last executing test programs: 1m15.814918007s ago: executing program 4: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x23, &(0x7f0000000280)={@cgroup=r2, 0x2, 0x1, 0x0, &(0x7f0000000140)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 1m15.651985523s ago: executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) socket$xdp(0x2c, 0x3, 0x0) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x952c, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000600)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000460000000e0001006e657464657673696d0000000f0002006e657464657673056d30000008008e00010000000c008f0000000000000000000c0090000000000000000000"], 0x54}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x0, 0x0, &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket(0x10, 0x803, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x12, 0x4, 0x8, 0xc}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7b}, @ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r4, 0x0, 0x0}, 0x20) r6 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r7, @ANYBLOB="14000200fe8000000000000000000000000000aa140006000000008001f0ffff0000000000010000140001"], 0x54}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000007c0)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYRES8, @ANYRES16=r9], 0x18, 0x10}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)={0x3c, r9, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}]}]}, 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x7, 0x0, 0x3, 0x95, {{0xb, 0x4, 0x1, 0xf, 0x2c, 0x67, 0x0, 0x3f, 0x4, 0x0, @remote, @local, {[@cipso={0x86, 0xb, 0x1, [{0x5, 0x5, "ec95d4"}]}, @timestamp_prespec={0x44, 0xc, 0xc3, 0x3, 0x1, [{@broadcast, 0xfffffffe}]}]}}}}}) 1m1.945810028s ago: executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) socket$xdp(0x2c, 0x3, 0x0) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x952c, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000600)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000460000000e0001006e657464657673696d0000000f0002006e657464657673056d30000008008e00010000000c008f0000000000000000000c0090000000000000000000"], 0x54}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x0, 0x0, &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket(0x10, 0x803, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x12, 0x4, 0x8, 0xc}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7b}, @ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r4, 0x0, 0x0}, 0x20) r6 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r7, @ANYBLOB="14000200fe8000000000000000000000000000aa140006000000008001f0ffff0000000000010000140001"], 0x54}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000007c0)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYRES8, @ANYRES16=r9], 0x18, 0x10}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)={0x3c, r9, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}]}]}, 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x7, 0x0, 0x3, 0x95, {{0xb, 0x4, 0x1, 0xf, 0x2c, 0x67, 0x0, 0x3f, 0x4, 0x0, @remote, @local, {[@cipso={0x86, 0xb, 0x1, [{0x5, 0x5, "ec95d4"}]}, @timestamp_prespec={0x44, 0xc, 0xc3, 0x3, 0x1, [{@broadcast, 0xfffffffe}]}]}}}}}) 39.255790304s ago: executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) socket$xdp(0x2c, 0x3, 0x0) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x952c, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000600)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000460000000e0001006e657464657673696d0000000f0002006e657464657673056d30000008008e00010000000c008f0000000000000000000c0090000000000000000000"], 0x54}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x0, 0x0, &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket(0x10, 0x803, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x12, 0x4, 0x8, 0xc}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7b}, @ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r4, 0x0, 0x0}, 0x20) r6 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r7, @ANYBLOB="14000200fe8000000000000000000000000000aa140006000000008001f0ffff0000000000010000140001"], 0x54}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000007c0)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYRES8, @ANYRES16=r9], 0x18, 0x10}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)={0x3c, r9, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}]}]}, 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x7, 0x0, 0x3, 0x95, {{0xb, 0x4, 0x1, 0xf, 0x2c, 0x67, 0x0, 0x3f, 0x4, 0x0, @remote, @local, {[@cipso={0x86, 0xb, 0x1, [{0x5, 0x5, "ec95d4"}]}, @timestamp_prespec={0x44, 0xc, 0xc3, 0x3, 0x1, [{@broadcast, 0xfffffffe}]}]}}}}}) 25.01096938s ago: executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) socket$xdp(0x2c, 0x3, 0x0) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x952c, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000600)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000460000000e0001006e657464657673696d0000000f0002006e657464657673056d30000008008e00010000000c008f0000000000000000000c0090000000000000000000"], 0x54}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x0, 0x0, &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket(0x10, 0x803, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x12, 0x4, 0x8, 0xc}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7b}, @ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r4, 0x0, 0x0}, 0x20) r6 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r7, @ANYBLOB="14000200fe8000000000000000000000000000aa140006000000008001f0ffff0000000000010000140001"], 0x54}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000007c0)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYRES8, @ANYRES16=r9], 0x18, 0x10}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)={0x3c, r9, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}]}]}, 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x7, 0x0, 0x3, 0x95, {{0xb, 0x4, 0x1, 0xf, 0x2c, 0x67, 0x0, 0x3f, 0x4, 0x0, @remote, @local, {[@cipso={0x86, 0xb, 0x1, [{0x5, 0x5, "ec95d4"}]}, @timestamp_prespec={0x44, 0xc, 0xc3, 0x3, 0x1, [{@broadcast, 0xfffffffe}]}]}}}}}) 9.666225202s ago: executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = socket$inet6(0xa, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) socket$xdp(0x2c, 0x3, 0x0) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x952c, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000600)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000460000000e0001006e657464657673696d0000000f0002006e657464657673056d30000008008e00010000000c008f0000000000000000000c0090000000000000000000"], 0x54}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x0, 0x0, &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket(0x10, 0x803, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x12, 0x4, 0x8, 0xc}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7b}, @ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r4, 0x0, 0x0}, 0x20) r6 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r7, @ANYBLOB="14000200fe8000000000000000000000000000aa140006000000008001f0ffff0000000000010000140001"], 0x54}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f00000007c0)) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYRES8, @ANYRES16=r9], 0x18, 0x10}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)={0x3c, r9, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}]}]}, 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x7, 0x0, 0x3, 0x95, {{0xb, 0x4, 0x1, 0xf, 0x2c, 0x67, 0x0, 0x3f, 0x4, 0x0, @remote, @local, {[@cipso={0x86, 0xb, 0x1, [{0x5, 0x5, "ec95d4"}]}, @timestamp_prespec={0x44, 0xc, 0xc3, 0x3, 0x1, [{@broadcast, 0xfffffffe}]}]}}}}}) 6.822681018s ago: executing program 3: unshare(0x24020400) socket$netlink(0x10, 0x3, 0x4) r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8}, @IFLA_BOND_LP_INTERVAL={0x8}]}}}]}, 0x44}}, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000040)='%pB \x00'}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000080), 0x0}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x3, &(0x7f0000001b40)=@framed, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "8000", "a4616bf45c64c5000000878f00", "5a4d1508", "ffffffff08ffffff"}, 0x28) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r4, &(0x7f0000000480)={0xfffffffffffffffc, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)={0x14, 0x4, 0xa, 0x301, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0xc0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x26}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x2c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @private0}, @CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}]}]}, 0xc0}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x7, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@map_fd={0x18, 0x0, 0x1, 0x0, r7}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}]}, &(0x7f0000000000)='GPL\x00', 0x6, 0xb, &(0x7f0000000340)=""/221}, 0x90) 6.429102991s ago: executing program 3: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000011c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000001200)={0x1d, r2}, 0x18) connect$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x0, {0x0, 0x0, 0x1}}, 0x18) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000000)='h', 0xfdef}], 0x1) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000700)=[{0x2, 0x3}, {0x2, 0x3, {}, {0x2}}, {}], 0x60) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r3, &(0x7f0000000100)={0x2, @short}, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmmsg$inet(r4, &(0x7f0000000c80)=[{{0x0, 0x46, 0x0}}], 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet6(0xffffffffffffffff, &(0x7f0000000340)="7a77c1aa776dbdc416db4dc9bbe56eff7692b9204c83e07c3750374432118d9d1ee2364a3560a01c0261950e2dcc4c33a32bb9f8b58c4b760d37f9219e5f4de42cf0f11973c241aa3f2796f787d935c12c68e18e8fdb1692e78e8313ab75d11ff67caa0e413224638f3e8af5fd02ae82169964b29977fbfec27a966635b67c47473b0d38ec156285bfeed59cb05174cfafa0b769928cdb3c282370d82de6727b", 0xa0, 0x8000, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @mcast2, 0x7}, 0x1c) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000007000000b7030000000000008500000073000000850000009e00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='mm_page_free_batched\x00', r6}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='cgroup.freeze\x00', 0x26e1, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_subtree(r7, &(0x7f0000000340)=ANY=[], 0x9) write$cgroup_int(r8, &(0x7f0000000200), 0x43400) getsockopt$inet_buf(r5, 0x0, 0x34, &(0x7f0000000000)=""/3, &(0x7f0000000040)=0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f0000000240)=ANY=[], 0x310) r9 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000240)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0x0, 0x4}}}, 0x24}}, 0x0) 5.369422361s ago: executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r2, r0, 0x2f, 0x0, 0x0, @prog_fd}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup=r0, r2, 0x2f, 0x8, 0x4, @prog_fd=r1}, 0x20) 5.25818226s ago: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x7000000, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000100070000000900020073797a30000000000500050002000000050004000000000014000780080008400000106d080006400000000011000300686173683a69702c6d61726b"], 0x60}}, 0x0) 5.184499673s ago: executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000005480)={0x0, 0x0}, &(0x7f00000054c0)=0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@ipv4_newrule={0x28, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc, 0x14, {r2}}]}, 0x28}}, 0x0) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000800000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r3}, 0x10) (async) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b05, &(0x7f0000000000)={'wlan1\x00'}) 4.40492008s ago: executing program 3: socket$inet6_sctp(0xa, 0x1, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) (async) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149) getsockopt$inet_int(r1, 0x0, 0xe, 0x0, &(0x7f00000001c0)=0x2) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000380)='cubic\x00', 0x6) (async) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000380)='cubic\x00', 0x6) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r2, 0x0) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000001380), &(0x7f00000013c0)=0xe) 3.41994826s ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x6, 0x15, &(0x7f0000001480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000606c254b850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008100000b704000000000000850000003300000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket(0xa, 0x6, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x7}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x8}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xc00, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="1100010000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}}, 0x0) 2.975192203s ago: executing program 2: setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$tipc(0x1e, 0x5, 0x0) (async) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x3}}, 0x10) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x3}}, 0x10) (async) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000001440)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10, 0x0}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) (async) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x1c) 2.354699505s ago: executing program 1: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv6_deladdr={0x2c, 0x15, 0x413, 0x0, 0x0, {0xa, 0xf8}, [@IFA_ADDRESS={0x14, 0x1, @private0}]}, 0x2c}}, 0x0) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r4 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x1c, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r2, 0x701, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x0) 2.223788046s ago: executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r1, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r1, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000100)=""/74, 0x4a}], 0x1}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth0_to_batadv\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000014000000080001000000000008000300", @ANYRES32=r6], 0x2c}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r7) sendmsg$NFC_CMD_GET_TARGET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r8, 0x1}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r7) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r7) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001900)={0x14, r9, 0x1, 0x0, 0x0, {0x15}}, 0x14}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r2, @ANYRES32=r3, @ANYRES16=r2], 0x28}}, 0x4000001) socket$nl_route(0x10, 0x3, 0x0) (async) socket$rds(0x15, 0x5, 0x0) (async) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) (async) sendmsg$rds(r1, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) (async) sendmsg$rds(r1, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000100)=""/74, 0x4a}], 0x1}, 0x0) (async) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth0_to_batadv\x00'}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000180)={'wpan1\x00'}) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000014000000080001000000000008000300", @ANYRES32=r6], 0x2c}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r7) (async) sendmsg$NFC_CMD_GET_TARGET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r8, 0x1}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r7) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r7) (async) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001900)={0x14, r9, 0x1, 0x0, 0x0, {0x15}}, 0x14}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r2, @ANYRES32=r3, @ANYRES16=r2], 0x28}}, 0x4000001) (async) 1.943942697s ago: executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x3}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000001c0)='ext4_da_reserve_space\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r4 = socket(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x82, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000003c00)=0x90) write$binfmt_script(r3, &(0x7f0000020240), 0x10010) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014100000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='ext4_da_reserve_space\x00', r6}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(r7, &(0x7f0000000200), 0x43451) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0x7, [@struct={0x1, 0x5, 0x0, 0x4, 0x0, 0x8, [{0xf, 0x3, 0x7}, {0xb, 0x4, 0x6}, {0xb, 0x2, 0xb0}, {0x10, 0x1, 0x400}, {0x2, 0x5}]}, @volatile={0xf}, @fwd={0x3}, @fwd={0xf}, @volatile={0x809, 0x0, 0x0, 0x9, 0x5}]}, {0x0, [0x2e, 0x2e, 0x30, 0x0, 0x0]}}, &(0x7f0000000080)=""/48, 0x97, 0x30, 0x1, 0x81}, 0x20) listen(r8, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r9}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_int(r7, 0x1, 0x20, &(0x7f0000000000)=0x8, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) 1.836254516s ago: executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18000069daabe45f1305000000000000000000950000000000ff7f00000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240), 0xfea7) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r3, r2, 0x0, 0x10000a006) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xd003}) 1.500149152s ago: executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8) bind$can_raw(r0, &(0x7f0000000100), 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000001c0)=[{{0x1000000, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}}], 0x8) 1.295860564s ago: executing program 1: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x23, &(0x7f0000000280)={@cgroup=r2, 0x2, 0x1, 0x0, &(0x7f0000000140)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 1.146791321s ago: executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) unshare(0x60600) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000003000)={0x2}, 0x2) ppoll(&(0x7f0000000080)=[{r2}], 0x1, 0x0, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x65000) 1.095202943s ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x24, 0x2, [@TCA_CAKE_FLOW_MODE={0x8}, @TCA_CAKE_TARGET={0x8}, @TCA_CAKE_WASH={0x8}, @TCA_CAKE_RTT={0x8}]}}]}, 0x54}}, 0x0) 893.690619ms ago: executing program 2: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000627d6d8737f1be000c0000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x1c}], {0x95, 0x0, 0x700}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000240), 0x4) close(r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800005278aa8d7321070000000000009500000000000000"], &(0x7f00000003c0)='GPL\x00'}, 0x90) pipe(&(0x7f0000002800)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a00)=@newlink={0x64, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_AF_SPEC={0x3c, 0x1a, 0x0, 0x1, [@AF_INET={0x21, 0x2, 0x0, 0x1, {0x25, 0x1, 0x0, 0x1, [{0x21}, {0x8}, {0x8}, {0x8}, {0xfeb3}, {0x8}]}}]}, @IFLA_PROTO_DOWN={0x5}]}, 0x64}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=@getchain={0x2c, 0x66, 0x8, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xfff2, 0xb}, {0xffe0}, {0x5, 0x7}}, [{0x8, 0xb, 0x80}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x80) r7 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_mreqsrc(r7, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f00000000c0)=0x8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1ae8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000000)='jbd2_handle_stats\x00', r8}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpu.stat\x00', 0x275a, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000080)=0x11e, 0x33) socket$packet(0x11, 0x3, 0x300) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000504000000000000000003"], 0x114}], 0x1}, 0x0) 866.307167ms ago: executing program 0: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x10) r0 = socket$kcm(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001840)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x9006000, &(0x7f00000030c0)=[{&(0x7f0000000180)="1400000016001963d25a80648c56915a19aa2bfe", 0x14}], 0x1}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="01f9e0e6", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000019002000e00000024710200fcffff"], 0x0}, 0x90) ioctl$SIOCSIFHWADDR(r2, 0x89f1, &(0x7f0000000900)={'ip6tnl0\x00', @random="0600002000"}) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x19, 0x4, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 691.77289ms ago: executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0'}, 0xa) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$nfc_llcp(r1, 0x6, 0x1a, 0x0, 0x2000e881) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0xa, &(0x7f00000000c0)=[{0x2, 0x7, 0x80, 0x7f}, {0x20, 0x8, 0x2, 0xd8}, {0xffff, 0x1, 0x0, 0x1ff}, {0x20, 0x2, 0x6}, {0x6bc, 0x8, 0xd, 0x400}, {0x101, 0x1, 0x1, 0x3e}, {0x460, 0x78, 0x3a, 0x2}, {0x3, 0x80, 0x7, 0x4}, {0x6, 0x8, 0x1f, 0x9}, {0x24, 0xff, 0x81, 0xd6f}]}, 0x10) 537.674797ms ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newtaction={0x90, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_connmark={0x34, 0x2, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000ff70e4190000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="0000000000000000660a000000000000180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xd, 0xde, &(0x7f0000000340)=""/222}, 0x90) 343.70142ms ago: executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000580)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100e8ffffff00000000260000002000018008000100", @ANYRES32=r3, @ANYBLOB="14000200776731"], 0x34}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000040)={'sit0\x00', &(0x7f0000001080)={'gretap0\x00', 0x0, 0x3c40, 0x40, 0x7, 0x10000, {{0xd, 0x4, 0x0, 0x8, 0x34, 0x64, 0x0, 0xec, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, {[@timestamp_prespec={0x44, 0x1c, 0x90, 0x3, 0x9, [{@loopback, 0x4}, {@multicast2, 0x20}, {@multicast1, 0x80000000}]}, @end]}}}}}) sendmsg$can_j1939(r0, &(0x7f0000001180)={&(0x7f0000001100)={0x1d, r4, 0x1, {0x1, 0xff, 0x4}, 0xfe}, 0x18, &(0x7f0000001140)={&(0x7f0000001240)="b30d53c71a96ba7aec5a900c4e8d311dfe9906b693f8ba8373bf904898abaa2d9d4309d49cc023be66607ee12f476646c18b915cb9bd0b3c09b9fe026dedfa430f445040421d77f089cd59e02afd66fc520ebae901e59038fd76f1917aeb45e7334b9bb89b3144533adf008f2a38545440478f950e368860fdb3ac34bc0dd08d09ab16a5f5be0d6836555649deb6f941a511a62bd562465c5af023c3fc071a56ce88547f494652d34fb959945a0b6f8c3edcc94e3bc86c9c54f4a2cfd08f028799ab9795f4997ce052f74c2dff45886d1b18cb128642fcebaa0bac895f76215a369aaa98236987439230b51ece458594d3fdc10654c5529db2a322c357e17beb8bec136c208b801bc97c2069f88abc72aa8edd8f717a1c6ec4660d2b3627cc112f89c710ac8293bdc0752fac8f62c136d18b7ff1c329b9e79baae8e0e1408d8a6259b1663383fe261f004f2bc2a65114f4145de570e4fc3bd979d392165468429316d380e86c6d059c3f6d90ffe30a6f0e466a8b8d4a46cb1d010a4bca0912d689b3df861fa3c53025181afaa96c269e29c0b470c512f8fd61d75303bedd3d309903230f7a9fd4d992be798fd5511048c740c34ae5a77406caea232e73bb642cfbf1a6a7fc09b05508de4a9f43d3802b2da238ee713c2270d905db77a961919853b5a5c1aeafd3625622f5e88f67ef7a0fef87cc864fcc494c5484fde89b9daf51636af89452513b64824c3d7e44925c391b8c1d15bc0570f13c97152e5598ab1d9e18efd740f1b9879f84b2ab744cfe394681ea476fe3811ffc8d8ffb20126600c97f0f7fa87be79d1ccfd26848d1ced404541cadf11a90d4f38d3feb2642042148dc777c2a5fe8966986211f477267db9acc6779a3efe1c52d87063ba910a8b2171b074bb009ac2b9ce23993314fd4611b1099432adfcee9241a87e7a4af36e37a00f68e3c0381cabab77e0025d98f3f53ec24f50ad7d14f834ff47a1b38449363f85f7c29fbafe6cb7a4e66c810a4748a87b5dd846aae09b51307ad136089d743482dac7ea559c6304fb92ea2a336aafae17b24f50c2d527ae5f1efa9bebe03646ed113d9231b03a5e9df095828dc8c1bb1a5c000efa52f07521ccc81cb2c07d0b181b6929d58673e6a965bb6c3b3c3e9b19e32d32b9cc53429e329cdcf8298e4dfa454cfb375b1d51a5bd581b5e664c2d0d3d5d1462e8abfe027b3e4345cbbe77075a82d0ce30df55c85caa898ed93fed84df29899244fa495bc49ec59a2f0a3aa79e90d61b056f5d91768fde0e2343109de300598a557147cc47a20bcb22e1381441d4250fece3950dd2e38b9a44a415f71db8b78ddfb9d4dcdd369676da613d4d59163107311bd144fd7858a468afeef86aac2f418b0f0164557799e9a585310a758a3b590c623afbd74d4b28a498bb40d40a57b06311a330d976bd33d39cd095b1af8ce9eeccc09bb43fff186fec7ae537887dfed0627d45d9a6d8423ce33c2aeaf7056f8847aa695f04cacf8ce3fbf22bdd903765d43b513f8ed4e176969aa604e053582beba1cb84b1947de7120b166f4201800ca35d203f773300649ceba6426270caab1d6fd5e6b46406d7747058632ad9efe20a40b8adb6253b68cabeeaf8de35221c4d357413095ea92e8728df2e9cc8e81ace384d5377b64e1abb3418886abed35c127e6e40d4bef90b783302e3637d225f15c783b04713ddbed27b9db9c3b740f4781bf6c1545d14307727a4e798144d6a099c34ff8e82e3c5ea5053b37b36f20b4932aaa76a74d00b569ed54d238719fb4e1ab9661240a96044a82424a442746c1e898343271fb129126f2ff66f1ca1e223bc184d67b4385e9f7262b7c7437c5b880753a26ab12f8ad55e8a0321a1e5fad978253a951d6833c176d6ca16332c9a6adfde4b69c24f8114ae5cf555a3388fca3ab0b6209d74b42e0f2c43f173c1ca6b315db5b1f4fbc22fa747b6516cd3bb103f3cae03772473e29c8bb19cf05063c8a3b67409e16179f3e4a2183b9801755edb7810eff188377c816e2c19c424056c73e5a56ec61c8a37c87175accd977f5a24e9ac841a8aa7828f9d85c431bdf1a4ee143e39c5ed1dac574ab74365fc3b3dc3d08596ee7c1e6b2eb635bda319bcc7ab02c4cd9ca626e68843540cf58c6343158a4ca325a7c1436ad0a96233740d805bed9cf1bc855d764bc5ecec22122e30eb66c9e9adea12566fb83637665dbdb368b980961c2ce84d87ed0ed718ce8b6cfc6cdb4c4456a4cbdfd4044e8aae5835c54f6285bdb200ff024ad121d6a63e4d9ba944f89d95dc61ba5ffc823f91f55055eef0b548fd612f1336b4b1e0542437a11af48e0421eefe5a824ebbb0e51b65899e4178c2f4187fd4b86941c466349f29d34548fb57f814a9e9926b83b3ed272a6029a56de89a4282e0b03da9c0c7628cb35cd86f3aa965ee1ae3e66778a4ef200bae008ae20f27daf2b85fb413c8425d8bca53753eb7cc974028fc75823970b1d6e9e4301d03474a4d430ea5cde7f514fe8a7b0ba7615b0f10ae12e051aed1a1565f0b9c311ff4465e4426848299c5140c24a0df6b67c903f599942d268a4a27bcbb16fdde5139fb47404a84d06759f868481379e20738913b5835c91417be0793c7502c5fad33a12cf79b5875fc62ff3b61a32f2e06b91336ef139632b4c7d0ded064b9b6b83b81b0bf192411b5b1689356a4fda78ce391cb0df83e4bec3b9b5375a5ad8f074d886db3e0a1bbce938ac4235ed106c58f46aece9c7e6ec1147d654d17888c6c96619f3f3594138e17e7e080b72a1216996ec6d233ff742c08b0426551d4316a50bd946c40ba2298e42bde1f15250ed49ba39c8fb8b017ec6c08c195bbb4ef329c7eaf8bc0fdeae114e8c2c6eb6c778984b566671732ab2a6beaba5d409795ef29dc74bd7baa5fabc3cb5dea699643c3af81dc1275e4863777e94245fa9ded07bf13bb48ff9068645e2abd43a9831c497ff03104f3643198125cbd35d4b9a0d89f8bf5485dc23c572d485446fcf7eda318144a8f2b0f660648509c3d2e388c94427ef0131135c473a02e9ab87e4ecc1d17f3c7e82576e1d52e6af93972d1d5e514c0a0a216b6b9a8e898669fba0c525ae7119cac4e8f09f183e2ed49e110e1f5c7ca17c09532bcbc5ccdc26deabd64ee26f66e217ed79963d406d895c9b48b4139d01388c28823bbcd13b4c07983b33fb4e2fc502d35d58822826d46e2194d7eb9541cee541ef4b7064f4e1a9103ad03dc86011b0f84db120b75127824c406ba1c7565a410d80a0db71f4782cc8b410bcd34b06b14f45f4edbdf695e755b956bae924a2bc689acc894f3b3a5bb2945b99f0f4ca7be81d9d91635149183c6965383cd434faab15c36bd00d738418c2b0bd7a03a0828af611e0883976fe32e17d1e966587113bd993b2a44854d0c899055984808944037c01e9b5ce9a1a65c9006085f44126d05ee3bcd96a30cb354e91e764028e67b3ade77b08c6fc6bc19a995fc04092804c47b7ce0cf4490790f179b18feb93b56d7f7748d3b9e2717a165907fd7a58755909d4acc775d7d9371416ee304ee0bb71e645f4720896a7e088af0b82296dd01d8f46912e6b5cc27f8deccb55812a95cc2e009247b9c55932d7043657bb546af2312f2f9ec05d99246ea9028d3579993850402cdf98499570de591b961a10125478d437aa9ee7e837420311f3b21f2ebee6608c166997f5aaa5be2383e8b1da5a962fec1e8fbf00dfb402b08fa345a7255ebb811676e27cfd76b54d85c5da5b2884b24e9567e00f636f1b763b588ce5599e511247c8a7fdaf9915f6953810824a89c2e3958a09334c296100649543776aeadf0988acc87b6543d789a7b8876a8a7820bb004c35cbea9bcb1ba468334376acab3cd8cfc72c905a36a0a0911ca612b4b97a327f41c65e3be7d9437bfdafe4765bbb5c5a0d05f6956563f83b6f4c270c75cf7bdb04366d053720254cee56c0bda784c003096dd09ee9696cd18b7ec097f4cc6f6e97702f81ba749d39d341e4886f6f9c281df8e2d9824703c6c2a21b730d12672c9fe2d1a3daa74b5b1ce36facfafc5e7f0c087d0e2d9852c198611d0957c581f712a7307ae386839499aa270bb6e63d46120c404b55c907e9e45327c6392d758fa3ab310d3389998c762aa11d726f442b4e35c8b929049ade15f57f2628a04e81235a920b3205eb60b3f8a0e71b2534dfa2459db1629ed49890ef8d2d55b017fb30e03e1600518c473b12619c59a8f5764b68ac68ba61812b796e1c0a5f50842ca08fc695b3bb2129d52023139d6e48cc99a7905f9b6dcd84a2cd0dc83235258c264253877dc96686a223f90e877d957747c6d00665f761b7cc3a9e778cb479090b9a5f495079540087f8fd37e0c78651e011878988b7eef5af2c4bb93536e57401540cf9c8b295e481338961677f1bfdd37f6a80af5cd1b92c3a72b63d2967ba418b9669da831a7d57648f1d9c9f7e4750447f35b03b42d8ff8bdb563a55a79ae0377aea4de3fe80821ca368f218c5bf2513898a29caa3a99ecaa376541c0e2c148678ccca1db7b90cd3dce0b33e0ae577cd00512eb6ee9c3a0d8ecfd33ab5f3df82fa9f62f1411940b64e48ae6b26f9782e57f363861667a3649713eaef10d586aed7c8def6ba0d10d30d6d1ca6182c2a5028db8b49f332ac1fa9e5f733f95200e6d0f25f000311fc0cb7edd1bae1ee088c852a112482eef12d9b1aca88caca4332619c21096094fa43e649b4648340369bf496eaf00b70a79aacb7b11246c7183e4c6e62cb33eca493a2a7749191f279f8e9715dc0ed0530a93ffe30e35b1f334185a2a1d4a9bf0fecf7193bfe2d7127122a7fd24755a5fc17fc84ea0b0d15b880c53aa94e74151ae4144ac6d67ec492c211fd3251a9c0229e90b07a5a4565a1f6b764327426bf8c0e779e72b29c1b349195a6641dde4f1b2adc33a535351d8da848e3d8b14b8846611845b61180c8001fce506869da266c677d877524facaa4a93c8a7cfd128d91448109832f1b5e0b4e6700cc78d4cf0390f9350e6a283c86bc5b5be177a9a72a4c07c50b2b129c979d9832903398940089390c9de8b612ce46a2867c9d6bbe0052caf5c2bfff1532ef9a1bfea234da03174d469a389024d0fc30a8510b1ae091caad4a26fadfe06fa89de8dc3050d5b9b25bd5dc9a1eb735cc7f663bc34790282ab7c77bc55ba2e50447ea99028b75f9ad6484ceb407380c875b7af92647dd9dfa4fdd4c705ced273f0a4ef198432341659d4a81ab4a80189fbcdaafc7352bf4acfff830965719e40c7666c1042e52fafec5b5c7da6cdda6cafb6f2a7e9a36b4ab4878d2247c86620cdef81e1a8a4b1322b8529b5dab60007b0a1b3467ea5d420fd070a03be31fdd2e34655520a6b15834bad526925b30e5841a321d8432e1a2df71ad73194f9f0a870e8911cf14e3b5b91bdbffc01ff11e913cfa24d24cd84a4fd2e878c4e22e40253a060d92050e229765b4e5d29485c40ab77811b8b045ad10856aecb265ba74f8d7bcf2453dc6003ab0a47d1f4cdfc73f9bfce8df414ce271a02c90be882644bbf7908abeb138bdc444815046909ed447a069f3fa9786b9e0f718e851f53ed3011d466b0497ee774ab101ef9238742c73ae6d1a2584e8b7e30c11dc129ec3780211199a9dcd66d534aa30db8bb58b5a6aae183a6ac43d3ff21800b3f44c94efd14acdb67f23974db12f3283e039340728468847932fa42f286c7e2919213e2312783c6ddd280dfbd3c04bcae6a08516949367da", 0x1000}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x1, 0x8, 0x8}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xf, &(0x7f0000000240)={r7, 0x23000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000000), 0x4) (async, rerun: 64) r9 = socket$kcm(0x10, 0x3, 0x4) (rerun: 64) bind$inet6(r8, &(0x7f00000011c0)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) (async) close(r9) r10 = socket$inet(0xa, 0x801, 0x84) ioctl$FS_IOC_ENABLE_VERITY(r10, 0x40806685, &(0x7f0000000280)={0x1, 0x0, 0x1000, 0x1, &(0x7f0000000000)="0f", 0xdf, 0x0, &(0x7f0000000180)="1cc0d092448a55c5c5b27ce5547a62ea249ad927e0b119a5f057e84dfe9a017cb2fc966445ed49824fc2ed6cec019b3f744e918b9a87e92bb5e8d9f8a643750715eb3e90ca23b76e9c4c3e752bbadf49184c88f47c086aaff102f87e6f5cd5d853f51ed6212508256f077d553b33642883d930d63f4d039b0fd11887ebf11db4d96f54749a6105f53ac3d84e5a6bb2917572e6c9c40300000000000000527c4e7777aba7c91858f09bca6a643fb403fc1a2dd1a1b8a5fdb0aef6ce53ec12b70ea010a7e537bc3d7f5b1d57a2efb0c866dc0f50eeb1ed9a9cbb36da96e96783"}) (async, rerun: 32) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) (async, rerun: 32) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r11 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r11, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x0, @empty}, {0x2, 0x0, @empty}, 0x2a0}) (async, rerun: 32) ioctl$sock_inet_SIOCDELRT(r11, 0x890c, &(0x7f0000000080)={0x0, {}, {0x2, 0x0, @local}, {0x2, 0x0, @empty}, 0xab852ebbeefbd6b1}) (rerun: 32) sendmmsg$inet_sctp(r10, &(0x7f0000001780)=[{&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000140)="86", 0x1}], 0x1, &(0x7f0000000540)=[@dstaddrv6={0x20, 0x84, 0x8, @loopback}, @dstaddrv4={0x18, 0x84, 0x7, @private=0xa010101}], 0x38}], 0x1, 0x0) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r5, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async, rerun: 64) getsockopt$bt_hci(r5, 0x84, 0x84, &(0x7f0000000080)=""/4096, &(0x7f0000001200)=0x1000) (rerun: 64) 335.382374ms ago: executing program 0: pipe(&(0x7f0000000480)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) socket$inet_sctp(0x2, 0x1, 0x84) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000740)) socket$pppoe(0x18, 0x1, 0x0) socket(0x10, 0x3, 0x0) socket(0x2b, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) epoll_create1(0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket(0x2, 0x80802, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES32=0x0, @ANYRES16=r0], 0x20}, 0x1, 0xc00000000000000}, 0x0) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="4c0e030007"], 0xd) 37.034406ms ago: executing program 2: r0 = socket$kcm(0x10, 0x3, 0x10) listen(r0, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90224fc60100c084002000600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x4, 0x3, 0x8}, 0x48) close(r2) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x3fc, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r2}, &(0x7f0000000080), &(0x7f0000000200)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='scsi_dispatch_cmd_start\x00', r4}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000900)={[{0x0, 'hugetlb'}]}, 0x9) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r7, {0x2, 0x0, @local}, 0x2}}, 0x26) ioctl$PPPIOCGCHAN(r6, 0x80047437, &(0x7f0000000000)) recvmsg(r6, &(0x7f0000001300)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000002c0)={@local, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "adf85b", 0x18, 0x0, 0x0, @dev, @remote, {[@hopopts={0x0, 0x2, '\x00', [@calipso={0x31, 0x8}, @jumbo]}]}}}}}, 0x0) ioctl$sock_SIOCGSKNS(r5, 0x894c, &(0x7f00000003c0)) 0s ago: executing program 0: accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="24000000190001000000000000000000020000000000000000000000080012"], 0x24}}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) accept4(r2, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r0, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@getqdisc={0x2c, 0x26, 0x1, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xf, 0x7}, {0x8, 0x5}, {0xf, 0xd}}, [{0x4}, {0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040804}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = openat$cgroup_ro(r1, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r6, 0x6, 0x3, &(0x7f0000000200)=0x29, 0x4) close(r5) splice(r0, 0x0, r5, 0x0, 0xfdef, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg$unix(r7, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) close(r8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r8}, 0x20) syz_emit_ethernet(0x96, &(0x7f0000000240)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0x88, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x80000000, @rand_addr=0x64010102}, {0x0, 0x37c1, 0x74, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}, "33ddb7fa5b050b87c5280fb1ec5fb07eb7c2f158b95574e36d4eb9b848b70c92284b0bfc02baa6c6ab825d4781e98d1ca76dbfabeda3f4186796743424c72e21bc61ae6fe531f49ac8d50a60f33993e0fdf2ae3a0b061c1663b51a16b44c8cf41bb046d8021cbd05"}}}}}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.197' (ED25519) to the list of known hosts. 2024/05/31 08:01:03 fuzzer started 2024/05/31 08:01:03 dialing manager at 10.128.0.169:30016 [ 75.860470][ T5098] cgroup: Unknown subsys name 'net' [ 76.062297][ T5098] cgroup: Unknown subsys name 'rlimit' 2024/05/31 08:01:05 starting 5 executor processes [ 77.475414][ T5106] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.652964][ T5123] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.668215][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.678187][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.699339][ T5125] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.700054][ T5131] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.708769][ T5133] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.715129][ T5131] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.724454][ T5133] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.731132][ T5131] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 78.743679][ T5133] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.745088][ T5131] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.759224][ T5134] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.759415][ T5131] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.767617][ T5134] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 78.774679][ T5131] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.781692][ T5133] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.789044][ T5131] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.795200][ T5134] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 78.804817][ T5131] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.809153][ T5133] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.816546][ T5131] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 78.831210][ T5135] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 78.832593][ T5136] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.840235][ T5131] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 78.855094][ T5131] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.863125][ T5133] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 78.883197][ T5133] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.892833][ T5133] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 78.936800][ T5133] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 78.946365][ T5133] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 79.496078][ T5119] chnl_net:caif_netlink_parms(): no params data found [ 79.534919][ T5118] chnl_net:caif_netlink_parms(): no params data found [ 79.727944][ T5127] chnl_net:caif_netlink_parms(): no params data found [ 79.809989][ T5124] chnl_net:caif_netlink_parms(): no params data found [ 79.844113][ T5119] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.853018][ T5119] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.861182][ T5119] bridge_slave_0: entered allmulticast mode [ 79.868974][ T5119] bridge_slave_0: entered promiscuous mode [ 79.879327][ T5119] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.886583][ T5119] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.894018][ T5119] bridge_slave_1: entered allmulticast mode [ 79.901520][ T5119] bridge_slave_1: entered promiscuous mode [ 79.984921][ T5118] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.992301][ T5118] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.001458][ T5118] bridge_slave_0: entered allmulticast mode [ 80.008940][ T5118] bridge_slave_0: entered promiscuous mode [ 80.019337][ T5118] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.026683][ T5118] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.033873][ T5118] bridge_slave_1: entered allmulticast mode [ 80.041513][ T5118] bridge_slave_1: entered promiscuous mode [ 80.073050][ T5119] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.141752][ T5119] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.162336][ T5126] chnl_net:caif_netlink_parms(): no params data found [ 80.183906][ T5118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.239330][ T5118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.344602][ T5119] team0: Port device team_slave_0 added [ 80.355548][ T5119] team0: Port device team_slave_1 added [ 80.362174][ T5127] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.369926][ T5127] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.377592][ T5127] bridge_slave_0: entered allmulticast mode [ 80.385389][ T5127] bridge_slave_0: entered promiscuous mode [ 80.428895][ T5124] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.436216][ T5124] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.443675][ T5124] bridge_slave_0: entered allmulticast mode [ 80.451216][ T5124] bridge_slave_0: entered promiscuous mode [ 80.492387][ T5127] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.500009][ T5127] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.508193][ T5127] bridge_slave_1: entered allmulticast mode [ 80.515208][ T5127] bridge_slave_1: entered promiscuous mode [ 80.539331][ T5124] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.546762][ T5124] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.554160][ T5124] bridge_slave_1: entered allmulticast mode [ 80.564928][ T5124] bridge_slave_1: entered promiscuous mode [ 80.575060][ T5118] team0: Port device team_slave_0 added [ 80.617844][ T5127] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.644547][ T5118] team0: Port device team_slave_1 added [ 80.665254][ T5119] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.672342][ T5119] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.698437][ T5119] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.713300][ T5127] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.784634][ T5119] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.795821][ T5119] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.823281][ T5119] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.869150][ T5126] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.877628][ T5126] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.877748][ T5133] Bluetooth: hci1: command tx timeout [ 80.884863][ T5126] bridge_slave_0: entered allmulticast mode [ 80.898322][ T5126] bridge_slave_0: entered promiscuous mode [ 80.910835][ T5124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.922758][ T5118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.930050][ T5118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.956269][ T5118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.956316][ T5133] Bluetooth: hci0: command tx timeout [ 80.973074][ T5125] Bluetooth: hci2: command tx timeout [ 80.973105][ T5134] Bluetooth: hci3: command tx timeout [ 80.976847][ T5118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.992230][ T5118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.018929][ T5118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.036293][ T5125] Bluetooth: hci4: command tx timeout [ 81.047316][ T5127] team0: Port device team_slave_0 added [ 81.053883][ T5126] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.061803][ T5126] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.069165][ T5126] bridge_slave_1: entered allmulticast mode [ 81.076573][ T5126] bridge_slave_1: entered promiscuous mode [ 81.086301][ T5124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.134666][ T5118] hsr_slave_0: entered promiscuous mode [ 81.142181][ T5118] hsr_slave_1: entered promiscuous mode [ 81.151882][ T5127] team0: Port device team_slave_1 added [ 81.272218][ T5124] team0: Port device team_slave_0 added [ 81.298538][ T5119] hsr_slave_0: entered promiscuous mode [ 81.305655][ T5119] hsr_slave_1: entered promiscuous mode [ 81.312981][ T5119] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.321176][ T5119] Cannot create hsr debugfs directory [ 81.328437][ T5127] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.335438][ T5127] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.366048][ T5127] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.380950][ T5126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.395035][ T5126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.407068][ T5124] team0: Port device team_slave_1 added [ 81.438552][ T5127] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.445815][ T5127] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.472856][ T5127] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.608143][ T5126] team0: Port device team_slave_0 added [ 81.615196][ T5124] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.622582][ T5124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.649606][ T5124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.663573][ T5124] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.670656][ T5124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.697427][ T5124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.726784][ T5126] team0: Port device team_slave_1 added [ 81.833060][ T5127] hsr_slave_0: entered promiscuous mode [ 81.840836][ T5127] hsr_slave_1: entered promiscuous mode [ 81.851434][ T5127] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.859656][ T5127] Cannot create hsr debugfs directory [ 81.901563][ T5126] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.908748][ T5126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.935644][ T5126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.949895][ T5126] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.957176][ T5126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.983370][ T5126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.108893][ T5124] hsr_slave_0: entered promiscuous mode [ 82.116015][ T5124] hsr_slave_1: entered promiscuous mode [ 82.122627][ T5124] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.131805][ T5124] Cannot create hsr debugfs directory [ 82.293331][ T5126] hsr_slave_0: entered promiscuous mode [ 82.300941][ T5126] hsr_slave_1: entered promiscuous mode [ 82.310443][ T5126] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.319232][ T5126] Cannot create hsr debugfs directory [ 82.538460][ T5119] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.563590][ T5119] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.604813][ T5119] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.622422][ T5119] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.766878][ T5118] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 82.778851][ T5118] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 82.790210][ T5118] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 82.801748][ T5118] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 82.893572][ T5127] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.923987][ T5127] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.953702][ T5127] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.957257][ T5125] Bluetooth: hci1: command tx timeout [ 82.974604][ T5127] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.038582][ T5133] Bluetooth: hci2: command tx timeout [ 83.038657][ T5134] Bluetooth: hci0: command tx timeout [ 83.044386][ T5125] Bluetooth: hci3: command tx timeout [ 83.092620][ T5124] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.117805][ T5125] Bluetooth: hci4: command tx timeout [ 83.133270][ T5124] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.144565][ T5124] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.182302][ T5124] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.204115][ T5119] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.303782][ T5119] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.339319][ T5126] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.352274][ T5126] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.377810][ T5126] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.394332][ T5126] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.408982][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.416776][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.495668][ T5177] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.502878][ T5177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.581072][ T5127] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.603442][ T5118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.664689][ T5127] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.713417][ T5167] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.721369][ T5167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.782052][ T5167] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.789232][ T5167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.832349][ T5118] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.923642][ T5124] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.951522][ T5167] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.958710][ T5167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.019178][ T5124] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.052305][ T5126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.071340][ T5167] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.078706][ T5167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.108724][ T5173] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.116013][ T5173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.169184][ T5173] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.176475][ T5173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.203068][ T5119] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.283724][ T5126] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.424332][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.431592][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.462434][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.469689][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.650577][ T5119] veth0_vlan: entered promiscuous mode [ 84.729561][ T5119] veth1_vlan: entered promiscuous mode [ 84.852370][ T5127] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.872668][ T5118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.983750][ T5119] veth0_macvtap: entered promiscuous mode [ 85.011811][ T5119] veth1_macvtap: entered promiscuous mode [ 85.047246][ T5125] Bluetooth: hci1: command tx timeout [ 85.117378][ T5125] Bluetooth: hci0: command tx timeout [ 85.117400][ T5134] Bluetooth: hci3: command tx timeout [ 85.117446][ T5134] Bluetooth: hci2: command tx timeout [ 85.195030][ T5124] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.203063][ T5134] Bluetooth: hci4: command tx timeout [ 85.222280][ T5126] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.231068][ T5127] veth0_vlan: entered promiscuous mode [ 85.294577][ T5119] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.312317][ T5127] veth1_vlan: entered promiscuous mode [ 85.353778][ T5119] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.395321][ T5119] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.404711][ T5119] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.417759][ T5119] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.427218][ T5119] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.480877][ T5127] veth0_macvtap: entered promiscuous mode [ 85.515636][ T5127] veth1_macvtap: entered promiscuous mode [ 85.544104][ T5124] veth0_vlan: entered promiscuous mode [ 85.572710][ T5126] veth0_vlan: entered promiscuous mode [ 85.642057][ T5124] veth1_vlan: entered promiscuous mode [ 85.656983][ T5127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.671753][ T5127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.683832][ T5127] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.694148][ T5126] veth1_vlan: entered promiscuous mode [ 85.729402][ T5127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.741289][ T5127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.760687][ T5127] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.772809][ T5118] veth0_vlan: entered promiscuous mode [ 85.803667][ T5177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.817172][ T5127] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.830762][ T5177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.836059][ T5127] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.849850][ T5127] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.859096][ T5127] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.900362][ T5118] veth1_vlan: entered promiscuous mode [ 85.983157][ T5124] veth0_macvtap: entered promiscuous mode [ 86.000284][ T5124] veth1_macvtap: entered promiscuous mode [ 86.025236][ T951] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.041561][ T5126] veth0_macvtap: entered promiscuous mode [ 86.047783][ T951] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.131596][ T5126] veth1_macvtap: entered promiscuous mode [ 86.149280][ T2473] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.155094][ T5118] veth0_macvtap: entered promiscuous mode [ 86.176799][ T5124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.189717][ T2473] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.191129][ T5124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.218272][ T5124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.229612][ T5124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.242513][ T5124] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.270642][ T5118] veth1_macvtap: entered promiscuous mode [ 86.345818][ T5167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.368296][ T5124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.385641][ T5167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.395666][ T5124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.415879][ T5124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.428141][ T5124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.441060][ T5124] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.464929][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.476256][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.488192][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.499023][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.509540][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.523265][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.537451][ T5118] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.546657][ T5124] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.555428][ T5124] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.575768][ T5124] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.584692][ T5124] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.618223][ T5126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.651755][ T5126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.676048][ T5126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.694792][ T5126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.711753][ T5126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.724085][ T5126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.734117][ T5126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.745314][ T5126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.778040][ T5126] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.793494][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.820479][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.830880][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.852656][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.863687][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.874342][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.889497][ T5118] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.909710][ T5126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.921826][ T5126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.933637][ T5126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.944289][ T5126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.986025][ T5126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.007751][ T5126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.017929][ T5126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.029031][ T5126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.047335][ T5126] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.080999][ T5118] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.110306][ T5118] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.119520][ T5134] Bluetooth: hci1: command tx timeout [ 87.136097][ T5118] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.145136][ T5118] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.179462][ T5126] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.195727][ T5126] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.204912][ T5134] Bluetooth: hci0: command tx timeout [ 87.204971][ T5134] Bluetooth: hci3: command tx timeout [ 87.209909][ T5134] Bluetooth: hci2: command tx timeout [ 87.229232][ T5126] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.246526][ T5126] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.276061][ T5134] Bluetooth: hci4: command tx timeout [ 87.627356][ T5229] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.694093][ T1054] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.704923][ T1054] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.859187][ T25] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.885158][ T25] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.936688][ T951] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.962965][ T951] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.052673][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.085316][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.238740][ T5174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.246878][ T5174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.327425][ T25] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.355258][ T25] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.444060][ T5240] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 88.477034][ T5240] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.315298][ T5276] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 89.411992][ T5281] can: request_module (can-proto-0) failed. [ 89.443693][ T5280] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 89.655606][ T5292] netlink: 'syz-executor.3': attribute type 8 has an invalid length. [ 89.803587][ T5296] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 90.075834][ T5302] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 90.268251][ T5324] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. [ 90.321568][ T5327] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 90.581055][ T5337] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 90.620815][ T5338] can: request_module (can-proto-0) failed. [ 90.860858][ T5347] Illegal XDP return value 4294967294 on prog (id 11) dev N/A, expect packet loss! [ 90.887091][ T5353] Cannot find add_set index 0 as target [ 91.288080][ T5363] netdevsim netdevsim3 netdevsim1: Unsupported IPsec algorithm [ 91.471803][ T5380] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 91.481892][ T5380] netlink: 666 bytes leftover after parsing attributes in process `syz-executor.1'. [ 91.607164][ T5383] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 91.625138][ T5383] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 91.663934][ T5385] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 91.704043][ T5383] Zero length message leads to an empty skb [ 91.834631][ T5387] can: request_module (can-proto-0) failed. [ 92.014689][ T5398] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.2'. [ 92.399861][ T9] cfg80211: failed to load regulatory.db [ 92.449626][ T5417] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 92.832702][ T5435] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 92.860670][ T5431] can: request_module (can-proto-0) failed. [ 93.507530][ T5471] __nla_validate_parse: 2 callbacks suppressed [ 93.507553][ T5471] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 93.877755][ T5485] bond_slave_0: entered promiscuous mode [ 93.883755][ T5485] bond_slave_1: entered promiscuous mode [ 93.895971][ T29] audit: type=1804 audit(1717142482.131:2): pid=5483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3261336803/syzkaller.FoMGjk/16/cgroup.controllers" dev="sda1" ino=1945 res=1 errno=0 [ 93.945436][ T5484] bond_slave_0: left promiscuous mode [ 93.951301][ T5484] bond_slave_1: left promiscuous mode [ 94.281047][ T5502] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 94.348825][ T5502] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 95.104412][ T52] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.341544][ T5529] xt_CT: You must specify a L4 protocol and not use inversions on it [ 95.350142][ T52] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.438930][ T5529] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 95.511769][ T5529] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 95.689543][ T52] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.822634][ T5536] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 95.968899][ T52] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.112511][ T5133] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.128708][ T5133] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.143249][ T5133] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.153984][ T5133] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.164290][ T5133] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 96.178386][ T5133] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.457592][ T52] bridge_slave_1: left allmulticast mode [ 96.468351][ T52] bridge_slave_1: left promiscuous mode [ 96.478952][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.511269][ T52] bridge_slave_0: left allmulticast mode [ 96.520770][ T52] bridge_slave_0: left promiscuous mode [ 96.529043][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.566757][ T5563] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 97.020045][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 97.033582][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.050318][ T52] bond0 (unregistering): Released all slaves [ 97.080611][ T5559] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 97.090636][ T5559] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 97.228959][ T5574] xt_CT: You must specify a L4 protocol and not use inversions on it [ 97.308794][ T5574] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 97.386515][ T5574] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 97.469235][ T5587] syz-executor.0[5587] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 97.469458][ T5587] syz-executor.0[5587] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 97.949671][ T52] hsr_slave_0: left promiscuous mode [ 97.987407][ T52] hsr_slave_1: left promiscuous mode [ 98.034949][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.054865][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.086215][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.099035][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.142849][ T52] veth1_macvtap: left promiscuous mode [ 98.149356][ T52] veth0_macvtap: left promiscuous mode [ 98.156914][ T52] veth1_vlan: left promiscuous mode [ 98.165266][ T52] veth0_vlan: left promiscuous mode [ 98.237449][ T5134] Bluetooth: hci0: command tx timeout [ 98.989921][ T52] team0 (unregistering): Port device team_slave_1 removed [ 99.028122][ T52] team0 (unregistering): Port device team_slave_0 removed [ 99.430449][ T5606] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 99.454115][ T5611] bridge0: entered promiscuous mode [ 99.468246][ T5611] bridge0: left promiscuous mode [ 99.536051][ T5630] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 99.555572][ T5630] syz_tun: entered promiscuous mode [ 99.627373][ T5630] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 99.663908][ T5543] chnl_net:caif_netlink_parms(): no params data found [ 99.855366][ T5645] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 99.984499][ T5643] can: request_module (can-proto-0) failed. [ 100.019434][ T5653] xt_CT: You must specify a L4 protocol and not use inversions on it [ 100.071866][ T5643] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 100.157691][ T5543] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.168601][ T5543] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.198673][ T5543] bridge_slave_0: entered allmulticast mode [ 100.214203][ T5543] bridge_slave_0: entered promiscuous mode [ 100.244954][ T5543] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.246662][ T5663] netlink: 1180 bytes leftover after parsing attributes in process `syz-executor.1'. [ 100.265775][ T5543] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.286402][ T5543] bridge_slave_1: entered allmulticast mode [ 100.302674][ T5543] bridge_slave_1: entered promiscuous mode [ 100.326277][ T5134] Bluetooth: hci0: command tx timeout [ 100.382815][ T5668] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 100.489104][ T5543] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.541592][ T5543] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.725707][ T5543] team0: Port device team_slave_0 added [ 100.775640][ T5543] team0: Port device team_slave_1 added [ 100.894010][ T5543] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.911829][ T5543] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.010245][ T5543] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.052984][ T5543] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.075111][ T5543] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.107502][ T5696] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 101.196369][ T5543] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.474829][ T5714] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 101.496640][ T5714] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 101.521805][ T5707] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 101.566875][ T5543] hsr_slave_0: entered promiscuous mode [ 101.595627][ T5543] hsr_slave_1: entered promiscuous mode [ 101.691955][ T5710] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. [ 101.722120][ T5716] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.3'. [ 101.756838][ T5716] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 101.959397][ T5728] warning: `syz-executor.1' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 102.283365][ T5746] netlink: 1180 bytes leftover after parsing attributes in process `syz-executor.0'. [ 102.393825][ T5752] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 102.405625][ T5134] Bluetooth: hci0: command tx timeout [ 102.406943][ T5752] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 102.456887][ T5748] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 102.731384][ T5766] netlink: 'syz-executor.3': attribute type 30 has an invalid length. [ 102.927632][ T5543] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 102.947364][ T5543] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 102.978578][ T5543] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 103.013812][ T5543] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 103.302781][ T5543] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.378982][ T5543] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.412347][ T5177] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.419646][ T5177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.484524][ T5177] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.491773][ T5177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.615403][ T5543] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 103.862795][ T5817] netlink: 'syz-executor.1': attribute type 30 has an invalid length. [ 104.150313][ T5543] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.486698][ T5134] Bluetooth: hci0: command tx timeout [ 104.671844][ T5543] veth0_vlan: entered promiscuous mode [ 104.712678][ T5543] veth1_vlan: entered promiscuous mode [ 104.830024][ T5543] veth0_macvtap: entered promiscuous mode [ 104.861133][ T5543] veth1_macvtap: entered promiscuous mode [ 104.944674][ T5543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.979400][ T5543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.989609][ T5543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.007713][ T5543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.041282][ T5543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.059514][ T5543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.074048][ T5543] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.162067][ T5543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.179532][ T5543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.206079][ T5543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.230429][ T5543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.244161][ T5543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.263162][ T5543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.273250][ T5543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.285478][ T5543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.306938][ T5543] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.362476][ T5543] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.383520][ T5543] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.392542][ T5543] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.405295][ T5543] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.736236][ T2447] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.776883][ T2447] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.858828][ T1054] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.888897][ T1054] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.989445][ T5895] syz-executor.2 uses obsolete (PF_INET,SOCK_PACKET) [ 106.187924][ T5902] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 106.207361][ T5902] __nla_validate_parse: 3 callbacks suppressed [ 106.207383][ T5902] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.1'. [ 107.962064][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.190399][ T5967] dccp_close: ABORT with 32 bytes unread [ 108.533804][ T5133] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 108.556869][ T5133] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 108.570425][ T5133] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 108.588899][ T5133] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 108.616326][ T5133] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 108.625270][ T5133] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 108.778447][ T5985] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. [ 108.897859][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.082517][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.269763][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.310072][ T6006] vcan0 speed is unknown, defaulting to 1000 [ 109.357160][ T6006] vcan0 speed is unknown, defaulting to 1000 [ 109.398007][ T6006] vcan0 speed is unknown, defaulting to 1000 [ 109.441739][ T5976] chnl_net:caif_netlink_parms(): no params data found [ 109.842910][ T35] bridge_slave_1: left allmulticast mode [ 109.872846][ T35] bridge_slave_1: left promiscuous mode [ 109.873749][ T6006] infiniband syz1: set active [ 109.885661][ T6006] infiniband syz1: added vcan0 [ 109.896624][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.934002][ T35] bridge_slave_0: left allmulticast mode [ 109.946900][ T35] bridge_slave_0: left promiscuous mode [ 109.953048][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.007583][ T6006] RDS/IB: syz1: added [ 110.012934][ T6006] smc: adding ib device syz1 with port count 1 [ 110.023138][ T6006] smc: ib device syz1 port 1 has pnetid [ 110.434533][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.452830][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.464917][ T35] bond0 (unregistering): Released all slaves [ 110.497350][ T9] vcan0 speed is unknown, defaulting to 1000 [ 110.530348][ T5173] vcan0 speed is unknown, defaulting to 1000 [ 110.542912][ T5976] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.557915][ T5976] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.565281][ T5976] bridge_slave_0: entered allmulticast mode [ 110.584426][ T5976] bridge_slave_0: entered promiscuous mode [ 110.596266][ T5976] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.600203][ T6006] vcan0 speed is unknown, defaulting to 1000 [ 110.603685][ T5976] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.618153][ T5976] bridge_slave_1: entered allmulticast mode [ 110.627439][ T5976] bridge_slave_1: entered promiscuous mode [ 110.726365][ T5134] Bluetooth: hci0: command tx timeout [ 110.890896][ T5976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.930982][ T5976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.234090][ T5976] team0: Port device team_slave_0 added [ 111.274357][ T5976] team0: Port device team_slave_1 added [ 111.316763][ T6006] vcan0 speed is unknown, defaulting to 1000 [ 111.456898][ T5976] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.463925][ T5976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.495590][ T6057] netlink: 'syz-executor.2': attribute type 30 has an invalid length. [ 111.516436][ T6059] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. [ 111.545710][ T5976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.570098][ T6059] geneve1: mtu less than device minimum [ 111.618514][ T5976] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.625529][ T5976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.705991][ T5976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.962507][ T6074] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 111.977597][ T5976] hsr_slave_0: entered promiscuous mode [ 112.018561][ T5976] hsr_slave_1: entered promiscuous mode [ 112.036096][ T5976] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.043790][ T5976] Cannot create hsr debugfs directory [ 112.056201][ T6006] vcan0 speed is unknown, defaulting to 1000 [ 112.211305][ T6083] smc: net device ip6_vti0 applied user defined pnetid SYZ0 [ 112.230032][ T6084] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 112.725394][ T6102] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 112.760239][ T6102] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 112.789339][ T6102] gretap1: entered promiscuous mode [ 112.800369][ T6102] gretap1: entered allmulticast mode [ 112.808470][ T5134] Bluetooth: hci0: command tx timeout [ 112.827274][ T6006] vcan0 speed is unknown, defaulting to 1000 [ 112.839103][ T6104] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 112.978919][ T6112] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 112.981388][ T6109] netlink: 'syz-executor.0': attribute type 30 has an invalid length. [ 113.276863][ T5976] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 113.300478][ T5976] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 113.337637][ T5976] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 113.388844][ T5976] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 113.426707][ T6006] vcan0 speed is unknown, defaulting to 1000 [ 113.710692][ T6134] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 113.889910][ T5976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.982362][ T5976] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.003210][ T6006] vcan0 speed is unknown, defaulting to 1000 [ 114.183791][ T6142] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.288186][ T5129] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.295441][ T5129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.343592][ T5129] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.350896][ T5129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.492046][ T6142] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.878527][ T5134] Bluetooth: hci0: command tx timeout [ 114.886205][ T6142] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.949487][ T6164] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 115.002203][ T35] hsr_slave_0: left promiscuous mode [ 115.004558][ T6164] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 115.029503][ T6164] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.0'. [ 115.031036][ T35] hsr_slave_1: left promiscuous mode [ 115.105204][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.126793][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.152895][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.180619][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.260013][ T35] veth1_macvtap: left promiscuous mode [ 115.284173][ T35] veth0_macvtap: left promiscuous mode [ 115.396333][ T35] veth1_vlan: left promiscuous mode [ 115.401863][ T35] veth0_vlan: left promiscuous mode [ 116.967492][ T5134] Bluetooth: hci0: command tx timeout [ 118.208947][ T35] team0 (unregistering): Port device team_slave_1 removed [ 118.940637][ T35] team0 (unregistering): Port device team_slave_0 removed [ 125.922062][ T6142] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.859990][ T6142] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.908924][ T6142] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.962486][ T6142] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.978380][ T6189] ebtables: ebtables: counters copy to user failed while replacing table [ 127.021236][ T6142] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.033200][ T6194] rdma_rxe: rxe_newlink: failed to add vcan0 [ 127.220443][ T6205] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 127.339866][ T6210] xt_NFQUEUE: number of queues (27721) out of range (got 91309) [ 127.485531][ T5976] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.871850][ T6227] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 127.883729][ T6227] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 127.978413][ T6230] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 128.074252][ T6204] delete_channel: no stack [ 128.078416][ T6236] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 128.098936][ T6236] netem: change failed [ 128.288242][ T6244] ieee802154 phy0 wpan0: encryption failed: -22 [ 128.302518][ T6245] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 128.312188][ T6245] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 128.458102][ T5976] veth0_vlan: entered promiscuous mode [ 128.494497][ T5976] veth1_vlan: entered promiscuous mode [ 128.586199][ T5976] veth0_macvtap: entered promiscuous mode [ 128.610886][ T5976] veth1_macvtap: entered promiscuous mode [ 128.729624][ T6253] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.780174][ T5976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.804741][ T5976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.823700][ T6258] rdma_rxe: rxe_newlink: failed to add vcan0 [ 128.833578][ T5976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.849118][ T5976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.862645][ T5976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.898570][ T5976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.930635][ T5976] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.048060][ T6253] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.134550][ T5976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.153712][ T5976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.165691][ T5976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.184525][ T5976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.198595][ T5976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.219557][ T5976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.233939][ T5976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.251713][ T5976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.264640][ T5976] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.348880][ T6253] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.428987][ T5976] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.460900][ T5976] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.485186][ T5976] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.503843][ T5976] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.643854][ T6253] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.784014][ T6291] xt_NFQUEUE: number of queues (27721) out of range (got 91309) [ 129.972877][ T6253] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.004343][ T6253] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.041529][ T1059] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.056274][ T1059] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.084222][ T6253] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.171946][ T6253] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.197817][ T1059] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.225306][ T1059] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.611943][ T6288] delete_channel: no stack [ 130.673221][ T6306] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 130.689875][ T6306] netem: change failed [ 130.777486][ T6311] rdma_rxe: rxe_newlink: failed to add vcan0 [ 130.941200][ T1059] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.268873][ T1059] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.561491][ T1059] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.624552][ T6333] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 131.676749][ T6333] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 131.746360][ T1059] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.101761][ T1059] bridge_slave_1: left allmulticast mode [ 132.134342][ T1059] bridge_slave_1: left promiscuous mode [ 132.147102][ T5133] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 132.158473][ T5133] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 132.169503][ T5133] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 132.179772][ T5133] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 132.188297][ T5133] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 132.195775][ T5133] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 132.246510][ T1059] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.267330][ T6352] xt_NFQUEUE: number of queues (27721) out of range (got 91309) [ 132.284952][ T1059] bridge_slave_0: left allmulticast mode [ 132.299097][ T1059] bridge_slave_0: left promiscuous mode [ 132.305025][ T1059] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.871994][ T6347] delete_channel: no stack [ 133.090364][ T1059] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 133.104971][ T1059] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 133.119932][ T1059] bond0 (unregistering): Released all slaves [ 133.170902][ T6363] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 133.188340][ T6363] netem: change failed [ 133.361864][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.369765][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.393010][ T6373] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.3'. [ 133.450429][ T6378] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 133.471346][ T6373] netlink: 240 bytes leftover after parsing attributes in process `syz-executor.3'. [ 133.533837][ T6350] vcan0 speed is unknown, defaulting to 1000 [ 133.631595][ T6385] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 133.756967][ T6391] bond0: entered promiscuous mode [ 133.767105][ T6391] bond_slave_0: entered promiscuous mode [ 133.788756][ T6391] bond_slave_1: entered promiscuous mode [ 133.813232][ T6391] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 133.839822][ T6391] bond0: left promiscuous mode [ 133.860686][ T6391] bond_slave_0: left promiscuous mode [ 133.872754][ T6391] bond_slave_1: left promiscuous mode [ 133.941723][ T6393] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 133.966095][ T6393] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.974179][ T6393] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.017850][ T6393] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.025335][ T6393] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.217695][ T6402] xt_NFQUEUE: number of queues (27721) out of range (got 91309) [ 134.236575][ T5134] Bluetooth: hci0: command tx timeout [ 134.398151][ T6408] sch_tbf: burst 0 is lower than device lo mtu (14) ! [ 134.716581][ T1059] hsr_slave_0: left promiscuous mode [ 134.740240][ T1059] hsr_slave_1: left promiscuous mode [ 134.750334][ T1059] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.771450][ T1059] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.787921][ T1059] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.795392][ T1059] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.861612][ T1059] veth1_macvtap: left promiscuous mode [ 134.868888][ T1059] veth0_macvtap: left promiscuous mode [ 134.879978][ T1059] veth1_vlan: left promiscuous mode [ 134.885545][ T1059] veth0_vlan: left promiscuous mode [ 135.026183][ T6400] delete_channel: no stack [ 135.434058][ T6432] sctp: [Deprecated]: syz-executor.0 (pid 6432) Use of int in max_burst socket option deprecated. [ 135.434058][ T6432] Use struct sctp_assoc_value instead [ 135.600706][ T6435] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 135.899295][ T1059] team0 (unregistering): Port device team_slave_1 removed [ 135.954782][ T1059] team0 (unregistering): Port device team_slave_0 removed [ 136.316258][ T5134] Bluetooth: hci0: command tx timeout [ 136.603367][ T6350] chnl_net:caif_netlink_parms(): no params data found [ 136.663952][ T6450] netlink: 'syz-executor.0': attribute type 23 has an invalid length. [ 136.689757][ T6450] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 136.727049][ T6450] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.736419][ T6450] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.762604][ T6450] bridge0: entered promiscuous mode [ 136.792736][ T6451] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 136.806588][ T6451] netlink: 'syz-executor.3': attribute type 12 has an invalid length. [ 136.863629][ T6451] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.873584][ T6451] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.883172][ T6451] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.892001][ T6451] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.914011][ T6451] vxlan0: entered promiscuous mode [ 136.994074][ T6461] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 137.164484][ T6481] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 137.322579][ T6350] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.337865][ T6350] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.345226][ T6350] bridge_slave_0: entered allmulticast mode [ 137.353216][ T6350] bridge_slave_0: entered promiscuous mode [ 137.371052][ T6350] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.380431][ T6350] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.409052][ T6350] bridge_slave_1: entered allmulticast mode [ 137.423201][ T6350] bridge_slave_1: entered promiscuous mode [ 137.589243][ T6350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 137.619209][ T6350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 137.716606][ T5174] IPVS: starting estimator thread 0... [ 137.742826][ T6350] team0: Port device team_slave_0 added [ 137.762759][ T6350] team0: Port device team_slave_1 added [ 137.816488][ T6503] IPVS: using max 16 ests per chain, 38400 per kthread [ 137.855803][ T6350] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.866236][ T6350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.899317][ T6350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.962115][ T6350] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.973503][ T6350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.011107][ T6350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 138.161364][ T6350] hsr_slave_0: entered promiscuous mode [ 138.179955][ T6350] hsr_slave_1: entered promiscuous mode [ 138.397929][ T5134] Bluetooth: hci0: command tx timeout [ 138.670110][ T6524] netlink: 16126 bytes leftover after parsing attributes in process `syz-executor.1'. [ 138.696007][ T6524] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.1'. [ 139.103923][ T6350] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 139.137995][ T6350] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 139.159583][ T6350] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 139.174907][ T6350] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 139.418440][ T6350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.476437][ T6350] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.504455][ T5173] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.511912][ T5173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.558371][ T1054] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.565728][ T1054] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.665260][ T6551] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 139.776494][ T6554] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 139.884194][ T6562] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.893289][ T6562] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.905583][ T6562] bridge0: entered promiscuous mode [ 139.925579][ T6562] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.3'. [ 140.135506][ T6350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.159554][ T6571] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 140.331237][ T6583] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 140.476369][ T5134] Bluetooth: hci0: command tx timeout [ 140.598462][ T29] audit: type=1804 audit(1717142528.851:3): pid=6592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir103067931/syzkaller.xkDv6Z/106/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 140.680304][ T6598] hsr_slave_0: left promiscuous mode [ 140.704443][ T6598] hsr_slave_1: left promiscuous mode [ 141.020577][ T6350] veth0_vlan: entered promiscuous mode [ 141.070884][ T6350] veth1_vlan: entered promiscuous mode [ 141.197486][ T6350] veth0_macvtap: entered promiscuous mode [ 141.230937][ T6350] veth1_macvtap: entered promiscuous mode [ 141.328309][ T6350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.341616][ T6350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.384768][ T6350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.420895][ T6350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.443899][ T6350] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.480899][ T6629] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 141.488509][ T6350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.546486][ T6350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.570639][ T6350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.590056][ T6635] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 141.595109][ T6350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.616646][ T6350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.634471][ T6350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.649148][ T6350] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.660316][ T6638] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 141.673262][ T6635] trusted_key: syz-executor.0 sent an empty control message without MSG_MORE. [ 141.704538][ T6350] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.721891][ T6350] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.753801][ T6350] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.781456][ T6350] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.991567][ T6654] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 142.156983][ T6486] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.164905][ T6486] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.270445][ T5680] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.278925][ T6668] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 142.295729][ T5680] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.587028][ T6680] syzkaller0: entered promiscuous mode [ 142.619944][ T6680] syzkaller0: entered allmulticast mode [ 142.821303][ T6692] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 142.934279][ T6695] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 142.959374][ T6695] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 143.004128][ T6695] team0: Device veth1_macvtap failed to register rx_handler [ 143.103762][ T6695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.125073][ T6695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.135097][ T6695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.153301][ T6695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.169150][ T6695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.184257][ T6695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.194633][ T6695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.212129][ T6695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.236803][ T6701] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 143.292565][ T6695] syz-executor.3 (6695) used greatest stack depth: 18672 bytes left [ 144.111574][ T6747] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.3'. [ 144.122172][ T6745] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 145.223507][ T2447] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.493645][ T6774] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 145.613204][ T6774] gretap0: entered promiscuous mode [ 146.218230][ T6788] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 146.572892][ T2447] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.632760][ T6805] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 146.778165][ T2447] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.873565][ T6820] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 146.883859][ T6822] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 146.922634][ T6820] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 146.954199][ T2447] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.985560][ T6824] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 147.052908][ T5133] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 147.065489][ T5133] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 147.074464][ T5133] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 147.089218][ T5133] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 147.101163][ T5133] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 147.113382][ T5133] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 147.259714][ T6828] vcan0 speed is unknown, defaulting to 1000 [ 147.303384][ T6837] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 147.492015][ T2447] bridge_slave_1: left allmulticast mode [ 147.502905][ T2447] bridge_slave_1: left promiscuous mode [ 147.526500][ T2447] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.550873][ T2447] bridge_slave_0: left allmulticast mode [ 147.571001][ T2447] bridge_slave_0: left promiscuous mode [ 147.577050][ T2447] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.262067][ T6871] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 148.542337][ T2447] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 148.558482][ T2447] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 148.570628][ T2447] bond0 (unregistering): Released all slaves [ 148.585028][ T6847] bridge0: left promiscuous mode [ 149.196296][ T5133] Bluetooth: hci0: command tx timeout [ 149.338319][ T6896] xt_CONNSECMARK: invalid mode: 0 [ 149.608008][ T6896] veth0_vlan: entered allmulticast mode [ 150.061259][ T2447] hsr_slave_0: left promiscuous mode [ 150.078343][ T2447] hsr_slave_1: left promiscuous mode [ 150.095468][ T6921] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 150.116337][ T6920] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 150.131485][ T2447] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.151770][ T2447] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.192250][ T2447] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.201133][ T2447] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.253773][ T2447] veth1_macvtap: left promiscuous mode [ 150.260258][ T2447] veth0_macvtap: left promiscuous mode [ 150.272863][ T2447] veth1_vlan: left promiscuous mode [ 150.283755][ T2447] veth0_vlan: left promiscuous mode [ 151.198305][ T2447] team0 (unregistering): Port device team_slave_1 removed [ 151.273582][ T2447] team0 (unregistering): Port device team_slave_0 removed [ 151.297525][ T5133] Bluetooth: hci0: command tx timeout [ 151.969322][ T6828] chnl_net:caif_netlink_parms(): no params data found [ 151.994059][ T6928] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.192885][ T6928] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.243957][ T6937] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 152.343934][ T6928] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.425560][ T6940] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 152.503813][ T6928] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.612784][ T6828] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.643624][ T6828] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.662052][ T6828] bridge_slave_0: entered allmulticast mode [ 152.677697][ T6828] bridge_slave_0: entered promiscuous mode [ 152.713088][ T6828] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.736561][ T6828] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.768603][ T6828] bridge_slave_1: entered allmulticast mode [ 152.776472][ T6828] bridge_slave_1: entered promiscuous mode [ 152.923362][ T6928] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.958845][ T6828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.979047][ T6828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.007471][ T6928] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.080702][ T6928] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.163238][ T6828] team0: Port device team_slave_0 added [ 153.193368][ T6928] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.239356][ T6960] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 153.265688][ T6828] team0: Port device team_slave_1 added [ 153.357295][ T5133] Bluetooth: hci0: command tx timeout [ 153.398646][ T6828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.405698][ T6828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.414046][ T6971] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'. [ 153.494859][ T6972] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 153.496041][ T6828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.563350][ T6828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.572276][ T6828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.625944][ T6828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.764278][ T6828] hsr_slave_0: entered promiscuous mode [ 153.783290][ T6828] hsr_slave_1: entered promiscuous mode [ 153.853927][ T6980] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.862355][ T6980] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.975971][ T6982] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.983249][ T6982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.991805][ T6982] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.999197][ T6982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.037754][ T6982] bridge0: entered promiscuous mode [ 154.043170][ T6982] bridge0: entered allmulticast mode [ 154.059063][ T6981] netlink: 280 bytes leftover after parsing attributes in process `syz-executor.2'. [ 154.069740][ T6981] unsupported nla_type 128 [ 154.832755][ T29] audit: type=1804 audit(1717142543.081:4): pid=6998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3939499382/syzkaller.IjYyig/145/cgroup.controllers" dev="sda1" ino=1941 res=1 errno=0 [ 154.889775][ T6828] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 154.922859][ T7002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.934748][ T7002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.946688][ T7002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.960515][ T7002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.977045][ T7002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.994467][ T7002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.028977][ T6828] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 155.064717][ T6828] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 155.107397][ T6828] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 155.114863][ T7007] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.2'. [ 155.436455][ T5133] Bluetooth: hci0: command tx timeout [ 155.444110][ T29] audit: type=1804 audit(1717142543.691:5): pid=7022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3261336803/syzkaller.FoMGjk/136/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 155.531360][ T6828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.610878][ T6828] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.681771][ T5173] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.689037][ T5173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.750321][ T5173] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.757643][ T5173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.901840][ T7041] x_tables: duplicate underflow at hook 2 [ 155.975087][ T7047] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 156.183569][ T7057] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 156.300713][ T7057] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 156.411883][ T7063] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. [ 156.422297][ T7063] 0ªX¹¦À: renamed from caif0 [ 156.435679][ T7063] 0ªX¹¦À: entered allmulticast mode [ 156.441328][ T7063] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 156.475034][ T6828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.811132][ T7077] IPVS: Unknown mcast interface: caif0 [ 157.062622][ T7105] Bluetooth: MGMT ver 1.22 [ 157.078705][ T6828] veth0_vlan: entered promiscuous mode [ 157.140567][ T6828] veth1_vlan: entered promiscuous mode [ 157.292145][ T6828] veth0_macvtap: entered promiscuous mode [ 157.327414][ T6828] veth1_macvtap: entered promiscuous mode [ 157.349278][ T7114] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 157.399227][ T6828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.416139][ T6828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.433181][ T6828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.446874][ T6828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.472473][ T6828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 157.511705][ T6828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.547192][ T6828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.573614][ T6828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.587428][ T6828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.608513][ T6828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.615368][ T7123] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 157.642213][ T6828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.670354][ T6828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 157.719457][ T7129] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 157.758375][ T6828] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.795965][ T6828] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.804773][ T6828] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.828570][ T6828] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.943003][ T7133] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 158.109011][ T5129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.136505][ T5129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.223104][ T951] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.249059][ T951] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.259458][ T7146] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 158.519504][ T7158] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 158.523066][ T7157] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 158.541447][ T7157] File: /root/syzkaller-testdir3261336803/syzkaller.FoMGjk/144/memory.events PID: 7157 Comm: syz-executor.2 [ 158.741891][ T7165] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 159.117047][ T7176] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 159.414220][ T7189] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 159.426860][ T7192] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 159.444236][ T7189] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 159.453711][ T7189] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'. [ 159.667606][ T7204] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 160.311126][ T5680] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.618100][ T7236] x_tables: duplicate underflow at hook 1 [ 160.993647][ T5680] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.135249][ T5680] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.190335][ T7260] netlink: 'syz-executor.2': attribute type 19 has an invalid length. [ 161.383531][ T5680] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.428237][ T7264] __nla_validate_parse: 2 callbacks suppressed [ 161.428263][ T7264] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 161.492930][ T5134] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 161.504387][ T5134] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 161.522968][ T5134] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 161.534626][ T5134] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 161.542966][ T5134] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 161.556634][ T5134] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 161.642263][ T7269] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 161.653817][ T7269] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 161.712557][ T7273] vcan0 speed is unknown, defaulting to 1000 [ 161.982490][ T5680] bridge_slave_1: left allmulticast mode [ 161.993831][ T5680] bridge_slave_1: left promiscuous mode [ 162.001720][ T5680] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.031300][ T5680] bridge_slave_0: left allmulticast mode [ 162.041121][ T5680] bridge_slave_0: left promiscuous mode [ 162.051879][ T5680] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.847775][ T5680] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 162.862912][ T5680] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 162.885464][ T5680] bond0 (unregistering): Released all slaves [ 163.260695][ T7328] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 163.287666][ T7328] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 163.596193][ T5134] Bluetooth: hci0: command tx timeout [ 163.606290][ T7346] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 164.019123][ T5680] hsr_slave_0: left promiscuous mode [ 164.028126][ T5680] hsr_slave_1: left promiscuous mode [ 164.038506][ T5680] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.053108][ T5680] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.063289][ T5680] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.074893][ T5680] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.124747][ T5680] veth1_macvtap: left promiscuous mode [ 164.132541][ T5680] veth0_macvtap: left promiscuous mode [ 164.142337][ T5680] veth1_vlan: left promiscuous mode [ 164.149535][ T5680] veth0_vlan: left promiscuous mode [ 164.819734][ T5680] team0 (unregistering): Port device team_slave_1 removed [ 164.866602][ T5680] team0 (unregistering): Port device team_slave_0 removed [ 165.546190][ T7273] chnl_net:caif_netlink_parms(): no params data found [ 165.676124][ T5134] Bluetooth: hci0: command tx timeout [ 165.838248][ T7273] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.871223][ T7273] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.893382][ T7273] bridge_slave_0: entered allmulticast mode [ 165.906287][ T7273] bridge_slave_0: entered promiscuous mode [ 165.961152][ T7273] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.972773][ T7273] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.991897][ T7273] bridge_slave_1: entered allmulticast mode [ 166.017311][ T7273] bridge_slave_1: entered promiscuous mode [ 166.114053][ T7413] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 166.125615][ T7413] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 166.144516][ T7273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.182814][ T7273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.304593][ T7273] team0: Port device team_slave_0 added [ 166.324524][ T7411] bridge0: port 3(vlan2) entered blocking state [ 166.332196][ T7411] bridge0: port 3(vlan2) entered disabled state [ 166.338986][ T7411] vlan2: entered allmulticast mode [ 166.347570][ T7411] vlan2: left allmulticast mode [ 166.368879][ T7273] team0: Port device team_slave_1 added [ 166.489691][ T7273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.503770][ T7273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.540625][ T7273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.573193][ T7418] bond_slave_1: entered promiscuous mode [ 166.592583][ T7418] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 166.631790][ T7418] bond_slave_1: left promiscuous mode [ 166.706314][ T7273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.713437][ T7273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.749661][ T7273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.911876][ T7273] hsr_slave_0: entered promiscuous mode [ 166.932588][ T7273] hsr_slave_1: entered promiscuous mode [ 167.735290][ T7454] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 167.764401][ T5134] Bluetooth: hci0: command tx timeout [ 167.822863][ T7454] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 167.928793][ T7273] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 167.976752][ T7273] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 167.995567][ T7273] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 168.049216][ T7273] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 168.109494][ T29] audit: type=1804 audit(1717142556.361:6): pid=7476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3939499382/syzkaller.IjYyig/175/cgroup.controllers" dev="sda1" ino=1961 res=1 errno=0 [ 168.354309][ T7273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.414671][ T7273] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.438560][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.445818][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.470506][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.477805][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.187420][ T7273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.203738][ T7501] netlink: 29 bytes leftover after parsing attributes in process `syz-executor.2'. [ 169.226200][ T7501] netlink: 29 bytes leftover after parsing attributes in process `syz-executor.2'. [ 169.253595][ T7501] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 169.361323][ T7499] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.2'. [ 169.836607][ T5134] Bluetooth: hci0: command tx timeout [ 169.886896][ T7522] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 169.895049][ T7522] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.2'. [ 169.987581][ T7522] [ 169.989981][ T7522] ====================================================== [ 169.997027][ T7522] WARNING: possible circular locking dependency detected [ 170.000276][ T5134] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 170.004051][ T7522] 6.9.0-syzkaller-12128-g068648aab72c #0 Not tainted [ 170.004066][ T7522] ------------------------------------------------------ [ 170.004075][ T7522] syz-executor.2/7522 is trying to acquire lock: [ 170.004088][ T7522] ffff88801504e6d8 [ 170.012501][ T5134] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 170.017694][ T7522] (&n->list_lock){-.-.}-{2:2}, at: get_partial_node+0x36/0x280 [ 170.017784][ T7522] [ 170.017784][ T7522] but task is already holding lock: [ 170.017793][ T7522] ffff88801e8551f8 (&trie->lock [ 170.025963][ T5134] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 170.031229][ T7522] ){-.-.}-{2:2}, at: trie_update_elem+0xc8/0xc00 [ 170.036523][ T5134] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 170.041911][ T7522] [ 170.041911][ T7522] which lock already depends on the new lock. [ 170.041911][ T7522] [ 170.041923][ T7522] [ 170.041923][ T7522] the existing dependency chain (in reverse order) is: [ 170.041932][ T7522] [ 170.041932][ T7522] -> #1 (&trie->lock){-.-.}-{2:2}: [ 170.041968][ T7522] lock_acquire+0x1ed/0x550 [ 170.041995][ T7522] _raw_spin_lock_irqsave+0xd5/0x120 [ 170.042034][ T7522] trie_delete_elem+0x96/0x6a0 [ 170.042058][ T7522] 0xffffffffa0002052 [ 170.042079][ T7522] bpf_trace_run2+0x2ec/0x540 [ 170.042109][ T7522] trace_contention_end+0x114/0x140 [ 170.042138][ T7522] __pv_queued_spin_lock_slowpath+0xb81/0xdc0 [ 170.042174][ T7522] queued_spin_lock_slowpath+0x42/0x50 [ 170.052146][ T5134] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 170.057152][ T7522] do_raw_spin_lock+0x272/0x370 [ 170.057200][ T7522] _raw_spin_lock_irqsave+0xe1/0x120 [ 170.057227][ T7522] __slab_free+0xec/0x3d0 [ 170.057253][ T7522] qlist_free_all+0x9e/0x140 [ 170.062596][ T5134] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 170.069020][ T7522] kasan_quarantine_reduce+0x14f/0x170 [ 170.069052][ T7522] __kasan_slab_alloc+0x23/0x80 [ 170.069077][ T7522] kmem_cache_alloc_noprof+0x135/0x2a0 [ 170.069109][ T7522] getname_flags+0xbd/0x4f0 [ 170.069140][ T7522] __x64_sys_mkdirat+0x7c/0xa0 [ 170.111310][ T7525] vcan0 speed is unknown, defaulting to 1000 [ 170.114168][ T7522] do_syscall_64+0xf3/0x230 [ 170.114199][ T7522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.233963][ T7522] [ 170.233963][ T7522] -> #0 (&n->list_lock){-.-.}-{2:2}: [ 170.241502][ T7522] validate_chain+0x18e0/0x5900 [ 170.246924][ T7522] __lock_acquire+0x1346/0x1fd0 [ 170.252422][ T7522] lock_acquire+0x1ed/0x550 [ 170.257521][ T7522] _raw_spin_lock_irqsave+0xd5/0x120 [ 170.263379][ T7522] get_partial_node+0x36/0x280 [ 170.268719][ T7522] ___slab_alloc+0xc17/0x14b0 [ 170.273994][ T7522] __slab_alloc+0x58/0xa0 [ 170.278884][ T7522] __kmalloc_node_noprof+0x286/0x440 [ 170.284730][ T7522] bpf_map_kmalloc_node+0xd3/0x1c0 [ 170.290401][ T7522] trie_update_elem+0x1cd/0xc00 [ 170.295992][ T7522] bpf_map_update_value+0x4d3/0x540 [ 170.301768][ T7522] map_update_elem+0x53a/0x6f0 [ 170.307107][ T7522] __sys_bpf+0x76f/0x810 [ 170.311957][ T7522] __x64_sys_bpf+0x7c/0x90 [ 170.316961][ T7522] do_syscall_64+0xf3/0x230 [ 170.322057][ T7522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.328531][ T7522] [ 170.328531][ T7522] other info that might help us debug this: [ 170.328531][ T7522] 2024/05/31 08:02:38 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 170.338796][ T7522] Possible unsafe locking scenario: [ 170.338796][ T7522] [ 170.346358][ T7522] CPU0 CPU1 [ 170.351754][ T7522] ---- ---- [ 170.357152][ T7522] lock(&trie->lock); [ 170.361348][ T7522] lock(&n->list_lock); [ 170.368147][ T7522] lock(&trie->lock); [ 170.374790][ T7522] lock(&n->list_lock); [ 170.379068][ T7522] [ 170.379068][ T7522] *** DEADLOCK *** [ 170.379068][ T7522] [ 170.387231][ T7522] 2 locks held by syz-executor.2/7522: [ 170.392721][ T7522] #0: ffffffff8e333e60 (rcu_read_lock){....}-{1:2}, at: bpf_map_update_value+0x3c4/0x540 [ 170.402714][ T7522] #1: ffff88801e8551f8 (&trie->lock){-.-.}-{2:2}, at: trie_update_elem+0xc8/0xc00 [ 170.412102][ T7522] [ 170.412102][ T7522] stack backtrace: [ 170.418034][ T7522] CPU: 1 PID: 7522 Comm: syz-executor.2 Not tainted 6.9.0-syzkaller-12128-g068648aab72c #0 [ 170.428097][ T7522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 170.438201][ T7522] Call Trace: [ 170.441519][ T7522] [ 170.444481][ T7522] dump_stack_lvl+0x241/0x360 [ 170.449201][ T7522] ? __pfx_dump_stack_lvl+0x10/0x10 [ 170.454436][ T7522] ? print_circular_bug+0x130/0x1a0 [ 170.459678][ T7522] check_noncircular+0x36a/0x4a0 [ 170.464660][ T7522] ? __pfx_check_noncircular+0x10/0x10 [ 170.470163][ T7522] ? lockdep_lock+0x123/0x2b0 [ 170.474874][ T7522] ? stack_trace_save+0x118/0x1d0 [ 170.479935][ T7522] ? __pfx_stack_trace_save+0x10/0x10 [ 170.485346][ T7522] ? check_noncircular+0x259/0x4a0 [ 170.490498][ T7522] ? _find_first_zero_bit+0xd3/0x100 [ 170.495842][ T7522] validate_chain+0x18e0/0x5900 [ 170.500760][ T7522] ? __pfx_validate_chain+0x10/0x10 [ 170.506012][ T7522] ? __pfx_validate_chain+0x10/0x10 [ 170.511248][ T7522] ? mark_lock+0x9a/0x350 [ 170.515607][ T7522] __lock_acquire+0x1346/0x1fd0 [ 170.520509][ T7522] lock_acquire+0x1ed/0x550 [ 170.525045][ T7522] ? get_partial_node+0x36/0x280 [ 170.530026][ T7522] ? __lock_acquire+0x1346/0x1fd0 [ 170.535095][ T7522] ? __pfx_lock_acquire+0x10/0x10 [ 170.540159][ T7522] ? ___slab_alloc+0x265/0x14b0 [ 170.545043][ T7522] _raw_spin_lock_irqsave+0xd5/0x120 [ 170.550363][ T7522] ? get_partial_node+0x36/0x280 [ 170.555334][ T7522] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 170.561611][ T7522] ? __pfx_lock_release+0x10/0x10 [ 170.566682][ T7522] get_partial_node+0x36/0x280 [ 170.571492][ T7522] ___slab_alloc+0xc17/0x14b0 [ 170.576286][ T7522] ? bpf_map_kmalloc_node+0xd3/0x1c0 [ 170.581602][ T7522] ? bpf_map_kmalloc_node+0xd3/0x1c0 [ 170.586916][ T7522] __slab_alloc+0x58/0xa0 [ 170.591273][ T7522] __kmalloc_node_noprof+0x286/0x440 [ 170.596594][ T7522] ? bpf_map_kmalloc_node+0xd3/0x1c0 [ 170.601912][ T7522] bpf_map_kmalloc_node+0xd3/0x1c0 [ 170.607062][ T7522] trie_update_elem+0x1cd/0xc00 [ 170.611942][ T7522] ? __might_fault+0xaa/0x120 [ 170.616668][ T7522] bpf_map_update_value+0x4d3/0x540 [ 170.621904][ T7522] map_update_elem+0x53a/0x6f0 [ 170.626710][ T7522] __sys_bpf+0x76f/0x810 [ 170.631012][ T7522] ? __pfx___sys_bpf+0x10/0x10 [ 170.635812][ T7522] ? __rseq_handle_notify_resume+0x353/0x14e0 [ 170.641937][ T7522] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 170.647957][ T7522] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 170.654320][ T7522] ? do_syscall_64+0x100/0x230 [ 170.659116][ T7522] __x64_sys_bpf+0x7c/0x90 [ 170.663579][ T7522] do_syscall_64+0xf3/0x230 [ 170.668119][ T7522] ? clear_bhb_loop+0x35/0x90 [ 170.672823][ T7522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.678776][ T7522] RIP: 0033:0x7f6bc647cee9 [ 170.683215][ T7522] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 170.702858][ T7522] RSP: 002b:00007f6bc71940c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 170.711309][ T7522] RAX: ffffffffffffffda RBX: 00007f6bc65b3fa0 RCX: 00007f6bc647cee9 [ 170.719318][ T7522] RDX: 0000000000000020 RSI: 0000000020000500 RDI: 0000000000000002 [ 170.727336][ T7522] RBP: 00007f6bc64c947f R08: 0000000000000000 R09: 0000000000000000 [ 170.735353][ T7522] R10: 0000000000000000 R11: 0000000000000246 R