last executing test programs: 2.267718557s ago: executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f0000000440)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x0, 0x220, 0x110, 0x110, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="fce86e138cee", @loopback, @empty}}}, {{@arp={@remote, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ipvlan1\x00', 'ip6gre0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @multicast2, @multicast2}}}, {{@arp={@local, @remote, 0x0, 0x0, 0x0, 0x0, {@mac}, {@mac=@dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_macvtap\x00', 'bond_slave_1\x00'}, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) write$cgroup_subtree(r1, 0x0, 0x3260b) 2.058759207s ago: executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r4 = socket$isdn(0x22, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = getpid() sendmsg$nl_generic(r5, 0x0, 0x0) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0x3e9, 0x20, 0x70bd26, 0x25dfdbfe, {0x20, 0x1, 0x0, r6, 0x0, 0x800, 0x8, 0x80000000, 0x0, 0x101, 0x4}, ["", "", "", "", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4800}, 0x20044040) gettid() getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@ipv4={""/10, ""/2, @local}, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @empty}}, 0x0, @in=@remote}}, &(0x7f0000000140)=0xe8) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000002c0)) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000300)) r8 = gettid() r9 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000580)='cpu.max.burst\x00', 0x2, 0x0) r10 = socket(0x10, 0x2, 0xffd) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB='&\x00\x00\x00\a', @ANYRES16=r11], 0xd) sendmsg$netlink(r2, &(0x7f0000003180)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfc, 0x2000000}, 0xc, &(0x7f0000000380)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="b413000000000003fdbf76c4137a9ee027bd70f5", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="a8e648fd90922fb27ff414adfb35bdbd7e88a62b2f15886dfffe7eadba8ed5acf1ff43626b31520fec5ccf9e0019d989c6f18df41400cd00fc0000000000000000000000000000000800b200", @ANYRES32=r0, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="9301468008000b00", @ANYRES32=r6, @ANYBLOB="252777cdaac7e2417e992800297f49f2170b757ec44eef0c043cec99b34889f427f49f898025e4860b419ec4c52a769673ae311d2500c88f94e15478bfb93d1354f5a63f30999d4f1d6a10e201337d751e8fde2ddc1cdd5d6a6d2e371c55d232ad14345c443b575d4a30f39aab263f576a4d62f1fdc3e3960ff242f7d54bfe809e7ebf1b502117dc4cb58d8abb4817b23e119bc024cc84117c96729f15defc0ac4e34021cccd71b236b14ff53cb608003700", @ANYRES32=r4, @ANYBLOB="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"], 0x13b4}, {&(0x7f00000000c0)={0x5c, 0x2c, 0x100, 0x70bd2b, 0x25dfdbfc, "", [@generic="a0718a7135229b3f5686b2be7abf327f4ca0a2beaedd3073162726a6f99eb33cab40a4800d6c23777b05c42171e1cbe711b98021c423e2678872b4f5205880af59f04328c042770d512e9c"]}, 0x5c}, {&(0x7f0000000480)={0xc0, 0x39, 0x200, 0x70bd2a, 0x25dfdbfc, "", [@typed={0x8, 0x108, 0x0, 0x0, @uid=0xee01}, @typed={0x8, 0xca, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0xc, 0x63, 0x0, 0x0, @u64=0x7}, @nested={0x4, 0xef}, @nested={0x77, 0xab, 0x0, 0x1, [@generic="03fa9474fe452baf236c5bda5b94231d2aad9ca77ca455cd9614dfef0f4fbef7179d964d60eb4ac71ace0e540936656b820e134d23eb5bf321b43adcad32b37e51da39991324d2e951d7830906d6d914ea7474cbdd3b741015694da26a7973f9807b0fce6cc9b5c9ba98c8fb4cb8ae3cfede86"]}, @typed={0xc, 0x68, 0x0, 0x0, @u64=0x4}, @generic="979b0cb8", @typed={0x8, 0xee, 0x0, 0x0, @uid=r7}]}, 0xc0}, {&(0x7f0000003640)={0x27c, 0x2c, 0x2, 0x70bd2b, 0x25dfdbfe, "", [@nested={0x3c, 0x42, 0x0, 0x1, [@generic="d1a5b9a8d0af231d3608d59bb1c1fd3f4c7cec5b5205aa4050d6ba60f07203f683177856acb0c694e8101a0b59a242379b923c155ca5ff25", @generic]}, @typed={0x6, 0xf2, 0x0, 0x0, @str='.\x00'}, @nested={0x10, 0x8b, 0x0, 0x1, [@typed={0xc, 0x112, 0x0, 0x0, @u64}]}, @generic="0fef949faa7e2c7f0029d5527a4303a42aeeebc555dbf1f00bd3919835377f029d318275cea3b331ad3906386f269d77fed2bde404ee854ebdbe47e807b2219f0c612847b68f68b0cd79ea05a04d93ff72c28710fe68ac5779fec52eff0c675c630d9d961ef07f41cf57968126350ae81f04db2eda", @typed={0x8, 0x121, 0x0, 0x0, @u32=0x1ff}, @nested={0x189, 0x7, 0x0, 0x1, [@typed={0x4, 0xc0}, @generic="48021697bbb6208a52c12b8d955903615a565f52d624cfeb04c39cdb52dd86d69efb902569cd2bdf1460db62f93a774612cad7c7f69535f7cc57dca94e0187", @typed={0x8, 0x11d, 0x0, 0x0, @ipv4=@remote}, @generic="cfe6984d2f5218ad73926a693270aadf61b838b29ba09605735126c1f6cd6288bbd2dcba78a3178e14bcda3ca9a5186c8e74191d38826ebaa2db33db757417a6d10fdcc623eb7aa15d9ef1d03a1677d56b48ed883664a302e9c8bfdca77752c2399715138e076318a73f99403854b341886fa4ab24d8b99d4ab16a13c7aed60acd512f049dc8747cc9654aa0791d796c4c3881a3e04ed2e6eb514de99e92d958f343552e8c470b04937a98008c16ed60daac4eb73e16c5301b0f91c93123f0b4d0bd8333ab4aa634367edb02c18863d0d7c4e9f73e15c7fc0acc", @typed={0xc, 0x55, 0x0, 0x0, @u64=0x1}, @generic="752eec858224ca78a3223f23949f64def851b3415f615d5ed266a0493861c2e80af204157c41b6a938ff973d2bd21c314883c9a5e633122e7c6cdee7acdf70878a3152277ee85e6f795d62ca72e725db6fd4b6c5"]}, @typed={0xc, 0x98, 0x0, 0x0, @u64=0x9ed9}]}, 0x27c}, {&(0x7f0000001e80)={0xc8, 0x2b, 0x200, 0x70bd25, 0x25dfdbfe, "", [@nested={0xc, 0xfd, 0x0, 0x1, [@typed={0x8, 0x46, 0x0, 0x0, @u32=0x7}]}, @typed={0xc, 0xd8, 0x0, 0x0, @u64=0x1}, @typed={0x8, 0x2f, 0x0, 0x0, @ipv4=@remote}, @generic="a486d66d4c1a47ce606d73982d1b9fcc74055dcfc8db2d6e2b4585689a3de2c2750519090365b9002fb8e87ac0ff276d4aae3962d57b3a3991436567010033f723e3fe5d23afda10ea34203771b03a63416cf1e76e978bab14b3c95830697bd957e3dd63c9a82617da57362e28b9586ebd26fc8d0250258a5868e25f46d0c5e29c9cf69b16efd1185f9afb18afcebf3460c1b70c8d37"]}, 0xc8}, {&(0x7f0000001f80)=ANY=[@ANYBLOB="f211120000", @ANYRES32=r2, @ANYBLOB="0c000e006e6c383032313100c4110b80a72e80c04bb4b925e13985157a9e1fa408d02149baaf611d29f9ad6fafe6333f65c54c6f7b002ad3d8c47012148f301350776dafb924781f3e18a140918b1d61006c4365e55a80782aa640bc2819aa19cd97ba297e1b55925d5cbfed22c235c6a4f5ee36731e2104d3a3cd26336880afd41c365192edf2ee23bb0ccb6f32a8db196f2796f79f4bbceeda311df1eaaff1124c1017bd9ef8dabbca484b1ccea5666b2be0a466b298ae9acc24cf53e263bb4546a90fae50308ffcd9a6a734360ad41ab7e500fd9d1fe5f36bba94d85ee59d5727178a6548c0bd4e0669d3f02b278fa374e626ab7b64f108565681fcb629e5f534c244f3cd8f31a5cb1f72696c66b3e158d98da7fd7171b98f8942be2f99ac5839f8103c78155ceb722b1e5c82c6a8e37177e2a54e306150736557e5dcb65de3cd779962f68bfc419abfb006cb1d72fc8440c43f7969d3f26503fed3974f2a9f1c81a540030c9443d895947277ad4b4e91cf45c023a22c00a97606bc832fa95fd2118e03e8237ed39c7efa945eae06176e59191307f20bf72721c5cb9eeb9055d96f4e04414d841ec3566b57832e1559144d430ee081f737de7a225c0703c59edddc1b08a71e89950964b07a68962d1475b024e906330ef2c581cdbf0f8e400242703d6fbbc41b72f6bbe01f31c7c8fd9ef7dd6d02e5b75965f53beb4fc522a85343a55a0c3c1bfd958ddda7a4a9bc4dd9d4cb1965a0c58e12038f50eeac852e44f20108aa8089ac92229b32fafafdd663852b56ea1ee9dd8936df1ade3736f5df22f37409da0d4b8367873f42ef1cc905fe0f7b17000abf3362888526688653d3d290f3cc5666eb15ff05a601c8cecc20ddcc5afa28eecec9ee1032911bb51c70da89f52140cb26ad1926edefc3956eac418c8e2dbbfb4244af938ac571ff7e841e133d8c2630239967b250e800ecfc993e55a985b9772a5f807e85019cfcac133dcb5f6473df53f7cc9de491cda7bb8d1450392aacf22d622f9719fb176a4a4ac74211dbf457cafe91f10067eaa7b029d967dcba77b2f6a313adcace22da150db6b57b66dca182a1b1120a91b5314e88f8aa57f2bad7e82264e1bf0b60ef02f6e9831b4af49c9e35b938c65ac2c73c1344f09e289074f56627faf918985225eeeeeb7417a76cef465d260a416edbabdb05ce6ed9fae264a105633e6927e4518c49f1dc0b48a5d5dea6ccf5ecda4ade2c607a8d643e0ff57557bd353fad2007c4301a456f561360f9e84a92f839ff26935280d82583913e8b05ff02a44da662e546a3821a2afd9602f5b55ea7376d83be485d8ca75f199627973a4aa0139f097d3f7f58b51afd50c0f3f2f5324deb8d7b59feee01917489cafe8821143b2d7acc1b17385da97f8fac5dc4f5c7022fd9a363db4a03e7ec7eebc45c90ebf840811f78dda82a3f95764c0f6b31f8e37cee6251c596fd5d1480fcc40d190d56540e2ba30151767c4fe04cd3df4956397465b31ad2894f58e76220027847549ac509ad50b4ab6244026ab047462bc1e095f01ccc5ced59ce01d1e5824875cf64162eee8160daabf4f878f17ead08e72575be255762577cd0d6b8d96ef6bba271088ed12e69250eeeeaa218108ab82f3c84848def86046359349d96d80329ca2e2fde4987c789b233cf14a6124541f1c016ab61f5c1ba8224e931f98a7adcc72d8a41554e3c2ae20d4a2f962c3d3c136edfbfe64a997a80a4e8c63ed1258411e7695b67054f1f2fcdb821a2f0ec78e4a9a9d9bb59aa45f458ecc43e3fe78967c680b3f7b6a16771340b85e59e144590d7f4d9c074216262a16af5f6ca956dcef48f8f2c2eb0290adcb10c4d9aa99ee7b512e1227bdd2bfe68a9b210e4ecdb61c183bf2df52cae7da622e6f31102e032fc4befe2142d6e23153aa67e5e11154e9bf6a3a6d247c3cafb50a282f78cd92b01b39f2798d9539582dd1bdcd33eb968d7286ca7a873ad4c196f0b711134517e69ae1bd3c2cc91b582e351c9120aa2518161737378639eabd0497bfabde34498a5d90ae417f5a0839597701a0951ae69d611a2f553d1cd0328fac8d7c68066b6120cb7a1d0dca068f203bf8653627dea3376a4ef008f09d19404e2af89641ebe100efdaee8de74a3c10b4327a1f390c58a0c8f205fdbc46ff1efeeb9f39d8fc1d54a3efc554348c78aca321d20e9b55930e072193fccd77c60f22be8e9c0c7bab9810be92a1db2bb7e657c0ad5bbbdd9142fdefc3ab33ad47df75510d5dab4dd909a2722084030956a240eaa50a1edd8727e6a67c0bd58aeb98b87b5ea8f0af8ca8a58f56b694521de7b4d678f1099307f0fdf4328ea4fcfe4632aeebc1d95f2dd3cdc867a32c205337b8f0eea5889eb43725b6c876d2fd5b7ed9498103ecb83e7727e40d065bd6caca12efd4333b3a9afd4c88c44f1a0957b0d89efc81238d4de9437fa58aa4e9ddae0d337ce8122d8bfa0dde50af5ea8f52941bcf110c92ba6fb803947605f36205329bbbb2b22e4cedef5784757190a872d6b2566ce3e551dc366e84e2195ee85922e97834cf65bd4c16a08d387f255611b9605f5b5cfc2339f0c7bdb2ba4d7b652730fc0e6dd2af2414e911384a4d7f73a0086cf74e9f6783eeeb37a67fa793c0423594f85e417b5e4491dec470b164a0ef0aacbf9632c5cc4c3edf892320fa18ae82514a575dfe885ab686a5957321d2ebc9e8102ef84f4360325b2054e8b77997730eda987e56759c69d2b328b069281a6fa110ca8a86373255709af69144105d6cf3aa258c66798a195187932fb9bd4f2425891d5eb45d4efc61659887237296e95c2e817b0ffd4a3ce06e05f7680de652e46b1fff8b87db749fb29cab6d73a45d2ed9b35d141ce32b7bf714b0c3ab802d589ef74ad426f8d36e7a16f5253fe3f0bca71b4cbb637f2cc156af1c87e321faaff89b8677c903b77069d9e8175ad140b4c1d9462f9adde0c84cbb8be28047d6b9602c2ce3be21c2d2efadee0e8bb7c7a96087142a73130e4a136aee9982affb2832872017c59d40e7210d383c2ed20d2a9574ef62a63f657eac60a080ec43976b12121117809343e1a45851f2874ef59ea3cd080d7f225d6c0e5a2966afcea748e88e750ef09dbf7212e3bd1a8d36c4bf43fea2fd04a199152ef2a44ad097135682b41d56f0d27f85baccb40e340bb6b436234edec43c91244cb4676c869d85a679c474584cd9d1b612310b2be39df43d3df50b42fee248fc0de272625b083c6d6ca53744869b23fbe0b5815d64da7d708b51a0f9a8ef8418601bab7132c8d3b9cee0f02b509b7a856ca54df768b658c8301b734518a7e9c26654693bab76a152c05393b6e79d7156cd3f1e90151b03886b8f7919d215a63844805560e43d0d348d45d9f160e198f164725347bb6b2830f898446c2d652a796747644af68f316886929829536efc1838fadc05a81c3fa5d9e4c1362b6aa57c2cf1d7c4928fbbeced43358cfb6a5a04ebb6eeeaa9e4639fa7290ad452827b83e3c3475e0a97e3835575c46f4a438123394eecbdf852e85dade0b3a5b0a759251b2eee87f9fef4c7e22e73913ff697b279356ce003faab5f3ef71aeaf4b6ab84dec39a3345523e0407c77c42755353e2f29e2682c0c7fbe692f90bb0cfa0ecab8e106e3fad8900078eea06fe48a451e9b1e73e1e081c25023a49f0ed768c7be88b630d5addba9bc4e730a6fa208d469c5f11c1dddf09a57a051e68b0991319696b7e03c9114273a17fb663a011a684204e3aa59444d5f9b54fd9013d708da3eea081f93769b61b20cb7e0f0e6fe5d594534f5ebe1b3643f341cdc13206333749d3c3dc5c4d7ed5a0d205c77f57ee3d94291aff627b5a391c74016da89f0ab56d6fda4f7199a50d9627c740cf7193699c911bff753117c179f745d86aaeb0c12d84d9cfd8008fbdfa6fbff73439f389fd7d6c2076d5ef9d9794eb3bf2b39c62a60da29c1bafab4393eeb4060b87b429be679cdd286a09128203aac580e30f6981d597e9f719d31e7e9bb04ffc834f25a778431ea34b643d362adcc8ca3adac99e9d1853c5bb8dc29fc6aea23cc747428e1a968ef1f7d1f7d8baf272a5dd6889547ed1741de51c7712203d63ee4bbc0efa1feddc68a48fb2fff320b00c8f95bfe53cf9abd85d178ec8953f0551d8ea121094ed7862edc27e4b3c3ec428b559a83be8bd8b0a34bc890447d583a9cf78890589f254f177500741304b1f9a95fe2681147f7be39f898fc6614ef2cd8a37fb19e0c2220bddc1d5062e6b346e349b0cd0e3f565f5056380480b8f6e2bd9abc8f92760df77f5403597df31f5239fde70b5ee5531b30591dc8adac978375d0da04e5dfb8c4500124aeabdf888588e02380c81affbe7bf4d8c67f8c7190fc36432a2d0c254e1490231cb5e4e55ffa4dc7540d566ca18a13f2b20659d6e08c0d28c43d30af957bf66ed0196e19997f373cc2151b4cad44336d6ffa03634e7f9304b7cf3a55334e4e002090b2cee338f38679d0a8d2c8af1a49640e9f91ef9b1e17f70cd7a18b3f58219c811852d7bdd54d39d73a147551d8987657be339e5b5fcf5074caa9a6b14da378e22af851cbde9e2f5848cbc6533ebf287f893eb30401a1f74bbba14bfb8993edfa0638b635a2e269c9ad9fa8cc1f8e2a0843d79a4530a30602042b3812c4856c115cdc2755f10f49cbd04bd2df6cae1079da6b14d11dc7399d0eeb7ad0e3fad508b48721742127b0f28ad6c25eb0da871b2fec8f9ebf79ec92881252cfe81c684add132c8bf8592b67c9f9a557107fda18b56828ff32ddaf3adf5dc9f073ed7c00ca19021a423799ae57025a90202fadcb59dec204b1c3134be2fdc34dd55b9daa965b718f662b12114dc9c6c08025e9dba5a287183b4dfdfe0293177ee2edbc11db1c359d37a7f1d892140d441b821e077b4c2f4c220e2ed3402923f2715614258ee88164e3e5073d8c0c77f878bec57cc869dd0d9cbe301e260f460f5e6eae6a8a9a07bc600ff5b6e679371d74661d41fa5b4644e6d3eba89133ce74f40441edf48662efdfc45191eac4de83db54d9d97987692ede8167e8e12f5357efe0c1153bc40474b385e88194bd157369d060f9f7e15fd4f3e2c5bd24bb949e6c013d7dde66cfc95f8c882be8e772a8f7fc9d2141bfd0c74887eb9165b179095a69edcd3807a226e64e2c948dea9e231e3c8b28a84d9ed2f4572d69572b625bb4dedb7d53df57a228329b3e3b9179c826abdb1a1c3757a7d280581e368bee56f39cebdec105acc4ef8f5b446aa41d3b7194f405e8bb9842c60bd53278278ff3b2eb9b8c1104bb6678f4134a2fed6d676fd1401788cd6824799bb44182bf5ac608a95f783bab92d084169ed8f0feae6048b26d3dfc7a2515d4670cdd5871b88f4f10f735a4c2092b8210ab25cd1685970d6a5c001192d1b2bf20392c4b81761c27544704c1cb5337bd0de9a0a4a772920708604a43eed81616aad19432d0b8af0757ca7722ae1702b76dac735ccd77a41c8619815578ac006c559e9c4720fa473e540df9fd6905c1d68243cbdd4880e5a76ae3b8284cd8cfee1fdb2b7ff8bb722de3454fafd9c1b00ab559b840297a13364bfa0b59d36e172c14d523508e5161e48ef6b", @ANYRES32=r8, @ANYBLOB], 0x11f0}], 0x6, &(0x7f00000005c0)=[@rights={{0x1c, 0x1, 0x1, [r2, r9, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, r11}}}, @rights={{0x24, 0x1, 0x1, [r0, r4, r4, r4, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r2]}}], 0x80, 0x20004005}, 0x20000000) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$xdp(0xffffffffffffffff, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) 2.037554742s ago: executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000005c0)={@in6={{0xa, 0x8, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x1}}, 0x0, 0x0, 0x35, 0x0, "317f83735b4bb1eadc74d9e27798c831eec04c24eeec7ff3d3137a508003d2d5c89ab022687636457b9862766c1bfea4e0ffff3c6a4caeaf049a572a9774d3b882eb3b4a66c5ec48c29f065d00"}, 0xd8) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "031ecb7fbd1aef3c", "bd5cdf2b938bcf86090000001e0000008000", "0eb895dd", "81ae18a412aeadde"}, 0x38) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0x8, 0x4) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x4e21, 0x0, @empty, 0xfffff001}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800afb51cda22e330c7390000", @ANYRES16=r6, @ANYRES16=r6, @ANYRES32=0x0, @ANYBLOB="2ad3c0002a", @ANYRES32=r2, @ANYRES8=0x0], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c030000", @ANYRESOCT=r4, @ANYBLOB="010000000000000000006604000008000300", @ANYRES32=r4, @ANYRES32=r3], 0x4c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) close(r7) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000340)) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x2}, 0x10}, 0x90) r9 = socket$kcm(0x10, 0x7, 0x4) r10 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r10, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) sendmsg$kcm(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000004c0)="5a572004990cd26df32a6549025a98fdb4772222a437354631043e6f75dd69aee55ea6afe44ac7cdbea2eb5624f5f8319f960a0b35f87b96d0e78df2a0dd9687f1bdcb99bc5a30cc554bba3ec3f784513917d67c5f84bbb195c8eeec83379505f1abd590387e2ccdf1616ac3355815656c516d9336cc1958ff70881e2fc1b397b5652805e683e76c6e41f6f23bfe9a2856ae800eee90312361471f4127269d886dd432e51b932035eb868afc843aa0fad0bbc93797468c5d671bb0b974be605347bd1fff07c96203507e8448d20b"}], 0x4}, 0x2e76460fadfbfa30) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x80000000, 0x101, 0x0, 0x210, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x3}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r11, r8, 0x26}, 0x20) r12 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_SECURITY(r12, 0x112, 0x4, 0x0, 0xf0ff1f00000000) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x62, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd600a0100002c2b0000000000000000000000000000000000fe8000000000000000000000000000aa3a"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYRES8, @ANYRESOCT=r1, @ANYRESHEX=r9], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffb93}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x3, 0x0, &(0x7f0000000000)="b9ff06", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.860808866s ago: executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x2001}, 0x4) socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) accept4$netrom(0xffffffffffffffff, &(0x7f0000000140)={{0x3, @bcast}, [@null, @default, @bcast, @default, @remote, @rose, @remote, @netrom]}, &(0x7f0000000100)=0x48, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003500), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000005d80)={0x0, 0x0, &(0x7f0000005d40)={&(0x7f0000005940)={0x28, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0x4, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x28}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r1) sendmsg$TIPC_CMD_GET_NETID(r4, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r5, 0x200, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0xc000) recvmmsg(0xffffffffffffffff, &(0x7f00000033c0), 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r4) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r7, 0x0, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x3a}, @void, @val={0xc, 0x99, {0x1f, 0x3d}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4004) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r6, &(0x7f0000000200)=ANY=[@ANYBLOB="1c00000007"], 0xd) 1.845265529s ago: executing program 4: bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x50483}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond_slave={{0xf}, {0xc, 0x5, 0x0, 0x1, @IFLA_BOND_SLAVE_QUEUE_ID={0x6, 0x5, 0x9}}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x48}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty}}}], 0x20}}], 0x1, 0x0) 1.692017799s ago: executing program 0: connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x8001, @remote, 0xd4a}}}, 0x32) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) socket$inet(0x2, 0x6, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)}, 0x4004004) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) accept4$llc(0xffffffffffffffff, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000000c0)=0x10, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="050000000000000069c7a5fdbc4fbb4d66611116000000000085100000022000008542f1eb094073f197448d2f42d4e677000000050013009500030000000070ee6fd0cd4e708bec02241f613b2962d556a85ceb6cd902d2d2fd31da67692daa0dc6fd1dcbb66aaa0000000075364f7abc90da69bc1d6465bf74e41f8a38d6b76b41b8387ac9d91ea1cebec2e2f6544e27916e6ddda0dec05f06059107671edb0f"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0005000000080026000816"], 0x40}}, 0x0) 1.660704721s ago: executing program 2: socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000340)="05000000010000", 0x7) 1.575242942s ago: executing program 4: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000340)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "a2dbba", 0x8, 0x11, 0x0, @remote, @mcast2, {[], {0x0, 0x0, 0x2}}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020200008500000072000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001800)={'wlan0\x00', 0x0}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x10000000}, {}, 0x0, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in, 0x0, 0x0, 0x0, 0x7, 0xfffffffa}}, 0xe8) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f00000005c0)="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") getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000040)={@multicast2, @dev, 0x0}, &(0x7f0000000180)=0xc) ioctl$BTRFS_IOC_DEFRAG_RANGE(r4, 0x40309410, &(0x7f0000000080)={0x9, 0x7, 0x3, 0xc8, 0x3, [0x6, 0x63, 0x2, 0x81]}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x1ffffffffffffdfd, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r8}, 0x10) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f00000079c0), &(0x7f0000008040)=0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) recvmmsg(r2, &(0x7f0000003440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="a18300000000000000000500000008000300", @ANYRES32=r3], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f00000006c0)=[@in6={0xa, 0x4e23, 0x0, @mcast2, 0x2}, @in={0x2, 0x4e22, @private=0xa010100}, @in6={0xa, 0x4e20, 0x8, @empty, 0x2}, @in6={0xa, 0x4e22, 0xd5e7, @local}, @in={0x2, 0x4e22, @empty}, @in6={0xa, 0x4e23, 0x1, @private1={0xfc, 0x1, '\x00', 0x10}, 0x5}], 0x90) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x3}, 0x2}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) 1.531448032s ago: executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$binfmt_script(r2, 0x0, 0xfffffe5d) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x0, 0x82, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_EXPECTED_FD={0x8}]}, @IFLA_MASTER={0x8}]}, 0x44}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r8}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='scsi_dispatch_cmd_start\x00', r10}, 0x10) write$cgroup_type(r3, &(0x7f0000000140), 0x9) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r11, @ANYBLOB="01ff00e1c2ed00001c0012000c000100626f6e64"], 0x3c}}, 0x0) getsockname$packet(r2, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) socket(0x10, 0x80002, 0x0) 1.523463867s ago: executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000c300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000170a0102002000000000000000000000090001"], 0x20}}, 0x0) 1.31847157s ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.281126912s ago: executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x20}], {0x95, 0x0, 0x700}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wpan1\x00'}) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @link_local, @val={@void}, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "7a9d07", 0x10, 0x21, 0x0, @private0, @local, {[], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, "dba20d", 0x0, "0600"}}}}}}}, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f0000000100)) r0 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, 0x0, 0x275a, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x55}, 0x90) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x10, 0x0, &(0x7f0000000080)="c5a93c9668ac6b864aabb84301fcffff", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[@ANYRES32=r1, @ANYRESDEC=r3, @ANYRESDEC], 0x44) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) socket$inet6_mptcp(0xa, 0x1, 0x106) listen(0xffffffffffffffff, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x300, &(0x7f0000001140)={&(0x7f00000021c0)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="1147010000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}}, 0x0) 1.248614305s ago: executing program 3: socket$inet6_sctp(0xa, 0x0, 0x84) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="1c0000001a005f0414f9f40700090400819680ffffff0000585b0000", 0x1c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad000000", 0x4) sendmmsg$unix(r2, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_O_TEI={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x8850}, 0x800) 1.168633354s ago: executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x48) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2, 0x5, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000086000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000007"], 0xd) 1.082060836s ago: executing program 1: unshare(0x20040600) socket$unix(0x1, 0x5, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket(0x1d, 0x2, 0x6) socket$caif_stream(0x25, 0x1, 0x0) pipe(&(0x7f0000000100)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000002c00)={'ip6gretap0\x00', 0x0}) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="f7e8010000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r4, @ANYBLOB="e459ab85445621a2578ff2ffffff", @ANYRES32=r2, @ANYBLOB], 0x44}}, 0x0) 901.621783ms ago: executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x24, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000080)=0x400000020000002, 0x12) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x0}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) sendmsg$nl_route(r5, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e00)=@mpls_newroute={0x34, 0x18, 0x300, 0x70bd26, 0x25dfdbfb, {0x1c, 0x10, 0x8, 0x5, 0xff, 0x4, 0xff, 0x2, 0x200}, [@RTA_TTL_PROPAGATE={0x5, 0x1a, 0x9}, @RTA_DST={0x8, 0x1, {0x7}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000004}, 0x40080) openat$cgroup_ro(r5, &(0x7f00000001c0)='cgroup.stat\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_WEIGHT={0x8, 0xf, 0x1}, @IFLA_MTU={0x8, 0x3}]}, 0x44}}, 0x0) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r4, 0x1, 0x6, @local}, 0x10) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c00000000070109000000000000000000000000080005400000000109000100737900"], 0x3c}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$l2tp6(0xa, 0x2, 0x73) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000004300000000000000fcdbdf25000000008f5ba51372f71186793c10be7945fc81b1a281270186f6f174496711f5c130e0e9bcac566ff7f1ca513ba81409b189dce6a2b0beba58b5efcdeb9730bf6633662346d5414e7f3e8404a6db9c4c9d1b653fb54750ed697b89835868c1e151d358ea78b4eb6c3f5174df2865edb9e4532b9ecb0115dfbf62585da11e8ef93094f6f794fe2fd3ca66e84f7c48a2f1e2bd8bd321b069f7"], 0x14}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r7, &(0x7f0000000200)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0xd) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r8, &(0x7f0000000200)=ANY=[@ANYBLOB='\''], 0xd) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0xf2e, 0x4) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_QUERIER_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) 883.278771ms ago: executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x6, &(0x7f0000000140)=[{0x5fff, 0x0, 0x1, 0xffff}, {0xa3a, 0xe2, 0x4, 0x4}, {0x8, 0x3, 0x9, 0x9}, {0x5, 0x1, 0x9, 0xffff}, {0x7, 0x7f, 0x81, 0x6}, {0x0, 0xb5, 0x4, 0x9}]}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000004b80)={0x0, 0x0, &(0x7f0000004b40)={&(0x7f0000000280)=@newqdisc={0x24}, 0x24}}, 0x0) r1 = socket(0x10, 0x803, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, 0x0, 0x40400c0) r2 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYBLOB="00001d000000000000000f0000000c00068004000500040005002c000980080002000000000008000200000000000800010000000000080002000000000008000200000000000c0006800800060000000000e1f49319e9df8723ea62430bbc13832f281fe52edadff5a280bd90f717b99654233d81eb7ef866e31ae05253609077a7122229e47c853b0002e7e3ac7b2716ecfca667805dc1d5ee1872"], 0x58}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[], 0x200600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x54, 0x0, 0x8, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0xfff}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L4PROTO={0xffffffffffffff65, 0x3, 0x2f}]}, 0x54}, 0x1, 0x0, 0x0, 0x40090}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r6, 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000500)={{{@in=@private=0xa010100, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80}}, {{@in=@broadcast, 0x0, 0x32}, 0x0, @in6=@loopback}}, 0xe8) r8 = socket$netlink(0x10, 0x3, 0x6) writev(r8, &(0x7f00000001c0)=[{&(0x7f0000000000)="480000001500190a20ffff7fffffff5602113e850e1de0974881030491720000de213ee23ffbf510040041feff5aff2b0000000000000700"/68, 0x44}, {&(0x7f0000000080)="c1130389", 0x4}], 0x2) readv(r8, &(0x7f00000004c0)=[{&(0x7f0000000200)=""/94, 0x5e}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x12, r6, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0x12) r9 = socket(0xa, 0x6, 0x0) getsockopt$inet6_mreq(r9, 0x10d, 0x0, 0x0, &(0x7f0000000040)) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="20000000080601020000000000000000000000070900020073797a3000000000a320cc5470f167333d7527a375f12397958f95ed2e11007adce5f4d60c5ebad80b5166aaf8969ea2b8d4a4e33e2299a7016a0a8e6700c6e8dde29e4ab0e5d10b2d4a8129ab89239cee432d7e56d1fbca510ec3c119380d6f9c2c53b0742ca6031d49d6a404e41988cd2dd766694cc376eab5e1f724482b602d7a8f5d3ab4a679dd22f645d3443cb5173a2e11f18a352a5c34d1d11299135dc555852d89f32309d7d6f1135ec96d0ef7c2cb3989a53a065e1dac1fa5a687054e6c0e2d69040726628e4072d74659e540e861ac5f4baa5776553cb3029d709cea14ade3b75fe87ad179a58b5f28a38453742cdc0c0cd8d7024f9bad39a335c707e065ca"], 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0x40000) 738.536491ms ago: executing program 0: r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x1, &(0x7f00000001c0)=""/125, &(0x7f0000000240)=0x7d) socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r4}, 0x10) r5 = socket$inet6(0xa, 0x2, 0x0) shutdown(r5, 0x0) setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000040)=0xff, 0x4) recvmmsg(r5, &(0x7f0000008880), 0x45b, 0x0, 0x0) 697.015526ms ago: executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000000c0)=ANY=[], 0x5c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xc3}, 0x1, 0x100000000000000}, 0x0) r0 = socket(0x2, 0x80000, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @netrom={0xbb, 0xbb, 0x2, 0xbb, 0xbb, 0x0, 0x0}}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast]}, 0x48) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040), 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000d40), 0x4) r6 = socket$inet(0x2, 0x2, 0x1) sendfile(r6, r5, 0x0, 0xffeb) ioctl$PPPIOCGIDLE64(0xffffffffffffffff, 0x8010743f, &(0x7f0000000100)) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@delchain={0x368, 0x65, 0x10, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xb, 0x9}, {0x9}, {0xfff1, 0xa}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffffa}, @filter_kind_options=@f_cgroup={{0xb}, {0x2a4, 0x2, [@TCA_CGROUP_EMATCHES={0x2a0, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x89}}, @TCA_EMATCH_TREE_LIST={0x4c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x400, 0x1, 0x7}, {0x7, 0x6, 0x4, 0x1, 0x6, 0x1, 0x2}}}, @TCF_EM_IPT={0x30, 0x3, 0x0, 0x0, {{0x81, 0x9, 0x2}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x9}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1000}}, @TCA_EMATCH_TREE_LIST={0x238, 0x2, 0x0, 0x1, [@TCF_EM_META={0x94, 0x3, 0x0, 0x0, {{0x1f}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0x7f, 0x1}, {0x1, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0x8, 0x1}, {0x36b9, 0x1, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1ff, 0x40, 0x2}, {0x3, 0x2}}}, @TCA_EM_META_RVALUE={0x17, 0x3, [@TCF_META_TYPE_VAR="cecacbd72d", @TCF_META_TYPE_VAR="c5ef9e6f6cd1c94eb16a", @TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0xc0, 0x1}, {0x2, 0x6, 0x3}}}, @TCA_EM_META_RVALUE={0x33, 0x3, [@TCF_META_TYPE_VAR="9373881816", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="fc7190f2", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="92feb77b4710c2e3c57a", @TCF_META_TYPE_VAR="f472e6c3f6cd0b5b"]}, @TCA_EM_META_LVALUE={0xb, 0x2, [@TCF_META_TYPE_VAR="799476", @TCF_META_TYPE_INT=0x9]}]}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x3ff}, {0x6, 0xfffff801, 0x8, 0x2}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x7f, 0x8, 0x9}, {0xffffffffffffffff, 0x2, 0x2}}}, @TCF_EM_META={0x1c, 0x3, 0x0, 0x0, {{0x8001, 0x4, 0x9}, [@TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_RVALUE={0x4}]}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x20, 0x3, 0x101}, {0x18000000, 0x9, 0x3, 0x9}}}, @TCF_EM_META={0x3c, 0x3, 0x0, 0x0, {{0x8, 0x4, 0x8}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x800, 0x4, 0x2}, {0x8, 0x4, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x9, 0x2}, {0x45, 0x0, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0x3, 0x1}, {0x5, 0x4, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0xac, 0x6, 0x2}, {0x1, 0xc0}}}]}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x8001, 0x3, 0xb4}, {0x40, 0x3f, 0x0, 0x5}}}, @TCF_EM_IPT={0xd0, 0x3, 0x0, 0x0, {{0x1, 0x9, 0xe000}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x5}, @TCA_EM_IPT_MATCH_DATA={0x3a, 0x5, "5fed85086fc669587883b81818da2a3959bca2152308888633888e08aae336db36b2430bd5f16d8ee70795abbdcd4ed1dd3aab011f20"}, @TCA_EM_IPT_MATCH_DATA={0x67, 0x5, "c0edbb826d774b92cb270c8c76f370d58573a4aa2ea674c327a474ab107576e7447ed513ad3e37dd7046672a6d94f5ab6266bcde43a6864f5a1135f33ca55355d5e1df3cfa727c5367e6bb8fc36651d61d6b83b1c82dced2202ec8d98b088b3ccd9b36"}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x5}]}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x86, 0x7, 0x3f}, {{0x0, 0x1, 0x1, 0x1}, {0x3, 0x1, 0x0, 0x1}}}}]}]}]}}, @filter_kind_options=@f_flow={{0x9}, {0x80, 0x2, [@TCA_FLOW_DIVISOR={0x8, 0x8, 0x7}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x81}, @TCA_FLOW_XOR={0x8, 0x7, 0x5}, @TCA_FLOW_POLICE={0x54, 0xa, 0x0, 0x1, [@TCA_POLICE_AVRATE={0x8, 0x4, 0xff}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x2, 0xff, 0x1, 0x7ff, {0x1, 0x0, 0x40, 0xffff, 0x5, 0x2}, {0x3b, 0x2, 0xaf, 0x1, 0x4, 0x4f}, 0x40000006, 0x36b9, 0xffffffff}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}]}, @TCA_FLOW_XOR={0x8, 0x7, 0x7}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x33b}]}}]}, 0x368}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000061148c00000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DONE(r11, 0x0, 0xc9, 0x0, 0x0) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYRES8=r7], 0xa8}}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c100000af933cf4fb4d2fd8642a8d0345361598ced64109bd3adfcfc20300f0f8b08d4f00ab9972ac3818", @ANYRES16=0x0, @ANYBLOB="010000000000000000002500000008000300", @ANYRES32=r9, @ANYBLOB="08003500000000001800508005000220000000000900010067eb4b0357f4ff000a00060000000021000000000a0034000202020202020000080026006c090000143642300acfc68599446f6b22fdbb8cb823b81a95aff015128d7158029c3b73eda6d574509f7e36a97d9aafca469d7eebb16381ca4138e433cdbabef40a82be60a0c68d24"], 0x5c}}, 0x4) 613.643444ms ago: executing program 1: socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) socket$inet(0x2, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socket$inet6_udplite(0xa, 0x2, 0x88) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="020409fcec074802010e0400c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) 480.174116ms ago: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000c300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000170a0102002000000000000000000000090001"], 0x20}}, 0x0) 443.599948ms ago: executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x8, &(0x7f0000000080)={0x0, 0x9000000}, &(0x7f0000000140)=0x8) 438.013731ms ago: executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200), 0x208e2a7) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000ff6c92810c1f0e50000000000002000000000000"], 0x0, 0x3}, 0x90) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2800000011000100000000000000000007000000104bf2af39d076f31feb1837c8d1ab49e22f6388d67cd193cfeb8f9478d88a1fcba1a1e9cb9524a6bdeb0d1b610fc64ac2ded64b57862e8df32eb76192b8c6ac509d1d150c549b9b1644c538920a4af4d351c9f14125aa5ca3ece4da20ef65add172eca268737f", @ANYRES32=r4, @ANYBLOB="000000000000000008001f0000000000"], 0x28}}, 0x0) shutdown(r1, 0x1) r5 = socket(0xa, 0x5, 0x3a) r6 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40088a01, &(0x7f0000000000)=0x100) r7 = socket$pptp(0x18, 0x1, 0x2) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000001440)) setsockopt$MRT6_ADD_MFC_PROXY(r5, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x84) setsockopt$MRT6_FLUSH(r5, 0x29, 0xd4, &(0x7f0000000200)=0x3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) connect$pppoe(r5, &(0x7f0000000040)={0x18, 0x0, {0x6, @empty, 'batadv0\x00'}}, 0x1e) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0) 374.63837ms ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 291.82092ms ago: executing program 3: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r4 = socket$isdn(0x22, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = getpid() sendmsg$nl_generic(r5, 0x0, 0x0) sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0x3e9, 0x20, 0x70bd26, 0x25dfdbfe, {0x20, 0x1, 0x0, r6, 0x0, 0x800, 0x8, 0x80000000, 0x0, 0x101, 0x4}, ["", "", "", "", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4800}, 0x20044040) gettid() getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@ipv4={""/10, ""/2, @local}, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @empty}}, 0x0, @in=@remote}}, &(0x7f0000000140)=0xe8) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000002c0)) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000300)) r8 = gettid() r9 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000580)='cpu.max.burst\x00', 0x2, 0x0) r10 = socket(0x10, 0x2, 0xffd) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB='&\x00\x00\x00\a', @ANYRES16=r11], 0xd) sendmsg$netlink(r2, &(0x7f0000003180)={&(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfc, 0x2000000}, 0xc, &(0x7f0000000380)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="b413000000000003fdbf76c4137a9ee027bd70f5", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="a8e648fd90922fb27ff414adfb35bdbd7e88a62b2f15886dfffe7eadba8ed5acf1ff43626b31520fec5ccf9e0019d989c6f18df41400cd00fc0000000000000000000000000000000800b200", @ANYRES32=r0, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="9301468008000b00", @ANYRES32=r6, @ANYBLOB="252777cdaac7e2417e992800297f49f2170b757ec44eef0c043cec99b34889f427f49f898025e4860b419ec4c52a769673ae311d2500c88f94e15478bfb93d1354f5a63f30999d4f1d6a10e201337d751e8fde2ddc1cdd5d6a6d2e371c55d232ad14345c443b575d4a30f39aab263f576a4d62f1fdc3e3960ff242f7d54bfe809e7ebf1b502117dc4cb58d8abb4817b23e119bc024cc84117c96729f15defc0ac4e34021cccd71b236b14ff53cb608003700", @ANYRES32=r4, @ANYBLOB="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"], 0x13b4}, {&(0x7f00000000c0)={0x5c, 0x2c, 0x100, 0x70bd2b, 0x25dfdbfc, "", [@generic="a0718a7135229b3f5686b2be7abf327f4ca0a2beaedd3073162726a6f99eb33cab40a4800d6c23777b05c42171e1cbe711b98021c423e2678872b4f5205880af59f04328c042770d512e9c"]}, 0x5c}, {&(0x7f0000000480)={0xc0, 0x39, 0x200, 0x70bd2a, 0x25dfdbfc, "", [@typed={0x8, 0x108, 0x0, 0x0, @uid=0xee01}, @typed={0x8, 0xca, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0xc, 0x63, 0x0, 0x0, @u64=0x7}, @nested={0x4, 0xef}, @nested={0x77, 0xab, 0x0, 0x1, [@generic="03fa9474fe452baf236c5bda5b94231d2aad9ca77ca455cd9614dfef0f4fbef7179d964d60eb4ac71ace0e540936656b820e134d23eb5bf321b43adcad32b37e51da39991324d2e951d7830906d6d914ea7474cbdd3b741015694da26a7973f9807b0fce6cc9b5c9ba98c8fb4cb8ae3cfede86"]}, @typed={0xc, 0x68, 0x0, 0x0, @u64=0x4}, @generic="979b0cb8", @typed={0x8, 0xee, 0x0, 0x0, @uid=r7}]}, 0xc0}, {&(0x7f0000003640)={0x2e0, 0x2c, 0x2, 0x70bd2b, 0x25dfdbfe, "", [@nested={0x9d, 0x42, 0x0, 0x1, [@generic="d1a5b9a8d0af231d3608d59bb1c1fd3f4c7cec5b5205aa4050d6ba60f07203f683177856acb0c694e8101a0b59a242379b923c155ca5ff25", @generic="1ec89c2c50a72004132114107ad90f4851970af083d0e766383a6f7442c697b94a1e3840862441704f19ee244c221a696ba2c9c7984473386b4fa45c6261c12fb323302f19201d580da41685f888a31f56848f7cb317e100b2ba985820c77014a9"]}, @typed={0x6, 0xf2, 0x0, 0x0, @str='.\x00'}, @nested={0x10, 0x8b, 0x0, 0x1, [@typed={0xc, 0x112, 0x0, 0x0, @u64}]}, @generic="0fef949faa7e2c7f0029d5527a4303a42aeeebc555dbf1f00bd3919835377f029d318275cea3b331ad3906386f269d77fed2bde404ee854ebdbe47e807b2219f0c612847b68f68b0cd79ea05a04d93ff72c28710fe68ac5779fec52eff0c675c630d9d961ef07f41cf57968126350ae81f04db2eda", @typed={0x8, 0x121, 0x0, 0x0, @u32=0x1ff}, @nested={0x189, 0x7, 0x0, 0x1, [@typed={0x4, 0xc0}, @generic="48021697bbb6208a52c12b8d955903615a565f52d624cfeb04c39cdb52dd86d69efb902569cd2bdf1460db62f93a774612cad7c7f69535f7cc57dca94e0187", @typed={0x8, 0x11d, 0x0, 0x0, @ipv4=@remote}, @generic="cfe6984d2f5218ad73926a693270aadf61b838b29ba09605735126c1f6cd6288bbd2dcba78a3178e14bcda3ca9a5186c8e74191d38826ebaa2db33db757417a6d10fdcc623eb7aa15d9ef1d03a1677d56b48ed883664a302e9c8bfdca77752c2399715138e076318a73f99403854b341886fa4ab24d8b99d4ab16a13c7aed60acd512f049dc8747cc9654aa0791d796c4c3881a3e04ed2e6eb514de99e92d958f343552e8c470b04937a98008c16ed60daac4eb73e16c5301b0f91c93123f0b4d0bd8333ab4aa634367edb02c18863d0d7c4e9f73e15c7fc0acc", @typed={0xc, 0x55, 0x0, 0x0, @u64=0x1}, @generic="752eec858224ca78a3223f23949f64def851b3415f615d5ed266a0493861c2e80af204157c41b6a938ff973d2bd21c314883c9a5e633122e7c6cdee7acdf70878a3152277ee85e6f795d62ca72e725db6fd4b6c5"]}, @typed={0xc, 0x98, 0x0, 0x0, @u64=0x9ed9}]}, 0x2e0}, {&(0x7f0000001e80)={0xc8, 0x2b, 0x200, 0x70bd25, 0x25dfdbfe, "", [@nested={0xc, 0xfd, 0x0, 0x1, [@typed={0x8, 0x46, 0x0, 0x0, @u32=0x7}]}, @typed={0xc, 0xd8, 0x0, 0x0, @u64=0x1}, @typed={0x8, 0x2f, 0x0, 0x0, @ipv4=@remote}, @generic="a486d66d4c1a47ce606d73982d1b9fcc74055dcfc8db2d6e2b4585689a3de2c2750519090365b9002fb8e87ac0ff276d4aae3962d57b3a3991436567010033f723e3fe5d23afda10ea34203771b03a63416cf1e76e978bab14b3c95830697bd957e3dd63c9a82617da57362e28b9586ebd26fc8d0250258a5868e25f46d0c5e29c9cf69b16efd1185f9afb18afcebf3460c1b70c8d37"]}, 0xc8}, {&(0x7f0000001f80)=ANY=[@ANYBLOB="f211120000", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=r8, @ANYBLOB], 0x11f0}], 0x6, &(0x7f00000005c0)=[@rights={{0x1c, 0x1, 0x1, [r2, r9, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, r11}}}, @rights={{0x24, 0x1, 0x1, [r0, r4, r4, r4, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r2]}}], 0x80, 0x20004005}, 0x20000000) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$xdp(0xffffffffffffffff, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) 235.673518ms ago: executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000a00)={@in6={{0xa, 0x0, 0x4, @ipv4={'\x00', '\xff\xff', @local}}}, 0x0, 0x0, 0x35, 0x0, "317f83735b4bb1eadc74dde27798c831eec04c24eeec7ff3d3137a508003d2d5c89ab0220cefebd4687636457b9822766c1bfea4e01ff23c6a4caeaf049a572a9774d3b882eb3b4a66c5ec48c29f065d"}, 0xd8) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{}, '\x00', "5171bb672965593497418688ac68cb126474cd3660dab9e2086e246728d7a040", "05e2e505", "12000700"}, 0x38) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c030000", @ANYRESOCT=r2, @ANYBLOB="010000000000000000006604000008000300", @ANYRES32=r2, @ANYRES32=r1], 0x4c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x2}, 0x10}, 0x90) r5 = socket$kcm(0x10, 0x7, 0x4) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) sendmsg$kcm(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000003c0)="fe49d740ffcba8a54521a9367a13268894b2d8be59d9862d8f54472eca90fa9d74c0dbfb27a542e46ece7399d44bc477816ca3c6e07e46591a4100bf8bb5698686", 0x41}, {&(0x7f00000004c0)="28db52a2418619a9e69b5a373c86df9a5e683656c08a575a2eebe22e73ed6579e11ce4e6b75c347823b919c0c7f9c58a042f323798dbc024035b2076ccdfaa6dcfdcecff5c7e18390d3b92b8aedef5fcb0fe714ff59889d079eb", 0x5a}, {&(0x7f0000000540)="bd4d92cda33fa0ddbef11cdbd25822464b4e025d5371a8980ab74fba273aa87e4585749dda59a0d0c6f559fd83e41cf7e9fca8f824658451359b1bd7817ef5cdd95d08d12147ef48621852", 0x4b}, {&(0x7f0000000900)="5d5f738844b4818eac150b038940e01fdb2647bb83b1b7c8604eb8ca566c72665d8e4ad2f393aef86599068b9638d7efb6b7d370b6b82a6534a32e221ae57ada6e5deb76862a65a6c247aef310e0943148d7f3f461e661ff9d09724897a30fca6b563b0fce9548a2b50742d2e2ff6dbfcb9c475968ac2198cdfbf1a9d4d21c8b37cb1bce619c017fff673594ec7b2a42390c41e126c6f1e8fd395b7704ccecd8d851308fa3ffa24f2cbc240ec5b139e73d3e492e24a314abb0b1993b4e17df6485ea19bb16a5d6", 0xc7}], 0x4}, 0x2e76460fadfbfab0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x81, 0x10001, 0x5a, 0x1000, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x4, 0xb}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r7, r4, 0x26}, 0x10) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_SECURITY(r8, 0x112, 0x4, 0x0, 0xf0ff1f00000000) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x62, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd600a0100002c2b0000000000000000000000000000000000fe8000000000000000000000000000aa3a"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x3, 0x0, &(0x7f0000000000)="b9ff06", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007200000095000000000000001fd78800a257a5ee0b4b88b761826fb40338658c30dfe2fef4f4b469"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 229.631004ms ago: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000180)={0x0, 0x8000000, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x7, 0x201}, 0x14}}, 0x0) 216.471735ms ago: executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @broadcast}, {0x2, 0x0, @broadcast}}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001811000074a6a193aac788196e25e2c293f586ca3197f0c4dd0a52c6a2c87cc443fdddadc63ba739450bb95fb66a3d2abd6ca776c0a1d6ca2fcd14f8634efb780a7822299a55e2edf6398f1fbf07a3328802d30edf26a5bb4026fafa68ec36b50392c7e97db8621b8dc562ec8b4b8834", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008500000023000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000026c0)={&(0x7f0000000180)='track_foreign_dirty\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, &(0x7f0000000000), 0x9) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000034c0)=0x165, 0x4) bind$inet(r4, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) connect$inet(r4, &(0x7f0000000340)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r4, &(0x7f0000000540)=ANY=[], 0xfffffe8a) r5 = socket$kcm(0x2, 0x1000000000000002, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r8, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8f08600}, 0xc, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="7f6bf650", @ANYRES16=0x0, @ANYBLOB="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"], 0x220}, 0x1, 0x0, 0x0, 0x40004}, 0x20040010) socket$key(0xf, 0x3, 0x2) bpf$LINK_DETACH(0x22, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_type(r7, &(0x7f0000000000), 0x182000) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000080)=0x80000) setsockopt$sock_attach_bpf(r5, 0x88, 0x67, &(0x7f00000002c0)=r6, 0x4) sendmsg$inet(r5, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e23, @multicast2=0xe0000001}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000000)='&', 0xffe3}], 0x1, &(0x7f00000003c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @broadcast}}}], 0x20}, 0x0) 125.443484ms ago: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000001380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000dc0)='rcu_utilization\x00', r0}, 0x5e) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010818000000000000001800000018000000ee000000000000000000800d02000000000000eaff"], 0x0, 0x32}, 0x20) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x33, &(0x7f0000000040)=0x80000000, 0x1a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001000"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x34}}, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r3, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x42, &(0x7f0000000100)=0x1e79, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r6, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x47, &(0x7f0000000140)={@multicast, @random="2ac7fd5d244d", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3f00e7", 0x11, 0x2c, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[@routing={0x3a, 0x0, 0x0, 0x1}], {0x0, 0x0, 0x9, 0x0, @opaque="c1"}}}}}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r7) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r5, &(0x7f0000000680)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r9, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48894}, 0x40440d0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000000740)={0x0, 0x1, 0x4}, &(0x7f0000000780)=0x8) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r10, r8, 0x2, 0x0, 0x4000}, 0x10) socket(0x2, 0x3, 0x8) 0s ago: executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) write$binfmt_script(r2, 0x0, 0xfffffe5d) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x0, 0x82, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_EXPECTED_FD={0x8}]}, @IFLA_MASTER={0x8}]}, 0x44}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r9}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='scsi_dispatch_cmd_start\x00', r11}, 0x10) write$cgroup_type(r3, &(0x7f0000000140), 0x9) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r12, @ANYBLOB="01ff00e1c2ed00001c0012000c000100626f6e64"], 0x3c}}, 0x0) getsockname$packet(r2, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) socket(0x10, 0x80002, 0x0) kernel console output (not intermixed with test programs): oth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 476.059411][ T5133] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 476.475848][ T3873] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 476.499418][ T3873] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 476.512056][ T3873] bond0 (unregistering): Released all slaves [ 476.557984][T18445] wg0 speed is unknown, defaulting to 1000 [ 476.626882][T18473] dummy0: entered promiscuous mode [ 476.632148][T18473] macsec1: entered promiscuous mode [ 476.664627][T18473] macsec1: entered allmulticast mode [ 476.678712][T18473] dummy0: entered allmulticast mode [ 476.720217][T18473] dummy0: left allmulticast mode [ 476.730747][T18473] dummy0: left promiscuous mode [ 476.764187][T18475] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 476.792051][T18475] bond2: entered promiscuous mode [ 476.898170][T18483] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 476.922487][ T29] audit: type=1804 audit(1718987896.198:49): pid=18486 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1245971364/syzkaller.AAGFRy/933/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 476.951584][T18476] bond0: (slave bond_slave_0): Releasing backup interface [ 476.972657][T18476] bond2: (slave bond_slave_0): making interface the new active one [ 476.981241][T18476] bond_slave_0: entered promiscuous mode [ 476.992181][T18476] bond2: (slave bond_slave_0): Enslaving as an active interface with an up link [ 477.008706][T18468] lo speed is unknown, defaulting to 1000 [ 477.173270][T18490] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. [ 477.299442][T18468] wg0 speed is unknown, defaulting to 1000 [ 477.445400][ T5132] Bluetooth: hci0: command tx timeout [ 477.582544][ T29] audit: type=1800 audit(1718987896.868:50): pid=18503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=1935 res=0 errno=0 [ 477.625512][ T29] audit: type=1804 audit(1718987896.888:51): pid=18503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir1245971364/syzkaller.AAGFRy/934/memory.events" dev="sda1" ino=1935 res=1 errno=0 [ 477.757722][ T3873] hsr_slave_0: left promiscuous mode [ 477.774372][ T3873] hsr_slave_1: left promiscuous mode [ 477.797503][ T3873] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 477.815392][ T3873] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 477.828075][ T3873] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 477.840171][ T3873] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 477.882893][ T3873] veth1_macvtap: left promiscuous mode [ 477.896191][ T3873] veth0_macvtap: left promiscuous mode [ 477.902173][ T3873] veth1_vlan: left promiscuous mode [ 477.913240][ T3873] veth0_vlan: left promiscuous mode [ 478.085798][ T5132] Bluetooth: hci3: command tx timeout [ 478.532006][ T3873] team0 (unregistering): Port device team_slave_1 removed [ 478.582741][ T3873] team0 (unregistering): Port device team_slave_0 removed [ 479.055620][T18494] tc_dump_action: action bad kind [ 479.091392][T18445] chnl_net:caif_netlink_parms(): no params data found [ 479.457586][T18445] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.483004][T18445] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.493595][T18445] bridge_slave_0: entered allmulticast mode [ 479.507821][T18445] bridge_slave_0: entered promiscuous mode [ 479.526740][ T5132] Bluetooth: hci0: command tx timeout [ 479.537667][T18445] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.544841][T18445] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.578845][T18445] bridge_slave_1: entered allmulticast mode [ 479.599781][T18549] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 479.603917][T18445] bridge_slave_1: entered promiscuous mode [ 479.627175][T18549] unsupported nla_type 768 [ 479.908246][T18445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 479.941228][T18445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 480.076290][T18445] team0: Port device team_slave_0 added [ 480.090121][T18445] team0: Port device team_slave_1 added [ 480.102946][T18468] chnl_net:caif_netlink_parms(): no params data found [ 480.165328][ T5132] Bluetooth: hci3: command tx timeout [ 480.187968][T18445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 480.200081][T18445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 480.231493][T18445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 480.408915][T18445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 480.422883][T18445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 480.473426][T18445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 480.560231][ T3873] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.712753][ T3873] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.781676][T18445] hsr_slave_0: entered promiscuous mode [ 480.815463][T18445] hsr_slave_1: entered promiscuous mode [ 480.830635][T18445] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 480.852558][T18445] Cannot create hsr debugfs directory [ 480.927130][ T3873] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.069411][ T3873] netdevsim netdevsim2  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.141023][T18596] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 481.166874][T18595] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 481.264769][T18468] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.280150][T18468] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.292509][T18468] bridge_slave_0: entered allmulticast mode [ 481.303767][T18468] bridge_slave_0: entered promiscuous mode [ 481.323063][T18468] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.341091][T18468] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.359565][T18468] bridge_slave_1: entered allmulticast mode [ 481.379832][T18468] bridge_slave_1: entered promiscuous mode [ 481.527534][T18468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 481.605774][ T5132] Bluetooth: hci0: command tx timeout [ 481.624999][T18468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 481.652196][T18615] xt_ecn: cannot match TCP bits for non-tcp packets [ 481.812800][T18468] team0: Port device team_slave_0 added [ 481.918817][T18468] team0: Port device team_slave_1 added [ 482.109400][T18468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 482.129164][T18468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 482.185631][T18468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 482.245838][ T5132] Bluetooth: hci3: command tx timeout [ 482.257493][T18468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 482.264515][T18468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 482.342905][T18468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 482.373594][ T3873] geneve1: left allmulticast mode [ 482.390061][ T3873] geneve1: left promiscuous mode [ 482.398722][ T3873] bridge0: port 4(geneve1) entered disabled state [ 482.417327][ T3873] macsec0: left allmulticast mode [ 482.422573][ T3873] veth1_macvtap: left allmulticast mode [ 482.444704][ T3873] macsec0: left promiscuous mode [ 482.457955][ T3873] bridge0: port 3(macsec0) entered disabled state [ 482.476228][ T3873] bridge_slave_1: left allmulticast mode [ 482.482164][ T3873] bridge_slave_1: left promiscuous mode [ 482.504644][ T3873] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.515014][ T3873] bridge_slave_0: left allmulticast mode [ 482.522160][ T3873] bridge_slave_0: left promiscuous mode [ 482.528780][ T3873] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.773715][ T3873] ip6gretap0 (unregistering): left promiscuous mode [ 483.042016][T18641] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 483.153195][T18644] Bluetooth: MGMT ver 1.22 [ 483.697238][ T5132] Bluetooth: hci0: command tx timeout [ 483.717440][ T3873] team0: Port device bond0 removed [ 483.729203][ T3873] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 483.740646][ T3873] bond0 (unregistering): Released all slaves [ 483.854346][ T3873] bond2 (unregistering): Released all slaves [ 483.968735][T18468] hsr_slave_0: entered promiscuous mode [ 483.989916][T18468] hsr_slave_1: entered promiscuous mode [ 484.002292][T18468] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 484.010802][T18468] Cannot create hsr debugfs directory [ 484.092195][ T3873] tipc: Left network mode [ 484.329627][ T5132] Bluetooth: hci3: command tx timeout [ 484.778843][T18445] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 484.816774][T18445] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 484.887096][T18445] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 484.986075][T18445] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 485.026484][ T3873] batadv_slave_0: left promiscuous mode [ 485.086341][ T3873] hsr_slave_0: left promiscuous mode [ 485.100156][ T3873] hsr_slave_1: left promiscuous mode [ 485.150786][ T3873] veth1_macvtap: left promiscuous mode [ 485.166544][ T3873] veth0_macvtap: left promiscuous mode [ 485.172552][ T3873] veth1_vlan: left promiscuous mode [ 485.180013][ T3873] veth0_vlan: left promiscuous mode [ 485.241703][T18688] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 485.336440][ T3873] infiniband syz0: set down [ 485.396658][ T3873] pim6reg (unregistering): left allmulticast mode [ 485.888230][ T3873] team0 (unregistering): Port device team_slave_1 removed [ 485.943512][ T3873] team0 (unregistering): Port device team_slave_0 removed [ 486.356350][ T1107] smc: removing ib device syz0 [ 486.470087][ T25] lo speed is unknown, defaulting to 1000 [ 486.801789][T18696] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 486.811267][T18696] netlink: 108 bytes leftover after parsing attributes in process `syz-executor.4'. [ 487.127562][T18445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 487.353557][T18445] 8021q: adding VLAN 0 to HW filter on device team0 [ 487.456658][T18468] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 487.512652][T18468] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 487.562352][T18468] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 487.632945][T18468] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 487.667276][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.674492][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 487.731283][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.739148][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 488.322225][T18468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 488.410602][T18468] 8021q: adding VLAN 0 to HW filter on device team0 [ 488.488016][ T1151] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.495304][ T1151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 488.550087][ T1151] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.557359][ T1151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 488.715377][T18742] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 488.720871][T18468] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 488.993551][T18445] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 489.045804][T18756] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 489.072260][T18755] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 489.278134][T18445] veth0_vlan: entered promiscuous mode [ 489.329158][T18468] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 489.342257][T18445] veth1_vlan: entered promiscuous mode [ 489.514672][T18445] veth0_macvtap: entered promiscuous mode [ 489.545589][T18445] veth1_macvtap: entered promiscuous mode [ 489.554455][T18468] veth0_vlan: entered promiscuous mode [ 489.591481][T18468] veth1_vlan: entered promiscuous mode [ 489.673588][T18445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 489.706483][T18445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.738341][T18445] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 489.804583][T18445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 489.820869][T18445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.833096][T18445] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 489.862013][T18468] veth0_macvtap: entered promiscuous mode [ 489.917001][T18445] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.931441][T18445] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.948872][T18445] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.969570][T18445] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.006405][T18468] veth1_macvtap: entered promiscuous mode [ 490.058198][T18787] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.3'. [ 490.099549][T18787] netem: invalid attributes len -24 [ 490.104834][T18787] netem: change failed [ 490.205811][T18468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 490.235194][T18468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.249781][T18468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 490.260597][T18468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.277666][T18468] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 490.382651][T18468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 490.409090][T18468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.436780][T18468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 490.475402][T18468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.501271][T18468] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 490.559319][T18468] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.588060][T18468] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.625253][T18468] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.634122][T18468] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.733592][ T1103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.765289][ T1103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.899529][ T1103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.924708][ T1103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 491.007594][ T1103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.028767][ T1103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 491.056831][ T5132] Bluetooth: hci0: command 0x0c20 tx timeout [ 491.110708][ T1103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.144043][ T1103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 491.163204][T18808] syz_tun: entered promiscuous mode [ 491.185412][T18808] vlan2: entered promiscuous mode [ 491.226746][T18808] syz_tun: left promiscuous mode [ 491.346731][T18816] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 491.563366][T18828] ieee802154 phy0 wpan0: encryption failed: -22 [ 492.436847][T18860] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 492.445785][T18860] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 492.454058][T18860] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.1'. [ 493.050275][T18883] IPv6: sit1: Disabled Multicast RS [ 493.069193][T18883] sit1: entered allmulticast mode [ 493.347820][T18892] bond1: entered promiscuous mode [ 493.353081][T18892] bond1: entered allmulticast mode [ 493.358854][T18892] 8021q: adding VLAN 0 to HW filter on device bond1 [ 493.390053][T18900] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 493.668400][T18911] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 493.688273][T18911] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 493.698932][T18913] syz_tun: entered promiscuous mode [ 493.719271][T18913] vlan2: entered promiscuous mode [ 493.724940][T18914] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 493.741760][T18913] syz_tun: left promiscuous mode [ 493.830676][T18910] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 493.841009][T18911] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 493.859750][T18911] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 493.872903][T18910] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 493.915885][T18910] tap0: tun_chr_ioctl cmd 1074025677 [ 493.926040][ T5133] Bluetooth: hci0: command 0x0c20 tx timeout [ 493.946078][T18910] tap0: linktype set to 15 [ 494.212084][T18926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 494.232354][T18926] team0: Port device bond0 added [ 494.359300][T18928] team0: Port device team_slave_0 removed [ 494.383511][T18928] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 494.406287][ T5133] Bluetooth: hci3: command 0x0405 tx timeout [ 494.639491][T18940] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 494.707539][T18945] IPv6: sit2: Disabled Multicast RS [ 494.714086][T18945] sit2: entered allmulticast mode [ 494.938491][T18945] bond1: entered promiscuous mode [ 494.944138][T18945] bond1: entered allmulticast mode [ 494.950189][T18945] 8021q: adding VLAN 0 to HW filter on device bond1 [ 495.702115][T18977] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 495.730799][T18977] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 495.773542][T18977] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 495.797196][T18977] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 496.180471][T18993] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 496.234054][T18993] gtp0: entered promiscuous mode [ 496.249914][T18993] gtp0: entered allmulticast mode [ 496.269325][T18998] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 496.594246][T19007] pim6reg: entered allmulticast mode [ 497.042515][T19027] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 497.091795][T19030] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 497.125676][T19030] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 497.132972][T19030] IPv6: NLM_F_CREATE should be set when creating new route [ 497.140354][T19030] IPv6: NLM_F_CREATE should be set when creating new route [ 497.211824][T19035] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 497.296207][T19039] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 497.887351][T19058] tap0: tun_chr_ioctl cmd 1074025677 [ 497.896895][T19058] tap0: linktype set to 15 [ 498.247124][T19080] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 498.762179][T19106] sch_tbf: peakrate 8 is lower than or equals to rate 14799206064497609713 ! [ 499.010823][T19114] sch_tbf: peakrate 8 is lower than or equals to rate 14799206064497609713 ! [ 499.043094][T19119] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 499.055459][T19119] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 499.062770][T19119] IPv6: NLM_F_CREATE should be set when creating new route [ 499.070084][T19119] IPv6: NLM_F_CREATE should be set when creating new route [ 499.154915][T19123] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 499.163858][T19123] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 499.576377][T19142] syz_tun: entered promiscuous mode [ 499.597379][T19142] vlan2: entered promiscuous mode [ 499.645831][T19142] syz_tun: left promiscuous mode [ 499.941010][T19159] __nla_validate_parse: 8 callbacks suppressed [ 499.941032][T19159] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 499.943620][T19162] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 500.056040][T19157] x_tables: duplicate entry at hook 3 [ 500.080693][T19171] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 500.912552][T19190] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 501.143081][T19199] syz_tun: entered promiscuous mode [ 501.160368][T19199] vlan2: entered promiscuous mode [ 501.204517][T19199] syz_tun: left promiscuous mode [ 501.852562][ T1252] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.981209][T19235] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 502.104208][T19242] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 502.149894][T19245] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 502.584612][T19268] syz_tun: entered promiscuous mode [ 502.594383][T19268] vlan2: entered promiscuous mode [ 502.610935][T19268] syz_tun: left promiscuous mode [ 502.734606][T19274] geneve2: entered promiscuous mode [ 502.741609][T19274] geneve2: entered allmulticast mode [ 502.758750][T19278] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 503.031685][T19288] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 503.736808][T19319] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 503.747956][T19320] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 504.163665][ T29] audit: type=1804 audit(1718987923.448:52): pid=19325 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3788655336/syzkaller.5ZpqbD/660/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 504.257208][T19336] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 504.296335][T19341] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 505.137577][T19376] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 505.167594][T19376] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 505.246395][T19378] syz_tun: entered promiscuous mode [ 505.260176][T19378] vlan2: entered promiscuous mode [ 505.273832][T19383] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. [ 505.289222][T19378] syz_tun: left promiscuous mode [ 505.359758][T19384] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 505.379427][T19376] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.1'. [ 505.594372][T19387] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 505.774649][T19398] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 505.949347][T19405] syz_tun: entered promiscuous mode [ 505.955045][T19405] vlan2: entered promiscuous mode [ 505.980036][T19405] syz_tun: left promiscuous mode [ 506.346572][T19423] batadv_slave_0: entered allmulticast mode [ 506.366400][T19423] pim6reg: entered allmulticast mode [ 506.384140][T19423] batadv_slave_0: left allmulticast mode [ 506.405572][ T5133] Bluetooth: hci3: command 0x0405 tx timeout [ 506.406732][T19427] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 506.423982][T19423] pim6reg: left allmulticast mode [ 506.709282][T19435] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.890754][T19444] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 507.056867][T19451] syz_tun: entered promiscuous mode [ 507.062669][T19451] vlan2: entered promiscuous mode [ 507.102998][T19451] syz_tun: left promiscuous mode [ 507.380395][T19471] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 507.507072][T19474] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 507.701130][T19482] syz-executor.3[19482] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 507.701294][T19482] syz-executor.3[19482] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 508.004815][T19497] bridge0: port 1(macsec0) entered blocking state [ 508.031453][T19497] bridge0: port 1(macsec0) entered disabled state [ 508.038431][T19497] macsec0: entered allmulticast mode [ 508.044029][T19497] veth1_macvtap: entered allmulticast mode [ 508.053886][T19497] macsec0: entered promiscuous mode [ 508.067052][T19500] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 508.226858][T19513] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 508.310009][T19517] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 508.620820][T19534] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 508.635578][T19534] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 508.650891][T19534] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 508.712490][T19530] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 509.045846][ T5133] Bluetooth: hci1: command 0x0406 tx timeout [ 509.068424][T19556] ipip0: entered promiscuous mode [ 509.353673][T19572] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 509.404702][T19572] bond4: (slave vcan1): The slave device specified does not support setting the MAC address [ 509.415319][T19572] bond4: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 509.429050][T19572] bond4: (slave vcan1): making interface the new active one [ 509.437779][T19572] bond4: (slave vcan1): Enslaving as an active interface with an up link [ 509.721427][T19591] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 510.062403][T19615] netem: unknown loss type 0 [ 510.076594][T19615] netem: change failed [ 510.106285][T19615] netem: unknown loss type 0 [ 510.110984][T19615] netem: change failed [ 510.150417][T19615] netem: unknown loss type 0 [ 510.170477][T19615] netem: change failed [ 510.202516][T19615] netem: unknown loss type 0 [ 510.220426][T19615] netem: change failed [ 510.262559][T19615] netem: unknown loss type 0 [ 510.285842][T19615] netem: change failed [ 510.309250][T19615] netem: unknown loss type 0 [ 510.313952][T19615] netem: change failed [ 510.357404][T19615] netem: unknown loss type 0 [ 510.380661][T19615] netem: change failed [ 510.399931][T19615] netem: unknown loss type 0 [ 510.404629][T19615] netem: change failed [ 510.422040][T19615] netem: unknown loss type 0 [ 510.441178][T19615] netem: change failed [ 510.474316][T19615] netem: unknown loss type 0 [ 510.508875][T19615] netem: change failed [ 510.517970][T19615] netem: unknown loss type 0 [ 510.522646][T19615] netem: change failed [ 510.569636][T19615] netem: unknown loss type 0 [ 510.579253][T19615] netem: change failed [ 510.594487][T19615] netem: unknown loss type 0 [ 510.609462][T19615] netem: change failed [ 510.635551][T19615] netem: unknown loss type 0 [ 510.643864][T19615] netem: change failed [ 510.654486][T19615] netem: unknown loss type 0 [ 510.663783][T19615] netem: change failed [ 510.675875][T19615] netem: unknown loss type 0 [ 510.687736][T19615] netem: change failed [ 510.697836][ T29] audit: type=1804 audit(1718987929.978:53): pid=19644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1245971364/syzkaller.AAGFRy/976/cgroup.controllers" dev="sda1" ino=1958 res=1 errno=0 [ 510.739256][T19615] netem: unknown loss type 0 [ 510.748140][T19615] netem: change failed [ 510.755801][T19615] netem: unknown loss type 0 [ 510.762771][T19615] netem: change failed [ 510.785762][T19615] netem: unknown loss type 0 [ 510.798794][T19615] netem: change failed [ 510.815717][T19615] netem: unknown loss type 0 [ 510.832511][T19615] netem: change failed [ 510.841750][T19615] netem: unknown loss type 0 [ 510.850067][ T29] audit: type=1804 audit(1718987930.138:54): pid=19644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir1245971364/syzkaller.AAGFRy/976/cgroup.controllers" dev="sda1" ino=1958 res=1 errno=0 [ 510.878183][T19615] netem: change failed [ 511.008265][T19663] IPVS: set_ctl: invalid protocol: 44 100.1.1.1:20002 [ 511.081514][T19667] __nla_validate_parse: 2 callbacks suppressed [ 511.081535][T19667] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 511.724943][T19686] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 512.800813][T19738] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 512.824176][T19738] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 513.191285][T19749] pim6reg: entered allmulticast mode [ 513.225329][T19749] pim6reg: left allmulticast mode [ 513.350536][T19762] syz_tun: entered promiscuous mode [ 513.356768][T19762] vlan2: entered promiscuous mode [ 513.368381][T19762] syz_tun: left promiscuous mode [ 513.444180][T19768] syz_tun: entered promiscuous mode [ 513.453983][T19768] macvlan2: entered promiscuous mode [ 513.527486][T19766] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 513.571106][T19766] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 513.586518][T19772] lo speed is unknown, defaulting to 1000 [ 513.604665][T19772] lo speed is unknown, defaulting to 1000 [ 513.627915][T19772] lo speed is unknown, defaulting to 1000 [ 513.907424][T19788] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 513.917448][T19790] rdma_rxe: rxe_newlink: failed to add lo [ 514.061389][T19772] infiniband syz0: set active [ 514.069104][T19772] infiniband syz0: added lo [ 514.078426][T19794] bond3: (slave vcan1): The slave device specified does not support setting the MAC address [ 514.096557][T19794] bond3: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 514.114020][T19794] bond3: (slave vcan1): making interface the new active one [ 514.141554][T19794] bond3: (slave vcan1): Enslaving as an active interface with an up link [ 514.163375][T19800] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 514.184216][T19772] RDS/IB: syz0: added [ 514.198088][ T5168] lo speed is unknown, defaulting to 1000 [ 514.200023][T19772] smc: adding ib device syz0 with port count 1 [ 514.246678][T19772] smc: ib device syz0 port 1 has pnetid [ 514.265435][ T5181] lo speed is unknown, defaulting to 1000 [ 514.285031][T19808] syz_tun: entered promiscuous mode [ 514.297323][T19808] vlan2: entered promiscuous mode [ 514.306585][T19808] syz_tun: left promiscuous mode [ 514.341637][T19772] lo speed is unknown, defaulting to 1000 [ 514.479216][T19820] netlink: 'syz-executor.2': attribute type 25 has an invalid length. [ 514.493299][T19820] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 514.547298][T19820] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 514.555765][T19822] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 514.570082][T19820] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 514.687817][T19772] lo speed is unknown, defaulting to 1000 [ 514.765895][T19829] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 514.962828][T19772] lo speed is unknown, defaulting to 1000 [ 515.303760][T19772] lo speed is unknown, defaulting to 1000 [ 515.446316][T19772] lo speed is unknown, defaulting to 1000 [ 515.585654][T19772] lo speed is unknown, defaulting to 1000 [ 527.958560][T19853] bridge0: port 3(gretap0) entered blocking state [ 527.969956][T19853] bridge0: port 3(gretap0) entered disabled state [ 527.992866][T19853] gretap0: entered allmulticast mode [ 528.001072][T19853] gretap0: entered promiscuous mode [ 528.018169][T19853] bridge0: port 3(gretap0) entered blocking state [ 528.024821][T19853] bridge0: port 3(gretap0) entered forwarding state [ 528.057499][T19858] bridge0: port 3(gretap0) entered blocking state [ 528.066656][T19858] bridge0: port 3(gretap0) entered disabled state [ 528.073662][T19858] gretap0: entered allmulticast mode [ 528.082936][T19858] gretap0: entered promiscuous mode [ 528.090203][T19858] bridge0: port 3(gretap0) entered blocking state [ 528.096925][T19858] bridge0: port 3(gretap0) entered forwarding state [ 528.280704][T19876] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 528.400131][T19880] rdma_rxe: rxe_newlink: failed to add lo [ 528.528543][T19888] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 528.625171][T19892] syz_tun: entered promiscuous mode [ 528.630776][T19892] vlan2: entered promiscuous mode [ 528.642902][T19892] syz_tun: left promiscuous mode [ 528.650070][T19894] netlink: 248 bytes leftover after parsing attributes in process `syz-executor.3'. [ 528.664254][T19894] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 528.916914][T19910] netlink: 'syz-executor.0': attribute type 12 has an invalid length. [ 528.948516][T19910] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 528.966730][T19910] netlink: 148 bytes leftover after parsing attributes in process `syz-executor.0'. [ 528.992153][T19915] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 529.065338][T19919] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 529.534204][T19947] netem: change failed [ 529.633586][T19951] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 529.816965][T19953] wireguard0: entered promiscuous mode [ 529.939806][T19968] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 530.182457][T19989] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 530.195644][T19989] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 530.275023][T19995] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 530.897253][T20030] wg0 speed is unknown, defaulting to 1000 [ 530.904723][T20030] lo speed is unknown, defaulting to 1000 [ 530.953031][T20032] syz_tun: entered promiscuous mode [ 530.975495][T20032] vlan2: entered promiscuous mode [ 531.019155][T20032] syz_tun: left promiscuous mode [ 531.380728][T20052] bond0: entered promiscuous mode [ 531.393691][T20052] bond_slave_0: entered promiscuous mode [ 531.424625][T20056] Bluetooth: MGMT ver 1.22 [ 531.426508][T20052] bond_slave_1: entered promiscuous mode [ 531.430788][T20056] Bluetooth: hci3: invalid len left 7, exp >= 49 [ 531.435081][T20052] bond0: entered allmulticast mode [ 531.462643][T20052] bond_slave_0: entered allmulticast mode [ 531.481161][T20052] bond_slave_1: entered allmulticast mode [ 531.710220][T20062] tipc: Enabled bearer , priority 0 [ 531.827038][T20062] tipc: Resetting bearer [ 531.849609][T20061] tipc: Resetting bearer [ 534.051103][T20061] tipc: Disabling bearer [ 534.264049][T20099] siw: device registration error -23 [ 534.294502][T20105] __nla_validate_parse: 5 callbacks suppressed [ 534.294522][T20105] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 534.340087][T20101] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 534.468678][T20101] bond5: entered promiscuous mode [ 534.487165][T20106] bond2: (slave bond_slave_0): Releasing active interface [ 534.506678][T20106] bond_slave_0: left promiscuous mode [ 534.548312][T20106] bond5: (slave bond_slave_0): making interface the new active one [ 534.559866][T20106] bond_slave_0: entered promiscuous mode [ 534.573610][T20106] bond5: (slave bond_slave_0): Enslaving as an active interface with an up link [ 534.610574][T20118] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 534.823460][T20131] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 534.871202][T20130] sctp: [Deprecated]: syz-executor.0 (pid 20130) Use of int in max_burst socket option deprecated. [ 534.871202][T20130] Use struct sctp_assoc_value instead [ 535.078583][T20140] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 535.122045][T20138] tipc: Started in network mode [ 535.128255][T20138] tipc: Node identity 86c720f38904, cluster identity 4711 [ 535.139164][T20138] tipc: Enabled bearer , priority 0 [ 535.256160][T20138] tipc: Resetting bearer [ 535.271111][T20137] tipc: Resetting bearer [ 535.441488][T20151] Bluetooth: hci3: invalid length 0, exp 2 for type 10 [ 536.137301][ T5168] tipc: Node number set to 264446195 [ 537.599046][T20137] tipc: Disabling bearer [ 537.619628][T20170] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 537.770077][T20181] syz_tun: entered promiscuous mode [ 537.780223][T20181] vlan2: entered promiscuous mode [ 537.800993][T20181] syz_tun: left promiscuous mode [ 537.872199][T20189] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 537.886114][T20194] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 537.911369][T20189] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 538.198341][T20211] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 538.229978][T20213] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 538.310493][ T29] audit: type=1804 audit(1718987957.598:55): pid=20221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3370974501/syzkaller.zVk8rv/323/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 538.416365][T20230] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 538.519895][T20233] vlan2: entered promiscuous mode [ 538.562961][T20234] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 538.782201][T20244] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 538.800064][T20244] gretap1: entered promiscuous mode [ 538.809370][T20244] gretap1: entered allmulticast mode [ 539.513862][T20276] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 539.523848][T20276] __nla_validate_parse: 1 callbacks suppressed [ 539.523869][T20276] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 539.633720][T20280] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 539.661053][T20282] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 539.729966][T20284] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 539.906238][T20297] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 540.232604][T20317] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 540.351446][T20321] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 541.007331][T20347] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 541.033979][T20348] netlink: 'syz-executor.0': attribute type 9 has an invalid length. [ 541.066358][T20348] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.0'. [ 541.566253][T20357] netlink: 'syz-executor.0': attribute type 9 has an invalid length. [ 541.608634][T20357] netlink: 209324 bytes leftover after parsing attributes in process `syz-executor.0'. [ 542.054520][T20372] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 542.199152][T20381] hsr_slave_0: left promiscuous mode [ 542.206649][T20381] hsr_slave_1: left promiscuous mode [ 542.386530][T20389] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 542.522654][T20397] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 542.540156][T20394] syz_tun (unregistering): left promiscuous mode [ 542.936624][T20420] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 542.981614][T20421] team0: entered promiscuous mode [ 542.987099][T20421] team_slave_1: entered promiscuous mode [ 542.992977][T20421] bond0: entered promiscuous mode [ 543.002113][T20421] bond_slave_0: entered promiscuous mode [ 543.008179][T20421] bond_slave_1: entered promiscuous mode [ 543.026951][T20421] dummy0: entered promiscuous mode [ 543.035657][T20421] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 543.045402][T20421] Cannot create hsr debugfs directory [ 544.644208][T20494] __nla_validate_parse: 35 callbacks suppressed [ 544.644233][T20494] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 546.510561][T20542] lo: entered allmulticast mode [ 546.543593][ T29] audit: type=1804 audit(1718987965.828:56): pid=20543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3788655336/syzkaller.5ZpqbD/729/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 546.603788][ T29] audit: type=1804 audit(1718987965.888:57): pid=20544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir3788655336/syzkaller.5ZpqbD/729/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 546.673000][T20546] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 546.695877][ T29] audit: type=1804 audit(1718987965.978:58): pid=20543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir3788655336/syzkaller.5ZpqbD/729/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 547.182649][T20549] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 547.607605][T20557] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.0'. [ 547.961676][ T1107] gretap0: left allmulticast mode [ 547.979989][ T1107] gretap0: left promiscuous mode [ 547.997578][ T1107] bridge0: port 1(gretap0) entered disabled state [ 548.017736][ T1107] veth1_to_bond: left allmulticast mode [ 548.035290][ T1107] veth1_to_bond: left promiscuous mode [ 548.041121][ T1107] bridge2: port 2(veth1_to_bond) entered disabled state [ 548.067689][ T1107] bridge_slave_1: left allmulticast mode [ 548.073400][ T1107] bridge_slave_1: left promiscuous mode [ 548.095362][ T1107] bridge2: port 1(bridge_slave_1) entered disabled state [ 548.496360][T20573] netlink: 344 bytes leftover after parsing attributes in process `syz-executor.0'. [ 549.161809][ T1107] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 549.175846][ T1107] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 549.188903][ T1107] bond0 (unregistering): Released all slaves [ 549.318725][ T1107] tipc: Left network mode [ 549.412871][T20591] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. [ 549.550341][T20593] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 549.568692][T20593] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 549.713703][T20602] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. [ 549.733725][T20602] 0ªX¹¦À: renamed from caif0 [ 549.750026][T20602] 0ªX¹¦À: entered allmulticast mode [ 549.760607][T20602] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 550.400689][T20628] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.3'. [ 550.484715][ T1107] team0: left promiscuous mode [ 550.508440][ T1107] team_slave_0: left promiscuous mode [ 550.524303][ T1107] team_slave_1: left promiscuous mode [ 550.545348][ T1107] dummy0: left promiscuous mode [ 550.601509][ T1107] hsr_slave_0: left promiscuous mode [ 550.623006][ T1107] hsr_slave_1: left promiscuous mode [ 550.716635][ T1107] veth1_macvtap: left promiscuous mode [ 550.722340][ T1107] veth0_macvtap: left promiscuous mode [ 550.738288][ T1107] veth1_vlan: left promiscuous mode [ 550.743669][ T1107] veth0_vlan: left promiscuous mode [ 550.918902][T20645] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 551.253373][ T1107] pim6reg (unregistering): left allmulticast mode [ 551.952173][ T1107] team0 (unregistering): Port device team_slave_1 removed [ 552.033242][ T1107] team0 (unregistering): Port device team_slave_0 removed [ 552.391655][ T1107] vxcan1 (unregistering): left allmulticast mode [ 552.635327][T20656] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 552.901491][T20667] sctp: [Deprecated]: syz-executor.3 (pid 20667) Use of int in max_burst socket option deprecated. [ 552.901491][T20667] Use struct sctp_assoc_value instead [ 552.965609][T20667] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 552.976475][T20667] netlink: 9352 bytes leftover after parsing attributes in process `syz-executor.3'. [ 553.000762][T20667] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 553.036383][T20667] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 553.182119][ T1107] IPVS: stop unused estimator thread 0... [ 553.582919][T20701] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 554.455742][T20732] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 554.677747][T20748] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 554.726938][T20748] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 555.174922][T20766] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 555.419276][T20776] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 555.634198][T20791] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 556.355607][T20834] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 556.708575][T20849] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 556.742698][T20842] tipc: Enabled bearer , priority 0 [ 556.900323][T20842] tipc: Resetting bearer [ 556.914993][T20849] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 556.934736][T20859] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 556.957071][T20840] tipc: Resetting bearer [ 557.337803][T20877] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.4'. [ 557.478017][T20880] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 557.589048][T20884] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 558.943624][T20840] tipc: Disabling bearer [ 558.958222][T20873] sit0: entered promiscuous mode [ 558.967845][T20873] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 558.979582][T20873] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.4'. [ 559.148146][T20903] netlink: 300 bytes leftover after parsing attributes in process `syz-executor.3'. [ 559.605676][T20929] tipc: Enabled bearer , priority 0 [ 559.717287][T20929] tipc: Resetting bearer [ 559.752637][T20941] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 559.819462][T20924] tipc: Resetting bearer [ 559.946485][T20958] __nla_validate_parse: 2 callbacks suppressed [ 559.946505][T20958] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 560.349302][T20977] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 560.357928][T20977] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 561.787111][T20924] tipc: Disabling bearer [ 561.807078][T20957] netlink: 'syz-executor.1': attribute type 32 has an invalid length. [ 561.817027][T20957] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 561.827142][T20957] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 561.836243][T20957] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 562.052594][T20997] mac80211_hwsim hwsim37 wlan0: entered promiscuous mode [ 562.090988][T20997] macsec1: entered promiscuous mode [ 562.100579][T20997] macsec1: entered allmulticast mode [ 562.112734][T20997] mac80211_hwsim hwsim37 wlan0: entered allmulticast mode [ 562.134052][T20997] mac80211_hwsim hwsim37 wlan0: left allmulticast mode [ 562.153213][T20997] mac80211_hwsim hwsim37 wlan0: left promiscuous mode [ 562.421391][T21022] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 562.446656][T21019] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.3'. [ 563.131727][T21066] x_tables: unsorted underflow at hook 4 [ 563.150429][T21066] (unnamed net_device) (uninitialized): option use_carrier: invalid value (164) [ 563.262064][T21072] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 563.292523][ T1252] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.430833][T21078] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 563.625693][T21086] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 564.266262][T21124] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 564.593019][T21146] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 564.614049][T21146] bridge_slave_1: left allmulticast mode [ 564.619898][T21146] bridge_slave_1: left promiscuous mode [ 564.625808][T21146] bridge2: port 1(bridge_slave_1) entered disabled state [ 564.636072][T21146] bridge11: port 1(bridge_slave_1) entered blocking state [ 564.643368][T21146] bridge11: port 1(bridge_slave_1) entered disabled state [ 564.651540][T21146] bridge_slave_1: entered allmulticast mode [ 564.658791][T21146] bridge_slave_1: entered promiscuous mode [ 564.674861][T21144] tipc: Started in network mode [ 564.682664][T21144] tipc: Node identity ea9a67d22d71, cluster identity 4711 [ 564.696558][T21144] tipc: Enabled bearer , priority 0 [ 564.939755][ T29] audit: type=1804 audit(1718987984.228:59): pid=21167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3194489376/syzkaller.sIDzlP/121/cgroup.controllers" dev="sda1" ino=1940 res=1 errno=0 [ 565.017043][ T29] audit: type=1804 audit(1718987984.308:60): pid=21167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir3194489376/syzkaller.sIDzlP/121/cgroup.controllers" dev="sda1" ino=1940 res=1 errno=0 [ 565.080594][T21175] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 565.090982][T21175] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 565.213318][T21184] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 565.370770][T21186] tipc: Enabled bearer , priority 0 [ 565.418772][T21186] tipc: Resetting bearer [ 565.427432][T21185] tipc: Resetting bearer [ 565.695342][ T5181] tipc: Node number set to 3354093522 [ 565.851880][T21193] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 565.916627][T21196] sctp: [Deprecated]: syz-executor.1 (pid 21196) Use of int in max_burst socket option deprecated. [ 565.916627][T21196] Use struct sctp_assoc_value instead [ 566.484611][T21220] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 567.634215][T21185] tipc: Disabling bearer [ 567.649068][T21193] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 567.659890][T21207] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 567.670957][T21207] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 567.680925][T21209] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 567.712338][T21211] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 568.199254][T21261] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 568.397095][T21270] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 568.785923][T21293] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 568.816285][T21293] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 569.257571][T21325] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 569.335803][T21324] netlink: 'syz-executor.3': attribute type 28 has an invalid length. [ 569.549333][T21345] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 569.563218][T21335] bond6: entered promiscuous mode [ 570.310024][T21385] __nla_validate_parse: 16 callbacks suppressed [ 570.310045][T21385] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 570.357336][T21388] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 570.380854][T21388] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 570.425291][T21388] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 570.551749][T21390] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 570.624043][T21401] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 570.689112][T21390] bond3: entered promiscuous mode [ 571.003456][T21410] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 571.030413][ T3873] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.196815][ T3873] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.199235][T21412] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 571.261601][ T5133] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 571.278334][ T5133] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 571.280133][T21419] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 571.298535][ T5133] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 571.315052][ T5133] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 571.327489][ T5133] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 571.335028][ T5133] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 571.384117][ T3873] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.510444][ T3873] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.548173][T21425] wg0 speed is unknown, defaulting to 1000 [ 571.560307][T21425] lo speed is unknown, defaulting to 1000 [ 571.753990][T21438] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 571.866570][T21441] x_tables: unsorted entry at hook 1 [ 572.060342][ T3873] gretap0: left allmulticast mode [ 572.078083][ T3873] gretap0: left promiscuous mode [ 572.087526][ T3873] bridge0: port 3(gretap0) entered disabled state [ 572.113115][ T3873] bridge_slave_1: left allmulticast mode [ 572.128005][ T3873] bridge_slave_1: left promiscuous mode [ 572.140018][ T3873] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.163533][ T3873] bridge_slave_0: left allmulticast mode [ 572.182063][ T3873] bridge_slave_0: left promiscuous mode [ 572.199091][ T3873] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.237964][ T3873] tipc: Resetting bearer [ 572.850829][T21491] x_tables: unsorted entry at hook 1 [ 573.098217][ T3873] tipc: Disabling bearer [ 573.290573][ T3873] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 573.305583][ T3873] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 573.320054][ T3873] bond0 (unregistering): Released all slaves [ 573.373331][T21482] infiniband syz0: set active [ 573.445675][ T5132] Bluetooth: hci3: command tx timeout [ 573.504643][ T3873] tipc: Left network mode [ 573.509426][ T5168] lo speed is unknown, defaulting to 1000 [ 574.065699][T21527] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 574.086234][T21425] chnl_net:caif_netlink_parms(): no params data found [ 574.625761][ T3873] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 574.635773][ T3873] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 574.659137][ T3873] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 574.686233][ T3873] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 574.737016][ T3873] veth1_macvtap: left promiscuous mode [ 574.755589][ T3873] veth0_macvtap: left promiscuous mode [ 574.761304][ T3873] veth1_vlan: left promiscuous mode [ 574.785811][ T3873] veth0_vlan: left promiscuous mode [ 574.997845][T21562] x_tables: unsorted entry at hook 1 [ 575.512682][ T3873] team0 (unregistering): Port device team_slave_1 removed [ 575.531665][ T5132] Bluetooth: hci3: command tx timeout [ 575.564849][ T3873] team0 (unregistering): Port device team_slave_0 removed [ 576.055921][T21547] infiniband syz0: set active [ 576.064309][T21543] __nla_validate_parse: 7 callbacks suppressed [ 576.064331][T21543] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 576.096827][T21562] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 576.208720][T21425] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.220013][T21425] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.234034][T21425] bridge_slave_0: entered allmulticast mode [ 576.252543][T21425] bridge_slave_0: entered promiscuous mode [ 576.274112][ T25] lo speed is unknown, defaulting to 1000 [ 576.274526][T21425] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.299047][T21425] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.327135][T21425] bridge_slave_1: entered allmulticast mode [ 576.336519][T21425] bridge_slave_1: entered promiscuous mode [ 576.421178][T21425] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 576.476120][T21425] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 576.571649][T21425] team0: Port device team_slave_0 added [ 576.589924][T21425] team0: Port device team_slave_1 added [ 576.653711][T21425] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 576.669031][T21425] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 576.701349][T21425] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 576.727234][T21425] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 576.741008][T21425] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 576.767728][T21425] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 576.888999][T21425] hsr_slave_0: entered promiscuous mode [ 576.909931][T21425] hsr_slave_1: entered promiscuous mode [ 576.989301][T21609] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 577.023903][T21609] x_tables: unsorted entry at hook 1 [ 577.045945][T21609] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 577.251829][T21622] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 577.499309][T21632] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 577.589878][T21635] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 577.614041][ T5132] Bluetooth: hci3: command tx timeout [ 577.617741][T21635] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'. [ 577.654389][T21635] team0: entered promiscuous mode [ 577.663941][T21635] team_slave_0: entered promiscuous mode [ 577.681763][T21635] team_slave_1: entered promiscuous mode [ 577.688803][T21635] bridge0: port 3(team0) entered blocking state [ 577.696243][T21635] bridge0: port 3(team0) entered disabled state [ 577.702885][T21635] team0: entered allmulticast mode [ 577.708302][T21635] team_slave_0: entered allmulticast mode [ 577.714297][T21635] team_slave_1: entered allmulticast mode [ 577.723900][T21635] bridge0: port 3(team0) entered blocking state [ 577.730636][T21635] bridge0: port 3(team0) entered forwarding state [ 577.760158][T21643] syz_tun: entered promiscuous mode [ 577.770683][T21643] vlan2: entered promiscuous mode [ 577.780070][T21643] syz_tun: left promiscuous mode [ 577.824577][T21644] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 577.838576][T21641] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 578.020833][T21425] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 578.045908][T21425] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 578.073464][T21425] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 578.101036][T21425] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 578.242511][T21666] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 578.265941][T21666] IPv6: NLM_F_CREATE should be specified when creating new route [ 578.286617][T21666] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 578.293882][T21666] IPv6: NLM_F_CREATE should be set when creating new route [ 578.301236][T21666] IPv6: NLM_F_CREATE should be set when creating new route [ 578.308554][T21666] IPv6: NLM_F_CREATE should be set when creating new route [ 578.326783][T21676] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 578.460462][T21425] 8021q: adding VLAN 0 to HW filter on device bond0 [ 578.507296][T21425] 8021q: adding VLAN 0 to HW filter on device team0 [ 578.537015][ T5181] bridge0: port 1(bridge_slave_0) entered blocking state [ 578.544300][ T5181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 578.581824][ T5172] bridge0: port 2(bridge_slave_1) entered blocking state [ 578.589078][ T5172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 578.754345][T21689] EXT4-fs warning (device sda1): ext4_group_extend:1869: need to use ext2online to resize further [ 578.981848][T21425] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 579.080901][T21425] veth0_vlan: entered promiscuous mode [ 579.105257][T21425] veth1_vlan: entered promiscuous mode [ 579.241993][T21425] veth0_macvtap: entered promiscuous mode [ 579.260639][T21425] veth1_macvtap: entered promiscuous mode [ 579.324276][T21425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 579.364484][T21425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.388479][T21425] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 579.410750][T21425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 579.421654][T21425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.434232][T21425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 579.445368][T21425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.457302][T21425] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 579.477239][T21425] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.490070][T21425] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.501619][T21425] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.518743][T21425] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.608480][T21713] vlan2: entered promiscuous mode [ 579.685429][ T5132] Bluetooth: hci3: command tx timeout [ 579.807573][ T1107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 579.823380][ T1107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 579.908766][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 579.933898][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 579.997248][T21729] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 580.111422][T21735] pim6reg: entered allmulticast mode [ 580.510692][T21741] team0 (unregistering): Port device team_slave_0 removed [ 580.532818][T21741] team0 (unregistering): Port device team_slave_1 removed [ 580.593594][T21746] bond4: entered promiscuous mode [ 581.001691][T21760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 581.364990][T21781] __nla_validate_parse: 4 callbacks suppressed [ 581.365013][T21781] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 581.440268][T21780] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 581.500072][T21780] bond5: entered promiscuous mode [ 581.655798][T21798] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 581.675154][T21798] netlink: 'syz-executor.4': attribute type 8 has an invalid length. [ 581.693950][T21798] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.4'. [ 581.791694][T21807] bridge0: port 4(macsec0) entered blocking state [ 581.798654][T21807] bridge0: port 4(macsec0) entered disabled state [ 581.806193][T21807] macsec0: entered allmulticast mode [ 581.811735][T21807] veth1_macvtap: entered allmulticast mode [ 581.819622][T21807] macsec0: entered promiscuous mode [ 581.828651][T21807] bridge0: port 4(macsec0) entered blocking state [ 581.835295][T21807] bridge0: port 4(macsec0) entered forwarding state [ 582.026037][T21813] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 582.369582][T21831] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 582.400741][T21831] bond5: entered promiscuous mode [ 583.244102][T21868] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 583.331068][T21868] bond7: entered promiscuous mode [ 583.459740][T21889] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 583.605892][ T5132] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 583.612672][ T5133] Bluetooth: hci0: command 0x0c20 tx timeout [ 583.873783][T21907] Bluetooth: MGMT ver 1.22 [ 583.997014][T21917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 584.574586][T21932] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 584.621359][T21932] bond6: entered promiscuous mode [ 584.779400][T21946] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 584.841442][T21949] syz_tun: entered promiscuous mode [ 584.848602][T21949] vlan2: entered promiscuous mode [ 584.870793][T21949] syz_tun: left promiscuous mode [ 584.913221][T21952] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 584.932738][T21954] netlink: 'syz-executor.4': attribute type 25 has an invalid length. [ 584.941695][T21954] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 585.018402][T21957] batadv1: entered allmulticast mode [ 585.927994][T21996] syz_tun: entered promiscuous mode [ 585.954401][T21996] vlan2: entered promiscuous mode [ 585.973147][T21996] syz_tun: left promiscuous mode [ 586.810675][T22046] syz_tun: entered promiscuous mode [ 586.825719][T22046] vlan2: entered promiscuous mode [ 586.867623][T22046] syz_tun: left promiscuous mode [ 587.065951][T22061] IPv6: NLM_F_REPLACE set, but no existing node found! [ 587.138559][T22065] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 587.150316][T22065] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 587.404198][T22079] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 587.457944][T22079] netdevsim netdevsim3 : entered promiscuous mode [ 587.475499][T22079] netdevsim netdevsim3 : entered allmulticast mode [ 587.488023][T22079] bond0: (slave ): Enslaving as an active interface with an up link [ 587.624509][T22095] tun0: tun_chr_ioctl cmd 1074025677 [ 587.638421][T22095] tun0: linktype set to 773 [ 587.709687][T22098] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 587.731971][T22101] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 587.738740][T22100] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.3'. [ 588.231692][T22125] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.3'. [ 588.244220][T22125] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 588.265255][T22125] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.3'. [ 588.325348][ T5132] Bluetooth: hci0: command 0x0c20 tx timeout [ 588.331467][ T5133] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 588.387580][T22134] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 588.665767][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88807b169000: rx timeout, send abort [ 588.702594][T22144] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 588.864445][T22153] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 589.172656][T22167] FAULT_INJECTION: forcing a failure. [ 589.172656][T22167] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 589.175927][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88807b169000: abort rx timeout. Force session deactivation [ 589.193758][T22167] CPU: 0 PID: 22167 Comm: syz-executor.0 Not tainted 6.10.0-rc4-syzkaller-00836-gb0d3969d2b4d #0 [ 589.206712][T22167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 589.216827][T22167] Call Trace: [ 589.220228][T22167] [ 589.223189][T22167] dump_stack_lvl+0x241/0x360 [ 589.227962][T22167] ? __pfx_dump_stack_lvl+0x10/0x10 [ 589.233212][T22167] ? __pfx__printk+0x10/0x10 [ 589.237849][T22167] ? __pfx_lock_release+0x10/0x10 [ 589.242922][T22167] should_fail_ex+0x3b0/0x4e0 [ 589.247659][T22167] _copy_from_user+0x2f/0xe0 [ 589.252290][T22167] copy_msghdr_from_user+0xae/0x680 [ 589.257623][T22167] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 589.263485][T22167] __sys_recvmsg+0x252/0x3e0 [ 589.268122][T22167] ? __pfx_lock_release+0x10/0x10 [ 589.273202][T22167] ? __pfx___sys_recvmsg+0x10/0x10 [ 589.278422][T22167] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 589.284802][T22167] ? do_syscall_64+0x100/0x230 [ 589.289626][T22167] ? do_syscall_64+0xb6/0x230 [ 589.294403][T22167] do_syscall_64+0xf3/0x230 [ 589.298961][T22167] ? clear_bhb_loop+0x35/0x90 [ 589.303698][T22167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.309653][T22167] RIP: 0033:0x7fdb1047cf29 [ 589.314120][T22167] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 589.333766][T22167] RSP: 002b:00007fdb111900c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 589.342246][T22167] RAX: ffffffffffffffda RBX: 00007fdb105b3f80 RCX: 00007fdb1047cf29 [ 589.350275][T22167] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 589.358260][T22167] RBP: 00007fdb11190120 R08: 0000000000000000 R09: 0000000000000000 [ 589.366253][T22167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 589.374239][T22167] R13: 000000000000004d R14: 00007fdb105b3f80 R15: 00007fffc2796b98 [ 589.382251][T22167] [ 589.399792][T22171] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.2'. [ 589.413639][T22171] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 589.691231][T22193] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 589.709766][T22195] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 589.720786][T22195] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 589.737330][T22195] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 590.749440][T22269] gretap0: left allmulticast mode [ 590.761322][T22269] gretap0: left promiscuous mode [ 590.775497][T22269] bridge0: port 2(gretap0) entered disabled state [ 590.813435][T22269] bridge_slave_0: left allmulticast mode [ 590.822354][T22269] bridge_slave_0: left promiscuous mode [ 590.833701][T22269] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.976101][T22269] bond0: (slave bridge0): Releasing backup interface [ 591.079978][T22286] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 591.104457][T22286] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 591.377643][T22299] nbd: must specify a device to reconfigure [ 591.800904][T22325] bond6: entered promiscuous mode [ 591.821022][T22330] vlan2: entered allmulticast mode [ 591.829793][T22330] bond0: (slave vlan2): Opening slave failed [ 591.910077][T22337] netem: unknown loss type 0 [ 591.916276][T22337] netem: change failed [ 592.469356][T22365] bond8: entered promiscuous mode [ 592.814747][T22393] __nla_validate_parse: 12 callbacks suppressed [ 592.814770][T22393] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 592.852453][T22397] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 592.922622][T22402] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 592.931295][T22402] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 592.940580][T22402] netlink: 181400 bytes leftover after parsing attributes in process `syz-executor.0'. [ 593.097616][T22408] can: request_module (can-proto-0) failed. [ 593.283257][T22422] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 593.310674][T22418] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 593.343166][T22418] bond1: entered promiscuous mode [ 593.452064][T22429] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 593.697298][T22440] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 593.972202][T22453] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 594.246743][ T5133] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 594.253206][ T5133] Bluetooth: hci0: command 0x0c20 tx timeout [ 594.300270][T22463] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 594.309335][T22463] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 594.318807][T22463] netlink: 181400 bytes leftover after parsing attributes in process `syz-executor.2'. [ 594.391804][T22463] can: request_module (can-proto-0) failed. [ 594.610863][T22472] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 594.758114][T22472] bond3: entered promiscuous mode [ 595.205012][T22503] syz_tun: entered promiscuous mode [ 595.212099][T22503] vlan2: entered promiscuous mode [ 595.221068][T22503] syz_tun: left promiscuous mode [ 595.303229][T22509] wg0 speed is unknown, defaulting to 1000 [ 595.361080][T22509] lo speed is unknown, defaulting to 1000 [ 595.671209][T22514] "syz-executor.0" (22514) uses obsolete ecb(arc4) skcipher [ 596.138925][T22539] bond9: entered promiscuous mode [ 596.383773][T22554] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 596.423464][T22554] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 596.489294][T22556] can: request_module (can-proto-0) failed. [ 596.965911][ T5132] Bluetooth: hci0: command 0x0c20 tx timeout [ 596.972158][ T5133] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 597.192375][T22581] bond2: entered promiscuous mode [ 597.277415][T22585] wg0 speed is unknown, defaulting to 1000 [ 597.337387][T22585] lo speed is unknown, defaulting to 1000 [ 598.550353][T22635] __nla_validate_parse: 11 callbacks suppressed [ 598.550369][T22635] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 598.634976][T22635] bond7: entered promiscuous mode [ 599.599564][T22676] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 599.616433][T22676] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 599.634855][T22676] netlink: 9352 bytes leftover after parsing attributes in process `syz-executor.4'. [ 599.657523][T22676] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 599.685273][T22676] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 599.861238][T22681] batadv_slave_0: entered promiscuous mode [ 599.903719][T22681] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 599.959274][T22197] tipc: Subscription rejected, illegal request [ 599.979754][T22680] batadv_slave_0: left promiscuous mode [ 600.125966][T22692] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 600.173813][T22692] bond8: entered promiscuous mode [ 600.191614][T22697] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 600.200797][T22693] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 600.351950][T22705] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 600.642659][T22715] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 600.723355][T22715] bond9: entered promiscuous mode [ 600.965552][ T5132] Bluetooth: hci0: command 0x0c20 tx timeout [ 600.972083][ T5133] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 601.093709][T22742] pimreg: entered allmulticast mode [ 601.143811][T22742] pimreg: left allmulticast mode [ 601.347575][T22745] bond7: entered promiscuous mode [ 601.423489][T22752] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 601.432803][T22752] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 601.442185][T22752] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 601.452267][T22752] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 601.462428][T22752] vxlan0: entered promiscuous mode [ 601.471608][T22753] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 601.545672][T22752] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 602.082417][T22776] pimreg: entered allmulticast mode [ 602.125200][T22776] pimreg: left allmulticast mode [ 602.275309][T22778] bond3: entered promiscuous mode [ 602.381729][T22784] bond8: entered promiscuous mode [ 602.529829][T22791] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 602.557680][T22791] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 602.638502][T22795] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 602.668538][T22795] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 602.936481][T22820] bond4: entered promiscuous mode [ 603.045241][ T5132] Bluetooth: hci0: command 0x0c20 tx timeout [ 603.053014][ T5133] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 603.483277][T22859] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 603.508706][T22859] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 604.226968][T22887] __nla_validate_parse: 19 callbacks suppressed [ 604.226991][T22887] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 604.573984][T22903] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 605.014833][T22926] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 605.043777][T22926] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.0'. [ 605.125283][ T5132] Bluetooth: hci0: command 0x0c20 tx timeout [ 605.132213][ T5133] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 605.183484][T22928] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 605.275876][T22928] bond5: entered promiscuous mode [ 605.440714][T22949] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.0'. [ 605.796805][T22967] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 605.828291][T22970] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 605.845425][T22970] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 606.119477][T22982] pimreg: entered allmulticast mode [ 606.143195][T22982] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 606.207715][T22982] pimreg: left allmulticast mode [ 607.062291][T23031] bond9: entered promiscuous mode [ 607.205351][ T5132] Bluetooth: hci0: command 0x0c20 tx timeout [ 607.211505][ T5133] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 607.852855][T23079] bond10: entered promiscuous mode [ 609.119527][T23127] IPVS: Unknown mcast interface: netdevsim0 [ 609.285323][ T5133] Bluetooth: hci0: command 0x0c20 tx timeout [ 609.388068][T23143] __nla_validate_parse: 44 callbacks suppressed [ 609.388091][T23143] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 609.423034][T23139] x_tables: eb_tables: nflog.0 target: invalid size 80 (kernel) != (user) 0 [ 609.623248][T23157] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 609.637301][T23157] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 609.648671][T23157] bond0: option all_slaves_active: invalid value (6) [ 609.733578][T23163] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 609.743472][T23163] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 610.522320][T23184] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 610.538418][T23184] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 610.547449][T23184] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 610.586399][T23184] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 610.595515][T23184] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 610.605485][T23184] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 610.702082][T22210] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.743029][T23190] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 610.796592][T23183] wg0 speed is unknown, defaulting to 1000 [ 610.824799][T23193] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.3'. [ 610.847330][T22210] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.889684][T23183] lo speed is unknown, defaulting to 1000 [ 610.967255][T23204] tun0: tun_chr_ioctl cmd 1074812117 [ 611.054720][T22210] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.166391][T22210] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.323704][T23222] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 611.337852][T23222] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 611.404486][T23222] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 611.507062][T23226] x_tables: eb_tables: nflog.0 target: invalid size 80 (kernel) != (user) 0 [ 611.528963][T22210] macsec0: left allmulticast mode [ 611.534059][T22210] veth1_macvtap: left allmulticast mode [ 611.555405][T22210] macsec0: left promiscuous mode [ 611.560786][T22210] bridge0: port 4(macsec0) entered disabled state [ 611.576448][T22210] team0: left allmulticast mode [ 611.582635][T22210] team_slave_0: left allmulticast mode [ 611.593408][T22210] team_slave_1: left allmulticast mode [ 611.599518][T22210] bridge0: port 3(team0) entered disabled state [ 611.607635][ T5132] Bluetooth: hci0: command 0x0c20 tx timeout [ 611.613799][ T5133] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 611.642435][T22210] bridge_slave_1: left allmulticast mode [ 611.648308][T22210] bridge_slave_1: left promiscuous mode [ 611.654165][T22210] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.666749][T22210] bridge_slave_0: left allmulticast mode [ 611.673302][T22210] bridge_slave_0: left promiscuous mode [ 611.681797][T22210] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.718574][T23238] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 612.646565][ T5133] Bluetooth: hci1: command tx timeout [ 613.219519][T22210] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 613.235394][T22210] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 613.247370][T22210] bond0 (unregistering): Released all slaves [ 613.363037][T22210] bond1 (unregistering): Released all slaves [ 613.377186][T22210] bond2 (unregistering): Released all slaves [ 613.392783][T22210] bond3 (unregistering): Released all slaves [ 613.418431][T22210] bond4 (unregistering): Released all slaves [ 613.437849][T22210] bond5 (unregistering): Released all slaves [ 613.452717][T22210] bond6 (unregistering): Released all slaves [ 613.474285][T22210] bond7 (unregistering): Released all slaves [ 613.494048][T22210] bond8 (unregistering): Released all slaves [ 613.508158][T22210] bond9 (unregistering): Released all slaves [ 613.543032][T23240] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 613.553081][T23240] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 613.567487][T23183] chnl_net:caif_netlink_parms(): no params data found [ 613.791090][T23286] netdevsim netdevsim3 : set [0, 0] type 1 family 0 port 8472 - 0 [ 613.799234][T23286] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 613.808542][T23286] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 613.817407][T23286] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 613.840373][T23286] vxlan0: entered promiscuous mode [ 613.845950][T23286] vxlan0: entered allmulticast mode [ 613.874703][T23286] netdevsim netdevsim3 : unset [0, 0] type 1 family 0 port 8472 - 0 [ 613.883640][T23286] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 613.892781][T23286] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 613.901770][T23286] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 614.059600][T23183] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.076093][T23183] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.083454][T23183] bridge_slave_0: entered allmulticast mode [ 614.107188][T23183] bridge_slave_0: entered promiscuous mode [ 614.138166][T23183] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.158692][T23183] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.172734][T23183] bridge_slave_1: entered allmulticast mode [ 614.186529][T23183] bridge_slave_1: entered promiscuous mode [ 614.270484][T23313] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 614.324966][T23183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 614.414859][T23183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 614.514297][T23183] team0: Port device team_slave_0 added [ 614.529569][T23183] team0: Port device team_slave_1 added [ 614.725269][ T5133] Bluetooth: hci1: command tx timeout [ 614.750591][T23183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 614.758534][T23183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 614.787994][T23183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 614.806310][T22210] hsr_slave_0: left promiscuous mode [ 614.812254][T22210] hsr_slave_1: left promiscuous mode [ 614.819448][T22210] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 614.827129][T22210] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 614.859241][T22210] veth1_macvtap: left promiscuous mode [ 614.864827][T22210] veth0_macvtap: left promiscuous mode [ 614.870973][T22210] veth1_vlan: left promiscuous mode [ 614.876596][T22210] veth0_vlan: left promiscuous mode [ 615.313294][T22210] pim6reg (unregistering): left allmulticast mode [ 615.563845][T23337] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 615.828641][T22210] team_slave_1 (unregistering): left promiscuous mode [ 615.841376][T22210] team0 (unregistering): Port device team_slave_1 removed [ 615.882657][T22210] team_slave_0 (unregistering): left promiscuous mode [ 615.893111][T22210] team0 (unregistering): Port device team_slave_0 removed [ 616.361076][T23323] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 616.394223][T23323] bond10: entered promiscuous mode [ 616.406143][T23183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 616.413136][T23183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 616.440878][T23183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 616.481805][T23326] bridge0: port 2(vlan2) entered blocking state [ 616.492980][T23326] bridge0: port 2(vlan2) entered disabled state [ 616.513046][T23326] vlan2: entered allmulticast mode [ 616.522071][T23326] vlan2: left allmulticast mode [ 616.698163][T23183] hsr_slave_0: entered promiscuous mode [ 616.711450][T23183] hsr_slave_1: entered promiscuous mode [ 616.739018][T23183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 616.761716][T23183] Cannot create hsr debugfs directory [ 616.810980][ T5133] Bluetooth: hci1: command tx timeout [ 616.917424][T23353] SET target dimension over the limit! [ 617.241810][T23361] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 617.281896][T23361] bond11: entered promiscuous mode [ 617.291025][T23363] netlink: 'syz-executor.2': attribute type 39 has an invalid length. [ 617.390761][T23364] netlink: 'syz-executor.2': attribute type 39 has an invalid length. [ 617.424732][T23364] netlink: 'syz-executor.2': attribute type 39 has an invalid length. [ 617.492918][T23364] netlink: 'syz-executor.2': attribute type 39 has an invalid length. [ 617.506181][T23364] netlink: 'syz-executor.2': attribute type 39 has an invalid length. [ 617.603681][T23364] netlink: 'syz-executor.2': attribute type 39 has an invalid length. [ 617.616700][T23364] netlink: 'syz-executor.2': attribute type 39 has an invalid length. [ 617.626793][T23363] netlink: 'syz-executor.2': attribute type 39 has an invalid length. [ 617.637183][T23363] netlink: 'syz-executor.2': attribute type 39 has an invalid length. [ 617.676746][T23364] netlink: 'syz-executor.2': attribute type 39 has an invalid length. [ 617.738484][T23376] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 617.863129][T23183] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 617.897806][T23183] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 617.912637][T23380] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 617.923928][T23380] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0) [ 617.935355][T23380] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535 [ 617.946623][T23183] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 617.968247][T23183] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 618.203234][T23183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 618.272995][T23183] 8021q: adding VLAN 0 to HW filter on device team0 [ 618.329938][ T5173] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.337180][ T5173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 618.381861][ T5173] bridge0: port 2(bridge_slave_1) entered blocking state [ 618.389038][ T5173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 618.415906][T23400] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 618.784702][T23183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 618.885384][ T5133] Bluetooth: hci1: command tx timeout [ 619.311043][T23441] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 619.330373][T23183] veth0_vlan: entered promiscuous mode [ 619.368496][T23183] veth1_vlan: entered promiscuous mode [ 619.442041][T23183] veth0_macvtap: entered promiscuous mode [ 619.478359][T23183] veth1_macvtap: entered promiscuous mode [ 619.546626][T23183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 619.578827][T23183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 619.612222][T23183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.645492][T23183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 619.675104][T23183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.711592][T23183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 619.739296][T23183] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.760329][T23183] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.785169][T23183] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.793972][T23183] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.039299][T22209] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 620.076022][T22209] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 620.133525][T23475] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 620.147373][T23471] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 620.163786][T22197] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 620.195364][T22197] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 620.310514][T23480] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 620.359318][T23483] syz_tun: entered promiscuous mode [ 620.364722][T23483] vlan2: entered promiscuous mode [ 620.372607][T23483] syz_tun: left promiscuous mode [ 620.687033][T23505] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 620.722530][T23508] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.4'. [ 620.736368][T23508] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 620.757632][T23509] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 620.967157][ T5132] Bluetooth: hci0: command 0x0c20 tx timeout [ 620.973699][ T5133] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 621.302023][T23537] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 621.313791][T23539] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.4'. [ 621.329305][T23539] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 621.543041][T23557] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. [ 622.846049][T23591] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 622.869479][T23592] validate_nla: 135 callbacks suppressed [ 622.869500][T23592] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 622.914161][T23592] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.4'. [ 623.221592][T23606] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 623.228940][T23606] IPv6: NLM_F_CREATE should be set when creating new route [ 623.236276][T23606] IPv6: NLM_F_CREATE should be set when creating new route [ 623.285599][ T5132] Bluetooth: hci0: command 0x0c20 tx timeout [ 623.291791][ T5133] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 624.043354][ T5132] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 624.054736][ T5132] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 624.063068][ T5132] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 624.075782][ T5132] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 624.084477][ T5132] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 624.093785][ T5132] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 624.276112][T23617] wg0 speed is unknown, defaulting to 1000 [ 624.296802][T23617] lo speed is unknown, defaulting to 1000 [ 624.733569][ T1252] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.231916][T23617] chnl_net:caif_netlink_parms(): no params data found [ 625.652636][T23617] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.662762][T23617] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.673750][T23617] bridge_slave_0: entered allmulticast mode [ 625.704390][T23617] bridge_slave_0: entered promiscuous mode [ 625.717216][T23617] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.724776][T23617] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.732622][T23617] bridge_slave_1: entered allmulticast mode [ 625.740679][T23617] bridge_slave_1: entered promiscuous mode [ 625.819898][T23617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 625.843827][T23617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 625.933575][T23617] team0: Port device team_slave_0 added [ 625.948741][T23617] team0: Port device team_slave_1 added [ 626.021901][T23617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 626.035718][T23617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 626.085606][T23617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 626.107790][T23617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 626.114786][T23617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 626.165531][ T5133] Bluetooth: hci2: command tx timeout [ 626.172332][T23617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 626.348877][T23617] hsr_slave_0: entered promiscuous mode [ 626.371021][T23617] hsr_slave_1: entered promiscuous mode [ 626.386773][T23617] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 626.404627][T23617] Cannot create hsr debugfs directory [ 626.465839][T23681] __nla_validate_parse: 4 callbacks suppressed [ 626.465861][T23681] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 626.488978][ T5133] Bluetooth: hci0: command 0x0c20 tx timeout [ 626.504192][ T5132] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 626.877954][T23617] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.050054][T23617] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.141081][T23696] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 627.320733][T23617] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.557791][T23617] netdevsim netdevsim0  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.777896][T23617] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 627.800605][T23617] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 627.822128][T23617] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 627.851535][T23617] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 628.129081][T23617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 628.184163][T23617] 8021q: adding VLAN 0 to HW filter on device team0 [ 628.215660][T23717] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 628.246989][ T5132] Bluetooth: hci2: command tx timeout [ 628.284027][T23717] bond12: entered promiscuous mode [ 628.343512][ T5172] bridge0: port 1(bridge_slave_0) entered blocking state [ 628.350858][ T5172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 628.427607][ T5172] bridge0: port 2(bridge_slave_1) entered blocking state [ 628.434854][ T5172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 628.503032][T23731] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 629.012882][T23617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 629.133478][T23746] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 629.156973][T23617] veth0_vlan: entered promiscuous mode [ 629.197906][T23617] veth1_vlan: entered promiscuous mode [ 629.258916][T23617] veth0_macvtap: entered promiscuous mode [ 629.285827][T23617] veth1_macvtap: entered promiscuous mode [ 629.337420][T23617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 629.365376][T23617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.387454][T23617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 629.428514][T23617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 629.471331][T23617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.498418][T23617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 629.534705][T23617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.547131][T23617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 629.559489][T23617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.573898][T23617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 629.628496][T23617] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.645367][T23617] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.664336][T23617] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.678804][T23617] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.889642][T22210] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 629.917620][T22210] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 629.984536][T22210] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 630.004445][T23763] batadv_slave_1: entered promiscuous mode [ 630.011935][T22210] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 630.026990][T23762] batadv_slave_1: left promiscuous mode [ 630.178641][T23772] wg0 speed is unknown, defaulting to 1000 [ 630.194844][T23772] lo speed is unknown, defaulting to 1000 [ 630.215584][T23775] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 630.326754][ T5132] Bluetooth: hci2: command tx timeout [ 630.466369][T23780] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 631.591682][ T5133] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 631.601904][ T5133] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 631.627500][ T5133] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 631.636749][ T5133] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 631.656574][ T5133] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 631.666596][ T5133] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 631.716677][T23815] wg0 speed is unknown, defaulting to 1000 [ 631.724251][T23815] lo speed is unknown, defaulting to 1000 [ 631.783256][T23819] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 631.882596][T23821] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 631.902367][T23821] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 631.923967][T23821] bond0: option all_slaves_active: invalid value (6) [ 632.220202][T23829] Cannot find set identified by id 0 to match [ 632.407386][ T5132] Bluetooth: hci2: command tx timeout [ 632.639725][T23835] syz_tun: entered promiscuous mode [ 632.661346][T23835] vlan2: entered promiscuous mode [ 632.690398][T23835] syz_tun: left promiscuous mode [ 633.016772][T23854] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 633.036700][T23854] netlink: 71376 bytes leftover after parsing attributes in process `syz-executor.4'. [ 633.102683][ T5132] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 633.113752][ T5132] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 633.122607][ T5132] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 633.140412][ T5132] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 633.149238][ T5132] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 633.151937][T23815] chnl_net:caif_netlink_parms(): no params data found [ 633.176109][ T5132] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 633.292690][T23856] wg0 speed is unknown, defaulting to 1000 [ 633.380663][T23856] lo speed is unknown, defaulting to 1000 [ 633.383100][T23815] bridge0: port 1(bridge_slave_0) entered blocking state [ 633.405892][T23815] bridge0: port 1(bridge_slave_0) entered disabled state [ 633.414163][T23815] bridge_slave_0: entered allmulticast mode [ 633.424685][T23815] bridge_slave_0: entered promiscuous mode [ 633.458329][T23815] bridge0: port 2(bridge_slave_1) entered blocking state [ 633.485474][T23815] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.505343][T23815] bridge_slave_1: entered allmulticast mode [ 633.521677][T23815] bridge_slave_1: entered promiscuous mode [ 633.611112][T23871] wg0 speed is unknown, defaulting to 1000 [ 633.650932][T23815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 633.669278][T23815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 633.766637][ T5133] Bluetooth: hci5: command tx timeout [ 633.848583][T23815] team0: Port device team_slave_0 added [ 633.865905][T23871] lo speed is unknown, defaulting to 1000 [ 633.869266][T23815] team0: Port device team_slave_1 added [ 634.045512][T23815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 634.055210][T23815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 634.100740][T23815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 634.126482][T23815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 634.133489][T23815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 634.170479][T23815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 634.370834][T23891] syz_tun: entered promiscuous mode [ 634.385283][T23891] vlan2: entered promiscuous mode [ 634.407600][T23891] syz_tun: left promiscuous mode [ 634.458021][T23815] hsr_slave_0: entered promiscuous mode [ 634.465474][T23815] hsr_slave_1: entered promiscuous mode [ 634.472035][T23815] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 634.479833][T23815] Cannot create hsr debugfs directory [ 634.696954][T23900] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 634.704674][T23900] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 634.761508][T23903] netlink: 209840 bytes leftover after parsing attributes in process `syz-executor.4'. [ 634.815523][T23900] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 635.225992][T23856] chnl_net:caif_netlink_parms(): no params data found [ 635.287341][ T5133] Bluetooth: hci4: command tx timeout [ 635.310687][T23914] dvmrp0: entered allmulticast mode [ 635.323435][T23916] sit0: entered promiscuous mode [ 635.331406][T23914] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 635.354088][T23916] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 635.374244][T23916] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.0'. [ 635.408340][T23917] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 635.423905][T23917] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. [ 635.433783][T23917] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 635.447197][T23917] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. [ 635.531629][T23815] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.588853][T23914] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 635.652806][T23918] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 635.799318][T23815] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.845394][ T5133] Bluetooth: hci5: command tx timeout [ 635.972433][T23931] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 635.973143][T23856] bridge0: port 1(bridge_slave_0) entered blocking state [ 635.999129][T23931] netlink: 9352 bytes leftover after parsing attributes in process `syz-executor.0'. [ 636.019899][T23856] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.032676][T23856] bridge_slave_0: entered allmulticast mode [ 636.039415][T23931] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 636.060616][T23856] bridge_slave_0: entered promiscuous mode [ 636.144702][T23815] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.165577][T23934] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 636.198711][T23934] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 636.262404][T23815] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.311960][T23856] bridge0: port 2(bridge_slave_1) entered blocking state [ 636.331173][T23856] bridge0: port 2(bridge_slave_1) entered disabled state [ 636.349908][T23856] bridge_slave_1: entered allmulticast mode [ 636.364370][T23856] bridge_slave_1: entered promiscuous mode [ 636.382012][T23938] batadv_slave_0: entered allmulticast mode [ 636.581765][T23856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 636.610971][T23856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 637.060945][T23856] team0: Port device team_slave_0 added [ 637.089478][T23856] team0: Port device team_slave_1 added [ 637.207233][T23856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 637.214257][T23856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 637.278996][T23856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 637.296196][T23970] __nla_validate_parse: 1 callbacks suppressed [ 637.296217][T23970] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 637.304710][T23856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 637.336506][T23973] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'. [ 637.354761][T23856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 637.365419][ T5132] Bluetooth: hci4: command tx timeout [ 637.381936][T23973] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 637.387524][T23856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 637.420604][T23815] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 637.497347][T23815] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 637.569276][T23815] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 637.593892][T23815] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 637.744237][T23977] wg0 speed is unknown, defaulting to 1000 [ 637.760465][T23856] hsr_slave_0: entered promiscuous mode [ 637.808767][T23856] hsr_slave_1: entered promiscuous mode [ 637.833183][T23856] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 637.862525][T23856] Cannot create hsr debugfs directory [ 637.884701][T23977] lo speed is unknown, defaulting to 1000 [ 637.935282][ T5132] Bluetooth: hci5: command tx timeout [ 638.253266][T23998] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 638.540936][T23856] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.602321][T23815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 638.738481][T23856] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.937648][T23856] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.982357][T23815] 8021q: adding VLAN 0 to HW filter on device team0 [ 639.126592][ T5133] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 639.133011][ T5133] Bluetooth: hci0: command 0x0c20 tx timeout [ 639.143683][T23856] bond0: (slave ): Releasing backup interface [ 639.160555][T23856] netdevsim netdevsim3  (unregistering): left promiscuous mode [ 639.168624][T23856] netdevsim netdevsim3  (unregistering): left allmulticast mode [ 639.179996][T23856] netdevsim netdevsim3  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.223114][ T5168] bridge0: port 1(bridge_slave_0) entered blocking state [ 639.230353][ T5168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 639.276742][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 639.283975][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 639.447501][ T5133] Bluetooth: hci4: command tx timeout [ 639.598507][T24025] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 639.750756][T23856] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 639.797507][T23856] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 639.808147][T24031] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 639.829473][T23856] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 639.878424][T23815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 639.904036][T23856] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 640.005334][ T5133] Bluetooth: hci5: command tx timeout [ 640.044239][T24034] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 640.204871][T24038] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 640.217783][T24038] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 640.268414][T23815] veth0_vlan: entered promiscuous mode [ 640.303986][T24045] netlink: 360 bytes leftover after parsing attributes in process `syz-executor.0'. [ 640.361524][T23815] veth1_vlan: entered promiscuous mode [ 640.474007][T23856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 640.524649][T23815] veth0_macvtap: entered promiscuous mode [ 640.549352][T23856] 8021q: adding VLAN 0 to HW filter on device team0 [ 640.577371][T23815] veth1_macvtap: entered promiscuous mode [ 640.597687][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 640.604907][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 640.626292][ T5173] bridge0: port 2(bridge_slave_1) entered blocking state [ 640.633484][ T5173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 640.761524][T23815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 640.783187][T23815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.799262][T23815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 640.817052][T24057] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 640.919773][T24057] bond1: entered promiscuous mode [ 640.942251][T23815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 640.953100][T23815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.964341][T23815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 640.978647][T23815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.996381][T23815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 641.016297][T23815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.035430][T23815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 641.073116][T23815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.102493][T23815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 641.149754][T23815] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.205494][T23815] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.214337][T23815] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.245878][T23815] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.413380][T24074] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 641.692881][ T5132] Bluetooth: hci4: command tx timeout [ 641.936634][T22204] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 641.963209][T22204] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 642.024099][T23856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 642.050276][T22204] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 642.072289][T22204] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 642.212372][T23856] veth0_vlan: entered promiscuous mode [ 642.264055][T23856] veth1_vlan: entered promiscuous mode [ 642.411908][T23856] veth0_macvtap: entered promiscuous mode [ 642.471752][T23856] veth1_macvtap: entered promiscuous mode [ 642.564432][T23856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 642.574830][ T5133] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 642.575538][ T5133] Bluetooth: hci0: command 0x0c20 tx timeout [ 642.635565][T23856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 642.668971][T24116] __nla_validate_parse: 2 callbacks suppressed [ 642.668994][T24116] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 642.674910][T23856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 642.735826][T23856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 642.751274][T24122] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 642.797477][T23856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 642.851423][T23856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 642.889906][T23856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 642.935579][T23856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 642.963101][T23856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 642.978080][T23856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 643.014090][T23856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.041058][T23856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 643.070303][T23856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.090295][T23856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 643.104780][T23856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.146977][T23856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 643.184417][T23856] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.233557][T23856] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.262255][T23856] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.293145][T23856] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.331516][T24139] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 643.650151][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 643.678729][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 643.795318][T22210] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 643.821334][T22210] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 643.985722][T24154] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 644.207329][T24163] bond0: (slave bond_slave_0): Releasing backup interface [ 644.208949][T24168] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 644.265773][T24172] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 644.743247][T24196] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 644.819324][T24194] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 645.015594][T24204] dccp_invalid_packet: P.Data Offset(4) too small [ 645.180564][T24215] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 645.205181][T24215] ip6gretap0: entered promiscuous mode [ 645.384081][T24220] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 645.485849][T24222] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 647.587849][T24261] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN PTI [ 647.600495][T24261] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 647.608931][T24261] CPU: 0 PID: 24261 Comm: syz-executor.2 Not tainted 6.10.0-rc4-syzkaller-00836-gb0d3969d2b4d #0 [ 647.619460][T24261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 647.629547][T24261] RIP: 0010:dev_map_enqueue+0x31/0x3e0 [ 647.635048][T24261] Code: 41 56 41 55 41 54 53 48 83 ec 18 49 89 d4 49 89 f5 48 89 fd 49 be 00 00 00 00 00 fc ff df e8 b6 9b d7 ff 48 89 e8 48 c1 e8 03 <42> 80 3c 30 00 74 08 48 89 ef e8 f0 58 3d 00 4c 8b 7d 00 48 83 c5 [ 647.654768][T24261] RSP: 0018:ffffc900098ef678 EFLAGS: 00010246 [ 647.660845][T24261] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000040000 [ 647.668821][T24261] RDX: ffffc900127ab000 RSI: 0000000000000a2c RDI: 0000000000000a2d [ 647.676793][T24261] RBP: 0000000000000000 R08: ffffffff8961e3b6 R09: ffffffff8961e373 [ 647.684851][T24261] R10: 0000000000000004 R11: ffff8880557d3c00 R12: ffff88802d864000 [ 647.692831][T24261] R13: ffff88802dcb5070 R14: dffffc0000000000 R15: 0000000000000000 [ 647.700807][T24261] FS: 00007fdc9cebe6c0(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 647.709826][T24261] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 647.716435][T24261] CR2: 0000001b2d02f000 CR3: 0000000050a9c000 CR4: 00000000003506f0 [ 647.724493][T24261] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 647.732470][T24261] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 647.740448][T24261] Call Trace: [ 647.743726][T24261] [ 647.746656][T24261] ? __die_body+0x88/0xe0 [ 647.751001][T24261] ? die_addr+0x108/0x140 [ 647.755342][T24261] ? exc_general_protection+0x3dd/0x5d0 [ 647.760911][T24261] ? asm_exc_general_protection+0x26/0x30 [ 647.766642][T24261] ? xdp_do_redirect_frame+0x243/0x660 [ 647.772112][T24261] ? xdp_do_redirect_frame+0x286/0x660 [ 647.777582][T24261] ? dev_map_enqueue+0x31/0x3e0 [ 647.782451][T24261] ? dev_map_enqueue+0x2a/0x3e0 [ 647.787318][T24261] xdp_do_redirect_frame+0x2a6/0x660 [ 647.792649][T24261] bpf_test_run_xdp_live+0xe60/0x1e60 [ 647.798067][T24261] ? bpf_test_run_xdp_live+0x724/0x1e60 [ 647.803642][T24261] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 647.809489][T24261] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 647.815397][T24261] ? __might_fault+0xaa/0x120 [ 647.820078][T24261] ? __might_fault+0xc6/0x120 [ 647.824760][T24261] ? _copy_from_user+0xa6/0xe0 [ 647.829544][T24261] ? bpf_test_init+0x15a/0x180 [ 647.834319][T24261] ? xdp_convert_md_to_buff+0x5b/0x330 [ 647.839807][T24261] bpf_prog_test_run_xdp+0x80e/0x11b0 [ 647.845188][T24261] ? __pfx_lock_release+0x10/0x10 [ 647.850227][T24261] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 647.856030][T24261] ? __fget_files+0x29/0x470 [ 647.860654][T24261] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 647.866574][T24261] bpf_prog_test_run+0x33a/0x3b0 [ 647.871527][T24261] __sys_bpf+0x48d/0x810 [ 647.875787][T24261] ? __pfx___sys_bpf+0x10/0x10 [ 647.880583][T24261] ? __rseq_handle_notify_resume+0x353/0x14e0 [ 647.886695][T24261] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 647.892684][T24261] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 647.899029][T24261] ? do_syscall_64+0x100/0x230 [ 647.903812][T24261] __x64_sys_bpf+0x7c/0x90 [ 647.908249][T24261] do_syscall_64+0xf3/0x230 [ 647.912762][T24261] ? clear_bhb_loop+0x35/0x90 [ 647.917450][T24261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.923355][T24261] RIP: 0033:0x7fdc9c07cf29 [ 647.928034][T24261] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 647.947654][T24261] RSP: 002b:00007fdc9cebe0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 647.956069][T24261] RAX: ffffffffffffffda RBX: 00007fdc9c1b3f80 RCX: 00007fdc9c07cf29 [ 647.964124][T24261] RDX: 0000000000000050 RSI: 0000000020000240 RDI: 000000000000000a [ 647.972096][T24261] RBP: 00007fdc9c0ec074 R08: 0000000000000000 R09: 0000000000000000 [ 647.980066][T24261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 647.988075][T24261] R13: 000000000000000b R14: 00007fdc9c1b3f80 R15: 00007fffc9a24338 [ 647.996062][T24261] [ 647.999080][T24261] Modules linked in: [ 648.003145][T24261] ---[ end trace 0000000000000000 ]--- [ 648.008665][T24261] RIP: 0010:dev_map_enqueue+0x31/0x3e0 [ 648.014168][T24261] Code: 41 56 41 55 41 54 53 48 83 ec 18 49 89 d4 49 89 f5 48 89 fd 49 be 00 00 00 00 00 fc ff df e8 b6 9b d7 ff 48 89 e8 48 c1 e8 03 <42> 80 3c 30 00 74 08 48 89 ef e8 f0 58 3d 00 4c 8b 7d 00 48 83 c5 [ 648.033882][T24261] RSP: 0018:ffffc900098ef678 EFLAGS: 00010246 [ 648.040013][T24261] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000040000 [ 648.048048][T24261] RDX: ffffc900127ab000 RSI: 0000000000000a2c RDI: 0000000000000a2d [ 648.056378][T24261] RBP: 0000000000000000 R08: ffffffff8961e3b6 R09: ffffffff8961e373 [ 648.064373][T24261] R10: 0000000000000004 R11: ffff8880557d3c00 R12: ffff88802d864000 [ 648.072444][T24261] R13: ffff88802dcb5070 R14: dffffc0000000000 R15: 0000000000000000 [ 648.080472][T24261] FS: 00007fdc9cebe6c0(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 648.089463][T24261] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 648.096105][T24261] CR2: 0000001b2d02f000 CR3: 0000000050a9c000 CR4: 00000000003506f0 [ 648.104109][T24261] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 648.112149][T24261] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 648.120191][T24261] Kernel panic - not syncing: Fatal exception in interrupt [ 648.127719][T24261] Kernel Offset: disabled [ 648.132049][T24261] Rebooting in 86400 seconds..