last executing test programs: 1m30.622514991s ago: executing program 0 (id=2323): splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7fff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x8, 0x3, 0x420, 0x0, 0xa, 0x148, 0x368, 0x10, 0x5b8, 0x2a8, 0x2a8, 0x5b8, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2=0xe000000b, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0xc8, 0x138, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x7a, 0x8000000, 0x0, 0x0, 0x0, 0xffffffff, 0x7}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @broadcast, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x1f0, 0x250, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth1_to_bond\x00'}}, @inet=@rpfilter={{0x28}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x480) connect$netrom(0xffffffffffffffff, &(0x7f0000000240)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x8}, [@default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000032c0)={0x24, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x24}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0xbf22}, 0x48) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x2a9, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5000000010000524150df6cfc899f5cdb7364b90", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32, @ANYBLOB="2800128008000100736974001c00028008000100", @ANYBLOB="05"], 0x50}, 0x1, 0x4c00000000000000}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) 1m13.863718389s ago: executing program 0 (id=2323): splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7fff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x8, 0x3, 0x420, 0x0, 0xa, 0x148, 0x368, 0x10, 0x5b8, 0x2a8, 0x2a8, 0x5b8, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2=0xe000000b, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0xc8, 0x138, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x7a, 0x8000000, 0x0, 0x0, 0x0, 0xffffffff, 0x7}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @broadcast, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x1f0, 0x250, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth1_to_bond\x00'}}, @inet=@rpfilter={{0x28}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x480) connect$netrom(0xffffffffffffffff, &(0x7f0000000240)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x8}, [@default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000032c0)={0x24, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x24}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0xbf22}, 0x48) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x2a9, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5000000010000524150df6cfc899f5cdb7364b90", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32, @ANYBLOB="2800128008000100736974001c00028008000100", @ANYBLOB="05"], 0x50}, 0x1, 0x4c00000000000000}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) 1m1.750764343s ago: executing program 2 (id=2558): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x42241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f088a84c6ce6b18987f7c57ee005000000000002", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0xc, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x64}, 0x90) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x8, 0x2}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r2, 0x7}, 0x10) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x22, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r5, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f0000000740)=r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000000)=r1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000001080)=ANY=[@ANYBLOB="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", @ANYRESOCT=r6], &(0x7f0000000100)='GPL\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r7, r8, 0x2, 0x2}, 0x10) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETVIFCNT(r10, 0x89e0, &(0x7f0000001040)={0x1}) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r9, r11, 0x2, 0x2}, 0x10) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@cgroup=r12, 0xc, 0x0, 0x0, &(0x7f0000000140)=[0x0, 0x0], 0x2, 0x0, 0x0, 0x0, 0x0}, 0x40) write(0xffffffffffffffff, 0x0, 0x0) r13 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704", @ANYRESDEC], 0xfdef) r14 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r14, 0x5411, &(0x7f00000001c0)) 1m1.469834921s ago: executing program 2 (id=2562): r0 = socket$key(0xf, 0x3, 0x2) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000005c0)=0x14, 0x180800) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000600)={0x0, 0x1, 0x6, @multicast}, 0x10) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="020d00001000000000000000000000000800120002000200005e03000000000010002b00eaff0000000000000000000000000000e5dffffb02000000000000000000000000000000ac1414aa000000000000000003000600000000000200000000000000000000000000000029f4505821627edf2124936a8734bbd7dbec3329e99df1498d4205911c11980c13713ce53ed8a9ac386524b6252ab82511253e41fa83598d03acb74ff8a4e2ef059a9c3da04b67a425a0c9610cce6ac1ff257de1e8be52831aee6df503"], 0x80}}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_rdma(0x10, 0x3, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=@newtaction={0x5ec, 0x30, 0x10b, 0x70bd25, 0x0, {0x0, 0x0, 0x1100}, [{0x5d8, 0x1, [@m_police={0x5d4, 0x1, 0x0, 0x0, {{0xb}, {0x5a8, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0xffffffff}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0xffffffff, 0x7, 0x0, 0x0, {0xff, 0x0, 0x1}, {}, 0x0, 0x0, 0xfffffffe}}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x5, 0x2d, 0x1, 0x2, {0x5, 0x1, 0x2, 0x9, 0x4, 0x1}, {0x4, 0xb5350cabff511dcb, 0x1, 0x142, 0x7edc, 0x80}, 0xfffffffd, 0x0, 0x20}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7f}], [@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffffa, 0x2, 0x7, 0x1, 0x8, 0x2, 0x5, 0x21, 0x8e, 0xfff, 0x6, 0x0, 0x200, 0x9a8, 0x1, 0x298, 0x87e, 0x2, 0x6, 0x2, 0x0, 0x1f, 0x5, 0x2, 0x5, 0xf1, 0x8, 0x90000, 0xfffffffc, 0x80000001, 0x9, 0x3, 0x401, 0x6, 0x3, 0x2, 0x2, 0x1f, 0x7, 0x5, 0x8, 0x7, 0x44e7, 0xa5a, 0x3fa9c525, 0x0, 0x9, 0xb33, 0xccb4, 0xff, 0xa4db, 0x2, 0xf73, 0x200, 0x3e000, 0x1000, 0x4, 0x0, 0xfc, 0x400, 0x7435, 0x400, 0x4, 0x7ff, 0xfffffffb, 0x7ae, 0x5, 0xff, 0x3f, 0xfffffff8, 0x6, 0x0, 0x4, 0x3ff, 0x401, 0x400, 0x2, 0x7ff, 0x8001, 0x4, 0x2, 0x7, 0xd8, 0x8, 0x0, 0x7, 0x64f, 0x6, 0x0, 0x3f, 0x8, 0x7, 0x0, 0x180, 0x401, 0x1, 0xd2, 0x0, 0x2, 0x4, 0x7ff, 0xb1a, 0x9, 0x8, 0x1, 0x2, 0x9e, 0x9, 0x3, 0x68c, 0x2, 0xfff, 0x7, 0x8f, 0xd8, 0x2, 0x9311, 0x0, 0xfffffff9, 0x0, 0x2, 0xb1b, 0x2, 0x5, 0x351cbd06, 0x0, 0x7f, 0x1c400000, 0x8, 0x1, 0x1, 0xdd9c, 0xfff, 0x8, 0x0, 0x781, 0xff, 0x20, 0x0, 0x9, 0xb691, 0x1, 0x8, 0x2, 0x200, 0x1f, 0x8, 0x401, 0x1, 0x0, 0x20, 0x9, 0x0, 0xda, 0x2, 0x5471eaa0, 0x8e, 0x1000, 0x3, 0x10000, 0x0, 0x6, 0x1, 0x5, 0x40, 0x1ff, 0x136, 0x9, 0x3, 0x11, 0xe7f, 0x10000000, 0x4, 0x8, 0x2, 0x40, 0xffffffca, 0x5, 0x1, 0x401, 0x2, 0x800, 0x30000000, 0x5f5, 0xe342, 0x81, 0xffffffc1, 0x10000, 0x1f, 0x3ff, 0x6, 0x2, 0x0, 0x8000, 0x8, 0xfc5d, 0x3, 0x3f, 0x40, 0x2, 0x8, 0x7f, 0x7, 0x1, 0xffff, 0x1, 0x400, 0x5, 0x1, 0x0, 0x4, 0x3ff, 0xb4, 0x800, 0x8, 0x4, 0x36838000, 0x0, 0x5, 0x2, 0x80000000, 0x473, 0x8, 0x3f, 0x5, 0x9, 0x5c, 0xfffffffb, 0x6, 0x2, 0xffff, 0x7fff, 0x40, 0x5, 0x0, 0x1000, 0x40, 0x20, 0x0, 0x100, 0x40, 0x1, 0x6, 0x7fff, 0x8, 0x2, 0x7, 0x80, 0xff, 0x80000001, 0x10000, 0x0, 0x9, 0x7f, 0x5, 0xfbfb]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x80000000}], [], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}], [@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x0, 0x4, 0x3, 0x0, {0x1, 0x2, 0x7, 0x1, 0x8, 0x1f}, {0x7f, 0x0, 0x4, 0x5, 0x3}, 0x1, 0x111, 0x10001}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x80}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3f}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x7, 0xffffffff, 0x9, 0x6, {0x0, 0x2, 0x0, 0x8001, 0x723, 0x3}, {0x9, 0x0, 0x8, 0x80, 0x8, 0x800}, 0xffffffc0, 0x3, 0x20}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xd2da}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xae}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5ec}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x2f}}]}, 0x78}}, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, 0x3f7, 0x2, 0x70bd26, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4040010}, 0x10) setsockopt$inet_tcp_int(r6, 0x6, 0x1, &(0x7f0000000340)=0x8001, 0x4) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xf, 0x4, 0x4, 0x7}, 0x2a) getsockname$packet(r6, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r9, &(0x7f0000000880)="cd"}, 0x20) close(r5) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r10) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r10, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r11, 0x100000) syz_emit_ethernet(0x52, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60ff00f5001c0600fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="70c2000090780000fe06e2d4c3d90000db5de72bacb64b9d698f26970848664ed1e668e12ee13430876e3f125c4e588a826b1244cb6d18f368c2b7e8c136789a43b538711ed3b3fc4d84bfa5860308ab5511528e22933d0d4d1cd84b94da489800788704c77669a73f510ccb02443815d085a1d40fbc4f"], 0x0) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r2, 0x0, r5, 0x0, 0x4ffe6, 0x0) 1m1.468856113s ago: executing program 0 (id=2323): splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7fff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x8, 0x3, 0x420, 0x0, 0xa, 0x148, 0x368, 0x10, 0x5b8, 0x2a8, 0x2a8, 0x5b8, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2=0xe000000b, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0xc8, 0x138, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x7a, 0x8000000, 0x0, 0x0, 0x0, 0xffffffff, 0x7}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @broadcast, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x1f0, 0x250, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth1_to_bond\x00'}}, @inet=@rpfilter={{0x28}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x480) connect$netrom(0xffffffffffffffff, &(0x7f0000000240)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x8}, [@default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000032c0)={0x24, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x24}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0xbf22}, 0x48) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x2a9, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5000000010000524150df6cfc899f5cdb7364b90", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32, @ANYBLOB="2800128008000100736974001c00028008000100", @ANYBLOB="05"], 0x50}, 0x1, 0x4c00000000000000}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) 1m0.924319596s ago: executing program 2 (id=2567): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x0, 0xfff}, 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, 0x0, 0x0}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0xf, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) pipe(0x0) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, &(0x7f0000000180)=0x98) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000b00)=@bridge_getneigh={0x30, 0x1e, 0x3c964e403b131b43, 0x0, 0x0, {}, [@IFLA_VF_PORTS={0x10, 0x18, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x6}]}]}]}, 0x30}}, 0x0) socket$kcm(0x10, 0x400000002, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_lsm={0x9, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x4}, [@jmp={0x7, 0x1, 0x7, 0x0, 0x4}]}, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)) socket$igmp6(0xa, 0x3, 0x2) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000011c0)={0xffffffffffffffff, &(0x7f00000001c0)="4addc3", &(0x7f0000000000)=@udp}, 0x20) 48.874313109s ago: executing program 0 (id=2323): splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7fff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x8, 0x3, 0x420, 0x0, 0xa, 0x148, 0x368, 0x10, 0x5b8, 0x2a8, 0x2a8, 0x5b8, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2=0xe000000b, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0xc8, 0x138, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x7a, 0x8000000, 0x0, 0x0, 0x0, 0xffffffff, 0x7}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @broadcast, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x1f0, 0x250, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth1_to_bond\x00'}}, @inet=@rpfilter={{0x28}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x480) connect$netrom(0xffffffffffffffff, &(0x7f0000000240)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x8}, [@default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000032c0)={0x24, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x24}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0xbf22}, 0x48) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x2a9, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5000000010000524150df6cfc899f5cdb7364b90", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32, @ANYBLOB="2800128008000100736974001c00028008000100", @ANYBLOB="05"], 0x50}, 0x1, 0x4c00000000000000}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) 48.034147995s ago: executing program 2 (id=2567): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x0, 0xfff}, 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, 0x0, 0x0}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0xf, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) pipe(0x0) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, &(0x7f0000000180)=0x98) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000b00)=@bridge_getneigh={0x30, 0x1e, 0x3c964e403b131b43, 0x0, 0x0, {}, [@IFLA_VF_PORTS={0x10, 0x18, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x6}]}]}]}, 0x30}}, 0x0) socket$kcm(0x10, 0x400000002, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_lsm={0x9, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x4}, [@jmp={0x7, 0x1, 0x7, 0x0, 0x4}]}, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)) socket$igmp6(0xa, 0x3, 0x2) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000011c0)={0xffffffffffffffff, &(0x7f00000001c0)="4addc3", &(0x7f0000000000)=@udp}, 0x20) 30.875004408s ago: executing program 0 (id=2323): splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7fff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x8, 0x3, 0x420, 0x0, 0xa, 0x148, 0x368, 0x10, 0x5b8, 0x2a8, 0x2a8, 0x5b8, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2=0xe000000b, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0xc8, 0x138, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x7a, 0x8000000, 0x0, 0x0, 0x0, 0xffffffff, 0x7}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @broadcast, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x1f0, 0x250, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth1_to_bond\x00'}}, @inet=@rpfilter={{0x28}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x480) connect$netrom(0xffffffffffffffff, &(0x7f0000000240)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x8}, [@default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000032c0)={0x24, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x24}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0xbf22}, 0x48) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x2a9, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5000000010000524150df6cfc899f5cdb7364b90", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32, @ANYBLOB="2800128008000100736974001c00028008000100", @ANYBLOB="05"], 0x50}, 0x1, 0x4c00000000000000}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) 29.111996697s ago: executing program 2 (id=2567): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x0, 0xfff}, 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, 0x0, 0x0}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0xf, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) pipe(0x0) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, &(0x7f0000000180)=0x98) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000b00)=@bridge_getneigh={0x30, 0x1e, 0x3c964e403b131b43, 0x0, 0x0, {}, [@IFLA_VF_PORTS={0x10, 0x18, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x6}]}]}]}, 0x30}}, 0x0) socket$kcm(0x10, 0x400000002, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_lsm={0x9, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x4}, [@jmp={0x7, 0x1, 0x7, 0x0, 0x4}]}, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)) socket$igmp6(0xa, 0x3, 0x2) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000011c0)={0xffffffffffffffff, &(0x7f00000001c0)="4addc3", &(0x7f0000000000)=@udp}, 0x20) 15.378813016s ago: executing program 0 (id=2323): splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7fff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x8, 0x3, 0x420, 0x0, 0xa, 0x148, 0x368, 0x10, 0x5b8, 0x2a8, 0x2a8, 0x5b8, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2=0xe000000b, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0xc8, 0x138, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x7a, 0x8000000, 0x0, 0x0, 0x0, 0xffffffff, 0x7}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @broadcast, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x1f0, 0x250, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth1_to_bond\x00'}}, @inet=@rpfilter={{0x28}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x480) connect$netrom(0xffffffffffffffff, &(0x7f0000000240)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x8}, [@default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000032c0)={0x24, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x24}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0xbf22}, 0x48) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x2a9, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5000000010000524150df6cfc899f5cdb7364b90", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32, @ANYBLOB="2800128008000100736974001c00028008000100", @ANYBLOB="05"], 0x50}, 0x1, 0x4c00000000000000}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) 14.222954948s ago: executing program 2 (id=2567): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x0, 0xfff}, 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, 0x0, 0x0}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0xf, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) pipe(0x0) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, &(0x7f0000000180)=0x98) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000b00)=@bridge_getneigh={0x30, 0x1e, 0x3c964e403b131b43, 0x0, 0x0, {}, [@IFLA_VF_PORTS={0x10, 0x18, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x6}]}]}]}, 0x30}}, 0x0) socket$kcm(0x10, 0x400000002, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_lsm={0x9, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x4}, [@jmp={0x7, 0x1, 0x7, 0x0, 0x4}]}, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)) socket$igmp6(0xa, 0x3, 0x2) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000011c0)={0xffffffffffffffff, &(0x7f00000001c0)="4addc3", &(0x7f0000000000)=@udp}, 0x20) 3.732621194s ago: executing program 4 (id=2957): r0 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) connect$llc(0xffffffffffffffff, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) setsockopt$sock_timeval(r0, 0x1, 0x0, &(0x7f0000002ec0), 0x10) connect$llc(r0, &(0x7f0000000000)={0x1a, 0x204, 0x0, 0x9b, 0x2, 0x5, @local}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x2, 0x0, @loopback, 0x9}, 0x1c) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0), 0x78}}, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5dac14e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 2.568439263s ago: executing program 4 (id=2967): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x8d8dfa7e83694471, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MTU={0x9}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc}]}]}]}, 0x3c}}, 0x0) 2.086508333s ago: executing program 4 (id=2972): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e22}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20004854, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) 1.547313277s ago: executing program 4 (id=2975): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x12, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000030a0102000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c08000140000000020800014000000030080002400000000308000140000000120800034000000000080003400000000a"], 0x122}}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e40)={&(0x7f0000000600)='ext4_free_blocks\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e40)={&(0x7f0000000600)='ext4_free_blocks\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000100), 0x1001) ioctl$SIOCSIFHWADDR(r5, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000240)={0x28, 0x0, 0x2711, @host}, 0x10, 0x80000) sendmmsg$inet(r1, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="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", 0x2de}, {&(0x7f0000000bc0)="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", 0x1e9}, {&(0x7f00000000c0)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859207067c10aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff6d5cf367cd939f790732e8d2310e876fcb299cd44b72bda697035b7b475bc35afbb483db39ac864dbee0c9760c22a1d32d83588afd7c994652413b22db76874ca052ef2013317eb7fcc5677e9d", 0x90}, {&(0x7f0000000640)="f610e61ac81cc3edc86f0500194d27a5a443f10dfd1ecda0fd0ed9a444b7fb76afe3a0002f0a5eafcd3555a6cad574af4a57f54ee5f10fe3f42b445293ca84d360a7a793cdcadfecfd", 0x49}], 0x4, 0x0, 0x0, 0x900}}], 0x2, 0x0) 1.288805756s ago: executing program 1 (id=2978): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="540000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800c0001006d6163766c616e001c00028008000100100000001300070000002023645cc93fe31c03000300000008000500", @ANYRES32=r3, @ANYBLOB], 0x54}}, 0x0) unshare(0x20000400) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000200)=0x14) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x20, 0x10, 0x100, 0x70bd29, 0x2000, {0x0, 0x0, 0x0, r6, 0x8000, 0x10010}}, 0x20}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x1e, 0x4, 0x0) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) 1.19286356s ago: executing program 1 (id=2979): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000200)}, 0x20) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x17, 0x8, &(0x7f0000000740)=ANY=[@ANYRES64=r1, @ANYRES32=r2, @ANYBLOB="0000000000000000b70300000000000085000008"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wg0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x3eb544, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080)) setsockopt$inet_udp_int(r5, 0x11, 0x67, &(0x7f0000000b00)=0x1, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000040)={@rand_addr=' \x01\x00', @private1, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100002}) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x42100, 0x0) r9 = socket$tipc(0x1e, 0x5, 0x0) sendfile(r9, r8, 0x0, 0xcf0e) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) pwritev(r10, &(0x7f0000000a00)=[{&(0x7f0000000400)="fd", 0xffff8001}], 0x1, 0x8000000, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0x20, &(0x7f0000000680)={&(0x7f0000000480)=""/209, 0xd1, 0x0, &(0x7f0000000580)=""/245, 0xf5}}, 0x10) r12 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000700)=@raw=[@alu={0x7, 0x1, 0x8, 0xa, 0x3, 0xffffffffffffffc7, 0x8}], &(0x7f0000000740)='syzkaller\x00', 0x11, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x7, 0x5}, 0x8, 0x10, &(0x7f00000007c0)={0x2, 0x9, 0x4}, 0x10, 0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000800)=[{0x3, 0x2, 0x6, 0x7}, {0x3, 0x5, 0x7}], 0x10, 0x912e}, 0x90) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000900)={0x1, 0xffffffffffffffff}, 0x4) r14 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000940)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0xa6, 0x3, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x8, 0x18, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xde0, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x4a}, @alu={0x4, 0x1, 0x4, 0x0, 0x4, 0x100}, @map_fd={0x18, 0x4, 0x1, 0x0, r0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @exit, @jmp={0x5, 0x0, 0x8, 0x1, 0x1, 0xfffffffffffffffe, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000340)='GPL\x00', 0x7, 0x16, &(0x7f0000000380)=""/22, 0x41100, 0x0, '\x00', r3, 0x13, r10, 0x8, &(0x7f0000000400)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x1, 0x7, 0x80, 0x4}, 0x10, r11, r12, 0x1, &(0x7f00000009c0)=[r13, r14], &(0x7f0000000a00)=[{0x0, 0x2, 0xf, 0x9}], 0x10, 0x100}, 0x90) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r15) sendmsg$NLBL_MGMT_C_ADDDEF(r16, &(0x7f0000000100)={0x0, 0xffffffdf, &(0x7f00000000c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="48000010fc2a0dd9d50eb4fc00", @ANYRES16=0x0, @ANYBLOB="010000000000ffffffff0400000000000400cb674d9e08000700ac1414bb000002000700000000000800e000000108000700e0000002"], 0x48}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x3c}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 1.15964087s ago: executing program 3 (id=2980): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e21, @broadcast}}, [0x8000, 0x800, 0x4, 0x3f, 0xff, 0x2, 0x80000000, 0x3, 0x7, 0x8, 0x2, 0x1, 0x8, 0x9, 0x8db0]}, &(0x7f0000000180)=0x100) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000001c0)={r1, @in={{0x2, 0x4e20, @rand_addr=0x64010102}}}, 0x84) (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) (async) syz_emit_ethernet(0x7e, &(0x7f0000000400)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x48, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0xe22, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "4c1b16df09411fc0f4f743d11e66dcad1823edb5572eec93", "956fcb3786cee452642440e7458474a9b65a28a66a1549b2c140ef12a6bb6db8"}}}}}}}, 0x0) 1.028489972s ago: executing program 4 (id=2981): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xf, 0x13, r2, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x6, 0x42400) 1.02749439s ago: executing program 3 (id=2982): r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@vsock={0x28, 0x0, 0x0, @hyper}, &(0x7f0000000080)=0x80) sendmsg$tipc(r0, &(0x7f0000000440)={&(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x0, 0x3}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000100)="f16d5c4e0810f074b352e7f0d25ffac78e7e8eaad91bf5ece6336689f8c2586ea83700d28f98e59b8f263a8b929725caabf8d0191d98a91ee5e2145b03f593f46469212da90df3f69c39f926a70afdfa1b43ec0a69501f36f2b4fd2237c3b22682f95bdbad51dc899d4f6922ab9f04ba628daee93f161670523e9a465d6712afa0a92ea2b88d94c1628251050231025f34a144d436e777841cd76d0aba2d4dacf21d301ac834a449a2144bef966c500a7186572e174216de56738faf1fb82e560f", 0xc1}, {&(0x7f0000000200)="fe9d58b78965e76e434223b9d37f8b9bd6564cfc680c3794d3fb35aca57010e6172c56b7499c37f59b319251950b42eeec8b083146404efc8d22206499dcf31a318b9e5fc9619cca55daa0259723ad95cd26de9693e849db5a348b9fa903ff8e9716c07d72183ee110dee96693bdd9dca0f9e91850decdfd79b247ff03e81d980254f0d317ed18ac869903ce05edc0bd0f40d093c51f4e8cdf3558a716a6b48b517a43753245a36024897e2d3006f6d9991c6e592a0a183170f68691d1c9", 0xbe}, {&(0x7f00000002c0)="ff324d54bfce3bd0284bf9cd8dd3553af3fe2796807385a2950747d303e788e343e4f6611583884b70b0ee53303ab3b2d4b076c41a309c31dd5f1395e7113162708d79797a73456f304a604d83379863b65489b52f2ca21a6da188c351a363197e5f89ee0390b14a26ccb3466d63989d496afc978e627e92af2e71cfd12cd0d136beaf407ae96e0e592db5895901ab50657b6e25f41fc9452bbfa1fd726e", 0x9e}], 0x3, &(0x7f00000003c0)="7482d051fd402ce819e9a768f26c96edc83ed730295442f40c0d434b6425bae634c6e2a5070ff6d17e5a1ef3e5212a5171a5d192b0e8415bf53b613cc9ceffb484e5ac1021ebdafde625a4518da646662aa898ce9c237cf7276430d886717eb7fd7f6496aac895c0328aa2e3dbc7471e1730681bd131", 0x76, 0x20044010}, 0x1) r1 = socket(0x2b, 0x1, 0x1) recvfrom$packet(r1, &(0x7f0000000480)=""/61, 0x3d, 0x40000022, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000780)={'gretap0\x00', &(0x7f00000006c0)={'gretap0\x00', 0x0, 0x80, 0x40, 0x7ff, 0x297, {{0x26, 0x4, 0x0, 0x1, 0x98, 0x65, 0x0, 0x81, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, {[@cipso={0x86, 0x55, 0x0, [{0x0, 0x8, "284292f6520b"}, {0x6, 0xb, "9dba587ff517a7dc9c"}, {0x7, 0x7, "e662690d97"}, {0x6, 0xa, "52c36fd4fcf42fca"}, {0x2, 0x12, "e66c0d98935759a0db957f1aa15065c1"}, {0x3, 0xe, "692e849b9d821bb1099e37b7"}, {0x1, 0x5, "481d83"}, {0x7, 0x6, "97d0c944"}]}, @ssrr={0x89, 0xf, 0xe, [@rand_addr=0x64010100, @broadcast, @empty]}, @ra={0x94, 0x4, 0x1}, @end, @noop, @cipso={0x86, 0x19, 0x0, [{0x5, 0xf, "3c46a2d17de2253e6fcb195edc"}, {0x2, 0x4, '}>'}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000840)={'ip6_vti0\x00', &(0x7f00000007c0)={'syztnl2\x00', 0x0, 0x4, 0x40, 0x2, 0xbd3, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7800, 0x7800, 0x6, 0x1000}}) sendmmsg$inet(r1, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)="78b70c07352fd41dccd5290826da4b90027b605b0e4ade98d2bed176882ccc41920d10e27ef8ebe3ba9ff726ff4412e8141422cf2a08273daf3d648e180048a91c04d30d62630c69e59220880e450a7b17df80b96424f875d88d89fa8e801fc34e366476cccb5ae7948a174f3238f02eec2d7515df3229305a6a5a4d392571bf891ad3429ce88a8966f218e9f609efac96486c2f886a557679a6e92532e8a366c4d942e67ade7b0ce38ae53e0d787f5b9708dc4d610f5d1094c41aa73be62fb71b36044914a26b3432239d22accabd33c1afbaaf1c864fe746a6c93f4b5fcb1c79ac1c4ebf5b43ca2bc73ade87a60473e88858dd5fadd1c3", 0xf8}, {&(0x7f00000005c0)="5f726f507ac6359f864e91f9f77aad78ddd060e3241f0e38808cd7c4db65a0d81190091d2f866390e3e359ba8f8725ef0c2a3a007cb85627417fb0d54bf74f86095862b4a0618d8f95159939719dfcc19b267cb79c33d134ffaf7dd0adf1a9e3c4eb27c3690405e3116aaf4bc5291ffaed922bc989c0e6c5c6f45f7a8859635b4420036eaedd2ca85e84ee", 0x8b}], 0x2, &(0x7f0000000880)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3f}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1f}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @local, @multicast1}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0x100}}], 0x1, 0x4004000) setsockopt(r1, 0x0, 0x0, &(0x7f00000009c0)="a2f8a2b3e6225ae412ee80aed599f805c6aa1aa2ca1ea0efe25fb994c6d48549476e70943d8bc06440f35f003d5b2d4213bc663e2a7549454b16d8cf437206c0bd19dc25b2be1249f4942a3a84ae5ae2be3cd34d115295116ba01cc9", 0x5c) sendmsg$nl_route_sched(r1, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x10400000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a80)=@deltaction={0xac, 0x31, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x58, 0x1, [{0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff7fff}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa314}}]}, @TCA_ACT_TAB={0x40, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x14, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008000) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000bc0)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c00)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1f, '\x00', r3, r4, 0x2, 0x4, 0x1}, 0x48) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000c80)={'batadv0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$tipc(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000cc0)="93ef5a063f470dc9a3e47c68d3b83ca078db64da4a061b4527d08daafe9b93959c424389eb4a51c529ec3a2f279c1edce38151c919e7393a8447a0d037ea9370059adedde88f7983876265aeaf02565384bdff85179652acbd378c4520ed3a02c6eb274542cebc792740a22b89bbc4e56df7566c56b249d7cf54b5e3c1e1179c95a9847961d1210ec8452cd787fb275e9c2f4fbf42da1a36bd24ffb0a670ab05f9e426b6a84696d24684744325214c87bd33a89790ee6f61ca6e2682998c7411f3923b5ecafd1b361d868ad7d1cb1ccd5e9d3d9b7208a2855a8c1b7f4ef6fa84de556380be67b6ce23508b00a48598dd6a7591806c55e866265e458f", 0xfc}, {&(0x7f0000000dc0)="06392d9ba91706c6c6ad785a73cabb857039663d6c58d459796abfadb5beb85295b45643ddff4b720b6bed0d306a0f732e26ade885b39e877ff31454c9f52e8e2778a5a40556735517f37857b926ab4a974747d929184b8732c45beaab0df338fe116e06492f07a5d8408bea3b65eae2db090934a01925d26a448b4ee16d9366e2696f7ec42852cbd9c2a45c6077c852505bdf8da02830dbe113dd0bf211a781cac4864ae16c6f14ca774802956fc65b6fcc84031d8eec4859997d559d8a071eea731eff51209e57d55ce8593994aa3ecad9a8a55731dbdf288c9efc8bb8d9fd5b4b7849d7", 0xe5}, {&(0x7f0000000ec0)="125c", 0x2}, {&(0x7f0000000f00)="e355d7775b1984795c2ac337856bae7ca0e61444ffbee3006eaa3d5c0a8efa84a85064d58eb0d43de03b35cca1afb02e8bd16f080b0bb9a51ffbcf2cff23391e65fa293764f689ea2e8d7b63962e36658534be82817ca3f428ceae0df53f82b7ee3e4ede9c70fd9883288ca337e294b95cd8a8dd87a24e187126152a1740c4bd644994b1da7649514f4b4ccd", 0x8c}, {&(0x7f0000000fc0)="e9d6f8807f1d4d9220eb6aeafb567fbb757e8c6f4a63ba3898ac628d50216375944b0a3857ea39bd7630a2b46343798bbbf568fa06", 0x35}, {&(0x7f0000001000)="6277be1cd101038d2383a9", 0xb}, {&(0x7f0000001040)="f4c946eb4b6570993ca9de594eed8ce2ca8a56036a76272a12cb1a1bac46d4745e21072953eaa86db8768486e0389a8b9a378bb11d82bf365c8195fc8e5bd05b81d02dc0f2fc09bbfaafd39eec6ed277a75574eede0b08ca301194", 0x5b}, {&(0x7f00000010c0)="5867ca0e9e3afc7252522c8681f9a89fcea548a72caec1802ab81aa387155f7f088cc7764852e55c9eb3222fdaea1d1129f812fd104a1035d46b3bcf6320d345870c3719159f4aef391c92555f74e249e144c50fa6edcaa07feac5f58276b6de4907", 0x62}], 0x8, &(0x7f00000011c0)="c256b8bab6fe9ff84a27a62d06d345bf72e9dd10aa48b0a40cb3e8ef08c08f0b017981c8791d9b3f95a2809fc363d6c1b7d578bf2e2598af2e670b748e0d3a691d975c5deb3ef20d6685d22b9094e26bbeb5aafce71d1771c03156fb608fb3a8cf4339cc877342e36dfca1b301ff4a380535fd8579ab872b08aafc20d57ba4fbc5e8f90739f2f15b58fe27545f9f5e1a084b968710983adbbdd7e2f0", 0x9c, 0x84}, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000001300), r0) sendmsg$DEVLINK_CMD_RATE_SET(r7, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x14, r8, 0x10, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000808}, 0x4000000) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000001400)={0x3, {{0x2, 0x4e21, @private=0xa010101}}, 0x0, 0x2, [{{0x2, 0x4e24, @multicast1}}, {{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x190) socket$inet(0x2, 0x80000, 0x5) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000015c0)='nv\x00', 0x3) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001600)={0x66a}, 0x4) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001680)={&(0x7f0000001640)='ext4_mballoc_prealloc\x00'}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f00000016c0)={r9, 0x1, 0x3f}) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001740), r1) getpeername$packet(r1, &(0x7f0000001780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000017c0)=0x14) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000001800)={@broadcast, @initdev, 0x0}, &(0x7f0000001840)=0xc) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000001a00)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001880)={0x110, r11, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x800}, 0x80) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r14, &(0x7f0000001c00)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001a80)={0x12c, r11, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x12c}}, 0x10000) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r10, 0x8008f512, &(0x7f0000001c40)) 820.336244ms ago: executing program 1 (id=2983): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)={0x44, r2, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, 0x0, 0x0, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000002140)={'wlan0\x00'}) sendmsg$NL80211_CMD_DEL_STATION(r6, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002200)={&(0x7f0000000580)=ANY=[@ANYBLOB="24000000b77fd5c2a4108b015d957720f4c93238b9ac204a2bdc10dcfbe6ff1fffefd7d8100ab55420eb6f70066b8e740520c9f823472451eb488d8468aa18b59f12d3768b7a8a", @ANYRES16=r7, @ANYBLOB="290a000000000000000014000000050029000c0000000600360004000000"], 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@getchain={0x24, 0x66, 0x531, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffe0}}}, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa101000000010007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = socket(0x1d, 0x2, 0x6) epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r10, &(0x7f0000000140)={0x201f}) r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r10) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4011}, 0x0) r12 = socket(0x2, 0x1, 0x0) getsockopt(r12, 0x1, 0xa, &(0x7f0000000140)=""/120, &(0x7f0000000040)=0x78) sendmsg$TIPC_CMD_GET_MAX_PORTS(r4, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r11, 0x2, 0x70bd2b, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x8840}, 0x8840) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0xe0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x9, 0x1ff, 0x9, 0x1204, r13, 0xbc38, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x2, 0xfffffffffffffffe}, 0x48) 687.988198ms ago: executing program 3 (id=2984): r0 = socket(0x23, 0x5, 0x0) listen(r0, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) 540.635541ms ago: executing program 3 (id=2985): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e22}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20004854, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) 460.099414ms ago: executing program 1 (id=2986): r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) (async) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000680)={'veth0_to_team\x00', &(0x7f0000000600)=@ethtool_wolinfo={0x6, 0x0, 0x0, "9f4d07b1980a"}}) socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket(0x200000100000011, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4) sendmsg$netlink(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="00010000000000000000000000000000ed00008008000000c221aaa6b70bb8e4e1a4cbf1c606e6f0e57db1868b2b27b09bc849d7f5b38a9405200777def19b126705e192425813056428faeadb072efe9c3cac9a1d7ce7f834ed46566a9fc617a1da56fc58544d0ca8210bdb2934ee9411efa663a28ac3f33e626a804c8fe7b6900f1e48dde4ac2b1029a91865b0f7fcd7c3ce953b007d66ef444f2d2cd0aef4df76dbb223d84ef351e6354ff00a2a23a16d716d9aae0883db713c7892e37bd20000000000000000000000000000003d214aa9f223628af1116879c489a48903bfb5bedcf2b8e4e4010104ce3a0ba350a9253897e2d9eb46fdaa619fbea44de0c064765bb2e09b9c6bb5b0fdd0256a893c96a1d385377205c81f795c6a5414db009c5ea30c4dbd1ce4c8f886d96a8df79169fbba7a9e75f28fca889a57736e38395d0cb4a6bda6d044b6111ce2afa28ee237c7e88189fb5ef3127a209c58337b", @ANYRES32=0x0, @ANYBLOB="11fc559653d62c6b9c03f52976e41c4722d18bf0ce6cfcb42fc7b70fcf896c44898f42127c7e2900feab885a6dad32f5585d11c2263a0155a2e051583a273229f2f1d8c3bf7bb1b58f458cbe2fe2adc86c8a2cb6fe15377caaf6e6cd97b54c7956a28309dbcbe2f11b43c14f62d1a0e13808e0cf5a6640bbbbcd3a4ce0af9253549f6efd60fe7e8eb04a688e318fdaacbbc1d54fdfd89249173e53137b2ce70eff4cd611dcb3a860eb30c49ebaf7cb594bf2f6390801ba569dbc7fae7e2236c5080000000000000014000000200100000000000000000000000000006810dc5bff000000"], 0x100}], 0x1}, 0x0) (async) r5 = socket$inet6(0xa, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) (async) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0x6, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async, rerun: 64) bind$inet6(r5, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (rerun: 64) r6 = socket$inet(0x2b, 0x0, 0x8001) (async, rerun: 64) socket$inet6_dccp(0xa, 0x6, 0x0) (rerun: 64) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) shutdown(r7, 0x1) (async) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r7, 0x84, 0x78, &(0x7f0000000000), 0x4) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) (async) listen(r5, 0x0) (async) r8 = socket$inet6(0xa, 0x6, 0x0) socket$isdn_base(0x22, 0x3, 0x26) (async) r9 = socket$key(0xf, 0x3, 0x2) (async, rerun: 32) r10 = socket$key(0xf, 0x3, 0x2) (rerun: 32) sendmsg$key(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000900)={0x2, 0x1a, 0x0, 0x6, 0x29, 0x0, 0x0, 0x0, [@sadb_key={0x21, 0x9, 0x7e8, 0x0, "6a2d4c7a74f62ccd2cb920e67bad6aa34d2dea1b1ead1c8021966b49ffafaee4b603638c49f4439cacdae028c5a707141b5b33d4341249cab578d2a87a6482c433ba96ad4a819116ea3546513823234404e56fa115ac9ee4ba059a314e59307b3d2a99220c8abbb9d6db9cdde1cfec4fe79e4a46c17ada86fb10e366c1a318a02206dc6fc8a31aec38442e9e85e979ccac91e3abdde9efb172b69fdaa8518a5503ab25e77726821e197aff16317ae615608774086d889154e8a483693952294c2079d864285c64a96765df61b211d2591259681360af05b545901ae3880968517eee0a90a80b4e9f71b1067c4939c2892a4ff6a723a2ce150288764121"}, @sadb_ident={0x2, 0xa, 0x8, 0x0, 0x7fffffffffffffff}, @sadb_spirange={0x2, 0x10, 0x4d3, 0x4d5}, @sadb_x_nat_t_type={0x1, 0x14, 0x1c}, @sadb_x_nat_t_port={0x1, 0xd3c35ebab9c1eb21, 0x4e22}]}, 0x148}}, 0x0) sendmsg$key(r9, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="021800001400000028bd700000000000030005000000000002000000e0000001000000000000000008001200000000000000000000000000060000000000000000000000000000007f000001000000000000000000000000fc010000000000000000000000000000020013006f0a000026bd7000ff340000050019000000000002000000ffffffff000000000000000002000000f40000020000000000000000"], 0xa0}}, 0x0) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) (async) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000100)={0x4, &(0x7f0000000080)=[{0xff, 0x3, 0x3f, 0xfffffffd}, {0x3, 0x7, 0x0, 0x200}, {0xfffe, 0x2, 0x8, 0x7}, {0x3, 0x81, 0x1f, 0x424}]}, 0x10) 443.596444ms ago: executing program 3 (id=2987): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xa, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x5f5e0ff}, @array={0x0, 0x0, 0x0, 0xa}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, &(0x7f0000000f40)=""/4096, 0x46, 0x1000, 0x1}, 0x20) 212.484655ms ago: executing program 3 (id=2988): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) mkdirat$cgroup(r1, &(0x7f00000000c0)='syz0\x00', 0x1ff) r2 = openat$cgroup_devices(r1, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) gettid() bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x28) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xd, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000000000000b7040000000000008500000033000000850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4}, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000020000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x0) write$cgroup_devices(r2, &(0x7f0000000100)={'b', ' *:* ', 'wm\x00'}, 0x9) syz_emit_ethernet(0xba, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd603000bb00842b00fc020000000000000000000000000000fe8000000000000000000000000000aa210a0000000000000002070100000000fe8000000000000000000000000000000000ed89324dbac27b00000064907802000000000000000000000082f63de64f6ce2ee11028289aefdb3449391a823213e6336516748a7949bb108402fa83b1d66"], 0x0) 141.612062ms ago: executing program 1 (id=2989): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="540000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800c0001006d6163766c616e001c00028008000100100000001300070000002023645cc93fe31c03000300000008000500", @ANYRES32=r3, @ANYBLOB], 0x54}}, 0x0) unshare(0x20000400) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000200)=0x14) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x20, 0x10, 0x100, 0x70bd29, 0x2000, {0x0, 0x0, 0x0, r6, 0x8000, 0x10010}}, 0x20}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) 113.536591ms ago: executing program 4 (id=2990): socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, 0x0, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a1202, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001400) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYRESHEX, @ANYRES16=r2], 0x9) 0s ago: executing program 1 (id=2991): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r5, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x2c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x200}]}, 0x2c}}, 0x4080) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000202070250000000000202020db1af8ff41000000bca100000000000007010000f8ffffffb702000008000000b703000000e0ff391e000000850000000500000095000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000ffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): valid length. [ 197.702407][T10306] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 197.737016][T10310] netlink: 'syz.2.1950': attribute type 8 has an invalid length. [ 198.096605][T10328] dccp_invalid_packet: P.Data Offset(0) too small [ 198.324338][T10340] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 198.506605][T10348] tipc: Started in network mode [ 198.528128][T10348] tipc: Node identity 1, cluster identity 4711 [ 198.542343][T10348] tipc: Node number set to 1 [ 198.569607][T10345] __nla_validate_parse: 4 callbacks suppressed [ 198.569628][T10345] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1963'. [ 198.658237][T10353] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1966'. [ 198.876916][T10361] netlink: 'syz.3.1970': attribute type 10 has an invalid length. [ 198.885456][T10361] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1970'. [ 199.090190][T10373] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 199.145504][T10375] lo: entered allmulticast mode [ 199.172997][T10377] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 199.573629][T10397] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1980'. [ 199.638773][T10401] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1982'. [ 199.730432][ T5097] Bluetooth: hci2: command 0x0405 tx timeout [ 199.881741][T10411] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 200.301787][T10437] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1995'. [ 200.361646][T10440] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1996'. [ 200.447220][T10444] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 201.033149][T10473] netlink: 'syz.1.2007': attribute type 1 has an invalid length. [ 201.060643][T10473] netlink: 'syz.1.2007': attribute type 6 has an invalid length. [ 201.302682][T10482] macvlan0: entered allmulticast mode [ 201.323132][T10482] veth1_vlan: entered allmulticast mode [ 201.357104][T10482] pim6reg: entered allmulticast mode [ 201.440782][T10485] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 201.810316][ T5097] Bluetooth: hci2: command 0x0405 tx timeout [ 201.882505][T10507] sctp: [Deprecated]: syz.2.2019 (pid 10507) Use of struct sctp_assoc_value in delayed_ack socket option. [ 201.882505][T10507] Use struct sctp_sack_info instead [ 201.948198][T10505] team0: Port device netdevsim0 removed [ 201.961380][T10504] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2017'. [ 201.986407][T10504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2017'. [ 202.207509][T10525] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 202.441391][T10540] netlink: 4096 bytes leftover after parsing attributes in process `syz.1.2029'. [ 203.142699][T10562] bridge0: vlan filtering disabled, automatically disabling multicast vlan snooping [ 203.340336][T10570] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 204.008126][T10605] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 204.132714][T10607] __nla_validate_parse: 2 callbacks suppressed [ 204.132738][T10607] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2054'. [ 204.593789][T10633] tipc: Started in network mode [ 204.607426][T10633] tipc: Node identity 1, cluster identity 4711 [ 204.624356][T10633] tipc: Node number set to 1 [ 204.742051][T10641] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 204.916953][T10645] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2068'. [ 204.968278][T10649] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2070'. [ 205.554185][T10673] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2079'. [ 205.575682][T10676] netlink: 209840 bytes leftover after parsing attributes in process `syz.4.2082'. [ 205.605807][T10675] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 205.665696][T10682] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2084'. [ 205.828164][T10688] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 206.511165][T10718] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2093'. [ 206.839509][T10728] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2097'. [ 206.863750][T10727] netlink: 'syz.4.2096': attribute type 1 has an invalid length. [ 206.988862][T10730] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 206.999528][T10730] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 207.018898][T10730] bond1: (slave vcan1): making interface the new active one [ 207.031930][T10730] bond1: (slave vcan1): Enslaving as an active interface with an up link [ 207.272544][T10747] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2102'. [ 207.398006][T10754] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 207.578042][T10764] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2110'. [ 207.990440][ T5097] Bluetooth: hci2: command 0x0405 tx timeout [ 209.234823][T10829] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 209.362379][T10832] __nla_validate_parse: 3 callbacks suppressed [ 209.362403][T10832] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2132'. [ 210.050645][ T5095] Bluetooth: hci2: command 0x0405 tx timeout [ 210.082425][T10854] vxcan1: tx address claim with dest, not broadcast [ 210.287167][T10865] ieee802154 phy0 wpan0: encryption failed: -22 [ 210.502770][T10880] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.924586][T10896] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2150'. [ 210.948448][T10896] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 211.544504][T10917] netlink: 'syz.2.2156': attribute type 2 has an invalid length. [ 211.836701][T10926] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2159'. [ 211.917348][T10930] netlink: get zone limit has 8 unknown bytes [ 211.953107][T10930] netlink: 'syz.3.2161': attribute type 32 has an invalid length. [ 212.010303][T10933] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2163'. [ 212.130272][ T5097] Bluetooth: hci2: command 0x0405 tx timeout [ 212.259377][T10944] x_tables: duplicate underflow at hook 2 [ 212.374292][T10953] pimreg: entered allmulticast mode [ 212.535695][T10963] netlink: 'syz.4.2170': attribute type 3 has an invalid length. [ 212.566818][T10963] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.2170'. [ 212.775633][T10971] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 212.874085][T10977] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2176'. [ 213.396271][T11000] x_tables: duplicate underflow at hook 2 [ 213.613605][T11013] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.926755][T11035] tipc: Started in network mode [ 213.947561][T11035] tipc: Node identity 1, cluster identity 4711 [ 213.956216][T11035] tipc: Node number set to 1 [ 214.105787][T11044] x_tables: duplicate underflow at hook 2 [ 214.163535][T11044] pimreg: entered allmulticast mode [ 214.206392][T11050] lo speed is unknown, defaulting to 1000 [ 214.229095][T11050] lo speed is unknown, defaulting to 1000 [ 214.246832][T11050] lo speed is unknown, defaulting to 1000 [ 214.308383][T11050] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 214.407475][T11050] lo speed is unknown, defaulting to 1000 [ 214.433811][T11050] lo speed is unknown, defaulting to 1000 [ 214.448493][T11050] lo speed is unknown, defaulting to 1000 [ 214.457298][T11050] lo speed is unknown, defaulting to 1000 [ 214.465595][T11050] lo speed is unknown, defaulting to 1000 [ 214.871022][T11082] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2216'. [ 215.656270][T11119] netlink: 'syz.0.2229': attribute type 4 has an invalid length. [ 215.666303][T11119] IPv6: NLM_F_CREATE should be specified when creating new route [ 215.674912][T11119] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2229'. [ 215.784969][T11122] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2230'. [ 215.915612][T11130] netlink: 'syz.2.2233': attribute type 1 has an invalid length. [ 215.924662][T11130] netlink: 'syz.2.2233': attribute type 2 has an invalid length. [ 216.087263][T11141] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2237'. [ 216.334297][T11153] netlink: 'syz.2.2242': attribute type 4 has an invalid length. [ 216.348271][T11154] netlink: 'syz.0.2241': attribute type 10 has an invalid length. [ 216.355129][T11153] IPv6: NLM_F_CREATE should be specified when creating new route [ 216.376212][T11153] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2242'. [ 216.376878][T11154] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2241'. [ 216.969541][T11169] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2248'. [ 217.608576][T11196] pimreg12: entered allmulticast mode [ 217.713872][T11191] pimreg12: left allmulticast mode [ 217.790259][T11206] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2262'. [ 218.099878][T11220] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2266'. [ 218.324773][T11230] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2269'. [ 218.350564][T11230] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.358174][T11230] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.408776][T11232] netlink: 'syz.1.2270': attribute type 4 has an invalid length. [ 218.433370][T11232] IPv6: NLM_F_CREATE should be specified when creating new route [ 218.940964][T11246] netlink: 'syz.3.2276': attribute type 11 has an invalid length. [ 219.797668][T11297] lo speed is unknown, defaulting to 1000 [ 219.940412][T11298] netlink: 'syz.1.2295': attribute type 11 has an invalid length. [ 220.354551][T11320] __nla_validate_parse: 4 callbacks suppressed [ 220.354573][T11320] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2305'. [ 220.664779][T11301] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2293'. [ 221.237552][T11338] netlink: 'syz.1.2312': attribute type 11 has an invalid length. [ 221.340819][T11346] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2313'. [ 221.690173][T11363] lo: entered allmulticast mode [ 221.710575][T11362] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2322'. [ 221.862820][T11365] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2322'. [ 222.014297][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.187837][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.303300][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.305426][T11376] netlink: 184 bytes leftover after parsing attributes in process `syz.4.2325'. [ 222.423168][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.626937][ T5095] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 222.642224][ T5095] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 222.652699][ T5095] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 222.663989][ T5095] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 222.682658][ T5095] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 222.692136][ T5095] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 222.718461][T11385] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2328'. [ 222.742263][ T11] bridge_slave_1: left allmulticast mode [ 222.762095][ T11] bridge_slave_1: left promiscuous mode [ 222.783843][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.807268][ T11] bridge_slave_0: left allmulticast mode [ 222.813750][ T11] bridge_slave_0: left promiscuous mode [ 222.819665][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.862913][T11392] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2329'. [ 223.649269][T11410] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2331'. [ 223.675252][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 223.694812][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 223.713595][ T11] bond0 (unregistering): Released all slaves [ 223.733794][ T11] bond1 (unregistering): Released all slaves [ 223.884968][ T11] bond2 (unregistering): Released all slaves [ 223.902606][ T11] bond3 (unregistering): Released all slaves [ 223.936151][T11395] lo speed is unknown, defaulting to 1000 [ 224.101513][ T11] Êü: left promiscuous mode [ 224.291695][ T11] tipc: Left network mode [ 224.296951][T11416] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2337'. [ 224.375984][T11382] lo speed is unknown, defaulting to 1000 [ 224.614829][ T5095] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 224.631889][ T5095] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 224.642752][ T5095] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 224.653677][ T5095] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 224.665562][ T5095] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 224.676371][ T5095] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 224.771042][ T5095] Bluetooth: hci1: command tx timeout [ 224.928209][ T11] hsr_slave_0: left promiscuous mode [ 224.937098][ T11] hsr_slave_1: left promiscuous mode [ 224.956952][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.980151][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.993009][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.001731][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.053221][ T11] veth1_macvtap: left promiscuous mode [ 225.058848][ T11] veth0_macvtap: left promiscuous mode [ 225.068781][ T11] veth1_vlan: left allmulticast mode [ 225.074949][ T11] veth1_vlan: left promiscuous mode [ 225.081909][ T11] veth0_vlan: left promiscuous mode [ 225.310207][ T11] pimreg (unregistering): left allmulticast mode [ 225.344120][ T11] pim6reg (unregistering): left allmulticast mode [ 225.493597][ T11] macvlan0 (unregistering): left allmulticast mode [ 225.817631][ T11] team0 (unregistering): Port device team_slave_1 removed [ 225.866862][ T11] team0 (unregistering): Port device team_slave_0 removed [ 226.326632][T11434] __nla_validate_parse: 1 callbacks suppressed [ 226.326648][T11434] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2339'. [ 226.382371][T11418] lo speed is unknown, defaulting to 1000 [ 226.557514][T11445] netlink: 184 bytes leftover after parsing attributes in process `syz.3.2342'. [ 226.684889][T11382] chnl_net:caif_netlink_parms(): no params data found [ 226.770505][ T5095] Bluetooth: hci0: command tx timeout [ 226.850660][ T5095] Bluetooth: hci1: command tx timeout [ 226.908979][T11382] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.917774][T11382] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.926223][T11382] bridge_slave_0: entered allmulticast mode [ 226.938949][T11382] bridge_slave_0: entered promiscuous mode [ 226.949003][T11382] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.957198][T11382] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.965192][T11382] bridge_slave_1: entered allmulticast mode [ 226.973317][T11382] bridge_slave_1: entered promiscuous mode [ 227.114449][T11382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.139598][T11382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.200923][ T11] IPVS: stop unused estimator thread 0... [ 227.220887][T11418] chnl_net:caif_netlink_parms(): no params data found [ 227.251810][T11382] team0: Port device team_slave_0 added [ 227.272144][T11382] team0: Port device team_slave_1 added [ 227.406354][T11382] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.426412][T11382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.466930][T11382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.525390][T11382] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.544446][T11382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.608723][T11382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.750908][T11418] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.766257][T11418] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.779694][T11418] bridge_slave_0: entered allmulticast mode [ 227.796141][T11418] bridge_slave_0: entered promiscuous mode [ 227.864608][T11418] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.888086][T11418] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.896818][T11418] bridge_slave_1: entered allmulticast mode [ 227.921151][T11418] bridge_slave_1: entered promiscuous mode [ 228.006299][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.061491][T11382] hsr_slave_0: entered promiscuous mode [ 228.068583][T11382] hsr_slave_1: entered promiscuous mode [ 228.076225][T11382] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 228.085198][T11382] Cannot create hsr debugfs directory [ 228.091274][T11477] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2350'. [ 228.124093][T11475] batadv0: entered promiscuous mode [ 228.138991][T11475] vlan2: entered promiscuous mode [ 228.147331][T11475] batadv0: left promiscuous mode [ 228.215532][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.273363][T11418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.344070][T11479] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2350'. [ 228.434424][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.461034][T11418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.578621][ T11] netdevsim netdevsim2  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.597248][T11487] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 228.613538][T11485] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2352'. [ 228.673084][T11418] team0: Port device team_slave_0 added [ 228.735010][T11418] team0: Port device team_slave_1 added [ 228.849628][T11418] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.852636][ T5095] Bluetooth: hci0: command tx timeout [ 228.866290][T11418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.910161][T11418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.928667][T11418] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.935891][ T5095] Bluetooth: hci1: command tx timeout [ 228.953114][T11500] netlink: 184 bytes leftover after parsing attributes in process `syz.3.2354'. [ 228.953170][T11418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.039926][T11418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.177741][T11418] hsr_slave_0: entered promiscuous mode [ 229.192748][T11418] hsr_slave_1: entered promiscuous mode [ 229.219548][T11418] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 229.227734][T11418] Cannot create hsr debugfs directory [ 229.448907][ T11] bridge_slave_1: left allmulticast mode [ 229.463381][ T11] bridge_slave_1: left promiscuous mode [ 229.469254][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.480216][ T11] bridge_slave_0: left allmulticast mode [ 229.485939][ T11] bridge_slave_0: left promiscuous mode [ 229.493530][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.617873][ T11] ip6gretap0 (unregistering): left promiscuous mode [ 229.878092][ T11] bridge0 (unregistering): left allmulticast mode [ 229.919682][ T11] bridge0 (unregistering): left promiscuous mode [ 230.251352][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 230.264144][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 230.276291][ T11] bond0 (unregistering): Released all slaves [ 230.422172][ T11] tipc: Left network mode [ 230.853147][T11540] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2367'. [ 230.877217][T11542] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2368'. [ 230.930280][ T5095] Bluetooth: hci0: command tx timeout [ 231.010300][ T5095] Bluetooth: hci1: command tx timeout [ 231.037563][ T11] hsr_slave_0: left promiscuous mode [ 231.046574][T11550] netlink: 172 bytes leftover after parsing attributes in process `syz.1.2370'. [ 231.059294][ T11] 0·: left promiscuous mode [ 231.071472][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.079349][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.099241][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.107120][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.137461][ T11] veth1_macvtap: left promiscuous mode [ 231.143310][ T11] veth0_macvtap: left promiscuous mode [ 231.149271][ T11] veth1_vlan: left promiscuous mode [ 231.155206][ T11] veth0_vlan: left promiscuous mode [ 231.947400][ T11] team0 (unregistering): Port device team_slave_1 removed [ 232.001843][ T11] team0 (unregistering): Port device team_slave_0 removed [ 232.461650][ T11] lo (unregistering): left allmulticast mode [ 232.518286][ T4873] lo speed is unknown, defaulting to 1000 [ 232.798544][T11573] netlink: 'syz.4.2378': attribute type 29 has an invalid length. [ 232.874435][T11573] netlink: 'syz.4.2378': attribute type 29 has an invalid length. [ 232.910892][T11576] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2379'. [ 232.944969][T11573] netlink: 'syz.4.2378': attribute type 29 has an invalid length. [ 232.981412][T11578] openvswitch: netlink: nsh attr 2048 is out of range max 3 [ 233.004670][T11418] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 233.018316][ T5095] Bluetooth: hci0: command tx timeout [ 233.097895][T11418] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 233.146209][T11418] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 233.176167][T11382] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 233.194193][T11587] netlink: 172 bytes leftover after parsing attributes in process `syz.4.2382'. [ 233.198965][T11382] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 233.222774][T11418] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 233.232430][T11588] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2383'. [ 233.254256][T11588] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2383'. [ 233.279180][T11382] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 233.295119][T11588] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2383'. [ 233.327809][T11382] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 233.627642][T11596] netlink: 211388 bytes leftover after parsing attributes in process `syz.3.2385'. [ 233.644677][T11418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.748527][T11418] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.786280][ T4873] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.793611][ T4873] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.855474][ T5211] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.862931][ T5211] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.906344][T11382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.045700][T11382] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.105357][ T5180] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.112627][ T5180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.151336][T11611] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2390'. [ 234.166692][ T5180] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.174084][ T5180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.404780][T11619] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2393'. [ 234.440771][T11619] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2393'. [ 234.521412][T11619] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2393'. [ 234.549065][T11418] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.572092][T11628] netlink: 'syz.3.2396': attribute type 1 has an invalid length. [ 234.754036][T11418] veth0_vlan: entered promiscuous mode [ 234.803834][T11382] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.828854][T11418] veth1_vlan: entered promiscuous mode [ 235.015034][T11418] veth0_macvtap: entered promiscuous mode [ 235.047928][T11382] veth0_vlan: entered promiscuous mode [ 235.064731][T11418] veth1_macvtap: entered promiscuous mode [ 235.106578][T11382] veth1_vlan: entered promiscuous mode [ 235.143178][T11418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.161892][T11418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.183230][T11418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.202105][T11418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.216342][T11418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.227023][T11418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.256612][T11418] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.299526][T11418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.340931][T11418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.360004][T11418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.371928][T11418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.383450][T11418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.395315][T11418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.415692][T11418] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.444122][T11418] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.472888][T11418] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.482809][T11418] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.498631][T11418] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.619560][T11382] veth0_macvtap: entered promiscuous mode [ 235.667465][T11382] veth1_macvtap: entered promiscuous mode [ 235.758507][ T2832] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.769202][ T2832] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.777167][T11382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.789653][T11382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.805039][T11382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.817536][T11382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.827727][T11382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.838800][T11382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.848998][T11382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.859605][T11382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.872523][T11382] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.923290][T11382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.950290][T11382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.960299][T11382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.977852][T11382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.991125][T11382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.002991][T11382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.014195][T11382] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.046672][T11382] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.078586][T11382] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.104934][T11661] Cannot find set identified by id 0 to match [ 236.139805][T11658] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 236.193360][ T2832] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.194709][T11382] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.242017][ T2832] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.257815][T11382] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.280720][T11382] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.289486][T11382] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.551940][ T1109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.577803][ T1109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.667501][ T2832] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.691310][ T2832] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.402025][T11703] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 238.353074][T11743] __nla_validate_parse: 15 callbacks suppressed [ 238.353096][T11743] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2432'. [ 238.375918][T11743] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 238.487166][T11749] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2435'. [ 238.505154][T11749] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.513027][T11749] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.744655][T11758] netlink: 172 bytes leftover after parsing attributes in process `syz.1.2437'. [ 238.795024][ T2832] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.106735][T11766] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2439'. [ 239.259132][T11772] netlink: 'syz.2.2442': attribute type 1 has an invalid length. [ 239.267595][T11774] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2441'. [ 239.272662][T11772] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.2442'. [ 239.292187][T11774] netlink: 'syz.3.2441': attribute type 15 has an invalid length. [ 239.352545][T11774] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 65023 - 0 [ 239.361848][T11774] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 65023 - 0 [ 239.371379][T11774] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 65023 - 0 [ 239.381015][T11774] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 65023 - 0 [ 239.444977][T11774] vxlan0: entered promiscuous mode [ 239.623751][T11788] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2446'. [ 239.656496][T11788] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 239.661659][ T5097] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 239.691123][ T5097] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 239.701934][ T5097] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 239.712709][ T5097] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 239.726976][ T5097] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 239.736312][ T5097] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 239.773412][T11795] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2448'. [ 239.806033][ T2832] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.835613][T11795] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2448'. [ 239.991371][ T2832] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.047674][T11804] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2451'. [ 240.184553][ T2832] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.226814][T11811] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.448853][T11820] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 240.668499][ T2832] bridge_slave_1: left allmulticast mode [ 240.685920][ T2832] bridge_slave_1: left promiscuous mode [ 240.708414][ T2832] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.737589][ T2832] bridge_slave_0: left allmulticast mode [ 240.748708][ T2832] bridge_slave_0: left promiscuous mode [ 240.765610][ T2832] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.802440][ T29] audit: type=1800 audit(1719889120.232:9): pid=11838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2462" name="memory.events" dev="sda1" ino=1973 res=0 errno=0 [ 240.858897][ T29] audit: type=1804 audit(1719889120.282:10): pid=11838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2462" name="/root/syzkaller.V9JbAH/226/memory.events" dev="sda1" ino=1973 res=1 errno=0 [ 240.921662][ T29] audit: type=1804 audit(1719889120.312:11): pid=11839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2462" name="/root/syzkaller.V9JbAH/226/memory.events" dev="sda1" ino=1973 res=1 errno=0 [ 241.627709][ T2832] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 241.651061][ T2832] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 241.667091][ T2832] bond0 (unregistering): Released all slaves [ 241.694859][T11852] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.810355][ T5095] Bluetooth: hci1: command tx timeout [ 241.909632][T11864] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 241.931564][T11862] No such timeout policy "syz0" [ 241.933503][T11789] chnl_net:caif_netlink_parms(): no params data found [ 242.333597][ T2832] hsr_slave_0: left promiscuous mode [ 242.355693][ T2832] hsr_slave_1: left promiscuous mode [ 242.372437][ T2832] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.386720][ T2832] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 242.416014][ T2832] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.438638][ T2832] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.488171][ T2832] veth1_macvtap: left promiscuous mode [ 242.501573][ T2832] veth0_macvtap: left promiscuous mode [ 242.507653][ T2832] veth1_vlan: left promiscuous mode [ 242.539674][ T2832] veth0_vlan: left promiscuous mode [ 242.711379][T11885] netlink: zone id is out of range [ 242.759316][T11885] netlink: zone id is out of range [ 242.788059][T11885] netlink: zone id is out of range [ 242.832222][T11885] netlink: zone id is out of range [ 242.837502][T11885] netlink: zone id is out of range [ 242.893822][T11885] netlink: zone id is out of range [ 242.899729][T11885] netlink: zone id is out of range [ 242.921604][T11885] netlink: zone id is out of range [ 242.946415][T11885] netlink: set zone limit has 4 unknown bytes [ 243.119452][T11898] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 243.488083][ T2832] team0 (unregistering): Port device team_slave_1 removed [ 243.548731][ T2832] team0 (unregistering): Port device team_slave_0 removed [ 243.890275][ T5095] Bluetooth: hci1: command tx timeout [ 244.042881][T11789] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.051023][T11789] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.058362][T11789] bridge_slave_0: entered allmulticast mode [ 244.073358][T11789] bridge_slave_0: entered promiscuous mode [ 244.091658][T11889] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.140821][T11789] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.148124][T11789] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.170217][T11789] bridge_slave_1: entered allmulticast mode [ 244.177811][T11789] bridge_slave_1: entered promiscuous mode [ 244.329647][T11789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.379063][T11789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.578220][T11789] team0: Port device team_slave_0 added [ 244.619213][T11789] team0: Port device team_slave_1 added [ 244.752118][T11789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.770011][T11789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.802056][T11930] __nla_validate_parse: 9 callbacks suppressed [ 244.802076][T11930] netlink: 172 bytes leftover after parsing attributes in process `syz.3.2492'. [ 244.830045][T11789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.856733][T11931] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2493'. [ 244.891764][T11789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.898775][T11789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.973020][T11789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.198001][T11789] hsr_slave_0: entered promiscuous mode [ 245.227858][T11789] hsr_slave_1: entered promiscuous mode [ 245.579712][T11946] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.883894][T11949] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2497'. [ 245.975073][ T5095] Bluetooth: hci1: command tx timeout [ 246.345629][T11980] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2505'. [ 246.368073][T11980] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2505'. [ 246.388022][T11789] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 246.407219][T11789] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 246.428026][T11789] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 246.447512][T11980] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2505'. [ 246.462531][T11789] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 246.498492][T11984] bridge0: port 2(bridge_slave_1) entered listening state [ 246.596931][T11988] netlink: 172 bytes leftover after parsing attributes in process `syz.4.2507'. [ 246.649771][T11990] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.785130][T11789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.845504][T11789] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.865367][ T4873] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.872628][ T4873] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.899754][ T4873] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.907057][ T4873] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.433722][T11789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.449500][T12011] batman_adv: batadv0: Adding interface: ipvlan3 [ 247.464442][T12011] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.503058][T12011] batman_adv: batadv0: Not using interface ipvlan3 (retrying later): interface not active [ 247.524543][T12015] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2516'. [ 247.545386][T12020] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2518'. [ 247.723759][T11789] veth0_vlan: entered promiscuous mode [ 247.779092][T11789] veth1_vlan: entered promiscuous mode [ 247.900476][T11789] veth0_macvtap: entered promiscuous mode [ 247.918314][T11789] veth1_macvtap: entered promiscuous mode [ 247.945005][T12033] netlink: 'syz.2.2520': attribute type 21 has an invalid length. [ 247.975732][T12033] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2520'. [ 247.987653][T12033] netlink: 'syz.2.2520': attribute type 4 has an invalid length. [ 248.000774][T12033] netlink: 'syz.2.2520': attribute type 5 has an invalid length. [ 248.042279][T11789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.054148][ T5097] Bluetooth: hci1: command tx timeout [ 248.079324][T11789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.108011][T11789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.132741][T11789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.155301][T11789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.167039][T11789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.178016][T11789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.189680][T11789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.207073][T11789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.257483][T11789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.276261][T11789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.326564][T11789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.339060][T11789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.362068][T11789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.378596][T11789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.389630][T11789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.404752][T11789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.417094][T11789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.446705][T11789] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.459794][T11789] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.479219][T11789] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.495585][T11789] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.598980][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.608814][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.643466][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.652053][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.913206][T12068] lo: entered allmulticast mode [ 249.872884][T12104] ip6gretap0: entered promiscuous mode [ 249.890572][T12104] syz_tun: entered promiscuous mode [ 249.936360][T12108] __nla_validate_parse: 12 callbacks suppressed [ 249.936388][T12108] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.2546'. [ 250.034805][T12108] bond0: entered promiscuous mode [ 250.050394][T12108] bond_slave_0: entered promiscuous mode [ 250.056679][T12108] bond_slave_1: entered promiscuous mode [ 250.071296][T12114] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2548'. [ 250.110603][T12114] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2548'. [ 250.158863][T12115] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2548'. [ 250.298007][T12126] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2550'. [ 251.106218][T12157] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2561'. [ 251.295159][ T64] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.390171][T11418] syz_tun (unregistering): left promiscuous mode [ 251.449629][ T29] audit: type=1800 audit(1719889130.872:12): pid=12169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2565" name="memory.events" dev="sda1" ino=1965 res=0 errno=0 [ 251.500399][ T29] audit: type=1804 audit(1719889130.902:13): pid=12169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2565" name="/root/syzkaller.QQGcb0/550/memory.events" dev="sda1" ino=1965 res=1 errno=0 [ 251.566412][ T29] audit: type=1804 audit(1719889130.912:14): pid=12169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2565" name="/root/syzkaller.QQGcb0/550/memory.events" dev="sda1" ino=1965 res=1 errno=0 [ 251.624944][ T29] audit: type=1804 audit(1719889130.912:15): pid=12169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2565" name="/root/syzkaller.QQGcb0/550/memory.events" dev="sda1" ino=1965 res=1 errno=0 [ 251.964780][ T5095] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 251.977138][ T5095] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 251.988802][ T5095] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 252.003140][ T5095] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 252.030179][ T5095] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 252.040991][ T5095] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 252.346922][T12187] dccp_invalid_packet: pskb_may_pull failed [ 252.511199][T12195] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.2576'. [ 252.556038][T12177] chnl_net:caif_netlink_parms(): no params data found [ 252.631654][ T64] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.648068][ T5095] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 252.668647][ T5095] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 252.680553][ T5095] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 252.696500][ T5095] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 252.711836][ T5095] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 252.719394][ T5095] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 252.834918][ T64] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.936790][ T64] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.051746][T12177] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.059374][T12177] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.079462][T12213] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2581'. [ 253.080647][T12177] bridge_slave_0: entered allmulticast mode [ 253.088827][T12213] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2581'. [ 253.114257][T12177] bridge_slave_0: entered promiscuous mode [ 253.172773][T12177] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.184497][T12177] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.192916][T12177] bridge_slave_1: entered allmulticast mode [ 253.203688][T12177] bridge_slave_1: entered promiscuous mode [ 253.283679][T12177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.317493][T12177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.428139][T12177] team0: Port device team_slave_0 added [ 253.457372][T12177] team0: Port device team_slave_1 added [ 253.548477][T12177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.557340][T12177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.587494][T12177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.624493][T12177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 253.632306][T12177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.666363][T12177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.691976][ T64] bridge_slave_1: left allmulticast mode [ 253.698048][ T64] bridge_slave_1: left promiscuous mode [ 253.704390][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.715440][ T64] bridge_slave_0: left allmulticast mode [ 253.723355][ T64] bridge_slave_0: left promiscuous mode [ 253.729163][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.134637][ T5095] Bluetooth: hci0: command tx timeout [ 254.253845][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 254.276328][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 254.311789][ T64] bond0 (unregistering): Released all slaves [ 254.483874][T12229] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.631882][T12241] netlink: 'syz.3.2589': attribute type 1 has an invalid length. [ 254.650110][T12241] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.2589'. [ 254.688433][T12241] netlink: 'syz.3.2589': attribute type 1 has an invalid length. [ 254.762160][T12177] hsr_slave_0: entered promiscuous mode [ 254.769193][T12177] hsr_slave_1: entered promiscuous mode [ 254.775535][ T5095] Bluetooth: hci1: command tx timeout [ 254.784472][T12177] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 254.797461][T12177] Cannot create hsr debugfs directory [ 254.872720][T12199] chnl_net:caif_netlink_parms(): no params data found [ 254.943808][ T64] hsr_slave_0: left promiscuous mode [ 254.956249][ T64] hsr_slave_1: left promiscuous mode [ 254.970187][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.980768][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.989259][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.001163][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 255.037972][ T64] veth1_macvtap: left promiscuous mode [ 255.053306][ T64] veth0_macvtap: left promiscuous mode [ 255.059061][ T64] veth1_vlan: left promiscuous mode [ 255.080961][ T64] veth0_vlan: left promiscuous mode [ 255.792729][ T64] team0 (unregistering): Port device team_slave_1 removed [ 255.844742][ T64] team0 (unregistering): Port device team_slave_0 removed [ 255.980695][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.210282][ T5095] Bluetooth: hci0: command tx timeout [ 256.768973][T12199] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.797746][T12199] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.808208][T12199] bridge_slave_0: entered allmulticast mode [ 256.823621][T12199] bridge_slave_0: entered promiscuous mode [ 256.845820][T12199] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.853829][ T5095] Bluetooth: hci1: command tx timeout [ 256.854158][T12199] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.876090][T12199] bridge_slave_1: entered allmulticast mode [ 256.902987][T12199] bridge_slave_1: entered promiscuous mode [ 257.087658][T12199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.145055][T12199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.277606][T12199] team0: Port device team_slave_0 added [ 257.287825][T12199] team0: Port device team_slave_1 added [ 257.404156][T12199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.419991][T12199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.446871][T12199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.474352][T12199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.489491][T12199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.529010][T12199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.659138][T12199] hsr_slave_0: entered promiscuous mode [ 257.688096][T12199] hsr_slave_1: entered promiscuous mode [ 257.826895][T12307] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2610'. [ 257.976299][T12177] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 258.009917][T12309] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2611'. [ 258.078590][T12177] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 258.116099][T12177] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 258.256645][T12199] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.290646][ T5095] Bluetooth: hci0: command tx timeout [ 258.317428][T12177] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 258.435849][T12199] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.498236][T12329] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.566326][T12199] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.683329][T12199] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.930397][ T5095] Bluetooth: hci1: command tx timeout [ 258.978515][T12177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.021206][T12199] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 259.045234][T12199] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 259.066244][T12199] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 259.101396][T12199] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 259.112189][T12347] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2624'. [ 259.141020][T12349] Bluetooth: MGMT ver 1.22 [ 259.145990][T12347] netdevsim netdevsim3 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 259.156213][T12347] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 259.166315][T12347] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 259.176695][T12347] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 259.195536][T12347] vxlan1: entered promiscuous mode [ 259.246375][T12177] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.278286][ T5139] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.285579][ T5139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.316668][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.323988][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.487642][T12199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.540413][T12199] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.561826][ T5139] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.569073][ T5139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.601591][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.608795][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.887090][T12177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.949404][T12364] lo: entered allmulticast mode [ 259.987263][T12367] netlink: 180 bytes leftover after parsing attributes in process `syz.3.2630'. [ 260.053902][T12177] veth0_vlan: entered promiscuous mode [ 260.079984][T12177] veth1_vlan: entered promiscuous mode [ 260.218409][T12177] veth0_macvtap: entered promiscuous mode [ 260.266744][T12177] veth1_macvtap: entered promiscuous mode [ 260.370394][ T5095] Bluetooth: hci0: command tx timeout [ 260.407502][T12177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.440290][T12177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.451371][T12177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.462030][T12177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.480264][T12177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.494094][T12177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.504471][T12177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.515587][T12177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.529675][T12177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 260.563312][T12177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.575493][T12177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.588737][T12177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.600210][T12177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.610468][T12177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.624781][T12177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.639909][T12177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.651661][T12177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.668982][T12177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 260.677408][T12380] syzkaller1: entered promiscuous mode [ 260.684247][T12380] syzkaller1: entered allmulticast mode [ 260.711097][T12383] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2633'. [ 260.726699][T12199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.742515][T12177] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.754010][T12177] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.763034][T12177] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.779840][T12177] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.909811][T12199] veth0_vlan: entered promiscuous mode [ 260.986831][T12199] veth1_vlan: entered promiscuous mode [ 261.009355][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.010899][ T5095] Bluetooth: hci1: command tx timeout [ 261.058902][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.138116][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.157864][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.178988][T12199] veth0_macvtap: entered promiscuous mode [ 261.216260][T12199] veth1_macvtap: entered promiscuous mode [ 261.344039][T12199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.368712][T12199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.379474][T12199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.391348][T12199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.404424][T12199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.416812][T12199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.427997][T12199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.439452][T12199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.451050][T12199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.461974][T12199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.474797][T12199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.574978][T12199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.592253][T12199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.609654][T12199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.627143][T12199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.641199][T12199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.654267][T12199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.666670][T12199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.685498][T12199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.709745][T12199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.718607][T12405] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2642'. [ 261.734198][T12199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.757756][T12199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.808222][T12199] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.832816][T12199] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.857769][T12199] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.878191][T12199] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.067142][T12415] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2645'. [ 262.261737][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.274559][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.371650][ T2832] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.379524][ T2832] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.723126][T12439] netlink: 180 bytes leftover after parsing attributes in process `syz.4.2654'. [ 263.525550][T12451] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2660'. [ 263.572402][T12454] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2661'. [ 263.756614][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.856497][T12456] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2662'. [ 264.495564][T12463] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2664'. [ 264.532090][T12464] Bluetooth: hci3: invalid length 0, exp 2 for type 14 [ 264.539750][T12464] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2665'. [ 264.929832][ T5097] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 264.943648][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.963660][ T5097] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 264.981957][ T5097] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 265.003107][ T5097] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 265.012327][ T5097] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 265.021078][ T5097] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 265.062532][T12477] SET target dimension over the limit! [ 265.178209][T12478] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2669'. [ 265.225379][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.330439][T12485] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2672'. [ 265.471834][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.622989][T12491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2673'. [ 265.677663][ T5097] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 265.689432][ T5097] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 265.705909][ T5097] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 265.715680][ T5097] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 265.726035][ T5097] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 265.741688][ T5097] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 265.801391][ T35] bridge_slave_1: left allmulticast mode [ 265.820681][ T35] bridge_slave_1: left promiscuous mode [ 265.826490][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.847056][ T35] bridge_slave_0: left allmulticast mode [ 265.853380][ T35] bridge_slave_0: left promiscuous mode [ 265.859112][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.598764][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 266.628148][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 266.656428][ T35] bond0 (unregistering): Released all slaves [ 266.699628][T12504] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2678'. [ 266.918424][T12473] chnl_net:caif_netlink_parms(): no params data found [ 267.056023][ T29] audit: type=1804 audit(1719889146.482:16): pid=12509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2679" name="/root/syzkaller.QQGcb0/591/cgroup.controllers" dev="sda1" ino=1973 res=1 errno=0 [ 267.093313][ T5097] Bluetooth: hci0: command tx timeout [ 267.504463][ T35] hsr_slave_0: left promiscuous mode [ 267.515489][ T35] hsr_slave_1: left promiscuous mode [ 267.727261][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.740871][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.763226][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.771897][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.810879][ T5097] Bluetooth: hci1: command tx timeout [ 267.831402][ T35] veth1_macvtap: left promiscuous mode [ 267.845517][ T35] veth0_macvtap: left promiscuous mode [ 267.859816][ T35] veth1_vlan: left promiscuous mode [ 267.876530][ T35] veth0_vlan: left promiscuous mode [ 268.301635][ T5095] Bluetooth: hci4: command 0x0406 tx timeout [ 268.659894][ T35] team0 (unregistering): Port device team_slave_1 removed [ 268.716993][ T35] team0 (unregistering): Port device team_slave_0 removed [ 268.944254][T12540] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2687'. [ 269.172284][ T5095] Bluetooth: hci0: command tx timeout [ 269.367192][T12473] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.375601][T12473] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.385018][T12473] bridge_slave_0: entered allmulticast mode [ 269.394549][T12473] bridge_slave_0: entered promiscuous mode [ 269.407559][T12473] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.416636][T12473] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.430092][T12473] bridge_slave_1: entered allmulticast mode [ 269.437731][T12473] bridge_slave_1: entered promiscuous mode [ 269.472691][T12542] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2688'. [ 269.655887][T12473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.684879][T12473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.890383][ T5095] Bluetooth: hci1: command tx timeout [ 269.977499][T12473] team0: Port device team_slave_0 added [ 270.018785][T12473] team0: Port device team_slave_1 added [ 270.134158][T12473] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.155092][T12473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.186069][T12473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.209561][T12473] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.219412][T12473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.246735][T12473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 270.279581][T12493] chnl_net:caif_netlink_parms(): no params data found [ 270.494966][T12473] hsr_slave_0: entered promiscuous mode [ 270.520918][T12473] hsr_slave_1: entered promiscuous mode [ 270.538647][T12473] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 270.547290][T12473] Cannot create hsr debugfs directory [ 270.634900][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.783530][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.831738][T12493] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.845746][T12493] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.859090][T12493] bridge_slave_0: entered allmulticast mode [ 270.878199][T12493] bridge_slave_0: entered promiscuous mode [ 270.920741][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.977950][T12493] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.990545][T12493] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.997868][T12493] bridge_slave_1: entered allmulticast mode [ 271.007288][T12493] bridge_slave_1: entered promiscuous mode [ 271.062505][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.132320][T12493] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.148338][T12493] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 271.252665][ T5095] Bluetooth: hci0: command tx timeout [ 271.273504][T12493] team0: Port device team_slave_0 added [ 271.319842][T12584] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2700'. [ 271.342376][T12493] team0: Port device team_slave_1 added [ 271.464166][T12493] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 271.477045][T12493] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.506396][T12493] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 271.537500][T12493] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.549050][T12493] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.586094][T12493] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.602716][T12588] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2702'. [ 271.682351][T12591] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2702'. [ 271.700916][T12598] sctp: [Deprecated]: syz.1.2705 (pid 12598) Use of struct sctp_assoc_value in delayed_ack socket option. [ 271.700916][T12598] Use struct sctp_sack_info instead [ 271.718622][T12591] ipvlan0: entered allmulticast mode [ 271.734180][T12591] veth0_vlan: entered allmulticast mode [ 271.971586][ T5095] Bluetooth: hci1: command tx timeout [ 272.007269][ T35] bridge_slave_1: left allmulticast mode [ 272.016850][ T35] bridge_slave_1: left promiscuous mode [ 272.023933][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.044341][ T35] bridge_slave_0: left allmulticast mode [ 272.052556][ T35] bridge_slave_0: left promiscuous mode [ 272.058520][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.076567][ T35] bridge_slave_1: left allmulticast mode [ 272.084542][ T35] bridge_slave_1: left promiscuous mode [ 272.091797][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.104510][ T35] bridge_slave_0: left allmulticast mode [ 272.112017][ T35] bridge_slave_0: left promiscuous mode [ 272.117802][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.298864][ T35] ip6gretap0 (unregistering): left promiscuous mode [ 272.988110][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 273.005977][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 273.018212][ T35] bond0 (unregistering): Released all slaves [ 273.184568][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 273.197268][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 273.211089][ T35] bond0 (unregistering): Released all slaves [ 273.332054][ T5095] Bluetooth: hci0: command tx timeout [ 273.376395][T12493] hsr_slave_0: entered promiscuous mode [ 273.477878][T12493] hsr_slave_1: entered promiscuous mode [ 273.508659][T12493] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 273.523621][T12621] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 273.538580][T12493] Cannot create hsr debugfs directory [ 274.024022][T12634] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2717'. [ 274.061338][ T5095] Bluetooth: hci1: command tx timeout [ 274.116069][T12634] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2717'. [ 274.254101][T12473] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 274.283601][T12473] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 274.336181][ T35] hsr_slave_0: left promiscuous mode [ 274.357815][ T35] hsr_slave_1: left promiscuous mode [ 274.381411][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 274.389161][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 274.405575][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 274.415822][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.438159][ T35] hsr_slave_0: left promiscuous mode [ 274.444865][ T35] hsr_slave_1: left promiscuous mode [ 274.458914][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 274.467568][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 274.482159][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 274.489855][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.538808][ T35] veth1_macvtap: left promiscuous mode [ 274.545228][ T35] veth0_macvtap: left promiscuous mode [ 274.556023][ T35] veth1_vlan: left promiscuous mode [ 274.564014][ T35] veth0_vlan: left promiscuous mode [ 274.571539][ T35] veth1_macvtap: left promiscuous mode [ 274.577468][ T35] veth0_macvtap: left promiscuous mode [ 274.592228][ T35] veth1_vlan: left promiscuous mode [ 274.597676][ T35] veth0_vlan: left promiscuous mode [ 275.258190][T12649] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 275.444694][ T35] team0 (unregistering): Port device team_slave_1 removed [ 275.498201][ T35] team0 (unregistering): Port device team_slave_0 removed [ 275.961983][ T35] lo (unregistering): left allmulticast mode [ 276.140778][ T5095] Bluetooth: hci1: command tx timeout [ 276.368850][ T35] team0 (unregistering): Port device team_slave_1 removed [ 276.409178][ T35] team0 (unregistering): Port device team_slave_0 removed [ 276.828351][T12473] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 276.842788][T12473] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 277.402614][T12473] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.506500][T12473] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.558275][T12666] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2731'. [ 277.574305][T12666] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2731'. [ 277.585054][T12668] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 277.605241][ T5149] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.612475][ T5149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.693531][ T5149] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.700773][ T5149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.797545][T12493] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 277.837010][T12493] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 277.908891][T12493] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 277.941821][T12493] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 278.148286][T12493] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.186247][T12493] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.207166][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.214476][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.238899][ T5142] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.246116][ T5142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.299380][T12473] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.465394][T12473] veth0_vlan: entered promiscuous mode [ 278.501080][T12473] veth1_vlan: entered promiscuous mode [ 278.587244][T12473] veth0_macvtap: entered promiscuous mode [ 278.633764][T12473] veth1_macvtap: entered promiscuous mode [ 278.702411][T12473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.728286][T12473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.742360][T12473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.754467][T12473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.769611][T12473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.787363][T12473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.816947][T12473] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.837709][T12473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.870582][T12473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.887184][T12473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.899603][T12473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.910528][T12473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.923415][T12473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.939574][T12473] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.964924][T12473] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.983077][T12473] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.994370][T12473] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.017056][T12473] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.144605][T12493] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.254747][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.276115][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.363496][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.402921][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.482671][T12493] veth0_vlan: entered promiscuous mode [ 279.513006][T12493] veth1_vlan: entered promiscuous mode [ 279.666568][T12713] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 279.715701][T12493] veth0_macvtap: entered promiscuous mode [ 279.731154][ T5097] Bluetooth: hci1: command tx timeout [ 279.739607][T12493] veth1_macvtap: entered promiscuous mode [ 279.906472][T12493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.946495][T12493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.966668][T12493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.987235][T12493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.012039][T12493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.045756][T12493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.069161][T12493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.090872][T12493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.133715][T12493] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.169113][T12717] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2746'. [ 280.259005][T12493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.268085][T12722] nbd: must specify a size in bytes for the device [ 280.278135][T12493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.289427][T12493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.311551][T12493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.327170][T12493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.344721][T12493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.355221][T12493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.366800][T12493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.379598][T12493] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.395602][T12493] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.405028][T12493] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.415276][T12493] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.424897][T12493] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.437155][T12724] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2749'. [ 280.485126][T12725] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2749'. [ 280.678242][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.699741][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.796667][ T2832] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.818235][ T2832] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.363838][T12757] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 281.556364][T12766] netlink: 'syz.4.2764': attribute type 2 has an invalid length. [ 281.660739][T12768] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2765'. [ 281.758925][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.385389][T12775] netlink: 'syz.4.2768': attribute type 1 has an invalid length. [ 282.514954][T12775] bond2 (unregistering): Released all slaves [ 282.768172][T12788] team0: entered promiscuous mode [ 282.774671][T12788] team_slave_0: entered promiscuous mode [ 282.793702][T12788] team_slave_1: entered promiscuous mode [ 282.818226][T12786] team0: left promiscuous mode [ 282.825577][T12786] team_slave_0: left promiscuous mode [ 282.841540][T12786] team_slave_1: left promiscuous mode [ 283.003669][ T5097] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 283.025465][ T5097] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 283.033648][ T5097] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 283.051701][ T5097] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 283.060837][ T5097] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 283.068269][ T5097] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 283.414498][ T5097] Bluetooth: hci2: command 0x0405 tx timeout [ 283.449597][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.533207][T12789] chnl_net:caif_netlink_parms(): no params data found [ 283.663615][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.853324][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.089134][T12789] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.108557][T12789] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.121410][T12789] bridge_slave_0: entered allmulticast mode [ 284.148444][T12789] bridge_slave_0: entered promiscuous mode [ 284.184220][T12789] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.203046][T12789] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.240994][T12789] bridge_slave_1: entered allmulticast mode [ 284.267834][T12789] bridge_slave_1: entered promiscuous mode [ 284.383377][ T5095] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 284.399145][ T5095] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 284.415891][ T5095] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 284.433760][T12835] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2784'. [ 284.444248][ T5095] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 284.461258][ T5095] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 284.469023][ T5095] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 284.524831][T12789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.592949][T12789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.747420][T12789] team0: Port device team_slave_0 added [ 284.827887][T12789] team0: Port device team_slave_1 added [ 284.866153][ T12] bridge_slave_1: left allmulticast mode [ 284.880109][ T12] bridge_slave_1: left promiscuous mode [ 284.885934][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.904832][ T12] bridge_slave_0: left allmulticast mode [ 284.917736][ T12] bridge_slave_0: left promiscuous mode [ 284.925150][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.976210][T12860] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2788'. [ 284.998364][T12860] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2788'. [ 285.171013][ T5097] Bluetooth: hci0: command tx timeout [ 285.446003][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 285.459467][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 285.476460][ T12] bond0 (unregistering): Released all slaves [ 285.585448][T12858] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2792'. [ 285.613704][T12856] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2791'. [ 285.624785][T12849] tap0: tun_chr_ioctl cmd 35111 [ 285.655485][T12859] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2792'. [ 285.719902][T12789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.737539][T12789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.807182][T12789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.882920][T12789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.901212][T12789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.935788][T12789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 286.379067][ T12] hsr_slave_0: left promiscuous mode [ 286.407553][ T12] hsr_slave_1: left promiscuous mode [ 286.427904][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 286.452434][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 286.481772][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 286.512367][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 286.531396][ T5097] Bluetooth: hci1: command tx timeout [ 286.600463][ T12] veth1_macvtap: left promiscuous mode [ 286.608092][ T12] veth0_macvtap: left promiscuous mode [ 286.625641][ T12] veth1_vlan: left promiscuous mode [ 286.635136][ T12] veth0_vlan: left promiscuous mode [ 287.224772][ T12] team0 (unregistering): Port device team_slave_1 removed [ 287.250844][ T5097] Bluetooth: hci0: command tx timeout [ 287.277055][ T12] team0 (unregistering): Port device team_slave_0 removed [ 287.722318][T12789] hsr_slave_0: entered promiscuous mode [ 287.739592][T12789] hsr_slave_1: entered promiscuous mode [ 287.761591][T12896] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2804'. [ 288.087542][T12910] netlink: 180 bytes leftover after parsing attributes in process `syz.3.2810'. [ 288.116057][T12836] chnl_net:caif_netlink_parms(): no params data found [ 288.486226][T12836] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.504849][T12836] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.525219][T12836] bridge_slave_0: entered allmulticast mode [ 288.546755][T12836] bridge_slave_0: entered promiscuous mode [ 288.581065][T12836] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.598494][T12836] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.608792][T12836] bridge_slave_1: entered allmulticast mode [ 288.611038][ T5097] Bluetooth: hci1: command tx timeout [ 288.641970][T12931] netlink: 192 bytes leftover after parsing attributes in process `syz.4.2816'. [ 288.664428][T12836] bridge_slave_1: entered promiscuous mode [ 288.787540][T12836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 288.877277][T12836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 288.929152][T12937] netlink: 'syz.3.2817': attribute type 1 has an invalid length. [ 288.951032][T12937] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2817'. [ 288.968664][T12836] team0: Port device team_slave_0 added [ 288.978193][T12937] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2817'. [ 289.026310][T12836] team0: Port device team_slave_1 added [ 289.134016][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.214906][T12948] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 289.221061][T12836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 289.238078][T12836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.274029][T12836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.325284][T12836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.330844][ T5097] Bluetooth: hci0: command tx timeout [ 289.339571][T12836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.375588][T12836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 289.573613][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.694392][T12836] hsr_slave_0: entered promiscuous mode [ 289.716450][T12836] hsr_slave_1: entered promiscuous mode [ 289.724250][T12836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 289.733117][T12836] Cannot create hsr debugfs directory [ 289.774980][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.935352][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.195215][T12984] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2832'. [ 290.298754][T12789] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 290.346794][T12789] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 290.428391][T12789] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 290.466531][T12789] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 290.592563][T12996] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2837'. [ 290.697775][ T5097] Bluetooth: hci1: command tx timeout [ 290.705924][ T12] bridge_slave_1: left allmulticast mode [ 290.723877][ T12] bridge_slave_1: left promiscuous mode [ 290.729688][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.765726][ T12] bridge_slave_0: left allmulticast mode [ 290.772501][ T12] bridge_slave_0: left promiscuous mode [ 290.778302][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.886904][T13005] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 291.316697][T13016] netlink: 10 bytes leftover after parsing attributes in process `syz.4.2843'. [ 291.344844][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 291.346868][T13016] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2843'. [ 291.372782][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 291.389201][ T12] bond0 (unregistering): Released all slaves [ 291.410907][ T5097] Bluetooth: hci0: command tx timeout [ 291.457747][T13015] tap0: tun_chr_ioctl cmd 35111 [ 291.905417][T13024] netlink: 'syz.4.2845': attribute type 4 has an invalid length. [ 291.956674][T13029] x_tables: duplicate underflow at hook 1 [ 291.963800][T13025] netlink: 'syz.4.2845': attribute type 4 has an invalid length. [ 292.036917][ T12] hsr_slave_0: left promiscuous mode [ 292.058628][ T12] hsr_slave_1: left promiscuous mode [ 292.069490][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 292.080720][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 292.098161][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 292.108722][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 292.134622][ T12] veth1_macvtap: left promiscuous mode [ 292.141477][ T12] veth0_macvtap: left promiscuous mode [ 292.147098][ T12] veth1_vlan: left promiscuous mode [ 292.153282][ T12] veth0_vlan: left promiscuous mode [ 292.692135][ T12] team0 (unregistering): Port device team_slave_1 removed [ 292.749318][ T12] team0 (unregistering): Port device team_slave_0 removed [ 292.770842][ T5097] Bluetooth: hci1: command tx timeout [ 293.166239][T13033] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2849'. [ 293.431617][T12789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.441053][T12836] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 293.476132][T13042] netlink: 'syz.3.2854': attribute type 8 has an invalid length. [ 293.489897][T12836] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 293.557503][T12836] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 293.640617][T12836] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 293.664624][T12789] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.722351][ T5139] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.729599][ T5139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.762233][ T5139] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.769410][ T5139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.885258][T13058] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2858'. [ 294.012623][T13058] tipc: MTU too low for tipc bearer [ 294.027164][T13061] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 294.197769][T12836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.265671][T12836] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.289100][ T5145] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.296345][ T5145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.347239][ T5145] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.354508][ T5145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.486538][T12789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 294.596547][T12789] veth0_vlan: entered promiscuous mode [ 294.636594][T12789] veth1_vlan: entered promiscuous mode [ 294.722529][T12789] veth0_macvtap: entered promiscuous mode [ 294.738604][T12789] veth1_macvtap: entered promiscuous mode [ 294.808600][T12789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.833937][T12789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.853265][ T5095] Bluetooth: hci1: command tx timeout [ 294.881517][T12789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.915576][T12789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.938770][T12789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.961207][T12789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.988710][T12789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 295.024760][T12789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.044661][T12789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.069126][T12789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.096422][T12789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.121289][T12789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.143116][T12789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.168395][T12789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 295.196752][T13087] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2866'. [ 295.235723][T12789] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.259844][T12789] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.281304][T12789] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.301740][T12789] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.327725][T12836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.938193][T12836] veth0_vlan: entered promiscuous mode [ 295.962153][ T2832] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.989382][T12836] veth1_vlan: entered promiscuous mode [ 296.006473][ T2832] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.155770][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.179843][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.249152][T12836] veth0_macvtap: entered promiscuous mode [ 296.287576][T12836] veth1_macvtap: entered promiscuous mode [ 296.408735][ T29] audit: type=1804 audit(1719889175.832:17): pid=13125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2879" name="/root/syzkaller.NWnCv6/387/cgroup.controllers" dev="sda1" ino=1966 res=1 errno=0 [ 296.567844][T12836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.602113][T12836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.631315][T12836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.658273][T12836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.674788][T12836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.687042][T12836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.699304][T12836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.713088][T12836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.726183][T12836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 296.786768][T12836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.819033][T12836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.852009][T12836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.879377][T12836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.900756][T12836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.913086][T12836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.925433][T12836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.939552][ T5097] Bluetooth: hci1: command tx timeout [ 296.950967][T12836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.977774][T12836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 297.017899][T12836] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.038543][T12836] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.048557][T12836] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.058227][T12836] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.253865][T13154] netlink: 'syz.4.2889': attribute type 4 has an invalid length. [ 297.352169][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.477423][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.485886][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.527549][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.535987][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.752265][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.908576][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.975718][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.162989][ T12] bridge_slave_1: left allmulticast mode [ 298.168685][ T12] bridge_slave_1: left promiscuous mode [ 298.180782][T13163] netlink: 'syz.1.2891': attribute type 1 has an invalid length. [ 298.199971][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.224202][ T12] bridge_slave_0: left allmulticast mode [ 298.229881][ T12] bridge_slave_0: left promiscuous mode [ 298.252884][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.661274][ T5095] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 298.672003][ T5095] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 298.685106][ T5095] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 298.697306][ T5095] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 298.706301][ T5095] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 298.722853][ T5095] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 298.977089][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 298.993118][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 299.007999][ T12] bond0 (unregistering): Released all slaves [ 299.073499][T13167] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 299.088240][T13167] team0: Port device batadv1 added [ 299.878533][ T5097] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 299.902320][ T5097] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 299.920709][ T5097] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 299.941850][ T5097] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 299.951654][ T5097] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 299.959416][ T5097] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 299.987140][ T12] hsr_slave_0: left promiscuous mode [ 300.041874][ T12] hsr_slave_1: left promiscuous mode [ 300.077906][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 300.119692][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 300.138466][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 300.171214][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 300.278915][ T12] veth1_macvtap: left promiscuous mode [ 300.286085][ T12] veth0_macvtap: left promiscuous mode [ 300.301449][ T12] veth1_vlan: left promiscuous mode [ 300.306834][ T12] veth0_vlan: left promiscuous mode [ 300.771905][ T5097] Bluetooth: hci0: command tx timeout [ 301.228304][ T12] team0 (unregistering): Port device team_slave_1 removed [ 301.304512][ T12] team0 (unregistering): Port device team_slave_0 removed [ 301.811410][T13206] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2901'. [ 301.957424][T13219] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2905'. [ 302.056511][ T5097] Bluetooth: hci1: command tx timeout [ 302.100988][T13219] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2905'. [ 302.196970][T13173] chnl_net:caif_netlink_parms(): no params data found [ 302.463366][T13173] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.490988][T13173] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.498320][T13173] bridge_slave_0: entered allmulticast mode [ 302.507269][T13173] bridge_slave_0: entered promiscuous mode [ 302.517633][T13173] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.525918][T13173] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.535807][T13173] bridge_slave_1: entered allmulticast mode [ 302.545871][T13173] bridge_slave_1: entered promiscuous mode [ 302.593977][T13241] netlink: 276 bytes leftover after parsing attributes in process `syz.1.2911'. [ 302.634599][T13173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.666058][T13173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.847809][T13173] team0: Port device team_slave_0 added [ 302.851674][ T5097] Bluetooth: hci0: command tx timeout [ 302.899310][T13173] team0: Port device team_slave_1 added [ 303.021677][T13173] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.029056][T13173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.056927][T13173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.132891][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.155690][T13173] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.164163][T13173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.199246][T13173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.325081][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.486595][T13274] netlink: 2272 bytes leftover after parsing attributes in process `syz.1.2920'. [ 303.492127][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.507860][T13271] can: request_module (can-proto-0) failed. [ 303.518832][T13274] netlink: 'syz.1.2920': attribute type 1 has an invalid length. [ 303.527641][T13274] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2920'. [ 303.555898][T13173] hsr_slave_0: entered promiscuous mode [ 303.574143][T13173] hsr_slave_1: entered promiscuous mode [ 303.591773][T13192] chnl_net:caif_netlink_parms(): no params data found [ 303.722538][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.927694][T13284] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2923'. [ 304.101500][T13296] netlink: 54 bytes leftover after parsing attributes in process `syz.1.2926'. [ 304.130953][ T5097] Bluetooth: hci1: command tx timeout [ 304.193404][T13192] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.206835][T13192] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.215075][T13192] bridge_slave_0: entered allmulticast mode [ 304.231096][T13192] bridge_slave_0: entered promiscuous mode [ 304.239008][T13298] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2927'. [ 304.284840][T13192] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.307967][T13192] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.324716][T13192] bridge_slave_1: entered allmulticast mode [ 304.343567][T13192] bridge_slave_1: entered promiscuous mode [ 304.503771][T13192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 304.518059][T13192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 304.696940][ T12] bridge_slave_1: left allmulticast mode [ 304.711987][ T12] bridge_slave_1: left promiscuous mode [ 304.718816][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.742145][ T12] bridge_slave_0: left allmulticast mode [ 304.747979][ T12] bridge_slave_0: left promiscuous mode [ 304.754520][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.932944][ T5097] Bluetooth: hci0: command tx timeout [ 305.327646][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 305.345850][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 305.357960][ T12] bond0 (unregistering): Released all slaves [ 305.385973][T13192] team0: Port device team_slave_0 added [ 305.517819][T13192] team0: Port device team_slave_1 added [ 305.679320][T13192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 305.687574][T13192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.718771][T13192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 305.744895][T13331] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2937'. [ 305.755471][T13329] netlink: 'syz.3.2939': attribute type 1 has an invalid length. [ 305.825760][T13333] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 305.848248][T13333] bond2: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 305.864758][T13333] bond2: (slave vcan1): making interface the new active one [ 305.884018][T13333] bond2: (slave vcan1): Enslaving as an active interface with an up link [ 305.906237][T13192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 305.931223][T13192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.960887][T13192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 306.042534][T13342] netlink: 'syz.3.2942': attribute type 1 has an invalid length. [ 306.052831][T13342] netlink: 'syz.3.2942': attribute type 1 has an invalid length. [ 306.195527][ T12] hsr_slave_0: left promiscuous mode [ 306.212268][ T5097] Bluetooth: hci1: command tx timeout [ 306.218538][ T12] hsr_slave_1: left promiscuous mode [ 306.227622][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 306.236601][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.246956][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 306.255745][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.296181][ T12] veth1_macvtap: left promiscuous mode [ 306.302681][ T12] veth0_macvtap: left promiscuous mode [ 306.311247][ T12] veth1_vlan: left promiscuous mode [ 306.316850][ T12] veth0_vlan: left promiscuous mode [ 306.993893][ T12] team0 (unregistering): Port device team_slave_1 removed [ 307.016694][ T5097] Bluetooth: hci0: command tx timeout [ 307.058066][ T12] team0 (unregistering): Port device team_slave_0 removed [ 307.548260][T13350] tun0: tun_chr_ioctl cmd 2147767507 [ 307.558627][T13352] netlink: 'syz.3.2944': attribute type 1 has an invalid length. [ 307.794006][T13192] hsr_slave_0: entered promiscuous mode [ 307.829424][T13192] hsr_slave_1: entered promiscuous mode [ 307.843423][T13192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 307.853037][T13192] Cannot create hsr debugfs directory [ 307.861545][T13173] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 307.938032][T13173] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 307.967519][T13173] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 308.067808][T13372] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 308.167444][T13173] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 308.224612][T13377] __nla_validate_parse: 3 callbacks suppressed [ 308.224634][T13377] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2951'. [ 308.291379][ T5097] Bluetooth: hci1: command tx timeout [ 308.576767][T13384] Bluetooth: MGMT ver 1.22 [ 308.599176][T13173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.732554][T13173] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.937269][ T5139] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.944487][ T5139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.984411][ T5139] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.991661][ T5139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 309.213078][T13407] vlan1: entered promiscuous mode [ 309.252635][T13406] vlan1: left promiscuous mode [ 309.314854][T13192] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 309.347760][T13192] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 309.396134][T13192] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 309.452379][T13418] lo speed is unknown, defaulting to 1000 [ 309.454466][T13192] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 309.483963][T13418] lo speed is unknown, defaulting to 1000 [ 309.506733][T13173] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 309.523025][T13418] lo speed is unknown, defaulting to 1000 [ 309.564176][T13418] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 309.637518][T13418] lo speed is unknown, defaulting to 1000 [ 309.650879][T13418] lo speed is unknown, defaulting to 1000 [ 309.657554][T13173] veth0_vlan: entered promiscuous mode [ 309.669622][T13418] lo speed is unknown, defaulting to 1000 [ 309.686392][T13418] lo speed is unknown, defaulting to 1000 [ 309.692389][T13173] veth1_vlan: entered promiscuous mode [ 309.718002][T13418] lo speed is unknown, defaulting to 1000 [ 309.795243][T13173] veth0_macvtap: entered promiscuous mode [ 309.809012][T13192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 309.826296][T13173] veth1_macvtap: entered promiscuous mode [ 309.875503][T13192] 8021q: adding VLAN 0 to HW filter on device team0 [ 309.889107][T13173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.902835][T13173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.913416][T13173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.932620][T13173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.948596][T13173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.962366][T13173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.975247][T13173] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 310.007073][T13427] netlink: 'syz.4.2967': attribute type 4 has an invalid length. [ 310.037652][T13427] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 310.066435][T13173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 310.091764][T13173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.110725][T13173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 310.140722][T13173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.155082][T13173] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 310.175367][ T5145] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.182614][ T5145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.223142][T13173] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.240652][T13173] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.249742][T13173] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.276311][T13173] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.293172][ T5145] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.300414][ T5145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.529852][ T1109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.575081][ T1109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.769493][ T1109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.811982][ T1109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.022960][T13192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 311.202072][T13459] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2976'. [ 311.225602][T13459] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2976'. [ 311.245714][T13459] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.253057][T13459] bridge0: port 2(bridge_slave_1) entered forwarding state [ 311.260739][T13459] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.268674][T13459] bridge0: port 1(bridge_slave_0) entered forwarding state [ 311.329875][T13192] veth0_vlan: entered promiscuous mode [ 311.388199][T13192] veth1_vlan: entered promiscuous mode [ 311.479253][ T29] audit: type=1804 audit(1719889190.872:18): pid=13466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2979" name="/root/syzkaller.V9JbAH/395/memory.events" dev="sda1" ino=1977 res=1 errno=0 [ 311.514158][T13192] veth0_macvtap: entered promiscuous mode [ 311.543870][T13192] veth1_macvtap: entered promiscuous mode [ 311.609279][T13192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 311.628534][T13192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.670611][T13192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 311.700996][T13192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.719830][T13192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 311.732417][T13192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.744695][T13192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 311.767290][T13192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.783475][T13192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 311.807448][T13192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.835890][T13192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.856628][T13192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.878878][T13192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.897357][T13192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.908491][T13192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.934725][T13192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 312.001908][T13192] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.017801][T13192] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.029210][T13192] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.044710][T13192] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.359402][ T2832] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.372078][ T2832] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.444334][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.464553][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.504890][T13502] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2988'. [ 312.518291][T13502] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2988'. [ 312.546744][T13502] dccp_invalid_packet: P.Data Offset(47) too large [ 312.576748][ T5211] ================================================================== [ 312.584871][ T5211] BUG: KASAN: slab-use-after-free in nf_tables_trans_destroy_work+0x152b/0x1750 [ 312.594045][ T5211] Read of size 2 at addr ffff88801e6429c4 by task kworker/1:6/5211 [ 312.601966][ T5211] [ 312.604318][ T5211] CPU: 1 PID: 5211 Comm: kworker/1:6 Not tainted 6.10.0-rc5-syzkaller-01158-g74d6529b78f7 #0 [ 312.614499][ T5211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 312.624586][ T5211] Workqueue: events nf_tables_trans_destroy_work [ 312.630968][ T5211] Call Trace: [ 312.634273][ T5211] [ 312.637222][ T5211] dump_stack_lvl+0x241/0x360 [ 312.641934][ T5211] ? __pfx_dump_stack_lvl+0x10/0x10 [ 312.647164][ T5211] ? __pfx__printk+0x10/0x10 [ 312.651775][ T5211] ? _printk+0xd5/0x120 [ 312.655948][ T5211] ? __virt_addr_valid+0x183/0x520 [ 312.661075][ T5211] ? __virt_addr_valid+0x183/0x520 [ 312.666200][ T5211] print_report+0x169/0x550 [ 312.670715][ T5211] ? __virt_addr_valid+0x183/0x520 [ 312.675840][ T5211] ? __virt_addr_valid+0x183/0x520 [ 312.680967][ T5211] ? __virt_addr_valid+0x44e/0x520 [ 312.686097][ T5211] ? __phys_addr+0xba/0x170 [ 312.690614][ T5211] ? nf_tables_trans_destroy_work+0x152b/0x1750 [ 312.696858][ T5211] kasan_report+0x143/0x180 [ 312.701374][ T5211] ? nf_tables_trans_destroy_work+0x152b/0x1750 [ 312.707629][ T5211] nf_tables_trans_destroy_work+0x152b/0x1750 [ 312.713712][ T5211] ? __pfx_nf_tables_trans_destroy_work+0x10/0x10 [ 312.720127][ T5211] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 312.726114][ T5211] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 312.732455][ T5211] ? process_scheduled_works+0x945/0x1830 [ 312.738182][ T5211] process_scheduled_works+0xa2c/0x1830 [ 312.743746][ T5211] ? __pfx_process_scheduled_works+0x10/0x10 [ 312.749735][ T5211] ? assign_work+0x364/0x3d0 [ 312.754333][ T5211] worker_thread+0x86d/0xd50 [ 312.758961][ T5211] ? __kthread_parkme+0x169/0x1d0 [ 312.763989][ T5211] ? __pfx_worker_thread+0x10/0x10 [ 312.769103][ T5211] kthread+0x2f0/0x390 [ 312.773181][ T5211] ? __pfx_worker_thread+0x10/0x10 [ 312.778298][ T5211] ? __pfx_kthread+0x10/0x10 [ 312.782899][ T5211] ret_from_fork+0x4b/0x80 [ 312.787330][ T5211] ? __pfx_kthread+0x10/0x10 [ 312.791933][ T5211] ret_from_fork_asm+0x1a/0x30 [ 312.796720][ T5211] [ 312.799738][ T5211] [ 312.802059][ T5211] Allocated by task 13502: [ 312.806474][ T5211] kasan_save_track+0x3f/0x80 [ 312.811163][ T5211] __kasan_kmalloc+0x98/0xb0 [ 312.815756][ T5211] kmalloc_trace_noprof+0x19c/0x2c0 [ 312.821039][ T5211] nf_tables_newtable+0x52e/0x1dc0 [ 312.826152][ T5211] nfnetlink_rcv+0x1427/0x2a90 [ 312.830930][ T5211] netlink_unicast+0x7f0/0x990 [ 312.835707][ T5211] netlink_sendmsg+0x8e4/0xcb0 [ 312.840477][ T5211] __sock_sendmsg+0x221/0x270 [ 312.845173][ T5211] ____sys_sendmsg+0x525/0x7d0 [ 312.849947][ T5211] __sys_sendmsg+0x2b0/0x3a0 [ 312.854544][ T5211] do_syscall_64+0xf3/0x230 [ 312.859049][ T5211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.864953][ T5211] [ 312.867299][ T5211] Freed by task 13501: [ 312.871363][ T5211] kasan_save_track+0x3f/0x80 [ 312.876063][ T5211] kasan_save_free_info+0x40/0x50 [ 312.881097][ T5211] poison_slab_object+0xe0/0x150 [ 312.886049][ T5211] __kasan_slab_free+0x37/0x60 [ 312.890821][ T5211] kfree+0x149/0x360 [ 312.894730][ T5211] __nft_release_table+0xe80/0xf40 [ 312.899857][ T5211] nft_rcv_nl_event+0x55f/0x6d0 [ 312.904717][ T5211] notifier_call_chain+0x19f/0x3e0 [ 312.909833][ T5211] blocking_notifier_call_chain+0x69/0x90 [ 312.915554][ T5211] netlink_release+0x11a6/0x1b10 [ 312.920496][ T5211] sock_close+0xbc/0x240 [ 312.924733][ T5211] __fput+0x406/0x8b0 [ 312.928716][ T5211] task_work_run+0x24f/0x310 [ 312.933324][ T5211] syscall_exit_to_user_mode+0x168/0x370 [ 312.938962][ T5211] do_syscall_64+0x100/0x230 [ 312.943553][ T5211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.949448][ T5211] [ 312.951768][ T5211] Last potentially related work creation: [ 312.957484][ T5211] kasan_save_stack+0x3f/0x60 [ 312.962180][ T5211] __kasan_record_aux_stack+0xac/0xc0 [ 312.967549][ T5211] insert_work+0x3e/0x330 [ 312.971875][ T5211] __queue_work+0xc16/0xee0 [ 312.976382][ T5211] queue_work_on+0x1c2/0x380 [ 312.980984][ T5211] rhltable_remove+0x1097/0x1160 [ 312.985939][ T5211] __nft_release_table+0xc57/0xf40 [ 312.991060][ T5211] nft_rcv_nl_event+0x55f/0x6d0 [ 312.995918][ T5211] notifier_call_chain+0x19f/0x3e0 [ 313.001028][ T5211] blocking_notifier_call_chain+0x69/0x90 [ 313.006747][ T5211] netlink_release+0x11a6/0x1b10 [ 313.011686][ T5211] sock_close+0xbc/0x240 [ 313.015936][ T5211] __fput+0x406/0x8b0 [ 313.019942][ T5211] task_work_run+0x24f/0x310 [ 313.024536][ T5211] syscall_exit_to_user_mode+0x168/0x370 [ 313.030171][ T5211] do_syscall_64+0x100/0x230 [ 313.034788][ T5211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.040706][ T5211] [ 313.043040][ T5211] The buggy address belongs to the object at ffff88801e642800 [ 313.043040][ T5211] which belongs to the cache kmalloc-cg-512 of size 512 [ 313.057364][ T5211] The buggy address is located 452 bytes inside of [ 313.057364][ T5211] freed 512-byte region [ffff88801e642800, ffff88801e642a00) [ 313.071160][ T5211] [ 313.073479][ T5211] The buggy address belongs to the physical page: [ 313.079888][ T5211] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1e640 [ 313.088677][ T5211] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 313.097219][ T5211] memcg:ffff88801e55bd01 [ 313.101464][ T5211] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 313.109133][ T5211] page_type: 0xffffefff(slab) [ 313.113831][ T5211] raw: 00fff00000000040 ffff88801504f140 dead000000000100 dead000000000122 [ 313.122424][ T5211] raw: 0000000000000000 0000000000100010 00000001ffffefff ffff88801e55bd01 [ 313.131025][ T5211] head: 00fff00000000040 ffff88801504f140 dead000000000100 dead000000000122 [ 313.139704][ T5211] head: 0000000000000000 0000000000100010 00000001ffffefff ffff88801e55bd01 [ 313.148376][ T5211] head: 00fff00000000002 ffffea0000799001 ffffffffffffffff 0000000000000000 [ 313.157047][ T5211] head: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000 [ 313.165714][ T5211] page dumped because: kasan: bad access detected [ 313.172227][ T5211] page_owner tracks the page as allocated [ 313.177933][ T5211] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4757, tgid 4757 (dhcpcd), ts 60293150887, free_ts 60071532119 [ 313.198793][ T5211] post_alloc_hook+0x1f3/0x230 [ 313.203576][ T5211] get_page_from_freelist+0x2e4c/0x2f10 [ 313.209119][ T5211] __alloc_pages_noprof+0x256/0x6c0 [ 313.214317][ T5211] alloc_slab_page+0x5f/0x120 [ 313.218993][ T5211] allocate_slab+0x5a/0x2f0 [ 313.223530][ T5211] ___slab_alloc+0xcd1/0x14b0 [ 313.228225][ T5211] __slab_alloc+0x58/0xa0 [ 313.232555][ T5211] kmalloc_node_track_caller_noprof+0x281/0x440 [ 313.238796][ T5211] kmalloc_reserve+0x111/0x2a0 [ 313.243575][ T5211] __alloc_skb+0x1f3/0x440 [ 313.247993][ T5211] alloc_skb_with_frags+0xc3/0x770 [ 313.253109][ T5211] sock_alloc_send_pskb+0x91a/0xa60 [ 313.258322][ T5211] unix_dgram_sendmsg+0x6d3/0x1f80 [ 313.263618][ T5211] __sock_sendmsg+0x221/0x270 [ 313.268292][ T5211] sock_write_iter+0x2dd/0x400 [ 313.273056][ T5211] vfs_write+0xa72/0xc90 [ 313.277318][ T5211] page last free pid 5060 tgid 5060 stack trace: [ 313.283653][ T5211] free_unref_page+0xd22/0xea0 [ 313.288432][ T5211] __slab_free+0x31b/0x3d0 [ 313.292853][ T5211] qlist_free_all+0x9e/0x140 [ 313.297445][ T5211] kasan_quarantine_reduce+0x14f/0x170 [ 313.302912][ T5211] __kasan_slab_alloc+0x23/0x80 [ 313.307771][ T5211] kmem_cache_alloc_noprof+0x135/0x2a0 [ 313.313242][ T5211] vm_area_alloc+0x24/0x1d0 [ 313.317767][ T5211] mmap_region+0xc3d/0x2090 [ 313.322277][ T5211] do_mmap+0x8ad/0xfa0 [ 313.326350][ T5211] vm_mmap_pgoff+0x1dd/0x3d0 [ 313.330950][ T5211] do_syscall_64+0xf3/0x230 [ 313.335465][ T5211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.341364][ T5211] [ 313.343682][ T5211] Memory state around the buggy address: [ 313.349306][ T5211] ffff88801e642880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 313.357365][ T5211] ffff88801e642900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 313.365427][ T5211] >ffff88801e642980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 313.373484][ T5211] ^ [ 313.379628][ T5211] ffff88801e642a00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 313.387698][ T5211] ffff88801e642a80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 313.395755][ T5211] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 sent=0 n=0 (errno 9: Bad file descriptor)