last executing test programs: 1m39.704225348s ago: executing program 1 (id=2255): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r0, 0x101, 0x5, &(0x7f0000000040), 0x4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r2) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000180)="21c1179e5e021e73dae18977bb6bfe8fe7", 0x11}], 0x1, &(0x7f0000000780)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4000005}], 0x1, 0x40044) 1m28.738522324s ago: executing program 3 (id=2439): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000180)={r1, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) socket(0xa, 0x3, 0x3a) r3 = socket$inet6(0xa, 0x3, 0x2c) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000380)={0x1d, r5, 0x0, {0x2, 0x0, 0x4}, 0x2}, 0x18) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmmsg(r8, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x4c42bb4f92, 0x0) shutdown(r8, 0x0) sendmsg$can_j1939(r4, &(0x7f0000000280)={&(0x7f0000000100)={0x1d, r7, 0x3, {0x1, 0x0, 0x4}}, 0x18, &(0x7f0000000200)={0x0}}, 0x880) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x3c1, 0x3, 0x550, 0x3a0, 0x150, 0x150, 0x0, 0xf8010000, 0x480, 0x238, 0x238, 0x480, 0x238, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0x338, 0x3a0, 0x0, {}, [@common=@inet=@sctp={{0x148}, {[], [], [], 0x2, [], 0x0, 0x4}}, @common=@inet=@sctp={{0x148}, {[], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'veth1\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x5, 0x4}, {0x2, 0x6, 0x5}, {0x4, 0x2, 0x6}, 0x1, 0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0) r9 = socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007110a9000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$packet_int(r9, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r9, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7fe, 0xf83, 0x8}, 0x1c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'ip_vti0\x00', 0x0}) r12 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r12, &(0x7f0000000500)='z', 0x12, 0x0, &(0x7f0000000200)={0x11, 0x88a8, r11, 0x1, 0x3, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa0086dd607428dd00183afffcec0000000000000000000000000000ff0200000000000000000000000000018900907800"/72], 0x0) 1m20.086726039s ago: executing program 1 (id=2255): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r0, 0x101, 0x5, &(0x7f0000000040), 0x4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r2) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000180)="21c1179e5e021e73dae18977bb6bfe8fe7", 0x11}], 0x1, &(0x7f0000000780)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4000005}], 0x1, 0x40044) 1m10.509231361s ago: executing program 3 (id=2439): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000180)={r1, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) socket(0xa, 0x3, 0x3a) r3 = socket$inet6(0xa, 0x3, 0x2c) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000380)={0x1d, r5, 0x0, {0x2, 0x0, 0x4}, 0x2}, 0x18) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmmsg(r8, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x4c42bb4f92, 0x0) shutdown(r8, 0x0) sendmsg$can_j1939(r4, &(0x7f0000000280)={&(0x7f0000000100)={0x1d, r7, 0x3, {0x1, 0x0, 0x4}}, 0x18, &(0x7f0000000200)={0x0}}, 0x880) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x3c1, 0x3, 0x550, 0x3a0, 0x150, 0x150, 0x0, 0xf8010000, 0x480, 0x238, 0x238, 0x480, 0x238, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0x338, 0x3a0, 0x0, {}, [@common=@inet=@sctp={{0x148}, {[], [], [], 0x2, [], 0x0, 0x4}}, @common=@inet=@sctp={{0x148}, {[], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'veth1\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x5, 0x4}, {0x2, 0x6, 0x5}, {0x4, 0x2, 0x6}, 0x1, 0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0) r9 = socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007110a9000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$packet_int(r9, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r9, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7fe, 0xf83, 0x8}, 0x1c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'ip_vti0\x00', 0x0}) r12 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r12, &(0x7f0000000500)='z', 0x12, 0x0, &(0x7f0000000200)={0x11, 0x88a8, r11, 0x1, 0x3, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa0086dd607428dd00183afffcec0000000000000000000000000000ff0200000000000000000000000000018900907800"/72], 0x0) 59.966148774s ago: executing program 1 (id=2255): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r0, 0x101, 0x5, &(0x7f0000000040), 0x4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r2) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000180)="21c1179e5e021e73dae18977bb6bfe8fe7", 0x11}], 0x1, &(0x7f0000000780)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4000005}], 0x1, 0x40044) 54.068093347s ago: executing program 3 (id=2439): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000180)={r1, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) socket(0xa, 0x3, 0x3a) r3 = socket$inet6(0xa, 0x3, 0x2c) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000380)={0x1d, r5, 0x0, {0x2, 0x0, 0x4}, 0x2}, 0x18) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmmsg(r8, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x4c42bb4f92, 0x0) shutdown(r8, 0x0) sendmsg$can_j1939(r4, &(0x7f0000000280)={&(0x7f0000000100)={0x1d, r7, 0x3, {0x1, 0x0, 0x4}}, 0x18, &(0x7f0000000200)={0x0}}, 0x880) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x3c1, 0x3, 0x550, 0x3a0, 0x150, 0x150, 0x0, 0xf8010000, 0x480, 0x238, 0x238, 0x480, 0x238, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0x338, 0x3a0, 0x0, {}, [@common=@inet=@sctp={{0x148}, {[], [], [], 0x2, [], 0x0, 0x4}}, @common=@inet=@sctp={{0x148}, {[], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'veth1\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x5, 0x4}, {0x2, 0x6, 0x5}, {0x4, 0x2, 0x6}, 0x1, 0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0) r9 = socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007110a9000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$packet_int(r9, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r9, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7fe, 0xf83, 0x8}, 0x1c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'ip_vti0\x00', 0x0}) r12 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r12, &(0x7f0000000500)='z', 0x12, 0x0, &(0x7f0000000200)={0x11, 0x88a8, r11, 0x1, 0x3, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa0086dd607428dd00183afffcec0000000000000000000000000000ff0200000000000000000000000000018900907800"/72], 0x0) 41.578458471s ago: executing program 1 (id=2255): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r0, 0x101, 0x5, &(0x7f0000000040), 0x4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r2) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000180)="21c1179e5e021e73dae18977bb6bfe8fe7", 0x11}], 0x1, &(0x7f0000000780)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4000005}], 0x1, 0x40044) 40.184036239s ago: executing program 3 (id=2439): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000180)={r1, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) socket(0xa, 0x3, 0x3a) r3 = socket$inet6(0xa, 0x3, 0x2c) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000380)={0x1d, r5, 0x0, {0x2, 0x0, 0x4}, 0x2}, 0x18) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmmsg(r8, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x4c42bb4f92, 0x0) shutdown(r8, 0x0) sendmsg$can_j1939(r4, &(0x7f0000000280)={&(0x7f0000000100)={0x1d, r7, 0x3, {0x1, 0x0, 0x4}}, 0x18, &(0x7f0000000200)={0x0}}, 0x880) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x3c1, 0x3, 0x550, 0x3a0, 0x150, 0x150, 0x0, 0xf8010000, 0x480, 0x238, 0x238, 0x480, 0x238, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0x338, 0x3a0, 0x0, {}, [@common=@inet=@sctp={{0x148}, {[], [], [], 0x2, [], 0x0, 0x4}}, @common=@inet=@sctp={{0x148}, {[], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'veth1\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x5, 0x4}, {0x2, 0x6, 0x5}, {0x4, 0x2, 0x6}, 0x1, 0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0) r9 = socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007110a9000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$packet_int(r9, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r9, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7fe, 0xf83, 0x8}, 0x1c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'ip_vti0\x00', 0x0}) r12 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r12, &(0x7f0000000500)='z', 0x12, 0x0, &(0x7f0000000200)={0x11, 0x88a8, r11, 0x1, 0x3, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa0086dd607428dd00183afffcec0000000000000000000000000000ff0200000000000000000000000000018900907800"/72], 0x0) 25.840206183s ago: executing program 1 (id=2255): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r0, 0x101, 0x5, &(0x7f0000000040), 0x4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r2) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000180)="21c1179e5e021e73dae18977bb6bfe8fe7", 0x11}], 0x1, &(0x7f0000000780)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4000005}], 0x1, 0x40044) 24.772977202s ago: executing program 3 (id=2439): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000180)={r1, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) socket(0xa, 0x3, 0x3a) r3 = socket$inet6(0xa, 0x3, 0x2c) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000380)={0x1d, r5, 0x0, {0x2, 0x0, 0x4}, 0x2}, 0x18) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmmsg(r8, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x4c42bb4f92, 0x0) shutdown(r8, 0x0) sendmsg$can_j1939(r4, &(0x7f0000000280)={&(0x7f0000000100)={0x1d, r7, 0x3, {0x1, 0x0, 0x4}}, 0x18, &(0x7f0000000200)={0x0}}, 0x880) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x3c1, 0x3, 0x550, 0x3a0, 0x150, 0x150, 0x0, 0xf8010000, 0x480, 0x238, 0x238, 0x480, 0x238, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0x338, 0x3a0, 0x0, {}, [@common=@inet=@sctp={{0x148}, {[], [], [], 0x2, [], 0x0, 0x4}}, @common=@inet=@sctp={{0x148}, {[], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'veth1\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x5, 0x4}, {0x2, 0x6, 0x5}, {0x4, 0x2, 0x6}, 0x1, 0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0) r9 = socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007110a9000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$packet_int(r9, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r9, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7fe, 0xf83, 0x8}, 0x1c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'ip_vti0\x00', 0x0}) r12 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r12, &(0x7f0000000500)='z', 0x12, 0x0, &(0x7f0000000200)={0x11, 0x88a8, r11, 0x1, 0x3, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa0086dd607428dd00183afffcec0000000000000000000000000000ff0200000000000000000000000000018900907800"/72], 0x0) 11.424180129s ago: executing program 1 (id=2255): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r0, 0x101, 0x5, &(0x7f0000000040), 0x4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r2) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000180)="21c1179e5e021e73dae18977bb6bfe8fe7", 0x11}], 0x1, &(0x7f0000000780)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4000005}], 0x1, 0x40044) 10.216283267s ago: executing program 3 (id=2439): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000180)={r1, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) socket(0xa, 0x3, 0x3a) r3 = socket$inet6(0xa, 0x3, 0x2c) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000380)={0x1d, r5, 0x0, {0x2, 0x0, 0x4}, 0x2}, 0x18) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmmsg(r8, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x4c42bb4f92, 0x0) shutdown(r8, 0x0) sendmsg$can_j1939(r4, &(0x7f0000000280)={&(0x7f0000000100)={0x1d, r7, 0x3, {0x1, 0x0, 0x4}}, 0x18, &(0x7f0000000200)={0x0}}, 0x880) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x3c1, 0x3, 0x550, 0x3a0, 0x150, 0x150, 0x0, 0xf8010000, 0x480, 0x238, 0x238, 0x480, 0x238, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0x338, 0x3a0, 0x0, {}, [@common=@inet=@sctp={{0x148}, {[], [], [], 0x2, [], 0x0, 0x4}}, @common=@inet=@sctp={{0x148}, {[], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'veth1\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x5, 0x4}, {0x2, 0x6, 0x5}, {0x4, 0x2, 0x6}, 0x1, 0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0) r9 = socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007110a9000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$packet_int(r9, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r9, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7fe, 0xf83, 0x8}, 0x1c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'ip_vti0\x00', 0x0}) r12 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r12, &(0x7f0000000500)='z', 0x12, 0x0, &(0x7f0000000200)={0x11, 0x88a8, r11, 0x1, 0x3, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa0086dd607428dd00183afffcec0000000000000000000000000000ff0200000000000000000000000000018900907800"/72], 0x0) 3.947523324s ago: executing program 2 (id=3544): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet(0x2, 0x5, 0x6) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x54, r5, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8001}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x10000}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xfffffffa}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x10}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x4010}, 0x4000801) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@bridge_setlink={0x34, 0x13, 0xa2f, 0x70bd25, 0x0, {0x7, 0x0, 0x68, r3, 0x900, 0x62010}, [@IFLA_LINKINFO={0x14, 0x1a, 0x0, 0x1, @vlan={{0x9}, {0x4, 0x4}}}]}, 0x34}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000000)={'gretap0\x00', &(0x7f0000000200)={'ip_vti0\x00', r3, 0x10, 0x40, 0x18000000, 0x1, {{0x3b, 0x4, 0x0, 0x8, 0xec, 0x67, 0x0, 0x40, 0x29, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0x44, 0x86, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@multicast1, 0xc532}, {@multicast2, 0x4}, {@private=0xa010102, 0xc}, {@dev={0xac, 0x14, 0x14, 0xe}, 0x78}, {@private=0xa010101, 0x1}, {@multicast1, 0x80}, {@multicast2, 0x8}]}, @ra={0x94, 0x4}, @cipso={0x86, 0x28, 0x1, [{0x0, 0x7, "4778e8ee67"}, {0x1, 0x9, "d39b756f3861d0"}, {0x0, 0x8, "56dfeb811e78"}, {0x2, 0xa, "f1147bf8ff07910d"}]}, @timestamp_prespec={0x44, 0x2c, 0xf4, 0x3, 0x1, [{@private=0xa010101, 0x47be}, {@multicast1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xd08}, {@loopback, 0x4}, {@rand_addr=0x64010102, 0xfffffffe}]}, @noop, @generic={0x83, 0x2}, @noop, @cipso={0x86, 0x37, 0x3, [{0x7, 0xd, "7f2a1ea53f6d0a49f28a89"}, {0x6, 0x4, "b410"}, {0x0, 0xf, "945f6d03d327077a9b94ef3fff"}, {0x0, 0x11, "abc4e59174a7302f2a75c52743a3d1"}]}]}}}}}) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000e40)={0x2c, 0x2b, 0xb, 0x0, 0x0, {0x9}, [@typed={0x4, 0x3}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x88H'}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r0}]}, 0x2c}}, 0x0) 3.617247172s ago: executing program 2 (id=3547): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x6c}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080026ee"], 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000080)={@val={0x0, 0x6003}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x4000, 0x0, 0xfc, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0x9, 0x0, @void}}}}}}}}, 0x32) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r5) sendmsg$ETHTOOL_MSG_RINGS_SET(r6, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x3c, r7, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x4}, @ETHTOOL_A_RINGS_RX_MINI={0x8}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x3}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x9460}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x844) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) 3.427841062s ago: executing program 4 (id=3548): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x880, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000100)=[{0x35, 0x0, 0x3}, {0x34, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x6}]}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0xde}]}}}]}, 0x3c}}, 0x0) 3.009117243s ago: executing program 4 (id=3549): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000040)={r1, 0xfffffffc}, 0x8) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={@private2, 0x17}) 2.841258415s ago: executing program 4 (id=3551): r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x1c, 0x2, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x4}, @CTA_FILTER={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) getpeername$qrtr(r0, &(0x7f0000000040), &(0x7f0000000080)=0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f00000000c0)={'veth0_macvtap\x00', {0x2, 0x4e22, @empty}}) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006261746164760000", @ANYRES32, @ANYBLOB="08001f0004"], 0x44}}, 0x0) 1.028889729s ago: executing program 4 (id=3554): r0 = socket$inet6(0xa, 0x1, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000007740)={0xe, {{0xa, 0x4e22, 0x9, @mcast1, 0x40}}}, 0x90) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@rand_addr=0x64010101, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x80000000}}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in=@multicast1}}, 0xe8) (async) close(r0) 1.016668255s ago: executing program 2 (id=3555): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x9) writev(r0, &(0x7f00000033c0)=[{&(0x7f0000000140)='M', 0x1}], 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x40000000015, 0x5, 0x0) sendmsg(r2, &(0x7f0000000200)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x3, 0x1}, 0x80, 0x0}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r1) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r4, 0x4, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x10, 0x13, @l2={'eth', 0x3a, 'vlan0\x00'}}}, ["", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x41) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x3, @fixed}, 0xe) getsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYRES8=r0, @ANYRES32=r1, @ANYRESDEC, @ANYRES16=0x0], 0x120}, 0x1, 0x0, 0x0, 0x4}, 0x28040810) socket$inet_smc(0x2b, 0x1, 0x0) (async) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x9) (async) writev(r0, &(0x7f00000033c0)=[{&(0x7f0000000140)='M', 0x1}], 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x40000000015, 0x5, 0x0) (async) sendmsg(r2, &(0x7f0000000200)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x3, 0x1}, 0x80, 0x0}, 0x0) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r1) (async) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r4, 0x4, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x10, 0x13, @l2={'eth', 0x3a, 'vlan0\x00'}}}, ["", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x41) (async) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x3, @fixed}, 0xe) (async) getsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYRES8=r0, @ANYRES32=r1, @ANYRESDEC, @ANYRES16=0x0], 0x120}, 0x1, 0x0, 0x0, 0x4}, 0x28040810) (async) 1.015336836s ago: executing program 0 (id=3556): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0x0, 0x11}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in=@local, 0x0, 0x1, 0x0, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0xbb8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000140)=0xc) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000280)=0xc) r6 = getgid() sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="ab", 0x1}], 0x1, &(0x7f00000002c0)=[@cred={{0x1c, 0x1, 0x2, {r4, r5, r6}}}], 0x20}, 0x20040001) close(0x3) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[], 0x138}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 774.418968ms ago: executing program 2 (id=3557): bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000010c0)={0xffffffffffffffff, 0x20, &(0x7f0000001080)={&(0x7f0000000000)=""/89, 0x59, 0x0, &(0x7f0000000080)=""/4096, 0x1000}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001100)=r0, 0x4) socketpair(0x1a, 0x0, 0x4, &(0x7f0000001140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f00000011c0)=@buf={0x3d, &(0x7f0000001180)="ff55d6b1c90bb5063d649ed67e85e9de00008412b868ef95e6718698837452bf28820b96052593a67e1eb76f89718495cceea1d5c1f2358008b2a555eb"}) bpf$TOKEN_CREATE(0x24, &(0x7f0000001200)={0x0, r2}, 0x8) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001240)='syz1\x00', 0x200002, 0x0) openat$cgroup(r3, &(0x7f0000001280)='syz0\x00', 0x200002, 0x0) getsockopt(r2, 0x2f28, 0x3, &(0x7f00000012c0)=""/4096, &(0x7f00000022c0)=0x1000) setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000002300)=0xff, 0x4) socket$can_raw(0x1d, 0x3, 0x1) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002340), r1) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000002680)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002640)={&(0x7f00000023c0)={0x268, 0x0, 0x5, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}, [{{0x254, 0x1, {{0x0, 0x7cc4}, 0xdc, 0xef, 0xfff, 0x8, 0x1e, 'syz0\x00', "a062c6cf3e75a3956a327896f8b557a56d5663919f9edbbea35b06026938faae", "98391e6fd3a47e3f8db1fd75ae6ce088b24f42aff98dff3da1ab470dd109c01b", [{0x7, 0x2, {0x3, 0x2318a2b8}}, {0x3, 0x8, {0x1, 0x7}}, {0x96, 0x7cd6, {0x2, 0x3ff}}, {0x0, 0x8, {0x0, 0x5}}, {0x7, 0x0, {0x0, 0x9}}, {0x5, 0x0, {0x3, 0x100000}}, {0x0, 0x2, {0x2, 0xff}}, {0x9af3, 0x2, {0x2, 0x8000}}, {0x2, 0x7, {0x3, 0x1}}, {0x100, 0x3, {0x1, 0x9}}, {0x0, 0x44, {0x3, 0xac7}}, {0x0, 0x5, {0x1, 0x8}}, {0x8, 0x3, {0x3, 0x4}}, {0xd8, 0xa7, {0x1, 0x66c5}}, {0x26, 0x0, {0x3, 0x9}}, {0xa, 0x8, {0x2, 0x800}}, {0x4, 0x9, {0x0, 0x9}}, {0x4, 0x2, {0x1, 0x7}}, {0x100, 0x1, {0x2, 0x9c}}, {0x8, 0x400, {0x3, 0x4bc5}}, {0x9, 0x1, {0x3, 0x200}}, {0x2b1, 0x1, {0x0, 0x2}}, {0x2, 0x4, {0x1}}, {0x6, 0x3, {0x3, 0x7}}, {0x6, 0x8, {0x1, 0x3}}, {0x8001, 0x9, {0x3, 0x7fff}}, {0x5, 0xc8ef, {0x1, 0xffff}}, {0x3, 0x2, {0x2}}, {0x1, 0x1, {0x1, 0xff}}, {0x5, 0x7, {0x0, 0xe4}}, {0x9, 0x6}, {0xb554, 0x3, {0x2, 0xcbdc}}, {0x2, 0x2}, {0x5, 0x9, {0x2}}, {0x240, 0x9, {0x3, 0x8}}, {0xf, 0x0, {0x2, 0x2}}, {0x8, 0x9, {0x3, 0xbb0}}, {0x9, 0x2322, {0x3, 0x7c}}, {0x7655, 0x9, {0x0, 0x10000}}, {0xc2, 0xb, {0x0, 0x7000}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x90}, 0x80) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f00000026c0), &(0x7f0000002700)=0x4) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000002740)="dcd48f5792cf989b0d70dd0bce34f3350618effbf5421015c6fbbc9ad28afa86e96bb8a1a42de93e548fbf6844184effaf7aab64820603e018996aea671d0fff48e3a0ec3f28c5e97a17b4c06f967c18655b9abbb81868d657f6c5782977c6d9afb51cfde3b3152fb08c40cd01004a19eea564ec570ad760cb41f15bd8e4b729ccf04a3d992c8faf45dc72", 0x8b) getsockopt$inet_udp_int(r2, 0x11, 0x65, &(0x7f0000002800), &(0x7f0000002840)=0x4) socket$nl_route(0x10, 0x3, 0x0) bind$inet(r2, &(0x7f0000002880)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f00000029c0)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002980)={&(0x7f0000002900)={0x4c, r4, 0x8, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc0}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002a40), r2) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000002b00)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002ac0)={&(0x7f0000002a80)={0x40, r6, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xe3d5}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000002b80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000002c40)={&(0x7f0000002b40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002c00)={&(0x7f0000002bc0)={0x30, r4, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xfffffffa, 0x48}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000800}, 0xc080) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002cc0), r2) getpeername$packet(r1, &(0x7f0000002d00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000002d40)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000002e00)={'syztnl2\x00', &(0x7f0000002d80)={'syztnl2\x00', 0x0, 0x29, 0x5, 0x6, 0xff, 0x2, @mcast2, @empty, 0x7818, 0x8, 0x7ff, 0x1fb}}) getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000002e40)={@local, 0x0}, &(0x7f0000002e80)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000002f40)={'syztnl0\x00', &(0x7f0000002ec0)={'syztnl1\x00', 0x0, 0x700, 0x7800, 0xc, 0xffff9f64, {{0xa, 0x4, 0x2, 0x3, 0x28, 0x66, 0x0, 0x0, 0x4, 0x0, @loopback, @loopback, {[@rr={0x7, 0x13, 0xd6, [@broadcast, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}, @noop]}}}}}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000003080)={&(0x7f0000002c80), 0xc, &(0x7f0000003040)={&(0x7f0000002f80)={0xa4, r8, 0x907, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x1}, @ETHTOOL_A_CHANNELS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x20000000}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x10000}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x5}, @ETHTOOL_A_CHANNELS_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40000041}, 0x64004805) sendmsg$nl_route_sched(r1, &(0x7f0000003180)={&(0x7f00000030c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003140)={&(0x7f0000003100)=@getqdisc={0x38, 0x26, 0x4, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r12, {0xffe0, 0xaf4814061a6c5abe}, {0xffe0, 0xa}, {0xa, 0xfff1}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x10004}, 0x80) 773.904487ms ago: executing program 4 (id=3558): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80004}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008051}, 0x4800) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @private2={0xfc, 0x2, '\x00', 0x1}}, @GTPA_FAMILY={0x5, 0xd, 0x9}, @GTPA_FAMILY={0x5, 0xd, 0x2a}, @GTPA_I_TEI={0x8}, @GTPA_PEER_ADDR6={0x14, 0xb, @local}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000800}, 0x20060000) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r3, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, r6, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x3}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x80}]}, 0x40}, 0x1, 0x0, 0x0, 0x2400c040}, 0x8094) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x38, r1, 0x0, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x20}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000000}, 0x4) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000006c0), r0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x20, r7, 0x0, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x44890}, 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000800), r2) sendmsg$TIPC_NL_MON_PEER_GET(r8, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x20, r9, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8c}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x6}, 0x20044884) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEV(r10, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x68, r3, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000a80), r10) sendmsg$NBD_CMD_CONNECT(r10, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x38, r11, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8001}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x800}]}, 0x38}, 0x1, 0x0, 0x0, 0x91}, 0x11) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x5e5d104c3a0fa779}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, r11, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0xa, 0xa, 'wpan1\x00'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x28}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000091}, 0x41) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000c80)={0xffffffffffffffff, 0x1, "51e238", 0xb, 0x9}) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r12, &(0x7f0000000f80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000d00)={0x23c, r1, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_DEVKEY={0x1c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}, @NL802154_ATTR_SEC_DEVKEY={0xcc, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x4c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x878a}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0x3c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x80}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVKEY={0xf8, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7f}, @NL802154_DEVKEY_ATTR_ID={0x4}, @NL802154_DEVKEY_ATTR_ID={0x44, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_DEVKEY_ATTR_ID={0xa4, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x16}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}]}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_DEVKEY={0x18, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x800}, 0x800) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), r2) sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x38, r13, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x3b}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x3}, @NL80211_ATTR_NOACK_MAP={0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xe}]}, 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_TX_POWER(r14, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x1c, r3, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x2df}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x200000c0) socket$nl_route(0x10, 0x3, 0x0) 677.420031ms ago: executing program 2 (id=3559): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0xb4, r3, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0x16, 0xa8, @random="d32192ef8ef98ba19bf34fed1201c4f38225"}, @handle=@pci={{0x8}, {0x11}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4044004}, 0x8004) syz_init_net_socket$x25(0x9, 0x2, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="0c00990000000000000000000800a102ffff0000080026008d03000008009f"], 0x40}}, 0x0) sendto$inet6(r0, &(0x7f0000000140)="96", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000010a80)=@raw={'raw\x00', 0x8, 0x3, 0xa08, 0x0, 0xffffffff, 0xffffffff, 0x100, 0xffffffff, 0x970, 0xffffffff, 0xffffffff, 0x970, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @private, 0x0, 0x0, 'batadv0\x00', 'batadv_slave_0\x00', {}, {}, 0x21}, 0x6, 0xa0, 0x100, 0x0, {}, [@common=@inet=@dccp={{0x30}, {[], [], 0x0, 0x10}}]}, @common=@SET={0x60}}, {{@ip={@loopback, @dev, 0x0, 0x0, 'veth0_virt_wifi\x00', 'bond_slave_0\x00'}, 0x0, 0x850, 0x870, 0x0, {}, [@common=@unspec=@u32={{0x7e0}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa68) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000040), 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e1e, 0x6, @local, 0x4}, 0x1c) 552.918342ms ago: executing program 0 (id=3560): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xd, 0xe, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000400000000000000f1000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000060000008500000006000000185b000009000000000000000000000085100000080000009c0a180001e9ff00"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0xd, 0xe, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000400000000000000f1000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000060000008500000006000000185b000009000000000000000000000085100000080000009c0a180001e9ff00"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) 469.094803ms ago: executing program 4 (id=3561): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfdea, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2f) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000b00)=@can_delroute={0x2c, 0x19, 0x1, 0xfffffffe, 0x80000, {0x1d, 0x1, 0x7}, [@CGW_SRC_IF={0x8}, @CGW_DST_IF={0x8}, @CGW_CS_XOR={0x8, 0x5, {0xfffffffffffffffc, 0x4, 0x2, 0xcc}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_WASH={0x8}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x1ff}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}]}}]}, 0x50}}, 0x44040) 410.153208ms ago: executing program 2 (id=3562): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r2, 0x101, 0x4, &(0x7f0000000040)=0x20, 0x4) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x2c, r1, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x11}, 0x40000) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) (async) syz_init_net_socket$ax25(0x3, 0x5, 0x0) (async) setsockopt$ax25_int(r2, 0x101, 0x4, &(0x7f0000000040)=0x20, 0x4) (async) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x2c, r1, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x11}, 0x40000) (async) 337.510106ms ago: executing program 0 (id=3563): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTALL(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, r1, 0xb03, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20040880) 281.788485ms ago: executing program 0 (id=3564): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}]}], {0x14}}, 0xd4}}, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) (rerun: 32) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r2, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x12, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sock_addr=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (rerun: 32) 31.881509ms ago: executing program 0 (id=3565): socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) (async) r3 = socket(0x10, 0x3, 0x0) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=@newtfilter={0x30, 0x28, 0xd27, 0x1004001, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xf}, {0x2, 0xb}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x48c0) (async) accept4$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000040)=0x1c, 0x80800) (async) r5 = socket$caif_stream(0x25, 0x1, 0x3) shutdown(r5, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000080003002d8986f8fbc30ee67ec0efa6b6d7164a08", @ANYRES32=r7, @ANYBLOB="0c0023800600190009000000"], 0x28}, 0x1, 0x0, 0x0, 0x4801}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x12, 0x64, 0x0, 0x0, 0x4, 0x0, @empty, @rand_addr=0x64010100}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000340)={'syztnl2\x00', r9, 0x7, 0x1, 0x8, 0x6, {{0x5, 0x4, 0x1, 0x3b, 0x14, 0x65, 0x0, 0xea, 0x2f, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0xd}}}}}) 0s ago: executing program 0 (id=3566): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)={0x40, r2, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x1e, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x8}, @broadcast, @device_a, @random="a08c54ce547a", {0x6, 0x5aa}}, 0x20, @void}}]}, 0x40}}, 0x8000) r4 = socket$tipc(0x1e, 0x4, 0x0) connect$tipc(r4, &(0x7f00000052c0)=@nameseq={0x1e, 0x4}, 0x10) kernel console output (not intermixed with test programs): 1, 0] type 2 family 0 port 6081 - 0 [ 377.641895][T16387] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.651815][T16387] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.730423][T16617] team0: Port device team_slave_0 added [ 377.763746][T16617] team0: Port device team_slave_1 added [ 377.970840][T16758] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2885'. [ 377.991523][T16617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 378.002480][T16617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.032236][T16758] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2885'. [ 378.047823][T16617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 378.089395][T16617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 378.113294][T16617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.154458][T16617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 378.195356][T15691] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.216979][T15691] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.322064][T16767] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2888'. [ 378.334502][T16617] hsr_slave_0: entered promiscuous mode [ 378.357762][T16617] hsr_slave_1: entered promiscuous mode [ 378.364957][T16617] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 378.374689][T16617] Cannot create hsr debugfs directory [ 378.408521][T16767] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 378.428044][T16773] x_tables: duplicate underflow at hook 2 [ 378.545335][T16767] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 378.661977][T15692] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.674548][T15692] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.139468][ T5837] Bluetooth: hci1: command tx timeout [ 379.152908][T16805] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2898'. [ 379.177477][T16805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2898'. [ 379.499697][ T63] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.617796][ T63] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.733113][ T63] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.854611][ T63] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.121872][ T63] bridge_slave_1: left allmulticast mode [ 380.129501][ T63] bridge_slave_1: left promiscuous mode [ 380.135761][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.148113][ T63] bridge_slave_0: left allmulticast mode [ 380.153850][ T63] bridge_slave_0: left promiscuous mode [ 380.160079][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.653340][ T5829] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 380.673777][ T5829] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 380.684508][ T5829] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 380.706514][ T5829] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 380.721622][ T5829] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 380.797221][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 380.812100][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 380.823777][ T63] bond0 (unregistering): Released all slaves [ 380.864212][T16826] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2903'. [ 381.218900][ T5829] Bluetooth: hci1: command 0x0419 tx timeout [ 381.264259][T16617] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 381.391181][T16617] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 381.414911][T16833] lo speed is unknown, defaulting to 1000 [ 381.420688][T16617] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 381.433076][T16617] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 381.833595][T16877] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2913'. [ 381.871074][T16617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 381.883607][T16877] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2913'. [ 381.954349][T16617] 8021q: adding VLAN 0 to HW filter on device team0 [ 382.001395][T15689] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.009328][T15689] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.069115][T15694] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.076394][T15694] bridge0: port 2(bridge_slave_1) entered forwarding state [ 382.248657][T16617] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 382.678622][T15693] veth0_to_bond: left promiscuous mode [ 382.827587][ T55] Bluetooth: hci4: command tx timeout [ 383.255527][T16929] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2925'. [ 383.293322][ T63] hsr_slave_0: left promiscuous mode [ 383.306788][ T55] Bluetooth: hci1: command 0x0419 tx timeout [ 383.317023][ T63] hsr_slave_1: left promiscuous mode [ 383.341149][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 383.349346][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 383.377895][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 383.395587][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 383.444171][ T63] veth1_macvtap: left promiscuous mode [ 383.454601][ T63] veth0_macvtap: left promiscuous mode [ 383.462486][ T63] veth1_vlan: left promiscuous mode [ 383.472923][ T63] veth0_vlan: left promiscuous mode [ 383.511435][T16939] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2926'. [ 383.830749][T16947] netlink: 'syz.0.2928': attribute type 8 has an invalid length. [ 384.290047][ T63] team0 (unregistering): Port device team_slave_1 removed [ 384.335835][ T63] team0 (unregistering): Port device team_slave_0 removed [ 384.813208][T16617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 384.896748][ T55] Bluetooth: hci4: command tx timeout [ 385.087556][T16962] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 385.176018][T16967] delete_channel: no stack [ 385.285262][T16617] veth0_vlan: entered promiscuous mode [ 385.313970][T16617] veth1_vlan: entered promiscuous mode [ 385.384607][T16833] chnl_net:caif_netlink_parms(): no params data found [ 385.745101][T16617] veth0_macvtap: entered promiscuous mode [ 385.932246][T16617] veth1_macvtap: entered promiscuous mode [ 386.039615][T16833] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.051535][T16833] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.062033][T16833] bridge_slave_0: entered allmulticast mode [ 386.092670][T16833] bridge_slave_0: entered promiscuous mode [ 386.131465][T16833] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.145882][T16833] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.168496][T16833] bridge_slave_1: entered allmulticast mode [ 386.174737][T17018] netlink: 'syz.2.2939': attribute type 1 has an invalid length. [ 386.194582][T16833] bridge_slave_1: entered promiscuous mode [ 386.202834][T17018] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2939'. [ 386.234593][T17018] netlink: 'syz.2.2939': attribute type 1 has an invalid length. [ 386.256640][ T11] block nbd1: Possible stuck request ffff888024887000: control (read@0,4096B). Runtime 210 seconds [ 386.285690][T17017] workqueue: Failed to create a rescuer kthread for wq "bond16": -EINTR [ 386.291441][T16617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 386.313616][T17019] workqueue: Failed to create a rescuer kthread for wq "bond16": -EINTR [ 386.389053][T16617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 386.407601][T15691] wlan1: Created IBSS using preconfigured BSSID 00:00:00:8d:00:00 [ 386.415479][T15691] wlan1: Creating new IBSS network, BSSID 00:00:00:8d:00:00 [ 386.439958][T16617] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.462796][T16617] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.473839][T16617] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.483664][T16617] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.519188][T16833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 386.543298][T16833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 386.778501][T17045] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2945'. [ 386.804818][T16833] team0: Port device team_slave_0 added [ 386.843037][T16833] team0: Port device team_slave_1 added [ 387.067114][ T55] Bluetooth: hci4: command tx timeout [ 387.187078][T17061] netlink: 'syz.2.2949': attribute type 3 has an invalid length. [ 387.194956][T17061] netlink: 'syz.2.2949': attribute type 3 has an invalid length. [ 387.226463][T17061] netlink: 'syz.2.2949': attribute type 3 has an invalid length. [ 387.237108][T17061] netlink: 'syz.2.2949': attribute type 3 has an invalid length. [ 387.244968][T17061] netlink: 'syz.2.2949': attribute type 3 has an invalid length. [ 387.300461][T17061] netlink: 'syz.2.2949': attribute type 3 has an invalid length. [ 387.332655][T17061] netlink: 'syz.2.2949': attribute type 3 has an invalid length. [ 387.422210][T16833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 387.433884][T16833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 387.469031][T16833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 387.512545][T17080] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2950'. [ 387.568128][T16833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 387.591313][T16833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 387.646320][T16833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 387.724781][T15695] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.756444][T15695] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.759083][T17088] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2952'. [ 387.800357][T17088] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2952'. [ 387.904652][T16833] hsr_slave_0: entered promiscuous mode [ 387.928204][T16833] hsr_slave_1: entered promiscuous mode [ 387.934691][T16833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 387.943011][T16833] Cannot create hsr debugfs directory [ 388.015894][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.031210][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.689103][T17130] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2960'. [ 389.136590][ T55] Bluetooth: hci4: command tx timeout [ 390.693625][T17154] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2964'. [ 390.726638][T17154] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2964'. [ 390.822758][T15691] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.909082][T17160] syz_tun: entered allmulticast mode [ 391.148105][T15691] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.295728][T15691] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.408835][T15691] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.603677][T17155] syz_tun: left allmulticast mode [ 391.770359][T15691] bridge_slave_1: left allmulticast mode [ 391.776854][T15691] bridge_slave_1: left promiscuous mode [ 391.784263][T15691] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.800011][T15691] bridge_slave_0: left allmulticast mode [ 391.805711][T15691] bridge_slave_0: left promiscuous mode [ 391.812571][T15691] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.186122][T17196] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2970'. [ 392.289495][T17201] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2970'. [ 392.683148][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 392.702191][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 392.721279][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 392.733096][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 392.745413][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 392.834605][T15691] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 392.847703][T15691] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 392.858526][T15691] bond0 (unregistering): Released all slaves [ 392.873999][T17195] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2971'. [ 393.263251][T17233] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 393.365736][T16833] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 393.411346][T16833] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 393.454155][T17214] lo speed is unknown, defaulting to 1000 [ 393.466488][T16833] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 393.625750][T17242] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2981'. [ 393.779019][T16833] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 394.066463][T17253] geneve2: entered promiscuous mode [ 394.093811][T17253] geneve2: entered allmulticast mode [ 394.109633][T17259] validate_nla: 70 callbacks suppressed [ 394.109655][T17259] netlink: 'syz.4.2985': attribute type 4 has an invalid length. [ 394.167452][T17263] netlink: 'syz.4.2985': attribute type 4 has an invalid length. [ 394.760188][T16833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 394.817056][ T5829] Bluetooth: hci1: command tx timeout [ 394.979901][T15691] hsr_slave_0: left promiscuous mode [ 395.005011][T15691] hsr_slave_1: left promiscuous mode [ 395.014997][T15691] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 395.037414][T15691] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 395.080922][T15691] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 395.093897][T15691] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 395.203043][T15691] veth1_macvtap: left promiscuous mode [ 395.222176][T15691] veth0_macvtap: left promiscuous mode [ 395.247400][T15691] veth1_vlan: left promiscuous mode [ 395.253870][T15691] veth0_vlan: left promiscuous mode [ 395.582175][T17312] netlink: 'syz.2.2994': attribute type 1 has an invalid length. [ 395.869285][ T59] block nbd0: Possible stuck request ffff888024857000: control (read@0,4096B). Runtime 240 seconds [ 396.090502][T15691] team0 (unregistering): Port device team_slave_1 removed [ 396.138174][T15691] team0 (unregistering): Port device team_slave_0 removed [ 396.624004][T17298] netlink: 'syz.4.2993': attribute type 21 has an invalid length. [ 396.632309][T17298] netlink: 'syz.4.2993': attribute type 20 has an invalid length. [ 396.641997][T17298] IPv6: NLM_F_CREATE should be specified when creating new route [ 396.652485][T17302] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767) [ 396.686590][T17302] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 396.753333][T16833] 8021q: adding VLAN 0 to HW filter on device team0 [ 396.867043][T15693] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.874309][T15693] bridge0: port 1(bridge_slave_0) entered forwarding state [ 396.892441][T15693] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.899721][T15693] bridge0: port 2(bridge_slave_1) entered forwarding state [ 396.908082][ T5829] Bluetooth: hci1: command 0x041b tx timeout [ 397.164106][T17338] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3000'. [ 397.263293][T17214] chnl_net:caif_netlink_parms(): no params data found [ 397.964224][T17214] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.982328][T17214] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.003603][T17214] bridge_slave_0: entered allmulticast mode [ 398.031781][T17214] bridge_slave_0: entered promiscuous mode [ 398.072982][T17214] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.097231][T17214] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.121484][T17214] bridge_slave_1: entered allmulticast mode [ 398.125922][T17385] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3006'. [ 398.145108][T17214] bridge_slave_1: entered promiscuous mode [ 398.263262][T17214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 398.302228][T17214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 398.535816][T17214] team0: Port device team_slave_0 added [ 398.575495][T16833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 398.612792][T17404] netlink: 'syz.4.3009': attribute type 4 has an invalid length. [ 398.626764][T17214] team0: Port device team_slave_1 added [ 398.772514][T17214] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 398.795285][T17214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.865918][T17411] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3011'. [ 398.873302][T17214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 398.958133][T17418] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3012'. [ 398.977211][ T55] Bluetooth: hci1: command 0x041b tx timeout [ 399.015746][T17214] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 399.038028][T17214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.132065][T17214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 399.195036][T17425] xt_l2tp: unknown flags: 18 [ 399.222383][T17426] xt_l2tp: unknown flags: 18 [ 399.287964][T17430] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3014'. [ 399.387907][T17440] openvswitch: netlink: Missing key (keys=40, expected=100) [ 399.472649][T17446] netlink: 'syz.2.3015': attribute type 10 has an invalid length. [ 399.483871][T17214] hsr_slave_0: entered promiscuous mode [ 399.504435][T17214] hsr_slave_1: entered promiscuous mode [ 399.528726][T17214] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 399.556587][T17214] Cannot create hsr debugfs directory [ 399.764785][T17458] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3021'. [ 399.858936][T17465] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3021'. [ 400.039903][T17474] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3023'. [ 400.099905][T16833] veth0_vlan: entered promiscuous mode [ 400.210628][T16833] veth1_vlan: entered promiscuous mode [ 400.218367][T17480] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3026'. [ 400.411031][T16833] veth0_macvtap: entered promiscuous mode [ 400.451919][T16833] veth1_macvtap: entered promiscuous mode [ 400.555045][T16833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 400.603030][T16833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 400.620280][T16833] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.629755][T16833] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.647025][T16833] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.656016][T16833] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.874712][T17214] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 400.902596][T17214] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 400.919578][T17214] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 400.951909][T15691] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.970809][T15691] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.978197][T17214] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 401.066079][ T55] Bluetooth: hci1: command 0x041b tx timeout [ 401.083381][T17496] nftables ruleset with unbound chain [ 401.202142][T15692] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.244040][T15692] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.515213][T17214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.569469][T17214] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.591619][T15692] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.599124][T15692] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.621550][T15692] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.628835][T15692] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.752832][T15695] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.767779][T17509] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3035'. [ 401.804984][T17508] veth0: entered promiscuous mode [ 401.855008][T17507] veth0: left promiscuous mode [ 401.903840][T15695] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.021290][T15695] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.099413][T15695] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.322285][T15695] bridge_slave_1: left allmulticast mode [ 402.336331][T15695] bridge_slave_1: left promiscuous mode [ 402.342239][T15695] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.370500][T15695] bridge_slave_0: left allmulticast mode [ 402.376633][T15695] bridge_slave_0: left promiscuous mode [ 402.382637][T15695] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.697048][T17518] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3038'. [ 402.850785][T17526] netlink: 'syz.2.3039': attribute type 21 has an invalid length. [ 402.874174][T17526] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3039'. [ 403.115050][T15695] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 403.130080][T15695] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 403.140272][ T55] Bluetooth: hci1: command 0x041b tx timeout [ 403.154880][T15695] bond0 (unregistering): Released all slaves [ 403.183577][T17526] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3039'. [ 403.224890][ T5829] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 403.240860][ T5829] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 403.250926][ T5829] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 403.302369][ T5829] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 403.319259][ T5829] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 403.433846][T17548] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3044'. [ 403.454851][T17548] vlan1: entered promiscuous mode [ 403.675846][T17549] tipc: Enabled bearer , priority 0 [ 403.705651][T17539] lo speed is unknown, defaulting to 1000 [ 403.795210][T17557] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3046'. [ 403.811550][T17554] syzkaller0: entered promiscuous mode [ 403.818426][T17558] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3046'. [ 403.827755][T17554] syzkaller0: entered allmulticast mode [ 403.834017][T17554] tipc: Resetting bearer [ 403.863290][T17214] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 403.945004][T17543] tipc: Resetting bearer [ 404.296812][T17570] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3050'. [ 405.388634][ T55] Bluetooth: hci4: command tx timeout [ 405.902251][T17543] tipc: Disabling bearer [ 405.983047][T15695] hsr_slave_0: left promiscuous mode [ 405.991563][T15695] hsr_slave_1: left promiscuous mode [ 406.004812][T15695] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 406.015200][T15695] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 406.025689][T15695] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 406.037891][T17573] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3051'. [ 406.073731][T15695] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 406.101221][T17576] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3053'. [ 406.138477][T15695] veth1_macvtap: left promiscuous mode [ 406.144171][T15695] veth0_macvtap: left promiscuous mode [ 406.151304][T15695] veth1_vlan: left promiscuous mode [ 406.160170][T15695] veth0_vlan: left promiscuous mode [ 406.232316][T17585] netlink: 'syz.2.3055': attribute type 1 has an invalid length. [ 406.243033][T17585] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3055'. [ 406.670838][T15695] team0 (unregistering): Port device team_slave_1 removed [ 406.711526][T15695] team0 (unregistering): Port device team_slave_0 removed [ 407.461629][T17214] veth0_vlan: entered promiscuous mode [ 407.469982][ T55] Bluetooth: hci4: command tx timeout [ 407.597528][T17214] veth1_vlan: entered promiscuous mode [ 407.892521][T17214] veth0_macvtap: entered promiscuous mode [ 407.903709][T17539] chnl_net:caif_netlink_parms(): no params data found [ 407.930624][T17214] veth1_macvtap: entered promiscuous mode [ 408.060868][T17214] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 408.093366][T17214] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 408.164258][T17214] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.180610][T17214] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.206346][T17214] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.241329][T17214] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.375344][T17539] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.383885][T17539] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.392053][T17539] bridge_slave_0: entered allmulticast mode [ 408.400834][T17539] bridge_slave_0: entered promiscuous mode [ 408.414689][T17539] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.423442][T17630] FAULT_INJECTION: forcing a failure. [ 408.423442][T17630] name failslab, interval 1, probability 0, space 0, times 0 [ 408.423548][T17539] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.444426][T17539] bridge_slave_1: entered allmulticast mode [ 408.452520][T17539] bridge_slave_1: entered promiscuous mode [ 408.459338][T17630] CPU: 1 UID: 0 PID: 17630 Comm: syz.0.3065 Not tainted 6.15.0-rc5-syzkaller-00163-g09db7a4d287d #0 PREEMPT(full) [ 408.459367][T17630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 408.459380][T17630] Call Trace: [ 408.459388][T17630] [ 408.459397][T17630] dump_stack_lvl+0x189/0x250 [ 408.459435][T17630] ? __pfx_dump_stack_lvl+0x10/0x10 [ 408.459464][T17630] ? __pfx__printk+0x10/0x10 [ 408.459491][T17630] ? __pfx___might_resched+0x10/0x10 [ 408.459514][T17630] should_fail_ex+0x414/0x560 [ 408.459541][T17630] should_failslab+0xa8/0x100 [ 408.459570][T17630] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 408.459597][T17630] ? __alloc_skb+0x112/0x2d0 [ 408.459624][T17630] __alloc_skb+0x112/0x2d0 [ 408.459652][T17630] netlink_sendmsg+0x5c6/0xb30 [ 408.459686][T17630] ? __pfx_netlink_sendmsg+0x10/0x10 [ 408.459711][T17630] ? aa_sock_msg_perm+0x94/0x160 [ 408.459735][T17630] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 408.459757][T17630] ? __pfx_netlink_sendmsg+0x10/0x10 [ 408.459793][T17630] __sock_sendmsg+0x219/0x270 [ 408.459816][T17630] ____sys_sendmsg+0x505/0x830 [ 408.459849][T17630] ? __pfx_____sys_sendmsg+0x10/0x10 [ 408.459885][T17630] ? import_iovec+0x74/0xa0 [ 408.459917][T17630] ___sys_sendmsg+0x21f/0x2a0 [ 408.459945][T17630] ? __pfx____sys_sendmsg+0x10/0x10 [ 408.460012][T17630] ? __fget_files+0x2a/0x420 [ 408.460036][T17630] ? __fget_files+0x3a0/0x420 [ 408.460073][T17630] __x64_sys_sendmsg+0x19b/0x260 [ 408.460102][T17630] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 408.460147][T17630] ? do_syscall_64+0xba/0x210 [ 408.460176][T17630] do_syscall_64+0xf6/0x210 [ 408.460202][T17630] ? clear_bhb_loop+0x45/0xa0 [ 408.460226][T17630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.460245][T17630] RIP: 0033:0x7f975bd8e969 [ 408.460263][T17630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 408.460280][T17630] RSP: 002b:00007f975cc70038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 408.460302][T17630] RAX: ffffffffffffffda RBX: 00007f975bfb5fa0 RCX: 00007f975bd8e969 [ 408.460317][T17630] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 408.460329][T17630] RBP: 00007f975cc70090 R08: 0000000000000000 R09: 0000000000000000 [ 408.460341][T17630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 408.460352][T17630] R13: 0000000000000000 R14: 00007f975bfb5fa0 R15: 00007ffc1d6371c8 [ 408.460383][T17630] [ 408.727831][T17632] __nla_validate_parse: 2 callbacks suppressed [ 408.727852][T17632] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3066'. [ 408.892553][T17539] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.909830][T17539] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.997216][T17539] team0: Port device team_slave_0 added [ 409.019526][T17539] team0: Port device team_slave_1 added [ 409.098692][T17648] netlink: 'syz.2.3071': attribute type 18 has an invalid length. [ 409.147269][T15690] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.162656][T15690] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.175277][T17646] netlink: 'syz.2.3071': attribute type 4 has an invalid length. [ 409.203337][T17539] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 409.212750][T17539] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.241730][T17539] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 409.338005][T17539] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 409.345531][T17539] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.374545][T17539] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 409.388130][T17646] netlink: 'syz.2.3071': attribute type 4 has an invalid length. [ 409.475443][T17662] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3075'. [ 409.517649][T15691] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.525878][T15691] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.531553][T17662] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3075'. [ 409.547660][ T55] Bluetooth: hci4: command tx timeout [ 409.559279][T17539] hsr_slave_0: entered promiscuous mode [ 409.571514][T17664] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3077'. [ 409.572453][T17539] hsr_slave_1: entered promiscuous mode [ 409.597753][T17539] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 409.605439][T17539] Cannot create hsr debugfs directory [ 409.834261][T17675] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3080'. [ 409.924365][T17675] vlan0: entered promiscuous mode [ 410.236869][T17689] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3084'. [ 410.530642][T15695] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.572484][T17692] pim6reg: entered allmulticast mode [ 410.619369][T17695] pim6reg: left allmulticast mode [ 410.681737][T15695] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.792406][T15695] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.893361][T15695] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.164599][T17539] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 411.180534][T15695] bridge_slave_1: left allmulticast mode [ 411.193749][T15695] bridge_slave_1: left promiscuous mode [ 411.200558][T15695] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.220685][T15695] bridge_slave_0: left allmulticast mode [ 411.232831][T15695] bridge_slave_0: left promiscuous mode [ 411.239914][T15695] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.553443][T17715] netlink: 'syz.4.3089': attribute type 1 has an invalid length. [ 411.577977][T17715] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3089'. [ 411.617410][ T55] Bluetooth: hci4: command tx timeout [ 411.972543][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 411.981845][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 411.992063][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 412.000969][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 412.021338][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 412.183749][T17737] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3091'. [ 412.210318][T17737] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3091'. [ 412.264547][T15695] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 412.281125][T15695] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 412.304291][T15695] bond0 (unregistering): Released all slaves [ 412.326209][T17539] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 412.340277][T17721] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 412.438037][T17539] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 412.512088][T17729] lo speed is unknown, defaulting to 1000 [ 412.519764][T17539] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 412.573126][T17748] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3094'. [ 412.691423][T17756] sctp: [Deprecated]: syz.2.3095 (pid 17756) Use of int in max_burst socket option deprecated. [ 412.691423][T17756] Use struct sctp_assoc_value instead [ 412.942151][T17763] netlink: 'syz.0.3097': attribute type 29 has an invalid length. [ 413.213591][T17539] 8021q: adding VLAN 0 to HW filter on device bond0 [ 413.244443][T17771] netlink: 'syz.0.3098': attribute type 1 has an invalid length. [ 413.335667][T17539] 8021q: adding VLAN 0 to HW filter on device team0 [ 413.625171][T15690] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.632518][T15690] bridge0: port 1(bridge_slave_0) entered forwarding state [ 413.739734][T15690] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.747091][T15690] bridge0: port 2(bridge_slave_1) entered forwarding state [ 413.814138][T15695] hsr_slave_0: left promiscuous mode [ 413.845120][T15695] hsr_slave_1: left promiscuous mode [ 413.866102][T15695] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 413.888188][T15695] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 413.911270][T15695] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 413.936983][T15695] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 414.003521][T15695] veth1_macvtap: left promiscuous mode [ 414.019856][T15695] veth0_macvtap: left promiscuous mode [ 414.031816][T15695] veth1_vlan: left promiscuous mode [ 414.044188][T15695] veth0_vlan: left promiscuous mode [ 414.106454][ T55] Bluetooth: hci1: command tx timeout [ 414.745393][T15695] team0 (unregistering): Port device team_slave_1 removed [ 414.799262][T15695] team0 (unregistering): Port device team_slave_0 removed [ 415.570699][T17815] __nla_validate_parse: 1 callbacks suppressed [ 415.570723][T17815] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3106'. [ 415.614641][T17818] netlink: 'syz.4.3107': attribute type 10 has an invalid length. [ 415.898439][T17729] chnl_net:caif_netlink_parms(): no params data found [ 416.182217][ T55] Bluetooth: hci1: command tx timeout [ 416.346648][ T11] block nbd1: Possible stuck request ffff888024887000: control (read@0,4096B). Runtime 240 seconds [ 416.413403][T17729] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.429740][T17729] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.446761][T17729] bridge_slave_0: entered allmulticast mode [ 416.464664][T17729] bridge_slave_0: entered promiscuous mode [ 416.524774][T17539] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 416.539826][T17729] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.554625][T17729] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.565455][T17729] bridge_slave_1: entered allmulticast mode [ 416.581197][T17856] netlink: 'syz.2.3113': attribute type 1 has an invalid length. [ 416.596083][T17729] bridge_slave_1: entered promiscuous mode [ 416.617295][T17858] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 416.693018][T17856] bond24: entered promiscuous mode [ 416.699064][T17856] 8021q: adding VLAN 0 to HW filter on device bond24 [ 416.774163][T17859] 8021q: adding VLAN 0 to HW filter on device bond24 [ 416.807042][T17859] bond24: (slave wireguard0): The slave device specified does not support setting the MAC address [ 416.820557][T17859] bond24: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 416.842315][T17859] bond24: (slave wireguard0): making interface the new active one [ 416.875910][T17859] wireguard0: entered promiscuous mode [ 416.893165][T17859] bond24: (slave wireguard0): Enslaving as an active interface with an up link [ 416.984918][T17729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 417.031248][T17729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 417.325784][T17729] team0: Port device team_slave_0 added [ 417.389103][T17729] team0: Port device team_slave_1 added [ 417.433187][T17874] syzkaller1: entered promiscuous mode [ 417.449980][T17874] syzkaller1: entered allmulticast mode [ 417.523920][T17890] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3120'. [ 417.545224][T17890] vlan0: entered promiscuous mode [ 417.637085][T17729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 417.654765][T17729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 417.712598][T17729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 417.735660][T17729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 417.743742][T17729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 417.771096][T17899] netlink: 'syz.0.3122': attribute type 1 has an invalid length. [ 417.796480][T17729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 417.808774][T17539] veth0_vlan: entered promiscuous mode [ 417.815546][T17896] xfrm0 speed is unknown, defaulting to 1000 [ 417.905243][T17896] xfrm0 speed is unknown, defaulting to 1000 [ 417.939731][T17899] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3122'. [ 417.950732][T17899] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3122'. [ 417.973120][T17729] hsr_slave_0: entered promiscuous mode [ 417.980363][T17729] hsr_slave_1: entered promiscuous mode [ 417.987001][T17729] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 417.994679][T17729] Cannot create hsr debugfs directory [ 418.001961][T17898] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3122'. [ 418.008687][T17539] veth1_vlan: entered promiscuous mode [ 418.026369][T17898] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3122'. [ 418.038346][T17896] xfrm0 speed is unknown, defaulting to 1000 [ 418.075210][T17896] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 418.141939][T17901] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3124'. [ 418.154530][T17901] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3124'. [ 418.164946][T17896] xfrm0 speed is unknown, defaulting to 1000 [ 418.196985][T17896] xfrm0 speed is unknown, defaulting to 1000 [ 418.229407][T17896] xfrm0 speed is unknown, defaulting to 1000 [ 418.260699][ T55] Bluetooth: hci1: command tx timeout [ 418.279691][T17896] xfrm0 speed is unknown, defaulting to 1000 [ 418.297159][T17539] veth0_macvtap: entered promiscuous mode [ 418.311268][T17539] veth1_macvtap: entered promiscuous mode [ 418.326155][T17896] xfrm0 speed is unknown, defaulting to 1000 [ 418.402292][T17896] xfrm0 speed is unknown, defaulting to 1000 [ 418.448807][T17539] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 418.464711][T17896] xfrm0 speed is unknown, defaulting to 1000 [ 418.470215][T17539] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 418.634649][T17539] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.681435][T17539] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.705936][T17539] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.736995][T17539] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.325763][T15694] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.353298][T15694] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.385308][T17947] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3133'. [ 419.419612][T15694] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.433971][T15694] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.481435][T17947] vlan0: entered promiscuous mode [ 419.749245][T17729] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 419.769796][T17729] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 419.792392][T17729] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 419.831800][T17729] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 419.923086][T17954] netlink: 'syz.0.3135': attribute type 1 has an invalid length. [ 419.993017][T15691] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.088124][T17955] bond16: (slave vcan0): The slave device specified does not support setting the MAC address [ 420.100117][T17955] bond16: (slave vcan0): Setting fail_over_mac to active for active-backup mode [ 420.115582][T17955] bond16: (slave vcan0): making interface the new active one [ 420.124583][T17955] bond16: (slave vcan0): Enslaving as an active interface with an up link [ 420.137409][T17956] 8021q: adding VLAN 0 to HW filter on device bond16 [ 420.221129][T15691] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.340161][ T5829] Bluetooth: hci1: command tx timeout [ 420.361538][T15691] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.474798][T15691] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.530828][T17729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 420.621998][T17729] 8021q: adding VLAN 0 to HW filter on device team0 [ 420.664563][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.671919][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 420.722870][T15690] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.730124][T15690] bridge0: port 2(bridge_slave_1) entered forwarding state [ 420.836957][T15691] bridge_slave_1: left allmulticast mode [ 420.842679][T15691] bridge_slave_1: left promiscuous mode [ 420.853064][T15691] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.863677][T15691] bridge_slave_0: left allmulticast mode [ 420.873479][T15691] bridge_slave_0: left promiscuous mode [ 420.879658][T15691] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.154963][T17980] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3138'. [ 421.188029][T17985] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3138'. [ 421.454913][T17995] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3140'. [ 421.695554][ T5829] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 421.716790][ T5829] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 421.733649][ T5829] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 421.777356][ T5829] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 421.790497][ T5829] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 421.879022][T15691] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 421.896214][T15691] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 421.909081][T15691] bond0 (unregistering): Released all slaves [ 422.124666][T18000] lo speed is unknown, defaulting to 1000 [ 422.970290][T17729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 423.018983][T18000] xfrm0 speed is unknown, defaulting to 1000 [ 423.337249][T18056] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3151'. [ 423.408396][T15691] hsr_slave_0: left promiscuous mode [ 423.421704][T15691] hsr_slave_1: left promiscuous mode [ 423.435104][T15691] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 423.443273][T15691] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 423.457249][T15691] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 423.479181][T15691] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 423.523174][T15691] veth1_macvtap: left promiscuous mode [ 423.530705][T15691] veth0_macvtap: left promiscuous mode [ 423.536470][T15691] veth1_vlan: left promiscuous mode [ 423.542410][T15691] veth0_vlan: left promiscuous mode [ 423.546040][T18067] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3152'. [ 423.866721][ T55] Bluetooth: hci4: command tx timeout [ 424.128018][T15691] team0 (unregistering): Port device team_slave_1 removed [ 424.178983][T15691] team0 (unregistering): Port device team_slave_0 removed [ 424.676099][T18060] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3151'. [ 424.731466][T17729] veth0_vlan: entered promiscuous mode [ 424.888150][T17729] veth1_vlan: entered promiscuous mode [ 424.934650][T18071] veth0: entered promiscuous mode [ 425.123364][T18080] veth0: left promiscuous mode [ 425.220285][T18000] chnl_net:caif_netlink_parms(): no params data found [ 425.271413][T18092] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3158'. [ 425.308168][T17729] veth0_macvtap: entered promiscuous mode [ 425.335605][T18092] vlan1: entered promiscuous mode [ 425.494546][T17729] veth1_macvtap: entered promiscuous mode [ 425.552478][T18101] netlink: 236 bytes leftover after parsing attributes in process `syz.2.3160'. [ 425.571606][T18105] netlink: 236 bytes leftover after parsing attributes in process `syz.2.3160'. [ 425.600748][T18093] syzkaller0: entered promiscuous mode [ 425.606566][T18093] syzkaller0: entered allmulticast mode [ 425.645558][T18103] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3159'. [ 425.939834][ T55] Bluetooth: hci4: command tx timeout [ 425.946722][ T59] block nbd0: Possible stuck request ffff888024857000: control (read@0,4096B). Runtime 270 seconds [ 426.208331][T18129] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3164'. [ 427.657332][T18000] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.664554][T18000] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.672402][T18000] bridge_slave_0: entered allmulticast mode [ 427.680100][T18000] bridge_slave_0: entered promiscuous mode [ 427.690875][T18000] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.723085][T18000] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.744375][T18000] bridge_slave_1: entered allmulticast mode [ 427.759273][T18000] bridge_slave_1: entered promiscuous mode [ 427.873274][T17729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 427.889076][T18000] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 427.937974][T17729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 427.953508][T18000] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 428.017515][ T55] Bluetooth: hci4: command tx timeout [ 428.118505][T18000] team0: Port device team_slave_0 added [ 428.128499][T17729] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.146048][T17729] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.159913][T17729] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.173144][T17729] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.194290][T18147] geneve1: entered promiscuous mode [ 428.201079][T18147] geneve1: entered allmulticast mode [ 428.215771][T18149] netlink: 'syz.2.3169': attribute type 4 has an invalid length. [ 428.230132][T18000] team0: Port device team_slave_1 added [ 428.364726][T18000] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 428.459896][T18000] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.491886][T18000] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 428.506685][T18000] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 428.513782][T18000] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.574892][T18000] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 428.809322][T18156] pimreg: entered allmulticast mode [ 428.904509][T18154] pimreg: left allmulticast mode [ 428.990767][T18168] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3175'. [ 429.018410][T18166] 8021q: adding VLAN 0 to HW filter on device bond17 [ 429.029195][T18166] bridge0: port 4(bond17) entered blocking state [ 429.037316][T18166] bridge0: port 4(bond17) entered disabled state [ 429.046684][T18166] bond17: entered allmulticast mode [ 429.060657][T18166] bond17: entered promiscuous mode [ 429.171155][T18176] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3177'. [ 429.228803][T18000] hsr_slave_0: entered promiscuous mode [ 429.235983][T18000] hsr_slave_1: entered promiscuous mode [ 429.244915][T18000] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 429.254394][T18000] Cannot create hsr debugfs directory [ 429.413653][T18184] netlink: 666 bytes leftover after parsing attributes in process `syz.4.3181'. [ 429.535672][T18187] netlink: 'syz.2.3182': attribute type 1 has an invalid length. [ 429.566106][T15690] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.585024][T18187] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3182'. [ 429.606377][T15690] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.668920][T18194] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 429.964312][T15691] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.995490][T15691] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.096719][ T55] Bluetooth: hci4: command tx timeout [ 430.127837][T18213] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3188'. [ 430.140749][T18215] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 430.214255][T18216] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 430.333442][T18222] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3191'. [ 430.519332][T18233] netlink: 'syz.4.3194': attribute type 23 has an invalid length. [ 430.548981][T18234] netlink: 'syz.4.3194': attribute type 23 has an invalid length. [ 430.610712][T15690] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.800028][T15690] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.879897][T15690] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.925329][T15690] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.942978][T18000] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 430.953869][T18000] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 430.968160][T18000] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 430.978885][T18000] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 431.109333][T15690] bridge_slave_1: left allmulticast mode [ 431.117494][T15690] bridge_slave_1: left promiscuous mode [ 431.123304][T15690] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.133807][T15690] bridge_slave_0: left allmulticast mode [ 431.140695][T15690] bridge_slave_0: left promiscuous mode [ 431.146628][T15690] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.551937][T15690] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 431.565137][T15690] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 431.578959][T15690] bond0 (unregistering): Released all slaves [ 431.630988][T18000] 8021q: adding VLAN 0 to HW filter on device bond0 [ 431.673231][T18000] 8021q: adding VLAN 0 to HW filter on device team0 [ 431.794752][ T9801] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.802031][ T9801] bridge0: port 1(bridge_slave_0) entered forwarding state [ 431.814345][T18240] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3196'. [ 431.863483][T15692] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.870769][T15692] bridge0: port 2(bridge_slave_1) entered forwarding state [ 432.333331][T18258] netlink: 'syz.0.3200': attribute type 10 has an invalid length. [ 432.359080][T18258] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.366601][T18258] bridge0: port 2(bridge_slave_1) entered listening state [ 432.374114][T18258] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.381561][T18258] bridge0: port 1(bridge_slave_0) entered listening state [ 432.432137][T18262] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3202'. [ 432.516469][T18258] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 432.554513][T18262] vlan0: entered promiscuous mode [ 432.584695][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 432.595435][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 432.606168][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 432.621061][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 432.632501][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 432.674026][T15690] hsr_slave_0: left promiscuous mode [ 432.712428][T15690] hsr_slave_1: left promiscuous mode [ 432.723308][T15690] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 432.755068][T15690] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 432.784617][T15690] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 432.815444][T15690] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 432.849176][T18269] sctp: [Deprecated]: syz.0.3203 (pid 18269) Use of int in maxseg socket option. [ 432.849176][T18269] Use struct sctp_assoc_value instead [ 432.868485][T15690] veth1_macvtap: left promiscuous mode [ 432.874183][T15690] veth0_macvtap: left promiscuous mode [ 432.880997][T15690] veth1_vlan: left promiscuous mode [ 432.897699][T15690] veth0_vlan: left promiscuous mode [ 433.171673][T18289] xt_hashlimit: max too large, truncated to 1048576 [ 433.795745][T15690] team0 (unregistering): Port device team_slave_1 removed [ 433.843841][T15690] team0 (unregistering): Port device team_slave_0 removed [ 434.410814][T18294] lo speed is unknown, defaulting to 1000 [ 434.417836][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 434.425996][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 434.460499][T18266] lo speed is unknown, defaulting to 1000 [ 434.594149][T18000] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 434.606573][T18310] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3214'. [ 434.695430][T18000] veth0_vlan: entered promiscuous mode [ 434.744489][ T55] Bluetooth: hci1: command tx timeout [ 434.760810][T18000] veth1_vlan: entered promiscuous mode [ 434.919554][T18000] veth0_macvtap: entered promiscuous mode [ 434.969074][T18000] veth1_macvtap: entered promiscuous mode [ 435.043187][T18000] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 435.075238][T18294] xfrm0 speed is unknown, defaulting to 1000 [ 435.081314][T18000] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 435.094242][T18000] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.105856][T18322] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3219'. [ 435.115513][T18323] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3219'. [ 435.134999][T18000] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.152546][T18000] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.161715][T18000] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.579501][T15695] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.600159][T15695] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.641649][T18266] xfrm0 speed is unknown, defaulting to 1000 [ 435.681821][ T9801] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.714540][ T9801] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.970558][T18350] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3226'. [ 436.261735][T18359] syzkaller1: entered promiscuous mode [ 436.380962][T15690] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.496896][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 436.504164][ C0] bridge0: topology change detected, propagating [ 436.512220][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 436.519512][ C0] bridge0: topology change detected, propagating [ 436.553636][T15690] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.665968][T18266] chnl_net:caif_netlink_parms(): no params data found [ 436.745953][T15690] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.808981][T18266] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.816177][T18266] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.823961][ T55] Bluetooth: hci1: command tx timeout [ 436.833250][T18266] bridge_slave_0: entered allmulticast mode [ 436.841085][T18266] bridge_slave_0: entered promiscuous mode [ 436.851094][T18266] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.858476][T18266] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.865801][T18266] bridge_slave_1: entered allmulticast mode [ 436.874710][T18266] bridge_slave_1: entered promiscuous mode [ 436.897221][T15690] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.943960][T18266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 436.956071][T18266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 437.000849][T18266] team0: Port device team_slave_0 added [ 437.010472][T18266] team0: Port device team_slave_1 added [ 437.050474][T18266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 437.057952][T18266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 437.084924][T18266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 437.102855][T18266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 437.110524][T18266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 437.138550][T18266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 437.212214][T18266] hsr_slave_0: entered promiscuous mode [ 437.220355][T18266] hsr_slave_1: entered promiscuous mode [ 437.228014][T18266] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 437.235611][T18266] Cannot create hsr debugfs directory [ 437.329133][T15690] bridge_slave_1: left allmulticast mode [ 437.334848][T15690] bridge_slave_1: left promiscuous mode [ 437.340987][T15690] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.351073][T15690] bridge_slave_0: left allmulticast mode [ 437.357806][T15690] bridge_slave_0: left promiscuous mode [ 437.363581][T15690] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.507626][T18370] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 437.942524][ T5829] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 437.970212][ T5829] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 437.980501][ T5829] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 437.992231][ T5829] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 438.013551][ T5829] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 438.071755][T15690] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 438.085071][T15690] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 438.096149][T15690] bond0 (unregistering): Released all slaves [ 438.142561][T18374] netlink: 3648 bytes leftover after parsing attributes in process `syz.4.3231'. [ 438.159530][T18374] netlink: 3648 bytes leftover after parsing attributes in process `syz.4.3231'. [ 438.274320][T18383] lo speed is unknown, defaulting to 1000 [ 438.726301][T18408] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3240'. [ 438.754083][T18395] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 438.776706][T18409] netlink: 'syz.4.3237': attribute type 6 has an invalid length. [ 438.793109][T18395] batman_adv: batadv0: Interface deactivated: wlan0 [ 438.800954][T18395] batman_adv: batadv0: Removing interface: wlan0 [ 438.812005][T18395] bond0: (slave bond1): Releasing backup interface [ 438.830295][T18395] bond0: (slave bond1): the permanent HWaddr of slave - a6:df:69:e0:67:87 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 438.855286][T18395] bond1: left promiscuous mode [ 438.862577][T18395] bond1: left allmulticast mode [ 438.883211][T18395] bond0: (slave bond2): Releasing backup interface [ 438.890848][T18395] bond2: left promiscuous mode [ 438.896011][T18395] bond2: left allmulticast mode [ 438.901660][ T55] Bluetooth: hci1: command tx timeout [ 438.917722][T18395] bond0: (slave bond4): Releasing backup interface [ 438.925190][T18395] bond4: left promiscuous mode [ 438.930719][T18395] bond4: left allmulticast mode [ 438.948954][T18395] bond0: (slave bond6): Releasing backup interface [ 438.961227][T18395] bond6: left promiscuous mode [ 438.966164][T18395] bond6: left allmulticast mode [ 438.987098][T18395] bond12: (slave gretap2): Releasing active interface [ 438.994031][T18395] gretap2: left allmulticast mode [ 439.064230][ T5884] xfrm0 speed is unknown, defaulting to 1000 [ 439.072146][T18383] xfrm0 speed is unknown, defaulting to 1000 [ 439.226588][T18414] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3242'. [ 439.295619][T18420] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3243'. [ 439.340818][T18411] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3241'. [ 439.521970][T18423] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3243'. [ 439.534156][T18428] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 439.615710][T15690] hsr_slave_0: left promiscuous mode [ 439.636383][T15690] hsr_slave_1: left promiscuous mode [ 439.642862][T15690] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 439.657075][T15690] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 439.671238][T15690] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 439.681643][T18436] netlink: 'syz.2.3246': attribute type 16 has an invalid length. [ 439.681660][T15690] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 439.681680][T18436] netlink: 'syz.2.3246': attribute type 17 has an invalid length. [ 439.700775][T18437] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3247'. [ 439.747379][T15690] veth1_macvtap: left promiscuous mode [ 439.753132][T15690] veth0_macvtap: left promiscuous mode [ 439.761489][T15690] veth1_vlan: left promiscuous mode [ 439.773052][T18439] netlink: 'syz.0.3247': attribute type 1 has an invalid length. [ 439.777184][T15690] veth0_vlan: left promiscuous mode [ 439.783382][T18439] netlink: 204 bytes leftover after parsing attributes in process `syz.0.3247'. [ 439.860573][T18443] sctp: [Deprecated]: syz.0.3247 (pid 18443) Use of struct sctp_assoc_value in delayed_ack socket option. [ 439.860573][T18443] Use struct sctp_sack_info instead [ 440.106553][ T55] Bluetooth: hci4: command tx timeout [ 440.374500][T15690] team0 (unregistering): Port device team_slave_1 removed [ 440.424238][T15690] team0 (unregistering): Port device team_slave_0 removed [ 440.977591][ T55] Bluetooth: hci1: command tx timeout [ 441.013128][T18445] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 441.152116][T18452] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3252'. [ 441.171394][T18447] veth0_to_team: entered promiscuous mode [ 441.187207][T18447] veth0_to_team: entered allmulticast mode [ 441.195652][T18451] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 441.229217][T18452] vlan1: entered promiscuous mode [ 441.775363][T18383] chnl_net:caif_netlink_parms(): no params data found [ 442.008992][T18266] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 442.035775][T18266] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 442.080734][T18494] netlink: 'syz.2.3266': attribute type 1 has an invalid length. [ 442.086307][T18266] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 442.111352][T18266] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 442.180100][ T55] Bluetooth: hci4: command tx timeout [ 442.202192][T18493] veth13: entered allmulticast mode [ 442.268403][T18498] vlan0: entered promiscuous mode [ 442.328410][T18383] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.335745][T18383] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.350166][T18383] bridge_slave_0: entered allmulticast mode [ 442.361693][T18383] bridge_slave_0: entered promiscuous mode [ 442.387055][T18383] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.394415][T18383] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.413452][T18383] bridge_slave_1: entered allmulticast mode [ 442.424863][T18383] bridge_slave_1: entered promiscuous mode [ 442.530339][T18383] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 442.552230][T18383] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 442.668328][T18383] team0: Port device team_slave_0 added [ 442.679166][T18383] team0: Port device team_slave_1 added [ 442.768928][T18383] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 442.786692][T18383] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 442.822770][T18383] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 442.855633][T18383] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 442.868150][T18383] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 442.904343][T18383] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 443.101624][T18383] hsr_slave_0: entered promiscuous mode [ 443.127393][T18525] netlink: 'syz.2.3276': attribute type 1 has an invalid length. [ 443.138105][T18383] hsr_slave_1: entered promiscuous mode [ 443.147100][T18383] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 443.155872][T18383] Cannot create hsr debugfs directory [ 443.374630][T18266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 443.439088][T18540] __nla_validate_parse: 11 callbacks suppressed [ 443.439109][T18540] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3280'. [ 443.489167][T18540] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3280'. [ 443.532553][T18544] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3281'. [ 443.597748][T18544] vlan0: entered promiscuous mode [ 443.786824][T18266] 8021q: adding VLAN 0 to HW filter on device team0 [ 443.877076][T15690] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.884286][T15690] bridge0: port 1(bridge_slave_0) entered forwarding state [ 443.973624][T15690] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.980884][T15690] bridge0: port 2(bridge_slave_1) entered forwarding state [ 444.085993][T18563] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3287'. [ 444.256574][ T55] Bluetooth: hci4: command tx timeout [ 444.331729][T18383] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 444.345940][T18383] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 444.373706][T18383] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 444.383494][T18570] xt_cluster: node mask cannot exceed total number of nodes [ 444.399682][T18383] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 444.532300][T18573] netlink: 'syz.0.3290': attribute type 27 has an invalid length. [ 444.579144][T18573] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 444.595502][T18573] team0: Device ipvlan0 is already an upper device of the team interface [ 444.691608][T18266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 444.743596][T18383] 8021q: adding VLAN 0 to HW filter on device bond0 [ 444.796728][T18576] veth0: entered promiscuous mode [ 444.808189][T18383] 8021q: adding VLAN 0 to HW filter on device team0 [ 444.815311][T18576] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3291'. [ 444.896306][T18577] netlink: 'syz.2.3291': attribute type 1 has an invalid length. [ 444.993971][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.001278][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 445.055135][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.062504][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 445.095113][T18588] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3295'. [ 445.106828][T18266] veth0_vlan: entered promiscuous mode [ 445.122261][T18586] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 445.182927][T18588] vlan0: entered promiscuous mode [ 445.285487][T18595] netlink: 'syz.0.3297': attribute type 1 has an invalid length. [ 445.306818][T18266] veth1_vlan: entered promiscuous mode [ 445.633294][T18600] syzkaller0: entered promiscuous mode [ 445.656064][T18600] syzkaller0: entered allmulticast mode [ 445.812888][T18266] veth0_macvtap: entered promiscuous mode [ 445.834067][T18266] veth1_macvtap: entered promiscuous mode [ 445.884800][T18266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 445.960328][T18616] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3303'. [ 445.976436][T18616] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3303'. [ 446.118508][T18620] xt_l2tp: v2 doesn't support IP mode [ 446.337526][ T55] Bluetooth: hci4: command tx timeout [ 446.419455][ T11] block nbd1: Possible stuck request ffff888024887000: control (read@0,4096B). Runtime 270 seconds [ 447.781987][T18266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 447.832867][T18266] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.867098][T18266] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.875874][T18266] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.886378][T18266] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.978371][T18383] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 448.008071][T18637] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3309'. [ 448.250304][T18383] veth0_vlan: entered promiscuous mode [ 448.259776][T15691] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.274340][T15691] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.318848][T18647] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 448.368769][T18383] veth1_vlan: entered promiscuous mode [ 448.379058][T15691] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.400336][T15691] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.450593][T18655] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3314'. [ 448.461693][T18655] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3314'. [ 448.492092][T18383] veth0_macvtap: entered promiscuous mode [ 448.563333][T18383] veth1_macvtap: entered promiscuous mode [ 448.704471][T18661] set match dimension is over the limit! [ 448.722004][T18661] pimreg: entered allmulticast mode [ 448.740029][T18383] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 448.762112][T18665] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3319'. [ 448.783964][T18383] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 448.909192][T18667] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3320'. [ 448.914856][T18671] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3322'. [ 448.932333][T18670] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3321'. [ 448.973102][T15689] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.998570][T18383] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.007871][T18383] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.024635][T18383] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.036138][T18383] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.074767][T18671] vlan1: entered promiscuous mode [ 449.129536][T18670] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 449.149746][T18670] gretap3: entered promiscuous mode [ 449.155035][T18670] gretap3: entered allmulticast mode [ 449.192177][T18673] tc_dump_action: action bad kind [ 449.255623][T15689] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.335166][T15689] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.455436][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.474656][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.504649][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.513957][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.541126][T15689] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.938918][T15689] bridge_slave_1: left allmulticast mode [ 449.944645][T15689] bridge_slave_1: left promiscuous mode [ 449.952904][T15689] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.967316][T15689] bridge_slave_0: left allmulticast mode [ 449.973036][T15689] bridge_slave_0: left promiscuous mode [ 449.980404][T15689] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.553596][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 450.566909][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 450.579667][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 450.611675][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 450.629157][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 450.726083][T15689] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 450.744492][T15689] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 450.755718][T15689] bond0 (unregistering): Released all slaves [ 450.774722][T18681] netlink: 356 bytes leftover after parsing attributes in process `syz.2.3324'. [ 450.784866][T18681] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 450.792154][T18681] IPv6: NLM_F_CREATE should be set when creating new route [ 450.799496][T18681] IPv6: NLM_F_CREATE should be set when creating new route [ 450.864597][T18686] lo speed is unknown, defaulting to 1000 [ 451.141490][T18686] xfrm0 speed is unknown, defaulting to 1000 [ 451.161284][T18691] netlink: 'syz.0.3326': attribute type 12 has an invalid length. [ 451.194638][T18693] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3327'. [ 451.222640][T18693] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3327'. [ 451.262978][T18691] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255) [ 451.306586][T18697] mac80211_hwsim hwsim5 ÿ: renamed from wlan1 (while UP) [ 451.435082][T18698] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3325'. [ 451.881503][ T5829] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 451.920578][ T5829] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 451.934066][ T5829] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 451.945872][ T5829] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 451.954073][ T5829] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 451.964648][T15689] hsr_slave_0: left promiscuous mode [ 452.004309][T15689] hsr_slave_1: left promiscuous mode [ 452.014689][T15689] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 452.033968][T15689] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 452.054954][T15689] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 452.066655][T15689] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 452.107963][T15689] veth1_macvtap: left promiscuous mode [ 452.113813][T15689] veth0_macvtap: left promiscuous mode [ 452.125576][T15689] veth1_vlan: left promiscuous mode [ 452.139010][T15689] veth0_vlan: left promiscuous mode [ 452.711526][T15689] team0 (unregistering): Port device team_slave_1 removed [ 452.753575][ T55] Bluetooth: hci1: command tx timeout [ 452.770270][T15689] team0 (unregistering): Port device team_slave_0 removed [ 453.409066][T18712] lo speed is unknown, defaulting to 1000 [ 453.470269][T18721] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 453.741257][T18686] chnl_net:caif_netlink_parms(): no params data found [ 453.784622][T18731] __nla_validate_parse: 1 callbacks suppressed [ 453.784642][T18731] netlink: 6040 bytes leftover after parsing attributes in process `syz.0.3337'. [ 453.932739][T18712] xfrm0 speed is unknown, defaulting to 1000 [ 453.959412][T18735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3339'. [ 454.017414][ T55] Bluetooth: hci4: command tx timeout [ 454.044653][T18739] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3338'. [ 454.070556][T18739] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3338'. [ 454.222937][T18686] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.230386][T18686] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.238656][T18686] bridge_slave_0: entered allmulticast mode [ 454.247087][T18686] bridge_slave_0: entered promiscuous mode [ 454.266129][T18686] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.311050][T18686] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.332139][T18686] bridge_slave_1: entered allmulticast mode [ 454.352601][T18686] bridge_slave_1: entered promiscuous mode [ 454.364753][T18748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3339'. [ 454.528129][T18761] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3344'. [ 454.533771][T15689] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.629671][T18761] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3344'. [ 454.638955][T18761] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 454.710818][T15689] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.755433][T18768] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3346'. [ 454.783452][T18686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 454.805850][T18686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 454.817648][ T55] Bluetooth: hci1: command tx timeout [ 454.898500][T15689] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.033553][T15689] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.063999][T18781] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 455.086135][T18781] workqueue: Failed to create a rescuer kthread for wq "bond26": -EINTR [ 455.142728][T18686] team0: Port device team_slave_0 added [ 455.179208][T18686] team0: Port device team_slave_1 added [ 455.229547][T18790] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3351'. [ 455.412297][T18686] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 455.446448][T18686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.494745][T18802] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3355'. [ 455.524485][T18686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 455.553834][T18686] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 455.572869][T18686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.626387][T18686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 455.653513][T18797] netem: change failed [ 455.968668][T18712] chnl_net:caif_netlink_parms(): no params data found [ 456.056501][ T59] block nbd0: Possible stuck request ffff888024857000: control (read@0,4096B). Runtime 300 seconds [ 456.096650][ T55] Bluetooth: hci4: command tx timeout [ 456.351970][T18686] hsr_slave_0: entered promiscuous mode [ 456.372515][T18686] hsr_slave_1: entered promiscuous mode [ 456.400009][T18686] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 456.429207][T18686] Cannot create hsr debugfs directory [ 456.457503][T18822] netlink: 'syz.2.3361': attribute type 1 has an invalid length. [ 456.589499][T18822] 8021q: adding VLAN 0 to HW filter on device bond26 [ 456.671423][T18842] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 456.696842][T18824] bond26: (slave geneve3): making interface the new active one [ 456.707745][T18824] bond26: (slave geneve3): Enslaving as an active interface with an up link [ 456.717443][T15689] bridge_slave_1: left allmulticast mode [ 456.723224][T15689] bridge_slave_1: left promiscuous mode [ 456.743947][T15689] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.772238][T15689] bridge_slave_0: left allmulticast mode [ 456.793823][T15689] bridge_slave_0: left promiscuous mode [ 456.800167][T15689] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.861603][T18846] netlink: 'syz.2.3368': attribute type 1 has an invalid length. [ 456.907501][ T55] Bluetooth: hci1: command tx timeout [ 457.010014][T18850] sctp: [Deprecated]: syz.2.3369 (pid 18850) Use of int in max_burst socket option. [ 457.010014][T18850] Use struct sctp_assoc_value instead [ 457.069127][T18850] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 457.342270][T15689] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 457.354505][T15689] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 457.365569][T15689] bond0 (unregistering): Released all slaves [ 457.563446][T18712] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.578122][T18712] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.585556][T18712] bridge_slave_0: entered allmulticast mode [ 457.616592][T18712] bridge_slave_0: entered promiscuous mode [ 457.636500][T18712] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.652280][T18712] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.671313][T18712] bridge_slave_1: entered allmulticast mode [ 457.681021][T18712] bridge_slave_1: entered promiscuous mode [ 457.837098][T18871] netlink: 'syz.2.3372': attribute type 10 has an invalid length. [ 457.984797][T18871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 457.997114][T18871] batadv0: entered promiscuous mode [ 458.003277][T18871] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 458.055533][T18712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 458.073081][T18712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 458.176528][ T55] Bluetooth: hci4: command tx timeout [ 458.198344][T18878] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 458.440380][T15689] hsr_slave_0: left promiscuous mode [ 458.453704][T15689] hsr_slave_1: left promiscuous mode [ 458.463842][T15689] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 458.472087][T15689] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 458.480577][T15689] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 458.489412][T15689] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 458.518096][T15689] veth1_macvtap: left promiscuous mode [ 458.523723][T15689] veth0_macvtap: left promiscuous mode [ 458.529637][T15689] veth1_vlan: left promiscuous mode [ 458.535034][T15689] veth0_vlan: left promiscuous mode [ 458.986732][ T55] Bluetooth: hci1: command tx timeout [ 459.118273][T15689] team0 (unregistering): Port device team_slave_1 removed [ 459.179349][T15689] team0 (unregistering): Port device team_slave_0 removed [ 459.674165][T18712] team0: Port device team_slave_0 added [ 459.687752][T18712] team0: Port device team_slave_1 added [ 459.737882][T18888] __nla_validate_parse: 9 callbacks suppressed [ 459.737903][T18888] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3374'. [ 459.878890][T18712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 459.885902][T18712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.923707][T18712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 459.954845][T18712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 459.962206][T18712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 460.024324][T18712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 460.201732][T18712] hsr_slave_0: entered promiscuous mode [ 460.215615][T18712] hsr_slave_1: entered promiscuous mode [ 460.222624][T18712] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 460.235487][T18712] Cannot create hsr debugfs directory [ 460.256825][ T55] Bluetooth: hci4: command tx timeout [ 460.367128][T18913] netlink: 180 bytes leftover after parsing attributes in process `syz.2.3386'. [ 460.383144][T18913] netlink: 180 bytes leftover after parsing attributes in process `syz.2.3386'. [ 460.430399][T18916] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3387'. [ 460.599919][T18920] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3389'. [ 460.825724][T18925] netlink: 'syz.4.3391': attribute type 10 has an invalid length. [ 460.852877][T18925] veth1_macvtap: left promiscuous mode [ 461.028718][T18686] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 461.045374][T18686] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 461.055162][T18934] netlink: 'syz.0.3394': attribute type 39 has an invalid length. [ 461.081294][ T24] hid-generic 0005:15C2:0009.0005: unknown main item tag 0x0 [ 461.093189][T18686] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 461.122552][ T24] hid-generic 0005:15C2:0009.0005: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 461.200402][T18686] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 461.239169][T18947] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3397'. [ 461.520089][T18686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 461.593569][T18686] 8021q: adding VLAN 0 to HW filter on device team0 [ 461.624017][T18962] FAULT_INJECTION: forcing a failure. [ 461.624017][T18962] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 461.646584][T18962] CPU: 1 UID: 0 PID: 18962 Comm: syz.2.3401 Not tainted 6.15.0-rc5-syzkaller-00163-g09db7a4d287d #0 PREEMPT(full) [ 461.646614][T18962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 461.646627][T18962] Call Trace: [ 461.646635][T18962] [ 461.646643][T18962] dump_stack_lvl+0x189/0x250 [ 461.646680][T18962] ? __pfx_dump_stack_lvl+0x10/0x10 [ 461.646708][T18962] ? __pfx__printk+0x10/0x10 [ 461.646739][T18962] should_fail_ex+0x414/0x560 [ 461.646765][T18962] _copy_to_user+0x31/0xb0 [ 461.646793][T18962] simple_read_from_buffer+0xe1/0x170 [ 461.646823][T18962] proc_fail_nth_read+0x1df/0x250 [ 461.646855][T18962] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 461.646886][T18962] ? rw_verify_area+0x258/0x650 [ 461.646907][T18962] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 461.646936][T18962] vfs_read+0x1fd/0x980 [ 461.646963][T18962] ? __pfx___mutex_lock+0x10/0x10 [ 461.646989][T18962] ? __pfx_vfs_read+0x10/0x10 [ 461.647012][T18962] ? __fget_files+0x2a/0x420 [ 461.647042][T18962] ? __fget_files+0x3a0/0x420 [ 461.647066][T18962] ? __fget_files+0x2a/0x420 [ 461.647101][T18962] ksys_read+0x145/0x250 [ 461.647121][T18962] ? rcu_is_watching+0x15/0xb0 [ 461.647152][T18962] ? __pfx_ksys_read+0x10/0x10 [ 461.647179][T18962] ? do_syscall_64+0xba/0x210 [ 461.647207][T18962] do_syscall_64+0xf6/0x210 [ 461.647233][T18962] ? clear_bhb_loop+0x45/0xa0 [ 461.647258][T18962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.647275][T18962] RIP: 0033:0x7eff05f8d37c [ 461.647293][T18962] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 461.647309][T18962] RSP: 002b:00007eff06d7d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 461.647330][T18962] RAX: ffffffffffffffda RBX: 00007eff061b5fa0 RCX: 00007eff05f8d37c [ 461.647344][T18962] RDX: 000000000000000f RSI: 00007eff06d7d0a0 RDI: 0000000000000004 [ 461.647356][T18962] RBP: 00007eff06d7d090 R08: 0000000000000000 R09: 0000000000000000 [ 461.647368][T18962] R10: 00000000c9100120 R11: 0000000000000246 R12: 0000000000000001 [ 461.647379][T18962] R13: 0000000000000000 R14: 00007eff061b5fa0 R15: 00007fffc9ceb018 [ 461.647415][T18962] [ 461.882363][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.889610][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 461.925441][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.932691][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 461.958833][T18964] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3403'. [ 462.011753][T18712] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 462.027575][T18712] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 462.048809][T18712] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 462.060123][T18712] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 462.144081][T18686] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 462.393221][T18712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 462.463911][T18712] 8021q: adding VLAN 0 to HW filter on device team0 [ 462.507171][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.514421][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 462.545585][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.552813][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 462.571764][T18983] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3406'. [ 462.619376][T18983] xt_l2tp: v2 tid > 0xffff: 150994944 [ 462.894845][T18686] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 462.907372][T18998] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3410'. [ 462.931086][T18998] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3410'. [ 462.969627][T19000] macvlan0: entered promiscuous mode [ 462.977070][T19000] macvlan0: entered allmulticast mode [ 463.098728][T18686] veth0_vlan: entered promiscuous mode [ 463.125115][T18686] veth1_vlan: entered promiscuous mode [ 463.153581][T19006] x_tables: duplicate underflow at hook 1 [ 463.225990][T18686] veth0_macvtap: entered promiscuous mode [ 463.269381][T18686] veth1_macvtap: entered promiscuous mode [ 463.285705][T18712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 463.325138][T18686] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 463.353258][T18686] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 463.382067][T18686] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.391979][T18686] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.401606][T18686] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.410678][T18686] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.492920][T18712] veth0_vlan: entered promiscuous mode [ 463.546189][T18712] veth1_vlan: entered promiscuous mode [ 463.603749][T15693] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.625156][T15693] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.691819][T15693] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.707984][T18712] veth0_macvtap: entered promiscuous mode [ 463.710918][T15693] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.741312][T18712] veth1_macvtap: entered promiscuous mode [ 463.800866][T18712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 463.828776][T18712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 463.853733][T18712] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.872431][T18712] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.882474][T18712] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.892702][T18712] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.209366][T15689] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.234863][T15689] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 464.346095][T15690] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.374643][T15690] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 464.562765][T19044] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 464.756677][T15692] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.909020][T15692] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.148666][T15692] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.341787][T15692] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.548508][T15692] bridge_slave_1: left allmulticast mode [ 465.554234][T15692] bridge_slave_1: left promiscuous mode [ 465.563144][T15692] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.574086][T15692] bridge_slave_0: left allmulticast mode [ 465.586785][T15692] bridge_slave_0: left promiscuous mode [ 465.595504][T15692] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.071588][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 466.081585][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 466.104300][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 466.137132][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 466.153221][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 466.223653][T15692] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 466.235510][T15692] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 466.246194][T15692] bond0 (unregistering): Released all slaves [ 466.311113][T19055] lo speed is unknown, defaulting to 1000 [ 466.532276][T19055] xfrm0 speed is unknown, defaulting to 1000 [ 467.254712][T15692] hsr_slave_0: left promiscuous mode [ 467.289304][T15692] hsr_slave_1: left promiscuous mode [ 467.307502][T15692] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 467.314773][T19083] __nla_validate_parse: 4 callbacks suppressed [ 467.314796][T19083] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3437'. [ 467.332425][T15692] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 467.346826][T15692] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 467.354423][T15692] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 467.394137][T15692] veth1_macvtap: left promiscuous mode [ 467.401082][T15692] veth0_macvtap: left promiscuous mode [ 467.407889][T15692] veth1_vlan: left promiscuous mode [ 467.413429][T15692] veth0_vlan: left promiscuous mode [ 467.449066][ T5829] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 467.467907][ T5829] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 467.477354][ T5829] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 467.488115][ T5829] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 467.500877][ T5829] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 467.953620][T15692] team0 (unregistering): Port device team_slave_1 removed [ 468.000610][T15692] team0 (unregistering): Port device team_slave_0 removed [ 468.261438][ T55] Bluetooth: hci1: command tx timeout [ 468.592799][T19088] lo speed is unknown, defaulting to 1000 [ 468.658786][T19055] chnl_net:caif_netlink_parms(): no params data found [ 468.685608][T19096] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3438'. [ 469.109289][T19107] netlink: 'syz.0.3440': attribute type 24 has an invalid length. [ 469.123973][T19055] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.131726][T19107] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3440'. [ 469.144125][T19110] netlink: 'syz.2.3441': attribute type 20 has an invalid length. [ 469.170561][T19055] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.178193][T19055] bridge_slave_0: entered allmulticast mode [ 469.186559][T19055] bridge_slave_0: entered promiscuous mode [ 469.202120][T19088] xfrm0 speed is unknown, defaulting to 1000 [ 469.233494][T19055] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.247896][T19055] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.255612][T19055] bridge_slave_1: entered allmulticast mode [ 469.278969][T19055] bridge_slave_1: entered promiscuous mode [ 469.434320][T19120] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3446'. [ 469.450927][T19055] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 469.511319][T19055] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 469.537868][ T55] Bluetooth: hci4: command tx timeout [ 469.683227][T15692] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.807217][T19136] rdma_rxe: rxe_newlink: failed to add lo [ 469.839572][T19137] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3451'. [ 469.930320][T15692] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.021129][T19055] team0: Port device team_slave_0 added [ 470.140281][T15692] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.174636][T19055] team0: Port device team_slave_1 added [ 470.214594][T19143] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3453'. [ 470.326852][T15692] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.337974][ T55] Bluetooth: hci1: command tx timeout [ 470.360262][T19055] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 470.367717][T19055] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 470.399452][T19055] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 470.461920][T19055] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 470.527615][T19055] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 470.603862][T19055] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 470.865684][T19055] hsr_slave_0: entered promiscuous mode [ 470.882706][T19055] hsr_slave_1: entered promiscuous mode [ 470.897528][T19055] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 470.911750][T19055] Cannot create hsr debugfs directory [ 470.943649][T19088] chnl_net:caif_netlink_parms(): no params data found [ 471.294841][T15692] bridge_slave_1: left allmulticast mode [ 471.301177][T15692] bridge_slave_1: left promiscuous mode [ 471.324254][T15692] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.351634][T15692] bridge_slave_0: left allmulticast mode [ 471.357698][T15692] bridge_slave_0: left promiscuous mode [ 471.363581][T15692] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.412662][T19178] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3461'. [ 471.605941][T19184] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 471.616559][ T55] Bluetooth: hci4: command tx timeout [ 471.841855][T19189] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3463'. [ 471.898585][T15692] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 471.921325][T15692] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 471.944058][T15692] bond0 (unregistering): Released all slaves [ 472.081891][T19173] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3461'. [ 472.091280][T19173] tc_dump_action: action bad kind [ 472.097165][T19176] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3460'. [ 472.237090][T19088] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.252748][T19088] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.262650][T19088] bridge_slave_0: entered allmulticast mode [ 472.272031][T19088] bridge_slave_0: entered promiscuous mode [ 472.369229][T19088] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.376985][T19088] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.384357][T19088] bridge_slave_1: entered allmulticast mode [ 472.397993][T19197] x_tables: duplicate underflow at hook 1 [ 472.420855][ T55] Bluetooth: hci1: command tx timeout [ 472.423069][T19088] bridge_slave_1: entered promiscuous mode [ 472.458531][T19197] x_tables: duplicate underflow at hook 1 [ 472.579727][T19088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 472.645249][T19208] gretap0: entered promiscuous mode [ 472.651836][T19208] macsec2: entered promiscuous mode [ 472.661607][T19208] gretap0: left promiscuous mode [ 472.735034][T19088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 472.872815][T15692] hsr_slave_0: left promiscuous mode [ 472.880490][T15692] hsr_slave_1: left promiscuous mode [ 472.887373][T15692] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 472.895002][T15692] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 472.910786][T15692] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 472.921043][T15692] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 472.963130][T15692] veth1_macvtap: left promiscuous mode [ 472.969371][T15692] veth0_macvtap: left promiscuous mode [ 472.975446][T15692] veth1_vlan: left promiscuous mode [ 472.981512][T15692] veth0_vlan: left promiscuous mode [ 473.221513][T19224] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3473'. [ 473.277374][T19224] xt_cgroup: path and classid specified [ 473.697074][ T55] Bluetooth: hci4: command tx timeout [ 473.732134][T15692] team0 (unregistering): Port device team_slave_1 removed [ 473.780113][T15692] team0 (unregistering): Port device team_slave_0 removed [ 474.275963][T19088] team0: Port device team_slave_0 added [ 474.321618][T19088] team0: Port device team_slave_1 added [ 474.459053][T19226] lo speed is unknown, defaulting to 1000 [ 474.463014][T19088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 474.481972][T19088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 474.517741][ T55] Bluetooth: hci1: command tx timeout [ 474.529824][T19088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 474.564877][T19088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 474.572570][T19088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 474.601588][T19088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 474.885576][T19088] hsr_slave_0: entered promiscuous mode [ 474.896518][T19242] xt_connbytes: Forcing CT accounting to be enabled [ 474.904770][T19088] hsr_slave_1: entered promiscuous mode [ 474.910438][T19242] --map-set only usable from mangle table [ 474.926855][T19088] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 474.934567][T19088] Cannot create hsr debugfs directory [ 475.165822][T19226] xfrm0 speed is unknown, defaulting to 1000 [ 475.288119][T19055] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 475.322596][T19055] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 475.365579][T19055] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 475.393512][T19055] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 475.744501][T19055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 475.778989][ T55] Bluetooth: hci4: command tx timeout [ 475.803820][T19055] 8021q: adding VLAN 0 to HW filter on device team0 [ 475.870404][T15690] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.877583][T15690] bridge0: port 1(bridge_slave_0) entered forwarding state [ 475.936021][T15690] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.943350][T15690] bridge0: port 2(bridge_slave_1) entered forwarding state [ 476.197098][T19088] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 476.230486][T19088] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 476.267428][T19088] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 476.289387][T19088] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 476.308694][T19267] ip6t_srh: unknown srh match flags 4001 [ 476.335817][T19267] xt_TCPMSS: Only works on TCP SYN packets [ 476.497893][ T11] block nbd1: Possible stuck request ffff888024887000: control (read@0,4096B). Runtime 300 seconds [ 476.616635][T19281] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3488'. [ 476.694745][T19088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 476.789035][T19088] 8021q: adding VLAN 0 to HW filter on device team0 [ 476.858267][T15692] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.865424][T15692] bridge0: port 1(bridge_slave_0) entered forwarding state [ 476.898602][T15692] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.905860][T15692] bridge0: port 2(bridge_slave_1) entered forwarding state [ 476.920919][T19289] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3491'. [ 476.978778][T19291] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3492'. [ 477.004393][T19291] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3492'. [ 477.033561][T19055] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 477.061008][T19293] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3493'. [ 477.175197][T19296] netlink: 'syz.0.3494': attribute type 1 has an invalid length. [ 477.180266][T19055] veth0_vlan: entered promiscuous mode [ 477.249644][T19055] veth1_vlan: entered promiscuous mode [ 477.314725][T19300] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3496'. [ 477.369523][T19055] veth0_macvtap: entered promiscuous mode [ 477.410771][T19055] veth1_macvtap: entered promiscuous mode [ 477.563052][T19055] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 477.595492][T19055] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 477.686189][T19055] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.695474][T19055] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.735855][T19055] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.760294][T19055] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.918800][T19088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 478.046774][T19335] siw: device registration error -23 [ 478.073119][T19335] netlink: 6 bytes leftover after parsing attributes in process `syz.4.3505'. [ 478.094483][T19335] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 478.191688][ T9801] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.241374][ T9801] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.321874][T19344] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3508'. [ 478.349845][T15695] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.354846][T19088] veth0_vlan: entered promiscuous mode [ 478.363822][T15695] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.367385][T19345] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3507'. [ 478.417726][T19088] veth1_vlan: entered promiscuous mode [ 478.504517][T19088] veth0_macvtap: entered promiscuous mode [ 478.515667][T19088] veth1_macvtap: entered promiscuous mode [ 478.580506][T19088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 478.617952][T19088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 478.659131][T19088] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.685357][T19088] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.706777][T19088] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.716111][T19088] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.892395][T19370] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3515'. [ 479.141136][T15693] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.250689][T15689] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.269086][T15689] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.332187][T15693] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.393372][T15689] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.405992][T15689] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.442848][T15693] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.541374][T15693] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.790017][T15693] bridge_slave_1: left allmulticast mode [ 479.795720][T15693] bridge_slave_1: left promiscuous mode [ 479.826816][T15693] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.847243][T15693] bridge_slave_0: left allmulticast mode [ 479.852944][T15693] bridge_slave_0: left promiscuous mode [ 479.876625][T15693] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.796981][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 480.809294][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 480.821022][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 480.844020][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 480.862882][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 480.909238][T15693] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 480.927980][T15693] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 480.939478][T15693] bond0 (unregistering): Released all slaves [ 480.984701][T19383] lo speed is unknown, defaulting to 1000 [ 481.231491][T19383] xfrm0 speed is unknown, defaulting to 1000 [ 481.347340][T19389] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3521'. [ 481.363672][T19391] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3520'. [ 481.417742][T19392] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3521'. [ 481.599293][T19399] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3524'. [ 481.944378][T19415] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3526'. [ 481.967063][ T5829] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 481.977106][ T5829] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 481.989143][ T5829] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 481.996344][T19415] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3526'. [ 482.013267][ T5829] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 482.024753][ T5829] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 482.028107][T15693] hsr_slave_0: left promiscuous mode [ 482.089648][T15693] hsr_slave_1: left promiscuous mode [ 482.106155][T15693] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 482.123748][T15693] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 482.147230][T15693] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 482.154742][T15693] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 482.187213][T15693] veth1_macvtap: left promiscuous mode [ 482.192951][T15693] veth0_macvtap: left promiscuous mode [ 482.199424][T15693] veth1_vlan: left promiscuous mode [ 482.205040][T15693] veth0_vlan: left promiscuous mode [ 482.792889][T15693] team0 (unregistering): Port device team_slave_1 removed [ 482.843074][T15693] team0 (unregistering): Port device team_slave_0 removed [ 482.981768][ T55] Bluetooth: hci1: command tx timeout [ 483.414070][T19416] lo speed is unknown, defaulting to 1000 [ 483.440185][T19383] chnl_net:caif_netlink_parms(): no params data found [ 483.502957][T19432] netlink: 'syz.4.3531': attribute type 1 has an invalid length. [ 483.515541][T19432] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3531'. [ 483.579716][T19436] netem: unknown loss type 0 [ 483.584909][T19436] netem: change failed [ 483.737770][T19445] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3533'. [ 483.824411][T19449] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3535'. [ 483.950331][T19446] tipc: Enabled bearer , priority 0 [ 484.097455][ T55] Bluetooth: hci4: command tx timeout [ 484.152556][T19450] syzkaller0: entered promiscuous mode [ 484.163549][T19450] syzkaller0: entered allmulticast mode [ 484.170661][T19450] tipc: Resetting bearer [ 484.204356][T19444] tipc: Resetting bearer [ 485.060693][ T55] Bluetooth: hci1: command tx timeout [ 485.933169][T19444] tipc: Disabling bearer [ 485.943078][T19459] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3537'. [ 485.953104][T19416] xfrm0 speed is unknown, defaulting to 1000 [ 486.010440][T19383] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.028517][T19383] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.035800][T19383] bridge_slave_0: entered allmulticast mode [ 486.057357][T19383] bridge_slave_0: entered promiscuous mode [ 486.117481][ T59] block nbd0: Possible stuck request ffff888024857000: control (read@0,4096B). Runtime 330 seconds [ 486.131804][T19383] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.147737][T19383] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.155084][T19383] bridge_slave_1: entered allmulticast mode [ 486.164836][T19471] netlink: 'syz.2.3539': attribute type 1 has an invalid length. [ 486.166095][T19383] bridge_slave_1: entered promiscuous mode [ 486.181399][ T55] Bluetooth: hci4: command tx timeout [ 486.190273][T19470] netlink: 'syz.2.3539': attribute type 1 has an invalid length. [ 486.218456][T19476] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 486.234957][T19477] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 486.399805][T19383] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 486.474667][T19383] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 486.552809][T19497] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3546'. [ 486.621925][T15693] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.640019][T19504] netlink: 'syz.2.3544': attribute type 1 has an invalid length. [ 486.648678][T19504] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3544'. [ 486.722610][T19493] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3545'. [ 486.740615][T19383] team0: Port device team_slave_0 added [ 486.789584][T15693] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.842531][T19383] team0: Port device team_slave_1 added [ 486.949381][T15693] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.056091][T19383] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 487.063421][T19383] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 487.091017][T19383] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 487.120682][T15693] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.142808][ T55] Bluetooth: hci1: command tx timeout [ 487.189858][T19508] syzkaller0: entered promiscuous mode [ 487.195426][T19508] syzkaller0: entered allmulticast mode [ 487.226982][T19513] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (222) [ 487.243085][T19383] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 487.250635][T19383] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 487.277457][T19383] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 487.484709][T19416] chnl_net:caif_netlink_parms(): no params data found [ 487.604017][T19520] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3551'. [ 487.620419][T19520] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3551'. [ 487.722401][T19524] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3553'. [ 487.741211][T19524] netlink: 'syz.0.3553': attribute type 13 has an invalid length. [ 488.261662][ T55] Bluetooth: hci4: command tx timeout [ 489.222651][ T55] Bluetooth: hci1: command tx timeout [ 489.548300][T19383] hsr_slave_0: entered promiscuous mode [ 489.555447][T19383] hsr_slave_1: entered promiscuous mode [ 489.568678][T19383] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 489.593269][T19383] Cannot create hsr debugfs directory [ 489.920689][T19548] unknown channel width for channel at 909000KHz? [ 489.973539][T19416] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.996521][T19416] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.010804][T19416] bridge_slave_0: entered allmulticast mode [ 490.028576][T19416] bridge_slave_0: entered promiscuous mode [ 490.065328][T15693] bridge_slave_1: left allmulticast mode [ 490.074989][T15693] bridge_slave_1: left promiscuous mode [ 490.092109][T15693] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.116076][T15693] bridge_slave_0: left allmulticast mode [ 490.124143][T15693] bridge_slave_0: left promiscuous mode [ 490.138784][T15693] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.336635][ T55] Bluetooth: hci4: command tx timeout [ 490.577128][ T31] INFO: task udevd:6306 blocked for more than 143 seconds. [ 490.585092][ T31] Not tainted 6.15.0-rc5-syzkaller-00163-g09db7a4d287d #0 [ 490.592858][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 490.602081][ T31] task:udevd state:D stack:22184 pid:6306 tgid:6306 ppid:5198 task_flags:0x400140 flags:0x00004006 [ 490.614298][ T31] Call Trace: [ 490.618633][ T31] [ 490.621610][ T31] __schedule+0x16e2/0x4cd0 [ 490.626380][ T31] ? schedule+0x165/0x360 [ 490.630853][ T31] ? __lock_acquire+0xaac/0xd20 [ 490.636989][ T31] ? __pfx___schedule+0x10/0x10 [ 490.641998][ T31] ? schedule+0x91/0x360 [ 490.647986][ T31] schedule+0x165/0x360 [ 490.652220][ T31] io_schedule+0x81/0xe0 [ 490.661922][ T31] folio_wait_bit_common+0x6b0/0xb90 [ 490.669041][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 490.674925][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 490.685701][ T31] ? __filemap_get_folio+0x790/0xaf0 [ 490.691949][ T31] ? do_read_cache_folio+0x4ed/0x590 [ 490.702412][ T31] do_read_cache_folio+0x1ae/0x590 [ 490.708377][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 490.713880][ T31] read_part_sector+0xb6/0x270 [ 490.723829][ T31] adfspart_check_POWERTEC+0x8c/0xf30 [ 490.730520][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 490.737073][ T31] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 490.743136][ T31] ? set_page_refcounted+0xa0/0x1e0 [ 490.754415][ T31] bdev_disk_changed+0x75c/0x14b0 [ 490.760017][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 490.765525][ T31] ? wait_on_inode+0xc0/0x230 [ 490.775822][ T31] blkdev_get_whole+0x380/0x510 [ 490.782084][ T31] bdev_open+0x31e/0xd30 [ 490.791956][ T31] blkdev_open+0x3a8/0x510 [ 490.796597][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 490.801599][ T31] do_dentry_open+0xdf0/0x1970 [ 490.806898][ T31] vfs_open+0x3b/0x340 [ 490.811032][ T31] ? path_openat+0x2ecd/0x3830 [ 490.815830][ T31] path_openat+0x2ee5/0x3830 [ 490.821170][ T31] ? arch_stack_walk+0xfc/0x150 [ 490.826552][ T31] ? __pfx_path_openat+0x10/0x10 [ 490.831533][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.838956][ T31] do_filp_open+0x1fa/0x410 [ 490.843544][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 490.848789][ T31] ? _raw_spin_unlock+0x28/0x50 [ 490.853695][ T31] ? alloc_fd+0x64c/0x6c0 [ 490.858247][ T31] do_sys_openat2+0x121/0x1c0 [ 490.863005][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 490.868488][ T31] __x64_sys_openat+0x138/0x170 [ 490.873404][ T31] do_syscall_64+0xf6/0x210 [ 490.878075][ T31] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 490.883763][ T31] ? clear_bhb_loop+0x45/0xa0 [ 490.893094][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.899854][ T31] RIP: 0033:0x7facacaa7407 [ 490.904311][ T31] RSP: 002b:00007fff817a0360 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 490.913201][ T31] RAX: ffffffffffffffda RBX: 00007facad279880 RCX: 00007facacaa7407 [ 490.921363][ T31] RDX: 00000000000a0800 RSI: 000055b34ffa48a0 RDI: ffffffffffffff9c [ 490.929616][ T31] RBP: 000055b34ff8e910 R08: 0000000000000000 R09: 0000000000000000 [ 490.943283][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 000055b34ffd3270 [ 490.951558][ T31] R13: 000055b34ffa63e0 R14: 0000000000000000 R15: 000055b34ffd3270 [ 490.959982][ T31] [ 490.963233][ T31] [ 490.963233][ T31] Showing all locks held in the system: [ 490.971559][ T31] 1 lock held by khungtaskd/31: [ 490.976794][ T31] #0: ffffffff8df3b860 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 490.989302][ T31] 2 locks held by getty/5588: [ 490.994070][ T31] #0: ffff88814ca980a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 491.004158][ T31] #1: ffffc9000363c2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 491.014598][ T31] 2 locks held by kworker/u9:3/5836: [ 491.020157][ T31] #0: ffff8880247e9948 ((wq_completion)nbd3-recv){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 491.031593][ T31] #1: ffffc9000408fc60 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 491.044146][ T31] 1 lock held by udevd/5842: [ 491.048992][ T31] #0: ffff888024785358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 491.061274][ T31] 1 lock held by udevd/6306: [ 491.065984][ T31] #0: ffff888024781358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 491.075615][ T31] 3 locks held by kworker/u8:27/15690: [ 491.081301][ T31] #0: ffff88801a089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 491.095096][ T31] #1: ffffc90003c7fc60 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 491.106824][ T31] #2: ffffffff8f2f4848 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 491.115902][ T31] 5 locks held by kworker/u8:30/15693: [ 491.121613][ T31] #0: ffff88801aef6148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 491.138086][ T31] #1: ffffc900036c7c60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 491.150058][ T31] #2: ffffffff8f2e7d10 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x145/0xbd0 [ 491.159849][ T31] #3: ffffffff8f2f4848 (rtnl_mutex){+.+.}-{4:4}, at: cleanup_net+0x611/0xbd0 [ 491.168957][ T31] #4: ffffffff8df41338 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b7/0x730 [ 491.180311][ T31] 3 locks held by kworker/1:2/18643: [ 491.185647][ T31] #0: ffff88801a080d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 491.197124][ T31] #1: ffffc90003317c60 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 491.208498][ T31] #2: ffffffff8f2f4848 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 491.223008][ T31] 2 locks held by syz-executor/19383: [ 491.228503][ T31] #0: ffffffff8ea63540 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 491.238287][ T31] #1: ffffffff8f2f4848 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 491.248422][ T31] 1 lock held by syz-executor/19416: [ 491.253770][ T31] #0: ffffffff8f2f4848 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 491.263143][ T31] 1 lock held by syz.4.3561/19554: [ 491.268467][ T31] #0: ffffffff8f2f4848 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x71c/0xb70 [ 491.278175][ T31] 2 locks held by syz.2.3562/19556: [ 491.283416][ T31] #0: ffffffff8f358db0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 491.291894][ T31] #1: ffffffff8f2f4848 (rtnl_mutex){+.+.}-{4:4}, at: ethnl_default_doit+0x4f5/0xe90 [ 491.302295][ T31] 2 locks held by syz.0.3566/19572: [ 491.307602][ T31] #0: ffffffff8f358db0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 491.316794][ T31] #1: ffffffff8f2f4848 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0x5f/0x930 [ 491.327147][ T31] [ 491.329564][ T31] ============================================= [ 491.329564][ T31] [ 491.338499][ T31] NMI backtrace for cpu 1 [ 491.338521][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc5-syzkaller-00163-g09db7a4d287d #0 PREEMPT(full) [ 491.338555][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 491.338567][ T31] Call Trace: [ 491.338575][ T31] [ 491.338585][ T31] dump_stack_lvl+0x189/0x250 [ 491.338619][ T31] ? __wake_up_klogd+0xd9/0x110 [ 491.338647][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 491.338677][ T31] ? __pfx__printk+0x10/0x10 [ 491.338713][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 491.338738][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 491.338756][ T31] ? _printk+0xcf/0x120 [ 491.338782][ T31] ? __pfx__printk+0x10/0x10 [ 491.338806][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 491.338831][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 491.338856][ T31] watchdog+0xfee/0x1030 [ 491.338883][ T31] ? watchdog+0x1de/0x1030 [ 491.338938][ T31] kthread+0x70e/0x8a0 [ 491.338968][ T31] ? __pfx_watchdog+0x10/0x10 [ 491.338992][ T31] ? __pfx_kthread+0x10/0x10 [ 491.339018][ T31] ? __pfx_kthread+0x10/0x10 [ 491.339042][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 491.339065][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 491.339090][ T31] ? __pfx_kthread+0x10/0x10 [ 491.339114][ T31] ret_from_fork+0x4b/0x80 [ 491.339135][ T31] ? __pfx_kthread+0x10/0x10 [ 491.339160][ T31] ret_from_fork_asm+0x1a/0x30 [ 491.339197][ T31] [ 491.339205][ T31] Sending NMI from CPU 1 to CPUs 0: [ 491.493110][ C0] NMI backtrace for cpu 0 [ 491.493133][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.15.0-rc5-syzkaller-00163-g09db7a4d287d #0 PREEMPT(full) [ 491.493154][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 491.493166][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 491.493192][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 03 fb 11 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 491.493208][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 491.493224][ C0] RAX: 07342cf93107f000 RBX: ffffffff81974f28 RCX: 07342cf93107f000 [ 491.493237][ C0] RDX: 0000000000000001 RSI: ffffffff8d74ad58 RDI: ffffffff8bc1d260 [ 491.493249][ C0] RBP: ffffffff8dc07ec0 R08: ffff8880b8832b5b R09: 1ffff1101710656b [ 491.493262][ C0] R10: dffffc0000000000 R11: ffffed101710656c R12: ffffffff8f7ed270 [ 491.493275][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1b92a48 [ 491.493286][ C0] FS: 0000000000000000(0000) GS:ffff8881260cc000(0000) knlGS:0000000000000000 [ 491.493301][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 491.493312][ C0] CR2: 000000110c3362f4 CR3: 0000000079762000 CR4: 00000000003526f0 [ 491.493329][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 491.493339][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 491.493349][ C0] Call Trace: [ 491.493357][ C0] [ 491.493364][ C0] default_idle+0x13/0x20 [ 491.493386][ C0] default_idle_call+0x74/0xb0 [ 491.493410][ C0] do_idle+0x1e8/0x510 [ 491.493433][ C0] ? __pfx_do_idle+0x10/0x10 [ 491.493447][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 491.493477][ C0] cpu_startup_entry+0x44/0x60 [ 491.493493][ C0] rest_init+0x2de/0x300 [ 491.493516][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 491.493543][ C0] start_kernel+0x470/0x4f0 [ 491.493564][ C0] x86_64_start_reservations+0x2a/0x30 [ 491.493587][ C0] x86_64_start_kernel+0x66/0x70 [ 491.493609][ C0] common_startup_64+0x13e/0x147 [ 491.493650][ C0] [ 491.494204][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 491.705045][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc5-syzkaller-00163-g09db7a4d287d #0 PREEMPT(full) [ 491.716971][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 491.727038][ T31] Call Trace: [ 491.730357][ T31] [ 491.733305][ T31] dump_stack_lvl+0x99/0x250 [ 491.737918][ T31] ? __asan_memcpy+0x40/0x70 [ 491.742523][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 491.747743][ T31] ? __pfx__printk+0x10/0x10 [ 491.752367][ T31] panic+0x2db/0x790 [ 491.756302][ T31] ? __pfx_panic+0x10/0x10 [ 491.760737][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 491.766566][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 491.771978][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 491.778164][ T31] watchdog+0x102d/0x1030 [ 491.782516][ T31] ? watchdog+0x1de/0x1030 [ 491.786966][ T31] kthread+0x70e/0x8a0 [ 491.791059][ T31] ? __pfx_watchdog+0x10/0x10 [ 491.795760][ T31] ? __pfx_kthread+0x10/0x10 [ 491.800363][ T31] ? __pfx_kthread+0x10/0x10 [ 491.804988][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 491.810237][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 491.815494][ T31] ? __pfx_kthread+0x10/0x10 [ 491.820129][ T31] ret_from_fork+0x4b/0x80 [ 491.824571][ T31] ? __pfx_kthread+0x10/0x10 [ 491.829182][ T31] ret_from_fork_asm+0x1a/0x30 [ 491.833974][ T31] [ 491.837308][ T31] Kernel Offset: disabled [ 491.841668][ T31] Rebooting in 86400 seconds..