last executing test programs: 1.84389241s ago: executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x60, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc020000000000000000000000000000ff02000000000000000000000000000100000000000000000a0080"], 0xb8}}, 0x0) 1.742282517s ago: executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cgroup.controllers\x00', 0x0, 0x0) close(r0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x50, 0xd, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}]}, 0x50}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x8a9}, 0x48) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r4, @ANYBLOB="010400000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="d2023300802b0001080211000000080211"], 0x2f0}}, 0x0) 1.711992904s ago: executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002680)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.controllers\x00', 0x0, 0x0) close(r1) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x61, 0x9c}, [@call={0x25}], {0x95, 0x0, 0xd00}}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x8000000, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x50, 0xd, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}]}, 0x50}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r5, @ANYBLOB="010400000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="d2023300802b0001080211000000080211"], 0x2f0}}, 0x0) 1.663344684s ago: executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002680)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.controllers\x00', 0x0, 0x0) close(r1) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x61, 0x9c}, [@call={0x25}], {0x95, 0x0, 0xd00}}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x8000000, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x50, 0xd, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}]}, 0x50}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r5, @ANYBLOB="010400000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="d2023300802b0001080211000000080211"], 0x2f0}}, 0x0) 1.592024377s ago: executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000030000000000000085000000530000001801007b1af8fe00000000bfa100000000000007110000f8ff0000b702810008000000b703000000000000850000005000000095f300"/96], &(0x7f0000000280)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x5c, r6, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x2c, 0x51, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "a7fd4531296b6353d1f3e08847"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac02}, @NL80211_KEY_IDX={0x5}]}]}, @NL80211_ATTR_SSID={0x5, 0x34, @random='^'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x5c}}, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="1000c0ddb29338ab7a1eb308f39f00b4eb6304265a0fd6b65e7f9b007c5734cd943ccd2082c27ab12a91568a7322b03c7c424c48681441b775df449640306242c89e805127f943f511e44618b4fd049999bf209450924e95fab3d2b9bdfcbe5792d354e33ff977f799c039b8231b0d258a4631f72853f2a50225a7943b711cd3a61cc55371a1c9435a505dd65117c4dda09b6895da7abea07832549d3d5bdd7cb0ba58df5458b9ce3fd25865fa632b4766ec13db775178e0fb2ce4da412d7cfb419779529a3f0c", @ANYRES16=r2, @ANYBLOB="00082bbd7000fddbdf252800000008000300", @ANYRES32=r8, @ANYBLOB="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"], 0x310}, 0x1, 0x0, 0x0, 0x840}, 0x1) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1000}, 0x4) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1000}, 0x4) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x3c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[], 0x7c}}, 0x8004) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000001940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a090400000000000000000200000044000480400001800c0001006269747769736500300002800800034000000002080002400000001008000140000000160c000780080001001800000008000640000000010900010073797a30000000000900020073797a320000000014000000110001"], 0x98}}, 0x0) r12 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r12, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a80488c6f94f90324fc600400037a0a070200050682c137153e370e0c1180fc1110000300", 0x33fe0}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=ANY=[@ANYRESDEC=r2, @ANYRESHEX=r4, @ANYRES8=r2, @ANYBLOB="6cea46f55f13249ab172f840fde17f17ce86de6598ba7eff0cfff2591a7164887925aa57e5d07fe2de5250b0e09935280d9da88fb39e11dd372189fbe6b5b578ec67c088b39fbca7bbd3ef500f46b8bc794f0f5da430649b5ebc909cb79c35187faed806ae68848ac42d926c4afce28eb25e1eb40b08429f21dde2ac455f", @ANYBLOB="40002d800a00000002020202020200000a00000002020202020a0000060000003a9b00000400000001010101010100000d000000dfa7c521ee53256b650000001c002d800a00000001010101010100000a"], 0x78}, 0x1, 0x0, 0x0, 0x24040850}, 0x0) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r14, 0x8933, &(0x7f0000000bc0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r14, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000400)={0x40, r15, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r16}, @NL802154_ATTR_SEC_DEVKEY={0x24, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x4}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}]}, 0x40}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r13, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0xa080}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x20, r15, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0xc81de20dcdc12b52}]}, 0x20}, 0x1, 0x0, 0x0, 0x4044000}, 0x20000011) 1.590353294s ago: executing program 3: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e020000feda26040c199e4a00"/54], 0x0, 0x37}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x9, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x2, 0x1}, 0x48) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @none}, 0x0, 0x0) accept4$bt_l2cap(r2, &(0x7f0000000140)={0x1f, 0x0, @none}, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r4, 0x0, r6, 0x0, 0x8000f28, 0x0) splice(r5, 0x0, r7, 0x0, 0x800000000, 0x2) write$binfmt_misc(r6, 0x0, 0x99) write(r3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r1, 0x58, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x4, 0x1, 0x9, 0x1000, r1, 0x828d, '\x00', r9, r0, 0x0, 0x4, 0x5, 0x6}, 0x48) close(0xffffffffffffffff) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0x8, &(0x7f00000007c0)=ANY=[@ANYRESHEX=r8, @ANYRES32=r0, @ANYRESHEX=r3], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x1}, 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r10}, 0x10) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r11 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r13, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x2000000}}}}]}, 0x92}}, 0x0) 1.544057458s ago: executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x0, @loopback}], 0x1c) listen(0xffffffffffffffff, 0x80000004) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000800014003001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) socket$inet6(0xa, 0x3, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa}, 0x48) socket$inet(0x2, 0x4, 0x6) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0xf, &(0x7f0000001580)={0x0, @in={{0x2, 0x0, @private}}}, &(0x7f0000000540)=0x9c) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x3c, &(0x7f0000000100)=[@in6={0xa, 0x4e20, 0x0, @loopback}, @in={0x2, 0x4e20, @local}, @in={0x2, 0x4e20, @private=0xa010101}]}, &(0x7f00000002c0)=0x10) 1.400185401s ago: executing program 4: ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8916, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000240)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000040)={0x5, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000000c0)={0xffffffff}, 0x10) write(r1, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) recvmmsg(r1, &(0x7f0000005c80), 0x1b, 0x10122, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000002600)=@newtaction={0x186c, 0x30, 0x1, 0x0, 0x0, {}, [{0x294, 0x1, [@m_ctinfo={0xd4, 0xd, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0xf240, 0xfffffffa, 0x20000000, 0x9, 0x6}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xfffffffa}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x68f6db00}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xfff}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xffffffe1}]}, {0x6e, 0x6, "b7dd3a5c147a2812d48a5d582245e9e5f202c1d1e8ec8a22a9d9061f56558ae91b10b16570e1e363a4a1deeb920c1f3915d1bfaa2600d1dd88ace16fcf5a1cb4a8a311400ba79bc670132beef5125733c7932b1678e44ab914cbd644cbdfe38ae80591b4ed0ca7aece43"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_ctinfo={0xf4, 0x0, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0xd7}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x1}, @TCA_CTINFO_ACT={0x18, 0x3, {0x1d3, 0x6, 0x2, 0x80000000, 0x3}}]}, {0x98, 0x6, "b002f690dfee97c162bcc9db39d1546aad17e83562ec27b7a224ea41eac348c6fb602bd25728962709919c91a3ddacadf2ee81927391a1fd0371e7aa2c0ccab55b643ff1163fa9877deaeb17b653727fe139582211c884185c4cc03c295994a3abb8137e7fe457ec1148157b02bd999bf2e1eae830ec7e84d57bb768e4bd88b9565ea5a053e8e224e0d521a17182be773c033a14"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_tunnel_key={0xc8, 0xe, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @remote}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @private=0xa010102}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, {0x53, 0x6, "bcea98ecace90e8513a2cd17435f8f00f56c76d9968a3f0fc096d0eea222d2f8bca0e510e442c02d7af8c44a2e80780d48d5a0506fe2ca107805e2ebb54ae518faffdb516eb76bdd8bfd12a07243f3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, {0x15c4, 0x1, [@m_xt={0x1108, 0x2, 0x0, 0x0, {{0x7}, {0x1090, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TARG={0x102a, 0x6, {0xf59, 'raw\x00', 0x80, 0x400, "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"}}]}, {0x54, 0x6, "f39f4d8d003081f05449373e83c2ef418c3ea94a4d80a76d23c00712d6ba5fa6690f61d324912a5bac4045705588f73a090faa8f3a529f90a08fea6fa927aae15de2e408479fe996b91e88fb65b5a84f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_csum={0x1b0, 0xf, 0x0, 0x0, {{0x9}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0xd8, 0x8, 0x9, 0x9}, 0x21}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x80000000, 0x4, 0x9, 0x6}, 0x71}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x4, 0x7, 0x183182a9, 0x7}, 0x28}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0xffffffff, 0x3, 0x3}, 0x6f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x8e11, 0x20000000, 0x1, 0x57}, 0xa}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xffffffff, 0x40, 0x1, 0x1, 0x2}, 0x27}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x1ff, 0xffffffffffffffff, 0x10e, 0x2}, 0x19}}]}, {0xbd, 0x6, "0669c2ff299cbad6222d91da52606518c1dd9bf9b15273d8c6937c72b784f0bf49d98a6d949e79712b6c8c5ac521de2597f68e5e36108791ac0f60cc44b14bf089fb25b6cc971d1abe2a5aef050d6553108885b76b485f042f32710efc81429101dfbdd350e7ebd8344b362a73907cda46d652ef78c24ff9a8b7f22965ba8971b74016ccac65f9da247419d2e71d1c0971fdc7633e2c46f3e34e9c86c57de4b971d5d3b1f3cea642cd4dab1487f189cc5b8c37a7efdaf7f4a6"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_xt={0x8c, 0xe, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_INDEX={0x8, 0x3, 0x7}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}]}, {0x25, 0x6, "14a500f5b850c80aa3d8fc5536a87784ba566e8778686286d24947c86193a53084"}, {0xc}, {0xc, 0x8, {0x8a94aab71e471973, 0x3}}}}, @m_skbedit={0x148, 0xe, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x5f1b, 0x4, 0x20000000, 0x3, 0x9}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x4}]}, {0xf9, 0x6, "8631641d271855440a94eba01cc14ffe37fd42c70d9f41116d1fb85734b720e967c469a15e705e3cb46a326ba033acb2a31307ad24121d7af2b442457dc5c3ff7292c7bbe1481d02f6224435281959e79395c5e359b1605cb3305deddd854bb73f0d79d7dacb0eff940347698d51ef9ade5428ccbb11d2363b527bf20c9e4a2e477a77b3f86c55b681ad13b2430bdeab2bc45207ebbe0e3653c4870f7fd4a1009dac82f7e1aca7284d24faec4c81bf61a729e94d25fa91dc13ef00188070c9dcbb3f627383e022520ab071df160c616fd741f124aa28d1d78a82dbc61f97191721a1ac557891dc7e3696ee85a8a16699bbe4732a05"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_skbmod={0x134, 0xe, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x3}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x3, 0x80, 0x4, 0x1ff, 0xffffff80}, 0x9}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="0ddb4c4017cf"}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="a7b20679f1f9"}]}, {0xb7, 0x6, "0692914ec890badd19c04675747050877e98767fc59ba4df0f4dcfdaf637540c56827cf00669f491a04d9096397e9dff19edf9b46266af08c8bb0a78c96fb6986c01d0ebdff34c641ea399af5ac7b6867446d63f1db10a61a3f06b1f8cd168e9ab502e74e61226ae1aa8dc1729df021d6a45744cedd8557cea055ed10fc6d5e92b921b8bb756339310a66b79fdde2febba562b69a22315e223b5f204c61b122be2d2b0c80fbeec1203df5c2857a3285e8b43bf"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x186c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getpeername(r1, &(0x7f0000000040)=@tipc, &(0x7f0000000140)=0x80) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r2) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xffffffffffffff32, r3, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_SECCTX={0x0, 0x7, 'system_u:object_r:dpkg_var_lib_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x0, 0x3, @dev={0xfe, 0x80, '\x00', 0xc}}]}, 0x2c}, 0x2, 0x34005}, 0x8000) 1.291987828s ago: executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x8, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_BETA={0x8}]}}]}, 0x3c}}, 0x0) 1.269740829s ago: executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syz_tun\x00'}]}]}]}], {0x14}}, 0x80}}, 0x0) syz_emit_ethernet(0x22, &(0x7f000001f8c0)={@local, @broadcast, @void, {@ipv4={0x8100, @tipc={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x21, 0x0, 0x6, 0x0, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}}, @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa}}}}}}, 0x0) 1.254807757s ago: executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0xffffff1f}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000b100000095"], &(0x7f00000008c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000012a40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x20, r3, 0x1, 0xfffffffc, 0x0, {{}, {@void, @val={0xc, 0x99, {0x7, 0x7f}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x20004800) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000380), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x58, r6, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r7}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x58}}, 0x0) r8 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r8, 0x65, 0x7, &(0x7f00000001c0)=0x44, 0x4) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$can_raw(r8, &(0x7f0000000140)={&(0x7f0000000100)={0x1d, r10}, 0x10, &(0x7f0000000180)={&(0x7f0000000200)=@canfd={{}, 0xff, 0x0, 0x0, 0x0, "9e1050ecb1ac3d6a70e745f26c9e33a58584842d15e6db3d0771467e020038c0a19ec746ed1a1dcc6d00"}, 0x48}, 0x2}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r13, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001000)={0x90, r12, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r14}, @WGDEVICE_A_PEERS={0x74, 0x8, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x4, "ebde8191ef32b791e708c5de2c6489cbf6041a3a4e139ac5dfa5375a39526077"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "8560b2abfcff5f7fad26edbe46db38b2193196f33baad7e10cfd832dc3c8992a"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}]}, 0x90}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000340)={'syztnl1\x00', &(0x7f00000002c0)={'ip6tnl0\x00', 0x0, 0x6, 0x0, 0x1c, 0xffff, 0x20, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, 0x80, 0x1, 0x2, 0x3}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000001c0), 0xc, &(0x7f0000000740)={&(0x7f00000003c0)=ANY=[@ANYBLOB="58030000", @ANYRES16=r6, @ANYBLOB="00212dbd7000fe17af159b00000008000100", @ANYRES32=r10, @ANYBLOB="f000028038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000800000038000100240001006e6f746966795f70656572735f696e74657276616c000000000000000000000005000300030000000800040041cd00003c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000000c000400b30740010500000040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000f000400726f756e64726f62696e000008000100", @ANYRES32, @ANYBLOB="8001028038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400c300000040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000f000400726f756e64726f62696e000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004002d95000008000600", @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000000002008000700000000004c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001c000400ff07d48009000000ff00090404000000800000800104000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004007f00000008000100", @ANYRES32=r15, @ANYBLOB="bc00028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e670000000000000500030003", @ANYRES32=r16, @ANYBLOB="080007000000000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000700000040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e636500"], 0x358}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000001) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)='%pK \x00'}, 0x20) 1.139681053s ago: executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002240)={0x14, 0x16, 0x1, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r2 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0xa, 0x300) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r3, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[], 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x2}, {0xffff, 0xffff}}}, 0x24}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000340)={'gretap0\x00', &(0x7f00000005c0)={'tunl0\x00', r7, 0x20, 0x7, 0x20, 0x3, {{0x2c, 0x4, 0x0, 0x8, 0xb0, 0x68, 0x0, 0x4e, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0x4}, @cipso={0x86, 0x1d, 0xffffffffffffffff, [{0x1, 0x9, "e7856efc6932a3"}, {0x5, 0xe, "9354bba183a6adc067602f97"}]}, @generic={0x94, 0xb, "4433d7538c48297e8a"}, @generic={0x83, 0xf, "9dc3de30200448cdd97bfd430c"}, @timestamp={0x44, 0x1c, 0x75, 0x0, 0x0, [0x10001, 0x6, 0x7, 0x4, 0x7, 0xfffffffd]}, @rr={0x7, 0x23, 0xc3, [@private=0xa010101, @rand_addr=0x64010100, @rand_addr=0x64010102, @remote, @broadcast, @multicast1, @dev={0xac, 0x14, 0x14, 0x15}, @broadcast]}, @timestamp_addr={0x44, 0x14, 0xf4, 0x1, 0x0, [{@dev={0xac, 0x14, 0x14, 0x24}, 0x72}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}]}, @timestamp_prespec={0x44, 0xc, 0x7e, 0x3, 0x0, [{@private=0xa010100, 0x5}]}]}}}}}) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x1d, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r9}, 0x10) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001940)={0x108, 0x2b, 0x1, 0x0, 0x0, "", [@nested={0xf5, 0x0, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@mcast2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x108}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) 1.08391262s ago: executing program 2: bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002240)={0x14, 0x16, 0x1, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r2 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0xa, 0x300) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r3, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[], 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x2}, {0xffff, 0xffff}}}, 0x24}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000340)={'gretap0\x00', &(0x7f00000005c0)={'tunl0\x00', r7, 0x20, 0x7, 0x20, 0x3, {{0x2c, 0x4, 0x0, 0x8, 0xb0, 0x68, 0x0, 0x4e, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0x4}, @cipso={0x86, 0x1d, 0xffffffffffffffff, [{0x1, 0x9, "e7856efc6932a3"}, {0x5, 0xe, "9354bba183a6adc067602f97"}]}, @generic={0x94, 0xb, "4433d7538c48297e8a"}, @generic={0x83, 0xf, "9dc3de30200448cdd97bfd430c"}, @timestamp={0x44, 0x1c, 0x75, 0x0, 0x0, [0x10001, 0x6, 0x7, 0x4, 0x7, 0xfffffffd]}, @rr={0x7, 0x23, 0xc3, [@private=0xa010101, @rand_addr=0x64010100, @rand_addr=0x64010102, @remote, @broadcast, @multicast1, @dev={0xac, 0x14, 0x14, 0x15}, @broadcast]}, @timestamp_addr={0x44, 0x14, 0xf4, 0x1, 0x0, [{@dev={0xac, 0x14, 0x14, 0x24}, 0x72}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}]}, @timestamp_prespec={0x44, 0xc, 0x7e, 0x3, 0x0, [{@private=0xa010100, 0x5}]}]}}}}}) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x1d, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r9}, 0x10) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001940)={0x108, 0x2b, 0x1, 0x0, 0x0, "", [@nested={0xf5, 0x0, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@mcast2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x108}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) 1.04468994s ago: executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.controllers\x00', 0x0, 0x0) close(r1) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x50, 0xd, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}]}, 0x50}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x8a9}, 0x48) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r5, @ANYBLOB="010400000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="d2023300802b0001080211000000080211"], 0x2f0}}, 0x0) 890.555645ms ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240300005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24) 881.224658ms ago: executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002680)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.controllers\x00', 0x0, 0x0) close(r1) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x61, 0x9c}, [@call={0x25}], {0x95, 0x0, 0xd00}}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x8000000, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x50, 0xd, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}]}, 0x50}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r5, @ANYBLOB="010400000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="d2023300802b0001080211000000080211"], 0x2f0}}, 0x0) 852.063009ms ago: executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000030000000000000085000000530000001801007b1af8fe00000000bfa100000000000007110000f8ff0000b702810008000000b703000000000000850000005000000095f300"/96], &(0x7f0000000280)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x5c, r6, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x2c, 0x51, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "a7fd4531296b6353d1f3e08847"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac02}, @NL80211_KEY_IDX={0x5}]}]}, @NL80211_ATTR_SSID={0x5, 0x34, @random='^'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x5c}}, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="1000c0ddb29338ab7a1eb308f39f00b4eb6304265a0fd6b65e7f9b007c5734cd943ccd2082c27ab12a91568a7322b03c7c424c48681441b775df449640306242c89e805127f943f511e44618b4fd049999bf209450924e95fab3d2b9bdfcbe5792d354e33ff977f799c039b8231b0d258a4631f72853f2a50225a7943b711cd3a61cc55371a1c9435a505dd65117c4dda09b6895da7abea07832549d3d5bdd7cb0ba58df5458b9ce3fd25865fa632b4766ec13db775178e0fb2ce4da412d7cfb419779529a3f0c", @ANYRES16=r2, @ANYBLOB="00082bbd7000fddbdf252800000008000300", @ANYRES32=r8, @ANYBLOB="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"], 0x310}, 0x1, 0x0, 0x0, 0x840}, 0x1) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1000}, 0x4) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1000}, 0x4) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x3c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[], 0x7c}}, 0x8004) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000001940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a090400000000000000000200000044000480400001800c0001006269747769736500300002800800034000000002080002400000001008000140000000160c000780080001001800000008000640000000010900010073797a30000000000900020073797a320000000014000000110001"], 0x98}}, 0x0) r12 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r12, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a80488c6f94f90324fc600400037a0a070200050682c137153e370e0c1180fc1110000300", 0x33fe0}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=ANY=[@ANYRESDEC=r2, @ANYRESHEX=r4, @ANYRES8=r2, @ANYBLOB="6cea46f55f13249ab172f840fde17f17ce86de6598ba7eff0cfff2591a7164887925aa57e5d07fe2de5250b0e09935280d9da88fb39e11dd372189fbe6b5b578ec67c088b39fbca7bbd3ef500f46b8bc794f0f5da430649b5ebc909cb79c35187faed806ae68848ac42d926c4afce28eb25e1eb40b08429f21dde2ac455f", @ANYBLOB="40002d800a00000002020202020200000a00000002020202020a0000060000003a9b00000400000001010101010100000d000000dfa7c521ee53256b650000001c002d800a00000001010101010100000a"], 0x78}, 0x1, 0x0, 0x0, 0x24040850}, 0x0) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r14, 0x8933, &(0x7f0000000bc0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r14, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000400)={0x40, r15, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r16}, @NL802154_ATTR_SEC_DEVKEY={0x24, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x4}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}]}, 0x40}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r13, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0xa080}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x20, r15, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0xc81de20dcdc12b52}]}, 0x20}, 0x1, 0x0, 0x0, 0x4044000}, 0x20000011) 684.913012ms ago: executing program 0: ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8916, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000240)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000040)={0x5, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000000c0)={0xffffffff}, 0x10) write(r1, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) recvmmsg(r1, &(0x7f0000005c80), 0x1b, 0x10122, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000002600)=@newtaction={0x186c, 0x30, 0x1, 0x0, 0x0, {}, [{0x294, 0x1, [@m_ctinfo={0xd4, 0xd, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0xf240, 0xfffffffa, 0x20000000, 0x9, 0x6}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xfffffffa}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x68f6db00}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xfff}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xffffffe1}]}, {0x6e, 0x6, "b7dd3a5c147a2812d48a5d582245e9e5f202c1d1e8ec8a22a9d9061f56558ae91b10b16570e1e363a4a1deeb920c1f3915d1bfaa2600d1dd88ace16fcf5a1cb4a8a311400ba79bc670132beef5125733c7932b1678e44ab914cbd644cbdfe38ae80591b4ed0ca7aece43"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_ctinfo={0xf4, 0x0, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0xd7}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x1}, @TCA_CTINFO_ACT={0x18, 0x3, {0x1d3, 0x6, 0x2, 0x80000000, 0x3}}]}, {0x98, 0x6, "b002f690dfee97c162bcc9db39d1546aad17e83562ec27b7a224ea41eac348c6fb602bd25728962709919c91a3ddacadf2ee81927391a1fd0371e7aa2c0ccab55b643ff1163fa9877deaeb17b653727fe139582211c884185c4cc03c295994a3abb8137e7fe457ec1148157b02bd999bf2e1eae830ec7e84d57bb768e4bd88b9565ea5a053e8e224e0d521a17182be773c033a14"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_tunnel_key={0xc8, 0xe, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @remote}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @private=0xa010102}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, {0x53, 0x6, "bcea98ecace90e8513a2cd17435f8f00f56c76d9968a3f0fc096d0eea222d2f8bca0e510e442c02d7af8c44a2e80780d48d5a0506fe2ca107805e2ebb54ae518faffdb516eb76bdd8bfd12a07243f3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, {0x15c4, 0x1, [@m_xt={0x1108, 0x2, 0x0, 0x0, {{0x7}, {0x1090, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TARG={0x102a, 0x6, {0xf59, 'raw\x00', 0x80, 0x400, "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"}}]}, {0x54, 0x6, "f39f4d8d003081f05449373e83c2ef418c3ea94a4d80a76d23c00712d6ba5fa6690f61d324912a5bac4045705588f73a090faa8f3a529f90a08fea6fa927aae15de2e408479fe996b91e88fb65b5a84f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_csum={0x1b0, 0xf, 0x0, 0x0, {{0x9}, {0xc8, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0xd8, 0x8, 0x9, 0x9}, 0x21}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x80000000, 0x4, 0x9, 0x6}, 0x71}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x4, 0x7, 0x183182a9, 0x7}, 0x28}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0xffffffff, 0x3, 0x3}, 0x6f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x8e11, 0x20000000, 0x1, 0x57}, 0xa}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xffffffff, 0x40, 0x1, 0x1, 0x2}, 0x27}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x1ff, 0xffffffffffffffff, 0x10e, 0x2}, 0x19}}]}, {0xbd, 0x6, "0669c2ff299cbad6222d91da52606518c1dd9bf9b15273d8c6937c72b784f0bf49d98a6d949e79712b6c8c5ac521de2597f68e5e36108791ac0f60cc44b14bf089fb25b6cc971d1abe2a5aef050d6553108885b76b485f042f32710efc81429101dfbdd350e7ebd8344b362a73907cda46d652ef78c24ff9a8b7f22965ba8971b74016ccac65f9da247419d2e71d1c0971fdc7633e2c46f3e34e9c86c57de4b971d5d3b1f3cea642cd4dab1487f189cc5b8c37a7efdaf7f4a6"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_xt={0x8c, 0xe, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_INDEX={0x8, 0x3, 0x7}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}]}, {0x25, 0x6, "14a500f5b850c80aa3d8fc5536a87784ba566e8778686286d24947c86193a53084"}, {0xc}, {0xc, 0x8, {0x8a94aab71e471973, 0x3}}}}, @m_skbedit={0x148, 0xe, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x5f1b, 0x4, 0x20000000, 0x3, 0x9}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x4}]}, {0xf9, 0x6, "8631641d271855440a94eba01cc14ffe37fd42c70d9f41116d1fb85734b720e967c469a15e705e3cb46a326ba033acb2a31307ad24121d7af2b442457dc5c3ff7292c7bbe1481d02f6224435281959e79395c5e359b1605cb3305deddd854bb73f0d79d7dacb0eff940347698d51ef9ade5428ccbb11d2363b527bf20c9e4a2e477a77b3f86c55b681ad13b2430bdeab2bc45207ebbe0e3653c4870f7fd4a1009dac82f7e1aca7284d24faec4c81bf61a729e94d25fa91dc13ef00188070c9dcbb3f627383e022520ab071df160c616fd741f124aa28d1d78a82dbc61f97191721a1ac557891dc7e3696ee85a8a16699bbe4732a05"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_skbmod={0x134, 0xe, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x3}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x3, 0x80, 0x4, 0x1ff, 0xffffff80}, 0x9}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="0ddb4c4017cf"}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="a7b20679f1f9"}]}, {0xb7, 0x6, "0692914ec890badd19c04675747050877e98767fc59ba4df0f4dcfdaf637540c56827cf00669f491a04d9096397e9dff19edf9b46266af08c8bb0a78c96fb6986c01d0ebdff34c641ea399af5ac7b6867446d63f1db10a61a3f06b1f8cd168e9ab502e74e61226ae1aa8dc1729df021d6a45744cedd8557cea055ed10fc6d5e92b921b8bb756339310a66b79fdde2febba562b69a22315e223b5f204c61b122be2d2b0c80fbeec1203df5c2857a3285e8b43bf"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x186c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getpeername(r1, &(0x7f0000000040)=@tipc, &(0x7f0000000140)=0x80) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r2) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xffffffffffffff32, r3, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_SECCTX={0x0, 0x7, 'system_u:object_r:dpkg_var_lib_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x0, 0x3, @dev={0xfe, 0x80, '\x00', 0xc}}]}, 0x2c}, 0x2, 0x34005}, 0x8000) 675.060796ms ago: executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x11, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) 537.116685ms ago: executing program 3: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e020000feda26040c199e4a00"/54], 0x0, 0x37}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x9, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x2, 0x1}, 0x48) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @none}, 0x0, 0x0) accept4$bt_l2cap(r2, &(0x7f0000000140)={0x1f, 0x0, @none}, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r4, 0x0, r6, 0x0, 0x8000f28, 0x0) splice(r5, 0x0, r7, 0x0, 0x800000000, 0x2) write$binfmt_misc(r6, 0x0, 0x99) write(r3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r1, 0x58, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x4, 0x1, 0x9, 0x1000, r1, 0x828d, '\x00', r9, r0, 0x0, 0x4, 0x5, 0x6}, 0x48) close(0xffffffffffffffff) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0x8, &(0x7f00000007c0)=ANY=[@ANYRESHEX=r8, @ANYRES32=r0, @ANYRESHEX=r3], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x1}, 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r10}, 0x10) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r11 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r13, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x2000000}}}}]}, 0x92}}, 0x0) 534.863199ms ago: executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r0, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f0000000400), &(0x7f00000004c0)=0x4) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000480)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r2}, &(0x7f00000005c0), &(0x7f0000000640)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000500), 0x4) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000380)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x50, r5, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_buf(r6, 0x1, 0x19, 0x0, &(0x7f0000003080)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r8, 0x0, 0x80, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x2, 0x250, [0x0, 0x20000100, 0x20000130, 0x20000280], 0x2, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) ioctl$sock_inet_SIOCGIFNETMASK(r5, 0x891b, &(0x7f00000000c0)={'geneve0\x00', {0x2, 0x0, @multicast1}}) 518.131298ms ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8902, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0x0, '.\x00'}}) 394.629863ms ago: executing program 0: socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x4100}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x44}}, 0x0) 375.191061ms ago: executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x0, @loopback}], 0x1c) listen(r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000800014003001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) socket$inet6(0xa, 0x3, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa}, 0x48) socket$inet(0x2, 0x4, 0x6) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0xf, &(0x7f0000001580)={0x0, @in={{0x2, 0x0, @private}}}, &(0x7f0000000540)=0x9c) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x3c, &(0x7f0000000100)=[@in6={0xa, 0x4e20, 0x0, @loopback}, @in={0x2, 0x4e20, @local}, @in={0x2, 0x4e20, @private=0xa010101}]}, &(0x7f00000002c0)=0x10) 217.721966ms ago: executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002680)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.controllers\x00', 0x0, 0x0) close(r1) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x50, 0xd, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}]}, 0x50}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r5, @ANYBLOB="010400000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="d2023300802b0001080211000000080211"], 0x2f0}}, 0x0) 163.965449ms ago: executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.controllers\x00', 0x0, 0x0) close(r1) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x50, 0xd, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}]}, 0x50}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x8a9}, 0x48) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r5, @ANYBLOB="010400000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="d2023300802b0001080211000000080211"], 0x2f0}}, 0x0) 121.120013ms ago: executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000480), &(0x7f00000004c0)=r2}, 0x20) socket$igmp(0x2, 0x3, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x3a, 0x2}, 0x48) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) getsockopt$nfc_llcp(r4, 0x10f, 0x0, 0x0, 0x3b514ca05b9f5cc7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{r3}, &(0x7f0000000a80), &(0x7f0000000ac0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="140100000000b2000500000000000000850000007b00000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r5 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r5, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r5, 0x400000001ffffffd) r6 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r6, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) recvmmsg(r6, &(0x7f0000007940), 0x55, 0x0, 0x0) close(0xffffffffffffffff) 71.301527ms ago: executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000480), &(0x7f00000004c0)=r2}, 0x20) socket$igmp(0x2, 0x3, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x3a, 0x2}, 0x48) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) getsockopt$nfc_llcp(r4, 0x10f, 0x0, 0x0, 0x3b514ca05b9f5cc7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{r3}, &(0x7f0000000a80), &(0x7f0000000ac0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="140100000000b2000500000000000000850000007b00000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r5 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r5, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r5, 0x400000001ffffffd) r6 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r6, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) recvmmsg(r6, &(0x7f0000007940), 0x55, 0x0, 0x0) close(0xffffffffffffffff) 24.56742ms ago: executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000480), &(0x7f00000004c0)=r2}, 0x20) socket$igmp(0x2, 0x3, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x3a, 0x2}, 0x48) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) getsockopt$nfc_llcp(r4, 0x10f, 0x0, 0x0, 0x3b514ca05b9f5cc7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{r3}, &(0x7f0000000a80), &(0x7f0000000ac0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="140100000000b2000500000000000000850000007b00000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r5 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r5, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r5, 0x400000001ffffffd) r6 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r6, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) recvmmsg(r6, &(0x7f0000007940), 0x55, 0x0, 0x0) close(0xffffffffffffffff) 0s ago: executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002680)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.controllers\x00', 0x0, 0x0) close(r1) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x61, 0x9c}, [@call={0x25}], {0x95, 0x0, 0xd00}}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x8000000, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x50, 0xd, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}]}, 0x50}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r5, @ANYBLOB="010400000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="d2023300802b0001080211000000080211"], 0x2f0}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.33' (ED25519) to the list of known hosts. 2024/05/28 05:17:39 fuzzer started 2024/05/28 05:17:39 dialing manager at 10.128.0.169:30016 [ 54.974767][ T5090] cgroup: Unknown subsys name 'net' [ 55.109488][ T5090] cgroup: Unknown subsys name 'rlimit' 2024/05/28 05:17:41 starting 5 executor processes [ 56.305703][ T5098] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 57.143004][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 57.169135][ T5122] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 57.177837][ T5122] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 57.186678][ T5122] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 57.195733][ T5124] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 57.205825][ T5123] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 57.214618][ T5124] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 57.214644][ T5123] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 57.224192][ T5122] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 57.229895][ T5123] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 57.237460][ T5124] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 57.251279][ T5122] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 57.254363][ T5123] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 57.260622][ T5124] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 57.267034][ T5126] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 57.274221][ T5124] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 57.280624][ T5123] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 57.287938][ T5122] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 57.295495][ T5126] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 57.308722][ T5124] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 57.309407][ T5126] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 57.317001][ T5124] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 57.323706][ T5126] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 57.330189][ T5124] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 57.339785][ T5126] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 57.345235][ T5124] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 57.354086][ T5126] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 57.359458][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 57.365592][ T5126] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 57.372343][ T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 57.909593][ T5109] chnl_net:caif_netlink_parms(): no params data found [ 58.063786][ T5117] chnl_net:caif_netlink_parms(): no params data found [ 58.082130][ T5115] chnl_net:caif_netlink_parms(): no params data found [ 58.101174][ T5110] chnl_net:caif_netlink_parms(): no params data found [ 58.161705][ T5113] chnl_net:caif_netlink_parms(): no params data found [ 58.248350][ T5109] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.255646][ T5109] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.266426][ T5109] bridge_slave_0: entered allmulticast mode [ 58.274594][ T5109] bridge_slave_0: entered promiscuous mode [ 58.314081][ T5109] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.321226][ T5109] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.328591][ T5109] bridge_slave_1: entered allmulticast mode [ 58.336675][ T5109] bridge_slave_1: entered promiscuous mode [ 58.463964][ T5109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.482169][ T5110] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.490510][ T5110] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.498459][ T5110] bridge_slave_0: entered allmulticast mode [ 58.506059][ T5110] bridge_slave_0: entered promiscuous mode [ 58.514502][ T5110] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.521608][ T5110] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.529192][ T5110] bridge_slave_1: entered allmulticast mode [ 58.536817][ T5110] bridge_slave_1: entered promiscuous mode [ 58.544393][ T5115] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.551475][ T5115] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.558997][ T5115] bridge_slave_0: entered allmulticast mode [ 58.566438][ T5115] bridge_slave_0: entered promiscuous mode [ 58.586054][ T5113] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.593345][ T5113] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.600801][ T5113] bridge_slave_0: entered allmulticast mode [ 58.608202][ T5113] bridge_slave_0: entered promiscuous mode [ 58.618989][ T5109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.628425][ T5117] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.636047][ T5117] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.643483][ T5117] bridge_slave_0: entered allmulticast mode [ 58.650872][ T5117] bridge_slave_0: entered promiscuous mode [ 58.670420][ T5115] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.677666][ T5115] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.688318][ T5115] bridge_slave_1: entered allmulticast mode [ 58.695313][ T5115] bridge_slave_1: entered promiscuous mode [ 58.702008][ T5113] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.709371][ T5113] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.716841][ T5113] bridge_slave_1: entered allmulticast mode [ 58.724277][ T5113] bridge_slave_1: entered promiscuous mode [ 58.755038][ T5117] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.762253][ T5117] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.769947][ T5117] bridge_slave_1: entered allmulticast mode [ 58.777210][ T5117] bridge_slave_1: entered promiscuous mode [ 58.829746][ T5109] team0: Port device team_slave_0 added [ 58.852198][ T5110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.886908][ T5109] team0: Port device team_slave_1 added [ 58.895632][ T5117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.908662][ T5117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.919641][ T5110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.935530][ T5115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.948086][ T5113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.004026][ T5115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.016425][ T5113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.040196][ T5109] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.047268][ T5109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.073304][ T5109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.087528][ T5109] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.094605][ T5109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.127379][ T5109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.208818][ T5117] team0: Port device team_slave_0 added [ 59.218999][ T5117] team0: Port device team_slave_1 added [ 59.228021][ T5110] team0: Port device team_slave_0 added [ 59.238301][ T5115] team0: Port device team_slave_0 added [ 59.248391][ T5113] team0: Port device team_slave_0 added [ 59.299991][ T5110] team0: Port device team_slave_1 added [ 59.310010][ T5115] team0: Port device team_slave_1 added [ 59.318196][ T5113] team0: Port device team_slave_1 added [ 59.339429][ T5109] hsr_slave_0: entered promiscuous mode [ 59.349576][ T5109] hsr_slave_1: entered promiscuous mode [ 59.357285][ T5117] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.364598][ T5117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.390943][ T5117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.433991][ T4492] Bluetooth: hci2: command tx timeout [ 59.434005][ T53] Bluetooth: hci3: command tx timeout [ 59.444513][ T53] Bluetooth: hci4: command tx timeout [ 59.445200][ T5126] Bluetooth: hci0: command tx timeout [ 59.450648][ T53] Bluetooth: hci1: command tx timeout [ 59.469811][ T5117] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.477683][ T5117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.504251][ T5117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.529229][ T5110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.536249][ T5110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.562384][ T5110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.583461][ T5113] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.590444][ T5113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.616650][ T5113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.640044][ T5110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.650436][ T5110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.676816][ T5110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.688651][ T5115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.696023][ T5115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.722195][ T5115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.735402][ T5115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.742448][ T5115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.769003][ T5115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.781735][ T5113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.789153][ T5113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.815373][ T5113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.917323][ T5117] hsr_slave_0: entered promiscuous mode [ 59.925709][ T5117] hsr_slave_1: entered promiscuous mode [ 59.931938][ T5117] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.939909][ T5117] Cannot create hsr debugfs directory [ 60.045389][ T5113] hsr_slave_0: entered promiscuous mode [ 60.051964][ T5113] hsr_slave_1: entered promiscuous mode [ 60.060144][ T5113] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.068070][ T5113] Cannot create hsr debugfs directory [ 60.094694][ T5115] hsr_slave_0: entered promiscuous mode [ 60.101450][ T5115] hsr_slave_1: entered promiscuous mode [ 60.107984][ T5115] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.115990][ T5115] Cannot create hsr debugfs directory [ 60.141569][ T5110] hsr_slave_0: entered promiscuous mode [ 60.150499][ T5110] hsr_slave_1: entered promiscuous mode [ 60.156991][ T5110] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.172277][ T5110] Cannot create hsr debugfs directory [ 60.496186][ T5109] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 60.509625][ T5109] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 60.550856][ T5109] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 60.585907][ T5109] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 60.677547][ T5117] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 60.689059][ T5117] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 60.700068][ T5117] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 60.711025][ T5117] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 60.818457][ T5110] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 60.829718][ T5110] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 60.840203][ T5110] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 60.863548][ T5110] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 60.905420][ T5109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.956803][ T5115] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 60.987647][ T5115] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 60.998435][ T5115] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 61.017496][ T5115] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 61.035504][ T5109] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.099210][ T5117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.111531][ T5160] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.118960][ T5160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.177161][ T5163] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.184357][ T5163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.199728][ T5113] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 61.209898][ T5113] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 61.239840][ T5113] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 61.249608][ T5113] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 61.275803][ T5117] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.342236][ T5161] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.349441][ T5161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.369780][ T5110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.441303][ T5110] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.451081][ T5162] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.458319][ T5162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.513355][ T53] Bluetooth: hci2: command tx timeout [ 61.517592][ T5120] Bluetooth: hci4: command tx timeout [ 61.524276][ T53] Bluetooth: hci1: command tx timeout [ 61.524318][ T53] Bluetooth: hci3: command tx timeout [ 61.536343][ T4492] Bluetooth: hci0: command tx timeout [ 61.556394][ T5165] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.563625][ T5165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.586023][ T5165] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.593329][ T5165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.625901][ T5115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.810209][ T5113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.848484][ T5109] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.867040][ T5115] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.921761][ T5165] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.929007][ T5165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.978443][ T5165] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.985766][ T5165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.022183][ T5113] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.080533][ T5161] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.087764][ T5161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.113463][ T5161] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.120605][ T5161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.143993][ T5117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.158812][ T5109] veth0_vlan: entered promiscuous mode [ 62.196329][ T5109] veth1_vlan: entered promiscuous mode [ 62.249980][ T5110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.262632][ T5115] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.331947][ T5109] veth0_macvtap: entered promiscuous mode [ 62.369598][ T5109] veth1_macvtap: entered promiscuous mode [ 62.507396][ T5117] veth0_vlan: entered promiscuous mode [ 62.529515][ T5109] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.566053][ T5109] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.580483][ T5117] veth1_vlan: entered promiscuous mode [ 62.611188][ T5109] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.636057][ T5109] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.653543][ T5109] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.662288][ T5109] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.800649][ T5110] veth0_vlan: entered promiscuous mode [ 62.812070][ T5115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.829551][ T5110] veth1_vlan: entered promiscuous mode [ 62.895166][ T5117] veth0_macvtap: entered promiscuous mode [ 62.935832][ T5113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.968071][ T5117] veth1_macvtap: entered promiscuous mode [ 63.007546][ T5110] veth0_macvtap: entered promiscuous mode [ 63.013711][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.020373][ T5110] veth1_macvtap: entered promiscuous mode [ 63.031979][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.047422][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.062958][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.076190][ T5117] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.129710][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.142657][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.154640][ T5117] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.166144][ T5115] veth0_vlan: entered promiscuous mode [ 63.194950][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.206272][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.221004][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.231871][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.244324][ T5110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.257863][ T5117] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.267058][ T5117] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.282963][ T5117] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.291795][ T5117] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.307570][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.319202][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.329159][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.339958][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.352399][ T5110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.366138][ T5115] veth1_vlan: entered promiscuous mode [ 63.374468][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.382328][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.421457][ T5110] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.431375][ T5110] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.441793][ T5110] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.451689][ T5110] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.550579][ T5113] veth0_vlan: entered promiscuous mode [ 63.585392][ T5164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.593406][ T5120] Bluetooth: hci4: command tx timeout [ 63.593454][ T5120] Bluetooth: hci3: command tx timeout [ 63.593487][ T5120] Bluetooth: hci1: command tx timeout [ 63.593520][ T5120] Bluetooth: hci2: command tx timeout [ 63.593776][ T5120] Bluetooth: hci0: command tx timeout [ 63.634293][ T5194] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 63.651289][ T5164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.680009][ T5113] veth1_vlan: entered promiscuous mode [ 63.721954][ T5115] veth0_macvtap: entered promiscuous mode [ 63.769792][ T5166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.771676][ T5115] veth1_macvtap: entered promiscuous mode [ 63.792007][ T5166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.910959][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.931661][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.950675][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.961430][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.973562][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.984589][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.997265][ T5115] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.016077][ T957] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.027289][ T5201] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 64.044422][ T5201] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.0'. [ 64.054962][ T957] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.102021][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.148453][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.172233][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.198521][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.233161][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.245861][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.269630][ T5115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.334345][ T5206] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 64.357514][ T5206] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 64.380342][ T5213] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 64.391446][ T5213] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.0'. [ 64.417208][ T5115] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.444806][ T5115] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.460913][ T5115] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.480034][ T5115] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.492367][ T5113] veth0_macvtap: entered promiscuous mode [ 64.550565][ T5160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.559428][ T5160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.624911][ T5113] veth1_macvtap: entered promiscuous mode [ 64.818028][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.838436][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.849014][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.861939][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.877411][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.890398][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.900571][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.911424][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.923128][ T5113] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.945355][ T5229] syz-executor.1 uses obsolete (PF_INET,SOCK_PACKET) [ 64.956000][ T5231] dvmrp1: entered allmulticast mode [ 64.999468][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.010518][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.021190][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.032349][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.043482][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.054564][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.064679][ T5113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.076443][ T5113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.088153][ T5113] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.106215][ T5234] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 65.211217][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.215658][ T5113] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.230196][ T5113] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.240915][ T5113] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.245626][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.251118][ T5113] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.440758][ T2810] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.466338][ T2810] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.547555][ T5162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.573566][ T5162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.647721][ T5240] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 65.673547][ T4492] Bluetooth: hci0: command tx timeout [ 65.679026][ T4492] Bluetooth: hci2: command tx timeout [ 65.685461][ T5120] Bluetooth: hci1: command tx timeout [ 65.685517][ T5126] Bluetooth: hci3: command tx timeout [ 65.690880][ T5120] Bluetooth: hci4: command tx timeout [ 65.852535][ T957] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.889142][ T957] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.077195][ T5259] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 66.095833][ T5259] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.4'. [ 66.208108][ T5263] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 66.229315][ T5263] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.0'. [ 66.449637][ T5269] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 66.503610][ T5269] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.2'. [ 66.528455][ T5271] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 66.583221][ T5271] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.0'. [ 67.085306][ T5289] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 67.564857][ T5304] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 67.647689][ T5308] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 68.064378][ T5320] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.096267][ T5320] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 68.124180][ T5320] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 68.186394][ T5320] net_ratelimit: 2 callbacks suppressed [ 68.186410][ T5320] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 69.118231][ T5364] __nla_validate_parse: 8 callbacks suppressed [ 69.118252][ T5364] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 69.702097][ T5388] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 69.871522][ T5390] validate_nla: 3 callbacks suppressed [ 69.871545][ T5390] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 69.886358][ T5390] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.2'. [ 69.928114][ T5388] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 70.161412][ T5403] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 70.248142][ T5407] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 70.277128][ T5407] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.2'. [ 70.309761][ T5409] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 70.332890][ T5409] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.4'. [ 70.539922][ T5421] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 70.577294][ T5421] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.4'. [ 71.489357][ T5452] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 71.668395][ T5452] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 71.765943][ T5459] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 71.813331][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.820014][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.985847][ T5464] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 72.224695][ T5474] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 72.646524][ T5487] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 72.907966][ T5505] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 73.555474][ T5526] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 74.402937][ T5558] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 74.472578][ T5561] __nla_validate_parse: 12 callbacks suppressed [ 74.472599][ T5561] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 74.561026][ T5566] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 74.604742][ T5561] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 74.871631][ T5580] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 75.548194][ T5609] validate_nla: 4 callbacks suppressed [ 75.548216][ T5609] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 75.627741][ T5609] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.3'. [ 75.697959][ T5611] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 75.752232][ T5611] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 76.509505][ T5632] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 76.549985][ T5632] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.3'. [ 77.496659][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.522387][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.540128][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.598156][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.621836][ T53] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 77.634045][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.775759][ T5659] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 77.812080][ T5659] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.3'. [ 77.843169][ T5109] syz-executor.1 (5109) used greatest stack depth: 18992 bytes left [ 78.052600][ T1108] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.375804][ T1108] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.519026][ T5689] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 78.630878][ T5689] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.3'. [ 78.988346][ T1108] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.206223][ T1108] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.350394][ T5707] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 79.463475][ T5707] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.0'. [ 79.705377][ T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.716505][ T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.727657][ T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.739911][ T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.748922][ T53] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 79.756983][ T4492] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.765304][ T53] Bluetooth: hci0: command tx timeout [ 80.142280][ T5740] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 80.204131][ T5740] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.4'. [ 80.588775][ T5664] chnl_net:caif_netlink_parms(): no params data found [ 80.770245][ T1108] bridge_slave_1: left allmulticast mode [ 80.779699][ T1108] bridge_slave_1: left promiscuous mode [ 80.787193][ T1108] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.856839][ T1108] bridge_slave_0: left allmulticast mode [ 80.912831][ T1108] bridge_slave_0: left promiscuous mode [ 80.918680][ T1108] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.833522][ T5126] Bluetooth: hci0: command tx timeout [ 81.843545][ T5126] Bluetooth: hci1: command tx timeout [ 82.001134][ T1156] cfg80211: failed to load regulatory.db [ 82.057069][ T1108] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 82.068900][ T1108] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 82.081079][ T1108] bond0 (unregistering): Released all slaves [ 82.117138][ T5762] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 82.126026][ T5762] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.4'. [ 82.624335][ T5664] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.643443][ T5664] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.680392][ T5664] bridge_slave_0: entered allmulticast mode [ 82.757587][ T5664] bridge_slave_0: entered promiscuous mode [ 82.840377][ T5719] chnl_net:caif_netlink_parms(): no params data found [ 82.877509][ T5809] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 82.906038][ T5809] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.2'. [ 82.928355][ T5807] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 82.938097][ T5807] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.0'. [ 82.999401][ T5664] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.032535][ T5664] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.083724][ T5664] bridge_slave_1: entered allmulticast mode [ 83.117368][ T5664] bridge_slave_1: entered promiscuous mode [ 83.503627][ T5829] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 83.516057][ T5829] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.0'. [ 83.577425][ T5841] ieee802154 phy0 wpan0: encryption failed: -22 [ 83.631827][ T5664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.789534][ T5664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.915817][ T5126] Bluetooth: hci1: command tx timeout [ 83.921385][ T5126] Bluetooth: hci0: command tx timeout [ 84.104465][ T1108] hsr_slave_0: left promiscuous mode [ 84.125120][ T1108] hsr_slave_1: left promiscuous mode [ 84.149045][ T1108] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.159257][ T5861] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 84.175794][ T1108] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.205305][ T5861] hsr0: VLAN not yet supported [ 84.221858][ T1108] veth1_macvtap: left promiscuous mode [ 84.309628][ T1108] veth0_macvtap: left promiscuous mode [ 84.315585][ T1108] veth1_vlan: left promiscuous mode [ 84.322177][ T1108] veth0_vlan: left promiscuous mode [ 84.987429][ T1108] team0 (unregistering): Port device team_slave_1 removed [ 85.030033][ T1108] team0 (unregistering): Port device team_slave_0 removed [ 85.399340][ T5865] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 85.413018][ T5865] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.0'. [ 85.430012][ T5867] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 85.446069][ T5867] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.2'. [ 85.538200][ T5664] team0: Port device team_slave_0 added [ 85.555364][ T5664] team0: Port device team_slave_1 added [ 85.645272][ T5882] dccp_invalid_packet: invalid packet type [ 85.650855][ T5719] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.660384][ T5719] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.689408][ T5719] bridge_slave_0: entered allmulticast mode [ 85.714946][ T5719] bridge_slave_0: entered promiscuous mode [ 85.736554][ T5719] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.756600][ T5719] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.770640][ T5719] bridge_slave_1: entered allmulticast mode [ 85.785893][ T5719] bridge_slave_1: entered promiscuous mode [ 85.992992][ T5126] Bluetooth: hci0: command tx timeout [ 85.998638][ T5126] Bluetooth: hci1: command tx timeout [ 86.015609][ T5664] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.022626][ T5664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.066171][ T5664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.088539][ T5719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.099545][ T5898] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 86.143394][ T5898] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.4'. [ 86.170804][ T5899] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 86.377582][ T5664] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.417663][ T5664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.460815][ T5664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.522369][ T5719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.728967][ T5719] team0: Port device team_slave_0 added [ 86.754911][ T5923] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 86.783643][ T5923] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.0'. [ 86.813535][ T5719] team0: Port device team_slave_1 added [ 87.298493][ T5930] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 87.322863][ T5930] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.4'. [ 87.452531][ T5664] hsr_slave_0: entered promiscuous mode [ 87.494410][ T5664] hsr_slave_1: entered promiscuous mode [ 87.543725][ T5719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.550856][ T5719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.605742][ T5719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.702248][ T5950] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 87.744842][ T5950] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.2'. [ 87.783626][ T5719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.790629][ T5719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.893159][ T5719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.073168][ T5126] Bluetooth: hci1: command tx timeout [ 88.228242][ T1108] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.510244][ T5965] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 88.553452][ T5965] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.4'. [ 88.585085][ T5972] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 88.615305][ T5972] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.2'. [ 88.791019][ T1108] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.861828][ T5719] hsr_slave_0: entered promiscuous mode [ 88.914276][ T5719] hsr_slave_1: entered promiscuous mode [ 88.944937][ T5719] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.971081][ T5719] Cannot create hsr debugfs directory [ 89.111795][ T1108] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.232964][ T5995] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 89.252515][ T5995] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.4'. [ 89.483872][ T1108] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.598907][ T6018] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 89.895193][ T6027] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 90.060281][ T6033] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 90.892623][ T6046] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 90.939881][ T6046] __nla_validate_parse: 3 callbacks suppressed [ 90.939900][ T6046] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.0'. [ 90.991821][ T1108] bridge_slave_1: left allmulticast mode [ 91.011079][ T1108] bridge_slave_1: left promiscuous mode [ 91.041369][ T1108] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.070106][ T1108] bridge_slave_0: left allmulticast mode [ 91.076128][ T1108] bridge_slave_0: left promiscuous mode [ 91.082005][ T1108] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.741815][ T1108] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 91.759752][ T1108] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 91.771366][ T1108] bond0 (unregistering): Released all slaves [ 91.925440][ T6062] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 91.934073][ T6062] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.2'. [ 91.953535][ T6072] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.0'. [ 92.329070][ T6092] validate_nla: 1 callbacks suppressed [ 92.329090][ T6092] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 92.366461][ T6092] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.4'. [ 92.581037][ T6102] netlink: 'syz-executor.0': attribute type 9 has an invalid length. [ 92.619041][ T6102] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 92.790816][ T1108] hsr_slave_0: left promiscuous mode [ 92.805441][ T1108] hsr_slave_1: left promiscuous mode [ 92.844323][ T1108] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.852637][ T1108] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.868087][ T1108] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.880589][ T1108] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.931420][ T1108] veth1_macvtap: left promiscuous mode [ 92.948150][ T1108] veth0_macvtap: left promiscuous mode [ 92.956658][ T1108] veth1_vlan: left promiscuous mode [ 92.962361][ T1108] veth0_vlan: left promiscuous mode [ 93.645161][ T1108] team0 (unregistering): Port device team_slave_1 removed [ 93.720203][ T1108] team0 (unregistering): Port device team_slave_0 removed [ 94.139351][ T6114] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 94.172392][ T6114] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.4'. [ 94.185184][ T6129] batadv_slave_0: entered allmulticast mode [ 94.228778][ T6130] pim6reg: entered allmulticast mode [ 94.246626][ T6138] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 94.263034][ T6138] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.4'. [ 94.273104][ T6131] pim6reg: left allmulticast mode [ 94.279054][ T6131] batadv_slave_0: left allmulticast mode [ 94.631391][ T5664] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.775027][ T6149] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 94.812879][ T6149] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.4'. [ 94.895890][ T5664] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.028899][ T5664] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.096514][ T5664] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.257183][ T6172] batadv_slave_0: entered allmulticast mode [ 95.310182][ T6172] pim6reg: entered allmulticast mode [ 95.336925][ T6175] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 95.350696][ T6175] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.0'. [ 95.400200][ T6172] pim6reg: left allmulticast mode [ 95.452835][ T6172] batadv_slave_0: left allmulticast mode [ 95.632981][ T6184] batadv_slave_0: entered allmulticast mode [ 95.701846][ T6184] pim6reg: entered allmulticast mode [ 95.825194][ T6184] pim6reg: left allmulticast mode [ 95.837031][ T6184] batadv_slave_0: left allmulticast mode [ 95.945408][ T6194] batadv_slave_0: entered allmulticast mode [ 95.983780][ T6187] pim6reg: entered allmulticast mode [ 96.041243][ T6187] pim6reg: left allmulticast mode [ 96.059435][ T6187] batadv_slave_0: left allmulticast mode [ 96.201286][ T5719] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 96.237287][ T6207] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 96.252748][ T6207] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.2'. [ 96.292877][ T5719] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 96.343523][ T5719] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 96.474665][ T5719] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 96.619907][ T5664] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.736003][ T6224] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 96.754988][ T6224] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.0'. [ 96.788343][ T5664] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.864333][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.872022][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.921979][ T784] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.929301][ T784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.111524][ T5664] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 97.131086][ T5664] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 97.170712][ T6237] batadv_slave_0: entered allmulticast mode [ 97.228756][ T6237] pim6reg: entered allmulticast mode [ 97.263509][ T6243] pim6reg: left allmulticast mode [ 97.268716][ T6243] batadv_slave_0: left allmulticast mode [ 97.371747][ T6247] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 97.382231][ T6247] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.2'. [ 97.397957][ T6244] batadv_slave_0: entered allmulticast mode [ 97.437799][ T6244] pim6reg: entered allmulticast mode [ 97.530645][ T6252] pim6reg: left allmulticast mode [ 97.568494][ T6252] batadv_slave_0: left allmulticast mode [ 97.746221][ T5719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.857912][ T5664] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.916349][ T5719] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.950132][ T6267] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 97.994116][ T6267] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.4'. [ 98.028324][ T6271] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 98.048841][ T6271] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.2'. [ 98.071184][ T6273] batadv_slave_0: entered allmulticast mode [ 98.133253][ T6280] batadv_slave_0: left allmulticast mode [ 98.144383][ T784] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.151659][ T784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.210068][ T6268] pim6reg: entered allmulticast mode [ 98.261935][ T784] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.269180][ T784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.585895][ T5664] veth0_vlan: entered promiscuous mode [ 98.698762][ T5664] veth1_vlan: entered promiscuous mode [ 98.836411][ T6299] batadv_slave_0: entered allmulticast mode [ 98.863448][ T6299] pim6reg: left allmulticast mode [ 98.875319][ T6299] batadv_slave_0: left allmulticast mode [ 98.929401][ T5664] veth0_macvtap: entered promiscuous mode [ 98.962620][ T5664] veth1_macvtap: entered promiscuous mode [ 99.051819][ T5664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.075971][ T5664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.115590][ T5664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.145519][ T5664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.174060][ T5664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.212911][ T5664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.252447][ T5664] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.285876][ T6317] batadv_slave_0: entered allmulticast mode [ 99.329944][ T6317] pim6reg: entered allmulticast mode [ 99.380807][ T5664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.413987][ T5664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.450635][ T5664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.480711][ T5664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.516457][ T5664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.548329][ T5664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.644729][ T5664] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.669288][ T5664] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.702943][ T5664] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.724550][ T5664] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.737188][ T5664] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.750990][ T6319] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 99.774313][ T6319] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.0'. [ 99.814660][ T6317] pim6reg: left allmulticast mode [ 99.819942][ T6317] batadv_slave_0: left allmulticast mode [ 99.874628][ T6325] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 99.888348][ T6325] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.4'. [ 99.952535][ T5719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.293106][ T6342] batadv_slave_0: entered allmulticast mode [ 100.320162][ T6349] pim6reg: entered allmulticast mode [ 100.339445][ T6352] pim6reg: left allmulticast mode [ 100.351726][ T6352] batadv_slave_0: left allmulticast mode [ 100.504030][ T1108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.532070][ T1108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.607689][ T5719] veth0_vlan: entered promiscuous mode [ 100.685386][ T957] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.701163][ T5719] veth1_vlan: entered promiscuous mode [ 100.715617][ T957] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.834066][ T5719] veth0_macvtap: entered promiscuous mode [ 100.857660][ T6374] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 100.875352][ T6374] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.4'. [ 100.972366][ T5719] veth1_macvtap: entered promiscuous mode [ 101.102059][ T6385] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 101.150296][ T6385] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 101.187427][ T5719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.242783][ T5719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.286280][ T5719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.332077][ T5719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.364004][ T5719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.418764][ T5719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.476753][ T5719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.542177][ T5719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.609912][ T5719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.685544][ T5719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.708926][ T5719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.782765][ T5719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.818211][ T5719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.876196][ T5719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.917427][ T5719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.953781][ T5719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.980857][ T5719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.015880][ T5719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.033773][ T6406] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 102.043465][ T6406] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.4'. [ 102.081204][ T6419] macvtap0: entered promiscuous mode [ 102.100008][ T6422] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 102.110338][ T6419] macvtap0: left promiscuous mode [ 102.182183][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 102.259016][ T5719] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.294941][ T5719] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.311553][ T5719] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.333328][ T5719] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.628509][ T6444] netlink: 148 bytes leftover after parsing attributes in process `syz-executor.4'. [ 102.730110][ T957] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.784788][ T957] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.820360][ T6450] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 102.860129][ T6450] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 103.064113][ T25] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.071994][ T25] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.140260][ T6465] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 103.183184][ T6465] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.2'. [ 103.240288][ T6470] batadv_slave_1: entered promiscuous mode [ 103.262830][ T6470] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 103.328774][ T6470] trusted_key: syz-executor.0 sent an empty control message without MSG_MORE. [ 103.433694][ T6469] batadv_slave_1: left promiscuous mode [ 103.973933][ T6500] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 104.019818][ T6504] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. [ 104.075542][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 104.188811][ T6503] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 104.239155][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 104.564916][ T6528] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 104.608733][ T6528] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.0'. [ 104.892040][ T6537] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 104.922954][ T6537] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.2'. [ 105.198355][ T6550] Zero length message leads to an empty skb [ 105.818147][ T6574] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 105.960460][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 106.148861][ T6585] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 106.171757][ T6585] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.0'. [ 106.894683][ T6594] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 106.945446][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 107.216756][ T6613] bridge0: port 3(vlan2) entered blocking state [ 107.230527][ T6613] bridge0: port 3(vlan2) entered disabled state [ 107.245159][ T6613] vlan2: entered allmulticast mode [ 107.255086][ T6613] vlan2: left allmulticast mode [ 107.273301][ T6612] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 107.337835][ T6612] bridge0: entered promiscuous mode [ 107.427825][ T6620] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 107.452955][ T6620] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.3'. [ 107.514568][ T6619] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 107.548527][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 108.803544][ T6659] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 108.833516][ T6659] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.0'. [ 109.211865][ T6670] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 109.296589][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 109.321864][ T6675] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 109.456896][ T6679] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 109.760184][ T6693] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 110.002161][ T6703] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 110.094426][ T6707] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 110.130584][ T6707] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.0'. [ 110.747390][ T6728] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 110.815942][ T6728] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 111.033116][ T29] audit: type=1804 audit(1716873516.071:2): pid=6732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir745467132/syzkaller.FXVjZs/95/memory.events" dev="sda1" ino=1943 res=1 errno=0 [ 111.069053][ T6732] team_slave_0: entered promiscuous mode [ 111.075105][ T6732] team_slave_1: entered promiscuous mode [ 111.129473][ T6732] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 111.429695][ T6744] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 111.616802][ T6750] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 112.118509][ T6768] bridge0: entered promiscuous mode [ 112.185797][ T6774] vlan2: entered allmulticast mode [ 112.212625][ T6774] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 112.331530][ T6774] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 112.886790][ T6789] __nla_validate_parse: 6 callbacks suppressed [ 112.886811][ T6789] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.2'. [ 112.974812][ T6793] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 113.046334][ T6793] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 113.872419][ T6837] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 114.007852][ T6837] bridge0: entered promiscuous mode [ 114.756931][ T6862] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 114.901804][ T6869] sock: sock_set_timeout: `syz-executor.1' (pid 6869) tries to set negative timeout [ 115.279383][ T6889] syzkaller1: entered promiscuous mode [ 115.302834][ T6889] syzkaller1: entered allmulticast mode [ 116.168874][ T6921] tipc: Can't bind to reserved service type 0 [ 116.717735][ T6946] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 116.753581][ T6946] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.4'. [ 116.869457][ T6949] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 116.897966][ T6952] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 117.586645][ T6988] vlan1: entered promiscuous mode [ 117.634237][ T6988] vlan1 (unregistering): left promiscuous mode [ 117.924746][ T6999] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 117.962843][ T6999] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.4'. [ 118.604847][ T7020] xt_CT: You must specify a L4 protocol and not use inversions on it [ 118.829165][ T7026] vlan1: entered promiscuous mode [ 118.946403][ T7037] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 118.965968][ T7037] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.0'. [ 118.978694][ T7026] vlan1 (unregistering): left promiscuous mode [ 119.017194][ T7041] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 119.040154][ T7041] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.2'. [ 119.406398][ T7057] xt_CT: You must specify a L4 protocol and not use inversions on it [ 120.077393][ T7085] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 120.127563][ T7085] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.0'. [ 120.141097][ T7090] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 120.152364][ T7090] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.4'. [ 120.379102][ T7092] vlan1: entered promiscuous mode [ 120.529659][ T7100] vlan1 (unregistering): left promiscuous mode [ 120.594070][ T7104] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 120.628594][ T7104] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 120.643602][ T7112] xt_CT: You must specify a L4 protocol and not use inversions on it [ 120.926411][ T7125] Bluetooth: MGMT ver 1.22 [ 121.141728][ T7136] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 121.172883][ T7136] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.2'. [ 121.266180][ T7140] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 121.301518][ T7140] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.4'. [ 121.521532][ T7151] xt_CT: You must specify a L4 protocol and not use inversions on it [ 121.620058][ T7154] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 121.645432][ T7154] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.4'. [ 121.854310][ T7159] bond1: entered promiscuous mode [ 121.872178][ T7159] bond1: entered allmulticast mode [ 121.887918][ T7159] 8021q: adding VLAN 0 to HW filter on device bond1 [ 121.908155][ T7156] vlan1: entered promiscuous mode [ 122.035178][ T7150] vlan1 (unregistering): left promiscuous mode [ 122.187187][ T7180] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 122.236213][ T7180] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.3'. [ 122.372954][ T7188] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 122.498850][ T7194] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 123.095673][ T7216] bond2: entered promiscuous mode [ 123.101307][ T7216] bond2: entered allmulticast mode [ 123.109696][ T7216] 8021q: adding VLAN 0 to HW filter on device bond2 [ 123.422700][ T7227] MD5 Hash not found for [fe80::bb].0->[ff02::1].20002 [R.]L3 index 0 [ 123.851491][ T7246] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 123.880664][ T7246] __nla_validate_parse: 2 callbacks suppressed [ 123.880684][ T7246] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.4'. [ 124.441967][ T7268] bond3: entered promiscuous mode [ 124.447598][ T7268] bond3: entered allmulticast mode [ 124.453965][ T7268] 8021q: adding VLAN 0 to HW filter on device bond3 [ 124.633951][ T7281] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 124.642346][ T7281] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.4'. [ 124.835621][ T7290] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 125.147591][ T7305] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 125.193546][ T7305] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.4'. [ 125.274466][ T7310] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 46475 (only 8 groups) [ 125.882382][ T7321] bond4: entered promiscuous mode [ 125.907531][ T7321] bond4: entered allmulticast mode [ 125.959130][ T7339] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 125.963047][ T7321] 8021q: adding VLAN 0 to HW filter on device bond4 [ 126.161090][ T7345] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 126.181793][ T7345] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.4'. [ 126.501058][ T7361] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 126.528839][ T7361] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.0'. [ 126.580032][ T7363] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 46475 (only 8 groups) [ 127.105714][ T7385] Illegal XDP return value 1410939754 on prog (id 191) dev N/A, expect packet loss! [ 127.715493][ T7408] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 127.724557][ T7408] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.3'. [ 128.084140][ T7416] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 128.113146][ T7416] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 128.326702][ T7428] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 46475 (only 8 groups) [ 128.601343][ T7441] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 128.656434][ T7441] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.2'. [ 129.076675][ T7466] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 129.113597][ T7466] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.3'. [ 129.165021][ T7468] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 129.562255][ T7478] syzkaller0: entered promiscuous mode [ 129.612891][ T7478] syzkaller0: entered allmulticast mode [ 129.868436][ T7498] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 46475 (only 8 groups) [ 130.391876][ T7520] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 131.751496][ T7505] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 131.762116][ T7505] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 131.773838][ T7517] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 131.835783][ T7519] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 132.310184][ T7549] xt_CT: You must specify a L4 protocol and not use inversions on it [ 132.612137][ T7564] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:0 [ 132.771829][ T7569] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 132.835683][ T7569] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.4'. [ 133.198830][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.205542][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.279368][ T7572] syzkaller0: entered promiscuous mode [ 133.297897][ T7572] syzkaller0: entered allmulticast mode [ 134.867169][ T7583] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 134.901510][ T7583] bond1: entered promiscuous mode [ 135.077467][ T7604] tipc: Started in network mode [ 135.091744][ T7604] tipc: Node identity aaaaaaaaaa41, cluster identity 4711 [ 135.109088][ T7604] tipc: Enabled bearer , priority 10 [ 135.461001][ T7628] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 135.497650][ T7628] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.3'. [ 135.666670][ T7636] x_tables: duplicate entry at hook 1 [ 135.729174][ T7640] x_tables: duplicate entry at hook 1 [ 136.104261][ T5223] tipc: Node number set to 15444650 [ 136.522010][ T7658] ebtables: ebtables: counters copy to user failed while replacing table [ 136.600002][ T7653] syzkaller0: entered promiscuous mode [ 136.617213][ T7653] syzkaller0: entered allmulticast mode [ 136.671271][ T7662] netlink: 576 bytes leftover after parsing attributes in process `syz-executor.3'. [ 138.468946][ T7674] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709550493) [ 138.494443][ T7674] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 138.514701][ T7684] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 138.543324][ T7684] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.2'. [ 138.750013][ T7699] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.4'. [ 139.441469][ T7728] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 139.463190][ T7728] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.0'. [ 139.832338][ T7725] syzkaller0: entered promiscuous mode [ 139.904589][ T7725] syzkaller0: entered allmulticast mode [ 140.014256][ T7742] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 140.128573][ T7741] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 141.649725][ T7751] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 141.681235][ T7751] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.691896][ T7751] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.701984][ T7751] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.711202][ T7751] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.761953][ T7751] vxlan0: entered promiscuous mode [ 141.922581][ T7766] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 141.953421][ T7766] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.3'. [ 141.976932][ T7768] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 142.018291][ T7768] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.0'. [ 142.349837][ T7789] batadv_slave_1: entered promiscuous mode [ 142.452161][ T7789] warning: `syz-executor.3' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 142.592166][ T7801] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 142.670234][ T7801] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 143.058634][ T7784] batadv_slave_1: left promiscuous mode [ 143.078152][ T7819] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 143.087513][ T7819] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.0'. [ 143.313690][ T7832] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 143.345783][ T7832] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 143.484968][ T7836] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 144.128614][ T7874] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 144.507707][ T7889] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 145.076801][ T7921] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 145.120381][ T7921] __nla_validate_parse: 6 callbacks suppressed [ 145.120402][ T7921] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.4'. [ 145.180460][ T7925] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 145.224927][ T7925] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 145.402460][ T7938] debugfs: Directory '!' with parent 'ieee80211' already present! [ 145.458019][ T7940] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 145.553452][ T7940] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 146.212018][ T7979] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 146.238581][ T7979] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 146.290502][ T7983] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:0 [ 146.355563][ T7984] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 146.618298][ T7991] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 146.666732][ T7991] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 146.688731][ T7991] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 146.711196][ T7991] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 146.721661][ T7991] geneve2: entered promiscuous mode [ 146.729300][ T7991] geneve2: entered allmulticast mode [ 146.767866][ T8001] debugfs: Directory '!' with parent 'ieee80211' already present! [ 146.792568][ T8003] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 147.276477][ T8024] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 147.288030][ T8024] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.3'. [ 147.644956][ T8041] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 147.682471][ T8041] CPU: 0 PID: 8041 Comm: syz-executor.3 Not tainted 6.9.0-syzkaller-12088-g52a2f0608366 #0 [ 147.692788][ T8041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 147.702983][ T8041] Call Trace: [ 147.706307][ T8041] [ 147.709281][ T8041] dump_stack_lvl+0x241/0x360 [ 147.714057][ T8041] ? __pfx_dump_stack_lvl+0x10/0x10 [ 147.719820][ T8041] ? __pfx__printk+0x10/0x10 [ 147.724469][ T8041] ? sysfs_warn_dup+0x51/0xa0 [ 147.729281][ T8041] ? kmalloc_trace_noprof+0x19c/0x2c0 [ 147.734773][ T8041] sysfs_warn_dup+0x8e/0xa0 [ 147.739339][ T8041] sysfs_do_create_link_sd+0xbe/0x110 [ 147.744778][ T8041] device_add_class_symlinks+0x1c5/0x250 [ 147.750647][ T8041] device_add+0x553/0xbf0 [ 147.755035][ T8041] wiphy_register+0x1d3f/0x2b30 [ 147.760132][ T8041] ? __pfx_wiphy_register+0x10/0x10 [ 147.765638][ T8041] ? minstrel_ht_alloc+0x72b/0x860 [ 147.770936][ T8041] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 147.777389][ T8041] ieee80211_register_hw+0x3098/0x3d80 [ 147.782940][ T8041] ? ieee80211_register_hw+0x1101/0x3d80 [ 147.788679][ T8041] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 147.794548][ T8041] ? __asan_memset+0x23/0x50 [ 147.799189][ T8041] ? __hrtimer_init+0x170/0x250 [ 147.804106][ T8041] mac80211_hwsim_new_radio+0x2597/0x44c0 [ 147.810073][ T8041] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 147.816208][ T8041] ? kmalloc_node_track_caller_noprof+0x242/0x440 [ 147.822837][ T8041] ? kstrndup+0x5c/0xb0 [ 147.827035][ T8041] ? __asan_memcpy+0x40/0x70 [ 147.831671][ T8041] hwsim_new_radio_nl+0xe4c/0x21d0 [ 147.836836][ T8041] ? __pfx___nla_validate_parse+0x10/0x10 [ 147.842612][ T8041] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 147.848234][ T8041] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 147.854626][ T8041] genl_rcv_msg+0xb14/0xec0 [ 147.859166][ T8041] ? mark_lock+0x9a/0x350 [ 147.863617][ T8041] ? __pfx_genl_rcv_msg+0x10/0x10 [ 147.868865][ T8041] ? __pfx_lock_acquire+0x10/0x10 [ 147.873986][ T8041] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 147.879651][ T8041] ? __pfx___might_resched+0x10/0x10 [ 147.884972][ T8041] netlink_rcv_skb+0x1e3/0x430 [ 147.889851][ T8041] ? __pfx_genl_rcv_msg+0x10/0x10 [ 147.894888][ T8041] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 147.900185][ T8041] ? __netlink_deliver_tap+0x77e/0x7c0 [ 147.905658][ T8041] genl_rcv+0x28/0x40 [ 147.909731][ T8041] netlink_unicast+0x7ea/0x980 [ 147.914738][ T8041] ? __pfx_netlink_unicast+0x10/0x10 [ 147.920201][ T8041] ? __virt_addr_valid+0x183/0x520 [ 147.925510][ T8041] ? __check_object_size+0x49c/0x900 [ 147.931015][ T8041] ? bpf_lsm_netlink_send+0x9/0x10 [ 147.936369][ T8041] netlink_sendmsg+0x8db/0xcb0 [ 147.941186][ T8041] ? __pfx_netlink_sendmsg+0x10/0x10 [ 147.946593][ T8041] ? __import_iovec+0x536/0x820 [ 147.951555][ T8041] ? aa_sock_msg_perm+0x91/0x160 [ 147.956532][ T8041] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 147.961934][ T8041] ? security_socket_sendmsg+0x87/0xb0 [ 147.967437][ T8041] ? __pfx_netlink_sendmsg+0x10/0x10 [ 147.972756][ T8041] __sock_sendmsg+0x221/0x270 [ 147.977568][ T8041] ____sys_sendmsg+0x525/0x7d0 [ 147.982455][ T8041] ? __pfx_____sys_sendmsg+0x10/0x10 [ 147.987787][ T8041] __sys_sendmsg+0x2b0/0x3a0 [ 147.992412][ T8041] ? __pfx___sys_sendmsg+0x10/0x10 [ 147.997571][ T8041] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 148.004009][ T8041] ? do_syscall_64+0x100/0x230 [ 148.008959][ T8041] ? do_syscall_64+0xb6/0x230 [ 148.013987][ T8041] do_syscall_64+0xf3/0x230 [ 148.018552][ T8041] ? clear_bhb_loop+0x35/0x90 [ 148.023264][ T8041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.029355][ T8041] RIP: 0033:0x7fd7e707cee9 [ 148.033795][ T8041] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 148.053862][ T8041] RSP: 002b:00007fd7e7d660c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 148.063223][ T8041] RAX: ffffffffffffffda RBX: 00007fd7e71b3f80 RCX: 00007fd7e707cee9 [ 148.071777][ T8041] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 148.080057][ T8041] RBP: 00007fd7e70c947f R08: 0000000000000000 R09: 0000000000000000 [ 148.088244][ T8041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.100698][ T8041] R13: 000000000000000b R14: 00007fd7e71b3f80 R15: 00007fff66c7bab8 [ 148.109171][ T8041] [ 148.414160][ T8066] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 148.479938][ T29] audit: type=1804 audit(1716873553.531:3): pid=8068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3959221647/syzkaller.QiPgEs/97/memory.events" dev="sda1" ino=1955 res=1 errno=0 [ 148.815415][ T8085] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 148.835140][ T8085] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.0'. [ 148.864146][ T8086] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 148.886102][ T8086] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.3'. [ 149.270808][ T8107] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 149.306701][ T8107] CPU: 0 PID: 8107 Comm: syz-executor.3 Not tainted 6.9.0-syzkaller-12088-g52a2f0608366 #0 [ 149.316773][ T8107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 149.326946][ T8107] Call Trace: [ 149.330256][ T8107] [ 149.333222][ T8107] dump_stack_lvl+0x241/0x360 [ 149.337941][ T8107] ? __pfx_dump_stack_lvl+0x10/0x10 [ 149.343190][ T8107] ? __pfx__printk+0x10/0x10 [ 149.347901][ T8107] ? sysfs_warn_dup+0x51/0xa0 [ 149.352586][ T8107] ? kmalloc_trace_noprof+0x19c/0x2c0 [ 149.357975][ T8107] sysfs_warn_dup+0x8e/0xa0 [ 149.362519][ T8107] sysfs_do_create_link_sd+0xbe/0x110 [ 149.367949][ T8107] device_add_class_symlinks+0x1c5/0x250 [ 149.373805][ T8107] device_add+0x553/0xbf0 [ 149.378193][ T8107] wiphy_register+0x1d3f/0x2b30 [ 149.383279][ T8107] ? __pfx_wiphy_register+0x10/0x10 [ 149.388596][ T8107] ? minstrel_ht_alloc+0x72b/0x860 [ 149.393859][ T8107] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 149.399982][ T8107] ieee80211_register_hw+0x3098/0x3d80 [ 149.405710][ T8107] ? ieee80211_register_hw+0x1101/0x3d80 [ 149.411403][ T8107] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 149.417281][ T8107] ? __asan_memset+0x23/0x50 [ 149.421919][ T8107] ? __hrtimer_init+0x170/0x250 [ 149.427179][ T8107] mac80211_hwsim_new_radio+0x2597/0x44c0 [ 149.432964][ T8107] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 149.439066][ T8107] ? kmalloc_node_track_caller_noprof+0x242/0x440 [ 149.445529][ T8107] ? kstrndup+0x5c/0xb0 [ 149.449730][ T8107] ? __asan_memcpy+0x40/0x70 [ 149.454402][ T8107] hwsim_new_radio_nl+0xe4c/0x21d0 [ 149.459572][ T8107] ? __pfx___nla_validate_parse+0x10/0x10 [ 149.465343][ T8107] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 149.470974][ T8107] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 149.477365][ T8107] genl_rcv_msg+0xb14/0xec0 [ 149.481903][ T8107] ? mark_lock+0x9a/0x350 [ 149.486285][ T8107] ? __pfx_genl_rcv_msg+0x10/0x10 [ 149.491387][ T8107] ? __pfx_lock_acquire+0x10/0x10 [ 149.496463][ T8107] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 149.502053][ T8107] ? __pfx___might_resched+0x10/0x10 [ 149.507391][ T8107] netlink_rcv_skb+0x1e3/0x430 [ 149.512200][ T8107] ? __pfx_genl_rcv_msg+0x10/0x10 [ 149.517271][ T8107] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 149.522619][ T8107] ? __netlink_deliver_tap+0x77e/0x7c0 [ 149.528132][ T8107] genl_rcv+0x28/0x40 [ 149.532197][ T8107] netlink_unicast+0x7ea/0x980 [ 149.537105][ T8107] ? __pfx_netlink_unicast+0x10/0x10 [ 149.542429][ T8107] ? __virt_addr_valid+0x183/0x520 [ 149.547593][ T8107] ? __check_object_size+0x49c/0x900 [ 149.552921][ T8107] ? bpf_lsm_netlink_send+0x9/0x10 [ 149.558083][ T8107] netlink_sendmsg+0x8db/0xcb0 [ 149.562943][ T8107] ? __pfx_netlink_sendmsg+0x10/0x10 [ 149.568405][ T8107] ? __import_iovec+0x536/0x820 [ 149.573300][ T8107] ? aa_sock_msg_perm+0x91/0x160 [ 149.578287][ T8107] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 149.583618][ T8107] ? security_socket_sendmsg+0x87/0xb0 [ 149.589255][ T8107] ? __pfx_netlink_sendmsg+0x10/0x10 [ 149.594576][ T8107] __sock_sendmsg+0x221/0x270 [ 149.599297][ T8107] ____sys_sendmsg+0x525/0x7d0 [ 149.604113][ T8107] ? __pfx_____sys_sendmsg+0x10/0x10 [ 149.609454][ T8107] __sys_sendmsg+0x2b0/0x3a0 [ 149.614092][ T8107] ? __pfx___sys_sendmsg+0x10/0x10 [ 149.619292][ T8107] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 149.625659][ T8107] ? do_syscall_64+0x100/0x230 [ 149.630467][ T8107] ? do_syscall_64+0xb6/0x230 [ 149.635196][ T8107] do_syscall_64+0xf3/0x230 [ 149.639741][ T8107] ? clear_bhb_loop+0x35/0x90 [ 149.644458][ T8107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.650399][ T8107] RIP: 0033:0x7fd7e707cee9 [ 149.654858][ T8107] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 149.674763][ T8107] RSP: 002b:00007fd7e7d660c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 149.683305][ T8107] RAX: ffffffffffffffda RBX: 00007fd7e71b3f80 RCX: 00007fd7e707cee9 [ 149.691310][ T8107] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 149.699311][ T8107] RBP: 00007fd7e70c947f R08: 0000000000000000 R09: 0000000000000000 [ 149.707301][ T8107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 149.715296][ T8107] R13: 000000000000000b R14: 00007fd7e71b3f80 R15: 00007fff66c7bab8 [ 149.723292][ T8107] [ 150.142080][ T8135] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 150.169270][ T8135] netlink: 212848 bytes leftover after parsing attributes in process `syz-executor.1'. [ 150.225405][ T8135] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 150.258095][ T8135] xt_hashlimit: invalid rate [ 150.271593][ T8143] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 150.291601][ T8143] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.4'. [ 150.379877][ T8132] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.0'. [ 150.426487][ T8150] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 150.438867][ T8150] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.3'. [ 150.454581][ T8154] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 150.478704][ T8154] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 150.877324][ T8173] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 150.891024][ T8173] CPU: 0 PID: 8173 Comm: syz-executor.0 Not tainted 6.9.0-syzkaller-12088-g52a2f0608366 #0 [ 150.901121][ T8173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 150.911244][ T8173] Call Trace: [ 150.914550][ T8173] [ 150.917505][ T8173] dump_stack_lvl+0x241/0x360 [ 150.922235][ T8173] ? __pfx_dump_stack_lvl+0x10/0x10 [ 150.927489][ T8173] ? __pfx__printk+0x10/0x10 [ 150.932160][ T8173] ? sysfs_warn_dup+0x51/0xa0 [ 150.936889][ T8173] ? kmalloc_trace_noprof+0x19c/0x2c0 [ 150.942491][ T8173] sysfs_warn_dup+0x8e/0xa0 [ 150.947139][ T8173] sysfs_do_create_link_sd+0xbe/0x110 [ 150.952666][ T8173] device_add_class_symlinks+0x1c5/0x250 [ 150.958347][ T8173] device_add+0x553/0xbf0 [ 150.962731][ T8173] wiphy_register+0x1d3f/0x2b30 [ 150.967641][ T8173] ? __pfx_wiphy_register+0x10/0x10 [ 150.972893][ T8173] ? minstrel_ht_alloc+0x72b/0x860 [ 150.978066][ T8173] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 150.984191][ T8173] ieee80211_register_hw+0x3098/0x3d80 [ 150.989731][ T8173] ? ieee80211_register_hw+0x1101/0x3d80 [ 150.995420][ T8173] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 151.001286][ T8173] ? __asan_memset+0x23/0x50 [ 151.005904][ T8173] ? __hrtimer_init+0x170/0x250 [ 151.010782][ T8173] mac80211_hwsim_new_radio+0x2597/0x44c0 [ 151.016531][ T8173] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 151.022600][ T8173] ? kmalloc_node_track_caller_noprof+0x242/0x440 [ 151.029019][ T8173] ? kstrndup+0x5c/0xb0 [ 151.033185][ T8173] ? __asan_memcpy+0x40/0x70 [ 151.037893][ T8173] hwsim_new_radio_nl+0xe4c/0x21d0 [ 151.043014][ T8173] ? __pfx___nla_validate_parse+0x10/0x10 [ 151.048739][ T8173] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 151.054310][ T8173] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 151.060648][ T8173] genl_rcv_msg+0xb14/0xec0 [ 151.065159][ T8173] ? mark_lock+0x9a/0x350 [ 151.069581][ T8173] ? __pfx_genl_rcv_msg+0x10/0x10 [ 151.074626][ T8173] ? __pfx_lock_acquire+0x10/0x10 [ 151.079732][ T8173] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 151.085276][ T8173] ? __pfx___might_resched+0x10/0x10 [ 151.090570][ T8173] netlink_rcv_skb+0x1e3/0x430 [ 151.095338][ T8173] ? __pfx_genl_rcv_msg+0x10/0x10 [ 151.100453][ T8173] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 151.105752][ T8173] ? __netlink_deliver_tap+0x77e/0x7c0 [ 151.111223][ T8173] genl_rcv+0x28/0x40 [ 151.115209][ T8173] netlink_unicast+0x7ea/0x980 [ 151.119986][ T8173] ? __pfx_netlink_unicast+0x10/0x10 [ 151.125271][ T8173] ? __virt_addr_valid+0x183/0x520 [ 151.130384][ T8173] ? __check_object_size+0x49c/0x900 [ 151.135853][ T8173] ? bpf_lsm_netlink_send+0x9/0x10 [ 151.140968][ T8173] netlink_sendmsg+0x8db/0xcb0 [ 151.145741][ T8173] ? __pfx_netlink_sendmsg+0x10/0x10 [ 151.151023][ T8173] ? __import_iovec+0x536/0x820 [ 151.155877][ T8173] ? aa_sock_msg_perm+0x91/0x160 [ 151.160813][ T8173] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 151.166181][ T8173] ? security_socket_sendmsg+0x87/0xb0 [ 151.171643][ T8173] ? __pfx_netlink_sendmsg+0x10/0x10 [ 151.176952][ T8173] __sock_sendmsg+0x221/0x270 [ 151.181628][ T8173] ____sys_sendmsg+0x525/0x7d0 [ 151.186573][ T8173] ? __pfx_____sys_sendmsg+0x10/0x10 [ 151.191871][ T8173] __sys_sendmsg+0x2b0/0x3a0 [ 151.196464][ T8173] ? __pfx___sys_sendmsg+0x10/0x10 [ 151.201617][ T8173] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 151.208032][ T8173] ? do_syscall_64+0x100/0x230 [ 151.212808][ T8173] ? do_syscall_64+0xb6/0x230 [ 151.217498][ T8173] do_syscall_64+0xf3/0x230 [ 151.221997][ T8173] ? clear_bhb_loop+0x35/0x90 [ 151.226678][ T8173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.232570][ T8173] RIP: 0033:0x7fe088c7cee9 [ 151.236984][ T8173] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 151.256594][ T8173] RSP: 002b:00007fe089a7c0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 151.265034][ T8173] RAX: ffffffffffffffda RBX: 00007fe088db3f80 RCX: 00007fe088c7cee9 [ 151.273120][ T8173] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 151.281240][ T8173] RBP: 00007fe088cc947f R08: 0000000000000000 R09: 0000000000000000 [ 151.289237][ T8173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 151.297224][ T8173] R13: 000000000000000b R14: 00007fe088db3f80 R15: 00007fffb8824b78 [ 151.305233][ T8173] [ 151.669200][ T8191] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 151.674454][ T8192] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 151.684249][ T8191] netlink: 212848 bytes leftover after parsing attributes in process `syz-executor.0'. [ 151.711439][ T8192] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 151.767635][ T8196] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 151.777638][ T8195] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 151.816793][ T8192] syz-executor.4 (8192) used greatest stack depth: 18896 bytes left [ 151.880448][ T8191] xt_hashlimit: invalid rate [ 151.900648][ T8201] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 151.928862][ T8201] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.3'. [ 151.961854][ T8204] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.2'. [ 152.099100][ T8214] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.0'. [ 152.799977][ T8252] xt_hashlimit: invalid rate [ 153.734779][ T8299] xt_hashlimit: invalid rate [ 153.933592][ T8312] openvswitch: netlink: EtherType 20a is less than min 600 [ 155.295510][ T8386] validate_nla: 15 callbacks suppressed [ 155.295528][ T8386] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 155.505251][ T8403] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 155.542556][ T8403] __nla_validate_parse: 13 callbacks suppressed [ 155.542575][ T8403] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.0'. [ 155.765546][ T8418] tipc: Enabling of bearer rejected, media not registered [ 155.815992][ T8418] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 156.066262][ T8434] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.4'. [ 156.082241][ T8434] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.4'. [ 156.328130][ T8443] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 156.448763][ T8452] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 156.561508][ T8458] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 156.584976][ T8458] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.0'. [ 156.596616][ T8461] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 156.616055][ T8461] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.2'. [ 156.998688][ T8489] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 157.035842][ T8489] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 157.114595][ T8488] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.1'. [ 157.132213][ T8496] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 157.165619][ T8489] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 157.587630][ T8525] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.2'. [ 157.631595][ T8526] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.4'. [ 158.023342][ T8545] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 158.049442][ T8545] team_slave_0: left promiscuous mode [ 158.060388][ T8545] team_slave_1: left promiscuous mode [ 158.382492][ T8559] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 159.189696][ T8607] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 159.893819][ T8637] [ 159.896240][ T8637] ============================================ [ 159.902372][ T8637] WARNING: possible recursive locking detected [ 159.908591][ T8637] 6.9.0-syzkaller-12088-g52a2f0608366 #0 Not tainted [ 159.915245][ T8637] -------------------------------------------- [ 159.921545][ T8637] syz-executor.0/8637 is trying to acquire lock: [ 159.927854][ T8637] ffff888079961a20 (&stab->lock){+.-.}-{2:2}, at: sock_map_delete_elem+0x175/0x250 [ 159.937255][ T8637] [ 159.937255][ T8637] but task is already holding lock: [ 159.944603][ T8637] ffff888079962220 (&stab->lock){+.-.}-{2:2}, at: sock_map_delete_elem+0x175/0x250 [ 159.953931][ T8637] [ 159.953931][ T8637] other info that might help us debug this: [ 159.961992][ T8637] Possible unsafe locking scenario: [ 159.961992][ T8637] [ 159.969424][ T8637] CPU0 [ 159.972691][ T8637] ---- [ 159.975977][ T8637] lock(&stab->lock); [ 159.980027][ T8637] lock(&stab->lock); [ 159.984082][ T8637] [ 159.984082][ T8637] *** DEADLOCK *** [ 159.984082][ T8637] [ 159.992205][ T8637] May be due to missing lock nesting notation [ 159.992205][ T8637] [ 160.000526][ T8637] 4 locks held by syz-executor.0/8637: [ 160.005967][ T8637] #0: ffffffff8e333e60 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run2+0x1fc/0x540 [ 160.015349][ T8637] #1: ffff888079962220 (&stab->lock){+.-.}-{2:2}, at: sock_map_delete_elem+0x175/0x250 [ 160.025097][ T8637] #2: ffff88807c7612b0 (&psock->link_lock){+...}-{2:2}, at: sock_map_unref+0xcc/0x5e0 [ 160.034747][ T8637] #3: ffffffff8e333e60 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run2+0x1fc/0x540 [ 160.044269][ T8637] [ 160.044269][ T8637] stack backtrace: [ 160.050293][ T8637] CPU: 1 PID: 8637 Comm: syz-executor.0 Not tainted 6.9.0-syzkaller-12088-g52a2f0608366 #0 [ 160.060287][ T8637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 160.070422][ T8637] Call Trace: [ 160.073696][ T8637] [ 160.076613][ T8637] dump_stack_lvl+0x241/0x360 [ 160.081277][ T8637] ? __pfx_dump_stack_lvl+0x10/0x10 [ 160.086488][ T8637] ? print_deadlock_bug+0x479/0x620 [ 160.091686][ T8637] validate_chain+0x15d3/0x5900 [ 160.096526][ T8637] ? __pfx_validate_chain+0x10/0x10 [ 160.101825][ T8637] ? validate_chain+0x11e/0x5900 [ 160.106837][ T8637] ? __pfx_validate_chain+0x10/0x10 [ 160.112024][ T8637] ? __pfx_validate_chain+0x10/0x10 [ 160.117210][ T8637] ? __pfx_lock_acquire+0x10/0x10 [ 160.122219][ T8637] ? __pfx_validate_chain+0x10/0x10 [ 160.127422][ T8637] ? validate_chain+0x11e/0x5900 [ 160.132351][ T8637] ? __lock_acquire+0x1346/0x1fd0 [ 160.137396][ T8637] ? mark_lock+0x9a/0x350 [ 160.141710][ T8637] __lock_acquire+0x1346/0x1fd0 [ 160.146553][ T8637] lock_acquire+0x1ed/0x550 [ 160.151144][ T8637] ? sock_map_delete_elem+0x175/0x250 [ 160.156504][ T8637] ? __lock_acquire+0x1346/0x1fd0 [ 160.161515][ T8637] ? __pfx_lock_acquire+0x10/0x10 [ 160.166531][ T8637] ? sock_map_delete_elem+0x175/0x250 [ 160.171886][ T8637] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 160.177679][ T8637] ? sock_map_delete_elem+0x175/0x250 [ 160.183037][ T8637] _raw_spin_lock_bh+0x35/0x50 [ 160.187809][ T8637] ? sock_map_delete_elem+0x175/0x250 [ 160.193170][ T8637] sock_map_delete_elem+0x175/0x250 [ 160.198469][ T8637] ? __pfx_sock_map_delete_elem+0x10/0x10 [ 160.204174][ T8637] ? bpf_trace_run2+0x1fc/0x540 [ 160.209101][ T8637] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 160.214561][ T8637] bpf_trace_run2+0x2ec/0x540 [ 160.219226][ T8637] ? __pfx_bpf_trace_run2+0x10/0x10 [ 160.224428][ T8637] ? do_raw_spin_lock+0x14f/0x370 [ 160.229454][ T8637] ? sock_map_unref+0x3ac/0x5e0 [ 160.234288][ T8637] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 160.240189][ T8637] ? sock_map_unref+0x3ac/0x5e0 [ 160.245037][ T8637] __traceiter_kfree+0x2b/0x50 [ 160.249877][ T8637] ? sock_map_unref+0x3ac/0x5e0 [ 160.254712][ T8637] kfree+0x2bb/0x360 [ 160.258624][ T8637] sock_map_unref+0x3ac/0x5e0 [ 160.263294][ T8637] sock_map_delete_elem+0x1a2/0x250 [ 160.268501][ T8637] ? __pfx_sock_map_delete_elem+0x10/0x10 [ 160.274313][ T8637] ? lockdep_hardirqs_on+0x99/0x150 [ 160.279518][ T8637] ? bpf_trace_run2+0x1fc/0x540 [ 160.284355][ T8637] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 160.289802][ T8637] bpf_trace_run2+0x2ec/0x540 [ 160.294493][ T8637] ? __pfx_bpf_trace_run2+0x10/0x10 [ 160.299697][ T8637] ? sock_map_update_elem_sys+0x674/0x910 [ 160.305402][ T8637] ? map_update_elem+0x5ca/0x6f0 [ 160.310327][ T8637] ? sock_map_update_elem_sys+0x1d8/0x910 [ 160.316050][ T8637] ? map_update_elem+0x5ca/0x6f0 [ 160.320993][ T8637] __traceiter_kfree+0x2b/0x50 [ 160.325780][ T8637] ? map_update_elem+0x5ca/0x6f0 [ 160.330722][ T8637] kfree+0x2bb/0x360 [ 160.334630][ T8637] map_update_elem+0x5ca/0x6f0 [ 160.339415][ T8637] __sys_bpf+0x76f/0x810 [ 160.343732][ T8637] ? __pfx___sys_bpf+0x10/0x10 [ 160.348660][ T8637] ? __rseq_handle_notify_resume+0x353/0x14e0 [ 160.354718][ T8637] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 160.360898][ T8637] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 160.367227][ T8637] ? do_syscall_64+0x100/0x230 [ 160.372008][ T8637] __x64_sys_bpf+0x7c/0x90 [ 160.376430][ T8637] do_syscall_64+0xf3/0x230 [ 160.380926][ T8637] ? clear_bhb_loop+0x35/0x90 [ 160.385593][ T8637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.391473][ T8637] RIP: 0033:0x7fe088c7cee9 [ 160.395875][ T8637] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 160.415471][ T8637] RSP: 002b:00007fe089a7c0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 160.423872][ T8637] RAX: ffffffffffffffda RBX: 00007fe088db3f80 RCX: 00007fe088c7cee9 [ 160.431831][ T8637] RDX: 0000000000000020 RSI: 0000000020000500 RDI: 0000000000000002 2024/05/28 05:19:25 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 160.439815][ T8637] RBP: 00007fe088cc947f R08: 0000000000000000 R09: 0000000000000000 [ 160.447773][ T8637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 160.455751][ T8637] R13: 000000000000000b R14: 00007fe088db3f80 R15: 00007fffb8824b78 [ 160.463715][ T8637]