last executing test programs: 2.176193816s ago: executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) getpid() 2.027311879s ago: executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @empty, @broadcast}, &(0x7f0000000040)=0xc) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000780)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000002580)=[{0x0, 0x0, &(0x7f00000024c0)=[{&(0x7f0000000140)='k', 0x1}], 0x1}], 0x1, 0x0) recvmsg(r5, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r5, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYBLOB="0c39fb272f207dc369a58b0114dd2bddcfccddc0a3b8018a077272c6e8c847eed743e695399b726f26e678da470e8a7a83a0cd03f08279828b1b79c558b0e75c7365555472fa2f6d9b82b73f1aa9a3b6472deaa83263baa5213f0199b1acf2e40fc44857da31ff8241626158f722adff4e6088da7f1dcab9dc25768d51c775a07cbdb05d7ebd6b565e5e6ff5c50fff49a214b4ef86c92ce4eac0ce675a5ee49522ecd761719c96bce27dfe53f9dbbf211cf29a041c7a941ad425de050c8e6046277c103ba41cc3f6e4245ea1611d7a68023d119479c82c28", @ANYBLOB="17090000000000000000010000000500070000000000080009000000000914002000ff05000000000000000000000000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x620b}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r5) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r6, 0x2, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20}, 0x800) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa08060001080006040001ffffffff0300000000000000aaaaaabbffffffff"], 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x1, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}]}, 0x24}}, 0x0) 1.949735245s ago: executing program 1: r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20000000, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x9) bind$inet(r1, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r1, &(0x7f0000000040)='u', 0x1, 0x0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0xc, 0x5, 0x3, 0x0, [{@local}]}]}}}], 0x20}, 0x0) 1.746742577s ago: executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xfffffd66, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x1, 0xa, 0x101, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00@\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000005100000008000300", @ANYRES32=r3, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LIST(r5, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0xddb1fe97185967fb}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)={0xa8, r6, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x4}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x84, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x69fab11f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x10a9c73}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1ab1}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x53a90e2a}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2fa9b7eb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8e65}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd094}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4bb88688}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6cfd}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6320}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x32d4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7e66}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x19173689}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x56d9be08}]}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x75db2942c65c2794}, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg$inet(r4, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)="dafc6f0e9eb5dd", 0x7}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000300)}}, {{0x0, 0x0, &(0x7f0000002fc0)=[{&(0x7f0000000140)}], 0x1}}, {{0x0, 0x0, &(0x7f00000040c0)=[{&(0x7f0000000180)="37b59625825995e0bd885500", 0xc}], 0x1}}], 0x4, 0x22048044) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7088000000000007b8af8ffff000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000956dd904ce4c34b0e31077c156c263b9a11931e562e5b8d2a9f31b3aa692917509109dc266aefa2ad6d04596cc77519c6b92b7ce3478745ecf7826c5705e25c3276bb6496ff9405a28d3d112d96d781072b7711d2357e7c7d399224b8440f2a4f75e443d66ec0c7553bae3b8746c5f2a0a2197eb2f5ee46f612bad969eb9707476584d2dbfb7b7b7d2a3f6eaae434f1a862b5c25b4fabec16b711bdc6a0355296bc7"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) sendmsg$tipc(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000cb6a64df850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='block_plug\x00', r9}, 0x10) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7020000e88b0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.325773707s ago: executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async, rerun: 32) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) (async) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000000), 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0xfecc) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x110, r0, 0x0) (async) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000080), &(0x7f00000001c0)=0x8) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000500), 0xffffffffffffffff) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) (rerun: 64) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000001", @ANYRES16=r5, @ANYBLOB="010000000000000000000100000008000100", @ANYRES32=r6, @ANYBLOB="4400028040000100240001006c625f706f72745f7374617473000000000000000000000000000000000000000500030008000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB], 0x60}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000980)={'syztnl1\x00', &(0x7f0000000900)={'syztnl2\x00', 0x0, 0x4, 0x1f, 0x5, 0xffffff80, 0x24, @remote, @remote, 0x1, 0x7, 0x3, 0x6}}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000009c0)={'batadv_slave_1\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f0000000b80)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a00)={0x108, r5, 0x100, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r7}, {0xec, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}]}, 0x108}, 0x1, 0x0, 0x0, 0x8008}, 0x8084) (async) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="14400000150a0102000000000000006adc0000002f992bbe375d6566d2790d9a572e707be63a3c589c24ec4df7f25a23a408871f0e06cc3107ac814a07ca850af6784fce2d7f37b75994e8b9fc1c1261867612de1db13d62fd15ebd6d6c5300ea110e165"], 0x14}}, 0x0) (async) r9 = socket$unix(0x1, 0x5, 0x0) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r12, @ANYBLOB="24005a80200001801400030000000300000000000000000000000060"], 0x40}}, 0x0) (async) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f0000000880)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x410004a0}, 0xc, &(0x7f0000000840)={&(0x7f00000006c0)={0x144, 0x17, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK={0x24, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bridge0\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x20}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0xc0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x67}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3f}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'team_slave_1\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'wlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'gretap0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6d}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x10000}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x400c80c}, 0x20000000) (async) sendmsg$NL80211_CMD_ASSOCIATE(r10, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r13, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x7c}}}}, [@NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x300, {0x882, 0x2, 0x101, 0x3f}}}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x2}, @NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0x3f, 0x8001, 0x9, 0xfd, 0x401, 0x95d0, 0x8f54, 0x3ff, 0x200, 0x8, 0x1, 0x0, 0xffff, 0xfffe, 0x6, 0x7fff]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4004840) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000280)={'erspan0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x40, 0x700, 0x6b, 0x20, {{0x7, 0x4, 0x1, 0x2, 0x1c, 0x67, 0x0, 0x1, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x7, 0xc4, [@empty]}]}}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x1a, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xdc}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x40, '\x00', r14, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x2, 0x6, 0x80, 0xbc5}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000340)=[r3], &(0x7f00000004c0)=[{0x5, 0x4, 0x2, 0xb}], 0x10, 0x359}, 0x90) 1.171185601s ago: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x20a, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}}, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x0) 974.980232ms ago: executing program 1: socket(0x0, 0x0, 0x0) r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x18) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x6, [@struct={0xa, 0x4, 0x0, 0x4, 0x1, 0x81, [{0x6, 0x4, 0x4}, {0x8, 0x5, 0x4}, {0x0, 0x1, 0xa053}, {0xc, 0x4, 0x7}]}, @func={0x4, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x2e, 0x0, 0x2e, 0x61]}}, &(0x7f0000000240)=""/134, 0x66, 0x86, 0x0, 0x3}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0xb, 0x0, 0x7, 0x1, r0, 0x5, '\x00', 0x0, r1, 0x2, 0x5, 0x0, 0x7}, 0x48) sendto$packet(0xffffffffffffffff, &(0x7f0000000380)="aa", 0x1, 0x0, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000", @ANYBLOB='\x00'/33], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b800000019000100"/39, @ANYRES32], 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b800000019000100"/39], 0xb8}}, 0x0) 941.261692ms ago: executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000f00)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @fwd={0x2, 0x0, 0x0, 0x12}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34, 0x0, 0x1}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000009000000090000000030000000d0000000000000803000000000000000300000d000000000d00000003000000ff010000010000000800000005000000000000000600000d000000000d0000000400000007000000010000000c0000000100000004000000010000000e000000040000000300000005001cabbc0e10c1604b6f6fa800000100000002000004ff0300000e000000050000000800000003000000"], &(0x7f0000000000), 0xab, 0x0, 0x0, 0x770a5410}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f00000002c0)=ANY=[@ANYBLOB="06bb727e2f6871fde67a62779a0daa8e49cca81a468d886ce37a7ccf79b3a2ea40c245d845fed4dacdcbd4d1bdfecd9aa8c1cf784fe93000e9dee1e4aeda62", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000008000000b703000000000000850000000c000000b707000000ec0000180100002020702500000000002020207b1af8ff0036f07c9223437a9c7f06314b7d30ad6e000000bfa100000000000007010000f8ffffff82d9b702000027c539a75814c421a1b559e9c35af608000000b72300000000000085000000060000009500000000004a5e856c90ff3efe9fb3a83e4ea53771d9b0e2b6d4add8e32d1853b01527c3"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_route(0x10, 0x3, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}, 0x3}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x80) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x1b0000004}) 909.763827ms ago: executing program 3: ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000000)=@x25, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/49, 0x31}], 0x1, &(0x7f0000000100)=""/80, 0x50}, 0x401}, {{&(0x7f0000000180)=@generic, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/123, 0x7b}, {&(0x7f0000000340)=""/205, 0xcd}], 0x2, &(0x7f00000002c0)=""/29, 0x1d}, 0x8001}, {{&(0x7f0000000440)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000001700)=[{&(0x7f00000004c0)=""/163, 0xa3}, {&(0x7f0000000580)=""/70, 0x46}, {&(0x7f0000000600)=""/79, 0x4f}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/116, 0x74}], 0x5, &(0x7f0000001780)=""/54, 0x36}, 0x4}, {{&(0x7f00000017c0)=@generic, 0x80, &(0x7f0000001a80)=[{&(0x7f0000001840)=""/210, 0xd2}, {&(0x7f0000001940)=""/135, 0x87}, {&(0x7f0000001a00)=""/80, 0x50}], 0x3, &(0x7f0000001ac0)=""/4, 0x4}, 0x9}], 0x4, 0x44, 0x0) 784.559565ms ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x4, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000000), &(0x7f0000000080)=@udp}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r2, 0xffffffffffffffff}, &(0x7f0000000d00), &(0x7f0000000d40)='%+9llu \x00'}, 0x20) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000440)={r3, &(0x7f0000000340), 0x0, 0x2}, 0x20) 754.928154ms ago: executing program 3: socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x12a, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000040), 0xfea0) sendmsg$inet6(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="10", 0x1}, {&(0x7f0000000180)="8296e729b9df1f7b824a9a30e3fce6af03699fd7b8df95932197d7daa8d530ec903f0d4877b56e00d3078f03", 0x2c}, {&(0x7f0000001280)="f92cb89fb9017b0d74b77fbfc7b73fccf64a5465fc255736ec9fa4054f2a5d8d2cbae964c697d4245ff415fa8915c1fa5d63f93f66d680ed7606e75dc1b4a7454de28254d45fb1b9fa22c0a232ba1d8e1b616bbfc3af45e86e57e8b649e7ef1b6634b8d9158057340133b712fc0a59fcc9f49ef87ddda4cda27625711f0714ece133a046db7f4a385dd1eb49a1ed1de95932f03ab368fbb936d06900be54aab12fd8295a30417b08ceba02e275be325da6e31be9101e703263f565d56361d72998f7b0bc077178006d23d54e7b24c6e6b020b6aec33e5f6f8dbee4016f8c9d4e0877969e8575285788bf4a0a4e4314d8b4f44138a1b37352030752012a585cf6c8c22687cd1f0be2b808660d96308deed88b7129d216aebc7b612d8c3e66f7b38a75168f9d22eaf5a3e871affc7dd05696c974befbd1b825fc4a01d41e822466d0c13a81ad61650bca35565fc15cd575b0a4a24a5a5ce0a59dbfd8a1e6ff7b9caa93dd85868ed33bf6f6330a8354e49685c4c75277a561ee3973a8437afaee11c5fc1f57f06fb7ce502c19b18e83fd77c418674e40c32add71d40373244e566f14339f9261743651115f83cd096c8c622163cddfdd7c10693c9512eb8b76db85ed87d94ba0fc90ab7a3625f747f47369ee26eeb15e8dd91b82e891b8d3c94a78539f2ba02731c35def29bb978bb421b5dbdafbd2bd59a0e17b8ad6f02632f121192cf4bb575a62dcc8ec0ec4c83872c89b551ec35970fad44299e1627d1cbd674e434734c1704d6c30a1262e9d98142336215c3f487c426678ee82a193f964805a00684c77da664c479322db7df4b210f70fcf82f863d065ded2c559b50428cfa269445c4cd569545c1d7f9f5825cc72e7fff8d9abdec5c0da9afc8334e0e210516e288eea4bc9c1e34f6e31583bf54c75be3b862e705d2dd53889da6636c84b5a476c3cadf17c24ff3277352e41dc71d17ff26342a75ca5a8fa15ccb4f888f397da3ce25f34b1119cf4a70ef5e572a5798c7f562845c93222a0a745ff5ce0549c8f6dca30a9c636ec6e3232a6f0b3a3aa44dadf0823eafa2d592a7aeb3565508d04342c1338616f9c7e6c4bae59909705351505d9c88dc5d12ec271269f620bbf4c122535d27067f717e75c8743026e8705f20b7221dfda2b15a395ba3be71c9bccbfe2b570d4ca26c2f9d1e4a7d119749b380affea2d6a5499944d34daea7bd31e969ca20446886d45e05c8a43f2015a14921772fb92e5b589aabe064fd957e7fd8e95fc96d369a84b49f900053679d9c62d2360a271c60ce4238db37da2c50eaf40e9e8937b28632c974b373bab79f0fc92c7988d961ae4d7d45d35aade8704ae0579f116e2529bdc049821998e0db85e2cb387c123ea8545372109e4f738a199e370c6df141a5e3c5236c9fdd4a56c04ddad8d5a86380befe25680fc60c7d649d73b533f74fc59b12633e7789887b45be312a923a19d04af69f8c28adf7e1ede80b601697407fbf726096699095031aefd70b30eeef35089cfbb26d1bb560eb3a5193c367ece04e7ac2e4adcf0c2f6979e7c3b55525055fcb32003d5c9eb456956906461c7f657625e5d85a7a286d0f1e1f00c9dd888224fa75d7848ab4144a2485387bf68c386dcb848571b730f78443dd7123efc4b582bedddf2658590794212a4fec6efb8592ec0a181668e99d5de32384cb8f85afa28864d50600b4de23558df9d02e2f23764772c82011cc587fc87b057b7d6bded975f397804a9e07be0ed16ff51820739f4768f5dff306cf6dc2011e0230dea52e816b86c92492eedd9408a9f0a7f856a822510985d6d3147c9ac19e2afe41df76e7ddb2b6f6b2f61f03d42475a353e92acbd5fdd3430590a9e34a9fbcb9c96a8a33c256547eea6e09f782d197a45da6182bb76abd975669ae892ae3d2730ac282e619764af2d7ec72bc3b2b59dc5efcec148627a946cce205b6e3058f227992419d484fde8b262d2e21716c37d04cfa009ac2fa07bb6324736adba75679a94d8297273833e370edb3726f248e709220e51fcd184c47efa2cb24c128f2c314352ee7bf57b6ce161b86c7ad53c9241659fda84109143616662754ccbda2fe7987ce2227e7c5b5804c2159283472b207f093790603faf7d83a6a9044db970178eec5d812a0dffc43e1c36c508a45c4b7016ea344ef4170b3a2b7fa0d8183525645d3ee05bba76e571e04c439e30c50280fafc079f74ba7c248e8ea4c5046b45ba83c9cdc743d56dd1f3ed0efa8910e6fbd2fad906233aed5baabd4c06889fb251ca44d93c720ca04cb07223e5eeb2248a5d4e61480ffd36e1d9aa3e6cd6573bc99e38b90aed59128bada111709accf923904a223a1d0639e410cf52cb25b27055586fc4d2005cd1c4e6ed50eaf1f3369e7b8458bc4f74012ea67ab462489a375e1ec17100a64eafc4638342b174572288a5b04b019c1ef2b153995d8772141b63b54738fc593c84a608aac8d48b43f36e74342a7999ef6bd04900eca4c2437778abf61483c6c440f7c6b94e0314a82971bdacfe03909b999a1c4f6f12c09cb745989c3884afff65ee6f845e3edafa285dc8d56b625cd73b6c6e67fd9a560683ef17593580a31e9af8057ca5a31686727eaefa592bc6734163ad13ffef1d97fa39e3e9b345986c68da34ea48ec1107251dd3f055719adf3ee8155d8c0695d3cf1bf9da298db87b2d98d216ed85c70b95cd755c97973f1db31c29e14b0d3c3663a2c6cd6f88820cac198389fd6c456b8cd2d814e670ab75c26cad789c8e12229f5eccdc1cbd6b7cf2c85a692c69ff0d8905206624ec94131dd020d2b39ba39bf046a1793549ea4f80c5946ab0210577e4bb6d6176d978106fccdcb6653d3c25d7cb98e6a8aeb8d1fe47086ff2348bcb6685caa8c7994745bf6caa13cbdd2f45ec7b6039a27a6f71fd51069724aba5020256201cadc9c71066c763bc4f396dc292a53feb53e8beb5dcfe8200eb44c677868c26a8ba742f21a241a109c95e142e155edc2f25662b8bb25e9a731ca34c680710241838a75da4a69359d5c36022376b835cb34b0fe880511e3559fbbccc9753c91700799e47349fbc2676dbf2f10cc519974323da6caceea70938dcd51d2231369d9fd392c26f6756d7d090850cf7bc5717b251587d4cc272dfd05e8a4036acfcad2e252cbba25ecc7399d602c03bd7283dda711145a69eca7232434e679dbe8090c4b4524f23339194e735d5d376cd3d2b3233773549d555b92da1563172c4524ff1a3f722b900a4c1bcd23bcfc32985473ca96ee7f70922f0ecc53f3552ce912cac3b3e98622350eb631f97c0c065b79e581907054cb66f722c90da7c603007da6a64edd82a8625fe6fa5ad883df031833b2b80396f1868faf00ddd073ea0d20bdb32b602c525cfad0a85dd4003aea0ad5c9ce7a7c2921617b8139e5b4b943458c716a8e724edc08633f352c24f876a234d801dbce22da538cb1af278638b7414f06fea4eae109cba0828f96c175c151f50e46bff2b4a9b411fbca28d321490476c24ec38bc34d7cf6bd7f35d0f52a5d7d7bbdda8e83a30e2611f9d0e56084d84d571b02ef9c3c8abbe407f84ca40854e004d375efb3cb61a92537a405f49a55211a2dfedf7b682ce55bbb378d0d1902f6cae0f7414815b0eee25d24859c849ec6c283d8105c82af5a38768db25996f0b61f5258d1927b7ba9b85240fa57cd2181531911774189325d76acc00542cc9ee82181cbed6718e95f1a43179eec3bada4ad472c5f8dcc27bc5ce3c23f3ba000bad55a228ff162c66d2b62bdf425acebc5b2564f70d8af6d267f18160eef0d41fabb0d55dc3226fc07277bac949dbae13ddc2af3e5f24cfae022a2f218dc167a439579b75010cab10d7ac74627328802d58f8410fa6bfa3710480ded9f8b57044927c0c6d8adb6a30cb27a38bb0d96aa55175031248a561a7be5310a9d36f9f90a8afde5c1da0cc0187935da2b600dd24219310a6c5521487ab186072fcb76057a369202baf6a95532cdffbe925cd7ebf549869b1d2e0f5f4e4f1e60d1f8106235d7d6ee420cf3a5c38f1ef069aa62934c0b44548c1aabc9ef070589bdce2a7044c8c67dbeccad1c1c72e9b3fc4a77cba917a3ad5be7b324b672c74f4a2730bf783b9bc6acf1bcdaf4005038ff185e6ad46ecee054b4f0290866a76eb44faf827d6622bb1ae7dfc2363426ee291f5ca3e839888ffe4e820df662000f8b97b5ee93e5dfb1f57c71ebfbbdf326dc160cd42d7ef59609ad0bab596b4ec771113d6dcca3f9f04a2bcd75c85a2dc2a6e2d0d385b3a63305a4a629d241deaf3121bfcb7266e32e63feddd2cc1b1cc73354783900092fe8d6db95bd52981ff75fecc202e098c933bf0619334434da592878dfecc7c90a2dc608739012a1f3d0b3ccaa5557a314052ec02c3561382ff3c166c06db950dac68a8e87bf99db776ba471ff42a81f713408577c54ff26bb1b8e48235b9a72b7a5e926e98277d7aa66c1055d6e869a0ee4f57198921713a74cdbdec5f771fc13ac132f9107037a9e02928619148a26c79072c030a9d15aa791c6817130e59687aa0c941a3d38d3042c20e5ae44d57a0575f71737d11839799efbc7455a9beb123f4fc1942e48df8032627c16c7a9879175977c6368c6bc1932ed2e0d031022e37ad8f998e3e4e0703ca1a434cb8e830982652ca0bd415dfe733cec12ed97ad6ac910a0f9be057f1d25a359cecbce79b07ff9a18ca32829de4739e7ffa78264b9c39fa94d398b422279e47f8d1904888fd2cb8cab80528ceabeee4a670f6cb7e4489f84da982aa232cd2abb5fdae8b746ac90875e9038cfa5a2dbb244415be919ed99399fe706752deae6f44dad823c85729c828c1c4077864cb3a8f142b81d352c1304c0e6e125747944fc310bdf58ea65a906d56496227b07acf529551fde7b43bb2e9a2fa0e6d4656ff101b5f9bc044666a9b036a01296f076a8a1575c7917615daa3bee53ef78b3c62c76bd8627a1bf210c9c983e99087f4ab0e6fb266877e63a87956bcf7e2add829cb07a7942ddfe52a8bbcf281bde994c0e582d05170307c0f73a971f415d7a1ae2dab6d3775f5035928ce57bf895e93ba02dfc3ac40fba2cf54cd60e66e15f587755bc4b7c64f3ef6d1f1583a914c96cb54312ccbabb958761a67dd2312c1be09e05e9665fd648376d67a6b347696611a2f45fe408a02d783644a12858c7059fadc524da251cd8e3b27cd42be0de4653b6d105669c5a4b7b00229ece44484a096e0e58e5dc2253ec3f4a321f011935d01569fa6caa1f64e430b66f301d9e1f79ac47c174811283ab277389465bf252ad934c9c38b151fd7d502c280e4a896805c40737e16b6e1ce2f64c52f1fb2c54829c23f8b999d3c4dec213a012ccab9b0553c56111fe08fab66b2166c6770fe15ef3cd961100ecda927ce5f4a22c47ff8efa432d970a8cfa1ef8d852d088d04931504d7691e5b6af21d9c0d5c50c2b08555267c783cc399726906e138217a9de7d558a75df3ef73dfd785103f5f3d5c67d9170d195c63d20c2281ee7cbc0a46907f38bad86c128f6e9212b6d15c06d0ccfe06ec2d9948899cf04d96ccb069000fd8f45479983e8ac7230fbf8265e5ab2c5d0cfe59df66f25d82680752bb8f32694706d6b00da14b1e8c6d774d451ce43f13ff042b1b356bffc32d0ff2ee5b079c1bded93aa9e6ebbcd3b1e7a0e7436d946eb30ded8be23ee7ff97c7c9f94974d010706bf4516877111b3ed3d7876747150c397f351a3ff8ccbb436a", 0x1000}], 0x3, &(0x7f0000001200)=[@dstopts={{0x18, 0x29, 0x37, {0x89}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x3}}], 0x30}, 0x10) socket$packet(0x11, 0x3, 0x300) (async) syz_emit_ethernet(0x12a, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) (async) write$cgroup_int(r0, &(0x7f0000000040), 0xfea0) (async) sendmsg$inet6(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="10", 0x1}, {&(0x7f0000000180)="8296e729b9df1f7b824a9a30e3fce6af03699fd7b8df95932197d7daa8d530ec903f0d4877b56e00d3078f03", 0x2c}, {&(0x7f0000001280)="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", 0x1000}], 0x3, &(0x7f0000001200)=[@dstopts={{0x18, 0x29, 0x37, {0x89}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x3}}], 0x30}, 0x10) (async) 729.363663ms ago: executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)={0x140, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 644.082641ms ago: executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x4}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r4 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x32) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000380)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}, 0x4, 0x4}}, 0x26) (async) ioctl$PPPIOCGL2TPSTATS(r6, 0x40047452, 0xfffffffffffffffe) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001500)={{r2}, &(0x7f0000001480), &(0x7f00000014c0)=r3}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='ext4_ext_remove_space_done\x00', r3}, 0x10) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.events\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000100), 0x1001) ioctl$SIOCSIFHWADDR(r7, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x8}}) (async) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="b640a8a8075ac6e2587db895cb468875b7475ea669f7c6053445b2a9113311fd1d60186c7c96a9ef618ed95b9e28c8450aef7b7ca30b15490763e017defb29bbb297afd2b2fbbcc33ae6f69229b7f16cbc7204a448679f7d8d5c5a5d8972f4bc085f87d5e0ed499c738bb0db08b13d1a4f5a52dabf70e4d8b7786119c7c07b89eacc96d7b09102460ba055b88e1da5e2a6c3013f1e7c0a2e0c00560182cfa786e136771005a0601f2dbacdee096c557b69db07f9", @ANYRES16=r0, @ANYBLOB="010000000000000000000b00000008000300", @ANYRES32=r1, @ANYBLOB="24005080040004000500020000000000110001005a564e41158540fe2bfda3bde1000000"], 0x40}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {0x0, [0x2e]}}, 0x0, 0x1b}, 0x20) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r8) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) (async) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x98, r0, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8001, 0xc}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x71}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x55}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x54}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xa}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x47}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x25}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x22}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xa}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x59}]}, 0x98}, 0x1, 0x0, 0x0, 0x41}, 0x2004c804) ioctl$SIOCSIFHWADDR(r8, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\\ \x00'}) 622.397892ms ago: executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e24, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0xf3a, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) ioctl$sock_inet_sctp_SIOCINQ(r3, 0x541b, 0x0) write(r1, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$inet(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000b80)=[{0x0}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000001000000000000000000018010019d1e032d75f95da28002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000000085000000b00000009500000000000000f45451f74958933e05c62bc50170fc7dce8a5b3642eb2af2d0b3202ef39e440c21f4be3552d56a11543325021b6e29fbdf7566a440e6beb1c3d1196df343e57c0db585009153fe75f70982f4f49fa35a191d595315aa5a"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffb0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x5}, 0x48) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={0x0, 0x2, 0x8}, 0xc) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000480)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x7000000}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x20}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r7}, 0x8) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000007c0)={{r8}, &(0x7f00000002c0), &(0x7f0000000780)='%+9llu \x00'}, 0x20) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r9}, 0x10) r11 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r10}, 0x8) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x5, 0x0}, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r11, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000500)=r11}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000600)={{r11, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)='%ps \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2b, 0x49, &(0x7f0000000040)=""/73, 0x41000, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000140)={0x0, 0xd, 0x13a7, 0x2}, 0x10, r12, 0xffffffffffffffff, 0x1, &(0x7f0000000640)=[r13, r11, r14], &(0x7f0000000680)=[{0x5, 0x5, 0x10, 0x5}], 0x10, 0x1ff}, 0x90) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r14}, 0x4) 583.954248ms ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000400)='jbd2_handle_stats\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000040850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=@mpls_delroute={0xa8, 0x19, 0x20, 0x70bd26, 0x25dfdbff, {0x1c, 0x14, 0x10, 0xfe, 0x7e, 0x2, 0xc8, 0x9, 0x600}, [@RTA_NEWDST={0x84, 0x13, [{0x59}, {0x800}, {0x200}, {0x81}, {0x400}, {0x37c8}, {}, {0x80}, {0xa9b4a}, {0x200}, {0x8000}, {0x20000}, {0x3}, {0x7, 0x0, 0x1}, {0x40, 0x0, 0x1}, {0x20, 0x0, 0x1}, {}, {0x2}, {0xe4b}, {0xffff7}, {0x7, 0x0, 0x1}, {}, {0x2}, {0x6}, {0x6, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x20}, {0x81}, {0x8}, {0x5}, {0x6}, {0x1, 0x0, 0x1}]}, @RTA_DST={0x8, 0x1, {0x9, 0x0, 0x1}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40}, 0x20000840) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r5, 0x27, 0x0, 0x120, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) (async) r7 = socket$kcm(0x2, 0x3, 0x2) (async) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000480), 0x8) (async) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000180)="ad295cb2b80fea15bcabd612fdf4b336102cce19356dcd32", 0x18) (async) r10 = accept4(r9, 0x0, 0x0, 0x0) sendmmsg$alg(r10, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) (async) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) write$cgroup_netprio_ifpriomap(r8, &(0x7f0000000500)={'ip6gre0', 0x32, 0x38}, 0xa) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0) (async) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000170a01040000000000000000020000000900020073797a321f0000000900010073797a30"], 0x2c}}, 0x0) (async) vmsplice(r7, &(0x7f0000000180)=[{&(0x7f0000000000)='b', 0x1}], 0x1, 0x0) 559.353998ms ago: executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='ext4_remove_blocks\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000100), 0x1001) ioctl$SIOCSIFHWADDR(r1, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021800000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000005400038050000080100003400000000244000b802c0001800a0001"], 0x104}}, 0x0) 501.160856ms ago: executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) connect$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000049c0)=[{{0x0, 0x2000000, &(0x7f00000001c0)=[{&(0x7f00000003c0)="9f", 0x1}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000480)}, {&(0x7f0000000640)="c0363b4665659daa972c8612eb1b7cd9eb5439c3017cd92fcd40694bff1aa89cb48b1fc614a7b2010193b4b70a2df06ad5bbdd651f7fae", 0x37}], 0x2}}, {{0x0, 0x0, &(0x7f0000002fc0)=[{&(0x7f0000002e80)="f3", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000040c0)=[{&(0x7f00000030c0)="a2", 0x1}], 0x1}}], 0x4, 0x44084) 450.035418ms ago: executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x4}, 0x48) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000040)={'dummy0\x00', 0x5}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000500), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r4 = socket(0x8000000010, 0x2, 0x0) write(r4, &(0x7f00000002c0)="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", 0xfc) r5 = socket$inet(0x2, 0x4000000805, 0x0) listen(r5, 0x35b) sendmmsg(r5, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[{0x10, 0x84, 0x8}], 0x10}}], 0x2, 0x0) socket(0x10, 0x803, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @remote}, {0x20000010304, @broadcast}, 0x4, {0x2, 0x0, @multicast1=0xe000cc02}}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000100)={0x60, r2, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5, 0x4}, {0x8}}, {0x8}}}]}}]}, 0x60}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000380)=ANY=[@ANYBLOB="54010000100013070000000000000000ac1414aa000000000000000000000000fe8000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c001c0044"], 0x154}}, 0x0) 430.266097ms ago: executing program 1: socket$inet6(0xa, 0x3, 0x0) r0 = socket(0xa, 0x1, 0x0) close(r0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x3a, 0x8, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, 0x0, 0x0}, 0x20) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f00000001c0)=@assoc_value, &(0x7f0000000200)=0x8) 388.003445ms ago: executing program 0: socket$can_raw(0x1d, 0x3, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYRES8=0x0], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_DYNSET_SREG_KEY={0x8}, @NFTA_DYNSET_FLAGS={0x8}, @NFTA_DYNSET_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000000)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x1d}, {0x6}]}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40003, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b}, 0x48) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_process_wait\x00', r5}, 0x10) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) close(r7) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_DETACH(0x22, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000080)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd60000b28000c2f00fe800000000000000000000000100002fe8000000000000000000000000000aa242088be39028f836f"], 0x0) vmsplice(r3, 0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0xfffffffffffffed8, 0x2, @TCA_SFB_PARMS={0x28}}}, @TCA_EGRESS_BLOCK]}, 0x58}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000010000100"/20, @ANYRES32=r10, @ANYBLOB="0000000000000001180016801400018010000600000100000000000000040000140014"], 0x4c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 370.509821ms ago: executing program 2: ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000001b00)=[{{&(0x7f0000000000)=@x25, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/49, 0x31}], 0x1, &(0x7f0000000100)=""/80, 0x50}, 0x401}, {{&(0x7f0000000180)=@generic, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/123, 0x7b}, {&(0x7f0000000340)=""/205, 0xcd}], 0x2, &(0x7f00000002c0)=""/29, 0x1d}, 0x8001}, {{&(0x7f0000000440)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000001700)=[{&(0x7f00000004c0)=""/163, 0xa3}, {&(0x7f0000000580)=""/70, 0x46}, {&(0x7f0000000600)=""/79, 0x4f}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/116, 0x74}], 0x5, &(0x7f0000001780)=""/54, 0x36}, 0x4}, {{&(0x7f00000017c0)=@generic, 0x80, &(0x7f0000001a80)=[{&(0x7f0000001840)=""/210, 0xd2}, {&(0x7f0000001940)=""/135, 0x87}, {&(0x7f0000001a00)=""/80, 0x50}], 0x3, &(0x7f0000001ac0)=""/4, 0x4}, 0x9}], 0x4, 0x44, 0x0) 279.55516ms ago: executing program 3: socket(0x0, 0x0, 0x0) r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x18) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x6, [@struct={0xa, 0x4, 0x0, 0x4, 0x1, 0x81, [{0x6, 0x4, 0x4}, {0x8, 0x5, 0x4}, {0x0, 0x1, 0xa053}, {0xc, 0x4, 0x7}]}, @func={0x4, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x2e, 0x0, 0x2e, 0x61]}}, &(0x7f0000000240)=""/134, 0x66, 0x86, 0x0, 0x3}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0xb, 0x0, 0x7, 0x1, r0, 0x5, '\x00', 0x0, r1, 0x2, 0x5, 0x0, 0x7}, 0x48) sendto$packet(0xffffffffffffffff, &(0x7f0000000380)="aa", 0x1, 0x0, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000", @ANYBLOB='\x00'/33], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b800000019000100"/39, @ANYRES32], 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b800000019000100"/39], 0xb8}}, 0x0) 260.87607ms ago: executing program 2: socket$inet6(0xa, 0x80002, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000400)={0x1d, 0x0, 0x2}, 0x18) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x2}, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @broadcast}, @timestamp_reply={0x11}}}}}, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{0x0}], 0x1}, 0x0) close(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000018c0)={&(0x7f0000000580)='ext4_es_insert_delayed_block\x00'}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001bc0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000000400030400000000000000000a3f0000", @ANYRES32=r3, @ANYBLOB="14000200ff0200000000000000000000000000011400060000000000060000000000000000000000080008000004"], 0x48}, 0x1, 0x0, 0x0, 0x400c1}, 0x88) 206.72097ms ago: executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x4, &(0x7f0000000040)=@framed={{}, [@generic={0x20}]}, &(0x7f0000000540)='syzkaller\x00', 0x2}, 0x90) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1e}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) socket$rds(0x15, 0x5, 0x0) 115.623615ms ago: executing program 1: socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000004c0)={0x0, 0x465f}, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000004600000008000b00180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00'}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x54, 0x1, 0x2, 0x301, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_EXPECT_MASTER={0x40, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xa1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x10}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x8040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r1}, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r3, 0x4) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x5}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32=r3], 0xc) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[], 0x0) 108.984935ms ago: executing program 2: r0 = bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x2b233506e4fa4109) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000440)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x24000041) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000006c0)={0x823}, 0x8) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4010) recvmsg(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)=""/101, 0x65}], 0x1}, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000025c0)={0x0, 0x0, 0x0}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)=ANY=[@ANYBLOB="200000000009010100000073797a3000000000"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4000) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0), 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) ioctl$PPPIOCATTACH(0xffffffffffffffff, 0x4004743d, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000640)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000098268000f0000002400078008000200010000000c00040000000000000000000c0003000000000000000000"], 0x38}}, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r6, 0x84, 0x20, &(0x7f0000000500)=0x1, 0x4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x1e, &(0x7f00000008c0)=ANY=[@ANYRES32=r2, @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085000000730000001868000008000000000000000500000018120000", @ANYRES32=0x1, @ANYRESHEX=r5, @ANYRES32=0x1, @ANYBLOB="0000000000000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x8001, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0x10, 0x7, 0x5}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000340)=[0x1], &(0x7f0000000380)=[{0x5, 0x4, 0x6, 0x3}, {0x0, 0x3, 0x0, 0x3}, {0x5, 0x2, 0x3, 0x2}, {0x0, 0x4, 0x2, 0x13}, {0x3, 0x1, 0x3, 0xc}], 0x10, 0x20000}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x13, 0x4, 0x6, 0x5, 0x800, r0, 0x4, '\x00', 0x0, r2, 0x3, 0x5, 0x3}, 0x48) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'erspan0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="5000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="000000000000000030001280080001006073720024000280054b0026de00000008000200b09904afd91bf0361c4b34a51411ba7ad6254c725227e8ca8acd8efa", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="0500060051000000"], 0x50}}, 0x0) r12 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000001c0)='generic_add_lease\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x34, 0xfffffffffffffffc}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, 0x1d, r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 44.739403ms ago: executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000f00)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @fwd={0x2, 0x0, 0x0, 0x12}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34, 0x0, 0x1}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000009000000090000000030000000d0000000000000803000000000000000300000d000000000d00000003000000ff010000010000000800000005000000000000000600000d000000000d0000000400000007000000010000000c0000000100000004000000010000000e000000040000000300000005001cabbc0e10c1604b6f6fa800000100000002000004ff0300000e000000050000000800000003000000"], &(0x7f0000000000), 0xab, 0x0, 0x0, 0x770a5410}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.time_recursive\x00', 0x0, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f00000002c0)=ANY=[@ANYBLOB="06bb727e2f6871fde67a62779a0daa8e49cca81a468d886ce37a7ccf79b3a2ea40c245d845fed4dacdcbd4d1bdfecd9aa8c1cf784fe93000e9dee1e4aeda62", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000008000000b703000000000000850000000c000000b707000000ec0000180100002020702500000000002020207b1af8ff0036f07c9223437a9c7f06314b7d30ad6e000000bfa100000000000007010000f8ffffff82d9b702000027c539a75814c421a1b559e9c35af608000000b72300000000000085000000060000009500000000004a5e856c90ff3efe9fb3a83e4ea53771d9b0e2b6d4add8e32d1853b01527c3"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_route(0x10, 0x3, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}, 0x3}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x80) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x1b0000004}) 21.054522ms ago: executing program 3: bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xffffffffffffff18, &(0x7f0000000100)=[{&(0x7f0000000000)="2f0000001c0005c5ffffff000d000000020000000b000000ec0091c913000180f0ffffeb", 0x1dd}], 0x1}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x3, 0x500, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492856, 0x0) 10.191423ms ago: executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_newnexthop={0x34, 0x68, 0x400, 0x70bd25, 0x25dfdbff, {0xa, 0x0, 0x3, 0x0, 0x11}, [@NHA_GATEWAY={0x14, 0x6, @in6_addr=@mcast1}, @NHA_GROUP_TYPE={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4091) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x24040010) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r1, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040845}, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r0) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r3, 0x100, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x488c1}, 0x40811) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TLS_RX(r4, 0x6, 0x2, &(0x7f00000004c0)=@gcm_256={{0x304}, "8cff0d001e905f3b", "f4c85bca9172c28f737a5e82b6c73b446c456b9d9573cb18ddc6f847624e20bf", "ce46ef0c", "b7518fe367a8c0ea"}, 0x38) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000500), 0x4) r5 = accept4(r4, &(0x7f0000000540)=@ieee802154, &(0x7f00000005c0)=0x80, 0x0) r6 = accept4$vsock_stream(r5, &(0x7f0000000600)={0x28, 0x0, 0x2711, @host}, 0x10, 0x80000) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000640)={0x43, 0x1, 0x2}) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10081000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x70, r7, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x804) r9 = socket(0x1d, 0x2, 0x3) pipe(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x1f, &(0x7f0000000880)={0x0, @in={{0x2, 0x4e20, @local}}, 0xfff}, &(0x7f0000000940)=0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x9, &(0x7f0000000980)={r12, @in={{0x2, 0x4e22, @remote}}, 0x9, 0x5ee5, 0x89, 0x9, 0x0, 0x8000, 0x80}, 0x9c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000a80)={'batadv_slave_0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r9, 0x0, 0x10, &(0x7f0000000ac0)={{{@in6=@local, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@initdev}}, &(0x7f0000000bc0)=0xe8) sendmsg$nl_xfrm(r11, &(0x7f0000000d40)={&(0x7f0000000a40), 0xc, &(0x7f0000000d00)={&(0x7f0000000c00)=@updpolicy={0xc8, 0x19, 0x4, 0x70bd2d, 0x25dfdbfe, {{@in6=@mcast2, @in=@dev={0xac, 0x14, 0x14, 0x2f}, 0x4e24, 0x6, 0x4e21, 0x0, 0x2, 0x0, 0x20, 0x2f, r13, r15}, {0xffffffffffffffff, 0x8, 0x8, 0x3, 0x1, 0x800, 0x800, 0x7}, {0x219, 0xce, 0x0, 0xf9a}, 0x7e686991, 0x6e6bbf, 0x0, 0x1}, [@XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x800}, @tfcpad={0x8, 0x16, 0x5}]}, 0xc8}, 0x1, 0x0, 0x0, 0x14044}, 0xc000) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001100)={r11, 0x20, &(0x7f00000010c0)={&(0x7f0000000f80)=""/159, 0x9f, 0x0, &(0x7f0000001040)=""/98, 0x62}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x8, 0x4, &(0x7f0000000d80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x93c}, [@exit]}, &(0x7f0000000dc0)='syzkaller\x00', 0x6, 0xd2, &(0x7f0000000e00)=""/210, 0x40f00, 0x20, '\x00', r14, 0x20, r11, 0x8, &(0x7f0000000f00)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000f40)={0x3, 0xa, 0x10001, 0x401}, 0x10, r16, r10, 0x2, 0x0, &(0x7f0000001140)=[{0x2, 0x4, 0x9, 0x2}, {0x2, 0x5, 0x1, 0x8}], 0x10, 0x4}, 0x90) ioctl$PPPIOCSPASS(r10, 0x40107447, &(0x7f00000012c0)={0xa, &(0x7f0000001240)=[{0x7, 0x3, 0x4}, {0x8, 0xe9, 0x81, 0x9}, {0xafad, 0x9, 0x9, 0x3f}, {0x7, 0x1, 0x1f, 0x5}, {0x0, 0xaf, 0xa5, 0xeb2}, {0x1, 0x44, 0x20}, {0x7, 0x1, 0x8, 0x81}, {0x2, 0x3, 0x44, 0x7fff}, {0x5, 0x81}, {0x6, 0x1f, 0x9, 0x81}]}) getsockopt$nfc_llcp(r9, 0x118, 0x2, &(0x7f0000001300)=""/18, 0x12) shutdown(r6, 0x1) ioctl$PPPIOCGFLAGS(0xffffffffffffffff, 0x8004745a, &(0x7f0000001340)) 0s ago: executing program 2: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x390, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x40, 0x2, [@TCA_FLOWER_KEY_ARP_OP={0x5}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}]}}, @filter_kind_options=@f_route={{0xa}, {0x2fc, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x2e0, 0x6, [@m_tunnel_key={0x104, 0x0, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0xb5, 0x6, "d6ffbaa2d807e57d2fb5d20d34548ab7b37f8349e465ab4b081af6c4d264921cd8c936c513978e97737d21a5ab41e1e2d97b9274a9713da8bb2a7790e43e58a9382a0fefc1b0bd95680829a8f749c4a1b7578673e50b8c1f238e0564b2e86011a210d9798298010cdd47394ed3cf832f5a7cb7207d71e03efd3449463f6f23d4b2343ef7a21bade823b43fe276d1256ce22abacd5ac6cf14007e3e50df98b3a0ba69017e92816025e7ed3480f55d4bc6fd"}, {0xc}, {0xc}}}, @m_ife={0xf4, 0x0, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x38, 0x6, [@IFE_META_TCINDEX={0x6}, @IFE_META_PRIO={0x8}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x8}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x8}]}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_PARMS={0x1c}]}, {0x6d, 0x6, "68f33c84b776915719434abe46a9ad66388de7f727e754e0482910d008dee0199b585271d39abe13f7c59928211ea2eea798182b0caf370760e543f9c63a2fafb29bde21d4a4166ea1d1c4e6f61174108c064b3b9a7cf04e9b165a21eef5e591bb3d865a0f1d264787"}, {0xc}, {0xc}}}, @m_nat={0xe4, 0x0, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @rand_addr, @loopback}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @rand_addr, @broadcast}}]}, {0x69, 0x6, "ef93daeef78df7f9a037a0d7a2f92a1cc341deabba437fc636cbf66a843bc4e0304e79be1f16cfa199b042be92c52b0490cb3ccc8a115bd7fba1ddd4a3ea8aa011548c0a44af30d92f016d58b7280bd34278777199f7793bcc30f7c7b74cd6eded8934fa32"}, {0xc}, {0xc}}}]}]}}]}, 0x390}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x36c}, {&(0x7f00000007c0)=""/154, 0x184}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) kernel console output (not intermixed with test programs): v: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.043074][T12512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.054275][T12512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.066866][T12512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.088351][T12512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.089933][T12607] xt_CT: You must specify a L4 protocol and not use inversions on it [ 247.102022][T12512] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.137748][T12512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.162906][T12512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.180570][T12512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.207468][T12512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.221358][T12626] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 247.230833][T12512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.243558][T12512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.253597][T12512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.264188][T12512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.275157][T12512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.287123][T12512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.297243][T12512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.308252][T12512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.332105][T12512] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.393933][T12631] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 247.411428][T12631] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 247.432220][T12512] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.458615][T12512] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.468165][T12512] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.478266][T12512] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.536375][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888069eebc00: rx timeout, send abort [ 247.677002][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.686091][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.735802][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.744348][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.800017][ T5129] Bluetooth: hci0: command tx timeout [ 248.044746][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888069eebc00: abort rx timeout. Force session deactivation [ 248.435694][T12661] bond0: entered promiscuous mode [ 248.441815][T12661] bond_slave_0: entered promiscuous mode [ 248.447575][T12661] bond_slave_1: entered promiscuous mode [ 248.768028][T12673] macvtap0: entered promiscuous mode [ 248.776686][T12673] macvtap0: left promiscuous mode [ 248.892622][T12685] tc_dump_action: action bad kind [ 249.088354][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 249.474039][ T5121] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 249.484009][ T5121] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 249.493553][ T5121] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 249.503701][ T5121] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 249.513115][ T5121] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 249.521023][ T5121] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 249.881917][ T5121] Bluetooth: hci0: command tx timeout [ 250.029301][T12730] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 250.067819][T12730] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 250.148385][T12710] Cannot find add_set index 0 as target [ 250.161888][T12713] chnl_net:caif_netlink_parms(): no params data found [ 250.663021][T12713] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.672579][T12713] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.693198][T12713] bridge_slave_0: entered allmulticast mode [ 250.710957][T12713] bridge_slave_0: entered promiscuous mode [ 250.726262][T12713] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.738971][T12713] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.747631][T12713] bridge_slave_1: entered allmulticast mode [ 250.755420][T12713] bridge_slave_1: entered promiscuous mode [ 250.842444][T12713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.863045][T12713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.962378][T12713] team0: Port device team_slave_0 added [ 250.992331][T12713] team0: Port device team_slave_1 added [ 251.097662][T12713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.112548][T12713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.161673][T12713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.175594][T12713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.183091][T12713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.237017][T12713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.352835][T12713] hsr_slave_0: entered promiscuous mode [ 251.374788][T12713] hsr_slave_1: entered promiscuous mode [ 251.391073][T12713] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 251.408570][T12713] Cannot create hsr debugfs directory [ 251.561257][ T5129] Bluetooth: hci6: command tx timeout [ 251.796529][T12713] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.933017][T12713] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.960734][ T5129] Bluetooth: hci0: command tx timeout [ 252.008860][T12805] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 252.031948][T12805] __nla_validate_parse: 4 callbacks suppressed [ 252.031967][T12805] netlink: 186180 bytes leftover after parsing attributes in process `syz-executor.4'. [ 252.072575][T12713] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.217134][T12713] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.390960][T12823] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 252.510665][T12823] bridge_slave_1: left allmulticast mode [ 252.531081][T12823] bridge_slave_1: left promiscuous mode [ 252.536824][T12823] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.573379][T12823] bridge4: port 1(bridge_slave_1) entered blocking state [ 252.587294][T12823] bridge4: port 1(bridge_slave_1) entered disabled state [ 252.596618][T12823] bridge_slave_1: entered allmulticast mode [ 252.618602][T12823] bridge_slave_1: entered promiscuous mode [ 252.642548][T12713] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 252.668201][T12713] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 252.705523][T12713] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 252.728524][T12713] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 252.751107][T12836] xt_CT: You must specify a L4 protocol and not use inversions on it [ 252.797322][T12837] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 252.916204][T12841] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 252.941779][T12841] netlink: 186180 bytes leftover after parsing attributes in process `syz-executor.1'. [ 252.998169][T12845] tc_dump_action: action bad kind [ 253.113658][T12713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.186262][T12713] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.245150][ T929] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.252333][ T929] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.277869][ T929] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.285067][ T929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.557552][T12870] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 253.628271][T12870] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 253.650893][ T5129] Bluetooth: hci6: command tx timeout [ 253.661519][T12870] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 253.685630][T12870] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 253.771886][T12713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.835881][T12713] veth0_vlan: entered promiscuous mode [ 253.862633][T12713] veth1_vlan: entered promiscuous mode [ 253.917897][T12713] veth0_macvtap: entered promiscuous mode [ 253.931298][T12713] veth1_macvtap: entered promiscuous mode [ 253.955935][T12713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.967422][T12713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.978566][T12713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.998344][T12713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.019834][T12713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.059529][T12713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.080265][T12713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.100123][T12713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.110346][T12713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.122443][T12713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.132795][T12713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.143621][T12713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.157059][T12884] x_tables: unsorted underflow at hook 4 [ 254.157492][T12713] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 254.172979][T12883] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 254.237326][T12713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.256556][T12713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.267448][T12713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.278433][T12713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.288888][T12713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.300965][T12713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.311359][T12713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.330683][T12713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.341533][T12713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.352835][T12713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.363950][T12713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.374969][T12713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.394387][T12713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.406807][T12713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.420636][T12713] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 254.430674][T12888] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 254.438860][T12888] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 254.458760][T12888] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 254.537626][T12713] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.577608][T12713] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.607214][T12713] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.630892][T12713] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.866242][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.888859][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.972607][T12921] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 255.001173][ T2836] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.012001][ T2836] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.013369][T12918] netlink: 'syz-executor.1': attribute type 26 has an invalid length. [ 255.087160][T12918] pimreg: entered allmulticast mode [ 255.124183][T12918] pimreg: left allmulticast mode [ 255.184840][T12925] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 255.284097][T12925] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 255.351987][T12936] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 255.386239][T12936] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 255.414665][T12936] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 255.434355][T12930] nbd: socks must be embedded in a SOCK_ITEM attr [ 255.550698][T12942] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 255.586405][T12942] bond0: entered promiscuous mode [ 255.592256][T12942] bond_slave_0: entered promiscuous mode [ 255.598182][T12942] bond_slave_1: entered promiscuous mode [ 255.720684][ T5129] Bluetooth: hci6: command tx timeout [ 256.103084][T12971] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 256.144090][T12971] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 256.268457][T12975] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.0'. [ 257.008723][T13015] veth0Wvlan: renamed from geneve0 (while UP) [ 257.090473][T13020] __nla_validate_parse: 1 callbacks suppressed [ 257.090491][T13020] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 257.374663][T13033] validate_nla: 1 callbacks suppressed [ 257.374680][T13033] netlink: 'syz-executor.0': attribute type 26 has an invalid length. [ 257.413359][T13033] pimreg: entered allmulticast mode [ 257.435662][T13033] pimreg: left allmulticast mode [ 257.629806][T13033] nbd: socks must be embedded in a SOCK_ITEM attr [ 257.800538][ T5129] Bluetooth: hci6: command tx timeout [ 257.816728][T13051] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. [ 258.380579][T13073] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 258.390329][T13073] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 258.401618][T13073] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 258.415995][T13073] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 258.425792][T13073] geneve3: entered promiscuous mode [ 258.434938][T13073] geneve3: entered allmulticast mode [ 258.481218][T13077] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 258.503385][T13077] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 258.512086][T13077] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.1'. [ 258.614734][T13079] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 258.633182][T13079] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 258.794176][T13086] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 258.831476][T13083] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 258.850358][T13088] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. [ 258.990883][T13092] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 259.078067][T13100] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.0'. [ 262.467024][T13165] __nla_validate_parse: 3 callbacks suppressed [ 262.467042][T13165] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 262.495437][T13168] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 262.602850][T13173] Bluetooth: MGMT ver 1.22 [ 262.670830][T13173] xt_TCPMSS: Only works on TCP SYN packets [ 263.007159][T13193] raw_sendmsg: syz-executor.3 forgot to set AF_INET. Fix it! [ 263.382263][T13207] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 263.465509][T13209] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 3, id = 0 [ 263.577105][T13213] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 263.601076][T13213] xt_CT: You must specify a L4 protocol and not use inversions on it [ 263.694139][T13219] netlink: 148 bytes leftover after parsing attributes in process `syz-executor.4'. [ 263.694330][T13215] xt_TCPMSS: Only works on TCP SYN packets [ 264.047447][T13235] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 264.275148][T13243] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 264.303876][T13243] Bluetooth: hci3: unsupported parameter 64512 [ 264.318350][T13243] Bluetooth: hci3: invalid len left 4, exp >= 120 [ 264.681208][T13254] xt_TCPMSS: Only works on TCP SYN packets [ 264.874286][T13272] vlan2: entered promiscuous mode [ 264.879803][T13272] vlan2: entered allmulticast mode [ 264.890728][T13276] tipc: Started in network mode [ 264.895741][T13276] tipc: Node identity 1, cluster identity 4711 [ 264.902307][T13276] tipc: Node number set to 1 [ 264.908179][T13276] tipc: Cannot configure node identity twice [ 265.134989][ T29] audit: type=1800 audit(1718191380.655:25): pid=13289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1931 res=0 errno=0 [ 265.247178][T13294] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 265.257468][T13294] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 265.264776][T13294] IPv6: NLM_F_CREATE should be set when creating new route [ 265.272096][T13294] IPv6: NLM_F_CREATE should be set when creating new route [ 265.484316][T13303] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 265.496553][T13303] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 265.531079][T13297] xt_TCPMSS: Only works on TCP SYN packets [ 265.777826][ T2836] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.889737][T13318] team_slave_0: entered promiscuous mode [ 265.896060][T13318] team_slave_1: entered promiscuous mode [ 265.914838][T13318] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 265.936891][T13318] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 265.982731][T13322] sch_tbf: burst 0 is lower than device veth1_to_bridge mtu (1514) ! [ 266.071411][ T2836] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.264798][T13335] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 266.288777][ T2836] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.421324][T13335] bond0: entered promiscuous mode [ 266.441345][T13335] bond_slave_0: entered promiscuous mode [ 266.464159][T13335] bond_slave_1: entered promiscuous mode [ 266.482868][T13335] macvlan2: entered promiscuous mode [ 266.507334][T13335] team0: entered promiscuous mode [ 266.677488][ T2836] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.711726][ T5121] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 266.728682][ T5121] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 266.737802][ T5121] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 266.761073][ T5121] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 266.777477][ T5121] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 266.793986][ T5121] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 266.948056][T13361] veth0_macvtap: left allmulticast mode [ 266.960523][T13361] veth0_macvtap: left promiscuous mode [ 266.994938][T13361] macvtap0: left allmulticast mode [ 267.027006][T13361] macvtap0: left promiscuous mode [ 267.146902][T13365] xt_CT: No such helper "pptp" [ 267.211495][T13369] netlink: 209840 bytes leftover after parsing attributes in process `syz-executor.1'. [ 267.258031][ T2836] bridge_slave_1: left allmulticast mode [ 267.264126][ T2836] bridge_slave_1: left promiscuous mode [ 267.287856][ T2836] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.315208][ T2836] bridge_slave_0: left allmulticast mode [ 267.323689][ T2836] bridge_slave_0: left promiscuous mode [ 267.333046][ T2836] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.736601][T13385] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 267.951725][ T2836] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 267.961932][ T2836] bond_slave_0: left promiscuous mode [ 267.982088][ T2836] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 267.992533][ T2836] bond_slave_1: left promiscuous mode [ 268.007298][ T2836] bond0 (unregistering): Released all slaves [ 268.188730][ T2836] tipc: Left network mode [ 268.454740][T13347] chnl_net:caif_netlink_parms(): no params data found [ 268.620689][ T2836] hsr_slave_0: left promiscuous mode [ 268.627084][ T2836] hsr_slave_1: left promiscuous mode [ 268.642459][ T2836] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 268.660704][ T2836] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 268.675987][ T2836] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 268.698702][ T2836] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 268.745826][ T2836] veth1_macvtap: left promiscuous mode [ 268.751717][ T2836] veth0_macvtap: left promiscuous mode [ 268.757359][ T2836] veth1_vlan: left promiscuous mode [ 268.769189][ T2836] veth0_vlan: left promiscuous mode [ 268.851991][ T5129] Bluetooth: hci6: command tx timeout [ 269.448750][ T2836] team0 (unregistering): Port device team_slave_1 removed [ 269.533429][ T2836] team0 (unregistering): Port device team_slave_0 removed [ 270.006699][T13426] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 270.036673][T13347] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.094647][T13347] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.117845][T13347] bridge_slave_0: entered allmulticast mode [ 270.141475][T13347] bridge_slave_0: entered promiscuous mode [ 270.154297][T13347] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.197061][T13437] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.2'. [ 270.206783][T13347] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.207026][T13347] bridge_slave_1: entered allmulticast mode [ 270.208577][T13347] bridge_slave_1: entered promiscuous mode [ 270.237072][T13437] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 270.412735][T13347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.443277][T13347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.588541][T13347] team0: Port device team_slave_0 added [ 270.613886][T13347] team0: Port device team_slave_1 added [ 270.718786][T13347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.737868][T13347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.797212][T13347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.826629][T13347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.848146][T13347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.888253][T13347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 270.919323][ T5129] Bluetooth: hci6: command tx timeout [ 270.984173][T13347] hsr_slave_0: entered promiscuous mode [ 270.994943][T13347] hsr_slave_1: entered promiscuous mode [ 271.001920][T13347] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 271.010023][T13347] Cannot create hsr debugfs directory [ 271.130572][T13475] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'. [ 271.307191][T13478] sctp: [Deprecated]: syz-executor.2 (pid 13478) Use of struct sctp_assoc_value in delayed_ack socket option. [ 271.307191][T13478] Use struct sctp_sack_info instead [ 271.468516][T13482] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 271.755032][T13347] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 271.784761][T13347] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 271.830578][T13347] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 271.863735][T13347] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 271.932150][T13503] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 271.985257][T13503] macvtap1: entered promiscuous mode [ 272.000771][T13503] macvtap1: entered allmulticast mode [ 272.006185][T13503] team0: entered allmulticast mode [ 272.060250][T13503] team_slave_0: entered allmulticast mode [ 272.076632][T13503] team_slave_1: entered allmulticast mode [ 272.111520][T13503] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 272.368039][T13347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.411016][T13347] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.433768][ T5162] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.440983][ T5162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.492816][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.500036][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.595028][T13347] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 272.885942][T13547] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 272.917251][T13347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.940275][T13547] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 272.952614][T13547] bridge0: port 3(team0) entered blocking state [ 272.963858][T13547] bridge0: port 3(team0) entered disabled state [ 273.011345][ T5129] Bluetooth: hci6: command tx timeout [ 273.116314][T13347] veth0_vlan: entered promiscuous mode [ 273.174717][T13347] veth1_vlan: entered promiscuous mode [ 273.261672][T13347] veth0_macvtap: entered promiscuous mode [ 273.292169][T13347] veth1_macvtap: entered promiscuous mode [ 273.366917][T13347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.391544][T13347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.416562][T13347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.431477][ T58] IPVS: starting estimator thread 0... [ 273.446178][T13347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.479347][ T5129] Bluetooth: hci0: command tx timeout [ 273.480139][T13347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.501697][T13347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.512666][T13347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.529198][T13576] IPVS: using max 20 ests per chain, 48000 per kthread [ 273.534516][T13347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.548229][T13347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.559916][T13347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.570911][T13347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.590277][T13347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.618166][T13347] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.636496][T13569] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 273.661690][T13580] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 273.685068][T13582] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 273.711277][T13582] bridge0: port 3(team0) entered blocking state [ 273.725626][T13582] bridge0: port 3(team0) entered disabled state [ 273.736965][T13582] team0: entered allmulticast mode [ 273.742684][T13582] team_slave_1: entered allmulticast mode [ 273.751981][T13582] team0: left allmulticast mode [ 273.758122][T13582] team_slave_1: left allmulticast mode [ 273.773036][T13347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.784825][T13347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.795774][T13347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.821510][T13347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.832692][T13347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.844216][T13347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.867678][T13347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.882585][T13347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.893250][T13347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.904053][T13347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.914166][T13347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.925783][T13347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.935811][T13347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.946516][T13347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.971387][T13347] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 274.022054][T13347] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.046068][T13347] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.055106][T13347] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.075398][T13347] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.186229][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.200828][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.242649][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.252488][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.333212][T13611] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.0'. [ 274.483313][T13619] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 274.656208][T13627] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 274.710487][T13627] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.721833][T13627] bond0: (slave team0): Enslaving as an active interface with an up link [ 274.754123][T13627] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 274.773318][T13627] bond0: (slave team0): Releasing backup interface [ 274.796738][T13627] bridge0: port 3(team0) entered blocking state [ 274.811096][T13627] bridge0: port 3(team0) entered disabled state [ 274.820296][T13627] team0: entered allmulticast mode [ 274.845300][T13627] team_slave_0: entered allmulticast mode [ 274.860856][T13627] team_slave_1: entered allmulticast mode [ 274.868886][T13627] team0: entered promiscuous mode [ 274.893553][T13627] team_slave_0: entered promiscuous mode [ 274.908363][T13627] team_slave_1: entered promiscuous mode [ 274.944571][T13641] batadv_slave_0: entered promiscuous mode [ 274.985952][T13634] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 275.047994][T13632] batadv_slave_0: left promiscuous mode [ 275.079443][ T5129] Bluetooth: hci6: command tx timeout [ 275.407831][T13663] xt_hashlimit: size too large, truncated to 1048576 [ 275.411686][ T29] audit: type=1800 audit(1718191390.925:26): pid=13664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1942 res=0 errno=0 [ 275.430402][T13663] xt_hashlimit: overflow, try lower: 0/0 [ 275.782595][T13680] openvswitch: netlink: IP tunnel dst address not specified [ 276.150695][T13697] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 276.448451][T13716] xt_hashlimit: size too large, truncated to 1048576 [ 276.478700][T13716] xt_hashlimit: overflow, try lower: 0/0 [ 276.492721][ T5121] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 276.510343][ T5121] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 276.540306][ T5121] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 276.563457][ T5121] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 276.588842][ T5121] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 276.598008][ T5121] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 277.284607][T13717] chnl_net:caif_netlink_parms(): no params data found [ 277.610396][T13772] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 277.616722][T13717] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.647644][T13717] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.680994][T13717] bridge_slave_0: entered allmulticast mode [ 277.697289][T13717] bridge_slave_0: entered promiscuous mode [ 277.738419][T13717] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.760032][T13717] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.767325][T13717] bridge_slave_1: entered allmulticast mode [ 277.790524][T13717] bridge_slave_1: entered promiscuous mode [ 277.910846][T13717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 277.912445][T13786] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 278.154821][T13717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 278.462645][T13717] team0: Port device team_slave_0 added [ 278.516830][T13717] team0: Port device team_slave_1 added [ 278.601778][T13801] Bluetooth: MGMT ver 1.22 [ 278.664865][T13717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.678047][T13717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.700059][ T5121] Bluetooth: hci2: command tx timeout [ 278.713422][T13717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 278.727427][T13717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 278.737627][T13717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.765981][T13717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 278.825542][T13810] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'. [ 278.997842][T13717] hsr_slave_0: entered promiscuous mode [ 279.023839][T13717] hsr_slave_1: entered promiscuous mode [ 279.050596][T13717] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 279.058192][T13717] Cannot create hsr debugfs directory [ 279.202231][T13844] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 279.215973][T13844] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.4'. [ 279.498400][T13859] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 279.564090][T13717] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.647686][T13865] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 279.728789][T13717] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.791540][T13871] netlink: 408 bytes leftover after parsing attributes in process `syz-executor.4'. [ 279.833700][T13717] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.907297][T13717] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.953587][T13878] syzkaller0: entered promiscuous mode [ 280.006959][T13878] syzkaller0 (unregistering): left promiscuous mode [ 280.069536][T13888] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 280.138569][T13888] bond0: entered promiscuous mode [ 280.145052][T13888] bond_slave_0: entered promiscuous mode [ 280.159785][T13888] bond_slave_1: entered promiscuous mode [ 280.318474][T13892] netlink: 830 bytes leftover after parsing attributes in process `syz-executor.4'. [ 280.402906][T13717] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 280.413056][T13901] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 280.443377][T13901] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.1'. [ 280.470682][T13717] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 280.487520][T13901] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 280.547890][T13717] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 280.595188][T13717] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 280.759386][ T5121] Bluetooth: hci2: command tx timeout [ 281.026569][T13717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.070678][T13717] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.214409][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.221632][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.265112][T13929] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 281.294136][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.301421][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.784377][T13717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 281.944665][T13717] veth0_vlan: entered promiscuous mode [ 281.977328][T13717] veth1_vlan: entered promiscuous mode [ 282.073051][T13717] veth0_macvtap: entered promiscuous mode [ 282.092974][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8880587fcc00: rx timeout, send abort [ 282.102025][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff8880587fcc00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 282.140326][T13717] veth1_macvtap: entered promiscuous mode [ 282.190108][T13717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.215948][T13717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.227269][T13717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.239356][T13717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.251203][T13717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.272629][T13717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.297122][T13717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.318821][T13717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.332814][T13717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.358923][T13717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.394817][T13717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.411366][T13717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.422316][T13717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.434209][T13717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.456962][T13717] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 282.497736][T13717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.523276][T13717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.560342][T13717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.605377][T13717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.630820][T13717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.659960][T13717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.672521][T13717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.695719][T13717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.716168][T13717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.732264][T13717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.745422][T13717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.760553][T13717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.772584][T13717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.783759][T13717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.795030][T13717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.806658][T13717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.822804][T13717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 282.841632][ T5121] Bluetooth: hci2: command tx timeout [ 282.892448][T13717] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.950031][T13717] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.980818][T13717] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.004722][T13717] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.451347][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.496592][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.515858][T14007] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 283.607267][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.625553][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.780021][T14016] syz_tun: entered promiscuous mode [ 283.785527][T14016] macvtap1: entered promiscuous mode [ 283.831719][T14016] macvtap1: entered allmulticast mode [ 283.837265][T14016] syz_tun: entered allmulticast mode [ 283.887949][T14016] syz_tun: left allmulticast mode [ 283.899375][T14016] syz_tun: left promiscuous mode [ 284.110102][T14022] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 284.597273][T14051] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 284.913673][T14068] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 284.929405][ T5121] Bluetooth: hci2: command tx timeout [ 284.948081][T14068] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 285.153961][T14075] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 285.168515][T14075] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 285.566873][T14100] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 285.578540][T14100] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 285.964637][T14124] syz_tun: entered promiscuous mode [ 285.986055][T14124] macvtap1: entered promiscuous mode [ 286.008758][T14124] macvtap1: entered allmulticast mode [ 286.024165][T14124] syz_tun: entered allmulticast mode [ 286.036649][T14124] syz_tun: left allmulticast mode [ 286.051124][T14124] syz_tun: left promiscuous mode [ 286.496629][ T1106] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.737025][ T1106] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.810147][T14154] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 286.841533][T14154] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 286.987794][ T1106] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.128278][ T1106] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.383183][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 287.395592][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 287.418592][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 287.441485][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 287.451115][ T53] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 287.466551][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 287.540530][ T1106] bridge_slave_1: left allmulticast mode [ 287.546606][ T1106] bridge_slave_1: left promiscuous mode [ 287.552901][ T1106] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.616818][ T1106] bridge_slave_0: left allmulticast mode [ 287.655635][ T1106] bridge_slave_0: left promiscuous mode [ 287.669359][ T1106] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.259183][ T1106] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 288.268183][ T1106] bond_slave_0: left promiscuous mode [ 288.278389][ T1106] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 288.287660][ T1106] bond_slave_1: left promiscuous mode [ 288.299720][ T1106] bond0 (unregistering): (slave macvlan2): Releasing backup interface [ 288.315357][ T1106] macvlan2: left promiscuous mode [ 288.324382][ T1106] bond0 (unregistering): Released all slaves [ 288.511518][ T1106] IPVS: stopping backup sync thread 13209 ... [ 288.737763][T14227] Bluetooth: MGMT ver 1.22 [ 289.018951][T14183] chnl_net:caif_netlink_parms(): no params data found [ 289.171059][ T1106] hsr_slave_0: left promiscuous mode [ 289.193833][ T1106] hsr_slave_1: left promiscuous mode [ 289.210465][ T1106] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.231928][ T1106] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.247911][ T1106] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.266357][ T1106] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.353892][ T1106] team0: left allmulticast mode [ 289.370706][ T1106] team_slave_0: left allmulticast mode [ 289.378528][ T1106] team_slave_1: left allmulticast mode [ 289.394444][ T1106] team0: left promiscuous mode [ 289.410196][ T1106] team_slave_0: left promiscuous mode [ 289.423622][ T1106] team_slave_1: left promiscuous mode [ 289.454886][ T1106] veth1_macvtap: left promiscuous mode [ 289.473434][ T1106] veth0_macvtap: left promiscuous mode [ 289.498111][ T1106] veth1_vlan: left promiscuous mode [ 289.518371][ T1106] veth0_vlan: left promiscuous mode [ 289.559592][ T5121] Bluetooth: hci0: command tx timeout [ 290.332140][ T1106] team0 (unregistering): Port device team_slave_1 removed [ 290.382509][ T1106] team0 (unregistering): Port device team_slave_0 removed [ 290.877353][T14253] __nla_validate_parse: 4 callbacks suppressed [ 290.877374][T14253] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 290.899287][T14253] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 291.101685][T14183] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.110368][T14183] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.117642][T14183] bridge_slave_0: entered allmulticast mode [ 291.142462][T14183] bridge_slave_0: entered promiscuous mode [ 291.164804][T14183] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.207059][T14183] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.229886][T14183] bridge_slave_1: entered allmulticast mode [ 291.252361][T14183] bridge_slave_1: entered promiscuous mode [ 291.450548][T14183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.502722][T14183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 291.640430][ T5121] Bluetooth: hci0: command 0x041b tx timeout [ 291.653809][T14183] team0: Port device team_slave_0 added [ 291.685207][T14309] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 291.697696][T14309] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 291.744907][T14183] team0: Port device team_slave_1 added [ 291.858135][T14183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 291.885247][T14183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.929792][T14319] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 291.940151][T14183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 291.981232][T14183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.009163][T14183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.054797][T14183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.253414][T14183] hsr_slave_0: entered promiscuous mode [ 292.272808][T14183] hsr_slave_1: entered promiscuous mode [ 293.155893][T14183] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 293.208794][T14183] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 293.251995][T14183] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 293.273841][T14183] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 293.512970][T14183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.612154][T14183] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.652086][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.659306][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.702129][ T929] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.709385][ T929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.719870][ T5129] Bluetooth: hci0: command 0x041b tx timeout [ 294.208407][T14183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 294.342985][T14183] veth0_vlan: entered promiscuous mode [ 294.360321][T14183] veth1_vlan: entered promiscuous mode [ 294.437070][T14183] veth0_macvtap: entered promiscuous mode [ 294.464720][T14183] veth1_macvtap: entered promiscuous mode [ 294.508919][T14183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.524587][T14183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.537574][T14183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.551126][T14183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.562079][T14183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.573840][T14183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.584443][T14183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.615175][T14183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.641165][T14183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.653454][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88802d0b5c00: rx timeout, send abort [ 294.662965][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff88802d0b5c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 294.692534][T14183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.711144][T14183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.736656][T14183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.772869][T14183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.785451][T14183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.798609][T14183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 295.038244][T14183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.070028][T14183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.108082][T14183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.124281][T14183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.150287][T14183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.184200][T14183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.215091][T14183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.244148][T14183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.264482][T14183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.296371][T14183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.320826][T14183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.348009][T14183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.372679][T14183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.386402][T14183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.396657][T14183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.407769][T14183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.419698][T14183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 295.440072][T14183] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.448984][T14183] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.459169][T14183] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.468730][T14183] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.799739][ T5129] Bluetooth: hci0: command 0x041b tx timeout [ 295.830673][T14456] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 295.848065][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.873651][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.949274][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.976376][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.094321][T14467] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 296.116346][T14467] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 296.175508][T14472] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 296.381218][T14472] vlan0: entered promiscuous mode [ 296.434417][T14472] bond0: (slave vlan0): Enslaving as an active interface with an up link [ 297.290345][T14513] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 297.363842][T14513] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 297.882217][ T5121] Bluetooth: hci0: command 0x041b tx timeout [ 298.494554][ T62] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.598866][T14568] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 298.666778][T14568] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 298.797314][ T62] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.932690][ T62] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.080665][ T5121] Bluetooth: hci4: command 0x0405 tx timeout [ 299.153314][ T62] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.261974][T14604] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 299.424744][ T5121] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 299.436008][ T5121] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 299.444439][ T5121] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 299.474521][ T5121] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 299.484302][ T5121] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 299.493418][ T5121] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 299.681642][ T62] bridge_slave_1: left allmulticast mode [ 299.687355][ T62] bridge_slave_1: left promiscuous mode [ 299.717467][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.776504][ T62] bridge_slave_0: left allmulticast mode [ 299.803153][ T62] bridge_slave_0: left promiscuous mode [ 299.826350][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.627299][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 300.645491][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 300.657365][ T62] bond0 (unregistering): Released all slaves [ 301.183176][T14639] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 301.192896][T14639] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 301.398588][T14662] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 301.429877][ T62] hsr_slave_0: left promiscuous mode [ 301.454583][ T62] hsr_slave_1: left promiscuous mode [ 301.468316][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 301.484413][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 301.502080][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 301.512795][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 301.550975][ T62] veth1_macvtap: left promiscuous mode [ 301.556677][ T62] veth0_macvtap: left promiscuous mode [ 301.563098][ T5121] Bluetooth: hci2: command tx timeout [ 301.571179][ T62] veth1_vlan: left promiscuous mode [ 301.576569][ T62] veth0_vlan: left promiscuous mode [ 302.168427][ T62] team0 (unregistering): Port device team_slave_1 removed [ 302.225254][ T62] team0 (unregistering): Port device team_slave_0 removed [ 302.806437][T14674] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 302.871970][T14674] 8021q: adding VLAN 0 to HW filter on device team1 [ 302.901033][T14675] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 302.978266][T14676] team1: Port device vxcan3 added [ 303.010918][T14608] chnl_net:caif_netlink_parms(): no params data found [ 303.432533][T14608] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.459623][T14608] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.467684][T14608] bridge_slave_0: entered allmulticast mode [ 303.475360][T14608] bridge_slave_0: entered promiscuous mode [ 303.487336][T14608] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.495167][T14608] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.505259][T14608] bridge_slave_1: entered allmulticast mode [ 303.526943][T14608] bridge_slave_1: entered promiscuous mode [ 303.609736][T14694] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 303.632763][T14694] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 303.644473][ T5121] Bluetooth: hci2: command tx timeout [ 303.808943][T14608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.893349][T14608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 304.032286][T14608] team0: Port device team_slave_0 added [ 304.070050][T14608] team0: Port device team_slave_1 added [ 304.170409][T14608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 304.177741][T14608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.288120][T14608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 304.324173][T14608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 304.339549][T14608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.383890][T14608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 304.536763][T14745] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 304.572700][T14745] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 304.610793][T14608] hsr_slave_0: entered promiscuous mode [ 304.641829][T14608] hsr_slave_1: entered promiscuous mode [ 304.657719][T14608] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 304.675006][T14608] Cannot create hsr debugfs directory [ 305.726877][T14797] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 305.728354][ T5121] Bluetooth: hci2: command tx timeout [ 305.746108][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 305.764760][T14786] 0ª: renamed from bond_slave_0 (while UP) [ 305.782775][T14786] 0ª: entered allmulticast mode [ 305.833413][T14608] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 305.845404][T14608] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 305.858319][T14608] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 305.887798][T14608] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 306.049605][T14608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.086230][T14608] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.103773][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.110996][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.132075][ T5162] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.139275][ T5162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.503577][T14608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.645670][T14608] veth0_vlan: entered promiscuous mode [ 306.699895][T14608] veth1_vlan: entered promiscuous mode [ 306.784820][T14608] veth0_macvtap: entered promiscuous mode [ 306.810341][T14608] veth1_macvtap: entered promiscuous mode [ 306.856905][T14608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.889991][T14608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.916074][T14608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.940051][T14608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.975199][T14608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.004646][T14608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.029979][T14608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.045910][T14608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.076942][T14608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.090369][T14608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.101190][T14608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.127439][T14608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.148294][T14608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.166755][T14608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.193659][T14608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 307.278499][T14608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.304268][T14608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.318874][T14608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.330920][T14608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.343257][T14608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.354800][T14608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.366424][T14608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.396604][T14608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.425180][T14608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.436495][T14608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.448522][T14608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.460296][T14608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.471340][T14608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.483547][T14608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.498569][T14608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.510384][T14608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.525558][T14608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 307.535019][T14837] __nla_validate_parse: 2 callbacks suppressed [ 307.535037][T14837] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.0'. [ 307.557674][T14836] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 307.613352][T14608] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.640713][T14608] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.660599][T14608] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.673470][T14608] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.715348][T14845] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 307.800041][ T5121] Bluetooth: hci2: command tx timeout [ 307.978242][ T1102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.992101][ T1102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.038957][T12104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.071839][T12104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.505252][T14878] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 308.538604][T14878] netlink: 468 bytes leftover after parsing attributes in process `syz-executor.2'. [ 308.565413][T14878] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 309.262593][T14908] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 309.607456][T14931] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 309.879418][ T5121] Bluetooth: hci1: command 0x041b tx timeout [ 310.101894][T14954] sctp: [Deprecated]: syz-executor.2 (pid 14954) Use of int in maxseg socket option. [ 310.101894][T14954] Use struct sctp_assoc_value instead [ 310.282416][T14957] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 310.726432][T14972] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 310.737750][T14972] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 311.113331][T14979] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 311.140374][T14979] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.0'. [ 312.079795][T15032] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 312.423395][T15049] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 312.597780][T15055] __nla_validate_parse: 6 callbacks suppressed [ 312.597798][T15055] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 313.145936][T15087] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 4095 (only 8 groups) [ 313.225191][T15094] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 313.238108][T15091] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 313.401559][T15096] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 313.444991][T15096] syz_tun: entered promiscuous mode [ 313.463161][T15096] macsec2: entered promiscuous mode [ 313.761160][T15115] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 313.795073][T15120] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 313.820719][T15115] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 314.053168][T15136] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 314.104980][T15138] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 314.451681][ T5129] Bluetooth: hci1: command 0x041b tx timeout [ 314.637341][T15168] openvswitch: netlink: IP tunnel dst address not specified [ 315.041946][T15183] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 317.194798][T15208] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.0'. [ 317.218789][T15208] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.0'. [ 317.624172][T15238] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.1'. [ 317.662654][T15240] batman_adv: batadv0: Adding interface: macsec1 [ 317.675230][T15240] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.707033][T15240] batman_adv: batadv0: Not using interface macsec1 (retrying later): interface not active [ 317.725489][T15245] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 317.760902][T15245] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 317.777009][T15245] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 317.801231][T15245] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 317.814361][T15245] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 317.825283][T15245] batman_adv: batadv0: Removing interface: macsec1 [ 318.185409][ T1106] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.324489][T15270] xt_CT: You must specify a L4 protocol and not use inversions on it [ 318.394419][ T1106] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.442414][T15272] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.2'. [ 318.450088][T15270] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 318.470896][T15272] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 318.672389][ T1106] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.906983][ T1106] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.957804][T15293] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 318.990214][ T5165] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.064363][T15298] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 319.082639][T15298] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.2'. [ 319.195581][ T5129] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 319.212325][ T5129] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 319.231357][ T5129] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 319.240833][ T5129] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 319.252056][ T5129] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 319.261012][ T5129] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 319.288125][T15303] No such timeout policy "syz1" [ 319.360987][ T1106] team0: left allmulticast mode [ 319.365896][ T1106] team_slave_0: left allmulticast mode [ 319.426836][ T1106] team_slave_1: left allmulticast mode [ 319.447564][ T1106] team0: left promiscuous mode [ 319.470424][ T1106] team_slave_0: left promiscuous mode [ 319.476020][ T1106] team_slave_1: left promiscuous mode [ 319.520322][ T1106] bridge0: port 3(team0) entered disabled state [ 319.543928][ T1106] bridge_slave_1: left allmulticast mode [ 319.569159][ T1106] bridge_slave_1: left promiscuous mode [ 319.575391][ T1106] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.591967][ T1106] bridge_slave_0: left allmulticast mode [ 319.598076][ T1106] bridge_slave_0: left promiscuous mode [ 319.604455][ T1106] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.012185][ T5121] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 320.022486][ T5121] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 320.048714][ T5121] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 320.060150][ T5121] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 320.068070][ T5121] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 320.076538][ T5121] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 320.232472][ T1106] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 320.246720][ T1106] bond_slave_0: left promiscuous mode [ 320.256060][ T1106] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 320.265828][ T1106] bond_slave_1: left promiscuous mode [ 320.274581][ T1106] bond0 (unregistering): Released all slaves [ 320.298323][T15314] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 320.358914][T15315] bridge_slave_1: left allmulticast mode [ 320.378840][T15315] bridge_slave_1: left promiscuous mode [ 320.399892][T15315] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.437488][T15315] bridge1: port 1(bridge_slave_1) entered blocking state [ 320.460519][T15315] bridge1: port 1(bridge_slave_1) entered disabled state [ 320.474637][T15315] bridge_slave_1: entered allmulticast mode [ 320.483954][T15315] bridge_slave_1: entered promiscuous mode [ 320.618448][T15336] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 321.021644][ T1106] hsr_slave_0: left promiscuous mode [ 321.038211][ T1106] hsr_slave_1: left promiscuous mode [ 321.091527][ T1106] veth1_macvtap: left promiscuous mode [ 321.097105][ T1106] veth0_macvtap: left promiscuous mode [ 321.103964][ T1106] veth1_vlan: left promiscuous mode [ 321.110349][ T1106] veth0_vlan: left promiscuous mode [ 321.320864][T15369] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 321.341918][ T1106] team1 (unregistering): Port device vxcan3 removed [ 321.902851][ T1106] team0 (unregistering): Port device team_slave_1 removed [ 321.954260][ T1106] team0 (unregistering): Port device team_slave_0 removed [ 322.120619][ T5121] Bluetooth: hci6: command tx timeout [ 322.454649][T15369] bond0: entered promiscuous mode [ 322.469187][T15369] 0ª: entered promiscuous mode [ 322.479661][T15369] bond_slave_1: entered promiscuous mode [ 323.017351][T15319] chnl_net:caif_netlink_parms(): no params data found [ 323.110850][T15399] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 323.576031][T15319] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.604641][T15319] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.657224][T15319] bridge_slave_0: entered allmulticast mode [ 323.694023][T15319] bridge_slave_0: entered promiscuous mode [ 323.735970][T15319] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.765097][T15319] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.781185][T15319] bridge_slave_1: entered allmulticast mode [ 323.803926][T15319] bridge_slave_1: entered promiscuous mode [ 324.097177][T15319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.146075][T15319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.158407][ T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 324.171409][ T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 324.180436][ T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 324.189854][ T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 324.210024][ T53] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 324.210080][ T5128] Bluetooth: hci6: command tx timeout [ 324.223728][ T5128] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 324.331680][T15319] team0: Port device team_slave_0 added [ 324.353309][T15319] team0: Port device team_slave_1 added [ 324.425553][T15319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.453725][T15319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.546121][T15319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.603190][T15319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.623342][T15319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.681376][ T5129] Bluetooth: hci5: command 0x0406 tx timeout [ 324.697517][T15319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 324.750490][T15434] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 324.820206][T15434] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 324.985380][T15319] hsr_slave_0: entered promiscuous mode [ 325.001484][T15319] hsr_slave_1: entered promiscuous mode [ 325.019731][T15319] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 325.027384][T15319] Cannot create hsr debugfs directory [ 325.073774][T15438] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 325.171742][ T5128] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 325.184438][ T5128] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 325.196503][ T5128] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 325.205313][ T5128] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 325.223937][ T5128] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 325.232850][ T5128] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 325.433199][T15455] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 325.443498][T15455] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 325.688308][T15460] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 326.020734][T15469] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. [ 326.134676][ T51] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.182725][T15473] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. [ 326.197084][T15473] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. [ 326.242313][T15319] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 326.280412][ T5128] Bluetooth: hci6: command tx timeout [ 326.351799][ T51] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.421289][T15319] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 326.493684][ T51] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.508898][T15446] chnl_net:caif_netlink_parms(): no params data found [ 326.525796][T15319] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 326.538754][T15479] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 326.553790][T15479] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 326.616296][T15319] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 326.687793][ T51] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.761916][ T5121] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 326.770097][ T5121] Bluetooth: hci0: command 0x041b tx timeout [ 327.128610][T15446] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.151770][T15446] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.176163][T15446] bridge_slave_0: entered allmulticast mode [ 327.191051][T15446] bridge_slave_0: entered promiscuous mode [ 327.225304][T15446] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.242336][T15446] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.261127][T15446] bridge_slave_1: entered allmulticast mode [ 327.279162][T15446] bridge_slave_1: entered promiscuous mode [ 327.307176][T15319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.320305][ T5128] Bluetooth: hci2: command tx timeout [ 327.482659][T15446] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.502859][T15446] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.565427][T15319] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.741519][T15446] team0: Port device team_slave_0 added [ 327.755611][T15446] team0: Port device team_slave_1 added [ 327.804551][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.812087][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.004235][T15446] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.020100][T15446] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.108519][T15446] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.134427][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.141974][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 328.221103][ T51] bridge_slave_0: left allmulticast mode [ 328.230275][ T51] bridge_slave_0: left promiscuous mode [ 328.237051][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.252816][ T51] bridge_slave_1: left allmulticast mode [ 328.267956][ T51] bridge_slave_1: left promiscuous mode [ 328.284084][ T51] bridge1: port 1(bridge_slave_1) entered disabled state [ 328.359644][ T5128] Bluetooth: hci6: command tx timeout [ 328.838147][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 328.854482][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 328.867258][ T51] bond0 (unregistering): Released all slaves [ 328.890356][T15446] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.897337][T15446] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.940140][T15446] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 329.202377][T15446] hsr_slave_0: entered promiscuous mode [ 329.214389][T15446] hsr_slave_1: entered promiscuous mode [ 329.220985][T15446] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 329.228709][T15446] Cannot create hsr debugfs directory [ 329.340501][T15566] tipc: Started in network mode [ 329.346046][T15566] tipc: Node identity e0000002, cluster identity 4711 [ 329.353531][T15566] tipc: Enabling of bearer rejected, failed to enable media [ 329.412412][ T5128] Bluetooth: hci2: command tx timeout [ 329.449174][ T51] hsr_slave_0: left promiscuous mode [ 329.456687][ T51] hsr_slave_1: left promiscuous mode [ 329.469139][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 329.477012][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 329.487766][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 329.495431][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 329.536043][ T51] veth1_macvtap: left promiscuous mode [ 329.541859][ T51] veth0_macvtap: left promiscuous mode [ 329.547695][ T51] veth1_vlan: left promiscuous mode [ 329.553276][ T51] veth0_vlan: left promiscuous mode [ 330.258406][ T51] team0 (unregistering): Port device team_slave_1 removed [ 330.305033][ T51] team0 (unregistering): Port device team_slave_0 removed [ 330.798041][T15569] __nla_validate_parse: 2 callbacks suppressed [ 330.798060][T15569] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 330.839157][T15569] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 331.314779][T15594] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.324978][T15594] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.335186][T15594] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.344955][T15594] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.480075][ T5128] Bluetooth: hci2: command tx timeout [ 331.495225][T15319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 331.605990][T15602] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 331.624280][T15602] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 331.643221][T15319] veth0_vlan: entered promiscuous mode [ 331.674522][T15319] veth1_vlan: entered promiscuous mode [ 331.835752][T15446] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 331.867711][T15446] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 331.906183][T15446] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 331.936868][T15319] veth0_macvtap: entered promiscuous mode [ 331.947995][T15446] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 331.977733][T15319] veth1_macvtap: entered promiscuous mode [ 332.040154][T15319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.067347][T15319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.089256][T15319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.108622][T15319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.124383][T15319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.136322][T15319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.158923][T15319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.170945][T15319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.181901][T15319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.193434][T15319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.204645][T15319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.216682][T15319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.236041][T15319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 332.254048][T15319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.266088][T15319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.293781][T15319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.310184][T15319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.329567][T15319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.351320][T15319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.369666][T15319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.390253][T15319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.406614][T15319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.421125][T15319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.446816][T15319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.462164][T15319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.488052][T15319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.499989][T15319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.513485][T15319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 332.537931][T15319] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.547332][T15319] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.557510][T15319] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.567402][T15319] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.707294][T15624] tls_set_device_offload: netdev not found [ 332.794463][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.804325][T15446] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.809238][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.908260][T15446] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.950640][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.962550][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.988909][ T5167] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.996114][ T5167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.007884][ T5167] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.015089][ T5167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.559730][ T5128] Bluetooth: hci2: command tx timeout [ 333.562884][T15446] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 333.781425][T15446] veth0_vlan: entered promiscuous mode [ 333.853158][T15446] veth1_vlan: entered promiscuous mode [ 333.984471][T15669] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 334.007365][T15446] veth0_macvtap: entered promiscuous mode [ 334.011234][T15669] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 334.040240][T15669] netlink: 112860 bytes leftover after parsing attributes in process `syz-executor.1'. [ 334.046658][T15446] veth1_macvtap: entered promiscuous mode [ 334.071842][T15669] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 334.115311][T15446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.147454][T15446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.166295][T15446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.178755][T15446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.198817][T15446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.212870][T15446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.223793][T15446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.235326][T15446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.248215][T15446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.260445][T15446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.273998][T15446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.286310][T15446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.297322][T15446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 334.308511][T15446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.332213][T15446] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 334.378049][T15446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.399954][T15446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.411111][T15446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.423648][T15446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.438712][T15446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.465274][T15446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.476302][T15446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.488711][T15446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.501915][T15446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.512961][T15446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.524435][T15446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.535907][T15446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.546328][T15446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.557287][T15446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.567848][T15446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 334.583442][T15446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 334.608117][T15446] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 334.660892][T15446] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.678966][T15446] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.698801][T15446] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.717646][T15446] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.938713][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 334.964746][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.050488][T15694] Bluetooth: MGMT ver 1.22 [ 335.081173][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.094891][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.222888][T15705] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 335.272811][T15705] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 335.298336][T15711] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 335.348661][T15712] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 335.633153][T15718] netdevsim netdevsim1 €: renamed from netdevsim0 (while UP) [ 336.017178][T15730] vlan0: entered promiscuous mode [ 336.053192][T15729] vlan0: left promiscuous mode [ 336.236619][T15746] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 336.891864][T15787] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.3'. [ 336.951681][T15787] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.3'. [ 337.114827][T15796] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 337.182625][T15796] team0: Port device netdevsim0 added [ 337.338871][T15810] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 337.428318][T15812] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 338.230867][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88806609d800: rx timeout, send abort [ 338.239555][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff88806609d800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 338.620040][T15845] syzkaller0: entered promiscuous mode [ 338.637486][T15845] syzkaller0: entered allmulticast mode [ 340.577293][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888044844c00: rx timeout, send abort [ 340.586713][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff888044844c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 341.568887][T15889] bridge0: port 3(team0) entered blocking state [ 341.622080][T15889] bridge0: port 3(team0) entered disabled state [ 341.641924][T15889] team0: entered allmulticast mode [ 341.660161][T15889] team_slave_0: entered allmulticast mode [ 341.670287][T15889] team_slave_1: entered allmulticast mode [ 341.677367][T15889] team0: entered promiscuous mode [ 341.693791][T15905] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.1'. [ 341.705823][T15889] team_slave_0: entered promiscuous mode [ 341.720601][T15889] team_slave_1: entered promiscuous mode [ 341.728957][T15889] bridge0: port 3(team0) entered blocking state [ 341.735455][T15889] bridge0: port 3(team0) entered forwarding state [ 342.285542][T15939] netlink: 'syz-executor.4': attribute type 9 has an invalid length. [ 342.731132][T15951] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 342.834689][T15960] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 342.901069][T15962] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 342.973063][T15974] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. [ 342.996555][T15965] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 343.333891][T15995] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 343.407825][T15997] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 343.423771][T15995] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 343.469512][T15995] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 343.559521][T16004] bridge0: port 3(team0) entered blocking state [ 343.581747][T16004] bridge0: port 3(team0) entered disabled state [ 343.609787][T16004] team0: entered allmulticast mode [ 343.659469][T16004] team_slave_0: entered allmulticast mode [ 343.686007][T16004] team_slave_1: entered allmulticast mode [ 343.709981][T16004] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 343.748419][T16004] team0: entered promiscuous mode [ 343.775721][T16004] team_slave_0: entered promiscuous mode [ 343.815247][T16004] team_slave_1: entered promiscuous mode [ 343.845954][T16004] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 343.884616][T16004] bridge0: port 3(team0) entered blocking state [ 343.891111][T16004] bridge0: port 3(team0) entered forwarding state [ 343.991216][T16024] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 346.011331][T16074] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 346.020319][T16074] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 346.029188][T16074] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 346.037902][T16074] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 346.754761][T16103] __nla_validate_parse: 3 callbacks suppressed [ 346.754781][T16103] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 346.850993][T16108] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 346.860776][T16108] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 346.871520][T16108] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 346.882314][T16108] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 347.146672][T16115] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 347.285827][T16127] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 347.316854][T16127] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 347.536037][T16135] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 347.795201][T16136] syzkaller0: entered promiscuous mode [ 347.817346][T16136] syzkaller0: entered allmulticast mode [ 350.065844][T16148] vlan2: entered promiscuous mode [ 350.077451][T16148] team0: Device vlan2 is already an upper device of the team interface [ 350.203443][T16162] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 350.213017][T16162] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 350.245901][ T29] audit: type=1804 audit(1718191465.765:27): pid=16166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1342775232/syzkaller.dySW8h/28/memory.events" dev="sda1" ino=1968 res=1 errno=0 [ 350.275530][T16168] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 350.286746][ T29] audit: type=1800 audit(1718191465.795:28): pid=16166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1968 res=0 errno=0 [ 350.338810][ T29] audit: type=1804 audit(1718191465.845:29): pid=16166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir1342775232/syzkaller.dySW8h/28/memory.events" dev="sda1" ino=1968 res=1 errno=0 [ 350.368501][ T29] audit: type=1804 audit(1718191465.855:30): pid=16166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir1342775232/syzkaller.dySW8h/28/memory.events" dev="sda1" ino=1968 res=1 errno=0 [ 351.294661][T16208] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 351.322861][T16208] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 351.422616][ T8] IPVS: starting estimator thread 0... [ 351.494516][ T29] audit: type=1804 audit(1718191467.005:31): pid=16214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3865800417/syzkaller.HKBtgc/31/memory.events" dev="sda1" ino=1965 res=1 errno=0 [ 351.536479][T16216] IPVS: using max 19 ests per chain, 45600 per kthread [ 351.637359][ T29] audit: type=1800 audit(1718191467.145:32): pid=16214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.3" name="memory.events" dev="sda1" ino=1965 res=0 errno=0 [ 351.752833][ T29] audit: type=1804 audit(1718191467.275:33): pid=16226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1342775232/syzkaller.dySW8h/32/cgroup.controllers" dev="sda1" ino=1943 res=1 errno=0 [ 352.257121][T16242] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 352.267909][T16242] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 352.545315][T16255] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 353.046467][T16272] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.4'. [ 353.094733][T16272] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.4'. [ 353.388068][T16282] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 353.887547][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 354.015655][T16299] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 354.033579][T16300] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 354.742908][T16322] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 354.764789][T16322] bond0: entered promiscuous mode [ 354.770565][T16322] bond_slave_0: entered promiscuous mode [ 354.776648][T16322] bond_slave_1: entered promiscuous mode [ 355.006124][T16331] bridge0: port 3(vlan2) entered blocking state [ 355.045372][T16331] bridge0: port 3(vlan2) entered disabled state [ 355.063654][T16331] vlan2: entered allmulticast mode [ 355.086551][T16331] vlan2: left allmulticast mode [ 355.096704][T16336] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 355.237447][T16345] team0: Device batadv0 is already an upper device of the team interface [ 355.561004][T16358] bond0: entered promiscuous mode [ 355.577511][T16358] bond_slave_0: entered promiscuous mode [ 355.596493][T16358] bond_slave_1: entered promiscuous mode [ 356.296974][T16391] sctp: [Deprecated]: syz-executor.3 (pid 16391) Use of struct sctp_assoc_value in delayed_ack socket option. [ 356.296974][T16391] Use struct sctp_sack_info instead [ 356.438144][T16393] bridge0: port 3(vlan2) entered blocking state [ 356.471946][T16393] bridge0: port 3(vlan2) entered disabled state [ 356.497377][T16393] vlan2: entered allmulticast mode [ 356.540882][T16393] vlan2: left allmulticast mode [ 357.732507][T16444] __nla_validate_parse: 4 callbacks suppressed [ 357.732526][T16444] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 357.798828][T16444] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 358.277561][T16460] sctp: [Deprecated]: syz-executor.4 (pid 16460) Use of struct sctp_assoc_value in delayed_ack socket option. [ 358.277561][T16460] Use struct sctp_sack_info instead [ 358.279764][T16461] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 358.518240][T16470] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 358.544488][T16470] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.3'. [ 358.964069][T16483] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 358.980125][T16483] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 359.094368][T16490] bridge0: port 3(vlan2) entered blocking state [ 359.111017][T16490] bridge0: port 3(vlan2) entered disabled state [ 359.124315][T16490] vlan2: entered allmulticast mode [ 359.142048][T16490] vlan2: left allmulticast mode [ 359.175307][T16498] sctp: [Deprecated]: syz-executor.2 (pid 16498) Use of struct sctp_assoc_value in delayed_ack socket option. [ 359.175307][T16498] Use struct sctp_sack_info instead [ 359.883621][T16525] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 359.915085][T16525] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 359.941005][T16529] sctp: [Deprecated]: syz-executor.4 (pid 16529) Use of int in max_burst socket option. [ 359.941005][T16529] Use struct sctp_assoc_value instead [ 360.020462][T16534] sctp: [Deprecated]: syz-executor.0 (pid 16534) Use of struct sctp_assoc_value in delayed_ack socket option. [ 360.020462][T16534] Use struct sctp_sack_info instead [ 361.024422][T16582] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.2'. [ 361.038869][T16582] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.2'. [ 361.215992][T16592] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 361.447519][T16606] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.438540][T16672] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 362.475020][T16675] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 362.906137][T16700] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 363.004551][T16705] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 363.029686][T16705] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 363.042720][T16705] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 363.210438][T16730] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 363.284504][T16733] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 364.721790][ T29] audit: type=1800 audit(1718191480.245:34): pid=16797 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1964 res=0 errno=0 [ 364.829693][T16795] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 364.846403][ T29] audit: type=1804 audit(1718191480.275:35): pid=16797 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir2034018981/syzkaller.QmpN3H/923/memory.events" dev="sda1" ino=1964 res=1 errno=0 [ 364.900350][T16803] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 364.928461][T16803] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 365.131368][T16812] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 365.148454][T16812] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 365.348516][T16820] lo speed is unknown, defaulting to 1000 [ 365.371977][T16820] lo speed is unknown, defaulting to 1000 [ 365.460045][T16820] lo speed is unknown, defaulting to 1000 [ 365.586657][ T29] audit: type=1800 audit(1718191481.105:36): pid=16830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1954 res=0 errno=0 [ 365.636195][T16833] sctp: [Deprecated]: syz-executor.4 (pid 16833) Use of struct sctp_assoc_value in delayed_ack socket option. [ 365.636195][T16833] Use struct sctp_sack_info instead [ 365.654985][ T29] audit: type=1804 audit(1718191481.145:37): pid=16830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3158698704/syzkaller.HEr534/172/memory.events" dev="sda1" ino=1954 res=1 errno=0 [ 366.329689][T16820] infiniband syz0: set active [ 366.334770][ T5163] lo speed is unknown, defaulting to 1000 [ 366.400674][T16820] infiniband syz0: added lo [ 366.408027][T16820] syz0: rxe_create_cq: returned err = -12 [ 366.587839][T16820] infiniband syz0: Couldn't create ib_mad CQ [ 366.639809][T16820] infiniband syz0: Couldn't open port 1 [ 366.722505][T16820] RDS/IB: syz0: added [ 366.733063][T16820] smc: adding ib device syz0 with port count 1 [ 366.765241][T16820] smc: ib device syz0 port 1 has pnetid [ 366.788654][ T5166] lo speed is unknown, defaulting to 1000 [ 366.805605][T16863] sctp: [Deprecated]: syz-executor.3 (pid 16863) Use of struct sctp_assoc_value in delayed_ack socket option. [ 366.805605][T16863] Use struct sctp_sack_info instead [ 366.809757][T16820] lo speed is unknown, defaulting to 1000 [ 366.931003][T16865] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 367.013439][T16861] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 367.148164][T16876] dummy0: entered promiscuous mode [ 367.154431][T16876] macvtap1: entered promiscuous mode [ 367.160892][T16876] macvtap1: entered allmulticast mode [ 367.166427][T16876] dummy0: entered allmulticast mode [ 367.187816][T16820] lo speed is unknown, defaulting to 1000 [ 367.201232][T16880] dummy0: left allmulticast mode [ 367.209398][T16880] dummy0: left promiscuous mode [ 367.223671][T16880] macvtap1: left promiscuous mode [ 367.231102][T16880] macvtap1: left allmulticast mode [ 367.292087][T16882] hsr0: entered promiscuous mode [ 367.324598][T16882] hsr_slave_0: left promiscuous mode [ 367.354839][T16882] hsr_slave_1: left promiscuous mode [ 367.405350][T16882] hsr0 (unregistering): left promiscuous mode [ 367.536680][T16820] lo speed is unknown, defaulting to 1000 [ 368.082196][T16820] lo speed is unknown, defaulting to 1000 [ 368.106569][T16905] sctp: [Deprecated]: syz-executor.2 (pid 16905) Use of struct sctp_assoc_value in delayed_ack socket option. [ 368.106569][T16905] Use struct sctp_sack_info instead [ 368.179218][T16907] openvswitch: netlink: Flow actions attr not present in new flow. [ 368.831072][T16913] team0 (unregistering): Port device team_slave_0 removed [ 368.861948][T16913] team0 (unregistering): Port device team_slave_1 removed [ 368.898800][T16928] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 368.908007][T16929] __nla_validate_parse: 10 callbacks suppressed [ 368.908024][T16929] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 368.956626][T16932] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 368.978163][T16820] lo speed is unknown, defaulting to 1000 [ 368.978215][T16934] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 369.044445][T16934] 8021q: adding VLAN 0 to HW filter on device bond1 [ 369.138054][T16937] 8021q: adding VLAN 0 to HW filter on device bond1 [ 369.150987][T16937] bond1: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 369.196376][T16937] bond1: (slave ip6tnl1): Error -95 calling set_mac_address [ 369.266589][T16932] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 369.432502][T16945] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 369.467746][T16820] lo speed is unknown, defaulting to 1000 [ 369.473489][T16951] openvswitch: netlink: Flow actions attr not present in new flow. [ 369.907660][T16820] lo speed is unknown, defaulting to 1000 [ 369.947280][T16974] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 370.521995][T17007] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 370.552373][T17008] EXT4-fs warning (device sda1): verify_group_input:159: Reserved blocks too high (45225) [ 370.559596][T16820] lo speed is unknown, defaulting to 1000 [ 370.567115][T17005] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 370.847903][T17012] netlink: 'syz-executor.3': attribute type 64 has an invalid length. [ 371.040514][T17022] xt_connbytes: Forcing CT accounting to be enabled [ 371.047197][T17022] xt_CT: You must specify a L4 protocol and not use inversions on it [ 371.157668][T16820] lo speed is unknown, defaulting to 1000 [ 371.164424][ T5128] Bluetooth: hci2: command 0x0405 tx timeout [ 371.530904][T16820] lo speed is unknown, defaulting to 1000 [ 371.866619][T17049] dccp_invalid_packet: P.Data Offset(0) too small [ 371.940733][T17052] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 372.185295][T17066] xt_connbytes: Forcing CT accounting to be enabled [ 372.202902][T17066] xt_CT: You must specify a L4 protocol and not use inversions on it [ 372.215469][T17070] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 372.246724][T17073] xt_TPROXY: Can be used only with -p tcp or -p udp [ 372.262482][T17070] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.490625][T17088] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 372.733317][T17108] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 372.745134][T17108] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.2'. [ 372.867189][T17120] xt_CT: You must specify a L4 protocol and not use inversions on it [ 373.005171][T17127] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 373.169747][T17133] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 373.195260][T17133] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 373.485773][T17150] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 373.574650][T17153] xt_connbytes: Forcing CT accounting to be enabled [ 373.577881][T17148] lo speed is unknown, defaulting to 1000 [ 373.598674][T17153] xt_CT: You must specify a L4 protocol and not use inversions on it [ 373.701292][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.930616][T17173] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 373.967630][T17173] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 374.285221][T17191] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 374.337032][T17191] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.3'. [ 374.880761][T17218] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 374.900209][T17218] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 375.137528][T17232] x_tables: duplicate underflow at hook 2 [ 375.456186][T17238] ipt_rpfilter: unknown options [ 375.744345][T17251] sctp: [Deprecated]: syz-executor.2 (pid 17251) Use of struct sctp_assoc_value in delayed_ack socket option. [ 375.744345][T17251] Use struct sctp_sack_info instead [ 375.782179][T17253] sch_fq: defrate 0 ignored. [ 375.915277][T17264] xt_CT: You must specify a L4 protocol and not use inversions on it [ 376.000356][T17269] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 376.122784][ T29] audit: type=1800 audit(1718191491.645:38): pid=17275 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1954 res=0 errno=0 [ 376.880802][T17298] xt_CT: You must specify a L4 protocol and not use inversions on it [ 376.901889][T17301] bpf_get_probe_write_proto: 4 callbacks suppressed [ 376.901908][T17301] syz-executor.0[17301] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 376.920788][T17299] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 376.943362][T17301] syz-executor.0[17301] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 377.308469][T17319] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 377.410848][T17325] sctp: [Deprecated]: syz-executor.3 (pid 17325) Use of struct sctp_assoc_value in delayed_ack socket option. [ 377.410848][T17325] Use struct sctp_sack_info instead [ 377.412164][T17324] rdma_rxe: rxe_newlink: failed to add lo [ 377.491447][T17329] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 377.922237][T17343] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 377.933900][T17343] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 378.772933][T17389] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 378.870558][T17395] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 379.698257][T17434] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 379.721761][T17434] __nla_validate_parse: 2 callbacks suppressed [ 379.721782][T17434] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 379.802428][T17434] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 379.829636][T17434] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 379.829978][T17443] netlink: 'syz-executor.4': attribute type 12 has an invalid length. [ 379.926102][T17448] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 379.982896][T17448] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 380.014568][ T29] audit: type=1800 audit(1718191495.535:39): pid=17457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1953 res=0 errno=0 [ 380.201213][ T30] INFO: task syz-executor.0:11672 blocked for more than 143 seconds. [ 380.218702][ T30] Not tainted 6.10.0-rc2-syzkaller-00724-g45403b12c29c #0 2024/06/12 11:24:55 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 380.260451][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 380.313832][ T30] task:syz-executor.0 state:D stack:25592 pid:11672 tgid:11667 ppid:11024 flags:0x00004006 [ 380.377945][T17468] can: request_module (can-proto-3) failed. [ 380.399205][ T30] Call Trace: [ 380.402530][ T30] [ 380.405480][ T30] __schedule+0x17e8/0x4a20 [ 380.429327][ T30] ? __pfx___schedule+0x10/0x10 [ 380.434234][ T30] ? __pfx_lock_release+0x10/0x10 [ 380.450052][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 380.459455][ T30] ? schedule+0x90/0x320 [ 380.463735][ T30] schedule+0x14b/0x320 [ 380.467913][ T30] schedule_preempt_disabled+0x13/0x30 [ 380.485917][ T30] __mutex_lock+0x6a4/0xd70 [ 380.496244][ T30] ? __mutex_lock+0x527/0xd70 [ 380.501140][ T30] ? nfsd_nl_rpc_status_get_start+0x8d/0xe0 [ 380.507066][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 380.520169][ T30] ? net_generic+0x1f/0x240 [ 380.524722][ T30] nfsd_nl_rpc_status_get_start+0x8d/0xe0 [ 380.546286][ T30] genl_start+0x4d6/0x6d0 [ 380.551053][ T30] __netlink_dump_start+0x45c/0x780 [ 380.556292][ T30] genl_rcv_msg+0x88c/0xec0 [ 380.563427][ T30] ? mark_lock+0x9a/0x350 [ 380.567808][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 380.573114][ T30] ? __pfx_genl_start+0x10/0x10 [ 380.577993][ T30] ? __pfx_genl_dumpit+0x10/0x10 [ 380.583061][ T30] ? __pfx_genl_done+0x10/0x10 [ 380.588028][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 380.593264][ T30] ? __pfx_nfsd_nl_rpc_status_get_start+0x10/0x10 [ 380.600049][ T30] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 380.606700][ T30] ? __pfx_nfsd_nl_rpc_status_get_done+0x10/0x10 [ 380.613373][ T30] ? __pfx___might_resched+0x10/0x10 [ 380.618699][ T30] netlink_rcv_skb+0x1e3/0x430 [ 380.623561][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 380.628618][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 380.635009][ T30] ? __netlink_deliver_tap+0x77e/0x7c0 [ 380.640662][ T30] genl_rcv+0x28/0x40 [ 380.644669][ T30] netlink_unicast+0x7ea/0x980 [ 380.659021][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 380.665757][ T30] ? __virt_addr_valid+0x183/0x520 [ 380.679161][ T30] ? __check_object_size+0x49c/0x900 [ 380.684495][ T30] ? bpf_lsm_netlink_send+0x9/0x10 [ 380.699073][ T30] netlink_sendmsg+0x8db/0xcb0 [ 380.703904][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 380.721391][ T30] ? __import_iovec+0x536/0x820 [ 380.726296][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 380.731695][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 380.737021][ T30] ? security_socket_sendmsg+0x87/0xb0 [ 380.755848][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 380.761406][ T30] __sock_sendmsg+0x221/0x270 [ 380.767391][ T30] ____sys_sendmsg+0x525/0x7d0 [ 380.772557][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 380.777901][ T30] __sys_sendmsg+0x2b0/0x3a0 [ 380.782569][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 380.787750][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 380.794331][ T30] ? do_syscall_64+0x100/0x230 [ 380.799166][ T30] ? do_syscall_64+0xb6/0x230 [ 380.803875][ T30] do_syscall_64+0xf3/0x230 [ 380.808409][ T30] ? clear_bhb_loop+0x35/0x90 [ 380.813273][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.819292][ T30] RIP: 0033:0x7fa1ba87cea9 [ 380.823727][ T30] RSP: 002b:00007fa1bb5e00c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 380.832354][ T30] RAX: ffffffffffffffda RBX: 00007fa1ba9b4050 RCX: 00007fa1ba87cea9 [ 380.841571][ T30] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000006 [ 380.850799][ T30] RBP: 00007fa1ba8ebff4 R08: 0000000000000000 R09: 0000000000000000 [ 380.858801][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 380.868544][ T30] R13: 000000000000000b R14: 00007fa1ba9b4050 R15: 00007ffee0eab6b8 [ 380.876742][ T30] [ 380.899089][ T30] [ 380.899089][ T30] Showing all locks held in the system: [ 380.929366][ T30] 1 lock held by rcu_exp_gp_kthr/19: [ 380.934870][ T30] 1 lock held by khungtaskd/30: