lo speed is unknown, defaulting to 1000 [ 233.124229][T12421] lo speed is unknown, defaulting to 1000 [ 234.871232][T12514] netlink: 'syz.1.2852': attribute type 11 has an invalid length. [ 236.412924][T12588] __nla_validate_parse: 3 callbacks suppressed [ 236.412943][T12588] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2880'. [ 236.801028][T12595] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2882'. [ 236.822826][T12597] FAULT_INJECTION: forcing a failure. [ 236.822826][T12597] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 236.848389][T12595] netlink: 'syz.4.2882': attribute type 21 has an invalid length. [ 236.856351][T12595] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2882'. [ 236.864154][T12597] CPU: 1 UID: 0 PID: 12597 Comm: syz.1.2883 Not tainted syzkaller #0 PREEMPT(full) [ 236.864182][T12597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 236.864199][T12597] Call Trace: [ 236.864206][T12597] [ 236.864213][T12597] dump_stack_lvl+0x189/0x250 [ 236.864244][T12597] ? __pfx____ratelimit+0x10/0x10 [ 236.864267][T12597] ? __pfx_dump_stack_lvl+0x10/0x10 [ 236.864285][T12597] ? __pfx__printk+0x10/0x10 [ 236.864306][T12597] ? __might_fault+0xb0/0x130 [ 236.864339][T12597] should_fail_ex+0x414/0x560 [ 236.864364][T12597] _copy_from_iter+0x1de/0x1790 [ 236.864384][T12597] ? check_path+0x21/0x40 [ 236.864406][T12597] ? check_noncircular+0xe0/0x160 [ 236.864435][T12597] ? __pfx__copy_from_iter+0x10/0x10 [ 236.864456][T12597] ? validate_chain+0x897/0x2140 [ 236.864488][T12597] tun_get_user+0x219/0x3e20 [ 236.864532][T12597] ? aa_file_perm+0x44d/0x1550 [ 236.864549][T12597] ? __pfx_tun_get_user+0x10/0x10 [ 236.864565][T12597] ? _parse_integer_limit+0x1ae/0x1f0 [ 236.864595][T12597] ? __lock_acquire+0xab9/0xd20 [ 236.864622][T12597] ? ref_tracker_alloc+0x318/0x460 [ 236.864641][T12597] ? __lock_acquire+0xab9/0xd20 [ 236.864664][T12597] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 236.864690][T12597] ? tun_get+0x1c/0x2f0 [ 236.864711][T12597] ? tun_get+0x1c/0x2f0 [ 236.864727][T12597] ? tun_get+0x1c/0x2f0 [ 236.864747][T12597] tun_chr_write_iter+0x113/0x200 [ 236.864766][T12597] vfs_write+0x5c6/0xb30 [ 236.864791][T12597] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 236.864808][T12597] ? __pfx_vfs_write+0x10/0x10 [ 236.864838][T12597] ? __fget_files+0x2a/0x420 [ 236.864861][T12597] ksys_write+0x145/0x250 [ 236.864883][T12597] ? __pfx_ksys_write+0x10/0x10 [ 236.864900][T12597] ? rcu_is_watching+0x15/0xb0 [ 236.864921][T12597] ? do_syscall_64+0xbe/0x3b0 [ 236.864939][T12597] do_syscall_64+0xfa/0x3b0 [ 236.864951][T12597] ? lockdep_hardirqs_on+0x9c/0x150 [ 236.864970][T12597] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.864986][T12597] ? clear_bhb_loop+0x60/0xb0 [ 236.865005][T12597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.865020][T12597] RIP: 0033:0x7f0e40d8ebe9 [ 236.865042][T12597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.865055][T12597] RSP: 002b:00007f0e3eff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 236.865076][T12597] RAX: ffffffffffffffda RBX: 00007f0e40fc5fa0 RCX: 00007f0e40d8ebe9 [ 236.865088][T12597] RDX: 000000000000fdef RSI: 0000200000000240 RDI: 0000000000000003 [ 236.865098][T12597] RBP: 00007f0e3eff6090 R08: 0000000000000000 R09: 0000000000000000 [ 236.865108][T12597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.865117][T12597] R13: 00007f0e40fc6038 R14: 00007f0e40fc5fa0 R15: 00007ffdaba310a8 [ 236.865144][T12597] [ 237.122069][ T5878] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 237.174114][ T5878] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 237.194665][ T5878] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 237.203784][ T5878] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 237.212616][ T5878] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 237.371109][T12598] lo speed is unknown, defaulting to 1000 [ 237.399741][T12598] lo speed is unknown, defaulting to 1000 [ 237.476794][T12621] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2890'. [ 237.621240][T12623] syz_tun: entered allmulticast mode [ 237.643668][T12623] dvmrp8: entered allmulticast mode [ 237.660615][T12622] syz_tun: left allmulticast mode [ 237.816633][T12630] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2893'. [ 238.045330][T12598] chnl_net:caif_netlink_parms(): no params data found [ 238.133834][T12598] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.141254][T12598] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.148933][T12598] bridge_slave_0: entered allmulticast mode [ 238.156087][T12598] bridge_slave_0: entered promiscuous mode [ 238.166019][T12598] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.173742][T12598] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.181076][T12598] bridge_slave_1: entered allmulticast mode [ 238.189347][T12598] bridge_slave_1: entered promiscuous mode [ 238.250940][T12598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.264865][T12598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.333341][T12598] team0: Port device team_slave_0 added [ 238.353829][T12598] team0: Port device team_slave_1 added [ 238.426929][T12598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.434378][T12598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.462901][T12598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.485934][T12598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.493219][T12598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.519966][T12598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.616547][T12649] netlink: 666 bytes leftover after parsing attributes in process `syz.1.2898'. [ 238.648986][T12598] hsr_slave_0: entered promiscuous mode [ 238.656288][T12598] hsr_slave_1: entered promiscuous mode [ 238.671413][T12598] debugfs: 'hsr0' already exists in 'hsr' [ 238.687559][T12598] Cannot create hsr debugfs directory [ 238.731754][T12658] netlink: 'syz.3.2901': attribute type 4 has an invalid length. [ 238.806133][T12659] FAULT_INJECTION: forcing a failure. [ 238.806133][T12659] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 238.831484][T12659] CPU: 0 UID: 0 PID: 12659 Comm: syz.4.2902 Not tainted syzkaller #0 PREEMPT(full) [ 238.831507][T12659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 238.831517][T12659] Call Trace: [ 238.831524][T12659] [ 238.831530][T12659] dump_stack_lvl+0x189/0x250 [ 238.831553][T12659] ? __pfx____ratelimit+0x10/0x10 [ 238.831573][T12659] ? __pfx_dump_stack_lvl+0x10/0x10 [ 238.831591][T12659] ? __pfx__printk+0x10/0x10 [ 238.831612][T12659] ? __might_fault+0xb0/0x130 [ 238.831642][T12659] should_fail_ex+0x414/0x560 [ 238.831666][T12659] _copy_from_user+0x2d/0xb0 [ 238.831691][T12659] ___sys_sendmsg+0x158/0x2a0 [ 238.831712][T12659] ? __pfx____sys_sendmsg+0x10/0x10 [ 238.831763][T12659] ? __fget_files+0x2a/0x420 [ 238.831777][T12659] ? __fget_files+0x3a0/0x420 [ 238.831801][T12659] __x64_sys_sendmsg+0x19b/0x260 [ 238.831822][T12659] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 238.831850][T12659] ? __pfx_ksys_write+0x10/0x10 [ 238.831868][T12659] ? rcu_is_watching+0x15/0xb0 [ 238.831890][T12659] ? do_syscall_64+0xbe/0x3b0 [ 238.831910][T12659] do_syscall_64+0xfa/0x3b0 [ 238.831925][T12659] ? lockdep_hardirqs_on+0x9c/0x150 [ 238.831944][T12659] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.831959][T12659] ? clear_bhb_loop+0x60/0xb0 [ 238.831979][T12659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.831994][T12659] RIP: 0033:0x7f52e1d8ebe9 [ 238.832010][T12659] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 238.832023][T12659] RSP: 002b:00007f52e2c7b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 238.832042][T12659] RAX: ffffffffffffffda RBX: 00007f52e1fc6090 RCX: 00007f52e1d8ebe9 [ 238.832054][T12659] RDX: 0000000004000000 RSI: 0000200000001200 RDI: 0000000000000003 [ 238.832065][T12659] RBP: 00007f52e2c7b090 R08: 0000000000000000 R09: 0000000000000000 [ 238.832075][T12659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.832085][T12659] R13: 00007f52e1fc6128 R14: 00007f52e1fc6090 R15: 00007ffef5c7ba38 [ 238.832112][T12659] [ 239.175559][T12598] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.236080][T12598] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.260962][ T5185] Bluetooth: hci0: command tx timeout [ 239.283490][T12598] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.287675][T12674] netlink: 'syz.0.2906': attribute type 4 has an invalid length. [ 239.373062][T12598] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.434743][T12680] netlink: 'syz.1.2908': attribute type 4 has an invalid length. [ 239.449608][T11988] lo speed is unknown, defaulting to 1000 [ 239.471173][T11988] syz0: Port: 1 Link DOWN [ 239.493832][T11992] lo speed is unknown, defaulting to 1000 [ 239.521106][T12598] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 239.531906][T12598] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 239.542958][T12598] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 239.552986][T12598] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 239.635528][T12598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.660143][T12598] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.672859][ T3546] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.680116][ T3546] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.700415][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.707778][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.905885][T12598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 239.959268][T12598] veth0_vlan: entered promiscuous mode [ 239.973350][T12598] veth1_vlan: entered promiscuous mode [ 240.024646][T12598] veth0_macvtap: entered promiscuous mode [ 240.066435][T12598] veth1_macvtap: entered promiscuous mode [ 240.140277][T12598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 240.171451][T12598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 240.232975][ T3546] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.265495][ T3546] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.293709][T12699] lo speed is unknown, defaulting to 1000 [ 240.311478][ T3546] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.327001][T12700] lo speed is unknown, defaulting to 1000 [ 240.360235][T12699] lo speed is unknown, defaulting to 1000 [ 240.361384][ T3546] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.471468][T12706] xt_l2tp: invalid flags combination: 0 [ 240.483108][T12711] FAULT_INJECTION: forcing a failure. [ 240.483108][T12711] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 240.495893][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.505973][T12711] CPU: 1 UID: 0 PID: 12711 Comm: syz.1.2914 Not tainted syzkaller #0 PREEMPT(full) [ 240.505996][T12711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 240.506006][T12711] Call Trace: [ 240.506012][T12711] [ 240.506019][T12711] dump_stack_lvl+0x189/0x250 [ 240.506043][T12711] ? __pfx____ratelimit+0x10/0x10 [ 240.506066][T12711] ? __pfx_dump_stack_lvl+0x10/0x10 [ 240.506084][T12711] ? __pfx__printk+0x10/0x10 [ 240.506105][T12711] ? __might_fault+0xb0/0x130 [ 240.506137][T12711] should_fail_ex+0x414/0x560 [ 240.506162][T12711] _copy_from_user+0x2d/0xb0 [ 240.506182][T12711] ___sys_sendmsg+0x158/0x2a0 [ 240.506202][T12711] ? __pfx____sys_sendmsg+0x10/0x10 [ 240.506250][T12711] ? __fget_files+0x2a/0x420 [ 240.506263][T12711] ? __fget_files+0x3a0/0x420 [ 240.506286][T12711] __sys_sendmmsg+0x227/0x430 [ 240.506309][T12711] ? __pfx___sys_sendmmsg+0x10/0x10 [ 240.506324][T12711] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 240.506364][T12711] ? ksys_write+0x22a/0x250 [ 240.506387][T12711] ? __pfx_ksys_write+0x10/0x10 [ 240.506404][T12711] ? rcu_is_watching+0x15/0xb0 [ 240.506425][T12711] __x64_sys_sendmmsg+0xa0/0xc0 [ 240.506445][T12711] do_syscall_64+0xfa/0x3b0 [ 240.506459][T12711] ? lockdep_hardirqs_on+0x9c/0x150 [ 240.506480][T12711] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.506496][T12711] ? clear_bhb_loop+0x60/0xb0 [ 240.506516][T12711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.506532][T12711] RIP: 0033:0x7f0e40d8ebe9 [ 240.506547][T12711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 240.506560][T12711] RSP: 002b:00007f0e3eff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 240.506579][T12711] RAX: ffffffffffffffda RBX: 00007f0e40fc5fa0 RCX: 00007f0e40d8ebe9 [ 240.506591][T12711] RDX: 0000000000034000 RSI: 00002000000008c0 RDI: 0000000000000003 [ 240.506602][T12711] RBP: 00007f0e3eff6090 R08: 0000000000000000 R09: 0000000000000000 [ 240.506612][T12711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.506622][T12711] R13: 00007f0e40fc6038 R14: 00007f0e40fc5fa0 R15: 00007ffdaba310a8 [ 240.506654][T12711] [ 240.516122][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.762530][T12713] syz_tun: entered allmulticast mode [ 240.789422][T12713] dvmrp8: entered allmulticast mode [ 240.797753][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.805937][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.818581][T12712] syz_tun: left allmulticast mode [ 240.888918][T12700] lo speed is unknown, defaulting to 1000 [ 241.342205][ T5185] Bluetooth: hci0: command tx timeout [ 241.488306][T12735] FAULT_INJECTION: forcing a failure. [ 241.488306][T12735] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 241.504791][T12736] FAULT_INJECTION: forcing a failure. [ 241.504791][T12736] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 241.534638][T12735] CPU: 1 UID: 0 PID: 12735 Comm: syz.1.2924 Not tainted syzkaller #0 PREEMPT(full) [ 241.534663][T12735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 241.534684][T12735] Call Trace: [ 241.534691][T12735] [ 241.534699][T12735] dump_stack_lvl+0x189/0x250 [ 241.534724][T12735] ? __pfx____ratelimit+0x10/0x10 [ 241.534747][T12735] ? __pfx_dump_stack_lvl+0x10/0x10 [ 241.534766][T12735] ? __pfx__printk+0x10/0x10 [ 241.534787][T12735] ? __might_fault+0xb0/0x130 [ 241.534820][T12735] should_fail_ex+0x414/0x560 [ 241.534846][T12735] _copy_from_user+0x2d/0xb0 [ 241.534866][T12735] ___sys_sendmsg+0x158/0x2a0 [ 241.534887][T12735] ? __pfx____sys_sendmsg+0x10/0x10 [ 241.534940][T12735] ? __fget_files+0x2a/0x420 [ 241.534955][T12735] ? __fget_files+0x3a0/0x420 [ 241.534979][T12735] __x64_sys_sendmsg+0x19b/0x260 [ 241.535000][T12735] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 241.535028][T12735] ? __pfx_ksys_write+0x10/0x10 [ 241.535047][T12735] ? rcu_is_watching+0x15/0xb0 [ 241.535069][T12735] ? do_syscall_64+0xbe/0x3b0 [ 241.535088][T12735] do_syscall_64+0xfa/0x3b0 [ 241.535102][T12735] ? lockdep_hardirqs_on+0x9c/0x150 [ 241.535131][T12735] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.535147][T12735] ? clear_bhb_loop+0x60/0xb0 [ 241.535167][T12735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.535183][T12735] RIP: 0033:0x7f0e40d8ebe9 [ 241.535197][T12735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.535210][T12735] RSP: 002b:00007f0e3eff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 241.535228][T12735] RAX: ffffffffffffffda RBX: 00007f0e40fc5fa0 RCX: 00007f0e40d8ebe9 [ 241.535240][T12735] RDX: 0000000000044000 RSI: 0000200000000540 RDI: 0000000000000004 [ 241.535251][T12735] RBP: 00007f0e3eff6090 R08: 0000000000000000 R09: 0000000000000000 [ 241.535261][T12735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.535271][T12735] R13: 00007f0e40fc6038 R14: 00007f0e40fc5fa0 R15: 00007ffdaba310a8 [ 241.535299][T12735] [ 241.760616][T12736] CPU: 0 UID: 0 PID: 12736 Comm: syz.2.2923 Not tainted syzkaller #0 PREEMPT(full) [ 241.760642][T12736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 241.760652][T12736] Call Trace: [ 241.760659][T12736] [ 241.760667][T12736] dump_stack_lvl+0x189/0x250 [ 241.760691][T12736] ? __pfx____ratelimit+0x10/0x10 [ 241.760714][T12736] ? __pfx_dump_stack_lvl+0x10/0x10 [ 241.760732][T12736] ? __pfx__printk+0x10/0x10 [ 241.760753][T12736] ? __might_fault+0xb0/0x130 [ 241.760785][T12736] should_fail_ex+0x414/0x560 [ 241.760811][T12736] _copy_from_user+0x2d/0xb0 [ 241.760829][T12736] ___sys_recvmsg+0x12e/0x510 [ 241.760850][T12736] ? __pfx____sys_recvmsg+0x10/0x10 [ 241.760883][T12736] ? __fget_files+0x3a0/0x420 [ 241.760904][T12736] do_recvmmsg+0x307/0x770 [ 241.760929][T12736] ? __pfx_do_recvmmsg+0x10/0x10 [ 241.760960][T12736] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 241.761004][T12736] __x64_sys_recvmmsg+0x190/0x240 [ 241.761026][T12736] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 241.761043][T12736] ? rcu_is_watching+0x15/0xb0 [ 241.761064][T12736] ? do_syscall_64+0xbe/0x3b0 [ 241.761091][T12736] do_syscall_64+0xfa/0x3b0 [ 241.761106][T12736] ? lockdep_hardirqs_on+0x9c/0x150 [ 241.761127][T12736] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.761143][T12736] ? clear_bhb_loop+0x60/0xb0 [ 241.761164][T12736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.761180][T12736] RIP: 0033:0x7f85bdd8ebe9 [ 241.761195][T12736] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.761208][T12736] RSP: 002b:00007f85beb3f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 241.761227][T12736] RAX: ffffffffffffffda RBX: 00007f85bdfc5fa0 RCX: 00007f85bdd8ebe9 [ 241.761239][T12736] RDX: 0000000000000001 RSI: 00002000000040c0 RDI: 0000000000000003 [ 241.761250][T12736] RBP: 00007f85beb3f090 R08: 0000000000000000 R09: 0000000000000000 [ 241.761260][T12736] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000001 [ 241.761268][T12736] R13: 00007f85bdfc6038 R14: 00007f85bdfc5fa0 R15: 00007ffe815e3828 [ 241.761295][T12736] [ 242.056241][ T5878] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 242.066974][ T5878] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 242.076025][ T5878] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 242.090100][ T5878] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 242.168028][T12743] FAULT_INJECTION: forcing a failure. [ 242.168028][T12743] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 242.187472][T12743] CPU: 0 UID: 0 PID: 12743 Comm: syz.2.2926 Not tainted syzkaller #0 PREEMPT(full) [ 242.187497][T12743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 242.187507][T12743] Call Trace: [ 242.187514][T12743] [ 242.187521][T12743] dump_stack_lvl+0x189/0x250 [ 242.187546][T12743] ? __pfx____ratelimit+0x10/0x10 [ 242.187569][T12743] ? __pfx_dump_stack_lvl+0x10/0x10 [ 242.187588][T12743] ? __pfx__printk+0x10/0x10 [ 242.187608][T12743] ? __might_fault+0xb0/0x130 [ 242.187641][T12743] should_fail_ex+0x414/0x560 [ 242.187668][T12743] _copy_from_user+0x2d/0xb0 [ 242.187688][T12743] __sys_sendto+0x25c/0x520 [ 242.187708][T12743] ? __pfx___sys_sendto+0x10/0x10 [ 242.187722][T12743] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 242.187751][T12743] ? __fget_files+0x3a0/0x420 [ 242.187778][T12743] ? ksys_write+0x22a/0x250 [ 242.187800][T12743] ? __pfx_ksys_write+0x10/0x10 [ 242.187817][T12743] ? rcu_is_watching+0x15/0xb0 [ 242.187840][T12743] __x64_sys_sendto+0xde/0x100 [ 242.187861][T12743] do_syscall_64+0xfa/0x3b0 [ 242.187875][T12743] ? lockdep_hardirqs_on+0x9c/0x150 [ 242.187897][T12743] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.187913][T12743] ? clear_bhb_loop+0x60/0xb0 [ 242.187933][T12743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.187949][T12743] RIP: 0033:0x7f85bdd8ebe9 [ 242.187964][T12743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.187978][T12743] RSP: 002b:00007f85beb3f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 242.187996][T12743] RAX: ffffffffffffffda RBX: 00007f85bdfc5fa0 RCX: 00007f85bdd8ebe9 [ 242.188008][T12743] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 242.188019][T12743] RBP: 00007f85beb3f090 R08: 0000200000000100 R09: 000000000000001c [ 242.188029][T12743] R10: 0000000000044004 R11: 0000000000000246 R12: 0000000000000001 [ 242.188048][T12743] R13: 00007f85bdfc6038 R14: 00007f85bdfc5fa0 R15: 00007ffe815e3828 [ 242.188075][T12743] [ 242.193606][ T5878] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 242.278696][T12746] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2925'. [ 242.525088][ T5864] syz_tun (unregistering): left allmulticast mode [ 242.540866][T12748] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2927'. [ 242.880076][T12737] lo speed is unknown, defaulting to 1000 [ 243.025814][T12737] lo speed is unknown, defaulting to 1000 [ 243.237962][ T12] veth0: left allmulticast mode [ 243.263062][ T12] veth0: left promiscuous mode [ 243.274099][ T12] bridge0: port 3(veth0) entered disabled state [ 243.304469][ T12] bridge_slave_1: left allmulticast mode [ 243.337311][ T12] bridge_slave_1: left promiscuous mode [ 243.343331][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.364865][ T12] bridge_slave_0: left allmulticast mode [ 243.387282][ T12] bridge_slave_0: left promiscuous mode [ 243.393722][T12777] FAULT_INJECTION: forcing a failure. [ 243.393722][T12777] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 243.407333][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.419350][ T5185] Bluetooth: hci0: command tx timeout [ 243.435243][T12777] CPU: 1 UID: 0 PID: 12777 Comm: syz.1.2934 Not tainted syzkaller #0 PREEMPT(full) [ 243.435269][T12777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 243.435279][T12777] Call Trace: [ 243.435287][T12777] [ 243.435294][T12777] dump_stack_lvl+0x189/0x250 [ 243.435319][T12777] ? __pfx____ratelimit+0x10/0x10 [ 243.435342][T12777] ? __pfx_dump_stack_lvl+0x10/0x10 [ 243.435361][T12777] ? __pfx__printk+0x10/0x10 [ 243.435384][T12777] ? __might_fault+0xb0/0x130 [ 243.435417][T12777] should_fail_ex+0x414/0x560 [ 243.435444][T12777] _copy_from_user+0x2d/0xb0 [ 243.435463][T12777] kstrtouint_from_user+0xc4/0x170 [ 243.435512][T12777] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 243.435552][T12777] proc_fail_nth_write+0x88/0x200 [ 243.435570][T12777] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 243.435593][T12777] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 243.435611][T12777] vfs_write+0x27b/0xb30 [ 243.435636][T12777] ? __pfx_vfs_write+0x10/0x10 [ 243.435655][T12777] ? __fget_files+0x2a/0x420 [ 243.435673][T12777] ? __fget_files+0x3a0/0x420 [ 243.435686][T12777] ? __fget_files+0x2a/0x420 [ 243.435709][T12777] ksys_write+0x145/0x250 [ 243.435733][T12777] ? __pfx_ksys_write+0x10/0x10 [ 243.435758][T12777] ? do_syscall_64+0xbe/0x3b0 [ 243.435778][T12777] do_syscall_64+0xfa/0x3b0 [ 243.435792][T12777] ? lockdep_hardirqs_on+0x9c/0x150 [ 243.435813][T12777] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.435829][T12777] ? clear_bhb_loop+0x60/0xb0 [ 243.435849][T12777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.435864][T12777] RIP: 0033:0x7f0e40d8d69f [ 243.435886][T12777] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 243.435900][T12777] RSP: 002b:00007f0e3efb4030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 243.435919][T12777] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0e40d8d69f [ 243.435930][T12777] RDX: 0000000000000001 RSI: 00007f0e3efb40a0 RDI: 0000000000000005 [ 243.435941][T12777] RBP: 00007f0e3efb4090 R08: 0000000000000000 R09: 0000000000000000 [ 243.435951][T12777] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 243.435961][T12777] R13: 00007f0e40fc6218 R14: 00007f0e40fc6180 R15: 00007ffdaba310a8 [ 243.435991][T12777] [ 244.050500][ T12] dvmrp8 (unregistering): left allmulticast mode [ 244.251168][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 244.263101][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 244.273967][ T12] bond0 (unregistering): Released all slaves [ 244.310052][ T5185] Bluetooth: hci5: command tx timeout [ 244.371715][ T12] tipc: Left network mode [ 244.483724][T12790] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2937'. [ 244.662539][T12797] FAULT_INJECTION: forcing a failure. [ 244.662539][T12797] name failslab, interval 1, probability 0, space 0, times 0 [ 244.695390][T12797] CPU: 1 UID: 0 PID: 12797 Comm: syz.1.2939 Not tainted syzkaller #0 PREEMPT(full) [ 244.695417][T12797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 244.695428][T12797] Call Trace: [ 244.695435][T12797] [ 244.695444][T12797] dump_stack_lvl+0x189/0x250 [ 244.695469][T12797] ? __pfx____ratelimit+0x10/0x10 [ 244.695491][T12797] ? __pfx_dump_stack_lvl+0x10/0x10 [ 244.695509][T12797] ? __pfx__printk+0x10/0x10 [ 244.695536][T12797] ? __pfx___might_resched+0x10/0x10 [ 244.695557][T12797] should_fail_ex+0x414/0x560 [ 244.695581][T12797] should_failslab+0xa8/0x100 [ 244.695603][T12797] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 244.695625][T12797] ? __alloc_skb+0x112/0x2d0 [ 244.695644][T12797] __alloc_skb+0x112/0x2d0 [ 244.695661][T12797] netlink_sendmsg+0x5c6/0xb30 [ 244.695686][T12797] ? __pfx_netlink_sendmsg+0x10/0x10 [ 244.695703][T12797] ? aa_sock_msg_perm+0xf1/0x1d0 [ 244.695720][T12797] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 244.695735][T12797] ? __pfx_netlink_sendmsg+0x10/0x10 [ 244.695750][T12797] __sock_sendmsg+0x21c/0x270 [ 244.695781][T12797] ____sys_sendmsg+0x505/0x830 [ 244.695805][T12797] ? __pfx_____sys_sendmsg+0x10/0x10 [ 244.695833][T12797] ? import_iovec+0x74/0xa0 [ 244.695855][T12797] ___sys_sendmsg+0x21f/0x2a0 [ 244.695876][T12797] ? __pfx____sys_sendmsg+0x10/0x10 [ 244.695931][T12797] ? __fget_files+0x2a/0x420 [ 244.695945][T12797] ? __fget_files+0x3a0/0x420 [ 244.695971][T12797] __x64_sys_sendmsg+0x19b/0x260 [ 244.695992][T12797] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 244.696020][T12797] ? __pfx_ksys_write+0x10/0x10 [ 244.696046][T12797] ? do_syscall_64+0xbe/0x3b0 [ 244.696066][T12797] do_syscall_64+0xfa/0x3b0 [ 244.696083][T12797] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.696099][T12797] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 244.696115][T12797] ? clear_bhb_loop+0x60/0xb0 [ 244.696134][T12797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.696150][T12797] RIP: 0033:0x7f0e40d8ebe9 [ 244.696166][T12797] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.696179][T12797] RSP: 002b:00007f0e3eff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 244.696197][T12797] RAX: ffffffffffffffda RBX: 00007f0e40fc5fa0 RCX: 00007f0e40d8ebe9 [ 244.696210][T12797] RDX: 0000000024040084 RSI: 0000200000006040 RDI: 0000000000000005 [ 244.696221][T12797] RBP: 00007f0e3eff6090 R08: 0000000000000000 R09: 0000000000000000 [ 244.696231][T12797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.696240][T12797] R13: 00007f0e40fc6038 R14: 00007f0e40fc5fa0 R15: 00007ffdaba310a8 [ 244.696269][T12797] [ 244.996848][T12799] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2941'. [ 245.195893][T12809] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2945'. [ 245.405419][ T979] IPVS: starting estimator thread 0... [ 245.421778][T12818] tipc: New replicast peer: 255.255.255.255 [ 245.459505][T12818] tipc: Enabled bearer , priority 10 [ 245.498230][ T5185] Bluetooth: hci0: command tx timeout [ 245.557257][T12821] IPVS: using max 25 ests per chain, 60000 per kthread [ 245.778916][T12832] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2951'. [ 245.805888][T12834] FAULT_INJECTION: forcing a failure. [ 245.805888][T12834] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 245.820085][T12834] CPU: 1 UID: 0 PID: 12834 Comm: syz.2.2952 Not tainted syzkaller #0 PREEMPT(full) [ 245.820109][T12834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 245.820118][T12834] Call Trace: [ 245.820125][T12834] [ 245.820133][T12834] dump_stack_lvl+0x189/0x250 [ 245.820157][T12834] ? __pfx____ratelimit+0x10/0x10 [ 245.820180][T12834] ? __pfx_dump_stack_lvl+0x10/0x10 [ 245.820199][T12834] ? __pfx__printk+0x10/0x10 [ 245.820231][T12834] should_fail_ex+0x414/0x560 [ 245.820255][T12834] _copy_from_user+0x2d/0xb0 [ 245.820274][T12834] sctp_setsockopt+0x19f/0x1200 [ 245.820292][T12834] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 245.820315][T12834] do_sock_setsockopt+0x17c/0x1b0 [ 245.820337][T12834] __x64_sys_setsockopt+0x13f/0x1b0 [ 245.820360][T12834] do_syscall_64+0xfa/0x3b0 [ 245.820375][T12834] ? lockdep_hardirqs_on+0x9c/0x150 [ 245.820396][T12834] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.820412][T12834] ? clear_bhb_loop+0x60/0xb0 [ 245.820432][T12834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.820445][T12834] RIP: 0033:0x7f85bdd8ebe9 [ 245.820460][T12834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.820473][T12834] RSP: 002b:00007f85beb3f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 245.820491][T12834] RAX: ffffffffffffffda RBX: 00007f85bdfc5fa0 RCX: 00007f85bdd8ebe9 [ 245.820502][T12834] RDX: 0000000000000017 RSI: 0000000000000084 RDI: 0000000000000003 [ 245.820510][T12834] RBP: 00007f85beb3f090 R08: 0000000000000009 R09: 0000000000000000 [ 245.820519][T12834] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 245.820528][T12834] R13: 00007f85bdfc6038 R14: 00007f85bdfc5fa0 R15: 00007ffe815e3828 [ 245.820550][T12834] [ 246.096085][ T12] hsr_slave_0: left promiscuous mode [ 246.118516][ T12] hsr_slave_1: left promiscuous mode [ 246.156680][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.164932][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.183485][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.192544][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.258102][ T12] veth1_macvtap: left promiscuous mode [ 246.264077][ T12] veth0_macvtap: left promiscuous mode [ 246.271113][ T12] veth1_vlan: left promiscuous mode [ 246.276604][ T12] veth0_vlan: left promiscuous mode [ 246.387424][ T5185] Bluetooth: hci5: command tx timeout [ 246.558100][ T979] tipc: Node number set to 1844408121 [ 246.779046][ T12] team0 (unregistering): Port device team_slave_1 removed [ 246.830168][ T12] team0 (unregistering): Port device team_slave_0 removed [ 247.298204][T12848] 8021q: VLANs not supported on vxcan1 [ 247.311879][T12852] FAULT_INJECTION: forcing a failure. [ 247.311879][T12852] name failslab, interval 1, probability 0, space 0, times 0 [ 247.324781][T12852] CPU: 1 UID: 0 PID: 12852 Comm: syz.4.2957 Not tainted syzkaller #0 PREEMPT(full) [ 247.324805][T12852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 247.324815][T12852] Call Trace: [ 247.324822][T12852] [ 247.324830][T12852] dump_stack_lvl+0x189/0x250 [ 247.324854][T12852] ? __pfx____ratelimit+0x10/0x10 [ 247.324878][T12852] ? __pfx_dump_stack_lvl+0x10/0x10 [ 247.324897][T12852] ? __pfx__printk+0x10/0x10 [ 247.324924][T12852] ? __pfx___might_resched+0x10/0x10 [ 247.324945][T12852] should_fail_ex+0x414/0x560 [ 247.324971][T12852] should_failslab+0xa8/0x100 [ 247.324995][T12852] __kmalloc_cache_noprof+0x70/0x3d0 [ 247.325017][T12852] ? sctp_association_new+0x89/0x25f0 [ 247.325040][T12852] sctp_association_new+0x89/0x25f0 [ 247.325062][T12852] ? sctp_has_association+0x1cd/0x1f0 [ 247.325080][T12852] ? sctp_has_association+0x2f/0x1f0 [ 247.325100][T12852] ? __ipv6_addr_type+0x247/0x2f0 [ 247.325128][T12852] sctp_connect_new_asoc+0x2c5/0x690 [ 247.325149][T12852] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 247.325168][T12852] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 247.325185][T12852] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 247.325200][T12852] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 247.325219][T12852] ? sctp_endpoint_lookup_assoc+0x22f/0x260 [ 247.325239][T12852] __sctp_connect+0x5ba/0xd50 [ 247.325270][T12852] ? __pfx___sctp_connect+0x10/0x10 [ 247.325298][T12852] sctp_inet_connect+0x12e/0x1e0 [ 247.325324][T12852] __sys_connect+0x316/0x440 [ 247.325352][T12852] ? __fget_files+0x3a0/0x420 [ 247.325368][T12852] ? __pfx___sys_connect+0x10/0x10 [ 247.325397][T12852] ? __pfx_ksys_write+0x10/0x10 [ 247.325415][T12852] ? rcu_is_watching+0x15/0xb0 [ 247.325440][T12852] __x64_sys_connect+0x7a/0x90 [ 247.325458][T12852] do_syscall_64+0xfa/0x3b0 [ 247.325473][T12852] ? lockdep_hardirqs_on+0x9c/0x150 [ 247.325495][T12852] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.325511][T12852] ? clear_bhb_loop+0x60/0xb0 [ 247.325531][T12852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.325547][T12852] RIP: 0033:0x7f52e1d8ebe9 [ 247.325563][T12852] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.325576][T12852] RSP: 002b:00007f52e2c9c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 247.325594][T12852] RAX: ffffffffffffffda RBX: 00007f52e1fc5fa0 RCX: 00007f52e1d8ebe9 [ 247.325606][T12852] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000003 [ 247.325616][T12852] RBP: 00007f52e2c9c090 R08: 0000000000000000 R09: 0000000000000000 [ 247.325627][T12852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.325636][T12852] R13: 00007f52e1fc6038 R14: 00007f52e1fc5fa0 R15: 00007ffef5c7ba38 [ 247.325665][T12852] [ 247.703037][T12737] chnl_net:caif_netlink_parms(): no params data found [ 247.919033][T12871] FAULT_INJECTION: forcing a failure. [ 247.919033][T12871] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 247.941611][T12871] CPU: 0 UID: 0 PID: 12871 Comm: syz.1.2962 Not tainted syzkaller #0 PREEMPT(full) [ 247.941637][T12871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 247.941646][T12871] Call Trace: [ 247.941654][T12871] [ 247.941661][T12871] dump_stack_lvl+0x189/0x250 [ 247.941685][T12871] ? __pfx____ratelimit+0x10/0x10 [ 247.941708][T12871] ? __pfx_dump_stack_lvl+0x10/0x10 [ 247.941726][T12871] ? __pfx__printk+0x10/0x10 [ 247.941747][T12871] ? __might_fault+0xb0/0x130 [ 247.941778][T12871] should_fail_ex+0x414/0x560 [ 247.941804][T12871] _copy_from_iter+0x1de/0x1790 [ 247.941825][T12871] ? __lock_acquire+0xab9/0xd20 [ 247.941848][T12871] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 247.941873][T12871] ? policy_nodemask+0x27c/0x720 [ 247.941893][T12871] ? __pfx__copy_from_iter+0x10/0x10 [ 247.941916][T12871] ? set_page_refcounted+0xa0/0x1e0 [ 247.941937][T12871] ? page_copy_sane+0x4e/0x280 [ 247.941959][T12871] copy_page_from_iter+0xdd/0x170 [ 247.941980][T12871] tun_get_user+0x1d7b/0x3e20 [ 247.942006][T12871] ? tun_get_user+0x6f6/0x3e20 [ 247.942030][T12871] ? aa_file_perm+0x44d/0x1550 [ 247.942047][T12871] ? __pfx_tun_get_user+0x10/0x10 [ 247.942062][T12871] ? _parse_integer_limit+0x1ae/0x1f0 [ 247.942093][T12871] ? __lock_acquire+0xab9/0xd20 [ 247.942119][T12871] ? ref_tracker_alloc+0x318/0x460 [ 247.942139][T12871] ? __lock_acquire+0xab9/0xd20 [ 247.942161][T12871] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 247.942187][T12871] ? tun_get+0x1c/0x2f0 [ 247.942209][T12871] ? tun_get+0x1c/0x2f0 [ 247.942225][T12871] ? tun_get+0x1c/0x2f0 [ 247.942245][T12871] tun_chr_write_iter+0x113/0x200 [ 247.942265][T12871] vfs_write+0x5c6/0xb30 [ 247.942290][T12871] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 247.942307][T12871] ? __pfx_vfs_write+0x10/0x10 [ 247.942337][T12871] ? __fget_files+0x2a/0x420 [ 247.942361][T12871] ksys_write+0x145/0x250 [ 247.942383][T12871] ? __pfx_ksys_write+0x10/0x10 [ 247.942400][T12871] ? rcu_is_watching+0x15/0xb0 [ 247.942422][T12871] ? do_syscall_64+0xbe/0x3b0 [ 247.942441][T12871] do_syscall_64+0xfa/0x3b0 [ 247.942455][T12871] ? lockdep_hardirqs_on+0x9c/0x150 [ 247.942476][T12871] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.942491][T12871] ? clear_bhb_loop+0x60/0xb0 [ 247.942510][T12871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.942526][T12871] RIP: 0033:0x7f0e40d8d69f [ 247.942541][T12871] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 247.942587][T12871] RSP: 002b:00007f0e3eff6000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 247.942606][T12871] RAX: ffffffffffffffda RBX: 00007f0e40fc5fa0 RCX: 00007f0e40d8d69f [ 247.942618][T12871] RDX: 0000000000000036 RSI: 0000200000000100 RDI: 00000000000000c8 [ 247.942629][T12871] RBP: 00007f0e3eff6090 R08: 0000000000000000 R09: 0000000000000000 [ 247.942639][T12871] R10: 0000000000000036 R11: 0000000000000293 R12: 0000000000000001 [ 247.942648][T12871] R13: 00007f0e40fc6038 R14: 00007f0e40fc5fa0 R15: 00007ffdaba310a8 [ 247.942676][T12871] [ 248.329205][T12880] tipc: Started in network mode [ 248.334328][T12880] tipc: Node identity 16f3802cd929, cluster identity 4711 [ 248.356612][T12880] tipc: Enabled bearer , priority 0 [ 248.373408][T12867] syzkaller0: entered promiscuous mode [ 248.382212][T12867] syzkaller0: entered allmulticast mode [ 248.436357][T12737] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.443853][T12737] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.451409][T12737] bridge_slave_0: entered allmulticast mode [ 248.459579][T12737] bridge_slave_0: entered promiscuous mode [ 248.467962][T12737] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.473225][ T5185] Bluetooth: hci5: command tx timeout [ 248.475275][T12737] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.488068][T12737] bridge_slave_1: entered allmulticast mode [ 248.496635][T12737] bridge_slave_1: entered promiscuous mode [ 248.810476][T12904] netlink: 'syz.2.2967': attribute type 21 has an invalid length. [ 248.810479][T12886] [ 248.810495][T12904] IPv6: NLM_F_CREATE should be specified when creating new route [ 248.818306][T12886] ====================================================== [ 248.818319][T12886] WARNING: possible circular locking dependency detected [ 248.818338][T12886] syzkaller #0 Not tainted [ 248.818347][T12886] ------------------------------------------------------ [ 248.818353][T12886] syz.2.2967/12886 is trying to acquire lock: [ 248.818362][T12886] ffff88805200c218 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock){+.-.}-{3:3}, at: __dev_queue_xmit+0x22b7/0x3b50 [ 248.818409][T12886] [ 248.818409][T12886] but task is already holding lock: [ 248.818416][T12886] ffff888026b99108 (&local->handle_wake_tx_queue_lock){+.-.}-{3:3}, at: ieee80211_handle_wake_tx_queue+0x84/0x2a0 [ 248.818457][T12886] [ 248.818457][T12886] which lock already depends on the new lock. [ 248.818457][T12886] [ 248.818464][T12886] [ 248.818464][T12886] the existing dependency chain (in reverse order) is: [ 248.818471][T12886] [ 248.818471][T12886] -> #2 (&local->handle_wake_tx_queue_lock){+.-.}-{3:3}: [ 248.818503][T12886] lock_acquire+0x120/0x360 [ 248.818524][T12886] _raw_spin_lock+0x2e/0x40 [ 248.818541][T12886] ieee80211_handle_wake_tx_queue+0x84/0x2a0 [ 248.818553][T12886] ieee80211_queue_skb+0x1a31/0x21c0 [ 248.823970][T12904] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 248.828596][T12886] ieee80211_tx+0x297/0x420 [ 248.828624][T12886] __ieee80211_subif_start_xmit+0xccf/0x1610 [ 248.828641][T12886] ieee80211_subif_start_xmit+0xe0/0x510 [ 248.828656][T12886] dev_hard_start_xmit+0x2d7/0x830 [ 248.835728][T12904] IPv6: NLM_F_CREATE should be set when creating new route [ 248.842682][T12886] __dev_queue_xmit+0x1b8d/0x3b50 [ 248.842712][T12886] ip6_finish_output2+0x11fe/0x16a0 [ 248.842731][T12886] NF_HOOK+0x9e/0x380 [ 248.847202][T12904] IPv6: NLM_F_CREATE should be set when creating new route [ 248.854123][T12886] mld_sendpack+0x800/0xd80 [ 248.860306][T12904] IPv6: NLM_F_CREATE should be set when creating new route [ 248.872248][T12886] mld_ifc_work+0x83e/0xd60 [ 248.872272][T12886] process_scheduled_works+0xae1/0x17b0 [ 248.872285][T12886] worker_thread+0x8a0/0xda0 [ 248.872298][T12886] kthread+0x70e/0x8a0 [ 249.035932][T12886] ret_from_fork+0x3fc/0x770 [ 249.041043][T12886] ret_from_fork_asm+0x1a/0x30 [ 249.046336][T12886] [ 249.046336][T12886] -> #1 (_xmit_ETHER#2){+.-.}-{3:3}: [ 249.053842][T12886] lock_acquire+0x120/0x360 [ 249.058877][T12886] _raw_spin_lock+0x2e/0x40 [ 249.063897][T12886] sch_direct_xmit+0x153/0x4b0 [ 249.069190][T12886] __dev_queue_xmit+0x1857/0x3b50 [ 249.074810][T12886] lapb_data_transmit+0x90/0xb0 [ 249.080220][T12886] lapb_transmit_buffer+0x163/0x200 [ 249.085929][T12886] lapb_establish_data_link+0x89/0xe0 [ 249.091822][T12886] lapb_device_event+0x4e1/0x670 [ 249.097275][T12886] notifier_call_chain+0x1b3/0x3e0 [ 249.102901][T12886] __dev_notify_flags+0x18d/0x2e0 [ 249.108435][T12886] netif_change_flags+0xe8/0x1a0 [ 249.113980][T12886] dev_change_flags+0x130/0x260 [ 249.119356][T12886] devinet_ioctl+0xbb4/0x1b50 [ 249.124552][T12886] inet_ioctl+0x3c0/0x4c0 [ 249.129409][T12886] sock_do_ioctl+0xd9/0x300 [ 249.134423][T12886] sock_ioctl+0x576/0x790 [ 249.139263][T12886] __se_sys_ioctl+0xfc/0x170 [ 249.144365][T12886] do_syscall_64+0xfa/0x3b0 [ 249.149375][T12886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.155822][T12886] [ 249.155822][T12886] -> #0 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock){+.-.}-{3:3}: [ 249.166002][T12886] validate_chain+0xb9b/0x2140 [ 249.171292][T12886] __lock_acquire+0xab9/0xd20 [ 249.176495][T12886] lock_acquire+0x120/0x360 [ 249.181680][T12886] _raw_spin_lock+0x2e/0x40 [ 249.186701][T12886] __dev_queue_xmit+0x22b7/0x3b50 [ 249.192247][T12886] __netlink_deliver_tap+0x5ad/0x850 [ 249.198135][T12886] netlink_deliver_tap+0x19c/0x1b0 [ 249.203767][T12886] netlink_sendskb+0x68/0x140 [ 249.208956][T12886] netlink_unicast+0x397/0x9e0 [ 249.214238][T12886] hwsim_unicast_netgroup+0x1be/0x2a0 [ 249.220122][T12886] mac80211_hwsim_tx_frame_nl+0x895/0xc90 [ 249.226355][T12886] ieee80211_handle_wake_tx_queue+0x18e/0x2a0 [ 249.232950][T12886] ieee80211_queue_skb+0x1a31/0x21c0 [ 249.238775][T12886] ieee80211_tx+0x297/0x420 [ 249.243897][T12886] __ieee80211_subif_start_xmit+0xccf/0x1610 [ 249.250475][T12886] ieee80211_subif_start_xmit+0xe0/0x510 [ 249.256664][T12886] dev_hard_start_xmit+0x2d7/0x830 [ 249.262291][T12886] __dev_queue_xmit+0x1b8d/0x3b50 [ 249.267835][T12886] __bpf_tx_skb+0x18e/0x260 [ 249.272845][T12886] bpf_clone_redirect+0x272/0x3d0 [ 249.278379][T12886] bpf_prog_c6f54bbad6dab1ee+0x5f/0x68 [ 249.284364][T12886] bpf_test_run+0x318/0x7b0 [ 249.289381][T12886] bpf_prog_test_run_skb+0xb30/0x1560 [ 249.295265][T12886] bpf_prog_test_run+0x2c7/0x340 [ 249.300724][T12886] __sys_bpf+0x581/0x870 [ 249.305492][T12886] __x64_sys_bpf+0x7c/0x90 [ 249.310423][T12886] do_syscall_64+0xfa/0x3b0 [ 249.315439][T12886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.321837][T12886] [ 249.321837][T12886] other info that might help us debug this: [ 249.321837][T12886] [ 249.332057][T12886] Chain exists of: [ 249.332057][T12886] dev->qdisc_tx_busylock ?: &qdisc_tx_busylock --> _xmit_ETHER#2 --> &local->handle_wake_tx_queue_lock [ 249.332057][T12886] [ 249.349009][T12886] Possible unsafe locking scenario: [ 249.349009][T12886] [ 249.356448][T12886] CPU0 CPU1 [ 249.361902][T12886] ---- ---- [ 249.367254][T12886] lock(&local->handle_wake_tx_queue_lock); [ 249.373226][T12886] lock(_xmit_ETHER#2); [ 249.379984][T12886] lock(&local->handle_wake_tx_queue_lock); [ 249.388482][T12886] lock(dev->qdisc_tx_busylock ?: &qdisc_tx_busylock); [ 249.395418][T12886] [ 249.395418][T12886] *** DEADLOCK *** [ 249.395418][T12886] [ 249.403548][T12886] 8 locks held by syz.2.2967/12886: [ 249.408732][T12886] #0: ffffffff8e139f20 (rcu_read_lock){....}-{1:3}, at: bpf_test_timer_enter+0x1a/0x140 [ 249.418742][T12886] #1: ffffffff8e139f80 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27b/0x3b50 [ 249.428684][T12886] #2: ffff888031a41158 (_xmit_ETHER#2){+.-.}-{3:3}, at: __dev_queue_xmit+0x1676/0x3b50 [ 249.438513][T12886] #3: ffffffff8e139f20 (rcu_read_lock){....}-{1:3}, at: __ieee80211_subif_start_xmit+0x2be/0x1610 [ 249.449301][T12886] #4: ffff888026b99108 (&local->handle_wake_tx_queue_lock){+.-.}-{3:3}, at: ieee80211_handle_wake_tx_queue+0x84/0x2a0 [ 249.461826][T12886] #5: ffffffff8e139f20 (rcu_read_lock){....}-{1:3}, at: hwsim_unicast_netgroup+0x2b/0x2a0 [ 249.471827][T12886] #6: ffffffff8e139f20 (rcu_read_lock){....}-{1:3}, at: netlink_deliver_tap+0x2e/0x1b0 [ 249.481755][T12886] #7: ffffffff8e139f80 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27b/0x3b50 [ 249.491779][T12886] [ 249.491779][T12886] stack backtrace: [ 249.497684][T12886] CPU: 1 UID: 0 PID: 12886 Comm: syz.2.2967 Not tainted syzkaller #0 PREEMPT(full) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 249.497703][T12886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 249.497712][T12886] Call Trace: [ 249.497718][T12886] [ 249.497724][T12886] dump_stack_lvl+0x189/0x250 [ 249.497746][T12886] ? __pfx_dump_stack_lvl+0x10/0x10 [ 249.497761][T12886] ? __pfx__printk+0x10/0x10 [ 249.497779][T12886] ? print_lock_name+0xde/0x100 [ 249.497797][T12886] print_circular_bug+0x2ee/0x310 [ 249.497813][T12886] check_noncircular+0x134/0x160 [ 249.497829][T12886] validate_chain+0xb9b/0x2140 [ 249.497845][T12886] ? is_bpf_text_address+0x26/0x2b0 [ 249.497866][T12886] ? is_bpf_text_address+0x292/0x2b0 [ 249.497883][T12886] ? is_bpf_text_address+0x26/0x2b0 [ 249.497902][T12886] __lock_acquire+0xab9/0xd20 [ 249.497922][T12886] ? __dev_queue_xmit+0x22b7/0x3b50 [ 249.497937][T12886] lock_acquire+0x120/0x360 [ 249.497954][T12886] ? __dev_queue_xmit+0x22b7/0x3b50 [ 249.497970][T12886] ? __pfx_rcu_read_lock_bh_held+0x10/0x10 [ 249.497984][T12886] ? stack_trace_save+0x9c/0xe0 [ 249.498002][T12886] _raw_spin_lock+0x2e/0x40 [ 249.498018][T12886] ? __dev_queue_xmit+0x22b7/0x3b50 [ 249.498032][T12886] __dev_queue_xmit+0x22b7/0x3b50 [ 249.498051][T12886] ? __dev_queue_xmit+0x27b/0x3b50 [ 249.498066][T12886] ? dev_hard_start_xmit+0x2d7/0x830 [ 249.498080][T12886] ? __dev_queue_xmit+0x1b8d/0x3b50 [ 249.498094][T12886] ? __bpf_tx_skb+0x18e/0x260 [ 249.498123][T12886] ? bpf_prog_c6f54bbad6dab1ee+0x5f/0x68 [ 249.498134][T12886] ? bpf_test_run+0x318/0x7b0 [ 249.498152][T12886] ? bpf_prog_test_run+0x2c7/0x340 [ 249.498168][T12886] ? __sys_bpf+0x581/0x870 [ 249.498182][T12886] ? __x64_sys_bpf+0x7c/0x90 [ 249.498196][T12886] ? do_syscall_64+0xfa/0x3b0 [ 249.498208][T12886] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.498223][T12886] ? __pfx___dev_queue_xmit+0x10/0x10 [ 249.498242][T12886] ? __copy_skb_header+0xa7/0x550 [ 249.498257][T12886] ? __asan_memcpy+0x40/0x70 [ 249.498278][T12886] ? skb_clone+0x246/0x3a0 [ 249.498293][T12886] __netlink_deliver_tap+0x5ad/0x850 [ 249.498316][T12886] ? netlink_deliver_tap+0x2e/0x1b0 [ 249.498334][T12886] netlink_deliver_tap+0x19c/0x1b0 [ 249.498354][T12886] netlink_sendskb+0x68/0x140 [ 249.498371][T12886] netlink_unicast+0x397/0x9e0 [ 249.498390][T12886] ? __pfx_netlink_unicast+0x10/0x10 [ 249.498406][T12886] ? net_generic+0x1e/0x240 [ 249.498421][T12886] ? net_generic+0x1e/0x240 [ 249.498436][T12886] ? net_generic+0x1e/0x240 [ 249.498451][T12886] ? hwsim_unicast_netgroup+0x2b/0x2a0 [ 249.498464][T12886] hwsim_unicast_netgroup+0x1be/0x2a0 [ 249.498479][T12886] mac80211_hwsim_tx_frame_nl+0x895/0xc90 [ 249.498496][T12886] ? __pfx_mac80211_hwsim_tx_frame_nl+0x10/0x10 [ 249.498508][T12886] ? mac80211_hwsim_tx+0x17a9/0x25d0 [ 249.498531][T12886] ieee80211_handle_wake_tx_queue+0x18e/0x2a0 [ 249.498548][T12886] ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10 [ 249.498561][T12886] ? __local_bh_enable_ip+0x12d/0x1c0 [ 249.498574][T12886] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 249.498587][T12886] ? do_raw_spin_unlock+0x122/0x240 [ 249.498604][T12886] ieee80211_queue_skb+0x1a31/0x21c0 [ 249.498627][T12886] ieee80211_tx+0x297/0x420 [ 249.498640][T12886] ? __pfx_ieee80211_tx+0x10/0x10 [ 249.498659][T12886] ? ieee80211_xmit+0x315/0x400 [ 249.498673][T12886] __ieee80211_subif_start_xmit+0xccf/0x1610 [ 249.498688][T12886] ? __ieee80211_subif_start_xmit+0x2be/0x1610 [ 249.498706][T12886] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 249.498721][T12886] ? __skb_clone+0x63/0x7a0 [ 249.498736][T12886] ? ieee80211_multicast_to_unicast+0x19c/0x320 [ 249.498752][T12886] ieee80211_subif_start_xmit+0xe0/0x510 [ 249.498767][T12886] ? __pfx_ieee80211_subif_start_xmit+0x10/0x10 [ 249.498783][T12886] ? dev_queue_xmit_nit+0xb68/0xcc0 [ 249.498796][T12886] ? dev_queue_xmit_nit+0x2d/0xcc0 [ 249.498812][T12886] dev_hard_start_xmit+0x2d7/0x830 [ 249.498831][T12886] __dev_queue_xmit+0x1b8d/0x3b50 [ 249.498852][T12886] ? do_syscall_64+0xfa/0x3b0 [ 249.498863][T12886] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.498878][T12886] ? __dev_queue_xmit+0x27b/0x3b50 [ 249.498898][T12886] ? __pfx___dev_queue_xmit+0x10/0x10 [ 249.498916][T12886] ? rcu_is_watching+0x15/0xb0 [ 249.498935][T12886] ? pskb_expand_head+0xae0/0x1150 [ 249.498950][T12886] ? __bpf_redirect+0x961/0xe40 [ 249.498969][T12886] __bpf_tx_skb+0x18e/0x260 [ 249.498984][T12886] bpf_clone_redirect+0x272/0x3d0 [ 249.499003][T12886] ? bpf_test_run+0x197/0x7b0 [ 249.499020][T12886] bpf_prog_c6f54bbad6dab1ee+0x5f/0x68 [ 249.499033][T12886] ? preempt_schedule+0xae/0xc0 [ 249.499049][T12886] ? bpf_test_run+0x197/0x7b0 [ 249.499067][T12886] ? preempt_schedule_common+0x83/0xd0 [ 249.499084][T12886] ? preempt_schedule+0xae/0xc0 [ 249.499105][T12886] ? __pfx_preempt_schedule+0x10/0x10 [ 249.499122][T12886] ? preempt_schedule_notrace_thunk+0x16/0x30 [ 249.499138][T12886] ? __local_bh_disable_ip+0xf1/0x190 [ 249.499150][T12886] ? __pfx___cant_migrate+0x10/0x10 [ 249.499162][T12886] ? __local_bh_enable_ip+0x12d/0x1c0 [ 249.499175][T12886] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 249.499189][T12886] ? bpf_test_timer_continue+0x136/0x350 [ 249.499203][T12886] bpf_test_run+0x318/0x7b0 [ 249.499228][T12886] ? __pfx_bpf_test_run+0x10/0x10 [ 249.499253][T12886] ? slab_build_skb+0x273/0x3e0 [ 249.499265][T12886] ? convert___skb_to_skb+0x3d/0x590 [ 249.499284][T12886] bpf_prog_test_run_skb+0xb30/0x1560 [ 249.499307][T12886] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 249.499325][T12886] bpf_prog_test_run+0x2c7/0x340 [ 249.499343][T12886] __sys_bpf+0x581/0x870 [ 249.499360][T12886] ? __pfx___sys_bpf+0x10/0x10 [ 249.499382][T12886] ? rcu_is_watching+0x15/0xb0 [ 249.499397][T12886] __x64_sys_bpf+0x7c/0x90 [ 249.499411][T12886] do_syscall_64+0xfa/0x3b0 [ 249.499423][T12886] ? lockdep_hardirqs_on+0x9c/0x150 [ 249.499441][T12886] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.499453][T12886] ? clear_bhb_loop+0x60/0xb0 [ 249.499468][T12886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.499481][T12886] RIP: 0033:0x7f85bdd8ebe9 [ 249.499495][T12886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 249.499506][T12886] RSP: 002b:00007f85beb1e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 249.499522][T12886] RAX: ffffffffffffffda RBX: 00007f85bdfc6090 RCX: 00007f85bdd8ebe9 [ 249.499533][T12886] RDX: 0000000000000050 RSI: 0000200000001a00 RDI: 000000000000000a [ 249.499542][T12886] RBP: 00007f85bde11e19 R08: 0000000000000000 R09: 0000000000000000 [ 249.499550][T12886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 249.499559][T12886] R13: 00007f85bdfc6128 R14: 00007f85bdfc6090 R15: 00007ffe815e3828 [ 249.499573][T12886] [ 249.507383][T11989] tipc: Node number set to 3487203372 [ 250.170316][T12880] tipc: Resetting bearer [ 250.274764][ T5876] syz_tun (unregistering): left allmulticast mode [ 250.329473][T12905] lo speed is unknown, defaulting to 1000 [ 250.336162][T12905] lo speed is unknown, defaulting to 1000 [ 250.649582][T12874] base_sock_release(ffff88805c31bc00) sk=ffff888020b8e000 [ 250.657830][T12874] tipc: Resetting bearer [ 250.672869][T12874] tipc: Disabling bearer [ 251.030908][ T12] bridge_slave_1: left allmulticast mode [ 251.036673][ T12] bridge_slave_1: left promiscuous mode [ 251.042539][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.051814][ T12] bridge_slave_0: left allmulticast mode [ 251.059104][ T12] bridge_slave_0: left promiscuous mode [ 251.064909][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.132179][ T12] bond0 (unregistering): Released all slaves [ 251.357548][T12905] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 251.674477][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.712422][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.782639][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.831920][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.893377][ T12] bridge_slave_1: left allmulticast mode [ 251.899069][ T12] bridge_slave_1: left promiscuous mode [ 251.904807][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.913473][ T12] bridge_slave_0: left allmulticast mode [ 251.919273][ T12] bridge_slave_0: left promiscuous mode [ 251.924930][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.006182][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 252.016358][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 252.025799][ T12] bond0 (unregistering): Released all slaves [ 252.290789][ T12] hsr_slave_0: left promiscuous mode [ 252.296543][ T12] hsr_slave_1: left promiscuous mode [ 252.302319][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 252.310079][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.318991][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.326441][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.338217][ T12] veth1_macvtap: left promiscuous mode [ 252.343756][ T12] veth0_macvtap: left promiscuous mode [ 252.349546][ T12] veth1_vlan: left promiscuous mode [ 252.354907][ T12] veth0_vlan: left promiscuous mode [ 252.491948][ T12] team0 (unregistering): Port device team_slave_1 removed [ 252.515555][ T12] team0 (unregistering): Port device team_slave_0 removed [ 252.963205][ T12] IPVS: stop unused estimator thread 0... [ 255.819341][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.825703][ T1300] ieee802154 phy1 wpan1: encryption failed: -22