last executing test programs: 1m28.87256726s ago: executing program 2 (id=396): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f00000000c0)={0x10000006}) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a09040000000000000000020000000900020073797a32000000000900010073797a300000000028000480240001800b0001006f7874686472000014000280080003400000004a0800064000000001140000401100010000000000000000000000000a"], 0x7c}, 0x1, 0x0, 0x0, 0x4820}, 0x4000080) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="840000001000f5a400000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000006400128009000100626f6e640000000054000280050001000500000005000d000200000008000200", @ANYRES32=0x0, @ANYBLOB="06001800030000000500060004000000050016000100000008001c"], 0x84}}, 0x0) 1m11.087481227s ago: executing program 2 (id=396): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f00000000c0)={0x10000006}) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a09040000000000000000020000000900020073797a32000000000900010073797a300000000028000480240001800b0001006f7874686472000014000280080003400000004a0800064000000001140000401100010000000000000000000000000a"], 0x7c}, 0x1, 0x0, 0x0, 0x4820}, 0x4000080) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="840000001000f5a400000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000006400128009000100626f6e640000000054000280050001000500000005000d000200000008000200", @ANYRES32=0x0, @ANYBLOB="06001800030000000500060004000000050016000100000008001c"], 0x84}}, 0x0) 54.439598504s ago: executing program 2 (id=396): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f00000000c0)={0x10000006}) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a09040000000000000000020000000900020073797a32000000000900010073797a300000000028000480240001800b0001006f7874686472000014000280080003400000004a0800064000000001140000401100010000000000000000000000000a"], 0x7c}, 0x1, 0x0, 0x0, 0x4820}, 0x4000080) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="840000001000f5a400000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000006400128009000100626f6e640000000054000280050001000500000005000d000200000008000200", @ANYRES32=0x0, @ANYBLOB="06001800030000000500060004000000050016000100000008001c"], 0x84}}, 0x0) 38.125880719s ago: executing program 2 (id=396): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f00000000c0)={0x10000006}) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a09040000000000000000020000000900020073797a32000000000900010073797a300000000028000480240001800b0001006f7874686472000014000280080003400000004a0800064000000001140000401100010000000000000000000000000a"], 0x7c}, 0x1, 0x0, 0x0, 0x4820}, 0x4000080) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="840000001000f5a400000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000006400128009000100626f6e640000000054000280050001000500000005000d000200000008000200", @ANYRES32=0x0, @ANYBLOB="06001800030000000500060004000000050016000100000008001c"], 0x84}}, 0x0) 24.113384549s ago: executing program 2 (id=396): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f00000000c0)={0x10000006}) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a09040000000000000000020000000900020073797a32000000000900010073797a300000000028000480240001800b0001006f7874686472000014000280080003400000004a0800064000000001140000401100010000000000000000000000000a"], 0x7c}, 0x1, 0x0, 0x0, 0x4820}, 0x4000080) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="840000001000f5a400000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000006400128009000100626f6e640000000054000280050001000500000005000d000200000008000200", @ANYRES32=0x0, @ANYBLOB="06001800030000000500060004000000050016000100000008001c"], 0x84}}, 0x0) 10.447107571s ago: executing program 2 (id=396): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f00000000c0)={0x10000006}) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a09040000000000000000020000000900020073797a32000000000900010073797a300000000028000480240001800b0001006f7874686472000014000280080003400000004a0800064000000001140000401100010000000000000000000000000a"], 0x7c}, 0x1, 0x0, 0x0, 0x4820}, 0x4000080) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="840000001000f5a400000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000006400128009000100626f6e640000000054000280050001000500000005000d000200000008000200", @ANYRES32=0x0, @ANYBLOB="06001800030000000500060004000000050016000100000008001c"], 0x84}}, 0x0) 4.76802954s ago: executing program 0 (id=1243): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x47, &(0x7f0000000380), &(0x7f00000003c0)=0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x40, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]]}, 0x40}, 0x1, 0x0, 0x0, 0x4000001}, 0x2400400c) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x44080) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd26, 0x25dfdbfb, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xa, 0xa}}}, 0x24}}, 0xe45e3ef513bdeb1d) r7 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r4, &(0x7f0000000000)={0x2c, 0x9, r6, 0x23, r7}, 0x10) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, 0x0) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r11, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000140)=@generic={0x0}, 0x18) listen(0xffffffffffffffff, 0x3) sendmsg$NLBL_CALIPSO_C_ADD(r10, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, 0x0, 0x0) socket(0x11, 0x800000003, 0x0) ioctl$sock_proto_private(r9, 0x89ef, &(0x7f0000000480)) 3.276317614s ago: executing program 4 (id=1254): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000e27f000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000134c2651638af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000e80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000001440)={'ip_vti0\x00', 0x0}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xd10, 0x2, 0x1, 0x2, 0x7, 0x1}, &(0x7f0000000240)=0x20) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r2, 0x36, 0x0, 0x4, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r4, 0x29, 0x4, 0x0, &(0x7f0000000340)) getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000001300)={0x0, 0x6e2}, &(0x7f0000001340)=0x8) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newlink={0x30, 0x10, 0x100, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x85}, 0x0) connect$can_bcm(r1, &(0x7f0000000000), 0x10) 3.064730897s ago: executing program 4 (id=1256): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x28}}, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x180, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x16c, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xd4, 0x3, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0x0, 0x3, {0x2, 0xea3, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0x1, 0x8, {0x2, 0x2}}}}]}]}, 0x180}}, 0x0) 2.674770221s ago: executing program 4 (id=1258): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000052100000008000300", @ANYRES32=r2, @ANYBLOB="10007d80", @ANYBLOB="4960b0f860d1631450d543d46877a406c0013916cd454e69b2e75e76f22e13ccfa6203bb09ec6ce75d46470faad47a1eff7da732915fe9009e9c5d96adc7e2b647"], 0x2c}}, 0x0) 2.479724445s ago: executing program 4 (id=1260): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x24}}, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000e00)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r0) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f00000086c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000064c0)={&(0x7f0000000d40)={0x1c, r1, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.304455772s ago: executing program 4 (id=1262): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x4c, 0x16, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0xc0}}, 0x40) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94171000) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, 0x0, 0x40000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000140)={0x0, {}, {0x2, 0x0, @multicast2}, {0x2, 0x0, @broadcast}, 0x103}) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x40, 0x0, 0x9, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x100}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x9e0d8c73238b069b) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000240)) 2.090815174s ago: executing program 1 (id=1266): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbf525017c0000100036800c00020007000000000000000c00018008001600", @ANYRES32=0xee01], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f0000000140)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004885}, 0x200000c0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000000)=0xffffffff, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r2) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000980)={0x30, r3, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x8002, 0x1, 0x0, 0x4}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x9004) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x10, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="850000006c000000720a00ff00000000730a9fff00000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r6, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x0, 0xbc, &(0x7f0000000240)=[{}, {}], 0x10, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x1e, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x323}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}]}, 0x38}}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='memory.events\x00', 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000580)={'tunl0\x00', &(0x7f0000000500)={'gretap0\x00', r7, 0x1, 0x7c9, 0x7, 0x1000, {{0x15, 0x4, 0x3, 0x3c, 0x54, 0x68, 0x0, 0xb, 0x2f, 0x0, @loopback, @private=0xa010100, {[@end, @ssrr={0x89, 0x2b, 0xe9, [@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x38}, @local, @broadcast, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, @private=0xa010102, @broadcast, @remote]}, @cipso={0x86, 0x11, 0x0, [{0x2, 0x4, "e7a9"}, {0x3, 0x2}, {0x7, 0x5, "76da41"}]}]}}}}}) 1.870376581s ago: executing program 0 (id=1268): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2711, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r2, 0x6, 0xd, 0x0, 0x0) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000240)={0x0, 0x100}, 0x8) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r3 = accept(r0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000280)={'bond0\x00', &(0x7f0000000200)=@ethtool_cmd={0x23, 0x8, 0x8, 0xfff, 0x0, 0x4a, 0x0, 0x8, 0x4, 0x80, 0x378, 0x2, 0x1, 0x40, 0x40, 0x3, [0x6, 0x1ff]}}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1c1341, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mem_connect\x00', r5}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x38, 0x7, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) 1.86942812s ago: executing program 1 (id=1269): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async, rerun: 64) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'lo\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket(0x10, 0x3, 0x0) sendto$isdn(r4, &(0x7f0000000100)={0x9, 0x50ee}, 0x8, 0xc044, &(0x7f0000000080)={0x22, 0x6, 0x7, 0x40, 0x7}, 0x6) (async, rerun: 64) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) (rerun: 64) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x2000) (async, rerun: 32) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010024bd7000e8dbdf252100000008000300", @ANYRES32=r7, @ANYBLOB="08009e00"], 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x0) 1.591992699s ago: executing program 1 (id=1270): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x4045}, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmmsg$inet6(r2, &(0x7f0000004cc0)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x1fc, @private0, 0x401}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000240)="0c436195dbd60e68ced9859b9a88e344b9b58fcce42e15c3d99f46204f463f866e9259c16cd63800a6f2e14e65b41776dcb485c2deeb47efa1cd2d01cce45d4f850f025077d184bcd699018b49dcba0109bb680c2f14b33f75a3995b36f72477f4b2b7add8224afe7c2bdfd077", 0x6d}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8e}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000c40)="ea", 0x1}], 0x1}}], 0x2, 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r3, 0x0, 0x0, 0x1}, 0x20) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_pktinfo(r5, 0x0, 0x8, 0x0, &(0x7f0000000040)) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e24, 0x0, @empty}}, 0x0, 0x1, 0x3bf8580d, 0x0, 0xb3550aa4ba878396, 0x2}, 0x9c) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="34000000100039042cbd70000000000000000000", @ANYRES32=r6, @ANYBLOB="059800000020000014001280080001006772650008000280040012"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="38000000100039042bbd7000f8dbdf25000000005ccbdbca12e11084ef36fcf4631f5f2eb05d2e92789261314610c55beafa28956c98661872e55c10f0be45b794e7fbff2ea1606ebb203e710f828f300710a310febfacb769", @ANYRES32=r6, @ANYBLOB="8bafea1f000000001800128008000100677265000c00028008000700e0000001"], 0x38}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000300)={'veth0\x00', &(0x7f00000005c0)=@ethtool_gstrings={0x1b, 0x8, 0x7c, "b2d5456a40ef01fcf1db317a6e3aba630f6055f168f7e9d9a2a350593d3bc76234118b6f6ecb8aca9682d101e865728ecf62bf429a8d9601e6b573fcfb07e0b98697a1e76e6c772eb0d003f617b3ec621b1116f254e0194f2faeed02d07fa72c27204e18bb52de158389c962efe7e4aef112448c5a0c42661fb94622"}}) r9 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="0000000014002400000000000000000000000000b50b2386fed1f456cb9056c3dd294cf6ad680d3ead0342412953"], 0x14}}, 0x0) 1.167952693s ago: executing program 1 (id=1273): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000000)=0x202, 0x4) setsockopt$inet6_buf(r1, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) sendto$inet6(r1, &(0x7f0000000b80)="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", 0x5c5, 0x0, &(0x7f0000000180)={0xa, 0x5e64, 0x100000, @mcast2, 0x4}, 0x1c) unshare(0x20000400) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000000)=@id={0x1e, 0x3, 0x2, {0x4e23, 0x2}}, 0x10) recvmmsg(r1, &(0x7f0000001340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffffd}}}, 0x108) 1.030054072s ago: executing program 1 (id=1275): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040001}, 0x800) (async, rerun: 32) r4 = socket$alg(0x26, 0x5, 0x0) (rerun: 32) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-avx\x00'}, 0x58) (async) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$inet6(r5, &(0x7f0000007100)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="9433ddb02192333d0ddf82345dd51f69e790c9aa6b7a2dd9f3d62389ae3f5de6958517ffa2604658020102be1ff80346a75e730a563a3c399a69", 0x3a}, {&(0x7f00000002c0)="d528114f7555af2259f49941fa70efaf87cfeb690e915573a720c22cc7f5d76d2a", 0x21}, {&(0x7f0000000300)="1e7dcf6c7d328f08118be502714b26ffb667cfaa99e9b1d73a76001675d56fd8840bf93f2f35", 0x26}], 0x3}}], 0x1, 0x0) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)={0x1, 0x4fc34febd88dce84, 0x0, {0x0, 0xea60}, {0x77359400}, {}, 0x1, @canfd={{0x9, 0x1}, 0x28, 0x3, 0x0, 0x0, "b3f3977f7f02d0de100f60dbb8411104d7083c34a7fb805d0db92d7774e6d9083d92a51fcc14b37a34d142de05289818e27a3b586f163144d23a1f995d95769f"}}, 0x80}, 0x2, 0x0, 0x0, 0x4000000}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) (async, rerun: 64) r9 = socket$packet(0x11, 0x3, 0x300) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) (async) syz_emit_ethernet(0x56, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "170100", 0x20, 0x2b, 0x0, @remote, @local, {[@routing={0x0, 0x0, 0x2}], {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}}, 0x0) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@bridge_dellink={0x2c, 0x13, 0x1, 0x70bd27, 0x0, {0x7, 0x0, 0x0, r10, 0x410a2, 0x14188}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x5, 0x0, 0x1, {0x4, 0x5}}]}]}, 0x2c}}, 0x0) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="058000000000000000000b00000008000300", @ANYRES32=r8, @ANYBLOB='\b\x00\f\x00d\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) 924.150511ms ago: executing program 3 (id=1276): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000900)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x0, 0x110, 0x220, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xf, 0x1}}}, {{@arp={@rand_addr=0x64010100, @multicast1, 0xffffffff, 0x0, 0x5, 0x9, {@empty, {[0xff, 0x0, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@remote, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0xd, 0x2, 0xc, 0x7b, 0x7f, 0x5, 'veth1_to_bridge\x00', 'ipvlan0\x00', {0xff}, {0xff}, 0x0, 0x6d}, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @loopback, @local, 0x1}}}, {{@arp={@rand_addr=0x64010100, @loopback, 0x0, 0x0, 0x0, 0xf, {@mac=@random="02020000e300"}, {@mac=@multicast, {[0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x9bf, 0x0, 0xfffd, 0x3, 0x0, 0x0, 'geneve0\x00', 'netpci0\x00', {0xff}}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x5, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req={0x2, 0x6, 0x5, 0x5}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="060000006a081c7880124a6c4d168255e9ecac0c05cd20c1a90daa56df000800010000000000086b0e00c9cc738ee30add", @ANYRES32=r3, @ANYBLOB="0400090004000b0004000b00"], 0x34}, 0x1, 0x0, 0x0, 0x48000}, 0x40) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x4000825) 816.007784ms ago: executing program 0 (id=1277): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x20, 0x20, 0x8, 0xc, {{0xe, 0x4, 0x1, 0x5, 0x38, 0x65, 0x0, 0x4, 0x6, 0x0, @private=0xa010101, @remote, {[@ssrr={0x89, 0x1b, 0x6a, [@multicast1, @dev={0xac, 0x14, 0x14, 0xc}, @local, @local, @dev={0xac, 0x14, 0x14, 0x32}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @generic={0x82, 0x7, "468bd3bb67"}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000a80)={0x270, 0x0, 0x410, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8}, {0x14c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7add}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x101}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6d}}, {0x8}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x77}}, {0x8}}}]}}]}, 0x270}, 0x1, 0x0, 0x0, 0x1}, 0x4004) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000611227180000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x8, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 780.163222ms ago: executing program 3 (id=1278): socket$nl_sock_diag(0x10, 0x3, 0x4) (async) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x303, 0x70bd2d, 0xfffffffd, {0x0, 0x4, 0x2, 0x0, {0x4e22, 0x4e23, [0x4, 0x7, 0xfffffffa, 0x4000000], [0x2, 0x80, 0xfff], 0x0, [0x7]}, 0x2, 0x2}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040849}, 0x8004) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@mpls_getnetconf={0x14, 0x52, 0x111, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000804}, 0x20048840) 609.091679ms ago: executing program 3 (id=1279): r0 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0x401) listen(r1, 0x0) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000000)=0xffffffffffffffff) shutdown(r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b70500000700004c1bb07e8b3f26ffff04003550000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) 552.074806ms ago: executing program 1 (id=1280): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000002000010000000000000000000a802040000000080000000014000200fe8000000000000000000000000000bb14000100fe8000010000000000000000000000bb"], 0x44}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000340)="e7ff", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "db"}]}], {0x14}}, 0x7c}}, 0x0) pipe(&(0x7f00000003c0)) (async) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r5, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="bc04000000050104000000000000000000000000540201000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000003405be39dc2a3ba9f2d90eca67823d459716e3f50fc1e8682163f65134d25ad2"], 0x4bc}, 0x1, 0x0, 0x0, 0x4004811}, 0x0) (async) sendmsg$OSF_MSG_ADD(r5, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="bc04000000050104000000000000000000000000540201000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000003405be39dc2a3ba9f2d90eca67823d459716e3f50fc1e8682163f65134d25ad2"], 0x4bc}, 0x1, 0x0, 0x0, 0x4004811}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) splice(r4, 0x0, r6, 0x0, 0x1140000000f336, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r8 = gettid() sendmsg$unix(r7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=[@cred={{0x1c, 0x1, 0x2, {r8}}}], 0x20}, 0x0) write$cgroup_pid(r4, &(0x7f0000000000)=r8, 0x12) (async) write$cgroup_pid(r4, &(0x7f0000000000)=r8, 0x12) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) 496.540985ms ago: executing program 3 (id=1281): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r0, 0x0, 0xf69}, 0x18) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r2 = socket(0x26, 0x1, 0x0) sendmsg$SMC_PNETID_DEL(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x78, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6erspan0\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x4000) 434.653183ms ago: executing program 0 (id=1282): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000d00)=0x4002, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000380)={'gre0\x00', r2, 0x20, 0x40, 0x6, 0x9, {{0xb, 0x4, 0x3, 0x2e, 0x2c, 0x64, 0x0, 0x4, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}, @private=0xa010100, {[@timestamp={0x44, 0x8, 0x51, 0x0, 0x1, [0x4d]}, @ssrr={0x89, 0xf, 0xa7, [@local, @private=0xa010102, @broadcast]}]}}}}}) sendto$packet(r1, 0x0, 0x0, 0x8010, &(0x7f0000000240)={0x11, 0xf7, r3, 0x1, 0x20, 0x6, @local}, 0x14) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000080)=0x9, 0x4) recvfrom$packet(r1, 0x0, 0x0, 0x2000, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x20, 0x12, 0x1, 0x70bd26, 0x25dfdbfb, {0xa}, [@nested={0xa, 0x0, 0x0, 0x1, [@generic="05a0d534322e"]}]}, 0x20}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014006000000035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a1a83d5f59e3d", 0xd8}], 0x1}, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000840)="ecbddc31", 0x4, 0x4, &(0x7f0000000340)={0x11, 0x8100, r7, 0x1, 0x0, 0x6, @local}, 0x14) close(r4) sendmsg$sock(r4, &(0x7f00000001c0)={&(0x7f0000000040)=@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80, &(0x7f0000000140)=[{&(0x7f00000000c0)="c2928cdc8a2284a89f779be41cc6340d115e4ad2280c09276c3b710162919e0cc49c58b4ca8496a610db3d4001dd33ca6cc039618f3321df4f7d01a5d708d3673b25f098db867f991fc1f594511dd4a68695b8389b6db3f37de14f77d33d30962c79d0068dd5cb2f46122143279e72c9faeaeab9ed86098bf43c35b80055", 0x7e}], 0x1, &(0x7f0000000180)=[@txtime={{0x18}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}], 0x30}, 0x4000000) 244.176084ms ago: executing program 0 (id=1283): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300024000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d65746100000000140002800800014000000012080002400000002114000000110001"], 0xd8}}, 0x0) 236.114157ms ago: executing program 3 (id=1284): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x24}}, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000e00)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r0) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f00000086c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000064c0)={&(0x7f0000000d40)={0x1c, r1, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 123.448746ms ago: executing program 3 (id=1285): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1810b82c65aff862272f073c972164c90946cd8f1d9fc1db47"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f00000000c0)=0xeed8e09ecfe7acd0) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f0000000540)=ANY=[@ANYRES32=r1]) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x800442d2, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x4, 0x4, 0x20, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfffffffb, 0x0, 0x400, 0x0, 0x9, 0x0, [0x3]}}) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x28, 0x2d, 0xb, 0x0, 0x0, {0x2}, [@typed={0x8, 0x3, 0x0, 0x0, @u32=0x10004}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x88H'}]}]}, 0x28}}, 0x8000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc6751dfb265a0e3ccae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fd52347125907000000000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df262ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada12f7a1001500a710eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff000000000000000000000000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18a904c0e585a66c3b84b138efc20a546d3d5227e23b03f2a834391ad24fe7d9b20cf92cb151763d41f5c76e2ff3e93ee296c4082ee73e7e197253a2b66c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0842b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f04c7f0be31491eb8c9ff68236c8600000000000000000000000066e034c81c3cab4e33fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f2243471221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b53c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000700)='cachefiles_ondemand_copen\x00', r5}, 0x10) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000100)={0x10000004}) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x2}, 0x50) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x7d, 0x0, r8, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x3}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r9, 0xffffffbb, &(0x7f0000000300)}, 0xffffffffffffff5f) 113.549415ms ago: executing program 0 (id=1286): sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}}, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$unix(r0, &(0x7f0000000100)=@abs={0x27}, 0x6e) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000200)=@gcm_128={{0x304, 0x39}, "1a0a00", "37a0906df45a6f4f40b151634357ea00", "00c28700", "de3f106b925ded4d"}, 0xffc9) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x2d, &(0x7f0000000000)=[{0x2, 0x0, 0x0, 0xfffffffd}, {0x6, 0x0, 0x0, 0x2}]}) 0s ago: executing program 4 (id=1287): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x74}}, 0x80) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x74}}, 0x80) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$igmp6(0xa, 0x3, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x1, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x80) (async) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x1, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x80) r2 = socket(0x1, 0x803, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x15, 0x301, 0x0, 0x0, {0xc}, [@typed={0x8, 0x1, 0x0, 0x0, @fd=r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000884) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x15, 0x301, 0x0, 0x0, {0xc}, [@typed={0x8, 0x1, 0x0, 0x0, @fd=r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000884) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000044000701fcffff7c00000c0004"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) kernel console output (not intermixed with test programs): e hsr debugfs directory [ 73.585557][ T5829] hsr_slave_0: entered promiscuous mode [ 73.593479][ T5829] hsr_slave_1: entered promiscuous mode [ 73.599889][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.607642][ T5829] Cannot create hsr debugfs directory [ 73.724017][ T5846] hsr_slave_0: entered promiscuous mode [ 73.730403][ T5846] hsr_slave_1: entered promiscuous mode [ 73.738328][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.746660][ T5846] Cannot create hsr debugfs directory [ 74.193290][ T5828] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 74.209733][ T5828] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 74.222605][ T5828] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 74.242756][ T5828] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 74.303675][ T5832] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.320638][ T5832] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.343262][ T5832] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.366250][ T5832] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.425690][ T5846] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.447668][ T5846] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.474333][ T5846] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.486037][ T5846] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.588631][ T5829] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.634449][ T5829] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.668420][ T5829] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.692278][ T5829] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.734127][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.746390][ T5831] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.759503][ T5831] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.769706][ T5831] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.802510][ T5831] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.850554][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.865413][ T5845] Bluetooth: hci0: command tx timeout [ 74.887900][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.900822][ T5117] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.908164][ T5117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.930774][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.937569][ T5834] Bluetooth: hci1: command tx timeout [ 74.937671][ T5845] Bluetooth: hci2: command tx timeout [ 74.944789][ T5845] Bluetooth: hci3: command tx timeout [ 74.989075][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.001808][ T5117] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.009114][ T5117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.017306][ T5845] Bluetooth: hci4: command tx timeout [ 75.050292][ T1332] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.057442][ T1332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.069474][ T1332] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.076644][ T1332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.107949][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.147672][ T1320] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.154842][ T1320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.200521][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.207729][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.339725][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.430239][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.459920][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.527202][ T1106] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.534358][ T1106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.576133][ T1106] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.583763][ T1106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.601155][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.642368][ T1320] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.649607][ T1320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.661802][ T1320] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.668940][ T1320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.789590][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.823188][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.047843][ T5832] veth0_vlan: entered promiscuous mode [ 76.108272][ T5832] veth1_vlan: entered promiscuous mode [ 76.179696][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.242158][ T5832] veth0_macvtap: entered promiscuous mode [ 76.282365][ T5832] veth1_macvtap: entered promiscuous mode [ 76.331528][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.367525][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.389881][ T5846] veth0_vlan: entered promiscuous mode [ 76.400396][ T5832] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.425663][ T5832] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.434422][ T5832] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.456238][ T5832] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.500556][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.520115][ T5846] veth1_vlan: entered promiscuous mode [ 76.562587][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.649272][ T5846] veth0_macvtap: entered promiscuous mode [ 76.678315][ T5828] veth0_vlan: entered promiscuous mode [ 76.700628][ T5846] veth1_macvtap: entered promiscuous mode [ 76.738816][ T5829] veth0_vlan: entered promiscuous mode [ 76.750713][ T5117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.752472][ T5829] veth1_vlan: entered promiscuous mode [ 76.767311][ T5117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.789981][ T5828] veth1_vlan: entered promiscuous mode [ 76.830321][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.858682][ T5831] veth0_vlan: entered promiscuous mode [ 76.881680][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.893136][ T1320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.905509][ T5846] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.914242][ T5846] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.923107][ T1320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.931060][ T5846] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.941993][ T5846] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.945674][ T5845] Bluetooth: hci0: command tx timeout [ 76.956861][ T5831] veth1_vlan: entered promiscuous mode [ 77.017779][ T5834] Bluetooth: hci2: command tx timeout [ 77.019178][ T5150] Bluetooth: hci1: command tx timeout [ 77.023381][ T5845] Bluetooth: hci3: command tx timeout [ 77.068415][ T5832] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 77.100987][ T5845] Bluetooth: hci4: command tx timeout [ 77.127153][ T5829] veth0_macvtap: entered promiscuous mode [ 77.201031][ T5831] veth0_macvtap: entered promiscuous mode [ 77.211171][ T5828] veth0_macvtap: entered promiscuous mode [ 77.232955][ T5829] veth1_macvtap: entered promiscuous mode [ 77.233274][ T5947] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3'. [ 77.243094][ T5831] veth1_macvtap: entered promiscuous mode [ 77.263931][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.272756][ T5828] veth1_macvtap: entered promiscuous mode [ 77.279038][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.285578][ T5948] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 77.298714][ T5947] 0XD: renamed from gretap0 (while UP) [ 77.308217][ T5947] 0XD: entered allmulticast mode [ 77.314223][ T5947] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 77.394382][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.421523][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.446819][ T5829] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.456971][ T5829] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.466227][ T5829] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.478294][ T5829] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.503677][ T1332] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.513686][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.522335][ T1332] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.533711][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.548657][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.581444][ T5831] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.592422][ T5831] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.606870][ T5831] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.615696][ T5831] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.637443][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.722508][ T5828] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.734342][ T5828] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.765396][ T5828] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.781811][ T5828] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.788115][ T5956] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 77.804002][ T5956] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'. [ 77.832824][ T5958] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 78.023565][ T5117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.045266][ T5117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.073726][ T5966] Zero length message leads to an empty skb [ 78.084407][ T5117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.106822][ T5117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.182169][ T1332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.198728][ T1332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.286446][ T1320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.294455][ T1320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.394255][ T1332] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.418304][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.433427][ T1332] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.457726][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.670777][ T5979] team0: No ports can be present during mode change [ 79.016535][ T5845] Bluetooth: hci0: command tx timeout [ 79.099473][ T5993] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 79.107446][ T5845] Bluetooth: hci1: command tx timeout [ 79.107465][ T5150] Bluetooth: hci3: command tx timeout [ 79.112846][ T5845] Bluetooth: hci2: command tx timeout [ 79.135484][ T5993] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 79.186132][ T5150] Bluetooth: hci4: command tx timeout [ 79.270882][ T6004] netlink: 20 bytes leftover after parsing attributes in process `syz.1.18'. [ 79.360564][ T6008] netlink: 'syz.2.19': attribute type 1 has an invalid length. [ 79.432028][ T6008] ip6erspan0: entered promiscuous mode [ 79.513169][ T6012] syz.0.21 uses obsolete (PF_INET,SOCK_PACKET) [ 79.749657][ T6027] ip6gre1: entered allmulticast mode [ 79.953772][ T6038] xt_policy: neither incoming nor outgoing policy selected [ 80.183163][ T6046] netlink: 20 bytes leftover after parsing attributes in process `syz.4.27'. [ 80.317194][ T6053] netlink: 'syz.0.31': attribute type 20 has an invalid length. [ 80.886156][ T6075] xt_CT: You must specify a L4 protocol and not use inversions on it [ 80.886224][ T6073] netlink: 16 bytes leftover after parsing attributes in process `syz.4.38'. [ 81.053260][ T6080] netlink: 8 bytes leftover after parsing attributes in process `syz.0.41'. [ 81.290727][ T6089] netlink: 8 bytes leftover after parsing attributes in process `syz.4.48'. [ 81.697205][ T6116] netlink: 112 bytes leftover after parsing attributes in process `syz.1.53'. [ 81.782974][ T6119] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 82.189096][ T6129] warning: `syz.3.57' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 82.499943][ T6138] __nla_validate_parse: 2 callbacks suppressed [ 82.499962][ T6138] netlink: 24 bytes leftover after parsing attributes in process `syz.3.57'. [ 82.606787][ T6145] netlink: 8 bytes leftover after parsing attributes in process `syz.4.62'. [ 82.824156][ T6152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.63'. [ 83.043422][ T6162] Unsupported ieee802154 address type: 0 [ 83.262138][ T6178] netlink: 24 bytes leftover after parsing attributes in process `syz.0.73'. [ 83.374643][ T6189] netlink: 20 bytes leftover after parsing attributes in process `syz.1.76'. [ 83.400632][ T6190] Bluetooth: MGMT ver 1.23 [ 83.611229][ T6201] netlink: 12 bytes leftover after parsing attributes in process `syz.4.82'. [ 83.832749][ T6210] netlink: 96 bytes leftover after parsing attributes in process `syz.2.84'. [ 83.875252][ T6210] 8021q: VLANs not supported on ip_vti0 [ 83.962025][ T6212] netlink: 20 bytes leftover after parsing attributes in process `syz.0.85'. [ 83.975848][ T6215] netlink: 4 bytes leftover after parsing attributes in process `syz.4.86'. [ 84.124145][ T6212] netlink: 12 bytes leftover after parsing attributes in process `syz.0.85'. [ 85.113270][ T6285] netlink: 'syz.4.95': attribute type 1 has an invalid length. [ 85.192527][ T6285] netlink: 'syz.4.95': attribute type 4 has an invalid length. [ 85.542366][ T6301] netlink: 'syz.3.101': attribute type 5 has an invalid length. [ 85.911787][ T6315] xt_hashlimit: size too large, truncated to 1048576 [ 86.010275][ T6320] bridge_slave_0: left allmulticast mode [ 86.045793][ T6320] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.107102][ T6320] bridge_slave_1: left allmulticast mode [ 86.162862][ T6320] bridge_slave_1: left promiscuous mode [ 86.169825][ T6320] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.193290][ T6320] bond0: (slave bond_slave_0): Releasing backup interface [ 86.214984][ T6320] bond0: (slave bond_slave_1): Releasing backup interface [ 86.245898][ T6320] team0: Port device team_slave_0 removed [ 86.260962][ T6320] team0: Port device team_slave_1 removed [ 86.278104][ T6320] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.297422][ T6320] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.343736][ T6320] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.387574][ T6320] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.783149][ T120] cfg80211: failed to load regulatory.db [ 86.939816][ T6349] sctp: failed to load transform for md5: -4 [ 87.598584][ T6387] x_tables: duplicate underflow at hook 2 [ 87.829758][ T6397] __nla_validate_parse: 7 callbacks suppressed [ 87.829773][ T6397] netlink: 8 bytes leftover after parsing attributes in process `syz.0.127'. [ 87.850700][ T6401] netlink: 16 bytes leftover after parsing attributes in process `syz.4.130'. [ 87.993569][ T6410] netlink: 32 bytes leftover after parsing attributes in process `syz.2.129'. [ 88.005028][ T6409] netlink: 'syz.0.131': attribute type 3 has an invalid length. [ 88.333289][ T6427] openvswitch: netlink: Actions may not be safe on all matching packets [ 88.377810][ T6427] netlink: 256 bytes leftover after parsing attributes in process `syz.3.136'. [ 88.391553][ T6427] netlink: 'syz.3.136': attribute type 9 has an invalid length. [ 88.441453][ T6432] netlink: 'syz.0.139': attribute type 4 has an invalid length. [ 88.676690][ T6440] netlink: 248 bytes leftover after parsing attributes in process `syz.2.141'. [ 88.794842][ T6449] netlink: 5 bytes leftover after parsing attributes in process `syz.1.145'. [ 88.842267][ T6453] dvmrp0: entered allmulticast mode [ 88.851820][ T6449] 0XD: renamed from gretap0 (while UP) [ 88.878612][ T6454] xt_CT: You must specify a L4 protocol and not use inversions on it [ 88.889011][ T6449] 0XD: entered allmulticast mode [ 88.907709][ T6449] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 88.943123][ T6454] IPv6: Can't replace route, no match found [ 88.971273][ T6461] netlink: 4 bytes leftover after parsing attributes in process `syz.3.148'. [ 89.124444][ T6469] openvswitch: netlink: Actions may not be safe on all matching packets [ 89.207729][ T6473] netlink: 172 bytes leftover after parsing attributes in process `syz.2.152'. [ 89.265807][ T6473] netlink: 8 bytes leftover after parsing attributes in process `syz.2.152'. [ 89.438354][ T6483] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 89.617990][ T6491] netlink: 'syz.2.158': attribute type 10 has an invalid length. [ 89.681267][ T6494] netlink: 24 bytes leftover after parsing attributes in process `syz.1.157'. [ 89.697405][ T6491] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.766016][ T6491] bond0: (slave team0): Enslaving as an active interface with an up link [ 90.120684][ T6505] xt_ecn: cannot match TCP bits for non-tcp packets [ 90.320150][ T6523] ip6t_srh: unknown srh invflags 4449 [ 90.635256][ T6536] netlink: 'syz.2.171': attribute type 1 has an invalid length. [ 90.701234][ T6536] : entered promiscuous mode [ 91.111465][ T6559] syz.1.176 (6559) used greatest stack depth: 17992 bytes left [ 91.429679][ T6580] netlink: 'syz.3.183': attribute type 2 has an invalid length. [ 91.657342][ T6580] tipc: Enabling of bearer rejected, failed to enable media [ 91.691280][ T6588] syzkaller0: entered promiscuous mode [ 91.701386][ T6588] syzkaller0: entered allmulticast mode [ 91.721571][ T6586] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) ! [ 91.781310][ T6594] netlink: 'syz.4.187': attribute type 1 has an invalid length. [ 92.835596][ T6645] __nla_validate_parse: 33 callbacks suppressed [ 92.835616][ T6645] netlink: 52 bytes leftover after parsing attributes in process `syz.3.202'. [ 92.860115][ T6645] netlink: 52 bytes leftover after parsing attributes in process `syz.3.202'. [ 92.870177][ T6645] netlink: 52 bytes leftover after parsing attributes in process `syz.3.202'. [ 92.879884][ T6645] netlink: 52 bytes leftover after parsing attributes in process `syz.3.202'. [ 92.889566][ T6645] netlink: 52 bytes leftover after parsing attributes in process `syz.3.202'. [ 92.900303][ T6645] netlink: 52 bytes leftover after parsing attributes in process `syz.3.202'. [ 92.921050][ T6645] netlink: 52 bytes leftover after parsing attributes in process `syz.3.202'. [ 92.931529][ T6645] netlink: 52 bytes leftover after parsing attributes in process `syz.3.202'. [ 92.941787][ T6645] netlink: 52 bytes leftover after parsing attributes in process `syz.3.202'. [ 92.953882][ T6649] netlink: 20 bytes leftover after parsing attributes in process `syz.1.205'. [ 93.665699][ T6690] openvswitch: netlink: Actions may not be safe on all matching packets [ 93.689632][ T6678] can: request_module (can-proto-0) failed. [ 93.819254][ T6698] x_tables: ip6_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 93.853262][ T6701] (unnamed net_device) (uninitialized): (slave 30XD): Device is not bonding slave [ 93.863532][ T6701] (unnamed net_device) (uninitialized): option active_slave: invalid value (30XD) [ 94.120968][ T6717] netlink: 'syz.0.226': attribute type 1 has an invalid length. [ 94.385962][ T6728] netlink: 'syz.0.229': attribute type 1 has an invalid length. [ 94.413652][ T6728] netlink: 'syz.0.229': attribute type 3 has an invalid length. [ 94.436994][ T6736] openvswitch: netlink: Actions may not be safe on all matching packets [ 94.642238][ T6750] Bluetooth: MGMT ver 1.23 [ 94.817142][ T6758] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 94.848509][ T6760] xt_cgroup: xt_cgroup: no path or classid specified [ 95.121594][ T6770] xt_CT: You must specify a L4 protocol and not use inversions on it [ 95.176698][ T6777] openvswitch: netlink: Actions may not be safe on all matching packets [ 95.200995][ T6775] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 95.284086][ T6775] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 95.555638][ T6795] sctp: [Deprecated]: syz.1.250 (pid 6795) Use of struct sctp_assoc_value in delayed_ack socket option. [ 95.555638][ T6795] Use struct sctp_sack_info instead [ 95.667180][ T6795] sctp: [Deprecated]: syz.1.250 (pid 6795) Use of struct sctp_assoc_value in delayed_ack socket option. [ 95.667180][ T6795] Use struct sctp_sack_info instead [ 95.966027][ T6821] netlink: 'syz.3.258': attribute type 39 has an invalid length. [ 96.534620][ T5834] Bluetooth: hci0: command 0x0c1a tx timeout [ 96.534793][ T5150] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 96.906598][ T6857] vlan2: entered promiscuous mode [ 96.911763][ T6857] bridge0: entered promiscuous mode [ 96.962889][ T6873] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 96.985226][ C1] Illegal XDP return value 16128 on prog (id 53) dev lo, expect packet loss! [ 97.540303][ T6892] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 97.610115][ T6892] pim6reg1: entered promiscuous mode [ 97.631149][ T6892] pim6reg1: entered allmulticast mode [ 97.798422][ T6909] can: request_module (can-proto-0) failed. [ 97.975764][ T6919] netlink: 'syz.4.287': attribute type 3 has an invalid length. [ 98.068912][ T6924] x_tables: duplicate underflow at hook 3 [ 98.120157][ T6927] IPv6: addrconf: prefix option has invalid lifetime [ 98.130239][ T6930] __nla_validate_parse: 21 callbacks suppressed [ 98.130256][ T6930] netlink: 16 bytes leftover after parsing attributes in process `syz.1.292'. [ 98.263871][ T6936] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.579526][ T6958] netlink: 'syz.4.300': attribute type 7 has an invalid length. [ 98.612176][ T6940] syzkaller1: entered promiscuous mode [ 98.618079][ T6940] syzkaller1: entered allmulticast mode [ 98.956817][ T6973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.301'. [ 99.783122][ T7018] netlink: 40 bytes leftover after parsing attributes in process `syz.3.317'. [ 99.877414][ T7022] netlink: 256 bytes leftover after parsing attributes in process `syz.4.319'. [ 99.886584][ T7022] netlink: 'syz.4.319': attribute type 9 has an invalid length. [ 99.912496][ T7022] netlink: 1284 bytes leftover after parsing attributes in process `syz.4.319'. [ 100.082068][ T7031] netlink: 8 bytes leftover after parsing attributes in process `syz.4.322'. [ 100.095299][ T7032] IPVS: set_ctl: invalid protocol: 50 127.0.0.1:20000 [ 100.194885][ T7038] x_tables: duplicate underflow at hook 1 [ 100.966362][ T7070] netlink: 'syz.4.332': attribute type 1 has an invalid length. [ 101.039776][ T7074] netlink: 44 bytes leftover after parsing attributes in process `syz.1.333'. [ 101.063482][ T7070] 8021q: adding VLAN 0 to HW filter on device bond1 [ 101.080607][ T7070] bond1: entered promiscuous mode [ 101.089826][ T7074] netlink: 43 bytes leftover after parsing attributes in process `syz.1.333'. [ 101.126818][ T7074] netlink: 'syz.1.333': attribute type 6 has an invalid length. [ 101.139199][ T7078] bond1: (slave geneve2): making interface the new active one [ 101.147405][ T7078] geneve2: entered promiscuous mode [ 101.152217][ T7074] netlink: 'syz.1.333': attribute type 5 has an invalid length. [ 101.156267][ T7078] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 101.194117][ T7086] netlink: 4 bytes leftover after parsing attributes in process `syz.1.333'. [ 101.209891][ T7074] netlink: 43 bytes leftover after parsing attributes in process `syz.1.333'. [ 101.226251][ T7077] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 101.252238][ T7086] bridge_slave_1: left allmulticast mode [ 101.259055][ T7086] bridge_slave_1: left promiscuous mode [ 101.269057][ T7086] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.296024][ T7086] bridge_slave_0: left allmulticast mode [ 101.301729][ T7086] bridge_slave_0: left promiscuous mode [ 101.312847][ T7086] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.441660][ T7092] pimreg: entered allmulticast mode [ 101.447927][ T7095] pimreg: left allmulticast mode [ 102.036723][ T7127] tipc: MTU too low for tipc bearer [ 102.225804][ T7139] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 102.233831][ T7139] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 102.358301][ T7145] netlink: 'syz.0.354': attribute type 2 has an invalid length. [ 102.577491][ T7155] bridge0: port 3(batadv1) entered blocking state [ 102.586327][ T7155] bridge0: port 3(batadv1) entered disabled state [ 102.592960][ T7155] batadv1: entered allmulticast mode [ 102.602036][ T7155] batadv1: entered promiscuous mode [ 103.082427][ T6270] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 103.092061][ T6270] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 103.885718][ T7206] veth5: entered allmulticast mode [ 104.064083][ T7219] netlink: 'syz.0.379': attribute type 4 has an invalid length. [ 104.120487][ T7224] netlink: 'syz.0.379': attribute type 4 has an invalid length. [ 104.172461][ T7219] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 104.287299][ T7236] __nla_validate_parse: 3 callbacks suppressed [ 104.287318][ T7236] netlink: 104 bytes leftover after parsing attributes in process `syz.1.384'. [ 104.307462][ T7232] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 104.552456][ T7242] netlink: 16 bytes leftover after parsing attributes in process `syz.3.387'. [ 104.818658][ T7250] netlink: 4 bytes leftover after parsing attributes in process `syz.4.390'. [ 105.743988][ T7295] netlink: 20 bytes leftover after parsing attributes in process `syz.0.405'. [ 105.753763][ T7293] !: renamed from dummy0 (while UP) [ 105.835938][ T7296] netlink: 36 bytes leftover after parsing attributes in process `syz.0.405'. [ 105.932431][ T7299] netlink: 'syz.4.406': attribute type 15 has an invalid length. [ 105.953401][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 105.957402][ T7299] netlink: 24 bytes leftover after parsing attributes in process `syz.4.406'. [ 105.979495][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 106.005025][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 106.015940][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 106.033454][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 106.053306][ T7309] trusted_key: syz.3.407 sent an empty control message without MSG_MORE. [ 106.895614][ T7335] netdevsim netdevsim4: Direct firmware load for /. failed with error -2 [ 106.933043][ T7335] netdevsim netdevsim4: Falling back to sysfs fallback for: /. [ 107.031644][ T7329] syzkaller0: entered promiscuous mode [ 107.037735][ T7329] syzkaller0: entered allmulticast mode [ 107.213233][ T7347] xt_bpf: check failed: parse error [ 108.137623][ T5150] Bluetooth: hci2: command tx timeout [ 108.494079][ T7344] kthread_run failed with err -4 [ 108.500025][ T7351] sit0: entered promiscuous mode [ 108.516870][ T7351] netlink: 'syz.4.417': attribute type 1 has an invalid length. [ 108.538531][ T7351] netlink: 1 bytes leftover after parsing attributes in process `syz.4.417'. [ 108.685458][ T7357] openvswitch: netlink: Port 10289156 exceeds max allowable 65535 [ 108.959901][ T7362] xt_connbytes: Forcing CT accounting to be enabled [ 108.971585][ T7362] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 108.988108][ T7381] netlink: 4 bytes leftover after parsing attributes in process `syz.3.423'. [ 109.003248][ T7301] chnl_net:caif_netlink_parms(): no params data found [ 109.011555][ T7379] netlink: 'syz.0.422': attribute type 4 has an invalid length. [ 109.023751][ T7377] netlink: 40 bytes leftover after parsing attributes in process `syz.0.422'. [ 109.037976][ T7377] netlink: 40 bytes leftover after parsing attributes in process `syz.0.422'. [ 109.413033][ T7403] __nla_validate_parse: 1 callbacks suppressed [ 109.413051][ T7403] netlink: 36 bytes leftover after parsing attributes in process `syz.3.429'. [ 109.413600][ T7301] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.437607][ T7301] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.446491][ T7301] bridge_slave_0: entered allmulticast mode [ 109.454963][ T7301] bridge_slave_0: entered promiscuous mode [ 109.467177][ T7301] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.474699][ T7301] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.482094][ T7301] bridge_slave_1: entered allmulticast mode [ 109.491455][ T7301] bridge_slave_1: entered promiscuous mode [ 109.498695][ T7407] netlink: 8 bytes leftover after parsing attributes in process `syz.3.429'. [ 109.691611][ T7301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.752946][ T7301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.877391][ T7301] team0: Port device team_slave_0 added [ 109.924541][ T7301] team0: Port device team_slave_1 added [ 110.129226][ T7301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.148611][ T7403] infiniband syz0: set down [ 110.157089][ T7301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.197592][ T7403] infiniband syz0: added bond_slave_0 [ 110.214730][ T5150] Bluetooth: hci2: command tx timeout [ 110.258833][ T7403] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 110.269673][ T7403] infiniband syz0: Couldn't open port 1 [ 110.284678][ T7301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.321996][ T7301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.338287][ T7301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.410048][ T7301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.436415][ T7403] RDS/IB: syz0: added [ 110.441081][ T7403] smc: adding ib device syz0 with port count 1 [ 110.457185][ T7403] smc: ib device syz0 port 1 has pnetid [ 110.501514][ T7434] vlan2: entered promiscuous mode [ 110.533857][ T7434] vlan2: entered allmulticast mode [ 110.540855][ T7434] hsr_slave_1: entered allmulticast mode [ 110.766199][ T7301] hsr_slave_0: entered promiscuous mode [ 110.772888][ T7301] hsr_slave_1: entered promiscuous mode [ 110.795811][ T7301] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 110.815508][ T7301] Cannot create hsr debugfs directory [ 111.470222][ T7462] netlink: 36 bytes leftover after parsing attributes in process `syz.0.445'. [ 111.627986][ T7301] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.819978][ T7301] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.907452][ T7477] netlink: 12 bytes leftover after parsing attributes in process `syz.0.448'. [ 111.936795][ T7301] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.181798][ T7301] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.238459][ T7488] netlink: 8 bytes leftover after parsing attributes in process `syz.4.449'. [ 112.261407][ T7490] netlink: 24 bytes leftover after parsing attributes in process `syz.0.450'. [ 112.283413][ T7488] netlink: 24 bytes leftover after parsing attributes in process `syz.4.449'. [ 112.295680][ T5150] Bluetooth: hci2: command tx timeout [ 112.828975][ T7301] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 112.887013][ T7301] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 112.917782][ T7517] netlink: 'syz.1.455': attribute type 2 has an invalid length. [ 112.955502][ T7517] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.455'. [ 112.987360][ T7514] ip6gre1: entered allmulticast mode [ 112.997455][ T7517] nbd: must specify a device to reconfigure [ 113.060283][ T7301] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 113.098958][ T7301] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 113.120622][ T7522] netlink: 'syz.4.457': attribute type 1 has an invalid length. [ 113.319473][ T7534] netlink: 24 bytes leftover after parsing attributes in process `syz.0.458'. [ 113.519646][ T7301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.624257][ T7301] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.686287][ T7545] net veth1_virt_wifi .: renamed from virt_wifi0 [ 113.756388][ T6259] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.763565][ T6259] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.848853][ T6259] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.856110][ T6259] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.929701][ T7558] netlink: 12 bytes leftover after parsing attributes in process `syz.0.465'. [ 114.374848][ T5150] Bluetooth: hci2: command tx timeout [ 114.974047][ T7301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.078289][ T7603] netlink: 'syz.1.474': attribute type 13 has an invalid length. [ 115.107817][ T7603] veth0_macvtap: left promiscuous mode [ 115.127390][ T7603] macvtap0: entered allmulticast mode [ 115.171103][ T7603] macvtap0: refused to change device tx_queue_len [ 115.300274][ T7608] __nla_validate_parse: 1 callbacks suppressed [ 115.300293][ T7608] netlink: 20 bytes leftover after parsing attributes in process `syz.0.475'. [ 115.310124][ T7301] veth0_vlan: entered promiscuous mode [ 115.401785][ T7301] veth1_vlan: entered promiscuous mode [ 115.589239][ T7620] netlink: 24 bytes leftover after parsing attributes in process `syz.1.477'. [ 115.602338][ T7301] veth0_macvtap: entered promiscuous mode [ 115.689984][ T7301] veth1_macvtap: entered promiscuous mode [ 115.764121][ T7301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.810127][ T7301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.847735][ T7301] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.865351][ T7301] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.887359][ T7301] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.900846][ T7301] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.102063][ T7634] netlink: 16 bytes leftover after parsing attributes in process `syz.0.482'. [ 116.253594][ T6255] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.266927][ T7645] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 116.309959][ T6255] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.333571][ T7653] sctp: [Deprecated]: syz.0.486 (pid 7653) Use of int in maxseg socket option. [ 116.333571][ T7653] Use struct sctp_assoc_value instead [ 116.392932][ T7651] wg1: entered promiscuous mode [ 116.451454][ T7657] IPv6: sit1: Disabled Multicast RS [ 116.545213][ T7645] netlink: 4 bytes leftover after parsing attributes in process `syz.3.484'. [ 116.592037][ T7662] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 116.611711][ T7641] syzkaller0: entered promiscuous mode [ 116.638379][ T7647] netlink: 12 bytes leftover after parsing attributes in process `syz.3.484'. [ 116.662343][ T7641] syzkaller0: entered allmulticast mode [ 116.723206][ T6261] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.732069][ T6261] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.686809][ T7687] netlink: 104 bytes leftover after parsing attributes in process `syz.4.496'. [ 118.432233][ T7672] syzkaller1: entered promiscuous mode [ 118.439737][ T7672] syzkaller1: entered allmulticast mode [ 118.622718][ T7691] netlink: 44 bytes leftover after parsing attributes in process `syz.1.497'. [ 118.646555][ T7694] netlink: 20 bytes leftover after parsing attributes in process `syz.3.499'. [ 118.649006][ T7696] netlink: 8 bytes leftover after parsing attributes in process `syz.4.498'. [ 118.668185][ T7691] netlink: 43 bytes leftover after parsing attributes in process `syz.1.497'. [ 118.695367][ T7691] netlink: 'syz.1.497': attribute type 5 has an invalid length. [ 119.186164][ T6265] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.406685][ T6265] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.450405][ T7723] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma? [ 119.637787][ T6265] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.671908][ T7728] netlink: 'syz.3.506': attribute type 3 has an invalid length. [ 119.843667][ T6265] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.237952][ T7746] netlink: 'syz.1.511': attribute type 75 has an invalid length. [ 120.335857][ T6265] bridge_slave_1: left allmulticast mode [ 120.351406][ T6265] bridge_slave_1: left promiscuous mode [ 120.388630][ T6265] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.459297][ T6265] bridge_slave_0: left allmulticast mode [ 120.466377][ T6265] bridge_slave_0: left promiscuous mode [ 120.472335][ T6265] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.540704][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 120.553194][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 120.568310][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 120.578436][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 120.630921][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 121.163501][ T6265] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 121.175745][ T6265] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 121.187220][ T6265] bond0 (unregistering): Released all slaves [ 121.205366][ T7763] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.214352][ T7763] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.224533][ T7763] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.233259][ T7763] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.469290][ T7788] __nla_validate_parse: 10 callbacks suppressed [ 121.469309][ T7788] netlink: 64 bytes leftover after parsing attributes in process `syz.4.519'. [ 121.664711][ T7797] ip6t_srh: unknown srh invflags 4449 [ 121.750642][ T7801] netlink: 'syz.0.521': attribute type 1 has an invalid length. [ 121.918849][ T7810] netlink: 4 bytes leftover after parsing attributes in process `syz.3.524'. [ 122.126490][ T7819] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 122.133802][ T7819] IPv6: NLM_F_CREATE should be set when creating new route [ 122.141117][ T7819] IPv6: NLM_F_CREATE should be set when creating new route [ 122.337930][ T7829] netlink: 2 bytes leftover after parsing attributes in process `syz.4.530'. [ 122.426938][ T7838] netlink: 2 bytes leftover after parsing attributes in process `syz.4.530'. [ 122.694923][ T5834] Bluetooth: hci2: command tx timeout [ 123.147783][ T7866] netlink: 20 bytes leftover after parsing attributes in process `syz.0.538'. [ 123.157000][ T7866] netlink: 20 bytes leftover after parsing attributes in process `syz.0.538'. [ 123.462572][ T7877] FAULT_INJECTION: forcing a failure. [ 123.462572][ T7877] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 123.544694][ T7877] CPU: 1 UID: 0 PID: 7877 Comm: syz.3.542 Not tainted 6.16.0-rc3-syzkaller-00131-g72fb83735c71 #0 PREEMPT(full) [ 123.544717][ T7877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 123.544731][ T7877] Call Trace: [ 123.544737][ T7877] [ 123.544743][ T7877] dump_stack_lvl+0x189/0x250 [ 123.544776][ T7877] ? __pfx____ratelimit+0x10/0x10 [ 123.544796][ T7877] ? __pfx_dump_stack_lvl+0x10/0x10 [ 123.544818][ T7877] ? __pfx__printk+0x10/0x10 [ 123.544846][ T7877] should_fail_ex+0x414/0x560 [ 123.544886][ T7877] _copy_to_user+0x31/0xb0 [ 123.544905][ T7877] simple_read_from_buffer+0xe1/0x170 [ 123.544926][ T7877] proc_fail_nth_read+0x1df/0x250 [ 123.544949][ T7877] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 123.544973][ T7877] ? rw_verify_area+0x258/0x650 [ 123.544997][ T7877] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 123.545019][ T7877] vfs_read+0x200/0x980 [ 123.545049][ T7877] ? __pfx___mutex_lock+0x10/0x10 [ 123.545074][ T7877] ? __pfx_vfs_read+0x10/0x10 [ 123.545099][ T7877] ? __fget_files+0x2a/0x420 [ 123.545123][ T7877] ? __fget_files+0x3a0/0x420 [ 123.545140][ T7877] ? __fget_files+0x2a/0x420 [ 123.545168][ T7877] ksys_read+0x145/0x250 [ 123.545195][ T7877] ? __pfx_ksys_read+0x10/0x10 [ 123.545216][ T7877] ? rcu_is_watching+0x15/0xb0 [ 123.545248][ T7877] ? do_syscall_64+0xbe/0x3b0 [ 123.545268][ T7877] do_syscall_64+0xfa/0x3b0 [ 123.545282][ T7877] ? lockdep_hardirqs_on+0x9c/0x150 [ 123.545305][ T7877] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.545322][ T7877] ? clear_bhb_loop+0x60/0xb0 [ 123.545354][ T7877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.545371][ T7877] RIP: 0033:0x7f39a338d33c [ 123.545393][ T7877] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 123.545407][ T7877] RSP: 002b:00007f39a41aa030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 123.545426][ T7877] RAX: ffffffffffffffda RBX: 00007f39a35b5fa0 RCX: 00007f39a338d33c [ 123.545439][ T7877] RDX: 000000000000000f RSI: 00007f39a41aa0a0 RDI: 0000000000000008 [ 123.545449][ T7877] RBP: 00007f39a41aa090 R08: 0000000000000000 R09: 0000000000000000 [ 123.545459][ T7877] R10: 0000000000000076 R11: 0000000000000246 R12: 0000000000000001 [ 123.545470][ T7877] R13: 0000000000000000 R14: 00007f39a35b5fa0 R15: 00007ffd3fa64828 [ 123.545500][ T7877] [ 123.546353][ T6265] hsr_slave_0: left promiscuous mode [ 123.792741][ T6265] hsr_slave_1: left promiscuous mode [ 123.799519][ T7887] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 123.809938][ T6265] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.817547][ T6265] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.830495][ T6265] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.838172][ T6265] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.861744][ T6265] veth1_macvtap: left promiscuous mode [ 123.867666][ T6265] veth0_macvtap: left promiscuous mode [ 123.873263][ T6265] veth1_vlan: left promiscuous mode [ 123.878829][ T6265] veth0_vlan: left promiscuous mode [ 124.315335][ T6265] team0 (unregistering): Port device team_slave_1 removed [ 124.359481][ T6265] team0 (unregistering): Port device team_slave_0 removed [ 124.784942][ T5834] Bluetooth: hci2: command tx timeout [ 124.945671][ T7890] netlink: 8 bytes leftover after parsing attributes in process `syz.3.546'. [ 124.974118][ T7890] netlink: 12 bytes leftover after parsing attributes in process `syz.3.546'. [ 125.026578][ T7764] chnl_net:caif_netlink_parms(): no params data found [ 125.243007][ T7906] netlink: 'syz.3.552': attribute type 10 has an invalid length. [ 125.331073][ T7906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.414375][ T7906] team0: Port device bond0 added [ 125.463680][ T7912] ip6tnl1: entered promiscuous mode [ 125.469322][ T7912] ip6tnl1: entered allmulticast mode [ 125.474977][ T7912] bond0: (slave ip6tnl1): refused to change device type [ 125.647179][ T7764] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.654358][ T7764] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.675814][ T7764] bridge_slave_0: entered allmulticast mode [ 125.683656][ T7764] bridge_slave_0: entered promiscuous mode [ 125.765534][ T7764] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.772754][ T7764] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.833486][ T7934] netlink: 12 bytes leftover after parsing attributes in process `syz.3.556'. [ 125.835720][ T7764] bridge_slave_1: entered allmulticast mode [ 125.898644][ T7764] bridge_slave_1: entered promiscuous mode [ 125.993187][ T7934] netlink: 4 bytes leftover after parsing attributes in process `syz.3.556'. [ 126.258009][ T7953] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 126.279197][ T7958] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 126.381947][ T7958] macsec1: entered allmulticast mode [ 126.393796][ T7958] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 126.428547][ T7958] mac80211_hwsim hwsim7 wlan0: left allmulticast mode [ 126.436062][ T7958] mac80211_hwsim hwsim7 wlan0: left promiscuous mode [ 126.477270][ T7764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.512213][ T7764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.523347][ T7961] netlink: 'syz.4.562': attribute type 29 has an invalid length. [ 126.546709][ T7961] __nla_validate_parse: 1 callbacks suppressed [ 126.546724][ T7961] netlink: 4 bytes leftover after parsing attributes in process `syz.4.562'. [ 126.559667][ T7970] netlink: 256 bytes leftover after parsing attributes in process `syz.0.564'. [ 126.575002][ T7970] unsupported nlmsg_type 40 [ 126.706921][ T7764] team0: Port device team_slave_0 added [ 126.710579][ T7976] netlink: 16 bytes leftover after parsing attributes in process `syz.1.565'. [ 126.775522][ T7974] netlink: 8 bytes leftover after parsing attributes in process `syz.4.566'. [ 126.777148][ T7764] team0: Port device team_slave_1 added [ 126.801445][ T7976] netlink: 16 bytes leftover after parsing attributes in process `syz.1.565'. [ 126.855229][ T5150] Bluetooth: hci2: command tx timeout [ 126.878359][ T7983] netlink: 248 bytes leftover after parsing attributes in process `syz.0.568'. [ 126.894889][ T7985] netlink: 16 bytes leftover after parsing attributes in process `syz.3.567'. [ 126.973515][ T7988] netlink: 'syz.1.569': attribute type 1 has an invalid length. [ 126.999950][ T7988] netlink: 224 bytes leftover after parsing attributes in process `syz.1.569'. [ 127.019913][ T7988] netlink: 8 bytes leftover after parsing attributes in process `syz.1.569'. [ 127.033881][ T7990] netlink: 'syz.1.569': attribute type 1 has an invalid length. [ 127.043600][ T7990] netlink: 224 bytes leftover after parsing attributes in process `syz.1.569'. [ 127.125351][ T7764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.132362][ T7764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.223240][ T7764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.335277][ T7764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.342275][ T7764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.400484][ T7764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.692682][ T7764] hsr_slave_0: entered promiscuous mode [ 127.716787][ T7764] hsr_slave_1: entered promiscuous mode [ 127.723933][ T7764] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 127.763081][ T7764] Cannot create hsr debugfs directory [ 128.294561][ T8045] openvswitch: netlink: nsh attr 11011 is out of range max 3 [ 128.326602][ T8045] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 128.532907][ T8054] sctp: [Deprecated]: syz.4.586 (pid 8054) Use of struct sctp_assoc_value in delayed_ack socket option. [ 128.532907][ T8054] Use struct sctp_sack_info instead [ 128.571958][ T8051] netlink: 'syz.1.584': attribute type 1 has an invalid length. [ 128.613595][ T8051] netlink: 'syz.1.584': attribute type 2 has an invalid length. [ 128.931491][ T8058] syzkaller0: entered promiscuous mode [ 128.935072][ T5150] Bluetooth: hci2: command 0x0419 tx timeout [ 128.939917][ T8058] syzkaller0: entered allmulticast mode [ 131.019332][ T5834] Bluetooth: hci2: command 0x0419 tx timeout [ 131.427162][ T8126] ipt_REJECT: TCP_RESET invalid for non-tcp [ 131.447974][ T8129] netlink: 'syz.4.600': attribute type 1 has an invalid length. [ 131.460845][ T8129] netlink: 'syz.4.600': attribute type 3 has an invalid length. [ 131.508207][ T8124] veth0: entered promiscuous mode [ 131.556843][ T8123] veth0: left promiscuous mode [ 131.861844][ T8152] netlink: 'syz.3.604': attribute type 4 has an invalid length. [ 131.924742][ T8141] netlink: 'syz.3.604': attribute type 4 has an invalid length. [ 131.937522][ T8153] __nla_validate_parse: 7 callbacks suppressed [ 131.937541][ T8153] netlink: 12 bytes leftover after parsing attributes in process `syz.1.605'. [ 132.003342][ T8153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.605'. [ 132.035718][ T8156] netlink: 8 bytes leftover after parsing attributes in process `syz.1.605'. [ 132.052132][ T8153] netlink: 24 bytes leftover after parsing attributes in process `syz.1.605'. [ 132.088687][ T8156] nbd: couldn't find a device at index -373156329 [ 132.109510][ T8153] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 132.127875][ T7764] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 132.156346][ T7764] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 132.201243][ T7764] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 132.253081][ T7764] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 132.311052][ T8172] netlink: 'syz.1.608': attribute type 10 has an invalid length. [ 132.402246][ T8172] batman_adv: batadv0: Adding interface: team0 [ 132.413561][ T8172] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.446797][ T8172] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 132.642719][ T8184] netlink: 20 bytes leftover after parsing attributes in process `syz.4.610'. [ 132.694411][ T8186] netlink: 32 bytes leftover after parsing attributes in process `syz.1.611'. [ 132.704671][ T8184] netlink: 20 bytes leftover after parsing attributes in process `syz.4.610'. [ 132.722825][ T7764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.740362][ T8188] netlink: 32 bytes leftover after parsing attributes in process `syz.1.611'. [ 132.801182][ T7764] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.860293][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.870480][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.880817][ T6255] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.888042][ T6255] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.920982][ T8193] netlink: 'syz.0.613': attribute type 1 has an invalid length. [ 132.941514][ T8193] netlink: 224 bytes leftover after parsing attributes in process `syz.0.613'. [ 132.980773][ T6270] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.987986][ T6270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.020210][ T8200] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 133.280089][ T8209] netlink: 64 bytes leftover after parsing attributes in process `syz.0.618'. [ 133.935492][ T8242] tipc: Enabling of bearer rejected, failed to enable media [ 134.235823][ T8254] netlink: 'syz.1.626': attribute type 20 has an invalid length. [ 134.308854][ T8255] netlink: 'syz.1.626': attribute type 153 has an invalid length. [ 134.336480][ T8259] xt_l2tp: unknown flags: 18 [ 134.474078][ T7764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.725615][ T7764] veth0_vlan: entered promiscuous mode [ 134.764743][ T7764] veth1_vlan: entered promiscuous mode [ 134.873904][ T7764] veth0_macvtap: entered promiscuous mode [ 134.942614][ T7764] veth1_macvtap: entered promiscuous mode [ 135.013281][ T7764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.060732][ T7764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.073403][ T7764] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.082896][ T7764] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.098251][ T7764] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.124594][ T7764] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.232216][ T8295] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 135.284795][ T8295] batman_adv: batadv0: Adding interface: netdevsim0 [ 135.314063][ T8295] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.367693][ T8295] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 135.876908][ T1332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.908482][ T1332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.981839][ T8332] netlink: 'syz.3.643': attribute type 178 has an invalid length. [ 136.016616][ T6265] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.038461][ T6265] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.298191][ T8345] syzkaller1: entered promiscuous mode [ 136.303721][ T8345] syzkaller1: entered allmulticast mode [ 137.302493][ T8368] team0: Port device bond0 removed [ 137.310684][ T8368] bond0 (unregistering): Released all slaves [ 137.432817][ T6259] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.651485][ T6259] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.737299][ T8384] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 138.032152][ T6259] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.178487][ T5150] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 138.187680][ T5150] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 138.203510][ T5150] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 138.240061][ T5150] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 138.255800][ T5150] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 138.291539][ T6259] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.734958][ T8430] netlink: 'syz.0.659': attribute type 3 has an invalid length. [ 138.948286][ T6259] bridge_slave_1: left allmulticast mode [ 138.966608][ T6259] bridge_slave_1: left promiscuous mode [ 138.972471][ T6259] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.989212][ T8440] openvswitch: netlink: IP tunnel dst address not specified [ 139.037475][ T6259] bridge_slave_0: left allmulticast mode [ 139.052214][ T6259] bridge_slave_0: left promiscuous mode [ 139.069523][ T6259] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.138964][ T8445] __nla_validate_parse: 10 callbacks suppressed [ 139.138984][ T8445] netlink: 20 bytes leftover after parsing attributes in process `syz.0.661'. [ 139.842373][ T6259] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 139.858143][ T6259] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 139.868996][ T6259] bond0 (unregistering): Released all slaves [ 140.294776][ T5834] Bluetooth: hci2: command tx timeout [ 140.408830][ T8486] netlink: 'syz.3.665': attribute type 11 has an invalid length. [ 140.410643][ T8473] ip6gre2: entered allmulticast mode [ 140.528241][ T8488] syz.4.667: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 140.559771][ T8488] CPU: 1 UID: 0 PID: 8488 Comm: syz.4.667 Not tainted 6.16.0-rc3-syzkaller-00131-g72fb83735c71 #0 PREEMPT(full) [ 140.559796][ T8488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 140.559806][ T8488] Call Trace: [ 140.559814][ T8488] [ 140.559822][ T8488] dump_stack_lvl+0x189/0x250 [ 140.559855][ T8488] ? __pfx_dump_stack_lvl+0x10/0x10 [ 140.559880][ T8488] ? __pfx__printk+0x10/0x10 [ 140.559898][ T8488] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 140.559918][ T8488] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 140.559939][ T8488] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 140.559960][ T8488] warn_alloc+0x214/0x310 [ 140.559986][ T8488] ? __pfx_warn_alloc+0x10/0x10 [ 140.560014][ T8488] ? __get_vm_area_node+0x28f/0x300 [ 140.560032][ T8488] ? packet_set_ring+0x6f4/0x2380 [ 140.560058][ T8488] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 140.560107][ T8488] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 140.560127][ T8488] ? alloc_pages_mpol+0x3cd/0x4a0 [ 140.560148][ T8488] ? packet_set_ring+0x6f4/0x2380 [ 140.560169][ T8488] vzalloc_noprof+0xb2/0xf0 [ 140.560187][ T8488] ? packet_set_ring+0x6f4/0x2380 [ 140.560209][ T8488] packet_set_ring+0x6f4/0x2380 [ 140.560253][ T8488] ? __pfx_packet_set_ring+0x10/0x10 [ 140.560294][ T8488] ? _copy_from_user+0x94/0xb0 [ 140.560315][ T8488] packet_setsockopt+0xc5a/0x12c0 [ 140.560339][ T8488] ? __pfx_packet_setsockopt+0x10/0x10 [ 140.560357][ T8488] ? __handle_mm_fault+0x3ce3/0x5620 [ 140.560380][ T8488] ? __lock_acquire+0xab9/0xd20 [ 140.560413][ T8488] ? css_rstat_updated+0x1a5/0xca0 [ 140.560444][ T8488] ? aa_sk_perm+0x81e/0x950 [ 140.560469][ T8488] ? __pfx_aa_sk_perm+0x10/0x10 [ 140.560486][ T8488] ? __lock_acquire+0xab9/0xd20 [ 140.560513][ T8488] ? aa_sock_opt_perm+0x74/0x110 [ 140.560534][ T8488] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 140.560554][ T8488] ? __pfx_packet_setsockopt+0x10/0x10 [ 140.560577][ T8488] do_sock_setsockopt+0x257/0x3e0 [ 140.560599][ T8488] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 140.560622][ T8488] ? __fget_files+0x2a/0x420 [ 140.560649][ T8488] __x64_sys_setsockopt+0x18b/0x220 [ 140.560674][ T8488] do_syscall_64+0xfa/0x3b0 [ 140.560687][ T8488] ? lockdep_hardirqs_on+0x9c/0x150 [ 140.560709][ T8488] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.560726][ T8488] ? clear_bhb_loop+0x60/0xb0 [ 140.560745][ T8488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.560761][ T8488] RIP: 0033:0x7f4c3fb8e929 [ 140.560776][ T8488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.560789][ T8488] RSP: 002b:00007f4c40a3c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 140.560807][ T8488] RAX: ffffffffffffffda RBX: 00007f4c3fdb6160 RCX: 00007f4c3fb8e929 [ 140.560820][ T8488] RDX: 000000000000000d RSI: 0000000000000107 RDI: 0000000000000003 [ 140.560830][ T8488] RBP: 00007f4c3fc10b39 R08: 000000000000001c R09: 0000000000000000 [ 140.560840][ T8488] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 140.560851][ T8488] R13: 0000000000000001 R14: 00007f4c3fdb6160 R15: 00007ffe8aa17cb8 [ 140.560879][ T8488] [ 140.560900][ T8488] Mem-Info: [ 140.891978][ T8496] netlink: 8 bytes leftover after parsing attributes in process `syz.3.669'. [ 140.916087][ T8488] active_anon:8672 inactive_anon:0 isolated_anon:0 [ 140.916087][ T8488] active_file:1366 inactive_file:39857 isolated_file:0 [ 140.916087][ T8488] unevictable:768 dirty:101 writeback:0 [ 140.916087][ T8488] slab_reclaimable:10354 slab_unreclaimable:103323 [ 140.916087][ T8488] mapped:33247 shmem:4240 pagetables:1295 [ 140.916087][ T8488] sec_pagetables:0 bounce:0 [ 140.916087][ T8488] kernel_misc_reclaimable:0 [ 140.916087][ T8488] free:1315278 free_pcp:20942 free_cma:0 [ 140.963924][ T8496] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 140.973279][ T8496] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 140.982928][ T8488] Node 0 active_anon:34756kB inactive_anon:0kB active_file:5464kB inactive_file:159224kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:132988kB dirty:400kB writeback:0kB shmem:15428kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12588kB pagetables:5008kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 141.061287][ T8488] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 141.123999][ T8488] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 141.159473][ T8508] netlink: 'syz.0.668': attribute type 10 has an invalid length. [ 141.164124][ T8507] netlink: 'syz.3.670': attribute type 1 has an invalid length. [ 141.175788][ T8488] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 141.181625][ T8488] Node 0 DMA32 free:1346764kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:34912kB inactive_anon:0kB active_file:5464kB inactive_file:157400kB unevictable:1536kB writepending:396kB present:3129332kB managed:2561004kB mlocked:0kB bounce:0kB free_pcp:63680kB local_pcp:21712kB free_cma:0kB [ 141.225704][ T8507] netlink: 228 bytes leftover after parsing attributes in process `syz.3.670'. [ 141.262315][ T8488] lowmem_reserve[]: 0 0 1 1 1 [ 141.286980][ T8508] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.299867][ T8508] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 141.338617][ T8488] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1824kB unevictable:0kB writepending:4kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 141.396280][ T8488] lowmem_reserve[]: 0 0 0 0 0 [ 141.402994][ T8488] Node 1 Normal free:3899520kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:21152kB local_pcp:11456kB free_cma:0kB [ 141.534675][ T8488] lowmem_reserve[]: 0 0 0 0 0 [ 141.539467][ T8488] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 141.585249][ T8488] Node 0 DMA32: 11*4kB (UME) 9*8kB (UM) 6*16kB (UM) 5*32kB (UM) 19*64kB (UM) 33*128kB (UME) 48*256kB (UM) 27*512kB (UME) 14*1024kB (UME) 9*2048kB (UM) 314*4096kB (UM) = 1350836kB [ 141.610524][ T8488] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 141.647754][ T8488] Node 1 Normal: 186*4kB (UME) 35*8kB (UME) 44*16kB (UME) 66*32kB (UME) 26*64kB (UME) 8*128kB (UME) 3*256kB (UM) 2*512kB (M) 2*1024kB (ME) 1*2048kB (E) 949*4096kB (UM) = 3899520kB [ 141.721570][ T8488] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 141.772384][ T8488] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 141.834882][ T8488] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 141.864205][ T8488] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 141.879535][ T8515] xt_CT: No such helper "syz1" [ 141.897291][ T8523] bridge_slave_0: entered promiscuous mode [ 141.927680][ T8488] 42589 total pagecache pages [ 141.942664][ T8488] 0 pages in swap cache [ 141.962892][ T8488] Free swap = 124996kB [ 141.973083][ T8488] Total swap = 124996kB [ 141.978257][ T8488] 2097051 pages RAM [ 141.990740][ T8488] 0 pages HighMem/MovableOnly [ 141.992987][ T8410] chnl_net:caif_netlink_parms(): no params data found [ 142.000874][ T8488] 424694 pages reserved [ 142.009280][ T8488] 0 pages cma reserved [ 142.262587][ T6259] hsr_slave_0: left promiscuous mode [ 142.280827][ T6259] hsr_slave_1: left promiscuous mode [ 142.296927][ T6259] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.325245][ T6259] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.382688][ T5834] Bluetooth: hci2: command tx timeout [ 142.415867][ T6259] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.423318][ T6259] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.507101][ T8546] x_tables: duplicate underflow at hook 2 [ 142.666966][ T6259] veth1_macvtap: left promiscuous mode [ 142.696890][ T6259] veth0_macvtap: left promiscuous mode [ 142.714046][ T6259] veth1_vlan: left promiscuous mode [ 142.733875][ T6259] veth0_vlan: left promiscuous mode [ 143.434322][ T6259] team0 (unregistering): Port device team_slave_1 removed [ 143.489630][ T6259] team0 (unregistering): Port device team_slave_0 removed [ 143.908788][ T8551] netlink: 8 bytes leftover after parsing attributes in process `syz.0.681'. [ 144.455263][ T5834] Bluetooth: hci2: command tx timeout [ 144.589273][ T8410] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.634065][ T8410] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.661297][ T8410] bridge_slave_0: entered allmulticast mode [ 144.669167][ T8603] netlink: 8 bytes leftover after parsing attributes in process `syz.3.693'. [ 144.693272][ T8410] bridge_slave_0: entered promiscuous mode [ 144.746028][ T8410] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.753225][ T8410] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.802560][ T8410] bridge_slave_1: entered allmulticast mode [ 144.821662][ T8410] bridge_slave_1: entered promiscuous mode [ 145.109845][ T8621] netlink: 20 bytes leftover after parsing attributes in process `syz.1.698'. [ 145.198022][ T8410] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.258460][ T8410] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.584250][ T8645] netlink: 52 bytes leftover after parsing attributes in process `syz.1.703'. [ 145.619549][ T8647] netlink: 16 bytes leftover after parsing attributes in process `syz.3.704'. [ 145.633125][ T8647] netlink: 32 bytes leftover after parsing attributes in process `syz.3.704'. [ 145.710428][ T8647] gretap1: entered promiscuous mode [ 145.762956][ T8647] gretap1: entered allmulticast mode [ 145.801740][ T8410] team0: Port device team_slave_0 added [ 145.839883][ T8410] team0: Port device team_slave_1 added [ 145.908890][ T8657] IPVS: ip_vs_edit_dest(): server weight less than zero [ 145.914670][ T5915] IPVS: starting estimator thread 0... [ 146.027278][ T8658] IPVS: using max 30 ests per chain, 72000 per kthread [ 146.092963][ T8410] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.117230][ T8410] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.145112][ T8410] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.160630][ T8662] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 146.265299][ T8410] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.272307][ T8410] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.384612][ T8410] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.396122][ T5895] IPVS: starting estimator thread 0... [ 146.440798][ T8678] netlink: 8 bytes leftover after parsing attributes in process `syz.4.711'. [ 146.484610][ T8674] IPVS: using max 32 ests per chain, 76800 per kthread [ 146.525905][ T8672] netlink: 'syz.4.711': attribute type 13 has an invalid length. [ 146.534776][ T5834] Bluetooth: hci2: command tx timeout [ 146.698720][ T8410] hsr_slave_0: entered promiscuous mode [ 146.720918][ T8410] hsr_slave_1: entered promiscuous mode [ 146.731061][ T8410] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 146.740414][ T8410] Cannot create hsr debugfs directory [ 146.752972][ T8672] veth0_macvtap: left promiscuous mode [ 146.758990][ T8672] macvtap0: entered allmulticast mode [ 146.778637][ T8672] macvtap0: refused to change device tx_queue_len [ 147.033285][ T8691] netlink: 'syz.1.717': attribute type 29 has an invalid length. [ 147.070709][ T8694] netlink: 'syz.1.717': attribute type 29 has an invalid length. [ 147.124686][ T8691] netlink: 'syz.1.717': attribute type 29 has an invalid length. [ 147.136146][ T8691] netlink: 'syz.1.717': attribute type 29 has an invalid length. [ 147.398840][ T8703] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 147.516916][ T8711] netlink: 14528 bytes leftover after parsing attributes in process `syz.4.721'. [ 147.572741][ T8705] netlink: 100 bytes leftover after parsing attributes in process `syz.4.721'. [ 148.696257][ T8751] netlink: 8 bytes leftover after parsing attributes in process `syz.1.732'. [ 148.725105][ T8751] netlink: 16 bytes leftover after parsing attributes in process `syz.1.732'. [ 148.869921][ T8410] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 148.921619][ T8410] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 148.963469][ T8410] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 149.003299][ T8410] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 149.246803][ T8410] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.282590][ T8410] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.312210][ T6255] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.319500][ T6255] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.362249][ T6265] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.369531][ T6265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.510814][ T8410] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 149.521569][ T8410] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 149.826977][ T8804] __nla_validate_parse: 5 callbacks suppressed [ 149.826995][ T8804] netlink: 96 bytes leftover after parsing attributes in process `syz.0.741'. [ 150.090177][ T8818] dvmrp0: entered allmulticast mode [ 150.096927][ T8822] openvswitch: netlink: Actions may not be safe on all matching packets [ 150.328273][ T8410] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.542716][ T8410] veth0_vlan: entered promiscuous mode [ 150.608962][ T8410] veth1_vlan: entered promiscuous mode [ 150.658672][ T8841] netlink: 4 bytes leftover after parsing attributes in process `syz.0.750'. [ 150.751437][ T8841] netlink: 4 bytes leftover after parsing attributes in process `syz.0.750'. [ 150.789487][ T8410] veth0_macvtap: entered promiscuous mode [ 150.808810][ T8851] netlink: 'syz.4.751': attribute type 10 has an invalid length. [ 151.201313][ T8866] netlink: 40 bytes leftover after parsing attributes in process `syz.0.753'. [ 151.306531][ T8866] netlink: 12 bytes leftover after parsing attributes in process `syz.0.753'. [ 151.325448][ T8410] veth1_macvtap: entered promiscuous mode [ 151.436405][ T8410] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.526202][ T8410] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.601993][ T8410] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.637063][ T8410] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.665849][ T8410] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.692373][ T8410] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.055973][ T8898] netlink: 4 bytes leftover after parsing attributes in process `syz.1.760'. [ 152.218697][ T6265] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.253008][ T6265] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.315490][ T8909] Unsupported ieee802154 address type: 0 [ 152.398074][ T8905] netlink: 'syz.3.762': attribute type 11 has an invalid length. [ 152.422572][ T8905] netlink: 'syz.3.762': attribute type 11 has an invalid length. [ 152.437687][ T8905] netlink: 224 bytes leftover after parsing attributes in process `syz.3.762'. [ 152.653440][ T8918] bond0: entered allmulticast mode [ 152.660975][ T8918] bond_slave_0: entered allmulticast mode [ 152.668094][ T8918] bond_slave_1: entered allmulticast mode [ 152.699958][ T8916] netlink: 48 bytes leftover after parsing attributes in process `syz.1.763'. [ 152.730504][ T6263] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.742679][ T8905] ieee80211 phy20: Failed to add default virtual iface [ 152.743278][ T6263] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.954227][ T8937] ieee802154 phy0 wpan0: encryption failed: -22 [ 153.265720][ T8948] netlink: 60 bytes leftover after parsing attributes in process `syz.1.772'. [ 153.430245][ T1332] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.496298][ T8957] tipc: Started in network mode [ 153.507176][ T8957] tipc: Node identity ac14142f, cluster identity 4711 [ 153.524155][ T8957] tipc: New replicast peer: 0.0.0.0 [ 153.531049][ T8957] tipc: Enabled bearer , priority 10 [ 153.601363][ T1332] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.639962][ T8959] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 153.652168][ T8961] netlink: 12 bytes leftover after parsing attributes in process `syz.0.775'. [ 153.701196][ T1332] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.871345][ T1332] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.015772][ T1332] bridge_slave_1: left allmulticast mode [ 154.021460][ T1332] bridge_slave_1: left promiscuous mode [ 154.028408][ T1332] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.040085][ T1332] bridge_slave_0: left allmulticast mode [ 154.046276][ T1332] bridge_slave_0: left promiscuous mode [ 154.052012][ T1332] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.598031][ T5150] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 154.630568][ T5150] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 154.640864][ T5150] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 154.656999][ T5915] tipc: Node number set to 2886997039 [ 154.665001][ T5150] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 154.673577][ T5150] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 154.849067][ T1332] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 154.892194][ T1332] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 154.909293][ T1332] bond0 (unregistering): Released all slaves [ 155.293844][ T9005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.784'. [ 155.656010][ T9001] syzkaller1: entered promiscuous mode [ 155.661548][ T9001] syzkaller1: entered allmulticast mode [ 155.677016][ T9016] netlink: 'syz.0.788': attribute type 1 has an invalid length. [ 155.879796][ T9016] bond1: entered promiscuous mode [ 155.921555][ T9016] 8021q: adding VLAN 0 to HW filter on device bond1 [ 155.953751][ T9019] netlink: 'syz.4.789': attribute type 2 has an invalid length. [ 156.196194][ T9035] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 156.695362][ T5834] Bluetooth: hci2: command tx timeout [ 156.937398][ T1332] hsr_slave_0: left promiscuous mode [ 156.947805][ T1332] hsr_slave_1: left promiscuous mode [ 156.953989][ T9066] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.797'. [ 156.968307][ T1332] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.994732][ T1332] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.015600][ T9066] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 157.025497][ T1332] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.032947][ T1332] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.060313][ T1332] veth1_macvtap: left promiscuous mode [ 157.066358][ T1332] veth0_macvtap: left promiscuous mode [ 157.072037][ T1332] veth1_vlan: left promiscuous mode [ 157.094410][ T1332] veth0_vlan: left promiscuous mode [ 157.154238][ T9069] netlink: 20 bytes leftover after parsing attributes in process `syz.3.799'. [ 157.360211][ T9076] netlink: 14 bytes leftover after parsing attributes in process `syz.3.800'. [ 157.752287][ T1332] team0 (unregistering): Port device team_slave_1 removed [ 157.792659][ T1332] team0 (unregistering): Port device team_slave_0 removed [ 158.446126][ T9087] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 158.669203][ T8980] chnl_net:caif_netlink_parms(): no params data found [ 158.780689][ T5834] Bluetooth: hci2: command tx timeout [ 159.041345][ T9110] ieee802154 phy0 wpan0: encryption failed: -22 [ 159.361700][ T8980] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.388051][ T8980] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.425849][ T8980] bridge_slave_0: entered allmulticast mode [ 159.451256][ T8980] bridge_slave_0: entered promiscuous mode [ 159.474374][ T8980] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.509393][ T8980] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.538723][ T8980] bridge_slave_1: entered allmulticast mode [ 159.563016][ T9141] sctp: [Deprecated]: syz.0.815 (pid 9141) Use of struct sctp_assoc_value in delayed_ack socket option. [ 159.563016][ T9141] Use struct sctp_sack_info instead [ 159.586641][ T8980] bridge_slave_1: entered promiscuous mode [ 159.830371][ T8980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.859813][ T9149] netlink: 12 bytes leftover after parsing attributes in process `syz.1.817'. [ 159.889572][ T8980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.943942][ T9153] netlink: 8 bytes leftover after parsing attributes in process `syz.4.820'. [ 160.163582][ T8980] team0: Port device team_slave_0 added [ 160.182941][ T9156] veth0: entered promiscuous mode [ 160.191172][ T9147] veth0: left promiscuous mode [ 160.211549][ T9163] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 160.225492][ T8980] team0: Port device team_slave_1 added [ 160.468720][ T8980] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.500236][ T8980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.616996][ T8980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.713404][ T9172] netlink: 4 bytes leftover after parsing attributes in process `syz.4.824'. [ 160.752134][ T8980] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.779028][ T8980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.848860][ T8980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.861766][ T5834] Bluetooth: hci2: command tx timeout [ 160.971331][ T9195] netlink: 64 bytes leftover after parsing attributes in process `syz.4.828'. [ 161.059631][ T8980] hsr_slave_0: entered promiscuous mode [ 161.086771][ T8980] hsr_slave_1: entered promiscuous mode [ 161.095420][ T8980] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 161.124535][ T8980] Cannot create hsr debugfs directory [ 161.182225][ T9202] netlink: 76 bytes leftover after parsing attributes in process `syz.1.829'. [ 161.192763][ T9203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.830'. [ 161.217534][ T9202] nbd: illegal input index -8454144 [ 161.467791][ T9212] netlink: 1036 bytes leftover after parsing attributes in process `syz.4.832'. [ 161.514924][ T9212] sch_tbf: burst 0 is lower than device lo mtu (81) ! [ 161.680572][ T9220] netlink: 32 bytes leftover after parsing attributes in process `syz.0.834'. [ 161.849807][ T9231] netlink: 88 bytes leftover after parsing attributes in process `syz.0.836'. [ 161.985784][ T9233] netlink: 88 bytes leftover after parsing attributes in process `syz.0.836'. [ 162.043496][ T9231] netlink: 'syz.0.836': attribute type 1 has an invalid length. [ 162.279315][ T9231] bond2: entered promiscuous mode [ 162.285366][ T9231] 8021q: adding VLAN 0 to HW filter on device bond2 [ 162.560732][ T9255] netlink: 4 bytes leftover after parsing attributes in process `syz.3.840'. [ 162.572210][ T9257] netlink: 'syz.0.839': attribute type 3 has an invalid length. [ 162.619768][ T9262] x_tables: ip_tables: ah match: only valid for protocol 51 [ 162.770982][ T9269] netlink: 'syz.0.843': attribute type 13 has an invalid length. [ 162.796141][ T9269] netlink: 'syz.0.843': attribute type 17 has an invalid length. [ 162.946726][ T5834] Bluetooth: hci2: command tx timeout [ 162.989535][ T9277] netlink: 8 bytes leftover after parsing attributes in process `syz.4.846'. [ 163.007656][ T9269] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 163.171656][ T8980] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 163.219049][ T9284] netlink: 'syz.0.848': attribute type 5 has an invalid length. [ 163.265860][ T8980] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 163.308739][ T8980] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 163.412217][ T8980] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 166.195480][ T9328] netdevsim netdevsim1: Direct firmware load for .. failed with error -2 [ 166.204265][ T9328] netdevsim netdevsim1: Falling back to sysfs fallback for: .. [ 166.444860][ T9389] __nla_validate_parse: 3 callbacks suppressed [ 166.444878][ T9389] netlink: 576 bytes leftover after parsing attributes in process `syz.4.861'. [ 166.471214][ T8980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.579754][ T8980] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.620031][ T5117] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.627226][ T5117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.651717][ T6255] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.658941][ T6255] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.827041][ T9404] openvswitch: netlink: VXLAN extension message has 7 unknown bytes. [ 166.873692][ T9402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.867'. [ 166.884090][ T9412] netlink: 4 bytes leftover after parsing attributes in process `syz.3.870'. [ 167.138541][ T9422] netlink: 8 bytes leftover after parsing attributes in process `syz.3.872'. [ 167.342483][ T9433] netlink: 64 bytes leftover after parsing attributes in process `syz.0.876'. [ 167.373385][ T9435] netlink: 16 bytes leftover after parsing attributes in process `syz.3.877'. [ 167.396901][ T9435] netlink: 8 bytes leftover after parsing attributes in process `syz.3.877'. [ 167.470154][ T8980] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.586091][ T8980] veth0_vlan: entered promiscuous mode [ 167.611193][ T8980] veth1_vlan: entered promiscuous mode [ 167.675539][ T8980] veth0_macvtap: entered promiscuous mode [ 167.705434][ T8980] veth1_macvtap: entered promiscuous mode [ 167.727225][ T9447] netlink: 12 bytes leftover after parsing attributes in process `syz.3.881'. [ 167.758316][ T8980] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.781137][ T8980] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.830665][ T8980] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.849014][ T8980] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.869250][ T8980] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.887590][ T8980] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.990394][ T9455] netem: change failed [ 168.090253][ T9457] IPVS: ovf: UDP 224.0.0.2:20004 - no destination available [ 168.172065][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.208437][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.299884][ T9467] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 168.348044][ T9469] syz.3.889 uses old SIOCAX25GETINFO [ 168.353962][ T9470] netlink: 4 bytes leftover after parsing attributes in process `syz.3.889'. [ 168.497273][ T6259] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.513240][ T6259] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.875656][ T9488] netlink: 'syz.4.896': attribute type 8 has an invalid length. [ 169.098804][ T9495] netlink: 4 bytes leftover after parsing attributes in process `syz.3.897'. [ 169.194115][ T9497] xt_l2tp: invalid flags combination: c [ 169.686053][ T9522] openvswitch: netlink: Flow key attr not present in new flow. [ 169.830365][ T6261] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.985661][ T6261] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.130612][ T6261] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.198091][ T6261] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.339806][ T6261] bridge_slave_1: left allmulticast mode [ 170.345933][ T6261] bridge_slave_1: left promiscuous mode [ 170.351792][ T6261] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.362490][ T6261] bridge_slave_0: left allmulticast mode [ 170.368953][ T6261] bridge_slave_0: left promiscuous mode [ 170.375687][ T6261] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.651334][ T9541] netlink: 'syz.3.915': attribute type 1 has an invalid length. [ 170.678454][ T9541] netlink: 'syz.3.915': attribute type 2 has an invalid length. [ 170.716611][ T9541] netlink: 'syz.3.915': attribute type 1 has an invalid length. [ 171.123522][ T6261] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.175305][ T6261] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.190376][ T6261] bond0 (unregistering): Released all slaves [ 171.211230][ T9566] netlink: 'syz.0.922': attribute type 24 has an invalid length. [ 171.270880][ T5150] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 171.280079][ T5150] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 171.301907][ T5150] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 171.318638][ T5150] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 171.330508][ T5150] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 171.568485][ T9580] __nla_validate_parse: 9 callbacks suppressed [ 171.568503][ T9580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.924'. [ 172.315393][ T9612] netlink: 'syz.4.933': attribute type 2 has an invalid length. [ 172.425338][ T9621] netlink: 20 bytes leftover after parsing attributes in process `syz.3.935'. [ 172.473733][ T9621] netlink: 'syz.3.935': attribute type 11 has an invalid length. [ 172.834405][ T9638] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 173.190302][ T9649] macvlan0: entered promiscuous mode [ 173.211539][ T9649] macvlan0: entered allmulticast mode [ 173.319452][ T6261] hsr_slave_0: left promiscuous mode [ 173.365600][ T9661] netlink: 12 bytes leftover after parsing attributes in process `syz.1.945'. [ 173.393052][ T6261] hsr_slave_1: left promiscuous mode [ 173.406307][ T6261] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.417263][ T5150] Bluetooth: hci2: command tx timeout [ 173.438964][ T6261] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.456943][ T6261] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.465211][ T6261] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.483648][ T9666] netlink: 72 bytes leftover after parsing attributes in process `syz.0.947'. [ 173.517768][ T6261] veth1_macvtap: left promiscuous mode [ 173.523367][ T6261] veth0_macvtap: left promiscuous mode [ 173.529535][ T9667] netlink: 72 bytes leftover after parsing attributes in process `syz.0.947'. [ 173.539796][ T6261] veth1_vlan: left promiscuous mode [ 173.547107][ T6261] veth0_vlan: left promiscuous mode [ 173.864166][ T9683] netlink: 14 bytes leftover after parsing attributes in process `syz.3.951'. [ 174.272974][ T6261] team0 (unregistering): Port device team_slave_1 removed [ 174.318861][ T6261] team0 (unregistering): Port device team_slave_0 removed [ 175.314177][ T9711] netlink: 8 bytes leftover after parsing attributes in process `syz.0.959'. [ 175.323102][ T9708] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.958'. [ 175.362911][ T9567] chnl_net:caif_netlink_parms(): no params data found [ 175.378647][ T9715] netlink: 'syz.1.958': attribute type 1 has an invalid length. [ 175.386682][ T9712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.959'. [ 175.422299][ T9711] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 175.479102][ T9718] netlink: 4 bytes leftover after parsing attributes in process `syz.3.961'. [ 175.494714][ T5150] Bluetooth: hci2: command tx timeout [ 175.791760][ T9567] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.834158][ T9567] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.872308][ T9567] bridge_slave_0: entered allmulticast mode [ 175.883148][ T9567] bridge_slave_0: entered promiscuous mode [ 175.919516][ T9567] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.931729][ T9567] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.947429][ T9567] bridge_slave_1: entered allmulticast mode [ 175.964373][ T9567] bridge_slave_1: entered promiscuous mode [ 176.106117][ T9567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.130579][ T9567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.279777][ T9765] vxcan1: entered allmulticast mode [ 176.313766][ T9567] team0: Port device team_slave_0 added [ 176.342871][ T9766] sch_fq: defrate 0 ignored. [ 176.375597][ T9567] team0: Port device team_slave_1 added [ 176.546714][ T9567] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.562846][ T9567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.592575][ T9567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.627981][ T9788] bond0: (slave batadv0): Releasing backup interface [ 176.649488][ T9788] bridge_slave_0: left allmulticast mode [ 176.670842][ T9788] bridge_slave_0: left promiscuous mode [ 176.692507][ T9788] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.722241][ T9788] bridge_slave_1: left allmulticast mode [ 176.731199][ T9788] bridge_slave_1: left promiscuous mode [ 176.752563][ T9797] netlink: 'syz.0.973': attribute type 10 has an invalid length. [ 176.772472][ T9788] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.805316][ T9788] bond0: (slave bond_slave_0): Releasing backup interface [ 176.820795][ T9788] bond0: (slave bond_slave_1): Releasing backup interface [ 176.843097][ T9788] team0: Port device team_slave_0 removed [ 176.862991][ T9788] team0: Port device team_slave_1 removed [ 176.870249][ T9788] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.877852][ T9788] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.887147][ T9788] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.895558][ T9788] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.910138][ T9788] batadv1: left allmulticast mode [ 176.916001][ T9788] batadv1: left promiscuous mode [ 176.921181][ T9788] bridge0: port 3(batadv1) entered disabled state [ 176.933303][ T9567] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.945700][ T9567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.986539][ T9567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.042830][ T9797] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 177.212369][ T9806] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 177.295774][ T9567] hsr_slave_0: entered promiscuous mode [ 177.302775][ T9567] hsr_slave_1: entered promiscuous mode [ 177.320904][ T9567] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 177.347281][ T9567] Cannot create hsr debugfs directory [ 177.392697][ T9809] __nla_validate_parse: 4 callbacks suppressed [ 177.392717][ T9809] netlink: 28 bytes leftover after parsing attributes in process `syz.0.980'. [ 177.412997][ T9809] netlink: 'syz.0.980': attribute type 7 has an invalid length. [ 177.423107][ T9809] netlink: 20 bytes leftover after parsing attributes in process `syz.0.980'. [ 177.559278][ T9827] openvswitch: netlink: EtherType 0 is less than min 600 [ 177.577531][ T5150] Bluetooth: hci2: command tx timeout [ 177.887366][ T9844] netlink: 4 bytes leftover after parsing attributes in process `syz.4.988'. [ 177.967770][ T9846] netlink: 12 bytes leftover after parsing attributes in process `syz.3.989'. [ 177.991077][ T9846] tc_dump_action: action bad kind [ 178.055832][ T9850] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 178.398553][ T9875] netlink: 28 bytes leftover after parsing attributes in process `syz.4.994'. [ 178.444513][ T9874] netlink: 28 bytes leftover after parsing attributes in process `syz.4.994'. [ 179.029816][ T9902] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1005'. [ 179.067441][ T10] hid-generic 0005:04F3:FFF9.0001: item fetching failed at offset 0/1 [ 179.104637][ T9567] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 179.112131][ T10] hid-generic 0005:04F3:FFF9.0001: probe with driver hid-generic failed with error -22 [ 179.191884][ T9567] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 179.232980][ T9567] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 179.323427][ T9567] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 179.632922][ T9945] sctp: [Deprecated]: syz.1.1011 (pid 9945) Use of int in maxseg socket option. [ 179.632922][ T9945] Use struct sctp_assoc_value instead [ 179.654932][ T5150] Bluetooth: hci2: command tx timeout [ 179.813083][ T9567] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.894968][ T5117] wlan1: Trigger new scan to find an IBSS to join [ 179.932381][ T9957] tipc: Started in network mode [ 179.950785][ T9957] tipc: Node identity de079636311, cluster identity 4711 [ 179.974840][ T9957] tipc: Enabled bearer , priority 0 [ 179.985936][ T9567] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.042124][ T9968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1017'. [ 180.111647][ T6261] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.118876][ T6261] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.188943][ T9975] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 180.209280][ T9970] syzkaller0: entered promiscuous mode [ 180.264976][ T9970] syzkaller0: entered allmulticast mode [ 180.369383][ T9957] tipc: Resetting bearer [ 180.430089][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.437338][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.647302][ T9952] tipc: Resetting bearer [ 180.721369][ T9990] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1021'. [ 180.770687][ T9952] tipc: Disabling bearer [ 180.821986][ T9994] netlink: 'syz.0.1022': attribute type 1 has an invalid length. [ 180.834859][ T9994] netlink: 'syz.0.1022': attribute type 11 has an invalid length. [ 180.842729][ T9994] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1022'. [ 180.867321][ T6259] wlan1: Creating new IBSS network, BSSID d2:86:42:bd:c3:96 [ 180.946737][ T9999] raw_sendmsg: syz.3.1024 forgot to set AF_INET. Fix it! [ 181.008436][ T9567] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 181.687502][ T9567] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.930351][ T9567] veth0_vlan: entered promiscuous mode [ 181.992010][ T9567] veth1_vlan: entered promiscuous mode [ 182.101584][ T9567] veth0_macvtap: entered promiscuous mode [ 182.152323][ T9567] veth1_macvtap: entered promiscuous mode [ 182.219037][ T9567] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.282753][ T9567] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.327334][ T9567] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.374647][ T9567] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.405036][ T9567] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.444579][ T9567] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.717884][ T1332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.752449][ T1332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.776800][T10070] __nla_validate_parse: 2 callbacks suppressed [ 182.776819][T10070] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1041'. [ 182.845824][T10070] netlink: 'syz.3.1041': attribute type 7 has an invalid length. [ 182.870019][ T6255] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.889770][T10070] netlink: 'syz.3.1041': attribute type 8 has an invalid length. [ 182.898528][ T6255] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.931170][T10073] team0: Device vti0 is up. Set it down before adding it as a team port [ 182.942694][T10070] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1041'. [ 184.552758][ T6263] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.660272][ T6263] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.765054][T10113] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1052'. [ 184.784348][T10113] netlink: 'syz.3.1052': attribute type 7 has an invalid length. [ 184.811164][T10113] netlink: 'syz.3.1052': attribute type 8 has an invalid length. [ 184.847183][T10113] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1052'. [ 185.117126][ T6263] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.171558][T10136] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1056'. [ 185.438972][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 185.449281][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 185.465916][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 185.488245][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 185.496521][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 185.573788][ T6263] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.968339][T10168] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1067'. [ 186.155636][ T55] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 186.178030][ T5930] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 186.194996][ T55] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 186.203091][T10170] batadv_slave_1: entered promiscuous mode [ 186.257011][T10163] batadv_slave_1: left promiscuous mode [ 186.285796][ T5930] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 186.304774][ T6263] bridge_slave_1: left allmulticast mode [ 186.311382][ T6263] bridge_slave_1: left promiscuous mode [ 186.331072][ T6263] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.384714][T10181] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1073'. [ 186.411661][T10181] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1073'. [ 186.425670][ T6263] bridge_slave_0: left allmulticast mode [ 186.431455][ T6263] bridge_slave_0: left promiscuous mode [ 186.441777][ T6263] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.474120][T10188] netlink: 'syz.1.1072': attribute type 1 has an invalid length. [ 186.484229][T10188] netlink: 15 bytes leftover after parsing attributes in process `syz.1.1072'. [ 186.517947][T10188] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1072'. [ 186.947719][ T6263] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 186.958606][ T6263] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 186.970392][ T6263] bond0 (unregistering): Released all slaves [ 187.015612][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 187.529422][T10229] xt_ecn: cannot match TCP bits for non-tcp packets [ 187.575200][ T5834] Bluetooth: hci2: command tx timeout [ 187.886334][T10144] chnl_net:caif_netlink_parms(): no params data found [ 188.001600][T10242] __nla_validate_parse: 1 callbacks suppressed [ 188.001623][T10242] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1092'. [ 188.034821][T10242] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1092'. [ 188.113502][T10242] geneve3: entered promiscuous mode [ 188.157526][T10242] geneve3: entered allmulticast mode [ 188.231511][T10247] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1088'. [ 188.279900][ T6263] hsr_slave_0: left promiscuous mode [ 188.290916][T10250] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1094'. [ 188.319998][ T6263] hsr_slave_1: left promiscuous mode [ 188.350011][ T6263] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.389343][ T6263] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.432189][ T6263] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.469170][ T6263] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.526947][ T6263] veth1_macvtap: left promiscuous mode [ 188.544636][ T6263] veth0_macvtap: left promiscuous mode [ 188.550417][ T6263] veth1_vlan: left promiscuous mode [ 188.568225][ T6263] veth0_vlan: left promiscuous mode [ 188.909365][T10261] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1098'. [ 189.307304][ T6263] team0 (unregistering): Port device team_slave_1 removed [ 189.353683][ T6263] team0 (unregistering): Port device team_slave_0 removed [ 189.654659][ T5834] Bluetooth: hci2: command tx timeout [ 189.838138][T10266] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 190.013355][T10144] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.027528][T10144] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.051519][T10278] netlink: 'syz.0.1104': attribute type 1 has an invalid length. [ 190.059217][T10144] bridge_slave_0: entered allmulticast mode [ 190.065417][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 190.082408][T10144] bridge_slave_0: entered promiscuous mode [ 190.091351][T10144] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.104300][T10144] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.112773][T10144] bridge_slave_1: entered allmulticast mode [ 190.164119][T10144] bridge_slave_1: entered promiscuous mode [ 190.490330][T10282] bond4: (slave gretap1): making interface the new active one [ 190.506599][T10282] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 190.557940][T10144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.581195][T10144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.591580][T10303] tipc: Enabling of bearer rejected, failed to enable media [ 190.761457][T10310] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1111'. [ 190.782956][T10144] team0: Port device team_slave_0 added [ 190.843976][T10144] team0: Port device team_slave_1 added [ 190.895711][T10310] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1111'. [ 191.033416][T10144] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.080643][T10144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.132074][T10144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.196141][T10144] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.203257][T10144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.240848][T10330] netlink: 'syz.1.1115': attribute type 1 has an invalid length. [ 191.250411][T10330] netlink: 'syz.1.1115': attribute type 3 has an invalid length. [ 191.279339][T10330] netlink: 'syz.1.1115': attribute type 235 has an invalid length. [ 191.295758][T10144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.350850][T10339] xt_l2tp: missing protocol rule (udp|l2tpip) [ 191.516910][T10144] hsr_slave_0: entered promiscuous mode [ 191.543046][T10144] hsr_slave_1: entered promiscuous mode [ 191.575015][T10144] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 191.582750][T10144] Cannot create hsr debugfs directory [ 191.652004][T10355] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1124'. [ 191.708182][T10362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1125'. [ 191.736621][ T5834] Bluetooth: hci2: command tx timeout [ 191.748364][T10362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1125'. [ 191.762723][T10367] netlink: 'syz.1.1125': attribute type 9 has an invalid length. [ 191.770948][T10368] netlink: 'syz.1.1125': attribute type 9 has an invalid length. [ 192.022155][T10375] 8021q: VLANs not supported on vxcan1 [ 193.086731][T10144] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 193.137762][T10428] netlink: 'syz.1.1143': attribute type 11 has an invalid length. [ 193.156608][T10428] __nla_validate_parse: 5 callbacks suppressed [ 193.156628][T10428] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1143'. [ 193.173110][T10144] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 193.203831][T10144] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 193.366442][T10144] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 193.394188][T10448] netlink: 'syz.0.1147': attribute type 1 has an invalid length. [ 193.408153][T10448] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1147'. [ 193.422871][T10449] Bluetooth: MGMT ver 1.23 [ 193.704741][T10468] rdma_rxe: rxe_newlink: failed to add lo [ 193.810136][T10144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.819145][ T5834] Bluetooth: hci2: command tx timeout [ 193.840860][T10477] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1153'. [ 193.880714][T10144] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.899471][ T5117] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.907057][ T5117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.986525][ T6270] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.993791][ T6270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.028123][T10483] netlink: 'syz.0.1155': attribute type 1 has an invalid length. [ 194.288153][T10493] netlink: 'syz.4.1159': attribute type 4 has an invalid length. [ 194.317086][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.338177][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.587064][T10493] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.594952][T10493] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.888802][T10493] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.903544][T10493] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.012562][T10493] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.022050][T10493] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.031185][T10493] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.040762][T10493] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.062431][T10534] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1167'. [ 195.075063][T10493] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.085824][T10493] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.095647][T10493] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.106577][T10493] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.141085][T10524] netlink: 'syz.0.1167': attribute type 1 has an invalid length. [ 195.154874][T10524] netlink: 15 bytes leftover after parsing attributes in process `syz.0.1167'. [ 195.227421][T10144] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.391694][T10144] veth0_vlan: entered promiscuous mode [ 195.429697][T10541] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 195.441281][T10144] veth1_vlan: entered promiscuous mode [ 195.472100][T10541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1171'. [ 195.487035][T10541] netlink: 'syz.0.1171': attribute type 5 has an invalid length. [ 195.519224][T10541] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1171'. [ 195.537477][T10144] veth0_macvtap: entered promiscuous mode [ 195.561304][T10541] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 195.571736][T10541] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 195.584667][T10541] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 195.624883][T10541] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 195.654962][T10541] geneve2: entered promiscuous mode [ 195.661788][T10541] geneve2: entered allmulticast mode [ 195.703269][T10144] veth1_macvtap: entered promiscuous mode [ 195.774525][ T120] hid-generic 0005:15C2:000B.0002: item fetching failed at offset 0/1 [ 195.783815][ T120] hid-generic 0005:15C2:000B.0002: probe with driver hid-generic failed with error -22 [ 195.850106][T10144] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.948483][T10144] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.000404][T10144] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.034952][T10144] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.054275][T10144] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.063933][T10144] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.133181][T10577] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 19999 - 0 [ 196.158580][T10577] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 19999 - 0 [ 196.168798][T10577] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 19999 - 0 [ 196.182745][T10577] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 19999 - 0 [ 196.200633][T10577] geneve4: entered promiscuous mode [ 196.210634][T10577] geneve4: entered allmulticast mode [ 196.374738][ T5840] Bluetooth: hci3: command 0x0406 tx timeout [ 196.375483][ T5845] Bluetooth: hci1: command 0x0406 tx timeout [ 196.434968][ T5117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.471340][ T5117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.623092][ T6263] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.648568][ T6263] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.101959][T10622] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 197.302022][T10636] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1203'. [ 197.607883][ T6261] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.720154][ T6261] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.850586][ T6261] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.912020][ T6261] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.033460][ T6261] bridge_slave_1: left allmulticast mode [ 198.040354][ T6261] bridge_slave_1: left promiscuous mode [ 198.048740][ T6261] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.060445][ T6261] bridge_slave_0: left allmulticast mode [ 198.068932][ T6261] bridge_slave_0: left promiscuous mode [ 198.078753][ T6261] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.134667][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 198.489714][T10644] No such timeout policy "syz0" [ 198.494756][T10646] ieee802154 phy0 wpan0: encryption failed: -22 [ 198.531867][ T6261] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.598489][ T6261] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 198.631366][ T6261] bond0 (unregistering): Released all slaves [ 199.048749][T10670] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1213'. [ 199.070447][T10672] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1214'. [ 199.137359][ T5150] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 199.152495][ T5150] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 199.162698][ T5150] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 199.179380][ T5150] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 199.188515][ T5150] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 199.491011][T10682] netlink: 'syz.0.1216': attribute type 9 has an invalid length. [ 199.622886][T10685] netlink: 'syz.4.1218': attribute type 1 has an invalid length. [ 199.692209][ T6261] hsr_slave_0: left promiscuous mode [ 199.750780][ T6261] hsr_slave_1: left promiscuous mode [ 199.752404][T10690] netlink: 'syz.4.1220': attribute type 10 has an invalid length. [ 199.784341][ T6261] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.799547][T10692] openvswitch: netlink: Geneve opt len 63 is not a multiple of 4. [ 199.800733][ T6261] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.875732][ T6261] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.895163][ T6261] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.924049][ T6261] veth1_macvtap: left promiscuous mode [ 199.930900][ T6261] veth0_macvtap: left promiscuous mode [ 199.937153][ T6261] veth1_vlan: left promiscuous mode [ 199.942648][ T6261] veth0_vlan: left promiscuous mode [ 200.775657][ T6261] team0 (unregistering): Port device team_slave_1 removed [ 200.853263][ T6261] team0 (unregistering): Port device team_slave_0 removed [ 201.254710][ T5834] Bluetooth: hci2: command tx timeout [ 201.512047][T10690] bridge_slave_1: left allmulticast mode [ 201.519962][T10690] bridge_slave_1: left promiscuous mode [ 201.530163][T10690] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.543396][T10690] bridge_slave_1: entered allmulticast mode [ 201.550583][T10690] bond0: (slave bridge_slave_1): Enslaving as an active interface with a down link [ 201.583881][T10696] bridge0: entered promiscuous mode [ 201.598491][T10696] bridge0: entered allmulticast mode [ 201.953259][T10709] netlink: 'syz.1.1224': attribute type 4 has an invalid length. [ 202.204099][ T30] audit: type=1107 audit(1751370481.433:2): pid=10728 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='C%oQ}4X{DO^ҕ^78fZO6V5TcuD{@ŮLb!>J ,1:8@KuA]@Ry2+S i M1K V-' [ 202.269810][T10736] netlink: 'syz.4.1231': attribute type 9 has an invalid length. [ 202.276001][T10673] chnl_net:caif_netlink_parms(): no params data found [ 202.292474][T10736] netlink: 212260 bytes leftover after parsing attributes in process `syz.4.1231'. [ 202.493339][T10740] xt_hashlimit: size too large, truncated to 1048576 [ 202.544625][T10751] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1231'. [ 202.709873][T10673] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.740782][T10673] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.769745][T10673] bridge_slave_0: entered allmulticast mode [ 202.788179][T10673] bridge_slave_0: entered promiscuous mode [ 202.825492][T10673] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.850336][T10673] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.862579][T10763] x_tables: duplicate entry at hook 2 [ 202.884943][T10673] bridge_slave_1: entered allmulticast mode [ 202.892797][T10673] bridge_slave_1: entered promiscuous mode [ 202.984292][T10673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.009663][T10673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.139029][T10673] team0: Port device team_slave_0 added [ 203.221860][T10673] team0: Port device team_slave_1 added [ 203.346323][ T5834] Bluetooth: hci2: command tx timeout [ 203.403645][T10673] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.430259][T10673] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.484563][T10673] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.504151][T10673] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.548400][T10673] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.636915][T10673] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.882726][T10673] hsr_slave_0: entered promiscuous mode [ 203.898785][T10673] hsr_slave_1: entered promiscuous mode [ 203.912615][T10673] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 203.929158][T10673] Cannot create hsr debugfs directory [ 204.804142][T10818] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1255'. [ 204.883446][T10820] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1256'. [ 204.917515][T10818] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1255'. [ 204.931835][T10820] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1256'. [ 204.959728][T10820] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1256'. [ 205.015469][T10818] netlink: 'syz.1.1255': attribute type 6 has an invalid length. [ 205.054888][T10818] netlink: 'syz.1.1255': attribute type 5 has an invalid length. [ 205.093945][T10818] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1255'. [ 205.323268][T10829] netlink: 'syz.1.1259': attribute type 8 has an invalid length. [ 205.350326][T10673] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 205.357229][T10829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1259'. [ 205.398059][T10829] bridge0: entered allmulticast mode [ 205.403761][T10673] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 205.417900][ T5834] Bluetooth: hci2: command tx timeout [ 205.438859][T10673] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 205.489365][T10673] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 205.577334][ T30] audit: type=1800 audit(1751370484.813:3): pid=10845 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1264" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=1565 res=0 errno=0 [ 205.714310][T10850] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 205.778963][T10850] gtp1: entered promiscuous mode [ 205.788993][T10850] gtp1: entered allmulticast mode [ 205.863991][T10673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.931242][T10673] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.950808][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.958032][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.039563][ T6255] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.046831][ T6255] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.686557][T10673] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.903538][T10673] veth0_vlan: entered promiscuous mode [ 206.942262][T10673] veth1_vlan: entered promiscuous mode [ 207.010737][T10673] veth0_macvtap: entered promiscuous mode [ 207.049096][T10673] veth1_macvtap: entered promiscuous mode [ 207.123325][T10673] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.242201][T10673] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.282221][T10906] netlink: 596 bytes leftover after parsing attributes in process `syz.1.1280'. [ 207.294592][T10905] netlink: 596 bytes leftover after parsing attributes in process `syz.1.1280'. [ 207.322905][T10673] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.355004][T10673] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.368171][T10673] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.368614][T10906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1280'. [ 207.385994][T10673] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.418993][T10912] netlink: 'syz.0.1282': attribute type 21 has an invalid length. [ 207.494998][ T5834] Bluetooth: hci2: command tx timeout [ 207.593370][ T6270] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.615049][ T6270] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.683942][ T6259] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.711826][ T6259] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.798337][T10922] netlink: 'syz.4.1287': attribute type 1 has an invalid length. [ 207.822339][T10920] ================================================================== [ 207.830454][T10920] BUG: KASAN: slab-use-after-free in cfusbl_device_notify+0x150/0x6a0 [ 207.838655][T10920] Read of size 8 at addr ffff88802e9c4c50 by task syz.3.1285/10920 [ 207.846569][T10920] [ 207.848921][T10920] CPU: 1 UID: 0 PID: 10920 Comm: syz.3.1285 Not tainted 6.16.0-rc3-syzkaller-00131-g72fb83735c71 #0 PREEMPT(full) [ 207.848947][T10920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 207.848959][T10920] Call Trace: [ 207.848966][T10920] [ 207.848975][T10920] dump_stack_lvl+0x189/0x250 [ 207.849005][T10920] ? __virt_addr_valid+0x1c8/0x5c0 [ 207.849022][T10920] ? rcu_is_watching+0x15/0xb0 [ 207.849047][T10920] ? __kasan_check_byte+0x12/0x40 [ 207.849065][T10920] ? __pfx_dump_stack_lvl+0x10/0x10 [ 207.849088][T10920] ? rcu_is_watching+0x15/0xb0 [ 207.849109][T10920] ? lock_release+0x4b/0x3e0 [ 207.849132][T10920] ? __virt_addr_valid+0x1c8/0x5c0 [ 207.849147][T10920] ? __virt_addr_valid+0x4a5/0x5c0 [ 207.849163][T10920] print_report+0xd2/0x2b0 [ 207.849183][T10920] ? cfusbl_device_notify+0x150/0x6a0 [ 207.849200][T10920] kasan_report+0x118/0x150 [ 207.849217][T10920] ? cfusbl_device_notify+0x150/0x6a0 [ 207.849238][T10920] cfusbl_device_notify+0x150/0x6a0 [ 207.849255][T10920] ? net_generic+0x1e/0x240 [ 207.849271][T10920] ? __pfx_cfusbl_device_notify+0x10/0x10 [ 207.849290][T10920] ? caif_device_notify+0x250/0xfc0 [ 207.849307][T10920] ? smc_pnet_netdev_event+0x3b5/0x6c0 [ 207.849328][T10920] notifier_call_chain+0x1b3/0x3e0 [ 207.849355][T10920] register_netdevice+0x12ee/0x1ae0 [ 207.849374][T10920] ? __mutex_lock+0x51b/0xe80 [ 207.849403][T10920] ? __pfx_register_netdevice+0x10/0x10 [ 207.849425][T10920] ? __asan_memset+0x22/0x50 [ 207.849444][T10920] ? dev_addr_mod+0x2ce/0x3d0 [ 207.849462][T10920] register_netdev+0x40/0x60 [ 207.849482][T10920] bnep_add_connection+0x6bf/0xbf0 [ 207.849528][T10920] ? __pfx_bnep_add_connection+0x10/0x10 [ 207.849550][T10920] ? __fget_files+0x3a0/0x420 [ 207.849572][T10920] do_bnep_sock_ioctl+0x40e/0x640 [ 207.849595][T10920] ? __pfx_do_bnep_sock_ioctl+0x10/0x10 [ 207.849621][T10920] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 207.849639][T10920] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 207.849658][T10920] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 207.849679][T10920] sock_do_ioctl+0xdc/0x300 [ 207.849702][T10920] ? __pfx_sock_do_ioctl+0x10/0x10 [ 207.849730][T10920] ? __lock_acquire+0xab9/0xd20 [ 207.849758][T10920] sock_ioctl+0x576/0x790 [ 207.849781][T10920] ? __pfx_sock_ioctl+0x10/0x10 [ 207.849803][T10920] ? __fget_files+0x2a/0x420 [ 207.849819][T10920] ? __fget_files+0x3a0/0x420 [ 207.849836][T10920] ? __fget_files+0x2a/0x420 [ 207.849854][T10920] ? bpf_lsm_file_ioctl+0x9/0x20 [ 207.849875][T10920] ? __pfx_sock_ioctl+0x10/0x10 [ 207.849895][T10920] __se_sys_ioctl+0xf9/0x170 [ 207.849917][T10920] do_syscall_64+0xfa/0x3b0 [ 207.849931][T10920] ? lockdep_hardirqs_on+0x9c/0x150 [ 207.849952][T10920] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.849968][T10920] ? clear_bhb_loop+0x60/0xb0 [ 207.849985][T10920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.850001][T10920] RIP: 0033:0x7f39a338e929 [ 207.850024][T10920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.850039][T10920] RSP: 002b:00007f39a41aa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 207.850060][T10920] RAX: ffffffffffffffda RBX: 00007f39a35b5fa0 RCX: 00007f39a338e929 [ 207.850073][T10920] RDX: 0000200000000540 RSI: 00000000400442c8 RDI: 0000000000000008 [ 207.850084][T10920] RBP: 00007f39a3410b39 R08: 0000000000000000 R09: 0000000000000000 [ 207.850095][T10920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 207.850106][T10920] R13: 0000000000000000 R14: 00007f39a35b5fa0 R15: 00007ffd3fa64828 [ 207.850126][T10920] [ 207.850132][T10920] [ 208.200670][T10920] Allocated by task 5834: [ 208.204995][T10920] kasan_save_track+0x3e/0x80 [ 208.209672][T10920] __kasan_kmalloc+0x93/0xb0 [ 208.214255][T10920] __kmalloc_cache_noprof+0x230/0x3d0 [ 208.219614][T10920] __hci_conn_add+0x233/0x1b30 [ 208.224369][T10920] hci_conn_request_evt+0x53e/0xb60 [ 208.229562][T10920] hci_event_packet+0x7e3/0x1200 [ 208.234494][T10920] hci_rx_work+0x46a/0xe80 [ 208.238924][T10920] process_scheduled_works+0xae1/0x17b0 [ 208.244494][T10920] worker_thread+0x8a0/0xda0 [ 208.249117][T10920] kthread+0x70e/0x8a0 [ 208.253184][T10920] ret_from_fork+0x3fc/0x770 [ 208.257776][T10920] ret_from_fork_asm+0x1a/0x30 [ 208.262534][T10920] [ 208.264850][T10920] Freed by task 10920: [ 208.268903][T10920] kasan_save_track+0x3e/0x80 [ 208.273582][T10920] kasan_save_free_info+0x46/0x50 [ 208.278600][T10920] __kasan_slab_free+0x62/0x70 [ 208.283352][T10920] kfree+0x18e/0x440 [ 208.287246][T10920] device_release+0x99/0x1c0 [ 208.291834][T10920] kobject_put+0x22b/0x480 [ 208.296244][T10920] device_del+0x7a4/0x8e0 [ 208.300563][T10920] netdev_register_kobject+0x290/0x2f0 [ 208.306015][T10920] register_netdevice+0x126c/0x1ae0 [ 208.311208][T10920] register_netdev+0x40/0x60 [ 208.315791][T10920] bnep_add_connection+0x6bf/0xbf0 [ 208.320897][T10920] do_bnep_sock_ioctl+0x40e/0x640 [ 208.325926][T10920] sock_do_ioctl+0xdc/0x300 [ 208.330421][T10920] sock_ioctl+0x576/0x790 [ 208.334743][T10920] __se_sys_ioctl+0xf9/0x170 [ 208.339327][T10920] do_syscall_64+0xfa/0x3b0 [ 208.343819][T10920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.349705][T10920] [ 208.352025][T10920] Last potentially related work creation: [ 208.357728][T10920] kasan_save_stack+0x3e/0x60 [ 208.362405][T10920] kasan_record_aux_stack+0xbd/0xd0 [ 208.367605][T10920] insert_work+0x3d/0x330 [ 208.371939][T10920] __queue_work+0xcfc/0xfe0 [ 208.376434][T10920] queue_delayed_work_on+0x18b/0x280 [ 208.381712][T10920] l2cap_chan_del+0x285/0x5e0 [ 208.386390][T10920] l2cap_conn_del+0x388/0x680 [ 208.391062][T10920] hci_conn_hash_flush+0x10a/0x230 [ 208.396167][T10920] hci_dev_close_sync+0xaef/0x1330 [ 208.401266][T10920] hci_unregister_dev+0x21a/0x510 [ 208.406290][T10920] vhci_release+0x80/0xd0 [ 208.410616][T10920] __fput+0x449/0xa70 [ 208.414594][T10920] task_work_run+0x1d1/0x260 [ 208.419176][T10920] do_exit+0x6b5/0x22e0 [ 208.423323][T10920] do_group_exit+0x21c/0x2d0 [ 208.427910][T10920] __x64_sys_exit_group+0x3f/0x40 [ 208.432925][T10920] x64_sys_call+0x21ba/0x21c0 [ 208.437592][T10920] do_syscall_64+0xfa/0x3b0 [ 208.442088][T10920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.447984][T10920] [ 208.450297][T10920] The buggy address belongs to the object at ffff88802e9c4000 [ 208.450297][T10920] which belongs to the cache kmalloc-8k of size 8192 [ 208.464349][T10920] The buggy address is located 3152 bytes inside of [ 208.464349][T10920] freed 8192-byte region [ffff88802e9c4000, ffff88802e9c6000) [ 208.478325][T10920] [ 208.480643][T10920] The buggy address belongs to the physical page: [ 208.487055][T10920] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2e9c0 [ 208.495809][T10920] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 208.504295][T10920] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 208.512176][T10920] page_type: f5(slab) [ 208.516152][T10920] raw: 00fff00000000040 ffff88801a442280 ffffea0000a96000 0000000000000003 [ 208.524725][T10920] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 208.533303][T10920] head: 00fff00000000040 ffff88801a442280 ffffea0000a96000 0000000000000003 [ 208.541965][T10920] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 208.550627][T10920] head: 00fff00000000003 ffffea0000ba7001 00000000ffffffff 00000000ffffffff [ 208.559291][T10920] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 208.567949][T10920] page dumped because: kasan: bad access detected [ 208.574361][T10920] page_owner tracks the page as allocated [ 208.580069][T10920] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x528c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP), pid 9291, tgid 9288 (syz.3.851), ts 163489515090, free_ts 163465080255 [ 208.599686][T10920] post_alloc_hook+0x240/0x2a0 [ 208.604448][T10920] get_page_from_freelist+0x21e4/0x22c0 [ 208.609988][T10920] __alloc_frozen_pages_noprof+0x181/0x370 [ 208.615789][T10920] alloc_pages_mpol+0x232/0x4a0 [ 208.620630][T10920] allocate_slab+0x8a/0x3b0 [ 208.625126][T10920] ___slab_alloc+0xbfc/0x1480 [ 208.629793][T10920] __kvmalloc_node_noprof+0x429/0x5f0 [ 208.635156][T10920] pfifo_fast_init+0x238/0x6b0 [ 208.639912][T10920] qdisc_create_dflt+0x13b/0x4e0 [ 208.644840][T10920] mq_init+0x2dc/0x660 [ 208.648904][T10920] qdisc_create_dflt+0x13b/0x4e0 [ 208.653831][T10920] dev_activate+0x1ce/0x1150 [ 208.658414][T10920] __dev_open+0x69c/0x880 [ 208.662745][T10920] __dev_change_flags+0x1ea/0x6d0 [ 208.667765][T10920] netif_change_flags+0x88/0x1a0 [ 208.672704][T10920] dev_change_flags+0x130/0x260 [ 208.677550][T10920] page last free pid 8980 tgid 8980 stack trace: [ 208.683861][T10920] __free_frozen_pages+0xc71/0xe70 [ 208.688972][T10920] __put_partials+0x161/0x1c0 [ 208.693645][T10920] put_cpu_partial+0x17c/0x250 [ 208.698401][T10920] __slab_free+0x2f7/0x400 [ 208.702810][T10920] qlist_free_all+0x97/0x140 [ 208.707403][T10920] kasan_quarantine_reduce+0x148/0x160 [ 208.712860][T10920] __kasan_slab_alloc+0x22/0x80 [ 208.717709][T10920] __kmalloc_noprof+0x224/0x4f0 [ 208.722547][T10920] kobject_get_path+0xc5/0x2d0 [ 208.727309][T10920] kobject_rename+0xcd/0x420 [ 208.731890][T10920] device_rename+0x15d/0x1f0 [ 208.736477][T10920] netif_change_name+0x28c/0x960 [ 208.741413][T10920] do_setlink+0x9f6/0x41c0 [ 208.745823][T10920] rtnl_newlink+0x160b/0x1c70 [ 208.750491][T10920] rtnetlink_rcv_msg+0x7cf/0xb70 [ 208.755419][T10920] netlink_rcv_skb+0x208/0x470 [ 208.760200][T10920] [ 208.762519][T10920] Memory state around the buggy address: [ 208.768146][T10920] ffff88802e9c4b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 208.776298][T10920] ffff88802e9c4b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 208.784353][T10920] >ffff88802e9c4c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 208.792403][T10920] ^ [ 208.799069][T10920] ffff88802e9c4c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 208.807121][T10920] ffff88802e9c4d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 208.815186][T10920] ================================================================== [ 208.839339][T10920] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 208.846589][T10920] CPU: 0 UID: 0 PID: 10920 Comm: syz.3.1285 Not tainted 6.16.0-rc3-syzkaller-00131-g72fb83735c71 #0 PREEMPT(full) [ 208.858681][T10920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 208.868760][T10920] Call Trace: [ 208.872063][T10920] [ 208.875009][T10920] dump_stack_lvl+0x99/0x250 [ 208.879631][T10920] ? __asan_memcpy+0x40/0x70 [ 208.884240][T10920] ? __pfx_dump_stack_lvl+0x10/0x10 [ 208.889449][T10920] ? __pfx__printk+0x10/0x10 [ 208.894035][T10920] panic+0x2db/0x790 [ 208.897945][T10920] ? __pfx_panic+0x10/0x10 [ 208.902363][T10920] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 208.908255][T10920] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 208.914576][T10920] ? print_memory_metadata+0x314/0x400 [ 208.920034][T10920] ? cfusbl_device_notify+0x150/0x6a0 [ 208.925399][T10920] check_panic_on_warn+0x89/0xb0 [ 208.930418][T10920] ? cfusbl_device_notify+0x150/0x6a0 [ 208.935978][T10920] end_report+0x78/0x160 [ 208.942681][T10920] kasan_report+0x129/0x150 [ 208.947993][T10920] ? cfusbl_device_notify+0x150/0x6a0 [ 208.953819][T10920] cfusbl_device_notify+0x150/0x6a0 [ 208.960431][T10920] ? net_generic+0x1e/0x240 [ 208.965378][T10920] ? __pfx_cfusbl_device_notify+0x10/0x10 [ 208.971097][T10920] ? caif_device_notify+0x250/0xfc0 [ 208.976482][T10920] ? smc_pnet_netdev_event+0x3b5/0x6c0 [ 208.982580][T10920] notifier_call_chain+0x1b3/0x3e0 [ 208.988155][T10920] register_netdevice+0x12ee/0x1ae0 [ 208.995599][T10920] ? __mutex_lock+0x51b/0xe80 [ 209.001420][T10920] ? __pfx_register_netdevice+0x10/0x10 [ 209.008357][T10920] ? __asan_memset+0x22/0x50 [ 209.015857][T10920] ? dev_addr_mod+0x2ce/0x3d0 [ 209.023039][T10920] register_netdev+0x40/0x60 [ 209.028600][T10920] bnep_add_connection+0x6bf/0xbf0 [ 209.034479][T10920] ? __pfx_bnep_add_connection+0x10/0x10 [ 209.040304][T10920] ? __fget_files+0x3a0/0x420 [ 209.045222][T10920] do_bnep_sock_ioctl+0x40e/0x640 [ 209.050260][T10920] ? __pfx_do_bnep_sock_ioctl+0x10/0x10 [ 209.056382][T10920] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 209.063386][T10920] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 209.070035][T10920] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 209.078474][T10920] sock_do_ioctl+0xdc/0x300 [ 209.083019][T10920] ? __pfx_sock_do_ioctl+0x10/0x10 [ 209.089693][T10920] ? __lock_acquire+0xab9/0xd20 [ 209.094581][T10920] sock_ioctl+0x576/0x790 [ 209.100492][T10920] ? __pfx_sock_ioctl+0x10/0x10 [ 209.105813][T10920] ? __fget_files+0x2a/0x420 [ 209.110464][T10920] ? __fget_files+0x3a0/0x420 [ 209.117792][T10920] ? __fget_files+0x2a/0x420 [ 209.123634][T10920] ? bpf_lsm_file_ioctl+0x9/0x20 [ 209.128862][T10920] ? __pfx_sock_ioctl+0x10/0x10 [ 209.136490][T10920] __se_sys_ioctl+0xf9/0x170 [ 209.143771][T10920] do_syscall_64+0xfa/0x3b0 [ 209.150050][T10920] ? lockdep_hardirqs_on+0x9c/0x150 [ 209.158731][T10920] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.166129][T10920] ? clear_bhb_loop+0x60/0xb0 [ 209.172817][T10920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.180617][T10920] RIP: 0033:0x7f39a338e929 [ 209.185056][T10920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 209.209836][T10920] RSP: 002b:00007f39a41aa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 209.221270][T10920] RAX: ffffffffffffffda RBX: 00007f39a35b5fa0 RCX: 00007f39a338e929 [ 209.229262][T10920] RDX: 0000200000000540 RSI: 00000000400442c8 RDI: 0000000000000008 [ 209.237512][T10920] RBP: 00007f39a3410b39 R08: 0000000000000000 R09: 0000000000000000 [ 209.249440][T10920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 209.259155][T10920] R13: 0000000000000000 R14: 00007f39a35b5fa0 R15: 00007ffd3fa64828 [ 209.267322][T10920] [ 209.270823][T10920] Kernel Offset: disabled [ 209.278043][T10920] Rebooting in 86400 seconds..