last executing test programs: 33.810803616s ago: executing program 4: sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={0xffffffffffffffff, &(0x7f00000006c0)="3618a8740c8194f842fc01b177c2354ad2ed0ce4ad4514285ba8c023b12d6c0af29ecb3c274821f74df8b416f8b5305c0eca8bdd0b5ae6254d63ca6dc61964a726b0818512cb59aed8836bb6f0e4836d36b304861d82be99060eb8f160799bbc9ed8e406e2e16cd8ebe22d8dc74009c81435bf3c406c964a2dc39a02fd295171f0a52f9a0e74f979836648c071343413696508ed2aac711d89d297e5a86659dde434a0b38171990e654a9a47e531d206c9a78c509260f3dd2c80edb627c98e7c76c564caa9825fa7bc0570bc567ea18568a53ad2c70732f3bf17f39588df76fabf369985d09c", &(0x7f0000000900)=""/125}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001e00)={'vlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000001e40)={r1, 0x3, 0x6, @multicast}, 0x10) socket$tipc(0x1e, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @broadcast}, 0x10) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r1], 0x20}}, 0x0) 33.488515275s ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) (async, rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000080), 0x0}, 0x20) (rerun: 32) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000180)=0x6185, 0x10001) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2}, 0x10) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000800000000000000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0}, 0x90) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r5}, 0x10) bpf$MAP_DELETE_ELEM(0x2, 0x0, 0x0) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) (rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r7, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, r8, 0x110, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x1}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x1f}, @NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x1b}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x4040080) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async, rerun: 64) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100), 0x1001) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r10 = socket(0x200000000000011, 0x3, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'macvlan0\x00', 0x0}) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000b00)={0x0, 0x0, 0x8, 0x0, '\x00', [{0x7, 0xffffffff, 0x0, 0x2, 0xff, 0x100}, {0x101, 0x4, 0x4, 0x6, 0x100, 0x200}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) (async) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002b80)=@newlink={0x20, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r11, 0x0, 0x24004}}, 0x20}, 0x1, 0x0, 0x0, 0x2d274bdec6637b8b}, 0x0) 33.330117186s ago: executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) socket$key(0xf, 0x3, 0x2) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001b80)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000140)=""/200, 0xc8}, {&(0x7f0000000040)=""/45, 0x2d}, {&(0x7f0000000300)=""/117, 0x75}, {&(0x7f0000000380)=""/123, 0x7b}, {&(0x7f0000000440)=""/241, 0xf1}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000000540)=""/186, 0xba}, {&(0x7f0000000600)=""/201, 0xc9}, {&(0x7f0000001740)=""/167, 0xa7}], 0x9, &(0x7f00000018c0)=""/118, 0x76}, 0xec}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001940)=""/96, 0x60}, {&(0x7f00000019c0)=""/69, 0x45}, {&(0x7f0000001a40)=""/109, 0x6d}], 0x3, &(0x7f0000001ac0)=""/149, 0x95}, 0x7}], 0x2, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f0000001e80)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001e40)={&(0x7f0000001c00)=@delqdisc={0x230, 0x25, 0x4, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x1, 0x7}, {0x51e977ffd727fdf7, 0xe}, {0x9, 0xa}}, [@q_dsmark={{0xb}, {0x40, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x36}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xe4f9}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x25}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x20}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0xc}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3ff}]}}, @q_dsmark={{0xb}, {0x30, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x82a}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x800}, @TCA_DSMARK_INDICES={0x6, 0x1, 0xc}]}}, @q_dsmark={{0xb}, {0x30, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}, @TCA_DSMARK_INDICES={0x6, 0x1, 0xc96ced3b804b67bd}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xffff}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x13}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x850}]}}, @q_dsmark={{0xb}, {0x18, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x63a}]}}, @q_dsmark={{0xb}, {0x3c, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x16}, @TCA_DSMARK_DEFAULT_INDEX={0xffffffffffffffa6, 0x2, 0x7}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xda}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1f0}]}}, @q_dsmark={{0xb}, {0x34, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x8}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x18}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x35}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x3}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x10, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x28}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x8, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x21f}, @TCA_DSMARK_INDICES={0x6, 0x1, 0xc}]}}, @q_dsmark={{0xb}, {0x40, 0x2, [@TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x8}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x54}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x14}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x21}]}}]}, 0x230}}, 0x0) 33.277782081s ago: executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r0, 0x29, 0x12, &(0x7f0000000340)=ANY=[@ANYBLOB="000a0000000000000730000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000720000000000600000000000000000000000000000000000000fe"], 0x60) 33.276949911s ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x3c56, 0x1, 0x2}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000c80), r2) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000900)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="23090000000000000000210000000c000500000000000000000009001f"], 0x2c}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0xb}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = socket$kcm(0x2b, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r8, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) sendto$inet6(r8, &(0x7f0000000340)="06ef1eb488", 0x5, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x2, &(0x7f0000000500)=@gcm_128={{0x304}, "f4f8ba7a3608b899", "8c125378126aba8d05e9c9bc857bfced", "3596b4b9", "dc0500"}, 0x28) setsockopt$sock_attach_bpf(r7, 0x6, 0xd, &(0x7f0000000000), 0x1) r9 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r9, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) ppoll(&(0x7f0000000d40)=[{r9}], 0x1, &(0x7f0000000dc0)={0x0, 0x3938700}, 0x0, 0x0) sendmsg$inet(r7, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x20000014) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, 0xa, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_USERDATA={0x14, 0xd, 0x1, 0x0, "64e33bbb892684b902b7e7b2a6cd6350"}]}, 0x28}}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r10) 33.117184561s ago: executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001740)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x11, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r1, &(0x7f0000000280)="c5", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x15}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000006680)=ANY=[@ANYBLOB="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"/4281], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r3, r2, 0x2f, 0x2000, 0x4, @prog_fd}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552da15f6", @ANYRES32=0x0, @ANYBLOB="000000293c000000280012800a00010076786c616e00000018000280140013"], 0x48}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x5, 0x0, 0x0) 32.943651784s ago: executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)={0x4c, 0x1, 0x1, 0x5, 0x0, 0x0, {0xa}, [@CTA_TUPLE_MASTER={0x38, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x200440c1}, 0x80) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001016010000000000000000000000000a64000000060a09040000000000000000020000000900020073797a30000000000900020073797a310000000038000480340001800b00010065787468647200002400028005000200000000000800034000000000080001400000001608000440000000aa1400000011010000000000020000000000000a"], 0x8c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005080), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x50, r7, 0x603, 0x0, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x5e}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_STATUS_CODE={0x6}, @NL80211_ATTR_TDLS_ACTION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x50}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000001140), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x90) ioctl$FS_IOC_GETFSLABEL(r2, 0x800452d3, &(0x7f0000000100)) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x121, 0x0, 0x0, {0x23}, [@IFA_LOCAL={0x6, 0x2, @remote}]}, 0x2c}}, 0x0) 32.701954291s ago: executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r2}, @IFLA_HSR_SLAVE2={0x8, 0x2, r4}]}}}]}, 0x40}}, 0x0) 32.456410924s ago: executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x4000000, 0x34000, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="021000000a0000000000000000000000080012"], 0x50}}, 0x0) 32.451617525s ago: executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000dc0)={{r1}, &(0x7f0000000d40), &(0x7f0000000240)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='tlb_flush\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000006b113a00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)=ANY=[@ANYBLOB="2400000055002bfa000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="0c000180"], 0x24}}, 0x0) r4 = socket(0x11, 0xa, 0x0) close(r4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) bind$bt_l2cap(r4, &(0x7f0000000300)={0x1f, 0x9, @any, 0x8000, 0x1}, 0xe) connect$bt_sco(r4, &(0x7f0000000340), 0x8) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) 32.390364977s ago: executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x10, &(0x7f00000000c0), 0x1e00}, 0x90) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000003c0)={r2, 0x1ff, 0x68, "4758b49caa9f638ddc0675a94fac313bd55d866bdbaae1bf92edafe27a6454cb3d613fbcc4ce468ecbd82c2802214eba2f2a48edc1d541f90ad1013cdb17dccc9a1b7a318b614fde220d73a0537dff7559e0f4a00b329f7e1da2a490f1ce5999590ae71ade62989b"}, 0x70) 32.385341678s ago: executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)={0x6}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800, r1}, 0x38) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000480), r0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x4, 0x4}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r3}, &(0x7f0000000700), &(0x7f0000000740)=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000200000000000000000818110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) 32.379191336s ago: executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000007bc0), 0xffffffffffffffff) r3 = socket(0x11, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000240), 0x4) r5 = socket$inet6(0xa, 0x6, 0x0) r6 = socket$inet6(0xa, 0x6, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) bind$inet6(r6, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x4}}, 0x1c) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r7, &(0x7f0000009240)={0x0, 0x0, &(0x7f0000009200)={&(0x7f0000009180)={0x24, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8}]}, 0x24}}, 0x0) 32.254040854s ago: executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x7fff}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='ext4_ext_handle_unwritten_extents\x00', r0}, 0x9) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x8, 0x2, 0x4}, 0x48) close(r1) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='cgroup.max.depth\x00', 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000400), 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@map=0x1, 0xe, 0x0, 0x3, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000000480), &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000640)={@cgroup, 0xffffffffffffffff, 0xd, 0x2c, 0x0, @link_fd=r6, r7}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x5, &(0x7f0000001500)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r5, @ANYBLOB='4G'], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r4, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7784713e", @ANYRES16=r8, @ANYBLOB="20002dbd7000fbdbdf253e000000080001007063690011000200303030303a30303a31302e30000000001c008200736f757263655f6d61635f69735f6d756c7469636173740005008300010000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c746963617374000500830001000000"], 0x98}, 0x1, 0x0, 0x0, 0x4082}, 0x1) write$cgroup_int(r3, &(0x7f0000000040)=0x100000000000000, 0x12) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='ext4_allocate_inode\x00', r9}, 0x10) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a00060000000000000500e50000070000001ffeff0001000003f1dc7f7c6e870200010000000000004000020000000005000500000000000a"], 0x80}}, 0x40) sendmmsg(r10, &(0x7f0000000180), 0x400008a, 0x0) poll(&(0x7f00000028c0), 0x1, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='ext4_ext_handle_unwritten_extents\x00', r11}, 0x9) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x40305839, &(0x7f0000000540)={'\x00', @link_local={0x1, 0x80, 0xc2, 0x5}}) 32.199984204s ago: executing program 1: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x1f, 0x6, 0x0) socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000180)=@req3={0x34a7, 0xfffffffe, 0x20000b, 0x8, 0x5, 0xffdfffff, 0x8b}, 0x1c) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000780), 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x56) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000400)='kfree\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x4c}}, 0x0) r9 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) connect$ax25(r9, &(0x7f0000000000)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, [@default, @default, @bcast, @bcast, @bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0xac1826eb182ac7fd, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0x7}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x200}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x2405c000) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 32.188182216s ago: executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f00000001c0)={0x28, 0x0, 0x0, @host}, 0x10) r1 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r1, &(0x7f0000000400)=""/4096, 0x1000, 0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xb, &(0x7f0000000300)=ANY=[@ANYRESOCT=r1], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88000}, 0x90) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000080)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x0, 0x5}, 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) 32.076860301s ago: executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x2, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x4}, {0x2}, {0x0, 0x5}, {0x3, 0x2}]}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0xfff, [{}]}]}}, &(0x7f0000000180)=""/220, 0x5e, 0xdc, 0x1}, 0x20) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x700, &(0x7f00000002c0)={&(0x7f0000000180)={0x60, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0xa, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast1}}}}]}]}, 0x60}}, 0x0) 32.051301073s ago: executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2700000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4) unshare(0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x60}, {0x6}]}, 0x10) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000000c0)={r0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x48) 32.02740312s ago: executing program 3: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) (async) r0 = socket(0x15, 0x5, 0x0) (async, rerun: 32) recvfrom$ax25(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x2, 0x80805, 0x0) (async, rerun: 32) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32) sendmsg$nl_xfrm(r1, 0x0, 0x0) (async) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000000)=""/134, &(0x7f00000000c0)=0x86) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async, rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}) 32.004083432s ago: executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'macvlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002b80)=ANY=[@ANYBLOB="3c0000001000010000746f031a00000000000000", @ANYRES32=r2, @ANYBLOB="00800000000000001c0012800c0001006d6163766c616e000c0002800800030000000000"], 0x3c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r1) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r1) r3 = socket$inet6(0xa, 0x40000080806, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) (async) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x8}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x46, &(0x7f00000004c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "f87b29", 0x10, 0x21, 0x0, @private1, @mcast2, {[], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, "08ec56", 0x0, "5d4219"}}}}}}}, 0x0) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000780), 0xb) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r7) (async) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r7) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000b40)={0x48, r8, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5}, {0x5}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0x48}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000068000100000000000000000000000000000000001c0002000000000000000000020000000000b45cbe"], 0x34}}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r11}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r11}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000002851000000600000018100000", @ANYRES32=r5, @ANYBLOB="00000000000000006608000000000000180000001000000000000000000000009500000000000000360a000000000000180000002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000002851000000600000018100000", @ANYRES32=r5, @ANYBLOB="00000000000000006608000000000000180000001000000000000000000000009500000000000000360a000000000000180000002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r12, 0x0) (async) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r12, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000607fb00000200000018", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bca900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x9, 0x1003, &(0x7f0000001e40)=""/4099}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000607fb00000200000018", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bca900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x9, 0x1003, &(0x7f0000001e40)=""/4099}, 0x90) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x2, 0x0, @mcast1, 0x1}, 0x1c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, 0x0, 0x0}, 0x20) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x1c) (async) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, 0x1c) 31.814969161s ago: executing program 3: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b05, &(0x7f0000000180)={'wlan0\x00'}) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000480)=[{0x0}, {&(0x7f0000004d00)=""/4097, 0x1001}, {0x0}, {0x0}], 0x4, &(0x7f0000000b80)=""/54, 0x36}, 0x4}], 0x3, 0x40010143, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001580)=ANY=[@ANYRES32=r0], &(0x7f0000000340)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x200000}, 0x10}, 0x90) 31.072341126s ago: executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001b80)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000140)=""/200, 0xc8}, {&(0x7f0000000040)=""/45, 0x2d}, {&(0x7f0000000300)=""/117, 0x75}, {&(0x7f0000000380)=""/123, 0x7b}, {&(0x7f0000000440)=""/241, 0xf1}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000000540)=""/186, 0xba}, {&(0x7f0000000600)=""/201, 0xc9}, {&(0x7f0000001740)=""/167, 0xa7}], 0x9, &(0x7f00000018c0)=""/118, 0x76}, 0xec}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001940)=""/96, 0x60}, {&(0x7f00000019c0)=""/69, 0x45}, {&(0x7f0000001a40)=""/109, 0x6d}], 0x3, &(0x7f0000001ac0)=""/149, 0x95}, 0x7}], 0x2, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f0000001e80)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001e40)={&(0x7f0000001c00)=@delqdisc={0x230, 0x25, 0x4, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x1, 0x7}, {0x51e977ffd727fdf7, 0xe}, {0x9, 0xa}}, [@q_dsmark={{0xb}, {0x40, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x36}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xe4f9}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x25}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x20}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0xc}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3ff}]}}, @q_dsmark={{0xb}, {0x30, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x82a}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x800}, @TCA_DSMARK_INDICES={0x6, 0x1, 0xc}]}}, @q_dsmark={{0xb}, {0x30, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}, @TCA_DSMARK_INDICES={0x6, 0x1, 0xc96ced3b804b67bd}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xffff}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x13}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x850}]}}, @q_dsmark={{0xb}, {0x18, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x63a}]}}, @q_dsmark={{0xb}, {0x3c, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x16}, @TCA_DSMARK_DEFAULT_INDEX={0xffffffffffffffa6, 0x2, 0x7}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xda}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1f0}]}}, @q_dsmark={{0xb}, {0x34, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x8}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x18}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x35}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x3}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x10, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x28}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x8, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x21f}, @TCA_DSMARK_INDICES={0x6, 0x1, 0xc}]}}, @q_dsmark={{0xb}, {0x40, 0x2, [@TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x8}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x54}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x14}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x21}]}}]}, 0x230}}, 0x0) 30.149459188s ago: executing program 0: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) write(r0, &(0x7f0000000000)="24000c001a00ffffffff00000000040180000000000000000000000008000f0040000000", 0x24) 30.094078252s ago: executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x10, &(0x7f00000000c0), 0x1e00}, 0x90) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000003c0)={r2, 0x1ff, 0x68, "4758b49caa9f638ddc0675a94fac313bd55d866bdbaae1bf92edafe27a6454cb3d613fbcc4ce468ecbd82c2802214eba2f2a48edc1d541f90ad1013cdb17dccc9a1b7a318b614fde220d73a0537dff7559e0f4a00b329f7e1da2a490f1ce5999590ae71ade62989b"}, 0x70) 30.027174059s ago: executing program 0: ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r2, 0x9, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x4}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x6b1c}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x3ff}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x1}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x20}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x3}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x40}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x80) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000001c0)=[{{0x4, 0x1, 0x1}, {0x2, 0x0, 0x0, 0x1}}, {{0x3, 0x0, 0x1, 0x1}, {0x2, 0x0, 0x1, 0x1}}, {{0x2, 0x0, 0x1, 0x1}, {0x4, 0x0, 0x1, 0x1}}, {{0x2, 0x0, 0x1, 0x1}, {0x2, 0x0, 0x1, 0x1}}, {{0x3, 0x0, 0x1, 0x1}, {0x3, 0x1, 0x1, 0x1}}, {{0x2, 0x1, 0x0, 0x1}, {0x4, 0x0, 0x0, 0x1}}, {{0x4, 0x1, 0x0, 0x1}, {0x1, 0x1, 0x1, 0x1}}], 0x38) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x854c82f88bb0dc68}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r4, 0x4, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}]}, 0x1c}}, 0x1080) r5 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r5, &(0x7f0000001480)={&(0x7f0000000340)=@nameseq={0x1e, 0x1, 0xba2693d008522b05, {0x42, 0x4}}, 0x10, &(0x7f0000001400)=[{&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000001380)="a722e74459eb", 0x6}, {&(0x7f00000013c0)="a2fd1f55aea749662ae2129c7679", 0xe}], 0x3, &(0x7f0000001440)="7b606d25f20e75caca8e8c7d63e2cd2f77d27d020a2b", 0x16, 0x20040000}, 0x8004801) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000001580)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x40094}, 0x48011) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001600)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r7, &(0x7f0000001780)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001740)={&(0x7f0000001640)={0xcc, r4, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x92, 0x6}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x24, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x13, 0xa, "a6b284808f78298f36e0a07f1c0faa"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x20, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY={0x44, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8}, @NL80211_KEY_SEQ={0x14, 0x4, "926eb0afd5eef3ba93a63675b28051a0"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "2f36ee78dc"}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(r1, &(0x7f0000001880)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x1c, r4, 0x1022, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x94}, 0x2000815) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f00000018c0)={0x0, 'pimreg0\x00', {0x1}, 0x7a1}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000019c0)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)=@gettclass={0x24, 0x2a, 0x800, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r0, {0x0, 0xfff1}, {0x15, 0xb}, {0xd, 0x4}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x400c5}, 0x48000) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001a00)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r11 = openat$cgroup_ro(r10, &(0x7f0000001a40)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@bloom_filter={0x1e, 0x3f, 0x7, 0x3a, 0xc0, r11, 0xaf, '\x00', r0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x9}, 0x48) r13 = accept4$inet(r11, 0x0, &(0x7f0000001b00), 0x800) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000001c00)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b80)={0x28, r4, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x800}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x80) splice(r1, &(0x7f0000001c40)=0x6, 0xffffffffffffffff, &(0x7f0000001c80)=0x8000, 0x81, 0x2) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r11, 0x10e, 0x1, &(0x7f0000001cc0)=0x1d, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r11, 0x84, 0x64, &(0x7f0000001d00)=[@in6={0xa, 0x4e23, 0xca0, @local, 0x2}, @in={0x2, 0x4e21, @remote}, @in6={0xa, 0x4e23, 0x7fffffff, @local, 0x1}, @in6={0xa, 0x4e23, 0x80, @dev={0xfe, 0x80, '\x00', 0x15}, 0x200}, @in6={0xa, 0x4e21, 0x3ff, @remote, 0x689}, @in6={0xa, 0x4e20, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}], 0x9c) r14 = socket$can_j1939(0x1d, 0x2, 0x7) r15 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) poll(&(0x7f0000001e00)=[{r13, 0x5}, {r15, 0x74}, {0xffffffffffffffff, 0x2990}, {r14, 0x252}, {r10, 0x4270}, {r5, 0x8}, {0xffffffffffffffff, 0x4000}, {r12, 0xa}, {r1, 0x400}, {r1}], 0xa, 0x8001) 2.152138987s ago: executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xf, &(0x7f0000000000), &(0x7f0000000080)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000500)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8f}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x28, 0x0, &(0x7f0000000040)="b9ff03076003008cb89e08f086dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x0, 0x11, r3, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) unshare(0x60480) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r5, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x20, 0x1, 0x8, 0x201, 0x0, 0x0, {0xe, 0x0, 0x5}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x800) setsockopt$RDS_FREE_MR(r4, 0x114, 0x3, &(0x7f00000007c0), 0x10) sendto$inet6(r0, &(0x7f0000000240)="c22fe09a9da820f483a099ff40f18ca2e4f7db4b3e18b7bf47ea418f32ea4a70e442053ba6d0664b973f7eb1c3f85069863214a04c31bc426a17ea989157cbf439ad5ffbc87c4656cdaf4f49de3b3659b1f13c957162bbed351e0820b3339b10c48871313c91a76bd1d0a1a7ea0f7e287c60f360c48dc680101338e50fe224c0c10d322e90590ce4be9c7f318d847200634fb69db0ff50dd627a55ae6cf6e274b60389d676eaad04b4c988bc4903b104357cb6c71f3e825e1bfc499e1230e3c260529cf17743621dc41204b10b101b71a2a8c6a6d8cb64df77e22f18c843ba9d48", 0xe1, 0x8814, &(0x7f0000000180)={0xa, 0x4e24, 0x3e84, @local, 0x3}, 0x1c) 2.021521657s ago: executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000480)={0x3, &(0x7f0000000080)=[{}, {0x5}, {0x6}]}, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000001500010000000000000000000500000004"], 0x1c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x6c, 0x30, 0x1, 0x2000000, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_MPLS_PROTO={0x6}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) listen(r2, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r5, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)="e0", 0x1}], 0x1}, 0x0) r6 = accept4(r2, 0x0, 0x0, 0x0) close(r6) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="04002cbd7000fbdbdf2511000000050038000000000005002e0000000000c069aeef2315948f4e1cfd4651cab40bd12e7994da31123839142511352f864257618066aa41dcaadbd18cb437d705c21e415274beaaeebaf770ebb1266770a44188ed913bb051d1d71416702a975e1a0a99ed76d62ab016"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000008f40)={0x0, 0x0, &(0x7f0000008f00)={&(0x7f0000000040)=@newtaction={0x48, 0x30, 0x0, 0x0, 0x0, {}, [{0x34, 0x1, [@m_skbedit={0x30, 0x0, 0x0, 0x0, {{0xc}, {0x1}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) sendmsg$NFT_MSG_GETSET(r7, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000780)={0x120, 0xa, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_SET_EXPRESSIONS={0x94, 0x12, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", "", "", "", "", "", ""]}}}, {0x18, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", "", "", "", "", "", "", "", ""]}}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}]}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_EXPR={0x38, 0x11, 0x0, 0x1, @nat={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_ADDR_MAX={0x8}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x7dbdd2434f7c11f9}]}}}, @NFTA_SET_DESC={0x1c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_DESC_SIZE={0x8}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x60}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x120}, 0x1, 0x0, 0x0, 0x8004010}, 0x4001) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0x15}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}]}}}, @IFLA_MTU={0x8}]}, 0x44}, 0x9}, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xc, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {0x7, 0x0, 0x2}, {}, {}, {0x25}}], {{0x6, 0x1, 0xb, 0x1, 0x9, 0x3}, {0x5}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c00000011000500000000000000200007d02646", @ANYRES32=r12, @ANYBLOB="00000000000000000c001a800800058004"], 0x2c}}, 0x0) 1.984780753s ago: executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x600, &(0x7f00000006c0)={&(0x7f0000002b80)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8}]}}}]}, 0x3c}}, 0x0) 1.773873006s ago: executing program 3: r0 = socket$packet(0x11, 0x4000000000002, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xf}]}, @NFT_MSG_NEWSETELEM={0x82, 0xc, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x48, 0x3, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x38, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xf8}}, 0x0) 0s ago: executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000001e80)=0x6, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x0) mmap(&(0x7f000050c000/0x2000)=nil, 0x2000, 0x0, 0x13, r2, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r3, 0x10c, 0x7, &(0x7f0000000040), &(0x7f0000000180)=0x4) mmap(&(0x7f0000b15000/0x3000)=nil, 0x3000, 0x9, 0x11, r3, 0x4000) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'veth1_to_hsr\x00'}) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x28011, r2, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) mmap(&(0x7f0000b16000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r5, 0x0) setsockopt$MRT6_DONE(r5, 0x29, 0xc9, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'wg0\x00'}) sendto$packet(r1, &(0x7f0000000180)="0b03feffe2ff020002004788aa96a13bb1000011000088ca1a00", 0x1a, 0x0, &(0x7f0000000080), 0x14) kernel console output (not intermixed with test programs): ink change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 163.625328][ T8395] __nla_validate_parse: 15 callbacks suppressed [ 163.625353][ T8395] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 163.681417][ T8398] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 163.922284][ T8416] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 164.118690][ T8427] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 164.367248][ T8439] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 164.431675][ T8449] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 164.737332][ T8445] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 164.889948][ T8460] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 165.134910][ T8481] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 165.458370][ T8491] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 165.582740][ T8505] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 166.027173][ T8529] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 166.553320][ T8555] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 166.733929][ T8555] team0: Device veth1_vlan failed to register rx_handler [ 168.926247][ T8704] __nla_validate_parse: 14 callbacks suppressed [ 168.926273][ T8704] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 169.294812][ T8727] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 169.379853][ T8732] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 169.694626][ T8753] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 169.745494][ T8754] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 170.294440][ T8787] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 170.444275][ T8795] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 170.603584][ T8805] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 170.817424][ T8822] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 171.256307][ T8845] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 172.621837][ T8925] openvswitch: netlink: nsh attr 1 has unexpected len 0 expected 8 [ 173.773210][ T8987] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 174.084386][ T9001] __nla_validate_parse: 13 callbacks suppressed [ 174.084410][ T9001] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 174.168692][ T9007] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 174.256819][ T9012] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 174.625673][ T9035] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 175.215309][ T9048] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 175.316024][ T9053] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 175.366382][ T9049] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 175.468986][ T9060] netlink: 165 bytes leftover after parsing attributes in process `syz-executor.3'. [ 175.520770][ T9062] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 175.707221][ T9077] netlink: 'syz-executor.4': attribute type 6 has an invalid length. [ 175.851998][ T9085] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 176.023062][ T29] audit: type=1804 audit(1716946246.916:21): pid=9092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1493514638/syzkaller.YVohLR/262/cgroup.controllers" dev="sda1" ino=1962 res=1 errno=0 [ 176.077843][ T9094] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 177.450590][ T9123] lo speed is unknown, defaulting to 1000 [ 178.177732][ T5121] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 178.187722][ T5121] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 178.203675][ T5121] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 178.221646][ T5121] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 178.230987][ T5121] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 178.242135][ T5121] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 178.937013][ T9166] lo speed is unknown, defaulting to 1000 [ 179.155510][ T9209] __nla_validate_parse: 11 callbacks suppressed [ 179.155534][ T9209] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 179.330952][ T9213] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 179.966393][ T9228] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 180.147565][ T9166] chnl_net:caif_netlink_parms(): no params data found [ 180.282337][ T53] Bluetooth: hci4: command tx timeout [ 180.366731][ T9240] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 180.482725][ T9246] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 180.548695][ T9231] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 180.682614][ T9258] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 180.702581][ T9256] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 180.819283][ T9261] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 180.853682][ T9166] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.889309][ T9166] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.912242][ T9166] bridge_slave_0: entered allmulticast mode [ 180.921913][ T9166] bridge_slave_0: entered promiscuous mode [ 180.966521][ T9166] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.986868][ T9166] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.995476][ T9166] bridge_slave_1: entered allmulticast mode [ 181.004862][ T9166] bridge_slave_1: entered promiscuous mode [ 181.045571][ T9271] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 181.106398][ T9166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.149490][ T9166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.329957][ T9166] team0: Port device team_slave_0 added [ 181.369712][ T9166] team0: Port device team_slave_1 added [ 181.507952][ T9166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.516380][ T9166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.542982][ T9166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.559963][ T9166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.580793][ T9166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.652306][ T9166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.938278][ T9166] hsr_slave_0: entered promiscuous mode [ 181.946103][ T9166] hsr_slave_1: entered promiscuous mode [ 181.963604][ T9166] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 181.972081][ T9166] Cannot create hsr debugfs directory [ 181.980082][ T9306] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 182.063078][ T9309] openvswitch: netlink: IP tunnel attribute has 3060 unknown bytes. [ 182.227613][ T9316] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 182.361741][ T53] Bluetooth: hci4: command tx timeout [ 182.799300][ T9166] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.031829][ T9166] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.220394][ T9166] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.411139][ T9166] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.922813][ T9166] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 183.957696][ T9166] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 184.003947][ T9166] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 184.054608][ T9166] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 184.442182][ T53] Bluetooth: hci4: command tx timeout [ 184.444153][ T9166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.536882][ T9416] __nla_validate_parse: 20 callbacks suppressed [ 184.536902][ T9416] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 184.617876][ T9166] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.658453][ T9418] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 184.742836][ T9421] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 184.765767][ T5172] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.773021][ T5172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.807557][ T5172] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.814914][ T5172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.024167][ T9426] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 185.249074][ T9166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.270976][ T9437] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 185.474399][ T9439] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 185.505445][ T9166] veth0_vlan: entered promiscuous mode [ 185.575685][ T9166] veth1_vlan: entered promiscuous mode [ 185.721872][ T9166] veth0_macvtap: entered promiscuous mode [ 185.752663][ T9166] veth1_macvtap: entered promiscuous mode [ 185.772052][ T9456] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 185.810247][ T9457] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 185.862129][ T9459] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 185.909368][ T9166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.920451][ T9166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.936667][ T9166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.958007][ T9166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.969842][ T9166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.973031][ T9469] x_tables: unsorted underflow at hook 3 [ 185.980587][ T9166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.998080][ T9166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.010939][ T9166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.027386][ T9166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.104381][ T9166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.124549][ T9166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.141180][ T9166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.164936][ T9166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.190863][ T9166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.202635][ T9166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.212742][ T9166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.223910][ T9166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.234039][ T9166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.244890][ T9166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.245385][ T9479] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 186.275141][ T9166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.372695][ T9166] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.409591][ T9166] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.418977][ T9166] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.448327][ T9166] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.521761][ T53] Bluetooth: hci4: command tx timeout [ 186.902586][ T2428] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.930890][ T2428] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.038053][ T25] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.059688][ T25] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.363400][ T9547] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 188.770328][ T9568] syzkaller0: entered promiscuous mode [ 188.786335][ T9568] syzkaller0: entered allmulticast mode [ 191.440600][ T9582] __nla_validate_parse: 14 callbacks suppressed [ 191.440621][ T9582] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 191.581422][ T9595] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 191.809215][ T9609] syz_tun: entered promiscuous mode [ 191.832398][ T9609] team0: Port device macvlan2 added [ 191.895629][ T9613] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 192.573503][ T9638] IPVS: length: 4096 != 8 [ 192.595884][ T9624] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 192.794433][ T9645] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 192.815947][ T9648] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 192.924165][ T9649] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 193.170757][ T9667] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 193.218867][ T9668] bond_slave_0: entered promiscuous mode [ 193.225029][ T9668] bond_slave_1: entered promiscuous mode [ 194.545647][ T9665] bond_slave_0: left promiscuous mode [ 194.551558][ T9665] bond_slave_1: left promiscuous mode [ 194.655281][ T9705] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 194.691800][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.698275][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.721870][ T9715] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 194.873372][ T9720] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.2'. [ 194.934105][ T9724] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.3'. [ 195.294994][ T9741] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 196.874365][ T5121] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 196.885068][ T5121] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 196.894433][ T5121] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 196.914806][ T5121] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 196.923100][ T5121] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 196.930756][ T5121] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 197.444923][ T9824] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.452306][ T9824] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.513932][ T9826] __nla_validate_parse: 5 callbacks suppressed [ 197.513954][ T9826] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 197.530267][ T9827] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 197.589270][ T9824] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 197.610269][ T9827] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 197.632917][ T9827] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 197.909335][ T9846] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 197.978404][ T9845] bridge0: entered promiscuous mode [ 197.998459][ T9849] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 198.024138][ T9845] macsec1: entered promiscuous mode [ 198.034394][ T9849] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 198.045824][ T9845] bridge0: left promiscuous mode [ 198.050420][ T9849] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 198.060595][ T9849] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 198.111602][ T9806] lo speed is unknown, defaulting to 1000 [ 198.122211][ T9853] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 198.325556][ T9864] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 198.385761][ T9862] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 198.493841][ T9870] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 198.623286][ T9873] TCP: TCP_TX_DELAY enabled [ 199.001423][ T53] Bluetooth: hci0: command tx timeout [ 199.079964][ T9806] chnl_net:caif_netlink_parms(): no params data found [ 199.359894][ T9806] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.408818][ T9806] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.424496][ T9886] tipc: Failed to remove unknown binding: 66,1,1/0:3294275627/3294275629 [ 199.442771][ T9806] bridge_slave_0: entered allmulticast mode [ 199.450525][ T9806] bridge_slave_0: entered promiscuous mode [ 199.461344][ T9806] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.468648][ T9806] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.476037][ T9806] bridge_slave_1: entered allmulticast mode [ 199.480948][ T9886] tipc: Failed to remove unknown binding: 66,1,1/0:3294275627/3294275629 [ 199.484141][ T9806] bridge_slave_1: entered promiscuous mode [ 199.677874][ T9806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.755641][ T9806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.874662][ T9914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:aa) already exists on: batadv_slave_0 [ 199.899139][ T9914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.936115][ T9914] syz_tun: entered promiscuous mode [ 199.985377][ T9914] ip6gretap0: entered promiscuous mode [ 200.184490][ T9806] team0: Port device team_slave_0 added [ 200.250276][ T9806] team0: Port device team_slave_1 added [ 200.670959][ T9806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.678092][ T9806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.724092][ T9806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.768822][ T9806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.782925][ T9806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.836735][ T9806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.877142][ T9947] vlan1: entered promiscuous mode [ 200.982665][ T9954] vlan1 (unregistering): left promiscuous mode [ 201.083471][ T5132] Bluetooth: hci0: command tx timeout [ 201.185773][ T9958] sock: sock_timestamping_bind_phc: sock not bind to device [ 201.222095][ T9806] hsr_slave_0: entered promiscuous mode [ 201.237116][ T9806] hsr_slave_1: entered promiscuous mode [ 201.259588][ T9806] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 201.283470][ T9806] Cannot create hsr debugfs directory [ 201.463579][ T9971] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 201.869395][ T9990] dccp_invalid_packet: P.Data Offset(0) too small [ 201.881349][ T4491] Bluetooth: hci1: command 0x0406 tx timeout [ 201.887468][ T5132] Bluetooth: hci2: command 0x0406 tx timeout [ 201.894267][ T5127] Bluetooth: hci3: command 0x0406 tx timeout [ 202.045976][ T9806] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.155220][ T9806] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.315588][ T9806] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.340415][T10007] vlan1: entered promiscuous mode [ 202.719100][T10019] __nla_validate_parse: 8 callbacks suppressed [ 202.719123][T10019] netlink: 165 bytes leftover after parsing attributes in process `syz-executor.0'. [ 202.770395][T10007] vlan1 (unregistering): left promiscuous mode [ 202.823345][ T9806] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.856128][T10023] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 203.161802][ T53] Bluetooth: hci0: command tx timeout [ 203.215858][ T9806] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 203.234029][ T9806] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 203.277671][ T9806] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 203.301508][ T9806] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 203.491902][T10043] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 203.750556][ T9806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.830061][T10062] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 203.907690][ T9806] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.981932][ T1626] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.989156][ T1626] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.048748][ T1626] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.056043][ T1626] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.066220][T10067] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. [ 204.077256][T10067] netlink: 'syz-executor.4': attribute type 9 has an invalid length. [ 204.093164][T10067] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 204.102651][T10067] netlink: 'syz-executor.4': attribute type 8 has an invalid length. [ 204.264865][ T9806] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 204.299169][ T9806] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 204.819103][ T9806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.960509][T10092] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 204.974535][ T9806] veth0_vlan: entered promiscuous mode [ 205.017661][ T9806] veth1_vlan: entered promiscuous mode [ 205.115714][ T9806] veth0_macvtap: entered promiscuous mode [ 205.156155][ T9806] veth1_macvtap: entered promiscuous mode [ 205.241674][ T53] Bluetooth: hci0: command tx timeout [ 205.262875][ T9806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.313904][ T9806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.360823][ T9806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.411850][ T9806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.455586][ T9806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.478520][ T9806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.489395][ T9806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.500372][ T9806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.515603][ T9806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.526306][ T9806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.577467][ T9806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.604315][T10108] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 205.623071][ T9806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.690586][ T9806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.708731][T10118] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. [ 205.720039][T10118] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 205.720317][ T9806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.729787][T10118] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 205.751385][ T9806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.769606][ T9806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.780464][ T9806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.783337][T10118] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 205.798458][ T9806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.822383][ T9806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.840548][ T9806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.852484][ T9806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.872092][ T9806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.895729][ T9806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.918495][ T9806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.936865][T10115] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 205.988641][T10121] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 206.136306][ T9806] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.184747][ T9806] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.219903][ T9806] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.239069][ T9806] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.414840][T10132] vlan1: entered promiscuous mode [ 206.643088][T10132] vlan1 (unregistering): left promiscuous mode [ 207.404474][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.438745][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.478878][T10164] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 207.500533][T10163] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 207.558238][T10163] netlink: 'syz-executor.3': attribute type 7 has an invalid length. [ 207.595902][T10163] netlink: 'syz-executor.3': attribute type 8 has an invalid length. [ 207.680564][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.702467][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.750373][T10170] rose0: entered promiscuous mode [ 207.823293][T10179] __nla_validate_parse: 4 callbacks suppressed [ 207.823316][T10179] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 207.952189][T10186] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 208.176200][T10203] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 208.881772][T10219] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 208.983922][T10224] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 209.072906][T10227] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.0'. [ 209.088916][T10227] netlink: 'syz-executor.0': attribute type 9 has an invalid length. [ 209.129063][T10227] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 209.155822][T10227] netlink: 'syz-executor.0': attribute type 8 has an invalid length. [ 209.410339][T10240] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 209.818493][T10263] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 210.728909][T10292] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 210.961571][T10300] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 211.008115][T10305] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 212.409410][T10348] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 213.142633][T10385] __nla_validate_parse: 6 callbacks suppressed [ 213.142657][T10385] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 213.758569][T10394] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.0'. [ 213.785938][T10394] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 213.998011][T10411] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 214.081984][T10406] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 214.108606][T10410] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 214.301795][T10418] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 214.631977][T10426] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 214.774261][T10426] bond1: entered promiscuous mode [ 214.790245][T10432] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 214.940637][T10443] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 215.073246][T10450] IPVS: Unknown mcast interface: netdevsim0 [ 215.442897][T10468] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 215.674287][T10472] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 215.719191][T10475] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 216.214248][T10494] Bluetooth: MGMT ver 1.22 [ 217.543219][T10554] nbd: must specify at least one socket [ 217.552779][T10549] nbd: must specify at least one socket [ 218.282138][ T53] Bluetooth: hci0: command tx timeout [ 218.456733][T10595] __nla_validate_parse: 14 callbacks suppressed [ 218.456757][T10595] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 218.490957][T10601] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 218.729524][T10610] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 219.110027][T10618] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 219.795096][T10650] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 220.018102][T10659] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 220.080275][T10661] macvtap0: entered promiscuous mode [ 220.099896][T10661] macvtap0: entered allmulticast mode [ 220.131581][T10661] veth0_macvtap: entered allmulticast mode [ 220.153747][T10663] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 220.182306][T10665] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 221.281669][T10703] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 221.627973][T10711] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 221.788454][T10715] 8021q: adding VLAN 0 to HW filter on device bond1 [ 221.856404][T10715] bond0: (slave bond1): Enslaving as an active interface with an up link [ 221.911416][T10716] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 221.946946][T10722] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 221.998722][T10720] 8021q: adding VLAN 0 to HW filter on device bond1 [ 222.010305][T10720] bond1: (slave xfrm1): The slave device specified does not support setting the MAC address [ 222.029397][T10720] bond1: (slave xfrm1): Error -95 calling set_mac_address [ 223.660781][T10803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:aa) already exists on: batadv_slave_0 [ 223.663813][T10805] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 223.711219][T10803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.737921][T10793] __nla_validate_parse: 6 callbacks suppressed [ 223.737941][T10793] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 223.942730][T10814] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 224.106461][T10826] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 224.170921][T10833] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 224.306344][T10838] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 224.868574][T10839] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 225.030329][T10852] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 225.942548][T10876] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 226.087328][T10895] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 226.179620][T10899] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 226.239308][T10904] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 226.271470][T10903] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 226.334404][T10904] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 227.480798][T10940] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 227.903392][T10961] netlink: 'syz-executor.2': attribute type 58 has an invalid length. [ 228.324166][T10989] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 228.356029][T10989] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 228.389233][T10988] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 228.421964][T10987] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 228.647311][T10991] syzkaller0: entered promiscuous mode [ 228.694673][T10998] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 228.703188][T10991] syzkaller0: entered allmulticast mode [ 230.859370][T11001] __nla_validate_parse: 8 callbacks suppressed [ 230.859392][T11001] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 230.890046][T11004] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 231.115638][T11013] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 231.116319][T11013] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 231.192670][T11013] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 231.222669][T11013] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6) [ 231.342355][T11030] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 231.358930][T11033] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 231.631108][T11030] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 231.692315][T11030] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 231.727238][T11043] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.1'. [ 231.885277][T11052] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 232.703747][T11058] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 232.783773][T11069] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 232.922347][T11085] netlink: 'syz-executor.0': attribute type 9 has an invalid length. [ 232.952570][T11085] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.0'. [ 233.009541][T11071] syzkaller0: entered promiscuous mode [ 233.016668][T11071] syzkaller0: entered allmulticast mode [ 235.176842][T11093] syzkaller1: entered promiscuous mode [ 235.183749][T11093] syzkaller1: entered allmulticast mode [ 235.743045][T11132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 235.868889][T11137] __nla_validate_parse: 6 callbacks suppressed [ 235.868906][T11137] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 236.067797][T11146] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 236.512688][T11157] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.4'. [ 236.631512][T11159] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 237.201748][T11175] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 237.294325][T11180] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 237.506335][T11195] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 237.965502][T11210] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 238.069591][T11215] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.4'. [ 238.069973][T11216] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 239.812966][T11270] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 240.746351][T11315] bond0: entered allmulticast mode [ 240.772047][T11315] bond_slave_0: entered allmulticast mode [ 240.778183][T11315] bond_slave_1: entered allmulticast mode [ 240.997692][T11326] __nla_validate_parse: 12 callbacks suppressed [ 240.997718][T11326] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 241.281799][T11339] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.3'. [ 241.301971][T11340] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 241.819623][T11359] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 0, id = 0 [ 242.185220][T11373] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 242.232357][T11376] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 242.369996][T11380] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 242.574754][T11395] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 242.755922][T11400] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 242.808647][T11398] netlink: 'syz-executor.0': attribute type 25 has an invalid length. [ 242.832678][T11398] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.0'. [ 243.174409][T11413] netlink: zone id is out of range [ 243.206829][T11413] netlink: zone id is out of range [ 243.239296][T11413] netlink: zone id is out of range [ 243.253567][T11413] netlink: zone id is out of range [ 243.279980][T11413] netlink: zone id is out of range [ 243.294580][T11413] netlink: zone id is out of range [ 243.314602][T11413] netlink: zone id is out of range [ 243.343363][T11413] netlink: zone id is out of range [ 243.355460][T11413] netlink: zone id is out of range [ 243.364034][T11423] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 244.131792][T11443] netlink: 'syz-executor.3': attribute type 25 has an invalid length. [ 244.222673][T11436] bond0: entered allmulticast mode [ 244.260249][T11436] bond_slave_0: entered allmulticast mode [ 244.289942][T11436] bond_slave_1: entered allmulticast mode [ 244.326421][T11450] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 244.563949][T11408] lo speed is unknown, defaulting to 1000 [ 246.063347][T11500] __nla_validate_parse: 8 callbacks suppressed [ 246.063369][T11500] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 246.180448][T11504] bond0: entered allmulticast mode [ 246.191580][T11504] bond_slave_0: entered allmulticast mode [ 246.199454][T11504] bond_slave_1: entered allmulticast mode [ 246.214712][T11504] bond1: entered allmulticast mode [ 246.334862][T11516] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 246.678334][T11534] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 247.482203][T11546] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 247.608934][T11554] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 247.967482][T11568] macvlan0: entered promiscuous mode [ 247.991991][T11568] ipvlan0: entered promiscuous mode [ 248.017503][T11568] ipvlan0: left promiscuous mode [ 248.035324][T11568] macvlan0: left promiscuous mode [ 248.180434][T11575] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 248.526629][T11594] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 248.849377][T11601] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 248.967367][T11607] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 249.517152][T11621] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.4'. [ 251.077515][T11688] __nla_validate_parse: 5 callbacks suppressed [ 251.077537][T11688] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 251.126574][T11691] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 251.268132][T11688] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 251.303997][T11698] IPVS: stopping master sync thread 11359 ... [ 251.356647][T11699] pim6reg: entered allmulticast mode [ 251.418353][T11701] pim6reg: left allmulticast mode [ 251.658434][T11720] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 252.527955][T11740] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 253.078050][T11776] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 253.233517][T11788] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 253.639412][T11801] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 253.988750][T11822] netlink: 'syz-executor.2': attribute type 64 has an invalid length. [ 253.998737][T11822] net_ratelimit: 7 callbacks suppressed [ 253.998756][T11822] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 254.054487][T11823] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 254.107798][T11825] netlink: 'syz-executor.0': attribute type 13 has an invalid length. [ 254.118741][T11825] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 254.135367][T11825] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6) [ 254.375300][T11840] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 254.549746][T11850] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 254.854825][T11869] gretap0: entered promiscuous mode [ 254.980470][T11869] gretap0: left promiscuous mode [ 255.198029][T11874] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 255.211389][T11874] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6) [ 255.345855][ T29] audit: type=1800 audit(1716946326.246:22): pid=11895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1943 res=0 errno=0 [ 255.427030][ T29] audit: type=1804 audit(1716946326.276:23): pid=11895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir797333260/syzkaller.ZHmL2d/88/memory.events" dev="sda1" ino=1943 res=1 errno=0 [ 255.639130][T11914] vxcan1: tx drop: invalid sa for name 0xfffffffffffffffd [ 255.642442][T11895] syzkaller0: entered promiscuous mode [ 255.681687][T11895] syzkaller0: entered allmulticast mode [ 255.834380][ T29] audit: type=1804 audit(1716946326.726:24): pid=11895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir797333260/syzkaller.ZHmL2d/88/memory.events" dev="sda1" ino=1943 res=1 errno=0 [ 256.071788][T11931] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 256.112913][T11931] __nla_validate_parse: 4 callbacks suppressed [ 256.112940][T11931] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 256.142913][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.151885][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.181527][T11931] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6) [ 256.322945][T11942] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.4'. [ 258.211246][T11950] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 258.236784][T11952] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 258.271879][T11962] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 258.366504][T11964] netlink: 'syz-executor.3': attribute type 7 has an invalid length. [ 258.509312][T11974] netlink: 'syz-executor.1': attribute type 58 has an invalid length. [ 258.614803][T11976] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 258.797809][T11981] netlink: 'syz-executor.0': attribute type 13 has an invalid length. [ 258.810803][T11981] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 258.827209][T11981] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6) [ 258.843703][T11992] Bluetooth: hci3: unsupported parameter 64512 [ 258.863440][T11992] Bluetooth: hci3: invalid length 0, exp 2 for type 5 [ 258.982566][T11999] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 259.100125][ T29] audit: type=1800 audit(1716946329.976:25): pid=12007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1938 res=0 errno=0 [ 259.138635][T12012] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 259.164708][ T29] audit: type=1804 audit(1716946329.996:26): pid=12007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir797333260/syzkaller.ZHmL2d/91/memory.events" dev="sda1" ino=1938 res=1 errno=0 [ 259.391596][T12007] syzkaller0: entered promiscuous mode [ 259.397309][T12007] syzkaller0: entered allmulticast mode [ 259.537313][ T29] audit: type=1804 audit(1716946330.436:27): pid=12007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir797333260/syzkaller.ZHmL2d/91/memory.events" dev="sda1" ino=1938 res=1 errno=0 [ 259.783053][T12039] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 261.804331][T12041] netlink: 'syz-executor.3': attribute type 13 has an invalid length. [ 261.814416][T12041] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 261.825362][T12041] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6) [ 262.028672][T12071] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 262.148113][T12071] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.156777][T12071] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.165108][T12071] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.174331][T12071] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 262.226261][T12071] vxlan0: entered promiscuous mode [ 262.263257][T12072] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 262.288392][T12078] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 262.549729][T12096] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 262.630401][T12101] netlink: 'syz-executor.0': attribute type 13 has an invalid length. [ 262.642258][T12101] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 262.655617][T12101] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6) [ 262.692332][ T29] audit: type=1800 audit(1716946333.596:28): pid=12103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1952 res=0 errno=0 [ 262.739656][ T29] audit: type=1804 audit(1716946333.626:29): pid=12103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir4050704956/syzkaller.d8Z2hK/131/memory.events" dev="sda1" ino=1952 res=1 errno=0 [ 262.879050][T12110] netlink: 6204 bytes leftover after parsing attributes in process `syz-executor.1'. [ 262.913413][T12110] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 262.941117][T12110] netlink: 6204 bytes leftover after parsing attributes in process `syz-executor.1'. [ 263.030697][T12103] syzkaller0: entered promiscuous mode [ 263.065896][T12103] syzkaller0: entered allmulticast mode [ 263.276511][ T29] audit: type=1804 audit(1716946334.176:30): pid=12103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir4050704956/syzkaller.d8Z2hK/131/memory.events" dev="sda1" ino=1952 res=1 errno=0 [ 263.462830][T12125] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 263.487155][T12123] batadv_slave_0: entered promiscuous mode [ 265.493779][T12122] batadv_slave_0: left promiscuous mode [ 265.500180][T12150] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 265.509148][T12150] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6) [ 265.702728][ T29] audit: type=1804 audit(1716946336.596:31): pid=12155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1493514638/syzkaller.YVohLR/438/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 266.411821][T12194] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 266.460741][T12194] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6) [ 266.590263][ T29] audit: type=1800 audit(1716946337.486:32): pid=12200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1955 res=0 errno=0 [ 266.639197][ T29] audit: type=1804 audit(1716946337.486:33): pid=12200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1469490629/syzkaller.zBDxPN/466/memory.events" dev="sda1" ino=1955 res=1 errno=0 [ 266.842880][T12200] syzkaller0: entered promiscuous mode [ 266.853950][T12200] syzkaller0: entered allmulticast mode [ 266.868073][T12209] ÿÿÿÿÿÿ: renamed from pim6reg1 [ 267.067269][ T29] audit: type=1804 audit(1716946337.956:34): pid=12216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3934788111/syzkaller.4NiRH2/438/cgroup.controllers" dev="sda1" ino=1942 res=1 errno=0 [ 267.178798][ T29] audit: type=1804 audit(1716946338.006:35): pid=12206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1469490629/syzkaller.zBDxPN/466/memory.events" dev="sda1" ino=1955 res=1 errno=0 [ 267.247918][ T29] audit: type=1804 audit(1716946338.036:36): pid=12216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir3934788111/syzkaller.4NiRH2/438/cgroup.controllers" dev="sda1" ino=1942 res=1 errno=0 [ 269.374727][T12249] netlink: 'syz-executor.2': attribute type 13 has an invalid length. [ 269.383570][T12249] __nla_validate_parse: 7 callbacks suppressed [ 269.383589][T12249] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 269.400933][T12249] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6) [ 269.411709][T12254] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 269.661385][T12264] ÿÿÿÿÿÿ: renamed from pim6reg1 [ 269.685204][T12262] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 270.244987][T12287] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 270.256199][ T29] audit: type=1800 audit(1716946341.166:37): pid=12292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=1949 res=0 errno=0 [ 270.261698][T12287] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 270.307099][ T29] audit: type=1804 audit(1716946341.186:38): pid=12292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir1493514638/syzkaller.YVohLR/444/memory.events" dev="sda1" ino=1949 res=1 errno=0 [ 270.331089][T12287] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6) [ 270.354771][T12295] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 270.435811][T12292] syzkaller0: entered promiscuous mode [ 270.466756][T12292] syzkaller0: entered allmulticast mode [ 270.545881][ T29] audit: type=1804 audit(1716946341.436:39): pid=12292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir1493514638/syzkaller.YVohLR/444/memory.events" dev="sda1" ino=1949 res=1 errno=0 [ 270.670278][T12308] ÿÿÿÿÿÿ: renamed from pim6reg1 [ 271.050305][T12328] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 271.092661][T12328] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 271.116945][T12328] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6) [ 271.157998][T12336] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 271.359919][T12345] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 271.372477][T12345] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.4'. [ 271.517367][ T29] audit: type=1800 audit(1716946342.416:40): pid=12355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=1959 res=0 errno=0 [ 271.559866][T12350] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 271.597271][ T29] audit: type=1804 audit(1716946342.416:41): pid=12355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir1493514638/syzkaller.YVohLR/447/memory.events" dev="sda1" ino=1959 res=1 errno=0 [ 271.638995][ T29] audit: type=1804 audit(1716946342.526:42): pid=12355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir1493514638/syzkaller.YVohLR/447/memory.events" dev="sda1" ino=1959 res=1 errno=0 [ 271.742068][T12356] ÿÿÿÿÿÿ: renamed from pim6reg1 [ 271.756433][T12349] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 272.395077][T12382] netlink: 'syz-executor.3': attribute type 13 has an invalid length. [ 272.471106][T12382] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 272.480723][T12382] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6) [ 272.804544][T12404] sch_tbf: peakrate 5 is lower than or equals to rate 524288 ! [ 273.051574][T12411] ÿÿÿÿÿÿ: renamed from pim6reg1 [ 273.452448][T12441] netlink: 'syz-executor.0': attribute type 13 has an invalid length. [ 273.473498][T12441] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6) [ 274.195531][T12482] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 274.322664][T12487] netlink: 'syz-executor.3': attribute type 13 has an invalid length. [ 274.342141][T12487] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6) [ 274.504426][T12497] __nla_validate_parse: 6 callbacks suppressed [ 274.504447][T12497] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 274.680179][T12504] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 274.716366][T12507] netlink: 830 bytes leftover after parsing attributes in process `syz-executor.1'. [ 275.178275][T12535] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 275.218926][T12535] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 275.259833][T12537] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 275.276227][T12537] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 275.296193][T12537] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6) [ 275.319807][T12538] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 275.518062][T12552] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 275.744743][T12561] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 275.952277][T12574] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 275.975528][T12574] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6) [ 276.233637][T12590] netlink: 248 bytes leftover after parsing attributes in process `syz-executor.0'. [ 276.270421][T12592] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 276.359496][T12588] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 276.384358][T12596] 8021q: adding VLAN 0 to HW filter on device bond2 [ 276.421909][T12596] bond2: entered allmulticast mode [ 276.428324][T12596] bond0: (slave bond2): Enslaving as an active interface with an up link [ 276.585096][T12588] bridge0: port 3(vlan1) entered blocking state [ 276.594670][T12588] bridge0: port 3(vlan1) entered disabled state [ 276.603243][T12588] vlan1: entered allmulticast mode [ 276.614224][T12588] vlan1: entered promiscuous mode [ 276.619685][T12588] bridge0: adding interface vlan1 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 276.950397][T12622] validate_nla: 4 callbacks suppressed [ 276.950419][T12622] netlink: 'syz-executor.3': attribute type 13 has an invalid length. [ 276.998338][T12622] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6) [ 277.810785][T12668] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 277.850548][T12670] netlink: del zone limit has 8 unknown bytes [ 277.896697][T12668] team0: Device hsr_slave_0 failed to register rx_handler [ 278.291067][ T29] audit: type=1800 audit(1716946349.166:43): pid=12686 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1950 res=0 errno=0 [ 278.374480][ T29] audit: type=1804 audit(1716946349.276:44): pid=12686 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir797333260/syzkaller.ZHmL2d/130/memory.events" dev="sda1" ino=1950 res=1 errno=0 [ 278.720287][T12706] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 278.744221][T12706] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 279.337562][ T29] audit: type=1800 audit(1716946350.236:45): pid=12739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1955 res=0 errno=0 [ 279.397488][ T29] audit: type=1800 audit(1716946350.236:46): pid=12738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=1956 res=0 errno=0 [ 279.472613][ T29] audit: type=1804 audit(1716946350.286:47): pid=12738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir1493514638/syzkaller.YVohLR/467/memory.events" dev="sda1" ino=1956 res=1 errno=0 [ 279.545236][ T29] audit: type=1804 audit(1716946350.296:48): pid=12739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir4050704956/syzkaller.d8Z2hK/170/memory.events" dev="sda1" ino=1955 res=1 errno=0 [ 279.769529][ T29] audit: type=1804 audit(1716946350.666:49): pid=12760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir797333260/syzkaller.ZHmL2d/138/cgroup.controllers" dev="sda1" ino=1967 res=1 errno=0 [ 279.917042][T12765] __nla_validate_parse: 12 callbacks suppressed [ 279.917065][T12765] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 280.118720][T12767] ipvlan2: entered promiscuous mode [ 280.157803][T12767] ipvlan2: entered allmulticast mode [ 280.181965][T12767] macvlan0: entered allmulticast mode [ 280.210804][T12767] veth1_vlan: entered allmulticast mode [ 280.608275][T12781] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 281.049007][ T29] audit: type=1800 audit(1716946351.946:50): pid=12798 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1961 res=0 errno=0 [ 281.094878][ T29] audit: type=1800 audit(1716946351.996:51): pid=12801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1966 res=0 errno=0 [ 281.137131][ T29] audit: type=1804 audit(1716946352.036:52): pid=12801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir797333260/syzkaller.ZHmL2d/141/memory.events" dev="sda1" ino=1966 res=1 errno=0 [ 281.507798][T12817] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 281.767556][T12831] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 281.788280][T12831] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 282.097580][T12846] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.1'. [ 282.133067][T12846] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 282.164371][T12846] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 282.202477][T12849] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 282.268814][T12854] 8021q: VLANs not supported on lo [ 282.293429][T12855] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 282.482456][T12867] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 282.564746][T12869] team_slave_1: entered promiscuous mode [ 282.577956][T12869] team_slave_1: entered allmulticast mode [ 282.698783][T12877] netlink: 'syz-executor.0': attribute type 15 has an invalid length. [ 283.173978][T12909] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 283.518437][T12927] ip6t_REJECT: ECHOREPLY is not supported [ 284.037525][T12949] bridge0: entered promiscuous mode [ 284.046487][T12949] macsec1: entered promiscuous mode [ 284.099138][T12949] bridge0: left promiscuous mode [ 284.900702][T12993] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 285.231940][T13016] __nla_validate_parse: 5 callbacks suppressed [ 285.231965][T13016] netlink: 208 bytes leftover after parsing attributes in process `syz-executor.4'. [ 286.103559][T13048] vlan1: entered promiscuous mode [ 286.165526][T13052] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 286.197184][T13048] vlan1 (unregistering): left promiscuous mode [ 286.482131][T13061] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 286.623007][T13068] bridge0: port 4(macvlan4) entered blocking state [ 286.639124][T13068] bridge0: port 4(macvlan4) entered disabled state [ 286.656720][T13068] macvlan4: entered allmulticast mode [ 286.686115][T13068] macvlan4: entered promiscuous mode [ 286.761336][ T53] Bluetooth: hci4: command 0x0405 tx timeout [ 286.954208][T13085] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 287.467543][T13104] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 287.636028][T13109] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 287.669007][T13109] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 287.695925][T13109] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 287.718300][T13112] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 287.981567][T13129] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 288.216548][T13136] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 288.617729][T13153] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 289.593153][T13200] vlan1: entered promiscuous mode [ 289.652027][T13200] vlan1 (unregistering): left promiscuous mode [ 290.089419][T13221] veth1_macvtap: left promiscuous mode [ 290.624273][T13248] vlan1 (unregistering): left allmulticast mode [ 290.655452][T13248] vlan1 (unregistering): left promiscuous mode [ 290.662842][T13248] bridge0: port 3(vlan1) entered disabled state [ 290.722114][T13253] __nla_validate_parse: 7 callbacks suppressed [ 290.722136][T13253] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 290.913401][T13258] rdma_rxe: rxe_newlink: failed to add veth1_to_bridge [ 291.059606][T13267] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 291.114984][T13273] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 291.158880][T13274] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.2'. [ 291.620843][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 291.620893][ T29] audit: type=1804 audit(1716946362.516:58): pid=13289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3934788111/syzkaller.4NiRH2/517/cpuset.memory_pressure" dev="sda1" ino=1964 res=1 errno=0 [ 291.811773][T13304] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 292.391672][T13340] netlink: 277 bytes leftover after parsing attributes in process `syz-executor.1'. [ 292.530149][T13341] delete_channel: no stack [ 292.547519][T13341] delete_channel: no stack [ 292.756750][T13358] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 293.046399][T13374] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 293.514403][ T5173] IPVS: starting estimator thread 0... [ 293.643982][T13396] IPVS: using max 15 ests per chain, 36000 per kthread [ 293.959256][T13415] vlan1: entered promiscuous mode [ 294.033998][T13415] vlan1 (unregistering): left promiscuous mode [ 294.505769][T13439] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 294.739595][T13448] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 294.899868][T13455] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 295.058841][T13460] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 295.802766][T13501] __nla_validate_parse: 1 callbacks suppressed [ 295.802787][T13501] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 296.147628][T13522] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 296.701802][T13545] bond0: entered allmulticast mode [ 296.711333][T13545] bond_slave_0: entered allmulticast mode [ 296.735378][T13545] bond_slave_1: entered allmulticast mode [ 296.819681][T13545] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.055095][T13556] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 297.198481][T13570] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 297.394194][T13573] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 297.624602][T13573] bond2: entered promiscuous mode [ 297.668322][T13579] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 297.715025][T13579] bond2 (unregistering): Released all slaves [ 297.810878][T13591] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 297.949654][T13544] lo speed is unknown, defaulting to 1000 [ 299.065209][T13631] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 299.141424][T13636] syzkaller0: entered allmulticast mode [ 299.210304][T13636] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 299.613253][T13656] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 299.625243][T13656] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.1'. [ 300.148186][T13677] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. [ 300.532309][ T29] audit: type=1804 audit(1716946371.436:59): pid=13694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1469490629/syzkaller.zBDxPN/533/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 300.637423][ T29] audit: type=1804 audit(1716946371.436:60): pid=13696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1469490629/syzkaller.zBDxPN/533/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 301.060145][T13715] __nla_validate_parse: 2 callbacks suppressed [ 301.060168][T13715] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 301.134734][T13719] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.3'. [ 301.171645][T13719] rdma_rxe: rxe_newlink: failed to add lo [ 301.231683][T13723] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 301.259644][T13727] netlink: 16126 bytes leftover after parsing attributes in process `syz-executor.4'. [ 301.271570][T13730] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 301.295872][T13727] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.4'. [ 301.498230][T13740] tipc: MTU too low for tipc bearer [ 301.721815][T13760] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 301.836464][T13765] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 301.861469][T13765] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 301.900386][T13765] Cannot find add_set index 0 as target [ 301.928862][T13766] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'. [ 301.942463][T13767] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 301.969351][T13767] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 302.278755][T11882] bridge_slave_1: left allmulticast mode [ 302.300063][T11882] bridge_slave_1: left promiscuous mode [ 302.316659][T11882] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.385167][T11882] bridge_slave_0: left allmulticast mode [ 302.390892][T11882] bridge_slave_0: left promiscuous mode [ 302.420790][T11882] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.346988][T11882] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 303.361280][T11882] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 303.374847][T11882] bond0 (unregistering): Released all slaves [ 304.987318][T11882] hsr_slave_0: left promiscuous mode [ 305.020818][T11882] hsr_slave_1: left promiscuous mode [ 305.059879][T11882] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 305.071987][T11882] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 305.103412][T11882] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 305.110942][T11882] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 305.180419][T11882] veth1_macvtap: left promiscuous mode [ 305.200534][T11882] veth0_macvtap: left promiscuous mode [ 305.216289][T11882] veth1_vlan: left promiscuous mode [ 305.240630][T11882] veth0_vlan: left promiscuous mode [ 305.480261][T11882] infiniband syz2: set down [ 305.556083][T11882] infiniband syz1: set down [ 305.889719][ T29] audit: type=1804 audit(1716946376.786:61): pid=13917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir797333260/syzkaller.ZHmL2d/213/memory.events" dev="sda1" ino=1966 res=1 errno=0 [ 306.632987][T11882] team0 (unregistering): Port device team_slave_1 removed [ 306.698604][T11882] team0 (unregistering): Port device team_slave_0 removed [ 306.878977][T11878] smc: removing ib device syz2 [ 307.134192][T11883] smc: removing ib device syz1 [ 307.140605][T13885] __nla_validate_parse: 2 callbacks suppressed [ 307.140628][T13885] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 307.185510][ T5173] lo speed is unknown, defaulting to 1000 [ 307.597812][T13951] xt_HMARK: proto mask must be zero with L3 mode [ 307.680777][T13953] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 308.039881][T13969] ebt_among: wrong size: 1048 against expected 1006634004, rounded to 1006634008 [ 309.021147][ T29] audit: type=1804 audit(1716946379.916:62): pid=14000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1493514638/syzkaller.YVohLR/519/memory.events" dev="sda1" ino=1956 res=1 errno=0 [ 309.434979][T14011] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 309.473958][T14013] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 309.622827][T14021] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 309.737625][T14013] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 309.795110][T14027] EXT4-fs (sda1): Can't modify superblock whileperforming online resize [ 310.176788][ T9166] team0: Port device macvlan2 removed [ 310.355327][ T5121] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 310.367493][ T5121] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 310.376797][ T5121] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 310.388075][ T5121] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 310.403054][ T5121] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 310.412535][ T5121] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 311.258136][T14063] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 311.800761][T14083] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 312.457689][ T5121] Bluetooth: hci4: command tx timeout [ 312.474557][T14114] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 312.701298][T14038] chnl_net:caif_netlink_parms(): no params data found [ 312.940249][T14127] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 313.027859][T14130] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 313.166257][T14038] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.198306][T14137] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 313.216834][T14140] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 313.221459][T14038] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.244681][T14038] bridge_slave_0: entered allmulticast mode [ 313.269027][T14038] bridge_slave_0: entered promiscuous mode [ 313.306440][T14038] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.354085][T14038] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.402991][T14038] bridge_slave_1: entered allmulticast mode [ 313.423166][T14038] bridge_slave_1: entered promiscuous mode [ 313.447937][T14128] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 313.492671][T14128] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'. [ 313.555567][T14128] team0: entered promiscuous mode [ 313.571835][T14128] team_slave_0: entered promiscuous mode [ 313.578203][T14128] team_slave_1: entered promiscuous mode [ 313.594828][T14128] bridge0: port 3(team0) entered blocking state [ 313.621815][T14128] bridge0: port 3(team0) entered disabled state [ 313.660001][T14128] team0: entered allmulticast mode [ 313.671480][T14128] team_slave_0: entered allmulticast mode [ 313.677665][T14128] team_slave_1: entered allmulticast mode [ 313.699017][T14128] bridge0: port 3(team0) entered blocking state [ 313.705505][T14128] bridge0: port 3(team0) entered forwarding state [ 313.762742][T14141] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 313.975324][T14038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.999761][T14038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.163733][T14038] team0: Port device team_slave_0 added [ 314.170733][T14179] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.178007][T14179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.247785][T14178] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.255156][T14178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.284973][T14038] team0: Port device team_slave_1 added [ 314.521488][ T5121] Bluetooth: hci4: command tx timeout [ 314.651965][T14038] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.658977][T14038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.817173][T14038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 314.879361][T14038] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.910841][T14038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.988211][T14038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 315.224019][T14038] hsr_slave_0: entered promiscuous mode [ 315.262614][T14038] hsr_slave_1: entered promiscuous mode [ 315.320676][T14038] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 315.361324][T14038] Cannot create hsr debugfs directory [ 315.452309][T14230] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 315.774754][T14244] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.782117][T14244] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.834988][T14249] sch_tbf: burst 0 is lower than device veth1_to_team mtu (1514) ! [ 316.130717][T14038] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.299432][T14038] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.449036][T14038] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.471529][T14272] sch_tbf: burst 0 is lower than device veth1_to_team mtu (1514) ! [ 316.574267][T14038] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.601349][ T5121] Bluetooth: hci4: command tx timeout [ 316.744865][T14286] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 316.942987][T14038] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 316.967221][T14038] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 317.018242][T14038] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 317.127008][T14038] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 317.403485][T14314] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 317.428885][ T29] audit: type=1804 audit(1716946388.326:63): pid=14317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1493514638/syzkaller.YVohLR/543/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 317.480356][T14317] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 317.570815][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.577621][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.637786][T14038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.706836][T14038] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.764673][ T5172] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.771914][ T5172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.778618][T14322] trusted_key: syz-executor.1 sent an empty control message without MSG_MORE. [ 317.857479][ T5172] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.864818][ T5172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.018706][T14331] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 318.044956][T14331] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 318.165655][T14331] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 318.191827][T14331] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.3'. [ 318.227346][T14331] team0: entered promiscuous mode [ 318.237488][T14331] team_slave_0: entered promiscuous mode [ 318.248357][T14331] team_slave_1: entered promiscuous mode [ 318.262027][T14331] bridge0: port 3(team0) entered blocking state [ 318.281573][T14331] bridge0: port 3(team0) entered disabled state [ 318.291460][T14331] team0: entered allmulticast mode [ 318.311413][T14331] team_slave_0: entered allmulticast mode [ 318.319829][T14331] team_slave_1: entered allmulticast mode [ 318.344038][T14331] bridge0: port 3(team0) entered blocking state [ 318.350575][T14331] bridge0: port 3(team0) entered forwarding state [ 318.681931][ T5121] Bluetooth: hci4: command tx timeout [ 318.682773][T14038] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.820724][T14363] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 319.066470][T14038] veth0_vlan: entered promiscuous mode [ 319.129906][T14038] veth1_vlan: entered promiscuous mode [ 319.270179][T14038] veth0_macvtap: entered promiscuous mode [ 319.302687][T14038] veth1_macvtap: entered promiscuous mode [ 319.370072][T14038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.400393][T14038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.417464][T14038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.429961][T14038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.440401][T14038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.468433][T14038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.489592][T14038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.513653][T14038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.526571][T14038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.543362][T14038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.576548][T14038] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 319.664077][T14038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.691591][T14038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.712365][T14038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.736309][T14038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.752225][T14038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.773329][T14038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.784828][T14038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.795681][T14038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.806049][T14038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.817211][T14038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.828328][T14038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.839942][T14038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.855325][T14038] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 319.897224][T14038] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.930897][T14038] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.951190][T14038] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.969716][T14038] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.043018][T14397] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 320.261806][ T5120] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.302523][ T5120] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.378491][T14413] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 320.409427][ T25] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.423710][ T25] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.642368][T14424] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1620) ! [ 321.029697][T14442] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 321.231599][T14449] vlan1: entered promiscuous mode [ 321.352955][T14455] syz-executor.1[14455] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 321.353233][T14455] syz-executor.1[14455] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 321.379110][T14449] vlan1 (unregistering): left promiscuous mode [ 321.462115][T14456] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.4'. [ 321.791527][T14467] netlink: 'syz-executor.4': attribute type 12 has an invalid length. [ 321.841828][T14476] pimreg: entered allmulticast mode [ 321.880851][T14475] tap0: tun_chr_ioctl cmd 1074025677 [ 321.895083][T14475] tap0: linktype set to 825 [ 321.968104][T14480] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 321.978333][T14480] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.4'. [ 322.004737][T14480] netlink: 'syz-executor.4': attribute type 9 has an invalid length. [ 322.039714][T14480] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.4'. [ 322.059612][T14486] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 322.069981][T14486] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.4'. [ 322.205211][T14492] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. [ 323.096619][T14529] tun0: tun_chr_ioctl cmd 1074812117 [ 323.946640][T14574] tun0: tun_chr_ioctl cmd 1074812117 [ 325.024629][T14607] tun0: tun_chr_ioctl cmd 1074812117 [ 325.502215][T14627] __nla_validate_parse: 2 callbacks suppressed [ 325.502239][T14627] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 326.202999][ T29] audit: type=1107 audit(1716946397.096:64): pid=14660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=']x' [ 326.341793][T14666] tun0: tun_chr_ioctl cmd 1074812117 [ 326.819498][T14686] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 327.592503][T14731] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 327.767095][T14740] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 327.820344][T14738] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 327.853283][T14742] netlink: 165 bytes leftover after parsing attributes in process `syz-executor.4'. [ 328.156903][T14757] veth1_to_bond: entered promiscuous mode [ 328.186852][T14757] veth1_to_bond: left promiscuous mode [ 328.672588][T14786] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 328.683110][T14776] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 328.874249][T14792] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 328.915200][T14792] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 328.969276][T14796] netlink: 240 bytes leftover after parsing attributes in process `syz-executor.0'. [ 329.079096][T14803] netlink: 'syz-executor.2': attribute type 13 has an invalid length. [ 329.641121][ T53] Bluetooth: hci4: command 0x0405 tx timeout [ 330.539011][T14854] bond0: entered promiscuous mode [ 330.557839][T14854] bond_slave_0: entered promiscuous mode [ 330.567413][T14854] bond_slave_1: entered promiscuous mode [ 330.593795][T14854] bond2: entered promiscuous mode [ 330.599184][T14854] bond0: left allmulticast mode [ 330.619140][T14854] bond_slave_0: left allmulticast mode [ 330.630463][T14854] bond_slave_1: left allmulticast mode [ 330.649537][T14854] bond2: left allmulticast mode [ 330.673307][T14855] sch_tbf: burst 0 is lower than device veth1_to_team mtu (1514) ! [ 330.853368][T14866] x_tables: duplicate underflow at hook 3 [ 331.247282][T14883] __nla_validate_parse: 1 callbacks suppressed [ 331.247306][T14883] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 331.254038][T14887] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 331.598775][T14902] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 331.998525][T14928] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 332.530637][ C1] dccp_invalid_packet: P.CsCov 4 exceeds packet length 720 [ 332.556615][T14959] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 332.576561][T14959] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 333.499996][T14996] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 333.645087][T15001] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 333.702658][T15001] openvswitch: netlink: Message has 4 unknown bytes. [ 333.882016][T15013] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 333.978177][T15013] tap0: tun_chr_ioctl cmd 1074812118 [ 334.034138][T15013] team0: left allmulticast mode [ 334.071255][T15013] team_slave_0: left allmulticast mode [ 334.084359][T15013] team_slave_1: left allmulticast mode [ 334.103601][T15013] bridge0: port 3(team0) entered disabled state [ 334.138834][T15013] team0: Cannot enslave team device to itself [ 334.475194][ C1] dccp_invalid_packet: P.CsCov 4 exceeds packet length 720 [ 334.513965][T15032] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 334.543800][T15032] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 334.742138][T15040] tipc: Started in network mode [ 334.747515][T15040] tipc: Node identity 4, cluster identity 4711 [ 334.755700][T15040] tipc: Node number set to 4 [ 334.764331][T15040] tipc: Cannot configure node identity twice [ 334.954237][T15048] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 335.086143][T15053] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 335.130389][T15053] openvswitch: netlink: Message has 4 unknown bytes. [ 335.201344][T15060] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 335.332439][T15060] tap0: tun_chr_ioctl cmd 1074812118 [ 335.356389][T15060] team0: left allmulticast mode [ 335.377087][T15060] team_slave_0: left allmulticast mode [ 335.390750][T15060] team_slave_1: left allmulticast mode [ 335.406277][T15060] bridge0: port 3(team0) entered disabled state [ 335.428817][T15060] team0: Cannot enslave team device to itself [ 336.026398][T15093] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 336.199896][T15108] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 336.215062][ C1] dccp_invalid_packet: P.CsCov 4 exceeds packet length 720 [ 336.244558][T15108] openvswitch: netlink: Message has 4 unknown bytes. [ 336.287275][T15109] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 336.314850][T15112] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 336.341663][T15112] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 336.361301][T15115] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 336.364630][T15109] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 336.516294][T15122] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 336.548526][T15115] tap0: tun_chr_ioctl cmd 1074812118 [ 336.606594][T15115] team0: Cannot enslave team device to itself [ 336.666538][T15128] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 336.753784][T15132] x_tables: duplicate underflow at hook 1 [ 337.015572][T15147] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 337.356129][T15167] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 337.430887][T15167] tap0: tun_chr_ioctl cmd 1074812118 [ 337.448607][T15167] team0: Cannot enslave team device to itself [ 337.515015][T15174] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 337.634357][T15174] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 337.673022][T15174] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 338.489063][T15214] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 338.772671][T15219] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 338.805163][T15219] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 339.125300][T15226] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 339.372261][T15230] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 340.164985][T15256] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 340.475348][T15255] syzkaller0: entered promiscuous mode [ 340.487570][T15255] syzkaller0: entered allmulticast mode [ 343.043476][T15286] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 343.082282][T15286] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 343.327732][T15301] __nla_validate_parse: 9 callbacks suppressed [ 343.327754][T15301] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 343.350657][T15301] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 343.360732][T15301] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 343.427555][T15305] SET target dimension over the limit! [ 343.442479][T15304] SET target dimension over the limit! [ 343.635120][T15316] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 344.568193][T15357] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 344.909857][T15369] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 344.932283][T15369] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 345.267806][T15390] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 345.312032][T15390] vxcan3: entered promiscuous mode [ 345.377441][T15394] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 345.438548][T15394] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 345.975835][T15420] syz-executor.4: vmalloc error: size 17179873280, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 346.026958][T15420] CPU: 0 PID: 15420 Comm: syz-executor.4 Not tainted 6.9.0-syzkaller-12122-gc519cf9b7434 #0 [ 346.037279][T15420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 346.047565][T15420] Call Trace: [ 346.050895][T15420] [ 346.053877][T15420] dump_stack_lvl+0x241/0x360 [ 346.058646][T15420] ? __pfx_dump_stack_lvl+0x10/0x10 [ 346.063903][T15420] ? __pfx__printk+0x10/0x10 [ 346.068573][T15420] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 346.075070][T15420] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 346.081767][T15420] warn_alloc+0x278/0x410 [ 346.086267][T15420] ? stack_depot_save_flags+0x29/0x830 [ 346.091838][T15420] ? __vmalloc_node_range_noprof+0x106/0x1490 [ 346.098656][T15420] ? __pfx_warn_alloc+0x10/0x10 [ 346.103675][T15420] ? kasan_save_track+0x3f/0x80 [ 346.108597][T15420] ? __kasan_kmalloc+0x98/0xb0 [ 346.113435][T15420] ? xsk_setsockopt+0x598/0x950 [ 346.118365][T15420] ? do_sock_setsockopt+0x3af/0x720 [ 346.123641][T15420] ? __sys_setsockopt+0x1ae/0x250 [ 346.128831][T15420] ? __x64_sys_setsockopt+0xb5/0xd0 [ 346.134109][T15420] ? do_syscall_64+0xf3/0x230 [ 346.138828][T15420] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.144953][T15420] __vmalloc_node_range_noprof+0x126/0x1490 [ 346.151443][T15420] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 346.157827][T15420] ? __kasan_kmalloc+0x98/0xb0 [ 346.162623][T15420] ? xskq_create+0x54/0x170 [ 346.167450][T15420] vmalloc_user_noprof+0x74/0x80 [ 346.172707][T15420] ? xskq_create+0xb6/0x170 [ 346.177265][T15420] xskq_create+0xb6/0x170 [ 346.181636][T15420] xsk_init_queue+0xa1/0x100 [ 346.186259][T15420] xsk_setsockopt+0x598/0x950 [ 346.190973][T15420] ? __pfx_xsk_setsockopt+0x10/0x10 [ 346.196299][T15420] ? __pfx_lock_acquire+0x10/0x10 [ 346.201344][T15420] ? aa_sock_opt_perm+0x79/0x120 [ 346.206303][T15420] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 346.211873][T15420] ? security_socket_setsockopt+0x87/0xb0 [ 346.217637][T15420] ? __pfx_xsk_setsockopt+0x10/0x10 [ 346.222866][T15420] do_sock_setsockopt+0x3af/0x720 [ 346.227945][T15420] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 346.233615][T15420] ? __fget_files+0x29/0x470 [ 346.238240][T15420] ? __fget_files+0x3f6/0x470 [ 346.242956][T15420] __sys_setsockopt+0x1ae/0x250 [ 346.247836][T15420] __x64_sys_setsockopt+0xb5/0xd0 [ 346.252900][T15420] do_syscall_64+0xf3/0x230 [ 346.257429][T15420] ? clear_bhb_loop+0x35/0x90 [ 346.262123][T15420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.268041][T15420] RIP: 0033:0x7f267147cee9 [ 346.272492][T15420] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 346.292234][T15420] RSP: 002b:00007f26722360c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 346.301034][T15420] RAX: ffffffffffffffda RBX: 00007f26715b3fa0 RCX: 00007f267147cee9 [ 346.309015][T15420] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000003 [ 346.316998][T15420] RBP: 00007f26714c947f R08: 0000000000000004 R09: 0000000000000000 [ 346.324983][T15420] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 346.333053][T15420] R13: 000000000000004d R14: 00007f26715b3fa0 R15: 00007ffc2d836c68 [ 346.341335][T15420] [ 346.402582][T15420] Mem-Info: [ 346.426712][T15420] active_anon:14251 inactive_anon:0 isolated_anon:0 [ 346.426712][T15420] active_file:0 inactive_file:46965 isolated_file:0 [ 346.426712][T15420] unevictable:768 dirty:49 writeback:0 [ 346.426712][T15420] slab_reclaimable:10906 slab_unreclaimable:113270 [ 346.426712][T15420] mapped:18503 shmem:1676 pagetables:650 [ 346.426712][T15420] sec_pagetables:0 bounce:0 [ 346.426712][T15420] kernel_misc_reclaimable:0 [ 346.426712][T15420] free:1367477 free_pcp:1265 free_cma:0 [ 346.476431][T15420] Node 0 active_anon:57104kB inactive_anon:0kB active_file:0kB inactive_file:187792kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:74012kB dirty:196kB writeback:0kB shmem:5168kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11276kB pagetables:2700kB sec_pagetables:0kB all_unreclaimable? no [ 346.510024][T15420] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 346.621164][T15420] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 346.670612][T15438] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 346.705754][T15438] netlink: 'syz-executor.0': attribute type 39 has an invalid length. [ 346.734806][T15420] lowmem_reserve[]: 0 2571 2571 0 0 [ 346.759100][T15420] Node 0 DMA32 free:1507860kB boost:0kB min:35108kB low:43884kB high:52660kB reserved_highatomic:0KB active_anon:56956kB inactive_anon:0kB active_file:0kB inactive_file:188080kB unevictable:1536kB writepending:792kB present:3129332kB managed:2659880kB mlocked:0kB bounce:0kB free_pcp:2024kB local_pcp:1212kB free_cma:0kB [ 346.793470][T15444] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 346.811782][T15444] netlink: 'syz-executor.0': attribute type 39 has an invalid length. [ 346.850060][ T29] audit: type=1804 audit(1716946417.746:65): pid=15430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1469490629/syzkaller.zBDxPN/651/cgroup.controllers" dev="sda1" ino=1963 res=1 errno=0 [ 346.900240][T15420] lowmem_reserve[]: 0 0 0 0 0 [ 346.906464][T15420] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:312kB unevictable:0kB writepending:4kB present:1048576kB managed:360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 346.942978][T15420] lowmem_reserve[]: 0 0 0 0 0 [ 346.948617][T15420] Node 1 Normal free:3946908kB boost:0kB min:54788kB low:68484kB high:82180kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:1536kB writepending:0kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:2364kB local_pcp:1112kB free_cma:0kB [ 346.980276][T15420] lowmem_reserve[]: 0 0 0 0 0 [ 346.985496][T15420] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 347.068866][T15420] Node 0 DMA32: 3*4kB (UME) 44*8kB (UME) 47*16kB (UME) 478*32kB (UME) 216*64kB (UME) 94*128kB (UME) 36*256kB (UM) 7*512kB (U) 4*1024kB (UME) 1*2048kB (E) 353*4096kB (UM) = 1507100kB [ 347.150207][T15420] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 347.198061][T15420] Node 1 Normal: 1*4kB (U) 1*8kB (U) 1*16kB (U) 0*32kB 2*64kB (UM) 0*128kB 1*256kB (M) 2*512kB (UM) 1*1024kB (U) 2*2048kB (U) 962*4096kB (M) = 3946908kB [ 347.252971][T15420] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 347.290141][T15420] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 347.311324][T15420] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 347.362327][T15420] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 347.401497][T15420] 48800 total pagecache pages [ 347.422068][T15420] 0 pages in swap cache [ 347.460188][T15420] Free swap = 124996kB [ 347.507018][T15420] Total swap = 124996kB [ 347.518441][T15457] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 347.521245][T15463] x_tables: eb_tables: AUDIT.0 target: invalid size 8 (kernel) != (user) 1 [ 347.530912][T15420] 2097051 pages RAM [ 347.554134][T15420] 0 pages HighMem/MovableOnly [ 347.578354][T15420] 400871 pages reserved [ 347.596472][T15457] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 347.621847][T15420] 0 pages cma reserved [ 348.056253][T15491] 8021q: adding VLAN 0 to HW filter on device team1 [ 348.091578][T15491] bond0: (slave team1): Enslaving as an active interface with an up link [ 348.206048][T15501] xt_l2tp: invalid flags combination: c [ 349.301612][T15560] xt_CT: You must specify a L4 protocol and not use inversions on it [ 349.625878][T15565] sctp: [Deprecated]: syz-executor.1 (pid 15565) Use of struct sctp_assoc_value in delayed_ack socket option. [ 349.625878][T15565] Use struct sctp_sack_info instead [ 349.778519][T15582] netlink: 'syz-executor.2': attribute type 16 has an invalid length. [ 350.437279][T15608] Can't find ip_set type bitmap:ip [ 350.479994][T15621] ieee802154 phy0 wpan0: encryption failed: -90 [ 350.738820][T15636] __nla_validate_parse: 7 callbacks suppressed [ 350.738843][T15636] netlink: 684 bytes leftover after parsing attributes in process `syz-executor.3'. [ 350.768184][T15638] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 351.001333][ T5121] Bluetooth: hci4: command 0x0405 tx timeout [ 351.282783][T15649] sctp: [Deprecated]: syz-executor.4 (pid 15649) Use of struct sctp_assoc_value in delayed_ack socket option. [ 351.282783][T15649] Use struct sctp_sack_info instead [ 351.946848][T15683] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 352.093291][T15688] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.4'. [ 352.142436][T15688] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 352.258285][T15697] veth0_vlan: entered allmulticast mode [ 353.086522][T15730] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 353.263474][T15738] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 353.390791][T15750] vlan0: entered promiscuous mode [ 354.319571][T15790] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 354.614568][T15802] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 354.901118][T15807] team0: Port device team_slave_0 removed [ 354.918203][T15807] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 355.071765][T15820] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 355.181159][T15826] sch_tbf: peakrate 5 is lower than or equals to rate 524288 ! [ 355.470147][T15846] tipc: Started in network mode [ 355.484023][T15846] tipc: Node identity aaaaaaaaaa3b, cluster identity 4711 [ 355.503960][T15846] tipc: Enabled bearer , priority 10 [ 356.185534][T15880] netlink: 'syz-executor.2': attribute type 28 has an invalid length. [ 356.216561][T15877] sch_tbf: peakrate 5 is lower than or equals to rate 524288 ! [ 356.229889][T15880] __nla_validate_parse: 2 callbacks suppressed [ 356.229913][T15880] netlink: 160 bytes leftover after parsing attributes in process `syz-executor.2'. [ 356.293115][T15881] bridge0: port 3(vlan1) entered blocking state [ 356.315400][T15881] bridge0: port 3(vlan1) entered disabled state [ 356.343280][T15881] vlan1: entered allmulticast mode [ 356.367868][T15881] vlan1: entered promiscuous mode [ 356.411602][T15881] bridge0: adding interface vlan1 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 356.621206][ T5173] tipc: Node number set to 9546410 [ 356.942684][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 356.974418][T15919] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 357.019524][T15915] can: request_module (can-proto-3) failed. [ 357.074132][T15919] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 357.083135][T15919] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 357.377516][T15930] sch_tbf: peakrate 5 is lower than or equals to rate 524288 ! [ 357.509150][T15948] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 357.537393][T15946] bridge0: port 3(vlan1) entered blocking state [ 357.559910][T15946] bridge0: port 3(vlan1) entered disabled state [ 357.585833][T15946] vlan1: entered allmulticast mode [ 357.607451][T15946] vlan1: entered promiscuous mode [ 357.631876][T15946] bridge0: adding interface vlan1 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 357.712232][T15957] netlink: 5056 bytes leftover after parsing attributes in process `syz-executor.0'. [ 357.733890][T15957] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 357.746194][T15957] netlink: 5056 bytes leftover after parsing attributes in process `syz-executor.0'. [ 357.874771][T15963] can: request_module (can-proto-3) failed. [ 357.900455][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 358.199183][T15979] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 358.266712][T15979] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 358.421809][T15986] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 358.442659][T15986] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 358.712481][T16001] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 358.742035][T16003] can: request_module (can-proto-3) failed. [ 358.794486][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 358.970476][T16017] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 358.979938][T16017] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 358.995469][T16017] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 359.023131][T16017] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 359.155925][T16023] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 359.262141][T16025] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 359.725726][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 359.783003][T16046] xt_hashlimit: overflow, rate too high: 0 [ 359.992701][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 360.263441][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 360.496301][T16084] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 360.804739][T16097] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 361.514141][T16128] syz_tun (unregistering): left promiscuous mode [ 361.646557][T16134] vlan1 (unregistering): left allmulticast mode [ 361.656605][T16134] vlan1 (unregistering): left promiscuous mode [ 361.670320][T16134] bridge0: port 3(vlan1) entered disabled state [ 362.335277][T16172] __nla_validate_parse: 4 callbacks suppressed [ 362.335301][T16172] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'. [ 362.391802][T16172] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'. [ 362.419544][T16176] validate_nla: 4 callbacks suppressed [ 362.419576][T16176] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 362.460211][T16176] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.2'. [ 362.464514][T16177] tipc: Enabling of bearer rejected, failed to enable media [ 362.499292][T16172] netlink: 'syz-executor.1': attribute type 19 has an invalid length. [ 362.579712][T16176] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 362.598296][T16176] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 362.692183][T16185] netlink: 29 bytes leftover after parsing attributes in process `syz-executor.0'. [ 362.735263][T16185] netlink: 29 bytes leftover after parsing attributes in process `syz-executor.0'. [ 362.777834][T16185] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 362.969914][T16195] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.1'. [ 363.095487][T16203] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.0'. [ 363.175210][T16207] ax25_connect(): syz-executor.1 uses autobind, please contact jreuter@yaina.de [ 368.766274][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 379.007178][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.013914][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 393.863072][ T53] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 393.874271][ T53] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 393.885477][ T53] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 393.941227][ T53] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 393.949243][ T53] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 393.961422][ T53] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 394.023641][ T53] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 394.033576][ T53] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 394.042767][ T53] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 394.054220][ T5127] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 394.062672][ T5127] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 394.070113][ T5127] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 394.072538][ T5135] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 394.088666][ T5135] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 394.098388][ T5135] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 394.107031][ T5135] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 394.115096][ T5135] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 394.123155][ T5135] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 394.235565][ T5121] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 394.245778][ T5121] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 394.256820][ T5121] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 394.266524][ T5121] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 394.274878][ T5121] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 394.285977][ T5121] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 395.717053][ T5121] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 395.728791][ T5121] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 395.741485][ T5121] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 395.749853][ T5121] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 395.757973][ T5121] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 395.771326][ T5121] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 396.041304][ T53] Bluetooth: hci5: command tx timeout [ 396.211133][ T53] Bluetooth: hci6: command tx timeout [ 396.211273][ T5121] Bluetooth: hci7: command tx timeout [ 396.361259][ T5121] Bluetooth: hci8: command tx timeout [ 397.801680][ T5121] Bluetooth: hci9: command tx timeout [ 398.131345][ T5121] Bluetooth: hci5: command tx timeout [ 398.289171][ T5121] Bluetooth: hci6: command tx timeout [ 398.289186][ T53] Bluetooth: hci7: command tx timeout [ 398.451180][ T5121] Bluetooth: hci8: command tx timeout [ 399.881678][ T5121] Bluetooth: hci9: command tx timeout [ 400.201176][ T5121] Bluetooth: hci5: command tx timeout [ 400.362165][ T5121] Bluetooth: hci7: command tx timeout [ 400.371197][ T5121] Bluetooth: hci6: command tx timeout [ 400.531447][ T5121] Bluetooth: hci8: command tx timeout [ 401.961426][ T5121] Bluetooth: hci9: command tx timeout [ 402.281296][ T5121] Bluetooth: hci5: command tx timeout [ 402.441258][ T53] Bluetooth: hci7: command tx timeout [ 402.446910][ T5121] Bluetooth: hci6: command tx timeout [ 402.601464][ T5121] Bluetooth: hci8: command tx timeout [ 404.041825][ T5121] Bluetooth: hci9: command tx timeout [ 440.444846][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.453927][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 458.840381][ T53] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 458.852205][ T53] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 458.875346][ T53] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 458.884727][ T53] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 458.900965][ T53] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 458.909742][ T53] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 459.049874][ T53] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 459.060224][ T53] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 459.071466][ T53] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 459.081919][ T53] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 459.091473][ T53] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 459.098996][ T53] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 459.169601][ T53] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 459.180999][ T53] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 459.190550][ T53] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 459.198952][ T53] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 459.211571][ T53] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 459.221366][ T53] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 459.296540][ T53] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 459.307591][ T53] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 459.316585][ T53] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 459.327580][ T53] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 459.343537][ T53] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 459.360676][ T53] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 460.713899][ T5121] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 460.724017][ T5121] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 460.733416][ T5121] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 460.741947][ T5121] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 460.749872][ T5121] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 460.757613][ T5121] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 461.004452][ T5121] Bluetooth: hci10: command tx timeout [ 461.171149][ T5121] Bluetooth: hci11: command tx timeout [ 461.321391][ T5121] Bluetooth: hci12: command tx timeout [ 461.401484][ T5121] Bluetooth: hci13: command tx timeout [ 462.851231][ T5121] Bluetooth: hci14: command tx timeout [ 463.087475][ T5121] Bluetooth: hci10: command tx timeout [ 463.241688][ T5121] Bluetooth: hci11: command tx timeout [ 463.401293][ T5121] Bluetooth: hci12: command tx timeout [ 463.482311][ T5121] Bluetooth: hci13: command tx timeout [ 464.921380][ T5121] Bluetooth: hci14: command tx timeout [ 465.161165][ T5121] Bluetooth: hci10: command tx timeout [ 465.322991][ T5121] Bluetooth: hci11: command tx timeout [ 465.487099][ T5121] Bluetooth: hci12: command tx timeout [ 465.561400][ T5121] Bluetooth: hci13: command tx timeout [ 467.001496][ T5121] Bluetooth: hci14: command tx timeout [ 467.241277][ T5121] Bluetooth: hci10: command tx timeout [ 467.401655][ T5121] Bluetooth: hci11: command tx timeout [ 467.561223][ T5121] Bluetooth: hci12: command tx timeout [ 467.641290][ T5121] Bluetooth: hci13: command tx timeout [ 469.081162][ T5121] Bluetooth: hci14: command tx timeout [ 473.241499][ T53] Bluetooth: hci4: command 0x0405 tx timeout [ 501.886117][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.901119][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 519.321124][T16291] Bluetooth: hci9: command 0x0406 tx timeout [ 519.327946][T16291] Bluetooth: hci5: command 0x0406 tx timeout [ 519.335942][T16290] Bluetooth: hci7: command 0x0406 tx timeout [ 519.344660][T16290] Bluetooth: hci6: command 0x0406 tx timeout [ 519.345428][ T53] Bluetooth: hci8: command 0x0406 tx timeout [ 523.984349][ T5135] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 524.001735][ T5135] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 524.022285][ T5135] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 524.041529][ T5135] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 524.052822][ T5135] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 524.060386][ T5135] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 524.222380][ T5135] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 524.232256][ T5135] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 524.240690][ T5135] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 524.250173][ T5135] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 524.259519][ T5135] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 524.267389][ T5135] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 524.311434][T16288] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 524.321128][T16288] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 524.329639][T16288] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 524.339184][T16288] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 524.348002][T16288] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3 [ 524.355905][T16288] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 524.407951][ T5135] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 524.420494][ T5135] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 524.429795][ T5135] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 524.438648][ T5135] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 524.448269][ T5135] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 524.455992][ T5135] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 525.573435][ T30] INFO: task syz-executor.4:16215 blocked for more than 143 seconds. [ 525.591077][ T30] Not tainted 6.9.0-syzkaller-12122-gc519cf9b7434 #0 [ 525.598371][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. 2024/05/29 01:36:36 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 525.656830][ T30] task:syz-executor.4 state:D stack:25616 pid:16215 tgid:16210 ppid:5123 flags:0x00000006 [ 525.732431][ T30] Call Trace: [ 525.735866][ T30] [ 525.738837][ T30] __schedule+0x17e8/0x4a20 [ 525.770980][ T30] ? __pfx___schedule+0x10/0x10 [ 525.775919][ T30] ? __pfx_lock_release+0x10/0x10 [ 525.801116][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 525.807079][ T30] ? schedule+0x90/0x320 [ 525.830998][ T30] schedule+0x14b/0x320 [ 525.835362][ T30] schedule_preempt_disabled+0x13/0x30 [ 525.871061][ T30] __mutex_lock+0x6a4/0xd70 [ 525.875663][ T30] ? __mutex_lock+0x527/0xd70 [ 525.880387][ T30] ? tipc_nl_bearer_enable+0x17/0x40 [ 525.911074][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 525.916203][ T30] ? __nla_parse+0x40/0x60 [ 525.920683][ T30] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 525.944634][ T30] ? genl_family_rcv_msg_attrs_parse+0x21b/0x290 [ 525.960781][ T30] tipc_nl_bearer_enable+0x17/0x40 [ 525.966206][ T30] genl_rcv_msg+0xb14/0xec0 [ 525.970755][ T30] ? mark_lock+0x9a/0x350 [ 525.980955][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 525.986279][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 526.001000][ T30] ? __pfx_tipc_nl_bearer_enable+0x10/0x10 [ 526.006896][ T30] ? __pfx___might_resched+0x10/0x10 [ 526.021037][ T30] netlink_rcv_skb+0x1e3/0x430 [ 526.025878][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 526.044225][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 526.049856][ T30] ? __netlink_deliver_tap+0x77e/0x7c0 [ 526.056372][ T30] genl_rcv+0x28/0x40 [ 526.060756][ T30] netlink_unicast+0x7ea/0x980 [ 526.078376][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 526.084719][ T30] ? __virt_addr_valid+0x183/0x520 [ 526.089982][ T30] ? __check_object_size+0x49c/0x900 [ 526.108432][ T30] ? bpf_lsm_netlink_send+0x9/0x10 [ 526.113916][ T30] netlink_sendmsg+0x8db/0xcb0 [ 526.118777][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 526.124525][ T5127] Bluetooth: hci15: command tx timeout [ 526.161259][ T30] ? __import_iovec+0x536/0x820 [ 526.166209][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 526.191289][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 526.196657][ T30] ? security_socket_sendmsg+0x87/0xb0 [ 526.231040][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 526.236403][ T30] __sock_sendmsg+0x221/0x270 [ 526.263026][ T30] ____sys_sendmsg+0x525/0x7d0 [ 526.267889][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 526.311119][ T30] __sys_sendmsg+0x2b0/0x3a0 [ 526.315822][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 526.321123][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 526.327497][ T30] ? do_syscall_64+0x100/0x230 [ 526.340978][ T30] ? do_syscall_64+0xb6/0x230 [ 526.345750][ T30] do_syscall_64+0xf3/0x230 [ 526.350291][ T30] ? clear_bhb_loop+0x35/0x90 [ 526.362454][ T5127] Bluetooth: hci16: command tx timeout [ 526.380957][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.386941][ T30] RIP: 0033:0x7f267147cee9 [ 526.401020][ T30] RSP: 002b:00007f26722360c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 526.409509][ T30] RAX: ffffffffffffffda RBX: 00007f26715b3fa0 RCX: 00007f267147cee9 [