last executing test programs: 1m43.67246219s ago: executing program 2 (id=298): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x64, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x40, 0x33, @assoc_resp={{{}, {}, @device_a, @device_a, @from_mac=@device_b}, 0x0, 0x3, @default, @val, @val={0x2d, 0x1a, {0x20, 0x3, 0x7, 0x0, {0x0, 0x5, 0x0, 0x80, 0x0, 0x1, 0x1}, 0x300, 0x80000000, 0x7}}}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x97b}]]}, 0x64}}, 0xe00000000000000) 1m30.628999393s ago: executing program 2 (id=298): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x64, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x40, 0x33, @assoc_resp={{{}, {}, @device_a, @device_a, @from_mac=@device_b}, 0x0, 0x3, @default, @val, @val={0x2d, 0x1a, {0x20, 0x3, 0x7, 0x0, {0x0, 0x5, 0x0, 0x80, 0x0, 0x1, 0x1}, 0x300, 0x80000000, 0x7}}}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x97b}]]}, 0x64}}, 0xe00000000000000) 1m15.095993375s ago: executing program 2 (id=298): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x64, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x40, 0x33, @assoc_resp={{{}, {}, @device_a, @device_a, @from_mac=@device_b}, 0x0, 0x3, @default, @val, @val={0x2d, 0x1a, {0x20, 0x3, 0x7, 0x0, {0x0, 0x5, 0x0, 0x80, 0x0, 0x1, 0x1}, 0x300, 0x80000000, 0x7}}}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x97b}]]}, 0x64}}, 0xe00000000000000) 1m1.347794626s ago: executing program 2 (id=298): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x64, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x40, 0x33, @assoc_resp={{{}, {}, @device_a, @device_a, @from_mac=@device_b}, 0x0, 0x3, @default, @val, @val={0x2d, 0x1a, {0x20, 0x3, 0x7, 0x0, {0x0, 0x5, 0x0, 0x80, 0x0, 0x1, 0x1}, 0x300, 0x80000000, 0x7}}}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x97b}]]}, 0x64}}, 0xe00000000000000) 54.069317175s ago: executing program 1 (id=688): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x5}, 0x8) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000b00)=[{{&(0x7f0000000100)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000280)="48a1b06b9304120b78b353499042c640f2ab51f66c794463ae6023203b0ba60f104d67fdd42a6f38895aaeff4f483db41e03507811e9217ede32643294abbfd8f25c3c248f29ba07376a7084e29ef664310d898bfeb069663d4d06403362eaed3844ff8735dcb0991da670f0b032763d640011cfe2b25120e2f7d921dfd7cb35a9c82e777cad1cf52ff9", 0x8a}, {&(0x7f0000000380)="a06194f9580b7546aa464f598436bd40134cddc75435148746863775035d431970d9da707ba175864134c51dcb6cd5d60fd69810086937671ff10e103ddc1ba22d63cfa3116542b7de60865fe42b7babe9c2f1fb45d73f40945ab57d778fdb4ae5ef6212082eaea15880c40f38be349b8b2a33943324cb3cf80f8f6b5f8e752348f034f2", 0x84}, {&(0x7f0000000140)="a1be3b2de67c732e03bd5143dc11b043ee03d2a7f93c1b4557770075ab9b04e4c51792375126e4e3abdbb5ba9dab62b6c3e60828e9b23842366a95069130e4708761ba47137538540c45465c25a166f678cb7568c2b26b2e34c94244798abdd4f4b4171ff30b01d66b00942a", 0x6c}, {&(0x7f0000000440)="571a7532eaabea29849ac08085cdd5cc448984aafc6ab4256d59047df696fffa64e0f9c9a59c00eee3d57c8a53a43beaf70b0d8a43685ade75f4396b168e4b87a46cb1e5ace0621c884b888d0832d3b24a9ed9eab26fe67291696bdcd8b3960eb53fb4188508e367f2560c9195ea6f8d2335521f29eec571fd294de6dd7305ed4755ada1ee8bf5f36363d869991980f4ea0ead508b085e5b36cb59751725371f8267541b566aac12652290c9b4eb274db1ed0f36a208dbeae13dbb73e36e00356f3093130259", 0xc6}, {&(0x7f00000005c0)="8f7aaa01350db3ac5085c9f465945071e70ff4dea7419c7775996d32fa67bec896d38638077798d26fbc2e24c8e6d3a639dad85291e08891fe64eca17aa10b511fa8b4b32d7394d8403cf3111d0f1cbe2f5a9873e209fa5c6e448be166db38", 0x5f}], 0x5}}, {{&(0x7f0000000540)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f00000006c0), 0x0, &(0x7f0000000700)=[@ip_retopts={{0xd8, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x43, 0x2, [{0x6, 0x11, "1b6956bdd1c8a4b984fb5f16bd37d0"}, {0x7, 0xe, "abd360f732caffd630be0c54"}, {0x5, 0x11, "a806a2ea58ea2084146abb89942d4c"}, {0x0, 0xd, "147b74898972bfbaf7cbc9"}]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x3c, 0x21, 0x1, 0x2, [{@rand_addr=0x64010100, 0x8000}, {@loopback, 0x480}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xb5fa}, {@local, 0x1}, {@private=0xa010102, 0x9}, {@local, 0x9}]}, @timestamp_prespec={0x44, 0xc, 0x7a, 0x3, 0x8, [{@local, 0xc3}]}, @cipso={0x86, 0x22, 0xffffffffffffffff, [{0x0, 0xc, "ddc455525328c56029a3"}, {0x1, 0x10, "579f2f454d52ac8e506a1603c38a"}]}, @ra={0x94, 0x4, 0x1}, @noop, @cipso={0x86, 0xe, 0x3, [{0x6, 0x8, "ebddf735de89"}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}], 0xf0}}, {{&(0x7f0000000800)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, &(0x7f0000000940)=[{&(0x7f0000000840)="292ba072f921762490f58e93d5188f22f5fef2ef0bc1fdc4d918b6a2e0b9e8256e365222d77f16510042a34c54cd5635f4b22b463b77e2684006dcaf3641ba8b794de35da1887ecae17a6b3487e6", 0x4e}, {&(0x7f00000008c0)="71b3798b95e082ad0a918cd9e40483699fe3182e7b68a95453c8be2945e89ef5eb1e93ae29d5cd2ff06a1f483f159152073100c1d3b8514f9d0289976aa8960ce46b034bc569e7921ebe852305f5e2bd94f50efcbe1431d6d7995f123c7ade883dc97214c73a", 0x66}], 0x2, &(0x7f0000000980)=[@ip_retopts={{0x20, 0x0, 0x7, {[@noop, @end, @rr={0x7, 0xb, 0x1b, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}, @ip_retopts={{0x4c, 0x0, 0x7, {[@cipso={0x86, 0x22, 0x2, [{0x0, 0xd, "563cbe3cce5f43efc20d80"}, {0x6, 0x9, "cf8d6e7954537e"}, {0x6, 0x6, "1e1506d9"}]}, @lsrr={0x83, 0x17, 0xf4, [@remote, @dev={0xac, 0x14, 0x14, 0x40}, @rand_addr=0x64010102, @local, @empty]}]}}}, @ip_retopts={{0xe0, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x34, 0xca, 0x3, 0x4, [{@private=0xa010102, 0x8}, {@remote, 0x10000}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0x1}, {@rand_addr=0x64010102, 0xf9}, {@remote}, {@remote, 0x3}]}, @lsrr={0x83, 0xf, 0x2f, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @rr={0x7, 0x27, 0xe5, [@local, @loopback, @multicast2, @broadcast, @rand_addr=0x64010102, @rand_addr=0x64010100, @multicast1, @remote, @remote]}, @timestamp_prespec={0x44, 0x24, 0xe6, 0x3, 0x9, [{@remote, 0x5}, {@remote, 0xa}, {@broadcast, 0x9}, {@dev={0xac, 0x14, 0x14, 0x3d}, 0x8}]}, @rr={0x7, 0x1b, 0x5, [@rand_addr=0x64010100, @empty, @private=0xa010100, @remote, @multicast2, @remote]}, @rr={0x7, 0x27, 0x7d, [@local, @private=0xa010101, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x3b}, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @empty, @local, @multicast1]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}], 0x168}}], 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000001000)={'ip6gre0\x00', &(0x7f0000000f80)={'ip6_vti0\x00', 0x0, 0x4, 0x10, 0x9, 0x3, 0x50, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, 0x8000, 0x10, 0x0, 0x81}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000017c0)={'wg1\x00'}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'veth1_vlan\x00'}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002340)=ANY=[], 0x44}}, 0x20000000) socket$packet(0x11, 0x2, 0x300) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@dev, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, @time_exceeded={0x2b, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=0xffffffff, @local}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 53.68109013s ago: executing program 1 (id=693): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0xf0, 0x1, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x17, 0x6, "07136f0fea6988823b49ae656f920bbd4983fe"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xb0, 0x6, "2eaed0eeb6cae1886b1f4ff2ad8ec19a2d25af74a4ddb84ffaa8b265d236aa32b1742b78eca58f575a4d0d2775cc45ed3cf0f0c60014ca1f413419b93e4887500fe65f45ad84ec70760214febdd9ed0c37daf5c589ef590552fc71973b8ba09510560c766142f04128c09232ee0d6202a973f7211dca42edfbf2dcc0cf780178af3022f34962e0cb18a5c73badf36ca890664cf8a2345dace59adb93e078dc726c521513a483ebec4bb90a36"}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x88) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x8a, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) accept$inet6(r2, 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f0000000100)=0x2, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0xf0, 0x1, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x17, 0x6, "07136f0fea6988823b49ae656f920bbd4983fe"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xb0, 0x6, "2eaed0eeb6cae1886b1f4ff2ad8ec19a2d25af74a4ddb84ffaa8b265d236aa32b1742b78eca58f575a4d0d2775cc45ed3cf0f0c60014ca1f413419b93e4887500fe65f45ad84ec70760214febdd9ed0c37daf5c589ef590552fc71973b8ba09510560c766142f04128c09232ee0d6202a973f7211dca42edfbf2dcc0cf780178af3022f34962e0cb18a5c73badf36ca890664cf8a2345dace59adb93e078dc726c521513a483ebec4bb90a36"}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000000}, 0x88) (async) socket$tipc(0x1e, 0x2, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x8a, 0x0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) listen(r2, 0x0) (async) accept$inet6(r2, 0x0, 0x0) (async) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f0000000100)=0x2, 0x4) (async) 53.488881888s ago: executing program 1 (id=696): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001880)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="0200000002"], 0x10) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000000)="240000001e005f80004000000000000002000000000000000000080008000100000000ff", 0x24) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001880)=ANY=[], 0x10) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) close(r5) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x13, 0x8, 0x8, 0x0, 0x8, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r7, 0x0, 0x0}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001e40)={r6, &(0x7f0000000300), 0x0}, 0x20) 53.20148259s ago: executing program 1 (id=699): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008800800030001"], 0x48}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x10, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="850000006c000000720a00ff00000000730a9fff00000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2d) pipe(&(0x7f0000000140)) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x14) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket(0x22, 0x2, 0x3) sendmmsg$inet6(r3, &(0x7f0000001380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4005) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$int_in(r4, 0x5452, &(0x7f0000000140)=0x9) ppoll(&(0x7f0000000a40)=[{r4}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40004) 52.803037997s ago: executing program 1 (id=704): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r0}, 0x38) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6f94f90224fc600e0005000a000200053582c137153e370e0c0180040010000400", 0x33fe0}], 0x1}, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r2, 0x28, 0x0, &(0x7f0000000100)=0x1ff, 0x8) 51.421332895s ago: executing program 0 (id=713): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000040)="b9", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2}, 0x1c) (async) sendto$inet6(r0, &(0x7f0000000040)="b9", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x8) (async) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x8) syz_emit_ethernet(0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd602a84350014060000000000000000000000000000000000fe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="58c200009078fc15a727e3970000"], 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x0) listen(r0, 0x100101) (async) listen(r0, 0x100101) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x1}]}}]}, 0x3c}}, 0x4) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x1}]}}]}, 0x3c}}, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) accept4(r0, 0x0, 0x0, 0x0) close(r0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r6, 0x101, 0x2, &(0x7f0000000100)=@netrom={'nr', 0x0}, 0x59) (async) setsockopt$ax25_SO_BINDTODEVICE(r6, 0x101, 0x2, &(0x7f0000000100)=@netrom={'nr', 0x0}, 0x59) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) (async) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r9 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x1c}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) (async) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r11, &(0x7f0000000200)=[{&(0x7f0000000080)='/', 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r11, 0x0) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r12, 0x84, 0x0, 0x0, &(0x7f0000000000)) (async) getsockopt$bt_hci(r12, 0x84, 0x0, 0x0, &(0x7f0000000000)) sendmsg$FOU_CMD_ADD(r7, &(0x7f0000000140)={0x0, 0x601, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="380000002b4c6b23129af9cad381ab3d721b6e200b855479dcd87e9676de916fc09cba2011026d78ca5ec106fdc1cd665ac8108149dfc6e0c96d6438ed31a7ea2c989148588ba2005240f5deb67ca6dc420fe32339cd9818b139222bf5632d", @ANYRES16=r8, @ANYBLOB="0902000000000000000001000000050002000a00000014000700ff00000000000000000000000000000108000b00", @ANYRES32=r10, @ANYBLOB], 0x38}}, 0x0) 51.153578069s ago: executing program 0 (id=715): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000001340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWCHAIN={0x1c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x201, 0x0, 0x0, {0x7}}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELRULE={0x64, 0x8, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELFLOWTABLE={0x60, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x170}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r3, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="24000300a05c"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 50.733174593s ago: executing program 0 (id=718): bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r1, r2, 0x2, 0x2, 0x0, @void, @value}, 0x10) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000180)=0xffffffffffffffff, 0x4) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000000)=0x514) listen(r3, 0x0) accept$ax25(r3, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'team0\x00'}}]}, 0x38}}, 0x0) 50.33641535s ago: executing program 0 (id=719): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x0, 0x5, 0x0, 0x1000000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000080)="05804ae0ff1f0006d758e60803dc", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socketpair(0x28, 0x1, 0xc0000, &(0x7f0000000380)={0xffffffffffffffff}) sendmsg$nl_route_sched(r2, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=@deltaction={0x14, 0x31, 0x10, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x890}, 0x24000001) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{}, &(0x7f0000000440), &(0x7f0000000480)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000100)}, 0x20) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r1, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) socket$nl_audit(0x10, 0x3, 0x9) socket$nl_audit(0x10, 0x3, 0x9) close(0x3) 50.161572654s ago: executing program 0 (id=722): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) (async) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) 49.191247655s ago: executing program 2 (id=298): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x64, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x40, 0x33, @assoc_resp={{{}, {}, @device_a, @device_a, @from_mac=@device_b}, 0x0, 0x3, @default, @val, @val={0x2d, 0x1a, {0x20, 0x3, 0x7, 0x0, {0x0, 0x5, 0x0, 0x80, 0x0, 0x1, 0x1}, 0x300, 0x80000000, 0x7}}}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x97b}]]}, 0x64}}, 0xe00000000000000) 38.993819184s ago: executing program 1 (id=704): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r0}, 0x38) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6f94f90224fc600e0005000a000200053582c137153e370e0c0180040010000400", 0x33fe0}], 0x1}, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r2, 0x28, 0x0, &(0x7f0000000100)=0x1ff, 0x8) 32.371152879s ago: executing program 0 (id=722): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) (async) socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) 30.752634499s ago: executing program 2 (id=298): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x64, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x40, 0x33, @assoc_resp={{{}, {}, @device_a, @device_a, @from_mac=@device_b}, 0x0, 0x3, @default, @val, @val={0x2d, 0x1a, {0x20, 0x3, 0x7, 0x0, {0x0, 0x5, 0x0, 0x80, 0x0, 0x1, 0x1}, 0x300, 0x80000000, 0x7}}}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x97b}]]}, 0x64}}, 0xe00000000000000) 23.173513887s ago: executing program 3 (id=841): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket(0x10, 0x3, 0x0) getpeername$inet6(r2, 0x0, &(0x7f0000000100)) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000280)={@local, @private=0xa010101, 0x1, 0x2, [@remote, @broadcast]}, 0x18) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r3 = accept4(r0, &(0x7f00000000c0)=@xdp, &(0x7f0000000040)=0x80, 0x80000) sendmsg$IPSET_CMD_HEADER(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x38, 0xc, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)={0x14, 0x3, 0x3, 0x301}, 0x14}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) socket(0x10, 0x3, 0x0) (async) getpeername$inet6(r2, 0x0, &(0x7f0000000100)) (async) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000280)={@local, @private=0xa010101, 0x1, 0x2, [@remote, @broadcast]}, 0x18) (async) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) (async) accept4(r0, &(0x7f00000000c0)=@xdp, &(0x7f0000000040)=0x80, 0x80000) (async) sendmsg$IPSET_CMD_HEADER(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x38, 0xc, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x4) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFQNL_MSG_VERDICT(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)={0x14, 0x3, 0x3, 0x301}, 0x14}}, 0x0) (async) 23.146600869s ago: executing program 3 (id=842): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x12, 0x3, 0x0, 0x0) (async) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x12, 0x3, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000001740)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0xfe}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000040)="17", 0x1}], 0x1}}], 0x1, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="200000001a14010000000000000000000800030000000000080003"], 0x20}}, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f00000000c0)='cgroup.max.depth\x00', 0x2, 0x0) openat$cgroup_devices(r3, &(0x7f00000000c0)='devices.allow\x00', 0x2, 0x0) (async) openat$cgroup_devices(r3, &(0x7f00000000c0)='devices.allow\x00', 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x8001, @local, 0x6}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000180)="f0017bb84576ab", 0x7}], 0x1}}, {{&(0x7f00000005c0)={0xa, 0x4e23, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c, &(0x7f0000000980)=[{&(0x7f00000007c0)="921db444", 0x4}], 0x1}}], 0x2, 0x0) (async) sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x8001, @local, 0x6}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000180)="f0017bb84576ab", 0x7}], 0x1}}, {{&(0x7f00000005c0)={0xa, 0x4e23, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c, &(0x7f0000000980)=[{&(0x7f00000007c0)="921db444", 0x4}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) 22.697210331s ago: executing program 3 (id=844): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x4000000, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000080)) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) bind$tipc(r2, &(0x7f0000000240)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) bind$tipc(r0, 0x0, 0x0) 22.586549889s ago: executing program 3 (id=846): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xdc, r1, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xd}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x916e}, @NL80211_ATTR_DURATION={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x80000000}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xc2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x369}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x4}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xe}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1a}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x113}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x33}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xbd30}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}]}, 0xdc}, 0x1, 0x0, 0x0, 0x48804}, 0x80805) 21.862153402s ago: executing program 3 (id=847): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r1, 0x8, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r2}, 0x10) r3 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r3, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x4f80000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r6, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r5, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001080)=@newtfilter={0x2c0, 0x2c, 0x100, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x6, 0xa}, {0xfff1, 0x6}, {0xf, 0x4}}, [@filter_kind_options=@f_matchall={{0xd}, {0x24, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x7}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff3, 0xfff3}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}, @filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff2, 0x5}}]}}, @filter_kind_options=@f_route={{0xa}, {0x230, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x1e}, @TCA_ROUTE4_ACT={0xfffffffffffffef3, 0x6, [@m_bpf={0x13c, 0xb, 0x0, 0x0, {{0x8}, {0xe8, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS={0x2c, 0x4, [{0x0, 0x5, 0x7, 0x4}, {0x1, 0x0, 0x7, 0x4d0}, {0xff, 0x6c, 0xfe, 0x7}, {0x5, 0xb7, 0x1, 0x3}, {0x9, 0x4}]}, @TCA_ACT_BPF_NAME={0x0, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS={0x1c, 0x4, [{0x35, 0x5, 0x8, 0xe9}, {0x40, 0xff, 0xd7, 0x9}, {0x0, 0x1, 0x2, 0x5}]}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_OPS={0x24, 0x4, [{0x8, 0xee, 0x6, 0xffffffff}, {0x2, 0xff, 0x7, 0x66}, {0x5, 0x1, 0x9, 0x9}, {0x7, 0x7, 0x3, 0x5}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xfaf2, 0x7ff, 0x3, 0x5, 0x7fff}}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0xa2, 0x6, 0xc, 0x10001}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xff, 0x9, 0x7, 0x1, 0xd}}]}, {0x2d, 0x6, "8a75acbb166b210ae1e46020d4be903fda9eeb3fb2fdcb0a040c5a502575626c318b0ce4b8f5406ff5"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_skbedit={0xe4, 0x2, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x7, 0x3}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x6}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x3}]}, {0x9f, 0x6, "ff7cffae43173be16fde18cc3ed895453cacfd8a93e5983c19f5eb915fd32b62fc7e246bceb373daa318b409bb70243b96444229c6f73489c81034970cb1a3e94ae67aca359d9556030309f67dc8cd0c7b987c3b6041a0b460de7ed5f78236c900aa9dd0ef3352a4300145dc5c4962cdd048002f9046f1fc144b1828af96f6a803e06abc4e50d18e05f926cb0fcb484e28c0bf8ec7cca8af6e9384"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x6, 0x5, {0x6, 0x99}}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x20004000}, 0x24008887) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000600000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000054fe0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r8, &(0x7f0000000000)={{0x6, @default}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x1, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) close(r8) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0xb80, 0x1c0, 0x111, 0x4b4, 0x9, 0xd4feffff, 0xab0, 0x20a, 0x278, 0xab0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x7a, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @common=@unspec=@string={{0xc0}, {0x2, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587"}}]}, @common=@unspec=@AUDIT={0x28}}, {{@ipv6={@loopback, @private1, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0x888, 0x8f0, 0x0, {}, [@common=@unspec=@u32={{0x7e0}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xbe0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r11) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000000400)={'wpan0\x00'}) 20.343103754s ago: executing program 4 (id=850): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_proto_private(r2, 0x89e9, 0x0) r3 = socket(0xa, 0x800, 0xa) syz_emit_ethernet(0x5e, &(0x7f0000003680)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @mcast2, @mcast2={0xe}}}}}}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x403, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0xba01}, 0x810) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r3, @ANYBLOB="60003080050002000000000014000400403a0700000000000000b6d713459a7a1c000180050002000000000008000400050200000000000000000000240003007c9436238c99f1af45c2cd395050a2b31929f858239000"/96], 0x7c}}, 0x0) 18.805333738s ago: executing program 4 (id=851): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f00000005c0)={0x9, {{0xa, 0x4e23, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3, 0x0, 0x0, 0x51792e7248df3904}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}, @IFLA_GENEVE_COLLECT_METADATA={0x4, 0xe}]}}}]}, 0x40}}, 0x0) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r2, 0x0, 0xff, 0x39, &(0x7f0000000140)="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", &(0x7f0000000240)=""/57, 0xa, 0x0, 0x72, 0x7a, &(0x7f0000000280)="9500e4d463b769179eba23628493114742126c110c679d7249b22a2a8eb09a0031acdcc2d69c112e9c410ecec32ec176561a4c62978b99400b744f4b11226d25f070e8eb67782112b43b6e1eab8383a815fada397fa68369a9421b1cca0da01e4083922f5f50320b54b6d2887756bf2ae5f6", &(0x7f0000000300)="75561d4f8d4e154869b9f1bd606bb3e116b47a27e1251eb7afae6126ac685e98d1400171b6b82e4d86d6046aeff8749f4b53542f1cce9b827cd6b55b5e9ff07b5299d054f4c4e57e4c9bde6164545d48305a610e9a2eb73f8fbe44ad1752acdd8bd56f12e067463ac77e1f7531478f0b7f59ee95d32bbe286910", 0x1, 0x0, 0x3}, 0x50) 18.202535169s ago: executing program 4 (id=852): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x891c, &(0x7f0000000140)={@mcast2}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x503, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6230}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x444c}}}}}}, @IFLA_GROUP={0x8, 0x1b, 0x55690764}]}, 0x50}}, 0x0) 17.427024315s ago: executing program 4 (id=853): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000003000000080001800400028014000280080001"], 0x30}}, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/ipc\x00') r2 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_buf(r2, 0x29, 0x33, 0x0, &(0x7f00000001c0)) ioctl$F2FS_IOC_GET_PIN_FILE(r1, 0x8004f50e, &(0x7f00000000c0)) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@link_local, @local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @dev={0xac, 0x14, 0x14, 0xff}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x19, 0x8000]}, {}, {}, {0x8, 0x88be, 0x2}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x0, 0x2}}}}}}}}, 0x0) sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002b000100000000000000001806"], 0x114}], 0x1}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000003000000080001800400028014000280080001"], 0x30}}, 0x0) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/ipc\x00') (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) getsockopt$inet6_buf(r2, 0x29, 0x33, 0x0, &(0x7f00000001c0)) (async) ioctl$F2FS_IOC_GET_PIN_FILE(r1, 0x8004f50e, &(0x7f00000000c0)) (async) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@link_local, @local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @dev={0xac, 0x14, 0x14, 0xff}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x0, [0x19, 0x8000]}, {}, {}, {0x8, 0x88be, 0x2}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x0, 0x2}}}}}}}}, 0x0) (async) sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002b000100000000000000001806"], 0x114}], 0x1}, 0x0) (async) 16.790765694s ago: executing program 4 (id=854): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x19a8a37cb12e9c3f, 0x2, 0x40000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000000b00010000000000c008000000000000761c28d720f231e02b62", @ANYRES32=r2, @ANYBLOB="00000000031201001c0012800b00010062726964676500000c00028005002b000b000000"], 0x3c}}, 0x48000) 16.496662035s ago: executing program 4 (id=855): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'ip6gre0\x00', {0x2, 0x0, @loopback=0x7f000000}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0x68000000}, 0x0) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x0, @remote}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x8880) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYRES8=r0, @ANYRESDEC=r1], 0x32600) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$SO_BINDTODEVICE(r4, 0x88, 0x65, 0x0, 0x20000000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000040)={&(0x7f0000000100)={0x4c, r7, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0x5}]}]}, 0x4c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kfree\x00', r5}, 0x18) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020300000b"], 0x58}, 0x1, 0x7}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca90000000000003509020000d44affe5000d0000000000b702000000000000739af0ff00000000c509040004100000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007060000f0ffffffb70200000800000018220000", @ANYRES64=0x0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r10, 0x84, 0x82, 0x0, &(0x7f0000000480)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xd, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000080000000000000000000000180100002020702500000000002020207b1af8ff00000000bda004000000000027000000f8ffffffb702000008000000b7030000000000002500f8ff0600000095"], &(0x7f0000000280)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 16.188504256s ago: executing program 3 (id=856): syz_emit_ethernet(0x5e, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x28, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, {[@mss={0x2, 0xdf7318aff5e8b9f7}, @mptcp=@add_addr={0x1e, 0xd, 0x0, 0xd, 0x5, @private=0xa010101, 0x7, "966961"}, @sack_perm={0x4, 0x2}]}}, {"2c4de63dae12115e7af3"}}}}}}}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000540)={'filter\x00', 0x104, 0x4, 0x4d8, 0x208, 0x208, 0x108, 0x3f0, 0x3f0, 0x3f0, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'veth1_vlan\x00'}, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:auditd_unit_file_t:s0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x528) r1 = socket(0x200000000000011, 0x2, 0x0) r2 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x17, 0x0, 0x0, @multicast1}}}}}, 0x0) sendmsg(r2, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x11000000}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e000100"/20, @ANYRES32=r7, @ANYRES16], 0x1c}}, 0x0) bind$packet(r1, &(0x7f0000000180)={0x11, 0xc, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) r8 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(r1, 0x0, &(0x7f0000000200)) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r8}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 1.337343714s ago: executing program 32 (id=855): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'ip6gre0\x00', {0x2, 0x0, @loopback=0x7f000000}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0x68000000}, 0x0) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x0, @remote}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x8880) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYRES8=r0, @ANYRESDEC=r1], 0x32600) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$SO_BINDTODEVICE(r4, 0x88, 0x65, 0x0, 0x20000000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f00000000c0)={0x0, 0xa, &(0x7f0000000040)={&(0x7f0000000100)={0x4c, r7, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0x5}]}]}, 0x4c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kfree\x00', r5}, 0x18) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020300000b"], 0x58}, 0x1, 0x7}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca90000000000003509020000d44affe5000d0000000000b702000000000000739af0ff00000000c509040004100000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007060000f0ffffffb70200000800000018220000", @ANYRES64=0x0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(r10, 0x84, 0x82, 0x0, &(0x7f0000000480)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xd, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000080000000000000000000000180100002020702500000000002020207b1af8ff00000000bda004000000000027000000f8ffffffb702000008000000b7030000000000002500f8ff0600000095"], &(0x7f0000000280)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 0s ago: executing program 33 (id=856): syz_emit_ethernet(0x5e, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x28, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, {[@mss={0x2, 0xdf7318aff5e8b9f7}, @mptcp=@add_addr={0x1e, 0xd, 0x0, 0xd, 0x5, @private=0xa010101, 0x7, "966961"}, @sack_perm={0x4, 0x2}]}}, {"2c4de63dae12115e7af3"}}}}}}}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000540)={'filter\x00', 0x104, 0x4, 0x4d8, 0x208, 0x208, 0x108, 0x3f0, 0x3f0, 0x3f0, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'veth1_vlan\x00'}, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:auditd_unit_file_t:s0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x528) r1 = socket(0x200000000000011, 0x2, 0x0) r2 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x17, 0x0, 0x0, @multicast1}}}}}, 0x0) sendmsg(r2, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x11000000}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e000100"/20, @ANYRES32=r7, @ANYRES16], 0x1c}}, 0x0) bind$packet(r1, &(0x7f0000000180)={0x11, 0xc, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) r8 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(r1, 0x0, &(0x7f0000000200)) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r8}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) kernel console output (not intermixed with test programs): leftover after parsing attributes in process `syz.4.70'. [ 85.996614][ T6166] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.73'. [ 86.035139][ T6168] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 86.690711][ T6202] netlink: 12 bytes leftover after parsing attributes in process `syz.0.83'. [ 86.757795][ T6204] netlink: 'syz.1.82': attribute type 1 has an invalid length. [ 86.934869][ T6217] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 86.948242][ T6217] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 86.957624][ T6217] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 86.976355][ T6217] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 87.014887][ T6217] geneve2: entered promiscuous mode [ 87.020322][ T6217] geneve2: entered allmulticast mode [ 87.074579][ T6226] batadv0: entered promiscuous mode [ 87.122739][ T6232] netlink: 144 bytes leftover after parsing attributes in process `syz.3.90'. [ 87.153939][ T970] cfg80211: failed to load regulatory.db [ 87.182963][ T6226] batadv0: left promiscuous mode [ 87.191338][ T6232] Bluetooth: MGMT ver 1.23 [ 87.302060][ T6243] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 87.312933][ T6245] netlink: 20 bytes leftover after parsing attributes in process `syz.3.90'. [ 87.402586][ T6248] xt_CONNSECMARK: invalid mode: 0 [ 87.609714][ T6257] bridge0: port 3(vlan2) entered blocking state [ 87.619334][ T6257] bridge0: port 3(vlan2) entered disabled state [ 87.630139][ T6257] vlan2: entered allmulticast mode [ 87.662994][ T6257] vlan2: left allmulticast mode [ 87.718854][ T6263] smc: net device bridge_slave_1 applied user defined pnetid SYZ0 [ 87.753055][ T6265] netlink: 892 bytes leftover after parsing attributes in process `syz.1.100'. [ 87.826797][ T6270] netlink: 12 bytes leftover after parsing attributes in process `syz.2.101'. [ 87.862211][ T5857] Bluetooth: hci3: command 0x0405 tx timeout [ 87.881098][ T6270] netlink: 12 bytes leftover after parsing attributes in process `syz.2.101'. [ 87.890569][ T6273] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 87.937238][ T6273] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 88.022968][ T6278] IPVS: set_ctl: invalid protocol: 60 172.20.20.50:20004 [ 88.156412][ T6285] netlink: 'syz.1.103': attribute type 1 has an invalid length. [ 88.173838][ T6285] netlink: 'syz.1.103': attribute type 8 has an invalid length. [ 88.373705][ T6293] bridge0: port 3(vlan2) entered blocking state [ 88.381939][ T6293] bridge0: port 3(vlan2) entered disabled state [ 88.388447][ T6293] vlan2: entered allmulticast mode [ 88.416926][ T6293] vlan2: left allmulticast mode [ 88.535302][ T6294] bridge0: port 3(vlan2) entered blocking state [ 88.542297][ T6294] bridge0: port 3(vlan2) entered disabled state [ 88.555978][ T6294] vlan2: entered allmulticast mode [ 88.565453][ T6294] vlan2: left allmulticast mode [ 88.963139][ T6317] bridge0: port 3(vlan2) entered blocking state [ 88.969531][ T6317] bridge0: port 3(vlan2) entered disabled state [ 88.987377][ T6317] vlan2: entered allmulticast mode [ 89.010728][ T6317] vlan2: left allmulticast mode [ 89.087605][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 89.440345][ T6341] openvswitch: netlink: Missing valid actions attribute. [ 89.440976][ T6329] pim6reg1: entered promiscuous mode [ 89.462043][ T6341] openvswitch: netlink: Actions may not be safe on all matching packets [ 89.479169][ T6329] pim6reg1: entered allmulticast mode [ 89.507454][ T6329] netlink: 'syz.3.117': attribute type 10 has an invalid length. [ 89.543863][ T6329] team0: Port device netdevsim0 added [ 89.907603][ T6359] bridge0: port 3(vlan2) entered blocking state [ 89.914143][ T6359] bridge0: port 3(vlan2) entered disabled state [ 89.920636][ T6359] vlan2: entered allmulticast mode [ 89.943328][ T6356] netlink: 'syz.2.128': attribute type 1 has an invalid length. [ 89.962024][ T6356] netlink: 'syz.2.128': attribute type 1 has an invalid length. [ 89.969967][ T6356] netlink: 'syz.2.128': attribute type 2 has an invalid length. [ 89.973131][ T6359] vlan2: left allmulticast mode [ 90.160705][ T6373] tipc: Started in network mode [ 90.186696][ T6373] tipc: Node identity 002e0000000000000000000000000001, cluster identity 4711 [ 90.241917][ T6373] tipc: Enabling of bearer rejected, failed to enable media [ 90.347695][ T6379] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 90.357866][ T5857] Bluetooth: hci3: command 0x0405 tx timeout [ 90.714094][ T6398] sit0: entered promiscuous mode [ 90.746874][ T6398] netlink: 'syz.4.141': attribute type 1 has an invalid length. [ 91.165630][ T6416] bridge0: port 3(vlan2) entered blocking state [ 91.202413][ T6416] bridge0: port 3(vlan2) entered disabled state [ 91.212977][ T6416] vlan2: entered allmulticast mode [ 91.250337][ T6416] vlan2: left allmulticast mode [ 91.294322][ T6426] __nla_validate_parse: 45 callbacks suppressed [ 91.294344][ T6426] netlink: 8 bytes leftover after parsing attributes in process `syz.4.149'. [ 91.320823][ T6424] netlink: 'syz.2.148': attribute type 10 has an invalid length. [ 91.362565][ T6424] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.372249][ T6424] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.398586][ T6424] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.406094][ T6424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.414393][ T6424] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.422365][ T6424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.429585][ T6432] netlink: 868 bytes leftover after parsing attributes in process `syz.0.152'. [ 91.443039][ T6424] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 91.457864][ T6424] syz.2.148 (6424) used greatest stack depth: 17888 bytes left [ 91.736827][ T6439] syzkaller0: entered allmulticast mode [ 91.803668][ T6439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.822840][ T6444] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.157'. [ 91.833142][ T6439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.854992][ T6439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.870527][ T6439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.911849][ T6439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.928961][ T6439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.939512][ T6439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.957020][ T6439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.967472][ T6439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.978776][ T6439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.062105][ T6458] netlink: 8 bytes leftover after parsing attributes in process `syz.4.158'. [ 92.329200][ T6471] netlink: 64 bytes leftover after parsing attributes in process `syz.1.162'. [ 92.340939][ T6467] netlink: 868 bytes leftover after parsing attributes in process `syz.4.164'. [ 92.422151][ T54] Bluetooth: hci3: command 0x0405 tx timeout [ 92.433408][ T6474] bridge0: port 3(vlan2) entered blocking state [ 92.448348][ T6474] bridge0: port 3(vlan2) entered disabled state [ 92.463427][ T6474] vlan2: entered allmulticast mode [ 92.497641][ T6474] vlan2: left allmulticast mode [ 92.509255][ T6477] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-xor(2) [ 92.702472][ T6489] netlink: 'syz.2.171': attribute type 2 has an invalid length. [ 93.264143][ T6511] netlink: 4 bytes leftover after parsing attributes in process `syz.3.179'. [ 93.607166][ T6525] netlink: 11 bytes leftover after parsing attributes in process `syz.1.182'. [ 93.632116][ T6525] netlink: 11 bytes leftover after parsing attributes in process `syz.1.182'. [ 93.659057][ T6523] netlink: 4 bytes leftover after parsing attributes in process `syz.2.185'. [ 93.713879][ T6523] dummy0: entered promiscuous mode [ 93.719522][ T6523] macvtap1: entered promiscuous mode [ 93.763525][ T6523] macvtap1: entered allmulticast mode [ 93.768998][ T6523] dummy0: entered allmulticast mode [ 93.792403][ T6530] dummy0: left allmulticast mode [ 93.809950][ T6530] dummy0: left promiscuous mode [ 93.833420][ T29] audit: type=1107 audit(1732113450.463:2): pid=6532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='jüá~—@`_R¨…ËW„lƒ1íæ¤{·l¯üÓ³"$Ë¿ #ã{€¬ˆ¿–ˆ&;ûêä­Œ²çÌ騱x˜‹Ä]ÏŒ„“KMí}朿‚åÑL~‚R5Æ,ëÍÝâd‰Aš&-f‚‚ NÎN5ýÛEOcE³jžwAzo|;mFŠ²¯êõ/\Þ=Ã`G³™$‡þ¿Qó_QÙ=*vÍײ4×6bØAº$žc‹OZa¢¾o•íÜU' [ 93.942065][ T6540] x_tables: duplicate underflow at hook 1 [ 94.345145][ T6559] netlink: 'syz.0.197': attribute type 5 has an invalid length. [ 94.786135][ T6581] xt_ecn: cannot match TCP bits for non-tcp packets [ 95.756113][ T6618] netlink: 'syz.4.216': attribute type 21 has an invalid length. [ 95.756563][ T6621] netlink: 'syz.0.217': attribute type 11 has an invalid length. [ 96.311145][ T6641] __nla_validate_parse: 7 callbacks suppressed [ 96.311166][ T6641] netlink: 16 bytes leftover after parsing attributes in process `syz.2.224'. [ 96.341435][ T6640] netlink: 12 bytes leftover after parsing attributes in process `syz.4.223'. [ 96.360090][ T6640] netlink: 'syz.4.223': attribute type 3 has an invalid length. [ 97.000122][ T6651] syz.1.226 (6651) used greatest stack depth: 16848 bytes left [ 97.259177][ T6681] netlink: 'syz.1.233': attribute type 4 has an invalid length. [ 97.267134][ T6681] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.233'. [ 97.336850][ T6684] netlink: 8 bytes leftover after parsing attributes in process `syz.4.232'. [ 97.369818][ T6687] netlink: 256 bytes leftover after parsing attributes in process `syz.1.235'. [ 97.535721][ T6694] netlink: 'syz.3.236': attribute type 33 has an invalid length. [ 97.545762][ T6694] netlink: 152 bytes leftover after parsing attributes in process `syz.3.236'. [ 97.927584][ T6715] netlink: 8 bytes leftover after parsing attributes in process `syz.4.242'. [ 97.964328][ T6714] netlink: 'syz.2.245': attribute type 3 has an invalid length. [ 97.974314][ T6715] netlink: 8 bytes leftover after parsing attributes in process `syz.4.242'. [ 97.985261][ T6714] netlink: 766 bytes leftover after parsing attributes in process `syz.2.245'. [ 98.176287][ T6721] vlan2: entered promiscuous mode [ 98.182804][ T6721] vlan2: entered allmulticast mode [ 98.188102][ T6721] hsr_slave_1: entered allmulticast mode [ 98.243364][ T6732] netlink: 80 bytes leftover after parsing attributes in process `syz.3.249'. [ 98.713236][ T6748] syz.0.256 uses obsolete (PF_INET,SOCK_PACKET) [ 99.791037][ T6773] sctp: [Deprecated]: syz.4.262 (pid 6773) Use of int in maxseg socket option. [ 99.791037][ T6773] Use struct sctp_assoc_value instead [ 99.879981][ T6778] netem: change failed [ 99.917647][ T6778] netlink: 'syz.2.265': attribute type 8 has an invalid length. [ 99.933146][ T6779] netlink: 'syz.1.264': attribute type 1 has an invalid length. [ 99.955084][ T6779] netlink: 'syz.1.264': attribute type 1 has an invalid length. [ 100.411587][ T6791] bond0: entered promiscuous mode [ 100.431844][ T6791] bond_slave_0: entered promiscuous mode [ 100.450364][ T6791] bond_slave_1: entered promiscuous mode [ 100.576393][ T6798] netlink: 'syz.0.272': attribute type 9 has an invalid length. [ 101.013253][ T6824] netlink: 'syz.1.281': attribute type 2 has an invalid length. [ 101.458923][ T6845] netlink: 'syz.3.289': attribute type 9 has an invalid length. [ 101.469207][ T6845] __nla_validate_parse: 13 callbacks suppressed [ 101.469228][ T6845] netlink: 129368 bytes leftover after parsing attributes in process `syz.3.289'. [ 101.649238][ T6848] netlink: 5300 bytes leftover after parsing attributes in process `syz.0.290'. [ 101.746382][ T6848] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 101.884940][ T6854] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 101.966297][ T6860] xfrm1: entered allmulticast mode [ 101.978714][ T6866] netlink: 40 bytes leftover after parsing attributes in process `syz.1.295'. [ 102.009566][ T6866] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.124144][ T6869] netlink: 8 bytes leftover after parsing attributes in process `syz.1.295'. [ 102.137341][ T6872] netlink: 148 bytes leftover after parsing attributes in process `syz.0.296'. [ 102.170801][ T6871] netlink: 148 bytes leftover after parsing attributes in process `syz.0.296'. [ 102.198868][ T6866] bridge_slave_0 (unregistering): left allmulticast mode [ 102.215616][ T6875] netlink: 4 bytes leftover after parsing attributes in process `syz.4.297'. [ 102.233636][ T6866] bridge_slave_0 (unregistering): left promiscuous mode [ 102.252700][ T6866] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.328695][ C0] Unknown status report in ack skb [ 102.508461][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.590165][ T6866] netlink: 8 bytes leftover after parsing attributes in process `syz.1.295'. [ 102.616168][ T6890] netlink: 20 bytes leftover after parsing attributes in process `syz.3.301'. [ 102.627424][ T6866] syz_tun: entered promiscuous mode [ 102.661528][ T6868] netlink: 12 bytes leftover after parsing attributes in process `syz.1.295'. [ 102.711442][ T6868] tc_dump_action: action bad kind [ 102.921470][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.264296][ T5857] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 103.295392][ T5857] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 103.309218][ T5857] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 103.322353][ T5857] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 103.330355][ T5857] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 103.338427][ T5857] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 103.559166][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.621045][ T6915] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.636655][ T6915] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.652456][ T6915] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.660347][ T6915] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.855630][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.014437][ T6926] xt_CT: No such helper "netbios-ns" [ 104.056401][ T6928] geneve2: entered promiscuous mode [ 104.073772][ T6928] geneve2: entered allmulticast mode [ 104.373236][ T35] bridge_slave_1: left allmulticast mode [ 104.394865][ T35] bridge_slave_1: left promiscuous mode [ 104.433848][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.463670][ T35] bridge_slave_0: left allmulticast mode [ 104.469418][ T35] bridge_slave_0: left promiscuous mode [ 104.476586][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.879672][ T35] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 105.099139][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.114091][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.126018][ T35] bond0 (unregistering): Released all slaves [ 105.314494][ T35] tipc: Left network mode [ 105.325053][ T6912] chnl_net:caif_netlink_parms(): no params data found [ 105.382736][ T5857] Bluetooth: hci0: command tx timeout [ 105.907478][ T6979] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.400211][ T6912] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.414934][ T6912] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.423994][ T6912] bridge_slave_0: entered allmulticast mode [ 106.435085][ T6912] bridge_slave_0: entered promiscuous mode [ 106.444172][ T6912] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.454879][ T6912] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.462966][ T6912] bridge_slave_1: entered allmulticast mode [ 106.470424][ T6912] bridge_slave_1: entered promiscuous mode [ 106.509445][ T7025] __nla_validate_parse: 10 callbacks suppressed [ 106.509461][ T7025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.336'. [ 106.696126][ T6912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.057130][ T35] hsr_slave_0: left promiscuous mode [ 107.105703][ T35] hsr_slave_1: left promiscuous mode [ 107.148672][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.164768][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.180197][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.189523][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.246994][ T35] veth1_macvtap: left promiscuous mode [ 107.257042][ T35] veth0_macvtap: left promiscuous mode [ 107.264106][ T35] veth1_vlan: left promiscuous mode [ 107.276088][ T35] veth0_vlan: left promiscuous mode [ 107.464577][ T5857] Bluetooth: hci0: command tx timeout [ 107.536807][ T7049] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 107.733106][ T7053] netlink: 12 bytes leftover after parsing attributes in process `syz.0.345'. [ 107.744248][ T7053] netlink: 256 bytes leftover after parsing attributes in process `syz.0.345'. [ 107.883708][ T35] team0 (unregistering): Port device team_slave_1 removed [ 107.924835][ T35] team0 (unregistering): Port device team_slave_0 removed [ 108.328349][ T6912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.459785][ T6912] team0: Port device team_slave_0 added [ 108.491410][ T7057] vcan0 speed is unknown, defaulting to 1000 [ 108.498007][ T6912] team0: Port device team_slave_1 added [ 108.638839][ T7057] vcan0 speed is unknown, defaulting to 1000 [ 108.640105][ T6912] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.652375][ T7063] netlink: 8 bytes leftover after parsing attributes in process `syz.4.348'. [ 108.677905][ T6912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.726993][ T6912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.739522][ T7062] netlink: 28 bytes leftover after parsing attributes in process `syz.3.347'. [ 108.757459][ T7062] netlink: 28 bytes leftover after parsing attributes in process `syz.3.347'. [ 108.770672][ T7062] erspan0: entered promiscuous mode [ 108.792543][ T7062] batadv_slave_1: entered promiscuous mode [ 108.801117][ T7057] vcan0 speed is unknown, defaulting to 1000 [ 108.823423][ T6912] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.830437][ T6912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.926722][ T6912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.188521][ T7057] infiniband syz1: set active [ 109.205862][ T7057] infiniband syz1: added vcan0 [ 109.324747][ T7057] RDS/IB: syz1: added [ 109.329421][ T7057] smc: adding ib device syz1 with port count 1 [ 109.374470][ T7057] smc: ib device syz1 port 1 has pnetid [ 109.545777][ T5857] Bluetooth: hci0: command tx timeout [ 109.576924][ T7074] netlink: 20 bytes leftover after parsing attributes in process `syz.0.350'. [ 109.608689][ T5899] vcan0 speed is unknown, defaulting to 1000 [ 109.785454][ T6912] hsr_slave_0: entered promiscuous mode [ 109.819316][ T6912] hsr_slave_1: entered promiscuous mode [ 109.841928][ T6912] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 109.860463][ T6912] Cannot create hsr debugfs directory [ 109.910922][ T970] vcan0 speed is unknown, defaulting to 1000 [ 109.966188][ T7057] vcan0 speed is unknown, defaulting to 1000 [ 109.975435][ T7098] sctp: [Deprecated]: syz.3.355 (pid 7098) Use of int in max_burst socket option. [ 109.975435][ T7098] Use struct sctp_assoc_value instead [ 110.018154][ T7098] netlink: 176 bytes leftover after parsing attributes in process `syz.3.355'. [ 110.066406][ T35] IPVS: stop unused estimator thread 0... [ 110.193042][ T7101] netlink: 88 bytes leftover after parsing attributes in process `syz.0.356'. [ 110.314566][ T7103] Cannot find del_set index 3 as target [ 110.578311][ T7057] vcan0 speed is unknown, defaulting to 1000 [ 110.630219][ T7125] netlink: 24 bytes leftover after parsing attributes in process `syz.3.361'. [ 110.643306][ T7125] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 110.905828][ T7133] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 110.958083][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.006924][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.078502][ T7057] vcan0 speed is unknown, defaulting to 1000 [ 111.185236][ T6912] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 111.253358][ T6912] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 111.284285][ T6912] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 111.337419][ T6912] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 111.459927][ T7057] vcan0 speed is unknown, defaulting to 1000 [ 111.600248][ T6912] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.621896][ T5857] Bluetooth: hci0: command tx timeout [ 111.674915][ T6912] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.722776][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.730038][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.770283][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.777531][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.875380][ T7057] vcan0 speed is unknown, defaulting to 1000 [ 112.090905][ T7169] __nla_validate_parse: 1 callbacks suppressed [ 112.090928][ T7169] netlink: 8 bytes leftover after parsing attributes in process `syz.0.371'. [ 112.204293][ T7169] batadv_slave_1: entered promiscuous mode [ 112.236540][ T7168] batadv_slave_1: left promiscuous mode [ 112.378274][ T6912] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.403454][ T7180] netlink: 24 bytes leftover after parsing attributes in process `syz.3.373'. [ 112.500218][ T7191] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 112.666596][ T6912] veth0_vlan: entered promiscuous mode [ 112.755393][ T6912] veth1_vlan: entered promiscuous mode [ 112.861109][ T7210] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 113.036166][ T6912] veth0_macvtap: entered promiscuous mode [ 113.100619][ T6912] veth1_macvtap: entered promiscuous mode [ 113.183136][ T6912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.201374][ T6912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.214691][ T6912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.258254][ T6912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.298784][ T6912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 113.322063][ T6912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.336665][ T6912] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.466155][ T6912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.482193][ T6912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.492217][ T6912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.549392][ T6912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.579679][ T6912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.616619][ T6912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.648362][ T6912] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.696344][ T7229] sit0: entered promiscuous mode [ 113.725049][ T7229] netlink: 'syz.0.385': attribute type 1 has an invalid length. [ 113.740133][ T7229] netlink: 1 bytes leftover after parsing attributes in process `syz.0.385'. [ 113.748498][ T7227] netlink: 4088 bytes leftover after parsing attributes in process `syz.1.384'. [ 113.759642][ T6912] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.771941][ T7227] openvswitch: netlink: Actions may not be safe on all matching packets [ 113.789322][ T7229] netlink: 211388 bytes leftover after parsing attributes in process `syz.0.385'. [ 113.798923][ T6912] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.831964][ T6912] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.861152][ T6912] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.884669][ T7235] netlink: 'syz.0.385': attribute type 2 has an invalid length. [ 113.910511][ T7236] bridge_slave_1: default FDB implementation only supports local addresses [ 114.219443][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.258264][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.318640][ T7259] ipip0: entered promiscuous mode [ 114.347977][ T7255] netlink: 'syz.4.390': attribute type 1 has an invalid length. [ 114.364902][ T3435] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.380603][ T7255] netlink: 9324 bytes leftover after parsing attributes in process `syz.4.390'. [ 114.393194][ T3435] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.450083][ T7255] netlink: 'syz.4.390': attribute type 1 has an invalid length. [ 114.478998][ T7255] netlink: 16 bytes leftover after parsing attributes in process `syz.4.390'. [ 114.514912][ T7253] netlink: 'syz.1.391': attribute type 3 has an invalid length. [ 114.542047][ T7253] netlink: 'syz.1.391': attribute type 3 has an invalid length. [ 114.656655][ T7274] netlink: 4 bytes leftover after parsing attributes in process `syz.3.394'. [ 114.693341][ T7272] netlink: 56 bytes leftover after parsing attributes in process `syz.3.394'. [ 114.810206][ T7272] netlink: 'syz.3.394': attribute type 1 has an invalid length. [ 114.857189][ T7272] netlink: 32 bytes leftover after parsing attributes in process `syz.3.394'. [ 115.330853][ T52] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.523087][ T52] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.869652][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 115.886615][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 115.898808][ T52] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.917485][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 115.961639][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 115.972057][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 115.979441][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 116.098905][ T52] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.190257][ T7336] tipc: Started in network mode [ 116.205815][ T7336] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 116.251217][ T7336] tipc: Enabled bearer , priority 10 [ 116.282809][ T7325] vcan0 speed is unknown, defaulting to 1000 [ 116.349212][ T7346] syz_tun: entered promiscuous mode [ 116.436569][ T7346] syz_tun: left promiscuous mode [ 116.575095][ T7345] netlink: 'syz.4.410': attribute type 8 has an invalid length. [ 116.905249][ T7365] RDS: rds_bind could not find a transport for a00::ff07:0:0:0, load rds_tcp or rds_rdma? [ 117.245002][ T7325] chnl_net:caif_netlink_parms(): no params data found [ 117.363377][ T5949] tipc: Node number set to 10136234 [ 117.383888][ T7374] __nla_validate_parse: 4 callbacks suppressed [ 117.383910][ T7374] netlink: 12 bytes leftover after parsing attributes in process `syz.0.417'. [ 117.550301][ T52] bridge_slave_1: left allmulticast mode [ 117.562174][ T52] bridge_slave_1: left promiscuous mode [ 117.570661][ T7386] trusted_key: syz.4.421 sent an empty control message without MSG_MORE. [ 117.573957][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.597390][ T52] bridge_slave_0: left allmulticast mode [ 117.603262][ T52] bridge_slave_0: left promiscuous mode [ 117.609789][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.884880][ T7409] IPVS: set_ctl: invalid protocol: 29 255.255.255.255:20000 [ 118.022130][ T5857] Bluetooth: hci0: command tx timeout [ 118.133897][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 118.146999][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 118.160066][ T52] bond0 (unregistering): Released all slaves [ 118.272540][ T7325] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.279991][ T7325] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.298878][ T7325] bridge_slave_0: entered allmulticast mode [ 118.319729][ T7325] bridge_slave_0: entered promiscuous mode [ 118.351922][ T7325] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.364835][ T7325] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.389839][ T7325] bridge_slave_1: entered allmulticast mode [ 118.411192][ T7325] bridge_slave_1: entered promiscuous mode [ 118.473790][ T7419] xt_ecn: cannot match TCP bits for non-tcp packets [ 118.555060][ T7423] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.429'. [ 118.580209][ T7414] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 118.596952][ T7414] netlink: 40 bytes leftover after parsing attributes in process `syz.1.426'. [ 118.616691][ T7414] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 118.770633][ T7436] netlink: 32 bytes leftover after parsing attributes in process `syz.4.432'. [ 119.103751][ T7325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.135934][ T7325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.214747][ T7439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.433'. [ 119.225642][ T7439] netlink: 24 bytes leftover after parsing attributes in process `syz.0.433'. [ 119.298147][ T7443] netlink: 32 bytes leftover after parsing attributes in process `syz.4.435'. [ 119.312269][ T7439] netlink: 'syz.0.433': attribute type 1 has an invalid length. [ 119.325866][ T7439] netlink: 36 bytes leftover after parsing attributes in process `syz.0.433'. [ 119.354174][ T7325] team0: Port device team_slave_0 added [ 119.393034][ T7325] team0: Port device team_slave_1 added [ 119.662740][ T7456] netlink: 12 bytes leftover after parsing attributes in process `syz.1.438'. [ 119.689276][ T7456] tc_dump_action: action bad kind [ 119.716559][ T7325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.724018][ T7325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.787537][ T7325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.022478][ T7325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.029526][ T7325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.064309][ T7325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.114912][ T5857] Bluetooth: hci0: command tx timeout [ 120.177816][ T7486] netlink: 'syz.1.444': attribute type 10 has an invalid length. [ 120.209480][ T7486] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 120.218629][ T7486] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 120.228022][ T7486] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 120.237722][ T7486] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 120.247708][ T7486] geneve2: entered promiscuous mode [ 120.262076][ T7486] geneve2: entered allmulticast mode [ 120.698847][ T7486] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 120.717249][ T7486] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 120.728167][ T7486] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 120.737336][ T7486] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 120.871350][ T52] hsr_slave_0: left promiscuous mode [ 120.878915][ T52] hsr_slave_1: left promiscuous mode [ 120.888123][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.896380][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.906477][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.914258][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.931301][ T7512] netlink: 'syz.3.449': attribute type 1 has an invalid length. [ 120.939084][ T7512] netlink: 9396 bytes leftover after parsing attributes in process `syz.3.449'. [ 120.958649][ T52] veth1_macvtap: left promiscuous mode [ 120.969865][ T52] veth0_macvtap: left promiscuous mode [ 120.975825][ T52] veth1_vlan: left promiscuous mode [ 120.981235][ T52] veth0_vlan: left promiscuous mode [ 121.435108][ T52] team0 (unregistering): Port device team_slave_1 removed [ 121.474109][ T52] team0 (unregistering): Port device team_slave_0 removed [ 121.908717][ T7325] hsr_slave_0: entered promiscuous mode [ 121.918121][ T7325] hsr_slave_1: entered promiscuous mode [ 121.933156][ T7325] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 121.947339][ T7325] Cannot create hsr debugfs directory [ 122.187786][ T5857] Bluetooth: hci0: command tx timeout [ 122.557353][ T7527] IPv6: NLM_F_REPLACE set, but no existing node found! [ 122.591599][ T7528] netlink: 'syz.0.454': attribute type 49 has an invalid length. [ 122.770624][ T7539] xt_CT: You must specify a L4 protocol and not use inversions on it [ 123.212366][ T7325] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 123.540498][ T7325] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 123.605566][ T7325] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 123.686328][ T7571] __nla_validate_parse: 1 callbacks suppressed [ 123.686349][ T7571] netlink: 5188 bytes leftover after parsing attributes in process `syz.0.465'. [ 123.720194][ T7572] netlink: 5188 bytes leftover after parsing attributes in process `syz.0.465'. [ 123.734916][ T7571] Bluetooth: MGMT ver 1.23 [ 123.745571][ T7325] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 123.758549][ T7571] tipc: Started in network mode [ 123.765959][ T7571] tipc: Node identity ac1414aa, cluster identity 4711 [ 123.778172][ T7571] tipc: Enabled bearer , priority 10 [ 123.907971][ T7578] netlink: 64 bytes leftover after parsing attributes in process `syz.3.469'. [ 124.036673][ T7583] netlink: 'syz.4.470': attribute type 72 has an invalid length. [ 124.058425][ T7325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.079131][ T7583] netlink: 'syz.4.470': attribute type 8 has an invalid length. [ 124.144981][ T7325] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.213431][ T3571] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.220619][ T3571] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.262116][ T5857] Bluetooth: hci0: command tx timeout [ 124.269788][ T3571] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.277026][ T3571] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.279715][ T7590] netlink: 'syz.1.471': attribute type 11 has an invalid length. [ 124.754428][ T7618] netlink: 4552 bytes leftover after parsing attributes in process `syz.0.478'. [ 124.841205][ T7618] netlink: 4552 bytes leftover after parsing attributes in process `syz.0.478'. [ 124.892929][ T9] tipc: Node number set to 2886997162 [ 125.272536][ T7638] netlink: 'syz.4.484': attribute type 72 has an invalid length. [ 125.294898][ T7638] netlink: 'syz.4.484': attribute type 8 has an invalid length. [ 127.380582][ T7325] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 127.733149][ T7325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.777667][ T7704] bridge_slave_0: left allmulticast mode [ 127.791793][ T7704] bridge_slave_0: left promiscuous mode [ 127.797757][ T7704] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.901721][ T81] tipc: Subscription rejected, illegal request [ 127.976739][ T7711] netlink: 8 bytes leftover after parsing attributes in process `syz.0.493'. [ 128.097537][ T7704] bridge_slave_1: left allmulticast mode [ 128.122017][ T7704] bridge_slave_1: left promiscuous mode [ 128.142900][ T7704] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.251210][ T7704] bond0: (slave bond_slave_0): Releasing backup interface [ 128.332377][ T7704] bond0: (slave bond_slave_1): Releasing backup interface [ 128.368488][ T7704] team0: Port device team_slave_0 removed [ 128.427740][ T7704] team0: Port device team_slave_1 removed [ 128.442824][ T7704] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.450476][ T7704] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.461835][ T7704] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.470117][ T7704] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.542931][ T7706] wg2: entered promiscuous mode [ 128.583696][ T7706] team0: Port device wg2 added [ 128.628686][ T7325] veth0_vlan: entered promiscuous mode [ 128.681332][ T7325] veth1_vlan: entered promiscuous mode [ 128.737082][ T7325] veth0_macvtap: entered promiscuous mode [ 128.787903][ T7325] veth1_macvtap: entered promiscuous mode [ 128.903599][ T7325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.961920][ T7325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.999227][ T7325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.025202][ T7732] can: request_module (can-proto-3) failed. [ 129.031236][ T7325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.045740][ T7325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.116749][ T7325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.151839][ T7325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.201196][ T7325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.246045][ T7325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.268304][ T7325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.281000][ T7749] netlink: 20 bytes leftover after parsing attributes in process `syz.1.508'. [ 129.290932][ T7749] netlink: 8 bytes leftover after parsing attributes in process `syz.1.508'. [ 129.304946][ T7749] netlink: 8 bytes leftover after parsing attributes in process `syz.1.508'. [ 129.326986][ T7325] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.336488][ T7325] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.353073][ T7325] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.397887][ T7325] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.609407][ T7756] netlink: 892 bytes leftover after parsing attributes in process `syz.1.510'. [ 129.990682][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.998805][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.049737][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.064118][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.539898][ T7789] netlink: 892 bytes leftover after parsing attributes in process `syz.4.523'. [ 131.158648][ T7803] netlink: 4 bytes leftover after parsing attributes in process `syz.1.526'. [ 131.326683][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.648213][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.679646][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 131.688453][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 131.701321][ T7829] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 131.709999][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 131.719865][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 131.733265][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 131.743526][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 131.876381][ T7839] netlink: 892 bytes leftover after parsing attributes in process `syz.4.535'. [ 131.887722][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.978480][ T7829] vcan0 speed is unknown, defaulting to 1000 [ 132.089831][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.183336][ T7849] netlink: 2 bytes leftover after parsing attributes in process `syz.4.537'. [ 132.519304][ T35] bridge_slave_1: left allmulticast mode [ 132.528001][ T35] bridge_slave_1: left promiscuous mode [ 132.546953][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.566622][ T35] bridge_slave_0: left allmulticast mode [ 132.580656][ T35] bridge_slave_0: left promiscuous mode [ 132.612600][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.753092][ T7862] xt_l2tp: v2 sid > 0xffff: 262144 [ 133.235758][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.292319][ T7865] netlink: 12 bytes leftover after parsing attributes in process `syz.4.542'. [ 133.406755][ T7867] Cannot find del_set index 65531 as target [ 133.413910][ T7867] x_tables: duplicate underflow at hook 2 [ 133.611309][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 133.624080][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 133.638119][ T35] bond0 (unregistering): Released all slaves [ 133.648793][ T7858] netlink: 8 bytes leftover after parsing attributes in process `syz.1.540'. [ 133.658275][ T7861] unknown channel width for channel at 909000KHz? [ 133.665268][ T7827] vcan0 speed is unknown, defaulting to 1000 [ 133.790301][ T5857] Bluetooth: hci0: command tx timeout [ 134.777817][ T7914] netlink: 'syz.4.553': attribute type 10 has an invalid length. [ 134.799604][ T7914] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.807384][ T7914] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.911287][ T7914] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.918571][ T7914] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.926181][ T7914] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.933422][ T7914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.031207][ T7914] bridge0: entered promiscuous mode [ 135.050545][ T7914] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 135.107432][ T35] hsr_slave_0: left promiscuous mode [ 135.118514][ T970] IPVS: starting estimator thread 0... [ 135.124744][ T35] hsr_slave_1: left promiscuous mode [ 135.131180][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.139579][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.162957][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.172720][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.202653][ T35] veth1_macvtap: left promiscuous mode [ 135.208242][ T35] veth0_macvtap: left promiscuous mode [ 135.214266][ T35] veth1_vlan: left promiscuous mode [ 135.219632][ T35] veth0_vlan: left promiscuous mode [ 135.231904][ T7928] IPVS: using max 18 ests per chain, 43200 per kthread [ 135.713966][ T35] team0 (unregistering): Port device team_slave_1 removed [ 135.759116][ T35] team0 (unregistering): Port device team_slave_0 removed [ 135.864873][ T5857] Bluetooth: hci0: command tx timeout [ 136.179910][ T7927] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 136.187505][ T7927] tipc: Enabled bearer , priority 10 [ 136.199153][ T7929] __nla_validate_parse: 2 callbacks suppressed [ 136.199172][ T7929] netlink: 8 bytes leftover after parsing attributes in process `syz.3.556'. [ 136.284623][ T7827] chnl_net:caif_netlink_parms(): no params data found [ 136.311963][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 136.471494][ T7938] netlink: 120 bytes leftover after parsing attributes in process `syz.1.558'. [ 136.581857][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 136.600418][ T7943] Cannot find set identified by id 1 to match [ 136.698446][ T7946] netlink: 12 bytes leftover after parsing attributes in process `syz.3.561'. [ 137.028458][ T7827] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.035891][ T7827] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.052086][ T7827] bridge_slave_0: entered allmulticast mode [ 137.067594][ T7827] bridge_slave_0: entered promiscuous mode [ 137.097602][ T7827] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.111812][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 137.117345][ T7827] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.161443][ T7827] bridge_slave_1: entered allmulticast mode [ 137.189527][ T7827] bridge_slave_1: entered promiscuous mode [ 137.207363][ T7962] netlink: 4 bytes leftover after parsing attributes in process `syz.3.562'. [ 137.326036][ T7967] Bluetooth: MGMT ver 1.23 [ 137.345571][ T7827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 137.428444][ T7827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 137.560047][ T7827] team0: Port device team_slave_0 added [ 137.612198][ T7827] team0: Port device team_slave_1 added [ 137.753445][ T7827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.773379][ T7827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.855372][ T7827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.904102][ T7827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.911120][ T7827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.942484][ T5857] Bluetooth: hci0: command tx timeout [ 137.994738][ T7827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 138.181975][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 138.193879][ T7827] hsr_slave_0: entered promiscuous mode [ 138.215385][ T7827] hsr_slave_1: entered promiscuous mode [ 138.237626][ T7827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 138.263691][ T8008] netlink: 12 bytes leftover after parsing attributes in process `syz.3.574'. [ 138.287193][ T7827] Cannot create hsr debugfs directory [ 138.293167][ T8008] netlink: 48 bytes leftover after parsing attributes in process `syz.3.574'. [ 138.309573][ T8006] veth0: entered promiscuous mode [ 138.358809][ T8005] veth0: left promiscuous mode [ 138.424785][ T8020] netlink: 134744 bytes leftover after parsing attributes in process `syz.3.574'. [ 138.809018][ T8032] netlink: 'syz.0.579': attribute type 21 has an invalid length. [ 138.858947][ T9] hid-generic 0005:0C45:1010.0001: item fetching failed at offset 0/1 [ 138.873113][ T9] hid-generic 0005:0C45:1010.0001: probe with driver hid-generic failed with error -22 [ 139.221964][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 139.304790][ T8056] netlink: 'syz.0.585': attribute type 9 has an invalid length. [ 139.322038][ T8056] netlink: 134660 bytes leftover after parsing attributes in process `syz.0.585'. [ 139.909784][ T8085] netlink: 'syz.4.589': attribute type 1 has an invalid length. [ 139.942047][ T8085] netlink: 9396 bytes leftover after parsing attributes in process `syz.4.589'. [ 139.999481][ T7827] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 140.023743][ T5857] Bluetooth: hci0: command tx timeout [ 140.094049][ T7827] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 140.103873][ T7827] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 140.116138][ T7827] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 140.132687][ T8092] netlink: 24 bytes leftover after parsing attributes in process `syz.3.591'. [ 140.186500][ T8095] netlink: 'syz.1.592': attribute type 4 has an invalid length. [ 140.263202][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 140.353108][ T7827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.405151][ T8102] netlink: 'syz.4.595': attribute type 10 has an invalid length. [ 140.419267][ T8102] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.426641][ T8102] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.443254][ T8104] lo speed is unknown, defaulting to 1000 [ 140.450637][ T7827] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.479233][ T8104] lo speed is unknown, defaulting to 1000 [ 140.492932][ T8105] netlink: 'syz.3.594': attribute type 4 has an invalid length. [ 140.569916][ T3571] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.577167][ T3571] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.591479][ T8104] lo speed is unknown, defaulting to 1000 [ 140.604257][ T8108] netlink: 'syz.3.594': attribute type 4 has an invalid length. [ 140.615959][ T8104] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 140.633236][ T6907] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.640421][ T6907] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.660210][ T8104] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 140.673342][ T25] lo speed is unknown, defaulting to 1000 [ 140.673362][ T8105] tipc: Enabling of bearer rejected, already enabled [ 140.795414][ T8104] lo speed is unknown, defaulting to 1000 [ 140.813566][ T8104] lo speed is unknown, defaulting to 1000 [ 140.843453][ T8104] lo speed is unknown, defaulting to 1000 [ 140.859357][ T8104] lo speed is unknown, defaulting to 1000 [ 140.886432][ T8104] lo speed is unknown, defaulting to 1000 [ 141.194017][ T8125] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 141.301940][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 141.636158][ T8144] sit0: entered promiscuous mode [ 141.665372][ T8144] netlink: 'syz.3.603': attribute type 1 has an invalid length. [ 141.704827][ T8144] __nla_validate_parse: 4 callbacks suppressed [ 141.704851][ T8144] netlink: 1 bytes leftover after parsing attributes in process `syz.3.603'. [ 141.796796][ T7827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.859750][ T8150] netlink: 'syz.0.604': attribute type 11 has an invalid length. [ 141.956624][ T7827] veth0_vlan: entered promiscuous mode [ 142.033830][ T7827] veth1_vlan: entered promiscuous mode [ 142.131363][ T7827] veth0_macvtap: entered promiscuous mode [ 142.156224][ T7827] veth1_macvtap: entered promiscuous mode [ 142.196441][ T7827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.211168][ T7827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.221434][ T7827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.232452][ T7827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.245720][ T7827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.272931][ T7827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.291844][ T7827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.302913][ T8169] openvswitch: netlink: Flow key attribute not present in set flow. [ 142.321881][ T7827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.341919][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 142.362343][ T7827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.389310][ T7827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.430918][ T7827] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.486596][ T7827] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.512875][ T8167] netlink: 256 bytes leftover after parsing attributes in process `syz.1.608'. [ 142.542173][ T7827] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.552481][ T8185] netlink: 188 bytes leftover after parsing attributes in process `syz.3.613'. [ 142.577151][ T7827] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.595989][ T8185] netlink: 'syz.3.613': attribute type 1 has an invalid length. [ 142.642695][ T8185] netlink: 4 bytes leftover after parsing attributes in process `syz.3.613'. [ 142.706489][ T8191] netlink: 4 bytes leftover after parsing attributes in process `syz.4.614'. [ 142.732053][ T8191] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.760180][ T8191] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.806664][ T8191] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.838895][ T8191] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.870337][ T8198] netlink: 28 bytes leftover after parsing attributes in process `syz.1.615'. [ 142.967064][ T8206] netlink: 696 bytes leftover after parsing attributes in process `syz.3.617'. [ 143.140674][ T3571] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.189494][ T3571] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.352425][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.361321][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.381899][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 143.709758][ T8233] netlink: 'syz.1.624': attribute type 1 has an invalid length. [ 143.754390][ T8233] netlink: 'syz.1.624': attribute type 1 has an invalid length. [ 143.763116][ T8233] netlink: 'syz.1.624': attribute type 1 has an invalid length. [ 144.421947][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 144.556267][ T81] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.834224][ T81] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.896756][ T81] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.976596][ T81] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.190389][ T81] bridge_slave_1: left allmulticast mode [ 145.205473][ T81] bridge_slave_1: left promiscuous mode [ 145.221521][ T81] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.287149][ T81] bridge_slave_0: left allmulticast mode [ 145.322012][ T81] bridge_slave_0: left promiscuous mode [ 145.327829][ T81] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.461925][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 145.778945][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 145.799853][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 145.817814][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 145.828314][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 145.847592][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 145.860290][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 146.031783][ T81] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 146.047032][ T81] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 146.063403][ T81] bond0 (unregistering): Released all slaves [ 146.367108][ T8313] vcan0 speed is unknown, defaulting to 1000 [ 146.501847][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 146.646240][ T8332] netlink: 8 bytes leftover after parsing attributes in process `syz.1.644'. [ 146.707108][ T8332] netlink: 32 bytes leftover after parsing attributes in process `syz.1.644'. [ 146.737275][ T8313] lo speed is unknown, defaulting to 1000 [ 147.298624][ T81] hsr_slave_0: left promiscuous mode [ 147.317268][ T81] hsr_slave_1: left promiscuous mode [ 147.345577][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.383648][ T81] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.399165][ T81] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.408950][ T81] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.422773][ T8377] validate_nla: 62 callbacks suppressed [ 147.422793][ T8377] netlink: 'syz.1.654': attribute type 2 has an invalid length. [ 147.455312][ T81] veth1_macvtap: left promiscuous mode [ 147.461124][ T81] veth0_macvtap: left promiscuous mode [ 147.476984][ T81] veth1_vlan: left promiscuous mode [ 147.485773][ T81] veth0_vlan: left promiscuous mode [ 147.541840][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 147.562466][ T8380] netlink: 8 bytes leftover after parsing attributes in process `syz.1.655'. [ 147.942993][ T5857] Bluetooth: hci0: command tx timeout [ 147.997972][ T81] team0 (unregistering): Port device team_slave_1 removed [ 148.045950][ T81] team0 (unregistering): Port device team_slave_0 removed [ 148.582125][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 148.658475][ T8313] chnl_net:caif_netlink_parms(): no params data found [ 148.680493][ T8389] netlink: 'syz.3.658': attribute type 1 has an invalid length. [ 148.692291][ T8394] xt_ecn: cannot match TCP bits for non-tcp packets [ 148.705975][ T8389] netlink: 'syz.3.658': attribute type 10 has an invalid length. [ 148.718640][ T8389] netlink: 236 bytes leftover after parsing attributes in process `syz.3.658'. [ 148.762175][ T8391] netlink: 4 bytes leftover after parsing attributes in process `syz.3.658'. [ 148.783253][ T8389] netlink: 'syz.3.658': attribute type 1 has an invalid length. [ 148.822174][ T8389] netlink: 4 bytes leftover after parsing attributes in process `syz.3.658'. [ 148.834537][ T8391] netlink: 'syz.3.658': attribute type 1 has an invalid length. [ 148.888428][ T8391] netlink: 4 bytes leftover after parsing attributes in process `syz.3.658'. [ 149.200196][ T8313] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.231774][ T8313] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.261272][ T8313] bridge_slave_0: entered allmulticast mode [ 149.276522][ T8313] bridge_slave_0: entered promiscuous mode [ 149.303923][ T8417] unknown channel width for channel at 909000KHz? [ 149.313781][ T8313] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.321040][ T8313] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.352102][ T8313] bridge_slave_1: entered allmulticast mode [ 149.384920][ T8313] bridge_slave_1: entered promiscuous mode [ 149.518587][ T8429] SET target dimension over the limit! [ 149.552759][ T8313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.593161][ T8429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.621861][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 149.632117][ T8429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.669445][ T8313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.795089][ T8441] xt_cgroup: xt_cgroup: no path or classid specified [ 149.963750][ T8452] netlink: 8 bytes leftover after parsing attributes in process `syz.1.674'. [ 150.021834][ T5857] Bluetooth: hci0: command tx timeout [ 150.391207][ T8313] team0: Port device team_slave_0 added [ 150.426196][ T8313] team0: Port device team_slave_1 added [ 150.553773][ T8313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.560804][ T8313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.591436][ T8313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.645321][ T8313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.656694][ T8313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.682841][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 150.717263][ T8313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.737597][ T8469] netlink: 4 bytes leftover after parsing attributes in process `syz.0.678'. [ 150.972674][ T8313] hsr_slave_0: entered promiscuous mode [ 150.984913][ T8313] hsr_slave_1: entered promiscuous mode [ 150.999218][ T8313] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 151.009067][ T8313] Cannot create hsr debugfs directory [ 151.289061][ T8492] netlink: 4 bytes leftover after parsing attributes in process `syz.1.683'. [ 151.701899][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 151.961206][ T8523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.692'. [ 151.971902][ T8523] netlink: 16 bytes leftover after parsing attributes in process `syz.4.692'. [ 152.031198][ T8515] netlink: 'syz.3.689': attribute type 9 has an invalid length. [ 152.102489][ T5857] Bluetooth: hci0: command tx timeout [ 152.421500][ T8313] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 152.485573][ T8313] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 152.496699][ T8540] netlink: 'syz.4.697': attribute type 1 has an invalid length. [ 152.515188][ T8313] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 152.550242][ T8313] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 152.741903][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 152.759080][ T5849] syz_tun (unregistering): left promiscuous mode [ 153.075192][ T8313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.210305][ T8313] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.245938][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.253152][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.290114][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.297334][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.781860][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 153.808452][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 153.839950][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 153.856989][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 153.877407][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 153.885354][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 153.893311][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 153.935788][ T8589] vcan0 speed is unknown, defaulting to 1000 [ 154.047507][ T8598] __nla_validate_parse: 1 callbacks suppressed [ 154.047529][ T8598] netlink: 4 bytes leftover after parsing attributes in process `syz.0.709'. [ 154.080330][ T8589] lo speed is unknown, defaulting to 1000 [ 154.084136][ T8313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.141176][ T8596] netlink: 8 bytes leftover after parsing attributes in process `syz.4.710'. [ 154.158570][ T8596] nbd: device at index 0 is going down [ 154.182867][ T54] Bluetooth: hci0: command tx timeout [ 154.254284][ T8313] veth0_vlan: entered promiscuous mode [ 154.286545][ T8596] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 154.345895][ T8597] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 154.367845][ T8313] veth1_vlan: entered promiscuous mode [ 154.413752][ T8609] netlink: 48 bytes leftover after parsing attributes in process `syz.3.712'. [ 154.489763][ T8313] veth0_macvtap: entered promiscuous mode [ 154.500489][ T8313] veth1_macvtap: entered promiscuous mode [ 154.567280][ T8589] chnl_net:caif_netlink_parms(): no params data found [ 154.734105][ T8313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.744845][ T8313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.756266][ T8313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.767070][ T8313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.778044][ T8313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.791364][ T8313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.821853][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 155.023321][ T8589] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.030597][ T8589] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.048871][ T8589] bridge_slave_0: entered allmulticast mode [ 155.071536][ T8589] bridge_slave_0: entered promiscuous mode [ 155.096236][ T8313] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.108728][ T8313] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.119263][ T8313] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.121441][ T8649] siw: device registration error -23 [ 155.140551][ T8313] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.182688][ T8589] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.190754][ T8589] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.214422][ T8589] bridge_slave_1: entered allmulticast mode [ 155.229183][ T8589] bridge_slave_1: entered promiscuous mode [ 155.436695][ T8589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.460520][ T8589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.603052][ T8589] team0: Port device team_slave_0 added [ 155.647591][ T8589] team0: Port device team_slave_1 added [ 155.739364][ T8589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.758210][ T8589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.801816][ T8589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.815825][ T8589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.825088][ T8589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.857895][ T8589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.861896][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 155.902298][ T3435] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.910713][ T3435] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.942156][ T54] Bluetooth: hci2: command tx timeout [ 156.016707][ T3571] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.051800][ T3571] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.079628][ T8674] netlink: 88 bytes leftover after parsing attributes in process `syz.3.725'. [ 156.126013][ T8589] hsr_slave_0: entered promiscuous mode [ 156.149613][ T8589] hsr_slave_1: entered promiscuous mode [ 156.177471][ T8589] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 156.190860][ T8589] Cannot create hsr debugfs directory [ 156.203093][ T8673] netlink: 'syz.3.725': attribute type 5 has an invalid length. [ 156.245777][ T8676] openvswitch: netlink: Missing valid actions attribute. [ 156.265668][ T8676] openvswitch: netlink: Actions may not be safe on all matching packets [ 156.407329][ T8679] openvswitch: netlink: Missing key (keys=440, expected=200000) [ 156.462823][ T8681] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 156.470111][ T8681] IPv6: NLM_F_CREATE should be set when creating new route [ 156.477485][ T8681] IPv6: NLM_F_CREATE should be set when creating new route [ 156.488410][ T8678] tipc: Enabling of bearer rejected, already enabled [ 156.489092][ T5857] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 156.508712][ T5857] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 156.517169][ T5857] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 156.527482][ T5857] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 156.538424][ T5857] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 156.547235][ T5857] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 156.659612][ T3571] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.708134][ T8686] batadv0: entered allmulticast mode [ 156.802846][ T3571] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.854775][ T8682] vcan0 speed is unknown, defaulting to 1000 [ 156.901908][ C0] net_ratelimit: 1 callbacks suppressed [ 156.901929][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 156.925240][ T8589] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.980322][ T3571] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.025183][ T8589] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.039401][ T8682] lo speed is unknown, defaulting to 1000 [ 157.064397][ T3571] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.105242][ T8589] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.176723][ T8589] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.289085][ T8682] chnl_net:caif_netlink_parms(): no params data found [ 157.601151][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 157.619936][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 157.637565][ T8589] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 157.650208][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 157.659053][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 157.666922][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 157.676012][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 157.678343][ T8589] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 157.727424][ T8589] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 157.822505][ T8589] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 157.869362][ T8682] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.889006][ T8682] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.896520][ T8682] bridge_slave_0: entered allmulticast mode [ 157.904400][ T8682] bridge_slave_0: entered promiscuous mode [ 157.912837][ T8682] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.919955][ T8682] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.928920][ T8682] bridge_slave_1: entered allmulticast mode [ 157.936256][ T8682] bridge_slave_1: entered promiscuous mode [ 157.942316][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 157.970797][ T3571] bridge_slave_1: left allmulticast mode [ 157.983860][ T3571] bridge_slave_1: left promiscuous mode [ 157.989797][ T3571] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.006414][ T3571] bridge_slave_0: left allmulticast mode [ 158.013735][ T3571] bridge_slave_0: left promiscuous mode [ 158.019805][ T3571] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.028589][ T54] Bluetooth: hci2: command tx timeout [ 158.386820][ T3571] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.398775][ T3571] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 158.411138][ T3571] bond0 (unregistering): Released all slaves [ 158.557754][ T8682] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.580097][ T8701] vcan0 speed is unknown, defaulting to 1000 [ 158.592689][ T54] Bluetooth: hci0: command tx timeout [ 158.651181][ T8719] netlink: 4 bytes leftover after parsing attributes in process `syz.4.735'. [ 158.679808][ T8682] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.723291][ T8721] netlink: 4 bytes leftover after parsing attributes in process `syz.4.735'. [ 158.837888][ T8682] team0: Port device team_slave_0 added [ 158.864727][ T8682] team0: Port device team_slave_1 added [ 158.899780][ T8701] lo speed is unknown, defaulting to 1000 [ 158.981852][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 159.178053][ T8682] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.201803][ T8682] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.242850][ T8741] netlink: 4 bytes leftover after parsing attributes in process `syz.4.738'. [ 159.263580][ T8743] netlink: 256 bytes leftover after parsing attributes in process `syz.3.739'. [ 159.278722][ T8682] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.334955][ T8743] xt_TCPMSS: Only works on TCP SYN packets [ 159.376861][ T8682] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.409757][ T8682] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.460095][ T8682] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.531133][ T3571] hsr_slave_0: left promiscuous mode [ 159.573628][ T3571] hsr_slave_1: left promiscuous mode [ 159.602856][ T3571] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.610674][ T3571] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.649448][ T3571] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.657470][ T3571] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.690497][ T3571] veth1_macvtap: left promiscuous mode [ 159.703793][ T54] Bluetooth: hci4: command tx timeout [ 159.709007][ T3571] veth0_macvtap: left promiscuous mode [ 159.724511][ T3571] veth1_vlan: left promiscuous mode [ 159.729856][ T3571] veth0_vlan: left promiscuous mode [ 160.021895][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 160.102752][ T54] Bluetooth: hci2: command tx timeout [ 160.237135][ T3571] team0 (unregistering): Port device team_slave_1 removed [ 160.289268][ T3571] team0 (unregistering): Port device team_slave_0 removed [ 160.671805][ T54] Bluetooth: hci0: command tx timeout [ 160.757124][ T8756] pim6reg: entered allmulticast mode [ 160.793675][ T8760] pim6reg: left allmulticast mode [ 160.946148][ T8682] hsr_slave_0: entered promiscuous mode [ 160.972209][ T8682] hsr_slave_1: entered promiscuous mode [ 161.012672][ T8682] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 161.020320][ T8682] Cannot create hsr debugfs directory [ 161.061855][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 161.137590][ T8775] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 161.313694][ T8589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.440366][ T8701] chnl_net:caif_netlink_parms(): no params data found [ 161.493460][ T8589] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.567297][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.574562][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.717702][ T6907] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.724961][ T6907] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.781906][ T54] Bluetooth: hci4: command tx timeout [ 161.904691][ T8701] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.942668][ T8701] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.964474][ T8701] bridge_slave_0: entered allmulticast mode [ 161.979980][ T8701] bridge_slave_0: entered promiscuous mode [ 162.038458][ T8682] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.049851][ T8682] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 162.070069][ T8701] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.077882][ T8701] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.085324][ T8701] bridge_slave_1: entered allmulticast mode [ 162.092918][ T8701] bridge_slave_1: entered promiscuous mode [ 162.101933][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 162.157663][ T8682] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.168171][ T8682] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 162.182407][ T54] Bluetooth: hci2: command tx timeout [ 162.379165][ T8682] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.398625][ T8682] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 162.424081][ T8701] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.451044][ T8812] netlink: 'syz.3.753': attribute type 10 has an invalid length. [ 162.471610][ T8812] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.479190][ T8812] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.497620][ T8812] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.504943][ T8812] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.512475][ T8812] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.519603][ T8812] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.536235][ T8812] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 162.549335][ T8701] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.705005][ T8682] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.730337][ T8682] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 162.742082][ T54] Bluetooth: hci0: command tx timeout [ 162.884554][ T8701] team0: Port device team_slave_0 added [ 162.912830][ T8827] netlink: 20 bytes leftover after parsing attributes in process `syz.3.757'. [ 162.923483][ T8701] team0: Port device team_slave_1 added [ 163.002628][ T8701] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.009674][ T8701] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.121844][ T8701] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.141925][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 163.165220][ T8827] netlink: 24 bytes leftover after parsing attributes in process `syz.3.757'. [ 163.193758][ T8827] vlan2: entered allmulticast mode [ 163.306984][ T8701] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.318175][ T8701] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.347734][ T8701] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.369551][ T8845] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 163.509247][ T8682] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 163.573057][ T8701] hsr_slave_0: entered promiscuous mode [ 163.581136][ T8701] hsr_slave_1: entered promiscuous mode [ 163.606668][ T8701] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 163.620992][ T8701] Cannot create hsr debugfs directory [ 163.628446][ T8682] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 163.639475][ T8682] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 163.650193][ T8682] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 163.868163][ T54] Bluetooth: hci4: command tx timeout [ 164.002936][ T8589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.181966][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 164.307685][ T8874] netlink: 'syz.3.766': attribute type 10 has an invalid length. [ 164.332371][ T8874] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.339678][ T8874] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.510356][ T8885] netlink: 20 bytes leftover after parsing attributes in process `syz.3.768'. [ 164.548025][ T8589] veth0_vlan: entered promiscuous mode [ 164.566712][ T8883] veth1: entered promiscuous mode [ 164.595536][ T8682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.700453][ T8882] veth1: left promiscuous mode [ 164.729476][ T8589] veth1_vlan: entered promiscuous mode [ 164.760036][ T8682] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.823274][ T54] Bluetooth: hci0: command tx timeout [ 164.867417][ T8890] netlink: 60 bytes leftover after parsing attributes in process `syz.4.769'. [ 164.942600][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.949844][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.987844][ T8890] netlink: 4 bytes leftover after parsing attributes in process `syz.4.769'. [ 165.009239][ T8892] netlink: 40 bytes leftover after parsing attributes in process `syz.3.770'. [ 165.024518][ T3571] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.031759][ T3571] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.162630][ T8900] netlink: 4 bytes leftover after parsing attributes in process `syz.3.771'. [ 165.210135][ T8589] veth0_macvtap: entered promiscuous mode [ 165.221956][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 165.256571][ T8589] veth1_macvtap: entered promiscuous mode [ 165.338773][ T8589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.355258][ T8589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.393686][ T8589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.432467][ T8904] netlink: 8 bytes leftover after parsing attributes in process `syz.4.772'. [ 165.448611][ T8904] netlink: 20 bytes leftover after parsing attributes in process `syz.4.772'. [ 165.488539][ T8701] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 165.539956][ T8701] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 165.565731][ T8701] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 165.617413][ T8589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.661949][ T8589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.698992][ T8589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.728260][ T8701] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 165.765366][ T8589] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.776532][ T8589] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.794981][ T8589] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.808154][ T8589] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.923470][ T8682] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.943005][ T54] Bluetooth: hci4: command tx timeout [ 166.030444][ T8924] netlink: 8 bytes leftover after parsing attributes in process `syz.3.777'. [ 166.137197][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.145478][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.212065][ T8932] netlink: 666 bytes leftover after parsing attributes in process `syz.4.780'. [ 166.261992][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 166.279806][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.283248][ T8682] veth0_vlan: entered promiscuous mode [ 166.290609][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.365744][ T8934] x_tables: duplicate entry at hook 2 [ 166.378312][ T8682] veth1_vlan: entered promiscuous mode [ 166.419200][ T8701] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.499626][ T8701] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.567410][ T8939] netlink: 12 bytes leftover after parsing attributes in process `syz.4.781'. [ 166.601488][ T8936] vlan0: entered allmulticast mode [ 166.615178][ T8936] veth0_vlan: entered allmulticast mode [ 166.643911][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.651119][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.732276][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.739516][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.786096][ T8682] veth0_macvtap: entered promiscuous mode [ 166.876643][ T3571] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.914861][ T8682] veth1_macvtap: entered promiscuous mode [ 167.003466][ T3571] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.238651][ T3571] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.281290][ T8959] netlink: 'syz.4.783': attribute type 2 has an invalid length. [ 167.301925][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 167.364401][ T8963] netlink: 'syz.3.784': attribute type 3 has an invalid length. [ 167.435831][ T3571] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.473190][ T8963] netlink: 'syz.3.784': attribute type 3 has an invalid length. [ 167.495631][ T8682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.510062][ T8967] xt_cgroup: xt_cgroup: no path or classid specified [ 167.519774][ T8682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.538220][ T8682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.550081][ T8682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.572845][ T8682] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.629058][ T8682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.702553][ T8682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.720035][ T8682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.777705][ T8682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.819425][ T8682] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.876023][ T8682] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.890354][ T8682] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.904917][ T5857] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 167.907995][ T8682] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.922734][ T5857] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 167.928738][ T8682] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.943098][ T5857] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 167.954038][ T5857] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 167.965843][ T5857] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 167.974395][ T5857] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 168.028739][ T8974] syz.3.786: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 168.048331][ T8974] CPU: 1 UID: 0 PID: 8974 Comm: syz.3.786 Not tainted 6.12.0-rc7-syzkaller-00144-g66418447d27b #0 [ 168.060139][ T8974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 168.071053][ T8974] Call Trace: [ 168.074468][ T8974] [ 168.077472][ T8974] dump_stack_lvl+0x241/0x360 [ 168.082250][ T8974] ? __pfx_dump_stack_lvl+0x10/0x10 [ 168.087704][ T8974] ? __pfx__printk+0x10/0x10 [ 168.092382][ T8974] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 168.098985][ T8974] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 168.105818][ T8974] warn_alloc+0x278/0x410 [ 168.110265][ T8974] ? __pfx_warn_alloc+0x10/0x10 [ 168.115210][ T8974] ? packet_set_ring+0x6da/0x2450 [ 168.120313][ T8974] ? __get_vm_area_node+0x23d/0x270 [ 168.125585][ T8974] __vmalloc_node_range_noprof+0x691/0x13f0 [ 168.131633][ T8974] ? alloc_pages_mpol_noprof+0x417/0x680 [ 168.137327][ T8974] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 168.143852][ T8974] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 168.149993][ T8974] ? packet_set_ring+0x62b/0x2450 [ 168.155050][ T8974] ? rcu_is_watching+0x15/0xb0 [ 168.159879][ T8974] ? packet_set_ring+0x6da/0x2450 [ 168.164975][ T8974] vzalloc_noprof+0x79/0x90 [ 168.169559][ T8974] ? packet_set_ring+0x6da/0x2450 [ 168.174727][ T8974] packet_set_ring+0x6da/0x2450 [ 168.179646][ T8974] ? __pfx_packet_set_ring+0x10/0x10 [ 168.184974][ T8974] ? __might_fault+0xaa/0x120 [ 168.189684][ T8974] ? __might_fault+0xc6/0x120 [ 168.194434][ T8974] packet_setsockopt+0x1140/0x1970 [ 168.199650][ T8974] ? __pfx_packet_setsockopt+0x10/0x10 [ 168.205167][ T8974] ? aa_sk_perm+0x96d/0xab0 [ 168.209791][ T8974] ? __pfx_aa_sk_perm+0x10/0x10 [ 168.214661][ T8974] ? __pfx_lock_acquire+0x10/0x10 [ 168.219710][ T8974] ? __fget_files+0x29/0x470 [ 168.224315][ T8974] ? aa_sock_opt_perm+0x79/0x120 [ 168.229277][ T8974] ? __pfx_packet_setsockopt+0x10/0x10 [ 168.234897][ T8974] do_sock_setsockopt+0x3af/0x720 [ 168.239977][ T8974] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 168.245648][ T8974] ? __fget_files+0x29/0x470 [ 168.250282][ T8974] ? __fget_files+0x3f3/0x470 [ 168.255064][ T8974] ? __fget_files+0x29/0x470 [ 168.259691][ T8974] __sys_setsockopt+0x1a2/0x250 [ 168.264571][ T8974] __x64_sys_setsockopt+0xb5/0xd0 [ 168.269623][ T8974] do_syscall_64+0xf3/0x230 [ 168.274185][ T8974] ? clear_bhb_loop+0x35/0x90 [ 168.278929][ T8974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.285013][ T8974] RIP: 0033:0x7fa3e517e819 [ 168.289467][ T8974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.309120][ T8974] RSP: 002b:00007fa3e5f10038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 168.318170][ T8974] RAX: ffffffffffffffda RBX: 00007fa3e5335fa0 RCX: 00007fa3e517e819 [ 168.326348][ T8974] RDX: 000000000000000d RSI: 0000000000000107 RDI: 0000000000000009 [ 168.334354][ T8974] RBP: 00007fa3e51f175e R08: 000000000000001c R09: 0000000000000000 [ 168.342110][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 168.342336][ T8974] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 168.357734][ T8974] R13: 0000000000000000 R14: 00007fa3e5335fa0 R15: 00007ffef725c3a8 [ 168.365763][ T8974] [ 168.422007][ T8974] Mem-Info: [ 168.425202][ T8974] active_anon:4728 inactive_anon:0 isolated_anon:0 [ 168.425202][ T8974] active_file:1439 inactive_file:38237 isolated_file:0 [ 168.425202][ T8974] unevictable:768 dirty:59 writeback:0 [ 168.425202][ T8974] slab_reclaimable:10277 slab_unreclaimable:105545 [ 168.425202][ T8974] mapped:28556 shmem:1413 pagetables:678 [ 168.425202][ T8974] sec_pagetables:0 bounce:0 [ 168.425202][ T8974] kernel_misc_reclaimable:0 [ 168.425202][ T8974] free:1337293 free_pcp:562 free_cma:0 [ 168.499574][ T8981] vcan0 speed is unknown, defaulting to 1000 [ 168.517510][ T3571] bridge_slave_1: left allmulticast mode [ 168.526731][ T3571] bridge_slave_1: left promiscuous mode [ 168.533212][ T3571] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.551243][ T8974] Node 0 active_anon:19072kB inactive_anon:0kB active_file:5756kB inactive_file:152876kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:114564kB dirty:236kB writeback:0kB shmem:4128kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11452kB pagetables:2860kB sec_pagetables:0kB all_unreclaimable? no [ 168.618998][ T8974] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 168.663824][ T3571] bridge_slave_0: left allmulticast mode [ 168.669570][ T3571] bridge_slave_0: left promiscuous mode [ 168.685750][ T3571] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.691757][ T8974] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 168.725256][ T8974] lowmem_reserve[]: 0 2463 2464 0 0 [ 168.768411][ T8974] Node 0 DMA32 free:1425772kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB active_anon:18936kB inactive_anon:0kB active_file:5756kB inactive_file:152292kB unevictable:1536kB writepending:232kB present:3129332kB managed:2550460kB mlocked:0kB bounce:0kB free_pcp:3016kB local_pcp:1912kB free_cma:0kB [ 168.851592][ T8974] lowmem_reserve[]: 0 0 0 0 0 [ 168.862686][ T8974] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:584kB unevictable:0kB writepending:4kB present:1048580kB managed:620kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 168.898216][ T8974] lowmem_reserve[]: 0 0 0 0 0 [ 168.909493][ T8974] Node 1 Normal free:3905952kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:40kB local_pcp:8kB free_cma:0kB [ 168.948534][ T8974] lowmem_reserve[]: 0 0 0 0 0 [ 168.981527][ T8974] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 169.000503][ T8974] Node 0 DMA32: 2*4kB (ME) 46*8kB (UME) 13*16kB (UME) 62*32kB (UME) 44*64kB (UME) 29*128kB (UME) 26*256kB (UM) 8*512kB (UME) 21*1024kB (UME) 6*2048kB (UME) 335*4096kB (M) = 1425800kB [ 169.029185][ T8974] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 169.057111][ T8974] Node 1 Normal: 216*4kB (UE) 54*8kB (UME) 39*16kB (UME) 199*32kB (UME) 95*64kB (UME) 29*128kB (UME) 13*256kB (UME) 9*512kB (UME) 3*1024kB (UM) 3*2048kB (UE) 945*4096kB (UM) = 3905952kB [ 169.121539][ T8974] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 169.173072][ T8974] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 169.206290][ T8974] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 169.262462][ T8974] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 169.274153][ T8974] 41093 total pagecache pages [ 169.279571][ T8974] 0 pages in swap cache [ 169.301883][ T8974] Free swap = 124996kB [ 169.306182][ T8974] Total swap = 124996kB [ 169.316875][ T8974] 2097051 pages RAM [ 169.332197][ T8974] 0 pages HighMem/MovableOnly [ 169.336964][ T8974] 427650 pages reserved [ 169.341153][ T8974] 0 pages cma reserved [ 169.381877][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 169.708221][ T9026] __nla_validate_parse: 7 callbacks suppressed [ 169.708252][ T9026] netlink: 4 bytes leftover after parsing attributes in process `syz.3.793'. [ 169.822801][ T3571] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 169.846798][ T3571] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 169.865064][ T3571] bond0 (unregistering): Released all slaves [ 169.906487][ T8981] lo speed is unknown, defaulting to 1000 [ 169.913348][ T9014] netlink: 56 bytes leftover after parsing attributes in process `syz.4.791'. [ 169.938454][ T9014] netlink: 56 bytes leftover after parsing attributes in process `syz.4.791'. [ 170.022128][ T5857] Bluetooth: hci2: command tx timeout [ 170.364530][ T8701] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.421918][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 170.594811][ T9058] netlink: 'syz.3.796': attribute type 10 has an invalid length. [ 170.725904][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.743044][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.018474][ T3571] hsr_slave_0: left promiscuous mode [ 171.029157][ T3571] hsr_slave_1: left promiscuous mode [ 171.063985][ T3571] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.071598][ T3571] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.108687][ T3571] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.121350][ T3571] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.162456][ T3571] veth1_macvtap: left promiscuous mode [ 171.168777][ T3571] veth0_macvtap: left promiscuous mode [ 171.175848][ T3571] veth1_vlan: left promiscuous mode [ 171.181447][ T3571] veth0_vlan: left promiscuous mode [ 171.461918][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 172.034982][ T3571] team0 (unregistering): Port device team_slave_1 removed [ 172.096795][ T3571] team0 (unregistering): Port device team_slave_0 removed [ 172.104187][ T5857] Bluetooth: hci2: command tx timeout [ 172.507662][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 172.612420][ T8701] veth0_vlan: entered promiscuous mode [ 172.664626][ T8701] veth1_vlan: entered promiscuous mode [ 172.684173][ T6905] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.724322][ T6905] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.792110][ T8701] veth0_macvtap: entered promiscuous mode [ 172.801911][ T8701] veth1_macvtap: entered promiscuous mode [ 172.818525][ T8701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.829615][ T8701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.839669][ T8701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.850205][ T8701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.863476][ T8701] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.873612][ T8701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.884381][ T8701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.894641][ T8701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.905508][ T8701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.917260][ T8701] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.980167][ T8981] chnl_net:caif_netlink_parms(): no params data found [ 172.999005][ T8701] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.009728][ T8701] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.020231][ T8701] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.029665][ T8701] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.498716][ T8981] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.531852][ T8981] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.542084][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 173.552933][ T8981] bridge_slave_0: entered allmulticast mode [ 173.560400][ T8981] bridge_slave_0: entered promiscuous mode [ 173.607542][ T8981] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.624821][ T8981] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.644063][ T8981] bridge_slave_1: entered allmulticast mode [ 173.663095][ T8981] bridge_slave_1: entered promiscuous mode [ 173.778164][ T8981] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.810122][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.828323][ T8981] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.837739][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.109215][ T3571] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.166525][ T8981] team0: Port device team_slave_0 added [ 174.183957][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.191748][ T5857] Bluetooth: hci2: command tx timeout [ 174.219247][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.264517][ T3571] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.331424][ T8981] team0: Port device team_slave_1 added [ 174.460528][ T8981] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.486315][ T8981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.520756][ T8981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.554618][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 174.565290][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 174.575850][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 174.582065][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 174.587108][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 174.599398][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 174.608063][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 174.667598][ T3571] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.710362][ T8981] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.719371][ T8981] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.751851][ T8981] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.808304][ T9165] netlink: 144 bytes leftover after parsing attributes in process `syz.3.811'. [ 174.969541][ T3571] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.051523][ T9172] netlink: 'syz.4.814': attribute type 1 has an invalid length. [ 175.516581][ T8981] hsr_slave_0: entered promiscuous mode [ 175.541169][ T8981] hsr_slave_1: entered promiscuous mode [ 175.560820][ T8981] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 175.570633][ T8981] Cannot create hsr debugfs directory [ 175.621967][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 175.674690][ T9157] vcan0 speed is unknown, defaulting to 1000 [ 175.976046][ T3571] bridge_slave_1: left allmulticast mode [ 176.001928][ T3571] bridge_slave_1: left promiscuous mode [ 176.028207][ T3571] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.052757][ T3571] bridge_slave_0: left allmulticast mode [ 176.071755][ T3571] bridge_slave_0: left promiscuous mode [ 176.078151][ T3571] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.262010][ T54] Bluetooth: hci2: command tx timeout [ 176.401951][ T9192] netlink: 24 bytes leftover after parsing attributes in process `syz.4.816'. [ 176.420905][ T9192] ipt_rpfilter: unknown options [ 176.513785][ T5857] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 176.543406][ T5857] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 176.552839][ T5857] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 176.581150][ T5857] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 176.593384][ T5857] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 176.602361][ T5857] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 176.661889][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 176.673110][ T54] Bluetooth: hci0: command tx timeout [ 176.762778][ T9201] netlink: zone id is out of range [ 176.768692][ T9201] netlink: zone id is out of range [ 176.776400][ T9201] netlink: zone id is out of range [ 176.801187][ T9201] netlink: zone id is out of range [ 176.806873][ T9201] netlink: zone id is out of range [ 177.003381][ T3571] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 177.016758][ T3571] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 177.028421][ T3571] bond0 (unregistering): Released all slaves [ 177.061794][ T9157] lo speed is unknown, defaulting to 1000 [ 177.119550][ T9203] tipc: Started in network mode [ 177.125932][ T9203] tipc: Node identity , cluster identity 4711 [ 177.142361][ T9203] tipc: Failed to obtain node identity [ 177.162545][ T9203] tipc: Enabling of bearer rejected, failed to enable media [ 177.178800][ T9204] netlink: 'syz.4.817': attribute type 2 has an invalid length. [ 177.196043][ T9204] netlink: 132 bytes leftover after parsing attributes in process `syz.4.817'. [ 177.402245][ T9195] vcan0 speed is unknown, defaulting to 1000 [ 177.437497][ T9209] netlink: 104 bytes leftover after parsing attributes in process `syz.3.818'. [ 177.475018][ T9211] netlink: 4 bytes leftover after parsing attributes in process `syz.4.819'. [ 177.701897][ C0] net_ratelimit: 80 callbacks suppressed [ 177.701922][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 177.713049][ T9216] netlink: 104 bytes leftover after parsing attributes in process `syz.4.821'. [ 177.781601][ T9218] netlink: 4 bytes leftover after parsing attributes in process `syz.3.820'. [ 177.790831][ T9195] lo speed is unknown, defaulting to 1000 [ 177.814280][ T9218] gretap0: entered promiscuous mode [ 177.827364][ T9218] macvtap1: entered promiscuous mode [ 177.834966][ T9218] macvtap1: entered allmulticast mode [ 177.840421][ T9218] gretap0: entered allmulticast mode [ 177.918823][ T9220] netlink: 36 bytes leftover after parsing attributes in process `syz.3.820'. [ 178.235400][ T9230] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 178.311039][ T3571] hsr_slave_0: left promiscuous mode [ 178.325821][ T3571] hsr_slave_1: left promiscuous mode [ 178.334980][ T3571] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.342609][ T3571] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.350611][ T3571] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.359385][ T3571] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.383573][ T3571] veth1_macvtap: left promiscuous mode [ 178.389407][ T3571] veth0_macvtap: left promiscuous mode [ 178.395480][ T3571] veth1_vlan: left promiscuous mode [ 178.401060][ T3571] veth0_vlan: left promiscuous mode [ 178.664378][ T54] Bluetooth: hci4: command tx timeout [ 178.742196][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 178.749408][ T54] Bluetooth: hci0: command tx timeout [ 178.964980][ T3571] team0 (unregistering): Port device team_slave_1 removed [ 179.019068][ T3571] team0 (unregistering): Port device team_slave_0 removed [ 179.499733][ T9157] chnl_net:caif_netlink_parms(): no params data found [ 179.785600][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 180.215481][ T8981] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 180.270497][ T9257] xt_hashlimit: invalid rate [ 180.315163][ T8981] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 180.416129][ T9263] sctp: [Deprecated]: syz.4.828 (pid 9263) Use of int in maxseg socket option. [ 180.416129][ T9263] Use struct sctp_assoc_value instead [ 180.480791][ T8981] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 180.535875][ T8981] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 180.602378][ T9157] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.609589][ T9157] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.623007][ T9157] bridge_slave_0: entered allmulticast mode [ 180.630293][ T9157] bridge_slave_0: entered promiscuous mode [ 180.699283][ T9157] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.701999][ T9272] netlink: 4 bytes leftover after parsing attributes in process `syz.4.831'. [ 180.724922][ T9157] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.732899][ T9157] bridge_slave_1: entered allmulticast mode [ 180.740265][ T9157] bridge_slave_1: entered promiscuous mode [ 180.748270][ T54] Bluetooth: hci4: command tx timeout [ 180.816676][ T9157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 180.821993][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 180.831806][ T54] Bluetooth: hci0: command tx timeout [ 180.864268][ T9195] chnl_net:caif_netlink_parms(): no params data found [ 180.893870][ T9157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.013326][ T9157] team0: Port device team_slave_0 added [ 181.024450][ T9157] team0: Port device team_slave_1 added [ 181.158540][ T9157] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.169561][ T9157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.201442][ T9157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.225433][ T9157] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.245215][ T9157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.280035][ T9157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.326961][ T9195] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.341999][ T9195] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.349410][ T9195] bridge_slave_0: entered allmulticast mode [ 181.364704][ T9195] bridge_slave_0: entered promiscuous mode [ 181.433654][ T3571] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.463972][ T9195] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.471558][ T9195] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.479865][ T9195] bridge_slave_1: entered allmulticast mode [ 181.487559][ T9195] bridge_slave_1: entered promiscuous mode [ 181.539192][ T9157] hsr_slave_0: entered promiscuous mode [ 181.557002][ T9157] hsr_slave_1: entered promiscuous mode [ 181.577164][ T9157] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 181.588205][ T9157] Cannot create hsr debugfs directory [ 181.618636][ T3571] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.667728][ T9195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.726315][ T3571] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.770150][ T9195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.836768][ T8981] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.861922][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 181.906701][ T9195] team0: Port device team_slave_0 added [ 182.271495][ T3571] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.404215][ T9195] team0: Port device team_slave_1 added [ 182.471360][ T9311] netlink: 8 bytes leftover after parsing attributes in process `syz.3.840'. [ 182.485835][ T8981] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.623122][ T6905] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.630319][ T6905] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.760052][ T9195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 182.775092][ T9195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.823328][ T54] Bluetooth: hci4: command tx timeout [ 182.837274][ T9325] xt_HMARK: spi-set and port-set can't be combined [ 182.846436][ T9195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 182.899981][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.907199][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.912299][ T54] Bluetooth: hci0: command tx timeout [ 182.914868][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 183.003944][ T9195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.020554][ T9195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.091848][ T9195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.638608][ T9340] team0 (unregistering): Port device team_slave_0 removed [ 183.697001][ T9340] team0 (unregistering): Port device team_slave_1 removed [ 183.941840][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 184.194344][ T9195] hsr_slave_0: entered promiscuous mode [ 184.228923][ T9195] hsr_slave_1: entered promiscuous mode [ 184.250705][ T9195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 184.274271][ T9195] Cannot create hsr debugfs directory [ 184.366249][ T3571] bridge_slave_1: left allmulticast mode [ 184.384449][ T3571] bridge_slave_1: left promiscuous mode [ 184.405882][ T3571] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.552816][ T3571] bridge_slave_0: left allmulticast mode [ 184.579326][ T3571] bridge_slave_0: left promiscuous mode [ 184.942743][ T3571] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.952335][ T54] Bluetooth: hci4: command tx timeout [ 184.981881][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 186.021869][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 186.463655][ T3571] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 186.551490][ T3571] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 186.612317][ T3571] bond0 (unregistering): Released all slaves [ 186.803818][ T9359] bridge0: Device is already in use. [ 186.840177][ T8981] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 187.061886][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 188.101835][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 188.592243][ T9377] netlink: 228 bytes leftover after parsing attributes in process `syz.4.853'. [ 188.601405][ T9377] netlink: 8 bytes leftover after parsing attributes in process `syz.4.853'. [ 188.655561][ T9157] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 188.722334][ T9377] netlink: 228 bytes leftover after parsing attributes in process `syz.4.853'. [ 188.742352][ T8981] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.769876][ T9377] netlink: 8 bytes leftover after parsing attributes in process `syz.4.853'. [ 188.804411][ T3571] hsr_slave_0: left promiscuous mode [ 188.830150][ T3571] hsr_slave_1: left promiscuous mode [ 188.896125][ T3571] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.912168][ T3571] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.992849][ T3571] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.000418][ T3571] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.108683][ T3571] veth1_macvtap: left promiscuous mode [ 189.141891][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 189.172089][ T3571] veth0_macvtap: left promiscuous mode [ 189.177851][ T3571] veth1_vlan: left promiscuous mode [ 189.222400][ T3571] veth0_vlan: left promiscuous mode [ 190.184378][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 191.223590][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 192.265408][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 193.301850][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 194.343227][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 194.678914][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.383490][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 196.424237][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 196.749101][ T5857] Bluetooth: hci1: command 0x0406 tx timeout [ 197.465002][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 197.516413][ T3571] team0 (unregistering): Port device team_slave_1 removed [ 197.619889][ T3571] team0 (unregistering): Port device team_slave_0 removed [ 198.502196][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 199.546722][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 200.584197][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 201.622859][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 202.663767][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 203.704835][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 204.745042][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 205.197733][ T5857] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 205.220746][ T5857] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 205.238174][ T5857] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 205.249478][ T5857] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 205.260085][ T5857] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 205.268240][ T5857] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 205.498522][ T9157] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 205.552170][ T9389] netlink: 'syz.3.856': attribute type 10 has an invalid length. [ 205.781781][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 206.027419][ T9157] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 206.462135][ T9157] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 206.624752][ T9394] vcan0 speed is unknown, defaulting to 1000 [ 206.793513][ T8981] veth0_vlan: entered promiscuous mode [ 206.821791][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 206.901317][ T8981] veth1_vlan: entered promiscuous mode [ 207.083841][ T8981] veth0_macvtap: entered promiscuous mode [ 207.312084][ T5857] Bluetooth: hci5: command tx timeout [ 207.332608][ T8981] veth1_macvtap: entered promiscuous mode [ 207.488057][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 207.502529][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 207.513386][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 207.526916][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 207.534890][ T5847] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 207.568501][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 207.861825][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 208.901766][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 209.387401][ T5847] Bluetooth: hci5: command tx timeout [ 209.445201][ T9394] lo speed is unknown, defaulting to 1000 [ 209.568128][ T8981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.579386][ T8981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.591007][ T8981] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.601946][ T8981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.612593][ T8981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.624694][ T8981] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.635252][ T8981] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.644261][ T8981] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.653148][ T8981] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.662108][ T8981] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.739782][ T5857] Bluetooth: hci1: command tx timeout [ 210.042042][ T9410] vcan0 speed is unknown, defaulting to 1000 [ 210.129282][ T9157] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.376503][ T3571] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.485293][ T9410] lo speed is unknown, defaulting to 1000 [ 210.583319][ T6905] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.597636][ T6905] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.669729][ T3571] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.910754][ T3571] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.972723][ T9157] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.060952][ T3571] team0: Port device netdevsim0 removed [ 211.077596][ T3571] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.120262][ T9195] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 211.138442][ T9195] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 211.205210][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.238741][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.287712][ T9195] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 211.339464][ T9195] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 211.426284][ T9394] chnl_net:caif_netlink_parms(): no params data found [ 211.462537][ T5857] Bluetooth: hci5: command tx timeout [ 211.491698][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.498929][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.548731][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.555963][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.792238][ T5857] Bluetooth: hci1: command tx timeout [ 213.542769][ T5857] Bluetooth: hci5: command tx timeout [ 213.863118][ T5857] Bluetooth: hci1: command tx timeout [ 215.373362][ T9047] ================================================================== [ 215.381510][ T9047] BUG: KASAN: slab-use-after-free in device_for_each_child+0xbb/0x1b0 [ 215.389826][ T9047] Read of size 8 at addr ffff8880623bd308 by task kbnepd bnep0/9047 [ 215.398040][ T9047] [ 215.400493][ T9047] CPU: 0 UID: 0 PID: 9047 Comm: kbnepd bnep0 Not tainted 6.12.0-rc7-syzkaller-00144-g66418447d27b #0 [ 215.411388][ T9047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 215.421495][ T9047] Call Trace: [ 215.424822][ T9047] [ 215.427788][ T9047] dump_stack_lvl+0x241/0x360 [ 215.432526][ T9047] ? __pfx_dump_stack_lvl+0x10/0x10 [ 215.437810][ T9047] ? __pfx__printk+0x10/0x10 [ 215.442634][ T9047] ? _printk+0xd5/0x120 [ 215.446943][ T9047] ? __virt_addr_valid+0x183/0x530 [ 215.452430][ T9047] ? __virt_addr_valid+0x183/0x530 [ 215.457597][ T9047] print_report+0x169/0x550 [ 215.462180][ T9047] ? __virt_addr_valid+0x183/0x530 [ 215.467361][ T9047] ? __virt_addr_valid+0x183/0x530 [ 215.472546][ T9047] ? __virt_addr_valid+0x45f/0x530 [ 215.477723][ T9047] ? __phys_addr+0xba/0x170 [ 215.482367][ T9047] ? device_for_each_child+0xbb/0x1b0 [ 215.487825][ T9047] kasan_report+0x143/0x180 [ 215.492835][ T9047] ? device_for_each_child+0xbb/0x1b0 [ 215.498399][ T9047] ? __pfx_dev_memalloc_noio+0x10/0x10 [ 215.503908][ T9047] device_for_each_child+0xbb/0x1b0 [ 215.509169][ T9047] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 215.515903][ T9047] ? __pfx_device_for_each_child+0x10/0x10 [ 215.521762][ T9047] ? _raw_spin_unlock_irq+0x23/0x50 [ 215.527024][ T9047] ? lockdep_hardirqs_on+0x99/0x150 [ 215.532406][ T9047] pm_runtime_set_memalloc_noio+0x114/0x260 [ 215.538373][ T9047] netdev_unregister_kobject+0x178/0x250 [ 215.544080][ T9047] unregister_netdevice_many_notify+0x1851/0x1da0 [ 215.550653][ T9047] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 215.557484][ T9047] ? do_raw_spin_unlock+0x13c/0x8b0 [ 215.562849][ T9047] ? __mutex_lock+0x52a/0xd70 [ 215.567597][ T9047] unregister_netdevice_queue+0x303/0x370 [ 215.573398][ T9047] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 215.579789][ T9047] ? down_write+0x18c/0x220 [ 215.585055][ T9047] ? __pfx_down_write+0x10/0x10 [ 215.590343][ T9047] unregister_netdev+0x1c/0x30 [ 215.595166][ T9047] bnep_session+0x2e0e/0x3000 [ 215.599998][ T9047] ? __pfx_bnep_session+0x10/0x10 [ 215.605163][ T9047] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 215.611558][ T9047] ? __pfx_woken_wake_function+0x10/0x10 [ 215.617252][ T9047] ? __kthread_parkme+0x169/0x1d0 [ 215.622352][ T9047] ? __pfx_bnep_session+0x10/0x10 [ 215.627471][ T9047] kthread+0x2f0/0x390 [ 215.631622][ T9047] ? __pfx_bnep_session+0x10/0x10 [ 215.637231][ T9047] ? __pfx_kthread+0x10/0x10 [ 215.641881][ T9047] ret_from_fork+0x4b/0x80 [ 215.646443][ T9047] ? __pfx_kthread+0x10/0x10 [ 215.651108][ T9047] ret_from_fork_asm+0x1a/0x30 [ 215.655931][ T9047] [ 215.658984][ T9047] [ 215.661329][ T9047] Allocated by task 8981: [ 215.665681][ T9047] kasan_save_track+0x3f/0x80 [ 215.670434][ T9047] __kasan_kmalloc+0x98/0xb0 [ 215.675091][ T9047] __kmalloc_noprof+0x1fc/0x400 [ 215.680012][ T9047] hci_alloc_dev_priv+0x27/0x2030 [ 215.685287][ T9047] vhci_create_device+0x116/0x6a0 [ 215.690367][ T9047] vhci_write+0x3cf/0x490 [ 215.694829][ T9047] vfs_write+0xaeb/0xd30 [ 215.699122][ T9047] ksys_write+0x183/0x2b0 [ 215.703546][ T9047] do_syscall_64+0xf3/0x230 [ 215.708110][ T9047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.714060][ T9047] [ 215.716414][ T9047] Freed by task 8981: [ 215.720431][ T9047] kasan_save_track+0x3f/0x80 [ 215.725170][ T9047] kasan_save_free_info+0x40/0x50 [ 215.730250][ T9047] __kasan_slab_free+0x59/0x70 [ 215.735160][ T9047] kfree+0x1a0/0x440 [ 215.739157][ T9047] hci_release_dev+0x1525/0x16b0 [ 215.744171][ T9047] bt_host_release+0x83/0x90 [ 215.748871][ T9047] device_release+0x99/0x1c0 [ 215.753614][ T9047] kobject_put+0x22f/0x480 [ 215.758262][ T9047] vhci_release+0x88/0xd0 [ 215.762830][ T9047] __fput+0x23f/0x880 [ 215.766996][ T9047] task_work_run+0x24f/0x310 [ 215.771996][ T9047] do_exit+0xa2f/0x28e0 [ 215.776211][ T9047] do_group_exit+0x207/0x2c0 [ 215.780838][ T9047] __x64_sys_exit_group+0x3f/0x40 [ 215.785913][ T9047] x64_sys_call+0x2634/0x2640 [ 215.790642][ T9047] do_syscall_64+0xf3/0x230 [ 215.795548][ T9047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.801531][ T9047] [ 215.803898][ T9047] Last potentially related work creation: [ 215.809647][ T9047] kasan_save_stack+0x3f/0x60 [ 215.814382][ T9047] __kasan_record_aux_stack+0xac/0xc0 [ 215.819815][ T9047] insert_work+0x3e/0x330 [ 215.824282][ T9047] __queue_work+0xc8b/0xf50 [ 215.828831][ T9047] queue_work_on+0x1c2/0x380 [ 215.833470][ T9047] l2cap_chan_send+0x3d6/0x2690 [ 215.838400][ T9047] l2cap_sock_sendmsg+0x1b4/0x2c0 [ 215.843492][ T9047] __sock_sendmsg+0x221/0x270 [ 215.848235][ T9047] kernel_sendmsg+0x151/0x220 [ 215.852986][ T9047] bnep_session+0x287a/0x3000 [ 215.857706][ T9047] kthread+0x2f0/0x390 [ 215.861844][ T9047] ret_from_fork+0x4b/0x80 [ 215.866323][ T9047] ret_from_fork_asm+0x1a/0x30 [ 215.871202][ T9047] [ 215.873569][ T9047] Second to last potentially related work creation: [ 215.880612][ T9047] kasan_save_stack+0x3f/0x60 [ 215.885545][ T9047] __kasan_record_aux_stack+0xac/0xc0 [ 215.890984][ T9047] insert_work+0x3e/0x330 [ 215.895369][ T9047] __queue_work+0xc8b/0xf50 [ 215.899934][ T9047] queue_work_on+0x1c2/0x380 [ 215.904578][ T9047] l2cap_chan_send+0x3d6/0x2690 [ 215.909487][ T9047] l2cap_sock_sendmsg+0x1b4/0x2c0 [ 215.914567][ T9047] __sock_sendmsg+0x221/0x270 [ 215.919291][ T9047] kernel_sendmsg+0x151/0x220 [ 215.924196][ T9047] bnep_session+0x287a/0x3000 [ 215.928930][ T9047] kthread+0x2f0/0x390 [ 215.933056][ T9047] ret_from_fork+0x4b/0x80 [ 215.937604][ T9047] ret_from_fork_asm+0x1a/0x30 [ 215.942423][ T9047] [ 215.944840][ T9047] The buggy address belongs to the object at ffff8880623bc000 [ 215.944840][ T9047] which belongs to the cache kmalloc-8k of size 8192 [ 215.958950][ T9047] The buggy address is located 4872 bytes inside of [ 215.958950][ T9047] freed 8192-byte region [ffff8880623bc000, ffff8880623be000) [ 215.973419][ T9047] [ 215.975780][ T9047] The buggy address belongs to the physical page: [ 215.982239][ T9047] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff8880623b8000 pfn:0x623b8 [ 215.992370][ T9047] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 216.001010][ T9047] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 216.009567][ T9047] page_type: f5(slab) [ 216.013729][ T9047] raw: 00fff00000000240 ffff88801ac42280 ffffea000176ba10 ffffea0001f37c10 [ 216.022446][ T9047] raw: ffff8880623b8000 0000000000020001 00000001f5000000 0000000000000000 [ 216.031088][ T9047] head: 00fff00000000240 ffff88801ac42280 ffffea000176ba10 ffffea0001f37c10 [ 216.039805][ T9047] head: ffff8880623b8000 0000000000020001 00000001f5000000 0000000000000000 [ 216.048623][ T9047] head: 00fff00000000003 ffffea000188ee01 ffffffffffffffff 0000000000000000 [ 216.057520][ T9047] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 216.066252][ T9047] page dumped because: kasan: bad access detected [ 216.072728][ T9047] page_owner tracks the page as allocated [ 216.078487][ T9047] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 8701, tgid 8701 (syz-executor), ts 166354481781, free_ts 166333209168 [ 216.100079][ T9047] post_alloc_hook+0x1f3/0x230 [ 216.104938][ T9047] get_page_from_freelist+0x3649/0x3790 [ 216.110536][ T9047] __alloc_pages_noprof+0x292/0x710 [ 216.115797][ T9047] alloc_pages_mpol_noprof+0x3e8/0x680 [ 216.121301][ T9047] alloc_slab_page+0x6a/0x140 [ 216.126021][ T9047] allocate_slab+0x5a/0x2f0 [ 216.130574][ T9047] ___slab_alloc+0xcd1/0x14b0 [ 216.135315][ T9047] __slab_alloc+0x58/0xa0 [ 216.139698][ T9047] __kmalloc_node_noprof+0x286/0x440 [ 216.145044][ T9047] __kvmalloc_node_noprof+0x72/0x190 [ 216.150396][ T9047] pfifo_fast_init+0x389/0x6e0 [ 216.155212][ T9047] qdisc_create_dflt+0x136/0x4b0 [ 216.160194][ T9047] dev_activate+0x3c0/0x1240 [ 216.164828][ T9047] __dev_open+0x352/0x450 [ 216.169290][ T9047] __dev_change_flags+0x1e2/0x6f0 [ 216.174370][ T9047] dev_change_flags+0x8b/0x1a0 [ 216.179179][ T9047] page last free pid 5510 tgid 5510 stack trace: [ 216.185547][ T9047] free_unref_page+0xdf9/0x1140 [ 216.190549][ T9047] __put_partials+0xeb/0x130 [ 216.195293][ T9047] put_cpu_partial+0x17c/0x250 [ 216.200112][ T9047] __slab_free+0x2ea/0x3d0 [ 216.204575][ T9047] qlist_free_all+0x9a/0x140 [ 216.209241][ T9047] kasan_quarantine_reduce+0x14f/0x170 [ 216.214927][ T9047] __kasan_slab_alloc+0x23/0x80 [ 216.219823][ T9047] kmem_cache_alloc_node_noprof+0x16b/0x320 [ 216.225954][ T9047] __alloc_skb+0x1c3/0x440 [ 216.230411][ T9047] netlink_sendmsg+0x638/0xcb0 [ 216.235229][ T9047] __sock_sendmsg+0x221/0x270 [ 216.240155][ T9047] __sys_sendto+0x39b/0x4f0 [ 216.244971][ T9047] __x64_sys_sendto+0xde/0x100 [ 216.249784][ T9047] do_syscall_64+0xf3/0x230 [ 216.254421][ T9047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.260498][ T9047] [ 216.262870][ T9047] Memory state around the buggy address: [ 216.268538][ T9047] ffff8880623bd200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 216.276898][ T9047] ffff8880623bd280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 216.285034][ T9047] >ffff8880623bd300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 216.293131][ T9047] ^ [ 216.297496][ T9047] ffff8880623bd380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 216.305601][ T9047] ffff8880623bd400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 216.313699][ T9047] ================================================================== [ 216.361615][ T5847] Bluetooth: hci1: command tx timeout SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 216.561794][ T9047] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 216.569514][ T9047] CPU: 0 UID: 0 PID: 9047 Comm: kbnepd bnep0 Not tainted 6.12.0-rc7-syzkaller-00144-g66418447d27b #0 [ 216.580414][ T9047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 216.590516][ T9047] Call Trace: [ 216.593838][ T9047] [ 216.596818][ T9047] dump_stack_lvl+0x241/0x360 [ 216.601552][ T9047] ? __pfx_dump_stack_lvl+0x10/0x10 [ 216.606825][ T9047] ? __pfx__printk+0x10/0x10 [ 216.611469][ T9047] ? preempt_schedule+0xe1/0xf0 [ 216.616406][ T9047] ? vscnprintf+0x5d/0x90 [ 216.620801][ T9047] panic+0x349/0x880 [ 216.624943][ T9047] ? check_panic_on_warn+0x21/0xb0 [ 216.630179][ T9047] ? __pfx_panic+0x10/0x10 [ 216.634662][ T9047] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 216.640697][ T9047] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 216.647094][ T9047] ? print_report+0x502/0x550 [ 216.651843][ T9047] check_panic_on_warn+0x86/0xb0 [ 216.656839][ T9047] ? device_for_each_child+0xbb/0x1b0 [ 216.662267][ T9047] end_report+0x77/0x160 [ 216.666557][ T9047] kasan_report+0x154/0x180 [ 216.671106][ T9047] ? device_for_each_child+0xbb/0x1b0 [ 216.676538][ T9047] ? __pfx_dev_memalloc_noio+0x10/0x10 [ 216.682081][ T9047] device_for_each_child+0xbb/0x1b0 [ 216.687331][ T9047] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 216.693805][ T9047] ? __pfx_device_for_each_child+0x10/0x10 [ 216.699834][ T9047] ? _raw_spin_unlock_irq+0x23/0x50 [ 216.705083][ T9047] ? lockdep_hardirqs_on+0x99/0x150 [ 216.710345][ T9047] pm_runtime_set_memalloc_noio+0x114/0x260 [ 216.716303][ T9047] netdev_unregister_kobject+0x178/0x250 [ 216.722004][ T9047] unregister_netdevice_many_notify+0x1851/0x1da0 [ 216.728526][ T9047] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 216.735358][ T9047] ? do_raw_spin_unlock+0x13c/0x8b0 [ 216.740614][ T9047] ? __mutex_lock+0x52a/0xd70 [ 216.745344][ T9047] unregister_netdevice_queue+0x303/0x370 [ 216.751128][ T9047] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 216.757436][ T9047] ? down_write+0x18c/0x220 [ 216.762035][ T9047] ? __pfx_down_write+0x10/0x10 [ 216.766939][ T9047] unregister_netdev+0x1c/0x30 [ 216.771873][ T9047] bnep_session+0x2e0e/0x3000 [ 216.776731][ T9047] ? __pfx_bnep_session+0x10/0x10 [ 216.781925][ T9047] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 216.788338][ T9047] ? __pfx_woken_wake_function+0x10/0x10 [ 216.794131][ T9047] ? __kthread_parkme+0x169/0x1d0 [ 216.799215][ T9047] ? __pfx_bnep_session+0x10/0x10 [ 216.804303][ T9047] kthread+0x2f0/0x390 [ 216.808414][ T9047] ? __pfx_bnep_session+0x10/0x10 [ 216.813501][ T9047] ? __pfx_kthread+0x10/0x10 [ 216.818131][ T9047] ret_from_fork+0x4b/0x80 [ 216.822655][ T9047] ? __pfx_kthread+0x10/0x10 [ 216.827286][ T9047] ret_from_fork_asm+0x1a/0x30 [ 216.832108][ T9047] [ 216.835463][ T9047] Kernel Offset: disabled [ 216.840346][ T9047] Rebooting in 86400 seconds..