last executing test programs: 1m4.706622393s ago: executing program 2 (id=978): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x30, r1, 0x921, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x4f}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0xfb}]}]}, 0x30}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r4, 0x400, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x1, 0x5d}}}}, [@NL80211_ATTR_SSID={0x4}]}, 0x2c}}, 0x0) 53.164860895s ago: executing program 2 (id=978): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x30, r1, 0x921, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x4f}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0xfb}]}]}, 0x30}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r4, 0x400, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x1, 0x5d}}}}, [@NL80211_ATTR_SSID={0x4}]}, 0x2c}}, 0x0) 41.775328067s ago: executing program 2 (id=978): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x30, r1, 0x921, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x4f}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0xfb}]}]}, 0x30}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r4, 0x400, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x1, 0x5d}}}}, [@NL80211_ATTR_SSID={0x4}]}, 0x2c}}, 0x0) 28.555326149s ago: executing program 2 (id=978): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x30, r1, 0x921, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x4f}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0xfb}]}]}, 0x30}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r4, 0x400, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x1, 0x5d}}}}, [@NL80211_ATTR_SSID={0x4}]}, 0x2c}}, 0x0) 14.980084934s ago: executing program 2 (id=978): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x30, r1, 0x921, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x4f}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0xfb}]}]}, 0x30}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r4, 0x400, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x1, 0x5d}}}}, [@NL80211_ATTR_SSID={0x4}]}, 0x2c}}, 0x0) 4.160081571s ago: executing program 4 (id=2681): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0xa, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) (async) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2ac3c2d5fa4423c5ad1ddee97879c38bf8", 0x11}], 0x1}, 0x840) writev(r3, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) (async) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macvtap0\x00'}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000100), 0x12) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) (async) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000000)=0x10) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x200000d, 0x10, r5, 0x34de5000) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000040), 0x5) setsockopt$inet_mreqsrc(r2, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000440)={@multicast2, @loopback, @private=0xa010100}, 0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') unshare(0x6a040000) (async) unshare(0x6a040000) r6 = socket(0x8, 0x3, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r6, 0x4040942c, 0x0) sendmsg$kcm(r6, 0x0, 0x4000880) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="280000001e000100000000000000000007"], 0x28}}, 0x0) 3.812896913s ago: executing program 4 (id=2685): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0xfffffffe, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x1c}, 0x1, 0x0, 0x0, 0x4040814}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000844}, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) 3.528530024s ago: executing program 3 (id=2688): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x28, 0x1411, 0x1, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x80) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r2, 0x2, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0xb}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x72}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x17}]}, 0x4c}, 0x1, 0x0, 0x0, 0x805}, 0x40) 3.439784436s ago: executing program 0 (id=2690): pipe(&(0x7f0000000200)) (async) r0 = socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x0) (async) sendmmsg(r0, &(0x7f0000000180), 0x400008a, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r2, &(0x7f00000000c0)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r3, 0x0) (async) socket$inet6(0xa, 0xa, 0x0) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) read(r2, &(0x7f0000000140)=""/111, 0x6f) (async) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r1], 0x30}}, 0x0) 3.384915003s ago: executing program 4 (id=2692): bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x6a040000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdbf4, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {0x0, 0x2}, {0xfff3, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20084084) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7b13000000001200140012800b00010067656e65766500000400028008001f000900a900"], 0x3c}}, 0x0) 3.302206411s ago: executing program 3 (id=2693): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, 0x0, 0x0) (async) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) (async, rerun: 64) r2 = socket$inet6_sctp(0xa, 0x0, 0x84) (rerun: 64) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000040)={0x5c, 0xb, '\x00', [@hao={0xc9, 0x10, @remote}, @padn={0x1, 0x2, [0x0, 0x0]}, @pad1, @generic={0x3, 0x35, "686cdacca1204cbae74945208e73bee0b21da881e07f97222225bd437913ed8642e39b2e1bb5cf17c7b3eb686682efe2d2bb6c9bb0"}, @jumbo={0xc2, 0x4, 0x2}, @ra={0x5, 0x2, 0x3}]}, 0x68) (async) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x20040051) (async, rerun: 64) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async, rerun: 64) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x1c}}, 0x0) (async, rerun: 64) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (rerun: 64) ioctl$sock_bt_hci(r4, 0x800448d2, &(0x7f0000000100)) (async, rerun: 64) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'gre0\x00', 0x6bf1c2d5adba8c32}) (async, rerun: 64) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) (async) ioctl$int_in(r6, 0x5452, &(0x7f0000000140)=0x200001) (async) writev(r6, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) (async, rerun: 64) r7 = socket$xdp(0x2c, 0x3, 0x0) (rerun: 64) getsockopt$XDP_STATISTICS(r7, 0x11b, 0x7, 0x0, 0x0) (async) write$tun(r3, &(0x7f0000000240)={@val={0x0, 0x15}, @void, @eth={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x1, 0x11, 0x28, 0x65, 0x0, 0x2, 0x6, 0x0, @multicast1, @multicast2}, {{0x4e20, 0x4e21, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x800, 0x0, 0x8}}}}}}}, 0x3a) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x306) (async) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) 3.115915908s ago: executing program 1 (id=2694): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000006900030500000000000900000081"], 0x18}}, 0x0) 3.115441156s ago: executing program 0 (id=2695): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a40)=@allocspi={0x100, 0x16, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0xc, 0x0, 0xffffffffffffffff}, {@in6=@local, 0x20000, 0x32}, @in=@broadcast, {0x800, 0x0, 0x800000000, 0x0, 0x8, 0x40000000, 0x0, 0xf}, {0xffffffffffffffff, 0x3, 0xa}, {0x0, 0x21}, 0x70bd28, 0x0, 0xa}, 0x0, 0xfffffffe}, [@tfcpad={0x8, 0x24, 0x7fff}]}, 0x100}}, 0x0) 2.989237787s ago: executing program 1 (id=2696): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r1, @ANYBLOB="0100000000000000002101000000060006000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5426c010880f4000080060005000180000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff240002001bc715ee4868b12a49f4df11bc05475489f6a27c4d6483ad2fa5e45903b0ce8514000400e76a686bac1414aa00000000000000008c00098028000080060001000a00000014000200ff020000000000000000000000000001050003000000000028000080060001000a000000140002000000000000000000000000000000000105000300030000001c000080060001000200da0008000200e000000105000300000000001c000080060001000200000008000200ac141400050003000000000074000080200004000a004e2200000000fc0000000000000000000000000000000400000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff080003000100000024000200cde20bc0d9b90ac13642d7b66459dd9db5e20b4b16d3d23f2cb03a8aa417dce6080007000000000014000200776730"], 0x1c8}}, 0x0) 2.927856764s ago: executing program 0 (id=2697): r0 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8002}], 0x1, 0x8000) syz_emit_ethernet(0x32, &(0x7f0000000000)={@random="29a8887da13e", @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @empty, @multicast1}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.606330634s ago: executing program 3 (id=2698): syz_emit_ethernet(0x52, &(0x7f0000000740)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x3, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010100, {[@timestamp_addr={0x44, 0x14, 0x5, 0x3, 0x0, [{@empty, 0x80000}, {@multicast1}]}, @ssrr={0x89, 0x3, 0xce}, @generic={0x82, 0xfffffffffffffe73}, @noop]}}, {{0x1, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061117c0000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000180100002020702500000000802020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x5c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1c}}]}]}, 0x5c}}, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x7, &(0x7f0000000000), 0xa0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@remote, 0x0, 0x2b}, @in6=@mcast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40004) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r5, @ANYBLOB="0e9025"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c000) 2.603863143s ago: executing program 2 (id=978): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x30, r1, 0x921, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x4f}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0xfb}]}]}, 0x30}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r4, 0x400, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x1, 0x5d}}}}, [@NL80211_ATTR_SSID={0x4}]}, 0x2c}}, 0x0) 2.603126814s ago: executing program 0 (id=2699): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$ENABLE_STATS(0x20, &(0x7f0000000500), 0x62) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b80)=@mangle={'mangle\x00', 0x8, 0x6, 0x5a0, 0x298, 0xd0, 0x0, 0x3b0, 0x3b0, 0x4d0, 0x4d0, 0x4d0, 0x4d0, 0x4d0, 0x6, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @private=0xa010102}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xff000000, 0xff000000, 0xffffff00, 0xffffffff], [0xffffff00, 0xff000000, 0xffffffff, 0xffffffff], 'bridge_slave_1\x00', 'veth1_to_team\x00', {}, {0xff}, 0x29, 0xf8, 0x4, 0x1}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@dev, @private2, [], [], 'ip6gretap0\x00', 'nicvf0\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x5002}}, @common=@unspec=@CLASSIFY={0x28}}, {{@ipv6={@local, @rand_addr=' \x01\x00', [], [], 'veth1_to_batadv\x00', 'team_slave_0\x00', {}, {}, 0x0, 0x0, 0x7}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@mcast2}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x600) r0 = socket$igmp6(0xa, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x49}, [@ldst={0x4, 0x0, 0x0, 0x0, 0xa, 0x0, 0xfffffffffffffff0}]}, &(0x7f00000000c0)='syzkaller\x00', 0x2, 0x2f3, &(0x7f000000cf3d)=""/195, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) getsockopt$MRT6(r0, 0x29, 0xcf, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2.531671697s ago: executing program 1 (id=2700): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0xc}, {0x6}]}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x34, r2, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40810}, 0x4000804) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x413, 0x0, 0x25dfdbfb, {{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x10}, 0x10, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x800000000000000, 0x20000000008}, {0x0, 0x8, 0xcc}, {0xf6}, 0x0, 0x0, 0xa, 0x1, 0x1}, [@algo_aead={0x4c, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000061115c000000180000000000950074000000000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 710.860893ms ago: executing program 0 (id=2701): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079104e0000000000630a0000001100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 709.678052ms ago: executing program 1 (id=2702): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0xfffffffe, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x1c}, 0x1, 0x0, 0x0, 0x4040814}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000844}, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) 683.869372ms ago: executing program 3 (id=2703): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000780)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, @empty, 0x2000001, 0x0, 0x7d, 0x100, 0x4, 0x2930310}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @loopback, 0x1, 0x0, 0x6, 0x400, 0xcbb0, 0x7800000}) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x15, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018150000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000002e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000600)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x8, 0x8, 0x10, 0xd, @dev={0xfe, 0x80, '\x00', 0xe}, @mcast1, 0x20, 0xba08, 0xfffffc00, 0x1000}}) 681.390046ms ago: executing program 4 (id=2704): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x7, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x14) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x2004c0c0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/175, 0xaf}, {&(0x7f0000000800)=""/118, 0x76}], 0x3}, 0x7}, {{0x0, 0x0, 0x0}, 0x100fc}], 0x2, 0x40008062, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140), 0x4) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x58, &(0x7f0000000440)}, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)={0x20, 0x0, 0x60b, 0x70bd25, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x8040) syz_genetlink_get_family_id$nbd(&(0x7f00000003c0), 0xffffffffffffffff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0003230c1100"}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r4, &(0x7f0000000400)}, 0x20) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) writev(r5, &(0x7f0000000400)=[{&(0x7f00000002c0)="a609a89c9edd34187123b5adceb3968557f4e107445a53c0815c9636d00f896d1e8cd8de77a79f1e3e2c53ddf1bb9f8ac5cb5257ff4e8b960026bc4244c4b09179a97dffdf02563e23546d3e78f944e7e2fee2a00b6313048fe354223318badb21d8c086669c5f7772f4a6d90d0997babdf79f7d557e055b3e6f2e4f41ec06a39a57b9ccc00bbca22395e41f9e9652af665f0e1603fb85d4799d54d44c706ff8df9bb805b182a1260b5936ae44f649b5e2fdca240984dcd0033ec28aeaaa686608c5c505", 0xc4}, {&(0x7f00000004c0)="7ee25c099579d92f8da721f68a8100b6adf04e0cd543f7d26019d57e6a3ecf7ef34486da35c482845d517dc801cca9e4f248b15413a7e252b00a3878a791f64bd79d1d7cc97eed1cb0ad91426115a3b3bf2738347b0acfb01a5aeb09818f35ba6f394fcc023050ec0fab5b7405e7ce33e50e3efb3f9373ce372307160e67a6ab876630aa7d83b5f9cc93a11ddb6849c9cc173c0f9592e1c14ee8c687710260aefc1ce06038fa1b8b2e76f29703bb5fc7549318f6f4287daef439fd58863abc71e3", 0xc1}], 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x43, 0x9, 0x0, 0x4, {0x3}, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x3}]}, 0x1c}}, 0x24000044) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000080)=0x20) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x13, r8, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xffffffc8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x4, 0x0, @void, @value, @void, @value}, 0x50) 483.506431ms ago: executing program 0 (id=2705): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x2, 0xbf22, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r5, 0x0, 0xa002a0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={&(0x7f0000000080)="15", &(0x7f0000000140)=""/184, &(0x7f0000000200), &(0x7f0000001540), 0x1, r5}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x99}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r4}, &(0x7f00000007c0), &(0x7f0000000640)=r3}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080)={r6, 0x6}, &(0x7f00000000c0)=0xc) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={r6, 0x6}, 0x8) r7 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r7, 0x114, 0xa, &(0x7f00000000c0)=0x1, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000f40), 0x48a41, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r9, &(0x7f0000000f80)={@val, @void, @eth={@broadcast, @multicast, @void, {@ipv6={0x86dd, @gre_packet={0xc, 0x6, "ab1d29", 0x46, 0x2f, 0x1, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x8001]}, {0x8, 0x88be, 0x2, {{0x9, 0x1, 0x0, 0x2, 0x0, 0x1, 0x2, 0x1}, 0x1, {0xb}}}, {0x8, 0x22eb, 0x1, {{0x9, 0x2, 0xfa, 0x1, 0x1, 0x3, 0x1}, 0x2, {0x9, 0x9, 0x2, 0x9, 0x0, 0x0, 0x0, 0x1, 0x1}}}}}}}}}}, 0x80) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="540000001000000228bd70000100000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000034001680300001800c0003000c0000005908000014000a00460000000000000009000000380000000c0007003701000004000000"], 0x54}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000000f06010400000000000000000700000405000100"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4000810) 461.875302ms ago: executing program 3 (id=2706): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa4}, 0x1, 0xf5ffffffffffffff}, 0x4800) 454.924324ms ago: executing program 4 (id=2707): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a40)=@allocspi={0x100, 0x16, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0xc, 0x0, 0xffffffffffffffff}, {@in6=@local, 0x20000, 0x32}, @in=@broadcast, {0x800, 0x0, 0x800000000, 0x0, 0x8, 0x60000000, 0x0, 0xf}, {0xffffffffffffffff, 0x3, 0xa}, {0x0, 0x21}, 0x70bd28, 0x0, 0xa}, 0x0, 0xfffffffe}, [@tfcpad={0x8, 0x24, 0x7fff}]}, 0x100}}, 0x0) 256.150688ms ago: executing program 3 (id=2708): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000020605000000000000000000000000001400078005001400090000000800124008001f000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x58}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmmsg(r1, &(0x7f0000003e80)=[{{&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e22, @multicast1}, 0x4, 0x4, 0x1, 0x4}}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000300)="3c2936cdfe18bcf8720502aad79265e72650003846aa0d2a6bd8cafa50621cd14ddefe2581a4cc51911afa133415d49299b8771189297930743b7a1b83f63c0404dc96b6604e4fc130e3a77b871327b45cb9dbc420c8c73417dafc644026f2d16df420d564ba3d6f3022f88c74", 0x6d}, {&(0x7f0000000380)="c1a6b85fd8dceb19e096db988a7d6b7b3cb88ae9e0929114f6d02266db11d4b2ccaa570d8f8d5aa6151c0cc72cf499904121b2573db15f3b2507915a5ab1618ba2f58176d130e1cd84bdcabb5855cc07f00b1a10746b52dc868a10e71eb112916464cb55234fbce4ccec95ac02ac68f27e8f15df57648dedfb15cd8a2c842d7ef4ddde4d5b14f7ccf610c6bdafa229a148a0f9213f15622e4060fe056675410fc204c6b5c2a37019820f8ee42cc69455dd588e987adf1c01354742637aa88386965dffe7775c6c8d63", 0xc9}, {&(0x7f0000000980)="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", 0x1000}, {&(0x7f0000000480)="f34dd197c3348f633eabe402401a3c0073da245c54b292cd82d3ca8f6bab6217ffd1e88b57cd8d46013ceb9ca400e7a47437729b1829deadbd518e30c35f189107726cb83fcbcc654cbc43d6eb741b8bc47eb246256023f455c2b218f7d8035c4ec313317c53d4ecc8b2d83a7e6033b2ec6a8046578271990f94bd80b19bc26909ed47efaccbf554044fedd95192d5425aff72708d2ad2bca7d85470922eb26c11dbdebdadd4c9fd3b0f08708b", 0xad}, {&(0x7f0000000100)="356b835db8db654d054718641c45f25d891979984fa213b2fe4538af3f73a6cb4567e9e5b7a94c1093", 0x29}], 0x5, &(0x7f0000003f00)=ANY=[@ANYBLOB="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"], 0x1160}}, {{&(0x7f00000005c0)=@qipcrtr={0x2a, 0x4}, 0x80, &(0x7f0000000800)=[{&(0x7f00000001c0)="cb9d78617c219f1004c1cc8a58ea623ed2", 0x11}, {&(0x7f0000000640)="5b509212d18f447fbd0d7b08b40cdc766bb507cdc1dcea3b59d0e1371d47e61bc2948d66bbafec58a6c7ebb6ad95c7adc13bc34a6c647ad9ef1efad88f70e96df4f35843d049ad2e526a781cad6cee5292dec684848bc1bd2fa93e53f818f7f34fce1d8e2e94ba00160f5ed1e7e9dcf7edce0af9695d3ded985332c3f3cf05004c24cc4de12614b0599f85", 0x8b}, {&(0x7f0000000700)="beda746cc9d930165e48b926f75254c9548fcca5cf1ee4abd24051ba9bcab25e3877249e05c8ec1dab4cf1bd115699d28fb2855556e95ab6210f010a8ac8faedfa73e13fb85db300e776b695f21f1bb489af1f4750a0300a7fe29f2d749d9814d9ca781ce064c83db6b78c8ef713d68b261b31d34f3eadcc31053be3c860d153f3acc6d3524e12d3f2b6b64ecaab", 0x8e}, {&(0x7f00000007c0)="204f722d3091141124a7669fdb91731dc8bdabab2c08e4987523073787", 0x1d}, {&(0x7f0000002b00)="bbeef28d03173ffacb618c1dba0eca6c7cc67aad1fae7b029f5438a0471f465861892d25b55ac55b8a8b14f2f6570a392f07caa238bc9b0f5411c3c63d173986078e3b94c786aee6af43e339c09ec1b11dbc5bd174e1926f9fea2edffc0e8c712a00a3d65136fffefb0f83f7a4a1f428b33cc13b907f7bc6eafa46a8c5a09fdc1f4b7469ff89f0268471a28fd0a1e8dbd242b4a21f4f649f977c79955313d509996cd44db506fe907d533fedc22878b40e70087cb5701d5325811bf3d87b2bb944bc2c9513f1e45907ccbc78a1849daad2eaeaa25626825e76cbf3040b7d7c03c26503e318a72f8f52696af66b7b5894762c73d238", 0xf5}, {&(0x7f0000002c00)="bdfb5bfcf74754d6a3a405ff5575eadf269c1b19022570e271dc8e0391c4e3ca52b6c4cbef992455c8cc588d7eaff3fbc0accf405454fbbcc41691fbe6914401b45a6c4b103e3d26fbc394305ee7a8f4b51bfc7974d2dfe748435186002b0188d6ce3ebcc830872fa610159ea2bd8fc0c109634a8d69fcde0309c6275adcf8bd2da44ed7efbc98e878815a4f69253a7cdcfa58188fae7d96c9ed566ed25cc7ddbfd7a46683a0a7e928f70f0183456414f93601e971e1d2af7d0536ae7ecb65474aa44a91418b7d0781b340276160425ea4df1ce5a636b3", 0xd7}], 0x6, &(0x7f0000002d00)=[{0x88, 0x84, 0xb, "1350302840d4fc0d4791608155bbfff877efe4011d6097188ea646e85c89121f0508b3be7d1403435b8877eb70f8950b211f4fbf846ac7932ca16cb5932fef8e4b8b13452cccb15df6e905367f259c438dd01c9b1fa79f52a1aab20f767b7cda721c0c3644c18dfba268a81bfa48dd845c05e3"}, {0x1010, 0x29, 0x200, "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"}, {0xd8, 0x0, 0x954, "7a6d94ce712d79cb0bb316d88eeba6a2fc807d3137fcd870b4422ee01ef5b88d61469d228e2235215a0a90309acf038a5c4ac802f205b29e7d839223952c20a512684434f0f045a6c6b410072850a5e1c8f67edade1740ca337f4dd863c21904c98cbb0610994de103cf61736c74a1ac102682830c3aa52d9a12ce550c2c6f822bd6eb96e1e13f8233c90e0bce35efe365a71c8a340984a8bc27c6d5a52e20ec92bc7c630da50d326408360bf2165a4fe6a6828dd97024dfeea6ff4c99837bd6e9cfdc9e07feae"}], 0x1170}}], 0x2, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x58}}, 0x0) syz_emit_ethernet(0x43, &(0x7f0000000140)={@local, @empty, @void, {@ipv4={0x800, @tipc={{0x7, 0x4, 0x0, 0x6, 0x35, 0x68, 0x0, 0xff, 0x6, 0x0, @broadcast, @broadcast, {[@ssrr={0x89, 0x7, 0xb1, [@dev={0xac, 0x14, 0x14, 0x1c}]}]}}, @payload_conn={{{0x19, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, 0x2, 0x8875, 0x0, 0x0, 0x3, 0x2, 0x0, 0xb, 0x6, 0x0, 0x4e21, 0x4e23}}, [0x0]}}}}}, 0x0) ioctl$BTRFS_IOC_FS_INFO(r1, 0x8400941f, &(0x7f0000001980)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r3, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=@newtaction={0x9c, 0x30, 0x48b, 0x0, 0x0, {}, [{0x88, 0x1, [@m_ctinfo={0x30, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @multicast2, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x9c}}, 0x0) 252.754881ms ago: executing program 4 (id=2709): socket$inet_udp(0x2, 0x2, 0x0) socket(0x10, 0x2, 0x0) pipe(&(0x7f0000000080)) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xb) socket$inet6_udplite(0xa, 0x2, 0x88) pipe(&(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$pppoe(0x18, 0x1, 0x0) pipe(&(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000014481400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r1, @ANYRESOCT=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 139.849394ms ago: executing program 1 (id=2710): r0 = socket$kcm(0x10, 0x2, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x20, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x9, 0xf989, "45ee4f42ed"}, @fastopen={0x22, 0x2}]}}}}}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002080)={0x44, r2, 0x1, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xb2, @name2}]}, 0x44}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2b109aedc1596161edbd320c038056c93e4106e2872bab54929b787216384767e9f25d16eaa61e94e9f530f864f04ce836c6df1ca5a91599956708cfbc14580e41386a0c0202e6872bb6bd68f0e0da6a92f1a34db92dea0ed5646c1f84ae2330bcb97059241a404fcf637d68ea1710dcce9f8a20cbb63c9f471b7e5afa48d656b0819b1428dd413661ce4a7aa9ee0351404c06fdfc173f71250c5571e36561b93f4326bfc83bf4ed92caf79afd6d0eb2", 0xb0}], 0x1}, 0x0) 0s ago: executing program 1 (id=2711): r0 = socket(0x11, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r2 = socket$rxrpc(0x21, 0x2, 0xa) shutdown(r2, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @loopback}, 0x10, 0x0}, 0x4008804) sendmsg$kcm(r3, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000600)="3282db78", 0x4}], 0x1}, 0x8400) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000000)={r6, 0x4}, 0x8) syz_emit_ethernet(0x4e, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, &(0x7f0000000000)=[{&(0x7f00000000c0)="9d", 0x1}], 0x1}, 0x0) pipe(0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a80)=@newqdisc={0x60, 0x24, 0xf0b, 0x4000, 0x25dfdbfc, {0x0, 0x0, 0x12, r1, {0xe, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x30, 0x2, [@TCA_CAKE_OVERHEAD={0x8, 0x6, 0x11}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x8000}, @TCA_CAKE_ACK_FILTER={0x8}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x200}, @TCA_CAKE_FWMARK={0x8}]}}]}, 0x60}}, 0x48004) kernel console output (not intermixed with test programs): 350] __nla_validate_parse: 3 callbacks suppressed [ 212.151946][T10350] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1435'. [ 212.296939][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 212.398657][T10240] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.405956][T10364] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1440'. [ 212.412419][T10240] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.427630][T10240] bridge_slave_0: entered allmulticast mode [ 212.435854][T10240] bridge_slave_0: entered promiscuous mode [ 212.449230][T10240] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.456598][T10240] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.467708][T10240] bridge_slave_1: entered allmulticast mode [ 212.475762][T10240] bridge_slave_1: entered promiscuous mode [ 212.523251][T10367] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1441'. [ 212.567882][T10369] netlink: 'syz.4.1442': attribute type 1 has an invalid length. [ 212.575838][T10369] netlink: 'syz.4.1442': attribute type 10 has an invalid length. [ 212.588469][T10369] netlink: 'syz.4.1442': attribute type 4 has an invalid length. [ 212.610824][T10369] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1442'. [ 212.615769][T10240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.666189][T10240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.764254][T10240] team0: Port device team_slave_0 added [ 212.790469][T10240] team0: Port device team_slave_1 added [ 212.862231][T10382] netlink: 'syz.4.1445': attribute type 10 has an invalid length. [ 212.919213][T10382] team0: Device ipvlan1 failed to register rx_handler [ 212.957591][T10240] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.964698][T10240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.008929][T10240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.022647][T10240] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.079191][T10240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.133138][T10396] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1450'. [ 213.133578][T10240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.336859][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 213.377616][T10411] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1454'. [ 213.403618][T10240] hsr_slave_0: entered promiscuous mode [ 213.404953][T10411] netlink: 'syz.4.1454': attribute type 30 has an invalid length. [ 213.423696][T10240] hsr_slave_1: entered promiscuous mode [ 213.443706][T10411] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1454'. [ 213.450658][T10240] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 213.475895][T10240] Cannot create hsr debugfs directory [ 213.697254][T10425] netlink: 'syz.1.1460': attribute type 10 has an invalid length. [ 213.709357][T10427] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1459'. [ 213.721101][T10425] team0: Device ipvlan1 failed to register rx_handler [ 213.741229][ T5843] Bluetooth: hci4: command tx timeout [ 213.980639][T10435] macvlan0: left allmulticast mode [ 214.135679][T10448] Cannot find add_set index 4 as target [ 214.315529][T10458] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1473'. [ 214.355588][T10457] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1473'. [ 214.376982][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 214.397676][T10464] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 214.605414][T10240] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 214.609189][T10471] netlink: 'syz.4.1478': attribute type 10 has an invalid length. [ 214.647404][T10471] team0: Device ipvlan1 failed to register rx_handler [ 214.661325][T10240] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 214.684627][T10240] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 214.708459][T10240] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 214.834451][T10485] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 214.928069][T10240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.977411][T10240] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.988002][T10491] Cannot find add_set index 4 as target [ 215.006599][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.014689][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.084769][ T7612] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.092085][ T7612] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.143486][T10494] bridge_slave_1: left allmulticast mode [ 215.149497][T10494] bridge_slave_1: left promiscuous mode [ 215.156720][T10494] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.173741][T10494] bridge_slave_0: left allmulticast mode [ 215.181235][T10494] bridge_slave_0: left promiscuous mode [ 215.188007][T10494] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.416846][ C1] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 215.696382][T10513] netlink: 'syz.3.1492': attribute type 10 has an invalid length. [ 215.747486][T10513] team0: Device ipvlan1 failed to register rx_handler [ 215.826951][ T5843] Bluetooth: hci4: command tx timeout [ 215.844395][T10240] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.912262][T10240] veth0_vlan: entered promiscuous mode [ 215.925950][T10240] veth1_vlan: entered promiscuous mode [ 216.003044][T10240] veth0_macvtap: entered promiscuous mode [ 216.089100][T10525] veth5: entered allmulticast mode [ 216.107116][T10240] veth1_macvtap: entered promiscuous mode [ 216.193266][T10240] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.239266][T10240] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.252747][T10240] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.274090][T10240] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.308783][T10240] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.327162][T10240] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.645585][ T7612] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.684275][ T7612] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.691246][T10559] netlink: 'syz.4.1508': attribute type 10 has an invalid length. [ 216.764774][T10559] team0: Device ipvlan1 failed to register rx_handler [ 216.792375][ T7612] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.814954][T10564] Cannot find add_set index 4 as target [ 216.831538][ T7612] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.009814][T10570] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 217.144364][T10575] erspan0: entered promiscuous mode [ 217.158324][T10575] gretap0: entered promiscuous mode [ 217.199884][T10575] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 217.217268][T10580] __nla_validate_parse: 11 callbacks suppressed [ 217.217289][T10580] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1517'. [ 217.240840][T10575] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 217.425577][T10590] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1522'. [ 217.482795][T10588] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.542512][T10597] netlink: 'syz.1.1524': attribute type 25 has an invalid length. [ 217.648219][T10588] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.682594][T10602] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1525'. [ 217.826228][T10588] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.851873][T10610] FAULT_INJECTION: forcing a failure. [ 217.851873][T10610] name failslab, interval 1, probability 0, space 0, times 0 [ 217.871126][T10608] netlink: 284 bytes leftover after parsing attributes in process `syz.1.1527'. [ 217.876384][T10610] CPU: 0 UID: 0 PID: 10610 Comm: syz.0.1529 Not tainted 6.16.0-rc1-syzkaller-00171-g16ef63acb784 #0 PREEMPT(full) [ 217.876419][T10610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 217.876435][T10610] Call Trace: [ 217.876445][T10610] [ 217.876455][T10610] dump_stack_lvl+0x189/0x250 [ 217.876500][T10610] ? __pfx____ratelimit+0x10/0x10 [ 217.876537][T10610] ? __pfx_dump_stack_lvl+0x10/0x10 [ 217.876575][T10610] ? __pfx__printk+0x10/0x10 [ 217.876611][T10610] ? __pfx___might_resched+0x10/0x10 [ 217.876650][T10610] ? fs_reclaim_acquire+0x7d/0x100 [ 217.876687][T10610] should_fail_ex+0x414/0x560 [ 217.876725][T10610] should_failslab+0xa8/0x100 [ 217.876759][T10610] __kmalloc_noprof+0xcb/0x4f0 [ 217.876782][T10610] ? kfree+0x4d/0x440 [ 217.876814][T10610] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 217.876860][T10610] tomoyo_realpath_from_path+0xe3/0x5d0 [ 217.876899][T10610] ? tomoyo_domain+0xd9/0x130 [ 217.876944][T10610] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 217.876973][T10610] tomoyo_path_number_perm+0x1e8/0x5a0 [ 217.877033][T10610] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 217.877083][T10610] ? __lock_acquire+0xab9/0xd20 [ 217.877145][T10610] ? __fget_files+0x2a/0x420 [ 217.877175][T10610] ? __fget_files+0x2a/0x420 [ 217.877201][T10610] ? __fget_files+0x3a0/0x420 [ 217.877227][T10610] ? __fget_files+0x2a/0x420 [ 217.877258][T10610] security_file_ioctl+0xcb/0x2d0 [ 217.877290][T10610] __se_sys_ioctl+0x47/0x170 [ 217.877337][T10610] do_syscall_64+0xfa/0x3b0 [ 217.877357][T10610] ? lockdep_hardirqs_on+0x9c/0x150 [ 217.877393][T10610] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.877418][T10610] ? clear_bhb_loop+0x60/0xb0 [ 217.877448][T10610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.877472][T10610] RIP: 0033:0x7f221af8e929 [ 217.877493][T10610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.877515][T10610] RSP: 002b:00007f221bdbb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 217.877540][T10610] RAX: ffffffffffffffda RBX: 00007f221b1b5fa0 RCX: 00007f221af8e929 [ 217.877558][T10610] RDX: 00002000000002c0 RSI: 00000000000089e0 RDI: 0000000000000003 [ 217.877574][T10610] RBP: 00007f221bdbb090 R08: 0000000000000000 R09: 0000000000000000 [ 217.877590][T10610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.877603][T10610] R13: 0000000000000000 R14: 00007f221b1b5fa0 R15: 00007ffd7722f7d8 [ 217.877643][T10610] [ 217.878800][T10610] ERROR: Out of memory at tomoyo_realpath_from_path. [ 218.201556][T10588] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.317336][T10621] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1533'. [ 218.428974][T10588] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.525532][T10632] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1537'. [ 218.555803][ T37] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.609025][T10588] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.683951][T10588] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.720009][T10588] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.256177][ T37] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.385511][ T37] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.453073][T10646] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 219.471173][T10647] FAULT_INJECTION: forcing a failure. [ 219.471173][T10647] name failslab, interval 1, probability 0, space 0, times 0 [ 219.492803][T10647] CPU: 0 UID: 0 PID: 10647 Comm: syz.1.1542 Not tainted 6.16.0-rc1-syzkaller-00171-g16ef63acb784 #0 PREEMPT(full) [ 219.492833][T10647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 219.492846][T10647] Call Trace: [ 219.492854][T10647] [ 219.492864][T10647] dump_stack_lvl+0x189/0x250 [ 219.492910][T10647] ? __pfx____ratelimit+0x10/0x10 [ 219.492941][T10647] ? __pfx_dump_stack_lvl+0x10/0x10 [ 219.492974][T10647] ? __pfx__printk+0x10/0x10 [ 219.493000][T10647] ? __pfx___might_resched+0x10/0x10 [ 219.493032][T10647] ? fs_reclaim_acquire+0x7d/0x100 [ 219.493061][T10647] should_fail_ex+0x414/0x560 [ 219.493092][T10647] should_failslab+0xa8/0x100 [ 219.493115][T10647] __kmalloc_noprof+0xcb/0x4f0 [ 219.493134][T10647] ? tomoyo_encode+0x28b/0x550 [ 219.493167][T10647] tomoyo_encode+0x28b/0x550 [ 219.493203][T10647] tomoyo_realpath_from_path+0x58d/0x5d0 [ 219.493234][T10647] ? tomoyo_domain+0xd9/0x130 [ 219.493270][T10647] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 219.493294][T10647] tomoyo_path_number_perm+0x1e8/0x5a0 [ 219.493321][T10647] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 219.493365][T10647] ? __lock_acquire+0xab9/0xd20 [ 219.493416][T10647] ? __fget_files+0x2a/0x420 [ 219.493441][T10647] ? __fget_files+0x2a/0x420 [ 219.493462][T10647] ? __fget_files+0x3a0/0x420 [ 219.493483][T10647] ? __fget_files+0x2a/0x420 [ 219.493510][T10647] security_file_ioctl+0xcb/0x2d0 [ 219.493536][T10647] __se_sys_ioctl+0x47/0x170 [ 219.493569][T10647] do_syscall_64+0xfa/0x3b0 [ 219.493586][T10647] ? lockdep_hardirqs_on+0x9c/0x150 [ 219.493615][T10647] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.493635][T10647] ? clear_bhb_loop+0x60/0xb0 [ 219.493660][T10647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.493679][T10647] RIP: 0033:0x7f792818e929 [ 219.493697][T10647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.493715][T10647] RSP: 002b:00007f7928f1f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 219.493736][T10647] RAX: ffffffffffffffda RBX: 00007f79283b5fa0 RCX: 00007f792818e929 [ 219.493752][T10647] RDX: 00002000000002c0 RSI: 00000000000089e0 RDI: 0000000000000003 [ 219.493766][T10647] RBP: 00007f7928f1f090 R08: 0000000000000000 R09: 0000000000000000 [ 219.493778][T10647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.493790][T10647] R13: 0000000000000000 R14: 00007f79283b5fa0 R15: 00007fffd4ba9258 [ 219.493824][T10647] [ 219.493845][T10647] ERROR: Out of memory at tomoyo_realpath_from_path. [ 219.777778][ T37] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.809877][T10650] IPVS: set_ctl: invalid protocol: 94 10.1.1.0:20002 [ 219.967598][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 219.996422][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 220.010177][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 220.023563][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 220.031630][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 220.159698][T10664] netlink: 'syz.4.1547': attribute type 21 has an invalid length. [ 220.207194][ T37] bridge_slave_1: left allmulticast mode [ 220.212912][ T37] bridge_slave_1: left promiscuous mode [ 220.232987][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.299532][ T37] bridge_slave_0: left allmulticast mode [ 220.320101][ T37] bridge_slave_0: left promiscuous mode [ 220.337336][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.400312][T10672] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 220.936175][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.950988][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 220.961583][ T37] bond0 (unregistering): Released all slaves [ 220.998507][T10654] lo speed is unknown, defaulting to 1000 [ 221.537913][T10700] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1560'. [ 222.044847][T10718] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1567'. [ 222.070341][ T5838] Bluetooth: hci4: command tx timeout [ 222.111242][T10718] Bluetooth: MGMT ver 1.23 [ 222.534491][T10738] netlink: 'syz.0.1570': attribute type 1 has an invalid length. [ 222.900531][T10749] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1574'. [ 222.928057][ T37] hsr_slave_0: left promiscuous mode [ 222.935140][ T37] hsr_slave_1: left promiscuous mode [ 222.947944][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.955550][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.979146][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.992126][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.042910][ T37] veth1_macvtap: left promiscuous mode [ 223.048772][ T37] veth0_macvtap: left promiscuous mode [ 223.054575][ T37] veth1_vlan: left promiscuous mode [ 223.067477][ T37] veth0_vlan: left promiscuous mode [ 223.642874][ T37] team0 (unregistering): Port device team_slave_1 removed [ 223.692576][ T37] team0 (unregistering): Port device team_slave_0 removed [ 224.137190][ T5838] Bluetooth: hci4: command tx timeout [ 224.189039][T10654] chnl_net:caif_netlink_parms(): no params data found [ 224.396533][T10771] FAULT_INJECTION: forcing a failure. [ 224.396533][T10771] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 224.420746][T10771] CPU: 0 UID: 0 PID: 10771 Comm: syz.4.1577 Not tainted 6.16.0-rc1-syzkaller-00171-g16ef63acb784 #0 PREEMPT(full) [ 224.420785][T10771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 224.420798][T10771] Call Trace: [ 224.420807][T10771] [ 224.420816][T10771] dump_stack_lvl+0x189/0x250 [ 224.420855][T10771] ? __pfx____ratelimit+0x10/0x10 [ 224.420887][T10771] ? __pfx_dump_stack_lvl+0x10/0x10 [ 224.420921][T10771] ? __pfx__printk+0x10/0x10 [ 224.420945][T10771] ? __might_fault+0xb0/0x130 [ 224.420978][T10771] should_fail_ex+0x414/0x560 [ 224.421012][T10771] _copy_from_user+0x2d/0xb0 [ 224.421035][T10771] ___sys_recvmsg+0x12e/0x510 [ 224.421071][T10771] ? __pfx____sys_recvmsg+0x10/0x10 [ 224.421134][T10771] ? __might_fault+0xb0/0x130 [ 224.421159][T10771] do_recvmmsg+0x307/0x770 [ 224.421198][T10771] ? __pfx_do_recvmmsg+0x10/0x10 [ 224.421240][T10771] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 224.421296][T10771] __x64_sys_recvmmsg+0x190/0x240 [ 224.421329][T10771] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 224.421356][T10771] ? rcu_is_watching+0x15/0xb0 [ 224.421395][T10771] ? do_syscall_64+0xbe/0x3b0 [ 224.421419][T10771] do_syscall_64+0xfa/0x3b0 [ 224.421436][T10771] ? lockdep_hardirqs_on+0x9c/0x150 [ 224.421468][T10771] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.421490][T10771] ? clear_bhb_loop+0x60/0xb0 [ 224.421516][T10771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.421537][T10771] RIP: 0033:0x7fa94cb8e929 [ 224.421556][T10771] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.421575][T10771] RSP: 002b:00007fa94da74038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 224.421597][T10771] RAX: ffffffffffffffda RBX: 00007fa94cdb5fa0 RCX: 00007fa94cb8e929 [ 224.421612][T10771] RDX: 0000000000000005 RSI: 0000200000000640 RDI: 0000000000000004 [ 224.421626][T10771] RBP: 00007fa94da74090 R08: 0000000000000000 R09: 0000000000000000 [ 224.421638][T10771] R10: 0000000040008062 R11: 0000000000000246 R12: 0000000000000001 [ 224.421650][T10771] R13: 0000000000000000 R14: 00007fa94cdb5fa0 R15: 00007ffe9c946e38 [ 224.421683][T10771] [ 224.681880][T10785] FAULT_INJECTION: forcing a failure. [ 224.681880][T10785] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 224.696306][T10785] CPU: 0 UID: 0 PID: 10785 Comm: syz.0.1582 Not tainted 6.16.0-rc1-syzkaller-00171-g16ef63acb784 #0 PREEMPT(full) [ 224.696335][T10785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 224.696348][T10785] Call Trace: [ 224.696357][T10785] [ 224.696366][T10785] dump_stack_lvl+0x189/0x250 [ 224.696405][T10785] ? __pfx____ratelimit+0x10/0x10 [ 224.696438][T10785] ? __pfx_dump_stack_lvl+0x10/0x10 [ 224.696499][T10785] ? __pfx__printk+0x10/0x10 [ 224.696522][T10785] ? __might_fault+0xb0/0x130 [ 224.696563][T10785] should_fail_ex+0x414/0x560 [ 224.696596][T10785] _copy_from_user+0x2d/0xb0 [ 224.696619][T10785] kstrtouint_from_user+0xc4/0x170 [ 224.696653][T10785] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 224.696704][T10785] proc_fail_nth_write+0x88/0x240 [ 224.696737][T10785] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 224.696774][T10785] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 224.696802][T10785] vfs_write+0x27e/0xa90 [ 224.696846][T10785] ? __pfx_vfs_write+0x10/0x10 [ 224.696881][T10785] ? __fget_files+0x2a/0x420 [ 224.696911][T10785] ? __fget_files+0x3a0/0x420 [ 224.696933][T10785] ? __fget_files+0x2a/0x420 [ 224.696967][T10785] ksys_write+0x145/0x250 [ 224.696985][T10785] ? __fget_files+0x3a0/0x420 [ 224.697011][T10785] ? __pfx_ksys_write+0x10/0x10 [ 224.697037][T10785] ? do_syscall_64+0xbe/0x3b0 [ 224.697062][T10785] do_syscall_64+0xfa/0x3b0 [ 224.697079][T10785] ? lockdep_hardirqs_on+0x9c/0x150 [ 224.697109][T10785] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.697129][T10785] ? clear_bhb_loop+0x60/0xb0 [ 224.697154][T10785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.697175][T10785] RIP: 0033:0x7f221af8d3df [ 224.697193][T10785] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 224.697211][T10785] RSP: 002b:00007f221bdbb030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 224.697234][T10785] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f221af8d3df [ 224.697249][T10785] RDX: 0000000000000001 RSI: 00007f221bdbb0a0 RDI: 0000000000000005 [ 224.697262][T10785] RBP: 00007f221bdbb090 R08: 0000000000000000 R09: 0000000000000000 [ 224.697275][T10785] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 224.697287][T10785] R13: 0000000000000000 R14: 00007f221b1b5fa0 R15: 00007ffd7722f7d8 [ 224.697322][T10785] [ 224.772834][T10787] Cannot find add_set index 4 as target [ 225.008798][T10654] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.027026][T10654] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.034345][T10654] bridge_slave_0: entered allmulticast mode [ 225.062336][T10793] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 225.078575][T10654] bridge_slave_0: entered promiscuous mode [ 225.093474][T10654] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.121700][T10654] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.130276][T10654] bridge_slave_1: entered allmulticast mode [ 225.152143][T10654] bridge_slave_1: entered promiscuous mode [ 225.296261][T10654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.342379][T10654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.540726][T10654] team0: Port device team_slave_0 added [ 225.551672][T10654] team0: Port device team_slave_1 added [ 225.658296][T10654] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.665314][T10654] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.691855][T10654] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.733913][T10654] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.744864][T10654] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.780910][T10654] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.878903][T10826] Cannot find add_set index 4 as target [ 225.890753][T10654] hsr_slave_0: entered promiscuous mode [ 225.917097][T10654] hsr_slave_1: entered promiscuous mode [ 225.953220][T10654] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 225.970396][T10829] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1599'. [ 225.980085][T10654] Cannot create hsr debugfs directory [ 225.992967][T10827] netlink: 'syz.0.1597': attribute type 29 has an invalid length. [ 226.218762][ T5838] Bluetooth: hci4: command tx timeout [ 226.570742][T10858] syz.3.1609 (10858) used obsolete PPPIOCDETACH ioctl [ 226.790329][T10866] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1612'. [ 226.854798][T10871] netlink: 'syz.0.1614': attribute type 1 has an invalid length. [ 226.905099][T10871] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1614'. [ 226.982871][T10870] netlink: 'syz.0.1614': attribute type 1 has an invalid length. [ 227.004273][T10870] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1614'. [ 227.032362][T10873] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1615'. [ 227.319306][T10654] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 227.351056][T10654] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 227.410630][T10654] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 227.448839][T10654] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 227.501350][T10898] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1625'. [ 227.709633][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.719460][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.807685][T10654] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.865169][T10654] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.895535][T10922] netlink: 'syz.3.1632': attribute type 11 has an invalid length. [ 227.904803][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.912039][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.956067][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.963335][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.178974][T10654] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 228.224347][T10937] netlink: 'syz.0.1638': attribute type 10 has an invalid length. [ 228.297301][ T5838] Bluetooth: hci4: command tx timeout [ 228.464811][T10950] Cannot find add_set index 4 as target [ 228.647631][T10654] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.743599][T10965] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1648'. [ 228.780705][T10654] veth0_vlan: entered promiscuous mode [ 228.802535][T10969] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1647'. [ 228.819482][T10654] veth1_vlan: entered promiscuous mode [ 228.869733][T10654] veth0_macvtap: entered promiscuous mode [ 228.903049][T10654] veth1_macvtap: entered promiscuous mode [ 228.969748][T10654] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.980073][T10975] netlink: 'syz.0.1651': attribute type 10 has an invalid length. [ 229.012266][T10654] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.039513][T10654] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.059129][T10654] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.075347][T10654] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.084766][T10654] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.109806][T10979] netlink: 'syz.0.1653': attribute type 4 has an invalid length. [ 229.119453][T10979] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1653'. [ 229.139976][T10979] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1653'. [ 229.183194][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880561d8c00: rx timeout, send abort [ 229.304380][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.323933][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.362959][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.377260][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.692193][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880561d8c00: abort rx timeout. Force session deactivation [ 229.869451][T11004] netlink: 'syz.1.1663': attribute type 10 has an invalid length. [ 229.926478][T11006] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1664'. [ 229.954411][T11006] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1664'. [ 230.001979][T11011] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1664'. [ 230.037432][T11011] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1664'. [ 230.115307][T11020] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1667'. [ 230.276342][T11028] pimreg3: entered allmulticast mode [ 230.658131][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.667249][T11049] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1677'. [ 230.733383][T11049] team0: Device ipvlan1 failed to register rx_handler [ 231.066288][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.130906][T11036] syz.0.1672 (11036) used greatest stack depth: 14584 bytes left [ 231.761636][T11067] Cannot find add_set index 4 as target [ 231.823480][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.963798][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 231.974357][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 231.997308][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 232.016350][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 232.025658][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 232.044230][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.209175][ T36] bridge_slave_1: left allmulticast mode [ 232.214909][ T36] bridge_slave_1: left promiscuous mode [ 232.222523][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.245398][ T36] bridge_slave_0: left allmulticast mode [ 232.258734][ T36] bridge_slave_0: left promiscuous mode [ 232.264672][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.401010][T11099] netlink: 'syz.1.1692': attribute type 10 has an invalid length. [ 232.684478][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.712683][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.727941][ T36] bond0 (unregistering): Released all slaves [ 232.807347][T11099] team0: Device ipvlan1 failed to register rx_handler [ 233.399868][T11080] lo speed is unknown, defaulting to 1000 [ 233.793115][T11130] __nla_validate_parse: 7 callbacks suppressed [ 233.793136][T11130] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1704'. [ 233.866690][T11134] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1706'. [ 234.058364][ T5843] Bluetooth: hci4: command tx timeout [ 234.144149][T11140] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 234.689778][ T36] hsr_slave_0: left promiscuous mode [ 234.713161][ T36] hsr_slave_1: left promiscuous mode [ 234.729452][T11168] netlink: 'syz.1.1716': attribute type 10 has an invalid length. [ 234.740676][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.752489][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.763463][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.784257][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.819947][ T36] veth1_macvtap: left promiscuous mode [ 234.825576][ T36] veth0_macvtap: left promiscuous mode [ 234.831545][ T36] veth1_vlan: left promiscuous mode [ 234.837115][ T36] veth0_vlan: left promiscuous mode [ 235.382131][ T36] team0 (unregistering): Port device team_slave_1 removed [ 235.453575][ T36] team0 (unregistering): Port device team_slave_0 removed [ 236.018682][T11168] veth0_vlan: left promiscuous mode [ 236.029376][T11168] veth0_vlan: entered promiscuous mode [ 236.040671][T11168] team0: Device veth0_vlan failed to register rx_handler [ 236.077171][T11080] chnl_net:caif_netlink_parms(): no params data found [ 236.138779][ T5838] Bluetooth: hci4: command tx timeout [ 236.427754][T11203] Cannot find del_set index 17 as target [ 236.463485][T11080] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.482968][T11080] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.500889][T11080] bridge_slave_0: entered allmulticast mode [ 236.511974][T11080] bridge_slave_0: entered promiscuous mode [ 236.541485][T11206] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1727'. [ 236.562015][T11205] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 236.565268][T11080] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.601162][T11217] openvswitch: netlink: IP tunnel dst address not specified [ 236.607111][T11080] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.632243][T11080] bridge_slave_1: entered allmulticast mode [ 236.647594][T11080] bridge_slave_1: entered promiscuous mode [ 236.665932][T11212] netlink: 284 bytes leftover after parsing attributes in process `syz.0.1729'. [ 236.776717][T11080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.828557][T11080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.972304][T11228] netlink: 'syz.1.1731': attribute type 3 has an invalid length. [ 236.987381][T11080] team0: Port device team_slave_0 added [ 237.014967][T11080] team0: Port device team_slave_1 added [ 237.037716][T11228] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1731'. [ 237.134315][T11080] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.143523][T11080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.173042][T11080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.223125][T11080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.230480][T11080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.264296][T11080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.450492][T11080] hsr_slave_0: entered promiscuous mode [ 237.465487][T11080] hsr_slave_1: entered promiscuous mode [ 237.472266][T11080] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 237.494869][T11080] Cannot create hsr debugfs directory [ 237.602734][T11256] netlink: 284 bytes leftover after parsing attributes in process `syz.0.1742'. [ 237.659121][T11260] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1744'. [ 237.834271][T11264] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1746'. [ 237.952294][T11268] delete_channel: no stack [ 238.205193][T11279] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1752'. [ 238.217589][ T5838] Bluetooth: hci4: command 0x040f tx timeout [ 238.445143][T11080] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 238.465584][T11289] netlink: 'syz.1.1755': attribute type 21 has an invalid length. [ 238.489468][T11080] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 238.505223][T11289] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1755'. [ 238.537924][T11080] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 238.580368][T11080] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 238.711162][T11313] xt_l2tp: missing protocol rule (udp|l2tpip) [ 238.892257][T11080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.963748][T11080] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.983595][T11322] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input17 [ 239.003197][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.010461][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.023993][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.031281][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.230179][ T30] audit: type=1800 audit(1750365284.972:4): pid=11331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1767" name="bpf-map" dev="anon_inodefs" ino=1057 res=0 errno=0 [ 239.392007][T11339] netlink: 'syz.1.1770': attribute type 18 has an invalid length. [ 239.506731][T11348] __nla_validate_parse: 3 callbacks suppressed [ 239.569070][T11348] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1772'. [ 239.600667][T11348] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1772'. [ 239.829988][T11359] netlink: 'syz.1.1775': attribute type 10 has an invalid length. [ 239.839804][T11080] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 239.851118][T11359] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1775'. [ 239.856684][T11363] Cannot find add_set index 4 as target [ 239.877327][T11359] batadv0: entered promiscuous mode [ 239.880601][T11365] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1778'. [ 239.897447][T11359] batadv0: entered allmulticast mode [ 239.904177][T11359] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 240.015461][T11080] veth0_vlan: entered promiscuous mode [ 240.082621][T11080] veth1_vlan: entered promiscuous mode [ 240.170225][T11080] veth0_macvtap: entered promiscuous mode [ 240.205587][T11080] veth1_macvtap: entered promiscuous mode [ 240.259886][T11080] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 240.297678][ T5843] Bluetooth: hci4: command 0x040f tx timeout [ 240.298967][T11080] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 240.324028][T11385] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1785'. [ 240.350785][T11080] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.360336][T11080] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.369439][T11080] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.378482][T11080] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.588583][ T7612] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.602738][ T7612] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.669374][T11394] tipc: Enabled bearer , priority 0 [ 240.688962][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.698408][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.736352][T11394] mac80211_hwsim hwsim6 +: renamed from syzkaller0 [ 240.746150][T11394] tipc: Disabling bearer [ 240.757635][T11394] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1788'. [ 240.778364][T11398] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1790'. [ 241.016319][T11401] netlink: 'syz.0.1791': attribute type 4 has an invalid length. [ 241.103734][T11410] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1795'. [ 241.194766][T11414] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1796'. [ 241.309869][T11420] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1798'. [ 241.504257][ T37] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.745936][ T37] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.012624][ T37] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.193391][ T37] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.349721][ T37] bridge_slave_1: left allmulticast mode [ 242.356580][ T37] bridge_slave_1: left promiscuous mode [ 242.387544][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.465267][ T37] bridge_slave_0: left allmulticast mode [ 242.471089][ T37] bridge_slave_0: left promiscuous mode [ 242.488297][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.798364][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 242.815346][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 242.831451][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 242.849235][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 242.860821][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 243.026055][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 243.038623][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 243.050861][ T37] bond0 (unregistering): Released all slaves [ 243.085161][T11437] bond1: entered allmulticast mode [ 243.398276][T11457] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 243.617417][T11468] Cannot find add_set index 4 as target [ 243.646561][T11449] lo speed is unknown, defaulting to 1000 [ 244.006444][T11480] netlink: 'syz.0.1820': attribute type 7 has an invalid length. [ 244.061613][T11480] : entered promiscuous mode [ 244.125286][T11487] blkio.reset_stats is deprecated [ 244.576222][T11500] Cannot find add_set index 4 as target [ 244.811208][T11509] netlink: 'syz.3.1831': attribute type 29 has an invalid length. [ 244.844360][T11510] netlink: 'syz.3.1831': attribute type 29 has an invalid length. [ 244.937297][ T5838] Bluetooth: hci4: command tx timeout [ 245.113309][ T37] hsr_slave_0: left promiscuous mode [ 245.124678][ T37] hsr_slave_1: left promiscuous mode [ 245.145598][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 245.153306][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 245.187049][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 245.194596][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 245.241700][T11529] __nla_validate_parse: 4 callbacks suppressed [ 245.241722][T11529] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1835'. [ 245.242450][ T37] veth1_macvtap: left promiscuous mode [ 245.267058][ T37] veth0_macvtap: left promiscuous mode [ 245.272871][ T37] veth1_vlan: left promiscuous mode [ 245.283402][ T37] veth0_vlan: left promiscuous mode [ 245.283419][T11531] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1836'. [ 245.806931][ T37] team0 (unregistering): Port device team_slave_1 removed [ 245.850074][ T37] team0 (unregistering): Port device team_slave_0 removed [ 246.443115][T11539] netlink: 284 bytes leftover after parsing attributes in process `syz.0.1838'. [ 246.524277][T11449] chnl_net:caif_netlink_parms(): no params data found [ 246.535451][T11546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1841'. [ 246.752265][T11557] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 246.805469][T11561] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1846'. [ 246.815367][T11563] FAULT_INJECTION: forcing a failure. [ 246.815367][T11563] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 246.836168][T11563] CPU: 0 UID: 0 PID: 11563 Comm: syz.0.1847 Not tainted 6.16.0-rc1-syzkaller-00171-g16ef63acb784 #0 PREEMPT(full) [ 246.836205][T11563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 246.836218][T11563] Call Trace: [ 246.836226][T11563] [ 246.836234][T11563] dump_stack_lvl+0x189/0x250 [ 246.836274][T11563] ? __pfx____ratelimit+0x10/0x10 [ 246.836305][T11563] ? __pfx_dump_stack_lvl+0x10/0x10 [ 246.836336][T11563] ? __pfx__printk+0x10/0x10 [ 246.836359][T11563] ? __might_fault+0xb0/0x130 [ 246.836391][T11563] should_fail_ex+0x414/0x560 [ 246.836422][T11563] _copy_from_user+0x2d/0xb0 [ 246.836444][T11563] kstrtouint_from_user+0xc4/0x170 [ 246.836477][T11563] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 246.836524][T11563] proc_fail_nth_write+0x88/0x240 [ 246.836550][T11563] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 246.836580][T11563] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 246.836618][T11563] vfs_write+0x27e/0xa90 [ 246.836659][T11563] ? __pfx_vfs_write+0x10/0x10 [ 246.836707][T11563] ? __fget_files+0x2a/0x420 [ 246.836739][T11563] ? __fget_files+0x3a0/0x420 [ 246.836759][T11563] ? __fget_files+0x2a/0x420 [ 246.836791][T11563] ksys_write+0x145/0x250 [ 246.836812][T11563] ? __pfx_ksys_write+0x10/0x10 [ 246.836828][T11563] ? rcu_is_watching+0x15/0xb0 [ 246.836865][T11563] ? do_syscall_64+0xbe/0x3b0 [ 246.836889][T11563] do_syscall_64+0xfa/0x3b0 [ 246.836907][T11563] ? lockdep_hardirqs_on+0x9c/0x150 [ 246.837010][T11563] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.837035][T11563] ? clear_bhb_loop+0x60/0xb0 [ 246.837061][T11563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.837082][T11563] RIP: 0033:0x7f221af8d3df [ 246.837101][T11563] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 246.837119][T11563] RSP: 002b:00007f221bdbb030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 246.837141][T11563] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f221af8d3df [ 246.837156][T11563] RDX: 0000000000000001 RSI: 00007f221bdbb0a0 RDI: 0000000000000004 [ 246.837169][T11563] RBP: 00007f221bdbb090 R08: 0000000000000000 R09: 0000000000000000 [ 246.837182][T11563] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 246.837194][T11563] R13: 0000000000000000 R14: 00007f221b1b5fa0 R15: 00007ffd7722f7d8 [ 246.837227][T11563] [ 247.082347][ T5838] Bluetooth: hci4: command tx timeout [ 247.161764][T11449] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.167804][T11567] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1848'. [ 247.175913][T11449] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.185216][T11449] bridge_slave_0: entered allmulticast mode [ 247.193041][T11449] bridge_slave_0: entered promiscuous mode [ 247.218677][T11561] dummy0: entered promiscuous mode [ 247.226351][T11561] dummy0: left promiscuous mode [ 247.245280][T11449] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.253012][T11449] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.260656][T11449] bridge_slave_1: entered allmulticast mode [ 247.268882][T11449] bridge_slave_1: entered promiscuous mode [ 247.379891][T11449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 247.457164][T11449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 247.554444][T11587] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input18 [ 247.585634][T11579] can: request_module (can-proto-3) failed. [ 247.644698][T11449] team0: Port device team_slave_0 added [ 247.864692][T11449] team0: Port device team_slave_1 added [ 248.039890][T11449] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 248.087204][T11449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.162434][T11607] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1860'. [ 248.193342][T11449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 248.259533][T11449] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 248.293239][T11449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.416942][T11449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 248.489602][T11618] x_tables: duplicate underflow at hook 2 [ 248.553301][T11614] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1862'. [ 248.650460][T11449] hsr_slave_0: entered promiscuous mode [ 248.674300][T11449] hsr_slave_1: entered promiscuous mode [ 248.696336][T11449] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 248.719788][T11449] Cannot create hsr debugfs directory [ 249.062491][T11627] netlink: 284 bytes leftover after parsing attributes in process `syz.1.1867'. [ 249.097054][ T5838] Bluetooth: hci4: command tx timeout [ 249.381009][T11629] team0: Device gtp0 is of different type [ 249.711596][T11652] Cannot find del_set index 5 as target [ 249.926698][T11662] netlink: 18 bytes leftover after parsing attributes in process `syz.1.1880'. [ 250.190370][T11449] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 250.223456][T11449] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 250.258969][T11449] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 250.288919][T11449] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 250.352614][T11684] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1886'. [ 250.619484][T11697] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1888'. [ 250.650962][T11449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.661377][T11697] netlink: zone id is out of range [ 250.666605][T11697] netlink: zone id is out of range [ 250.677301][T11697] netlink: zone id is out of range [ 250.683099][T11697] netlink: zone id is out of range [ 250.705778][T11697] netlink: zone id is out of range [ 250.736569][T11449] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.736869][T11697] netlink: zone id is out of range [ 250.804690][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.811918][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.821394][T11697] netlink: zone id is out of range [ 250.837619][T11697] netlink: zone id is out of range [ 250.843930][T11697] netlink: zone id is out of range [ 250.858959][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.866176][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.137792][T11711] syzkaller1: entered promiscuous mode [ 251.143523][T11711] syzkaller1: entered allmulticast mode [ 251.177061][ T5838] Bluetooth: hci4: command tx timeout [ 251.553189][T11449] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.662075][T11449] veth0_vlan: entered promiscuous mode [ 251.676584][T11449] veth1_vlan: entered promiscuous mode [ 251.729801][T11743] Cannot find add_set index 4 as target [ 251.795454][T11449] veth0_macvtap: entered promiscuous mode [ 251.864631][T11449] veth1_macvtap: entered promiscuous mode [ 251.970221][T11449] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 252.031196][T11449] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 252.067297][T11449] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.096514][T11449] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.123233][T11449] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.135990][T11449] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.358823][T11751] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 252.492634][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.505216][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.563523][T11755] netlink: 'syz.3.1908': attribute type 1 has an invalid length. [ 252.578671][T11755] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1908'. [ 252.599433][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.622241][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.662303][T11766] net_ratelimit: 6 callbacks suppressed [ 252.662322][T11766] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 252.759675][T11770] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1915'. [ 252.855353][T11770] xt_TCPMSS: Only works on TCP SYN packets [ 253.053512][T11782] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1919'. [ 253.070107][T11782] batadv0: entered promiscuous mode [ 253.088841][T11782] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 253.110507][T11782] batadv0: left promiscuous mode [ 253.238082][T11794] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1923'. [ 253.389094][T11801] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1926'. [ 253.425727][ T59] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.648290][ T59] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.842014][ T59] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.952630][ T59] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.134706][ T59] bridge_slave_1: left allmulticast mode [ 254.141653][ T59] bridge_slave_1: left promiscuous mode [ 254.148180][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.157671][ T59] bridge_slave_0: left allmulticast mode [ 254.163342][ T59] bridge_slave_0: left promiscuous mode [ 254.170464][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.542997][T11812] Cannot find add_set index 4 as target [ 254.934945][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 254.967397][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 255.018706][ T59] bond0 (unregistering): Released all slaves [ 255.188426][T11836] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1934'. [ 255.222988][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 255.232276][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 255.250003][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 255.267301][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 255.282297][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 255.297093][T11842] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1937'. [ 255.867347][T11867] Cannot find add_set index 4 as target [ 255.963536][T11869] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input19 [ 256.050676][T11874] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1945'. [ 256.144162][T11880] netlink: 288 bytes leftover after parsing attributes in process `syz.4.1943'. [ 256.203510][T11838] lo speed is unknown, defaulting to 1000 [ 256.219552][T11883] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1948'. [ 256.657646][T11896] netlink: 'syz.3.1953': attribute type 4 has an invalid length. [ 256.665561][T11896] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1953'. [ 256.768283][T11896] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 256.792668][T11900] SET target dimension over the limit! [ 256.945045][T11907] netlink: 'syz.3.1957': attribute type 2 has an invalid length. [ 256.961079][T11907] netlink: 'syz.3.1957': attribute type 1 has an invalid length. [ 257.144518][T11912] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1958'. [ 257.273484][T11917] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1960'. [ 257.348285][ T5838] Bluetooth: hci4: command tx timeout [ 257.412382][ T59] hsr_slave_0: left promiscuous mode [ 257.437913][ T59] hsr_slave_1: left promiscuous mode [ 257.453483][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 257.473742][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 257.484730][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.496587][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.545799][ T59] veth1_macvtap: left promiscuous mode [ 257.551849][ T59] veth0_macvtap: left promiscuous mode [ 257.558123][ T59] veth1_vlan: left promiscuous mode [ 257.563773][ T59] veth0_vlan: left promiscuous mode [ 258.166580][ T59] team0 (unregistering): Port device team_slave_1 removed [ 258.248675][ T59] team0 (unregistering): Port device team_slave_0 removed [ 258.698549][T11936] netlink: 284 bytes leftover after parsing attributes in process `syz.1.1967'. [ 258.941397][T11838] chnl_net:caif_netlink_parms(): no params data found [ 258.969451][T11960] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1972'. [ 259.005021][T11958] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1971'. [ 259.426959][ T5838] Bluetooth: hci4: command tx timeout [ 259.446432][T11838] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.468488][T11838] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.475809][T11838] bridge_slave_0: entered allmulticast mode [ 259.500537][T11838] bridge_slave_0: entered promiscuous mode [ 259.522005][T11980] netlink: 'syz.4.1977': attribute type 1 has an invalid length. [ 259.703281][T11838] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.732904][T11838] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.746127][T11988] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1980'. [ 259.774990][T11838] bridge_slave_1: entered allmulticast mode [ 259.795828][T11838] bridge_slave_1: entered promiscuous mode [ 259.996481][T11838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.013899][T11838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.213357][T11838] team0: Port device team_slave_0 added [ 260.258116][T11838] team0: Port device team_slave_1 added [ 260.391601][T11838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.416569][T11838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.502850][T11838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.539517][T11838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.562180][T11838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.631572][T11838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.806951][T12024] netlink: 'syz.1.1992': attribute type 10 has an invalid length. [ 260.882999][T12024] batman_adv: batadv0: Adding interface: team0 [ 260.889506][T12024] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.920495][T12024] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 260.952397][T11838] hsr_slave_0: entered promiscuous mode [ 260.983504][T11838] hsr_slave_1: entered promiscuous mode [ 260.993809][T11838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 261.013001][T11838] Cannot create hsr debugfs directory [ 261.094471][T12035] __nla_validate_parse: 1 callbacks suppressed [ 261.094490][T12035] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1995'. [ 261.134229][T12034] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1998'. [ 261.157671][T12034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1998'. [ 261.389978][T12051] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2001'. [ 261.495846][T12058] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2004'. [ 261.505307][ T5838] Bluetooth: hci4: command tx timeout [ 261.765661][T12071] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2008'. [ 261.809625][T12071] macvlan3: entered allmulticast mode [ 261.815102][T12071] bond0: entered allmulticast mode [ 261.835101][T12071] bond_slave_0: entered allmulticast mode [ 261.835153][T12075] Cannot find add_set index 4 as target [ 261.841283][T12071] bond_slave_1: entered allmulticast mode [ 261.857924][T12071] team0: entered allmulticast mode [ 261.877108][T12071] team_slave_0: entered allmulticast mode [ 261.883246][T12071] team_slave_1: entered allmulticast mode [ 261.909051][T12071] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 261.928202][T12071] bond0: left allmulticast mode [ 261.933147][T12071] bond_slave_0: left allmulticast mode [ 261.960727][T12071] bond_slave_1: left allmulticast mode [ 261.966300][T12071] team0: left allmulticast mode [ 261.987239][T12071] team_slave_0: left allmulticast mode [ 261.992955][T12071] team_slave_1: left allmulticast mode [ 262.102000][T12080] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2011'. [ 262.480390][T12109] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2019'. [ 262.484693][T11838] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 262.519886][T11838] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 262.573063][T11838] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 262.613760][T11838] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 262.984784][T11838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.024438][T12139] C: entered promiscuous mode [ 263.040080][T12139] netlink: 'syz.4.2028': attribute type 2 has an invalid length. [ 263.053716][T12139] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 263.183778][T11838] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.211902][T12146] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 263.215766][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.228094][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.257393][T12148] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2032'. [ 263.336103][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.343408][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.475346][T12157] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2035'. [ 263.578125][ T5838] Bluetooth: hci4: command tx timeout [ 264.095054][T11838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.221806][T11838] veth0_vlan: entered promiscuous mode [ 264.283364][T11838] veth1_vlan: entered promiscuous mode [ 264.550158][T12213] tipc: Started in network mode [ 264.560816][T12213] tipc: Node identity 080211, cluster identity 4711 [ 264.568506][T12213] tipc: Enabled bearer , priority 0 [ 264.609631][T11838] veth0_macvtap: entered promiscuous mode [ 264.632774][T12213] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 264.649329][T12213] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 264.676374][T11838] veth1_macvtap: entered promiscuous mode [ 264.791124][T11838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.864098][T11838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.906243][T11838] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.916003][T11838] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.930907][T11838] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.941713][T11838] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.145781][T12236] x_tables: unsorted underflow at hook 1 [ 265.190825][ T1150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.219774][ T1150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.319682][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.354129][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.473167][T12252] Cannot find add_set index 4 as target [ 265.688471][ T24] tipc: Node number set to 134353152 [ 266.030443][ T1097] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.253099][ T1097] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.427559][ T1097] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.713047][ T1097] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.918741][ T1097] bridge_slave_1: left allmulticast mode [ 266.924425][ T1097] bridge_slave_1: left promiscuous mode [ 266.930527][ T1097] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.940836][ T1097] bridge_slave_0: left allmulticast mode [ 266.946503][ T1097] bridge_slave_0: left promiscuous mode [ 266.952685][ T1097] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.372442][T12290] __nla_validate_parse: 7 callbacks suppressed [ 267.372461][T12290] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2078'. [ 267.397819][ T1097] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 267.443103][ T1097] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 267.488979][ T1097] bond0 (unregistering): Released all slaves [ 267.516496][T12297] netlink: 'syz.1.2080': attribute type 10 has an invalid length. [ 267.607339][T12297] team0: Device ipvlan1 failed to register rx_handler [ 267.888161][T12302] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2083'. [ 267.913291][T12302] netlink: 'syz.4.2083': attribute type 1 has an invalid length. [ 267.922137][T12305] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2084'. [ 268.015597][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 268.027643][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 268.036206][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 268.044496][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 268.052491][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 268.355875][T12319] netlink: 'syz.3.2085': attribute type 1 has an invalid length. [ 268.394637][T12312] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2085'. [ 269.034174][ T1097] hsr_slave_0: left promiscuous mode [ 269.078580][ T1097] hsr_slave_1: left promiscuous mode [ 269.098452][ T1097] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.105957][ T1097] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 269.154395][ T1097] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 269.173136][ T1097] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 269.286574][ T1097] veth1_macvtap: left promiscuous mode [ 269.298043][ T1097] veth0_macvtap: left promiscuous mode [ 269.305102][ T1097] veth1_vlan: left promiscuous mode [ 269.315145][ T1097] veth0_vlan: left promiscuous mode [ 269.456701][T12351] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2099'. [ 269.912865][ T1097] team0 (unregistering): Port device team_slave_1 removed [ 269.953355][ T1097] team0 (unregistering): Port device team_slave_0 removed [ 270.137189][ T5838] Bluetooth: hci4: command tx timeout [ 270.382368][T12309] lo speed is unknown, defaulting to 1000 [ 270.906929][T12392] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2111'. [ 270.960102][T12399] netlink: 'syz.3.2112': attribute type 1 has an invalid length. [ 271.163441][T12407] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2114'. [ 271.335841][T12407] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2114'. [ 271.902520][T12436] Cannot find add_set index 4 as target [ 271.944544][T12309] chnl_net:caif_netlink_parms(): no params data found [ 271.965047][T12438] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.2125'. [ 272.217207][ T5838] Bluetooth: hci4: command tx timeout [ 272.284431][T12453] xfrm0: entered allmulticast mode [ 272.353010][T12309] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.390289][T12309] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.398084][T12309] bridge_slave_0: entered allmulticast mode [ 272.408116][T12309] bridge_slave_0: entered promiscuous mode [ 272.422742][T12309] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.442640][T12309] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.462149][T12309] bridge_slave_1: entered allmulticast mode [ 272.480657][T12309] bridge_slave_1: entered promiscuous mode [ 272.557434][T12468] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2135'. [ 272.619308][T12309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.652343][T12468] gtp0: entered promiscuous mode [ 272.668863][T12468] gtp0: entered allmulticast mode [ 272.679576][T12309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.780632][T12309] team0: Port device team_slave_0 added [ 272.827271][T12473] x_tables: duplicate underflow at hook 2 [ 272.833031][T12309] team0: Port device team_slave_1 added [ 272.910283][T12309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.936345][T12309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.966059][T12309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.967298][T12480] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2139'. [ 273.000175][T12309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.019421][T12309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.025262][T12484] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2142'. [ 273.046622][T12309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.071077][T12484] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 273.081801][T12484] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 273.203790][T12489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2143'. [ 273.279329][T12495] netlink: 712 bytes leftover after parsing attributes in process `syz.0.2144'. [ 273.299504][T12309] hsr_slave_0: entered promiscuous mode [ 273.316522][T12309] hsr_slave_1: entered promiscuous mode [ 273.327857][T12309] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 273.346953][T12309] Cannot create hsr debugfs directory [ 273.352710][T12489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2143'. [ 274.301374][ T5838] Bluetooth: hci4: command tx timeout [ 274.316154][T12309] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 274.351594][T12309] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 274.373101][T12309] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 274.391398][T12309] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 274.446240][T12547] netlink: 'syz.4.2158': attribute type 2 has an invalid length. [ 274.497581][T12547] netlink: 'syz.4.2158': attribute type 8 has an invalid length. [ 274.521654][T12547] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2158'. [ 274.549824][T12552] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2158'. [ 274.635929][T12547] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2158'. [ 274.686194][T12309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.760956][T12309] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.812853][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.820110][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.856066][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.863397][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.877266][T12563] netlink: 3648 bytes leftover after parsing attributes in process `syz.4.2163'. [ 274.914088][T12565] sctp: [Deprecated]: syz.3.2162 (pid 12565) Use of struct sctp_assoc_value in delayed_ack socket option. [ 274.914088][T12565] Use struct sctp_sack_info instead [ 275.379362][T12580] netlink: 'syz.3.2168': attribute type 1 has an invalid length. [ 275.396939][T12580] netlink: 'syz.3.2168': attribute type 1 has an invalid length. [ 275.468722][T12309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.544366][T12582] tipc: Enabled bearer , priority 0 [ 275.620167][T12581] tipc: Disabling bearer [ 275.749535][T12309] veth0_vlan: entered promiscuous mode [ 275.792567][T12309] veth1_vlan: entered promiscuous mode [ 275.926108][T12309] veth0_macvtap: entered promiscuous mode [ 275.962320][T12309] veth1_macvtap: entered promiscuous mode [ 276.028445][T12309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 276.043443][T12309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 276.101126][T12309] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.133887][T12309] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.153224][T12309] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.177017][T12309] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.377529][ T5838] Bluetooth: hci4: command tx timeout [ 276.413243][ T1097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.415326][T12615] netlink: 'syz.3.2183': attribute type 24 has an invalid length. [ 276.441921][ T1097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.541726][T12619] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 276.559009][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.582363][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.585501][T12617] set match dimension is over the limit! [ 276.952428][T12639] netlink: 'syz.0.2193': attribute type 11 has an invalid length. [ 276.991043][T12639] netlink: 'syz.0.2193': attribute type 11 has an invalid length. [ 277.165612][T12653] netlink: zone id is out of range [ 277.171792][T12653] netlink: zone id is out of range [ 277.187385][T12653] netlink: get zone limit has 8 unknown bytes [ 277.441440][T12663] netlink: 'syz.3.2199': attribute type 1 has an invalid length. [ 277.473085][T12663] netlink: 'syz.3.2199': attribute type 11 has an invalid length. [ 277.561037][ T1150] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.730870][T12649] lo speed is unknown, defaulting to 1000 [ 277.778551][ T1150] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.918306][ T1150] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.992611][ T1150] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.296209][ T1150] bridge_slave_1: left allmulticast mode [ 278.319206][ T1150] bridge_slave_1: left promiscuous mode [ 278.325075][ T1150] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.371981][ T1150] bridge_slave_0: left allmulticast mode [ 278.385001][ T1150] bridge_slave_0: left promiscuous mode [ 278.394589][ T1150] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.789873][ T1150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 278.801429][ T1150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 278.813249][ T1150] bond0 (unregistering): Released all slaves [ 278.944710][T12674] xt_l2tp: missing protocol rule (udp|l2tpip) [ 278.957698][T12675] __nla_validate_parse: 15 callbacks suppressed [ 278.957716][T12675] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2201'. [ 279.196007][T12685] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2206'. [ 279.692592][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 279.710420][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 279.720621][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 279.745202][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 279.753431][T12709] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2213'. [ 279.762767][T12709] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2213'. [ 279.775469][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 279.864701][T12714] netlink: 'syz.0.2215': attribute type 10 has an invalid length. [ 279.878187][T12714] team0: Device ipvlan1 failed to register rx_handler [ 280.406679][T12732] netlink: zone id is out of range [ 280.412817][T12732] netlink: del zone limit has 4 unknown bytes [ 280.423322][T12732] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2220'. [ 280.503781][T12734] netlink: 'syz.1.2221': attribute type 2 has an invalid length. [ 280.511863][ T1150] hsr_slave_0: left promiscuous mode [ 280.522740][ T1150] hsr_slave_1: left promiscuous mode [ 280.544515][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 280.570963][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 280.625129][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 280.654144][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 280.716280][ T1150] veth1_macvtap: left promiscuous mode [ 280.737453][ T1150] veth0_macvtap: left promiscuous mode [ 280.750047][ T1150] veth1_vlan: left promiscuous mode [ 280.755621][ T1150] veth0_vlan: left promiscuous mode [ 280.812907][T12749] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma? [ 281.254834][ T1150] team0 (unregistering): Port device team_slave_1 removed [ 281.303742][ T1150] team0 (unregistering): Port device team_slave_0 removed [ 281.705884][T12740] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 281.736941][T12698] lo speed is unknown, defaulting to 1000 [ 281.823219][ T5838] Bluetooth: hci4: command tx timeout [ 282.012992][T12760] netlink: 'syz.4.2230': attribute type 39 has an invalid length. [ 282.028707][T12760] openvswitch: netlink: Duplicate or invalid key (type 0). [ 282.047279][T12760] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 282.478113][T12773] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2236'. [ 282.598292][T12775] netlink: 'syz.3.2237': attribute type 1 has an invalid length. [ 282.611830][T12775] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2237'. [ 282.662902][T12745] lo speed is unknown, defaulting to 1000 [ 282.804425][T12698] chnl_net:caif_netlink_parms(): no params data found [ 282.820189][T12787] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2239'. [ 282.976712][T12798] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2241'. [ 282.976995][T12797] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2241'. [ 283.042699][T12698] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.052846][T12698] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.064791][T12698] bridge_slave_0: entered allmulticast mode [ 283.076151][T12698] bridge_slave_0: entered promiscuous mode [ 283.086580][T12698] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.096464][T12698] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.108097][T12698] bridge_slave_1: entered allmulticast mode [ 283.121885][T12698] bridge_slave_1: entered promiscuous mode [ 283.287694][T12698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 283.357177][T12807] tipc: Enabled bearer , priority 10 [ 283.392012][T12698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 283.632242][T12698] team0: Port device team_slave_0 added [ 283.750057][T12698] team0: Port device team_slave_1 added [ 283.897990][ T5838] Bluetooth: hci4: command tx timeout [ 284.259321][T12698] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 284.277130][T12698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.344006][ T30] audit: type=1800 audit(1750365330.072:5): pid=12860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2254" name="memory.events" dev="tmpfs" ino=2636 res=0 errno=0 [ 284.347549][T12698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 284.419452][ T30] audit: type=1804 audit(1750365330.072:6): pid=12860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2254" name="/newroot/519/memory.events" dev="tmpfs" ino=2636 res=1 errno=0 [ 284.492455][T12698] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 284.519404][T12698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.563465][T12698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 284.774630][T12698] hsr_slave_0: entered promiscuous mode [ 284.789567][T12698] hsr_slave_1: entered promiscuous mode [ 284.796087][T12698] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 284.804457][T12698] Cannot create hsr debugfs directory [ 285.231226][T12894] __nla_validate_parse: 2 callbacks suppressed [ 285.231246][T12894] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2265'. [ 285.359418][T12907] netlink: 'syz.0.2267': attribute type 4 has an invalid length. [ 285.635399][T12698] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 285.698204][T12698] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 285.725919][T12698] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 285.766547][T12698] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 285.820278][T12926] netlink: 'syz.0.2273': attribute type 1 has an invalid length. [ 285.843580][T12926] netlink: 15474 bytes leftover after parsing attributes in process `syz.0.2273'. [ 285.978736][ T5838] Bluetooth: hci4: command tx timeout [ 286.074640][T12698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.090619][T12939] gretap0: left allmulticast mode [ 286.107227][T12939] gretap0: left promiscuous mode [ 286.113700][T12939] bridge0: port 3(gretap0) entered disabled state [ 286.134926][T12939] bridge_slave_1: left allmulticast mode [ 286.156578][T12939] bridge_slave_1: left promiscuous mode [ 286.184363][T12939] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.216303][T12939] bridge_slave_0: left allmulticast mode [ 286.236972][T12939] bridge_slave_0: left promiscuous mode [ 286.242940][T12939] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.504103][T12698] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.571441][ T990] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.578714][ T990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.600134][ T990] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.607379][ T990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.638262][T12960] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2280'. [ 286.940602][T12971] netlink: 'syz.3.2284': attribute type 10 has an invalid length. [ 286.958911][T12975] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2285'. [ 286.973329][T12971] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2284'. [ 287.008006][T12971] batadv0: entered promiscuous mode [ 287.013316][T12971] batadv0: entered allmulticast mode [ 287.045935][T12971] bridge0: port 3(batadv0) entered blocking state [ 287.058896][T12971] bridge0: port 3(batadv0) entered disabled state [ 287.160025][T12983] Cannot find add_set index 4 as target [ 287.220028][T12698] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 287.356366][ T7612] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 287.366396][ T7612] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 287.375606][T12698] veth0_vlan: entered promiscuous mode [ 287.408707][T12991] delete_channel: no stack [ 287.444694][T12698] veth1_vlan: entered promiscuous mode [ 287.526427][T12998] netlink: 'syz.4.2293': attribute type 21 has an invalid length. [ 287.541996][T12698] veth0_macvtap: entered promiscuous mode [ 287.563919][T12998] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 287.569234][T12698] veth1_macvtap: entered promiscuous mode [ 287.641420][T12698] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.692128][T12698] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.717593][T13004] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2296'. [ 287.733066][T13007] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 287.743725][T12698] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.766341][T12698] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.790880][T12698] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.811335][T13012] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2298'. [ 287.812936][T12698] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.042267][ T1150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.057763][ T5838] Bluetooth: hci4: command tx timeout [ 288.062149][T13018] Cannot find add_set index 4 as target [ 288.074138][ T1150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.133250][ T7612] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.142926][ T7612] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.273688][T13028] netlink: zone id is out of range [ 288.286683][T13028] netlink: del zone limit has 4 unknown bytes [ 288.806480][T13054] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2310'. [ 288.873682][T13057] Cannot find add_set index 4 as target [ 288.900738][ T990] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.962768][T13051] tipc: New replicast peer: 255.255.255.255 [ 288.979717][T13051] tipc: Enabled bearer , priority 10 [ 289.154367][ T990] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.431794][ T990] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.583032][ T990] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.702370][ T990] bridge_slave_1: left allmulticast mode [ 289.708124][ T990] bridge_slave_1: left promiscuous mode [ 289.713849][ T990] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.723343][ T990] bridge_slave_0: left allmulticast mode [ 289.729475][ T990] bridge_slave_0: left promiscuous mode [ 289.736534][ T990] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.091352][ T990] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 290.103897][ T990] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 290.115685][ T990] bond0 (unregistering): Released all slaves [ 290.313878][T13066] netlink: 'syz.3.2315': attribute type 21 has an invalid length. [ 290.324218][T13068] xt_hashlimit: size too large, truncated to 1048576 [ 290.335100][T13062] dvmrp0: entered allmulticast mode [ 290.354318][T13066] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2315'. [ 290.402412][T13067] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 291.075552][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 291.085341][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 291.100740][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 291.117907][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 291.133388][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 291.465034][T13108] IPVS: stopping master sync thread 6777 ... [ 291.513793][T13111] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2326'. [ 291.548276][T13115] Cannot find add_set index 4 as target [ 291.894062][T13131] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2329'. [ 292.103221][T13139] x_tables: duplicate underflow at hook 3 [ 292.256982][ T990] hsr_slave_0: left promiscuous mode [ 292.312518][ T990] hsr_slave_1: left promiscuous mode [ 292.335460][ T990] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 292.360728][ T990] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 292.384593][ T990] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 292.397132][ T990] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 292.450328][ T990] veth1_macvtap: left promiscuous mode [ 292.467165][ T990] veth0_macvtap: left promiscuous mode [ 292.476208][ T990] veth1_vlan: left promiscuous mode [ 292.507160][ T990] veth0_vlan: left promiscuous mode [ 292.761276][T13166] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2339'. [ 292.772041][T13166] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2339'. [ 292.781415][T13166] netlink: 'syz.4.2339': attribute type 12 has an invalid length. [ 292.795800][T13166] netlink: 'syz.4.2339': attribute type 11 has an invalid length. [ 293.072075][ T990] team0 (unregistering): Port device team_slave_1 removed [ 293.115827][ T990] team0 (unregistering): Port device team_slave_0 removed [ 293.182270][ T5838] Bluetooth: hci4: command tx timeout [ 293.536264][T13098] lo speed is unknown, defaulting to 1000 [ 293.550687][T13155] veth0: entered promiscuous mode [ 293.587829][T13157] veth0: left promiscuous mode [ 293.964267][T13182] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 294.191449][T13190] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2347'. [ 294.245065][T13190] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2347'. [ 294.361259][T13195] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 294.387268][T13195] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2348'. [ 294.814478][T13220] netlink: 'syz.1.2355': attribute type 10 has an invalid length. [ 294.844243][T13220] team0: Device ipvlan1 failed to register rx_handler [ 294.913125][T13098] chnl_net:caif_netlink_parms(): no params data found [ 295.186920][T13243] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2359'. [ 295.256936][ T5838] Bluetooth: hci4: command tx timeout [ 295.343638][T13098] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.372554][T13098] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.390426][T13098] bridge_slave_0: entered allmulticast mode [ 295.412965][T13098] bridge_slave_0: entered promiscuous mode [ 295.435639][T13098] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.443589][T13098] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.476033][T13098] bridge_slave_1: entered allmulticast mode [ 295.494712][T13098] bridge_slave_1: entered promiscuous mode [ 295.556482][ T92] IPVS: starting estimator thread 0... [ 295.671177][T13259] IPVS: using max 26 ests per chain, 62400 per kthread [ 295.703587][T13098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 295.732061][T13268] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2367'. [ 295.796166][T13098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 295.881535][T13274] pim6reg: entered allmulticast mode [ 295.962207][T13274] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2369'. [ 295.972153][T13274] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2369'. [ 296.060098][T13098] team0: Port device team_slave_0 added [ 296.084865][T13098] team0: Port device team_slave_1 added [ 296.161007][T13286] netlink: 'syz.3.2375': attribute type 1 has an invalid length. [ 296.200939][T13098] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 296.214601][T13098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.243636][T13098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 296.371595][T13286] 8021q: adding VLAN 0 to HW filter on device bond2 [ 296.382434][T13098] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 296.400212][T13098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.427220][T13098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 296.618813][T13098] hsr_slave_0: entered promiscuous mode [ 296.635748][T13098] hsr_slave_1: entered promiscuous mode [ 296.650768][T13098] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 296.662591][T13319] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2383'. [ 296.673924][T13098] Cannot create hsr debugfs directory [ 296.674050][T13318] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2383'. [ 296.756978][T13322] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2383'. [ 296.803047][T13318] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2383'. [ 296.840649][T13326] netlink: 'syz.0.2385': attribute type 4 has an invalid length. [ 296.851564][T13327] netlink: 'syz.0.2385': attribute type 4 has an invalid length. [ 296.913883][T13330] netlink: 'syz.3.2386': attribute type 4 has an invalid length. [ 296.922247][T13330] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2386'. [ 296.970745][T13328] netlink: 'syz.0.2385': attribute type 29 has an invalid length. [ 296.989820][T13330] : renamed from bond0 [ 297.142960][T13333] sctp: [Deprecated]: syz.0.2387 (pid 13333) Use of int in max_burst socket option. [ 297.142960][T13333] Use struct sctp_assoc_value instead [ 297.337789][ T5838] Bluetooth: hci4: command tx timeout [ 297.369045][T13344] vlan1: entered allmulticast mode [ 298.258510][T13377] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2403'. [ 298.429542][T13388] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2404'. [ 298.584585][T13098] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 298.618081][T13098] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 298.654915][T13098] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 298.667212][T13098] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 298.813819][T13413] netlink: 'syz.3.2413': attribute type 3 has an invalid length. [ 298.970076][T13098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.036205][T13098] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.116004][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.123236][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.182350][ T990] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.189655][ T990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.231362][T13429] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 299.354386][T13431] veth9: entered allmulticast mode [ 299.411501][T13434] netlink: 'syz.3.2419': attribute type 10 has an invalid length. [ 299.418245][ T5838] Bluetooth: hci4: command tx timeout [ 299.443875][T13434] team0: Device ipvlan1 failed to register rx_handler [ 299.498397][T13437] pim6reg: entered allmulticast mode [ 299.638499][T13445] netlink: 'syz.4.2422': attribute type 11 has an invalid length. [ 299.705177][T13098] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 299.819902][T13098] veth0_vlan: entered promiscuous mode [ 299.861674][T13098] veth1_vlan: entered promiscuous mode [ 299.960917][T13458] .: renamed from bond0 (while UP) [ 300.028666][T13098] veth0_macvtap: entered promiscuous mode [ 300.065196][T13098] veth1_macvtap: entered promiscuous mode [ 300.146000][T13098] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 300.191849][T13098] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 300.263149][T13098] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.303987][T13098] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.323817][T13098] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.343324][T13098] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.388862][T13479] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 300.688331][ T1150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.696246][ T1150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.811839][T13497] netlink: 'syz.1.2437': attribute type 12 has an invalid length. [ 300.844360][T13498] __nla_validate_parse: 4 callbacks suppressed [ 300.844382][T13498] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2437'. [ 300.883742][T13503] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2439'. [ 300.887801][ T1097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.909354][ T1097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.928238][T13503] dummy0: entered promiscuous mode [ 300.945152][T13498] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2437'. [ 300.964234][T13503] erspan0: entered promiscuous mode [ 300.988336][T13503] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 300.996068][T13503] Cannot create hsr debugfs directory [ 301.638763][T13541] team0: Device gtp1 is of different type [ 302.165972][ T990] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.626008][ T990] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.795900][ T990] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.853210][ T990] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.975409][ T990] bridge_slave_1: left allmulticast mode [ 302.981479][ T990] bridge_slave_1: left promiscuous mode [ 302.987490][ T990] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.996869][ T990] bridge_slave_0: left allmulticast mode [ 303.002546][ T990] bridge_slave_0: left promiscuous mode [ 303.008927][ T990] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.318404][ T990] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 303.329514][ T990] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 303.342452][ T990] bond0 (unregistering): Released all slaves [ 303.573935][T13557] xt_CT: You must specify a L4 protocol and not use inversions on it [ 303.617925][T13561] Cannot find add_set index 4 as target [ 304.502056][T13594] netlink: zone id is out of range [ 304.527823][T13594] netlink: del zone limit has 4 unknown bytes [ 304.535116][T13594] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2467'. [ 304.608885][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 304.610609][T13596] netlink: zone id is out of range [ 304.618656][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 304.631619][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 304.639889][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 304.648786][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 304.666095][ T990] hsr_slave_0: left promiscuous mode [ 304.675222][T13596] netlink: del zone limit has 4 unknown bytes [ 304.682960][ T990] hsr_slave_1: left promiscuous mode [ 304.692605][ T990] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 304.702281][ T990] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 304.711576][T13596] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2468'. [ 304.727958][ T990] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 304.735819][ T990] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 304.766981][ T990] veth1_macvtap: left promiscuous mode [ 304.773863][ T990] veth0_macvtap: left promiscuous mode [ 304.780123][ T990] veth1_vlan: left promiscuous mode [ 304.785518][ T990] veth0_vlan: left promiscuous mode [ 305.287762][ T990] team0 (unregistering): Port device team_slave_1 removed [ 305.337337][ T990] team0 (unregistering): Port device team_slave_0 removed [ 305.832818][T13610] lo: entered promiscuous mode [ 305.839215][T13610] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 306.445678][T13634] sctp: [Deprecated]: syz.0.2476 (pid 13634) Use of int in max_burst socket option deprecated. [ 306.445678][T13634] Use struct sctp_assoc_value instead [ 306.585612][T13644] x_tables: duplicate underflow at hook 1 [ 306.657901][T13598] lo speed is unknown, defaulting to 1000 [ 306.686238][T13646] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2481'. [ 306.707640][ T5843] Bluetooth: hci4: command tx timeout [ 307.382480][T13683] Cannot find add_set index 4 as target [ 307.673294][T13698] netlink: 'syz.0.2496': attribute type 27 has an invalid length. [ 307.685507][T13698] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2496'. [ 307.694751][T13698] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2496'. [ 307.774734][T13598] chnl_net:caif_netlink_parms(): no params data found [ 307.812874][T13701] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2499'. [ 307.949280][T13598] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.956707][T13598] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.964487][T13598] bridge_slave_0: entered allmulticast mode [ 307.972974][T13598] bridge_slave_0: entered promiscuous mode [ 308.001857][T13598] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.002370][T13703] netlink: 'syz.4.2499': attribute type 2 has an invalid length. [ 308.010025][T13598] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.024668][T13598] bridge_slave_1: entered allmulticast mode [ 308.032333][T13598] bridge_slave_1: entered promiscuous mode [ 308.101694][T13598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 308.118675][T13598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 308.179515][T13598] team0: Port device team_slave_0 added [ 308.194531][T13598] team0: Port device team_slave_1 added [ 308.313105][T13717] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 308.338107][T13598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 308.345259][T13598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.403934][T13598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 308.428255][T13598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 308.444592][T13598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.506606][T13724] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2506'. [ 308.537218][T13598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 308.742746][T13598] hsr_slave_0: entered promiscuous mode [ 308.759827][T13598] hsr_slave_1: entered promiscuous mode [ 308.769036][T13736] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2512'. [ 308.779133][T13598] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 308.787247][ T5843] Bluetooth: hci4: command tx timeout [ 308.793263][T13598] Cannot create hsr debugfs directory [ 310.683428][T13771] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2521'. [ 310.756444][T13775] netem: incorrect gi model size [ 310.766899][T13775] netem: change failed [ 310.857278][ T5843] Bluetooth: hci4: command tx timeout [ 311.142036][T13792] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2530'. [ 311.358978][T13804] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 311.377756][T13804] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 311.580891][T13598] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 311.604468][T13815] netlink: 13 bytes leftover after parsing attributes in process `syz.3.2536'. [ 311.634144][T13598] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 311.708070][T13598] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 311.747422][T13598] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 311.993599][T13807] tipc: Can't bind to reserved service type 0 [ 312.027783][T13598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.070156][T13598] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.080736][T13838] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2541'. [ 312.128874][ T1097] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.136206][ T1097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.205049][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.212308][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.463127][T13843] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2543'. [ 312.769893][T13598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 312.880226][T13856] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2544'. [ 312.914882][T13598] veth0_vlan: entered promiscuous mode [ 312.938281][ T5843] Bluetooth: hci4: command tx timeout [ 312.960135][T13598] veth1_vlan: entered promiscuous mode [ 313.174746][T13863] xt_hashlimit: max too large, truncated to 1048576 [ 313.204848][T13598] veth0_macvtap: entered promiscuous mode [ 313.226211][T13869] netlink: 'syz.1.2547': attribute type 1 has an invalid length. [ 313.244228][T13598] veth1_macvtap: entered promiscuous mode [ 313.413647][T13869] 8021q: adding VLAN 0 to HW filter on device bond2 [ 313.443630][T13871] ip6erspan0: entered promiscuous mode [ 313.459793][T13871] bond2: (slave ip6erspan0): making interface the new active one [ 313.470191][T13871] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 313.561232][T13886] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2552'. [ 313.652941][T13598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 313.748827][T13598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 313.790035][T13598] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.820469][T13598] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.838504][T13598] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.857139][T13598] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.055383][T13907] netlink: 'syz.4.2557': attribute type 10 has an invalid length. [ 314.085465][T13907] batman_adv: batadv0: Removing interface: team0 [ 314.448475][T13907] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.469122][T13907] bond0: (slave team0): Enslaving as an active interface with an up link [ 314.513694][T13914] netlink: 1044 bytes leftover after parsing attributes in process `syz.4.2557'. [ 314.581331][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.595155][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.701680][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.750090][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.758208][T13922] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2561'. [ 314.761491][T13924] netlink: 'syz.1.2562': attribute type 10 has an invalid length. [ 314.880196][T13931] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2564'. [ 315.249235][T13946] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2571'. [ 315.497241][T13957] netlink: 'syz.4.2575': attribute type 1 has an invalid length. [ 315.505041][T13957] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2575'. [ 315.543363][T13957] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2575'. [ 315.667401][ T59] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.833634][ T59] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.015537][ T59] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.093500][ T59] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.184601][ T59] bridge_slave_1: left allmulticast mode [ 316.190951][ T59] bridge_slave_1: left promiscuous mode [ 316.196693][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.206101][ T59] bridge_slave_0: left allmulticast mode [ 316.212163][ T59] bridge_slave_0: left promiscuous mode [ 316.218670][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.564460][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 316.576882][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 316.587412][ T59] bond0 (unregistering): Released all slaves [ 317.061232][ T59] hsr_slave_0: left promiscuous mode [ 317.070722][ T59] hsr_slave_1: left promiscuous mode [ 317.076631][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 317.084386][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 317.092671][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 317.112426][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 317.135560][ T59] veth1_macvtap: left promiscuous mode [ 317.141466][ T59] veth0_macvtap: left promiscuous mode [ 317.147258][ T59] veth1_vlan: left promiscuous mode [ 317.152608][ T59] veth0_vlan: left promiscuous mode [ 317.372436][T13976] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2582'. [ 317.656962][ T5843] Bluetooth: hci2: command 0x0406 tx timeout [ 317.846700][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 317.862816][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 317.872048][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 317.880894][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 317.900646][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 318.021848][ T59] team0 (unregistering): Port device team_slave_1 removed [ 318.063800][ T59] team0 (unregistering): Port device team_slave_0 removed [ 318.690439][T14003] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 318.770319][T14007] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2590'. [ 318.822462][T14012] nbd: must specify an index to disconnect [ 318.864406][T14007] macsec0: entered promiscuous mode [ 318.866869][T14009] xt_CT: No such helper "syz1" [ 318.954279][T14018] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2592'. [ 319.201814][T14025] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2594'. [ 319.358481][T13997] lo speed is unknown, defaulting to 1000 [ 319.638312][T14049] xt_l2tp: v2 sid > 0xffff: 262144 [ 319.939869][T14057] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2602'. [ 319.977095][ T5843] Bluetooth: hci4: command tx timeout [ 320.007239][T14062] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2604'. [ 320.276993][T14071] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2607'. [ 320.361193][T14078] openvswitch: netlink: IP tunnel dst address not specified [ 320.378027][T14080] netlink: 596 bytes leftover after parsing attributes in process `syz.1.2607'. [ 320.455133][T14083] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2610'. [ 320.543313][T13997] chnl_net:caif_netlink_parms(): no params data found [ 320.695480][T14088] netlink: 'syz.1.2612': attribute type 6 has an invalid length. [ 320.713933][T14093] IPVS: Unknown mcast interface: vcan0 [ 320.736626][T14093] netlink: zone id is out of range [ 320.754419][T14093] netlink: del zone limit has 4 unknown bytes [ 320.784029][T14093] netlink: 'syz.3.2614': attribute type 13 has an invalid length. [ 320.820435][T13997] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.830546][T13997] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.838470][T13997] bridge_slave_0: entered allmulticast mode [ 320.847265][T13997] bridge_slave_0: entered promiscuous mode [ 320.863064][T14098] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2614'. [ 320.879594][T13997] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.891438][T13997] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.899444][T13997] bridge_slave_1: entered allmulticast mode [ 320.908054][T13997] bridge_slave_1: entered promiscuous mode [ 320.916251][T14102] netlink: 'syz.0.2616': attribute type 23 has an invalid length. [ 321.078053][T13997] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 321.129186][T13997] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.319355][T13997] team0: Port device team_slave_0 added [ 321.420928][T13997] team0: Port device team_slave_1 added [ 321.462935][T14114] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 321.568263][T14114] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 321.668651][T14131] bridge3: entered promiscuous mode [ 321.678529][T14138] netlink: 'syz.4.2628': attribute type 1 has an invalid length. [ 321.689831][T14131] bridge3: entered allmulticast mode [ 321.762293][T13997] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.769702][T13997] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.802335][T13997] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.815585][T13997] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.829409][T13997] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.888076][T13997] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 322.057097][ T5838] Bluetooth: hci4: command tx timeout [ 322.273823][T13997] hsr_slave_0: entered promiscuous mode [ 322.308030][T13997] hsr_slave_1: entered promiscuous mode [ 322.318455][T13997] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 322.326105][T13997] Cannot create hsr debugfs directory [ 322.443294][T14172] __nla_validate_parse: 5 callbacks suppressed [ 322.443314][T14172] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2637'. [ 322.720772][T14183] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 322.736380][T14180] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2639'. [ 323.255152][T14201] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 323.307172][T14201] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 323.461542][T13997] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 323.469645][T14211] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2648'. [ 323.501052][T13997] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 323.529517][T13997] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 323.584474][T13997] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 323.944518][T13997] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.009413][T13997] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.026035][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.033323][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.080033][T14240] netlink: 'syz.1.2657': attribute type 1 has an invalid length. [ 324.095864][ T1097] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.103129][ T1097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.113757][T14240] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2657'. [ 324.129700][T14240] netlink: 'syz.1.2657': attribute type 1 has an invalid length. [ 324.138553][ T5838] Bluetooth: hci4: command tx timeout [ 324.146952][T14237] netlink: 4096 bytes leftover after parsing attributes in process `syz.4.2651'. [ 324.180902][T14242] netlink: 'syz.3.2658': attribute type 11 has an invalid length. [ 324.196665][T14237] openvswitch: netlink: Flow key attr not present in new flow. [ 324.215213][T14242] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2658'. [ 324.695874][T14262] tipc: Bearer : already 2 bearers with priority 10 [ 324.726886][T14262] tipc: Bearer : trying with adjusted priority [ 324.759061][T14262] tipc: Enabled bearer , priority 9 [ 324.976179][T13997] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.108372][T14284] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 325.278027][T14284] bond3: entered promiscuous mode [ 325.285794][T14291] netlink: 'syz.1.2672': attribute type 8 has an invalid length. [ 325.296962][T14284] bond3: entered allmulticast mode [ 325.331173][T14284] 8021q: adding VLAN 0 to HW filter on device bond3 [ 325.362102][T14291] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2672'. [ 325.555749][T14299] netlink: 'syz.0.2673': attribute type 10 has an invalid length. [ 325.803394][T14299] team0: Device ipvlan1 failed to register rx_handler [ 325.843408][T13997] veth0_vlan: entered promiscuous mode [ 325.939324][T14309] tipc: Enabling of bearer rejected, failed to enable media [ 326.048004][T13997] veth1_vlan: entered promiscuous mode [ 326.141971][T14327] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input20 [ 326.236887][ T5838] Bluetooth: hci4: command tx timeout [ 326.402525][T13997] veth0_macvtap: entered promiscuous mode [ 326.432125][T13997] veth1_macvtap: entered promiscuous mode [ 326.470247][T13997] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 326.495984][T13997] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.523294][T13997] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.574301][T14344] netlink: 'syz.4.2681': attribute type 4 has an invalid length. [ 326.582270][T13997] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.602247][T13997] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.621543][T13997] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.704801][T14352] netlink: 284 bytes leftover after parsing attributes in process `syz.1.2684'. [ 326.770017][T14355] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2683'. [ 326.996676][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.015380][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.132623][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.146348][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.143590][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.246498][T14375] lo speed is unknown, defaulting to 1000 [ 328.379539][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.492258][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.672473][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.887592][ T36] bridge_slave_1: left allmulticast mode [ 328.899164][ T36] bridge_slave_1: left promiscuous mode [ 328.904998][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.937186][ T36] bridge_slave_0: left allmulticast mode [ 328.944027][ T36] bridge_slave_0: left promiscuous mode [ 328.950152][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.357277][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 329.371868][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 329.382136][ T36] bond0 (unregistering): Released all slaves [ 329.929812][T14414] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 330.205078][ T36] hsr_slave_0: left promiscuous mode [ 330.226646][ T36] hsr_slave_1: left promiscuous mode [ 330.246394][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 330.282970][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 330.333744][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 330.377630][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 330.378549][T14431] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2705'. [ 330.473744][T14436] netlink: 'syz.1.2710': attribute type 178 has an invalid length. [ 330.489538][ T36] veth1_macvtap: left promiscuous mode [ 330.508128][ T36] veth0_macvtap: left promiscuous mode [ 330.525649][ T36] veth1_vlan: left promiscuous mode [ 330.546557][ T36] veth0_vlan: left promiscuous mode [ 330.688661][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 330.699160][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 330.707476][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 330.715923][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 330.725778][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 331.143333][ T36] team0 (unregistering): Port device team_slave_1 removed [ 331.186632][ T36] team0 (unregistering): Port device team_slave_0 removed [ 331.262785][ T36] Oops: general protection fault, probably for non-canonical address 0xdffffc001fffe000: 0000 [#1] SMP KASAN PTI [ 331.274726][ T36] KASAN: probably user-memory-access in range [0x00000000ffff0000-0x00000000ffff0007] [ 331.284292][ T36] CPU: 0 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted 6.16.0-rc1-syzkaller-00171-g16ef63acb784 #0 PREEMPT(full) [ 331.296375][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 331.306480][ T36] Workqueue: netns cleanup_net [ 331.311262][ T36] RIP: 0010:mld_clear_delrec+0x34a/0x5d0 [ 331.316917][ T36] Code: ff ff ff e8 e8 3c 41 01 89 c5 31 ff 89 c6 e8 2d 64 9b f7 85 ed 74 40 e8 e4 5f 9b f7 eb 05 e8 dd 5f 9b f7 4c 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 ff e8 37 d7 fe f7 4d 8b 27 49 8d 7f 30 [ 331.336586][ T36] RSP: 0018:ffffc90000ac7330 EFLAGS: 00010206 [ 331.342664][ T36] RAX: 000000001fffe000 RBX: ffff88802af38538 RCX: ffff888141ab1e00 [ 331.350650][ T36] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 331.358654][ T36] RBP: 0000000000000001 R08: ffffffff8fa106f7 R09: 1ffffffff1f420de [ 331.366637][ T36] R10: dffffc0000000000 R11: fffffbfff1f420df R12: ffff888055d3fc28 [ 331.374649][ T36] R13: dffffc0000000000 R14: ffff888055d3fc00 R15: 00000000ffff0000 [ 331.382653][ T36] FS: 0000000000000000(0000) GS:ffff888125c52000(0000) knlGS:0000000000000000 [ 331.391592][ T36] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 331.398183][ T36] CR2: 00007fbdfd4e5000 CR3: 000000004841a000 CR4: 00000000003526f0 [ 331.406173][ T36] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 331.414156][ T36] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 331.422151][ T36] Call Trace: [ 331.425440][ T36] [ 331.428388][ T36] ? ipv6_mc_down+0x36c/0x480 [ 331.433074][ T36] ipv6_mc_destroy_dev+0x45/0x5a0 [ 331.438106][ T36] ? addrconf_ifdown+0x1396/0x1880 [ 331.443225][ T36] addrconf_ifdown+0x139e/0x1880 [ 331.448173][ T36] ? tls_dev_event+0x717/0xec0 [ 331.452955][ T36] ? __pfx_addrconf_ifdown+0x10/0x10 [ 331.458276][ T36] addrconf_notify+0x1bc/0x1010 [ 331.463164][ T36] notifier_call_chain+0x1b3/0x3e0 [ 331.468308][ T36] unregister_netdevice_many_notify+0x15d8/0x2320 [ 331.474791][ T36] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 331.481569][ T36] ? unregister_netdevice_queue+0x1b3/0x380 [ 331.487474][ T36] ? batadv_meshif_destroy_netlink+0x1dd/0x270 [ 331.493635][ T36] default_device_exit_batch+0x819/0x890 [ 331.499298][ T36] ? __pfx___might_resched+0x10/0x10 [ 331.504609][ T36] ? __pfx_default_device_exit_batch+0x10/0x10 [ 331.510797][ T36] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 331.516264][ T36] ? net_generic+0x1e/0x240 [ 331.520789][ T36] ? __pfx_default_device_exit_batch+0x10/0x10 [ 331.526969][ T36] ops_undo_list+0x522/0x990 [ 331.531585][ T36] ? __pfx_ops_undo_list+0x10/0x10 [ 331.536716][ T36] cleanup_net+0x4c5/0x800 [ 331.541158][ T36] ? __pfx_cleanup_net+0x10/0x10 [ 331.546108][ T36] ? _raw_spin_unlock_irq+0x23/0x50 [ 331.551329][ T36] ? process_scheduled_works+0x9ef/0x17b0 [ 331.557065][ T36] ? process_scheduled_works+0x9ef/0x17b0 [ 331.562806][ T36] process_scheduled_works+0xae1/0x17b0 [ 331.568397][ T36] ? __pfx_process_scheduled_works+0x10/0x10 [ 331.574426][ T36] worker_thread+0x8a0/0xda0 [ 331.579034][ T36] kthread+0x70e/0x8a0 [ 331.583109][ T36] ? __pfx_worker_thread+0x10/0x10 [ 331.588236][ T36] ? __pfx_kthread+0x10/0x10 [ 331.592931][ T36] ? _raw_spin_unlock_irq+0x23/0x50 [ 331.598162][ T36] ? lockdep_hardirqs_on+0x9c/0x150 [ 331.603390][ T36] ? __pfx_kthread+0x10/0x10 [ 331.608016][ T36] ret_from_fork+0x3fc/0x770 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 331.612622][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 331.617761][ T36] ? __switch_to_asm+0x39/0x70 [ 331.622552][ T36] ? __switch_to_asm+0x33/0x70 [ 331.627331][ T36] ? __pfx_kthread+0x10/0x10 [ 331.631923][ T36] ret_from_fork_asm+0x1a/0x30 [ 331.636707][ T36] [ 331.639749][ T36] Modules linked in: [ 331.644609][ T36] ---[ end trace 0000000000000000 ]--- [ 331.654113][ T36] RIP: 0010:mld_clear_delrec+0x34a/0x5d0 [ 331.659861][ T36] Code: ff ff ff e8 e8 3c 41 01 89 c5 31 ff 89 c6 e8 2d 64 9b f7 85 ed 74 40 e8 e4 5f 9b f7 eb 05 e8 dd 5f 9b f7 4c 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 ff e8 37 d7 fe f7 4d 8b 27 49 8d 7f 30 [ 331.679544][ T36] RSP: 0018:ffffc90000ac7330 EFLAGS: 00010206 [ 331.685650][ T36] RAX: 000000001fffe000 RBX: ffff88802af38538 RCX: ffff888141ab1e00 [ 331.693709][ T36] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 331.733274][ T36] RBP: 0000000000000001 R08: ffffffff8fa106f7 R09: 1ffffffff1f420de [ 331.743251][ T36] R10: dffffc0000000000 R11: fffffbfff1f420df R12: ffff888055d3fc28 [ 331.754049][ T36] R13: dffffc0000000000 R14: ffff888055d3fc00 R15: 00000000ffff0000 [ 331.762546][ T36] FS: 0000000000000000(0000) GS:ffff888125d52000(0000) knlGS:0000000000000000 [ 331.790729][ T36] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 331.806814][ T36] CR2: 00007ffd9dfbaf7c CR3: 00000000765e4000 CR4: 00000000003526f0 [ 331.817211][ T36] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 331.825251][ T36] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 331.838767][ T36] Kernel panic - not syncing: Fatal exception [ 331.845206][ T36] Kernel Offset: disabled [ 331.849539][ T36] Rebooting in 86400 seconds..