last executing test programs: 9.178805806s ago: executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket(0x840000000002, 0x3, 0xff) sendmmsg$unix(r0, &(0x7f0000004280)=[{{&(0x7f0000000200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000001380)=[@cred={{0x1c, 0x1, 0x24}}], 0x20}}], 0x1, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000000), &(0x7f00000000c0)=0x4) socket$caif_seqpacket(0x25, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="8b370000000000000000050c"], 0x28}}, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r5, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x44891) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, r5, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xb5d}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x44810}, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) socket(0x840000000002, 0x3, 0xff) (async) sendmmsg$unix(r0, &(0x7f0000004280)=[{{&(0x7f0000000200)=@abs, 0x6e, 0x0, 0x0, &(0x7f0000001380)=[@cred={{0x1c, 0x1, 0x24}}], 0x20}}], 0x1, 0x0) (async) socket$inet(0x2, 0x3, 0x2) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000000), &(0x7f00000000c0)=0x4) (async) socket$caif_seqpacket(0x25, 0x5, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="8b370000000000000000050c"], 0x28}}, 0x0) (async) bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r5, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x44891) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00'}) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, r5, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xb5d}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1f}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x44810}, 0x4000000) (async) 8.977797179s ago: executing program 0: socket(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000000f800b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 8.88444546s ago: executing program 0: socket$kcm(0x29, 0x5, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{0x0}], 0x1}, 0x1f00) (async) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async, rerun: 32) getsockopt$sock_buf(r0, 0x1, 0x0, &(0x7f0000000180)=""/68, &(0x7f00000000c0)=0x44) (rerun: 32) setsockopt$sock_attach_bpf(r0, 0x1, 0xb, &(0x7f0000000cc0), 0x4) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffda2, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='percpu_alloc_percpu\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000018c0)={{r3}, &(0x7f0000001840), &(0x7f0000001880)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x8}, 0x48) (async, rerun: 64) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x19, 0x4, 0x4, 0x8}, 0x48) (rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="1802000000000000000000000000000018200000", @ANYRES32=r5, @ANYBLOB="000000000000000800000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x8, 0xe2, &(0x7f00000001c0)=""/226, 0x41000}, 0x90) (async) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_ECN={0x8}, @TCA_PIE_BETA={0x8}]}}]}, 0x40}}, 0x4c040) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x20001439) (async) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f00000000c0)=0x2050a0c) (async) ioctl$TUNSETOFFLOAD(r10, 0x4004743d, 0x2000000b) read(r10, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x0, 0x0, 0x9fd, 0x84}, 0x48) (async) bpf$MAP_UPDATE_BATCH(0x19, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x38) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="b8000000190001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff000000000100000000000000"], 0xb8}}, 0x0) (async) close(r6) 4.119384348s ago: executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x10) 4.045419063s ago: executing program 3: syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed, 0x0, 0x1}, 0xe) 3.984843276s ago: executing program 3: socket$nl_route(0x10, 0x3, 0x0) unshare(0x28000600) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2, 0xfffffffd}}, 0x2e) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x4, 0x20000000, 0x4) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000000c0)={{{@in6=@initdev, @in6=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000000)=0xe8) socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_INTERFACE(r4, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = getpid() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x5a, 0x1, 0x0, 0x0, {}, [@typed={0x8, 0x2, 0x0, 0x0, @pid=r7}]}, 0x1c}}, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r6, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x2c, r5, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_PID={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, r7}, @NL802154_ATTR_NETNS_FD={0x8}]}, 0x2c}}, 0x20004011) socket(0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000380)=@abs, 0x6e, 0x0}, 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, 0x0, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xa, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc8", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000001040)={0x0, 0xf40, "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"}, &(0x7f0000000180)=0xf48) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000340)=@assoc_value={r9, 0x1}, 0x8) 3.195853112s ago: executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x10) 3.130421789s ago: executing program 2: syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) 3.001260116s ago: executing program 2: socket$kcm(0x11, 0x200000000000002, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x1}}, 0x10) bind$tipc(r2, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r4 = accept(r3, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x3c1, 0x3, 0x560, 0x328, 0xffffff80, 0x178, 0x8, 0x178, 0x490, 0x22b, 0x258, 0x490, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x308, 0x328, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2a2, 0x64}}, @common=@unspec=@cluster={{0x30}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_bridge\x00', 'geneve1\x00'}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}}, @common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c0) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet6(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="88000000000000002900000036000000320e0000000000000710000000000215fdff44e9000000000000c204000000fc074800000002100909000000010000000000bd3e000000000000070018e68e5fefc98744234500000000000002000000000000000000000000000000040000000000000001000000010000009b0000000000000005020400c2"], 0x118}, 0x0) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x10000000}}, 0x10) bind$tipc(r1, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10) sendmsg$tipc(r1, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xd, 0x0, &(0x7f0000000000)="259a53f271a76d2608024c6588", 0x0, 0x0, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.066369667s ago: executing program 2: unshare(0x20000400) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r4}, &(0x7f0000000180), &(0x7f0000000100)=r3}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r4, &(0x7f0000000300), 0x0}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32, @ANYBLOB="14000200fe8000000000000000000000000000aa140006001f00000001f0ffff0000000000000000140001"], 0x54}}, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r5, 0x0) recvmmsg(r5, &(0x7f0000002580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)=""/148, 0x94}], 0x1}}], 0x1, 0x0, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)="c4", 0x1}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000600000008000300", @ANYRES32=r7, @ANYBLOB="140004006e7363766630000000000001010000000800050006000000180017800400040004"], 0x50}}, 0x0) r8 = openat$cgroup_pressure(r0, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) ppoll(&(0x7f0000000080)=[{r8}], 0x1, 0x0, 0x0, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r9, 0x107, 0x14, &(0x7f0000000040)=0x7, 0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'lo\x00', 0x0}) sendto$packet(r9, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @link_local}, 0x14) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r11, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0x14, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 1.828577547s ago: executing program 4: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000002c0)={0x0, 0x4, 0x0, 0x0, @vifc_lcl_ifindex, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f00000002c0)=[{&(0x7f00000007c0)="c6", 0x1}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(r1, &(0x7f0000000380)={&(0x7f0000000080)=@l2tp={0x2, 0x0, @private=0xa010100}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000100)='%', 0x1}], 0x1}, 0x0) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x22, &(0x7f0000000000)=r4, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000280)={@broadcast, @empty, 0x0, "614af285791a63abd0f993af8077b5cd01e03d64a831683fdc3fd440829c82ae"}, 0x3c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000058000000030a01020000f20b47128e000000000000010000000900030073797a32000000002c000480080002400000000008000140000000000800024000000000080002400000000008000140000000000900010073797a300000000040000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000000400048024000000020a0b01000000000000000000000000140000001100010000000000000000000000000a"], 0xf4}}, 0x0) setsockopt$MRT_DONE(r0, 0x0, 0xc9, 0x0, 0x0) 1.131623847s ago: executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f00000000c0), 0xe) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newtaction={0x16d0, 0x30, 0x800, 0x0, 0x0, {0x9}, [{0x16bc, 0x1, [@m_police={0x16b8, 0x10, 0x0, 0x0, {{0xb}, {0x15b8, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_RATE64={0xc, 0x8, 0x965}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xc1}, @TCA_POLICE_RATE={0x404, 0x2, [0xfffffffc, 0x5, 0x8000, 0x401, 0x1, 0x7fff, 0x7, 0x4, 0x800, 0x9, 0x2, 0x9, 0x1ff, 0x0, 0xb98, 0x1, 0xd03f, 0xfff, 0x8, 0xcee, 0x5, 0x9, 0x4, 0x81, 0x1, 0x2, 0x3, 0xa4f, 0x7, 0x781, 0xe9b8, 0xb989, 0xfffffff8, 0x3, 0x9, 0xffffff80, 0x5, 0x80000000, 0x4, 0xffffffc1, 0xff, 0xee, 0x0, 0x6, 0x6, 0xec9f, 0x400, 0x8, 0x67, 0x7, 0xff, 0x5, 0x8, 0x0, 0x0, 0x1, 0x5, 0x4, 0x4, 0x401, 0x146, 0x400, 0xdc7, 0x0, 0x3, 0x1, 0x7, 0x8001, 0x3, 0x6, 0x3, 0xffff, 0x101, 0x5, 0xb8, 0xfffffffe, 0x9, 0xd5a6, 0x80000001, 0x7fffffff, 0x27d5, 0x80, 0x800, 0x3f, 0x1, 0x80000001, 0x8, 0x4, 0x3, 0x1, 0x1, 0x3c97d071, 0x1, 0x5, 0x3f, 0x200, 0x2, 0x7, 0x0, 0x2, 0xfffffff7, 0xb2, 0x6, 0x8, 0x9, 0x7fff, 0x4, 0x800, 0x3, 0xffffffff, 0x9, 0x0, 0x3, 0x101, 0x6, 0x7, 0x9, 0xffffffff, 0x8, 0x0, 0xffffffff, 0x2, 0x7, 0x6, 0x4, 0x6, 0x7, 0x7f, 0x8, 0x101, 0x7, 0x400, 0x1ff, 0x3, 0x9, 0x31a, 0x3, 0x7, 0x7, 0x9, 0x7, 0x96a, 0x10000, 0x7, 0x2, 0x7ff, 0x3, 0x20, 0x80000000, 0x5, 0x8, 0x2, 0x7ff, 0x7, 0x1, 0x2, 0x81, 0x8, 0x8, 0x0, 0xfffffffe, 0x6, 0x44, 0x6, 0xfff, 0x8f, 0x7b98, 0x9, 0x0, 0x836, 0x8001, 0x9, 0x7, 0x1, 0xffffffff, 0xaa, 0x3, 0x5, 0x100, 0x5442010b, 0xba1d, 0x0, 0x4, 0x1000, 0x3f, 0x101, 0x2, 0x9, 0x7ff, 0x9, 0xffffff90, 0x0, 0xffffff30, 0x8, 0x9, 0x3, 0x1, 0x1, 0x7fff, 0x200, 0x5, 0x5ea2, 0xff, 0x7f, 0x0, 0x73af, 0x2, 0x800, 0x101, 0x80000001, 0xffffffff, 0x5, 0x6, 0x0, 0x7, 0x2, 0x9, 0x401, 0x0, 0x3ff, 0x2, 0x800, 0x0, 0x6, 0x6, 0x2, 0x5, 0x800000, 0xff, 0xffff42e9, 0x3, 0x2, 0x81, 0xb61, 0x1, 0x101, 0x0, 0x2, 0x0, 0x6, 0x54aa, 0xfffffe00, 0x1, 0x1, 0x3, 0xfff, 0x4, 0x9, 0xffffffff, 0x401, 0x5, 0x7, 0xf1, 0xce47, 0x4, 0xffffffff]}, @TCA_POLICE_RATE={0x404, 0x2, [0xfffffffe, 0x2, 0x80000001, 0x2, 0x0, 0x5, 0x1, 0x6d43, 0x2, 0x400, 0xe1, 0x80000000, 0x5, 0xea79, 0x7, 0xa2, 0x6, 0x7, 0xeb, 0x7, 0xfff, 0x5, 0x4, 0x8, 0x1000, 0x7, 0x4, 0x8978, 0x7fff, 0x1, 0x6, 0x7fffffff, 0x1000, 0x1, 0x1, 0x0, 0x7e77, 0x7da2, 0x8, 0xb3c, 0x4, 0x8, 0x1000, 0x44775b92, 0xfffffc01, 0x62d3, 0x9, 0x8, 0x1f, 0x8, 0x1, 0x7, 0x5, 0x80000000, 0x1b6, 0xc2fd, 0x80000000, 0xffff, 0x8001, 0x4, 0x81, 0x1f, 0x1000, 0x1ff, 0x8, 0x3, 0x6, 0x6cff5218, 0xfffffffd, 0x1, 0x3, 0x1, 0x80000000, 0x2407, 0x1000, 0x0, 0x5f, 0x10000, 0x5, 0x927, 0x3, 0x0, 0x8, 0x7926, 0x4, 0xd58, 0x40, 0x1f, 0x2, 0x5df, 0xffffffff, 0xc2c, 0x40000000, 0xff, 0x100, 0xff, 0x2, 0xff, 0xfff, 0x81, 0x101, 0xd8e, 0xffff, 0x4, 0x9, 0x99, 0x3f, 0x7, 0x20, 0x6, 0xffff0001, 0x2bd1, 0x7, 0x3, 0x9, 0x8021, 0xfffffff7, 0x888, 0x5, 0x2, 0x1, 0x0, 0x1000, 0x3, 0x4, 0x6, 0xd51, 0x1f, 0xffffffff, 0x8, 0x8001, 0x70c2, 0x5, 0x8, 0x80000001, 0x9, 0x0, 0x0, 0x6, 0xe56, 0xbd3, 0x7, 0xff, 0x0, 0x5, 0x991, 0xfed8, 0xffffffff, 0x6df965b1, 0x400, 0xfff, 0x4, 0x1010, 0x8, 0x8b5c556, 0x8, 0x80000001, 0x3ff, 0xc09, 0x9, 0x80000001, 0xb995, 0x2, 0x0, 0x8001, 0x3, 0x8000, 0x800, 0x70e, 0x6, 0x6, 0x3, 0xfff, 0x3f, 0x6, 0x4, 0x0, 0x3b3, 0x0, 0x40, 0x20, 0xf726, 0x4, 0x8, 0x2605, 0xb95, 0xffff, 0x20, 0x0, 0x3, 0x7, 0x3ae5, 0x1, 0x1e9a, 0x7, 0x2, 0x7c, 0x201e, 0x7, 0x6, 0x5, 0xe6, 0x401, 0x3, 0x2, 0x8ca, 0xe7b, 0x353fb285, 0xfff, 0xfffffff8, 0x1, 0x0, 0x3, 0x19f, 0x7fffffff, 0x1ff, 0x8, 0x3ff, 0xffffffdf, 0xffffffc0, 0x401, 0x2, 0x9, 0x9, 0x2, 0x1, 0x9a7, 0xffff, 0x87, 0x7, 0x0, 0xfff, 0x10000, 0x9, 0x8, 0xfffffffc, 0x1, 0x4, 0x0, 0x6, 0x8000000, 0x3, 0x5, 0xfffffff8, 0x0, 0xfffffff8, 0x0, 0x3, 0x726, 0x6ab, 0xff, 0xffffff81, 0xfffffff9, 0x98, 0xa268, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xd079, 0xffffffffffffffff, 0x1, 0x20, 0x8b0, {0x4, 0x2, 0x8, 0x6, 0x4, 0x2}, {0xc4, 0x0, 0xd1, 0x9, 0xea12, 0xc4fe}, 0x9, 0x764c, 0x100}}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}, @TCA_POLICE_RATE64={0xc, 0x8, 0xcc31}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1f}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_RATE={0x404, 0x2, [0x7f, 0x3f, 0xfffffff7, 0x5, 0x401, 0x2, 0x2, 0x9, 0xcd63, 0x8, 0x2, 0x1ff, 0x8000, 0x8, 0xfffffffd, 0x8, 0x8, 0x8, 0x8, 0x4, 0x0, 0x7, 0x4, 0x80000000, 0x9, 0x6, 0x1, 0x6, 0x1ff, 0x9, 0xfff, 0xa9, 0xa7, 0x0, 0x6, 0x1f, 0xfffffff8, 0x9, 0x4, 0x4d, 0x600000, 0x2, 0x0, 0x1f, 0x3, 0x3, 0x0, 0x2, 0x8001, 0x9, 0x400, 0x7, 0x3, 0x1d26f65d, 0xfffffffd, 0x80, 0x3, 0x1, 0x4, 0xfffffffc, 0x4ae2558a, 0x2, 0x8000, 0x7fffffff, 0x9, 0x80, 0xff, 0x4, 0x7, 0x9, 0x4, 0x6, 0x6, 0x0, 0xffffffff, 0x8, 0xfe, 0x401, 0x8, 0x4, 0x7, 0xbad5, 0x2, 0xa7a6, 0x719ce842, 0x5a45, 0x7, 0x8, 0x3, 0x20, 0x5, 0x20, 0x0, 0x7, 0x1f, 0x3, 0x2, 0x7fffffff, 0xfffffffc, 0xffffffff, 0x8, 0x6, 0x4, 0x80000000, 0x2, 0x1, 0x10000, 0x9, 0x2, 0x3019159c, 0xffffa51d, 0x3, 0x7, 0x9, 0x1f, 0x7, 0xfffffffc, 0x6, 0x1f, 0x1, 0x1, 0xffff, 0x88, 0xb377, 0x3, 0x1, 0xcc24, 0x7, 0x401, 0x22aa, 0x4, 0x8, 0x800000, 0x1, 0x393, 0x3f, 0x0, 0x9f, 0x3, 0x3, 0x7, 0x7, 0x5, 0x8001, 0x1, 0x8, 0x1, 0x7, 0x2, 0x2, 0xbd8f, 0x101, 0x80000000, 0x10000, 0x28, 0x0, 0x7, 0x8001, 0x2, 0xffff, 0x80000000, 0xff, 0x5, 0x53, 0xc3, 0x1, 0x401, 0x1, 0x7, 0xeab4, 0x6, 0x401, 0x9, 0x1, 0x3, 0xfff, 0x80000000, 0x800, 0x5, 0x5, 0x0, 0x8, 0x8, 0xfff, 0x100, 0x4, 0xfffffffe, 0x4, 0x30, 0xba22, 0x81, 0x3c, 0x1, 0x1, 0xfff, 0x9, 0xffff, 0x5, 0x1f, 0x874f, 0x6, 0xad00, 0x6, 0x3, 0x401, 0xffff3716, 0x4, 0x400, 0xfffffffd, 0xfff, 0x0, 0x9, 0x800, 0x7ff, 0x4, 0x9, 0x4, 0x10001, 0x6, 0x8, 0x4, 0x8000, 0xff, 0x3, 0x6, 0xffff, 0x1be, 0x4b, 0x5, 0x0, 0xcf, 0x7, 0x3, 0x8d, 0x7f, 0xfffffff8, 0x0, 0x7, 0x1, 0x9, 0xe3, 0x8, 0x1, 0x8000, 0x8, 0x4, 0x6, 0x8, 0x80000001, 0x9, 0x2, 0xff, 0x40, 0x9, 0xfffff001, 0x4]}, @TCA_POLICE_RATE64={0xc}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7ff, 0x80000001, 0x6, 0x80000001, 0x9, 0x1, 0xfffff001, 0xfc8, 0x2, 0x0, 0x8, 0x75b5, 0x40, 0x9, 0x7, 0x559, 0xe7d, 0x10001, 0x1d9f, 0x8, 0x1f5, 0x435, 0xfff, 0x81, 0xe1, 0x1000, 0x1, 0x9, 0x5, 0x401, 0x2, 0x5, 0x1, 0x7, 0xff, 0x1000, 0x7fff00, 0x101, 0x8, 0x2, 0x6, 0x4, 0x9, 0x20da8aef, 0xfffffffe, 0x2, 0xb86, 0x3ff, 0x808, 0x2, 0x8138, 0x0, 0x1, 0x2800000, 0x400, 0x3, 0x8, 0x7, 0x3, 0x5e3, 0x6, 0xddb, 0x0, 0x2, 0x5, 0xffffffff, 0x4ef, 0x6, 0x5, 0xe3, 0x9, 0x5, 0x40, 0x1000, 0x6, 0x101, 0x8, 0x5, 0x40, 0x0, 0x8, 0xb5a7, 0x1, 0x10000, 0x1f, 0x7, 0x40, 0x6, 0x3, 0xd151, 0x40, 0x1, 0x9, 0x3, 0x7fffffff, 0xc00, 0x400, 0x86, 0x0, 0x100, 0x10000, 0xee, 0x3, 0xb25c, 0x6, 0x8, 0x7, 0x8, 0xff, 0x5, 0x9, 0x5, 0x3, 0x660, 0x800, 0x7, 0x9, 0x9, 0x1, 0x464, 0x61, 0x1, 0x2, 0x5, 0xd1, 0x7fffffff, 0xffff779c, 0x13, 0xffffffff, 0x0, 0x1000, 0x0, 0x7, 0x7, 0x1, 0x100, 0x0, 0x0, 0x7, 0x400, 0x1, 0x5, 0x7, 0x3, 0x34, 0x2, 0x7, 0x2, 0x5, 0x0, 0x8, 0x9, 0x9, 0x40, 0xa1, 0x5, 0x9, 0x0, 0x3, 0x4980, 0x2, 0x400, 0x2000400, 0x9, 0x8, 0x100, 0xd4b3, 0x7fffffff, 0xfffffff8, 0x6, 0x586, 0x87, 0x10001, 0x6, 0x7b, 0x3, 0x4, 0x7, 0x200, 0x8, 0x7, 0x7, 0x2, 0x0, 0x7f, 0x1, 0x8, 0x6, 0x6, 0x3, 0x7, 0x0, 0x8, 0x8, 0x1, 0x6, 0x7, 0x4, 0x7, 0x5a8, 0x0, 0x2, 0x5, 0x2, 0x800, 0x5, 0x8000000, 0xc8e7, 0x8000, 0x272, 0x8, 0x0, 0x7, 0x4, 0x400, 0x7, 0x5, 0xfffffffd, 0x8000, 0x1, 0x0, 0x1ff, 0x1f, 0x80000001, 0x574, 0x7fffffff, 0x200, 0xe8, 0x1, 0x80000001, 0x469, 0xcc, 0x6, 0x4, 0x200, 0x1f19e668, 0x0, 0x46b, 0x2, 0x3, 0xff73, 0x8, 0x1595, 0x7ff, 0x5, 0x2, 0xffffffff, 0x80000001, 0x7, 0x200, 0x100, 0x200, 0x4, 0x7, 0x0, 0x1]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x401, 0x0, 0x3f0, 0x7, 0x3, 0xfffffff9, 0x2, 0x57, 0x5, 0x40, 0x22b0, 0x3ff, 0x6, 0x3, 0x7f8, 0x0, 0x7fffffff, 0x2, 0x80000001, 0x7, 0x10001, 0x1f, 0x7, 0x9, 0x10001, 0x2, 0x81, 0x0, 0x6, 0x400, 0x4, 0x100, 0xffffffff, 0x5, 0x2, 0x9, 0x9, 0x8, 0x1, 0x8000, 0x0, 0x2, 0x3ff, 0x4, 0xff, 0x4, 0x5, 0x0, 0x7ff, 0x8, 0x5, 0x3, 0x2, 0xe34, 0x0, 0x8, 0x0, 0x8, 0x1ff, 0x9, 0x8, 0x40, 0x5c40, 0xb444, 0x2, 0x200, 0x517, 0x3, 0xa97, 0x5, 0x0, 0x1ff, 0xbf, 0x7ff, 0x0, 0x9, 0x0, 0x1, 0x1, 0x2, 0xcdf, 0x2, 0x4, 0x7, 0x3, 0x0, 0x3, 0x90d7, 0x1, 0x80000001, 0x3, 0x1d2a, 0x7, 0x8, 0x6, 0x1ff, 0x8000, 0x0, 0x2, 0x10001, 0x7, 0x6, 0xe2, 0x0, 0x0, 0x16a4, 0x4, 0x9, 0xc6, 0x1, 0xa2e9, 0x2, 0x9, 0x8, 0x3, 0x400, 0x1, 0x6, 0x1ff, 0x1, 0x6, 0x5, 0x6, 0x5b2, 0x6, 0x1000, 0xffffffff, 0x3, 0x5d7, 0x1, 0x1ff, 0xa22b, 0x3, 0x5, 0x1000, 0x1, 0xbff, 0x1, 0x800, 0x5d, 0x2, 0x2d81, 0x400, 0x44cd140, 0x8, 0x20, 0x3fff800, 0xfffffeff, 0x0, 0x40, 0x9, 0x6, 0x40, 0x6, 0x1ff, 0xff, 0x3, 0x7ff, 0x80, 0x6, 0x80000000, 0x3ff, 0x2, 0x6, 0x80000000, 0x1f, 0x3, 0x5, 0x1, 0x6, 0x2, 0xffffff01, 0x8001, 0x401, 0x100, 0x1, 0x9, 0x3, 0x0, 0x8, 0x2, 0x273d, 0xffffffc3, 0x7, 0x80000001, 0x8, 0x100, 0x4, 0x101, 0x6, 0x4, 0xd5, 0x9, 0x6, 0x1, 0x0, 0x9, 0x20, 0xffffff45, 0x5, 0x101, 0x6, 0x8, 0x9, 0x5, 0x0, 0x5, 0x200, 0x1ff, 0x4, 0x9, 0x401, 0x100, 0x9, 0x80, 0x446e, 0x1, 0x400, 0x6, 0xfffffffb, 0x0, 0x28a, 0x9, 0x5, 0x10001, 0x1f, 0x100, 0x1, 0x101, 0x6, 0xffff, 0x62c, 0x9, 0x9, 0xffffff7f, 0x1, 0x2, 0x5, 0x9, 0x1f, 0x7b, 0xfffffff8, 0x5124, 0x4, 0xa1, 0x6, 0xffa, 0x3, 0x0, 0x3f, 0x200, 0x6, 0x3, 0x8, 0x822, 0x5b]}], [@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x3, 0x3, 0xa15b, 0xd8, {0x1f, 0x0, 0xa7, 0x1, 0x3ff, 0x2}, {0x0, 0x2, 0x2, 0xfe00, 0x0, 0xfff0}, 0x31, 0x4, 0x4}}, @TCA_POLICE_RESULT={0x8}], [@TCA_POLICE_RESULT={0x8}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xfffffc01, 0xffffffffffffffff, 0x2, 0x8, 0x3f, {0xc5, 0x0, 0xff02, 0x7cc, 0x1, 0x10000}, {0x1, 0x0, 0x81, 0x80, 0xdbd4, 0x6}, 0xffff, 0x8}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xc7f}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x3, 0x0, 0x5, 0x1, {0x0, 0x0, 0x7b9, 0x9, 0x80, 0x4}, {0x6, 0x1, 0x0, 0x4, 0x5, 0x8}, 0x800, 0x0, 0xfffffffe}}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0xffffffff}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x200}, @TCA_POLICE_PEAKRATE64={0xc}]]}, {0xd8, 0x6, "504ddfd7b93d7a32dddf0e494bde9a926770f2f8c74bce51effe05329b9e049505948861b574dc016047d46463593ff6a01ec5e7c54e432a3d4c7746b6681cd82d7315c8ad2f68e1aa305bf6164b9a1a8ea107203e29f83d563729947f828f6e0d3146a4c1d584f1f7c6b15e060db38dc24c2608dbc65bec23b4305cf03b26edf8f3e364e87b415cbe4f1fd4c264cc82958b84a3b01f5ec65ad2bd1cf7fcf5a476db5eb67b7f85feccb7985c12d6859ddd19ad0d6ef41f36313921827c389b018c3d321bc7f181e34655ba441af84f36e4f0b855"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x16d0}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x12) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000000c0)={r2, 0x4eca, 0x33, 0x6}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r8, 0x0, 0x8000f28, 0x0) splice(r7, 0x0, r5, 0x0, 0x100000000007f, 0x0) write(r5, 0x0, 0x0) bind$vsock_stream(r4, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000140)={0x0, r6, 0x5, 0x9, 0x7, 0x4}) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r9, &(0x7f0000000040)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r9, &(0x7f0000000080)={0x1f, 0x0, @fixed, 0x7ff}, 0xe) shutdown(r9, 0x1) listen(r4, 0x0) r10 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x1}, 0x28, 0x0) connect$vsock_stream(r10, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000100)=[{r10}], 0x1, 0x0, 0x0, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x3, 0x80000001, 0xf3, 0x8, r2, 0x0, '\x00', 0x0, r3, 0x2, 0x5, 0x2, 0xa}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r11}, &(0x7f0000000200), &(0x7f0000000180)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r3}, 0x4) 1.065556291s ago: executing program 1: bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{}, &(0x7f0000000400), &(0x7f0000000480)}, 0x20) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000000080)='!++\x00', 0x4) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000980)={"46f9e715ccb59fb83950bce7ddb90280", 0x0, 0x0, {0x6, 0x6}, {0x2, 0x7}, 0x6, [0x7, 0x5, 0x7, 0x6, 0x8000000000000001, 0x1f, 0x8, 0x0, 0x1000, 0x100000000, 0x1, 0x80000000, 0x100000001, 0x5, 0x4, 0x7ff]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000500)) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000c80)={"d9d2ea9ea437c501eefdac08f257daff", r3, r2, {0x4, 0x8}, {0x8000000000000000, 0xfffffffe}, 0x8, [0x22, 0x5, 0x7, 0xffffffffffffffff, 0x3, 0x0, 0x8000000000000000, 0x6, 0x9, 0x4, 0x1, 0x2, 0x3f, 0x6, 0x1, 0x8000000000000056]}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) r5 = socket(0x2, 0x80805, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write(0xffffffffffffffff, &(0x7f0000000000)="273a1e1907001a42d77d716f94274a572e2d3e373f", 0x15) setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, 0x0, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x800) syz_genetlink_get_family_id$ethtool(&(0x7f0000000940), r5) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000840)={0x0, @in6={{0xa, 0x4e22, 0x7f, @mcast2, 0x1000}}, 0x3, 0x3}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x7c, &(0x7f0000000040)={r6}, 0x8) unshare(0xe030a80) r7 = socket(0x2b, 0x1, 0x1) getsockopt$bt_BT_POWER(r7, 0x112, 0x9, &(0x7f0000000140)=0x2, &(0x7f00000001c0)=0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$inet_udp(0x2, 0x2, 0x0) writev(r8, &(0x7f0000000380)=[{&(0x7f00000000c0)="580000001400adfd8a987e40da2e6a262b", 0x11}, {&(0x7f0000000300)="2c937b7678ccfc86fd20c77f9200dab77063737d3c6e9bf04e5a1e3cfc1be9a6ef50f07b18b9c0624300633c4a8258b8ef2d5690f429b60c2ab19c5110d5ae86fe3053939470f26c0f385b6114b43c599e55c3adb4249cebef940ef1431cf98a33a523b31be7b97d621c61e1bcdf097c3bf2b6b4dd2eece75b", 0x79}], 0x2) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000240)=0x38, &(0x7f00000002c0)=0x2) close(r9) socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x20000800) 971.596295ms ago: executing program 1: socket$kcm(0x11, 0x200000000000002, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x1}}, 0x10) bind$tipc(r2, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r4 = accept(r3, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x3c1, 0x3, 0x560, 0x328, 0xffffff80, 0x178, 0x8, 0x178, 0x490, 0x22b, 0x258, 0x490, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x308, 0x328, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2a2, 0x64}}, @common=@unspec=@cluster={{0x30}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_bridge\x00', 'geneve1\x00'}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}}, @common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c0) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet6(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="88000000000000002900000036000000320e0000000000000710000000000215fdff44e9000000000000c204000000fc074800000002100909000000010000000000bd3e000000000000070018e68e5fefc98744234500000000000002000000000000000000000000000000040000000000000001000000010000009b0000000000000005020400c2"], 0x118}, 0x0) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x10000000}}, 0x10) bind$tipc(r1, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10) sendmsg$tipc(r1, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xd, 0x0, &(0x7f0000000000)="259a53f271a76d2608024c6588", 0x0, 0x0, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 845.984685ms ago: executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000280), 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000440)=[@in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x4e22, 0x2, @mcast2, 0x9}, @in6={0xa, 0x4e24, 0x3, @private0, 0xffff}, @in6={0xa, 0x4e24, 0x7fffffff, @dev={0xfe, 0x80, '\x00', 0x11}, 0x4}], 0x64) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001440), &(0x7f0000001480)=0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000880), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) unshare(0x600) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r5, 0x29, 0x7, &(0x7f0000000080), 0xc) r6 = openat$cgroup_procs(r4, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000380), 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x70}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x5d}) sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="840000", @ANYRES16, @ANYBLOB="10002cbd7000fddbdf25250000000e0001006e657464657673696d", @ANYRES32, @ANYRESOCT=r1], 0x84}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000010008188040f56ecdb4cb9cca7480ef434000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774da0a040059a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) 805.225414ms ago: executing program 4: r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14, 0x80800) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f00000000c0)=0x2, 0x4) (async) ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000b00)) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000001600000000000000ae330018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 671.416592ms ago: executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x10) 602.929397ms ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x0, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000000f800b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 519.334557ms ago: executing program 1: syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) 510.898691ms ago: executing program 4: r0 = socket(0x2, 0x2, 0x1) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000880)={0x104, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_FRAME={0x34, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @broadcast, @device_b, @random="1d46227b4844", {}, @value}, 0x0, @val={0x8c, 0x10, {0x0, "2ace29c9931e", @short="6249dbef3676124a"}}}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5}], @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x9a, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_b, @random="2b22545cc8d5", {}, @value}, 0x0, @random, 0x0, @void, @val={0x1, 0x1, [{}]}, @void, @void, @void, @void, @val={0x25, 0x3}, @void, @val={0x3c, 0x4}, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7}, @void, [{0xdd, 0x31, "32fca5a60b80872afa6193bf145f06e12714fa91332fde1398f816a830b8b19ba88d90d513fd2cff6d49d83ba7190e2156"}]}}]}, 0x104}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffff00208500000070000000850000002a00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='f2fs_lookup_start\x00', r2}, 0xb) r4 = socket$key(0xf, 0x3, 0x2) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r6 = socket$inet(0x2, 0x800, 0xb1c0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) r7 = accept4(r6, &(0x7f0000002280)=@qipcrtr, &(0x7f0000002300)=0x80, 0x80000) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f0000000300)={r10, @in={{0x2, 0x0, @empty}}}, 0x90) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f0000002340)={r10, 0x1, 0xcdf7}, &(0x7f0000002380)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000003c0)={r10, 0x400}, &(0x7f0000000400)=0x8) r11 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYRESOCT=0x0, @ANYRES8=r11], 0x10}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x0, 0x16, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000640)=@generic={0x0}, 0x18) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) sendmsg$NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[], 0x20}}, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010067726574617000001800028062fc18497784a80400120006445fce1380c522ea00030000000000"], 0x48}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29}, 0x90) 457.270595ms ago: executing program 1: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)=0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f00000002c0)={@val, @void, @eth={@broadcast, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "b8155b", 0x0, 0x32, 0x0, @mcast1, @private1}}}}}, 0x3a) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x14, 0x52, 0x1, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0) r6 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000080)=ANY=[], 0x31) 384.648252ms ago: executing program 4: syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f0000000040)=@data_frame={@a_msdu=@type11={{}, {}, @device_a, @device_a, @random="fec988780198", {}, @device_b}}, 0x1e) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x80, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x54, 0x3, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x45, 0x1, "1abe5b9ca92688a7373186bdf3022392603d7a067ce054e64a3606c34c7d2720184810d1a30d4a1a4111ae9a2233c4b47ff281010aea66e7c32751aa20d1dd77e9"}]}]}]}]}, @NFT_MSG_DELCHAIN={0x238, 0x5, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_CHAIN_USERDATA={0x6a, 0xc, "189affe83feab56ebc43d2fadd350083f1b09f77bef0fb12010cec9572486214aa14a6a4aa38ba625dfdd5232fbba9a3ca85bfe4c0fd3a4141aa6a55f885898f7900cb2a2bead60dd7fa0e41ccef7e15bd3b4191ed8c697ba33ce3b41289663c7892fcb4f3d0"}, @NFTA_CHAIN_USERDATA={0x1d, 0xc, "be791c6dd0e6eea6a44077f0bd33a94f029e7c4bc1f5a33b7f"}, @NFTA_CHAIN_USERDATA={0x11, 0xc, "dce39b771e8bce820018efd89f"}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3f}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_HOOK={0x1c, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5c63b78c}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x26e70b78}]}, @NFTA_CHAIN_USERDATA={0xcd, 0xc, "4a28b6d3d932a5ff8dcb9def27b3179d96075b168c27208c277c9ef7949db49a83768d9b24837eaddfe50249bd5310a1264ad69f21733a40cc8f470c3b7bf8256cd083877545caaa0246fe16bf597a7881bcc8cf258db7420dbd1c2f22c17c8cf84ea5288ced02c12d53912ebb0f560d57b238d2b551f5961a367acb5ecf087dd2fd2a034147419d164ddd5039448668bad538545de61636bd338ce90eb6d8a7acd2b282cf3d4a513acf079a8389cabc9f28aa5cff81a0af23298c1282f24996596d9da6a3128694c3"}, @NFTA_CHAIN_HOOK={0x48, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x57291635}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_virt_wifi\x00'}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x23515dbf}]}, @NFTA_CHAIN_HOOK={0x34, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7ac7f35c}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x33c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$netlink(r5, &(0x7f0000002a00)={0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000000040)={0x10}, 0x10}, {&(0x7f0000000300)={0x10, 0x1029}, 0x10}], 0x2}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 328.67657ms ago: executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='veno\x00', 0x5) connect$inet(r0, &(0x7f0000000000)={0x2, 0x300, @local}, 0x10) 249.678514ms ago: executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xa000007, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000ba8000001201", 0x2e}], 0x1}, 0x0) 206.45758ms ago: executing program 0: socket$kcm(0x11, 0x200000000000002, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x1}}, 0x10) bind$tipc(r2, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r4 = accept(r3, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x3c1, 0x3, 0x560, 0x328, 0xffffff80, 0x178, 0x8, 0x178, 0x490, 0x22b, 0x258, 0x490, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x308, 0x328, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2a2, 0x64}}, @common=@unspec=@cluster={{0x30}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_bridge\x00', 'geneve1\x00'}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}}, @common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c0) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet6(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="88000000000000002900000036000000320e0000000000000710000000000215fdff44e9000000000000c204000000fc074800000002100909000000010000000000bd3e000000000000070018e68e5fefc98744234500000000000002000000000000000000000000000000040000000000000001000000010000009b0000000000000005020400c2"], 0x118}, 0x0) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x10000000}}, 0x10) bind$tipc(r1, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10) sendmsg$tipc(r1, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10, 0x0}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xd, 0x0, &(0x7f0000000000)="259a53f271a76d2608024c6588", 0x0, 0x0, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 185.558875ms ago: executing program 2: ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f00000000c0)=0x7) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000140), 0xfffffdef) close(0x3) close(0x4) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f00000002c0)=ANY=[], 0x8) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_NAT={0x8}, @TCA_CAKE_RAW={0x8}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x4ffe6, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) setsockopt$sock_int(r5, 0x1, 0x22, &(0x7f0000000000), 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='batadv0\x00', 0x10) write$binfmt_script(r1, &(0x7f0000000000)={'#! ', './file0', [{}, {0x20, '@U-)*^*#'}, {0x20, ']'}]}, 0xfff7) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d7eb0a9cbb7a8cdbcca9ac049f494c730814c3f198507cf8d19738610760ef48258cec6f679fd558ff220bc07be201e16f7099938740952ea892f5617976fdb07c7bfeadf9bbdda00a030a9fe9de0ef2ea5ca53fb7f90e40f0bd14644b51fff386270cf05e7dc5819f436aa486e0df112f338f351967103e417fd1b0a0baa624cabea9ec1119d02bd6f9cf8", @ANYRES16=r8, @ANYBLOB="07ef000000000000000008000000"], 0x14}}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 170.401386ms ago: executing program 1: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000002c0)={0x0, 0x4, 0x0, 0x0, @vifc_lcl_ifindex, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f00000002c0)=[{&(0x7f00000007c0)="c6", 0x1}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(r1, &(0x7f0000000380)={&(0x7f0000000080)=@l2tp={0x2, 0x0, @private=0xa010100}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000100)='%', 0x1}], 0x1}, 0x0) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x22, &(0x7f0000000000)=r4, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000280)={@broadcast, @empty, 0x0, "614af285791a63abd0f993af8077b5cd01e03d64a831683fdc3fd440829c82ae"}, 0x3c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000058000000030a01020000f20b47128e000000000000010000000900030073797a32000000002c000480080002400000000008000140000000000800024000000000080002400000000008000140000000000900010073797a300000000040000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000000400048024000000020a0b01000000000000000000000000140000001100010000000000000000000000000a"], 0xf4}}, 0x0) setsockopt$MRT_DONE(r0, 0x0, 0xc9, 0x0, 0x0) 80.573074ms ago: executing program 3: r0 = socket(0x40000000015, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000800040000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="22003300d0000000ffffffffffff080211000000505050505050000004"], 0x44}}, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10) r4 = socket(0x15, 0x5, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x21}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) getsockopt(r4, 0x200000000114, 0x2713, 0x0, &(0x7f0000000040)) 60.851566ms ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x10) 0s ago: executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000280), 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000440)=[@in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x4e22, 0x2, @mcast2, 0x9}, @in6={0xa, 0x4e24, 0x3, @private0, 0xffff}, @in6={0xa, 0x4e24, 0x7fffffff, @dev={0xfe, 0x80, '\x00', 0x11}, 0x4}], 0x64) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001440), &(0x7f0000001480)=0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000880), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) unshare(0x600) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r5, 0x29, 0x7, &(0x7f0000000080), 0xc) r6 = openat$cgroup_procs(r4, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000380), 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x70}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000040)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x5d}) sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="840000", @ANYRES16, @ANYBLOB="10002cbd7000fddbdf25250000000e0001006e657464657673696d", @ANYRES32, @ANYRESOCT=r1], 0x84}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000010008188040f56ecdb4cb9cca7480ef434000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774da0a040059a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.76' (ED25519) to the list of known hosts. 2024/06/14 06:01:50 fuzzer started 2024/06/14 06:01:51 dialing manager at 10.128.0.169:30016 [ 58.704453][ T5089] cgroup: Unknown subsys name 'net' [ 58.889769][ T5089] cgroup: Unknown subsys name 'rlimit' 2024/06/14 06:01:52 starting 5 executor processes [ 59.954341][ T5088] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 60.952568][ T5116] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 60.964422][ T5116] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 60.974329][ T5123] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 60.981436][ T5121] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 60.986628][ T5121] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 60.991660][ T5123] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 60.996790][ T5121] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 61.004280][ T5123] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 61.011371][ T5121] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 61.017296][ T5122] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 61.024684][ T5121] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 61.032830][ T5123] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 61.038326][ T5121] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 61.046263][ T5123] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 61.059564][ T5123] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 61.062334][ T5121] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 61.067633][ T5126] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 61.075334][ T5121] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 61.082996][ T5123] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 61.089440][ T5121] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 61.095824][ T5123] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 61.102554][ T5121] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 61.111118][ T5123] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 61.116531][ T5121] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 61.123332][ T5123] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 61.130092][ T5121] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 61.136723][ T5126] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 61.151102][ T5121] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 61.153189][ T5126] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 61.166967][ T5121] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 61.683360][ T5110] chnl_net:caif_netlink_parms(): no params data found [ 61.818560][ T5109] chnl_net:caif_netlink_parms(): no params data found [ 61.841402][ T5118] chnl_net:caif_netlink_parms(): no params data found [ 61.890801][ T5110] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.899391][ T5110] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.909035][ T5110] bridge_slave_0: entered allmulticast mode [ 61.916764][ T5110] bridge_slave_0: entered promiscuous mode [ 61.959181][ T5108] chnl_net:caif_netlink_parms(): no params data found [ 61.974192][ T5110] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.982044][ T5110] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.989349][ T5110] bridge_slave_1: entered allmulticast mode [ 61.999199][ T5110] bridge_slave_1: entered promiscuous mode [ 62.083074][ T5110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.092519][ T5111] chnl_net:caif_netlink_parms(): no params data found [ 62.136874][ T5110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.177012][ T5118] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.184178][ T5118] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.191933][ T5118] bridge_slave_0: entered allmulticast mode [ 62.199345][ T5118] bridge_slave_0: entered promiscuous mode [ 62.252174][ T5110] team0: Port device team_slave_0 added [ 62.258705][ T5118] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.266039][ T5118] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.273226][ T5118] bridge_slave_1: entered allmulticast mode [ 62.280895][ T5118] bridge_slave_1: entered promiscuous mode [ 62.291590][ T5109] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.298828][ T5109] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.306208][ T5109] bridge_slave_0: entered allmulticast mode [ 62.313045][ T5109] bridge_slave_0: entered promiscuous mode [ 62.333558][ T5110] team0: Port device team_slave_1 added [ 62.354461][ T5109] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.362104][ T5109] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.369516][ T5109] bridge_slave_1: entered allmulticast mode [ 62.376838][ T5109] bridge_slave_1: entered promiscuous mode [ 62.421468][ T5118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.469536][ T5110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.476690][ T5110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.505794][ T5110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.520415][ T5118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.556253][ T5109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.573956][ T5109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.583895][ T5110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.590950][ T5110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.619082][ T5110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.641608][ T5108] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.649595][ T5108] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.657059][ T5108] bridge_slave_0: entered allmulticast mode [ 62.663863][ T5108] bridge_slave_0: entered promiscuous mode [ 62.672016][ T5108] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.679226][ T5108] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.686501][ T5108] bridge_slave_1: entered allmulticast mode [ 62.693813][ T5108] bridge_slave_1: entered promiscuous mode [ 62.739654][ T5109] team0: Port device team_slave_0 added [ 62.758403][ T5118] team0: Port device team_slave_0 added [ 62.797217][ T5111] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.804521][ T5111] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.812215][ T5111] bridge_slave_0: entered allmulticast mode [ 62.819245][ T5111] bridge_slave_0: entered promiscuous mode [ 62.832634][ T5109] team0: Port device team_slave_1 added [ 62.840581][ T5118] team0: Port device team_slave_1 added [ 62.861806][ T5108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.871422][ T5111] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.879197][ T5111] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.886636][ T5111] bridge_slave_1: entered allmulticast mode [ 62.893447][ T5111] bridge_slave_1: entered promiscuous mode [ 62.935251][ T5108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.988673][ T5109] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.995829][ T5109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.022439][ T5109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.035096][ T5118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.042490][ T5118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.068475][ T5118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.081783][ T5118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.088835][ T5118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.114878][ T5118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.137430][ T5111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.150242][ T5111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.162816][ T5110] hsr_slave_0: entered promiscuous mode [ 63.169753][ T5110] hsr_slave_1: entered promiscuous mode [ 63.177949][ T5109] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.184927][ T5109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.212074][ T5121] Bluetooth: hci1: command tx timeout [ 63.215869][ T5113] Bluetooth: hci4: command tx timeout [ 63.218164][ T5121] Bluetooth: hci3: command tx timeout [ 63.228677][ T5109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.265228][ T5108] team0: Port device team_slave_0 added [ 63.276027][ T5121] Bluetooth: hci0: command tx timeout [ 63.285828][ T5121] Bluetooth: hci2: command tx timeout [ 63.332624][ T5108] team0: Port device team_slave_1 added [ 63.341728][ T5111] team0: Port device team_slave_0 added [ 63.396984][ T5111] team0: Port device team_slave_1 added [ 63.405204][ T5108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.412413][ T5108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.439518][ T5108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.466365][ T5118] hsr_slave_0: entered promiscuous mode [ 63.472744][ T5118] hsr_slave_1: entered promiscuous mode [ 63.479744][ T5118] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.487963][ T5118] Cannot create hsr debugfs directory [ 63.536116][ T5108] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.543092][ T5108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.569524][ T5108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.605335][ T5109] hsr_slave_0: entered promiscuous mode [ 63.612139][ T5109] hsr_slave_1: entered promiscuous mode [ 63.619235][ T5109] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.626975][ T5109] Cannot create hsr debugfs directory [ 63.661651][ T5111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.668748][ T5111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.695312][ T5111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.708615][ T5111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.716380][ T5111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.742813][ T5111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.872746][ T5108] hsr_slave_0: entered promiscuous mode [ 63.879562][ T5108] hsr_slave_1: entered promiscuous mode [ 63.886405][ T5108] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.893983][ T5108] Cannot create hsr debugfs directory [ 64.010582][ T5111] hsr_slave_0: entered promiscuous mode [ 64.018057][ T5111] hsr_slave_1: entered promiscuous mode [ 64.024212][ T5111] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.032812][ T5111] Cannot create hsr debugfs directory [ 64.249450][ T5110] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.262717][ T5110] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.291161][ T5110] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.324156][ T5110] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.375336][ T5109] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.396725][ T5109] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.418232][ T5109] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.448832][ T5109] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.498864][ T5118] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.519194][ T5118] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.530992][ T5118] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.544334][ T5118] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.629817][ T5111] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.642392][ T5111] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.660508][ T5111] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.672392][ T5111] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.802976][ T5108] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.820344][ T5108] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.832415][ T5108] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.860661][ T5108] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.924518][ T5110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.982041][ T5118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.001687][ T5110] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.039807][ T5118] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.062856][ T5160] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.070308][ T5160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.100421][ T5111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.115507][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.122751][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.152750][ T5109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.167457][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.174576][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.184909][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.192091][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.229868][ T5111] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.276493][ T5121] Bluetooth: hci4: command tx timeout [ 65.276966][ T5126] Bluetooth: hci3: command tx timeout [ 65.281924][ T5121] Bluetooth: hci1: command tx timeout [ 65.308491][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.315718][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.345262][ T5109] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.356789][ T5121] Bluetooth: hci2: command tx timeout [ 65.356800][ T5126] Bluetooth: hci0: command tx timeout [ 65.370346][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.377670][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.399557][ T5108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.441842][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.449492][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.483884][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.491502][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.533502][ T5108] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.583318][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.590552][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.603060][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.610287][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.029012][ T5118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.062533][ T5110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.137852][ T5108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.202304][ T5118] veth0_vlan: entered promiscuous mode [ 66.223055][ T5118] veth1_vlan: entered promiscuous mode [ 66.249969][ T5109] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.330962][ T5111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.377079][ T5110] veth0_vlan: entered promiscuous mode [ 66.412291][ T5108] veth0_vlan: entered promiscuous mode [ 66.434695][ T5110] veth1_vlan: entered promiscuous mode [ 66.469774][ T5111] veth0_vlan: entered promiscuous mode [ 66.513169][ T5111] veth1_vlan: entered promiscuous mode [ 66.530326][ T5118] veth0_macvtap: entered promiscuous mode [ 66.551304][ T5108] veth1_vlan: entered promiscuous mode [ 66.568235][ T5118] veth1_macvtap: entered promiscuous mode [ 66.601405][ T5118] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.642013][ T5118] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.653456][ T5110] veth0_macvtap: entered promiscuous mode [ 66.682802][ T5118] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.692406][ T5118] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.701451][ T5118] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.712639][ T5118] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.739060][ T5110] veth1_macvtap: entered promiscuous mode [ 66.771051][ T5108] veth0_macvtap: entered promiscuous mode [ 66.809783][ T5108] veth1_macvtap: entered promiscuous mode [ 66.825456][ T5109] veth0_vlan: entered promiscuous mode [ 66.834575][ T5111] veth0_macvtap: entered promiscuous mode [ 66.860519][ T5111] veth1_macvtap: entered promiscuous mode [ 66.874075][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.888754][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.900296][ T5110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.932302][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.944221][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.957620][ T5110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.967665][ T5109] veth1_vlan: entered promiscuous mode [ 66.979543][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.991858][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.002102][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.012923][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.024091][ T5108] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.059806][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.071157][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.083003][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.093714][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.104772][ T5108] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.117074][ T5110] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.126703][ T5110] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.135430][ T5110] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.144658][ T5110] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.185303][ T5108] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.186021][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.213614][ T5108] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.216535][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.222689][ T5108] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.239493][ T5108] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.299816][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.310530][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.320740][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.331506][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.341447][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.352014][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.362220][ T5126] Bluetooth: hci1: command tx timeout [ 67.366734][ T5126] Bluetooth: hci3: command tx timeout [ 67.367792][ T5121] Bluetooth: hci4: command tx timeout [ 67.380619][ T5111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.424190][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.435551][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.445664][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.446712][ T5121] Bluetooth: hci2: command tx timeout [ 67.459142][ T5126] Bluetooth: hci0: command tx timeout [ 67.469678][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.479605][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.494599][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.506110][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.517323][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.528464][ T5111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.590667][ T5111] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.600264][ T5111] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.612186][ T5111] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.621329][ T5111] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.650010][ T5109] veth0_macvtap: entered promiscuous mode [ 67.669453][ T5109] veth1_macvtap: entered promiscuous mode [ 67.719883][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.739454][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.762913][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.775086][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.785155][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.796977][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.811388][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.822382][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.832997][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.845029][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.859788][ T5109] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.873903][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.884814][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.894833][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.906022][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.919290][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.929965][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.939829][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.950518][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.961534][ T5109] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.974772][ T1109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.983275][ T1109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.013099][ T5109] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.024263][ T5109] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.035579][ T5109] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.044676][ T5109] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.118927][ T1052] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.129946][ T1052] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.271288][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.311777][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.330638][ T1052] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.362515][ T1052] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.437756][ T1099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.456768][ T1099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.561393][ T5203] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 68.577212][ T5214] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 68.610889][ T5203] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.0'. [ 68.670957][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.683140][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.802523][ T5221] netlink: 596 bytes leftover after parsing attributes in process `syz-executor.1'. [ 68.830035][ T1099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.862496][ T1099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.435900][ T5126] Bluetooth: hci4: command tx timeout [ 69.446360][ T5126] Bluetooth: hci3: command tx timeout [ 69.446510][ T5121] Bluetooth: hci1: command tx timeout [ 69.518085][ T5121] Bluetooth: hci2: command tx timeout [ 69.525804][ T5121] Bluetooth: hci0: command tx timeout [ 69.705508][ T5243] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.774354][ T5248] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 69.808734][ T5248] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 69.834738][ T5248] caif0: entered promiscuous mode [ 69.858567][ T5248] caif0: entered allmulticast mode [ 69.884730][ T5248] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 69.907341][ T5254] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 69.988360][ T5253] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 70.003614][ T5253] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.3'. [ 70.050720][ T5265] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 70.068879][ T5265] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.1'. [ 70.145581][ T5243] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.741796][ T5243] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.808023][ T5280] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 70.880964][ T5277] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 70.961795][ T5289] Zero length message leads to an empty skb [ 70.961868][ T5243] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.371098][ T5302] netlink: 596 bytes leftover after parsing attributes in process `syz-executor.1'. [ 71.411155][ T5306] gretap0: entered promiscuous mode [ 71.437577][ T5306] vlan2: entered promiscuous mode [ 71.451308][ T5286] sctp: failed to load transform for md5: -2 [ 71.489848][ T5306] gretap0: left promiscuous mode [ 71.601792][ T5315] vlan2: entered promiscuous mode [ 71.624270][ T5315] macvtap0: entered promiscuous mode [ 71.662022][ T5315] vlan2: entered allmulticast mode [ 71.685196][ T5315] macvtap0: entered allmulticast mode [ 71.706919][ T5315] veth0_macvtap: entered allmulticast mode [ 71.729403][ T5315] macvtap0: left allmulticast mode [ 71.734841][ T5315] veth0_macvtap: left allmulticast mode [ 71.747327][ T5315] macvtap0: left promiscuous mode [ 71.818943][ T5309] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 71.871962][ T5317] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 71.924657][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.931675][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.969647][ T5325] netlink: 542 bytes leftover after parsing attributes in process `syz-executor.2'. [ 72.034953][ T5326] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 73.047651][ T5364] hsr0: entered promiscuous mode [ 73.228156][ T5375] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 73.235897][ T5375] IPv6: NLM_F_CREATE should be set when creating new route [ 73.461206][ T5383] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 73.490948][ T5383] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 73.783498][ T5397] __nla_validate_parse: 3 callbacks suppressed [ 73.783519][ T5397] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 73.826192][ T5397] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 73.977298][ T5397] syzkaller0: entered promiscuous mode [ 73.991784][ T5397] syzkaller0: entered allmulticast mode [ 74.017604][ T5402] warning: `syz-executor.1' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 74.074743][ T5405] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 74.213943][ T5403] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 74.250318][ T5403] vlan2: entered promiscuous mode [ 74.258926][ T5403] vlan2: entered allmulticast mode [ 75.513220][ T5419] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 75.574017][ T5419] batman_adv: batadv0: Adding interface: team0 [ 75.597123][ T5419] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.630892][ T5419] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 75.633453][ T5423] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 76.122668][ T5438] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 76.767657][ T5447] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 76.914760][ T5448] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 76.943317][ T5449] af_packet: tpacket_rcv: packet too big, clamped from 56584 to 3976. macoff=72 [ 76.988569][ T5448] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 77.016254][ T5448] caif0: entered promiscuous mode [ 77.047667][ T5448] caif0: entered allmulticast mode [ 77.092179][ T5448] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 77.523153][ T5452] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 77.550731][ T5466] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 77.600401][ T5466] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.1'. [ 77.840486][ T5477] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 77.933857][ T5476] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.963816][ T5476] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.971099][ T5476] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.290791][ T5499] openvswitch: netlink: ufid size 2296 bytes exceeds the range (1, 16) [ 78.302110][ T5499] openvswitch: netlink: Message has 4 unknown bytes. [ 78.664287][ T5518] xt_TCPMSS: Only works on TCP SYN packets [ 78.702473][ T5521] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 78.879102][ T5526] __nla_validate_parse: 9 callbacks suppressed [ 78.879125][ T5526] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 79.198938][ T5126] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.208248][ T5126] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.217005][ T5126] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.226403][ T5126] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.234875][ T5126] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 79.243251][ T5126] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.343857][ T5109] syz-executor.4 (5109) used greatest stack depth: 19344 bytes left [ 79.400183][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.443559][ T5545] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 79.530227][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.559371][ T5532] chnl_net:caif_netlink_parms(): no params data found [ 79.634271][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.717879][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.782329][ T5532] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.790381][ T5532] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.797765][ T5532] bridge_slave_0: entered allmulticast mode [ 79.805393][ T5532] bridge_slave_0: entered promiscuous mode [ 79.817663][ T5532] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.825100][ T5532] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.832507][ T5532] bridge_slave_1: entered allmulticast mode [ 79.840411][ T5532] bridge_slave_1: entered promiscuous mode [ 79.898319][ T5532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.930966][ T5532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.990149][ T5532] team0: Port device team_slave_0 added [ 80.005487][ T5532] team0: Port device team_slave_1 added [ 80.060113][ T5532] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.069811][ T5532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.128283][ T5532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.158152][ T5532] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.168422][ T5532] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.207528][ T5532] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.219079][ T11] bridge_slave_1: left allmulticast mode [ 80.224948][ T11] bridge_slave_1: left promiscuous mode [ 80.232005][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.257280][ T11] bridge_slave_0: left allmulticast mode [ 80.263146][ T11] bridge_slave_0: left promiscuous mode [ 80.270291][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.676743][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 80.689119][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 80.703204][ T11] bond0 (unregistering): Released all slaves [ 80.721484][ T5558] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 80.736117][ T5562] gretap0: entered promiscuous mode [ 80.741445][ T5562] vlan2: entered promiscuous mode [ 80.755245][ T5562] gretap0: left promiscuous mode [ 80.793061][ T5560] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 80.815088][ T5560] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.2'. [ 81.010691][ T5571] IPVS: set_ctl: invalid protocol: 4 255.255.255.255:20000 [ 81.217599][ T5532] hsr_slave_0: entered promiscuous mode [ 81.228542][ T5532] hsr_slave_1: entered promiscuous mode [ 81.236028][ T5532] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.245148][ T5532] Cannot create hsr debugfs directory [ 81.276561][ T5126] Bluetooth: hci1: command tx timeout [ 81.287034][ T30] audit: type=1804 audit(1718344933.843:2): pid=5582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3864521148/syzkaller.qFHa6k/25/cgroup.controllers" dev="sda1" ino=1961 res=1 errno=0 [ 81.325233][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.347555][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.380307][ T5588] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 81.386192][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.398501][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.451891][ T11] veth1_macvtap: left promiscuous mode [ 81.461499][ T11] veth0_macvtap: left promiscuous mode [ 81.467904][ T11] veth1_vlan: left promiscuous mode [ 81.473919][ T11] veth0_vlan: left promiscuous mode [ 81.627226][ T5598] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 82.100588][ T11] team0 (unregistering): Port device team_slave_1 removed [ 82.139718][ T11] team0 (unregistering): Port device team_slave_0 removed [ 82.177965][ T9] cfg80211: failed to load regulatory.db [ 82.503185][ T5591] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 82.515349][ T5591] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 82.548567][ T5596] batadv0: entered promiscuous mode [ 82.562722][ T5596] macsec1: entered promiscuous mode [ 82.577063][ T5596] macsec1: entered allmulticast mode [ 82.582401][ T5596] batadv0: entered allmulticast mode [ 82.592303][ T5596] batadv0: left allmulticast mode [ 82.598560][ T5596] batadv0: left promiscuous mode [ 82.649613][ T5614] gretap0: entered promiscuous mode [ 82.658145][ T5614] vlan2: entered promiscuous mode [ 82.672637][ T5614] gretap0: left promiscuous mode [ 82.821851][ T5620] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 83.251166][ T5636] IPv6: NLM_F_REPLACE set, but no existing node found! [ 83.355791][ T5126] Bluetooth: hci1: command 0x041b tx timeout [ 83.417270][ T5532] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 83.429458][ T5532] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 83.441902][ T5532] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 83.455928][ T5532] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 83.577294][ T5532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.602181][ T5532] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.620815][ T5193] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.628013][ T5193] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.644910][ T5193] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.652075][ T5193] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.876540][ T5647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 83.925441][ T5647] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 83.962027][ T5647] bridge_slave_1: left allmulticast mode [ 83.970177][ T5647] bridge_slave_1: left promiscuous mode [ 83.977590][ T5647] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.000623][ T5532] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.178544][ T5660] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 84.380434][ T5532] veth0_vlan: entered promiscuous mode [ 84.406201][ T5532] veth1_vlan: entered promiscuous mode [ 84.440703][ T5674] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 84.460386][ T5674] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 84.464878][ T5532] veth0_macvtap: entered promiscuous mode [ 84.491376][ T5674] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 84.499976][ T5674] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 84.515369][ T5532] veth1_macvtap: entered promiscuous mode [ 84.564224][ T5532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.582328][ T5532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.601336][ T5532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.613039][ T5532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.623415][ T5532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.634434][ T5532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.654354][ T5532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.665407][ T5532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.682432][ T5532] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.701242][ T5532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.711952][ T5532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.734323][ T5532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.746561][ T5532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.756558][ T5532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.767144][ T5532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.777536][ T5532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.791000][ T5532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.804798][ T5532] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.819925][ T5532] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.829531][ T5532] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.839716][ T5532] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.854737][ T5532] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.974409][ T1109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.987006][ T1109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.013732][ T5680] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 85.034294][ T5680] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 85.052294][ T5680] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 85.061941][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.076876][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.100341][ T5679] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 85.135946][ T5679] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 85.164919][ T5679] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 85.261987][ T5691] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 85.437306][ T5126] Bluetooth: hci1: command 0x041b tx timeout [ 85.483050][ T5706] IPv6: NLM_F_CREATE should be specified when creating new route [ 85.502323][ T5714] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 85.589395][ T5714] bridge_slave_1: left allmulticast mode [ 85.607587][ T5714] bridge_slave_1: left promiscuous mode [ 85.620997][ T5714] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.714844][ T5725] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 85.733223][ T5725] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 86.221954][ T5746] IPVS: Error connecting to the multicast addr [ 86.911880][ T5797] xt_CT: You must specify a L4 protocol and not use inversions on it [ 87.179943][ T5809] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 87.304549][ T5815] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 87.479067][ T5823] syz_tun: entered promiscuous mode [ 87.485489][ T5823] bridge0: entered promiscuous mode [ 87.516567][ T5126] Bluetooth: hci1: command 0x041b tx timeout [ 87.793097][ T30] audit: type=1804 audit(1718344940.353:3): pid=5832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3073321215/syzkaller.NPn2kP/12/cgroup.controllers" dev="sda1" ino=1965 res=1 errno=0 [ 87.871208][ T5840] syz-executor.1 uses obsolete (PF_INET,SOCK_PACKET) [ 88.165320][ T5853] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 88.383969][ T5871] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 88.443666][ T5873] €: renamed from bond0 (while UP) [ 89.082378][ T5901] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 89.146879][ T5903] __nla_validate_parse: 12 callbacks suppressed [ 89.146902][ T5903] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 89.540467][ T5927] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 89.604691][ T5931] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 89.805433][ T5941] veth1_vlan: left promiscuous mode [ 89.835322][ T5936] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 89.853533][ T5936] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 90.175569][ T5950] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 90.281329][ T5952] vlan2: entered allmulticast mode [ 90.293826][ T5952] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 90.317663][ T5952] mac80211_hwsim hwsim6 wlan1: left allmulticast mode [ 90.415062][ T5954] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 90.440210][ T5956] trusted_key: syz-executor.4 sent an empty control message without MSG_MORE. [ 90.655531][ T5964] Illegal XDP return value 4294967274 on prog (id 84) dev lo, expect packet loss! [ 90.703641][ T5966] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 90.788094][ T5968] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 90.892398][ T5970] nftables ruleset with unbound chain [ 91.350735][ T5986] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 91.645258][ T51] IPVS: starting estimator thread 0... [ 91.745818][ T5997] IPVS: using max 19 ests per chain, 45600 per kthread [ 91.835774][ T6003] ebtables: ebtables: counters copy to user failed while replacing table [ 91.965312][ T6006] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 92.050339][ T6008] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 92.406619][ T6020] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 92.414803][ T6020] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.0'. [ 92.598555][ T6029] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 92.863400][ T6034] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.4'. [ 93.208486][ T6040] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 93.422911][ T6050] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 93.651850][ T6063] veth0_to_hsr: entered promiscuous mode [ 93.786964][ T6056] veth0_to_hsr: left promiscuous mode [ 93.827267][ T6070] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 93.890634][ T6072] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 94.037689][ T6081] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 94.238823][ T6089] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 94.350638][ T6091] syz-executor.0 (6091) used greatest stack depth: 18680 bytes left [ 94.654961][ T6103] netlink: 136 bytes leftover after parsing attributes in process `syz-executor.4'. [ 94.758722][ T6109] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 94.843175][ T6111] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 94.855433][ T6114] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 95.142083][ T6125] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 95.169937][ T6120] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 95.809554][ T6150] netlink: 432 bytes leftover after parsing attributes in process `syz-executor.2'. [ 95.982395][ T6155] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 96.130028][ T6159] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 96.530718][ T6167] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 96.556304][ T6167] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 96.576067][ T6171] Bluetooth: MGMT ver 1.22 [ 96.787676][ T6177] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 97.521856][ T6186] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 97.677653][ T6188] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 97.807094][ T6192] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 98.000411][ T6201] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 4 - 0 [ 98.040270][ T6201] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 4 - 0 [ 98.061388][ T6201] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 4 - 0 [ 98.072727][ T6201] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 4 - 0 [ 98.094653][ T6201] geneve2: entered promiscuous mode [ 98.100345][ T6201] geneve2: entered allmulticast mode [ 98.117604][ T6201] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 4 - 0 [ 98.147210][ T6201] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 4 - 0 [ 98.180762][ T6201] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 4 - 0 [ 98.199192][ T6201] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 4 - 0 [ 98.579777][ T6214] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 99.145720][ T6223] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 99.445807][ T6235] __nla_validate_parse: 3 callbacks suppressed [ 99.445825][ T6235] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 99.483280][ T6240] netlink: 368 bytes leftover after parsing attributes in process `syz-executor.3'. [ 99.504718][ T6235] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 99.561503][ T6240] JR³xRË: entered promiscuous mode [ 99.707028][ T6252] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 99.925297][ T6265] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 100.091312][ T6278] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 100.129579][ T6267] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 100.167240][ T6267] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 100.189171][ T6267] netlink: 112860 bytes leftover after parsing attributes in process `syz-executor.4'. [ 100.398407][ T6288] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 100.438249][ T6288] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 100.512450][ T6293] netlink: 207496 bytes leftover after parsing attributes in process `syz-executor.1'. [ 100.618031][ T6298] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 101.141666][ T6323] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 101.162730][ T6321] smc: net device ip6tnl0 applied user defined pnetid SYZ2 [ 101.593867][ T6339] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 101.754052][ T6356] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 102.439483][ T6384] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 102.567198][ T6391] No such timeout policy "syz1" [ 102.879211][ T6403] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 103.079668][ T6421] lo: entered allmulticast mode [ 103.092868][ T6421] pimreg: entered allmulticast mode [ 103.100875][ T6421] pimreg: left allmulticast mode [ 103.122803][ T6423] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 103.154870][ T6423] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 103.170913][ T6423] bond1: (slave batadv1): Enslaving as a backup interface with an up link [ 103.183680][ T6420] lo: left allmulticast mode [ 103.193856][ T1109] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 103.202208][ T6423] 8021q: adding VLAN 0 to HW filter on device bond1 [ 103.283865][ T6427] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 103.313013][ T6427] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 103.336972][ T6129] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 103.674812][ T6446] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.683222][ T6446] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.718218][ T6449] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 103.728402][ T6449] macvlan2: entered promiscuous mode [ 103.734409][ T6449] macvlan2: entered allmulticast mode [ 103.741734][ T6449] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 103.752050][ T6446] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.759316][ T6446] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.766899][ T6446] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.774084][ T6446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.792453][ T6446] bridge0: entered promiscuous mode [ 103.798329][ T6446] bridge0: entered allmulticast mode [ 103.841334][ T6446] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 103.908895][ T6446] team0: Failed to send options change via netlink (err -105) [ 103.917228][ T6446] team0: Port device netdevsim0 added [ 103.933309][ T6450] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 103.948372][ T6450] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 104.034781][ T6461] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.329430][ T6464] __nla_validate_parse: 10 callbacks suppressed [ 105.329450][ T6464] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 105.351628][ T6467] bridge_slave_1: left allmulticast mode [ 105.364191][ T6467] bridge_slave_1: left promiscuous mode [ 105.370142][ T6467] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.832924][ T6497] sctp: [Deprecated]: syz-executor.3 (pid 6497) Use of int in maxseg socket option. [ 105.832924][ T6497] Use struct sctp_assoc_value instead [ 105.887271][ T6499] netlink: 'syz-executor.2': attribute type 30 has an invalid length. [ 105.894402][ T6497] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 105.985271][ T6503] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.2'. [ 106.029216][ T6503] openvswitch: netlink: IP tunnel attribute has 3040 unknown bytes. [ 106.161489][ T6509] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.169293][ T6509] bridge0: left promiscuous mode [ 106.174402][ T6509] bridge0: left allmulticast mode [ 106.214815][ T6509] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.222112][ T6509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.241517][ T6509] bridge0: entered promiscuous mode [ 106.251561][ T6509] bridge0: entered allmulticast mode [ 106.295170][ T6509] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 106.307749][ T6509] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 106.442787][ T6513] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 106.534730][ T6515] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 106.559258][ T6515] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 106.739912][ T6523] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 106.748882][ T6523] batman_adv: batadv0: Removing interface: team0 [ 106.760278][ T6523] bridge0: port 3(team0) entered blocking state [ 106.767627][ T6523] bridge0: port 3(team0) entered disabled state [ 106.774376][ T6523] team0: entered allmulticast mode [ 106.780609][ T6523] team_slave_0: entered allmulticast mode [ 106.788886][ T6523] team_slave_1: entered allmulticast mode [ 106.796560][ T6523] team0: entered promiscuous mode [ 106.801897][ T6523] team_slave_0: entered promiscuous mode [ 106.808197][ T6523] team_slave_1: entered promiscuous mode [ 108.344260][ T6557] netlink: 'syz-executor.1': attribute type 30 has an invalid length. [ 108.469362][ T6557] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.1'. [ 108.501658][ T6557] openvswitch: netlink: IP tunnel attribute has 3040 unknown bytes. [ 108.628556][ T6567] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.662338][ T6567] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 108.708498][ T6569] geneve2: entered promiscuous mode [ 108.725739][ T6569] geneve2: entered allmulticast mode [ 108.938776][ T6573] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 108.984622][ T6572] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 109.001396][ T6572] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 109.062186][ T6572] Bluetooth: MGMT ver 1.22 [ 109.082098][ T6572] Bluetooth: hci3: invalid length 0, exp 2 for type 22 [ 109.493255][ T6588] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 109.512364][ T6588] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 109.539101][ T5166] IPVS: starting estimator thread 0... [ 109.569978][ T6588] sctp: [Deprecated]: syz-executor.4 (pid 6588) Use of int in max_burst socket option. [ 109.569978][ T6588] Use struct sctp_assoc_value instead [ 109.648333][ T6589] IPVS: using max 18 ests per chain, 43200 per kthread [ 110.887682][ T6597] team0: left allmulticast mode [ 110.892568][ T6597] team_slave_0: left allmulticast mode [ 110.898696][ T6597] team_slave_1: left allmulticast mode [ 110.905356][ T6597] team0: left promiscuous mode [ 110.911478][ T6597] team_slave_0: left promiscuous mode [ 110.917318][ T6597] team_slave_1: left promiscuous mode [ 110.924267][ T6597] bridge0: port 3(team0) entered disabled state [ 110.944841][ T6597] bridge_slave_1: left allmulticast mode [ 110.950763][ T6597] bridge_slave_1: left promiscuous mode [ 110.957652][ T6597] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.972391][ T6597] bridge_slave_0: left allmulticast mode [ 110.979900][ T6597] bridge_slave_0: left promiscuous mode [ 110.985843][ T6597] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.179269][ T6607] ipt_ECN: cannot use operation on non-tcp rule [ 111.210830][ T6609] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 111.240733][ T6612] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 111.267090][ T6612] __nla_validate_parse: 1 callbacks suppressed [ 111.267112][ T6612] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 111.545568][ T6627] netlink: 'syz-executor.3': attribute type 30 has an invalid length. [ 111.717241][ T6634] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 111.729982][ T6634] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 111.772445][ T6634] team0: Port device macvlan1 added [ 111.979976][ T6646] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 112.010112][ T6648] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 112.023884][ T6648] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 112.039950][ T6648] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 112.049595][ T6648] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 112.060573][ T6648] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 112.070711][ T6648] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 112.082550][ T6648] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 112.096802][ T6648] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 112.234165][ T6657] netlink: 'syz-executor.1': attribute type 30 has an invalid length. [ 112.303896][ T6662] x_tables: duplicate underflow at hook 1 [ 112.389822][ T6667] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 112.397195][ T6667] IPv6: NLM_F_CREATE should be set when creating new route [ 112.410518][ T6668] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 112.582259][ T6676] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 112.644925][ T6679] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 112.776351][ T6684] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 113.200901][ T6693] netlink: 'syz-executor.2': attribute type 30 has an invalid length. [ 113.331002][ T6696] syz-executor.1[6696] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 113.331126][ T6696] syz-executor.1[6696] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 113.811841][ T6709] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 113.948889][ T6713] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 114.532105][ T6723] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 0 [ 115.145880][ T6732] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 115.375314][ T6739] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 115.607551][ T6750] team_slave_0: entered promiscuous mode [ 115.613770][ T6750] team_slave_1: entered promiscuous mode [ 115.627584][ T6750] €: (slave vlan2): Enslaving as an active interface with an up link [ 115.679405][ T6754] netlink: 'syz-executor.1': attribute type 30 has an invalid length. [ 115.877064][ T6769] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 115.988674][ T6774] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 116.050140][ T6781] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 116.059043][ T6781] netlink: 'syz-executor.1': attribute type 39 has an invalid length. [ 116.209683][ T6791] netlink: 'syz-executor.3': attribute type 30 has an invalid length. [ 116.326230][ T30] audit: type=1804 audit(1718344968.893:4): pid=6802 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2778734820/syzkaller.PSNTOT/114/memory.events" dev="sda1" ino=1961 res=1 errno=0 [ 116.327444][ T6803] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 116.378229][ T6803] __nla_validate_parse: 36 callbacks suppressed [ 116.378251][ T6803] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 116.554886][ T6812] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 116.564483][ T6812] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.1'. [ 116.683763][ T30] audit: type=1804 audit(1718344969.243:5): pid=6820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3073321215/syzkaller.NPn2kP/91/memory.events" dev="sda1" ino=1961 res=1 errno=0 [ 116.712114][ T30] audit: type=1804 audit(1718344969.243:6): pid=6820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir3073321215/syzkaller.NPn2kP/91/memory.events" dev="sda1" ino=1961 res=1 errno=0 [ 116.741266][ T30] audit: type=1804 audit(1718344969.243:7): pid=6820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir3073321215/syzkaller.NPn2kP/91/memory.events" dev="sda1" ino=1961 res=1 errno=0 [ 117.195240][ T6847] dvmrp1: entered allmulticast mode [ 117.229032][ T6849] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 117.255458][ T6849] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.3'. [ 117.389554][ T6863] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 117.404333][ T6863] batadv_slave_1: entered allmulticast mode [ 117.424763][ T6863] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.452020][ T6863] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.473507][ T6863] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 117.490460][ T6868] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 117.558661][ T6868] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 117.584050][ T6868] 8021q: adding VLAN 0 to HW filter on device team1 [ 117.752373][ T6883] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 117.762751][ T6884] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 117.783917][ T6884] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 117.798423][ T6888] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'. [ 117.801177][ T6884] bridge8: entered promiscuous mode [ 117.810293][ T6888] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 117.814212][ T6884] bridge8: entered allmulticast mode [ 117.831242][ T6888] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 118.223029][ T6907] bridge5: entered promiscuous mode [ 118.262121][ T6907] bridge5: entered allmulticast mode [ 119.187363][ T6935] syz-executor.3[6935] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 119.187547][ T6935] syz-executor.3[6935] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 119.978277][ T6962] syzkaller0: entered promiscuous mode [ 119.996154][ T6962] syzkaller0: entered allmulticast mode [ 120.037177][ T6967] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 120.146356][ T6972] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 0, id = 0 [ 121.716518][ T6999] __nla_validate_parse: 4 callbacks suppressed [ 121.716539][ T6999] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.2'. [ 121.771912][ T6995] validate_nla: 4 callbacks suppressed [ 121.771931][ T6995] netlink: 'syz-executor.3': attribute type 12 has an invalid length. [ 121.791869][ T6995] bond0: option primary_reselect: invalid value (255) [ 121.852084][ T7006] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 122.217500][ T7030] netlink: 272 bytes leftover after parsing attributes in process `syz-executor.2'. [ 122.494425][ T7038] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 123.888445][ T7045] netlink: 'syz-executor.4': attribute type 12 has an invalid length. [ 123.907756][ T7045] bond0: option primary_reselect: invalid value (255) [ 124.049621][ T7061] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 124.050616][ T7055] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 124.083027][ T7060] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 124.093148][ T7060] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 124.122157][ T7047] IPVS: stopping backup sync thread 7064 ... [ 124.130086][ T7064] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 0, id = 0 [ 124.212718][ T7069] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 124.228146][ T7069] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 124.841020][ T5126] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 124.851213][ T5126] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 124.867092][ T5126] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 124.876721][ T5126] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 124.886362][ T5126] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 124.904854][ T5126] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 124.929615][ T7081] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 125.359285][ T7106] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 125.374005][ T7092] netlink: 'syz-executor.3': attribute type 12 has an invalid length. [ 125.390810][ T7092] bond0: option primary_reselect: invalid value (255) [ 125.438477][ T7078] chnl_net:caif_netlink_parms(): no params data found [ 125.917967][ T7133] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 125.927488][ T7133] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 125.960389][ T7131] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 125.980056][ T7078] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.996164][ T7078] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.003445][ T7078] bridge_slave_0: entered allmulticast mode [ 126.018801][ T7078] bridge_slave_0: entered promiscuous mode [ 126.038705][ T7078] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.055840][ T7078] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.065388][ T7078] bridge_slave_1: entered allmulticast mode [ 126.077118][ T7078] bridge_slave_1: entered promiscuous mode [ 126.209705][ T7141] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 126.284196][ T7078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.325528][ T7078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.348250][ T7144] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 126.387868][ T7146] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 126.393623][ T7078] team0: Port device team_slave_0 added [ 126.423929][ T7078] team0: Port device team_slave_1 added [ 126.490682][ T7149] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 126.506960][ T7078] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.513963][ T7078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.558218][ T7078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.647751][ T7156] netlink: 272 bytes leftover after parsing attributes in process `syz-executor.1'. [ 126.681168][ T7078] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.688491][ T7078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.715211][ T7078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.834997][ T7078] hsr_slave_0: entered promiscuous mode [ 126.846878][ T7078] hsr_slave_1: entered promiscuous mode [ 126.854465][ T7078] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 126.877510][ T7078] Cannot create hsr debugfs directory [ 126.968561][ T5126] Bluetooth: hci5: command tx timeout [ 127.292143][ T7177] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 127.312307][ T7177] IPVS: stopping backup sync thread 6684 ... [ 127.422189][ T7078] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 127.444769][ T7078] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 127.478999][ T7078] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 127.501016][ T7078] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 127.509035][ T7190] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 127.518410][ T7190] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 127.710583][ T7078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.780962][ T7078] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.817084][ T5193] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.824406][ T5193] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.853110][ T5193] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.860316][ T5193] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.900330][ T7196] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 127.912551][ T7196] bond0: option primary_reselect: invalid value (255) [ 128.083479][ T7213] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 128.363354][ T7078] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.491947][ T7078] veth0_vlan: entered promiscuous mode [ 128.513096][ T7078] veth1_vlan: entered promiscuous mode [ 128.524112][ T7237] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 128.534880][ T7237] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 128.567359][ T7078] veth0_macvtap: entered promiscuous mode [ 128.584295][ T7078] veth1_macvtap: entered promiscuous mode [ 128.607224][ T7078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.623840][ T7078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.635299][ T7078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.656021][ T7078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.673847][ T7078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.685887][ T7078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.695973][ T7078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.706681][ T7078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.720098][ T7078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.733284][ T7078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.745475][ T7078] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 128.792446][ T7078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.804294][ T7078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.820861][ T7078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.832599][ T7078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.848144][ T7078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.861309][ T7078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.873227][ T7078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 128.889039][ T7078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.910320][ T7078] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 128.953155][ T7078] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.971021][ T7078] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.984645][ T7078] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.995692][ T7078] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.036219][ T5126] Bluetooth: hci5: command tx timeout [ 129.183980][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.216688][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.274071][ T6131] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.291136][ T6131] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.413340][ T7263] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 129.524882][ T7272] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 129.619526][ T7279] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 129.630930][ T7279] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 129.871855][ T7291] netlink: 'syz-executor.3': attribute type 30 has an invalid length. [ 129.998081][ T7295] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 130.020481][ T7295] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 130.038647][ T7295] bridge1: entered promiscuous mode [ 130.044207][ T7295] bridge1: entered allmulticast mode [ 130.120407][ T7302] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 130.160735][ T7297] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 130.206475][ T7305] 8021q: adding VLAN 0 to HW filter on device bond2 [ 130.233281][ T7305] bond0: (slave bond2): Enslaving as an active interface with an up link [ 130.274483][ T7307] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 130.292190][ T7307] mac80211_hwsim hwsim13 wlan1: entered promiscuous mode [ 130.419034][ T7311] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 130.641906][ T7328] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 130.735999][ T7328] batman_adv: batadv0: Adding interface: team0 [ 130.742213][ T7328] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.791862][ T30] audit: type=1804 audit(1718344983.353:8): pid=7336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3999093636/syzkaller.0o8aYt/153/cgroup.controllers" dev="sda1" ino=1969 res=1 errno=0 [ 130.809372][ T7328] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 131.116439][ T5121] Bluetooth: hci5: command tx timeout [ 131.228647][ T7366] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 131.467718][ T7378] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.3'. [ 132.116551][ T7407] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 132.126788][ T7407] bridge0: port 3(batadv0) entered blocking state [ 132.133464][ T7407] bridge0: port 3(batadv0) entered disabled state [ 132.142156][ T7407] batadv0: entered allmulticast mode [ 132.149937][ T7407] batadv0: entered promiscuous mode [ 132.157189][ T7407] bridge0: port 3(batadv0) entered blocking state [ 132.163930][ T7407] bridge0: port 3(batadv0) entered forwarding state [ 132.186781][ T6132] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 132.196652][ T6132] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 132.516901][ T30] audit: type=1804 audit(1718344985.083:9): pid=7417 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3999093636/syzkaller.0o8aYt/158/memory.events" dev="sda1" ino=1967 res=1 errno=0 [ 133.197782][ T5121] Bluetooth: hci5: command 0x0419 tx timeout [ 133.268734][ T7436] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 133.281645][ T7438] __nla_validate_parse: 2 callbacks suppressed [ 133.281664][ T7438] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 133.370310][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.378139][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.504595][ T7448] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 133.533965][ T7450] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. [ 133.771767][ T7455] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.1'. [ 134.292476][ T7494] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.299723][ T7495] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 134.421130][ T7500] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1620) ! [ 134.873208][ T30] audit: type=1804 audit(1718344987.433:10): pid=7510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3617783915/syzkaller.4Nlzhj/14/memory.events" dev="sda1" ino=1969 res=1 errno=0 [ 134.999975][ T30] audit: type=1804 audit(1718344987.563:11): pid=7508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3864521148/syzkaller.qFHa6k/173/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 [ 135.854041][ T7543] openvswitch: netlink: Key type 6401 is out of range max 32 [ 136.022113][ T7553] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.094848][ T7553] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 136.121229][ T7558] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 136.131614][ T7553] bridge_slave_1: left allmulticast mode [ 136.138624][ T7553] bridge_slave_1: left promiscuous mode [ 136.144446][ T7553] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.339052][ T7573] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 136.365273][ T7573] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 136.391536][ T7573] bridge0: port 1(vlan0) entered blocking state [ 136.399298][ T7573] bridge0: port 1(vlan0) entered disabled state [ 136.412773][ T7573] vlan0: entered allmulticast mode [ 136.422746][ T7573] veth0_vlan: entered allmulticast mode [ 136.433989][ T7573] vlan0: entered promiscuous mode [ 136.832153][ T7595] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.0'. [ 136.845945][ T7595] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 136.913985][ T7603] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 137.049382][ T30] audit: type=1804 audit(1718344989.613:12): pid=7612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3864521148/syzkaller.qFHa6k/183/memory.events" dev="sda1" ino=1968 res=1 errno=0 [ 137.058360][ T7603] 8021q: adding VLAN 0 to HW filter on device bond3 [ 137.381578][ T7610] bond3 (unregistering): Released all slaves [ 137.799622][ T7628] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.875374][ T7632] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 138.202402][ T7643] openvswitch: netlink: Missing key (keys=80040, expected=200000) [ 138.643875][ T7666] __nla_validate_parse: 3 callbacks suppressed [ 138.643899][ T7666] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 138.719543][ T7666] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 138.752640][ T7666] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 139.008849][ T7686] tipc: Started in network mode [ 139.019923][ T7686] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 139.066779][ T7686] tipc: Enabled bearer , priority 10 [ 139.183530][ T7692] xt_l2tp: unknown flags: 42 [ 139.222913][ T7696] tipc: Started in network mode [ 139.246793][ T7696] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 139.277896][ T7696] tipc: Enabled bearer , priority 10 [ 139.827953][ T7725] raw_sendmsg: syz-executor.0 forgot to set AF_INET. Fix it! [ 139.873576][ T7725] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 140.103477][ T7732] openvswitch: netlink: Missing key (keys=80040, expected=200000) [ 140.117814][ T7736] veth0_vlan: left allmulticast mode [ 140.181302][ T5161] tipc: Node number set to 4269801491 [ 140.218800][ T7736] vlan0 (unregistering): left allmulticast mode [ 140.240660][ T7736] vlan0 (unregistering): left promiscuous mode [ 140.266341][ T7736] bridge0: port 1(vlan0) entered disabled state [ 140.398844][ T5165] tipc: Node number set to 4269801491 [ 140.412474][ T7766] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 140.421413][ T7766] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 140.430186][ T7766] netlink: 181400 bytes leftover after parsing attributes in process `syz-executor.1'. [ 140.852383][ T7805] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 140.964227][ T7805] 8021q: adding VLAN 0 to HW filter on device bond1 [ 141.034110][ T7818] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 141.045255][ T7818] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 141.068201][ T7818] netlink: 181400 bytes leftover after parsing attributes in process `syz-executor.3'. [ 141.225466][ T7805] bond1 (unregistering): Released all slaves [ 141.232642][ T7823] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 141.274084][ T7823] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 141.860777][ T7832] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.1'. [ 142.303373][ T7850] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 142.411451][ T7857] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 142.428832][ T7857] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 142.459034][ T7852] syz_tun: entered promiscuous mode [ 142.469441][ T7852] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 142.485930][ T7852] Cannot create hsr debugfs directory [ 142.834389][ T7881] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 142.843854][ T7881] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 143.147235][ T7894] syz_tun: entered promiscuous mode [ 143.153833][ T7894] bridge0: entered promiscuous mode [ 143.160367][ T7894] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 143.168853][ T7894] Cannot create hsr debugfs directory [ 143.551797][ T7916] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 143.904843][ T7933] __nla_validate_parse: 6 callbacks suppressed [ 143.904864][ T7933] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 144.064462][ T7939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 144.134127][ T7939] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 144.173199][ T7943] bridge_slave_0: left allmulticast mode [ 144.179203][ T7943] bridge_slave_0: left promiscuous mode [ 144.185126][ T7943] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.204335][ T7943] bond0: (slave bond_slave_0): Releasing backup interface [ 144.238676][ T7943] bond0: (slave bond_slave_1): Releasing backup interface [ 144.282067][ T7943] team0: Port device team_slave_0 removed [ 144.302235][ T7943] team0: Port device team_slave_1 removed [ 144.319897][ T7943] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.328753][ T7943] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.338169][ T7943] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.346246][ T7943] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.958751][ T7976] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 144.974522][ T7976] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 145.045499][ T7980] pimreg: entered allmulticast mode [ 145.174395][ T7984] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.4'. [ 145.191490][ T7984] pimreg: left allmulticast mode [ 145.440046][ T5121] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 145.450624][ T5121] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 145.467361][ T5121] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 145.477815][ T5121] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 145.485565][ T5121] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 145.497023][ T5121] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 145.690354][ T7994] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 145.789122][ T7985] chnl_net:caif_netlink_parms(): no params data found [ 145.975030][ T8018] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 146.001711][ T7985] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.009894][ T7985] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.017688][ T7985] bridge_slave_0: entered allmulticast mode [ 146.025203][ T7985] bridge_slave_0: entered promiscuous mode [ 146.034685][ T7985] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.043252][ T7985] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.050634][ T7985] bridge_slave_1: entered allmulticast mode [ 146.058128][ T7985] bridge_slave_1: entered promiscuous mode [ 146.091815][ T8018] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 146.117042][ T7985] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.129989][ T7985] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.175259][ T7985] team0: Port device team_slave_0 added [ 146.185036][ T7985] team0: Port device team_slave_1 added [ 146.214674][ T7985] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.222173][ T7985] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.250819][ T7985] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.264287][ T7985] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.271599][ T7985] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.298107][ T7985] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.349915][ T7985] hsr_slave_0: entered promiscuous mode [ 146.360334][ T7985] hsr_slave_1: entered promiscuous mode [ 146.371466][ T7985] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 146.379587][ T7985] Cannot create hsr debugfs directory [ 146.533169][ T7985] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.627235][ T7985] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.731300][ T7985] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.827450][ T7985] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.878746][ T8033] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 146.887755][ T8033] netlink: 55 bytes leftover after parsing attributes in process `syz-executor.4'. [ 146.906855][ T8033] team0: Port device virt_wifi0 added [ 147.080892][ T8042] team0: Port device vlan4 added [ 147.153886][ T7985] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 147.176081][ T7985] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 147.200157][ T7985] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 147.217688][ T7985] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 147.245007][ T8052] pimreg: entered allmulticast mode [ 147.269493][ T8055] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.301842][ T8055] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 147.389824][ T7985] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.413734][ T7985] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.416196][ T8057] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.4'. [ 147.426665][ T5161] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.437190][ T5161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.467694][ T8057] pimreg: left allmulticast mode [ 147.500706][ T5166] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.507953][ T5166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.557605][ T7985] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 147.596642][ T5121] Bluetooth: hci2: command tx timeout [ 147.708690][ T7985] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.768809][ T7985] veth0_vlan: entered promiscuous mode [ 147.796917][ T7985] veth1_vlan: entered promiscuous mode [ 147.849340][ T7985] veth0_macvtap: entered promiscuous mode [ 147.886470][ T7985] veth1_macvtap: entered promiscuous mode [ 147.914256][ T7985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.919877][ T8065] syz-executor.1[8065] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 147.936659][ T7985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.964550][ T7985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.981284][ T7985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.991439][ T7985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.002692][ T7985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.013492][ T7985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.025042][ T7985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.036827][ T7985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.047444][ T7985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.059700][ T7985] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.084460][ T7985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.099621][ T7985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.110421][ T7985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.121071][ T7985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.132189][ T7985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.143418][ T7985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.155042][ T7985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.173876][ T7985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.191445][ T7985] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.209398][ T7985] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.226306][ T7985] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.235063][ T7985] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.247976][ T7985] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.293209][ T8072] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 148.304222][ T8072] netlink: 55 bytes leftover after parsing attributes in process `syz-executor.1'. [ 148.315099][ T8072] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 148.337829][ T8072] team0: Device virt_wifi0 failed to register rx_handler [ 148.490393][ T7776] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.506841][ T7776] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.545171][ T7773] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.557523][ T7773] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.622978][ T8087] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.721677][ T8091] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 148.739312][ T8091] team0: Device ipvlan1 failed to register rx_handler [ 148.831982][ T8095] pimreg: entered allmulticast mode [ 148.886227][ T8098] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 148.908811][ T8098] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 148.953801][ T8098] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.965953][ T8098] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.974938][ T8098] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.983925][ T8098] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.001352][ T7779] ------------[ cut here ]------------ [ 149.003969][ T8098] vxlan0: entered promiscuous mode [ 149.007773][ T7779] WARNING: CPU: 0 PID: 7779 at net/wireless/sme.c:846 __cfg80211_connect_result+0x19ea/0x21d0 [ 149.023343][ T7779] Modules linked in: [ 149.027388][ T7779] CPU: 0 PID: 7779 Comm: kworker/u8:38 Not tainted 6.10.0-rc2-syzkaller-00249-gbe27b8965297 #0 [ 149.038333][ T7779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 149.048687][ T7779] Workqueue: cfg80211 cfg80211_event_work 2024/06/14 06:03:21 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 149.054492][ T8107] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 149.054561][ T7779] RIP: 0010:__cfg80211_connect_result+0x19ea/0x21d0 [ 149.065448][ T8107] __nla_validate_parse: 4 callbacks suppressed [ 149.065465][ T8107] netlink: 55 bytes leftover after parsing attributes in process `syz-executor.0'. [ 149.069420][ T7779] Code: a3 00 89 c3 31 ff 89 c6 e8 c3 68 b3 f6 85 db 74 29 e8 9a 94 99 f6 84 c0 74 27 e8 71 64 b3 f6 e9 84 00 00 00 e8 67 64 b3 f6 90 <0f> 0b 90 4c 89 ff 4c 89 f6 e8 68 23 00 00 eb 91 e8 51 64 b3 f6 eb [ 149.069444][ T7779] RSP: 0018:ffffc900046879e0 EFLAGS: 00010293 [ 149.069467][ T7779] RAX: ffffffff8ae2c219 RBX: 0000000000000000 RCX: ffff8880592e3c00 [ 149.069483][ T7779] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 149.069496][ T7779] RBP: ffffc90004687b00 R08: ffffffff8ae2bde9 R09: 1ffffffff25f56bd [ 149.069512][ T7779] R10: dffffc0000000000 R11: fffffbfff25f56be R12: ffff8880602f8098 [ 149.069527][ T7779] R13: dffffc0000000000 R14: ffff8880602f8018 R15: ffff88807dbb8000 [ 149.069541][ T7779] FS: 0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 149.069557][ T7779] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 149.069571][ T7779] CR2: 0000001b2df30000 CR3: 000000005d13a000 CR4: 00000000003506f0 [ 149.069588][ T7779] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 149.186306][ T7779] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 149.194574][ T7779] Call Trace: [ 149.198346][ T7779] [ 149.201407][ T7779] ? __warn+0x163/0x4e0 [ 149.206124][ T7779] ? __cfg80211_connect_result+0x19ea/0x21d0 [ 149.212151][ T7779] ? report_bug+0x2b3/0x500 [ 149.216975][ T7779] ? __cfg80211_connect_result+0x19ea/0x21d0 [ 149.223008][ T7779] ? handle_bug+0x3e/0x70 [ 149.227425][ T7779] ? exc_invalid_op+0x1a/0x50 [ 149.232140][ T7779] ? asm_exc_invalid_op+0x1a/0x20 [ 149.237237][ T7779] ? __cfg80211_connect_result+0x15b9/0x21d0 [ 149.243249][ T7779] ? __cfg80211_connect_result+0x19e9/0x21d0 [ 149.249392][ T7779] ? __cfg80211_connect_result+0x19ea/0x21d0 [ 149.255424][ T7779] ? __pfx___cfg80211_connect_result+0x10/0x10 [ 149.261782][ T7779] ? lockdep_hardirqs_on+0x99/0x150 [ 149.267100][ T7779] cfg80211_process_wdev_events+0x356/0x510 [ 149.273058][ T7779] cfg80211_process_rdev_events+0xac/0x110 [ 149.279283][ T7779] ? process_scheduled_works+0x945/0x1830 [ 149.285128][ T7779] cfg80211_event_work+0x2f/0x40 [ 149.290491][ T7779] process_scheduled_works+0xa2c/0x1830 [ 149.296168][ T7779] ? __pfx_process_scheduled_works+0x10/0x10 [ 149.302225][ T7779] ? assign_work+0x364/0x3d0 [ 149.307351][ T7779] worker_thread+0x86d/0xd70 [ 149.312044][ T7779] ? __kthread_parkme+0x169/0x1d0 [ 149.317613][ T7779] ? __pfx_worker_thread+0x10/0x10 [ 149.322768][ T7779] kthread+0x2f0/0x390 [ 149.327019][ T7779] ? __pfx_worker_thread+0x10/0x10 [ 149.332428][ T7779] ? __pfx_kthread+0x10/0x10 [ 149.337154][ T7779] ret_from_fork+0x4b/0x80 [ 149.341606][ T7779] ? __pfx_kthread+0x10/0x10 [ 149.346258][ T7779] ret_from_fork_asm+0x1a/0x30 [ 149.351067][ T7779] [ 149.354106][ T7779] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 149.361765][ T7779] CPU: 0 PID: 7779 Comm: kworker/u8:38 Not tainted 6.10.0-rc2-syzkaller-00249-gbe27b8965297 #0 [ 149.373594][ T7779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 149.383938][ T7779] Workqueue: cfg80211 cfg80211_event_work [ 149.389936][ T7779] Call Trace: [ 149.393250][ T7779] [ 149.396193][ T7779] dump_stack_lvl+0x241/0x360 [ 149.401084][ T7779] ? __pfx_dump_stack_lvl+0x10/0x10 [ 149.406372][ T7779] ? __pfx__printk+0x10/0x10 [ 149.410979][ T7779] ? vscnprintf+0x5d/0x90 [ 149.415321][ T7779] panic+0x349/0x860 [ 149.419233][ T7779] ? __warn+0x172/0x4e0 [ 149.423506][ T7779] ? __pfx_panic+0x10/0x10 [ 149.428218][ T7779] ? ret_from_fork_asm+0x1a/0x30 [ 149.433189][ T7779] __warn+0x346/0x4e0 [ 149.437189][ T7779] ? __cfg80211_connect_result+0x19ea/0x21d0 [ 149.443177][ T7779] report_bug+0x2b3/0x500 [ 149.447504][ T7779] ? __cfg80211_connect_result+0x19ea/0x21d0 [ 149.453572][ T7779] handle_bug+0x3e/0x70 [ 149.457754][ T7779] exc_invalid_op+0x1a/0x50 [ 149.462252][ T7779] asm_exc_invalid_op+0x1a/0x20 [ 149.467117][ T7779] RIP: 0010:__cfg80211_connect_result+0x19ea/0x21d0 [ 149.473701][ T7779] Code: a3 00 89 c3 31 ff 89 c6 e8 c3 68 b3 f6 85 db 74 29 e8 9a 94 99 f6 84 c0 74 27 e8 71 64 b3 f6 e9 84 00 00 00 e8 67 64 b3 f6 90 <0f> 0b 90 4c 89 ff 4c 89 f6 e8 68 23 00 00 eb 91 e8 51 64 b3 f6 eb [ 149.493578][ T7779] RSP: 0018:ffffc900046879e0 EFLAGS: 00010293 [ 149.499737][ T7779] RAX: ffffffff8ae2c219 RBX: 0000000000000000 RCX: ffff8880592e3c00 [ 149.507739][ T7779] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 149.515742][ T7779] RBP: ffffc90004687b00 R08: ffffffff8ae2bde9 R09: 1ffffffff25f56bd [ 149.523724][ T7779] R10: dffffc0000000000 R11: fffffbfff25f56be R12: ffff8880602f8098 [ 149.531874][ T7779] R13: dffffc0000000000 R14: ffff8880602f8018 R15: ffff88807dbb8000 [ 149.540207][ T7779] ? __cfg80211_connect_result+0x15b9/0x21d0 [ 149.546358][ T7779] ? __cfg80211_connect_result+0x19e9/0x21d0 [ 149.552612][ T7779] ? __pfx___cfg80211_connect_result+0x10/0x10 [ 149.558783][ T7779] ? lockdep_hardirqs_on+0x99/0x150 [ 149.563978][ T7779] cfg80211_process_wdev_events+0x356/0x510 [ 149.569905][ T7779] cfg80211_process_rdev_events+0xac/0x110 [ 149.575732][ T7779] ? process_scheduled_works+0x945/0x1830 [ 149.581732][ T7779] cfg80211_event_work+0x2f/0x40 [ 149.588124][ T7779] process_scheduled_works+0xa2c/0x1830 [ 149.593966][ T7779] ? __pfx_process_scheduled_works+0x10/0x10 [ 149.600155][ T7779] ? assign_work+0x364/0x3d0 [ 149.604762][ T7779] worker_thread+0x86d/0xd70 [ 149.609395][ T7779] ? __kthread_parkme+0x169/0x1d0 [ 149.614442][ T7779] ? __pfx_worker_thread+0x10/0x10 [ 149.619576][ T7779] kthread+0x2f0/0x390 [ 149.623661][ T7779] ? __pfx_worker_thread+0x10/0x10 [ 149.628778][ T7779] ? __pfx_kthread+0x10/0x10 [ 149.633989][ T7779] ret_from_fork+0x4b/0x80 [ 149.638593][ T7779] ? __pfx_kthread+0x10/0x10 [ 149.643624][ T7779] ret_from_fork_asm+0x1a/0x30 [ 149.648414][ T7779] [ 149.651661][ T7779] Kernel Offset: disabled [ 149.656094][ T7779] Rebooting in 86400 seconds..