last executing test programs: 3.555180867s ago: executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x0, 0xfff, 0x7}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000400)=ANY=[@ANYRES32], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x90) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080), 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r4, 0x0, 0x80000000000008, 0x0, 0x0) setsockopt$inet_opts(r4, 0x0, 0x0, &(0x7f00000000c0), 0x0) getsockopt$inet_opts(r4, 0x0, 0x9, 0x0, &(0x7f0000000080)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x54}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r6, @ANYBLOB="0100000000000000240012000c000100627269646765000e14000200080007004a9a0000080027"], 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280), 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170000014000280080004000104000005000a000100000008000a00", @ANYRES32=r8], 0x4c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newlink={0x40, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r9}]]}}}]}, 0x40}}, 0x0) 3.270334598s ago: executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$caif_stream(0x25, 0x1, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) socket(0x11, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x0, 0x80805, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="93630100200501001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x4c}}, 0x0) 2.797462063s ago: executing program 1: socket$netlink(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWCHAIN={0x14}], {0x14}}, 0xa4}}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r3}, &(0x7f0000000200), &(0x7f0000000380)='%ps \x00'}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x201, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002b80)={&(0x7f0000002bc0)='workqueue_activate_work\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cpuacct.usage_all\x00', 0x275a, 0x0) r6 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r6, 0x10d, 0xd, &(0x7f0000000000)=r5, 0x4) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000008c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x3f0, 0x2b8, 0x188, 0x2b8, 0x0, 0x2b8, 0x358, 0x358, 0x358, 0x358, 0x358, 0x6, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'veth0_to_batadv\x00', 'macvtap0\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@TOS={0x28}}, {{@ip={@empty, @private, 0x0, 0x0, 'ip6tnl0\x00', 'team_slave_0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000280)=0x4) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r7) socket$packet(0x11, 0x2, 0x300) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22fdb911"], 0xffbf) 2.67706172s ago: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x0, 0x0, {0x13}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0xc, &(0x7f0000000000)=0x8, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xb, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x100}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.45621036s ago: executing program 2: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$caif_stream(0x25, 0x1, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) socket(0x11, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="93630100200501001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x4c}}, 0x0) 2.418285128s ago: executing program 1: r0 = socket(0x1d, 0x800, 0x5) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000085000000d00000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) recvmsg(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x20, 0x1e, 0x3c964e403b131b43}, 0x20}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ext4_da_write_pages\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) epoll_create(0x8) socket$caif_stream(0x25, 0x1, 0x0) socket$isdn_base(0x22, 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$ax25(0x3, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010003b15000000000000000000004888", @ANYRES32=0x0, @ANYBLOB="d530d995212cf95a2000128008000100687372001400028008000200", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES64=r4], 0x40}}, 0x0) 2.09447032s ago: executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES64=0x0, @ANYRES8=0x0, @ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x57, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="180000f700000000000000181100000000000000", @ANYRESOCT, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008212ea234c29ead90a1eea9819846dfe5e117939febdeedb0314416e98920d067bf4ca631a478c957611a5ff5baa0a20970befa1b6af712f0786ede172cbe53f9d452404c1d955e4b70f2cf0ed347c03600c6278569d0a28fb15f1a51ffd395d15b8669e8e1aacf804ca6dfb5ca632c9d91d6ab14af07e1f949c2b0a4039ed1ceb"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x90) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x7, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000640)={'vlan0\x00', 0x0}) sendto$packet(r2, &(0x7f00000002c0)="02030500d3fc030000004788031c09101128", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r6}, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) close(r7) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0x0, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x1ff, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040028bd7000fbdbdf251400000008000d000800000005001900010000002000018014000200766c616e31000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08001300ff0f0000080005007f000000080015002f09000005000b000100000008000800ff030000080007030100010008001300727d0000cf4054cb8bd20a73ed2e12408488abbf9601fe31ea46818a25cf62672db9d1a3c1bf56642ef579ede0d5c961fca483c4ae7f1203cb715a20d3c23ceea5bc66039ba12f8aa6c7d678f6e326c6b817bc44dd462dada7f5da028e7b9280d37dd727d154159e0a7dff1708a8dc492775f7f19dbede9a52fdea9ead3d48d2c3f8043f599f639c91192cf4fbd03f7e3511aa719c76d804940b0e8535d9de0bc25bd3b2b74b"], 0x7c}, 0x1, 0x0, 0x0, 0x40800}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r0, @ANYBLOB="0000001800000000b7080000000000007b8af8ff00000000bfa200000000000007020000f80000080018172de20000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.085016208s ago: executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000000), 0x4) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000440)='pids.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000400)=ANY=[@ANYRES32=r2], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x61}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r4}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)}, 0x0) recvmsg(r5, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000002480)=[{&(0x7f0000002440)=""/37, 0x25}], 0x1}, 0x120) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="10", 0x1}], 0x1}, 0x4001) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_lsm={0x9, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="18040000000000000000000000080000180000000000000000000000000000009c44e0ff0000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x34, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(morus1280)\x00'}, 0xd) accept4(r7, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="210100002100000000000000000000108500000075000000a50000002300000095df21d7163c718449d1"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x27c}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r8}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='qdisc_dequeue\x00', r9}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000200000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.899508917s ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.842220639s ago: executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="c99b9e7f2ab9238c09d0ffff1d0dbd30", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001800), 0x0, 0x20000000) recvmmsg(r1, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001640)=""/23, 0x17}, {&(0x7f0000001f00)=""/4108, 0x100c}], 0x2}, 0x40}], 0x1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETVIFCNT(r3, 0x89e0, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="2800000011000100000000000000000008f7193809a8000000000000000008000000ac1414bb0800"], 0x28}], 0x1}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000640)=0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='contention_end\x00'}, 0x10) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={0x4c, r5, 0x1, 0x0, 0x0, {0x4, 0x2, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x4c}, 0x1, 0x40030000000000}, 0x0) 1.728664484s ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x4, 0x1}, 0x48) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="0e000100020075"], 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000016c0)={0x6, 0xf, &(0x7f00000000c0)=@ringbuf={{}, {{0x18, 0x1, 0x2, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0xce}}}, &(0x7f0000000040)='GPL\x00'}, 0x90) socketpair(0x27, 0x5, 0x8, &(0x7f0000000000)={0xffffffffffffffff}) r3 = socket(0x1e, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000480), 0x4) sendmsg$tipc(r3, &(0x7f0000000300)={&(0x7f0000000680)=@name={0x1e, 0x2, 0x1, {{0x1, 0x4}, 0x3}}, 0x10, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x41}, 0x0) r6 = socket$inet(0x2, 0x6, 0x0) setsockopt$inet_opts(r6, 0x0, 0x4, 0x0, 0x0) connect$inet(r6, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) recvmmsg(r3, &(0x7f0000005f00)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000100)=""/53, 0x35}], 0x1, &(0x7f00000004c0)=""/164, 0xa4}}], 0x1, 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0xb, &(0x7f0000000000)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xc8}}]}, &(0x7f00000005c0)='syzkaller\x00', 0x7, 0x82, &(0x7f0000000380)=""/130}, 0x90) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_TX_POWER(r7, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x28, r8, 0x11, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xffffffffffffffcf, 0x6, 0x200000002}, @NL802154_ATTR_TX_POWER={0x7, 0xb, 0x4178}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040800}, 0x20014004) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r10, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r9, @ANYBLOB="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"], 0x21c}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4e93a195e42ef2c505728ce9856b9abbcce05351cb6e48ae96e1c5169cad556432bd7cb4d1b711384a96571030ceafc3a5b7c875ede91c0c91b373f2a1f20036e42e229a346ab9030616b24d10481dc720be4f736e3e1b135b756f1248af68a05ed6c28d4a16a6eb4eaaa626b47ba53f8bc1c2c7f666e69918898a406dd627eede2b832891d9c9e1fbebca702c6c6b907342bf566c8b7fda1e72ce5555d0daceef341d0faa3c0f57a73f365856e3c8e9c37b7ae353debf935282436518269943db85550e51bd5429ae224837ee271ee3b540d4a04d757922bfa1c98c3908d38456f2d48b562d567126", @ANYRES16=r9, @ANYBLOB="00022dbd7000ffdbdf25010000000800050001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20004090}, 0x40804) 1.436896801s ago: executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000700)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaaaaaaaa88a80000810000000800450000540000000000069078ac141400000000000000000097e9a06d101334cd1c8eac087d1a70c7b5f149", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="0000000090780000131279bd7f9fe04e691e36c6ae4da6a6fcef080a0000000000000000050e00"/52, @ANYRES8=0x0, @ANYRESHEX], 0x6e) 1.433708734s ago: executing program 4: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$caif_stream(0x25, 0x1, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) socket(0x11, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket(0x2, 0x80805, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="93630100200501001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x4c}}, 0x0) 1.191058918s ago: executing program 4: r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x40000042}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000001440)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10, 0x0}, 0x4000) 1.114939838s ago: executing program 0: r0 = socket(0x1d, 0x800, 0x5) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000085000000d00000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) recvmsg(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x20, 0x1e, 0x3c964e403b131b43}, 0x20}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ext4_da_write_pages\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200000a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d68b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e6d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfd8e012e79578e51bc5f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf01860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b803000000661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7b148ba532e6ea09c346dfebd38608b32a0080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e14861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16b089f37b3591a15c0a9be6eb18208404c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b74cd36e748fafa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f0844307df70f532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fda0f0a04935c3c90d3add8eebc8619d73415cda2130f50714600fb6241c6e955031795b2c2f56411e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0001002d8c38a967c1bbe09315c298774009d8c6a16c7da308bcc87dc3addb08141bdee5d2780cfef663ddeedd005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe00000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd805deb28c13c1ed1c0d9cae846bcbfa8cce7b893ebc68578af7dc7d5e87d44ff80800000034c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c568cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e80339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd52364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7dcf050000000000001491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c78974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000400000000000a5accf93bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9c46136a5755c47287eb00000000000000c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f3390343c12aa51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b179509bd9f263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fca4d97a0ae75ccf11e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35e9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff17320adda5867947257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a927de6f4c09f4b742e037381c85d2ec7bb2a8152f0d6a99a0370e0cbd65744eb2efd7b65f04aa7e72588757b9612bb4253a63bb303c0c68a07f115d104f2007237a4f771416741bfd63fdfe3ae6f8bea755d8b7202c2bbae137dc1c3cf40db74a4c1c219d8ddec8f91dae2cdea1353fe062830fa1d233296ec9d8317872257e154665485e7f31cdbfbf435517faf93015b57417d84b8bc8662e097d5ba55d02d48e150695ffae3a676555b10da11751865126d19336116a1e58ab727dda6b343cc97f9479136a66f552abf8fe3d134f6d69df1cffe6740f90735f66ca54fd87800b4bda4db5e68aaccf44d24e09f8a769e3ae7bf246673f15e3d1adae4384bdb7cd30a33e30466b421feb96006c810fd3830a1c75af2580727ffc604d2b04f476acc21419fad9b1baec88974da2db29b80859bde08b85c8086e4b7f1fd568042ad5396d3179c71b1dc43291e450ce9b8d7d80fcb44966d7ad4691a378700000000000000000000000000631ffc86fe0c8124536afbfc6300ee2c00000000000000000000000000000000000000000083a5765d06da91165d24bc316607e2d69344aa1c07ff7cd7bc3d17f122478b6e81077782b9c298edc2546045feff90e7aa7da88d2489fb000a4aa838f911c1a869fa55e979e033b7707df75b93cf5b8d25242741a88f2d54a7107375b25911aa11efa3a4f87fc14f180e353615b3cb9a5cf5ea843014a277c3694a5a83266f73ef039dd739187923715548d58ff43be997e35776e37c2b7772d0873369ba559e4a9ce9a7878a9a46f2a68adae0f3f5c0715b169ff053d8f5ab73d5f738b0edc71a287418ba45a14fd1ab423d9c392d010af2cf1356c6f78d563822afd3e8fb693ef3e1f1c02289e94b15a0a2a58e9c77a6d388004396baf8af32d0bd7fef1597b20e2eec0273012e344628a8ea5bd0a9da43078b95af7186d5bf36a2e31c0ee3e1ec6accd94b7e3b47e52681128c5b6fb2afbffaa52d53080f7ef112fdffffffffffffff0c1f7b4673fc5202bcc1159ba59b9b5c996079b6c2b9cc011470ce48b53c7339135e0a1e7c90b91a84cfaf95af6edc881ca69cb3d869fcd87a294447e3eb627923970281e28528348f9d0157c80ffd70dd45fc9ae550e191e9f88a1f15c2d997c217bb6d5d24e88d07837851b391ffcf3aa2183952ef4d68757c7511179f0984960b907016a4ad6ba19f89794b545f983e94a980f83794c277dd644651d721a0d0546b3e69b8530d9391068d67cfb4fe879c23933ec59d3e728113fdf3a28800512b9cef65523490caa4f5ec30ad6ded9879843ade683b3263197964e752ca77b966ae22e73a0cbbe549306e49d0e11662cf8bcccd8198ef44911ed6b86792086cc6c758d8c4a872041e58685d4134a5ee5063b4bb7e8035442b1cba567cfee96b3b858c9086c907ddddd16414545f1b94b34f081f3e6248699060d62f236b5204993cf42c180f757938a62b5f302cae4a4a7be523be2db61b74bab36d0e63e4469969482ada533c54bdc9c2ad0b7dce02c869e6c853f92d24823036f8b5f4a6f6f89e1a9cd003c714814277f32bd6d535dcc08c992f2938b2e265ff6bfbf38694255c367867d64c50b6f7f2fd131b5b30059ea2ed6bd2b887f808dee79a76d600883085436d79381d7a4a09c4d73f8046c72b206ae3b76429c719f80ab8ff65494f35a75916d81ce89b94ed2e07540d855ebb2e78bfbb354e29d6b905f2573bec68e340472006f3738f004c24edd7c538ad9f25bda4c443bc816a8fb38081adbf5a80f5cd6fde3aadd56a9283dfdcbf7fdd1b44e717c0b405b3261f19b1c38df6331df8e84619ef307875c893a8f0a436ccfb6319000000000000000000000000001f1c8231baae9e6b907826aa7431ee8ee9deb4db6dca3e4fa3df5cd4015a3771c25bff7d305689ff0a71d821fc6ee9d2d0069a6f4cb434e8183796f89825de4d251bbf526adcf572bd39c9817a51b50859c77eebd37709f0d65667a71700006103120886e81241c7186011c6949a9ef5eadb3ca1ba74d055196c80fe796f3550eef858d924ba6a93ea687720ffe78f1e2c98686d85575fbabee88e97d4dea9b7d8416d62f962b9202528fcc38eea7d2b4efca4e14fcbcc15e8"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) epoll_create(0x8) socket$caif_stream(0x25, 0x1, 0x0) socket$isdn_base(0x22, 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$ax25(0x3, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000200)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010003b15000000000000000000004888", @ANYRES32=0x0, @ANYBLOB="d530d995212cf95a2000128008000100687372001400028008000200", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES64=r4], 0x40}}, 0x0) 1.036161415s ago: executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x9, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xa0, 0x15}, [@call={0x45, 0x0, 0x0, 0xffffffff}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x8e, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x23) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000000)=0xff, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0x890b, &(0x7f0000001d00)={{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xf9b}}) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f0000002240), 0x0, 0x0, 0x0) unshare(0x22020400) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)=@generic={0x0, r2}, 0x18) r3 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r3, &(0x7f00000009c0)={&(0x7f0000000240)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="3c000000000000000000000007000000441454010000000000000000ac1414bb00000000004414000100000000000000000000000000000000000000000000001c000000000000000000000008000000", @ANYRESDEC=0x0], 0x60}, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f00000018c0)=0xd, 0x4) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0x12) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r4, &(0x7f00000000c0)="00e0aaf186249cfa587d4eec7f181af945a1031193bad2482c1aeb4d291b243333f23bdc6ff7229da42e2390403972b5759c3775ed26664e26a66d8284a5b7b74b9239dbee279ce834afb76fedbd9999e97402f8eb6a93b4b9064748756aa328a7e73ef9b38f17a54194c2cc950134a5771a8a92cefb34300583db2068a1bc9f91ce8cf4cd338deb27f8b09d07632443710bc9f1087e5e045778e71cc3d38ca3b9aa4e07a47f63cac9ad4a0c4eb4ac57ffeccf9963534408cc4857fb502472e9db62c6a227802af48be46a5a974da69eb9049d771072c9c294eacf703e3d4c8eb8b6e43657131e38985fa2eb6de86890d5e290fdf2000000", &(0x7f00000001c0)=""/52}, 0x20) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r5) sendmsg$NLBL_MGMT_C_ADDDEF(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r7, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x18, 0x2, 0x5}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}}, 0x0) 1.019509649s ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 874.433687ms ago: executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x10, 0x0, &(0x7f0000000280)) 871.751568ms ago: executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="c99b0700000000000000", 0xa) 783.73218ms ago: executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x5040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_META_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$binfmt_script(0xffffffffffffffff, &(0x7f00000001c0)={'#! ', './file0', [], 0xa, "0e8e25adf65928f5b011c411934ca4375ec4e8a7995c94b7ea34eea741f59811311589619015216e522cbd971bca8db102d62c9a07fe28daf10240566d77f0caf9b6dca993dd4f82f964f2c719eeeda8e93bbaae7fec2311d90fc75e94a1ff0873c45327096be9268c62595e7b0a8caab508f166"}, 0x7f) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000000280)={@local, 0x0}, &(0x7f00000002c0)=0x14) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000100)=r3, 0x4) r7 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r7, 0x110, 0x4, &(0x7f0000006640)=0x2, 0x4) r8 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r8, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r8, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) connect$rxrpc(r7, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xffffffbb) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)=@migrate={0x158, 0x21, 0x10e, 0x0, 0x25dfdbfc, {{@in=@empty, @in=@rand_addr=0x64010100, 0x4e24, 0x6, 0x4e21, 0xc46d, 0xa, 0x100, 0xa0, 0x4, r5, r9}, 0x6e6bb5, 0x2}, [@etimer_thresh={0x8}, @coaddr={0x14, 0xe, @in=@empty}, @algo_comp={0xa1, 0x3, {{'lzs\x00'}, 0x2c8, "c06fb863b1a28029ca17e34c226995c0f39d6f8164718f013fb32b923b16313e0caad11ec5ce1ae28e70c507b0d59f919704cd4b7f2afb81eeba9e5c4566c49fd5e0c30208783e67a0def80dabdc3b716190b04986e20d3260"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfffffff9}, @address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, '\x00', 0x1f}, @in6=@dev, 0xa, 0xdd, 0x3}}, @extra_flags={0x8, 0x18, 0x8}, @replay_val={0x10, 0xa, {0x70bd2c, 0x70bd27, 0x1f}}]}, 0x158}, 0x1, 0x0, 0x0, 0x40880}, 0x4c000) write$cgroup_int(r4, &(0x7f0000000000), 0x12) ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x7f}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) r10 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r10, 0x10c, 0x0, 0x0, &(0x7f0000000080)) 755.051411ms ago: executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800e00010069703665727370616e0000002c0002801400050000000000000000000000000000000001050016000200000004001200050017"], 0x60}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x49}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 683.00994ms ago: executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES64=0x0, @ANYRES8=0x0, @ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x57, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="180000f700000000000000181100000000000000", @ANYRESOCT, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008212ea234c29ead90a1eea9819846dfe5e117939febdeedb0314416e98920d067bf4ca631a478c957611a5ff5baa0a20970befa1b6af712f0786ede172cbe53f9d452404c1d955e4b70f2cf0ed347c03600c6278569d0a28fb15f1a51ffd395d15b8669e8e1aacf804ca6dfb5ca632c9d91d6ab14af07e1f949c2b0a4039ed1ceb"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x90) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x7, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000640)={'vlan0\x00', 0x0}) sendto$packet(r2, &(0x7f00000002c0)="02030500d3fc030000004788031c09101128", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r6}, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) close(r7) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0x0, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x1ff, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040028bd7000fbdbdf251400000008000d000800000005001900010000002000018014000200766c616e31000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08001300ff0f0000080005007f000000080015002f09000005000b000100000008000800ff030000080007030100010008001300727d0000cf4054cb8bd20a73ed2e12408488abbf9601fe31ea46818a25cf62672db9d1a3c1bf56642ef579ede0d5c961fca483c4ae7f1203cb715a20d3c23ceea5bc66039ba12f8aa6c7d678f6e326c6b817bc44dd462dada7f5da028e7b9280d37dd727d154159e0a7dff1708a8dc492775f7f19dbede9a52fdea9ead3d48d2c3f8043f599f639c91192cf4fbd03f7e3511aa719c76d804940b0e8535d9de0bc25bd3b2b74b"], 0x7c}, 0x1, 0x0, 0x0, 0x40800}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r0, @ANYBLOB="0000001800000000b7080000000000007b8af8ff00000000bfa200000000000007020000f80000080018172de20000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 571.437778ms ago: executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x9, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xa0, 0x15}, [@call={0x45, 0x0, 0x0, 0xffffffff}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x8e, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x23) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000000)=0xff, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0x890b, &(0x7f0000001d00)={{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xf9b}}) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r4, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x18, 0x2, 0x5}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}}, 0x0) 564.49567ms ago: executing program 0: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$caif_stream(0x25, 0x1, 0x0) socket(0x10, 0x3, 0x0) socket(0x11, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) socket(0x2, 0x80805, 0x0) socket$inet(0x2, 0x80001, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'team0\x00'}) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="93630100200501001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 296.540297ms ago: executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000700)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaaaaaaaa88a80000810000000800450000540000000000069078ac141400000000000000000097e9a06d101334cd1c8eac087d1a70c7b5f149", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="0000000090780000131279bd7f9fe04e691e36c6ae4da6a6fcef080a0000000000000000050e00"/52, @ANYRES8=0x0, @ANYRESHEX], 0x6e) 234.423979ms ago: executing program 0: r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x40000042}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000001440)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10, 0x0}, 0x0) 233.29571ms ago: executing program 3: ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000140)={'gre0\x00', 0x0, 0x1, 0x20, 0xffffff00, 0x101, {{0x19, 0x4, 0x0, 0x3, 0x64, 0x64, 0x0, 0x7, 0x4, 0x0, @multicast1, @loopback, {[@ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0xf, 0x2, [{0x0, 0x9, "cc56d5160d5b54"}]}, @ssrr={0x89, 0x23, 0x64, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @private=0xa010100, @loopback, @multicast1, @empty, @remote, @dev={0xac, 0x14, 0x14, 0x3b}]}, @generic={0x88, 0x11, "06c38b939be8de28d18b9225deecda"}]}}}}}) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x202000, 0x0, 0xffffffffffffffff, 0x7, '\x00', r0, r1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x3}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x9c}, {0x4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) 61.230066ms ago: executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="c99b9e7f2ab9238c09d0ffff1d0dbd30", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001800), 0x0, 0x20000000) recvmmsg(r1, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001640)=""/23, 0x17}, {&(0x7f0000001f00)=""/4108, 0x100c}], 0x2}, 0x40}], 0x1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETVIFCNT(r3, 0x89e0, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="2800000011000100000000000000000008f7193809a8000000000000000008000000ac1414bb0800"], 0x28}], 0x1}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000640)=0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='contention_end\x00'}, 0x10) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={0x4c, r5, 0x1, 0x0, 0x0, {0x4, 0x2, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x4c}, 0x1, 0x40030000000000}, 0x0) 48.567632ms ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x9, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xa0, 0x15}, [@call={0x45, 0x0, 0x0, 0xffffffff}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x8e, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x23) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000000)=0xff, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0x890b, &(0x7f0000001d00)={{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xf9b}}) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f0000002240), 0x0, 0x0, 0x0) unshare(0x22020400) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)=@generic={0x0, r2}, 0x18) socket$kcm(0x2, 0x3, 0x84) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f00000018c0)=0xd, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x12) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000040)={r3, &(0x7f00000000c0)="00e0aaf186249cfa587d4eec7f181af945a1031193bad2482c1aeb4d291b243333f23bdc6ff7229da42e2390403972b5759c3775ed26664e26a66d8284a5b7b74b9239dbee279ce834afb76fedbd9999e97402f8eb6a93b4b9064748756aa328a7e73ef9b38f17a54194c2cc950134a5771a8a92cefb34300583db2068a1bc9f91ce8cf4cd338deb27f8b09d07632443710bc9f1087e5e045778e71cc3d38ca3b9aa4e07a47f63cac9ad4a0c4eb4ac57ffeccf9963534408cc4857fb502472e9db62c6a227802af48be46a5a974da69eb9049d771072c9c294eacf703e3d4c8eb8b6e43657131e38985fa2eb6de86890d5e290fdf2000000", &(0x7f00000001c0)=""/52}, 0x20) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), r4) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r6, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x18, 0x2, 0x5}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x34}}, 0x0) kernel console output (not intermixed with test programs): r-testdir2371104721/syzkaller.kTCyVc/416/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 [ 220.201792][ T29] audit: type=1804 audit(1717776834.042:61): pid=10095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3890546274/syzkaller.SI1Hz2/407/cgroup.controllers" dev="sda1" ino=1968 res=1 errno=0 [ 220.252746][ T29] audit: type=1800 audit(1717776834.082:62): pid=10095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="cgroup.controllers" dev="sda1" ino=1968 res=0 errno=0 [ 220.458675][T10153] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 220.581106][T10160] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 221.008186][T10185] openvswitch: netlink: ct_state flags 0000ee00 unsupported [ 221.033256][T10185] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 221.441764][T10203] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 221.486190][T10205] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 221.814345][T10221] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 221.963529][T10221] 8021q: adding VLAN 0 to HW filter on device bond1 [ 221.978007][T10221] bond0: (slave bond1): Enslaving as an active interface with an up link [ 222.025469][T10221] 8021q: adding VLAN 0 to HW filter on device bond1 [ 222.037698][T10221] bond1: (slave xfrm1): The slave device specified does not support setting the MAC address [ 222.049802][T10221] bond1: (slave xfrm1): Error -95 calling set_mac_address [ 222.089217][T10230] tipc: Started in network mode [ 222.094458][T10230] tipc: Node identity 9ca6, cluster identity 3 [ 222.101722][T10230] tipc: Node number set to 40102 [ 222.275346][T10235] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 222.311974][T10235] netlink: 148 bytes leftover after parsing attributes in process `syz-executor.0'. [ 222.470803][T10245] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 222.493373][T10246] raw_sendmsg: syz-executor.2 forgot to set AF_INET. Fix it! [ 222.616069][T10250] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 222.684263][T10256] netlink: zone id is out of range [ 222.705329][T10256] netlink: zone id is out of range [ 222.760072][T10260] netlink: 'syz-executor.0': attribute type 12 has an invalid length. [ 223.449936][T10288] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 224.239399][T10333] netlink: 'syz-executor.4': attribute type 12 has an invalid length. [ 224.247151][T10335] __nla_validate_parse: 5 callbacks suppressed [ 224.247176][T10335] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.1'. [ 224.736123][T10360] netlink: 516 bytes leftover after parsing attributes in process `syz-executor.1'. [ 224.755056][T10360] net_ratelimit: 12 callbacks suppressed [ 224.755079][T10360] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 226.837286][T10421] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 226.895078][T10421] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 226.907755][T10421] gretap1: entered promiscuous mode [ 226.913567][T10421] gretap1: entered allmulticast mode [ 226.933841][T10423] netlink: 516 bytes leftover after parsing attributes in process `syz-executor.2'. [ 226.956940][T10423] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 227.542202][T10427] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 227.616778][T10427] : entered promiscuous mode [ 228.194297][T10461] netlink: 516 bytes leftover after parsing attributes in process `syz-executor.4'. [ 228.208724][T10461] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 228.371018][T10467] netlink: 'syz-executor.3': attribute type 12 has an invalid length. [ 228.738498][ T29] audit: type=1800 audit(1717776842.582:63): pid=10483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=1968 res=0 errno=0 [ 228.797217][ T29] audit: type=1804 audit(1717776842.582:64): pid=10483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir269566034/syzkaller.8aR1K0/401/memory.events" dev="sda1" ino=1968 res=1 errno=0 [ 228.895614][ T29] audit: type=1804 audit(1717776842.612:65): pid=10483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir269566034/syzkaller.8aR1K0/401/memory.events" dev="sda1" ino=1968 res=1 errno=0 [ 229.000112][T10490] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 229.041830][T10490] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 229.507756][T10518] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 229.725485][T10528] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 230.232710][T10550] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 230.274869][T10550] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 230.294526][T10552] netlink: zone id is out of range [ 230.314542][T10552] netlink: zone id is out of range [ 230.322551][T10552] netlink: zone id is out of range [ 230.336223][T10552] netlink: zone id is out of range [ 230.354734][T10552] netlink: zone id is out of range [ 230.398767][T10552] netlink: zone id is out of range [ 230.400434][T10555] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 230.477754][T10552] netlink: set zone limit has 4 unknown bytes [ 230.690156][T10567] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 231.463336][T10589] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 231.474441][T10589] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 231.701458][T10596] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 231.842011][T10605] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. [ 232.466847][T10629] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 232.677024][T10634] netlink: zone id is out of range [ 232.706710][T10634] netlink: zone id is out of range [ 232.712012][T10634] netlink: zone id is out of range [ 233.204584][ T29] audit: type=1804 audit(1717776847.052:66): pid=10647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2371104721/syzkaller.kTCyVc/459/cgroup.controllers" dev="sda1" ino=1945 res=1 errno=0 [ 235.061083][T10741] __nla_validate_parse: 2 callbacks suppressed [ 235.061243][T10741] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 235.586390][T10770] net_ratelimit: 11 callbacks suppressed [ 235.586417][T10770] netlink: zone id is out of range [ 235.619332][T10770] netlink: zone id is out of range [ 235.644922][T10770] netlink: zone id is out of range [ 235.668102][T10770] netlink: zone id is out of range [ 235.697843][T10770] netlink: zone id is out of range [ 235.705618][T10773] batadv0: entered promiscuous mode [ 235.742305][T10770] netlink: zone id is out of range [ 235.779874][T10770] netlink: set zone limit has 4 unknown bytes [ 235.861050][T10781] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 236.500914][T10797] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.4'. [ 236.871635][T10809] netlink: zone id is out of range [ 236.903369][T10809] netlink: zone id is out of range [ 236.911800][ T5124] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 236.925020][T10809] netlink: zone id is out of range [ 236.930562][ T5124] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 236.939635][ T5124] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 236.953582][ T5124] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 236.962965][ T5124] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 236.970600][ T5124] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 237.052327][T10820] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 237.062149][T10820] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 237.137553][T10811] lo speed is unknown, defaulting to 1000 [ 237.669535][T10838] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.1'. [ 237.716943][T10838] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. [ 238.131759][T10811] chnl_net:caif_netlink_parms(): no params data found [ 238.558666][T10811] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.580144][T10811] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.610965][T10811] bridge_slave_0: entered allmulticast mode [ 238.622129][T10882] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 238.636702][T10811] bridge_slave_0: entered promiscuous mode [ 238.655828][T10811] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.674722][T10874] Bluetooth: MGMT ver 1.22 [ 238.680073][T10811] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.699660][T10874] Bluetooth: hci3: invalid length 0, exp 2 for type 15 [ 238.699934][T10811] bridge_slave_1: entered allmulticast mode [ 238.716376][T10811] bridge_slave_1: entered promiscuous mode [ 238.824237][T10811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.906282][T10811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 239.004676][T10874] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.1'. [ 239.006276][ T5124] Bluetooth: hci3: command tx timeout [ 239.064801][T10903] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.3'. [ 239.096984][T10811] team0: Port device team_slave_0 added [ 239.135989][T10811] team0: Port device team_slave_1 added [ 239.244776][T10811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.259997][T10811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.318005][T10811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.363470][T10811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.393069][T10811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.433752][T10811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.597116][T10811] hsr_slave_0: entered promiscuous mode [ 239.615620][T10811] hsr_slave_1: entered promiscuous mode [ 239.630140][T10811] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 239.651276][T10811] Cannot create hsr debugfs directory [ 239.661553][T10918] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 239.670922][T10917] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 239.871410][T10926] sctp: [Deprecated]: syz-executor.4 (pid 10926) Use of int in maxseg socket option. [ 239.871410][T10926] Use struct sctp_assoc_value instead [ 240.049981][T10811] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.166491][T10811] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.259368][T10811] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.330855][T10811] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.488718][T10811] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 240.501371][T10811] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 240.516570][T10811] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 240.531909][T10811] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 240.665194][T10811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.702042][T10811] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.729098][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.736492][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.761064][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.768403][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.013721][T10943] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. [ 241.084400][ T5124] Bluetooth: hci3: command tx timeout [ 241.434914][T10962] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 241.559832][T10811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.740157][T10811] veth0_vlan: entered promiscuous mode [ 241.805547][T10811] veth1_vlan: entered promiscuous mode [ 241.936175][T10811] veth0_macvtap: entered promiscuous mode [ 241.964050][T10811] veth1_macvtap: entered promiscuous mode [ 242.018318][T10811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.038615][T10811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.052053][T10811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.065240][T10980] net_ratelimit: 11 callbacks suppressed [ 242.065262][T10980] dccp_invalid_packet: invalid packet type [ 242.077172][T10811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.091421][T10811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.106882][T10811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.117608][T10811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.128601][T10811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.139566][T10811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.156242][T10811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.184890][T10811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.205078][T10811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.237610][T10811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 242.284362][T10811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.309638][T10811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.347515][T10811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.381822][T10811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.392674][T10811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.414312][T10811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.432401][T10987] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.4'. [ 242.442606][T10811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.458499][T10811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.469023][T10811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.479742][T10811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.491734][T10811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.502558][T10811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.517224][T10811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 242.532532][T10987] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'. [ 242.550210][T10811] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.569599][T10811] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.588940][T10811] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.602213][T10811] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.891319][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.919014][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.010062][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.039580][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.163082][ T5124] Bluetooth: hci3: command tx timeout [ 243.721497][T11012] netlink: zone id is out of range [ 243.741662][T11012] netlink: zone id is out of range [ 243.757741][T11012] netlink: zone id is out of range [ 243.772595][T11012] netlink: zone id is out of range [ 243.780324][T11012] netlink: zone id is out of range [ 243.806299][T11012] netlink: zone id is out of range [ 243.873577][T11016] TCP: Unexpected MD5 Hash found for [fe80::].0->[ff02::1].20002 [FSRP.] [ 243.889512][T11012] netlink: set zone limit has 4 unknown bytes [ 243.895019][T11016] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.2'. [ 243.923149][T11016] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 244.050576][T11021] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 244.063884][T11021] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'. [ 245.243977][ T5124] Bluetooth: hci3: command tx timeout [ 245.954500][ T5132] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 245.968179][ T5132] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 245.990641][ T5132] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 246.002610][ T5132] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 246.022716][ T5132] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 246.033445][ T5132] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 246.181793][T11052] lo speed is unknown, defaulting to 1000 [ 247.042059][T11052] chnl_net:caif_netlink_parms(): no params data found [ 247.338152][T11052] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.385256][T11052] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.392673][T11052] bridge_slave_0: entered allmulticast mode [ 247.431651][T11052] bridge_slave_0: entered promiscuous mode [ 247.466657][T11052] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.502055][T11052] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.509711][T11052] bridge_slave_1: entered allmulticast mode [ 247.535411][T11052] bridge_slave_1: entered promiscuous mode [ 247.671867][T11052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 247.707236][T11052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 247.870568][T11052] team0: Port device team_slave_0 added [ 247.904562][T11052] team0: Port device team_slave_1 added [ 247.920351][T11068] netlink: 'syz-executor.4': attribute type 8 has an invalid length. [ 248.026196][T11052] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 248.037608][T11052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.098589][T11052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 248.124142][ T5132] Bluetooth: hci0: command tx timeout [ 248.144502][T11052] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 248.177721][T11052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.270497][T11052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 248.304132][T11071] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 248.550385][T11052] hsr_slave_0: entered promiscuous mode [ 248.576143][T11052] hsr_slave_1: entered promiscuous mode [ 248.587325][T11052] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 248.602019][T11052] Cannot create hsr debugfs directory [ 248.768405][T11078] netlink: 'syz-executor.3': attribute type 7 has an invalid length. [ 248.793036][T11078] netlink: 'syz-executor.3': attribute type 39 has an invalid length. [ 249.246123][T11087] net_ratelimit: 7 callbacks suppressed [ 249.246149][T11087] netlink: zone id is out of range [ 249.279277][T11087] netlink: zone id is out of range [ 249.293078][T11087] netlink: zone id is out of range [ 249.307712][T11087] netlink: zone id is out of range [ 249.319476][T11087] netlink: zone id is out of range [ 249.328568][T11052] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.371954][T11087] netlink: zone id is out of range [ 249.472480][T11087] netlink: set zone limit has 4 unknown bytes [ 249.515929][T11052] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.711897][T11052] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.860441][T11052] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.194951][T11052] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 250.203095][ T5124] Bluetooth: hci0: command tx timeout [ 250.227256][T11052] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 250.247427][T11052] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 250.267336][T11052] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 250.495759][T11052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.531502][T11052] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.561437][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.568701][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.600720][ T5127] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.607984][ T5127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.142199][T11052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.255981][T11120] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 251.266108][T11120] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.3'. [ 251.314436][T11052] veth0_vlan: entered promiscuous mode [ 251.340024][T11052] veth1_vlan: entered promiscuous mode [ 251.444355][T11052] veth0_macvtap: entered promiscuous mode [ 251.470565][T11052] veth1_macvtap: entered promiscuous mode [ 251.486820][T11126] netlink: zone id is out of range [ 251.513413][T11126] netlink: zone id is out of range [ 251.534647][T11126] netlink: zone id is out of range [ 251.546990][T11052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.581887][T11052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.595675][T11052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.606916][T11052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.617108][T11052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.628280][T11052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.653204][T11052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.675210][T11052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.696271][T11052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.717058][T11052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.738381][T11052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.763098][T11052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.781543][T11052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.805687][T11052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.842023][T11052] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.886502][T11052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.912978][T11052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.942341][T11052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.961793][T11052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.994372][T11052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.021173][T11052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.031226][T11052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.042017][T11052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.054190][T11052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.064863][T11052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.075734][T11052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.089796][T11052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.101965][T11052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.122352][T11052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.151846][T11052] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 252.201889][T11052] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.219316][T11052] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.228210][T11052] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.237217][T11052] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.283550][ T5124] Bluetooth: hci0: command tx timeout [ 252.545916][ T963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.573088][ T963] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.609605][T11146] netlink: 'syz-executor.3': attribute type 7 has an invalid length. [ 252.716715][ T2887] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.734106][ T2887] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.130570][T11165] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 253.140493][T11165] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.2'. [ 253.712510][T11181] netlink: 516 bytes leftover after parsing attributes in process `syz-executor.3'. [ 254.118395][T11190] xt_TPROXY: Can be used only with -p tcp or -p udp [ 254.364062][ T5124] Bluetooth: hci0: command tx timeout [ 254.857195][T11233] can: request_module (can-proto-0) failed. [ 254.966974][T11228] can: request_module (can-proto-0) failed. [ 255.378976][T11257] netlink: 516 bytes leftover after parsing attributes in process `syz-executor.1'. [ 255.406786][T11257] net_ratelimit: 12 callbacks suppressed [ 255.406807][T11257] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 255.538885][T11266] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 255.811120][T11273] xt_TPROXY: Can be used only with -p tcp or -p udp [ 255.996441][T11283] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.3'. [ 256.234828][T11291] netlink: 516 bytes leftover after parsing attributes in process `syz-executor.3'. [ 256.250097][T11291] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 256.451630][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.458555][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.502109][T11300] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 256.516625][T11300] veth0_macvtap: left promiscuous mode [ 256.532009][T11300] macvtap0: entered promiscuous mode [ 256.557017][T11300] macvtap0: refused to change device tx_queue_len [ 256.732345][T11308] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.2'. [ 256.902747][T11312] netlink: 'syz-executor.3': attribute type 22 has an invalid length. [ 257.267388][T11324] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 257.435354][T11337] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'. [ 257.769078][T11347] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 257.792550][T11347] netlink: 'syz-executor.2': attribute type 39 has an invalid length. [ 258.093915][T11367] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.2'. [ 258.832414][T11383] hsr0: entered promiscuous mode [ 258.846677][T11383] hsr0: entered allmulticast mode [ 258.863204][T11383] hsr_slave_0: entered allmulticast mode [ 258.873363][T11383] hsr_slave_1: entered allmulticast mode [ 259.005849][ T5132] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 259.023784][ T5132] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 259.046748][ T5132] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 259.065307][ T5132] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 259.074979][ T5132] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 259.085102][ T5132] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 259.194911][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.378727][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.395082][T11410] Bluetooth: MGMT ver 1.22 [ 259.448136][T11397] lo speed is unknown, defaulting to 1000 [ 259.568288][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.672595][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.127048][ T35] bridge_slave_1: left allmulticast mode [ 260.139640][ T35] bridge_slave_1: left promiscuous mode [ 260.150633][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.210589][ T35] bridge_slave_0: left allmulticast mode [ 260.217427][ T35] bridge_slave_0: left promiscuous mode [ 260.223389][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.636436][T11454] openvswitch: netlink: ct_state flags 0000ee00 unsupported [ 261.127508][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 261.143196][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 261.155866][ T35] bond0 (unregistering): Released all slaves [ 261.163028][ T5132] Bluetooth: hci0: command tx timeout [ 261.186412][T11446] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 261.592090][T11471] batadv_slave_1: entered promiscuous mode [ 261.671617][T11471] vlan1: entered promiscuous mode [ 261.689573][T11470] vlan1: left promiscuous mode [ 261.702240][T11470] batadv_slave_1: left promiscuous mode [ 261.715785][T11397] chnl_net:caif_netlink_parms(): no params data found [ 261.997606][T11483] openvswitch: netlink: ct_state flags 0000ee00 unsupported [ 262.141621][ T35] hsr_slave_0: left promiscuous mode [ 262.158757][ T35] hsr_slave_1: left promiscuous mode [ 262.166977][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.175226][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 262.202302][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 262.210920][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 262.271017][ T35] veth1_macvtap: left promiscuous mode [ 262.278542][ T35] veth1_vlan: left promiscuous mode [ 262.286942][ T35] veth0_vlan: left promiscuous mode [ 262.615120][T11502] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.3'. [ 263.179224][ T35] team0 (unregistering): Port device team_slave_1 removed [ 263.238696][ T35] team0 (unregistering): Port device team_slave_0 removed [ 263.246386][ T5132] Bluetooth: hci0: command tx timeout [ 263.843431][T11502] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. [ 264.010084][T11397] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.025423][T11397] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.043656][T11397] bridge_slave_0: entered allmulticast mode [ 264.058067][T11397] bridge_slave_0: entered promiscuous mode [ 264.113017][T11397] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.132968][T11397] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.144070][T11397] bridge_slave_1: entered allmulticast mode [ 264.173057][T11397] bridge_slave_1: entered promiscuous mode [ 264.296084][T11397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.323727][T11397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.397621][T11397] team0: Port device team_slave_0 added [ 264.417374][T11397] team0: Port device team_slave_1 added [ 264.525700][T11397] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.533900][T11397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.560884][T11397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.576079][T11397] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.583243][T11397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.634748][T11397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.756560][T11397] hsr_slave_0: entered promiscuous mode [ 264.774240][T11397] hsr_slave_1: entered promiscuous mode [ 264.781280][T11397] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 264.789425][T11397] Cannot create hsr debugfs directory [ 265.056111][T11526] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.4'. [ 265.179803][T11524] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 265.323093][ T5132] Bluetooth: hci0: command tx timeout [ 265.366008][T11535] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.3'. [ 265.659449][T11397] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 265.673246][T11397] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 265.688250][T11397] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 265.703589][T11397] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 265.885496][T11397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.944511][T11397] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.960645][ T5167] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.967938][ T5167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.988669][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.996055][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.511682][T11397] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.614315][T11557] netlink: zone id is out of range [ 266.624842][T11557] netlink: zone id is out of range [ 266.635193][T11557] netlink: zone id is out of range [ 266.644329][T11397] veth0_vlan: entered promiscuous mode [ 266.658479][T11557] netlink: zone id is out of range [ 266.682667][T11397] veth1_vlan: entered promiscuous mode [ 266.725161][T11557] netlink: set zone limit has 4 unknown bytes [ 266.736752][T11397] veth0_macvtap: entered promiscuous mode [ 266.751184][T11397] veth1_macvtap: entered promiscuous mode [ 266.788134][T11397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.799663][T11397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.810977][T11397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.834402][T11397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.849733][T11397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.866600][T11397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.881236][T11397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.899643][T11397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.930205][T11397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.942347][T11397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.953479][T11397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.964593][T11397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.975691][T11397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.986876][T11397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.001100][T11397] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 267.027743][T11397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.041641][T11397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.055307][T11397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.067550][T11397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.078090][T11397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.088871][T11397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.108401][T11397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.122699][T11397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.140929][T11397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.151995][T11397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.162281][T11397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.173991][T11397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.185298][T11397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.196048][T11397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.209999][T11397] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 267.283484][T11397] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.292532][T11397] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.341730][T11397] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.361065][T11397] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.378040][T11571] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.3'. [ 267.403477][ T5132] Bluetooth: hci0: command tx timeout [ 267.619663][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.633968][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.706616][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.722252][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.547044][T11614] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.3'. [ 268.560049][T11614] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. [ 268.959136][T11634] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.3'. [ 269.219403][T11645] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.4'. [ 269.235714][T11645] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'. [ 269.271893][T11647] dvmrp0: entered allmulticast mode [ 269.286601][T11647] dvmrp0: left allmulticast mode [ 269.519135][T11656] team0: Device veth1_to_bridge is up. Set it down before adding it as a team port [ 269.973494][T11670] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.2'. [ 270.312056][T11684] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 270.333027][T11684] netlink: 'syz-executor.2': attribute type 25 has an invalid length. [ 270.357483][T11684] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.367111][T11684] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.376326][T11684] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.385193][T11684] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.566229][T11694] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.4'. [ 270.756369][T11698] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 271.384365][T11727] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.1'. [ 272.931059][ T5124] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 272.941880][ T5124] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 272.951296][ T5124] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 272.962069][ T5124] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 272.982564][ T5124] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 272.990383][ T5124] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 273.072144][T11777] lo speed is unknown, defaulting to 1000 [ 274.288896][T11777] chnl_net:caif_netlink_parms(): no params data found [ 274.419844][T11826] dvmrp0: entered allmulticast mode [ 274.448459][T11828] Bluetooth: hci3: invalid length 0, exp 2 for type 15 [ 274.461840][T11826] dvmrp0: left allmulticast mode [ 274.528484][T11832] __nla_validate_parse: 2 callbacks suppressed [ 274.528508][T11832] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.2'. [ 274.711136][T11777] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.730690][T11777] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.765124][T11777] bridge_slave_0: entered allmulticast mode [ 274.788963][T11777] bridge_slave_0: entered promiscuous mode [ 274.804673][T11777] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.821632][T11777] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.835489][T11777] bridge_slave_1: entered allmulticast mode [ 274.847919][T11777] bridge_slave_1: entered promiscuous mode [ 274.965058][T11777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.974553][T11839] Bluetooth: hci3: invalid length 0, exp 2 for type 15 [ 275.008852][T11777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.051316][T11842] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.2'. [ 275.084049][ T5124] Bluetooth: hci6: command tx timeout [ 275.210189][T11849] can: request_module (can-proto-0) failed. [ 275.297124][T11777] team0: Port device team_slave_0 added [ 275.327848][T11777] team0: Port device team_slave_1 added [ 275.466171][T11777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.472155][T11863] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.4'. [ 275.473791][T11777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.515720][T11777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.531068][T11777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.538517][T11777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.604971][T11777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.713717][T11871] Bluetooth: hci3: invalid length 0, exp 2 for type 15 [ 275.775632][T11777] hsr_slave_0: entered promiscuous mode [ 275.794806][T11876] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.2'. [ 275.806736][T11777] hsr_slave_1: entered promiscuous mode [ 275.814981][T11777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 275.828871][T11777] Cannot create hsr debugfs directory [ 276.058699][T11885] C: renamed from lo (while UP) [ 276.075997][T11885] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 276.101113][T11887] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.2'. [ 276.469226][T11777] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.610908][T11777] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.737693][T11904] netlink: zone id is out of range [ 276.753397][T11904] netlink: zone id is out of range [ 276.758704][T11777] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.758773][T11904] netlink: zone id is out of range [ 276.786253][T11904] netlink: zone id is out of range [ 276.799352][T11904] netlink: zone id is out of range [ 276.819479][T11904] netlink: zone id is out of range [ 276.850968][T11904] netlink: set zone limit has 4 unknown bytes [ 276.897276][T11777] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.163140][ T5124] Bluetooth: hci6: command tx timeout [ 277.217298][T11919] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.2'. [ 277.319161][T11777] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 277.358264][T11777] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 277.391552][T11777] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 277.438263][T11777] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 277.679279][T11933] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 277.717980][T11933] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 277.780337][T11933] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 39637 - 0 [ 277.813478][T11933] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 39637 - 0 [ 277.835487][T11933] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 39637 - 0 [ 277.843795][ T29] audit: type=1800 audit(1717776891.682:67): pid=11945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1964 res=0 errno=0 [ 277.856030][T11933] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 39637 - 0 [ 277.886491][T11933] geneve3: entered allmulticast mode [ 277.895104][ T29] audit: type=1804 audit(1717776891.732:68): pid=11946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir4064956055/syzkaller.WGE0cK/76/memory.events" dev="sda1" ino=1964 res=1 errno=0 [ 277.963274][ T29] audit: type=1804 audit(1717776891.742:69): pid=11948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir4064956055/syzkaller.WGE0cK/76/memory.events" dev="sda1" ino=1964 res=1 errno=0 [ 278.045237][T11950] netlink: zone id is out of range [ 278.055359][T11950] netlink: zone id is out of range [ 278.111242][T11777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.220353][T11777] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.268030][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.275320][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.344613][ T5250] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.351832][ T5250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.407961][T11964] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 278.663734][T11971] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.3'. [ 278.779049][T11974] pim6reg: entered allmulticast mode [ 278.824538][T11777] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 279.243180][ T5124] Bluetooth: hci6: command tx timeout [ 279.354406][T11777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.558224][T11777] veth0_vlan: entered promiscuous mode [ 279.596316][T11777] veth1_vlan: entered promiscuous mode [ 279.710906][T11777] veth0_macvtap: entered promiscuous mode [ 279.797038][T11777] veth1_macvtap: entered promiscuous mode [ 279.861467][T11777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.907145][T11777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.928625][T11777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.968218][T11777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.991404][T11777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.012942][T11777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.033009][T11777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.051243][T11777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.075004][T11777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.097542][T11777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.111266][T11777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.129433][T11777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.152983][T11777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.172875][T11777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.198500][T11777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.217648][T11777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.249089][T11777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.349965][T11777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.379958][T12022] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.3'. [ 280.392834][T11777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.404819][T11777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.445037][T11777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.476546][T11777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.509610][T11777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.543046][T11777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.569992][T11777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.590231][T11777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.613841][T11777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.636777][T11777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.661086][T11777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.671301][T11777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.700373][T11777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.731944][T11777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.757988][T11777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.804450][T11777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.894386][T11777] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.913105][T11777] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.932968][T11777] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.953176][T11777] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.247892][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.283391][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.323389][ T5124] Bluetooth: hci6: command tx timeout [ 281.355015][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.375436][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.009898][T12092] net_ratelimit: 19 callbacks suppressed [ 282.009925][T12092] openvswitch: netlink: ct_state flags 0000ee00 unsupported [ 282.042423][T12094] netlink: zone id is out of range [ 282.061515][T12094] netlink: zone id is out of range [ 282.069417][T12094] netlink: zone id is out of range [ 282.081120][T12094] netlink: zone id is out of range [ 282.089076][T12094] netlink: zone id is out of range [ 282.107796][T12094] netlink: zone id is out of range [ 282.171725][T12094] netlink: set zone limit has 4 unknown bytes [ 282.703896][T12114] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'. [ 282.748851][T12114] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. [ 282.826604][T12123] mac80211_hwsim hwsim13 wlan0: entered promiscuous mode [ 282.880302][T12123] macvlan2: entered promiscuous mode [ 282.899941][T12130] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 282.919086][T12123] macvlan2: entered allmulticast mode [ 282.942165][T12123] mac80211_hwsim hwsim13 wlan0: entered allmulticast mode [ 282.985924][T12123] mac80211_hwsim hwsim13 wlan0: left allmulticast mode [ 283.016456][T12123] mac80211_hwsim hwsim13 wlan0: left promiscuous mode [ 283.112993][T12139] netlink: 'syz-executor.1': attribute type 12 has an invalid length. [ 283.126525][T12140] netlink: 'syz-executor.1': attribute type 12 has an invalid length. [ 283.383438][T12146] vlan3: entered promiscuous mode [ 284.373078][T12189] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 284.423208][T12189] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'. [ 284.905700][T12216] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 285.245967][T12229] netlink: zone id is out of range [ 285.363823][T12232] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 285.411660][T12238] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 286.356621][T12268] team0 (unregistering): Port device team_slave_0 removed [ 286.387825][T12268] team0 (unregistering): Port device team_slave_1 removed [ 286.643104][T12289] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 286.675719][T12289] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 287.000875][T12289] hsr_slave_0 (unregistering): left promiscuous mode [ 287.113244][T12302] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 287.740568][T12342] net_ratelimit: 7 callbacks suppressed [ 287.740592][T12342] openvswitch: netlink: ct_state flags 0000ee00 unsupported [ 287.865228][T12346] netlink: zone id is out of range [ 287.888383][T12346] netlink: zone id is out of range [ 287.927878][T12346] netlink: zone id is out of range [ 287.943949][T12346] netlink: zone id is out of range [ 287.956006][T12355] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 287.971063][T12346] netlink: zone id is out of range [ 288.005287][T12346] netlink: set zone limit has 4 unknown bytes [ 288.059524][T12355] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 288.396634][T12366] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 288.933627][T12382] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.4'. [ 288.947441][ T29] audit: type=1800 audit(1717776902.792:70): pid=12384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1957 res=0 errno=0 [ 289.017723][ T29] audit: type=1804 audit(1717776902.842:71): pid=12384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir2983322625/syzkaller.dCpsLw/84/memory.events" dev="sda1" ino=1957 res=1 errno=0 [ 289.139559][T12388] EXT4-fs warning (device sda1): ext4_group_extend:1869: need to use ext2online to resize further [ 289.576605][T12397] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 289.747098][ T5132] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 289.757546][ T5132] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 289.767134][ T5132] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 289.776964][ T5132] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 289.790271][ T5132] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 289.801129][ T5132] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 289.904347][T12411] sit0: entered promiscuous mode [ 289.926103][T12411] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 289.945344][T12411] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.4'. [ 290.063686][T12408] lo speed is unknown, defaulting to 1000 [ 290.516984][T12440] __nla_validate_parse: 2 callbacks suppressed [ 290.517006][T12440] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 290.690883][ T29] audit: type=1800 audit(1717776904.532:72): pid=12445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=1965 res=0 errno=0 [ 290.734994][T12446] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 290.740313][ T29] audit: type=1804 audit(1717776904.562:73): pid=12445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir269566034/syzkaller.8aR1K0/554/memory.events" dev="sda1" ino=1965 res=1 errno=0 [ 290.831482][T12449] EXT4-fs warning (device sda1): ext4_group_extend:1869: need to use ext2online to resize further [ 291.078574][T12408] chnl_net:caif_netlink_parms(): no params data found [ 291.224362][T12457] netlink: zone id is out of range [ 291.252641][T12457] netlink: zone id is out of range [ 291.302137][T12457] netlink: zone id is out of range [ 291.348773][T12408] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.415228][T12408] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.443339][T12408] bridge_slave_0: entered allmulticast mode [ 291.451383][T12408] bridge_slave_0: entered promiscuous mode [ 291.470990][T12408] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.495370][T12408] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.511674][T12408] bridge_slave_1: entered allmulticast mode [ 291.554824][T12408] bridge_slave_1: entered promiscuous mode [ 291.661622][T12478] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 291.792066][ T29] audit: type=1800 audit(1717776905.632:74): pid=12483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1959 res=0 errno=0 [ 291.819912][T12408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.862008][T12408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 291.874716][ T29] audit: type=1804 audit(1717776905.702:75): pid=12483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir435831574/syzkaller.800yGJ/34/memory.events" dev="sda1" ino=1959 res=1 errno=0 [ 291.903384][ T5132] Bluetooth: hci3: command tx timeout [ 292.045861][T12487] EXT4-fs warning (device sda1): ext4_group_extend:1869: need to use ext2online to resize further [ 292.096878][T12408] team0: Port device team_slave_0 added [ 292.137140][T12408] team0: Port device team_slave_1 added [ 292.240687][T12408] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.270465][T12408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.366617][T12408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.421176][T12408] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.440944][T12408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.554096][T12408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.611427][T12509] vlan3: entered promiscuous mode [ 292.810845][T12408] hsr_slave_0: entered promiscuous mode [ 292.861109][T12408] hsr_slave_1: entered promiscuous mode [ 292.879250][T12408] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 292.915449][T12408] Cannot create hsr debugfs directory [ 292.941569][T12511] netlink: 664 bytes leftover after parsing attributes in process `syz-executor.3'. [ 293.138379][T12533] Bluetooth: MGMT ver 1.22 [ 293.147228][T12533] Bluetooth: hci3: invalid length 0, exp 2 for type 13 [ 293.219532][T12540] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. [ 293.397107][T12544] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 293.484830][T12546] xt_TCPMSS: Only works on TCP SYN packets [ 293.714037][T12408] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.738126][T12408] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.951386][T12408] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 293.965920][ T5132] Bluetooth: hci3: command tx timeout [ 293.973937][T12408] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.229482][T12408] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 294.242592][T12408] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.407042][T12408] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 294.422072][T12408] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.540949][T12584] Bluetooth: hci3: invalid length 0, exp 2 for type 14 [ 294.660247][T12589] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.903193][T12589] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.910595][T12589] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.051686][T12408] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 295.092570][T12408] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 295.152998][T12408] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 295.179036][T12408] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 295.427250][T12617] sctp: [Deprecated]: syz-executor.0 (pid 12617) Use of int in maxseg socket option. [ 295.427250][T12617] Use struct sctp_assoc_value instead [ 295.502642][T12408] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.570877][T12408] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.611749][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.619023][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.678665][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.685980][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.841451][T12632] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 295.878451][ T45] IPVS: starting estimator thread 0... [ 295.974112][T12633] IPVS: using max 15 ests per chain, 36000 per kthread [ 295.988706][T12637] net_ratelimit: 5 callbacks suppressed [ 295.988731][T12637] netlink: zone id is out of range [ 296.026921][T12637] netlink: zone id is out of range [ 296.046823][ T5132] Bluetooth: hci3: command tx timeout [ 296.063569][T12637] netlink: zone id is out of range [ 296.145385][T12637] netlink: zone id is out of range [ 296.170440][T12637] netlink: zone id is out of range [ 296.209723][T12648] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. [ 296.221056][T12637] netlink: zone id is out of range [ 296.261154][T12651] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. [ 296.284328][T12650] Bluetooth: hci3: invalid length 0, exp 2 for type 14 [ 296.307648][T12408] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 296.315626][T12637] netlink: set zone limit has 4 unknown bytes [ 296.375377][T12657] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.0'. [ 296.584880][T12408] veth0_vlan: entered promiscuous mode [ 296.637624][T12663] Bluetooth: hci3: invalid length 0, exp 2 for type 13 [ 296.642179][T12408] veth1_vlan: entered promiscuous mode [ 296.734729][T12408] veth0_macvtap: entered promiscuous mode [ 296.756305][T12670] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. [ 296.782240][T12408] veth1_macvtap: entered promiscuous mode [ 296.929573][T12408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.975591][T12408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.003937][T12408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.016209][T12408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.034193][T12408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.061624][T12408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.083849][T12408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.107198][T12408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.128611][T12408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.162146][T12408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.176171][T12408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.191403][T12690] netlink: 'syz-executor.0': attribute type 13 has an invalid length. [ 297.200107][T12408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.218271][T12408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.229207][T12408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.245748][T12408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.259122][T12408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.269733][T12408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.280983][T12408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.326224][T12408] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 297.365816][T12694] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 297.441740][T12408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.476547][T12408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.533125][T12408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.563323][T12408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.581227][T12408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.594007][T12408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.604373][T12408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.617445][T12408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.627693][T12408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.640499][T12408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.658203][T12708] Bluetooth: hci3: invalid length 0, exp 2 for type 14 [ 297.667210][T12408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.678840][T12408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.689083][T12408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.700071][T12408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.711484][T12408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.741367][T12408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.753943][T12712] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.0'. [ 297.763899][T12408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.784611][T12408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.818635][T12408] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 297.925789][T12408] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.934913][T12408] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.944767][T12408] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.954764][T12408] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.086189][T12720] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.1'. [ 298.119881][T12722] tipc: Enabling of bearer <éb:b> rejected, media not registered [ 298.124331][ T5132] Bluetooth: hci3: command tx timeout [ 298.384499][T12728] netlink: 'syz-executor.4': attribute type 12 has an invalid length. [ 298.487560][T12733] Bluetooth: hci3: invalid length 0, exp 2 for type 13 [ 298.553087][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.560991][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.247631][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.305507][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.432066][T12756] tipc: Started in network mode [ 301.463234][T12756] tipc: Node identity ac1414aa, cluster identity 4711 [ 301.498240][T12764] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 301.506348][T12756] tipc: Enabled bearer , priority 10 [ 301.543454][T12762] tipc: Disabling bearer [ 301.755544][T12763] openvswitch: netlink: ct_state flags 0000ee00 unsupported [ 302.275503][T12790] Bluetooth: hci3: invalid length 0, exp 2 for type 13 [ 302.379789][T12794] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.1'. [ 303.095207][T12820] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'. [ 303.125043][T12820] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 304.038558][T12837] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 305.848513][T12835] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. [ 306.465403][T12874] tipc: Started in network mode [ 306.483198][T12874] tipc: Node identity ac1414aa, cluster identity 4711 [ 306.521096][T12874] tipc: Enabled bearer , priority 10 [ 306.545728][T12878] tipc: Disabling bearer [ 306.927902][T12894] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 309.813611][T12923] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 309.821771][T12923] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 309.954585][T12929] netlink: zone id is out of range [ 309.974753][T12929] netlink: zone id is out of range [ 309.993408][T12929] netlink: zone id is out of range [ 310.010647][T12929] netlink: zone id is out of range [ 310.027169][T12934] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 310.036802][T12929] netlink: zone id is out of range [ 310.097743][T12929] netlink: zone id is out of range [ 310.136444][T12929] netlink: set zone limit has 4 unknown bytes [ 310.147317][T12943] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 310.274078][T12944] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 310.459874][T12955] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 310.595106][T12958] netlink: zone id is out of range [ 310.628849][T12958] netlink: zone id is out of range [ 310.645427][T12958] netlink: zone id is out of range [ 311.044472][T12980] netlink: 22 bytes leftover after parsing attributes in process `syz-executor.1'. [ 311.242693][T12987] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 311.925881][T13006] vlan2: entered promiscuous mode [ 311.944234][T13006] bridge0: entered promiscuous mode [ 312.009820][T13006] team0: Port device vlan2 added [ 312.306490][T13026] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 312.942429][T13050] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 312.943101][ T29] audit: type=1800 audit(1717776926.782:76): pid=13049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1965 res=0 errno=0 [ 312.981518][T13050] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 313.032982][ T29] audit: type=1804 audit(1717776926.792:77): pid=13049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir2884130288/syzkaller.Mae4kp/271/memory.events" dev="sda1" ino=1965 res=1 errno=0 [ 313.069609][ T29] audit: type=1804 audit(1717776926.802:78): pid=13049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir2884130288/syzkaller.Mae4kp/271/memory.events" dev="sda1" ino=1965 res=1 errno=0 [ 313.120879][T13055] netlink: 516 bytes leftover after parsing attributes in process `syz-executor.3'. [ 317.887988][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.894679][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.909783][T13149] net_ratelimit: 13 callbacks suppressed [ 317.909815][T13149] openvswitch: netlink: ct_state flags 0000ee00 unsupported [ 318.607193][T13179] __nla_validate_parse: 1 callbacks suppressed [ 318.607221][T13179] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.4'. [ 318.641248][T13179] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'. [ 318.721285][T13186] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 318.759348][T13188] openvswitch: netlink: ct_state flags 0000ee00 unsupported [ 318.943860][T13194] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.1'. [ 318.990119][T13194] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 319.007949][T13203] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 319.010205][T13194] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. [ 319.338954][T13217] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.3'. [ 319.406500][T13218] Bluetooth: hci3: invalid length 0, exp 2 for type 15 [ 319.492714][T13227] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.2'. [ 319.527682][T13226] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 319.859340][T13239] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 322.485407][T13353] vlan3: entered promiscuous mode [ 322.690830][T13361] Bluetooth: hci3: invalid length 0, exp 2 for type 14 [ 322.969094][T13370] netlink: 'syz-executor.0': attribute type 13 has an invalid length. [ 323.267829][T13386] batadv_slave_1: entered promiscuous mode [ 323.356103][T13386] batadv_slave_1: left promiscuous mode [ 323.931467][T13416] __nla_validate_parse: 3 callbacks suppressed [ 323.931495][T13416] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.4'. [ 323.981085][T13416] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'. [ 324.015523][T13420] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.1'. [ 324.059581][T13420] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. [ 324.095643][T13424] vlan2: entered promiscuous mode [ 324.119422][T13424] bridge0: entered promiscuous mode [ 324.212310][T13424] team0: Port device vlan2 added [ 324.818329][T13443] Bluetooth: hci3: invalid length 0, exp 2 for type 11 [ 325.037879][ T5124] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 325.050515][ T5124] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 325.064707][ T5124] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 325.075359][ T5124] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 325.085975][ T5124] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 325.089665][T13454] Bluetooth: hci3: invalid length 0, exp 2 for type 13 [ 325.113403][ T5124] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 325.213265][T13461] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.2'. [ 325.287638][T13451] lo speed is unknown, defaulting to 1000 [ 327.165808][ T5132] Bluetooth: hci5: command tx timeout [ 329.056840][T13522] netlink: 516 bytes leftover after parsing attributes in process `syz-executor.3'. [ 329.075305][T13522] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 329.076911][T13517] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 329.112943][T13511] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 329.139195][T13514] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 329.195307][T13524] Bluetooth: hci3: invalid length 0, exp 2 for type 14 [ 329.244225][ T5132] Bluetooth: hci5: command tx timeout [ 329.248381][T13451] chnl_net:caif_netlink_parms(): no params data found [ 329.304946][T13526] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.2'. [ 329.361939][T13528] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 329.726045][T13451] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.753291][T13451] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.769163][T13451] bridge_slave_0: entered allmulticast mode [ 329.780022][T13451] bridge_slave_0: entered promiscuous mode [ 329.793204][T13451] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.800686][T13451] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.826008][T13451] bridge_slave_1: entered allmulticast mode [ 329.835875][T13451] bridge_slave_1: entered promiscuous mode [ 329.976196][T13451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 329.991749][T13561] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 330.015878][T13451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 330.261933][T13451] team0: Port device team_slave_0 added [ 330.307774][T13451] team0: Port device team_slave_1 added [ 330.392036][T13573] Bluetooth: hci3: invalid length 0, exp 2 for type 15 [ 330.469307][T13578] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 330.498771][T13576] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.2'. [ 330.523976][T13578] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. [ 330.545951][T13578] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 330.560471][T13584] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 330.566052][T13578] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 330.602143][T13451] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 330.634045][T13451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.682373][T13451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 330.745920][T13451] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 330.769578][T13451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.805688][T13451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 331.179356][T13451] hsr_slave_0: entered promiscuous mode [ 331.274643][T13451] hsr_slave_1: entered promiscuous mode [ 331.324185][ T5132] Bluetooth: hci5: command tx timeout [ 331.379953][T13451] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 331.394777][T13451] Cannot create hsr debugfs directory [ 331.478105][T13615] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (511) [ 331.489414][T13615] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 331.850222][T13627] Bluetooth: hci3: invalid length 0, exp 2 for type 15 [ 332.132671][T13451] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.318764][T13451] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.558302][T13451] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.759513][T13451] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.143556][T13676] Bluetooth: hci3: invalid length 0, exp 2 for type 15 [ 333.155418][T13679] vlan3: entered promiscuous mode [ 333.160944][T13679] syz_tun: entered promiscuous mode [ 333.183344][T13679] team0: Port device vlan3 added [ 333.278564][T13451] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 333.368889][T13451] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 333.403171][ T5132] Bluetooth: hci5: command tx timeout [ 333.464920][T13451] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 333.523844][T13451] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 333.990604][T13451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.093360][T13451] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.123651][T13711] tun0: tun_chr_ioctl cmd 2147767506 [ 334.155100][ T5169] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.162301][ T5169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.217456][ T5127] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.224763][ T5127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.311933][T13718] __nla_validate_parse: 6 callbacks suppressed [ 334.311958][T13718] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 334.715834][T13728] Bluetooth: hci3: invalid length 0, exp 2 for type 13 [ 334.755849][T13731] Bluetooth: hci3: invalid length 0, exp 2 for type 14 [ 334.848507][T13739] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.1'. [ 335.033590][T13738] xt_CT: No such helper "netbios-ns" [ 335.238146][T13451] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.524866][T13755] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 335.525483][T13759] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 335.700645][T13766] netlink: 4100 bytes leftover after parsing attributes in process `syz-executor.1'. [ 336.197681][T13451] veth0_vlan: entered promiscuous mode [ 336.252133][T13451] veth1_vlan: entered promiscuous mode [ 336.389387][T13451] veth0_macvtap: entered promiscuous mode [ 336.429139][T13451] veth1_macvtap: entered promiscuous mode [ 336.472512][T13451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.486879][T13451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.499143][T13451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.509869][T13451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.532502][T13451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.549891][T13451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.563037][T13451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.582662][T13794] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 336.591204][T13451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.620455][T13799] Bluetooth: hci3: invalid length 0, exp 2 for type 14 [ 336.627206][T13451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.653040][T13451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.690034][T13451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.723104][T13451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.731487][T13803] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.2'. [ 336.757793][T13451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.769887][T13805] xt_bpf: check failed: parse error [ 336.803130][T13451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.829814][T13451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.860254][T13451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.886741][T13451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.910156][T13451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.936696][T13451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 336.961592][T13451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 336.975959][T13451] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 337.057913][T13451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.093788][T13451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.113689][T13451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.130214][T13451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.140962][T13451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.165405][T13451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.175938][T13451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.191715][T13451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.207932][T13451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.231390][T13451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.249324][T13451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.285365][T13451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.301086][T13451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.314647][T13451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.338638][T13451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.372958][T13451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.395027][T13451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.417165][T13451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.440894][T13451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.462899][T13451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.485422][T13451] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 337.562330][T13451] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.585923][T13451] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.616063][T13451] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.632333][T13451] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.877245][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 337.940536][ T963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.986429][ T963] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.065284][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.086542][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.317879][T13850] Bluetooth: hci3: invalid length 0, exp 2 for type 14 [ 338.409332][T13855] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.3'. [ 338.436999][T13856] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 338.640462][T13865] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 338.874949][T13873] bridge16: the hash_elasticity option has been deprecated and is always 16 [ 339.420170][T13896] __nla_validate_parse: 1 callbacks suppressed [ 339.420198][T13896] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. [ 339.492486][T13901] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 339.862465][T13916] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 339.879204][T13916] nbd: must specify at least one socket [ 340.066497][T13921] xfrm0: entered promiscuous mode [ 340.085948][T13921] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 340.095256][T13925] xt_CT: No such helper "netbios-ns" [ 340.237781][T13933] netlink: zone id is out of range [ 340.248798][T13933] netlink: zone id is out of range [ 340.259708][T13933] netlink: zone id is out of range [ 340.282711][T13933] netlink: zone id is out of range [ 340.306837][T13933] netlink: zone id is out of range [ 340.336904][T13933] netlink: zone id is out of range [ 340.362534][T13933] netlink: set zone limit has 4 unknown bytes [ 340.596622][T13939] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 340.647153][T13941] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 340.698191][T13943] Bluetooth: MGMT ver 1.22 [ 340.890010][T13950] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 340.978444][T13956] Bluetooth: hci3: invalid length 0, exp 2 for type 13 [ 341.059045][T13963] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.0'. [ 341.400586][T13979] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 341.424703][T13979] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 342.026153][T13999] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 342.060523][T13999] nbd: must specify at least one socket [ 342.764622][ T5124] Bluetooth: hci2: command 0x0406 tx timeout [ 342.771973][ T5132] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 345.474228][T14030] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.501110][T14031] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 345.546340][T14033] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 345.564069][T14033] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 346.054218][T14067] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.2'. [ 346.281275][T14076] netlink: 'syz-executor.3': attribute type 7 has an invalid length. [ 346.292534][T14076] netlink: 134780 bytes leftover after parsing attributes in process `syz-executor.3'. [ 346.631691][T14090] netlink: 'syz-executor.4': attribute type 32 has an invalid length. [ 347.018386][T14106] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 347.134801][ T5169] IPVS: starting estimator thread 0... [ 347.232908][T14117] IPVS: using max 16 ests per chain, 38400 per kthread [ 347.373347][T14133] netlink: 340 bytes leftover after parsing attributes in process `syz-executor.1'. [ 347.518446][T14137] pim6reg1: entered promiscuous mode [ 347.536932][T14137] pim6reg1: entered allmulticast mode [ 347.564496][T14142] netlink: 'syz-executor.4': attribute type 8 has an invalid length. [ 347.588676][ T29] audit: type=1804 audit(1717776961.432:79): pid=14141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2983322625/syzkaller.dCpsLw/202/cgroup.controllers" dev="sda1" ino=1952 res=1 errno=0 [ 347.739979][T14146] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.3'. [ 347.945365][T14158] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 347.998016][T14158] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 348.232613][T14171] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 348.381973][T14175] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 349.100992][T14213] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 349.766268][T14242] netlink: zone id is out of range [ 349.784962][T14242] netlink: zone id is out of range [ 349.798257][T14242] netlink: zone id is out of range [ 349.810401][T14242] netlink: zone id is out of range [ 349.818610][T14242] netlink: zone id is out of range [ 349.824323][T14242] netlink: zone id is out of range [ 349.834035][T14242] netlink: zone id is out of range [ 349.850280][T14242] netlink: set zone limit has 4 unknown bytes [ 350.598011][T14270] __nla_validate_parse: 3 callbacks suppressed [ 350.598037][T14270] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 350.761200][T14278] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.0'. [ 351.325930][T14300] pim6reg1: entered promiscuous mode [ 351.331421][T14300] pim6reg1: entered allmulticast mode [ 351.787354][T14324] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 351.822662][T14324] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 352.427500][T14347] netlink: 516 bytes leftover after parsing attributes in process `syz-executor.3'. [ 352.479494][T14347] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 352.974017][T14363] pim6reg1: entered promiscuous mode [ 352.980637][T14363] pim6reg1: entered allmulticast mode [ 353.441043][T14388] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 353.469795][T14388] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'. [ 353.561756][T14395] dvmrp1: entered allmulticast mode [ 353.601749][T14394] dvmrp1: left allmulticast mode [ 353.908611][T14408] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 353.988797][T14408] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 354.271747][T14421] pim6reg1: entered promiscuous mode [ 354.303932][T14421] pim6reg1: entered allmulticast mode [ 354.439313][T14433] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 354.491783][T14429] vlan2: entered promiscuous mode [ 354.505538][T14429] syz_tun: entered promiscuous mode [ 354.600299][T14429] team0: Port device vlan2 added [ 354.621430][T14433] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'. [ 354.897274][T14451] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.2'. [ 355.389984][ T29] audit: type=1800 audit(1717776969.232:80): pid=14475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1967 res=0 errno=0 [ 355.425324][ T29] audit: type=1804 audit(1717776969.262:81): pid=14475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir435831574/syzkaller.800yGJ/175/memory.events" dev="sda1" ino=1967 res=1 errno=0 [ 355.513081][ T29] audit: type=1804 audit(1717776969.272:82): pid=14475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir435831574/syzkaller.800yGJ/175/memory.events" dev="sda1" ino=1967 res=1 errno=0 [ 355.588842][ T29] audit: type=1804 audit(1717776969.382:83): pid=14475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir435831574/syzkaller.800yGJ/175/memory.events" dev="sda1" ino=1967 res=1 errno=0 [ 356.233596][ T29] audit: type=1800 audit(1717776970.082:84): pid=14489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1960 res=0 errno=0 [ 356.299519][ T29] audit: type=1804 audit(1717776970.102:85): pid=14489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir4085248410/syzkaller.CPTUOC/42/memory.events" dev="sda1" ino=1960 res=1 errno=0 [ 356.567224][T14504] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 356.574970][T14499] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 356.807500][T14514] vlan3: entered promiscuous mode [ 356.819421][T14514] syz_tun: entered promiscuous mode [ 356.839510][T14514] team0: Port device vlan3 added [ 357.048903][T14519] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 357.060594][T14519] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. [ 357.130842][T14519] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. [ 357.254771][T14522] can: request_module (can-proto-5) failed. [ 357.365938][T14522] team0: entered promiscuous mode [ 357.371274][T14522] team_slave_0: entered promiscuous mode [ 357.383861][T14522] team_slave_1: entered promiscuous mode [ 357.397023][T14522] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 357.419718][T14522] Cannot create hsr debugfs directory [ 357.487806][T14533] xt_CT: You must specify a L4 protocol and not use inversions on it [ 357.620838][T14528] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 357.692630][T14533] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.1'. [ 357.723227][T14533] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 357.764653][T14538] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 357.868690][T14543] Bluetooth: hci3: unsupported parameter 64512 [ 357.885878][T14543] Bluetooth: hci3: unsupported parameter 114 [ 357.913117][T14543] Bluetooth: hci3: unsupported parameter 64512 [ 357.922960][T14543] Bluetooth: hci3: unsupported parameter 114 [ 357.966917][T14546] vlan4: entered promiscuous mode [ 357.974294][T14546] syz_tun: entered promiscuous mode [ 358.032208][T14546] team0: Port device vlan4 added [ 358.055021][T14549] netlink: 'syz-executor.0': attribute type 13 has an invalid length. [ 358.777032][T14568] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 358.810673][T14568] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.3'. [ 358.886230][T14568] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 358.995434][T14577] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. [ 359.180959][T14583] vlan3: entered promiscuous mode [ 359.202127][T14583] syz_tun: entered promiscuous mode [ 359.235018][T14583] team0: Port device vlan3 added [ 359.612668][T14600] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.3'. [ 359.987759][T14609] (unnamed net_device) (uninitialized): down delay (37750) is not a multiple of miimon (7), value rounded to 37744 ms [ 360.300416][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 360.928439][T14644] netlink: zone id is out of range [ 360.954018][T14644] netlink: zone id is out of range [ 360.969871][T14644] netlink: zone id is out of range [ 360.988634][T14644] netlink: zone id is out of range [ 361.018064][T14648] Bluetooth: hci3: unsupported parameter 64512 [ 361.021533][T14644] netlink: zone id is out of range [ 361.028991][T14648] Bluetooth: hci3: unsupported parameter 114 [ 361.040891][T14648] Bluetooth: hci3: unsupported parameter 64512 [ 361.050063][T14644] netlink: zone id is out of range [ 361.057767][T14648] Bluetooth: hci3: unsupported parameter 114 [ 361.098910][T14644] netlink: set zone limit has 4 unknown bytes [ 362.802409][T14726] netlink: 'syz-executor.0': attribute type 12 has an invalid length. [ 363.147118][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 363.235520][T14746] __nla_validate_parse: 3 callbacks suppressed [ 363.235544][T14746] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 363.489065][T14758] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.1'. [ 363.504787][T14754] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.4'. [ 363.530161][T14754] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 363.535492][T14758] openvswitch: netlink: Key type 29 is not supported [ 363.547967][T14754] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 363.792323][T14770] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 363.840982][T14775] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 364.014011][T14786] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 364.030385][T14786] netlink: 'syz-executor.2': attribute type 25 has an invalid length. [ 364.058393][T14786] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.067414][T14786] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.077293][T14786] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.086911][T14786] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.159978][T14793] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 364.168517][T14793] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.4'. [ 364.249151][T14794] hsr0: entered promiscuous mode [ 364.930954][T14811] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 364.994060][T14811] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'. [ 365.105022][T14816] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 365.315228][T14824] netlink: 'syz-executor.3': attribute type 63 has an invalid length. [ 365.691710][ T29] audit: type=1804 audit(1717776979.532:86): pid=14842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir269566034/syzkaller.8aR1K0/714/cgroup.controllers" dev="sda1" ino=1972 res=1 errno=0 [ 365.763340][T14845] netlink: 'syz-executor.0': attribute type 8 has an invalid length. [ 365.963562][T14849] net_ratelimit: 2 callbacks suppressed [ 365.963590][T14849] openvswitch: netlink: Geneve opt len 13 is not a multiple of 4. [ 366.727222][T14876] vlan4: entered promiscuous mode [ 366.753634][T14876] bridge0: entered promiscuous mode [ 366.800105][T14876] team0: Port device vlan4 added [ 366.998947][T14878] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.297306][T14896] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 367.306818][T14896] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 367.354372][T14896] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 367.381078][T14896] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 367.613458][T14906] can: request_module (can-proto-5) failed. [ 367.923901][T14922] Bluetooth: hci3: unsupported parameter 64512 [ 367.930175][T14922] Bluetooth: hci3: invalid len left 4, exp >= 113 [ 368.394684][T14942] __nla_validate_parse: 4 callbacks suppressed [ 368.394714][T14942] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 368.634852][T14950] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 368.934024][T14957] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'. [ 369.005481][T14957] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. [ 369.142684][T14965] netlink: 'syz-executor.2': attribute type 13 has an invalid length. [ 369.326754][T14970] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 369.393017][T14970] Cannot find add_set index 0 as target [ 369.408584][T14976] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.1'. [ 369.443470][T14977] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 369.459801][T14976] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 369.490492][T14977] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 369.533446][T14977] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 369.561461][T14977] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 369.590596][T14977] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 369.617344][T14977] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 369.650384][T14977] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 369.676913][T14977] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 369.702390][T14977] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 370.149548][T15003] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.1'. [ 370.165910][T15003] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. [ 370.655071][T15012] netlink: zone id is out of range [ 370.696813][T15012] netlink: zone id is out of range [ 370.702415][T15012] netlink: zone id is out of range [ 370.737020][T15012] netlink: zone id is out of range [ 370.799441][T15012] netlink: set zone limit has 4 unknown bytes [ 371.038402][ T29] audit: type=1804 audit(1717776984.882:87): pid=15028 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir435831574/syzkaller.800yGJ/212/cgroup.controllers" dev="sda1" ino=1971 res=1 errno=0 [ 371.258592][T15033] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 371.320164][T15035] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 371.703988][T15055] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 372.256256][T15072] xt_TPROXY: Can be used only with -p tcp or -p udp [ 372.264178][ T29] audit: type=1804 audit(1717776986.102:88): pid=15070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2983322625/syzkaller.dCpsLw/267/cgroup.controllers" dev="sda1" ino=1972 res=1 errno=0 [ 372.445525][T15075] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 373.245930][T15091] bond1: entered promiscuous mode [ 373.317355][T15091] bond1 (unregistering): Released all slaves [ 373.496522][T15099] __nla_validate_parse: 11 callbacks suppressed [ 373.496550][T15099] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'. [ 373.574489][T15099] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. [ 373.885404][ T29] audit: type=1804 audit(1717776987.722:89): pid=15111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir435831574/syzkaller.800yGJ/219/cgroup.controllers" dev="sda1" ino=1948 res=1 errno=0 [ 374.182371][T15122] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 374.261199][T15125] validate_nla: 58 callbacks suppressed [ 374.261228][T15125] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 374.307588][T15125] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 375.141177][T15149] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744071578845184) [ 375.227939][T15149] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 [ 375.387802][T15154] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 376.105774][T15167] sctp: [Deprecated]: syz-executor.0 (pid 15167) Use of int in maxseg socket option. [ 376.105774][T15167] Use struct sctp_assoc_value instead [ 376.189187][T15171] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.1'. [ 376.215156][T15171] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. [ 376.233297][T15172] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 376.277902][T15172] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 376.538676][T15182] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 377.054089][T15187] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.084697][T15187] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.696997][T15209] netlink: zone id is out of range [ 377.748783][T15209] netlink: zone id is out of range [ 377.781929][T15209] netlink: zone id is out of range [ 377.805132][T15209] netlink: zone id is out of range [ 377.866300][T15209] netlink: set zone limit has 4 unknown bytes [ 377.904773][T15216] bond0: entered promiscuous mode [ 377.916862][T15216] bond_slave_0: entered promiscuous mode [ 377.932075][T15216] bond_slave_1: entered promiscuous mode [ 377.945622][T15216] vlan2: entered promiscuous mode [ 378.508782][T15236] __nla_validate_parse: 5 callbacks suppressed [ 378.508808][T15236] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 378.560096][T15236] ip6gretap0: entered promiscuous mode [ 378.581395][T15248] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.2'. [ 378.665089][T15247] syzkaller0: entered allmulticast mode [ 378.770140][T15247] syzkaller0 (unregistering): left allmulticast mode [ 378.884504][T15252] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 378.936641][T15254] vlan5: entered promiscuous mode [ 378.944933][T15254] bridge0: entered promiscuous mode [ 378.958107][T15254] team0: Port device vlan5 added [ 378.990796][T15257] bond0: entered promiscuous mode [ 379.025597][T15257] bond_slave_0: entered promiscuous mode [ 379.047142][T15257] bond_slave_1: entered promiscuous mode [ 379.249267][T15264] netlink: zone id is out of range [ 379.285720][T15264] netlink: zone id is out of range [ 379.298309][T15264] netlink: zone id is out of range [ 379.318764][T15264] netlink: zone id is out of range [ 379.339009][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.345762][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.437236][T15264] netlink: set zone limit has 4 unknown bytes [ 379.828421][T15283] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.3'. [ 379.893610][T15283] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. [ 379.958267][T15290] vlan4: entered promiscuous mode [ 380.466261][T15315] pim6reg1: entered promiscuous mode [ 380.493533][T15315] pim6reg1: entered allmulticast mode [ 380.668957][T15323] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 380.697294][T15319] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 380.713157][T15322] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.0'. [ 380.941868][T15332] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.3'. [ 381.403645][ T5124] Bluetooth: hci0: command 0x0406 tx timeout [ 383.660931][T15332] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. [ 383.693277][T15341] tc_dump_action: action bad kind [ 383.952552][T15357] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. [ 384.171578][ T29] audit: type=1804 audit(1717776998.012:90): pid=15357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir435831574/syzkaller.800yGJ/234/cgroup.controllers" dev="sda1" ino=1945 res=1 errno=0 [ 384.253466][T15367] pim6reg1: entered promiscuous mode [ 384.258872][T15367] pim6reg1: entered allmulticast mode [ 384.270548][T15369] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 384.334518][T15371] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.1'. [ 384.785607][T15380] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 384.833855][T15380] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 384.841455][T15382] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. [ 384.891400][T15380] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 384.921342][T15380] batadv_slave_0: entered promiscuous mode [ 384.973282][T15380] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 384.996727][T15380] Cannot create hsr debugfs directory [ 385.011300][T15380] hsr1: Slave A (netdevsim0) is not up; please bring it up to get a fully working HSR network [ 385.036309][T15380] hsr1: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network [ 385.086402][T15387] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 390.273653][T15410] bridge0: port 3(team0) entered blocking state [ 390.281445][T15410] bridge0: port 3(team0) entered disabled state [ 390.322515][T15410] team0: entered allmulticast mode [ 390.338250][T15410] team_slave_0: entered allmulticast mode [ 390.350811][T15410] team_slave_1: entered allmulticast mode [ 390.383159][T15410] vlan2: entered allmulticast mode [ 390.413141][T15410] bridge0: entered allmulticast mode [ 390.418774][T15410] vlan3: entered allmulticast mode [ 390.427892][T15410] syz_tun: entered allmulticast mode [ 390.437151][T15410] team0: left allmulticast mode [ 390.442098][T15410] team_slave_0: left allmulticast mode [ 390.448537][T15410] team_slave_1: left allmulticast mode [ 390.454137][T15410] vlan2: left allmulticast mode [ 390.459054][T15410] bridge0: left allmulticast mode [ 390.470749][T15410] vlan3: left allmulticast mode [ 390.486457][T15410] syz_tun: left allmulticast mode [ 390.506461][T15428] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 390.636881][T15432] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 390.669108][T15432] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 392.269787][T15477] Bluetooth: hci3: invalid length 0, exp 2 for type 15 [ 392.363419][T15479] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.1'. [ 394.067469][T15465] batadv_slave_0: mtu less than device minimum [ 394.183100][T15475] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 394.205352][ T29] audit: type=1804 audit(1717777008.052:91): pid=15482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1851295044/syzkaller.fIX32E/192/cgroup.controllers" dev="sda1" ino=1972 res=1 errno=0 [ 394.438799][T15489] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 394.496086][T15489] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.1'. [ 394.516144][T15488] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.543983][T15488] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.604728][T15496] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 394.633107][T15493] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 394.634091][T15498] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 394.657497][T15493] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 394.745167][T15497] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 394.777275][T15497] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 394.806785][T15497] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 395.004028][T15509] sctp: [Deprecated]: syz-executor.0 (pid 15509) Use of int in maxseg socket option. [ 395.004028][T15509] Use struct sctp_assoc_value instead [ 395.333861][T15520] pim6reg1: entered promiscuous mode [ 395.339277][T15520] pim6reg1: entered allmulticast mode [ 395.960739][ T29] audit: type=1804 audit(1717777009.802:92): pid=15535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir435831574/syzkaller.800yGJ/242/cgroup.controllers" dev="sda1" ino=1971 res=1 errno=0 [ 396.765948][ T5132] Bluetooth: hci6: command 0x0406 tx timeout [ 398.579754][T15542] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 398.687769][T15542] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 398.738189][T15542] batadv0: entered promiscuous mode [ 398.762145][T15542] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 398.804711][T15553] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 398.999974][T15556] can: request_module (can-proto-5) failed. [ 399.065761][T15556] bridge0: entered promiscuous mode [ 399.082151][T15556] team0: entered promiscuous mode [ 399.098638][T15556] team_slave_0: entered promiscuous mode [ 399.113906][T15556] team_slave_1: entered promiscuous mode [ 399.136322][T15556] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 399.166244][T15556] Cannot create hsr debugfs directory [ 399.209558][T15573] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.2'. [ 399.272078][T15574] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.3'. [ 399.345996][T15577] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0 [ 399.370645][T15577] vlan5: entered promiscuous mode [ 399.645139][T15584] Bluetooth: hci3: invalid length 0, exp 2 for type 20 [ 399.878654][T15598] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.3'. [ 400.110967][T15606] vlan4: entered promiscuous mode [ 400.217657][T15607] can: request_module (can-proto-5) failed. [ 400.260530][T15618] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.3'. [ 400.310779][T15607] ip6gretap0: entered promiscuous mode [ 400.395050][T15607] hsr2: Slave A (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 400.415654][T15607] hsr2: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 400.538079][T15631] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.4'. [ 400.804128][T15640] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 400.845825][T15644] Bluetooth: MGMT ver 1.22 [ 400.978365][T15649] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 401.050001][ T29] audit: type=1804 audit(1717777014.892:93): pid=15653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir269566034/syzkaller.8aR1K0/776/cgroup.controllers" dev="sda1" ino=1966 res=1 errno=0 [ 401.075191][T15654] vlan3: entered promiscuous mode [ 401.453560][T15664] can: request_module (can-proto-5) failed. [ 401.501586][T15670] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 401.528275][T15664] ip6gretap0: entered promiscuous mode [ 401.545688][T15664] bond0: entered promiscuous mode [ 401.568032][T15664] bond_slave_0: entered promiscuous mode [ 401.588485][T15664] bond_slave_1: entered promiscuous mode [ 401.615641][T15664] debugfs: Directory 'hsr2' with parent 'hsr' already present! [ 401.645148][T15664] Cannot create hsr debugfs directory [ 401.673382][T15664] hsr2: Slave A (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 401.699322][T15664] hsr2: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 401.731145][T15676] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 402.008467][T15685] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 402.026503][T15690] vlan4: entered promiscuous mode [ 402.125699][T15681] pim6reg1: entered promiscuous mode [ 402.143074][T15681] pim6reg1: entered allmulticast mode [ 402.363714][ T30] INFO: task syz-executor.0:10977 blocked for more than 143 seconds. [ 402.380775][ T30] Not tainted 6.10.0-rc2-syzkaller-00440-ga99997323654 #0 [ 402.402936][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. 2024/06/07 16:16:56 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 402.420299][ T30] task:syz-executor.0 state:D stack:26232 pid:10977 tgid:10976 ppid:5117 flags:0x00004006 [ 402.492944][ T30] Call Trace: [ 402.501904][ T30] [ 402.509824][ T30] __schedule+0x17e8/0x4a20 [ 402.517100][T15707] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 402.543046][ T30] ? __pfx___schedule+0x10/0x10 [ 402.548034][ T30] ? __pfx_lock_release+0x10/0x10 [ 402.575271][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 402.586127][ T30] ? schedule+0x90/0x320 [ 402.593839][ T30] schedule+0x14b/0x320 [ 402.602357][ T30] schedule_preempt_disabled+0x13/0x30 [ 402.608454][ T30] __mutex_lock+0x6a4/0xd70 [ 402.622989][ T30] ? __mutex_lock+0x527/0xd70 [ 402.627814][ T30] ? nfsd_nl_rpc_status_get_start+0x8d/0xe0 [ 402.648796][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 402.654187][ T30] ? net_generic+0x1f/0x240 [ 402.658750][ T30] nfsd_nl_rpc_status_get_start+0x8d/0xe0 [ 402.664998][ T30] genl_start+0x4d6/0x6d0 [ 402.669518][ T30] __netlink_dump_start+0x45c/0x780 [ 402.678624][ T30] genl_rcv_msg+0x88c/0xec0 [ 402.702830][ T30] ? mark_lock+0x9a/0x350 [ 402.707309][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 402.712587][ T30] ? __pfx_genl_start+0x10/0x10 [ 402.730430][ T30] ? __pfx_genl_dumpit+0x10/0x10 [ 402.735731][ T30] ? __pfx_genl_done+0x10/0x10 [ 402.740574][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 402.758229][ T30] ? __pfx_nfsd_nl_rpc_status_get_start+0x10/0x10 [ 402.768542][ T30] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 402.782865][ T30] ? __pfx_nfsd_nl_rpc_status_get_done+0x10/0x10 [ 402.789301][ T30] ? __pfx___might_resched+0x10/0x10 [ 402.810138][ T30] netlink_rcv_skb+0x1e3/0x430 [ 402.815306][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 402.820390][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 402.826028][ T30] ? __netlink_deliver_tap+0x77e/0x7c0 [ 402.831570][ T30] genl_rcv+0x28/0x40 [ 402.835786][ T30] netlink_unicast+0x7ea/0x980 [ 402.840741][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 402.846845][ T30] ? __virt_addr_valid+0x183/0x520 [ 402.852056][ T30] ? __check_object_size+0x49c/0x900 [ 402.857514][ T30] ? bpf_lsm_netlink_send+0x9/0x10 [ 402.862850][ T30] netlink_sendmsg+0x8db/0xcb0 [ 402.867708][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 402.873256][ T30] ? __import_iovec+0x536/0x820 [ 402.878177][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 402.885304][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 402.890837][ T30] ? security_socket_sendmsg+0x87/0xb0 [ 402.896527][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 402.901870][ T30] __sock_sendmsg+0x221/0x270 [ 402.910427][ T30] ____sys_sendmsg+0x525/0x7d0 [ 402.915477][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 402.920844][ T30] __sys_sendmsg+0x2b0/0x3a0 [ 402.930750][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 402.936189][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 402.942582][ T30] ? do_syscall_64+0x100/0x230 [ 402.959413][ T30] ? do_syscall_64+0xb6/0x230 [ 402.964528][ T30] do_syscall_64+0xf3/0x230 [ 402.969084][ T30] ? clear_bhb_loop+0x35/0x90 [ 402.988122][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.994806][ T30] RIP: 0033:0x7f29b687cf69 [ 402.999272][ T30] RSP: 002b:00007f29b758e0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [