last executing test programs: 3.481416619s ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=@base={0xa, 0x1fd, 0x4, 0x3}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000000), &(0x7f0000000380)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000680)={r0, &(0x7f0000000040)="8dda2fc28897a5fced98b7c7f4060c44fc65378727caaf89f919eb0efed862b67134260dfeca61020958242c8134305c38caa5efe59fddf6fc09bbe50c", &(0x7f00000005c0)=""/130}, 0x20) 2.860021701s ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000580)=@newsa={0x144, 0x10, 0x1, 0x0, 0x0, {{@in6=@dev, @in=@dev}, {@in=@dev, 0x0, 0x33}, @in=@empty, {}, {}, {}, 0x0, 0x0, 0x2}, [@tfcpad={0x8}, @algo_auth_trunc={0x4c, 0x14, {{'rmd256-generic\x00'}}}]}, 0x144}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f00000003c0)={0x40, r3, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r6}]}, 0x40}}, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@fwd={0xa}]}, {0x0, [0x2e]}}, &(0x7f00000001c0)=""/36, 0x27, 0x24, 0x1, 0x6}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x93, 0x80000001, 0x9, 0x20, 0xffffffffffffffff, 0x400, '\x00', r6, r7, 0x2, 0x4, 0x4, 0x7}, 0x48) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r9, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) r10 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r10, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) 2.584190647s ago: executing program 4: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000440)={0x0, 0xc00e, &(0x7f0000000400)={&(0x7f00000002c0)={0x14, r0, 0x30d, 0x0, 0x300, {0x4}}, 0x14}}, 0x0) 2.488978618s ago: executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x12, 0x5, &(0x7f0000000740)=@framed={{}, [@map_fd={0x18, 0x0, 0x1, 0x0, r1}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r2, &(0x7f00000006c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c, 0x0}}], 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000900)={0x4c, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dvmrp1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x9}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}]}, 0x4c}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000108}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0x80, r4, 0x10a, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffa}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x101}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0xdff67d70c8fbfe22}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0xb}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x40}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0xc000) (async) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000108}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0x80, r4, 0x10a, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffa}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x101}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0xdff67d70c8fbfe22}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0xb}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x40}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0xc000) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000200)=0xa002602c, 0x12) (async) write$cgroup_int(r8, &(0x7f0000000200)=0xa002602c, 0x12) sendmsg$DEVLINK_CMD_TRAP_GET(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x50, r6, 0x2b8ee6cf79dab3f, 0x0, 0x0, {0x2e}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x50}}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000840)={0x1a0, r6, 0x400, 0x70bd25, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x4}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x6}, {0x8, 0xb, 0xfffffffe}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x10000}, {0x6, 0x16, 0x7ff}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x4}, {0x8, 0xb, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8}, {0x6}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x2}, {0x8, 0xb, 0x3ac}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0xffff}, {0x5}, {0x6, 0x11, 0x15}, {0x8, 0xb, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1}, {0x6, 0x16, 0x6}, {0x5}, {0x6, 0x11, 0x6}, {0x8, 0xb, 0x6}}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket(0x10, 0x3, 0x0) r12 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000800)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0xffffffffffffff79, 0x2, @TCA_ETF_PARMS={0x10}}}]}, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r14, @ANYRES16=r9, @ANYBLOB="000100004400000000000000", @ANYRES32=r14, @ANYRES32=r0, @ANYRES64, @ANYRESHEX=r9], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4044000) 2.295126174s ago: executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000000040)=0x8000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000004080)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r6}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r7}, &(0x7f0000000100), &(0x7f0000000180)=r6}, 0x20) close(r6) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r8}, &(0x7f0000000140), &(0x7f0000000280)=r6}, 0x20) splice(r1, 0x0, r4, 0x0, 0x7, 0x0) close(r3) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000180)='Y', 0x1}], 0x1) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000000500)=""/4091, 0xffb}], 0x1}, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) socket$inet_smc(0x2b, 0x1, 0x0) r11 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r10, @ANYBLOB="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"], 0x270}}, 0x0) unshare(0x2040400) r12 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout_data(r12, 0x107, 0x7, 0x0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) 2.287832272s ago: executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0xffffffff, @mcast2}}}, 0x88) bind$llc(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x1f, &(0x7f0000000140)=ANY=[@ANYBLOB="2105000b1e85b11c60b11300001142"], 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000030c0)=[{&(0x7f0000000000), 0x10, 0x0}], 0x1, 0x0) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000001b40)=[{{&(0x7f0000000140)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000280)="19", 0x1}], 0x1}}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000180)={r4}, 0xc) r5 = socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x37}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000009c0)=@gettclass={0x24, 0x2a, 0x52c, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0x2}, {0x3}, {0x10, 0xffe0}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000010}, 0x841) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="57002060e6970dffda719b63d755026eff20c763a55ed42cfd3613cf4e8824cac852665155ca3c0d42042f93f0501b1897e8a5790815f05ab01cf8cd0eed5b918d4ce3260fafc50f7bbedb3714aaf8e02e6e9fd2f8f2353ce4264bc6d59317d00e", @ANYRES16=r8, @ANYBLOB="010100000000000000002b00000008000300", @ANYRES32=r10, @ANYBLOB="0400460028005180240000800800030001ac0f000500020000000000090001000000000000000000040004000a0034000202020202020000080026006c090000"], 0x5c}}, 0x0) r11 = socket$pppl2tp(0x18, 0x1, 0x1) r12 = socket$pppl2tp(0x18, 0x1, 0x1) r13 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r12, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r13, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) connect$pppl2tp(r11, &(0x7f0000000980)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}, 0x1, 0x2}}, 0x26) getsockopt$bt_BT_SECURITY(r11, 0x111, 0x5, 0x0, 0x20001f00) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x2, 0x6}, 0xfffffffffffffdd9) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x4, 0x8, 0x0, 0x1}, 0x48) 2.194048356s ago: executing program 0: sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x68, 0x2, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_PROTOINFO={0x10, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0xc, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0x81}]}}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1}}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40800}, 0x804) connect$pppoe(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, {0x0, @broadcast, 'rose0\x00'}}, 0x1e) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) ioctl$sock_bt_hci(r0, 0x800448d2, &(0x7f0000000040)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0xfff, 0x7, 0x1004}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000480)=[{0x0}], 0x1, &(0x7f0000000b00)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r4, 0x58, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$unix(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000500)=[{0x0}, {0x0}], 0x2, &(0x7f0000000d40)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRESHEX=r3, @ANYRES32, @ANYRES32=r5, @ANYBLOB, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000180000000000000001", @ANYRES32, @ANYRES32, @ANYRES32=0xee01, @ANYRES32, @ANYBLOB='\x00\x00'], 0xe0}, 0x10) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4}, 0x48) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000020240), 0x10010) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r7, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x14a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff7b}, 0x90) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r9, 0x0) write$binfmt_script(r8, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r8, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)) ioctl$FS_IOC_GETFSMAP(r7, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000002"]) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_ext={0x1c, 0x17, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x12a, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x80000000}, @jmp={0x5, 0x0, 0x9, 0x0, 0x5, 0x1, 0xfffffffffffffff0}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='syzkaller\x00', 0x394, 0x50, &(0x7f0000000340)=""/80, 0x41100, 0x18, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0x10, 0x80000001, 0xfffffffa}, 0x10, 0x147a0, r2, 0x1, &(0x7f0000000580)=[r6, r1, r1, r1, r7, 0xffffffffffffffff, r1, r1, r1], &(0x7f00000005c0)=[{0x4, 0x1, 0x1, 0x8}], 0x10, 0x7fff}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) 1.993627517s ago: executing program 0: r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) r4 = socket$netlink(0x10, 0x3, 0x15) sendmsg$netlink(r4, &(0x7f0000003500)={0x0, 0x0, &(0x7f00000034c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="e00000001300010000000500000000004992b440f1eac29bc7d1150af0248336b30ae45cdf6835ba766f54d4afa738755426321dcadebadc06d389d7d765697523b937bf27776d96a793b0bf62295c8e3a6cc7714336bd71b5c6cd4f49e4a7f491e739f70a72edf3c1837c3e366b798e3a850b657658215cbbbe26ac11b044d320c7fbb0a6f12a8044321326e531a4e84eceaf37ff81b7bcefe98ef957720913fc8e5e710ec4f94edfbb6e1609f174d456c1c9e2e74a9f4b3f0000fa3e0230ef46a4e42a205a5ced53a7f47d0ba57f878b7e450fc5aa987be913ff399e000000"], 0xe0}], 0x1}, 0x0) shutdown(r3, 0x1) r5 = socket$inet(0x2, 0x80001, 0x84) r6 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r6, &(0x7f0000003500)=[{&(0x7f00000001c0)=@in={0x2, 0x4e21, @private=0xa010100}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000200)="f6", 0x1}], 0x1}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r6, 0x84, 0x9, &(0x7f0000004c40)={0x0, @in={{0x2, 0x4e21, @private=0xa010100}}}, &(0x7f0000004d00)=0x98) r7 = accept(r3, &(0x7f00000000c0)=@hci, &(0x7f0000000380)=0x80) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x6d, &(0x7f0000000640)={r8}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000000)={r8, 0x6, 0x40000000, 0x3}, &(0x7f0000000180)=0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000880)={'erspan0\x00', &(0x7f00000003c0)={'ip_vti0\x00', 0x0, 0x1, 0x7, 0x8000, 0x8171, {{0x26, 0x4, 0x2, 0x9, 0x98, 0x66, 0x0, 0x3, 0x4, 0x0, @loopback, @multicast1, {[@noop, @noop, @rr={0x7, 0x7, 0x27, [@broadcast]}, @noop, @lsrr={0x83, 0x23, 0xf0, [@private=0xa010101, @remote, @local, @rand_addr=0x64010102, @loopback, @private=0xffff10b9, @dev={0xac, 0x14, 0x14, 0x1c}, @rand_addr=0x64010100]}, @timestamp_prespec={0x44, 0xc, 0x6a, 0x3, 0x0, [{@rand_addr=0x64010102, 0x5}]}, @timestamp_prespec={0x44, 0x24, 0x4a, 0x3, 0x8, [{@loopback, 0x6d51eaa9}, {@broadcast, 0x5}, {@rand_addr=0x64010101, 0x8}, {@private=0xa010100, 0x5}]}, @rr={0x7, 0x27, 0xaf, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @broadcast, @local, @loopback, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @multicast2]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'veth0_to_bond\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000a80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000900)={0x130, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0x4400) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r7, 0x84, 0x17, &(0x7f0000000ac0)=ANY=[@ANYRES32=r9, @ANYBLOB="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"], 0x94) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r12 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$bt_BT_SECURITY(r12, 0x111, 0x3, 0x0, 0x20001100) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r13}, 0x10) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r14, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f00000005c0)) bind$bt_hci(r7, &(0x7f0000000340)={0x1f, 0x2, 0x3}, 0x6) 1.924016444s ago: executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xe, &(0x7f0000000140)=ANY=[@ANYBLOB="18050000000000000000000000000000186700000700000000000000679f000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa2000000000000075f39070ce363425503000008000000b7060000020000008500000082000000950000814a95ed0087455e052cfd22c3ad70f377afb577084bfb289b5592e80c13205d6924c55f"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x19, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0xffffffffffffffff) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='jbd2_handle_stats\x00', r1}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x26e1, 0x0) (async) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r2, &(0x7f0000000a80)={&(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000a00)=[@ip_retopts={{0x10, 0x0, 0x2}}], 0x10}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) (async) r4 = socket(0x2, 0x3, 0x6) bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x1, 0x3e, &(0x7f0000000080)="3a0dc768", 0x4) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, 0x1c) (async) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) (async) sendto$inet(r4, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) (async) sendto$inet(r4, &(0x7f00000023c0)="8ce2ad4d4f95e087a7846d3f81", 0x14, 0x0, &(0x7f0000002400)={0x2, 0x0, @multicast2}, 0x10) (async) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) (async) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$inet_mreqn(r6, 0x0, 0x0, 0x0, &(0x7f0000000380)) 1.83149006s ago: executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xe, 0x4, &(0x7f0000000ec0)=ANY=[@ANYRES8=0x0], &(0x7f0000000300)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x90) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000840)={0x0, 0x2, 0x4, 0xd8e0}) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000580)) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x10}, 0x18) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000002c0)=0x14) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000880), 0x4) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r4, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x3}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x3, 0x4, 0x21, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0xa, 0x5, &(0x7f0000000840)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x3f, 0x0, 0x0, 0x0, 0x47}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000540)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={0x1, 0xffffffffffffffff}, 0x4) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000000380)='freezer.self_freezing\x00', 0x0, 0x0) preadv(r10, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/140, 0x8c}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r12, 0x0, r11, 0x0, 0xf3a, 0x0) write$binfmt_misc(r11, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x4) r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x401, '\x00', 0x0, r11, 0x2, 0x0, 0x4}, 0x48) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r14, &(0x7f0000000440)={'#! ', '', [{0x20, 'syzkaller\x00'}, {0x20, 'freezer.self_freezing\x00'}, {0x20, '#! '}, {}]}, 0x2b) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r14, 0x0) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@bloom_filter={0x1e, 0x200, 0x800, 0x6, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x0, 0xa}, 0x48) r16 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r16, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r16, 0xffffe000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ffffff7f0000000005000000851000000000000018110000", @ANYRES32, @ANYRES32=r10, @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000018210000", @ANYRES32=r2, @ANYBLOB="00005d7654b800009500000000000000"], &(0x7f0000000240)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x14, '\x00', r3, 0x25, r4, 0x8, &(0x7f0000000340)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x5, 0x0, 0x3ff, 0x80000000}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000700)=[r5, r6, r7, r8, r10, r11, r13, r14, r15, r16], &(0x7f0000000740)=[{0x1, 0x1, 0x10, 0x6}, {0x0, 0x4, 0x6, 0xa}, {0x2, 0x5, 0x10, 0x1}], 0x10, 0x3}, 0x90) 1.765143943s ago: executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@ipv4_newroute={0x40c, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@RTA_ENCAP={0x3e8, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x3e4, 0x1, {{}, [@mcast1, @mcast2, @remote, @mcast1, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @mcast1, @private0, @ipv4={'\x00', '\xff\xff', @loopback}, @ipv4={'\x00', '\xff\xff', @empty}, @private0, @ipv4={'\x00', '\xff\xff', @loopback}, @ipv4={'\x00', '\xff\xff', @loopback}, @rand_addr=' \x01\x00', @private1, @dev, @ipv4={'\x00', '\xff\xff', @loopback}, @private0, @mcast1, @dev, @empty, @dev, @empty, @mcast2, @mcast2, @mcast1, @remote, @mcast2, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast1, @mcast1, @empty, @private2, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @remote, @local, @local, @mcast2, @ipv4={'\x00', '\xff\xff', @loopback}, @remote, @dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}]}, 0x40c}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x7, 0x3, 0x3ff, 0xc, 0x1, 0x401, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x4, 0x4}, 0x48) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @private}, &(0x7f0000000140)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'vxcan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0xc00, &(0x7f00000043c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="200000002a0001000000000000000000050000000c000a8008000000", @ANYRESHEX], 0x20}}, 0x0) 1.686817213s ago: executing program 1: connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xf, 0x9, &(0x7f0000001440)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000500000085000000110000005f0000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x28000600) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x3a) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x5c, &(0x7f0000000580)={&(0x7f00000000c0)=@ipv4_delrule={0x44, 0x21, 0x8, 0x70bd25, 0x0, {0x2, 0x20, 0x20, 0x0, 0x3, 0x0, 0x0, 0x7, 0xb}, [@FRA_SRC={0x8}, @FRA_FLOW={0x8, 0xb, 0x8}, @FRA_FLOW={0x0, 0xb, 0x2}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0xffff}]}, 0x44}, 0x1, 0xba01}, 0x0) socket$inet6(0xa, 0x80001, 0x0) r2 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x80800) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'team_slave_1\x00'}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0) accept4$bt_l2cap(r2, &(0x7f00000000c0)={0x1f, 0x0, @fixed}, &(0x7f0000000040)=0xe, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000240)='hybla\x00', 0x6) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) connect$inet(r5, &(0x7f0000001200)={0x2, 0x0, @local}, 0x10) 1.655864563s ago: executing program 3: syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x0, &(0x7f0000000040)}, 0x10) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x64, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000100000038000180060001000a0000000800050000006c000c00070000000000000000000800090071000000070006007272000008000800"], 0x4c}}, 0x0) 1.583124818s ago: executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a40)={0x38, r1, 0x1, 0x400300, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}]}]}]}, 0x38}}, 0x40084) 1.54589423s ago: executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000740)=ANY=[@ANYRES16=r0, @ANYRES16=r1, @ANYBLOB="00002dbd7000fddbdf251200000008000800fbffffff080007000300000008000900feffffff2c0001801400020076657468310000000000000000000000140002006272696467655f736c6176655f310000", @ANYRESOCT, @ANYBLOB="a2f5f11c8a3b635bee3202fd990704487035262e90f8c85494eadca5a41898cadd1a97a1e057ef8acd0bc722365d7803abc9a5e3ab032671388ae39e3467bb9b8add4191aa859198511ac5185db9cffcd2c6f0dc5548e29d2873925626495cd371569bfff59f2868f08bfaaf4f85fb9a5b261692b6c3d8275bd22f966ff8a9010fb66c6996b159d5cfed68f56d86b81414bbcbafa72319a71b332892001ab27c662fc071fc8f44d1e6a8075a6cd9df98457a66390a4bb8f61855c905c92a1f56b0564f6d1fd43a707dc11546955a185f919f3f6c2114fa0c085e1a510567a0239910b29c9fc7e441b1d45ae5"], 0x58}}, 0x200080d1) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x89e0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000100)=r5, 0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc3cf}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00', r6}, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$team(&(0x7f0000000500), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000000)) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r9, @ANYRES16=r3, @ANYRESDEC=r4, @ANYBLOB="4400028040000100240001006174730000000000000000000005000300"/52], 0x60}}, 0x4a4) write$binfmt_script(r7, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r7, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000600), 0x20) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r2, 0x4) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000180)={0xfeea}, 0x10) write(r10, &(0x7f0000000000)="1c0000001a005f0214f9f407000904000a000000fd02005000000000", 0x1c) r11 = socket(0x6, 0x4, 0x8000) listen(r11, 0x9) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r2, 0x4) r12 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r12, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$XDP_TX_RING(r10, 0x11b, 0x3, &(0x7f0000000240), 0x4) setsockopt$packet_fanout_data(r12, 0x107, 0x16, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x30, 0x0, 0x0, 0xfffff032}]}, 0x10) 1.465362705s ago: executing program 3: socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x3, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000880)='GPL\x00', 0x4}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x2, 0x8, 0x8}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB, @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_da_update_reserve_space\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000040), 0x9) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000280), 0x10) sendmsg$can_bcm(r3, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r3, 0x8907, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)={0x7, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "38d99b8156a98263"}}, 0x48}}, 0x0) recvmsg$can_bcm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/177, 0xb1}, {0x0}], 0x2}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000000)="0a000000010001", 0x7) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16=r6, @ANYRES32, @ANYBLOB="05003901"], 0x44}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r7}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa0}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x0, 0x28, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000080)={0x2, 0x0, @dev}, 0x10, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.024132477s ago: executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000050000140600fc020000000000000000000000000000ff02"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x0, 0x8000}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00'}, 0x30) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = epoll_create1(0x0) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000000)=0x3f, 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000080)={0x71bccaace1b4b93b}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0) write$cgroup_pid(r5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x0, @private}}, 0x0, 0x0, 0x0, 0x0, 0x108}, 0x9c) sendmsg$NFT_BATCH(r7, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000081000000280012800b0001006272bbb27f27dcefb8a19017028008003100000000000c002e00000000000000"], 0x48}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x54}}, 0x0) 990.012782ms ago: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000006c0)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ad}]]}, 0x24}}, 0x0) r2 = socket(0x2b, 0x1, 0x1) sendmmsg$sock(r2, &(0x7f0000001280)=[{{&(0x7f0000000240)=@in6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0}}], 0x1, 0x20000001) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) connect$netlink(r2, &(0x7f0000000000)=@unspec, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000cc0)={'wlan0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) accept$alg(r2, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x20044080}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[], 0x14}}, 0x4c810) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 894.772788ms ago: executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r1, &(0x7f0000000040)="01", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x15}, 0x1c) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x12, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="020300021000000000000000000000000200080008000000fd"], 0x80}, 0x1, 0x7}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="52bca7024d0c6f298f485efaf672cd6765aa9b21a79f4efb0071cca48822e19c84fbbaf5565d422e451db92af65bf72930306037525c729ab6b7d3e3a0fd94595489a66cc3f0126d42fbf36f47c54147c40217d6f23c1e15bec80218fb763abbe434eae0e080ecb003b0c0873acff8d29620013ff70101edc30573b20e19e55935ca19d1d7e5652448342e96c889cdd0be92e45064a8bdf805", 0x99) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000180)={0x0, 0x200}, &(0x7f00000001c0)=0x8) sendmmsg$inet(r0, &(0x7f0000002fc0)=[{{&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000140)=[{&(0x7f00000011c0)="e6", 0x1}], 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="10000000000000000007000007000000fa00cfb4ae44bbae752afa8762ad5dd12f9edf9592f01d0ff7193979ba19801afb1353bf90357a1f0347e1bdb6c03b9079ce658a33eb4bee63ce9c2c48b802fcb70901a277b77de82a8be233d87489217c7e87d5b529"], 0x10}}], 0x1, 0x0) 886.821308ms ago: executing program 0: socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) (async) unshare(0x28000600) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffe16, &(0x7f0000000140)="06f7", 0x0}, 0xffffffffffffff3a) (async) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000400)={0xffffffffffffffff}, 0x4) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0xfeffff, 0x113, 0x3f00f000, &(0x7f0000000700)="c45c573d395de5b2891a7d637a223920f181c2e57d71483cfb2d075a3fa67258e080a194805cdb0c26d3f7ffb1e0d9cf4fa36dcb2168b72de48ac8f93e6804f1c4d70898d0810e044d7e1778eaac5dfdcc9f1208905522025bcfdf1b6f969b094d5c022c2b7ffefde71e0627b9a2069cc1e0175c4b8860aad4b0a103c589f676b6c4e85eb3950c533b6e62c39ccf9ae9bfe54ee5887358d44f46337fbe090d7c7e55847edee8130ffd3d1e719e01a68b0e691c0d35b0b56e0b514036342fd56f08ac0083f3c2fe41a1295a3d23cf3d160d4fd90f66beba68860456ed41272e1e68d16c2564c85f5556e18784113c493d13253e14d6eb891707fba3c30d07d5ee8619e4426cafec4cf6a3723c455d09b586b248", 0x0, 0xf0, 0x0, 0x4a, 0xffffff0c}, 0x40) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/uts\x00') (async) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r2, 0x1, 0x0, 0x0, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) listen(r0, 0x80080400) (async) socket$inet_dccp(0x2, 0x6, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000020240), 0x10010) r4 = socket(0xa, 0x1, 0x0) close(r4) (async) r5 = openat$cgroup_ro(r3, &(0x7f0000000300)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) connect$llc(0xffffffffffffffff, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000005280)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}, 0x3}, {{0x0, 0x0, &(0x7f0000000200)}}, {{0x0, 0x0, &(0x7f0000003200)=[{0x0}], 0x1}, 0xb177}, {{&(0x7f00000038c0)=@sco, 0x80, 0x0, 0x0, &(0x7f0000005200)=""/64, 0x40}, 0xa000000}], 0x4, 0x40002006, 0x0) (async) sendfile(0xffffffffffffffff, r5, 0x0, 0xffefffff) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000dc0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x90) (async) r6 = socket$inet6(0xa, 0x80002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00'}, 0x90) (async) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) (async) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) (async) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 782.118067ms ago: executing program 2: socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1}, 0x38) (async, rerun: 64) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000002000001801000020646c2500000000002020207b1af8ff00000000bfa1abb7bf375d7709b7c900000000000007010000f8ffffffb702000008000000b703c141171eca23219c000006000000850000007d0000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='block_plug\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) unshare(0x8040480) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) (async) syz_emit_ethernet(0x10dc, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaa00dffffbff0086dd607f00ef10a6"], 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000060a0b040000000000000000020000001800048010000180090001006d65746100000000040002800900010073797a30000000000900020073797a320000000014000000110001000031af00000000000000000a"], 0x6c}}, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000100), 0x1001) (async) ioctl$SIOCSIFHWADDR(r4, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000300)={'macvlan0\x00', 0x4000}) setsockopt$bt_hci_HCI_FILTER(r4, 0x0, 0x2, &(0x7f0000000100)={0x0, [0x2, 0xfffffffa], 0x9}, 0x10) (async) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000800)=@delchain={0x9f4, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x40, 0x2, [@TCA_FLOWER_KEY_ARP_OP={0x5}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}]}}, @filter_kind_options=@f_route={{0xa}, {0x960, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_POLICE={0x470, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2000000000000}]}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x4cc, 0x6, [@m_ctinfo={0x38, 0x0, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6}]}, {0x4}, {0xc}, {0xc}}}, @m_ife={0x100, 0x0, 0x0, 0x0, {{0x8}, {0x6c, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x38, 0x6, [@IFE_META_TCINDEX={0x6}, @IFE_META_PRIO={0x8}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x8}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x8}]}, @TCA_IFE_TYPE={0x6}, @TCA_IFE_SMAC={0xa, 0x4, @link_local}, @TCA_IFE_PARMS={0x1c}]}, {0x6d, 0x6, "68f33c84b776915719434abe46a9ad66388de7f727e754e0482910d008dee0199b585271d39abe13f7c59928211ea2eea798182b0caf370760e543f9c63a2fafb29bde21d4a4166ea1d1c4e6f61174108c064b3b9a7cf04e9b165a21eef5e591bb3d865a0f1d264787"}, {0xc}, {0xc}}}, @m_nat={0x124, 0x0, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @rand_addr, @loopback}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @private=0xa010100, @broadcast}}]}, {0xa9, 0x6, "ef93daeef78df7f9a037a0d7a2f92a1cc341deabba437fc636cbf66a843bc4e0304e79be1f16cfa199b042be92c52b0490cb3ccc8a115bd7fba1ddd4a3ea8aa011548c0a44af30d92f016d58b7280bd34278777199f7793bcc30f7c7b74cd6eded8934fa327e1541339075fdc86a745c472c9477faee71092d6a0a50cd377c521c047f0c8b2f4314876961ef4214903d7cb9ade598b7023384c5c8f726e342e8454b6a925d"}, {0xc}, {0xc}}}, @m_connmark={0x188, 0x0, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x3}}}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}]}, {0x104, 0x6, "66396e732cf67237ecb590a592c571fa73ca190526dea927df5162b385d80fe15ca7f5cb6a4d7da0dc8795f6ad32634b6b66cf821e93079c15dda212b0b37b761850342ebe270d64e92b80cf9114d976338d2df47d7523d98bdd4417933d3e64d73a30fc4e9a29d250104fa297e7a7f17405df935efe7e4806b65a797a850f6a8d8e2c8a8b9f56953d1262211f307b4af9617b04c9c48dea9e41ef304ac3365b6d8846ba790c335b4b2b956f87becb028bb4f8bb41c8eafa20fc312fee715e656cbb8bb9509b871694c4d4f1d398ce931b52b8a202149fb310cf2c60e7f0b93b7fba018f2fb42ef3b481f53637202f69db589afa1f7e86c6681a954515ac89fd"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_bpf={0x8c, 0x0, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS={0x1c, 0x4, [{0x0, 0x0, 0x0, 0xffffffff}, {}, {}]}]}, {0x3d, 0x6, "538ccaa56078deef003c66568338f89ce81cefabfec7b5ecd9cf6ec4c86d636a2b2cee0c35637b64dc5c63c60e180d0c44ef1e097dda82cf07"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_ctinfo={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8}]}, {0x1a, 0x6, "41be356e964e7745f9a57571dce1c50c2bf05086e12e"}, {0xc}, {0xc}}}]}, @TCA_ROUTE4_IIF={0x8}]}}]}, 0x9f4}}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) (async, rerun: 32) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) (rerun: 32) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000640)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x3a, 0x0, 0xee01}, {}, {0x0, 0x3ff}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x32}, 0x0, @in=@private=0xffffffff}}, 0xe8) (async) sendmmsg$inet6(r5, &(0x7f0000000300)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@getchain={0x24, 0x2d, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}}}, 0x24}}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) (async) setsockopt$sock_int(r6, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4) 772.726652ms ago: executing program 0: socket(0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b00)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x54583}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @dev}, @IFLA_IPTUN_TOS={0x5}]}}}]}, 0x4c}}, 0x0) socket(0x0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) sendmmsg$inet(r0, &(0x7f0000000d40)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x60, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty}}}], 0x20}}], 0x1, 0x0) 766.11133ms ago: executing program 1: syz_emit_ethernet(0x26, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x89, 0x0, @empty, @broadcast}, "90e2a72a"}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_mreq(r1, 0x29, 0x8, 0x0, &(0x7f0000000000)=0xfffffffffffffe7e) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee01}, {}, {}, 0x400000}}, 0xb8}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000080)=0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@ipv6_getroute={0x1c, 0x1a, 0x0, 0x0, 0x0, {0x2}}, 0x1c}}, 0x0) unshare(0x4040600) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x7, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@map_fd={0x18, 0x0, 0x1, 0x0, r4}, @map_fd={0x18, 0x0, 0x1, 0x0, r3}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0xea, &(0x7f0000000340)=""/234}, 0x90) r5 = accept$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, &(0x7f0000000100)=0x10) recvfrom$inet(r5, &(0x7f0000000840)=""/4096, 0x1000, 0x2000, &(0x7f0000000140)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000500)) r6 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r6, 0x80080400) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r6, 0x84, 0x15, &(0x7f0000000200)={0x3}, 0x1) accept$nfc_llcp(0xffffffffffffffff, &(0x7f00000007c0), &(0x7f0000000540)=0x60) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) socket$nl_route(0x10, 0x3, 0x0) 651.672951ms ago: executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x0, 0x1c}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1df}}]}]}}]}, 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x7, 0x0, "98d3340600c7aa11897ecaab876eab79576839c5656be8410f2802e944af80373be2666b665770173fbd1883303b6ac4749393ad08f139a68f00"}, 0xd8) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x40, &(0x7f0000000a00)=0x101, 0x4) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000009c0)=ANY=[@ANYBLOB="500200001900010000000000000000001d010900a400108033d3c24625148b0a7a27a2dbc810eb0718bf1b600fa8580b345c1ef88494725625e7521bed0f64737cbd320756b91158a62fbdec6f0dbfbec598fe4677dfd46093267ec0cbf3fddc42"], 0x250}}, 0x0) bind$inet(r6, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) r8 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) recvmmsg(r6, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000004ac0)=""/102389, 0x18ff5}, {&(0x7f0000000a80)=""/244, 0xf4}], 0x2}}, {{0x0, 0x0, &(0x7f0000000cc0), 0x0, &(0x7f0000000d00)=""/154, 0x9a}}], 0x2, 0x0, 0x0) write$binfmt_elf64(r6, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r8], 0xc63b9e35) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="88000000", @ANYRES16=r8, @ANYBLOB], 0x88}, 0x1, 0x0, 0x0, 0x12}, 0x2004c050) recvfrom$netrom(r2, &(0x7f0000000840)=""/163, 0xa3, 0x41, &(0x7f0000000900)={{0x3, @bcast, 0x5}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @null, @default, @null, @bcast]}, 0x48) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000740)={'syztnl2\x00', &(0x7f0000000680)={'tunl0\x00', r3, 0x80, 0x40, 0x0, 0x8, {{0x25, 0x4, 0x1, 0x5, 0x94, 0x65, 0x0, 0x7f, 0x4, 0x0, @rand_addr=0x64010100, @multicast2, {[@generic={0x92, 0x8, "b8039ef52dd3"}, @timestamp_prespec={0x44, 0xc, 0xca, 0x3, 0xe, [{@empty, 0x4}]}, @timestamp={0x44, 0x2c, 0xee, 0x0, 0x5, [0x9, 0x1, 0xb166, 0x20, 0x101, 0x2, 0x6d4a, 0x3, 0x2, 0xfffffffe]}, @end, @timestamp={0x44, 0x1c, 0xaa, 0x0, 0x3, [0x81, 0x3, 0x5, 0x0, 0x7, 0x0]}, @ssrr={0x89, 0xf, 0x69, [@loopback, @remote, @rand_addr=0x64010100]}, @timestamp={0x44, 0x10, 0x65, 0x0, 0x5, [0xa1, 0x4, 0x1]}, @ra={0x94, 0x4}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000800)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=@getstats={0x1c, 0x5e, 0x800, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r9, 0x5}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x55) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x900, &(0x7f0000000480)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x24}}, 0x0) 595.237879ms ago: executing program 2: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x9, &(0x7f0000000200)={&(0x7f0000003900)={0x24, 0x16, 0xa01, 0x0, 0x0, {}, [@typed={0x4}, @typed={0xc, 0xa, 0x0, 0x0, @u64}]}, 0x24}}, 0x0) 578.394519ms ago: executing program 3: bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) (async) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x8001000d, 0xad}, 0x90) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r0, 0x8b2a, &(0x7f0000000040)) 482.624272ms ago: executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) unshare(0x22020600) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a09040000000000000000020000000900020073787a32000000000900010073797a30000000003800048034000180090001006861736800000000240002800800024000000000080004400000000008000640000000000800074000300001140000001100010000000000000000000000000a0e0d2e0d3d2ea6458684b4d87bf4f31a64e64f19d6da46ab865bbfe95dd24ab260fd75aaad0fc8e37eb89901b8fccb377065efd86986133b7a95702d0471b6a634232a60442611250f4328ef1d51fa"], 0x8c}}, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x5, &(0x7f0000000840)=0x40000000, 0x18) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x20, 0x1, 0x1a8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/424]}, 0x220) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r3, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/91, 0x5b}], 0x1) write$cgroup_netprio_ifpriomap(r4, 0x0, 0xa) write$cgroup_netprio_ifpriomap(r4, &(0x7f0000000080)={'pimreg0'}, 0xa) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)={0xe0, 0x10, 0x509, 0x0, 0x0, "", [@generic="6f6d8864d22a3f2ffaa46c88bc", @typed={0xa9, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce28712828bdda0a9423debbb86f9dba4a2dba4dbe076c29282900c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100e434db5dd5e995aa0912086d9f4606d2e4cc898739222c5d3a83cb6b707f3336336ebb7d681"}, @nested={0x14, 0x0, 0x0, 0x1, [@typed={0xd, 0x0, 0x0, 0x0, @binary="cfe7336f91087ba18b"}]}]}, 0xe0}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004e00)=[{{&(0x7f0000000600)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000740)=[@dontfrag={{0x14}}, @hoplimit_2292={{0x14}}], 0x30}}], 0x1, 0x0) 475.544653ms ago: executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000000040)=0x8000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000004080)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r6}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r7}, &(0x7f0000000100), &(0x7f0000000180)=r6}, 0x20) close(r6) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r8}, &(0x7f0000000140), &(0x7f0000000280)=r6}, 0x20) splice(r1, 0x0, r4, 0x0, 0x7, 0x0) close(r3) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000180)='Y', 0x1}], 0x1) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000000500)=""/4091, 0xffb}], 0x1}, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) socket$inet_smc(0x2b, 0x1, 0x0) r11 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r10, @ANYBLOB="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"], 0x270}}, 0x0) unshare(0x2040400) r12 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout_data(r12, 0x107, 0x7, 0x0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) 443.977036ms ago: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000006c0)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ad}]]}, 0x24}}, 0x0) r2 = socket(0x2b, 0x1, 0x1) sendmmsg$sock(r2, &(0x7f0000001280)=[{{&(0x7f0000000240)=@in6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0}}], 0x1, 0x20000001) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) connect$netlink(r2, &(0x7f0000000000)=@unspec, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000cc0)={'wlan0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) accept$alg(r2, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x20044080}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[], 0x14}}, 0x4c810) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 0s ago: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r1, 0x701, 0x1c00, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) r4 = socket(0x1e, 0x0, 0x0) connect$tipc(r4, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) socket(0x6, 0xa, 0x3) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) kernel console output (not intermixed with test programs): rted in network mode [ 154.602569][ T8502] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 154.612263][ T8502] tipc: Enabled bearer , priority 0 [ 154.645097][ T8504] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 154.723393][ T8505] dccp_close: ABORT with 44 bytes unread [ 154.759654][ T8433] hsr_slave_0: entered promiscuous mode [ 154.771941][ T8433] hsr_slave_1: entered promiscuous mode [ 154.790178][ T8433] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 154.801542][ T8433] Cannot create hsr debugfs directory [ 154.917168][ T8514] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 154.942780][ T8514] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.2'. [ 154.980597][ T8521] bridge0: entered promiscuous mode [ 154.986158][ T8521] bridge0: entered allmulticast mode [ 155.046436][ T5114] Bluetooth: hci7: command tx timeout [ 155.160626][ T8527] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 155.303307][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.311739][ T8534] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 155.315727][ T8433] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.342128][ T8529] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 155.464366][ T8433] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.487544][ T8538] tipc: Enabling of bearer rejected, failed to enable media [ 155.498694][ T8539] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 155.502151][ T8542] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 155.513364][ T8539] team0: Device veth1_vlan failed to register rx_handler [ 155.570110][ T8433] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.613896][ T8538] team0: Port device geneve0 added [ 155.655729][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.690643][ T8433] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.704378][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.725120][ T25] tipc: Node number set to 8432298 [ 155.731212][ T8546] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 155.910653][ T8433] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 155.932194][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.942611][ T8433] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 155.989440][ T8433] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 156.039628][ T8433] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 156.153648][ T8557] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.200265][ T8560] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 156.327637][ T5160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.357285][ T8433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.407016][ T8433] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.449780][ T5160] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.456991][ T5160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.482620][ T8571] bridge_slave_0: entered allmulticast mode [ 156.508166][ T5160] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.515395][ T5160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.524103][ T45] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.624403][ T8433] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 156.654003][ T8433] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 156.805829][ T5104] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.959564][ T8588] bridge0: entered promiscuous mode [ 156.985928][ T8588] bridge0: entered allmulticast mode [ 157.125474][ T5122] Bluetooth: hci7: command tx timeout [ 157.160240][ T8433] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.267766][ T8433] veth0_vlan: entered promiscuous mode [ 157.283929][ T8433] veth1_vlan: entered promiscuous mode [ 157.305634][ T8603] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 157.324528][ T8603] team0: Device veth1_vlan failed to register rx_handler [ 157.368209][ T8605] trusted_key: syz-executor.1 sent an empty control message without MSG_MORE. [ 157.376287][ T8433] veth0_macvtap: entered promiscuous mode [ 157.402825][ T8433] veth1_macvtap: entered promiscuous mode [ 157.456067][ T8433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.467315][ T8433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.477289][ T8433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.487936][ T8433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.497894][ T8433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.509193][ T8433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.520286][ T8433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.534797][ T8433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.544835][ T8433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.556088][ T8433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.566079][ T8433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.576721][ T8433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.587476][ T8433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.598284][ T8433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.611480][ T8433] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 157.629588][ T8433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.640883][ T8433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.652134][ T8433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.668469][ T8433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.678399][ T8433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.689147][ T8433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.699043][ T8433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.709512][ T8433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.719356][ T8433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.730621][ T8433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.742067][ T8433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.752515][ T8433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.778578][ T8433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.789111][ T8433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.822857][ T8433] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 157.854845][ T8433] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.875406][ T8433] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.884135][ T8433] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.894815][ T8433] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.105673][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.128025][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.204457][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.226315][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.778609][ T8656] lo speed is unknown, defaulting to 1000 [ 158.791727][ T8659] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 158.919136][ T8659] team0: Device veth1_vlan failed to register rx_handler [ 159.205943][ T5122] Bluetooth: hci7: command 0x040f tx timeout [ 159.235970][ T8681] __nla_validate_parse: 8 callbacks suppressed [ 159.235988][ T8681] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 159.448250][ T45] net_ratelimit: 11 callbacks suppressed [ 159.448270][ T45] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.527769][ T5160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.536917][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.692465][ T8703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.704849][ T8706] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. [ 159.723259][ T8706] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 159.733547][ T8706] netlink: 31 bytes leftover after parsing attributes in process `syz-executor.0'. [ 159.745872][ T8706] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 159.754047][ T8706] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 159.763834][ T8706] netlink: 31 bytes leftover after parsing attributes in process `syz-executor.0'. [ 159.824619][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 160.283364][ T8732] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 160.303833][ T8732] netlink: 408 bytes leftover after parsing attributes in process `syz-executor.2'. [ 160.331987][ T8734] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 160.344134][ T8734] team0: Device veth1_vlan failed to register rx_handler [ 160.364625][ T8734] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 160.487146][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.515239][ T8736] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 160.600061][ T8742] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 161.148950][ T8764] syz-executor.1[8764] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 161.149187][ T8764] syz-executor.1[8764] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 161.253412][ T8766] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.296994][ T5114] Bluetooth: hci7: command 0x040f tx timeout [ 161.310883][ T8768] netlink: 'syz-executor.3': attribute type 23 has an invalid length. [ 161.446991][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.526380][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.845609][ T8804] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 161.871317][ T8804] team0: Device veth1_vlan failed to register rx_handler [ 162.439337][ T8836] lo speed is unknown, defaulting to 1000 [ 162.566110][ T5160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.365688][ T5114] Bluetooth: hci7: command 0x040f tx timeout [ 164.265640][ T8929] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 164.321788][ T8929] __nla_validate_parse: 16 callbacks suppressed [ 164.321809][ T8929] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 164.454272][ T8936] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 164.631050][ T8947] netlink: 'syz-executor.0': attribute type 63 has an invalid length. [ 164.655409][ T5160] net_ratelimit: 4 callbacks suppressed [ 164.655429][ T5160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.669512][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.764667][ T8953] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 164.949015][ T8967] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 164.972282][ T8963] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 164.986659][ T8971] sctp: [Deprecated]: syz-executor.1 (pid 8971) Use of struct sctp_assoc_value in delayed_ack socket option. [ 164.986659][ T8971] Use struct sctp_sack_info instead [ 164.998205][ T8963] team0: Device veth1_vlan failed to register rx_handler [ 165.100517][ T8976] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.2'. [ 165.287944][ T6646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.687248][ T45] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.765246][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.083333][ T9009] x_tables: ip6_tables: tcp match: only valid for protocol 6 [ 166.152369][ T9011] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 166.184289][ T9012] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 166.210972][ T9012] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 166.238156][ T9012] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 166.403369][ T9023] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 166.415429][ T9023] team0: Device veth1_vlan failed to register rx_handler [ 166.456236][ T9026] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 166.480453][ T9028] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 166.725740][ T5160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.745271][ T9042] veth1_macvtap: left promiscuous mode [ 166.834351][ T9044] --map-set only usable from mangle table [ 167.172578][ T9060] netlink: 'syz-executor.2': attribute type 15 has an invalid length. [ 167.202539][ T9060] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 65023 - 0 [ 167.212908][ T9060] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 65023 - 0 [ 167.222500][ T9060] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 65023 - 0 [ 167.231396][ T9060] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 65023 - 0 [ 167.248695][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.273031][ T9060] vxlan0: entered promiscuous mode [ 167.452968][ T9074] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 167.685495][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.694172][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.144514][ T9093] IPVS: length: 164 != 24 [ 168.245447][ T29] audit: type=1800 audit(1717976094.264:8): pid=9100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1955 res=0 errno=0 [ 168.278736][ T29] audit: type=1804 audit(1717976094.274:9): pid=9100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir2070034266/syzkaller.Q6APmL/135/memory.events" dev="sda1" ino=1955 res=1 errno=0 [ 169.293151][ T9158] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 169.440978][ T9163] IPVS: length: 164 != 24 [ 169.538903][ T9176] __nla_validate_parse: 19 callbacks suppressed [ 169.538923][ T9176] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 169.717500][ T9186] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 169.752700][ T9186] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 169.849981][ T25] net_ratelimit: 6 callbacks suppressed [ 169.850002][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.061891][ T9207] netlink: 14428 bytes leftover after parsing attributes in process `syz-executor.1'. [ 170.386239][ T9222] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 170.495842][ T9227] FAULT_INJECTION: forcing a failure. [ 170.495842][ T9227] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 170.509530][ T9227] CPU: 0 PID: 9227 Comm: syz-executor.2 Not tainted 6.10.0-rc2-syzkaller-00442-g924ee5317548 #0 [ 170.519973][ T9227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 170.530049][ T9227] Call Trace: [ 170.533337][ T9227] [ 170.536270][ T9227] dump_stack_lvl+0x241/0x360 [ 170.540950][ T9227] ? __pfx_dump_stack_lvl+0x10/0x10 [ 170.546147][ T9227] ? __pfx__printk+0x10/0x10 [ 170.550762][ T9227] ? __pfx_lock_release+0x10/0x10 [ 170.555892][ T9227] should_fail_ex+0x3b0/0x4e0 [ 170.560580][ T9227] _copy_from_iter+0x1f6/0x1960 [ 170.565431][ T9227] ? __virt_addr_valid+0x183/0x520 [ 170.570540][ T9227] ? __pfx_lock_release+0x10/0x10 [ 170.575582][ T9227] ? __alloc_skb+0x28f/0x440 [ 170.580260][ T9227] ? __pfx__copy_from_iter+0x10/0x10 [ 170.585543][ T9227] ? __virt_addr_valid+0x183/0x520 [ 170.590647][ T9227] ? __virt_addr_valid+0x183/0x520 [ 170.595753][ T9227] ? __virt_addr_valid+0x44e/0x520 [ 170.600954][ T9227] ? __check_object_size+0x49c/0x900 [ 170.606239][ T9227] netlink_sendmsg+0x743/0xcb0 [ 170.611003][ T9227] ? __pfx_netlink_sendmsg+0x10/0x10 [ 170.616287][ T9227] ? __import_iovec+0x536/0x820 [ 170.621136][ T9227] ? aa_sock_msg_perm+0x91/0x160 [ 170.626068][ T9227] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 170.631431][ T9227] ? security_socket_sendmsg+0x87/0xb0 [ 170.636980][ T9227] ? __pfx_netlink_sendmsg+0x10/0x10 [ 170.642266][ T9227] __sock_sendmsg+0x221/0x270 [ 170.646943][ T9227] ____sys_sendmsg+0x525/0x7d0 [ 170.651706][ T9227] ? __pfx_____sys_sendmsg+0x10/0x10 [ 170.656996][ T9227] __sys_sendmsg+0x2b0/0x3a0 [ 170.661581][ T9227] ? __pfx___sys_sendmsg+0x10/0x10 [ 170.666717][ T9227] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 170.673042][ T9227] ? do_syscall_64+0x100/0x230 [ 170.677816][ T9227] ? do_syscall_64+0xb6/0x230 [ 170.682522][ T9227] do_syscall_64+0xf3/0x230 [ 170.687036][ T9227] ? clear_bhb_loop+0x35/0x90 [ 170.691713][ T9227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.697601][ T9227] RIP: 0033:0x7f6bc487cf69 [ 170.702008][ T9227] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 170.721605][ T9227] RSP: 002b:00007f6bc569d0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 170.730017][ T9227] RAX: ffffffffffffffda RBX: 00007f6bc49b3f80 RCX: 00007f6bc487cf69 [ 170.737983][ T9227] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 170.745947][ T9227] RBP: 00007f6bc569d120 R08: 0000000000000000 R09: 0000000000000000 [ 170.753918][ T9227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.761877][ T9227] R13: 000000000000004d R14: 00007f6bc49b3f80 R15: 00007ffc8ebf59c8 [ 170.769853][ T9227] [ 170.863061][ T9232] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 170.886310][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.961258][ T9232] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 171.047192][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.055371][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.171967][ T9255] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.354105][ T9273] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 171.366795][ T9273] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 171.399757][ T9273] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 171.421761][ T9279] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 171.429975][ T9273] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 171.469157][ T9279] hsr_slave_0: left promiscuous mode [ 171.499509][ T9279] hsr_slave_1: left promiscuous mode [ 171.583542][ T9283] netlink: 14428 bytes leftover after parsing attributes in process `syz-executor.1'. [ 171.686882][ T45] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.901106][ T9303] xt_hashlimit: invalid interval [ 171.925602][ T45] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.240812][ T9321] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.0'. [ 172.395458][ T9332] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 172.403788][ T9335] netlink: 'syz-executor.4': attribute type 8 has an invalid length. [ 172.425887][ T9335] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.442287][ T9332] hsr0: entered promiscuous mode [ 172.469845][ T9332] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 172.485250][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.505285][ T9332] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 172.526338][ T9332] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 172.549695][ T9332] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 172.762195][ T9354] bond0: (slave macvlan3): Error -98 calling set_mac_address [ 172.966611][ T987] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.023787][ T9365] lo speed is unknown, defaulting to 1000 [ 173.159732][ T9378] Bluetooth: hci3: invalid length 0, exp 2 for type 24 [ 173.963696][ T9414] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 174.398803][ T9429] tipc: Enabling of bearer <Žz:l> rejected, media not registered [ 175.015643][ T9441] tipc: Started in network mode [ 175.022967][ T9441] tipc: Node identity 8eaa0b53246d, cluster identity 4711 [ 175.060769][ T25] net_ratelimit: 4 callbacks suppressed [ 175.060789][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.075618][ T9441] tipc: Enabled bearer , priority 0 [ 175.172768][ T9450] syzkaller1: entered promiscuous mode [ 175.190402][ T9450] syzkaller1: entered allmulticast mode [ 175.348698][ T9462] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 175.383427][ T9462] team0: Device veth1_vlan failed to register rx_handler [ 175.556440][ T9478] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 175.572093][ T9478] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 175.592106][ T9479] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 175.593708][ T9478] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 175.757828][ T9483] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 176.075704][ T784] tipc: Node number set to 2865171283 [ 176.086026][ T45] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.207447][ T9508] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 176.311693][ T45] IPVS: starting estimator thread 0... [ 176.438026][ T9522] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 176.485741][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.498729][ T9517] IPVS: using max 23 ests per chain, 55200 per kthread [ 176.713536][ T9544] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 176.736762][ T9544] team0: Device veth1_vlan failed to register rx_handler [ 176.774267][ T9549] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 176.805887][ T6649] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.849071][ T9551] tipc: Enabled bearer , priority 10 [ 176.859899][ T9551] tipc: Resetting bearer [ 176.947744][ T9551] tipc: Disabling bearer [ 177.060889][ T5160] IPVS: starting estimator thread 0... [ 177.127373][ T45] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.155589][ T9557] IPVS: using max 19 ests per chain, 45600 per kthread [ 177.541702][ T9571] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 177.658278][ T9579] xt_TCPMSS: Only works on TCP SYN packets [ 177.816307][ T9591] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 177.978570][ T9601] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 178.021277][ T9601] team0: Device veth1_vlan failed to register rx_handler [ 178.052826][ T9605] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 178.087591][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.111262][ T9608] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. [ 178.166521][ T5160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.259869][ T9622] xt_TCPMSS: Only works on TCP SYN packets [ 178.330739][ T9624] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.4'. [ 178.547112][ T9634] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.725604][ T45] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.177594][ T9650] xt_TCPMSS: Only works on TCP SYN packets [ 179.215214][ T45] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.269203][ T9656] ipip0: entered promiscuous mode [ 179.570416][ T9669] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 179.618336][ T9669] team0: Device veth1_vlan failed to register rx_handler [ 179.967016][ T9682] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 180.021696][ T5123] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 180.032244][ T5123] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 180.042955][ T5123] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 180.051870][ T5123] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 180.062618][ T5123] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 180.071020][ T5123] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 180.161089][ T9685] lo speed is unknown, defaulting to 1000 [ 180.245588][ T5165] net_ratelimit: 1 callbacks suppressed [ 180.245608][ T5165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.298910][ T9693] ip6tnl3: entered promiscuous mode [ 180.309144][ T9693] ip6tnl3: entered allmulticast mode [ 180.525942][ T9699] openvswitch: netlink: EtherType 0 is less than min 600 [ 180.602604][ T9704] __nla_validate_parse: 5 callbacks suppressed [ 180.602624][ T9704] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 180.606186][ T9685] chnl_net:caif_netlink_parms(): no params data found [ 180.752182][ T9707] veth0Wvlan: renamed from syz_tun (while UP) [ 180.817048][ T9685] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.826020][ T9685] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.833271][ T9685] bridge_slave_0: entered allmulticast mode [ 180.843263][ T9685] bridge_slave_0: entered promiscuous mode [ 180.860618][ T9685] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.869357][ T9707] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 180.881494][ T9685] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.894746][ T9707] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 180.901650][ T9685] bridge_slave_1: entered allmulticast mode [ 180.912132][ T9685] bridge_slave_1: entered promiscuous mode [ 181.109090][ T9685] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.154363][ T9685] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.188491][ T9719] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. [ 181.323774][ T9685] team0: Port device team_slave_0 added [ 181.348491][ T9685] team0: Port device team_slave_1 added [ 181.415950][ T9730] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 181.445495][ T4489] Bluetooth: hci1: command 0x0406 tx timeout [ 181.452938][ T5123] Bluetooth: hci2: command 0x0c1a tx timeout [ 181.468657][ T5123] Bluetooth: hci3: command 0x1407 tx timeout [ 181.474727][ T5123] Bluetooth: hci0: command 0x0406 tx timeout [ 181.533491][ T9729] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 181.561294][ T9729] team0: Device veth1_vlan failed to register rx_handler [ 181.609573][ T9685] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.617488][ T9685] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.662191][ T9685] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.724902][ T9685] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.735400][ T9735] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 181.744946][ T9685] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.778996][ T9685] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.794295][ T9735] netlink: 516 bytes leftover after parsing attributes in process `syz-executor.0'. [ 181.806435][ T9735] openvswitch: netlink: EtherType 0 is less than min 600 [ 181.921925][ T9685] hsr_slave_0: entered promiscuous mode [ 181.930547][ T9743] netlink: 4680 bytes leftover after parsing attributes in process `syz-executor.3'. [ 181.958244][ T9685] hsr_slave_1: entered promiscuous mode [ 181.980897][ T9685] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 182.007510][ T9685] Cannot create hsr debugfs directory [ 182.165840][ T5114] Bluetooth: hci5: command tx timeout [ 182.349216][ T9758] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 182.375366][ T9748] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 182.385743][ T9758] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 182.475739][ T9764] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 182.483863][ T9764] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 182.492201][ T9764] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 182.500729][ T9764] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 182.603666][ T9685] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.762444][ T9685] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.816775][ T9772] openvswitch: netlink: EtherType 0 is less than min 600 [ 182.903576][ T9685] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.953817][ T9778] lo speed is unknown, defaulting to 1000 [ 183.051608][ T9685] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.337831][ T9793] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 183.369732][ T9793] team0: Device veth1_vlan failed to register rx_handler [ 183.396209][ T9685] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 183.427529][ T9685] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 183.444879][ T9685] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 183.462378][ T9685] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 183.753714][ T9685] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.861530][ T9685] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.919234][ T5165] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.926447][ T5165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.988701][ T784] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.995901][ T784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.220777][ T9816] openvswitch: netlink: EtherType 0 is less than min 600 [ 184.257258][ T5114] Bluetooth: hci5: command tx timeout [ 184.412714][ T9826] syz-executor.2[9826] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 184.412870][ T9826] syz-executor.2[9826] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 184.467370][ T9826] syz-executor.2[9826] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 184.481445][ T9685] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.492887][ T9826] syz-executor.2[9826] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 184.520374][ T9826] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 184.643187][ T9685] veth0_vlan: entered promiscuous mode [ 184.681454][ T9685] veth1_vlan: entered promiscuous mode [ 184.733402][ T9685] veth0_macvtap: entered promiscuous mode [ 184.749567][ T9685] veth1_macvtap: entered promiscuous mode [ 184.772917][ T9685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.783627][ T9685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.799995][ T9685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.811506][ T9685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.822677][ T9685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.839151][ T9685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.855308][ T9685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.881865][ T9685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.895022][ T9685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.914371][ T9685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.925015][ T9685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.936066][ T9685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.949056][ T9685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.959769][ T9685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.972738][ T9685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.983751][ T9685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.998664][ T9685] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.018334][ T9685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.064266][ T9685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.075701][ T9685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.096247][ T9685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.116232][ T9685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.141784][ T9685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.154520][ T9685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.166397][ T9685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.178235][ T9685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.189420][ T9685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.204156][ T9685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.215617][ T9685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.226900][ T9685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.240243][ T9685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.252083][ T9685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.262701][ T9685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.286866][ T9685] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.303253][ T9845] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 185.323523][ T9845] team0: Device veth1_vlan failed to register rx_handler [ 185.351650][ T9685] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.383809][ T9685] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.399069][ T29] audit: type=1804 audit(1717976111.424:10): pid=9850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2099102232/syzkaller.j1obKs/191/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 185.426737][ T9685] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.449027][ T9685] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.471462][ T9853] openvswitch: netlink: EtherType 0 is less than min 600 [ 185.624495][ T987] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.646467][ T987] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.680430][ T9857] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 185.691112][ T9857] nbd: illegal input index -1708589048 [ 185.694431][ T6649] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.701349][ T9859] netlink: 'syz-executor.2': attribute type 153 has an invalid length. [ 185.706030][ T6649] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.982036][ T29] audit: type=1804 audit(1717976112.004:11): pid=9864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir893842950/syzkaller.UnwcoS/326/cgroup.controllers" dev="sda1" ino=1973 res=1 errno=0 [ 186.325627][ T5114] Bluetooth: hci5: command tx timeout [ 186.429663][ T9879] validate_nla: 1 callbacks suppressed [ 186.429682][ T9879] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 186.474793][ T9879] batman_adv: batadv0: Adding interface: team0 [ 186.502852][ T9879] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.543464][ T9879] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 186.568867][ T9889] __nla_validate_parse: 13 callbacks suppressed [ 186.568885][ T9889] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 186.680229][ T9894] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 186.716476][ T9894] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 186.838479][ T9906] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 186.880664][ T9906] team0: Device veth1_vlan failed to register rx_handler [ 186.917090][ T9909] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 187.716790][ T9954] netlink: 516 bytes leftover after parsing attributes in process `syz-executor.3'. [ 187.755566][ T9954] openvswitch: netlink: EtherType 0 is less than min 600 [ 187.850751][ T9969] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 187.930437][ T9973] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 187.964865][ T9978] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 187.992192][ T9971] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 188.153566][ T9990] IPVS: set_ctl: invalid protocol: 40 127.0.0.1:20000 [ 188.226589][ T9996] netlink: 'syz-executor.2': attribute type 15 has an invalid length. [ 188.246371][ T9996] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 188.265140][ T9998] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 188.291464][T10002] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 188.308259][ T9998] team0: Device veth1_vlan failed to register rx_handler [ 188.357948][T10004] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 188.368336][T10004] netlink: 168864 bytes leftover after parsing attributes in process `syz-executor.1'. [ 188.416236][ T5114] Bluetooth: hci5: command tx timeout [ 188.483704][T10010] openvswitch: netlink: EtherType 0 is less than min 600 [ 188.710731][T10025] A link change request failed with some changes committed already. Interface veth0_to_bridge may have been left with an inconsistent configuration, please check. [ 188.807173][T10027] bridge_slave_1: left allmulticast mode [ 188.812872][T10027] bridge_slave_1: left promiscuous mode [ 188.832049][T10027] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.858607][T10027] bridge_slave_0: left allmulticast mode [ 188.864615][T10027] bridge_slave_0: left promiscuous mode [ 188.873393][T10027] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.222695][ T29] audit: type=1804 audit(1717976115.244:12): pid=10042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir893842950/syzkaller.UnwcoS/339/cgroup.controllers" dev="sda1" ino=1971 res=1 errno=0 [ 189.309197][T10046] openvswitch: netlink: EtherType 0 is less than min 600 [ 189.671362][T10070] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 189.683140][T10070] team0: Device veth1_vlan failed to register rx_handler [ 189.999104][T10085] x_tables: duplicate underflow at hook 1 [ 190.100130][T10089] openvswitch: netlink: EtherType 0 is less than min 600 [ 190.469173][T10108] RDS: rds_bind could not find a transport for fc00::, load rds_tcp or rds_rdma? [ 190.488402][T10111] xt_NFQUEUE: number of total queues is 0 [ 190.639420][T10120] xt_TCPMSS: Only works on TCP SYN packets [ 191.081607][T10138] bridge_slave_1: left allmulticast mode [ 191.095420][T10138] bridge_slave_1: left promiscuous mode [ 191.104522][T10138] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.121197][T10138] bridge_slave_0: left allmulticast mode [ 191.134235][T10138] bridge_slave_0: left promiscuous mode [ 191.152145][T10138] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.629978][T10155] __nla_validate_parse: 11 callbacks suppressed [ 191.629999][T10155] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 191.687500][T10155] netlink: 408 bytes leftover after parsing attributes in process `syz-executor.0'. [ 191.844547][ T5122] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 191.855691][ T5122] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 191.865622][ T5122] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 191.876152][ T5122] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 191.885169][ T5122] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 191.892865][ T5122] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 191.913925][T10166] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 192.138230][T10161] lo speed is unknown, defaulting to 1000 [ 192.313231][ T29] audit: type=1804 audit(1717976118.334:13): pid=10174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2099102232/syzkaller.j1obKs/216/cgroup.controllers" dev="sda1" ino=1970 res=1 errno=0 [ 192.361063][ T987] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.502979][ T987] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.656486][ T987] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.712918][ T29] audit: type=1804 audit(1717976118.734:14): pid=10184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2099102232/syzkaller.j1obKs/218/cgroup.controllers" dev="sda1" ino=1965 res=1 errno=0 [ 192.751740][T10183] macvlan2: entered allmulticast mode [ 192.766319][T10183] team_slave_0: entered promiscuous mode [ 192.772161][T10183] team_slave_1: entered promiscuous mode [ 192.780200][T10183] team0: entered allmulticast mode [ 192.789074][T10183] team_slave_0: entered allmulticast mode [ 192.803633][T10183] team_slave_1: entered allmulticast mode [ 192.825882][T10183] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 192.847940][T10183] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 192.917890][T10195] xt_CONNSECMARK: invalid mode: 0 [ 192.940854][ T987] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.063523][T10200] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 193.074664][T10200] netlink: 148 bytes leftover after parsing attributes in process `syz-executor.0'. [ 193.126214][T10200] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 193.247856][T10161] chnl_net:caif_netlink_parms(): no params data found [ 193.400759][T10206] lo speed is unknown, defaulting to 1000 [ 194.006749][ T5114] Bluetooth: hci8: command tx timeout [ 194.250732][ T987] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 194.274583][ T987] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 194.293320][ T987] bond0 (unregistering): Released all slaves [ 194.474233][T10161] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.492672][T10161] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.500642][T10161] bridge_slave_0: entered allmulticast mode [ 194.509292][T10161] bridge_slave_0: entered promiscuous mode [ 194.514380][T10238] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 194.523307][T10239] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.2'. [ 194.534400][T10238] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 194.543965][T10235] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 194.554438][T10161] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.563614][T10161] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.575645][T10161] bridge_slave_1: entered allmulticast mode [ 194.583054][T10161] bridge_slave_1: entered promiscuous mode [ 194.608104][T10238] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 194.616627][T10238] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 194.711407][T10235] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 194.757407][T10235] macvlan4: entered promiscuous mode [ 194.764847][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.771268][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.783034][T10235] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 194.932566][T10161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.034614][T10161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.231586][T10250] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 195.271300][T10253] netlink: 408 bytes leftover after parsing attributes in process `syz-executor.2'. [ 195.350973][T10161] team0: Port device team_slave_0 added [ 195.518304][T10263] xt_CONNSECMARK: invalid mode: 0 [ 195.530333][T10161] team0: Port device team_slave_1 added [ 195.700268][ T987] hsr_slave_0: left promiscuous mode [ 195.711702][ T987] hsr_slave_1: left promiscuous mode [ 195.720572][ T987] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.728926][ T987] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.742424][ T987] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.751267][ T987] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.790482][ T987] veth1_macvtap: left promiscuous mode [ 195.797036][ T987] veth0_macvtap: left promiscuous mode [ 195.804244][ T987] veth0_vlan: left promiscuous mode [ 196.085558][ T5114] Bluetooth: hci8: command tx timeout [ 196.522093][ T987] team0 (unregistering): Port device team_slave_1 removed [ 196.585105][ T987] team0 (unregistering): Port device team_slave_0 removed [ 197.057294][T10161] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.064282][T10161] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.091508][T10161] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.153323][T10161] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.178467][T10161] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.260898][T10161] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.295418][T10284] __nla_validate_parse: 1 callbacks suppressed [ 197.295435][T10284] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 197.661633][T10161] hsr_slave_0: entered promiscuous mode [ 197.729995][T10161] hsr_slave_1: entered promiscuous mode [ 197.751729][T10161] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 197.775380][T10161] Cannot create hsr debugfs directory [ 197.794073][T10303] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 197.822383][T10303] netlink: 408 bytes leftover after parsing attributes in process `syz-executor.2'. [ 198.041857][T10303] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 198.165942][ T5114] Bluetooth: hci8: command tx timeout [ 198.459732][T10328] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 198.477454][T10328] vlan0: entered promiscuous mode [ 198.492650][T10328] veth0_to_batadv: entered promiscuous mode [ 198.506717][T10328] veth0_to_batadv: left promiscuous mode [ 198.711421][T10332] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 198.874250][T10161] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 198.988171][T10161] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 199.019396][T10161] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 199.074806][T10338] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 199.195200][T10161] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 199.262330][ T5122] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 199.280638][ T5122] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 199.292437][ T5122] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 199.303328][ T5122] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 199.315479][ T5122] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 199.322840][ T5122] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 199.344296][ T61] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.474278][ T61] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.515987][T10339] lo speed is unknown, defaulting to 1000 [ 199.564222][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88801167b800: rx timeout, send abort [ 199.565829][ T61] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.718199][ T61] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.801211][T10161] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.944810][ T5122] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 199.950724][T10161] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.961725][ T5122] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 199.971073][ T5122] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 199.979754][ T5122] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 199.987967][ T5122] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 199.996582][ T5122] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 200.031693][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.038891][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.073617][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88801167b800: abort rx timeout. Force session deactivation [ 200.246278][ T5114] Bluetooth: hci8: command tx timeout [ 200.256539][ T5160] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.263694][ T5160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.901418][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 200.916109][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 200.933741][ T61] bond0 (unregistering): (slave macvlan2): Releasing backup interface [ 200.944754][ T61] team0: left allmulticast mode [ 200.950026][ T61] team_slave_0: left allmulticast mode [ 200.956014][ T61] team_slave_1: left allmulticast mode [ 200.961661][ T61] team_slave_0: left promiscuous mode [ 200.967410][ T61] team_slave_1: left promiscuous mode [ 200.985993][ T61] bond0 (unregistering): Released all slaves [ 200.999553][ T61] bond1 (unregistering): Released all slaves [ 201.028209][T10353] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 201.037176][T10356] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 201.060170][T10345] lo speed is unknown, defaulting to 1000 [ 201.414389][T10373] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 201.445568][ T5114] Bluetooth: hci2: command tx timeout [ 201.448737][T10373] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 201.516772][T10373] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 201.535298][T10373] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 201.578699][T10339] chnl_net:caif_netlink_parms(): no params data found [ 201.676498][T10161] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 201.979177][T10339] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.014226][T10339] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.032574][T10339] bridge_slave_0: entered allmulticast mode [ 202.043392][T10339] bridge_slave_0: entered promiscuous mode [ 202.053530][T10339] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.060902][T10339] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.069882][T10339] bridge_slave_1: entered allmulticast mode [ 202.092060][ T5114] Bluetooth: hci5: command tx timeout [ 202.093255][T10339] bridge_slave_1: entered promiscuous mode [ 202.145776][T10396] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 202.327421][T10339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.361392][T10339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.384002][ T61] hsr_slave_0: left promiscuous mode [ 202.391138][ T61] hsr_slave_1: left promiscuous mode [ 202.398257][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.412046][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.420422][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.428303][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.451257][ T61] veth1_macvtap: left promiscuous mode [ 202.457318][ T61] veth0_macvtap: left promiscuous mode [ 202.463034][ T61] veth0_vlan: left promiscuous mode [ 203.025425][ T61] team0 (unregistering): Port device team_slave_1 removed [ 203.080044][ T61] team0 (unregistering): Port device team_slave_0 removed [ 203.525347][ T5114] Bluetooth: hci2: command tx timeout [ 203.701162][T10339] team0: Port device team_slave_0 added [ 203.744757][T10339] team0: Port device team_slave_1 added [ 203.787036][T10345] chnl_net:caif_netlink_parms(): no params data found [ 203.909131][T10339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.925939][T10339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.979933][T10339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.001681][T10339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.015836][T10339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.083504][T10339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.122222][T10161] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.167128][ T5114] Bluetooth: hci5: command tx timeout [ 204.262968][T10339] hsr_slave_0: entered promiscuous mode [ 204.271332][T10339] hsr_slave_1: entered promiscuous mode [ 204.277904][T10339] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 204.285970][T10339] Cannot create hsr debugfs directory [ 204.315928][T10345] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.320305][ T61] IPVS: stop unused estimator thread 0... [ 204.324067][T10345] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.340803][T10345] bridge_slave_0: entered allmulticast mode [ 204.348838][T10345] bridge_slave_0: entered promiscuous mode [ 204.358408][T10345] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.367517][T10345] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.374824][T10345] bridge_slave_1: entered allmulticast mode [ 204.383387][T10345] bridge_slave_1: entered promiscuous mode [ 204.459394][T10345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.473031][T10345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.563970][T10345] team0: Port device team_slave_0 added [ 204.620975][T10345] team0: Port device team_slave_1 added [ 204.678097][ T61] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 65023 - 0 [ 204.688838][ T61] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.705757][T10447] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.4'. [ 204.784333][ T61] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 65023 - 0 [ 204.794953][ T61] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.844710][T10449] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 204.857732][T10345] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.864752][T10345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.894558][T10345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.910355][T10161] veth0_vlan: entered promiscuous mode [ 204.923029][T10449] netlink: 408 bytes leftover after parsing attributes in process `syz-executor.4'. [ 204.964966][ T61] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 65023 - 0 [ 204.999684][ T61] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.030598][T10345] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.050927][T10345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.091517][T10345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.174203][T10457] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 205.227786][ T61] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 65023 - 0 [ 205.250674][ T61] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.308992][T10468] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 205.363775][T10161] veth1_vlan: entered promiscuous mode [ 205.387918][T10345] hsr_slave_0: entered promiscuous mode [ 205.394871][T10345] hsr_slave_1: entered promiscuous mode [ 205.402600][T10345] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 205.410378][T10345] Cannot create hsr debugfs directory [ 205.607068][ T5122] Bluetooth: hci2: command tx timeout [ 206.054623][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.067822][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.079130][ T61] bond0 (unregistering): Released all slaves [ 206.193721][ T61] tipc: Disabling bearer [ 206.245310][ T5122] Bluetooth: hci5: command tx timeout [ 206.252571][ T61] tipc: Left network mode [ 206.329076][T10161] veth0_macvtap: entered promiscuous mode [ 206.336242][ T61] IPVS: stopping backup sync thread 7558 ... [ 206.353075][T10161] veth1_macvtap: entered promiscuous mode [ 206.391379][T10161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.406438][T10161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.416513][T10161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.428500][T10161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.429788][T10483] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.3'. [ 206.440472][T10161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.461582][T10161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.472340][T10161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.483157][T10161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.493906][T10161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.504648][T10161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.514894][T10161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.525824][T10161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.535846][T10161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.547274][T10161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.565436][T10161] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 206.658241][T10161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.681314][T10161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.711619][T10161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.732681][T10161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.760070][T10161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.783625][T10161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.796486][T10161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.817471][T10161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.839453][T10161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.861420][T10161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.884171][T10161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.896861][T10161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.906986][T10161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.917628][T10161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.933046][T10161] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.010743][T10161] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.020316][T10161] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.030672][T10161] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.053375][T10161] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.176248][T10496] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 207.198405][T10496] netlink: 408 bytes leftover after parsing attributes in process `syz-executor.3'. [ 207.431510][ T61] batman_adv: batadv0: Removing interface: team0 [ 207.444669][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.462112][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.487079][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.501808][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.541949][ T61] veth0_macvtap: left promiscuous mode [ 207.553134][ T61] veth0_vlan: left promiscuous mode [ 207.685509][ T5122] Bluetooth: hci2: command tx timeout [ 208.076269][ T61] team0 (unregistering): Port device team_slave_1 removed [ 208.123695][ T61] team0 (unregistering): Port device team_slave_0 removed [ 208.266934][ T61] bridge_slave_0 (unregistering): left allmulticast mode [ 208.339334][ T5122] Bluetooth: hci5: command tx timeout [ 208.681018][T10498] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 208.710586][ T6649] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.737929][ T6649] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.843722][ T987] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.875134][ T987] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.980585][T10339] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 209.057130][T10339] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 209.078673][T10339] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 209.125209][T10339] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 209.210760][T10526] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.1'. [ 209.236338][T10345] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 209.260921][T10345] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 209.297902][T10345] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 209.321184][T10345] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 209.537414][T10537] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 209.788383][T10548] xt_TCPMSS: Only works on TCP SYN packets [ 209.838395][T10339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.852822][T10539] __nla_validate_parse: 1 callbacks suppressed [ 209.852842][T10539] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 209.888472][T10548] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 209.929221][T10345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.954197][T10339] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.000380][T10548] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 210.057480][ T5160] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.064706][ T5160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.091007][T10345] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.112038][ T5160] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.119238][ T5160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.147445][ T930] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.154589][ T930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.188680][ T930] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.195869][ T930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.220652][T10556] netlink: 658 bytes leftover after parsing attributes in process `syz-executor.4'. [ 210.601466][T10575] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 210.643041][T10575] netlink: 199892 bytes leftover after parsing attributes in process `syz-executor.1'. [ 210.762541][T10339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.969924][T10339] veth0_vlan: entered promiscuous mode [ 210.993206][T10345] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.024954][T10339] veth1_vlan: entered promiscuous mode [ 211.103821][T10595] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.1'. [ 211.153138][T10345] veth0_vlan: entered promiscuous mode [ 211.202672][T10339] veth0_macvtap: entered promiscuous mode [ 211.228229][T10345] veth1_vlan: entered promiscuous mode [ 211.250889][T10339] veth1_macvtap: entered promiscuous mode [ 211.319260][T10339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.351753][T10339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.375099][T10339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.395995][T10339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.415477][T10339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.453500][T10339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.495970][T10339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.515556][T10339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.545429][T10339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.590790][T10339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.637121][T10339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.688696][T10339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.735118][T10339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.773514][T10339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.824373][T10339] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.876999][T10606] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 212.077987][T10611] netlink: 408 bytes leftover after parsing attributes in process `syz-executor.4'. [ 212.271277][T10606] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 212.287844][T10339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.316162][T10339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.329831][T10339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.348107][T10339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.361159][T10339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.372655][T10339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.400143][T10339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.433454][T10339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.461909][T10339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.477282][T10339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.503468][T10339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.530767][T10339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.541867][T10339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.553354][T10339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.596063][T10339] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.622858][T10636] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 212.625506][T10639] IPVS: set_ctl: invalid protocol: 33 100.1.1.2:20004 [ 212.651043][T10345] veth0_macvtap: entered promiscuous mode [ 212.683497][T10339] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.707413][T10339] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.726877][T10339] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.746844][T10339] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.781486][T10345] veth1_macvtap: entered promiscuous mode [ 212.892565][T10345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.916675][T10345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.937738][T10345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.956416][T10345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.977842][T10345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.997036][T10345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.027479][T10345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.046412][T10345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.075199][T10345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.091862][T10345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.105871][T10345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.125077][T10345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.144050][T10345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.165207][T10345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.181252][T10345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.197756][T10345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.218593][T10345] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.364166][T10345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.396274][T10345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.422877][T10345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.434102][T10345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.465199][T10345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.484100][T10345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.505230][T10345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.518450][T10345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.541611][T10345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.567263][T10345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.577721][T10345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.588374][T10345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.598660][T10345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.614835][T10345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.634085][T10345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.646281][T10345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.671627][T10345] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.716562][T10520] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.721494][T10345] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.739216][T10520] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.775158][T10345] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.783982][T10345] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.807076][T10345] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.839437][T10664] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 213.901471][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.930467][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.148114][T10520] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.165834][T10520] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.246489][T10520] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.268812][T10520] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.663633][T10662] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 215.107029][T10700] __nla_validate_parse: 5 callbacks suppressed [ 215.107050][T10700] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 215.191910][T10700] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 215.280860][T10708] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 215.373425][T10719] syzkaller0: entered promiscuous mode [ 215.398759][T10719] syzkaller0: entered allmulticast mode [ 215.428154][T10722] netlink: 408 bytes leftover after parsing attributes in process `syz-executor.2'. [ 215.634457][T10730] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 215.653705][T10730] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 215.660998][T10730] IPv6: NLM_F_CREATE should be set when creating new route [ 215.668285][T10730] IPv6: NLM_F_CREATE should be set when creating new route [ 215.803895][T10722] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 215.911049][T10744] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 216.109597][T10751] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 216.130246][T10751] netlink: 516 bytes leftover after parsing attributes in process `syz-executor.4'. [ 216.159111][T10751] openvswitch: netlink: EtherType 0 is less than min 600 [ 216.275209][T10761] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 216.499881][T10779] gretap0: entered promiscuous mode [ 216.711821][T10791] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 216.729519][T10791] bridge_slave_1: left allmulticast mode [ 216.741050][T10791] bridge_slave_1: left promiscuous mode [ 216.766343][T10791] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.864852][T10791] bridge_slave_0: left allmulticast mode [ 216.875637][T10791] bridge_slave_0: left promiscuous mode [ 216.882186][T10791] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.020419][T10810] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 217.827224][T10857] bridge_slave_1: left allmulticast mode [ 217.833269][T10857] bridge_slave_1: left promiscuous mode [ 217.846773][T10857] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.863998][T10857] bridge_slave_0: left allmulticast mode [ 217.870227][T10857] bridge_slave_0: left promiscuous mode [ 217.889681][T10857] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.461238][T10868] netlink: 'syz-executor.1': attribute type 22 has an invalid length. [ 218.689878][T10883] dummy0: entered promiscuous mode [ 218.718023][T10883] vlan2: entered promiscuous mode [ 218.740239][T10883] vlan2: entered allmulticast mode [ 218.750830][T10883] dummy0: entered allmulticast mode [ 218.836184][T10883] dummy0: left allmulticast mode [ 218.843094][T10883] dummy0: left promiscuous mode [ 218.934231][T10898] bridge_slave_1: left allmulticast mode [ 218.941102][T10898] bridge_slave_1: left promiscuous mode [ 218.954092][T10898] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.010604][T10898] bridge_slave_0: left allmulticast mode [ 219.036495][T10898] bridge_slave_0: left promiscuous mode [ 219.061947][T10898] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.376050][T10914] IPv6: sit1: Disabled Multicast RS [ 219.388703][T10914] sit1: entered allmulticast mode [ 219.509737][T10921] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 220.212932][T10968] team0: Port device team_slave_0 removed [ 220.396820][T10977] __nla_validate_parse: 17 callbacks suppressed [ 220.396840][T10977] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 220.558215][ T45] IPVS: starting estimator thread 0... [ 220.577945][T10989] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 220.655486][T10990] IPVS: using max 18 ests per chain, 43200 per kthread [ 220.798970][T10996] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 220.848285][T10996] netlink: 666 bytes leftover after parsing attributes in process `syz-executor.1'. [ 221.242164][T11018] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 221.733934][T11044] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 222.118720][T11070] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 222.186448][T11072] tun0: tun_chr_ioctl cmd 2147767520 [ 222.467839][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 222.704334][T11106] vlan2: entered promiscuous mode [ 222.714238][T11112] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 222.789795][T11114] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 222.803649][T11118] tc_dump_action: action bad kind [ 223.072918][T11135] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 223.096457][T11135] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 223.230196][ T29] audit: type=1804 audit(1717976149.254:15): pid=11131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2099102232/syzkaller.j1obKs/298/cgroup.controllers" dev="sda1" ino=1965 res=1 errno=0 [ 223.605214][ T5114] Bluetooth: hci5: command 0x0405 tx timeout [ 224.604234][T11212] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 225.109540][T11232] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 226.497087][T11294] __nla_validate_parse: 2 callbacks suppressed [ 226.497108][T11294] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 227.792594][T11288] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 227.799962][T11288] IPv6: NLM_F_CREATE should be set when creating new route [ 227.978491][T11304] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 228.308403][T11334] netlink: 576 bytes leftover after parsing attributes in process `syz-executor.3'. [ 228.492892][T11343] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 228.734580][T11359] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 228.967301][T11373] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 229.289922][ T29] audit: type=1800 audit(1717976155.314:16): pid=11394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=1971 res=0 errno=0 [ 229.622371][T11407] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 229.628276][T11403] IPVS: length: 215 != 24 [ 229.769499][T11413] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 229.817842][T11415] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 229.974506][T11425] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 230.247116][ T29] audit: type=1800 audit(1717976156.264:17): pid=11431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1945 res=0 errno=0 [ 230.426406][T11436] IPVS: length: 215 != 24 [ 230.688734][T11450] openvswitch: netlink: EtherType 0 is less than min 600 [ 231.337591][T11486] IPVS: length: 215 != 24 [ 231.646671][T11510] __nla_validate_parse: 5 callbacks suppressed [ 231.646692][T11510] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 231.789660][T11519] batadv_slave_1: entered promiscuous mode [ 231.843019][T11517] batadv_slave_1: left promiscuous mode [ 231.933415][ T29] audit: type=1800 audit(1717976157.954:18): pid=11523 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1965 res=0 errno=0 [ 232.011183][T11526] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 232.312856][T11552] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 232.348614][T11555] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 232.671155][T11573] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 232.695988][T11573] netlink: 516 bytes leftover after parsing attributes in process `syz-executor.0'. [ 232.721757][T11573] openvswitch: netlink: EtherType 0 is less than min 600 [ 233.046403][T11593] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 233.117702][T11597] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 233.186348][T11597] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.3'. [ 233.198942][T11603] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 233.217532][T11599] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 233.241848][T11599] tipc: Started in network mode [ 233.247243][T11599] tipc: Node identity ac1414aa, cluster identity 4711 [ 233.258355][T11599] tipc: Enabled bearer , priority 10 [ 233.407456][T11613] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 233.535843][T11618] openvswitch: netlink: EtherType 0 is less than min 600 [ 233.910892][T11639] veth0: entered promiscuous mode [ 233.923595][T11639] macsec1: entered promiscuous mode [ 233.943702][T11639] macsec1: entered allmulticast mode [ 233.977878][T11639] veth0: entered allmulticast mode [ 234.004465][T11639] veth0: left allmulticast mode [ 234.031934][T11639] veth0: left promiscuous mode [ 234.261115][T11664] openvswitch: netlink: EtherType 0 is less than min 600 [ 234.375225][ T25] tipc: Node number set to 2886997162 [ 234.639215][T11687] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 234.674292][T11687] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 234.880166][T11702] netlink: 'syz-executor.0': attribute type 62 has an invalid length. [ 235.014391][T11710] openvswitch: netlink: EtherType 0 is less than min 600 [ 235.778108][T11751] openvswitch: netlink: EtherType 0 is less than min 600 [ 235.818019][T11757] bond0: option lp_interval: invalid value (0) [ 235.831075][T11757] bond0: option lp_interval: allowed values 1 - 2147483647 [ 235.849778][T11757] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 2147221507 (only 8 groups) [ 236.552678][T11797] bond0: entered promiscuous mode [ 236.566125][T11797] bond_slave_0: entered promiscuous mode [ 236.580217][T11797] bond_slave_1: entered promiscuous mode [ 236.747666][T11811] __nla_validate_parse: 17 callbacks suppressed [ 236.747687][T11811] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 236.775775][T11811] netlink: 408 bytes leftover after parsing attributes in process `syz-executor.0'. [ 236.869460][T11809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.937456][T11809] team0: Port device batadv0 added [ 237.044692][T11823] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 237.169933][T11833] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 237.209197][T11835] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 237.381373][T11843] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 237.514965][T11849] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 237.538718][T11849] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 237.569311][T11849] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 237.640444][T11858] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 237.880671][T11871] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 238.043382][T11878] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 238.191943][T11886] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 238.263714][T11890] x_tables: ip_tables: ah match: only valid for protocol 51 [ 239.384836][T11953] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 239.415420][T11955] lo speed is unknown, defaulting to 1000 [ 239.515402][T11960] openvswitch: netlink: EtherType 0 is less than min 600 [ 239.756021][T11973] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 240.602752][ T29] audit: type=1800 audit(1717976166.624:19): pid=12006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1957 res=0 errno=0 [ 240.636940][ T29] audit: type=1804 audit(1717976166.624:20): pid=12006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir76806823/syzkaller.9JhOrV/107/memory.events" dev="sda1" ino=1957 res=1 errno=0 [ 240.663671][ T29] audit: type=1804 audit(1717976166.624:21): pid=12006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir76806823/syzkaller.9JhOrV/107/memory.events" dev="sda1" ino=1957 res=1 errno=0 [ 241.109170][T12021] bridge_slave_0: entered promiscuous mode [ 241.115981][T12021] bridge_slave_0: entered allmulticast mode [ 241.432259][T12033] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 241.803730][T12055] veth0: entered promiscuous mode [ 241.809215][T12055] macsec1: entered promiscuous mode [ 241.819235][T12055] macsec1: entered allmulticast mode [ 241.824737][T12055] veth0: entered allmulticast mode [ 241.842462][T12055] veth0: left allmulticast mode [ 241.848415][T12055] veth0: left promiscuous mode [ 241.900339][T12059] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 242.017382][T12071] x_tables: duplicate underflow at hook 3 [ 242.249710][T12094] __nla_validate_parse: 15 callbacks suppressed [ 242.249730][T12094] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 242.327908][T12094] netlink: 516 bytes leftover after parsing attributes in process `syz-executor.0'. [ 242.375214][T12094] openvswitch: netlink: EtherType 0 is less than min 600 [ 242.438264][T12108] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 242.466411][T12109] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 242.480645][T12102] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 242.512808][T12102] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. [ 242.650319][T12117] bond0: entered promiscuous mode [ 242.799443][T12129] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 243.044042][T12136] lo speed is unknown, defaulting to 1000 [ 243.153286][T12141] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 243.350603][T12146] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 243.499056][T12153] TCP: request_sock_TCPv6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 243.535272][T12156] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 243.616799][T12154] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 244.316433][T12186] x_tables: unsorted underflow at hook 3 [ 245.304499][T12230] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 245.357224][T12226] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 245.478879][T12236] batadv0: entered promiscuous mode [ 245.546336][T12235] batadv0: left promiscuous mode [ 245.759475][T12257] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 246.040618][T12279] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 246.348114][T12293] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 246.657674][T12316] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 246.751651][T12319] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 246.782323][T12319] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 246.846978][T12324] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 247.444072][T12357] syz-executor.4[12357] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 247.444205][T12357] syz-executor.4[12357] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 247.480828][T12358] __nla_validate_parse: 17 callbacks suppressed [ 247.480850][T12358] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 247.617435][T12365] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 247.637047][T12365] netlink: 408 bytes leftover after parsing attributes in process `syz-executor.1'. [ 247.672880][T12366] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 247.799366][T12375] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.3'. [ 247.840046][T12378] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 248.010445][ T5125] Bluetooth: hci6: command 0x0406 tx timeout [ 248.010455][ T53] Bluetooth: hci4: command 0x0405 tx timeout [ 248.574149][T12405] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 248.727645][T12416] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 249.009213][T12423] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 249.637076][T12441] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 249.686501][T12442] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 249.884542][T12452] tipc: Enabling of bearer rejected, failed to enable media [ 250.861438][T12491] xt_TCPMSS: Only works on TCP SYN packets [ 250.883746][T12488] rdma_op ffff88801fddc1f0 conn xmit_rdma 0000000000000000 [ 250.931614][T12494] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 250.971066][T12491] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 251.102798][T12488] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 251.797735][T12522] unsupported nla_type 1280 [ 251.973002][T12531] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 252.641835][T12561] __nla_validate_parse: 8 callbacks suppressed [ 252.641854][T12561] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 252.979764][ T6646] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.053625][ T5114] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 253.070128][ T5114] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 253.081425][ T5114] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 253.093875][ T5114] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 253.102146][ T5114] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 253.112193][ T5114] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 253.251134][ T6646] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.424288][ T6646] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.459900][T12567] lo speed is unknown, defaulting to 1000 [ 253.543434][ T6646] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.689662][ T6646] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 254.716465][ T6646] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 254.738855][ T6646] bond0 (unregistering): Released all slaves [ 255.215411][ T5114] Bluetooth: hci2: command tx timeout [ 255.289998][T12623] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'. [ 255.311968][T12621] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 255.329045][T12611] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 255.355362][T12624] netlink: 408 bytes leftover after parsing attributes in process `syz-executor.0'. [ 255.549003][T12625] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 255.894672][ T6646] hsr_slave_0: left promiscuous mode [ 255.919995][ T6646] hsr_slave_1: left promiscuous mode [ 255.947333][ T6646] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.960924][ T6646] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 255.985828][ T6646] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.993283][ T6646] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.069089][ T6646] veth1_macvtap: left promiscuous mode [ 256.078873][ T6646] veth0_macvtap: left promiscuous mode [ 256.087863][ T6646] veth1_vlan: left promiscuous mode [ 256.093659][ T6646] veth0_vlan: left promiscuous mode [ 256.174426][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.558602][T12663] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 256.970510][ T6646] team0 (unregistering): Port device team_slave_1 removed [ 257.022323][ T6646] team0 (unregistering): Port device team_slave_0 removed [ 257.287524][ T5114] Bluetooth: hci2: command tx timeout [ 257.304096][ T6646] team0 (unregistering): Port device batadv0 removed [ 257.507664][T12654] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 257.534300][T12656] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 257.557526][T12659] netlink: 408 bytes leftover after parsing attributes in process `syz-executor.3'. [ 257.580546][T12664] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 257.689715][T12567] chnl_net:caif_netlink_parms(): no params data found [ 257.986875][T12567] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.006901][T12567] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.032163][T12567] bridge_slave_0: entered allmulticast mode [ 258.059841][T12567] bridge_slave_0: entered promiscuous mode [ 258.079059][T12693] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 258.091972][T12567] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.109585][T12567] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.124800][T12567] bridge_slave_1: entered allmulticast mode [ 258.149553][T12567] bridge_slave_1: entered promiscuous mode [ 258.280510][T12567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.356665][T12567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.420554][T12708] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 258.571176][T12567] team0: Port device team_slave_0 added [ 258.599594][T12718] IPVS: set_ctl: invalid protocol: 60 224.0.0.1:20004 [ 258.604105][T12567] team0: Port device team_slave_1 added [ 258.774886][T12567] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.812761][T12567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.843539][T12567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.880634][T12567] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.909599][T12567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.949306][T12735] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 258.952617][T12567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.991391][T12738] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.1'. [ 259.036240][T12738] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 259.110024][T12567] hsr_slave_0: entered promiscuous mode [ 259.128229][T12567] hsr_slave_1: entered promiscuous mode [ 259.141951][T12567] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 259.159266][T12567] Cannot create hsr debugfs directory [ 259.171424][T12741] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 259.181466][T12748] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 259.201780][T12745] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 259.372357][ T5114] Bluetooth: hci2: command tx timeout [ 259.694250][T12770] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 259.798329][T12771] delete_channel: no stack [ 259.852235][T12788] netlink: 516 bytes leftover after parsing attributes in process `syz-executor.1'. [ 259.861952][T12788] openvswitch: netlink: EtherType 0 is less than min 600 [ 260.110334][T12803] bond0: (slave vlan2): Opening slave failed [ 260.324861][T12567] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 260.373923][T12567] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 260.419122][T12818] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 260.445876][T12818] nbd: must specify at least one socket [ 260.486241][T12823] netlink: zone id is out of range [ 260.491453][T12823] netlink: zone id is out of range [ 260.501082][T12567] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 260.538925][T12567] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 260.548350][T12823] netlink: zone id is out of range [ 260.564751][T12823] netlink: zone id is out of range [ 260.571833][T12823] netlink: zone id is out of range [ 260.577666][T12823] netlink: zone id is out of range [ 260.583755][T12823] netlink: zone id is out of range [ 260.590096][T12823] netlink: zone id is out of range [ 260.906205][T12567] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.984870][T12567] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.038087][T12090] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.045294][T12090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.073846][T12090] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.081067][T12090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.445569][ T5114] Bluetooth: hci2: command tx timeout [ 261.754910][T12567] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.950155][T12567] veth0_vlan: entered promiscuous mode [ 261.992403][T12567] veth1_vlan: entered promiscuous mode [ 262.016750][T12898] lo speed is unknown, defaulting to 1000 [ 262.109360][T12567] veth0_macvtap: entered promiscuous mode [ 262.172137][T12567] veth1_macvtap: entered promiscuous mode [ 262.303364][T12567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.353513][T12567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.395195][T12567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.435164][T12567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.461908][T12567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.502338][T12567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.553974][T12567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.605366][T12567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.636863][T12567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.671415][T12567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.703026][T12567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.722312][T12567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.743148][T12567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.765575][T12567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.789372][T12567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.814294][T12567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.844948][T12567] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.903239][T12567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.955130][T12567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.995028][T12567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.995703][T12940] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 263.022473][T12567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.055182][T12567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.074467][T12567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.085454][T12567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.110345][T12567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.130952][T12567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.143303][T12567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.153549][T12567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.165828][T12567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.181879][T12567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.203080][T12567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.214974][T12567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.227977][T12567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.240764][T12567] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 263.277247][T12567] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.288716][T12567] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.310529][T12567] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.325588][T12567] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.364573][T12955] __nla_validate_parse: 8 callbacks suppressed [ 263.364592][T12955] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 263.623239][T12961] netlink: 'syz-executor.3': attribute type 13 has an invalid length. [ 263.631803][ T2932] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.650359][T12961] digital: digital_start_poll: Unknown protocol [ 263.651819][ T2932] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.822811][ T2932] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.834630][ T2932] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.495878][ T5162] IPVS: starting estimator thread 0... [ 264.595248][T12992] IPVS: using max 18 ests per chain, 43200 per kthread [ 264.682128][T13001] netlink: 14444 bytes leftover after parsing attributes in process `syz-executor.0'. [ 264.873237][T13005] xt_TCPMSS: Only works on TCP SYN packets [ 265.124130][T13017] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 265.300314][ T29] audit: type=1800 audit(1717976191.324:22): pid=13029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1970 res=0 errno=0 [ 265.467039][T13030] netlink: 14444 bytes leftover after parsing attributes in process `syz-executor.0'. [ 265.523738][T13038] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'. [ 265.542034][T13038] 0ª: renamed from bond_slave_0 (while UP) [ 265.550990][T13038] 0ª: entered allmulticast mode [ 265.602925][T13040] pimreg: entered allmulticast mode [ 265.612481][T13040] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 265.629892][T13040] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.0'. [ 265.647257][T13040] pimreg: left allmulticast mode [ 265.839583][T13046] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 265.907948][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88802b606000: rx timeout, send abort [ 265.916631][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff88802b606000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 266.155332][T13064] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 266.258150][T13073] netlink: 14444 bytes leftover after parsing attributes in process `syz-executor.0'. [ 266.528632][T13094] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 266.815686][T13100] IPv6: Can't replace route, no match found [ 267.110561][T13120] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 267.172335][T13120] dummy0: entered promiscuous mode [ 267.200766][T13120] batman_adv: batadv0: Adding interface: macsec2 [ 267.226341][T13120] batman_adv: batadv0: The MTU of interface macsec2 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.255676][T13120] batman_adv: batadv0: Interface activated: macsec2 [ 267.263903][T13128] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 267.279047][T13128] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 267.293042][T13129] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.325370][T13129] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.352767][T13129] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.382823][T13129] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.409646][T13129] batman_adv: batadv0: Interface deactivated: macsec2 [ 267.432760][T13129] batman_adv: batadv0: Removing interface: macsec2 [ 267.587531][T13141] IPv6: Can't replace route, no match found [ 267.736042][T13145] netlink: 'syz-executor.2': attribute type 6 has an invalid length. [ 267.770018][T13146] syz-executor.2[13146] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 267.770241][T13146] syz-executor.2[13146] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 267.888189][T13153] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 268.375673][T13183] __nla_validate_parse: 8 callbacks suppressed [ 268.375694][T13183] netlink: 248 bytes leftover after parsing attributes in process `syz-executor.3'. [ 268.441931][T13189] net_ratelimit: 120 callbacks suppressed [ 268.441950][T13189] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 268.469099][T13188] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 268.705745][T13201] caif0: Master is either lo or non-ether device [ 268.723901][T13208] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 269.292999][T13238] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 269.305696][T13237] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 269.328863][T13242] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 269.494481][T13253] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 269.518636][T13252] netlink: 1072 bytes leftover after parsing attributes in process `syz-executor.1'. [ 269.918468][T13278] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 269.940835][T13279] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 269.948476][T13274] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.2'. [ 269.996810][T13274] IPv6: Can't replace route, no match found [ 270.142868][T13285] veth1_macvtap: left promiscuous mode [ 270.153030][T13285] macsec0: entered allmulticast mode [ 270.285247][T13287] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 270.309126][T13287] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 270.346763][T13294] Â: renamed from pim6reg1 [ 270.352933][T13287] netlink: 9328 bytes leftover after parsing attributes in process `syz-executor.3'. [ 270.394812][T13287] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 270.486722][T13302] xt_connbytes: Forcing CT accounting to be enabled [ 270.493562][T13302] Cannot find add_set index 0 as target [ 270.533663][T13304] 0ªX¹¦À: renamed from caif0 [ 270.559514][T13304] 0ªX¹¦À: entered allmulticast mode [ 270.566057][T13304] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 270.780264][T13311] Êü: entered promiscuous mode [ 271.115992][T13337] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 271.139085][T13340] Bluetooth: hci3: invalid length 0, exp 2 for type 4 [ 271.156270][T13337] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 271.611263][T13364] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 4095 (only 8 groups) [ 272.298084][T13395] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 272.838725][T13425] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 273.054157][T13434] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 273.748845][T13476] __nla_validate_parse: 17 callbacks suppressed [ 273.748868][T13476] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 273.910238][T13483] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 274.008954][T13493] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 274.238264][T13501] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 275.017563][T13498] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 275.065289][T12087] IPVS: starting estimator thread 0... [ 275.104445][T13514] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 275.151929][T13514] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 275.195454][T13520] IPVS: using max 25 ests per chain, 60000 per kthread [ 275.196523][T13514] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 275.276056][T13525] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 275.289032][T13525] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 275.314301][T13525] netlink: 16074 bytes leftover after parsing attributes in process `syz-executor.0'. [ 275.391277][T13531] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 275.474709][T13535] syz-executor.1 uses old SIOCAX25GETINFO [ 275.900393][T13557] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 276.121934][T13569] netlink: 'syz-executor.1': attribute type 12 has an invalid length. [ 276.151217][T13569] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. [ 276.180858][T13571] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 276.257753][T13573] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 276.409036][T13582] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 277.084082][T13633] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 277.177277][T13639] IPVS: lc: TCP 172.20.20.170:0 - no destination available [ 277.643715][T13655] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 278.161491][T13677] ipip0: entered promiscuous mode [ 278.278536][T13685] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 278.445730][T13698] syz-executor.3: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 278.482028][T13698] CPU: 0 PID: 13698 Comm: syz-executor.3 Not tainted 6.10.0-rc2-syzkaller-00442-g924ee5317548 #0 [ 278.492683][T13698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 278.502771][T13698] Call Trace: [ 278.506069][T13698] [ 278.509016][T13698] dump_stack_lvl+0x241/0x360 [ 278.513812][T13698] ? __pfx_dump_stack_lvl+0x10/0x10 [ 278.519035][T13698] ? __pfx__printk+0x10/0x10 [ 278.523637][T13698] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 278.530057][T13698] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 278.536592][T13698] warn_alloc+0x278/0x410 [ 278.540944][T13698] ? stack_depot_save_flags+0x29/0x830 [ 278.546424][T13698] ? __vmalloc_node_range_noprof+0x10b/0x1460 [ 278.552512][T13698] ? __pfx_warn_alloc+0x10/0x10 [ 278.557391][T13698] ? kasan_save_track+0x3f/0x80 [ 278.562258][T13698] ? __kasan_kmalloc+0x98/0xb0 [ 278.567053][T13698] ? xsk_setsockopt+0x4ea/0x950 [ 278.571926][T13698] ? do_sock_setsockopt+0x3af/0x720 [ 278.577147][T13698] ? __sys_setsockopt+0x1ae/0x250 [ 278.582276][T13698] ? __x64_sys_setsockopt+0xb5/0xd0 [ 278.587584][T13698] ? do_syscall_64+0xf3/0x230 [ 278.592438][T13698] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.598515][T13698] __vmalloc_node_range_noprof+0x130/0x1460 [ 278.604432][T13698] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 278.610764][T13698] ? __kasan_kmalloc+0x98/0xb0 [ 278.615526][T13698] ? xskq_create+0x54/0x170 [ 278.620030][T13698] vmalloc_user_noprof+0x74/0x80 [ 278.625051][T13698] ? xskq_create+0xb6/0x170 [ 278.629553][T13698] xskq_create+0xb6/0x170 [ 278.633877][T13698] xsk_init_queue+0xa1/0x100 [ 278.638463][T13698] xsk_setsockopt+0x4ea/0x950 [ 278.643132][T13698] ? __pfx_xsk_setsockopt+0x10/0x10 [ 278.648321][T13698] ? __might_fault+0xaa/0x120 [ 278.652996][T13698] ? __pfx_lock_release+0x10/0x10 [ 278.658011][T13698] ? aa_sock_opt_perm+0x79/0x120 [ 278.662944][T13698] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 278.668487][T13698] ? security_socket_setsockopt+0x87/0xb0 [ 278.674206][T13698] ? __pfx_xsk_setsockopt+0x10/0x10 [ 278.679397][T13698] do_sock_setsockopt+0x3af/0x720 [ 278.684420][T13698] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 278.689980][T13698] __sys_setsockopt+0x1ae/0x250 [ 278.694822][T13698] __x64_sys_setsockopt+0xb5/0xd0 [ 278.699840][T13698] do_syscall_64+0xf3/0x230 [ 278.704355][T13698] ? clear_bhb_loop+0x35/0x90 [ 278.709049][T13698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.714964][T13698] RIP: 0033:0x7f5bdf07cf69 [ 278.719392][T13698] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 278.739089][T13698] RSP: 002b:00007f5bdfe1a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 278.747503][T13698] RAX: ffffffffffffffda RBX: 00007f5bdf1b3f80 RCX: 00007f5bdf07cf69 [ 278.755465][T13698] RDX: 0000000000000005 RSI: 000000000000011b RDI: 0000000000000003 [ 278.763430][T13698] RBP: 00007f5bdf0da6fe R08: 0000000000000018 R09: 0000000000000000 [ 278.771401][T13698] R10: 0000000020000840 R11: 0000000000000246 R12: 0000000000000000 [ 278.779372][T13698] R13: 000000000000004d R14: 00007f5bdf1b3f80 R15: 00007fff66d89e48 [ 278.787361][T13698] [ 278.816530][ T30] INFO: task syz-executor.0:7429 blocked for more than 143 seconds. [ 278.825595][ T30] Not tainted 6.10.0-rc2-syzkaller-00442-g924ee5317548 #0 [ 278.827667][T13698] Mem-Info: [ 278.843830][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 278.847789][T13698] active_anon:18483 inactive_anon:0 isolated_anon:0 [ 278.847789][T13698] active_file:0 inactive_file:47002 isolated_file:0 [ 278.847789][T13698] unevictable:768 dirty:66 writeback:0 [ 278.847789][T13698] slab_reclaimable:11825 slab_unreclaimable:114810 [ 278.847789][T13698] mapped:26242 shmem:1657 pagetables:701 [ 278.847789][T13698] sec_pagetables:0 bounce:0 [ 278.847789][T13698] kernel_misc_reclaimable:0 [ 278.847789][T13698] free:1334844 free_pcp:1250 free_cma:0 2024/06/09 23:36:44 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 278.853185][ T30] task:syz-executor.0 state:D stack:23800 pid:7429 tgid:7428 ppid:5116 flags:0x00004006 [ 279.006481][T13698] Node 0 active_anon:72932kB inactive_anon:0kB active_file:0kB inactive_file:187944kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:69468kB dirty:264kB writeback:0kB shmem:5092kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11260kB pagetables:2004kB sec_pagetables:0kB all_unreclaimable? no [ 279.045502][ T30] Call Trace: [ 279.048833][ T30] [ 279.068371][ T30] __schedule+0x17e8/0x4a20 [ 279.073838][ T30] ? __pfx___schedule+0x10/0x10 [ 279.085152][ T30] ? __pfx_lock_release+0x10/0x10 [ 279.090217][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 279.105175][T13698] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:64kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 279.136297][ T30] ? schedule+0x90/0x320 [ 279.140581][ T30] schedule+0x14b/0x320 [ 279.144759][ T30] schedule_preempt_disabled+0x13/0x30 [ 279.150707][ T30] __mutex_lock+0x6a4/0xd70 [ 279.155441][ T30] ? __mutex_lock+0x527/0xd70 [ 279.160146][ T30] ? nfsd_nl_rpc_status_get_start+0x8d/0xe0 [ 279.167617][T13698] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 279.225506][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 279.230606][ T30] ? net_generic+0x1f/0x240 [ 279.245226][ T30] nfsd_nl_rpc_status_get_start+0x8d/0xe0 [ 279.250997][ T30] genl_start+0x4d6/0x6d0 [ 279.256019][T13698] lowmem_reserve[]: 0 2571 2571 0 0 [ 279.261292][T13698] Node 0 DMA32 free:1402564kB boost:0kB min:35108kB low:43884kB high:52660kB reserved_highatomic:0KB active_anon:43080kB inactive_anon:0kB active_file:0kB inactive_file:187652kB unevictable:1536kB writepending:260kB present:3129332kB managed:2659884kB mlocked:0kB bounce:0kB free_pcp:10164kB local_pcp:2144kB free_cma:0kB [ 279.292921][ T30] __netlink_dump_start+0x45c/0x780 [ 279.298645][ T30] genl_rcv_msg+0x88c/0xec0 [ 279.303182][ T30] ? mark_lock+0x9a/0x350 [ 279.308569][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 279.313633][ T30] ? __pfx_genl_start+0x10/0x10 [ 279.318914][ T30] ? __pfx_genl_dumpit+0x10/0x10 [ 279.323870][ T30] ? __pfx_genl_done+0x10/0x10 [ 279.328775][T13698] lowmem_reserve[]: 0 0 0 0 0 [ 279.333518][T13698] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:292kB unevictable:0kB writepending:4kB present:1048576kB managed:360kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 279.360792][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 279.366101][ T30] ? __pfx_nfsd_nl_rpc_status_get_start+0x10/0x10 [ 279.372540][ T30] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 279.380150][ T30] ? __pfx_nfsd_nl_rpc_status_get_done+0x10/0x10 [ 279.386894][T13698] lowmem_reserve[]: 0 0 0 0 0 [ 279.391651][T13698] Node 1 Normal free:3944996kB boost:0kB min:54788kB low:68484kB high:82180kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:64kB unevictable:1536kB writepending:0kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:3056kB local_pcp:0kB free_cma:0kB [ 279.421306][ T30] ? __pfx___might_resched+0x10/0x10 [ 279.427750][ T30] netlink_rcv_skb+0x1e3/0x430 [ 279.432543][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 279.437721][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 279.443042][ T30] ? __netlink_deliver_tap+0x77e/0x7c0 [ 279.449143][ T30] genl_rcv+0x28/0x40 [ 279.453151][ T30] netlink_unicast+0x7ea/0x980 [ 279.458093][T13698] lowmem_reserve[]: 0 0 0 0 0 [ 279.462845][T13698] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 279.476016][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 279.482121][ T30] ? __virt_addr_valid+0x183/0x520 [ 279.487501][T13698] Node 0 DMA32: 1294*4kB (UME) 903*8kB (UME) 634*16kB (UME) 392*32kB (UME) 178*64kB (UME) 101*128kB (UME) 46*256kB (UME) 14*512kB (UME) 13*1024kB (UM) 2*2048kB (M) 327*4096kB (UM) = 1435152kB [ 279.507006][ T30] ? __check_object_size+0x49c/0x900 [ 279.512330][ T30] ? bpf_lsm_netlink_send+0x9/0x10 [