last executing test programs: 1m13.658419731s ago: executing program 0 (id=497): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3000000010000108000029000000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000400699b000008001b"], 0x30}}, 0x0) 1m2.568494523s ago: executing program 0 (id=497): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3000000010000108000029000000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000400699b000008001b"], 0x30}}, 0x0) 50.526909442s ago: executing program 0 (id=497): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3000000010000108000029000000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000400699b000008001b"], 0x30}}, 0x0) 34.120951527s ago: executing program 0 (id=497): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3000000010000108000029000000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000400699b000008001b"], 0x30}}, 0x0) 22.29147203s ago: executing program 0 (id=497): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3000000010000108000029000000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000400699b000008001b"], 0x30}}, 0x0) 10.511457817s ago: executing program 0 (id=497): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3000000010000108000029000000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000400699b000008001b"], 0x30}}, 0x0) 3.010701481s ago: executing program 1 (id=1921): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x200000000000}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x241}, 0x1c) 2.633519724s ago: executing program 4 (id=1925): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$netlink(0x10, 0x3, 0xf) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013001118680907070000000f0000ff3f04000000170a001700000000040014001000030001332564aa58b9a64411f6bbf44dc48f57", 0xff4d}], 0x1) openat$cgroup_subtree(r0, &(0x7f00000001c0), 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x19, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0xffffff1f}, {0x85, 0x0, 0x0, 0x60}}, {{0x6, 0x0, 0x2}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2.552586084s ago: executing program 2 (id=1926): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x88500, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="500000000101010300000000000000000a0000000c00198008000200c6050000300002802c00018014000300fc01000000000000000000000000000014fff400fc0100"/80], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000040)={'dvmrp0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000000000000100000008000600e0000001050004000100000008000b0049f7a0c1"], 0x2c}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) 2.034338606s ago: executing program 4 (id=1927): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000000)={0x3, 0x0, @remote}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x6, [@func={0x4, 0x0, 0x0, 0xc, 0x4}, @restrict, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x1}]}, @func_proto]}, {0x0, [0x0, 0x0, 0x0, 0x3a6f5491e0ad3b4f]}}, 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r2 = socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)=@file={0x1, './cgroup/../file0/file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x1d, &(0x7f0000000380), 0x8) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, &(0x7f0000000040)={0x59, 0x9, 0x4}, 0x10) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x304}, "5d4b94aac245ae74", "21cb70af1a8d3978ee04ab7e0000000000000000000000000002000300", "b65dab43", "ec11ffff7200"}, 0x38) ioctl$int_in(r0, 0x5452, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}]}], {0x14}}, 0x90}}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000240)={0x0, 0xf0ffffff, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 2.031532188s ago: executing program 1 (id=1928): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002c40)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000020000000c0000000000000002"], 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) r0 = socket$caif_stream(0x25, 0x1, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x25, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x4, 0xffff}}}, 0x24}}, 0x0) sendmsg$inet(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000080)="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", 0xfb}, {&(0x7f0000000180)="f9cc2dc748433f8b0ee9fb5d34d01c01698bb799c7800503393d870c8e5182eb0d844e481ae18d60f35be729d5130580b7e649cd830b2abaa4f40844639cb505a9b0b3a9c8eabd8efcc6ee8d50fcb8a074ad6a4cea4f75e857afcd3f18758c0942bac96be2977c9d9f258759717af3440ab78bc2b317", 0x76}, {&(0x7f0000000200)="9cf7e75a6523481667b1e13a30d11c6759a20838aafaddd80ee044d7924000d1ae19260090e1921d3203e0e3cc45974e0cb8a94a9443290f4d07f8249580b056a3e473a4d39e12a847fd13b6c38b37970bd055c8c56f879900b49b57b644b9328a41aef7b0ccbb0ab78f36fb717f67a07ccfaae62e7dd21c1a3a", 0x7a}, {&(0x7f0000000280)="3246b6a70c07be932187752b6b22715bf7484a5fa42328c7b915f767004a4061c82f095d4d4f259361d7503dbfb36959d1af205cdee7e1b2e8ae1913625981a40bf650c6b71d6d899553d9af6631835a66761a83eeffb703df2583ad48cc3ce2c643f590202446e742329b3537ad187291b3146055758a392d8d4b87197f256359686ded7a1a713c2ef47193ac20e8d80eeb532a21b556b9509fc1345c552082b2d29bda8f1af1", 0xa7}, {&(0x7f0000000000)="47d9cf5e129ebb01cf6b0674c56189aadeca5976f77c", 0x16}, {&(0x7f0000000340)="dce8f5b716b80840dc9323b0cf57382b38540531ae059959b7ffce22d6a5fb3dbe34175d17caabec1fd0", 0x2a}, {&(0x7f0000000380)="db5440b3155b0135edf052e7db974d8b43c5472d91dc9bbc50626c91741ff39085da12a2aceba3f7180a2cf549cdfdd80c6f63c0d776d09c6da4040d610078f4d3dd88561474908a9acee1f2d66dc1b7bfddb87e568445e30dc99b72e332d40f3772dab5a6b140f06536edc408f7a39dad58d0e54f4efba77ad9f1b17491107c6ed52df1ed55f463e9abbe53cffe2d1e75cbf09c6de3c70c253b129acf3460b2c34dc454164f2e76bde6dbba61302c1392b3e05c6e84510bbef94f74de243fde10ae988a67e016a91cb9c4b125b9ad878713b19dab1fe9526bcc64a7353b", 0xde}, {&(0x7f0000000480)="c286b2365a70aa5ac2bfcb9f473b8bc0d1d4231faf6a54f61b", 0x19}, {&(0x7f00000004c0)="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", 0x1000}, {&(0x7f00000014c0)="8b05e3a6b680edba30c020cb34bbdc89c9bb7589f319e7", 0x17}], 0xa, &(0x7f00000015c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xff}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x1c, 0xd8, 0x1, 0x4, [{@multicast2, 0xa}, {@multicast2, 0x1}, {@rand_addr=0x64010101, 0x4}]}]}}}, @ip_retopts={{0x4c, 0x0, 0x7, {[@ssrr={0x89, 0xb, 0x52, [@dev={0xac, 0x14, 0x14, 0x18}, @broadcast]}, @timestamp_prespec={0x44, 0x4, 0xec, 0x3, 0x6}, @ssrr={0x89, 0x23, 0xb5, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @loopback, @remote, @broadcast, @empty, @rand_addr=0x64010102, @loopback]}, @generic={0x88, 0x3, 'i'}, @noop, @rr={0x7, 0x3, 0x6d}]}}}, @ip_retopts={{0x74, 0x0, 0x7, {[@rr={0x7, 0x1b, 0x3a, [@broadcast, @broadcast, @empty, @dev={0xac, 0x14, 0x14, 0x3b}, @dev={0xac, 0x14, 0x14, 0x25}, @multicast2]}, @timestamp_addr={0x44, 0x1c, 0x2f, 0x1, 0x4, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@remote, 0xa8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}]}, @lsrr={0x83, 0x23, 0xe1, [@multicast1, @broadcast, @rand_addr=0x64010102, @multicast1, @empty, @empty, @multicast1, @dev={0xac, 0x14, 0x14, 0xe}]}, @generic={0x94, 0x8, "9e4cc913364a"}, @end, @noop]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @dev={0xac, 0x14, 0x14, 0x35}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x148}, 0x4004000) 2.016120235s ago: executing program 2 (id=1929): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x880, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e2", 0xd6}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d83216", 0xe5}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5fc1e4f82b72871a8d4", 0x9f}, {&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e899723b33735bbec3e1429117362acc4139fc3565f183bd5568f47f4bc416adb360fdd9c497c2ad2ffe1ad738f4c073f1378d2b455e61844076a4a97ac1e13e2fb300ae69d55c501f96dcc39bf7ed835cc866f0fbd8e936e8374a484f111919dc610e0a36a0ee3df2ab1dc34cea42a429", 0xe6}], 0x4}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="acc870bde54caaeacb0000108cef4fa7bf44702b284b2e80cb32d33a86853c8c28797cd14c72c87f849f6ccbf3198d11a0b1ef000000000200000088e0e022b04dbd50d36f3c028c27ba00"/85, 0x55}, {&(0x7f0000000e80)="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", 0x135}], 0x2}}], 0x2, 0xc0) (async) recvfrom$inet(r0, &(0x7f0000000fc0)=""/4096, 0x1000, 0x20, 0x0, 0x0) (async) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 64) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) (async) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) 1.818338607s ago: executing program 1 (id=1931): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x79, 0x11, 0xc8}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) syz_emit_ethernet(0x201, &(0x7f0000000100)={@remote, @local, @val={@void, {0x8100, 0x2, 0x0, 0x4}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d15750", 0x1c7, 0x3a, 0x1, @private2, @private2, {[@routing={0x16, 0x12, 0x1, 0x1, 0x0, [@loopback, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0xc}, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local]}, @dstopts={0xb7, 0x1, '\x00', [@pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @loopback, @local, [{0x2, 0x1d, "0246871b0969bba55c95eb626deb9a5e292fba4f1dd30e58cb33cd01dc32508a0d1c6049983a9bf70353acf717c71cc9578a658ba8d9504599f634874bc45e071f98e8cf90f87219851f0bfa279b9814bfb27091fafcad77505854466aae811d4fdc3ed633b5dee1888debfa18597f6706a85f6d4bdc07111936033ff57ecb702b47574e873ac9954abd69a07d81f0e00b9829478218d75c52c1c28c057bceb481bec1f12806ee80f795906820b3d9e20225f34e9a513dfa81924cff58ac00c93dfd4c373b83f76231903953c12b805cd0edffefa8294507f94fb848daf461414ade0e57cfd96207b7274e4c15"}]}}}}}}, 0x0) 1.738238599s ago: executing program 4 (id=1933): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00'}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0x1, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x8040}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}]}}}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x1}]}, 0x40}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x10, 0x1, 'CONNSECMARK\x00'}, @NFTA_TARGET_INFO={0x5, 0x3, "ef"}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x4}]}], {0x14}}, 0x90}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x20040090}, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r5, 0x0, 0x30, &(0x7f00000005c0)="24c953b63aa7367371e40e2f77289af6f77255af4579998d8084439a4f01d08744af804f5c577341527f9016351ca51aca6dc3ee89d01acb5ec2d9aebccf1c787c182c518cf2660d8734193dfadd1bad2f206a9faf061c1bd30e8d728f53bd6c7e2887271ba52e2882753ab7b87d5b45bd5cc93b7cb3b84ad1c5730cfdfbddd4865ec1ef316d70a383eb6da0a7144e94cd", 0x91) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="620ac4ff0000000071108d000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket(0x21, 0x80000, 0x0) 1.729489684s ago: executing program 3 (id=1934): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r1, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x40, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x18, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @local}}}]}, @CTA_EXPECT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000280)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8082002}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, r2, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040010}, 0x4001) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010000000000000000000f"], 0x1c}, 0x1, 0x0, 0x0, 0x4004040}, 0x10) 1.596855858s ago: executing program 1 (id=1935): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e23, 0x4e23}}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="8401000010"], 0x184}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) 1.418456498s ago: executing program 4 (id=1936): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x870bd2d, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x5}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x4000000, 0x0, 0x1ff, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x6}}}}]}]}, 0x70}}, 0x20048000) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000040700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) 1.306088774s ago: executing program 3 (id=1937): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='netfs_rreq_ref\x00', r1, 0x0, 0x9}, 0x18) (async) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000440)=@generic={&(0x7f00000001c0)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@map=0x1, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f0000000480)="5dcb7f953d19c50547185426419e5383", &(0x7f00000004c0)=@buf="9f86397db7", 0x1}, 0x20) (async, rerun: 64) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) (rerun: 64) close(r4) (async) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e81f782db44fd56170d12a0b9b545c7", 0x18}], 0x1}, 0x0) (async) sendmsg$key(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0x10, 0x0, 0x9, 0xb, 0x0, 0x70bd2c, 0x25dfdbfd, [@sadb_spirange={0x2, 0x10, 0x4d6, 0x4d5}, @sadb_address={0x5, 0x17, 0x1e03837c5018ce57, 0x100, 0x0, @in6={0xa, 0x4e24, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}}, @sadb_sa={0x2, 0x1, 0x4d3, 0x9, 0x4, 0xf, 0x2, 0x60000000}]}, 0x58}}, 0x4880) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x2c4, 0x16, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HOOK={0xec, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bridge_slave_0\x00'}, {0x14, 0x1, 'gre0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pimreg1\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'bridge0\x00'}, {0x14, 0x1, 'veth1_vlan\x00'}, {0x14, 0x1, 'veth1_to_batadv\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}]}, @NFTA_FLOWTABLE_HOOK={0xd8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x80}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x0, 0x2, 0x1, 0x0, 0xc36f}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14}, {0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}]}]}, @NFTA_FLOWTABLE_HOOK={0xd8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv_slave_1\x00'}, {0x14, 0x1, 'syz_tun\x00'}, {0x14, 0x1, 'vcan0\x00'}, {0x14}, {0x14, 0x1, 'team_slave_0\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'geneve0\x00'}, {0x14, 0x1, 'netpci0\x00'}, {0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}]}]}]}], {0x14}}, 0x2ec}}, 0x0) 1.209919336s ago: executing program 1 (id=1938): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x200000000000}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x600}, 0x1c) 1.024952452s ago: executing program 3 (id=1939): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x140b, 0x400, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x4}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x844}, 0x200440c4) r1 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000140)=""/104, &(0x7f00000001c0)=0x68) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, 0x0, 0x9, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xf}, @NFCTH_TUPLE={0x44, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x2}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x20000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_GET(r3, &(0x7f0000000380)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x800}, 0x40802) r4 = socket$vsock_stream(0x28, 0x1, 0x0) ppoll(&(0x7f00000003c0)=[{r2, 0x40a}, {r3, 0x12}, {r1, 0x2c6}, {r1, 0x258a}, {r1, 0xc018}, {r4, 0x100}], 0x6, &(0x7f0000000400)={0x77359400}, &(0x7f0000000440)={[0x8]}, 0x8) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)=@o_path={&(0x7f0000000480)='./file0\x00', 0x0, 0x8, r4}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000008c0)={'wg1\x00', 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{0x1, 0xffffffffffffffff}, &(0x7f0000000980), &(0x7f00000009c0)}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0x1b, 0x2, 0x6, 0x4, 0x0, 0xffffffffffffffff, 0xfffffe01, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x4, 0x0, @void, @value, @void, @value}, 0x50) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x18, 0xb, 0x9, 0x9, 0x408, 0x1, 0x1f6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, @void, @value, @void, @value}, 0x50) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x11, 0x22, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x15}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4ee}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffff9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x10, 0xa5, &(0x7f0000000800)=""/165, 0x40f00, 0x48, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000940)={0x5, 0x7, 0x3, 0x1}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000b40)=[r9, r10, r11], &(0x7f0000000b80)=[{0x5, 0x2, 0x2, 0x1}, {0x1, 0x5, 0x7, 0x5}, {0x5, 0x2, 0x9, 0xc}, {0x5, 0x2, 0xd, 0x3}, {0x1, 0x2, 0xa, 0x2}, {0x1, 0x3, 0xe, 0x2}, {0x2, 0x3, 0x9, 0x4}, {0x4, 0xffffff01, 0x2, 0xc}, {0x1, 0x3, 0x3, 0xb}], 0x10, 0x80000000, @void, @value}, 0x94) listen(r1, 0xdb9) r13 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000d40), r3) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000ec0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000d80)={0xf0, r13, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5c}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xff81}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x7c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x34}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5a}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_virt_wifi\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}]}, 0xf0}, 0x1, 0x0, 0x0, 0x800}, 0x0) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000f00), 0x4000, 0x0) ioctl$TUNGETVNETLE(r14, 0x800454dd, &(0x7f0000000f40)) ioctl$F2FS_IOC_MOVE_RANGE(r9, 0xc020f509, &(0x7f0000000f80)={r5, 0x6, 0x5, 0x4}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r15, 0x89f3, &(0x7f0000001000)={'syztnl2\x00', &(0x7f0000000fc0)={'tunl0\x00', r8, 0x80, 0x20, 0x8, 0x7, {{0x6, 0x4, 0x0, 0x1, 0x18, 0x64, 0x0, 0x7, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, {[@end]}}}}}) ioctl$PPPIOCSMRRU(r15, 0x4004743b, &(0x7f0000001040)=0x7f) getsockopt$EBT_SO_GET_ENTRIES(r15, 0x0, 0x81, &(0x7f0000001140)={'filter\x00', 0x0, 0x3, 0x62, [0x1000, 0x4, 0x7dd, 0x5, 0x8000, 0x6], 0x3, &(0x7f0000001080)=[{}, {}, {}], &(0x7f00000010c0)=""/98}, &(0x7f00000011c0)=0x78) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r12, 0x80047210, &(0x7f0000001200)) syz_emit_ethernet(0x431, &(0x7f0000001240)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @remote, @val={@val={0x88a8, 0x1, 0x1}, {0x8100, 0x0, 0x1}}, {@ipv6={0x86dd, @tipc_packet={0x4, 0x6, "c01e77", 0x3f3, 0x6, 0xff, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[@srh={0x16, 0x8, 0x4, 0x4, 0x9, 0x10, 0x5, [@empty, @mcast1, @private0, @rand_addr=' \x01\x00']}, @routing={0x3a, 0x4, 0x1, 0x7, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @local]}, @fragment={0x2b, 0x0, 0x1, 0x1, 0x0, 0x6, 0x67}, @srh={0x11, 0xa, 0x4, 0x5, 0xf, 0x40, 0x3, [@dev={0xfe, 0x80, '\x00', 0x31}, @remote, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty]}, @hopopts={0x2c, 0x7, '\x00', [@calipso={0x7, 0x10, {0x3, 0x2, 0x2, 0x5, [0x2]}}, @enc_lim={0x4, 0x1, 0x2}, @enc_lim={0x4, 0x1, 0x8b}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x2, [0x0, 0x0]}, @enc_lim={0x4, 0x1, 0xe}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x7f}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x6}]}, @fragment={0x2, 0x0, 0x8, 0x0, 0x0, 0x6, 0x68}, @dstopts={0x73, 0x30, '\x00', [@generic={0x6, 0x60, "00ca7a0511d621971a4194af35df0ee88953f79b1d1f0cad4cb72a7654d94a5b424c02fa31a732cd9665df5746bbd04cba3519f2c391add296de01ee8c4c3601f2c4bc66c35e66797dd5ad9742374e20d7aab50d2352233831bdd7e19b5be7b8"}, @ra={0x5, 0x2, 0x94}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x42}}, @hao={0xc9, 0x10, @empty}, @generic={0x8, 0xbb, "920da14d6c0f8974f758bd76acf5db435f2e2526146417cbee4640ca315e606cc0a1d7b04c5f3ca8e6b4500f1c7c21f7284bcd5fd242fcf533e676ef211afc52b485b8ae79e4295b9b495dccdc36adca2cd7f6d3b02ae422969fae54ad7da55cbdcce871d9c6022c5e2a2a6a16de3ac63472140994b506e05ede8aa73c099a72dacb0ad50b5b85e7a604128a90944c466e3edc678e76facab82aa817d07c19644b063de43fc420b6ec1c44c3b7c12bf05c8cfb9e61de6623e25aa5"}, @padn={0x1, 0x1, [0x0]}, @calipso={0x7, 0x28, {0x0, 0x8, 0x9, 0x5, [0x3, 0x10, 0xa91, 0x4]}}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x200}]}, @dstopts={0xff, 0x6, '\x00', [@pad1, @calipso={0x7, 0x10, {0x1, 0x2, 0x1, 0xb, [0x1]}}, @pad1, @pad1, @enc_lim={0x4, 0x1, 0xfc}, @padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0x1, [0x0]}, @pad1, @enc_lim={0x4, 0x1, 0x85}, @jumbo={0xc2, 0x4, 0x800}]}, @fragment={0x2f, 0x0, 0x0, 0x1, 0x0, 0x8, 0x64}, @dstopts={0x62, 0x17, '\x00', [@enc_lim={0x4, 0x1, 0x1}, @generic={0x7, 0x49, "fd246332ac122d4e1fb38a4b5a72378ae241b890392b50a221de04cecafb735c49899cce4d2ef399133c987e5eed49f30543194cb9fd7326ba348f7170bdd2638f09da4c087efc6de8"}, @calipso={0x7, 0x30, {0x2, 0xa, 0xff, 0xf801, [0xffff, 0x3, 0xfffffffffffffff0, 0xa, 0x6]}}, @generic={0x2, 0x3b, "df49aa6995216913afcdea32c349a7764704ad6b78fc9d9101dd34e2850566ed18117d661455265b65017c948066a5fed634599e1f10d0dc03ea0f"}]}], @payload_mcast={{{{{{0x33, 0x0, 0x1, 0x1, 0x1, 0xb, 0x2, 0x2, 0x7, 0x0, 0x1, 0xb, 0x4, 0x1, 0x8, 0x3ff, 0x3, 0x4e23, 0x4e23}, 0x2}, 0x1, 0x3}}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, &(0x7f0000001680)={0x0, 0x2, [0xb9d, 0x4dd, 0xce0, 0xa60]}) 909.970502ms ago: executing program 3 (id=1940): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x9e) (fail_nth: 8) 876.197661ms ago: executing program 4 (id=1941): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000001c0)=0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffe83) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r7, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r4], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r3) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x148100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x24, r8, 0x100, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0xc005) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000c80)={{r0}, r1, 0x4, @unused=[0x3, 0xfffffffffffffffd, 0x9, 0x401], @devid}) (async) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b40)={0x34, r9, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004004}, 0x20000000) (async) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xc0, r9, 0x400, 0x70bd29, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0xc0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r10) sendmsg$NLBL_CIPSOV4_C_ADD(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x40, r11, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x40}}, 0x0) 713.758551ms ago: executing program 2 (id=1942): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x100, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a0326fbd3bb08e7b57f51a3cdb56647aef3005f8c3488612"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a300106b648db733501d10c8ca0281e20868bb4dcde6805e"}], @NL80211_ATTR_4ADDR={0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x8c0) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r1, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xa, 0x6c}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x2}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x583}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x92}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x40008) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DISASSOCIATE(r3, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, r1, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x6, 0x34, @random="c50c"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_SSID={0x13, 0x34, @random="2c367b3922b2d1c5b25fd1cda651cb"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4c040}, 0x800) (async) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x84, r4, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa3}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x84}, 0x1, 0x0, 0x0, 0x8000}, 0x4044004) (async) r5 = socket(0xa, 0x5, 0x1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000680)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl2\x00', 0x0, 0x4, 0x7, 0x5, 0x9fb1, 0xa, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x20}, 0x40, 0x1, 0xa, 0x3}}) sendmsg$nl_route_sched(r5, &(0x7f0000000780)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)=@newtfilter={0x6c, 0x2c, 0x1, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xfff7}, {0xb, 0xe}, {0xc, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x8}}, @filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_DST_PORT_MASK={0x6}, @TCA_FLOWER_KEY_CVLAN_ETH_TYPE={0x6, 0x4f, 0x8100}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_TTL={0x5, 0x2, 0x80}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TTL={0x5, 0x2, 0x3}]}}, @TCA_FLOWER_KEY_TCP_SRC_MASK={0x6}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000800), r3) sendmsg$DEVLINK_CMD_RATE_DEL(r5, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, r7, 0x800, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r0) sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, r8, 0x400, 0x70bd2d, 0x8000, {{}, {@void, @val={0xc, 0x99, {0x8, 0x18}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040040}, 0x40) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000a80), r3) sendmsg$IPVS_CMD_DEL_DAEMON(r3, &(0x7f0000000c00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0xd4, r9, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x10}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x3}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7fff}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, '\x00', 0x2b}}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x64dc}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x100}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) (async) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x28, r1, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x1}, @void, @val={0xc, 0x99, {0x200, 0x54}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24001081}, 0x4800) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000d80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r3, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x3c, r8, 0x80c, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x11}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3c}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x17}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x37}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40081}, 0x1) (async) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x68, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfffffff9}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x20000859) sendmsg$IPSET_CMD_PROTOCOL(r5, &(0x7f0000001080)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x24, 0x1, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x240408a4}, 0x4004001) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000010c0), r0) (async, rerun: 64) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), r0) (rerun: 64) sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000001200)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x40, r11, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x5, 0x17}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x10}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000090}, 0x1) (async) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000002, 0x100010, r3, 0xa7655000) (async) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001280), r3) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000013c0)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001380)={&(0x7f00000012c0)={0x98, r12, 0x200, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x40}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfbff}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffff8f7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x86b1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x100}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x10}, 0x40) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f00000016c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001680)={&(0x7f00000014c0)={0x1b8, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x4}}}}, [@NL80211_ATTR_IE={0x181, 0x2a, [@fast_bss_trans={0x37, 0x7f, {0x5, 0x2, "40dbb84d64a560223af2a20779425343", "c61f0cf6cad12f2a391122c1c6209f267dad87d80d75f7aae1b817d6ee7f4fdc", "a3b9b29ec6bcbdfe5767d58980dd1b2aca26ad3cabc194c8e93e65d252651049", [{0x1, 0x13, "c10b09b22b0c3886fde90ce3f4cc9df954834b"}, {0x1, 0x16, "20ca048d40273f7768f799cee7c2cce78d66e4bf277a"}]}}, @link_id={0x65, 0x12, {@from_mac=@broadcast, @device_b, @broadcast}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x1, 0xb8, 0x7}}, @channel_switch={0x25, 0x3, {0x0, 0x2, 0x7}}, @chsw_timing={0x68, 0x4, {0xb, 0xa4f4}}, @channel_switch={0x25, 0x3, {0x0, 0x78}}, @mic={0x8c, 0x10, {0xce9, "5b9250d22ab7", @short="e03c0917b0bbb0d9"}}, @random_vendor={0xdd, 0x97, "ea62626860de3f4f02e10410f1bef95f51fdebf25f18b17633a2d221be65c0a09c85a9eb3a15c80b3646a8cc83dadea1fc48656cbca941006bae46c3d00051b9f38f7c5059b291305616163c11dc13908c4a9e7d5d77f35606dc34dbb012ad164b946b0ed9cc1b9d4521286a81b5843c3595b01a80b92cce85e962d7b491a3d2e689840203b20c2edad8137a7998597b9317f8c76db010"}, @prep={0x83, 0x25, {{0x0, 0x1}, 0xd3, 0x4, @device_a, 0x7, @value=@broadcast, 0xd2db5a2, 0x2, @device_b, 0x40}}]}, @NL80211_ATTR_MAC={0xa}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x4001}, 0x802) 695.632256ms ago: executing program 4 (id=1943): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x114, 0x13, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x1000}, [@NFTA_OBJ_TYPE={0x5, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0x0, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0x0, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_USERDATA={0x0, 0x8, "54bd8475847613b96866aac11ef67ce5c604e9b486dacd1487ccd6ff954be261c80d86299998d78ed06e885982920c8849f210ea24defc7c9bb40bbe5677373ed590aefa45e5dba74a7da61814bb907f06c2f0c43d0bf745d6e580767157ff"}, @NFTA_OBJ_TABLE={0xa, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}, 0x114}}, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000000)=0x4, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000500)={0xbc, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x40}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xbab}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xbf}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xda7c}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}, @TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x29}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4000000}, 0x14) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f00000052c0)={0x0, @default, @netrom={'nr', 0x0}, 0x743, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x10, 0x1, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_inet_SIOCGIFBRDADDR(r5, 0x8919, &(0x7f0000000040)={'dummy0\x00', {0x2, 0x0, @multicast2}}) ioctl$F2FS_IOC_COMPRESS_FILE(r0, 0xf518, 0x0) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="180600000000010000000000000000001892120006a0fca738b99e944cc1c97dd0b670469415d7544c45361d6368f65b7e45fd507a76fa43b0a8983f3b2234be0c3616b0ef333e9d09d52513204d3f0829b913113298008df8cea2dd11281c31deb1f3cda88e0f7b7b9b8bc27c2bfa861262b923def01c53931368966b5a189a417241268ee28e199ab6b48e4fad27a5c5ec2fc1856b0c7390e9b79ea5fe452b33e66f72c8abe6950cc8d5eb1588538a37998a4727c46a968f1b5fdea2469fddbe62547b17", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r6}, &(0x7f00000004c0), &(0x7f0000000500)=r7}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r6}, &(0x7f0000000200), &(0x7f00000003c0)=r7}, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r9}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r8}, &(0x7f0000000180), &(0x7f00000001c0)=r9}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r10}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="b705000000000000000000800100009500009db8000000000000000000000000540fa39bafad4dac6d68af2eac61c2ef241992dd42456e9054ba9c455976e5eebf45cccdb45985245007d6b62d0af1207157637e1b97be49bedb1f73eb5a2ab5314c8da90fb3ebdf1e1314cf39c81ffeb99ad4faeadd40d905375827f6e518c1df5dd5210b7cbca09e69d9596506366f08e66ed1a098feee"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xb3, &(0x7f0000000300)=""/179, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000080)={0x0, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000060016009500000000000000"], &(0x7f0000000200)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000280)={@cgroup, r11, 0x2f, 0x34, r11, @void, @void, @void, @value}, 0x20) socket$pppoe(0x18, 0x1, 0x0) 618.462258ms ago: executing program 3 (id=1944): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x40004) r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$inet_int(r0, 0x0, 0x16, &(0x7f0000000000)=0x9, 0x4) sendmmsg$inet(r0, &(0x7f0000000400)=[{{&(0x7f00000001c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a9050000000074640006000000003552bde5c064c6", 0x15}, {&(0x7f0000000600)="174640b6d80fb2eedc81ba60cc0800", 0xf}], 0x2, 0x0, 0x0, 0xfffffffd}}], 0x1, 0x0) 466.390804ms ago: executing program 2 (id=1945): r0 = socket(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_SECURITY(r2, 0x6, 0x4, 0x0, 0xf0ff1f00000000) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0) r5 = socket$inet(0x2, 0x5, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000080)="441f0803000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d) getsockopt$inet_opts(r5, 0x0, 0x4, 0x0, &(0x7f0000000180)) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r4, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x4042800) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000004c40)={@private1={0xfc, 0x1, '\x00', 0x1}}, 0x14) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)={0x11c, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x84}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x17}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1d}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x70, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x33}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x12, 0x8}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xa8}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x41}, 0x2004c084) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES8], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) 393.402268ms ago: executing program 3 (id=1946): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=@newsa={0x140, 0x10, 0x1, 0x0, 0x25dfdbfd, {{@in=@local, @in6=@empty, 0x4000, 0x0, 0x3, 0x3}, {@in=@broadcast, 0x0, 0x33}, @in6=@mcast2, {0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x4}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@tfcpad={0x8, 0x23, 0xd19}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x140}}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r2, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x5}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x48080}, 0x804) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000140)=""/169, 0x0) (async) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000140)=""/169, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) (async) r3 = socket$nl_rdma(0x10, 0x3, 0x14) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280), r1) (async) syz_genetlink_get_family_id$SEG6(&(0x7f0000000280), r1) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1) sendmsg$NL80211_CMD_AUTHENTICATE(r1, 0x0, 0x8840) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000580)={0x88, r4, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x37}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x1}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1e}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xbdf}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x29}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x34b}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x120}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3cc}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x31f}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}]]}, 0x88}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000000) syz_genetlink_get_family_id$l2tp(&(0x7f00000006c0), r1) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r5, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e0, 0xb, 0x5, 0x148, 0x128, 0x0, 0x248, 0x2a8, 0x2a8, 0x248, 0x2a8, 0x3, 0x0, {[{{@ip={@remote, @loopback, 0x0, 0x0, 'wg0\x00', 'nr0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@physdev={{0x68}, {'veth1_to_batadv\x00', {}, 'wlan1\x00', {}, 0x4, 0x6}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ip={@local, @multicast2, 0x0, 0x0, 'xfrm0\x00', 'team0\x00'}, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@socket0={{0x20}}, @common=@ah={{0x30}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @random="6f79fb339557"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x340) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, 0x1403, 0x1, 0x70bd26, 0x25dfdbff, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_vlan\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x801}, 0x800) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, 0x1403, 0x1, 0x70bd26, 0x25dfdbff, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_vlan\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x801}, 0x800) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c80)={&(0x7f0000000840)={0x43c, 0x3f4, 0x2, 0x70bd2c, 0x25dfdbfe, {0x4, 0x0, 0x24, [0xb, 0xd, 0xe, 0x7, 0x1, 0x1, 0x0, 0x7fff, 0x7, 0x9, 0xb, 0x8001, 0x81, 0x3, 0x4800, 0x5, 0x5, 0xb8, 0xd8c, 0x6, 0x345, 0x5, 0x9, 0xe, 0xffff, 0x401, 0xa, 0x2, 0x10001, 0xa, 0x8, 0x32, 0xb, 0x9, 0x9, 0x0, 0x400, 0x5, 0x1, 0xea73, 0x80000000, 0x5, 0x200, 0xb, 0x93, 0x9, 0x55, 0x43a589db, 0x7fff, 0x5, 0x3ff, 0xe, 0x4, 0x9, 0xfffffff9, 0xfff, 0x5, 0x1ff, 0xfffffffb, 0x0, 0x4c6, 0x2, 0xabae, 0x8000], [0x1, 0x3, 0x5, 0x1, 0xc0000000, 0x100, 0x1000, 0xfffffffb, 0x5, 0x9b, 0x10000, 0x344, 0xe, 0x0, 0x0, 0x6, 0x4, 0x3, 0x0, 0x2, 0xfffffffb, 0x2, 0x2, 0x5, 0xffff, 0xe, 0x0, 0x7f, 0x7be8, 0x5, 0x7fffffff, 0x1b84cfe2, 0x4, 0x10000, 0xc, 0xf8, 0x506, 0x2, 0x70, 0xb, 0x1, 0x400, 0x10, 0x81, 0xa, 0x400, 0x8b, 0xe, 0x6, 0x6, 0x0, 0xb, 0x1, 0x4, 0x0, 0x1, 0x1, 0x0, 0x7, 0xd3a5, 0x101, 0x8b, 0x3], [0x8, 0x5, 0x5, 0x69b, 0xfffffff8, 0x4bd7, 0x870, 0x6, 0x4, 0x938, 0x8, 0x7, 0x82, 0x0, 0x9, 0x12, 0x8, 0xb9, 0x1, 0x49, 0x9, 0x7, 0x3, 0x6, 0x4, 0xc0, 0x4, 0x7f, 0x9, 0x0, 0x80000000, 0xb, 0x0, 0x3, 0x14, 0x5, 0x0, 0x4, 0xd7, 0x3, 0x6, 0x9, 0x86, 0x6a1, 0x7, 0x7fffffff, 0xfff, 0x4, 0x3, 0x40, 0xffffffff, 0x2, 0x1, 0x179ab4ef, 0x41, 0x5, 0xffffffc4, 0x9, 0xfffffeff, 0x7, 0x2, 0x7, 0x6, 0x80000001], [0x25, 0x28, 0x8, 0xfffffff7, 0x7, 0x3, 0xf53, 0x1, 0x3, 0x9e1, 0x9d9b, 0xe0, 0x2, 0x100, 0xd9, 0x4, 0x8, 0x5, 0x1604, 0x50f, 0x2a3, 0x7, 0x4, 0x9, 0x5, 0x2, 0x1ff, 0x4, 0x4, 0x100, 0x6e8, 0x5, 0x2, 0x4, 0x0, 0x80, 0x4c23, 0x6, 0x2, 0x9, 0x0, 0x4, 0x9, 0x6, 0x5, 0xd7, 0x6, 0x8, 0x4, 0x3, 0x8, 0x7, 0x2, 0x5, 0x1, 0x2, 0x41fbd566, 0xa5fc, 0x2, 0x6, 0x8d45, 0x2, 0x10000, 0x5b8], 0x19, ['++(+\\\x00', '+@*\x00', 'rxe\x00', 'SEG6\x00', '\xff\xff\xff\xff\xff\xff']}}, 0x43c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r7, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x2c, 0x6, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x4}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x2c}}, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), r6) sendmsg$SEG6_CMD_DUMPHMAC(r1, 0x0, 0xc5) socket$netlink(0x10, 0x3, 0x6) (async) r8 = socket$netlink(0x10, 0x3, 0x6) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000fc0), r6) sendmsg$L2TP_CMD_TUNNEL_CREATE(r8, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000001000)={0x1c, r9, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x401}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200468d3}, 0x48005) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r8, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000001000)={0x1c, r9, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x401}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200468d3}, 0x48005) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000012c0)={0x0}, 0x1, 0x0, 0x0, 0x24040805}, 0x84) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000001380), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_REMOVE(r10, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xffffffffffffff5e, r11, 0x200, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) 244.899826ms ago: executing program 2 (id=1947): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x1, 0x0, 0x0, {0x53}}, 0x14}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='devlink_health_report\x00'}, 0x52) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010004b040000000000005f007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010062726964676500001800028005002600020000000c002e"], 0x48}}, 0x0) 162.207652ms ago: executing program 1 (id=1948): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, &(0x7f0000000180)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40002000) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$kcm(r2, &(0x7f0000000640)={&(0x7f0000000300)=@hci={0x1f, 0xffffffffffffffff, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="140000000000000001"], 0x20}, 0x8000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000001c0)={0x2960afc1, 0x0}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, [@map_fd={0x18, 0x5, 0x1, 0x0, r3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, @ldst={0x1, 0x1, 0x2, 0x9, 0x5, 0xffffffffffffffc0, 0x1}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, r1, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 2 (id=1949): r0 = socket$packet(0x11, 0x2, 0x300) sendmmsg$sock(r0, &(0x7f0000000840)=[{{&(0x7f0000000640)=@tipc=@name={0x1e, 0x2, 0x2, {{0x41}}}, 0x80, 0x0, 0x0, &(0x7f0000000a80)=[@mark={{0x14, 0x1, 0x24, 0x4}}], 0x18}}], 0x1, 0x4) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="20000000010a01010000000000000000020000d071f9040900010073797a3000"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x20040080) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000500)={r4, r1, 0x7, 0x0, 0x0, 0x4f, 0xf, 0xb5b, 0xf, 0x2, 0x3, 0x7, 'syz1\x00'}) 0s ago: executing program 2 (id=1955): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@bridge_setlink={0x34, 0x13, 0xa2f, 0x70bd25, 0x0, {0x7, 0x0, 0x68, r3, 0x900, 0xe4}, [@IFLA_LINKINFO={0x14, 0x1a, 0x0, 0x1, @vlan={{0x9}, {0x4, 0x4}}}]}, 0x34}}, 0x0) sendmsg(r1, &(0x7f0000000e00)={&(0x7f0000000880)=@can={0x1d, r3}, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000440)="0f5184004073973f13e7f4594f18d3a091328afcfff0fceab9a3733ae68be54f68e43bbb6b05808e4c1e1a0c2d", 0x2d}, {&(0x7f0000000900)="f3442de13e8f24115348bcdd914c7fb298e6aeec4b34ec1daf6b19f6408a3b144456398a353d47590a8fc046d9cd7e4580bb334b0980c3f0c23a9eb5590a7bb8a2b1f86153784c78d77e1c619aae356cece1ff3dadc31c929b0367c0bbbd0cfae896ffd46eb603d0098d52c3932f7d22881c84059c1e5c713dac39de6c0afb55360ec7a468", 0x85}, {&(0x7f00000009c0)="ae32884782ab304f69b62bf570c2d7bd1e4adad5b1a7ed65b4bea0ad3f0bfd4496dfbbd87cb7eea62de8cc412c4a10a4318ea43d6106b083b8fa0696cce2bf", 0x3f}, {&(0x7f0000000a80)="016a262b0caf55b11f03464b67d942c13823bb5593c7873297d7ba9f5cc3f93d8030a1a0b949b0bd8c50ca7982ee6f42e9889b73d8bc9263605c952eb4c5d3779a4b4e035a27381887b4d1d6c1b4c6c17366e46dc4bf378bc6661576c4eeb266c9027de1a9e6ff3bc7a0765bbd01cc0247bfdfe666012a874f10d16a68b170b449075a91d6a2cb30fe6f7220a0e05ed47191551b23c0936b352d8c681a81dda5ab1206", 0xa3}, {&(0x7f0000000b40)="a64fbf4dfe692db642b0e00ee12ea654b6fc5be031206c5fbc9a0981d7ba4a223055c6ed65614ff2ae209321b40b7fb717b3a76619b984a9485ff374d2de8df309900090d32919d95e9fca0d9786c06bbfaf08c654086b7cc9768d5fe53bc81db25aea0fe974e26add44080b29ac9afbe83b1563d8692099b7f0f8aa1b8fe1663c54e72a52fa75c9fff588a44fab435707ca91c83cf5bed923271b89fb451743a7f240d796e46bb29772392f", 0xac}, {&(0x7f0000000c00)="caa6277cdeba4d256575a4cfc109479bd410bc8b06daadb5d8d5a7bf181a51823a188a38c690734677a5403c2e4ac435cfe66643bb1552f8b4d08bc076066517cae7f9123cff9732f4291ab103ded5cebca7415881617886c9edf79beb9d424f6a03dfdaf48a45c3384603f6b9dc6073260fea486461f4", 0x77}, {&(0x7f0000000c80)="5b4f628c5273edd428b71a66b1da2771cb812dd0e9786c9816f0542a354b1fadaf20ae31dfd9768a08656f46d7fa2266b0635e3c14a9498844b4a4e5b07aa9290255fa6ae091ff2c79ff536a43b3909d668b8ab759fb04b214308626af273fe391c5a95209f59624dd022636503e0ca8bace055b3e517040d40cbe134c99ef67c8647c90abc9d03eae890db955458c5599dc605be54fcc7bc5", 0x99}, {&(0x7f0000000d40)="21276826adc78a179d0f2206a79446a53670af1556d760b8d49a32f7a5da023f1362b5b98fc8d8a122", 0x29}], 0x8, &(0x7f0000001180)=[{0xf0, 0x10c, 0xffffffff, "6eade313c14cf8b59c819670a29406476da865f726673930b6fa18cd06000000629eae5ffa1acec9a681e3e362aaf463f53f1ed298293a079238fbe35cd749f4aa0bd8ce437dbd45b729c558c127e9578c7f887950e2c5546305aca4c5495563d9748d3dd34607448ce3696046e425e5c5510f364332042cb5b503c154f26764b5ba36620100874096371113b7597a4940ab59709ed7059888dffcff36256dd64f4f299cab73c7668c1ca9111f489b60c77ec96366f52849b858c97b2b29bd72829cc022d15eb1060cf5e038089129022c49bbde581e58e31af9034c77eed2e6"}, {0x1010, 0x107, 0x3, "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"}, {0x90, 0x84, 0x1, "9211f151bee31319a4a69b70887c867dafcb0344f708bc3c295635734254e48050c38bd8c4fd666ca462b3fbb574f191c4c20530c032a227a0394e3c6d5c662e5a951ef932ba12d63b81687f3c0d5d8b2f7cee159aea482f139853481497b9c163baf1aee0069c6fb8a569b63caac91a3bef1a6c9b7ad9a5a876a7d366bca8f6"}, {0x108, 0x18f, 0x1e, "fe58318005a44fadaf465ee9606df963cae1a7b2aa5f91ae138b649c6d3911b928b471b043ff4cba9ea777919a7fde2d6d9ac6ec81e66920f12813b1a9e8373e8491a9136b4551d1067cf9be036b6f12fa970e54c8031ba37d1c28ffef5607977239835c0c1edca3a7c1aba2b13a8c862d2693fd6301cd3412e23d09645b1c1ad3afc0050b65ea72392388ab35525c43a742c7ac030029397e36eb504a2667b2a9a0dd206b612dc6e75f7180892a95dcdffa8aa873863a1e4b8fb358293a6709cb5bdaa2549eb0301694354b5f09dcf7e53fb0e9fe7b3de8b1cfc0149adbc082b9f79ae048b9d898f96f16fa52e5001498c9d42f014c"}, {0xb0, 0x102, 0x6, "a58fa94ebf118ccbb9577af5cb83558062fcb20330a608d8124285447fcf9558519f68f4371dc2ea4feb5bfbfb2533d547dd0f5e6aa75f9a5c23500e4776cab472568e1df9e18d220bb4866330bd64859a4a650383ef1b5cf58564080ecf48c1fdc4dc19726c59bd0a70d882069efa17155cb5bbb36d34b452b964584b9e18ff3930797bb90d4d201d4fd9a6823d9e5be893b9ae39eda02c3f3f840ee0cfcbbc"}, {0x100, 0x10a, 0x101, "d36b4621c66f0fc910f9f1dad12a138a2df09d10014e380a3a85788cdd2fa2cdfcd0d6d89147e1585220a2f4281e507275b53e50393a23303ac20615acaf352db8fd8ebb382de92ba50bbf08592b123e9a8c333d82f4300389976bdd297b7dd565041ccfddb2ed347e3b00a266a3a0aa0863d79d95f9b67467ea97b6b819dff5fd24384b94fb69832f26382e85cac401a472cd063c0486058a0df1feb1f30b14a35f96aa871027b878d50da18d6f02ad6529b463ddcbca6ba8d29dcba2546ec575073312a2a4768778041a6c486e0d46bb185822cb870cf8ba0027d25cc94affd829cc859a001dfa61"}], 0x1448}, 0x20000040) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'macsec0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000f40)=ANY=[@ANYBLOB="ffff5e80ffffffffbbbbbbbbbbbb86dd6002000000080000fe8000000000000000000000000000aafe8000000000000000000000000000aa3200040000000000"], 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES32=r5], 0x54}}, 0x800) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x16, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="660a00000200000061114c000000080000000000000000009500009cd5d578006f2041aadf17080a7cf24a080846f05b9de4e5a50101aa12464f1053f9b28eafcac8c1bbfce42ac7d2960b92ebba622450aac61c041e494eb439d8377313b0dc07ee36c0b02f01d859d3f4c5791d7574a67dc16bd67797676fd56fe77a"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x8, 0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000003c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x80003, {0x0, 0x0, 0x0, r10, {0x0, 0xffed}, {0xf, 0xb}, {0xd, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x8021}, 0x801) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYRESHEX=r5, @ANYRES16=r7, @ANYBLOB="040002"], 0x2c}}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, &(0x7f00000003c0)=[0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbc, &(0x7f0000000540)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0x90, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r12, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)={0x34, r13, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x59}]}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r4, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x30, r13, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x8001}, 0x20000090) sendto$packet(0xffffffffffffffff, &(0x7f0000000480)="8ca8e037bb4214e499195f9048d8809cb0c631b56dfb24cdc3504509d0847b2c4610a07d0f1f4820efa4d851c7987aef2320b9c2a68638a12d847eb863434c1a9e6ec253c8437422b0f855a393f78fffccbe2a48e756ebdeace1c00cb8505a8138cdf513", 0x64, 0x2000c8d0, &(0x7f0000000780)={0x11, 0xc, r11, 0x1, 0x9, 0x6, @multicast}, 0x14) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)=@abs, 0x6e, &(0x7f0000000300)=[{&(0x7f0000000180)=""/136, 0x88}, {}, {&(0x7f0000000080)=""/39, 0x27}, {&(0x7f0000000240)=""/148, 0x98}], 0x4, &(0x7f0000000340)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}, 0x10140) kernel console output (not intermixed with test programs): and tx timeout [ 157.213885][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 157.252481][ T3485] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.290149][ T3485] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.310876][ T3485] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.348781][ T3485] veth1_macvtap: left promiscuous mode [ 157.355822][ T3485] veth0_macvtap: left promiscuous mode [ 157.365702][ T3485] veth1_vlan: left promiscuous mode [ 157.377870][ T3485] veth0_vlan: left promiscuous mode [ 157.982917][ T3485] team0 (unregistering): Port device team_slave_1 removed [ 158.020022][ T3485] team0 (unregistering): Port device team_slave_0 removed [ 158.474709][ T8906] __nla_validate_parse: 5 callbacks suppressed [ 158.474725][ T8906] netlink: 44 bytes leftover after parsing attributes in process `syz.3.841'. [ 158.485407][ T8908] netlink: 32 bytes leftover after parsing attributes in process `syz.2.840'. [ 158.557542][ T8906] netlink: 43 bytes leftover after parsing attributes in process `syz.3.841'. [ 158.616293][ T8906] netlink: 'syz.3.841': attribute type 6 has an invalid length. [ 158.640088][ T8906] netlink: 'syz.3.841': attribute type 5 has an invalid length. [ 158.648108][ T8906] netlink: 43 bytes leftover after parsing attributes in process `syz.3.841'. [ 158.827498][ T8923] netlink: 28 bytes leftover after parsing attributes in process `syz.1.845'. [ 158.884172][ T8792] chnl_net:caif_netlink_parms(): no params data found [ 158.884675][ T8924] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 159.029091][ T8933] nbd: socks must be embedded in a SOCK_ITEM attr [ 159.207404][ T8792] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.249373][ T8792] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.270236][ T8792] bridge_slave_0: entered allmulticast mode [ 159.286695][ T8792] bridge_slave_0: entered promiscuous mode [ 159.294102][ T51] Bluetooth: hci4: command tx timeout [ 159.311127][ T8944] netlink: 'syz.4.850': attribute type 3 has an invalid length. [ 159.343671][ T8792] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.351721][ T8792] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.359614][ T8792] bridge_slave_1: entered allmulticast mode [ 159.368274][ T8792] bridge_slave_1: entered promiscuous mode [ 159.448503][ T8952] netlink: 204 bytes leftover after parsing attributes in process `syz.2.852'. [ 159.488986][ T8948] sctp: [Deprecated]: syz.3.851 (pid 8948) Use of int in maxseg socket option. [ 159.488986][ T8948] Use struct sctp_assoc_value instead [ 159.548636][ T8792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.596921][ T8792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.778691][ T8792] team0: Port device team_slave_0 added [ 159.880671][ T8792] team0: Port device team_slave_1 added [ 159.906520][ T8964] syzkaller1: entered promiscuous mode [ 159.912063][ T8964] syzkaller1: entered allmulticast mode [ 159.999459][ T8792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.009180][ T8792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.044108][ T8792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.084913][ T8792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.104413][ T8792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.135168][ T8792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.369771][ T8792] hsr_slave_0: entered promiscuous mode [ 160.405454][ T8792] hsr_slave_1: entered promiscuous mode [ 160.598869][ T8999] netlink: 4 bytes leftover after parsing attributes in process `syz.4.861'. [ 160.654173][ T9004] netlink: 4 bytes leftover after parsing attributes in process `syz.3.862'. [ 160.904579][ T9018] netlink: 104 bytes leftover after parsing attributes in process `syz.3.865'. [ 161.373434][ T51] Bluetooth: hci4: command tx timeout [ 161.852622][ T9068] netlink: 'syz.2.876': attribute type 5 has an invalid length. [ 162.064511][ T9076] netlink: 24 bytes leftover after parsing attributes in process `syz.2.878'. [ 162.167911][ T8792] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 162.200146][ T8792] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 162.267970][ T8792] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 162.481758][ T8792] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 162.544173][ T9101] ip6t_srh: unknown srh match flags 536B [ 163.012788][ T8792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.063356][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5840 ms [ 163.071429][ C1] lec:lec_tx_timeout: lec0 [ 163.076656][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 163.107673][ T8792] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.122941][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.130153][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.159557][ T6189] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.166777][ T6189] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.454546][ T51] Bluetooth: hci4: command tx timeout [ 163.708068][ T9163] bond2: entered promiscuous mode [ 163.713173][ T9163] bond2: entered allmulticast mode [ 163.734603][ T9163] 8021q: adding VLAN 0 to HW filter on device bond2 [ 163.818878][ T8792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.054009][ T8792] veth0_vlan: entered promiscuous mode [ 164.098927][ T8792] veth1_vlan: entered promiscuous mode [ 164.234762][ T8792] veth0_macvtap: entered promiscuous mode [ 164.385042][ T8792] veth1_macvtap: entered promiscuous mode [ 164.457323][ T8792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.497942][ T8792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.537138][ T8792] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.568616][ T9203] __nla_validate_parse: 2 callbacks suppressed [ 164.568632][ T9203] netlink: 248 bytes leftover after parsing attributes in process `syz.4.912'. [ 164.586896][ T8792] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.603746][ T8792] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.619911][ T8792] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.917133][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.939066][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.000590][ T6189] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.028296][ T6189] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.212398][ T9225] netlink: 20 bytes leftover after parsing attributes in process `syz.3.916'. [ 165.434959][ T9231] netlink: 28 bytes leftover after parsing attributes in process `syz.3.917'. [ 165.472801][ T9231] netlink: 'syz.3.917': attribute type 7 has an invalid length. [ 165.481441][ T9231] netlink: 'syz.3.917': attribute type 8 has an invalid length. [ 165.490801][ T9231] netlink: 4 bytes leftover after parsing attributes in process `syz.3.917'. [ 165.507684][ T9231] gretap0: entered promiscuous mode [ 165.514862][ T9231] batadv_slave_1: entered promiscuous mode [ 165.534024][ T9231] gretap0: left promiscuous mode [ 165.550401][ T9231] batadv_slave_1: left promiscuous mode [ 165.742242][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.947789][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.165041][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.280887][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.666057][ T9278] netlink: 'syz.4.924': attribute type 1 has an invalid length. [ 166.764282][ T9278] netlink: 12 bytes leftover after parsing attributes in process `syz.4.924'. [ 166.941373][ T49] bridge_slave_1: left allmulticast mode [ 166.950219][ T49] bridge_slave_1: left promiscuous mode [ 166.972384][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.010837][ T49] bridge_slave_0: left allmulticast mode [ 167.050643][ T49] bridge_slave_0: left promiscuous mode [ 167.074460][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.154528][ T9291] sctp: [Deprecated]: syz.3.928 (pid 9291) Use of struct sctp_assoc_value in delayed_ack socket option. [ 167.154528][ T9291] Use struct sctp_sack_info instead [ 167.258851][ T5852] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 167.271951][ T5852] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 167.280404][ T5852] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 167.290367][ T5852] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 167.298416][ T5852] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 167.748504][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 167.760121][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 167.770252][ T49] bond0 (unregistering): Released all slaves [ 168.083372][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 168.091433][ C1] lec:lec_tx_timeout: lec0 [ 168.096525][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 168.211366][ T9327] netlink: 'syz.3.938': attribute type 1 has an invalid length. [ 168.219449][ T9327] netlink: 'syz.3.938': attribute type 2 has an invalid length. [ 168.227825][ T9327] netlink: 1172 bytes leftover after parsing attributes in process `syz.3.938'. [ 168.248687][ T9327] netlink: 60 bytes leftover after parsing attributes in process `syz.3.938'. [ 168.270184][ T9327] netlink: 'syz.3.938': attribute type 1 has an invalid length. [ 168.287931][ T9327] netlink: 144 bytes leftover after parsing attributes in process `syz.3.938'. [ 168.302890][ T9327] netlink: 'syz.3.938': attribute type 1 has an invalid length. [ 168.312357][ T9327] netlink: 'syz.3.938': attribute type 2 has an invalid length. [ 168.325263][ T9327] netlink: 64 bytes leftover after parsing attributes in process `syz.3.938'. [ 168.424118][ T9335] netlink: 220 bytes leftover after parsing attributes in process `syz.3.938'. [ 168.606830][ T49] hsr_slave_0: left promiscuous mode [ 168.641795][ T49] hsr_slave_1: left promiscuous mode [ 168.659149][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.683394][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.699168][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.712839][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.788446][ T49] veth1_macvtap: left promiscuous mode [ 168.802006][ T49] veth0_macvtap: left promiscuous mode [ 168.808038][ T49] veth1_vlan: left promiscuous mode [ 168.817283][ T49] veth0_vlan: left promiscuous mode [ 169.374521][ T5852] Bluetooth: hci4: command tx timeout [ 169.511315][ T49] team0 (unregistering): Port device team_slave_1 removed [ 169.577263][ T49] team0 (unregistering): Port device team_slave_0 removed [ 170.219160][ T9296] chnl_net:caif_netlink_parms(): no params data found [ 170.278206][ T9396] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 170.295529][ T9399] netlink: 28 bytes leftover after parsing attributes in process `syz.1.947'. [ 170.323950][ T9399] netlink: 'syz.1.947': attribute type 7 has an invalid length. [ 170.338169][ T9399] netlink: 'syz.1.947': attribute type 8 has an invalid length. [ 170.341167][ T9396] bond1: entered promiscuous mode [ 170.347097][ T9399] netlink: 4 bytes leftover after parsing attributes in process `syz.1.947'. [ 170.351626][ T9396] bond1: entered allmulticast mode [ 170.394510][ T9396] 8021q: adding VLAN 0 to HW filter on device bond1 [ 170.439938][ T9399] gretap0: entered promiscuous mode [ 170.509239][ T9399] batadv_slave_1: entered promiscuous mode [ 170.571332][ T9399] gretap0: left promiscuous mode [ 170.630280][ T9399] batadv_slave_1: left promiscuous mode [ 170.689038][ T9415] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 170.696332][ T9418] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 171.040594][ T9440] netlink: 4 bytes leftover after parsing attributes in process `syz.4.956'. [ 171.041061][ T9438] netlink: 4 bytes leftover after parsing attributes in process `syz.4.956'. [ 171.071757][ T9441] netlink: 32 bytes leftover after parsing attributes in process `syz.3.957'. [ 171.134932][ T9430] erspan0: entered promiscuous mode [ 171.140396][ T9430] erspan0: entered allmulticast mode [ 171.338452][ T9296] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.364558][ T9296] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.387635][ T9296] bridge_slave_0: entered allmulticast mode [ 171.444921][ T9296] bridge_slave_0: entered promiscuous mode [ 171.453521][ T5852] Bluetooth: hci4: command tx timeout [ 171.485067][ T9296] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.503501][ T9296] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.510779][ T9296] bridge_slave_1: entered allmulticast mode [ 171.526527][ T9296] bridge_slave_1: entered promiscuous mode [ 171.669370][ T9296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.746674][ T9296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.786620][ T9468] netlink: 28 bytes leftover after parsing attributes in process `syz.2.964'. [ 171.825887][ T9468] netlink: 'syz.2.964': attribute type 7 has an invalid length. [ 171.864534][ T9468] netlink: 'syz.2.964': attribute type 8 has an invalid length. [ 171.871281][ T9473] netlink: 8 bytes leftover after parsing attributes in process `syz.3.967'. [ 171.882518][ T9468] netlink: 4 bytes leftover after parsing attributes in process `syz.2.964'. [ 172.000410][ T9468] gretap0: entered promiscuous mode [ 172.017769][ T9468] batadv_slave_1: entered promiscuous mode [ 172.043468][ T9468] gretap0: left promiscuous mode [ 172.073374][ T9468] batadv_slave_1: left promiscuous mode [ 172.096456][ T9296] team0: Port device team_slave_0 added [ 172.147935][ T9296] team0: Port device team_slave_1 added [ 172.260944][ T9296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.278389][ T9296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.352399][ T9296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.421534][ T9296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.438507][ T9296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.439776][ T9499] netlink: 'syz.3.977': attribute type 1 has an invalid length. [ 172.514894][ T9499] netlink: 220 bytes leftover after parsing attributes in process `syz.3.977'. [ 172.525111][ T9296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.548086][ T9500] x_tables: duplicate underflow at hook 1 [ 172.643766][ T9499] netlink: 24 bytes leftover after parsing attributes in process `syz.3.977'. [ 172.789516][ T9296] hsr_slave_0: entered promiscuous mode [ 172.802533][ T9296] hsr_slave_1: entered promiscuous mode [ 173.071038][ T9531] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 173.103515][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 173.111597][ C1] lec:lec_tx_timeout: lec0 [ 173.116896][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 173.545309][ T5852] Bluetooth: hci4: command tx timeout [ 174.241537][ T9296] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 174.307594][ T9296] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 174.394018][ T9296] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 174.438607][ T9296] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 175.079837][ T9296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.199671][ T9296] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.289052][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.296293][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.376716][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.383897][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.472536][ T9643] __nla_validate_parse: 6 callbacks suppressed [ 175.472553][ T9643] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1013'. [ 175.613654][ T5852] Bluetooth: hci4: command tx timeout [ 176.040629][ T9296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.199637][ T9683] netlink: 348 bytes leftover after parsing attributes in process `syz.1.1020'. [ 176.317377][ T9296] veth0_vlan: entered promiscuous mode [ 176.400094][ T9296] veth1_vlan: entered promiscuous mode [ 176.461702][ T9697] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1023'. [ 176.554269][ T9296] veth0_macvtap: entered promiscuous mode [ 176.579651][ T9296] veth1_macvtap: entered promiscuous mode [ 176.688847][ T9296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.737795][ T9296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.770662][ T9709] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1027'. [ 176.788790][ T9296] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.818404][ T9711] openvswitch: netlink: Message has 4 unknown bytes. [ 176.819808][ T9296] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.858320][ T9296] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.883386][ T9296] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.272484][ T6189] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.292933][ T6189] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.467791][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.508063][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.670953][ T9744] Unsupported ieee802154 address type: 0 [ 177.925986][ T9762] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1041'. [ 177.934700][ T9763] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1042'. [ 178.069883][ T9762] hsr_slave_1 (unregistering): left promiscuous mode [ 178.128418][ T9762] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1041'. [ 178.133352][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 178.145412][ C1] lec:lec_tx_timeout: lec0 [ 178.153433][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 178.229055][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.284731][ T9762] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1041'. [ 178.329687][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.367165][ T9762] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1041'. [ 178.380277][ T9762] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1041'. [ 178.509791][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.612568][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.931127][ T49] bridge_slave_1: left allmulticast mode [ 178.938562][ T49] bridge_slave_1: left promiscuous mode [ 178.944626][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.954579][ T49] bridge_slave_0: left allmulticast mode [ 178.960236][ T49] bridge_slave_0: left promiscuous mode [ 178.966729][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.237780][ T9806] IPVS: length: 8 != 1152 [ 179.289518][ T9815] netlink: 'syz.4.1049': attribute type 7 has an invalid length. [ 179.343507][ T9815] netlink: 'syz.4.1049': attribute type 8 has an invalid length. [ 179.701861][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 179.712804][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 179.721605][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 179.737063][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 179.745863][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 179.814038][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 179.826127][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 179.836375][ T49] bond0 (unregistering): Released all slaves [ 179.861949][ T9815] gretap0: entered promiscuous mode [ 179.872479][ T9815] batadv_slave_1: entered promiscuous mode [ 179.879880][ T9815] gretap0: left promiscuous mode [ 179.894854][ T9815] batadv_slave_1: left promiscuous mode [ 181.773962][ T5852] Bluetooth: hci4: command tx timeout [ 181.790172][ T9871] netlink: 'syz.4.1065': attribute type 4 has an invalid length. [ 182.101705][ T9882] __nla_validate_parse: 31 callbacks suppressed [ 182.101723][ T9882] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1069'. [ 182.210043][ T9882] 8021q: adding VLAN 0 to HW filter on device bond3 [ 182.228686][ T9895] xt_bpf: check failed: parse error [ 182.264475][ T49] hsr_slave_0: left promiscuous mode [ 182.296235][ T49] hsr_slave_1: left promiscuous mode [ 182.319030][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.340383][ T9904] openvswitch: netlink: VXLAN extension message has 12 unknown bytes. [ 182.366656][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.384553][ T9906] SET target dimension over the limit! [ 182.401403][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.424422][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.500878][ T49] veth1_macvtap: left promiscuous mode [ 182.519917][ T49] veth0_macvtap: left promiscuous mode [ 182.538667][ T49] veth1_vlan: left promiscuous mode [ 182.560753][ T49] veth0_vlan: left promiscuous mode [ 183.163621][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 183.171744][ C1] lec:lec_tx_timeout: lec0 [ 183.177569][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 183.455449][ T49] team0 (unregistering): Port device team_slave_1 removed [ 183.494210][ T49] team0 (unregistering): Port device team_slave_0 removed [ 183.853580][ T5852] Bluetooth: hci4: command tx timeout [ 184.242571][ T9969] SET target dimension over the limit! [ 184.693928][ T9986] netlink: 1044 bytes leftover after parsing attributes in process `syz.1.1089'. [ 184.736091][ T9830] chnl_net:caif_netlink_parms(): no params data found [ 185.090420][ T9830] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.118382][ T9830] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.141807][ T9830] bridge_slave_0: entered allmulticast mode [ 185.160754][ T9830] bridge_slave_0: entered promiscuous mode [ 185.178020][ T9830] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.187666][ T9830] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.199316][ T9830] bridge_slave_1: entered allmulticast mode [ 185.209961][ T9830] bridge_slave_1: entered promiscuous mode [ 185.362663][ T9830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.390194][ T9830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.419703][T10016] erspan0: left promiscuous mode [ 185.430082][T10016] erspan0: left allmulticast mode [ 185.623517][T10016] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 185.936632][ T5852] Bluetooth: hci4: command tx timeout [ 185.992008][T10016] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1096'. [ 186.055342][ T9830] team0: Port device team_slave_0 added [ 186.083214][ T9830] team0: Port device team_slave_1 added [ 186.341976][ T9830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.389948][ T9830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.434576][ T9830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.447727][ T9830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.456551][T10050] FAULT_INJECTION: forcing a failure. [ 186.456551][T10050] name failslab, interval 1, probability 0, space 0, times 0 [ 186.469526][T10050] CPU: 1 UID: 0 PID: 10050 Comm: syz.4.1105 Not tainted 6.16.0-rc2-syzkaller-00162-g302251f1fdfd #0 PREEMPT(full) [ 186.469546][T10050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 186.469557][T10050] Call Trace: [ 186.469564][T10050] [ 186.469571][T10050] dump_stack_lvl+0x189/0x250 [ 186.469607][T10050] ? __pfx____ratelimit+0x10/0x10 [ 186.469631][T10050] ? __pfx_dump_stack_lvl+0x10/0x10 [ 186.469654][T10050] ? __pfx__printk+0x10/0x10 [ 186.469677][T10050] ? __lock_acquire+0xab9/0xd20 [ 186.469708][T10050] should_fail_ex+0x414/0x560 [ 186.469735][T10050] should_failslab+0xa8/0x100 [ 186.469755][T10050] kmem_cache_alloc_noprof+0x73/0x3c0 [ 186.469779][T10050] ? __inet_hash_connect+0x151e/0x2310 [ 186.469805][T10050] __inet_hash_connect+0x151e/0x2310 [ 186.469841][T10050] ? __inet_hash_connect+0x4fa/0x2310 [ 186.469870][T10050] ? __pfx___inet_hash_connect+0x10/0x10 [ 186.469897][T10050] ? inet_hash_connect+0x12f/0x240 [ 186.469920][T10050] tcp_v4_connect+0xd42/0x19d0 [ 186.469960][T10050] ? __pfx_tcp_v4_connect+0x10/0x10 [ 186.469981][T10050] ? tcp_v6_connect+0x635/0x1880 [ 186.470004][T10050] tcp_v6_connect+0xab7/0x1880 [ 186.470035][T10050] ? __pfx_tcp_v6_connect+0x10/0x10 [ 186.470053][T10050] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 186.470101][T10050] __inet_stream_connect+0x298/0xf10 [ 186.470119][T10050] ? __pfx_do_softirq+0x10/0x10 [ 186.470157][T10050] ? __local_bh_enable_ip+0x12d/0x1c0 [ 186.470178][T10050] ? __pfx___inet_stream_connect+0x10/0x10 [ 186.470196][T10050] ? __local_bh_enable_ip+0x12d/0x1c0 [ 186.470217][T10050] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 186.470250][T10050] inet_stream_connect+0x66/0xa0 [ 186.470271][T10050] __sys_connect+0x313/0x440 [ 186.470289][T10050] ? __fget_files+0x3a0/0x420 [ 186.470306][T10050] ? __pfx___sys_connect+0x10/0x10 [ 186.470333][T10050] ? __pfx_ksys_write+0x10/0x10 [ 186.470347][T10050] ? rcu_is_watching+0x15/0xb0 [ 186.470376][T10050] __x64_sys_connect+0x7a/0x90 [ 186.470392][T10050] do_syscall_64+0xfa/0x3b0 [ 186.470405][T10050] ? lockdep_hardirqs_on+0x9c/0x150 [ 186.470424][T10050] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.470438][T10050] ? clear_bhb_loop+0x60/0xb0 [ 186.470455][T10050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.470470][T10050] RIP: 0033:0x7fc8f738e929 [ 186.470490][T10050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.470502][T10050] RSP: 002b:00007fc8f8175038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 186.470523][T10050] RAX: ffffffffffffffda RBX: 00007fc8f75b5fa0 RCX: 00007fc8f738e929 [ 186.470535][T10050] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000003 [ 186.470545][T10050] RBP: 00007fc8f8175090 R08: 0000000000000000 R09: 0000000000000000 [ 186.470554][T10050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.470563][T10050] R13: 0000000000000000 R14: 00007fc8f75b5fa0 R15: 00007ffea31f6168 [ 186.470591][T10050] [ 186.471205][ T9830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.795092][ T9830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.859720][T10057] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.029147][T10057] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.171584][T10071] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1112'. [ 187.408448][ T9830] hsr_slave_0: entered promiscuous mode [ 187.420461][ T9830] hsr_slave_1: entered promiscuous mode [ 187.598868][T10097] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1117'. [ 187.751396][T10102] FAULT_INJECTION: forcing a failure. [ 187.751396][T10102] name failslab, interval 1, probability 0, space 0, times 0 [ 187.764444][T10102] CPU: 0 UID: 0 PID: 10102 Comm: syz.3.1118 Not tainted 6.16.0-rc2-syzkaller-00162-g302251f1fdfd #0 PREEMPT(full) [ 187.764468][T10102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 187.764479][T10102] Call Trace: [ 187.764486][T10102] [ 187.764493][T10102] dump_stack_lvl+0x189/0x250 [ 187.764521][T10102] ? __pfx____ratelimit+0x10/0x10 [ 187.764545][T10102] ? __pfx_dump_stack_lvl+0x10/0x10 [ 187.764568][T10102] ? __pfx__printk+0x10/0x10 [ 187.764589][T10102] ? __lock_acquire+0xab9/0xd20 [ 187.764621][T10102] should_fail_ex+0x414/0x560 [ 187.764647][T10102] should_failslab+0xa8/0x100 [ 187.764668][T10102] kmem_cache_alloc_noprof+0x73/0x3c0 [ 187.764691][T10102] ? __inet_hash_connect+0xdcc/0x2310 [ 187.764718][T10102] __inet_hash_connect+0xdcc/0x2310 [ 187.764741][T10102] ? __pfx___inet_check_established+0x10/0x10 [ 187.764770][T10102] ? __inet_hash_connect+0x4fa/0x2310 [ 187.764799][T10102] ? __pfx___inet_hash_connect+0x10/0x10 [ 187.764827][T10102] ? inet_hash_connect+0x12f/0x240 [ 187.764850][T10102] tcp_v4_connect+0xd42/0x19d0 [ 187.764889][T10102] ? __pfx_tcp_v4_connect+0x10/0x10 [ 187.764910][T10102] ? tcp_v6_connect+0x635/0x1880 [ 187.764933][T10102] tcp_v6_connect+0xab7/0x1880 [ 187.764965][T10102] ? __pfx_tcp_v6_connect+0x10/0x10 [ 187.764983][T10102] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 187.765028][T10102] __inet_stream_connect+0x298/0xf10 [ 187.765057][T10102] ? __local_bh_enable_ip+0x12d/0x1c0 [ 187.765080][T10102] ? __pfx___inet_stream_connect+0x10/0x10 [ 187.765098][T10102] ? __local_bh_enable_ip+0x12d/0x1c0 [ 187.765120][T10102] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 187.765154][T10102] inet_stream_connect+0x66/0xa0 [ 187.765174][T10102] __sys_connect+0x313/0x440 [ 187.765193][T10102] ? __fget_files+0x3a0/0x420 [ 187.765212][T10102] ? __pfx___sys_connect+0x10/0x10 [ 187.765244][T10102] ? __pfx_ksys_write+0x10/0x10 [ 187.765267][T10102] ? rcu_is_watching+0x15/0xb0 [ 187.765298][T10102] __x64_sys_connect+0x7a/0x90 [ 187.765318][T10102] do_syscall_64+0xfa/0x3b0 [ 187.765332][T10102] ? lockdep_hardirqs_on+0x9c/0x150 [ 187.765354][T10102] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.765371][T10102] ? clear_bhb_loop+0x60/0xb0 [ 187.765391][T10102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.765407][T10102] RIP: 0033:0x7f235658e929 [ 187.765423][T10102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.765437][T10102] RSP: 002b:00007f235731c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 187.765455][T10102] RAX: ffffffffffffffda RBX: 00007f23567b5fa0 RCX: 00007f235658e929 [ 187.765468][T10102] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000003 [ 187.765479][T10102] RBP: 00007f235731c090 R08: 0000000000000000 R09: 0000000000000000 [ 187.765489][T10102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.765500][T10102] R13: 0000000000000000 R14: 00007f23567b5fa0 R15: 00007ffcd7f133b8 [ 187.765529][T10102] [ 188.078920][ T5852] Bluetooth: hci4: command tx timeout [ 188.193451][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 188.201496][ C1] lec:lec_tx_timeout: lec0 [ 188.206135][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 188.359016][T10114] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1122'. [ 188.530516][T10114] macvlan2: entered promiscuous mode [ 188.536655][T10114] macvlan2: entered allmulticast mode [ 188.568662][T10121] pimreg: entered allmulticast mode [ 188.590630][T10120] af_packet: tpacket_rcv: packet too big, clamped from 20 to 4294967272. macoff=96 [ 188.711599][T10127] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1126'. [ 188.783472][T10127] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1126'. [ 188.909192][T10132] batadv_slave_1: entered promiscuous mode [ 188.949309][T10135] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 188.954645][ T30] audit: type=1800 audit(1750619963.689:2): pid=10135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1129" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 189.004446][T10135] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 189.049451][T10135] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 189.108544][T10135] batadv_slave_1: left promiscuous mode [ 189.626399][ T9830] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 189.682712][ T9830] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 189.702510][ T9830] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 189.747239][ T9830] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 189.816414][T10181] netlink: 216 bytes leftover after parsing attributes in process `syz.3.1141'. [ 189.848998][T10181] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1141'. [ 190.076121][ T9830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.122092][T10204] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1145'. [ 190.135362][ T9830] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.137206][T10205] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1144'. [ 190.159886][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.167125][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.257909][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.265128][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.381584][T10213] SET target dimension over the limit! [ 190.841313][T10228] sctp: [Deprecated]: syz.3.1153 (pid 10228) Use of struct sctp_assoc_value in delayed_ack socket option. [ 190.841313][T10228] Use struct sctp_sack_info instead [ 191.034704][T10235] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ûÌÌULÙvy¸ÚØ¢…D£øUDŒw˜}z [ 191.062797][ T9830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.233950][ T9830] veth0_vlan: entered promiscuous mode [ 191.250839][ T9830] veth1_vlan: entered promiscuous mode [ 191.378418][ T9830] veth0_macvtap: entered promiscuous mode [ 191.465569][ T9830] veth1_macvtap: entered promiscuous mode [ 191.472790][T10249] veth0: entered promiscuous mode [ 191.545820][T10249] bridge2: entered promiscuous mode [ 191.567010][T10249] bridge2: entered allmulticast mode [ 191.602979][T10248] veth0: left promiscuous mode [ 191.621798][ T9830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.667664][ T9830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.690298][T10260] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1166'. [ 191.727508][ T9830] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.753608][ T9830] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.762360][ T9830] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.791583][ T9830] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.828087][T10268] netlink: zone id is out of range [ 191.887968][T10268] netlink: zone id is out of range [ 192.055787][T10268] netlink: zone id is out of range [ 192.099250][T10268] netlink: zone id is out of range [ 192.133712][T10268] netlink: zone id is out of range [ 192.138994][T10268] netlink: zone id is out of range [ 192.200271][T10268] netlink: zone id is out of range [ 192.230343][T10268] netlink: zone id is out of range [ 192.248263][T10268] netlink: zone id is out of range [ 192.255073][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.281491][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.295919][T10268] netlink: zone id is out of range [ 192.524860][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.562041][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.690799][T10306] netlink: 'syz.4.1178': attribute type 10 has an invalid length. [ 192.712750][T10306] syz_tun: entered promiscuous mode [ 192.976458][T10322] __nla_validate_parse: 1 callbacks suppressed [ 192.976477][T10322] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1179'. [ 193.000290][T10321] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1180'. [ 193.092777][T10327] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1181'. [ 193.258858][T10330] SET target dimension over the limit! [ 193.349153][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.599760][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.692685][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.800747][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.009703][ T13] bridge_slave_1: left allmulticast mode [ 194.016021][ T13] bridge_slave_1: left promiscuous mode [ 194.022792][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.037516][ T13] bridge_slave_0: left allmulticast mode [ 194.043191][ T13] bridge_slave_0: left promiscuous mode [ 194.052368][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.414352][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6210 ms [ 194.422398][ C1] lec:lec_tx_timeout: lec0 [ 194.427550][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 194.963007][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 194.977455][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 194.997902][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 195.006693][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 195.014472][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 195.035721][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 195.050423][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 195.067149][ T13] bond0 (unregistering): Released all slaves [ 195.382700][T10400] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1192'. [ 195.516300][T10411] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1192'. [ 195.567380][T10414] SET target dimension over the limit! [ 195.882831][T10433] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1198'. [ 195.903350][ T13] hsr_slave_0: left promiscuous mode [ 195.921374][ T13] hsr_slave_1: left promiscuous mode [ 195.931794][T10436] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1199'. [ 195.934282][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.952261][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.964090][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.972677][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.038015][ T13] veth1_macvtap: left promiscuous mode [ 196.043902][ T13] veth0_macvtap: left promiscuous mode [ 196.051697][T10444] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1197'. [ 196.065702][ T13] veth1_vlan: left promiscuous mode [ 196.071110][ T13] veth0_vlan: left promiscuous mode [ 196.844414][ T13] team0 (unregistering): Port device team_slave_1 removed [ 196.899732][ T13] team0 (unregistering): Port device team_slave_0 removed [ 197.072569][ T51] Bluetooth: hci4: command tx timeout [ 197.556813][T10479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1202'. [ 197.615399][T10479] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1202'. [ 197.796546][T10391] chnl_net:caif_netlink_parms(): no params data found [ 197.911197][T10495] netlink: 'syz.4.1206': attribute type 7 has an invalid length. [ 197.933410][T10495] netlink: 'syz.4.1206': attribute type 8 has an invalid length. [ 198.045195][T10495] gretap0: entered promiscuous mode [ 198.078696][T10495] batadv_slave_1: entered promiscuous mode [ 198.099426][T10495] gretap0: left promiscuous mode [ 198.121719][T10495] batadv_slave_1: left promiscuous mode [ 198.144461][T10506] __nla_validate_parse: 3 callbacks suppressed [ 198.144479][T10506] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1209'. [ 198.266778][T10515] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1209'. [ 198.357906][T10515] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1209'. [ 198.379399][T10391] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.412175][T10391] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.446898][T10391] bridge_slave_0: entered allmulticast mode [ 198.470532][T10391] bridge_slave_0: entered promiscuous mode [ 198.507347][T10506] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 19999 - 0 [ 198.519229][T10506] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 19999 - 0 [ 198.528903][T10506] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 19999 - 0 [ 198.541969][T10506] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 19999 - 0 [ 198.554463][T10525] SET target dimension over the limit! [ 198.577798][T10506] geneve2: entered promiscuous mode [ 198.585189][T10506] geneve2: entered allmulticast mode [ 198.598171][T10510] syzkaller1: entered promiscuous mode [ 198.610524][T10510] syzkaller1: entered allmulticast mode [ 198.666883][T10391] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.695597][T10391] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.703022][T10391] bridge_slave_1: entered allmulticast mode [ 198.711072][T10391] bridge_slave_1: entered promiscuous mode [ 198.884998][T10532] tipc: Enabling of bearer rejected, failed to enable media [ 198.905902][T10546] ipt_rpfilter: unknown options [ 198.937851][T10391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.979416][T10391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.133977][ T51] Bluetooth: hci4: command tx timeout [ 199.134712][T10554] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1220'. [ 199.180434][T10391] team0: Port device team_slave_0 added [ 199.197090][T10554] netlink: 'syz.1.1220': attribute type 7 has an invalid length. [ 199.219821][T10391] team0: Port device team_slave_1 added [ 199.230563][T10554] netlink: 'syz.1.1220': attribute type 8 has an invalid length. [ 199.273545][T10554] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1220'. [ 199.382090][T10554] gretap0: entered promiscuous mode [ 199.410810][T10554] batadv_slave_1: entered promiscuous mode [ 199.438986][T10554] gretap0: left promiscuous mode [ 199.467763][T10554] batadv_slave_1: left promiscuous mode [ 199.578291][T10391] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.595587][T10391] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.669770][T10391] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.690835][T10391] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.703240][T10391] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.729626][T10391] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.057590][T10591] netlink: 'syz.2.1227': attribute type 10 has an invalid length. [ 200.173364][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms [ 200.181439][ C1] lec:lec_tx_timeout: lec0 [ 200.186516][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 200.203697][T10391] hsr_slave_0: entered promiscuous mode [ 200.210718][T10391] hsr_slave_1: entered promiscuous mode [ 200.253571][T10591] syz_tun: entered promiscuous mode [ 200.288167][T10591] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 200.505528][T10613] netlink: 'syz.2.1232': attribute type 1 has an invalid length. [ 200.519843][T10604] syzkaller1: entered promiscuous mode [ 200.530611][T10604] syzkaller1: entered allmulticast mode [ 201.218573][ T5848] Bluetooth: hci4: command tx timeout [ 201.261485][T10641] SET target dimension over the limit! [ 201.531845][T10391] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 201.579379][T10391] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 201.615454][ T5848] Bluetooth: hci1: command 0x0406 tx timeout [ 201.617297][ T5837] Bluetooth: hci2: command 0x0401 tx timeout [ 201.638356][T10391] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 201.645542][T10652] netlink: 388 bytes leftover after parsing attributes in process `syz.2.1245'. [ 201.674107][T10391] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 201.893965][T10670] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1248'. [ 202.036837][T10680] netlink: 'syz.3.1250': attribute type 16 has an invalid length. [ 202.100163][T10391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.108037][T10680] netlink: 'syz.3.1250': attribute type 3 has an invalid length. [ 202.161212][T10686] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1250'. [ 202.196885][T10680] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1250'. [ 202.231309][T10391] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.293084][T10680] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1250'. [ 202.305178][ T6189] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.312374][ T6189] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.562336][ T6189] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.569583][ T6189] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.846677][T10716] netlink: 'syz.2.1258': attribute type 1 has an invalid length. [ 203.240897][T10729] syzkaller1: entered promiscuous mode [ 203.258568][T10729] syzkaller1: entered allmulticast mode [ 203.293640][ T51] Bluetooth: hci4: command tx timeout [ 203.321406][T10738] vxcan1: tx address claim with dlc 0 [ 203.524405][T10391] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.757029][T10391] veth0_vlan: entered promiscuous mode [ 203.770498][T10758] vlan2: entered promiscuous mode [ 203.793051][T10758] bridge0: entered promiscuous mode [ 203.849816][T10391] veth1_vlan: entered promiscuous mode [ 203.888840][T10763] __nla_validate_parse: 4 callbacks suppressed [ 203.888857][T10763] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1269'. [ 203.987719][T10391] veth0_macvtap: entered promiscuous mode [ 204.026693][T10391] veth1_macvtap: entered promiscuous mode [ 204.095486][T10391] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 204.139777][T10391] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.181441][T10391] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.204076][T10391] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.212841][T10391] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.241410][T10391] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.314529][T10776] SET target dimension over the limit! [ 204.418204][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.444994][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.551662][ T6189] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.577108][ T6189] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.162787][T10807] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1284'. [ 205.176795][T10806] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1284'. [ 205.193528][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 205.201594][ C1] lec:lec_tx_timeout: lec0 [ 205.206199][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 205.417147][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.577864][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.843413][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.069367][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.206007][ T12] bridge_slave_1: left allmulticast mode [ 206.211700][ T12] bridge_slave_1: left promiscuous mode [ 206.218113][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.227147][ T12] bridge_slave_0: left allmulticast mode [ 206.232799][ T12] bridge_slave_0: left promiscuous mode [ 206.238834][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.475502][T10828] FAULT_INJECTION: forcing a failure. [ 206.475502][T10828] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 206.547145][T10828] CPU: 0 UID: 0 PID: 10828 Comm: syz.2.1288 Not tainted 6.16.0-rc2-syzkaller-00162-g302251f1fdfd #0 PREEMPT(full) [ 206.547191][T10828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 206.547201][T10828] Call Trace: [ 206.547209][T10828] [ 206.547222][T10828] dump_stack_lvl+0x189/0x250 [ 206.547252][T10828] ? __pfx____ratelimit+0x10/0x10 [ 206.547276][T10828] ? __pfx_dump_stack_lvl+0x10/0x10 [ 206.547298][T10828] ? __pfx__printk+0x10/0x10 [ 206.547316][T10828] ? __might_fault+0xb0/0x130 [ 206.547343][T10828] should_fail_ex+0x414/0x560 [ 206.547377][T10828] _copy_from_user+0x2d/0xb0 [ 206.547394][T10828] ___sys_sendmsg+0x158/0x2a0 [ 206.547418][T10828] ? __pfx____sys_sendmsg+0x10/0x10 [ 206.547474][T10828] ? __fget_files+0x2a/0x420 [ 206.547491][T10828] ? __fget_files+0x3a0/0x420 [ 206.547517][T10828] __sys_sendmmsg+0x227/0x430 [ 206.547542][T10828] ? __pfx___sys_sendmmsg+0x10/0x10 [ 206.547559][T10828] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 206.547602][T10828] ? ksys_write+0x22a/0x250 [ 206.547619][T10828] ? __pfx_ksys_write+0x10/0x10 [ 206.547633][T10828] ? rcu_is_watching+0x15/0xb0 [ 206.547663][T10828] __x64_sys_sendmmsg+0xa0/0xc0 [ 206.547685][T10828] do_syscall_64+0xfa/0x3b0 [ 206.547699][T10828] ? lockdep_hardirqs_on+0x9c/0x150 [ 206.547722][T10828] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.547738][T10828] ? clear_bhb_loop+0x60/0xb0 [ 206.547759][T10828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.547774][T10828] RIP: 0033:0x7ff38818e929 [ 206.547789][T10828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.547804][T10828] RSP: 002b:00007ff389009038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 206.547822][T10828] RAX: ffffffffffffffda RBX: 00007ff3883b5fa0 RCX: 00007ff38818e929 [ 206.547834][T10828] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 206.547845][T10828] RBP: 00007ff389009090 R08: 0000000000000000 R09: 0000000000000000 [ 206.547856][T10828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.547866][T10828] R13: 0000000000000000 R14: 00007ff3883b5fa0 R15: 00007ffda42a2238 [ 206.547894][T10828] [ 206.915694][ T5852] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 206.924632][ T5852] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 206.942607][ T5852] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 206.952437][ T5852] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 206.967523][ T5852] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 207.109209][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 207.150302][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 207.176018][ T12] bond0 (unregistering): Released all slaves [ 207.466296][T10852] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1296'. [ 207.491760][T10853] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1297'. [ 207.522397][T10858] vxcan1: tx drop: invalid sa for name 0x0000000000000003 [ 207.815278][ T12] hsr_slave_0: left promiscuous mode [ 207.823296][ T12] hsr_slave_1: left promiscuous mode [ 207.844317][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.877589][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.900583][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.912709][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.951753][ T12] veth1_macvtap: left promiscuous mode [ 207.957570][ T12] veth0_macvtap: left promiscuous mode [ 207.964147][ T12] veth1_vlan: left promiscuous mode [ 207.969686][ T12] veth0_vlan: left promiscuous mode [ 208.548608][T10890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1303'. [ 208.668513][ T12] team0 (unregistering): Port device team_slave_1 removed [ 208.704114][ T12] team0 (unregistering): Port device team_slave_0 removed [ 209.053512][ T5852] Bluetooth: hci4: command tx timeout [ 209.521119][T10835] chnl_net:caif_netlink_parms(): no params data found [ 209.946005][T10835] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.954981][T10835] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.962209][T10835] bridge_slave_0: entered allmulticast mode [ 209.970055][T10835] bridge_slave_0: entered promiscuous mode [ 209.979125][T10835] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.986865][T10835] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.994242][T10835] bridge_slave_1: entered allmulticast mode [ 210.001983][T10835] bridge_slave_1: entered promiscuous mode [ 210.226615][T10835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.232380][T10942] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1316'. [ 210.282680][T10835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.400419][T10955] SET target dimension over the limit! [ 210.450881][T10835] team0: Port device team_slave_0 added [ 210.489091][T10835] team0: Port device team_slave_1 added [ 210.658041][T10835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.673476][T10835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.722469][T10835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.767606][T10835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.789958][T10835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.850497][T10835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.035186][T10983] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1325'. [ 211.053460][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5850 ms [ 211.061512][ C1] lec:lec_tx_timeout: lec0 [ 211.066719][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 211.116755][T10983] vlan3: entered promiscuous mode [ 211.122761][T10983] bridge0: entered promiscuous mode [ 211.134020][ T5852] Bluetooth: hci4: command tx timeout [ 211.199564][T10835] hsr_slave_0: entered promiscuous mode [ 211.265990][T10835] hsr_slave_1: entered promiscuous mode [ 211.873476][T11013] netlink: 'syz.4.1332': attribute type 29 has an invalid length. [ 211.910498][T11023] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1332'. [ 211.992711][T11025] IPVS: Unknown mcast interface: pim6reg1 [ 212.003847][T11016] netlink: 'syz.4.1332': attribute type 29 has an invalid length. [ 212.171261][T11037] tipc: Enabling of bearer rejected, failed to enable media [ 212.607706][T11054] SET target dimension over the limit! [ 212.680659][T10835] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 212.706928][T10835] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 212.726399][T10835] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 212.740374][T10835] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 212.957281][T10835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.030953][T10835] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.054800][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.062071][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.139563][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.146806][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.215614][ T5852] Bluetooth: hci4: command tx timeout [ 213.702847][T11106] SET target dimension over the limit! [ 214.024448][T10835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.199903][T10835] veth0_vlan: entered promiscuous mode [ 214.310471][T11129] netlink: 'syz.3.1357': attribute type 4 has an invalid length. [ 214.321990][T10835] veth1_vlan: entered promiscuous mode [ 214.536861][T10835] veth0_macvtap: entered promiscuous mode [ 214.623829][T10835] veth1_macvtap: entered promiscuous mode [ 214.796331][T10835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.853025][T11156] SET target dimension over the limit! [ 214.869717][T10835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.894499][ C0] net_ratelimit: 10 callbacks suppressed [ 214.894515][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.906592][T10835] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.963901][T10835] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.974008][T10835] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.982829][T10835] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.089577][T11164] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1368'. [ 215.293712][ T5852] Bluetooth: hci4: command tx timeout [ 215.327567][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.338929][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.486729][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.519746][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.743066][T11193] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1377'. [ 216.073456][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 216.081527][ C1] lec:lec_tx_timeout: lec0 [ 216.087813][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 216.521077][T11230] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1386'. [ 216.649545][ T1167] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.825719][ T1167] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.916938][ T1167] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.010447][ T1167] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.054214][ T59] wlan0: Trigger new scan to find an IBSS to join [ 217.171296][ T1167] bridge_slave_1: left allmulticast mode [ 217.178655][ T1167] bridge_slave_1: left promiscuous mode [ 217.184882][ T1167] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.196520][ T1167] bridge_slave_0: left allmulticast mode [ 217.202206][ T1167] bridge_slave_0: left promiscuous mode [ 217.211248][ T1167] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.606350][ T1167] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 217.617906][ T1167] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 217.629485][ T1167] bond0 (unregistering): Released all slaves [ 217.866342][T11269] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1389'. [ 217.925326][T11275] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1390'. [ 217.976260][T11277] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1390'. [ 218.466579][ T1167] hsr_slave_0: left promiscuous mode [ 218.489050][ T1167] hsr_slave_1: left promiscuous mode [ 218.508663][ T1167] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.536540][ T1167] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.564506][ T1167] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.592326][ T1167] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.680051][ T1167] veth1_macvtap: left promiscuous mode [ 218.702696][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 218.703350][ T1167] veth0_macvtap: left promiscuous mode [ 218.726162][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 218.737115][ T1167] veth1_vlan: left promiscuous mode [ 218.742790][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 218.754962][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 218.757000][ T1167] veth0_vlan: left promiscuous mode [ 218.769806][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 219.450955][ T1167] team0 (unregistering): Port device team_slave_1 removed [ 219.491382][ T1167] team0 (unregistering): Port device team_slave_0 removed [ 220.016292][ T59] wlan0: Trigger new scan to find an IBSS to join [ 220.183624][T11342] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 220.587785][T11309] chnl_net:caif_netlink_parms(): no params data found [ 220.633114][T11360] netlink: 2136 bytes leftover after parsing attributes in process `syz.2.1412'. [ 220.813957][ T51] Bluetooth: hci4: command tx timeout [ 221.036319][T11309] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.072217][T11309] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.103547][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 221.111626][ C1] lec:lec_tx_timeout: lec0 [ 221.116215][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 221.122647][T11309] bridge_slave_0: entered allmulticast mode [ 221.146395][T11309] bridge_slave_0: entered promiscuous mode [ 221.166386][T11309] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.183575][T11309] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.197793][T11309] bridge_slave_1: entered allmulticast mode [ 221.215040][T11309] bridge_slave_1: entered promiscuous mode [ 221.285421][T11374] FAULT_INJECTION: forcing a failure. [ 221.285421][T11374] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 221.305199][T11374] CPU: 1 UID: 0 PID: 11374 Comm: syz.2.1413 Not tainted 6.16.0-rc2-syzkaller-00162-g302251f1fdfd #0 PREEMPT(full) [ 221.305226][T11374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 221.305236][T11374] Call Trace: [ 221.305243][T11374] [ 221.305251][T11374] dump_stack_lvl+0x189/0x250 [ 221.305279][T11374] ? __pfx____ratelimit+0x10/0x10 [ 221.305302][T11374] ? __pfx_dump_stack_lvl+0x10/0x10 [ 221.305325][T11374] ? __pfx__printk+0x10/0x10 [ 221.305344][T11374] ? __might_fault+0xb0/0x130 [ 221.305372][T11374] should_fail_ex+0x414/0x560 [ 221.305398][T11374] _copy_from_user+0x2d/0xb0 [ 221.305416][T11374] ___sys_sendmsg+0x158/0x2a0 [ 221.305440][T11374] ? __pfx____sys_sendmsg+0x10/0x10 [ 221.305505][T11374] ? __might_fault+0xb0/0x130 [ 221.305525][T11374] __sys_sendmmsg+0x227/0x430 [ 221.305551][T11374] ? __pfx___sys_sendmmsg+0x10/0x10 [ 221.305569][T11374] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 221.305613][T11374] ? ksys_write+0x22a/0x250 [ 221.305632][T11374] ? __pfx_ksys_write+0x10/0x10 [ 221.305645][T11374] ? rcu_is_watching+0x15/0xb0 [ 221.305675][T11374] __x64_sys_sendmmsg+0xa0/0xc0 [ 221.305698][T11374] do_syscall_64+0xfa/0x3b0 [ 221.305713][T11374] ? lockdep_hardirqs_on+0x9c/0x150 [ 221.305735][T11374] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.305751][T11374] ? clear_bhb_loop+0x60/0xb0 [ 221.305772][T11374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.305788][T11374] RIP: 0033:0x7ff38818e929 [ 221.305803][T11374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.305818][T11374] RSP: 002b:00007ff389009038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 221.305852][T11374] RAX: ffffffffffffffda RBX: 00007ff3883b5fa0 RCX: 00007ff38818e929 [ 221.305865][T11374] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 221.305877][T11374] RBP: 00007ff389009090 R08: 0000000000000000 R09: 0000000000000000 [ 221.305888][T11374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 221.305898][T11374] R13: 0000000000000000 R14: 00007ff3883b5fa0 R15: 00007ffda42a2238 [ 221.305927][T11374] [ 221.612562][T11309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.641715][T11389] SET target dimension over the limit! [ 221.706656][T11309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.807653][T11402] netlink: 'syz.4.1422': attribute type 1 has an invalid length. [ 221.814112][T11395] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1419'. [ 222.009981][T11309] team0: Port device team_slave_0 added [ 222.066899][T11415] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1424'. [ 222.067116][T11309] team0: Port device team_slave_1 added [ 222.123267][T11415] netlink: 'syz.4.1424': attribute type 3 has an invalid length. [ 222.260190][T11309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.275578][T11309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.318097][T11309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.367728][T11309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.384715][T11309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.428175][T11309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.702377][T11309] hsr_slave_0: entered promiscuous mode [ 222.716488][T11309] hsr_slave_1: entered promiscuous mode [ 222.893537][ T51] Bluetooth: hci4: command tx timeout [ 222.976399][ T13] wlan0: Trigger new scan to find an IBSS to join [ 223.114908][T11465] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1435'. [ 223.145610][T11465] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1435'. [ 223.205043][T11465] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1435'. [ 223.355957][T11475] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1437'. [ 223.428137][T11481] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1439'. [ 223.518617][T11485] netlink: 'syz.3.1440': attribute type 10 has an invalid length. [ 223.536760][T11490] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1438'. [ 223.553437][T11485] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1440'. [ 223.638008][T11485] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 223.912095][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.930785][T11498] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1442'. [ 224.002277][T11501] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 224.123488][T11510] x_tables: unsorted entry at hook 3 [ 224.174422][T11514] x_tables: unsorted entry at hook 3 [ 224.592633][T11309] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 224.673969][T11309] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 224.745827][T11309] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 224.790993][T11309] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 224.975139][ T51] Bluetooth: hci4: command tx timeout [ 225.194171][T11309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.237098][T11309] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.266564][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.273804][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.338430][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.345678][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.514630][T11580] .: renamed from bond0 [ 225.530585][T11581] ip6t_srh: unknown srh invflags 4449 [ 225.648323][T11587] xt_TPROXY: Can be used only with -p tcp or -p udp [ 225.690126][T11587] nbd: must specify at least one socket [ 225.967218][T11595] netlink: 'syz.1.1466': attribute type 5 has an invalid length. [ 226.123421][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 226.131507][ C1] lec:lec_tx_timeout: lec0 [ 226.136626][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 226.442384][T11309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.627739][T11309] veth0_vlan: entered promiscuous mode [ 226.657516][T11309] veth1_vlan: entered promiscuous mode [ 226.740869][T11632] netlink: 'syz.1.1478': attribute type 2 has an invalid length. [ 226.810067][T11309] veth0_macvtap: entered promiscuous mode [ 226.862221][T11309] veth1_macvtap: entered promiscuous mode [ 226.919425][T11309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.966858][T11309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.001386][T11309] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.026466][T11309] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.039101][T11309] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.047985][T11309] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.064535][ T51] Bluetooth: hci4: command tx timeout [ 227.167000][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.187882][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.231482][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.253795][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.579692][T11664] __nla_validate_parse: 7 callbacks suppressed [ 227.579710][T11664] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1489'. [ 227.726423][T11672] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1493'. [ 227.736842][T11672] netlink: 'syz.2.1493': attribute type 7 has an invalid length. [ 227.762955][T11672] netlink: 'syz.2.1493': attribute type 8 has an invalid length. [ 227.772600][T11672] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1493'. [ 229.119352][T11672] gretap0: entered promiscuous mode [ 229.140304][T11672] batadv_slave_1: entered promiscuous mode [ 229.193424][T11672] gretap0: left promiscuous mode [ 229.203926][T11672] batadv_slave_1: left promiscuous mode [ 229.246659][ T1167] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.320061][ T1167] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.576578][T11677] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 229.721736][T11681] netlink: 'syz.4.1497': attribute type 10 has an invalid length. [ 229.755330][T11681] batman_adv: batadv0: Adding interface: team0 [ 229.761580][T11681] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 229.885496][T11695] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 230.051336][T11702] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1503'. [ 230.071468][ T1167] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.218318][ T1167] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.238207][T11707] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1505'. [ 230.271549][T11707] netlink: 'syz.1.1505': attribute type 7 has an invalid length. [ 230.290837][T11707] netlink: 'syz.1.1505': attribute type 8 has an invalid length. [ 230.299333][T11707] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1505'. [ 230.331830][T11707] gretap0: entered promiscuous mode [ 230.341090][T11707] batadv_slave_1: entered promiscuous mode [ 230.357676][T11707] gretap0: left promiscuous mode [ 230.381884][T11707] batadv_slave_1: left promiscuous mode [ 230.392527][ T5852] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 230.411328][ T5852] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 230.421778][ T5852] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 230.431078][ T5852] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 230.439027][ T5852] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 230.492682][T11717] netlink: 'syz.4.1508': attribute type 10 has an invalid length. [ 230.535578][T11719] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1510'. [ 230.547597][T11719] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1510'. [ 230.584201][T11717] veth1_macvtap: left promiscuous mode [ 230.591231][T11717] macsec0: entered promiscuous mode [ 230.603695][T11717] macsec0: entered allmulticast mode [ 230.669259][T11717] veth1_macvtap: entered promiscuous mode [ 230.689185][T11717] veth1_macvtap: entered allmulticast mode [ 230.696593][T11717] macsec0: left promiscuous mode [ 230.701846][T11717] macsec0: left allmulticast mode [ 230.711331][T11717] veth1_macvtap: left allmulticast mode [ 230.942299][T11733] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1516'. [ 230.959127][ T1167] bridge_slave_1: left allmulticast mode [ 230.985632][ T1167] bridge_slave_1: left promiscuous mode [ 231.005318][ T1167] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.027926][ T1167] bridge_slave_0: left allmulticast mode [ 231.044965][ T1167] bridge_slave_0: left promiscuous mode [ 231.064491][ T1167] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.112616][T11741] netlink: 'syz.1.1519': attribute type 83 has an invalid length. [ 231.143364][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 231.151448][ C1] lec:lec_tx_timeout: lec0 [ 231.156411][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 231.222007][T11746] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1520'. [ 231.251554][T11746] netlink: 'syz.1.1520': attribute type 7 has an invalid length. [ 231.299118][T11746] netlink: 'syz.1.1520': attribute type 8 has an invalid length. [ 231.577352][T11762] netlink: 'syz.3.1524': attribute type 3 has an invalid length. [ 231.588526][T11762] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 231.608758][T11762] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 231.762395][ T1167] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 231.774981][ T1167] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 231.786939][ T1167] bond0 (unregistering): Released all slaves [ 231.818578][T11746] gretap0: entered promiscuous mode [ 231.825462][T11746] batadv_slave_1: entered promiscuous mode [ 231.832334][T11746] gretap0: left promiscuous mode [ 231.839435][T11746] batadv_slave_1: left promiscuous mode [ 232.497082][ T51] Bluetooth: hci4: command tx timeout [ 232.763126][ T1167] hsr_slave_0: left promiscuous mode [ 232.784687][ T1167] hsr_slave_1: left promiscuous mode [ 232.790793][ T1167] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.834003][ T1167] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.894480][ T1167] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.908299][ T1167] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.993998][ T1167] veth1_macvtap: left promiscuous mode [ 233.003591][ T1167] veth0_macvtap: left promiscuous mode [ 233.014090][ T1167] veth1_vlan: left promiscuous mode [ 233.019459][ T1167] veth0_vlan: left promiscuous mode [ 233.769231][ T1167] team0 (unregistering): Port device team_slave_1 removed [ 233.810634][ T1167] team0 (unregistering): Port device team_slave_0 removed [ 234.231136][T11712] chnl_net:caif_netlink_parms(): no params data found [ 234.573507][ T51] Bluetooth: hci4: command tx timeout [ 234.754015][T11712] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.790512][T11712] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.830016][T11712] bridge_slave_0: entered allmulticast mode [ 234.848478][T11712] bridge_slave_0: entered promiscuous mode [ 234.876510][T11712] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.889575][T11886] validate_nla: 2 callbacks suppressed [ 234.889593][T11886] netlink: 'syz.2.1552': attribute type 21 has an invalid length. [ 234.900798][T11712] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.911851][T11712] bridge_slave_1: entered allmulticast mode [ 234.918743][T11886] __nla_validate_parse: 2 callbacks suppressed [ 234.918758][T11886] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1552'. [ 234.946010][T11712] bridge_slave_1: entered promiscuous mode [ 235.095359][T11712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 235.127766][T11712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.353018][T11712] team0: Port device team_slave_0 added [ 235.379000][T11712] team0: Port device team_slave_1 added [ 235.586602][T11712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.615651][T11712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.666435][T11712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.737375][T11712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.762415][T11712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.802061][T11712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.824953][T11924] xt_limit: Overflow, try lower: 0/0 [ 235.973890][T11927] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1559'. [ 235.979975][T11712] hsr_slave_0: entered promiscuous mode [ 235.991901][T11712] hsr_slave_1: entered promiscuous mode [ 236.030990][T11933] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1559'. [ 236.119880][T11940] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1564'. [ 236.147566][T11927] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1559'. [ 236.158981][T11941] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1566'. [ 236.168170][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 236.168197][ C1] lec:lec_tx_timeout: lec0 [ 236.176737][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 236.288824][T11944] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1564'. [ 236.336927][T11951] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1568'. [ 236.355640][T11944] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 236.356897][T11951] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1568'. [ 236.392317][T11944] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 236.407130][T11944] gretap1: entered promiscuous mode [ 236.408319][T11955] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1568'. [ 236.423634][T11944] gretap1: entered allmulticast mode [ 236.573480][T11951] veth5: entered allmulticast mode [ 236.653690][ T5837] Bluetooth: hci4: command tx timeout [ 236.817709][T11966] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 236.909993][T11966] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 237.700813][T12013] netlink: 'syz.1.1580': attribute type 12 has an invalid length. [ 237.848948][T12018] IPVS: length: 8 != 1152 [ 237.927000][T12014] delete_channel: no stack [ 238.150303][T11712] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 238.215340][T11712] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 238.232896][T11712] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 238.299356][T11712] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 238.326873][T12036] syzkaller1: entered promiscuous mode [ 238.359496][T12036] syzkaller1: entered allmulticast mode [ 238.736124][ T5837] Bluetooth: hci4: command 0x0419 tx timeout [ 238.869671][T11712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.978877][T11712] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.129060][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.136301][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.204378][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.211583][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.241866][T12094] netlink: 'syz.3.1600': attribute type 83 has an invalid length. [ 240.162951][T11712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.355559][T12153] netlink: 'syz.4.1612': attribute type 29 has an invalid length. [ 240.439151][T12157] __nla_validate_parse: 10 callbacks suppressed [ 240.439169][T12157] netlink: 596 bytes leftover after parsing attributes in process `syz.4.1612'. [ 240.479464][T11712] veth0_vlan: entered promiscuous mode [ 240.539396][T11712] veth1_vlan: entered promiscuous mode [ 240.646483][T11712] veth0_macvtap: entered promiscuous mode [ 240.707001][T11712] veth1_macvtap: entered promiscuous mode [ 240.716661][T12175] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1615'. [ 240.797134][T12188] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1616'. [ 240.814290][ T51] Bluetooth: hci4: command 0x0419 tx timeout [ 240.837059][T11712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 240.883810][T12188] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1616'. [ 240.905994][T11712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 240.934198][T12188] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1616'. [ 240.982387][T11712] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.001598][T11712] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.021777][T12191] netlink: 'syz.3.1619': attribute type 13 has an invalid length. [ 241.044874][T11712] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.064186][T11712] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.098830][T12191] gretap0: refused to change device tx_queue_len [ 241.112791][T12191] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 241.183368][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 241.191404][ C1] lec:lec_tx_timeout: lec0 [ 241.203452][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 241.625087][ T6189] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.650801][ T6189] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.894549][ T51] Bluetooth: hci4: command 0x0419 tx timeout [ 243.931707][ T3485] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.941753][ T3485] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.109193][T12284] netlink: 'syz.4.1634': attribute type 27 has an invalid length. [ 244.157132][T12284] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1634'. [ 244.886522][ T3485] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.000128][ T3485] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.170524][ T3485] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.222660][ T3485] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.347154][ T3485] bridge_slave_1: left allmulticast mode [ 245.352833][ T3485] bridge_slave_1: left promiscuous mode [ 245.361055][ T3485] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.371076][ T3485] bridge_slave_0: left allmulticast mode [ 245.378331][ T3485] bridge_slave_0: left promiscuous mode [ 245.384178][ T3485] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.718252][ T3485] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 245.728932][ T3485] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.739119][ T3485] bond0 (unregistering): Released all slaves [ 246.011155][ T3485] hsr_slave_0: left promiscuous mode [ 246.022655][ T3485] hsr_slave_1: left promiscuous mode [ 246.028967][ T3485] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.037424][ T3485] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.050230][ T3485] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.060612][ T3485] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.089426][ T3485] veth1_macvtap: left promiscuous mode [ 246.098274][ T3485] veth0_macvtap: left promiscuous mode [ 246.105604][ T3485] veth1_vlan: left promiscuous mode [ 246.110956][ T3485] veth0_vlan: left promiscuous mode [ 246.277698][T12340] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1646'. [ 246.309141][T12341] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1647'. [ 246.718949][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 246.730286][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 246.747980][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 246.756842][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 246.770541][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 246.961171][ T3485] team0 (unregistering): Port device team_slave_1 removed [ 246.983347][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5780 ms [ 246.991502][ C1] lec:lec_tx_timeout: lec0 [ 246.996412][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 247.007343][ T3485] team0 (unregistering): Port device team_slave_0 removed [ 247.444919][ T5973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.514251][ T1790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 247.636293][ T1790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 248.365108][T12393] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 248.556463][T12350] chnl_net:caif_netlink_parms(): no params data found [ 248.823813][ T51] Bluetooth: hci4: command tx timeout [ 249.050179][T12350] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.093645][T12350] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.105459][T12350] bridge_slave_0: entered allmulticast mode [ 249.118124][T12350] bridge_slave_0: entered promiscuous mode [ 249.146293][T12350] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.179370][T12350] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.187344][T12350] bridge_slave_1: entered allmulticast mode [ 249.211053][T12350] bridge_slave_1: entered promiscuous mode [ 249.220244][T12444] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1670'. [ 249.262027][T12441] : entered promiscuous mode [ 249.450723][T12350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.501029][T12350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.609038][T12463] netlink: 'syz.2.1675': attribute type 83 has an invalid length. [ 249.641137][T12350] team0: Port device team_slave_0 added [ 249.659605][T12350] team0: Port device team_slave_1 added [ 249.791665][T12350] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.805618][T12350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.814143][T12471] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1679'. [ 249.834225][T12350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.947813][T12350] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.958641][T12350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.992473][T12350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 250.037611][T12442] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 250.146297][T12350] hsr_slave_0: entered promiscuous mode [ 250.163711][T12350] hsr_slave_1: entered promiscuous mode [ 250.285550][T12487] macvlan2: entered promiscuous mode [ 250.290914][T12487] macvlan2: entered allmulticast mode [ 250.521707][T12500] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1687'. [ 250.538539][T12500] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1687'. [ 250.772888][T12515] netlink: 'syz.4.1690': attribute type 21 has an invalid length. [ 250.804037][T12515] netlink: 'syz.4.1690': attribute type 6 has an invalid length. [ 250.818131][T12513] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 250.828452][T12520] set match dimension is over the limit! [ 250.833422][T12515] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1690'. [ 250.894054][ T51] Bluetooth: hci4: command tx timeout [ 251.210063][T12533] can: request_module (can-proto-0) failed. [ 251.317747][T12540] sch_fq: defrate 7 ignored. [ 251.351170][T12536] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1693'. [ 251.447831][T12547] netlink: 'syz.1.1697': attribute type 10 has an invalid length. [ 251.456061][T12547] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1697'. [ 251.507625][T12551] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1699'. [ 251.590289][T12547] geneve0: entered promiscuous mode [ 251.599634][T12547] team0: Port device geneve0 added [ 251.617038][T12553] pim6reg: entered allmulticast mode [ 251.626530][T12553] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1700'. [ 251.651191][T12553] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1700'. [ 251.676686][T12553] netlink: 'syz.2.1700': attribute type 5 has an invalid length. [ 252.023502][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 252.031564][ C1] lec:lec_tx_timeout: lec0 [ 252.036879][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 252.093887][T12554] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.186035][T12556] pim6reg: left allmulticast mode [ 252.470151][T12350] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 252.538029][T12574] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1705'. [ 252.542712][T12350] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 252.593296][T12350] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 252.616642][T12580] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1708'. [ 252.648938][T12350] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 252.707865][T12580] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.783907][T12591] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1709'. [ 252.792821][T12591] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1709'. [ 252.821104][T12592] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1711'. [ 252.852111][T12580] bridge_slave_1 (unregistering): left allmulticast mode [ 252.872162][T12580] bridge_slave_1 (unregistering): left promiscuous mode [ 252.879925][T12580] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.920604][T12601] xt_TCPMSS: Only works on TCP SYN packets [ 252.973520][ T51] Bluetooth: hci4: command tx timeout [ 253.247360][T12622] netlink: 'syz.4.1717': attribute type 1 has an invalid length. [ 253.312923][T12622] 8021q: adding VLAN 0 to HW filter on device bond3 [ 253.377491][T12633] batman_adv: batadv0: Adding interface: dummy0 [ 253.417975][T12633] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 253.706977][T12646] bridge1: entered promiscuous mode [ 253.729604][T12646] bridge1: entered allmulticast mode [ 253.770004][T12350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.912877][T12350] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.947744][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.955058][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.025493][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.032669][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.171132][T12666] netlink: 'syz.1.1728': attribute type 25 has an invalid length. [ 254.247611][T12676] netlink: 'syz.3.1729': attribute type 2 has an invalid length. [ 254.901823][T12711] openvswitch: netlink: Actions may not be safe on all matching packets [ 254.950762][T12350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.054346][ T51] Bluetooth: hci4: command tx timeout [ 255.072396][T12350] veth0_vlan: entered promiscuous mode [ 255.131680][T12350] veth1_vlan: entered promiscuous mode [ 255.282234][T12350] veth0_macvtap: entered promiscuous mode [ 255.323210][T12350] veth1_macvtap: entered promiscuous mode [ 255.372253][T12350] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.416079][T12350] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.450622][T12350] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.479492][T12350] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.493883][T12350] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.511662][T12350] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.781476][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.811067][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.903203][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.927303][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.181628][T12768] SET target dimension over the limit! [ 256.594585][T12788] __nla_validate_parse: 9 callbacks suppressed [ 256.594603][T12788] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1759'. [ 256.667133][T12791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1762'. [ 256.708685][T12791] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1762'. [ 256.757657][ T1167] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.825422][T12795] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 256.879475][T12797] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1762'. [ 257.043484][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 257.051566][ C1] lec:lec_tx_timeout: lec0 [ 257.056553][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 257.170193][ T1167] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.278226][ T1167] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.399225][ T1167] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.610876][ T1167] bridge_slave_1: left allmulticast mode [ 257.617216][ T1167] bridge_slave_1: left promiscuous mode [ 257.623539][ T1167] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.635616][ T1167] bridge_slave_0: left allmulticast mode [ 257.641288][ T1167] bridge_slave_0: left promiscuous mode [ 257.647425][ T1167] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.954704][ T1167] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 257.968097][ T1167] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 257.978648][ T1167] bond0 (unregistering): Released all slaves [ 258.455601][ T1167] hsr_slave_0: left promiscuous mode [ 258.518398][ T1167] hsr_slave_1: left promiscuous mode [ 258.525910][T12834] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1767'. [ 258.536142][ T1167] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.537891][T12835] sctp: [Deprecated]: syz.3.1765 (pid 12835) Use of int in max_burst socket option. [ 258.537891][T12835] Use struct sctp_assoc_value instead [ 258.576101][ T1167] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.628348][ T1167] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.667474][ T1167] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.670719][T12838] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1765'. [ 258.719467][T12838] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1765'. [ 258.768055][ T1167] veth1_macvtap: left promiscuous mode [ 258.797694][ T1167] veth0_macvtap: left promiscuous mode [ 258.811000][ T1167] veth1_vlan: left promiscuous mode [ 258.830295][ T1167] veth0_vlan: left promiscuous mode [ 259.169087][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 259.184037][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 259.204835][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 259.232270][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 259.241722][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 259.364664][T12869] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1775'. [ 259.761495][ T1167] team0 (unregistering): Port device team_slave_1 removed [ 259.802652][ T1167] team0 (unregistering): Port device team_slave_0 removed [ 260.212710][T12858] bond0: entered promiscuous mode [ 260.247047][T12858] batadv_slave_0: entered promiscuous mode [ 260.255036][T12858] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 260.265189][T12858] hsr1: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network [ 260.276627][T12858] hsr1: entered promiscuous mode [ 260.990592][T12859] chnl_net:caif_netlink_parms(): no params data found [ 261.071710][T12936] xt_ecn: cannot match TCP bits for non-tcp packets [ 261.297207][ T51] Bluetooth: hci4: command tx timeout [ 261.613162][T12964] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1793'. [ 261.767227][T12859] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.778753][T12859] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.787951][T12859] bridge_slave_0: entered allmulticast mode [ 261.821526][T12859] bridge_slave_0: entered promiscuous mode [ 261.856855][T12859] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.879196][T12859] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.895396][T12859] bridge_slave_1: entered allmulticast mode [ 261.917432][T12859] bridge_slave_1: entered promiscuous mode [ 262.063346][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 262.071417][ C1] lec:lec_tx_timeout: lec0 [ 262.076582][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 262.091497][T12984] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1798'. [ 262.178277][T12988] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1801'. [ 262.180439][T12859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.208621][T12989] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1802'. [ 262.232230][T12988] netlink: 'syz.2.1801': attribute type 7 has an invalid length. [ 262.242581][T12859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.261421][T12991] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1802'. [ 262.269217][T12988] netlink: 'syz.2.1801': attribute type 8 has an invalid length. [ 262.299501][T12991] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1802'. [ 262.313751][T12988] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1801'. [ 262.330100][T12994] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1803'. [ 262.334032][T12991] netlink: 'syz.3.1802': attribute type 12 has an invalid length. [ 262.375466][T12994] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 262.383377][T12991] netlink: 'syz.3.1802': attribute type 11 has an invalid length. [ 262.411118][T12988] gretap0: entered promiscuous mode [ 262.433665][T12988] batadv_slave_1: entered promiscuous mode [ 262.453254][T12988] gretap0: left promiscuous mode [ 262.472860][T12988] batadv_slave_1: left promiscuous mode [ 262.601716][T12859] team0: Port device team_slave_0 added [ 262.624279][T12859] team0: Port device team_slave_1 added [ 262.747789][T13012] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1808'. [ 262.834812][T12859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.841792][T12859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.954440][T12859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.986661][T12859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.999657][T12859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.053914][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 263.081772][T12859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.316302][T12859] hsr_slave_0: entered promiscuous mode [ 263.348305][T13041] No such timeout policy "syz0" [ 263.354900][T12859] hsr_slave_1: entered promiscuous mode [ 263.374195][ T5837] Bluetooth: hci4: command tx timeout [ 263.401018][T13044] xt_CT: You must specify a L4 protocol and not use inversions on it [ 263.562789][T13052] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1818'. [ 263.598574][T13052] netlink: 'syz.4.1818': attribute type 7 has an invalid length. [ 263.607314][T13054] netlink: 'syz.3.1819': attribute type 1 has an invalid length. [ 263.621699][T13052] netlink: 'syz.4.1818': attribute type 8 has an invalid length. [ 263.651139][T13052] gretap0: entered promiscuous mode [ 263.657860][T13052] batadv_slave_1: entered promiscuous mode [ 263.669487][T13052] gretap0: left promiscuous mode [ 263.682416][T13052] batadv_slave_1: left promiscuous mode [ 264.313200][T13082] netlink: 'syz.1.1827': attribute type 1 has an invalid length. [ 264.377030][T13082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.585065][T12859] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 264.611417][T12859] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 264.647652][T12859] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 264.688168][T12859] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 264.795542][T13100] netlink: 'syz.1.1831': attribute type 1 has an invalid length. [ 264.813061][T13110] netlink: 'syz.4.1832': attribute type 7 has an invalid length. [ 264.882111][T13110] gretap0: entered promiscuous mode [ 264.908803][T13110] batadv_slave_1: entered promiscuous mode [ 264.950626][T13110] gretap0: left promiscuous mode [ 264.970036][T13110] batadv_slave_1: left promiscuous mode [ 265.006647][T12859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.060021][T13121] hsr_slave_0: left promiscuous mode [ 265.077165][T13121] hsr_slave_1: left promiscuous mode [ 265.366241][T12859] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.403052][T12904] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.410294][T12904] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.462395][ T5837] Bluetooth: hci4: command tx timeout [ 265.490593][T12895] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.497771][T12895] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.590503][T13144] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 265.601724][T13144] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 265.612723][T13144] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 265.623116][T13144] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 265.637927][T13144] geneve3: entered promiscuous mode [ 265.645007][T13144] geneve3: entered allmulticast mode [ 266.204680][T13180] gretap0: entered promiscuous mode [ 266.242818][T13180] batadv_slave_1: entered promiscuous mode [ 266.291816][T13180] gretap0: left promiscuous mode [ 266.328763][T13180] batadv_slave_1: left promiscuous mode [ 266.619583][T12859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.826847][T13202] __nla_validate_parse: 16 callbacks suppressed [ 266.826865][T13202] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1850'. [ 266.832076][T12859] veth0_vlan: entered promiscuous mode [ 266.870676][T12859] veth1_vlan: entered promiscuous mode [ 267.057509][T12859] veth0_macvtap: entered promiscuous mode [ 267.083542][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 267.091594][ C1] lec:lec_tx_timeout: lec0 [ 267.096433][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 267.144907][T13209] xt_hashlimit: Unknown mode mask FFFFFFFF, kernel too old? [ 267.178574][T12859] veth1_macvtap: entered promiscuous mode [ 267.284213][T12859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 267.301800][T13221] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1854'. [ 267.344716][T12859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 267.377580][T12859] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.415682][T12859] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.446428][T12859] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.501051][T12859] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.533804][ T5837] Bluetooth: hci4: command tx timeout [ 267.547616][T13234] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1857'. [ 267.632895][T13239] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1858'. [ 267.674420][T13239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1858'. [ 267.931705][T12895] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.975305][T12895] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.061415][T13257] validate_nla: 4 callbacks suppressed [ 268.061464][T13257] netlink: 'syz.2.1865': attribute type 1 has an invalid length. [ 268.091270][T12903] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.095089][T13257] netlink: 216 bytes leftover after parsing attributes in process `syz.2.1865'. [ 268.114021][T12903] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.383606][T13273] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 268.522335][T12887] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.635629][T12887] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.785803][T12887] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.921706][T12887] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.373162][T12887] bridge_slave_1: left allmulticast mode [ 269.382022][T12887] bridge_slave_1: left promiscuous mode [ 269.388209][T12887] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.398317][T12887] bridge_slave_0: left allmulticast mode [ 269.404919][T12887] bridge_slave_0: left promiscuous mode [ 269.412032][T12887] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.836852][T12887] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 269.848603][T12887] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 269.861090][T12887] bond0 (unregistering): Released all slaves [ 270.131298][T12887] hsr_slave_0: left promiscuous mode [ 270.148263][T12887] hsr_slave_1: left promiscuous mode [ 270.155919][T12887] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.167342][T12887] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.178448][T12887] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.247624][T12887] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.323618][T12887] veth1_macvtap: left promiscuous mode [ 270.332898][T12887] veth0_macvtap: left promiscuous mode [ 270.332945][T13329] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1872'. [ 270.350094][T12887] veth1_vlan: left promiscuous mode [ 270.373187][T12887] veth0_vlan: left promiscuous mode [ 270.650915][T13346] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1875'. [ 270.869872][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 270.886593][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 270.898821][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 270.923709][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 270.933291][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 271.182974][T13364] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1876'. [ 271.198798][T13364] x_tables: duplicate underflow at hook 1 [ 271.368639][T12887] team0 (unregistering): Port device team_slave_1 removed [ 271.411357][T12887] team0 (unregistering): Port device team_slave_0 removed [ 272.103507][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 272.111585][ C1] lec:lec_tx_timeout: lec0 [ 272.116339][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 272.181421][T13378] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1880'. [ 272.220823][T13366] syz.2.1877 (13366) used greatest stack depth: 17992 bytes left [ 272.490390][T13355] chnl_net:caif_netlink_parms(): no params data found [ 272.745294][T13404] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1889'. [ 272.883986][T13402] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 272.912419][T13402] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 272.927168][T13399] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1887'. [ 272.983844][ T5837] Bluetooth: hci4: command tx timeout [ 273.006131][T13419] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 273.352645][T13355] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.364230][T13355] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.371940][T13355] bridge_slave_0: entered allmulticast mode [ 273.397592][T13355] bridge_slave_0: entered promiscuous mode [ 273.442371][T13355] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.475099][T13355] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.493044][T13355] bridge_slave_1: entered allmulticast mode [ 273.501026][T13431] netlink: 252 bytes leftover after parsing attributes in process `syz.2.1892'. [ 273.517387][T13355] bridge_slave_1: entered promiscuous mode [ 273.632709][T13355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.712593][T13355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.941671][T13449] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1897'. [ 273.952878][T13449] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1897'. [ 273.967341][T13449] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1897'. [ 274.069894][T13355] team0: Port device team_slave_0 added [ 274.118494][T13355] team0: Port device team_slave_1 added [ 274.280745][T13468] netlink: 'syz.3.1902': attribute type 10 has an invalid length. [ 274.389973][T13355] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 274.432501][T13355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.492088][T13355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.516489][T13480] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 274.518223][T13355] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.540663][T13355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.573050][T13355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.773938][T13495] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1908'. [ 274.810424][T13355] hsr_slave_0: entered promiscuous mode [ 274.820573][T13355] hsr_slave_1: entered promiscuous mode [ 275.054341][ T5837] Bluetooth: hci4: command tx timeout [ 275.132274][T13513] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1912'. [ 275.301143][T13513] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1912'. [ 276.249377][T13560] IPVS: length: 157 != 24 [ 276.296626][T13563] FAULT_INJECTION: forcing a failure. [ 276.296626][T13563] name failslab, interval 1, probability 0, space 0, times 0 [ 276.309547][T13563] CPU: 0 UID: 0 PID: 13563 Comm: syz.3.1924 Not tainted 6.16.0-rc2-syzkaller-00162-g302251f1fdfd #0 PREEMPT(full) [ 276.309571][T13563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 276.309582][T13563] Call Trace: [ 276.309590][T13563] [ 276.309598][T13563] dump_stack_lvl+0x189/0x250 [ 276.309625][T13563] ? __pfx____ratelimit+0x10/0x10 [ 276.309649][T13563] ? __pfx_dump_stack_lvl+0x10/0x10 [ 276.309671][T13563] ? __pfx__printk+0x10/0x10 [ 276.309705][T13563] should_fail_ex+0x414/0x560 [ 276.309732][T13563] should_failslab+0xa8/0x100 [ 276.309752][T13563] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 276.309770][T13563] ? nf_ct_ext_add+0x1ab/0x450 [ 276.309790][T13563] ? rcu_is_watching+0x15/0xb0 [ 276.309816][T13563] ? nf_ct_ext_add+0x1ab/0x450 [ 276.309835][T13563] krealloc_noprof+0x124/0x340 [ 276.309856][T13563] nf_ct_ext_add+0x1ab/0x450 [ 276.309884][T13563] init_conntrack+0x680/0xef0 [ 276.309913][T13563] ? __pfx_init_conntrack+0x10/0x10 [ 276.309939][T13563] ? __pfx___nf_conntrack_find_get+0x10/0x10 [ 276.309962][T13563] ? __siphash_unaligned+0x232/0x3b0 [ 276.309986][T13563] nf_conntrack_in+0xbf2/0x1600 [ 276.310032][T13563] ? __pfx_nf_conntrack_in+0x10/0x10 [ 276.310057][T13563] ? ip6t_do_table+0x1db/0x1560 [ 276.310080][T13563] ? __pfx_ip6t_do_table+0x10/0x10 [ 276.310106][T13563] ? NF_HOOK+0x9a/0x3a0 [ 276.310130][T13563] ? ipv6_defrag+0x2d6/0x3b0 [ 276.310150][T13563] ? __pfx_ipv6_conntrack_in+0x10/0x10 [ 276.310170][T13563] nf_hook_slow+0xc5/0x220 [ 276.310191][T13563] NF_HOOK+0x206/0x3a0 [ 276.310208][T13563] ? skb_orphan+0x4c/0xd0 [ 276.310227][T13563] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 276.310245][T13563] ? NF_HOOK+0x9a/0x3a0 [ 276.310265][T13563] ? __pfx_NF_HOOK+0x10/0x10 [ 276.310288][T13563] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 276.310328][T13563] __netif_receive_skb+0xd3/0x380 [ 276.310353][T13563] ? netif_receive_skb+0x115/0x790 [ 276.310375][T13563] netif_receive_skb+0x1cb/0x790 [ 276.310398][T13563] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 276.310419][T13563] ? _copy_from_iter+0x24c/0x16f0 [ 276.310441][T13563] ? __pfx_netif_receive_skb+0x10/0x10 [ 276.310464][T13563] ? skb_partial_csum_set+0x107/0x360 [ 276.310487][T13563] ? tun_rx_batched+0x160/0x730 [ 276.310512][T13563] tun_rx_batched+0x1b9/0x730 [ 276.310534][T13563] ? __lock_acquire+0xab9/0xd20 [ 276.310561][T13563] ? __pfx_tun_rx_batched+0x10/0x10 [ 276.310588][T13563] ? tun_get_user+0x2549/0x3ce0 [ 276.310625][T13563] tun_get_user+0x298e/0x3ce0 [ 276.310652][T13563] ? tun_get_user+0x2549/0x3ce0 [ 276.310687][T13563] ? aa_file_perm+0x11f/0xed0 [ 276.310709][T13563] ? __pfx_tun_get_user+0x10/0x10 [ 276.310729][T13563] ? aa_file_perm+0x11f/0xed0 [ 276.310749][T13563] ? aa_file_perm+0x3e7/0xed0 [ 276.310784][T13563] ? ref_tracker_alloc+0x318/0x460 [ 276.310803][T13563] ? __lock_acquire+0xab9/0xd20 [ 276.310826][T13563] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 276.310853][T13563] ? tun_get+0x1c/0x2f0 [ 276.310882][T13563] ? tun_get+0x1c/0x2f0 [ 276.310903][T13563] ? tun_get+0x1c/0x2f0 [ 276.310929][T13563] tun_chr_write_iter+0x113/0x200 [ 276.310955][T13563] vfs_write+0x548/0xa90 [ 276.310984][T13563] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 276.311007][T13563] ? __pfx_vfs_write+0x10/0x10 [ 276.311042][T13563] ? __fget_files+0x2a/0x420 [ 276.311070][T13563] ksys_write+0x145/0x250 [ 276.311090][T13563] ? __pfx_ksys_write+0x10/0x10 [ 276.311103][T13563] ? rcu_is_watching+0x15/0xb0 [ 276.311131][T13563] ? do_syscall_64+0xbe/0x3b0 [ 276.311152][T13563] do_syscall_64+0xfa/0x3b0 [ 276.311167][T13563] ? lockdep_hardirqs_on+0x9c/0x150 [ 276.311190][T13563] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.311206][T13563] ? clear_bhb_loop+0x60/0xb0 [ 276.311227][T13563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.311243][T13563] RIP: 0033:0x7f235658e929 [ 276.311260][T13563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.311274][T13563] RSP: 002b:00007f235731c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 276.311292][T13563] RAX: ffffffffffffffda RBX: 00007f23567b5fa0 RCX: 00007f235658e929 [ 276.311314][T13563] RDX: 000000000000009e RSI: 0000200000000440 RDI: 0000000000000003 [ 276.311324][T13563] RBP: 00007f235731c090 R08: 0000000000000000 R09: 0000000000000000 [ 276.311335][T13563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.311345][T13563] R13: 0000000000000000 R14: 00007f23567b5fa0 R15: 00007ffcd7f133b8 [ 276.311375][T13563] [ 276.312779][T13355] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 276.848756][T13355] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 276.871083][T13355] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 276.946342][T13355] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 277.123391][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 277.131475][ C1] lec:lec_tx_timeout: lec0 [ 277.136639][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 277.158351][ T5837] Bluetooth: hci4: command tx timeout [ 277.348780][T13605] netlink: 'syz.3.1934': attribute type 83 has an invalid length. [ 277.421346][T13355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.447395][T13607] netlink: 'syz.1.1935': attribute type 29 has an invalid length. [ 277.470016][T13607] netlink: 'syz.1.1935': attribute type 29 has an invalid length. [ 277.496026][T13607] __nla_validate_parse: 5 callbacks suppressed [ 277.496046][T13607] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1935'. [ 277.534607][T13607] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1935'. [ 277.566453][T13355] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.579642][T13612] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1936'. [ 277.597844][T12905] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.605052][T12905] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.627309][T13612] netlink: 'syz.4.1936': attribute type 7 has an invalid length. [ 277.657799][T13612] netlink: 'syz.4.1936': attribute type 8 has an invalid length. [ 277.690761][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.698005][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.715313][T13612] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1936'. [ 277.742462][T13616] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1937'. [ 277.795730][T13612] gretap0: entered promiscuous mode [ 277.825226][T13612] batadv_slave_1: entered promiscuous mode [ 277.876735][T13612] gretap0: left promiscuous mode [ 277.883102][T13612] batadv_slave_1: left promiscuous mode [ 278.375225][T13649] netlink: 'syz.4.1943': attribute type 3 has an invalid length. [ 278.622639][T13355] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.691143][T13660] rdma_rxe: rxe_newlink: failed to add veth1_vlan [ 278.866181][T13355] veth0_vlan: entered promiscuous mode [ 278.941257][T13355] veth1_vlan: entered promiscuous mode [ 279.036340][T13355] veth0_macvtap: entered promiscuous mode [ 279.077318][T13670] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1949'. [ 279.213985][ T5837] Bluetooth: hci4: command tx timeout [ 279.245910][T13355] veth1_macvtap: entered promiscuous mode [ 279.332234][T13355] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.369531][T13355] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.429789][T13355] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.474024][T13659] infiniband syz2: set down [ 279.474697][T13355] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.478795][T13659] infiniband syz2: added veth1_vlan [ 279.520384][T13355] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.522380][T13659] syz2: rxe_create_cq: returned err = -12 [ 279.539776][T13355] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.551779][T13659] infiniband syz2: Couldn't create ib_mad CQ [ 279.568846][T13659] infiniband syz2: Couldn't open port 1 [ 279.591211][T13688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1955'. [ 279.694897][T13688] macsec0: entered promiscuous mode [ 279.700668][T13688] team0: entered promiscuous mode [ 279.705775][T13688] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:579 [ 279.715120][T13688] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 13688, name: syz.2.1955 [ 279.715241][T13659] RDS/IB: syz2: added [ 279.724265][T13688] preempt_count: 201, expected: 0 [ 279.724317][T13688] RCU nest depth: 0, expected: 0 [ 279.738344][T13688] 3 locks held by syz.2.1955/13688: [ 279.743598][T13688] #0: ffffffff8fa14db8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 279.750113][T13659] smc: adding ib device syz2 with port count 1 [ 279.753127][T13688] #1: ffffffff8f510348 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 279.768584][T13688] #2: ffff8880795f2368 (&macsec_netdev_addr_lock_key/1){+...}-{3:3}, at: dev_uc_add+0x67/0x120 [ 279.779162][T13688] Preemption disabled at: [ 279.779176][T13688] [] dev_uc_add+0x56/0x120 [ 279.789561][T13688] CPU: 0 UID: 0 PID: 13688 Comm: syz.2.1955 Not tainted 6.16.0-rc2-syzkaller-00162-g302251f1fdfd #0 PREEMPT(full) [ 279.789589][T13688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 279.789601][T13688] Call Trace: [ 279.789609][T13688] [ 279.789617][T13688] dump_stack_lvl+0x189/0x250 [ 279.789651][T13688] ? __pfx_dump_stack_lvl+0x10/0x10 [ 279.789677][T13688] ? __pfx__printk+0x10/0x10 [ 279.789701][T13688] ? print_lock_name+0xde/0x100 [ 279.789718][T13688] ? dev_uc_add+0x56/0x120 [ 279.789745][T13688] __might_resched+0x495/0x610 [ 279.789775][T13688] ? dev_uc_add+0x56/0x120 [ 279.789794][T13688] ? __pfx___might_resched+0x10/0x10 [ 279.789820][T13688] ? irq_work_queue+0xbc/0x140 [ 279.789859][T13688] __mutex_lock+0x106/0xe80 [ 279.789889][T13688] ? team_change_rx_flags+0x38/0x220 [ 279.789919][T13688] ? __pfx___mutex_lock+0x10/0x10 [ 279.789940][T13688] ? netdev_info+0x10a/0x160 [ 279.789961][T13688] ? __sock_sendmsg+0x219/0x270 [ 279.789989][T13688] ? __pfx_netdev_info+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 279.790021][T13688] team_change_rx_flags+0x38/0x220 [ 279.790051][T13688] ? __pfx_team_change_rx_flags+0x10/0x10 [ 279.790075][T13688] __dev_set_promiscuity+0x531/0x740 [ 279.790098][T13688] ? __pfx_netdev_info+0x10/0x10 [ 279.790124][T13688] netif_set_promiscuity+0x50/0xe0 [ 279.790149][T13688] dev_set_promiscuity+0x126/0x260 [ 279.790173][T13688] ? __pfx_macsec_dev_change_rx_flags+0x10/0x10 [ 279.790199][T13688] __dev_set_promiscuity+0x531/0x740 [ 279.790223][T13688] ? __hw_addr_add_ex+0x3c5/0x770 [ 279.790247][T13688] __dev_set_rx_mode+0x17c/0x260 [ 279.790272][T13688] dev_uc_add+0xc8/0x120 [ 279.790296][T13688] macsec_dev_open+0xd9/0x530 [ 279.790321][T13688] ? ib_device_get_by_netdev+0x46b/0x4d0 [ 279.790345][T13688] ? __pfx_macsec_dev_open+0x10/0x10 [ 279.790370][T13688] ? ib_device_get_by_netdev+0x84/0x4d0 [ 279.790391][T13688] ? hsr_netdev_notify+0x29e/0xcf0 [ 279.790411][T13688] ? __pfx_ib_device_get_by_netdev+0x10/0x10 [ 279.790437][T13688] ? udp_tunnel_nic_netdevice_event+0x1b6/0x1500 [ 279.790466][T13688] ? ip6_route_dev_notify+0x9a/0x5b0 [ 279.790489][T13688] ? notifier_call_chain+0x3bf/0x3e0 [ 279.790524][T13688] __dev_open+0x46d/0x880 [ 279.790549][T13688] ? __pfx___dev_open+0x10/0x10 [ 279.790579][T13688] __dev_change_flags+0x1ea/0x6d0 [ 279.790602][T13688] ? validate_linkmsg+0x765/0x950 [ 279.790628][T13688] ? __pfx___dev_change_flags+0x10/0x10 [ 279.790661][T13688] rtnl_newlink_create+0x555/0xb00 [ 279.790696][T13688] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 279.790715][T13688] ? rtnl_newlink+0x8db/0x1c70 [ 279.790737][T13688] ? __pfx___mutex_lock+0x10/0x10 [ 279.790765][T13688] ? ns_capable+0x8a/0xf0 [ 279.790792][T13688] rtnl_newlink+0x16d6/0x1c70 [ 279.790828][T13688] ? __pfx_rtnl_newlink+0x10/0x10 [ 279.790856][T13688] ? __lock_acquire+0xab9/0xd20 [ 279.790893][T13688] ? __lock_acquire+0xab9/0xd20 [ 279.790943][T13688] ? is_bpf_text_address+0x26/0x2b0 [ 279.790974][T13688] ? is_bpf_text_address+0x292/0x2b0 [ 279.790997][T13688] ? is_bpf_text_address+0x26/0x2b0 [ 279.791024][T13688] ? kernel_text_address+0xa5/0xe0 [ 279.791060][T13688] ? __lock_acquire+0xab9/0xd20 [ 279.791112][T13688] ? __pfx_rtnl_newlink+0x10/0x10 [ 279.791131][T13688] rtnetlink_rcv_msg+0x7cf/0xb70 [ 279.791155][T13688] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 279.791173][T13688] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 279.791211][T13688] netlink_rcv_skb+0x205/0x470 [ 279.791234][T13688] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 279.791255][T13688] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 279.791290][T13688] ? netlink_deliver_tap+0x2e/0x1b0 [ 279.791310][T13688] ? netlink_deliver_tap+0x2e/0x1b0 [ 279.791337][T13688] netlink_unicast+0x758/0x8d0 [ 279.791369][T13688] netlink_sendmsg+0x805/0xb30 [ 279.791400][T13688] ? __pfx_netlink_sendmsg+0x10/0x10 [ 279.791425][T13688] ? aa_sock_msg_perm+0x94/0x160 [ 279.791451][T13688] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 279.791473][T13688] ? __pfx_netlink_sendmsg+0x10/0x10 [ 279.791495][T13688] __sock_sendmsg+0x219/0x270 [ 279.791525][T13688] ____sys_sendmsg+0x505/0x830 [ 279.791554][T13688] ? __pfx_____sys_sendmsg+0x10/0x10 [ 279.791586][T13688] ? import_iovec+0x74/0xa0 [ 279.791610][T13688] ___sys_sendmsg+0x21f/0x2a0 [ 279.791636][T13688] ? __pfx____sys_sendmsg+0x10/0x10 [ 279.791699][T13688] ? __fget_files+0x2a/0x420 [ 279.791718][T13688] ? __fget_files+0x3a0/0x420 [ 279.791750][T13688] __x64_sys_sendmsg+0x19b/0x260 [ 279.791776][T13688] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 279.791810][T13688] ? rcu_is_watching+0x15/0xb0 [ 279.791842][T13688] ? do_syscall_64+0xbe/0x3b0 [ 279.791863][T13688] do_syscall_64+0xfa/0x3b0 [ 279.791879][T13688] ? lockdep_hardirqs_on+0x9c/0x150 [ 279.791903][T13688] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.791921][T13688] ? clear_bhb_loop+0x60/0xb0 [ 279.791949][T13688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.791966][T13688] RIP: 0033:0x7ff38818e929 [ 279.791985][T13688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 279.792000][T13688] RSP: 002b:00007ff389009038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 279.792019][T13688] RAX: ffffffffffffffda RBX: 00007ff3883b5fa0 RCX: 00007ff38818e929 [ 279.792033][T13688] RDX: 0000000000000800 RSI: 0000200000000280 RDI: 0000000000000007 [ 279.792045][T13688] RBP: 00007ff388210b39 R08: 0000000000000000 R09: 0000000000000000 [ 279.792057][T13688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 279.792067][T13688] R13: 0000000000000000 R14: 00007ff3883b5fa0 R15: 00007ffda42a2238 [ 279.792100][T13688] [ 279.792125][T13688] [ 279.828291][T13659] smc: ib device syz2 port 1 has pnetid [ 279.830286][T13688] ============================= [ 280.342915][T13688] [ BUG: Invalid wait context ] [ 280.347755][T13688] 6.16.0-rc2-syzkaller-00162-g302251f1fdfd #0 Tainted: G W [ 280.356407][T13688] ----------------------------- [ 280.361236][T13688] syz.2.1955/13688 is trying to lock: [ 280.366588][T13688] ffff8880343a8e00 (team->team_lock_key#3){+.+.}-{4:4}, at: team_change_rx_flags+0x38/0x220 [ 280.376681][T13688] other info that might help us debug this: [ 280.382563][T13688] context-{5:5} [ 280.386006][T13688] 3 locks held by syz.2.1955/13688: [ 280.391188][T13688] #0: ffffffff8fa14db8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 280.400671][T13688] #1: ffffffff8f510348 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 280.409713][T13688] #2: ffff8880795f2368 (&macsec_netdev_addr_lock_key/1){+...}-{3:3}, at: dev_uc_add+0x67/0x120 [ 280.420164][T13688] stack backtrace: [ 280.423870][T13688] CPU: 0 UID: 0 PID: 13688 Comm: syz.2.1955 Tainted: G W 6.16.0-rc2-syzkaller-00162-g302251f1fdfd #0 PREEMPT(full) [ 280.423891][T13688] Tainted: [W]=WARN [ 280.423896][T13688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 280.423904][T13688] Call Trace: [ 280.423911][T13688] [ 280.423917][T13688] dump_stack_lvl+0x189/0x250 [ 280.423938][T13688] ? __pfx_dump_stack_lvl+0x10/0x10 [ 280.423957][T13688] ? __pfx__printk+0x10/0x10 [ 280.423972][T13688] ? print_lock_name+0xde/0x100 [ 280.423986][T13688] __lock_acquire+0xbcb/0xd20 [ 280.424007][T13688] ? team_change_rx_flags+0x38/0x220 [ 280.424026][T13688] lock_acquire+0x120/0x360 [ 280.424042][T13688] ? team_change_rx_flags+0x38/0x220 [ 280.424064][T13688] __mutex_lock+0x182/0xe80 [ 280.424077][T13688] ? team_change_rx_flags+0x38/0x220 [ 280.424097][T13688] ? team_change_rx_flags+0x38/0x220 [ 280.424116][T13688] ? __pfx___mutex_lock+0x10/0x10 [ 280.424127][T13688] ? netdev_info+0x10a/0x160 [ 280.424142][T13688] ? __sock_sendmsg+0x219/0x270 [ 280.424161][T13688] ? __pfx_netdev_info+0x10/0x10 [ 280.424178][T13688] team_change_rx_flags+0x38/0x220 [ 280.424198][T13688] ? __pfx_team_change_rx_flags+0x10/0x10 [ 280.424215][T13688] __dev_set_promiscuity+0x531/0x740 [ 280.424231][T13688] ? __pfx_netdev_info+0x10/0x10 [ 280.424246][T13688] netif_set_promiscuity+0x50/0xe0 [ 280.424262][T13688] dev_set_promiscuity+0x126/0x260 [ 280.424277][T13688] ? __pfx_macsec_dev_change_rx_flags+0x10/0x10 [ 280.424296][T13688] __dev_set_promiscuity+0x531/0x740 [ 280.424311][T13688] ? __hw_addr_add_ex+0x3c5/0x770 [ 280.424327][T13688] __dev_set_rx_mode+0x17c/0x260 [ 280.424342][T13688] dev_uc_add+0xc8/0x120 [ 280.424357][T13688] macsec_dev_open+0xd9/0x530 [ 280.424375][T13688] ? ib_device_get_by_netdev+0x46b/0x4d0 [ 280.424393][T13688] ? __pfx_macsec_dev_open+0x10/0x10 [ 280.424411][T13688] ? ib_device_get_by_netdev+0x84/0x4d0 [ 280.424426][T13688] ? hsr_netdev_notify+0x29e/0xcf0 [ 280.424442][T13688] ? __pfx_ib_device_get_by_netdev+0x10/0x10 [ 280.424459][T13688] ? udp_tunnel_nic_netdevice_event+0x1b6/0x1500 [ 280.424476][T13688] ? ip6_route_dev_notify+0x9a/0x5b0 [ 280.424491][T13688] ? notifier_call_chain+0x3bf/0x3e0 [ 280.424512][T13688] __dev_open+0x46d/0x880 [ 280.424527][T13688] ? __pfx___dev_open+0x10/0x10 [ 280.424542][T13688] __dev_change_flags+0x1ea/0x6d0 [ 280.424558][T13688] ? validate_linkmsg+0x765/0x950 [ 280.424575][T13688] ? __pfx___dev_change_flags+0x10/0x10 [ 280.424593][T13688] rtnl_newlink_create+0x555/0xb00 [ 280.424613][T13688] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 280.424627][T13688] ? rtnl_newlink+0x8db/0x1c70 [ 280.424640][T13688] ? __pfx___mutex_lock+0x10/0x10 [ 280.424655][T13688] ? ns_capable+0x8a/0xf0 [ 280.424673][T13688] rtnl_newlink+0x16d6/0x1c70 [ 280.424691][T13688] ? __pfx_rtnl_newlink+0x10/0x10 [ 280.424707][T13688] ? __lock_acquire+0xab9/0xd20 [ 280.424726][T13688] ? __lock_acquire+0xab9/0xd20 [ 280.424755][T13688] ? is_bpf_text_address+0x26/0x2b0 [ 280.424775][T13688] ? is_bpf_text_address+0x292/0x2b0 [ 280.424792][T13688] ? is_bpf_text_address+0x26/0x2b0 [ 280.424810][T13688] ? kernel_text_address+0xa5/0xe0 [ 280.424830][T13688] ? __lock_acquire+0xab9/0xd20 [ 280.424853][T13688] ? __pfx_rtnl_newlink+0x10/0x10 [ 280.424865][T13688] rtnetlink_rcv_msg+0x7cf/0xb70 [ 280.424879][T13688] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 280.424891][T13688] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 280.424909][T13688] netlink_rcv_skb+0x205/0x470 [ 280.424924][T13688] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 280.424937][T13688] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 280.424955][T13688] ? netlink_deliver_tap+0x2e/0x1b0 [ 280.424969][T13688] ? netlink_deliver_tap+0x2e/0x1b0 [ 280.424984][T13688] netlink_unicast+0x758/0x8d0 [ 280.425001][T13688] netlink_sendmsg+0x805/0xb30 [ 280.425019][T13688] ? __pfx_netlink_sendmsg+0x10/0x10 [ 280.425034][T13688] ? aa_sock_msg_perm+0x94/0x160 [ 280.425051][T13688] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 280.425067][T13688] ? __pfx_netlink_sendmsg+0x10/0x10 [ 280.425081][T13688] __sock_sendmsg+0x219/0x270 [ 280.425100][T13688] ____sys_sendmsg+0x505/0x830 [ 280.425118][T13688] ? __pfx_____sys_sendmsg+0x10/0x10 [ 280.425136][T13688] ? import_iovec+0x74/0xa0 [ 280.425150][T13688] ___sys_sendmsg+0x21f/0x2a0 [ 280.425166][T13688] ? __pfx____sys_sendmsg+0x10/0x10 [ 280.425193][T13688] ? __fget_files+0x2a/0x420 [ 280.425206][T13688] ? __fget_files+0x3a0/0x420 [ 280.425223][T13688] __x64_sys_sendmsg+0x19b/0x260 [ 280.425239][T13688] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 280.425257][T13688] ? rcu_is_watching+0x15/0xb0 [ 280.425277][T13688] ? do_syscall_64+0xbe/0x3b0 [ 280.425290][T13688] do_syscall_64+0xfa/0x3b0 [ 280.425301][T13688] ? lockdep_hardirqs_on+0x9c/0x150 [ 280.425319][T13688] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.425331][T13688] ? clear_bhb_loop+0x60/0xb0 [ 280.425345][T13688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.425358][T13688] RIP: 0033:0x7ff38818e929 [ 280.425371][T13688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 280.425383][T13688] RSP: 002b:00007ff389009038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 280.425396][T13688] RAX: ffffffffffffffda RBX: 00007ff3883b5fa0 RCX: 00007ff38818e929 [ 280.425406][T13688] RDX: 0000000000000800 RSI: 0000200000000280 RDI: 0000000000000007 [ 280.425415][T13688] RBP: 00007ff388210b39 R08: 0000000000000000 R09: 0000000000000000 [ 280.425423][T13688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 280.425431][T13688] R13: 0000000000000000 R14: 00007ff3883b5fa0 R15: 00007ffda42a2238 [ 280.425446][T13688] [ 281.599163][T13695] bond0: (slave syz_tun): Releasing backup interface [ 282.073274][T12904] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.130391][T12904] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.143432][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 282.151459][ C1] lec:lec_tx_timeout: lec0 [ 282.156539][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 282.219409][T12904] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.272273][T12904] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.832351][T12904] bridge_slave_1: left allmulticast mode [ 282.839045][T12904] bridge_slave_1: left promiscuous mode [ 282.845962][T12904] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.854753][T12904] bridge_slave_0: left allmulticast mode [ 282.860398][T12904] bridge_slave_0: left promiscuous mode [ 282.866361][T12904] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.939657][T12904] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 282.949695][T12904] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 282.959198][T12904] bond0 (unregistering): Released all slaves [ 283.096239][T12904] hsr_slave_0: left promiscuous mode [ 283.114003][T12904] hsr_slave_1: left promiscuous mode [ 283.130916][T12904] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 283.138688][T12904] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.147077][T12904] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 283.155252][T12904] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.166170][T12904] veth1_macvtap: left promiscuous mode [ 283.171720][T12904] veth0_macvtap: left promiscuous mode [ 283.177921][T12904] veth1_vlan: left promiscuous mode [ 283.183220][T12904] veth0_vlan: left promiscuous mode [ 283.359968][T12904] team0 (unregistering): Port device team_slave_1 removed [ 283.370735][T12904] team0 (unregistering): Port device team_slave_0 removed [ 287.163469][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 287.171502][ C1] lec:lec_tx_timeout: lec0 [ 287.176014][ C1] lec:lec_start_xmit: lec0:No lecd attached