last executing test programs: 1m55.4574758s ago: executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000000040)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000010000002c0004800500030005000000050003000200090000000300070000000500030000000000050003000000000008000100020000000800020002000000"], 0x50}}, 0x0) write$cgroup_int(r0, &(0x7f0000000100), 0x1001) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x4}, 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_ext_show_extent\x00', r8}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20, &(0x7f0000000440)=ANY=[@ANYBLOB="181100"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r9}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000180)='ext4_ext_show_extent\x00', r10}, 0x10) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r11, &(0x7f0000000000), 0x248800) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000008000300"/18, @ANYRES32=r7, @ANYBLOB='\b\x00k\x00\x00\x00\x00\x00'], 0x24}}, 0x0) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r11) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r13, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="bbd400000000000000000500e000050007000000000018020180140002006970365f767469300000000000000000"], 0x34}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) 1m34.06069511s ago: executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000000040)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000010000002c0004800500030005000000050003000200090000000300070000000500030000000000050003000000000008000100020000000800020002000000"], 0x50}}, 0x0) write$cgroup_int(r0, &(0x7f0000000100), 0x1001) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x4}, 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_ext_show_extent\x00', r8}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20, &(0x7f0000000440)=ANY=[@ANYBLOB="181100"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r9}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000180)='ext4_ext_show_extent\x00', r10}, 0x10) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r11, &(0x7f0000000000), 0x248800) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000008000300"/18, @ANYRES32=r7, @ANYBLOB='\b\x00k\x00\x00\x00\x00\x00'], 0x24}}, 0x0) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r11) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r13, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="bbd400000000000000000500e000050007000000000018020180140002006970365f767469300000000000000000"], 0x34}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) 1m13.530581398s ago: executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000000040)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000010000002c0004800500030005000000050003000200090000000300070000000500030000000000050003000000000008000100020000000800020002000000"], 0x50}}, 0x0) write$cgroup_int(r0, &(0x7f0000000100), 0x1001) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x4}, 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_ext_show_extent\x00', r8}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20, &(0x7f0000000440)=ANY=[@ANYBLOB="181100"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r9}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000180)='ext4_ext_show_extent\x00', r10}, 0x10) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r11, &(0x7f0000000000), 0x248800) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000008000300"/18, @ANYRES32=r7, @ANYBLOB='\b\x00k\x00\x00\x00\x00\x00'], 0x24}}, 0x0) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r11) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r13, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="bbd400000000000000000500e000050007000000000018020180140002006970365f767469300000000000000000"], 0x34}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) 53.05137125s ago: executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000000040)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000010000002c0004800500030005000000050003000200090000000300070000000500030000000000050003000000000008000100020000000800020002000000"], 0x50}}, 0x0) write$cgroup_int(r0, &(0x7f0000000100), 0x1001) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x4}, 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_ext_show_extent\x00', r8}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20, &(0x7f0000000440)=ANY=[@ANYBLOB="181100"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r9}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000180)='ext4_ext_show_extent\x00', r10}, 0x10) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r11, &(0x7f0000000000), 0x248800) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000008000300"/18, @ANYRES32=r7, @ANYBLOB='\b\x00k\x00\x00\x00\x00\x00'], 0x24}}, 0x0) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r11) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r13, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="bbd400000000000000000500e000050007000000000018020180140002006970365f767469300000000000000000"], 0x34}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) 35.766067356s ago: executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000000040)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000010000002c0004800500030005000000050003000200090000000300070000000500030000000000050003000000000008000100020000000800020002000000"], 0x50}}, 0x0) write$cgroup_int(r0, &(0x7f0000000100), 0x1001) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x4}, 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_ext_show_extent\x00', r8}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20, &(0x7f0000000440)=ANY=[@ANYBLOB="181100"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r9}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000180)='ext4_ext_show_extent\x00', r10}, 0x10) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r11, &(0x7f0000000000), 0x248800) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000008000300"/18, @ANYRES32=r7, @ANYBLOB='\b\x00k\x00\x00\x00\x00\x00'], 0x24}}, 0x0) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r11) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r13, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="bbd400000000000000000500e000050007000000000018020180140002006970365f767469300000000000000000"], 0x34}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) 8.581699829s ago: executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000000040)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000010000002c0004800500030005000000050003000200090000000300070000000500030000000000050003000000000008000100020000000800020002000000"], 0x50}}, 0x0) write$cgroup_int(r0, &(0x7f0000000100), 0x1001) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x4}, 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_ext_show_extent\x00', r8}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20, &(0x7f0000000440)=ANY=[@ANYBLOB="181100"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r9}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000180)='ext4_ext_show_extent\x00', r10}, 0x10) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r11, &(0x7f0000000000), 0x248800) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000008000300"/18, @ANYRES32=r7, @ANYBLOB='\b\x00k\x00\x00\x00\x00\x00'], 0x24}}, 0x0) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r11) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r13, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="bbd400000000000000000500e000050007000000000018020180140002006970365f767469300000000000000000"], 0x34}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) 5.227381442s ago: executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000000000000000000000031d0851000000600000018000000", @ANYRES32, @ANYBLOB="0000000000000000660000000000000018000000000000000000000000000000950000000000000018010000202070250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50200000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x2, &(0x7f0000000340)=""/222}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "6d4dfdeb8cf7bbfe143803bec2ce783e04cd32308cdd8dde", "c71cb8adfce542a4bc5a026c208fd0c45787e4aa384e3d26b21ea41cc128364c"}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) socket$pppoe(0x18, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000180)={'vlan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wg2\x00'}) write$binfmt_script(r4, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x12, r3, 0x0) r5 = socket(0xa, 0x6, 0x0) getsockopt$inet6_mreq(r5, 0x10d, 0xac, 0x0, &(0x7f0000000040)) write$binfmt_script(r0, &(0x7f0000000000), 0xfea7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x3, &(0x7f0000000340)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0xe, 0x0, &(0x7f0000000240)="bb7c361c6667ccc8062eaa20fd91", 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000500)='c', 0x0}, 0x50) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0}, 0x90) 4.027585123s ago: executing program 0: getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x3c1, 0x3, 0x448, 0x0, 0x150, 0x150, 0x0, 0xf8010000, 0x3d8, 0x238, 0x238, 0x3d8, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00'}, 0x0, 0x218, 0x280, 0x0, {}, [@common=@icmp6={{}, {0x0, "4797"}}, @common=@inet=@sctp={{0x148}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@dst]}, @unspec=@CT1={0x0, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xb2, 0xd0}, {0x28}}}}, 0x4b6) unshare(0x22020600) sendmsg(0xffffffffffffffff, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002ac0)=ANY=[@ANYBLOB="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"/3593], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000001f00)={'sit0\x00', &(0x7f0000001e40)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty}}}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 3.969046313s ago: executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x15}, 0x1c) socket(0x10, 0x803, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x400, 0x4}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x0, 0x42}, 0x20) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfe1b) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) listen(0xffffffffffffffff, 0x8000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000006, 0x4010, 0xffffffffffffffff, 0xfffff000) bpf$BPF_GET_MAP_INFO(0x1d, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000500)={'gre0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0xc, 0x0, 0x0, 0x7fff, 0x31, &(0x7f00000004c0)=""/49, 0x0, 0x0, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000640)={0x0, 0x0, 0x0, 0xfffffff8}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680), 0x0, 0x10, 0x400}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000680)=ANY=[], 0x8fc) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001e00)={'hsr0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000001c0)={r1, 0x1, 0x6, @random="000400000020"}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r1], 0x20}}, 0x0) 3.828809079s ago: executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x50}, {0x6}]}) write$ppp(0xffffffffffffffff, &(0x7f0000000280)="1632", 0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x0, 0x3}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67b0}, 0x90) bind$inet6(r2, &(0x7f0000000340)={0xa, 0x4e1e, 0x0, @remote}, 0x1c) recvmmsg(r2, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/28, 0x1c}}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000040)=0x10000, 0x4) r3 = socket$kcm(0x29, 0x2, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000200), 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000380)={'#! ', '', [{0x20, '{/\',#'}, {0x20, '%:}\'-$'}, {0x20, 'GPL\x00'}]}, 0x16) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="af", 0xfffffefa}], 0x1}, 0x90) sendfile(r3, r4, 0x0, 0x7ffff000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r3, &(0x7f000000af00), 0x0, 0x8010) sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000180)={0x0, 0x6, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0xc8, 0x3, 0xbf, 0x20, 0x0, 0x3, 0x40, 0x2, 0x2, 0x40}, 0xe) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r1], 0x20}}, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000014) 3.544331004s ago: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000080)=0x4000, 0x4) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x14, &(0x7f00000000c0), &(0x7f00000003c0)=0x8) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000007, 0x11, r1, 0x100000000) mmap$xdp(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x100000000) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000af000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x90) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYRESDEC=r0, @ANYRES32], 0x110}, 0x1, 0x0, 0x0, 0x4c0c4}, 0x0) r7 = socket$kcm(0xa, 0x3, 0x73) sendmsg$kcm(r7, &(0x7f0000006900)={&(0x7f0000006640)=@l2tp6={0xa, 0x0, 0x5, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x3}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x0, 0x0, 0x0, 0xfffff038}]}, 0x10) r10 = socket$inet(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r10, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x7, 0x4, 0x418, 0x0, 0x130, 0x0, 0x330, 0x130, 0x330, 0x4, 0x0, {[{{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "d4c861b503a8dbd0f7d851b917a2485f52aaafe710a8b6ed78d5613be8907a86b8cc0768689eb21cef8c45a2572de3aedb1cfa2253cfd00b67222fa2580cc7e5"}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@broadcast, @multicast2, 0x0, 0x0, 0x0, 0x0, {}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'team_slave_1\x00', 'wg2\x00'}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f71f8a3ece5070c87f2c74b66da1b8ffe25d25ca5a492b0affc0de8700e8"}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x468) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="f8000000", @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r9, @ANYBLOB="d90033008000000008021100000108021100000108021100000000000000000000000000000000000101600301000576000000a16d7b4c716b77d12e091fa9b7296681dee324cad0cb5702214a102ff6f266f7c1b782bc90bfea7fd87301456f79ae4919e71c6d8e978d5f0e50459fc1dd86b52d8f2117892871b88d60d77fe6b35326e9a57c4fdb107fdad1bba1186bb17175631b5a626d7976ac39f63708739a8462a191533c04000000002d1a024004e3cd0000000000000700800003000000000300100000077107000101ff00012076060000000000000000008ccfb6f4d36a3842f75475a34db4453e"], 0xf8}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x60, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8008}, 0x20044084) r11 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(r11, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f00000240c0)=ANY=[@ANYBLOB="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"], 0x128}}, 0x0) 3.459613915s ago: executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x4, 0x8, 0x5, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x0, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x0, 0x1, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSING={0xffffffde, 0x6, 0x1, 0x0, 0xfffffffa}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000885}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="7e5fea992bba8e3a75b7731af71e6a8d3fb8c47756e9821bd610ebd1a8da2639dc"], 0x6c}, 0x1, 0x0, 0x0, 0x5000}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 3.282183203s ago: executing program 4: socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x83, &(0x7f0000000040)={'filter\x00', 0x0, 0x0, 0x90, [0x0, 0x0, 0x0, 0xfffffffffffffffc], 0x0, 0x0, 0x1000000000000}, &(0x7f00000000c0)=0x78) getsockopt$inet6_buf(r0, 0x29, 0x16, 0x0, &(0x7f0000000240)) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000060018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ABORT_SCAN(r5, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="0200040000000000000072000000"], 0x14}}, 0x50) sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYRESOCT=0x0, @ANYRES16=r6, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r7, @ANYBLOB="05003400c800000010004c0000000000"], 0x3c}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001a0001000000000000001b000a0000000000000b4042000006001c000000000021e97433801c4bbfb086193da0a0912ebf209690a29e12e7d12bc530fe7517d53aa9e77e0442f3f0c33d10af030ab759495173753156ed3cf172de37405d7c7669f8688c2585cadf6dfb33e00f2b72efc99113a619f9530b91211865cee3e04e1d1f5c1a0918b8d0ac9e06ab8505092ed2f1a389f6a4f90b9e31e7eeb37d6397cada81eb2d4e4b"], 0x24}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) unshare(0x2000600) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x275a, 0x0) recvmsg(r9, 0x0, 0x0) preadv(r9, &(0x7f0000000540)=[{&(0x7f0000000080)=""/19, 0x13}, {0x0}, {0x0}, {&(0x7f0000000340)=""/176, 0xb0}, {&(0x7f0000000400)=""/112, 0x70}, {&(0x7f0000001f40)=""/4096, 0x1000}, {&(0x7f0000000480)=""/89, 0x59}, {&(0x7f0000000500)=""/49, 0x31}], 0x8, 0x30a, 0x7) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, &(0x7f0000000140)) 3.178629084s ago: executing program 2: syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket(0x3, 0x2, 0x8) sendmsg$NL80211_CMD_START_NAN(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000000084000000000c98311ff4760205ce5140000000000"], 0x14}, 0x1, 0x0, 0x0, 0x40048c1}, 0x4000000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="d50a00000000000061117400000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6f94f90224fc600e0005000a000200053582c137153e3704000b80fc0809000300", 0x33fe0}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000040)=@framed, 0x0}, 0x90) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @none}, 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000600)={0x2, 0x4a23, 0x0, @local}, 0x1c) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000003c0)={'gre0\x00', 0x0, 0x8, 0x80, 0x0, 0x0, {{0x10, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @private, {[@lsrr={0x83, 0x2b, 0xed, [@loopback, @broadcast, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @multicast1, @loopback, @multicast2, @multicast2, @loopback]}]}}}}}) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r5, 0x11c, 0x3, &(0x7f00000001c0)=""/202, &(0x7f00000002c0)=0xca) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x0, 0x10}, &(0x7f0000000080)=0x18) getsockopt$inet6_mreq(r6, 0x29, 0x15, &(0x7f0000000440)={@mcast2}, &(0x7f0000000480)=0x14) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet(0xa, 0x801, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x3ff}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x990, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=ANY=[]}, 0x78) socket(0x8, 0x1, 0x2) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000800)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000003200)=ANY=[@ANYBLOB="e80000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000b800128009000100766c616e00000000a80002800600010000000000060005000000000006000500810000001c0004800c0001f900000000000000000c0001000000000000000000700004800c7ce0fe86000000000000000c00010000000000000000000c000100000000ff7f0000000000000000000000000000000c0001000000f2ffffffffff0b00010000000000000000000c00010000000000000000000c00010000000000000000000c000100000000000400000008000500", @ANYRES32=r9, @ANYRES32=0x0], 0xe8}, 0x1, 0xba01}, 0x0) 3.161196699s ago: executing program 4: syz_emit_ethernet(0x46, &(0x7f00000000c0)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @empty, @mcast2, {[], @ndisc_ra}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r2) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="10002bbd7000ffdbdf25110000005c0001801400020076657468305f746f5f626f6e64000000140002006261746164765f736c6176655f30000008000100", @ANYRES32=r6, @ANYBLOB="14000200726f73653000002e000000000000dfffff0002007665f300000085f0852734f23ab993004c4dd35fc51ab47e088e9da4c8b7b0a29cb1695b05cbed69141b69795299e0b75c2869d45a41dbb4b72f145b5cc8"], 0x70}, 0x1, 0x0, 0x0, 0x2000}, 0x8004) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x5c, r3, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x1}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0xc8}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0xfff}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0xb0b}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x8001}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x1}, @ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0x9}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x7ff}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x8010) 2.440751848s ago: executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) write$tun(r0, &(0x7f0000000740)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0xad, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x7, 0x0, 0x0, 0x0, 0x0, {[@window={0xa, 0x3}, @eol, @generic={0x0, 0x2}]}}, {"1ffcb587ae23247773d0b932af8561a1167df5cc56b471d5fdab68bbae9248e7298343f33fa1c7656e97359958f4a100303d33c26eba9d79cc982ab95490332fc59ae3357cc43c2d8c9e1bac2c8dc934a5d186558097dc54642e7ab2219b708c4e70e8921fdc77c0741a8483004ee1e8dcb37350bad54183a9ed6cf063"}}}}}, 0xbb) 1.247244773s ago: executing program 4: socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x40000000) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x32807b, 0x1000}, 0x1c) 1.230289851s ago: executing program 0: r0 = socket(0x10, 0x80002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x22}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000001c0)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r2, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x4, {0x2, 0x0, @loopback}}, 0x24) socket$inet_tcp(0x2, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, r3, 0x99b745abe2ae3a95, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x28, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x66}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}]}, 0x5c}}, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x20001400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1a04"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000}, 0x80) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000140)={0xffffffffffffffff, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="40010000100001000000000000000000fc010000000000000008000000000000fe80000000000000006c00f0ff00000000000000000000000008000000000000009af221a65faf1e0a3dac6622ea39fb7e0c274881e73dc7531f7de65468db0254b0dfc6b6c5d74abe9c884fda1d68b57d6bc53dd721", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa000000000000000000000000000000006c0000007f0000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800160000000000"], 0x140}}, 0x0) ioctl$TUNSETOFFLOAD(r5, 0x4010744d, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet(0x2b, 0x801, 0x0) getsockopt$inet_tcp_buf(r8, 0x6, 0x25, 0x0, &(0x7f0000000080)) r9 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="080000000914000227bdff00fedbdf2709000100000000000800010647ae4100"], 0x20}, 0x1, 0x0, 0x0, 0x10000}, 0xc801) sendmsg$nl_route_sched(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=@gettclass={0x24}, 0x24}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRESHEX=r7, @ANYBLOB="00000000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRESDEC=0x0], 0x44}}, 0x20000000) 1.162353445s ago: executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) r2 = socket(0x2b, 0x1, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r3, &(0x7f0000e15000)={0x2, 0x0, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000000200)=[{0x6}]}, 0x10) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x70000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$inet(r4, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) listen(r4, 0x0) listen(r3, 0x0) listen(r2, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x8905, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0xffffca93, 0xfffffffd}, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r8}, @generic={0x66}, @initr0, @exit, @alu={0x4, 0x0, 0x6, 0x3}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r9, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x0) socket$kcm(0x2, 0xa, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x15819000) 1.020916431s ago: executing program 1: unshare(0x8000400) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x36}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async) setsockopt$sock_timeval(r0, 0x1, 0x4a, &(0x7f0000abaff9), 0x10) 859.342931ms ago: executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x15}, 0x1c) socket(0x10, 0x803, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x400, 0x4}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x0, 0x42}, 0x20) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfe1b) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) listen(0xffffffffffffffff, 0x8000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000006, 0x4010, 0xffffffffffffffff, 0xfffff000) bpf$BPF_GET_MAP_INFO(0x1d, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000500)={'gre0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0xc, 0x0, 0x0, 0x7fff, 0x31, &(0x7f00000004c0)=""/49, 0x0, 0x0, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000640)={0x0, 0x0, 0x0, 0xfffffff8}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000680), 0x0, 0x10, 0x400}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000680)=ANY=[], 0x8fc) r0 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001e00)={'hsr0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000001c0)={r1, 0x1, 0x6, @random="000400000020"}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r1], 0x20}}, 0x0) 704.636492ms ago: executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0x1, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=@delneigh={0x40, 0x1d, 0x400, 0x70bd28, 0x25dfdbfc, {0xa, 0x0, 0x0, r1, 0x80, 0x10, 0x6}, [@NDA_IFINDEX={0x8, 0x8, r2}, @NDA_CACHEINFO={0x14, 0x3, {0x9, 0x2, 0x3f, 0xffffff80}}, @NDA_LINK_NETNSID={0x8, 0xa, 0x10001}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002060000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) recvmsg$unix(r6, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000002c0)=""/139, 0x8b}], 0x1}, 0x0) sendmsg$inet(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000b00)="19", 0x1}], 0x1}, 0x0) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r10 = socket$inet(0x2, 0x3, 0x1) unshare(0x8000600) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040), 0x2a, 0x0, 0xffffffffffffffff, 0x37}, 0x24) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000140)={r11}, 0xc) ioctl$sock_TIOCINQ(r10, 0x541b, &(0x7f00000000c0)) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000fa000000080001"], 0x30}}, 0x0) sendmsg$netlink(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002b000100000000000000001806"], 0x114}], 0x1}, 0x0) 467.639201ms ago: executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffa, '\x00', 0x0, r1, 0x4, 0x0, 0x4}, 0x48) writev(r2, &(0x7f00000003c0), 0x0) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) 464.716558ms ago: executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv4_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_ENCAP_TYPE={0x6}]}, 0x24}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x18, r2, 0x1, 0x0, 0x0, {0x1b}, [@ETHTOOL_A_EEE_HEADER={0x4}]}, 0x18}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x7fe2, 0x1, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r3, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0x1, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'geneve1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000200)={'tunl0\x00', 0x0, 0x0, 0x700, 0xfffffff8, 0x1ff, {{0x8, 0x4, 0x1, 0x12, 0x20, 0x66, 0x0, 0xaf, 0x2f, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x3d}, {[@lsrr={0x83, 0xb, 0x11, [@multicast2, @broadcast]}]}}}}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r11 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r11, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r11, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendto$packet(r11, 0x0, 0x0, 0x0, &(0x7f0000003340)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000300)={@remote, 0x0}, &(0x7f0000000340)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bond_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000400)={0x158, r2, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x4}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x4880}, 0x8041) 462.112486ms ago: executing program 1: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r1, 0x0, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000480)=0x9, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) unshare(0x24020400) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000001680)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c0000009500000000000000eb4779fcbb3e3bbff2971871b1b1c0b4f0fca28377f3aa77d6c8d949060c54d53bd61b3561319f7b346f0700000000000000fe28a5d0b564a59c30cb37ebb90e516d9c72b9d81817f7a04496e4261b41dae579bd93d38e2740ac98d6108c318a35d29534fd3c6bf14ef7a5c59c3d48f092e6b6bb43ec765d850f71052de0718c08"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096}, 0x70) sendmsg$nl_route(r7, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000c00)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES16=r1, @ANYBLOB="00000000000000001c002b8008000100", @ANYRES32, @ANYBLOB="080003001900000008000800", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x8000) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000014c0)={'macvtap0\x00', &(0x7f00000013c0)=@ethtool_drvinfo={0x3, "3768ca9bdb9072480b2f1c8f8182ce0898651461231fb740854b22a4379de586", "43a38879022a99b405a660e7cd1d15725e68a25c5152bd0bd227ffb8739f1cfc", "131c5b4bdb8af434447f3cb705650db1c0f8ddb541648cc0b1d318873f8c9a85", "f16051bbcb4dda20aea0d433f8c6f05bce62635e71c972c7929a58603233d497", "1cb283a6b524caa0cfd3fc2d99e7cad81b31b74f347dff63fa93236b8a8a2ccb"}}) r9 = socket(0x1e, 0x5, 0x0) connect$tipc(r9, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r9) vmsplice(0xffffffffffffffff, &(0x7f0000000940)=[{0x0}], 0x1, 0x0) tee(r0, r5, 0xaf5, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, r10, 0x4d507000) write$binfmt_elf64(r2, &(0x7f0000003380)=ANY=[], 0x18c6) 284.605684ms ago: executing program 2: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001440)=@ipv6_getroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {0x2}, [@RTA_ENCAP={0x4, 0x16, 0x0, 0x1, @LWTUNNEL_IP_ID={0xc}}]}, 0x2c}}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0x100c}, 0x48) 245.69076ms ago: executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWSETELEM={0x20, 0xb, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x5c}}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a9fde5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x58}}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020030000b02d25a806f8c2d94f90224fc602f1a04000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'gretap0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, 0x2, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x40000) sendto$packet(r0, &(0x7f00000000c0)="3f050e000302120006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) 97.623233ms ago: executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x48) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0xffffffffffffffff, 0x2, 0x10}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0x1, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r5, 0x6612) vmsplice(r5, &(0x7f0000000940)=[{&(0x7f0000000400)="a273c40a2d57595c990b7a2c3ce45a2d94f8b6dfe4e886fa132ccfcef29eb6d3581aafe553b24795f6459958835bfee3b37f1606761babb38fceedbdc83c55d311ab425e261b815657f0237179d3ab838c6644a3585ade04d9d34a01dcb4bd4ac5597d14de31205b6523d728d626c91a78decedf2156a6a92aa30590495011a829", 0x81}, {&(0x7f00000004c0)="19c76ec42ed85dd6fab659e3d9ec6c377e422eb37c5a9954eb05a2476e9081c4975c864564e4104b28c45193a7515b93ac362af29377adc124e778da87caf7bec09cbab63dfca37158493122f4a0911e626866dbd8fdc3fcb70cfd36223854bb56d1ad600bbbed67bf", 0x69}, {&(0x7f00000005c0)="a29d47bb2eeb78f7542e3142421dda056914b8311c5e419c88ae7d10f11f8c8669", 0x21}, {&(0x7f0000000600)="994180db5d97bea074fcc5393e115845334922f261d1fe83e0f0ee78a29d7954d2458bb627064e18c6052163822c83fc804eae356f23752cba39dbb3813c46761b980f64fafe17d499bce37df0cf812fc4de7862dfe7ef6400481eef9e3c4d874492bd44333ac90efdfded58ff1b1d9a63cb1cafb1dec8e7a3fa09284e6f323ead6a2b3f2a848d41544e8865dd3e2bd43cadd3db2a276f463ecd2081f419d6446051a91935e89d8069de62d637c5", 0xae}, {&(0x7f0000001340)="3aa1b60ad76484e5783bb9905bf51a4819073c356c4459db045a3782cf8e450461b69fd40d0af0860063cd429f1560e53749c221060787392c7a1d5bb54ef135122c2e09fe6832eb5ce20b74541e0548418964aa83eea60d4be5e56013c8370ec7a4f19e94b2832d5546cfc4a2132cc867f6ab21e450380877803834e8f8a720006fdd27e2c1710014afd692abb6156e72dd2344a7807ec948ba7d26464673ce75f5a96f742a54b8f3ea7776a7af65174ad98c8eafb6e102b71c76094d21a13a8c27b38acd934d69fbe1a0d8152193b50f7eab7e9f9b9023f9ce1bd391ce58592fc183304df50614ffd215cb22e1832f1ab1acaf75294bfbfc18e6db712db47581ad0e3d0d1073a733f8dab505a5f98dbfe3cb5a1068add4f7216567fdc50fe2b7dd361492423f1034e83424ef060d88321432fa6e61f5f62847d15ec464acbc6c7dada731522f4b8bbf226eb648fb276005bfa5b6c08c19633669d66b12dea102f8c6614df546ef3f6dda86f1322b9f75a37def6290698f2b8c6907195d69fe75c702670e4b1018d49823d67ba3269399f8c30c5925048eda1919eb4bdcd374b00e65d1c1b7729e56cf24954df5dfb54f5052412e149e517e2c2989ceece2af3a3d3b5d8d3297d2f030be1483a2f3e6c6424fb9d9e65a538a5f63cd5b11a2e16444edcff3cb56c9feac4f571a08e9f16993bc8148228fc3f87dc2e54c51a562a77d91949ed9299419ebb62228f9724632c5e048061b0d71948bf8f6d29f08c4aa6f95aa22f70ba8de1f70d4993c72790ef608baa2d3978d999ac6724fc443ba5c0e3e5a6ab4a0c317aa3cea3408c4fe6585b29644b1bb0ead61f7e847ee6136c91710960a3ba605551dc7c5cc865bf7a83f2e32a5a7d14b4a76f0a91537368c5615778af9521669f3f9ce081d7942a14738e8086e96843c93f2f4d8256dd939bfc701c2748b106071e68d6d09502514fd14b8e9c067c5be833c2f375e8403a65940efe6f3b142f4974ef1cb9cfbb549a6e55e20aec63b0e522964a70c2ac3f355a36a317b4ae66e0261f10e83718014be8888954f72959e847cd3969e8ed75fe6130331ab9cdb83ad70f36994b269f03c340b404a80dbe1b090f50344ca33ff6ee550addc5485095234630e186555184356ed3445b21b0477faf301a2f196a13b912656b0a8e89760ae65e853d3f35d6c08bdb384b6b09cdbfd86ad18e97d45ab73c3c0a6b758ee078817fc8d407c2119947120ffb80f9e26ba84c58adb6812d5de54c175e4b706337f9adfb022c068a08810e5ecef493fb1c457926dc935ae1ef5df195a9ee110fcb661aa202095393f7e6cb88301a57497dabcf980e8f1280cc37506de0757042b5dc2206a8a247949d62f51765d416e8000550a2805f92a11a84c6d6bbfde10a775ffdf4b33be5cec19afc3567fd9c0881b4d3deb57e5312324594a4dc210eb6da812208b7d4326b0385431454aee59afd7fac1567761a32d78929972e252cb116fa478a637b0fa41bd9f299336a71068b502be20ba47b95c3125e1009c7c1ab1c6510d0a8ce20035f7136e783f6ce1142294b23af9369bdafd9d5c8cae4ac9879120afa68b30b00b8cbccadbb429ed79ff7ee99c96052691af3f93180b61eebd968f1d01fd557609dd99f6950c7251a0f9f1eaa3f4dd1c77dfe37a9a8cb260eaeeaf8c9b31c79b34d18b23cb16ac8f71f39ea89882575e504f1577f32906fb915e9f8980dbe09a673bf61baeb052a27b1c07d858a0167a8ec16128a48dc734674f0972836ba64162f9b1bb03f0fc72029b4e244c246c7d23eedb234e67e04aa71688578d116be245dc0d1ab2138094289de071a58f249c66a01e48e2883e86a7a1a296bd0bc107898c98405fadf0a5f57516b0a3692b069dacee1a747aa5a9725ac4862fa0cf0641e4c77554953a0097845df09be1ecc9133828bf0b53c21a52078c2965a3ea72cfe63de8dd678ffb597c956479da8a9e955c39991e60bd7b22dd0d964ff1ae487d7fe38446340fd8e8b198310f989f90083033499f7da4d2ff06e245bd97514925349367304a288d5e709bc8751877730ff79131db2404b31789f02be814a471f3c270142f03c72cb615242a64e8eeb679bcfc6b0066b7862115fcb8fa1809b7039ea74e18edcd79f9bee2763cb819c53641130c59e500f82863466e45e15eacfc90a65e25f4dc7725631009407f3978a5bbe3ec210a18abf2eabe4afbca086e7396f195a523f6bf87fdabcb9cb636d2afd6fa03003ebe981bf45562e361c5171f4d6f459a4d3b2ec5bf97b0dd15d1f22a9b2f14376581a8a9a9a5e96ddf079c0167696e09faad72f14cc9e3a0c64718ea617fafca3033a06bfdf53b9c29d4cc5b3585cdd0c5702631249c2d5197ab0a79a361e321c24ec19f3abfa3bdf298d4881b9fac890b5fb8f593b91c3ef4332c47c2911f157b14b01f7e204253a6c883ffcbc26ce505117eb396738cc2ed3b35203255891f90f285c345332627ba5ff79313b3917872b757801300a0acd8348096e71941daca4eb767a94a7da804544e96c165df22057572ecc70bdef19d3faffc11079a882bef6ed6c5ed90e52019a1b39bd7929c74ac93c8f9c216eb1244972fd5bf96236d585d0f91702e3643f898cc6191fdf3fcb0c0346919a28650dee905fa70beac7a97e2454e1725c249f717cf37b6e127b7f9a946891b4a78927b6e3d20b04cf74880541393e286ee62cdd1a583a2df5dbbd6281682ae98a4c83072784a50f948756fe280f6aaccce209eedef4018b5795cc3e546fc2a5a84aabbac0cb1daaaff4c25b1c081bc1ebf2967021384aa6f87a4776d2db4e3991dde445edf3964e1cda380335bc02cc27e7036b8b504b79cbd2f68da365b7642bec64a6728c75d530e1c45b75e6258be37fe2259b52a4e4a8c0358ac280371c0962078634628f2410327b98cfbdcf3f4f3950e33716d26379d4f58a583faef5179d3d6935eaf07d7f853fbcea9c4b1bd2ff5ca4836d623d784f0e6511cf108ade750082edadf6deae3f4f5d9247ad85f83e5fcdb7aac5995b289f2bd46555757a4fbc29cd3b324d8eb3f63eb9404d416148100ef042eb65570ee080752be5f7e3d24347da79f86a31d1b53f11d6be491f96ae04fbfe790ea4783a434a218a788e1a013c8891e554f1afa046c8febe598398c46bc14761fe4a5acbe17fe8a645de4074152649334759fbb45e26b22ef80c3f1aaa094650734a63dc9b258f8ee7d5a2a7bb05b16e8d85e0cf10715f5fe3434579bd283c773e65e6ed53a4b177e97b26b2a691c474964c5a0b4772b4946c5665ea3772f0894d84615a66c226e69b5e22fcb2e65c7f646c790d51beab720170bd8cb6aa611407f49b0ab7ce1a9645e966376602f4f18fda1d2a84efa676fb0b13b9f9fef40be90f05866e2a02f59c9fcc394f9ec8246e1c1a2f7c88233e53c77be9d7538aa45c14c98d32be5571ac028591830c4c3c5d9c3c84b1798c3ed96c135bd00df389d7a9fcedc875a370d6be2d854e64a30a63d65df65e982b93d69d1d8b8e2003f007d0613a44bf6aa365e2ab5fb83ddc4c2172d2501d2abe11153bfb2d8e6d50772923075e45c6419bb9449f36323ebe45f4faa162049a903c4bd9df8176af174cb613421f23704405083deef04a8845d727332842095bb08353ec0196e3eedc7b6d1093c0de12b0ee263a3abbd82b194e9627bc749022c4f31e82518e880331c63b476306b0c7661f9dfde5640f33204644f9c8e6709de39679c5cb8bd2c8b7e99a401f97fd1526c2705d0299fe5c7e282c2b7a9e562be93244d5e0bf6066613b9e43119477bc371855f104e52fc253f813d1448667cf0971449b5f2a14e06e79a49caaa196809a070d4e6ca6497e04c23806e95a8000232979150dfb3ce92a3c658c6579cab3ed910e16593748b962417ebbc69ff384fcac14bdf2ba500b2931a3205352c54910a5f4e78f43080865baa90ae846702c848abb5fe2943220b7bcfa6d24f4bc262508ba55db1c1a08946c3e55c398e8223e9d98a1025ac181ea3421720f19c1e1f20651a46026cd2d1223c568c4e1f79041a8fa6544e4c51e7b8c9909f447aa2fa1bcc8c12a0c844961bf4c2c16738800275962d377929c3bba6eac3be71c9b2215dd11a078721da74d4e25f44b570aa1a98318e6474a1ceee5bbbc8d85d1508d02848067c29395cce5d5a817407343232e4889037dbb8f80d66bfcbeec0c4482555f5aaad2c53d19e1ee53c1c73f814cf79512210866954d89edc13d9d57749305bfb9455e5d8a050d98587fabd201edf241688a00309ad36dbe564838f95e48f6a8aeaa4f75b69c3786dddfb514dc5177ea0218435f50fb923d64a5f8a0cc13ad6b38d8d52108d52b1b834853838cd7c9fba5d7d1693c2e089c3caf90084842d594704400ba989dce1ba6f3c22c347ff307425cd1ee941da44b46ccc71ab8393bfaed89ab8713736460874a7c08e23a5bed86a842a0bb9b8617c28e4b49f3cc152f8741c3b21ad212d191d48de0785bb579c923375c50ea12ba6eb9c52969bb9fdfbd53a21f75262d8be36902260425802106e1e64a96d783111d0b2e013ab942bc467e778cfeafd72b65b5955caa3828df151636b58de4f38c3e6359b444b80f77e224baf6b30365a6194bcbf3736dc54a85a9f4cec3eb40abeb7a14238e490648326d6f2ff2eecb819faacea0c857ca4b440dd464662515ec2378715b95765885387ece9cdd55cdca445df078b0ef4d167046c4121a33119097e8c22e477a78c811ff0f2a229e6f7758034f839d34eeea4262fe50b5c1cf714bfa5697754515f7fec19fd9f6f9d85d562f1337373cc3e74ad02dedb7db305eddbc3f283f0743064361b45ca94007b46d9627236c2259add089ac954405163443a0ee4fd27a52071e2949f489730de81333abbcb9ab648a450238673de0b2b695d7b0ac45a5d258e230fe7a840886df4d338ea6015202a58fce0103b8a90e73674cd2208eb0053a7f9d98446ccb33197079ba6465fe3b286e396ed7e5a8cf12339f2d2c8085e255b2584d9a8ba9b0e8c33bfd5756ac819f5bb028feb0d95ac8307bb713231db714f626c3117e580369bdeaa802989d1b6aa630d553da67438f07e1a5750bc6af066bdea44e2727db7a0043cac40c39cbe152123fa9fd805cc5cf810c9ddc93ed9d8491e8b4ecfd489d40f10f32e8fd3f28104220e0d589373cf34edfdf5ad4980cc0200126b2e2e6b397214fbc0ff902e8de14daf08ab1dc44640dae6f6641c6d9f1d14435231220bd3805cd12cfd571a463e017ee123dce54b4da4e53f5f5965203f0995bea925149f111e092d6919368f134d1aa161a10596d887d7262268199f753702be5cb7aa057f52d4a7c3429de5da6f9e93e7f75a1c345a3242ff5cdf87c0058d40e0334a28b35b5214200b6f9479892e4620ebadde3e13d28109968d80dc33d27ae87f4b07dd5d8514b4becdc3b2cdc410661e431cd17aefcbaa814fd9f61379867400d5ccad3d528d2d10134b0609d683967d3b6f41477490d12720e5eb1322298c901ec709e31c4f596df21ab59065ed9f2d97c15b24ca4b931726796dedf0e4693437b8af3c780ce97fb084384322b59d4738eac595f873688c114d7ed4efd9efa392447a3813ba4552c194ce021fa06f2837cb79ead3267d5cd7075f3ca0ed7ea8b1473c8118580b9dce13231de41271ae12f06303a1faa29a7d6dab5818aea2dce8def84bbe9a4cbd46223a3e8c430fc0fce4136350fb4de4b4807a7ab836c4", 0x1000}, {&(0x7f0000000880)="56ef25cdf9470130aa47786c4c0c9ca8a3bd20ac72459992a361326ecf8ee080172974e8a233ee8961ed6f5d0ad0b6bfd5006671150865c69c361491c398b64bb877c04eae5c07336fe391d31265230fbe7f065beb536c38cfe0b1901ea4096f2e17bcdf59eb1cdce77afe2fbe381425837a164e2acabd5486e7a84b6ed5c9766cdb4e531c4ac18a86c32b9658", 0x8d}], 0x6, 0x8) write$binfmt_misc(r5, 0x0, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(r5, &(0x7f0000000840)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xac, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x24044810}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000004c0)='%-5lx \x00'}, 0x20) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x2}, 0x48) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r8, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0xf, &(0x7f0000000400)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x11}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0xba}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x2000000000000222, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r10}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xe, 0x11, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x40}, [@ldst={0x2, 0x2, 0x1, 0x7, 0x8, 0xfffffffffffffff8, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}]}, &(0x7f00000000c0)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2d, r1, 0x8, &(0x7f0000000140)={0x0, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x1, 0x7, 0x7ff}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f00000005c0)=[0xffffffffffffffff, r2, r3, r4, r5, r6, r7, r8, r9, r10], &(0x7f0000000600)=[{0x3, 0x5, 0x2, 0xc}], 0x10, 0xfffffff7}, 0x90) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0xb, &(0x7f00000001c0)={&(0x7f0000000200)=@updpolicy={0xb8, 0x11, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@private1}}}, 0xb8}}, 0x0) 49.882908ms ago: executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000080)=0x4000, 0x4) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x14, &(0x7f00000000c0), &(0x7f00000003c0)=0x8) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000007, 0x11, r1, 0x100000000) mmap$xdp(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x100000000) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000af000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x90) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYRESDEC=r0, @ANYRES32], 0x110}, 0x1, 0x0, 0x0, 0x4c0c4}, 0x0) r7 = socket$kcm(0xa, 0x3, 0x73) sendmsg$kcm(r7, &(0x7f0000006900)={&(0x7f0000006640)=@l2tp6={0xa, 0x0, 0x5, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x3}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x0, 0x0, 0x0, 0xfffff038}]}, 0x10) r10 = socket$inet(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r10, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x7, 0x4, 0x418, 0x0, 0x130, 0x0, 0x330, 0x130, 0x330, 0x4, 0x0, {[{{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "d4c861b503a8dbd0f7d851b917a2485f52aaafe710a8b6ed78d5613be8907a86b8cc0768689eb21cef8c45a2572de3aedb1cfa2253cfd00b67222fa2580cc7e5"}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@broadcast, @multicast2, 0x0, 0x0, 0x0, 0x0, {}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'team_slave_1\x00', 'wg2\x00'}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f71f8a3ece5070c87f2c74b66da1b8ffe25d25ca5a492b0affc0de8700e8"}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x468) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="f8000000", @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r9, @ANYBLOB="d90033008000000008021100000108021100000108021100000000000000000000000000000000000101600301000576000000a16d7b4c716b77d12e091fa9b7296681dee324cad0cb5702214a102ff6f266f7c1b782bc90bfea7fd87301456f79ae4919e71c6d8e978d5f0e50459fc1dd86b52d8f2117892871b88d60d77fe6b35326e9a57c4fdb107fdad1bba1186bb17175631b5a626d7976ac39f63708739a8462a191533c04000000002d1a024004e3cd0000000000000700800003000000000300100000077107000101ff00012076060000000000000000008ccfb6f4d36a3842f75475a34db4453e"], 0xf8}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x60, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8008}, 0x20044084) r11 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(r11, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f00000240c0)=ANY=[@ANYBLOB="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"], 0x128}}, 0x0) 0s ago: executing program 1: r0 = socket$kcm(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x50) ppoll(&(0x7f0000000100)=[{r1, 0xa000}, {r0, 0x5090}, {r1, 0x83}], 0x3, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000180)={[0x5]}, 0x8) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b0ad25a80648c2594f90524fc60100c030000040009053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) kernel console output (not intermixed with test programs): 21616] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 555.425233][T21510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 555.458229][T20553] tipc: Subscription rejected, illegal request [ 555.500253][ T5130] Bluetooth: hci1: command tx timeout [ 555.594497][ T8761] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 555.621647][ T8761] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.646527][T21329] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.658688][T21329] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.667665][T21329] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.677015][T21329] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.776805][ T8761] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 555.787964][ T8761] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.860432][T21510] team0: Port device team_slave_0 added [ 555.890044][T21558] chnl_net:caif_netlink_parms(): no params data found [ 555.982920][ T8761] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 556.001730][ T8761] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.072764][T21510] team0: Port device team_slave_1 added [ 556.096299][T21641] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 556.136880][T21641] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 556.205166][ T8761] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 556.220749][ T5130] Bluetooth: hci3: command tx timeout [ 556.226897][ T8761] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.273198][T21510] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 556.280860][T21510] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 556.322460][T21510] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 556.399022][T21510] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 556.430077][T21510] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 556.473897][T21510] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 556.742228][T21558] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.750037][T21558] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.757421][T21558] bridge_slave_0: entered allmulticast mode [ 556.767704][T21558] bridge_slave_0: entered promiscuous mode [ 556.792562][T21510] hsr_slave_0: entered promiscuous mode [ 556.799842][T21510] hsr_slave_1: entered promiscuous mode [ 556.926618][T21558] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.940032][T21558] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.947363][T21558] bridge_slave_1: entered allmulticast mode [ 556.968737][T21558] bridge_slave_1: entered promiscuous mode [ 557.265378][T21558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 557.321758][T21558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 557.357981][ T8765] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 557.381171][ T8765] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 557.579722][ T5130] Bluetooth: hci1: command tx timeout [ 557.714159][ T8761] batman_adv: batadv0: Removing interface: ip6gretap1 [ 557.978588][ T8761] team0: Port device bridge0 removed [ 558.296154][ T8761] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 558.307727][ T5130] Bluetooth: hci3: command tx timeout [ 558.315200][ T8761] bond_slave_0: left allmulticast mode [ 558.324859][ T8761] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 558.334448][ T8761] bond_slave_1: left allmulticast mode [ 558.345346][ T8761] bond0 (unregistering): Released all slaves [ 558.406318][T21558] team0: Port device team_slave_0 added [ 558.503144][T21558] team0: Port device team_slave_1 added [ 558.533865][T21673] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.4'. [ 558.559713][ T8761] tipc: Left network mode [ 558.645741][ T8761] IPVS: stopping backup sync thread 14350 ... [ 558.652299][T21558] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 558.660305][T21558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 558.687452][T21558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 558.704151][T21558] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 558.711384][T21558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 558.738768][T21558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 558.776738][T20549] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 558.786195][T21676] netlink: 'syz-executor.4': attribute type 9 has an invalid length. [ 558.809810][T20549] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 558.817622][T21676] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.4'. [ 559.045436][T21558] hsr_slave_0: entered promiscuous mode [ 559.061135][T21558] hsr_slave_1: entered promiscuous mode [ 559.068093][T21558] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 559.078240][T21558] Cannot create hsr debugfs directory [ 559.263029][T21694] netlink: 542 bytes leftover after parsing attributes in process `syz-executor.2'. [ 560.320411][ T8761] batman_adv: batadv0: Removing interface: team0 [ 560.329030][ T8761] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 560.336701][ T8761] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 560.352434][ T8761] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 560.366683][ T8761] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 560.376066][T21739] Cannot find add_set index 0 as target [ 560.382567][ T5130] Bluetooth: hci3: command tx timeout [ 560.409108][ T8761] veth1_macvtap: left allmulticast mode [ 560.415731][ T8761] veth1_macvtap: left promiscuous mode [ 560.421551][ T8761] veth0_macvtap: left promiscuous mode [ 560.427284][ T8761] veth1_vlan: left promiscuous mode [ 560.548141][ T8761] infiniband syz2: set down [ 561.052263][T21746] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 561.223117][ T8761] team0 (unregistering): Port device team_slave_1 removed [ 561.310911][ T8761] team0 (unregistering): Port device team_slave_0 removed [ 561.540240][T20555] smc: removing ib device syz2 [ 561.993473][T21510] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 562.029959][T21746] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 562.030803][T12521] infiniband syz2: ib_query_port failed (-19) [ 562.064335][T21510] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 562.250573][T21510] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 562.362059][T21510] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 563.302750][T21510] 8021q: adding VLAN 0 to HW filter on device bond0 [ 563.483211][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.906703][T21793] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 563.945209][T21558] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 563.978563][T21510] 8021q: adding VLAN 0 to HW filter on device team0 [ 564.065737][T21558] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 564.101922][T21558] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 564.195501][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 564.202793][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 564.241133][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 564.248368][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 564.286849][T21558] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 564.307661][T21800] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 564.418704][T21806] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. [ 564.496076][T21807] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 564.850217][ T5267] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 564.964578][ T5270] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 565.077662][T21558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 565.370088][ T5270] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 565.376685][T21558] 8021q: adding VLAN 0 to HW filter on device team0 [ 565.446213][ T5267] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.453506][ T5267] bridge0: port 1(bridge_slave_0) entered forwarding state [ 565.558923][T21510] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 565.755218][ T5267] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.762505][ T5267] bridge0: port 2(bridge_slave_1) entered forwarding state [ 565.800764][T12310] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 566.141569][T21837] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.2'. [ 566.183797][T21510] veth0_vlan: entered promiscuous mode [ 566.197655][T21837] openvswitch: netlink: Tunnel attr 0 has unexpected len 13 expected 8 [ 566.217388][T21510] veth1_vlan: entered promiscuous mode [ 566.320923][T21842] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 566.334739][T21839] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 566.359451][T21839] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 566.382214][T21839] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 566.464536][T21510] veth0_macvtap: entered promiscuous mode [ 566.511948][T21510] veth1_macvtap: entered promiscuous mode [ 566.581639][T21510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 566.605526][T21510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.632847][T21510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 566.651854][T21510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.671750][T21510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 566.684083][T21510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.696802][T21510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 566.711180][T21510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.722055][T21510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 566.733338][T21510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.752224][T21510] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 566.770707][T21858] syz_tun: entered allmulticast mode [ 566.788449][T21510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 566.802120][T21510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.829935][T21510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 566.853235][T21510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.867337][T21510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 566.878592][T21510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.899333][T21510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 566.910671][T21510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.923331][T21510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 566.934267][T21510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.966915][T21510] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 566.989636][T21852] syz_tun: left allmulticast mode [ 567.030906][T21558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 567.070271][T21510] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.099850][T21510] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.111289][T21510] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.123156][T21510] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.256331][T21871] Bluetooth: MGMT ver 1.22 [ 567.343201][T21874] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.2'. [ 567.385270][T21558] veth0_vlan: entered promiscuous mode [ 567.411404][T21874] openvswitch: netlink: Tunnel attr 0 has unexpected len 13 expected 8 [ 567.437086][T21558] veth1_vlan: entered promiscuous mode [ 567.497483][T20549] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 567.511585][T20549] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 567.607393][T20549] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 567.621897][T21558] veth0_macvtap: entered promiscuous mode [ 567.631468][T20549] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 567.655619][T21558] veth1_macvtap: entered promiscuous mode [ 567.772697][T21558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 567.812676][T21558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.847066][T21558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 567.866225][T21558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.889777][T21558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 567.913450][T21558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.933862][T21558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 567.958884][T21558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 567.981468][T21558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 568.018292][T21558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.038992][T21558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 568.069508][T21558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.101682][T21558] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 568.232185][T21886] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 568.292844][T21886] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.327756][T21882] syz-executor.2 (21882) used greatest stack depth: 18096 bytes left [ 568.372936][T21558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 568.411163][T21558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.439299][T21558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 568.455162][T21558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.475944][T21558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 568.494809][T21558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.523800][T21558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 568.568676][T21558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.590118][T21558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 568.630377][T21558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.665386][T21558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 568.699357][T21558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.717467][ T1043] tipc: Subscription rejected, illegal request [ 568.741280][T21558] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 568.773390][T21558] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.809399][T21558] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.818273][T21558] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.866827][T21558] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.085633][ T8761] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.230212][T20549] tipc: Subscription rejected, illegal request [ 569.356049][ T8761] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.639075][ T8761] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.927865][T20555] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 569.962469][T20555] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 570.001021][ T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 570.052780][ T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 570.066080][ T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 570.076394][ T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 570.110384][ T53] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 570.119991][ T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 570.173497][ T8761] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.248940][T21924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: macsec1 [ 570.277070][T21924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.360474][T21924] ipvlan2: entered promiscuous mode [ 570.365775][T21924] ipvlan2: entered allmulticast mode [ 570.377113][T21955] __nla_validate_parse: 4 callbacks suppressed [ 570.377134][T21955] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.1'. [ 570.397793][T21924] dummy0: entered allmulticast mode [ 570.404155][T21955] openvswitch: netlink: Tunnel attr 0 has unexpected len 13 expected 8 [ 570.571189][ T8763] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 570.580905][ T8763] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 571.187016][T21977] hsr0: entered promiscuous mode [ 571.369604][T21977] hsr_slave_0: left promiscuous mode [ 571.385605][T21977] hsr_slave_1: left promiscuous mode [ 571.442994][T21977] hsr0 (unregistering): left promiscuous mode [ 571.453506][T21988] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 571.536093][ T8761] bridge_slave_1: left allmulticast mode [ 571.581142][ T8761] bridge_slave_1: left promiscuous mode [ 571.586974][ T8761] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.627341][ T8761] bridge_slave_0: left allmulticast mode [ 571.657516][T21990] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 571.667114][ T8761] bridge_slave_0: left promiscuous mode [ 571.679585][ T8761] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.965663][T20544] tipc: Subscription rejected, illegal request [ 572.223015][ T53] Bluetooth: hci1: command tx timeout [ 572.862824][ T8761] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 572.882497][ T8761] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 572.901720][ T8761] bond0 (unregistering): Released all slaves [ 572.947009][T22002] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 572.990865][T22003] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 573.065533][T21940] chnl_net:caif_netlink_parms(): no params data found [ 573.293332][T22049] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 573.302164][T22045] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 573.440405][T22042] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 573.459983][T22042] netlink: 35 bytes leftover after parsing attributes in process `syz-executor.1'. [ 573.489996][T22042] netlink: 35 bytes leftover after parsing attributes in process `syz-executor.1'. [ 573.992467][T22069] sctp: [Deprecated]: syz-executor.0 (pid 22069) Use of struct sctp_assoc_value in delayed_ack socket option. [ 573.992467][T22069] Use struct sctp_sack_info instead [ 574.209357][ T8761] hsr_slave_0: left promiscuous mode [ 574.239087][ T8761] hsr_slave_1: left promiscuous mode [ 574.268169][ T8761] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 574.298012][ T8761] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 574.306565][ T53] Bluetooth: hci1: command tx timeout [ 574.334279][ T8761] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 574.353542][ T8761] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 574.404196][ T8765] tipc: Subscription rejected, illegal request [ 574.470911][ T8761] veth1_macvtap: left promiscuous mode [ 574.494903][ T8761] veth0_macvtap: left promiscuous mode [ 574.510064][ T8761] veth1_vlan: left promiscuous mode [ 574.517934][ T8761] veth0_vlan: left promiscuous mode [ 575.447762][ T8761] team0 (unregistering): Port device team_slave_1 removed [ 575.506655][ T8761] team0 (unregistering): Port device team_slave_0 removed [ 576.169316][T22079] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 576.180032][T21940] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.196329][T21940] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.214668][T21940] bridge_slave_0: entered allmulticast mode [ 576.236183][T21940] bridge_slave_0: entered promiscuous mode [ 576.278714][T21940] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.329355][T21940] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.357957][T21940] bridge_slave_1: entered allmulticast mode [ 576.381097][ T53] Bluetooth: hci1: command tx timeout [ 576.387591][T21940] bridge_slave_1: entered promiscuous mode [ 576.473464][T22099] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.2'. [ 576.534401][T22099] openvswitch: netlink: Tunnel attr 0 has unexpected len 13 expected 8 [ 576.562139][T21940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 576.762251][T21940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 576.922663][T21940] team0: Port device team_slave_0 added [ 577.014731][T21940] team0: Port device team_slave_1 added [ 577.311929][T21940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 577.339880][T21940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 577.437248][T21940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 577.470561][T22126] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 577.509570][T22117] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 577.563574][T22117] geneve0: entered promiscuous mode [ 577.597398][T22117] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.636672][T22117] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.679838][T22117] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.699650][T22117] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.726803][T22117] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.746479][T22117] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.776456][T22117] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.794359][T22117] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.847827][T21940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 577.856033][ T5130] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 577.871783][T21940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 577.898314][ T5130] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 577.907161][T21940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 577.926325][T22121] bridge0: entered promiscuous mode [ 577.932754][ T5130] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 577.941916][T22121] macsec1: entered promiscuous mode [ 577.950138][T22121] macsec1: entered allmulticast mode [ 577.955746][T22121] bridge0: entered allmulticast mode [ 577.961930][ T5130] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 577.973628][ T5130] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 577.981567][ T5130] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 578.001278][T22121] bridge0: left allmulticast mode [ 578.006732][T22121] bridge0: left promiscuous mode [ 578.217845][T21940] hsr_slave_0: entered promiscuous mode [ 578.266545][T21940] hsr_slave_1: entered promiscuous mode [ 578.444991][T22137] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 578.459852][ T5130] Bluetooth: hci1: command tx timeout [ 579.071617][T22127] chnl_net:caif_netlink_parms(): no params data found [ 579.415564][T22127] bridge0: port 1(bridge_slave_0) entered blocking state [ 579.450313][T22127] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.457835][T22127] bridge_slave_0: entered allmulticast mode [ 579.488364][T22127] bridge_slave_0: entered promiscuous mode [ 579.541868][T22172] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 579.578611][T22172] geneve0: entered promiscuous mode [ 579.597496][T22177] can: request_module (can-proto-0) failed. [ 579.690861][T22172] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 579.710043][T22127] bridge0: port 2(bridge_slave_1) entered blocking state [ 579.722060][T22127] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.729670][T22127] bridge_slave_1: entered allmulticast mode [ 579.737659][T22127] bridge_slave_1: entered promiscuous mode [ 579.746816][T22182] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 579.926947][T22186] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 579.994069][T21940] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 580.042137][T22127] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 580.058406][T21940] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 580.064586][ T5130] Bluetooth: hci0: command tx timeout [ 580.113847][T22127] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 580.156602][T21940] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 580.183741][T21940] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 580.385425][T22127] team0: Port device team_slave_0 added [ 580.413111][T22127] team0: Port device team_slave_1 added [ 580.445746][T22202] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 580.538297][T22203] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 580.560851][T22203] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 580.603191][T22127] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 580.612466][T22127] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 580.677009][T22127] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 580.703815][T22127] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 580.714198][T22127] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 580.744857][T22127] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 580.757962][T22213] netlink: 148 bytes leftover after parsing attributes in process `syz-executor.2'. [ 580.927942][T22127] hsr_slave_0: entered promiscuous mode [ 580.936588][T22127] hsr_slave_1: entered promiscuous mode [ 580.945195][T22127] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 580.954329][T22127] Cannot create hsr debugfs directory [ 581.254364][T21940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 581.528861][T22127] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 581.762493][T22236] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 582.049476][ T1043] tipc: Subscription rejected, illegal request [ 582.149421][ T5130] Bluetooth: hci0: command tx timeout [ 582.233985][ C0] vxcan1: j1939_xtp_rx_dat: no tx connection found [ 582.263761][T22230] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 582.347086][T22237] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 582.401534][T22127] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.446489][T21940] 8021q: adding VLAN 0 to HW filter on device team0 [ 582.567155][T22127] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.610098][T22250] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 582.643182][T22250] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 582.744838][T22127] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 582.791393][ T1796] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.798770][ T1796] bridge0: port 1(bridge_slave_0) entered forwarding state [ 582.854376][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.861592][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 582.990824][ C0] vxcan1 (unregistered): j1939_tp_rxtimer: 0xffff88804f571c00: rx timeout, send abort [ 583.288424][T22127] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 583.345000][T22127] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 583.379873][T22127] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 583.427335][T22127] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 583.502617][ C0] vxcan1 (unregistered): j1939_tp_rxtimer: 0xffff88804f571c00: abort rx timeout. Force session deactivation [ 583.530160][T22277] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 583.639933][T22284] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. [ 583.694792][T22284] Êü: entered promiscuous mode [ 583.744412][T21940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 583.973353][T22290] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.031244][T22127] 8021q: adding VLAN 0 to HW filter on device bond0 [ 584.137567][T22290] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.193749][T22296] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 584.219980][ T5130] Bluetooth: hci0: command tx timeout [ 584.252032][T22290] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.313826][T21940] veth0_vlan: entered promiscuous mode [ 584.328008][T22296] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 584.395311][T20549] tipc: Subscription rejected, illegal request [ 584.414801][T22290] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.463933][T22127] 8021q: adding VLAN 0 to HW filter on device team0 [ 584.494133][T21940] veth1_vlan: entered promiscuous mode [ 584.537232][ T5270] bridge0: port 1(bridge_slave_0) entered blocking state [ 584.544503][ T5270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 584.625227][ T5267] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.632506][ T5267] bridge0: port 2(bridge_slave_1) entered forwarding state [ 584.850551][T22290] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.897615][T22290] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.918665][T22290] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.935928][T21940] veth0_macvtap: entered promiscuous mode [ 585.135770][T22290] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.300981][ T5130] Bluetooth: hci0: command tx timeout [ 587.695409][T21940] veth1_macvtap: entered promiscuous mode [ 587.804849][T21940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 587.849246][T21940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 587.876564][T21940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 587.895601][T22325] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 587.916196][T21940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 587.936369][T21940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 587.947275][T21940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 587.962673][T22325] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 587.972572][T21940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 587.984572][T21940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 587.996125][T21940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 588.010558][T21940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.020907][T21940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 588.034451][T21940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.047654][T21940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 588.065221][T22324] bridge0: entered promiscuous mode [ 588.074317][T22324] team0: entered promiscuous mode [ 588.079648][T22324] team_slave_0: entered promiscuous mode [ 588.085931][T22324] team_slave_1: entered promiscuous mode [ 588.100184][T22324] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 588.111131][T22324] Cannot create hsr debugfs directory [ 588.136495][T21940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 588.160895][T21940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.202617][T21940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 588.239205][T21940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.258376][T21940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 588.274947][T22335] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 588.285669][T21940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.295850][T21940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 588.306940][T21940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.320214][T21940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 588.346080][T21940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.356412][T21940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 588.368309][T21940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 588.388730][ T5130] Bluetooth: hci0: command tx timeout [ 588.410109][T21940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 588.445713][T21940] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.493092][T21940] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.526938][T21940] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.557110][T21940] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.767653][T22127] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 589.163267][T22127] veth0_vlan: entered promiscuous mode [ 589.188712][T20553] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 589.217315][T20553] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 589.328515][T22127] veth1_vlan: entered promiscuous mode [ 589.380772][T22370] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 589.397266][ T8765] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 589.412603][ T8765] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 589.464938][T22127] veth0_macvtap: entered promiscuous mode [ 589.516804][T22127] veth1_macvtap: entered promiscuous mode [ 589.734747][T22127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 589.751077][T22127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.790715][T22127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 589.804633][T22127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.816019][T22127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 589.854247][T22127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.873086][T22127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 589.901097][T22127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.929981][T22127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 589.946419][T22127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 589.977227][T22127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 589.990121][T22127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 590.014746][T22127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 590.040165][T22127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 590.081150][T22127] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 590.151663][T22127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 590.188841][T22127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 590.208660][T22127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 590.229579][T22127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 590.249371][T22127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 590.269670][T22127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 590.280090][T22127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 590.294747][T22127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 590.305839][T22127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 590.317063][T22127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 590.327465][T22127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 590.338919][T22127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 590.349452][T22127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 590.378553][T22127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 590.392660][T22127] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 590.515139][T20553] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.644233][T22127] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.687789][T22127] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.709410][T22127] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.728506][T22127] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.740907][T22395] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 590.784954][T22395] netlink: 9412 bytes leftover after parsing attributes in process `syz-executor.2'. [ 590.822675][T20553] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.042979][T20553] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.143642][ T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 591.154627][ T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 591.164455][ T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 591.173823][ T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 591.187082][ T53] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 591.195206][ T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 591.257187][T22411] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 591.423573][T20553] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.581759][ T1043] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 591.604293][ T1043] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 591.613359][T22416] sch_fq: defrate 0 ignored. [ 591.817548][ T1043] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 591.838315][ T1043] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 592.024778][T20553] bridge_slave_1: left allmulticast mode [ 592.050279][T20553] bridge_slave_1: left promiscuous mode [ 592.067692][T20553] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.108279][T20553] bridge_slave_0: left allmulticast mode [ 592.115261][T20553] bridge_slave_0: left promiscuous mode [ 592.141533][T20553] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.558179][T22455] nbd: must specify an index to disconnect [ 592.947922][T20553] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 592.961512][T20553] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 592.974368][T20553] bond0 (unregistering): Released all slaves [ 593.220129][T22468] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 593.262214][ T5130] Bluetooth: hci1: command tx timeout [ 593.520086][T22474] hsr0: entered promiscuous mode [ 593.525651][T22478] bridge0: left promiscuous mode [ 593.534620][T22478] team0: left promiscuous mode [ 593.543411][T22478] team_slave_0: left promiscuous mode [ 593.549532][T22478] team_slave_1: left promiscuous mode [ 593.624223][T22478] hsr0 (unregistering): left promiscuous mode [ 593.668589][T22476] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 593.705275][T22407] chnl_net:caif_netlink_parms(): no params data found [ 593.770581][T22481] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 593.833486][T22481] batman_adv: batadv0: Adding interface: team0 [ 593.849806][T22481] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 593.895999][T22481] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 593.918336][T22485] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 594.282057][T20553] hsr_slave_0: left promiscuous mode [ 594.310255][T20553] hsr_slave_1: left promiscuous mode [ 594.346253][T20553] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 594.370097][T20553] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 594.409103][T20553] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 594.414497][T22518] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 594.417013][T20553] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 594.485207][T20553] veth1_macvtap: left promiscuous mode [ 594.493529][T20553] veth0_macvtap: left promiscuous mode [ 594.499612][T20553] veth1_vlan: left promiscuous mode [ 594.529921][T20553] veth0_vlan: left promiscuous mode [ 595.339949][ T5130] Bluetooth: hci1: command tx timeout [ 595.479925][T20553] team0 (unregistering): Port device team_slave_1 removed [ 595.557494][T20553] team0 (unregistering): Port device team_slave_0 removed [ 596.340747][T22513] netlink: 67 bytes leftover after parsing attributes in process `syz-executor.0'. [ 596.358004][T22513] IPv6: NLM_F_CREATE should be specified when creating new route [ 596.367736][T22513] IPv6: Can't replace route, no match found [ 596.481159][T22407] bridge0: port 1(bridge_slave_0) entered blocking state [ 596.488397][T22407] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.526133][T22407] bridge_slave_0: entered allmulticast mode [ 596.573543][T22407] bridge_slave_0: entered promiscuous mode [ 596.602716][T22407] bridge0: port 2(bridge_slave_1) entered blocking state [ 596.639351][T22407] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.647927][T22547] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 596.664919][T22407] bridge_slave_1: entered allmulticast mode [ 596.679120][T22547] netlink: 203156 bytes leftover after parsing attributes in process `syz-executor.4'. [ 596.689546][T22407] bridge_slave_1: entered promiscuous mode [ 596.775249][T22549] bridge0: entered promiscuous mode [ 596.822193][T22549] team0: entered promiscuous mode [ 596.857459][T22549] team_slave_0: entered promiscuous mode [ 596.870188][T22549] team_slave_1: entered promiscuous mode [ 596.897591][T22549] hsr1: Slave B (team0) is not up; please bring it up to get a fully working HSR network [ 597.024530][T22407] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 597.061894][T22407] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 597.237647][T22407] team0: Port device team_slave_0 added [ 597.266873][T22407] team0: Port device team_slave_1 added [ 597.379096][T22407] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 597.386286][T22407] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 597.438940][T22407] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 597.457753][ T5130] Bluetooth: hci1: command tx timeout [ 597.469071][T22407] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 597.493639][T22407] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 597.600134][T22407] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 597.717895][T22583] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 597.817229][T22583] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 597.830440][T22586] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 597.945922][T22582] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 598.042347][T22587] pimreg: entered allmulticast mode [ 598.069587][T22407] hsr_slave_0: entered promiscuous mode [ 598.113904][T22407] hsr_slave_1: entered promiscuous mode [ 598.265249][T22602] bridge0: port 3(erspan0) entered blocking state [ 598.299820][T22602] bridge0: port 3(erspan0) entered disabled state [ 598.306589][T22602] erspan0: entered allmulticast mode [ 598.351178][T22602] erspan0: entered promiscuous mode [ 598.357245][T22602] bridge0: port 3(erspan0) entered blocking state [ 598.363874][T22602] bridge0: port 3(erspan0) entered forwarding state [ 599.500332][ T5130] Bluetooth: hci1: command tx timeout [ 600.082962][T22663] bridge0: port 3(geneve1) entered blocking state [ 600.110159][T22663] bridge0: port 3(geneve1) entered disabled state [ 600.120328][T22663] geneve1: entered allmulticast mode [ 600.138026][T22663] geneve1: entered promiscuous mode [ 600.149289][T22663] bridge0: port 3(geneve1) entered blocking state [ 600.156354][T22663] bridge0: port 3(geneve1) entered forwarding state [ 600.944895][T22684] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 604.374647][T22407] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 604.393456][T22407] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 604.406268][T22683] netlink: 67 bytes leftover after parsing attributes in process `syz-executor.4'. [ 604.429460][T22683] IPv6: NLM_F_CREATE should be specified when creating new route [ 604.437367][T22683] IPv6: Can't replace route, no match found [ 604.499799][T22407] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 604.648328][T22407] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 605.054710][T22407] 8021q: adding VLAN 0 to HW filter on device bond0 [ 605.172314][T22407] 8021q: adding VLAN 0 to HW filter on device team0 [ 605.226285][ T1796] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.233535][ T1796] bridge0: port 1(bridge_slave_0) entered forwarding state [ 605.295005][T12311] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.302339][T12311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 605.371270][T22732] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 605.526235][T22737] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 605.569990][T22739] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 605.613064][T22746] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 605.684228][T22746] 0ªX¹¦Dö»: left allmulticast mode [ 605.784921][T22746] geneve0: left promiscuous mode [ 606.100785][T22764] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 606.247437][T22760] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.288688][T22776] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.0'. [ 606.493689][T22760] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.558337][T22784] batadv_slave_1: entered promiscuous mode [ 606.630902][T22407] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 606.666387][T22787] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 606.708533][T22760] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.759035][T22783] batadv_slave_1: left promiscuous mode [ 606.896731][T22760] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.033740][T22800] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. [ 607.191979][T22407] veth0_vlan: entered promiscuous mode [ 607.217442][T22806] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 607.231290][T22760] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.273177][T22760] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.284680][T22407] veth1_vlan: entered promiscuous mode [ 607.322094][T22760] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.349055][T22760] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.448183][T22407] veth0_macvtap: entered promiscuous mode [ 607.467028][T22407] veth1_macvtap: entered promiscuous mode [ 607.503554][T22407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 607.512018][T22811] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 607.520384][T22407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.539928][T22811] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.1'. [ 607.551147][T22407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 607.558316][T22810] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 607.575979][T22407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.576951][T22810] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.1'. [ 607.608010][T22407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 607.623278][T22407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.649394][T22407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 607.670289][T22407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.680591][T22407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 607.682682][T22815] netlink: 209660 bytes leftover after parsing attributes in process `syz-executor.1'. [ 607.691220][T22407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.691246][T22407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 607.691267][T22407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.691289][T22407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 607.691306][T22407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.693552][T22407] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 607.847547][T22407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 607.862624][T22407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.917230][T22407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 607.938324][T22407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 607.952311][T22407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 607.975990][T22407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.107246][T22407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 608.146041][T22407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.167552][T22407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 608.183453][T22407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.193984][T22407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 608.205293][T22407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.217091][T22407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 608.230251][T22407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 608.243827][T22407] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 608.257913][T22407] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.268947][T22407] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.280090][T22407] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.305900][T22407] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.322441][T22826] macvlan1: entered promiscuous mode [ 608.350242][T22826] macvlan1: entered allmulticast mode [ 608.355925][T22826] veth1_vlan: entered allmulticast mode [ 608.365637][T22826] team0: Port device macvlan1 added [ 608.377675][T22824] hsr0: entered promiscuous mode [ 608.427035][T22828] hsr_slave_0: left promiscuous mode [ 608.438585][T22828] hsr_slave_1: left promiscuous mode [ 608.507254][T22828] hsr0 (unregistering): left promiscuous mode [ 608.583635][T22835] tap0: tun_chr_ioctl cmd 1074025677 [ 608.620204][T22835] tap0: linktype set to 1 [ 608.697331][T22837] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 608.708580][T22837] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 608.724652][T22840] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.0'. [ 608.840300][T20553] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 608.856325][T20553] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 608.909846][T22843] netlink: 105120 bytes leftover after parsing attributes in process `syz-executor.4'. [ 608.927446][T20553] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 608.942626][T22843] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 608.954528][T20553] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 609.019322][ T29] audit: type=1804 audit(1718929917.235:82): pid=22843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir902420472/syzkaller.73O4cv/610/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 [ 609.594979][ T8761] bridge_slave_1: left allmulticast mode [ 609.618265][ T8761] bridge_slave_1: left promiscuous mode [ 609.637193][ T8761] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.682052][ T8761] bridge_slave_0: left allmulticast mode [ 609.687796][ T8761] bridge_slave_0: left promiscuous mode [ 609.705468][ T8761] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.855270][ T29] audit: type=1804 audit(1718929918.085:83): pid=22871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir4254673804/syzkaller.IV97Ar/65/cgroup.controllers" dev="sda1" ino=1961 res=1 errno=0 [ 610.324742][ T8761] dvmrp0 (unregistering): left allmulticast mode [ 610.733504][ T8761] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 610.763788][ T8761] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 610.791458][ T8761] bond0 (unregistering): Released all slaves [ 611.360998][ T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 611.392681][ T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 611.402248][ T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 611.403470][T22901] __nla_validate_parse: 1 callbacks suppressed [ 611.403490][T22901] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 611.439929][ T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 611.451322][ T53] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 611.470606][ T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 611.703754][T22908] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.4'. [ 611.733601][ T8761] hsr_slave_0: left promiscuous mode [ 611.780080][ T8761] hsr_slave_1: left promiscuous mode [ 611.809596][ T8761] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 611.821057][ T8761] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 611.849111][ T8761] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 611.859560][ T8761] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 611.928347][ T8761] veth1_macvtap: left promiscuous mode [ 611.942800][ T8761] veth0_macvtap: left promiscuous mode [ 611.955504][ T8761] veth1_vlan: left promiscuous mode [ 611.968424][ T8761] veth0_vlan: left promiscuous mode [ 612.133374][ T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 612.154120][ T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 612.163550][ T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 612.176926][ T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 612.185639][ T53] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 612.193995][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 612.577950][ T8761] team0 (unregistering): Port device virt_wifi0 removed [ 612.937724][ T8761] team0 (unregistering): Port device team_slave_1 removed [ 613.001564][ T8761] team0 (unregistering): Port device team_slave_0 removed [ 613.511628][ T5130] Bluetooth: hci1: command tx timeout [ 614.264368][T22930] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.1'. [ 614.266530][T22929] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 614.274356][T22930] openvswitch: netlink: Tunnel attr 0 has unexpected len 13 expected 8 [ 614.299948][ T5130] Bluetooth: hci3: command tx timeout [ 614.327956][T22929] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 614.337265][T22924] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 614.443614][T22896] chnl_net:caif_netlink_parms(): no params data found [ 614.691645][ T8761] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.824360][ T8761] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.865940][T22913] chnl_net:caif_netlink_parms(): no params data found [ 614.943205][ T8761] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.975371][T22947] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 615.003577][T22944] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 615.097476][ T8761] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.174966][T22896] bridge0: port 1(bridge_slave_0) entered blocking state [ 615.191815][T22896] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.206529][T22896] bridge_slave_0: entered allmulticast mode [ 615.223362][T22896] bridge_slave_0: entered promiscuous mode [ 615.270804][T22896] bridge0: port 2(bridge_slave_1) entered blocking state [ 615.278040][T22896] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.290729][T22896] bridge_slave_1: entered allmulticast mode [ 615.310541][T22896] bridge_slave_1: entered promiscuous mode [ 615.521229][T22965] ip6gretap0: entered promiscuous mode [ 615.550339][T22965] batadv_slave_0: entered promiscuous mode [ 615.569357][T22965] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 615.578516][T22965] Cannot create hsr debugfs directory [ 615.584134][ T5130] Bluetooth: hci1: command tx timeout [ 615.591288][T22965] hsr0: Slave A (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 615.601970][T22965] hsr0: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network [ 615.634489][T22965] ip6gretap0: left promiscuous mode [ 615.641421][T22965] batadv_slave_0: left promiscuous mode [ 615.750323][T22896] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 615.774791][T22913] bridge0: port 1(bridge_slave_0) entered blocking state [ 615.784221][T22913] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.791669][T22913] bridge_slave_0: entered allmulticast mode [ 615.800339][T22913] bridge_slave_0: entered promiscuous mode [ 615.811513][T22974] hsr_slave_0: left promiscuous mode [ 615.817853][T22974] hsr_slave_1: left promiscuous mode [ 615.896230][T22896] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 615.918155][T22913] bridge0: port 2(bridge_slave_1) entered blocking state [ 615.928657][T22913] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.938719][T22913] bridge_slave_1: entered allmulticast mode [ 615.946438][T22913] bridge_slave_1: entered promiscuous mode [ 616.021603][T22977] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.1'. [ 616.051956][T22977] openvswitch: netlink: Tunnel attr 0 has unexpected len 13 expected 8 [ 616.125901][T22913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 616.192658][T22896] team0: Port device team_slave_0 added [ 616.212706][T22896] team0: Port device team_slave_1 added [ 616.340195][ T8761] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.389809][ T5130] Bluetooth: hci3: command tx timeout [ 616.434384][T22913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 616.664729][T22913] team0: Port device team_slave_0 added [ 616.730340][T23002] xt_TCPMSS: Only works on TCP SYN packets [ 616.783434][ T29] audit: type=1804 audit(1718929925.015:84): pid=23000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir902420472/syzkaller.73O4cv/625/memory.events" dev="sda1" ino=1952 res=1 errno=0 [ 616.841785][ T29] audit: type=1804 audit(1718929925.045:85): pid=23000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir902420472/syzkaller.73O4cv/625/memory.events" dev="sda1" ino=1952 res=1 errno=0 [ 616.898896][ T29] audit: type=1804 audit(1718929925.055:86): pid=23000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir902420472/syzkaller.73O4cv/625/memory.events" dev="sda1" ino=1952 res=1 errno=0 [ 617.455695][ T8761] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.533116][T22896] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 617.540307][T22896] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 617.566938][T22896] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 617.586582][T22913] team0: Port device team_slave_1 added [ 617.603284][T23002] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 617.660609][ T5130] Bluetooth: hci1: command tx timeout [ 617.712278][ T8761] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.735946][T22896] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 617.744216][T22896] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 617.789925][T22896] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 617.922680][ T8761] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.973634][T23021] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.2'. [ 617.999440][T23021] openvswitch: netlink: Tunnel attr 0 has unexpected len 13 expected 8 [ 618.019443][T23017] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 618.057767][T23017] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 618.075509][T22896] hsr_slave_0: entered promiscuous mode [ 618.120568][T22896] hsr_slave_1: entered promiscuous mode [ 618.127335][T22896] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 618.150052][T22896] Cannot create hsr debugfs directory [ 618.191313][T22913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 618.199190][T22913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 618.230432][T22913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 618.278605][T22913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 618.298181][T22913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 618.339933][T22913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 618.344154][T23030] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 618.461637][ T5130] Bluetooth: hci3: command tx timeout [ 618.563286][T22913] hsr_slave_0: entered promiscuous mode [ 618.571668][T22913] hsr_slave_1: entered promiscuous mode [ 618.579078][T22913] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 618.587457][T22913] Cannot create hsr debugfs directory [ 618.671801][ T8761] bridge_slave_1: left allmulticast mode [ 618.677522][ T8761] bridge_slave_1: left promiscuous mode [ 618.689783][ T8761] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.701516][ T8761] bridge_slave_0: left allmulticast mode [ 618.707338][ T8761] bridge_slave_0: left promiscuous mode [ 618.713894][ T8761] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.736208][ T8761] bridge_slave_1: left allmulticast mode [ 618.747325][ T8761] bridge_slave_1: left promiscuous mode [ 618.753642][ T8761] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.766451][ T8761] bridge_slave_0: left allmulticast mode [ 618.772916][ T8761] bridge_slave_0: left promiscuous mode [ 618.778738][ T8761] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.131197][ T8763] tipc: Subscription rejected, illegal request [ 619.743275][ T5130] Bluetooth: hci1: command tx timeout [ 619.794830][ T8761] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 619.808982][ T8761] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 619.821464][ T8761] bond0 (unregistering): Released all slaves [ 619.994731][ T8761] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 620.008002][ T8761] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 620.025989][ T8761] bond0 (unregistering): Released all slaves [ 620.351858][T23055] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 620.539327][ T5130] Bluetooth: hci3: command tx timeout [ 620.612025][T23065] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 621.043908][T23079] EXT4-fs warning (device sda1): verify_group_input:162: Bad blocks count 0 [ 621.304030][T23083] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.1'. [ 621.328497][T23083] openvswitch: netlink: Tunnel attr 0 has unexpected len 13 expected 8 [ 621.581571][ T8761] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 621.600092][ T8761] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 621.618781][ T8761] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 621.640063][ T8761] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 621.666599][ T8761] hsr_slave_0: left promiscuous mode [ 621.680992][ T8761] hsr_slave_1: left promiscuous mode [ 621.691042][ T8761] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 621.703673][ T8761] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 621.735577][ T8761] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 621.744910][ T8761] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 621.803087][T23093] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.1'. [ 621.826399][T23093] unsupported nlmsg_type 40 [ 621.863112][ T8761] veth1_macvtap: left promiscuous mode [ 621.868738][ T8761] veth0_macvtap: left promiscuous mode [ 621.875314][ T8761] veth1_vlan: left promiscuous mode [ 621.881855][ T8761] veth0_vlan: left promiscuous mode [ 621.904607][ T8761] veth1_macvtap: left promiscuous mode [ 621.920017][ T8761] veth0_macvtap: left promiscuous mode [ 621.925758][ T8761] veth1_vlan: left promiscuous mode [ 621.940008][ T8761] veth0_vlan: left promiscuous mode [ 622.846878][ T8761] team0 (unregistering): Port device team_slave_1 removed [ 622.927546][ T8761] team0 (unregistering): Port device team_slave_0 removed [ 624.095834][ T8761] team0 (unregistering): Port device team_slave_1 removed [ 624.156507][ T8761] team0 (unregistering): Port device team_slave_0 removed [ 624.863915][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.962815][T23108] vcan0: tx drop: invalid da for name 0x000000000000000d [ 625.224681][T23114] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.2'. [ 625.251021][T23114] openvswitch: netlink: Tunnel attr 0 has unexpected len 13 expected 8 [ 625.731877][T22896] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 625.768139][T22896] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 625.787251][T23129] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 625.812930][T22896] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 625.848311][T22896] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 625.874584][T23141] No such timeout policy "syz0" [ 625.892524][T23135] IPVS: set_ctl: invalid protocol: 47 100.1.1.0:20001 [ 626.119692][T23147] tipc: Disabling bearer [ 626.164945][T23152] EXT4-fs warning (device sda1): verify_group_input:162: Bad blocks count 0 [ 626.169235][T22913] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 626.212986][T22913] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 626.246884][T22913] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 626.308811][T22913] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 626.476483][T22896] 8021q: adding VLAN 0 to HW filter on device bond0 [ 626.565005][T22896] 8021q: adding VLAN 0 to HW filter on device team0 [ 626.595905][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 626.603258][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 626.642454][T12521] bridge0: port 2(bridge_slave_1) entered blocking state [ 626.649720][T12521] bridge0: port 2(bridge_slave_1) entered forwarding state [ 626.766093][T22913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 626.807820][T22896] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 626.953346][T22913] 8021q: adding VLAN 0 to HW filter on device team0 [ 627.034164][ T5270] bridge0: port 1(bridge_slave_0) entered blocking state [ 627.041488][ T5270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 627.116784][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 627.124042][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 627.259851][T23174] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 627.303922][T22896] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 627.471346][T23178] Bluetooth: MGMT ver 1.22 [ 627.486251][T23178] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 627.522399][T22896] veth0_vlan: entered promiscuous mode [ 627.550957][T23181] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 1 (only 8 groups) [ 627.580596][T22896] veth1_vlan: entered promiscuous mode [ 627.681679][T22896] veth0_macvtap: entered promiscuous mode [ 627.721572][T22896] veth1_macvtap: entered promiscuous mode [ 627.762004][T22896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 627.794945][T22896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.840633][T22896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 627.859629][T22896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.879255][T22896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 627.896813][T22896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.912975][T22896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 627.935255][T22896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.948327][T22896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 627.959061][T22896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.972286][T22896] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 627.985570][T22896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 627.996451][T22896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.016662][T22896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 628.037134][T22896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.048483][T22896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 628.061563][T22896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.072103][T22896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 628.083090][T22896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.093317][T22896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 628.104183][T22896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.116706][T22896] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 628.161581][T23203] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.1'. [ 628.218333][T22896] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.243888][T22896] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.265763][T22896] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.284959][T22896] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.324724][T23204] syzkaller1: entered promiscuous mode [ 628.330698][T23204] syzkaller1: entered allmulticast mode [ 628.395462][T22913] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 628.528693][T20544] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 628.549001][T20544] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 628.640685][T22913] veth0_vlan: entered promiscuous mode [ 628.651179][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 628.662437][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 628.698808][T22913] veth1_vlan: entered promiscuous mode [ 628.927167][T22913] veth0_macvtap: entered promiscuous mode [ 628.944404][T22913] veth1_macvtap: entered promiscuous mode [ 629.001696][T22913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 629.021501][T22913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.049413][T22913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 629.080059][T22913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.099843][T22913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 629.120165][T22913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.140185][T22913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 629.151275][T22913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.162063][T22913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 629.184042][T22913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.195640][T22913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 629.207128][T22913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.230607][T22913] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 629.255446][T22913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 629.269106][T22913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.300237][T22913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 629.311137][T22913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.321300][T22913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 629.332274][T22913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.348623][T22913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 629.359868][T22913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.370038][T22913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 629.386685][T22913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.396675][T22913] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 629.407649][T22913] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.423228][T22913] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 629.472571][T22913] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.484110][T22913] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.493650][T22913] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.505783][T22913] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.744095][ T8763] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 629.758060][ T8763] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 629.811336][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 629.849190][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 630.127436][T23253] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.2'. [ 630.376359][T23267] smc: net device vlan0 applied user defined pnetid SYZ1 [ 630.421087][T23268] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 630.694009][T23282] vlan2: entered allmulticast mode [ 630.704229][T23282] mac80211_hwsim hwsim115 wlan1: entered allmulticast mode [ 630.732017][T23282] mac80211_hwsim hwsim115 wlan1: left allmulticast mode [ 631.110872][ T51] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.711722][T23320] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 632.052574][ T51] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.318879][ T51] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.365113][T23344] macvtap0: entered promiscuous mode [ 632.375267][T23344] macvtap0: entered allmulticast mode [ 632.398957][T23344] veth0_macvtap: entered allmulticast mode [ 632.545606][ T51] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.571775][ T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 632.590437][ T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 632.600766][ T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 632.621250][ T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 632.630845][ T53] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 632.640846][ T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 632.740826][T23366] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 632.873175][T23376] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 633.495728][ T51] bridge_slave_1: left allmulticast mode [ 633.529762][ T51] bridge_slave_1: left promiscuous mode [ 633.535641][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.627078][ T51] bridge_slave_0: left allmulticast mode [ 633.686474][ T51] bridge_slave_0: left promiscuous mode [ 633.730353][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.562312][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 634.575600][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 634.588184][ T51] bond0 (unregistering): Released all slaves [ 634.634240][T23397] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 634.718620][ T5130] Bluetooth: hci1: command tx timeout [ 634.881582][T23355] chnl_net:caif_netlink_parms(): no params data found [ 635.434326][T23433] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 635.455954][T23433] bond0: (slave wlan1): Opening slave failed [ 635.668158][ T51] hsr_slave_0: left promiscuous mode [ 635.704056][ T51] hsr_slave_1: left promiscuous mode [ 635.745661][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 635.758512][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 635.788357][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 635.798433][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 635.897797][ T51] veth1_macvtap: left promiscuous mode [ 635.910571][ T51] veth0_macvtap: left promiscuous mode [ 635.923121][ T51] veth1_vlan: left promiscuous mode [ 635.938661][ T51] veth0_vlan: left promiscuous mode [ 635.956219][ T1043] tipc: Subscription rejected, illegal request [ 636.779969][ T5130] Bluetooth: hci1: command tx timeout [ 636.951830][ T51] team0 (unregistering): Port device team_slave_1 removed [ 637.028233][ T51] team0 (unregistering): Port device team_slave_0 removed [ 637.795321][T23355] bridge0: port 1(bridge_slave_0) entered blocking state [ 637.842622][T23355] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.860005][T23355] bridge_slave_0: entered allmulticast mode [ 637.867704][T23355] bridge_slave_0: entered promiscuous mode [ 637.896654][T23456] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 637.922604][T23466] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 637.932659][T23473] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 637.958232][T23355] bridge0: port 2(bridge_slave_1) entered blocking state [ 637.980971][T23355] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.994615][T23355] bridge_slave_1: entered allmulticast mode [ 638.040838][T23355] bridge_slave_1: entered promiscuous mode [ 638.240846][T23355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 638.276342][T23355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 638.521896][T23355] team0: Port device team_slave_0 added [ 638.571185][T23355] team0: Port device team_slave_1 added [ 638.668770][T23506] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 638.741990][T23506] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 638.777195][T23355] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 638.798942][T23355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 638.846801][T23355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 638.860437][ T5130] Bluetooth: hci1: command tx timeout [ 638.882850][T23355] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 638.892191][T23355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 638.921901][T23355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 638.954793][T23516] ip6gretap0: entered promiscuous mode [ 638.962804][T23516] bond0: entered promiscuous mode [ 638.969622][T23516] bond_slave_0: entered promiscuous mode [ 638.975805][T23516] bond_slave_1: entered promiscuous mode [ 638.991236][T23516] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 639.015824][T23516] Cannot create hsr debugfs directory [ 639.270650][T23355] hsr_slave_0: entered promiscuous mode [ 639.301396][T23355] hsr_slave_1: entered promiscuous mode [ 639.330751][T23532] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 639.341990][T23533] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 639.527009][T23533] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 639.578336][ T8763] tipc: Subscription rejected, illegal request [ 640.219967][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 640.420207][T23567] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 640.466965][T23570] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 640.547531][T23553] infiniband syz2: set down [ 640.553322][T23553] infiniband syz2: added veth1_to_bridge [ 640.561764][T23553] syz2: rxe_create_cq: returned err = -12 [ 640.567871][T23553] infiniband syz2: Couldn't create ib_mad CQ [ 640.601990][T23553] infiniband syz2: Couldn't open port 1 [ 640.744125][T23553] RDS/IB: syz2: added [ 640.748409][T23553] smc: adding ib device syz2 with port count 1 [ 640.784755][T23553] smc: ib device syz2 port 1 has pnetid [ 640.815090][T23355] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 640.876705][T23582] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 640.889459][T23355] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 640.936872][T23355] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 640.940068][ T5130] Bluetooth: hci1: command tx timeout [ 640.986172][T23587] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 640.992703][T23591] No such timeout policy "syz0" [ 641.005854][ T1043] tipc: Subscription rejected, illegal request [ 641.015673][T23355] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 641.378556][T23355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 641.483395][T23355] 8021q: adding VLAN 0 to HW filter on device team0 [ 641.533871][T12307] bridge0: port 1(bridge_slave_0) entered blocking state [ 641.541142][T12307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 641.581528][T12521] bridge0: port 2(bridge_slave_1) entered blocking state [ 641.588725][T12521] bridge0: port 2(bridge_slave_1) entered forwarding state [ 641.836650][T23614] ip6gretap0: entered promiscuous mode [ 641.867351][T23614] bond0: entered promiscuous mode [ 641.891561][T23614] bond_slave_0: entered promiscuous mode [ 641.911028][T23614] bond_slave_1: entered promiscuous mode [ 641.939738][T23614] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 641.949789][T23614] Cannot create hsr debugfs directory [ 641.969654][T23614] hsr0: Slave A (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 641.991702][T23614] hsr0: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 642.029380][T23620] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 642.215566][T23625] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 642.303292][T23355] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 642.447271][T23632] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 642.599067][T23355] veth0_vlan: entered promiscuous mode [ 642.645632][T23355] veth1_vlan: entered promiscuous mode [ 642.746396][T23355] veth0_macvtap: entered promiscuous mode [ 642.753707][T23640] smc: ib device syz2 ibport 2 applied user defined pnetid S [ 642.777063][T23355] veth1_macvtap: entered promiscuous mode [ 642.873808][T23355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 642.906224][T23355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 642.929950][T23355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 642.959938][T23355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 642.982424][T23355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 642.996751][T23355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.007188][T23355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 643.028263][T23355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.049815][T23355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 643.069917][T23355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.091550][T23355] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 643.125157][T23355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 643.180366][T23355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.210163][T23355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 643.238991][T23355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.260048][T23355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 643.290002][T23355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.310117][T23355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 643.329889][T23355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.380159][T23355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 643.407709][T23355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.429788][T23355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 643.459981][T23355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 643.481918][T23355] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 643.516903][T23644] hsr0: entered promiscuous mode [ 643.523311][T23645] ip6gretap0: left promiscuous mode [ 643.566141][T23645] bond0: left promiscuous mode [ 643.571298][T23645] bond_slave_0: left promiscuous mode [ 643.581445][T23645] bond_slave_1: left promiscuous mode [ 643.655784][T23645] hsr0 (unregistering): left promiscuous mode [ 643.678402][T23355] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.688652][T23355] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.698013][T23355] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.707846][T23355] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.901363][T23657] __nla_validate_parse: 3 callbacks suppressed [ 643.901386][T23657] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'. [ 643.952686][T23657] openvswitch: netlink: VXLAN extension message has 13 unknown bytes. [ 644.075569][ T1043] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 644.089688][ T1043] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 644.135284][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 644.152338][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 644.171636][T23661] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 645.278884][T23677] smc: net device vlan0 applied user defined pnetid SYZ1 [ 646.103361][T23685] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 646.600081][T23697] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 646.610176][T23700] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.1'. [ 646.610210][T23700] openvswitch: netlink: VXLAN extension message has 13 unknown bytes. [ 646.639931][T23697] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 647.286475][T23725] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 647.389964][T23731] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'. [ 647.429566][T23731] openvswitch: netlink: VXLAN extension message has 13 unknown bytes. [ 647.571951][T23738] syzkaller0: refused to change device tx_queue_len [ 647.836510][T23748] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 647.846466][T23748] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.2'. [ 648.179894][T23759] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 648.258300][T23764] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.1'. [ 648.268251][T23764] openvswitch: netlink: VXLAN extension message has 13 unknown bytes. [ 648.345186][T23759] bond1: entered promiscuous mode [ 648.475267][ T8761] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.510356][T23759] lo: entered promiscuous mode [ 648.541490][T23759] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 648.618100][T23759] bond1: (slave lo): making interface the new active one [ 648.662699][T23759] bond1: (slave lo): Enslaving as an active interface with an up link [ 648.681123][T23777] netlink: 288 bytes leftover after parsing attributes in process `syz-executor.1'. [ 648.712970][T23777] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 648.955890][T23792] __nla_validate_parse: 1 callbacks suppressed [ 648.955914][T23792] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.4'. [ 649.370392][ T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 649.387101][ T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 649.396534][ T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 649.408410][ T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 649.430640][ T53] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 649.438340][ T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 651.214612][ T8761] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.347705][T23808] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.2'. [ 651.370463][ T8761] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.508604][ T5130] Bluetooth: hci1: command tx timeout [ 651.532220][ T8761] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.608663][T23808] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 651.722774][T23824] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 651.833337][T23824] bond1: entered promiscuous mode [ 651.856276][T23827] lo: entered promiscuous mode [ 651.885106][T23827] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 651.926497][T23827] bond1: (slave lo): making interface the new active one [ 651.957096][T23827] bond1: (slave lo): Enslaving as an active interface with an up link [ 652.159594][ T8761] bridge_slave_1: left allmulticast mode [ 652.165325][ T8761] bridge_slave_1: left promiscuous mode [ 652.189194][ T8761] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.214734][ T8761] bridge_slave_0: left allmulticast mode [ 652.226690][ T8761] bridge_slave_0: left promiscuous mode [ 652.235935][ T8761] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.871305][T23849] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 1 (only 8 groups) [ 653.127579][ T8761] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 653.144836][ T8761] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 653.158288][ T8761] bond0 (unregistering): Released all slaves [ 653.190203][T23835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:aa) already exists on: batadv_slave_0 [ 653.201506][T23835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 653.213516][T23835] syz_tun: entered promiscuous mode [ 653.220954][T23835] syz_tun: left promiscuous mode [ 653.296179][T23840] ip6gretap0: entered promiscuous mode [ 653.306746][T23840] bond0: entered promiscuous mode [ 653.314283][T23840] bond_slave_0: entered promiscuous mode [ 653.321142][T23840] bond_slave_1: entered promiscuous mode [ 653.327144][T23840] mac80211_hwsim hwsim115 wlan1: entered promiscuous mode [ 653.359804][T23840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 653.367621][T23840] Cannot create hsr debugfs directory [ 653.402015][T23848] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 653.581706][ T5130] Bluetooth: hci1: command tx timeout [ 653.637584][T23867] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 653.671715][T23867] bond2: entered promiscuous mode [ 654.023743][T23867] bond1: (slave lo): Releasing active interface [ 654.050911][T23867] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 654.071225][T23867] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 654.115406][T23867] bond2: (slave lo): making interface the new active one [ 654.138710][T23867] bond2: (slave lo): Enslaving as an active interface with an up link [ 654.251293][T23881] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 654.262708][T23881] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.4'. [ 654.272679][T23884] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 654.429847][T23889] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 654.524634][T23799] chnl_net:caif_netlink_parms(): no params data found [ 654.632047][T23896] ip6gretap0: entered promiscuous mode [ 654.676940][T23896] bond0: entered promiscuous mode [ 654.693249][T23896] bond_slave_0: entered promiscuous mode [ 654.718095][T23896] bond_slave_1: entered promiscuous mode [ 654.750432][T23896] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 654.769475][T23896] Cannot create hsr debugfs directory [ 654.778909][T23896] hsr0: Slave A (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 654.799835][T23896] hsr0: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 655.101242][ T29] audit: type=1804 audit(1718929963.325:87): pid=23909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2057863703/syzkaller.qBXX5N/49/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 655.141588][ T29] audit: type=1804 audit(1718929963.365:88): pid=23909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2057863703/syzkaller.qBXX5N/49/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 655.184774][T23911] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 655.215704][ T8761] hsr_slave_0: left promiscuous mode [ 655.275690][ T8761] hsr_slave_1: left promiscuous mode [ 655.285693][ T8761] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 655.308392][ T8761] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 655.340612][ T8761] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 655.348101][ T8761] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 655.442627][ T8761] veth1_macvtap: left promiscuous mode [ 655.469476][ T8761] veth0_macvtap: left promiscuous mode [ 655.479453][ T8761] veth1_vlan: left promiscuous mode [ 655.484940][ T8761] veth0_vlan: left promiscuous mode [ 655.659546][ T5130] Bluetooth: hci1: command tx timeout [ 656.495549][ T8761] team0 (unregistering): Port device team_slave_1 removed [ 656.568295][ T8761] team0 (unregistering): Port device team_slave_0 removed [ 657.749507][ T5130] Bluetooth: hci1: command tx timeout [ 659.985087][T23943] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 660.245507][T23799] bridge0: port 1(bridge_slave_0) entered blocking state [ 660.257232][T23799] bridge0: port 1(bridge_slave_0) entered disabled state [ 660.280189][T23957] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 660.297997][T23799] bridge_slave_0: entered allmulticast mode [ 660.342294][T23799] bridge_slave_0: entered promiscuous mode [ 660.369876][T23799] bridge0: port 2(bridge_slave_1) entered blocking state [ 660.400154][T23799] bridge0: port 2(bridge_slave_1) entered disabled state [ 660.419468][T23799] bridge_slave_1: entered allmulticast mode [ 660.439479][T23799] bridge_slave_1: entered promiscuous mode [ 660.614015][T23799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 660.678575][T23974] smc: net device ip6_vti0 applied user defined pnetid SYZ0 [ 660.692585][T23799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 660.854108][T23987] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 660.909631][T23799] team0: Port device team_slave_0 added [ 660.938615][T23799] team0: Port device team_slave_1 added [ 661.017988][T23992] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 661.149474][T23799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 661.156493][T23799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 661.243912][T23799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 661.299796][T23799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 661.306806][T23799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 661.403291][T23799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 661.448495][T24006] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 661.817573][T23799] hsr_slave_0: entered promiscuous mode [ 661.834332][T23799] hsr_slave_1: entered promiscuous mode [ 665.020667][T24062] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 665.094729][T24060] netlink: 766 bytes leftover after parsing attributes in process `syz-executor.2'. [ 665.120663][T24060] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 665.327189][T24071] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. [ 665.466998][T24081] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 667.909608][ T53] Bluetooth: hci2: command 0x0406 tx timeout [ 668.723891][T24102] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 668.984764][T24119] netlink: 'syz-executor.2': attribute type 14 has an invalid length. [ 669.036353][T24121] netlink: 67 bytes leftover after parsing attributes in process `syz-executor.0'. [ 669.050997][T24121] IPv6: NLM_F_CREATE should be specified when creating new route [ 669.069565][T24121] IPv6: Can't replace route, no match found [ 669.167347][T24119] sch_tbf: burst 0 is lower than device lo mtu (1514) ! [ 669.578327][T23799] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 669.700107][T24133] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 669.745633][T23799] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 669.782494][T23799] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 669.816049][T24134] ip6gretap0: entered promiscuous mode [ 669.835639][T24134] bond0: entered promiscuous mode [ 669.843558][T24134] bond_slave_0: entered promiscuous mode [ 669.850335][T24134] bond_slave_1: entered promiscuous mode [ 669.876742][T24134] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 669.887312][T24134] Cannot create hsr debugfs directory [ 669.898492][T23799] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 670.049635][ T29] audit: type=1804 audit(1718929978.275:89): pid=24150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2057863703/syzkaller.qBXX5N/69/memory.events" dev="sda1" ino=1960 res=1 errno=0 [ 670.158258][ T29] audit: type=1804 audit(1718929978.285:90): pid=24150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir2057863703/syzkaller.qBXX5N/69/memory.events" dev="sda1" ino=1960 res=1 errno=0 [ 670.254386][ T29] audit: type=1804 audit(1718929978.285:91): pid=24150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir2057863703/syzkaller.qBXX5N/69/memory.events" dev="sda1" ino=1960 res=1 errno=0 [ 670.375080][T24163] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 670.413754][T23799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 670.502511][T23799] 8021q: adding VLAN 0 to HW filter on device team0 [ 670.546556][ T5267] bridge0: port 1(bridge_slave_0) entered blocking state [ 670.553872][ T5267] bridge0: port 1(bridge_slave_0) entered forwarding state [ 670.596954][ T5267] bridge0: port 2(bridge_slave_1) entered blocking state [ 670.604262][ T5267] bridge0: port 2(bridge_slave_1) entered forwarding state [ 670.616600][T24174] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.1'. [ 670.658337][T24174] openvswitch: netlink: Tunnel attr 0 has unexpected len 13 expected 8 [ 670.913405][T24182] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 670.952646][T24182] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 671.493051][T23799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 671.688636][T23799] veth0_vlan: entered promiscuous mode [ 671.724069][T23799] veth1_vlan: entered promiscuous mode [ 671.855390][T23799] veth0_macvtap: entered promiscuous mode [ 671.896580][T23799] veth1_macvtap: entered promiscuous mode [ 671.916008][T24217] Bluetooth: MGMT ver 1.22 [ 671.942606][T23799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 671.970328][T23799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.004641][T23799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 672.011418][T24223] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 672.036117][T23799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.059425][T23799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 672.083700][T23799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.096478][T23799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 672.107505][T23799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.133783][T23799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 672.154888][T23799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.186540][T23799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 672.215881][T24228] hsr0: entered promiscuous mode [ 672.251333][T24231] ip6gretap0: left promiscuous mode [ 672.264536][T24231] bond0: left promiscuous mode [ 672.289918][T24231] bond_slave_0: left promiscuous mode [ 672.295595][T24231] bond_slave_1: left promiscuous mode [ 672.304141][T24229] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.1'. [ 672.386409][T24231] hsr0 (unregistering): left promiscuous mode [ 672.402942][T23799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 672.420613][T24238] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.0'. [ 672.442916][T23799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.467809][T23799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 672.478909][T23799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.498411][T23799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 672.510377][T23799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.520722][T23799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 672.531558][T23799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.542238][T23799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 672.555176][T23799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.565342][T23799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 672.576476][T23799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.591788][T23799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 672.620443][T24240] netlink: 'syz-executor.0': attribute type 32 has an invalid length. [ 672.629681][T24240] netlink: 'syz-executor.0': attribute type 44 has an invalid length. [ 672.714656][T23799] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.739958][T23799] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.768413][T23799] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.801184][T23799] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.914769][T24249] netlink: 25 bytes leftover after parsing attributes in process `syz-executor.4'. [ 673.038851][T24249] netlink: 'syz-executor.4': attribute type 17 has an invalid length. [ 673.082324][T24249] lo: entered promiscuous mode [ 673.198145][T24229] infiniband A: set active [ 673.212691][T24229] infiniband A: added bridge_slave_0 [ 673.218686][T24229] A: rxe_create_cq: returned err = -12 [ 673.225847][T24247] lo: left promiscuous mode [ 673.248490][T24229] infiniband A: Couldn't create ib_mad CQ [ 673.271602][T20546] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 673.283036][T24229] infiniband A: Couldn't open port 1 [ 673.299981][T20546] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 673.371574][T20546] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 673.398524][T20546] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 673.401821][T24229] RDS/IB: A: added [ 673.430678][T24229] smc: adding ib device A with port count 1 [ 673.444584][T24229] smc: ib device A port 1 has pnetid [ 674.646888][T24291] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.0'. [ 674.672195][T24291] debugfs: Directory 'ü !' with parent 'ieee80211' already present! [ 675.182428][T24315] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 675.368966][T24315] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 675.376326][T24315] IPv6: NLM_F_CREATE should be set when creating new route [ 675.605939][ T8763] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.676127][T24326] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.0'. [ 675.689819][T24326] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 675.706813][T24328] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 675.740906][T24328] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 675.861725][T24330] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 676.144143][ T8763] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.369035][ T8763] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.462307][T24337] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 676.644084][ T8763] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.756533][ T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 676.766635][ T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 676.774908][T24347] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 676.804529][ T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 676.814307][ T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 676.824561][ T53] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 676.832356][ T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 677.038058][ T8763] bridge_slave_1: left allmulticast mode [ 677.057761][ T8763] bridge_slave_1: left promiscuous mode [ 677.089960][ T8763] bridge0: port 2(bridge_slave_1) entered disabled state [ 677.125434][ T8763] bridge_slave_0: left allmulticast mode [ 677.146002][ T8763] bridge_slave_0: left promiscuous mode [ 677.167434][ T8763] bridge0: port 1(bridge_slave_0) entered disabled state [ 678.148854][ T8763] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 678.163186][ T8763] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 678.176620][ T8763] bond0 (unregistering): Released all slaves [ 678.198579][T24376] hsr0: entered promiscuous mode [ 678.231521][T24377] hsr_slave_0: left promiscuous mode [ 678.250274][T24377] hsr_slave_1: left promiscuous mode [ 678.346855][T24380] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 678.489818][T24377] hsr0 (unregistering): left promiscuous mode [ 678.940432][ T5130] Bluetooth: hci1: command tx timeout [ 679.196109][T24407] netlink: 248 bytes leftover after parsing attributes in process `syz-executor.4'. [ 680.035533][T24432] hsr0: entered promiscuous mode [ 680.055691][T24432] ip6gretap0: left promiscuous mode [ 680.075292][T24435] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 680.116859][T24432] bond0: left promiscuous mode [ 680.129982][T24432] bond_slave_0: left promiscuous mode [ 680.146052][T24432] bond_slave_1: left promiscuous mode [ 680.233270][T24432] hsr0 (unregistering): left promiscuous mode [ 680.466383][T24447] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 680.470281][ T8763] hsr_slave_0: left promiscuous mode [ 680.513029][T24450] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 680.623265][ T8763] hsr_slave_1: left promiscuous mode [ 680.741243][ T8763] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 680.769704][ T8763] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 680.788698][T24458] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.0'. [ 680.812468][T24458] rdma_rxe: rxe_newlink: failed to add bridge_slave_0 [ 680.823122][ T8763] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 680.832689][ T8763] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 680.872782][ T8763] veth1_macvtap: left promiscuous mode [ 680.881107][ T8763] veth0_macvtap: left promiscuous mode [ 680.888983][ T8763] veth1_vlan: left promiscuous mode [ 680.895170][ T8763] veth0_vlan: left promiscuous mode [ 681.019855][ T5130] Bluetooth: hci1: command tx timeout [ 681.798663][ T8763] team0 (unregistering): Port device team_slave_1 removed [ 681.886898][ T8763] team0 (unregistering): Port device team_slave_0 removed [ 682.599647][T24465] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 682.619632][T24465] netlink: 108 bytes leftover after parsing attributes in process `syz-executor.2'. [ 682.816706][T24475] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 682.908975][T24475] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.0'. [ 683.100248][ T5130] Bluetooth: hci1: command tx timeout [ 683.130700][T24475] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 683.304563][T24490] netlink: 248 bytes leftover after parsing attributes in process `syz-executor.1'. [ 683.384813][T24349] chnl_net:caif_netlink_parms(): no params data found [ 683.640176][T24502] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 683.672281][T24504] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 683.700154][T24349] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.713780][T24349] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.728104][T24349] bridge_slave_0: entered allmulticast mode [ 683.736778][T24349] bridge_slave_0: entered promiscuous mode [ 683.755563][ T1043] tipc: Subscription rejected, illegal request [ 683.765009][T24349] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.790323][T24349] bridge0: port 2(bridge_slave_1) entered disabled state [ 683.797903][T24349] bridge_slave_1: entered allmulticast mode [ 683.818576][T24349] bridge_slave_1: entered promiscuous mode [ 683.838377][T24511] netlink: 128124 bytes leftover after parsing attributes in process `syz-executor.0'. [ 683.907845][T24508] dummy0: entered promiscuous mode [ 683.924817][T24508] vlan2: entered promiscuous mode [ 683.934867][T24508] dummy0: left promiscuous mode [ 683.942588][T24515] bond2: Unknown bonding mode 6 for xdp xmit [ 683.949440][T24515] ------------[ cut here ]------------ [ 683.954985][T24515] WARNING: CPU: 0 PID: 24515 at drivers/net/bonding/bond_main.c:5502 bond_xdp_get_xmit_slave+0x519/0x690 [ 683.966303][T24515] Modules linked in: [ 683.970375][T24515] CPU: 0 PID: 24515 Comm: syz-executor.1 Not tainted 6.10.0-rc3-syzkaller-00163-g8851346912a1 #0 [ 683.981005][T24515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 683.991157][T24515] RIP: 0010:bond_xdp_get_xmit_slave+0x519/0x690 [ 683.995788][T24517] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 683.997429][T24515] Code: be 69 13 00 00 48 c7 c2 a0 5f 54 8c e8 20 3b 1f fb eb 98 e8 e9 99 42 fb 4c 89 e7 48 c7 c6 80 80 54 8c 89 da e8 e8 75 31 05 90 <0f> 0b 90 eb a6 e8 cd 99 42 fb 48 85 db 74 0a e8 c3 99 42 fb e9 72 [ 683.997458][T24515] RSP: 0018:ffffc9000a5cf8e8 EFLAGS: 00010246 [ 684.031839][T24515] RAX: b68c793d7ceefa00 RBX: 0000000000000006 RCX: b68c793d7ceefa00 [ 684.039931][T24515] RDX: ffffc90009d71000 RSI: 0000000000001bbf RDI: 0000000000001bc0 [ 684.047949][T24515] RBP: ffffc9000a5cfc60 R08: ffffffff817691ac R09: fffffbfff1c39994 [ 684.056111][T24515] R10: dffffc0000000000 R11: fffffbfff1c39994 R12: ffff88805cd98000 [ 684.064213][T24515] R13: ffff88805cd98000 R14: ffff88805cd98ca0 R15: dffffc0000000000 [ 684.068109][T24517] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.1'. [ 684.072253][T24515] FS: 00007f2abdfdb6c0(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 684.072283][T24515] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 684.072302][T24515] CR2: 00000000200020c0 CR3: 0000000057348000 CR4: 00000000003506f0 [ 684.072324][T24515] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 684.072341][T24515] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 684.072358][T24515] Call Trace: [ 684.072370][T24515] [ 684.072381][T24515] ? __warn+0x163/0x4e0 [ 684.072420][T24515] ? bond_xdp_get_xmit_slave+0x519/0x690 [ 684.072457][T24515] ? report_bug+0x2b3/0x500 [ 684.072488][T24515] ? bond_xdp_get_xmit_slave+0x519/0x690 [ 684.072525][T24515] ? handle_bug+0x3e/0x70 [ 684.072562][T24515] ? exc_invalid_op+0x1a/0x50 [ 684.072599][T24515] ? asm_exc_invalid_op+0x1a/0x20 [ 684.072641][T24515] ? __wake_up_klogd+0xcc/0x110 [ 684.072682][T24515] ? bond_xdp_get_xmit_slave+0x519/0x690 [ 684.072713][T24515] ? bond_xdp_get_xmit_slave+0x518/0x690 [ 684.072747][T24515] xdp_master_redirect+0x104/0x250 [ 684.072784][T24515] ? bpf_test_run+0x31e/0x910 [ 684.072818][T24515] bpf_test_run+0x757/0x910 [ 684.072872][T24515] ? __pfx_bpf_test_run+0x10/0x10 [ 684.072913][T24515] ? __might_fault+0xaa/0x120 [ 684.072955][T24515] ? _copy_from_user+0xa6/0xe0 [ 684.072990][T24515] ? bpf_test_init+0x15a/0x180 [ 684.073020][T24515] ? xdp_convert_md_to_buff+0x1bf/0x330 [ 684.073057][T24515] bpf_prog_test_run_xdp+0x7e3/0x11b0 [ 684.073098][T24515] ? __pfx_lock_release+0x10/0x10 [ 684.073135][T24515] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 684.073168][T24515] ? __fget_files+0x29/0x470 [ 684.073215][T24515] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 684.073251][T24515] bpf_prog_test_run+0x33a/0x3b0 [ 684.073282][T24515] __sys_bpf+0x48d/0x810 [ 684.255574][T24515] ? __pfx___sys_bpf+0x10/0x10 [ 684.260473][T24515] ? __rseq_handle_notify_resume+0x353/0x14e0 [ 684.266613][T24515] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 684.272793][T24515] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 684.279239][T24515] ? do_syscall_64+0x100/0x230 [ 684.284159][T24515] __x64_sys_bpf+0x7c/0x90 [ 684.288633][T24515] do_syscall_64+0xf3/0x230 [ 684.293248][T24515] ? clear_bhb_loop+0x35/0x90 [ 684.297974][T24515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.303959][T24515] RIP: 0033:0x7f2abd27cf29 [ 684.308408][T24515] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 684.328093][T24515] RSP: 002b:00007f2abdfdb0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 684.336608][T24515] RAX: ffffffffffffffda RBX: 00007f2abd3b3f80 RCX: 00007f2abd27cf29 [ 684.344688][T24515] RDX: 0000000000000050 RSI: 0000000020000040 RDI: 000000000000000a [ 684.352756][T24515] RBP: 00007f2abd2ec074 R08: 0000000000000000 R09: 0000000000000000 [ 684.360830][T24515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 684.368838][T24515] R13: 000000000000000b R14: 00007f2abd3b3f80 R15: 00007ffdae9f3908 [ 684.376894][T24515] [ 684.379992][T24515] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 684.387309][T24515] CPU: 0 PID: 24515 Comm: syz-executor.1 Not tainted 6.10.0-rc3-syzkaller-00163-g8851346912a1 #0 [ 684.397826][T24515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 684.407916][T24515] Call Trace: [ 684.411208][T24515] [ 684.414146][T24515] dump_stack_lvl+0x241/0x360 [ 684.418852][T24515] ? __pfx_dump_stack_lvl+0x10/0x10 [ 684.424079][T24515] ? __pfx__printk+0x10/0x10 [ 684.428693][T24515] ? vscnprintf+0x5d/0x90 [ 684.433051][T24515] panic+0x349/0x860 [ 684.436965][T24515] ? __warn+0x172/0x4e0 [ 684.441142][T24515] ? __pfx_panic+0x10/0x10 [ 684.445590][T24515] __warn+0x346/0x4e0 [ 684.449593][T24515] ? bond_xdp_get_xmit_slave+0x519/0x690 [ 684.455244][T24515] report_bug+0x2b3/0x500 [ 684.459592][T24515] ? bond_xdp_get_xmit_slave+0x519/0x690 [ 684.465241][T24515] handle_bug+0x3e/0x70 [ 684.469424][T24515] exc_invalid_op+0x1a/0x50 [ 684.473966][T24515] asm_exc_invalid_op+0x1a/0x20 [ 684.478835][T24515] RIP: 0010:bond_xdp_get_xmit_slave+0x519/0x690 [ 684.485178][T24515] Code: be 69 13 00 00 48 c7 c2 a0 5f 54 8c e8 20 3b 1f fb eb 98 e8 e9 99 42 fb 4c 89 e7 48 c7 c6 80 80 54 8c 89 da e8 e8 75 31 05 90 <0f> 0b 90 eb a6 e8 cd 99 42 fb 48 85 db 74 0a e8 c3 99 42 fb e9 72 [ 684.504804][T24515] RSP: 0018:ffffc9000a5cf8e8 EFLAGS: 00010246 [ 684.510887][T24515] RAX: b68c793d7ceefa00 RBX: 0000000000000006 RCX: b68c793d7ceefa00 [ 684.518871][T24515] RDX: ffffc90009d71000 RSI: 0000000000001bbf RDI: 0000000000001bc0 [ 684.526850][T24515] RBP: ffffc9000a5cfc60 R08: ffffffff817691ac R09: fffffbfff1c39994 [ 684.534830][T24515] R10: dffffc0000000000 R11: fffffbfff1c39994 R12: ffff88805cd98000 [ 684.542815][T24515] R13: ffff88805cd98000 R14: ffff88805cd98ca0 R15: dffffc0000000000 [ 684.550804][T24515] ? __wake_up_klogd+0xcc/0x110 [ 684.555688][T24515] ? bond_xdp_get_xmit_slave+0x518/0x690 [ 684.561341][T24515] xdp_master_redirect+0x104/0x250 [ 684.566558][T24515] ? bpf_test_run+0x31e/0x910 [ 684.571255][T24515] bpf_test_run+0x757/0x910 [ 684.575791][T24515] ? __pfx_bpf_test_run+0x10/0x10 [ 684.580832][T24515] ? __might_fault+0xaa/0x120 [ 684.585532][T24515] ? _copy_from_user+0xa6/0xe0 [ 684.590400][T24515] ? bpf_test_init+0x15a/0x180 [ 684.595180][T24515] ? xdp_convert_md_to_buff+0x1bf/0x330 [ 684.600745][T24515] bpf_prog_test_run_xdp+0x7e3/0x11b0 [ 684.606142][T24515] ? __pfx_lock_release+0x10/0x10 [ 684.611207][T24515] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 684.617031][T24515] ? __fget_files+0x29/0x470 [ 684.621649][T24515] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 684.627482][T24515] bpf_prog_test_run+0x33a/0x3b0 [ 684.632435][T24515] __sys_bpf+0x48d/0x810 [ 684.636702][T24515] ? __pfx___sys_bpf+0x10/0x10 [ 684.641486][T24515] ? __rseq_handle_notify_resume+0x353/0x14e0 [ 684.647605][T24515] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 684.653612][T24515] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 684.659961][T24515] ? do_syscall_64+0x100/0x230 [ 684.664758][T24515] __x64_sys_bpf+0x7c/0x90 [ 684.669198][T24515] do_syscall_64+0xf3/0x230 [ 684.673725][T24515] ? clear_bhb_loop+0x35/0x90 [ 684.678426][T24515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.684516][T24515] RIP: 0033:0x7f2abd27cf29 [ 684.688947][T24515] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 684.708568][T24515] RSP: 002b:00007f2abdfdb0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 684.716998][T24515] RAX: ffffffffffffffda RBX: 00007f2abd3b3f80 RCX: 00007f2abd27cf29 [ 684.725000][T24515] RDX: 0000000000000050 RSI: 0000000020000040 RDI: 000000000000000a [ 684.732977][T24515] RBP: 00007f2abd2ec074 R08: 0000000000000000 R09: 0000000000000000 [ 684.740982][T24515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 684.749049][T24515] R13: 000000000000000b R14: 00007f2abd3b3f80 R15: 00007ffdae9f3908 [ 684.757047][T24515] [ 684.760207][T24515] Kernel Offset: disabled [ 684.764545][T24515] Rebooting in 86400 seconds..