last executing test programs: 42.576113849s ago: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r0], 0x84}}, 0x0) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, 0x0, 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) preadv(r3, &(0x7f0000001380)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x4, 0x0) sendmsg$DEVLINK_CMD_RATE_SET(r3, &(0x7f0000000580)={&(0x7f0000000200), 0xc, &(0x7f0000000240)={&(0x7f00000004c0)={0x98, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x7}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x3}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_SHARE={0x0, 0xa6, 0x1ff}, @DEVLINK_ATTR_RATE_TX_MAX={0xffffffffffffff67, 0xa7, 0x5}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x2}]}, 0x98}, 0x1, 0x0, 0x0, 0xc841}, 0x20048091) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000002900000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000418230000", @ANYRES32=r4, @ANYBLOB="0000000004000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x3, 0xff7, &(0x7f0000001e00)=""/4087}, 0x90) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000007c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0xfd, 0x0}}]}, &(0x7f0000000180)=0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)={0x4c, r8, 0x1, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}}]}, 0x4c}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r5, &(0x7f0000000800)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000680)={0x120, r8, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8a}, {0x6, 0x11, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x3ff}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x81}, {0x6, 0x11, 0x9}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x40}}]}, 0x120}, 0x1, 0x0, 0x0, 0x81}, 0x10000) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000640)={'batadv_slave_1\x00'}) 40.637984739s ago: executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000280)={0x0, 0x68, &(0x7f0000000240)={&(0x7f0000000180)={0x38, 0x1403, 0x13, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bond\x00'}}]}, 0x38}}, 0x0) 40.529216576s ago: executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000054c0)={0x14, 0x24, 0x301, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000004000000020000000000001104000000ffffffff000000000000000200000000000000000602000000820000000000000e030000000000000000005f000000002c756489b5fe39802b02370a08a0c37e5641a54b9e834da3aa01a77c262db3417414ac770d83e92fcb731eab9c3fad"], 0x0, 0x54, 0x0, 0x3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pipe(&(0x7f0000000000)={0xffffffffffffffff}) write$cgroup_pressure(r1, &(0x7f0000000040)={'full', 0x20, 0x6, 0x20, 0x40}, 0x2f) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000ac0), 0x90) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @remote}, {0x0, @dev}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f00000000c0)=0x41) pwritev(r2, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02000040", 0x42}], 0x1, 0x0, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000080)={0x43, 0x3}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x43}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f00000001c0)={0x0, 0xc, 0x0, 0x3}, 0x10) r6 = socket$tipc(0x1e, 0x0, 0x0) bind$tipc(r6, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x43, 0x2}}}, 0x10) r7 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x2, 0x3, 0x290, 0xb, 0x0, 0xf0, 0xf8, 0xf0, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x3, 0x0, {[{{@ip={@multicast1, @multicast1, 0x0, 0x0, 'ip6gretap0\x00', 'syzkaller1\x00', {}, {}, 0x11}, 0xb000000, 0xd8, 0xf8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x8}}, @common=@unspec=@quota={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000040)={0x43, 0x4}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x43) 12.38313297s ago: executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140), 0xfecc) (async) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="58120000120023ca28bd7000fedbdf251d30001f4e244e230100000002000000050000005b01000007000000000000003f000000d5080000", @ANYRES32, @ANYBLOB="05000000ffff000003000000ff0100004200010093"], 0x1258}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) unshare(0x2000400) ioctl$int_in(r3, 0x5452, &(0x7f00000021c0)=0x95) ppoll(&(0x7f0000000000)=[{r3, 0x1200}], 0x1, 0x0, 0x0, 0x0) (async) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="020300030c00000000000000000000000200090008000000e90000000000000003000600000000000200000000000000000000000000000002000100000000000000000000000000030005000000000002000000ac1414aa0000000000000000da8fe8583c8e754a626da992947cf872335d19561f35ddfb77673b62cf44e247c80a0361b4f6fdd48eeee1b4da883fb35de836f1dd0f1318d0f0f02e3ee440fc15267138e4ac79"], 0x60}, 0x1, 0x7}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xf, 0x9, &(0x7f0000001440)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000500000085000000110000005f0000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) (async) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001740)=ANY=[@ANYBLOB="efb88000003775d7c5283583358d77f3f5f83b8700ea8b5203df56514e6a4174054de9d878e0b9bd12b730aab1cfadae966deede4e23fb17b4c18611b6519effbb6489030a85e0393f671bf4abdbf9049ff3c28e26346592dc4d094cf55ffc38da0b1f1903b39580f8d062bf1cd66c36abf1ce4d2c08c8304848400c9e980900953a94a2e293f7dfafc09e9a46539f", @ANYRES32=0x0, @ANYBLOB="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"], 0x398}}, 0x0) (async) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r7 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000600)) socket$netlink(0x10, 0x3, 0x0) (async) r8 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001140)={&(0x7f0000000640)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x48084) (async, rerun: 64) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="30000000000b0102000000000000000000000000080003400000010021295b5b00000000"], 0x30}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000008c0)=@newqdisc={0x18c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r9, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@TCA_STAB={0x168, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xbe, 0x8, 0x0, 0xfe9, 0x2, 0x8, 0x1000, 0x3}}, {0xa, 0x2, [0x4, 0x1f, 0xa1b]}}, {{0x1c, 0x1, {0x0, 0x5, 0x800, 0xffff, 0x0, 0x6, 0x7cd3, 0x1}}, {0x6, 0x2, [0xb93e]}}, {{0x1c, 0x1, {0x6, 0x3f, 0xf2b1, 0x4, 0x0, 0x7, 0xd8a9, 0x8}}, {0x14, 0x2, [0xfffc, 0x800, 0x59, 0xfe, 0x4, 0x8001, 0xb901, 0x0]}}, {{0x1c, 0x1, {0x4, 0x81, 0x0, 0xd27, 0x1, 0x1f, 0x6e1, 0x6}}, {0x10, 0x2, [0x9ecc, 0x400, 0x20, 0x3f, 0x6, 0x8]}}, {{0x1c, 0x1, {0x6, 0x80, 0x8001, 0x2, 0x0, 0x5, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x9, 0x0, 0x2, 0xf37d, 0x2, 0x2da, 0x1, 0x7}}, {0x12, 0x2, [0x71, 0x101, 0x7, 0x40, 0x4, 0x8, 0x8]}}, {{0x1c, 0x1, {0x5, 0xd1, 0x0, 0xffffff00, 0x1, 0x2, 0x6, 0x2}}, {0x8, 0x2, [0x3, 0x40]}}, {{0x1c, 0x1, {0x3, 0xc0, 0x2, 0xffffff92, 0x1, 0x2, 0x9, 0x1}}, {0x6, 0x2, [0x9]}}, {{0x1c, 0x1, {0x3, 0x2f, 0x0, 0x78dd, 0x1, 0x2, 0x9, 0x1}}, {0x6, 0x2, [0x8]}}]}]}, 0x18c}}, 0x0) 12.050150823s ago: executing program 4: socket$netlink(0x10, 0x3, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz0\x00', 0x200002, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'veth0_to_hsr\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000400)={'ip6gre0\x00', 0x0, 0x2f, 0x9, 0x2, 0x20, 0x71, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10, 0x10, 0x1, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000005c0)={'tunl0\x00', &(0x7f0000000940)={'erspan0\x00', 0x0, 0x0, 0x1, 0x7, 0x14c91c3, {{0x3a, 0x4, 0x1, 0x3, 0xe8, 0x68, 0x0, 0x41, 0x4, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x11}, {[@timestamp={0x44, 0x18, 0xe0, 0x0, 0x6, [0x2e0, 0x3, 0x0, 0x7, 0x4f]}, @timestamp_prespec={0x44, 0x34, 0x96, 0x3, 0x7, [{@rand_addr=0x64010102, 0x9}, {@empty, 0x40000}, {@private=0xa010102}, {@remote, 0xc0000000}, {@rand_addr=0x64010101, 0x5}, {@empty}]}, @noop, @timestamp_addr={0x44, 0x3c, 0x9b, 0x1, 0x9, [{@loopback}, {@empty, 0x1}, {@private=0xa010101, 0xfb5}, {@multicast1, 0x8a}, {@dev={0xac, 0x14, 0x14, 0xf}, 0xfffffffd}, {@empty, 0x8001}, {@broadcast, 0xfffffffa}]}, @cipso={0x86, 0x39, 0x0, [{0x0, 0x10, "a1fbc12b69050cb87f0093f6a172"}, {0x5, 0xf, "45b818aae69e1a193bc0cf8c87"}, {0x2, 0x7, "54d0d15f32"}, {0x0, 0xd, "c515d447f5314bdda94201"}]}, @end, @ssrr={0x89, 0xf, 0xec, [@local, @multicast2, @multicast2]}]}}}}}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x18, &(0x7f0000000840)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001c00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$netlink(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) unshare(0x20040600) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0x2}], 0x1}, 0x20000801) recvmsg(r4, &(0x7f0000000000)={0x0, 0xd000000, 0x0}, 0x40002002) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[], 0x60}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) connect$inet6(r5, &(0x7f0000000340)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r5, 0x1) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000004000000140012800b00010062617461647600000400028008000a00", @ANYRES32, @ANYBLOB="0a000100bb"], 0x48}}, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000140)={0x7, 0x1, 0x202, 0x1, 0x8, 0x1, 0x73, 0x80000000}, &(0x7f0000000180)=0x20) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c4400000000000e0feff00850000000f00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r8, r7, 0x7}, 0x10) 11.060637446s ago: executing program 4: r0 = socket(0x25, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='tlb_flush\x00'}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x3, 0x1}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x7}}], 0x400000000000181, 0x9200000000000000) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000140)={0x24, {{0x29, 0x0, 0x2000000, @private2, 0x1000000}}}, 0x88) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0x8) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) writev(0xffffffffffffffff, &(0x7f0000002700)=[{&(0x7f0000002400)='N', 0x1}], 0x1) writev(r3, &(0x7f0000002300)=[{&(0x7f0000000200)="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", 0x1000}, {&(0x7f0000000140)="ec", 0x1}], 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r5, 0x83625fc5352ba305, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) 10.892897637s ago: executing program 4: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002480)={0x6, 0xc, &(0x7f0000002700)=ANY=[@ANYBLOB="0300000000000000562a7d5736260b00da85100000000000000000000000183d00"/45, @ANYBLOB="b0389cea57e25b246427ce5949227b961a851908f151d5721337ae498395ffcad95331adf3b40223cab558ff0300001a770537246bc1656bb25509ee5e0e3a24e3be3e452f74e1a1b32853e9c5fedac4394d365727a9b66fadbc30651d6255732690149d6d16dd8fd1761e3808d9d9d45b632aa1854861ac7be50a514c767e98acd37234090470841215106a9ed9ba457ca5eca3f1db38f24c884dce775edcc9c930c5bd938d0000000400000000", @ANYRES16, @ANYRES16], &(0x7f0000001cc0)='syzkaller\x00', 0x9, 0x30, &(0x7f0000000200)=""/48, 0x41100, 0x9, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002440)={0x0, 0xf, 0x1}, 0x10}, 0x90) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1=0xe0000010}}, 0x1c, 0x0}}], 0x6c00, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002600)=[{{0x0, 0x0, &(0x7f0000000740)=[{0x0}, {&(0x7f00000002c0)="b4ce26100cdadb46b08eca31e2058e96432a76466e6ea70ee835efa3fa51b2fa554115ec00aacd6790bb0f21e6c78a2eaec99d0ec205aba84838f5630324e0e62f8a4cbb1d0fac332597a675e2373c688fe5eaf662ad53cfc37eddabba1e70aee42d18ddea80832a3c40e250fdf18920290842d798dde1f4cc7e1ae24145eaff545802d6e795436d847a9ca35168", 0x8e}, {&(0x7f0000000e40)="8f9ffc2ff02ff20924876156c6f3cb25b9c5163b7574550c23fd359ef839543043cdf074839544caa76bce86fb5396aee708868daa5bab4e15be7d9f7b3ecdde74544602f84cf5c9bb565e3d51f79f48452fc3b06efcb3670500b19731297d18b23897a51591c8a4e80f0342640a6b4ccd827f78c7e4c26590df354e729e7d6449cbe17256c60e9eb2c64ae2dd3f705730cf72016c929c46997fadb5917083c570203a7fe086d1e00b422184", 0xac}, {&(0x7f0000000a40)="34ef0ee7f20accebe691988f0000001f5896c4a22c2d94bb05558c724e68526b8e20cf6c69dc36229cf1f29e36c77ef61f5686a0e3", 0x35}, {&(0x7f0000001200)="b7bd849b0249701d59f4ad516376f9e969bbba49d37e54870b21cf9fc59303f35a81f3cda6eb16ed753944790fe2b6cdb12f48afd3e4df5450169c5a6eba940c5ab1626b11ffd6b37dc9bf8a065e825c074b0010c51365f6c46c1afd4677e91376793f1fb7abf0f6c9825280591dbc51791ab224cfa835581b7b8de2fa3b6218e91f02379496314759f293f264ca34dcedbaa241a6cb29c05280a116fc5d55f10e7fe3a1a943d38c938d964bf400f5753f19b80e1589d067c8c303df70c74b23727108de200000000000000000", 0xcd}, {&(0x7f00000005c0)="6ed674038af06c94f0f460ef07daa761605e70698dff93786d697709bb3659d42935f66677d0639ed8858c86cb86ddd7f68f32a598a11c70f7b697543249edd3575514c7c6414b4e87af19839e0d67443fa2ada515376442a09b9f9445504fd5f6237d3a415d8bdd56a0ac000e81ac89039de48bb60759480554395d8f2cd74034e5", 0x82}, {&(0x7f0000000040)}], 0x7, &(0x7f00000007c0), 0x0, 0x24040000}}, {{&(0x7f0000000800)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001c40)=[{&(0x7f0000000980)="d611afdefa3e3862b8cca9ab08858abe75aa75d3c36f306c725b1a6687359d3f4558a52aa5c0f874c3253c76d6173ded86de19747bb27a7455", 0x39}, {&(0x7f00000008c0)="ed4f3807be6c3186f4a33922e2c50ecaf73f486f15499aaf1866f1684e904427ea69f7a2c0866121ede86a5dfe1d6576f8ebc677a6e5723072d84cdca0a7215647f5683ce219658ad665f82ab615cae84001b9b712a69658d5948c19a6ee9799782bc159253f62733a267522088c8d7361da0f0b8cd0abecd56cb4c7cdb8ab31112f214b73b658dde5efbf74832aced73824d669febec739a1fcc28bbdfa009f", 0xa0}, {&(0x7f0000001d00)="197858d2b1cf2144b3673edf5ee8aba1dc4a3d49ed6f2f893093d3ce44f7e8a1320d137535d48b4ac247dc686b79bd90a81f051045", 0x35}, {&(0x7f0000000bc0)="babd07f758c7294695ad3fb5f83af5a0a8a7c09c863823e069ea1eae2002f88859d2d83ac422b2cb3910cbd2f6fdda5347d04d76fb95fb4396de0672992d5063be0d3d7777523c809726ac297174ad93f6e4da279edf1f1a5f9950b3d015a03c38ee31ff5bddfe71", 0x68}], 0x4, &(0x7f0000000a00)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0x20, 0x4c804}}, {{0x0, 0x0, &(0x7f0000002000), 0x0, 0x0, 0x0, 0x80}}, {{&(0x7f0000002040)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000002180)=[{&(0x7f00000020c0)="21ffaaeef8b3452163f4e8ef1a54678d8392a55617f4b57d640c490c0e9bcd909af4964db2f6a54d24e152bce0fd9161621114477274d8df8d76e7823beef946baf8f6af8591f4fd2f2e4ea4ec6bdbc169e2b8251e2c107c1d8bb17edaf7621d4b0804c605f1cfd6b254875036e2b8f9983af91ac53e95212da1659866bcd17d51ad15498ade6eaa3671da3fa17fd2410085a80224cfc3c820a3705a97ea2f62f234", 0xa2}], 0x1, &(0x7f0000001780)=ANY=[@ANYRESHEX=r1, @ANYRES64, @ANYRES32, @ANYRES32, @ANYRES16, @ANYRESOCT, @ANYRESDEC, @ANYRESDEC, @ANYRES64, @ANYBLOB, @ANYRES64=0xffffffffffffffff, @ANYRES32, @ANYRES32, @ANYRES8, @ANYRES8, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000100001c000000000000000100000002000000814e4e0c11ab971ec85db893dcbdd09b87480f02b6ede7cd21f6f5be7e9ab08b446ce71282b0594d90d1eca541c501b8bd24c90b058dfd72ea6769a780dd2e3dd21c890085ae2e454e68101670783fb274fd400b0c943688985315eb617844023c82560ea6bd83ba054d62158ceb82c45af5b276c5ba075cc662ee4ff04c932bc678a34538b9be76ec14c32f3ba42a72c530330c2a616b4dfa57c274d92ba5260a46f72fa7e922ea2988196143d9d5e22e9912c27c52a9b5db0cc15b959693a00d17f121a20062285c253b5dd4153b8b42c7ad58e285067c7a470b93440b9fc800a32ae06864efd04418cdf798e70df2d4a0000000fffb0000000000000000000000000000000000a89bffec4f8622b13ec98180cc372af50b9d1af4f1b75338cfd38ff7880acb4374165f45bd8e45224dbad9e43d107e88297b0922eb39e6922b644c074d24661251405349ca06a2284d4b1e5a3558fd463b0ccb37f740b5f3f0fffc7606ca27e725389253", @ANYRES16, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES16, @ANYRESOCT, @ANYRES32=r1, @ANYRES32], 0xd8, 0x4010}}], 0x4, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000240)=@file={0x0, './file0\x00'}, 0xfffffffffffffe71, &(0x7f0000001300)=[{&(0x7f0000000440)="ff915a45d7c5f7c8568ebdc57386a19e302e55f53d1b2a9388fd12ad903c29d3e976d8100612cd0800000000000000d7a274b8c2401413676458fa504e09e887ef6ff0cdd758010df00f564a11c1713dbcabd72ba811021faee1ac8d79bebdc3fe43f43c66e89dd70c176a25738767a6a417a9ef94cf1b85c3d2", 0x7a}, {&(0x7f0000000500)="06bab072b09e636fc7e486e1c1f30ed7b8376c131e7753d31930827e07d44a4c06c3a6a3630fbb1ed4b84bb6e674968e67310078013dc9f2503bf09b4c93ba0f48a556bae048a362dd2f", 0x4a}, {&(0x7f0000000c40)="ec32075af1322e1c7e56eb9fcbba3252033944c118ac35c5373bec014f4bdb6c4de024a1b6565077626daaac314db078b7568221bd5e8259c1e32a3af2c680a86a67ff0df9", 0x45}, {&(0x7f0000000600)="a9ef4d07e893054155829967a251655a0f074e8c92d77db90c391c6fc8e119ad2021b5aa814e26805a1de486be6a34e7d46dfe23ed511e7c803b84272cbef991ce0b0b6600e9c680beae8e6bf430ebfdfd9c807862ef45320caf34c60f7b2083256d2d5e91ca2ceb9d2492c2f507bbf77adbfffda6b088582edb495fb2526892750995e30868b8c897cc972329a6ddef3ba1922141981efdd51c2a495a181d1de8a9d0b3", 0xa4}, {&(0x7f00000006c0)="057fd08656a165bd0dccb631c436c81971cae814c374abb2401493d87b7ecdf51e98b91c95c1d78878911c02c326cec93b8bfa168428fce1e9eeed0444eacbe8a3c5992f844221b9651a50fbe693675fcdbabc590979027e059bf227e65108bbb0a9f337a3f110fd12cb4141d126d600cd4b5aeed5019bb1d589523b61ef61cde70d51f84d9d719b300084552c3ba2d9c799de1c75e1049889dc118828b7764e30291077aefb1535d1a1d51dd8beb2435713b5eff84397a4a4c03db093dfc74840835bb91d4dffea1051fdc62f6b81da8336aee50300b2b2922323ed021d", 0xde}, {&(0x7f00000007c0)="a854f23e82daddef695070a2506f0bfc18f4a49b377f160b7037122633343c67302980e5bb01c03eb16e705487c7399acc513292", 0x34}, {&(0x7f0000000b80)="5e87b031fe712e8de6bb10501abd040060cf15164380fca4eec08f765031d040208cf6f3b5cc", 0x26}], 0x7, &(0x7f0000000f00)=ANY=[@ANYBLOB="dbe3702e4275c91474df4698ed223f2fce557a", @ANYRESOCT, @ANYRESOCT, @ANYRES32, @ANYRES32, @ANYBLOB="9ac0318a06861d16cb6ba9d6b3547243cee654195db4c67797175eb9ea3f0949a020a569a7855efcae81ca70c5762995e58cfc7d94d32bcd0dd7948bd66c81ecb00437476649690dcbe96b81878533e145e7cd7353872bd10dd8dea7b203e2c491f64344e196131dbf233db51e7bac967a4eb80fb81d4ae954131c7f4c246565cc07798781bc4667f63e7dd7f3998eb6e4803b12d3c704b2e35b8c2d7b65fe0a59396177e764b9af6f52509b739f550eff9aeb2b47ad60c9e5df5b57ddba42e350b652cf47535b6d37f769c6f5c38fe4b70ecc90c1d208c8c0f5aaa9ddbaf5d414dbcf1afe615276ca73de45adb4fc4eb53b", @ANYRES64, @ANYRES32, @ANYRES32=0x0, @ANYRESHEX, @ANYRESOCT=r3, @ANYRES32=0x0, @ANYRES8=r2, @ANYRESDEC, @ANYRESOCT=r4], 0xffffffa1}, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600000f500140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=r5, @ANYRES32=0x41424344, @ANYBLOB="6c0000ff80780040"], 0x0) syz_emit_ethernet(0x52, &(0x7f0000000a80)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000088a827008100260086dd600a843500140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=r5, @ANYRES32=0x41424344, @ANYBLOB="5004000090780000fc59a864786aa27f5130815ef9b746d200000000060000006b6ce713bfa775f662b425f245b44d932a4003da3c51ed9ae52c23cd42a962979c95eb3d03000000000000f24db302ad9e845f5fde71407af3ba09f36f27c0e06f40cb8e057d40005ba7225e554c8ea4b48dcef6b408b10842c280d00fd0606b82c60d0062c0a46b0545127bda3d870a6f50e430"], 0x0) syz_emit_ethernet(0x96, &(0x7f0000000080)={@random="37a454c624f7", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x15, 0x88, 0x65, 0x0, 0x7f, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@generic={0x82, 0x9, "aae3561a2abe68"}]}}, {{0x4e21, 0x4e21, r5, 0x41424344, 0x0, 0x0, 0x6, 0x1, 0x81, 0x0, 0x5, {[@mss={0x2, 0x4}]}}, {"bb76d8b30a8f4ed5fe48a5f138c2abfcab54c79033c9bf3cc3c18dc186ad089c1ec4a94455a0164ea75b9de64d2d3f07eb83e31eaa6ac4f940dc0ed23e08e4d12ee686a479eba7a755233a26bfaebb40"}}}}}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000440)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x38, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @local, {[], {{0x0, 0x4e22, r5, 0x41424344, 0x0, 0x0, 0xe, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x1, 0x1, 0x4, 0xfffffff8, 0x8}, @fastopen={0x22, 0x4, "58da"}, @exp_fastopen={0xfe, 0x13, 0xf989, "5937cae93a5e2678967658b7ee03c7"}]}}}}}}}}, 0x0) syz_emit_ethernet(0x141, &(0x7f00000005c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @multicast, @val={@void, {0x8100, 0x1, 0x0, 0x2}}, {@ipv4={0x800, @tcp={{0x18, 0x4, 0x2, 0x3, 0x12f, 0x64, 0x0, 0x3, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@timestamp={0x44, 0x24, 0xea, 0x0, 0x0, [0x0, 0x101, 0x40, 0x8, 0xa17, 0x8551, 0x7, 0xfffffffd]}, @end, @ssrr={0x89, 0x17, 0x86, [@multicast2, @dev={0xac, 0x14, 0x14, 0x40}, @remote, @broadcast, @remote]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @ra={0x94, 0x4}, @noop]}}, {{0x4e20, 0x4e24, 0x41424344, r5, 0x0, 0x0, 0x10, 0x4, 0xed8e, 0x0, 0x8, {[@md5sig={0x13, 0x12, "9ee3a333fe1fd0b565e9822ae42b6ff7"}, @sack={0x5, 0xe, [0x3, 0x5, 0x2]}, @timestamp={0x8, 0xa, 0x80000001, 0x7}, @nop]}}, {"9e3e0b6174ed64ff8b67ef356798b71d4613b44827ad0881014dfbe0a2069fbc2d3b80daa23c378ca734a4814d563112052fa6de485b60119a7746f245501af0fa1ee432eb22cdeb02868b87e97f6a2b1ce5488da0c8139e1f3ce24ee97d16b42e339af37ea9fb82322e5558202e42fa9681b72c57a17d3ecdc420980bd937eec9b8944347e21e7899ef6271831911"}}}}}}, &(0x7f0000000180)={0x0, 0x1, [0x838, 0x9fb, 0x5e7, 0xe42]}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000140)={@mcast1, 0x8000, 0x2, 0x3, 0x6, 0x1f, 0x8eb}, 0x20) connect$inet6(r0, &(0x7f0000000580)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000340)="14002600f7ffffffffffffff810800b86d1a9c85a75b872871ffe47877f1cebf6b29713ded6b3fcfe49f918de300e93a7e7336f1efed8a5045f805623c3242aef0ec2a54e0be400e44dd8169ec2e63a4a78acf5c2bb954159422b8946d5bfb67d6f76123c284569ba9126cffbe0313cf20083871ff5a423d8796f1a19c6b792f3ad5f096e916a0adc1d394c7df4000000000000000b84f37a4ed3f57949a57e46523d8", 0xa3) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0xbb}}, {}, [], {{0x4, 0x1, 0xb, 0x8}, {0x4, 0x0, 0xa, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x80000, 0x0, 0x0, 0x2c01}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x15, &(0x7f00000002c0)=@bloom_filter, 0x48) syz_emit_ethernet(0x7a, &(0x7f0000000080)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd60000b28000c2f00fe800000000000000000000000100002fe8000000000000000000000000000aa242088be39028f836f"], 0x0) 10.509284314s ago: executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x0, 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x74}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000002e0000000c002d00000000000000000008000200", @ANYRES32, @ANYBLOB="0c0005"], 0x44}}, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r3, &(0x7f0000000080)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f0000000140)=0x10001, 0x4) recvmmsg(r3, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000000c0)=@nl, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/186}, {0xffffffffffffffff}], 0x0, &(0x7f0000000280)=""/239}}, {{&(0x7f0000000e80)=@vsock={0x28, 0x0, 0x0, @host}, 0x0, &(0x7f0000000680)=[{&(0x7f0000000400)=""/18}, {&(0x7f0000000440)=""/110}, {&(0x7f00000004c0)=""/165}, {&(0x7f0000001540)=""/4096}, {&(0x7f0000000580)=""/245}], 0x0, &(0x7f0000000700)=""/27}}, {{&(0x7f0000000740)=@nfc, 0x0, &(0x7f0000000c00), 0x0, &(0x7f0000000cc0)=""/180}}], 0x4000000000001f1, 0x10162, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'wpan1\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x1c, r6, 0x301, 0x0, 0x0, {0x2b}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1c}}, 0x0) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x44, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0x8}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x3f}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x81) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000800), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_DISABLE_BEARER(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000000010000000000000002410004000500137564703a73797a3000000000"], 0x2c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x0, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000045000000180100002020692500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010001fff001201000006000043be4354", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e00000004000280080004"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r11 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00'}) 10.434501965s ago: executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, 0x4, 0x0, 0x0, 0xf, 0x10004}, [@FRA_DST={0x8, 0x1, @local}, @FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x2f}]}, 0x2c}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) listen(r1, 0x0) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) ioctl$FIDEDUPERANGE(r1, 0xc0045878, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="00000000ffffffffffffff7f00"/25, @ANYRES32=r0, @ANYBLOB, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/28]) 8.665512127s ago: executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000054c0)={0x14, 0x24, 0x301, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000004000000020000000000001104000000ffffffff000000000000000200000000000000000602000000820000000000000e030000000000000000005f000000002c756489b5fe39802b02370a08a0c37e5641a54b9e834da3aa01a77c262db3417414ac770d83e92fcb731eab9c3fad"], 0x0, 0x54, 0x0, 0x3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pipe(&(0x7f0000000000)={0xffffffffffffffff}) write$cgroup_pressure(r1, &(0x7f0000000040)={'full', 0x20, 0x6, 0x20, 0x40}, 0x2f) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000ac0), 0x90) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @remote}, {0x0, @dev}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f00000000c0)=0x41) pwritev(r2, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02000040", 0x42}], 0x1, 0x0, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000080)={0x43, 0x3}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x43}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f00000001c0)={0x0, 0xc, 0x0, 0x3}, 0x10) r6 = socket$tipc(0x1e, 0x0, 0x0) bind$tipc(r6, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x43, 0x2}}}, 0x10) r7 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x2, 0x3, 0x290, 0xb, 0x0, 0xf0, 0xf8, 0xf0, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x3, 0x0, {[{{@ip={@multicast1, @multicast1, 0x0, 0x0, 'ip6gretap0\x00', 'syzkaller1\x00', {}, {}, 0x11}, 0xb000000, 0xd8, 0xf8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x8}}, @common=@unspec=@quota={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000040)={0x43, 0x4}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x43) 2.591614628s ago: executing program 1: bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0xd, &(0x7f00000000c0), 0x1) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x20000014) socket$inet6_sctp(0xa, 0x0, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x5, 0x6, 0x203, 0x40, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000003c0), 0x8002, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000280)={0x0, &(0x7f00000004c0)=""/4096, &(0x7f00000014c0), &(0x7f00000003c0), 0x6, r1}, 0x38) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) r3 = accept4$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14, 0x81800) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000480)={0x5, &(0x7f0000000440)=[{0xff, 0x3, 0x5}, {0x0, 0x1, 0x0, 0xaa0}, {0x7fff, 0xc1, 0x7, 0x6806}, {0x401, 0x4, 0x81, 0x7}, {0x400, 0x5, 0xd, 0x8}]}, 0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000040), 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x38}}}, 0x0, 0x0, 0x989, 0x0, 0x10}, 0x9c) socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1e}, @NFTA_META_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x70}}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x0, 'ipvlan1\x00'}) ioctl$sock_proto_private(r5, 0x89e1, &(0x7f0000000100)) socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x1, "ff"}, &(0x7f00000000c0)=0x25) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 1.844519111s ago: executing program 0: socket$alg(0x26, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x0, 0x7f, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5a1171a9}, 0x48) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @empty}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000780), 0xb) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n'], 0x4c}}, 0x0) 1.590268239s ago: executing program 1: socket$packet(0x11, 0x0, 0x300) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000003970172ec18308004500001c0040000000019078ac1e0001ac14143611be51c8e6f9236c"], 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x20) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000001c0)="5e15ef9cbdf4237efc0acfd901d93a9d686f3b6ff9ff046eafc673e5968a8ef7e0b10d0cecd39990dd3a6ceb785df03c8a5a1c9d9391e462836412c3650831140564954f77e1eab5e8f865290a4b935ce5fe8e6095f3044b70a1a0f2912bba7562436354860dbf8b9c53e2ddc1a868aa9b37d0", 0x73) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000181100009907f5384e880e13154ac62af3d112754ab242c842cbd6b0c9ba650d08c0a15914fcf6e29e97390407b0d7eaf244969b410851c4347bd40359e80d1176ff0757739dd36e401934e4de27b3c4875220f14c8f9bf36fe74600f7776201a67759493c3e0337ddd63e0eb4bb2b1af883103bf39b3696760db5c7e0b9fb467f25702f16", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'veth1_vlan\x00', 0x0}) r6 = gettid() sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MAP={0x24}, @IFLA_NET_NS_PID={0x8, 0x13, r6}]}, 0x4c}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4, 0x0, 0x31}, 0x48) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r7, 0x0) r8 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r8, 0x114, 0x1d, &(0x7f0000000100), 0x4) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xf, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r9}, {}, {0x85, 0x0, 0x0, 0xba}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r10, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r10, &(0x7f0000000300)={&(0x7f00000002c0)={0x1d, r11}, 0x10, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r0], 0x48}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r12, 0x89f0, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) 1.370368937s ago: executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x19, 0x4, 0x4, 0x20001, 0x0, 0x1}, 0x1d) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r1, 0x0, 0x0}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800004e9d00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000180)={@empty}, 0x14) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000100)=0x2, 0x4) r6 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000200)=0x60) getsockopt$nfc_llcp(r6, 0x118, 0x1, &(0x7f0000000500)=""/212, 0xd4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10, 0x0}, 0x0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r4, &(0x7f00000003c0)={0x0, 0x371, &(0x7f0000000380)={&(0x7f0000000040)={0x20, r5, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x3000000}, 0x0) 1.315331677s ago: executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) r1 = epoll_create1(0x0) epoll_pwait(r1, &(0x7f0000000200)=[{}], 0x1, 0x0, &(0x7f00000001c0)={[0x400000000000009]}, 0x8) close(r1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x0, 0x8, 0xc}, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r4 = socket$inet6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000000c0)) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x200000000000011, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x11, &(0x7f0000000500)={@local, @local}, &(0x7f0000000540)=0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@ipv6_getroute={0x30, 0x1a, 0x0, 0x74bd25, 0x0, {0xa, 0x14, 0x80, 0x0, 0xfd, 0x0, 0x0, 0x5}, [@RTA_METRICS={0x4}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_IIF={0x8, 0x3, r6}]}, 0x30}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x2f00, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 1.264873142s ago: executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x0, 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x74}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000002e0000000c002d00000000000000000008000200", @ANYRES32, @ANYBLOB="0c0005"], 0x44}}, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r3, &(0x7f0000000080)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f0000000140)=0x10001, 0x4) recvmmsg(r3, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000000c0)=@nl, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/186}, {0xffffffffffffffff}], 0x0, &(0x7f0000000280)=""/239}}, {{&(0x7f0000000e80)=@vsock={0x28, 0x0, 0x0, @host}, 0x0, &(0x7f0000000680)=[{&(0x7f0000000400)=""/18}, {&(0x7f0000000440)=""/110}, {&(0x7f00000004c0)=""/165}, {&(0x7f0000001540)=""/4096}, {&(0x7f0000000580)=""/245}], 0x0, &(0x7f0000000700)=""/27}}, {{&(0x7f0000000740)=@nfc, 0x0, &(0x7f0000000c00), 0x0, &(0x7f0000000cc0)=""/180}}], 0x4000000000001f1, 0x10162, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'wpan1\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x1c, r6, 0x301, 0x0, 0x0, {0x2b}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1c}}, 0x0) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x44, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0x8}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x3f}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x81) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000800), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_DISABLE_BEARER(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000000010000000000000002410004000500137564703a73797a3000000000"], 0x2c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x0, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000045000000180100002020692500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010001fff001201000006000043be4354", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e00000004000280080004"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r11 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00'}) 1.211507833s ago: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x4, 0x0, 0x6, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x8, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x5, 0x0}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, 0x0, 0x3, {0x0, 0x0, 0x1}, 0x2}, 0x18) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x4, 0x8, 0xd3, 0x100, 0x4, @remote, @mcast1, 0x8000, 0x8, 0xff, 0xdc6d}}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0), 0x20}, 0x1, 0x0, 0x0, 0x40800}, 0x40040) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000a00)=@delchain={0x5d0, 0x65, 0x200, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x7, 0x8}, {0x3}, {0xb, 0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x59c, 0x2, [@TCA_BPF_ACT={0x598, 0x1, [@m_mpls={0xb4, 0xa, 0x0, 0x0, {{0x9}, {0x2c, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0xd5d0e}, @TCA_MPLS_PROTO={0x6, 0x4, 0x88be}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_TTL={0x5, 0x7, 0x7f}, @TCA_MPLS_TC={0x5, 0x6, 0x7}]}, {0x5d, 0x6, "4c75a29e1bfa95b71b8a78494f3e3802d05d96f0c781aa9f9f115df6d4e170b799b438b9311ca0db16338a6e8c0cd3a011c43d497d44e129b651251ac4b6a5c7a49708a4977608c82e2f120e8381e8d49470a7ee39fd2691fd"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_bpf={0xfc, 0x1f, 0x0, 0x0, {{0x8}, {0x6c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x0, 0x8ca0, 0x4}}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x6}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_FD={0x8, 0x5, r5}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x81, 0x9, 0x2, 0x1, 0x2}}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x6c, 0x6, "371ddbedcade6f5d5ffd18066480e9324fe3489d1f3eb905553babf41d8b7cf66987f8c66fe8c23206893d59f64b9aebb159a8bcb165146462777f3dbe95d48b3f1da31034b268626d66ac0a218d05ff06d80b1374cfc46066926c03020aed595d46157dbcf64c16"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_vlan={0x60, 0x14, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x3e}]}, {0x1c, 0x6, "1aafed4b971120a0beb8bac653e818ad102720427159c031"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_ctinfo={0x17c, 0xd, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0xf6b2}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x4}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x1000}, @TCA_CTINFO_ACT={0x18, 0x3, {0x3b9f7747, 0x5, 0x1, 0x81, 0xffffffff}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xe3f}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x3}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x2}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xfffd}]}, {0x100, 0x6, "e627dab3ca2e86a472bd272719aeec94714595c0b08b7ca3e5bf666a26bdf11af326bec298273b8b4f78f0a1cb3d2359dfdd22a53fecca0e5cb91824cc08089beae21a76107ae35626c888d2539d438a371741fdb4705526f83a4b9e063988aa48792dadab6fff62cfc4f35a87da10f59cef05823de04c65ebb880dc8eca3a20997ccc612a3cc5d05b98b6d30b37597557cd27609f57f66e3fb0c2313ab5f5dcb04faeb6ff065288abdee1c400091858e25b9c17933d279757a682e7e1df9ef404d3cc0eb8fe041cd4389cdde5f18be2a4de9d6b6239e4e76477a9cd4c32178ede73f1979204f8c8d7a5189df288caa4a77f97fc891fb49ccc17a296"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbmod={0xb8, 0x3, 0x0, 0x0, {{0xb}, {0x58, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x3ff, 0x9, 0x0, 0xffffffff, 0x7fffffff}, 0x7}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0xe825, 0x3da1701a, 0x1, 0x8001, 0x4}, 0x4}}]}, {0x37, 0x6, "ab716477a995d7214b8abe99b6708318a5df6c931383fbbfd507ea285d67fe3d389dfdac5773bb209d302152d0a4c9fce7bfd7"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5, 0x2}}}}, @m_ctinfo={0x150, 0x7, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0xfffff39a, 0x100, 0x10000000, 0x6, 0x7}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x20, 0x7, 0x0, 0x7, 0xffffff00}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x1}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x538344fa}]}, {0xe1, 0x6, "a8cb400a4332aff637900ac5f812cbea9f0ee101ab51967580263446f45aa39513a1c6aa6dbccac80ba0699a2949eb4c235c2a10b5840a819f126b8301b3e5c67efa6a583a6fc4f89a726b9d27d9ea5d2e85054eef461893c735a1539d8eb65a4fea394c839128a52db2947e403aec0d53d350ad06bea369aafc191df6a9932ed60294cf37ccb9a4eea3b62f7da70bd6242b1979a2cc912a820a0040b6359b75d8a200d6c5e35e47991a182ff09518037a9f67c73aac7d3e747bfae9f0390eeddddb1765c821d54dd29fe16a660f702e3024dff529b4e7e4abaafc30d2"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x4}}}}]}]}}, @TCA_RATE={0xfffffffffffffe47, 0x5, {0x8, 0x20}}]}, 0x5d0}, 0x1, 0x0, 0x0, 0x141}, 0x40a5) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x15, &(0x7f0000000080)={&(0x7f0000000780)=@newlink={0x90, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x7, 0x0, 0x66e99, 0x74c4d}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x48, 0x2, 0x0, 0x1, [@IFLA_HSR_MULTICAST_SPEC={0x5, 0x3, 0x8}, @IFLA_HSR_MULTICAST_SPEC={0x5, 0x3, 0x5}, @IFLA_HSR_MULTICAST_SPEC={0x5, 0x3, 0xfd}, @IFLA_HSR_SLAVE2={0x8, 0x2, r6}, @IFLA_HSR_SLAVE1={0x8, 0x1, r8}, @IFLA_HSR_SEQ_NR={0x6, 0x5, 0x8}, @IFLA_HSR_SUPERVISION_ADDR={0xa, 0x4, @broadcast}, @IFLA_HSR_SEQ_NR={0x6, 0x5, 0x1}]}}}, @IFLA_IFALIAS={0x14, 0x14, 'veth1_vlan\x00'}, @IFLA_MASTER={0x8}]}, 0x90}}, 0x20000800) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="7800000039000900000f0f000000000001000000040000000c000180cafc08e45e717f00080002"], 0x78}}, 0x0) 992.770718ms ago: executing program 1: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344}, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1=0xe0000010}}, 0x1c, 0x0}}], 0x6c00, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002600)=[{{0x0, 0x0, &(0x7f0000000740)=[{0x0}, {&(0x7f00000002c0)="b4ce26100cdadb46b08eca31e2058e96432a76466e6ea70ee835efa3fa51b2fa554115ec00aacd6790bb0f21e6c78a2eaec99d0ec205aba84838f5630324e0e62f8a4cbb1d0fac332597a675e2373c688fe5eaf662ad53cfc37eddabba1e70aee42d18ddea80832a3c40e250fdf18920290842d798dde1f4cc7e1ae24145eaff545802d6e795436d847a9ca35168", 0x8e}, {&(0x7f0000000e40)="8f9ffc2ff02ff20924876156c6f3cb25b9c5163b7574550c23fd359ef839543043cdf074839544caa76bce86fb5396aee708868daa5bab4e15be7d9f7b3ecdde74544602f84cf5c9bb565e3d51f79f48452fc3b06efcb3670500b19731297d18b23897a51591c8a4e80f0342640a6b4ccd827f78c7e4c26590df354e729e7d6449cbe17256c60e9eb2c64ae2dd3f705730cf72016c929c46997fadb5917083c570203a7fe086d1e00b422184", 0xac}, {&(0x7f0000000a40)="34ef0ee7f20accebe691988f0000001f5896c4a22c2d94bb05558c724e68526b8e20cf6c69dc36229cf1f29e36c77ef61f5686a0e3", 0x35}, {&(0x7f0000001200)="b7bd849b0249701d59f4ad516376f9e969bbba49d37e54870b21cf9fc59303f35a81f3cda6eb16ed753944790fe2b6cdb12f48afd3e4df5450169c5a6eba940c5ab1626b11ffd6b37dc9bf8a065e825c074b0010c51365f6c46c1afd4677e91376793f1fb7abf0f6c9825280591dbc51791ab224cfa835581b7b8de2fa3b6218e91f02379496314759f293f264ca34dcedbaa241a6cb29c05280a116fc5d55f10e7fe3a1a943d38c938d964bf400f5753f19b80e1589d067c8c303df70c74b23727108de200000000000000000", 0xcd}, {&(0x7f00000005c0)="6ed674038af06c94f0f460ef07daa761605e70698dff93786d697709bb3659d42935f66677d0639ed8858c86cb86ddd7f68f32a598a11c70f7b697543249edd3575514c7c6414b4e87af19839e0d67443fa2ada515376442a09b9f9445504fd5f6237d3a415d8bdd56a0ac000e81ac89039de48bb60759480554395d8f2cd74034e5", 0x82}, {&(0x7f0000000040)}], 0x7, &(0x7f00000007c0), 0x0, 0x24040000}}, {{&(0x7f0000000800)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001c40)=[{&(0x7f0000000980)="d611afdefa3e3862b8cca9ab08858abe75aa75d3c36f306c725b1a6687359d3f4558a52aa5c0f874c3253c76d6173ded86de19747bb27a7455", 0x39}, {&(0x7f00000008c0)="ed4f3807be6c3186f4a33922e2c50ecaf73f486f15499aaf1866f1684e904427ea69f7a2c0866121ede86a5dfe1d6576f8ebc677a6e5723072d84cdca0a7215647f5683ce219658ad665f82ab615cae84001b9b712a69658d5948c19a6ee9799782bc159253f62733a267522088c8d7361da0f0b8cd0abecd56cb4c7cdb8ab31112f214b73b658dde5efbf74832aced73824d669febec739a1fcc28bbdfa009f", 0xa0}, {&(0x7f0000001d00)="197858d2b1cf2144b3673edf5ee8aba1dc4a3d49ed6f2f893093d3ce44f7e8a1320d137535d48b4ac247dc686b79bd90a81f051045", 0x35}, {&(0x7f0000000bc0)="babd07f758c7294695ad3fb5f83af5a0a8a7c09c863823e069ea1eae2002f88859d2d83ac422b2cb3910cbd2f6fdda5347d04d76fb95fb4396de0672992d5063be0d3d7777523c809726ac297174ad93f6e4da279edf1f1a5f9950b3d015a03c38ee31ff5bddfe71", 0x68}], 0x4, &(0x7f0000000a00)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0x20, 0x4c804}}, {{0x0, 0x0, &(0x7f0000002000), 0x0, 0x0, 0x0, 0x80}}, {{&(0x7f0000002040)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000002180)=[{&(0x7f00000020c0)="21ffaaeef8b3452163f4e8ef1a54678d8392a55617f4b57d640c490c0e9bcd909af4964db2f6a54d24e152bce0fd9161621114477274d8df8d76e7823beef946baf8f6af8591f4fd2f2e4ea4ec6bdbc169e2b8251e2c107c1d8bb17edaf7621d4b0804c605f1cfd6b254875036e2b8f9983af91ac53e95212da1659866bcd17d51ad15498ade6eaa3671da3fa17fd2410085a80224cfc3c820a3705a97ea2f62f234", 0xa2}], 0x1, &(0x7f0000001780)=ANY=[@ANYRESHEX=r2, @ANYRES64, @ANYRES32, @ANYRES32, @ANYRES16, @ANYRESOCT, @ANYRESDEC, @ANYRESDEC, @ANYRES64, @ANYBLOB, @ANYRES64=0xffffffffffffffff, @ANYRES32, @ANYRES32, @ANYRES8, @ANYRES8, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="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", @ANYRES16, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES16, @ANYRESOCT, @ANYRES32=r2, @ANYRES32], 0xd8, 0x4010}}], 0x4, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000240)=@file={0x0, './file0\x00'}, 0xfffffffffffffe71, &(0x7f0000001300)=[{&(0x7f0000000440)="ff915a45d7c5f7c8568ebdc57386a19e302e55f53d1b2a9388fd12ad903c29d3e976d8100612cd0800000000000000d7a274b8c2401413676458fa504e09e887ef6ff0cdd758010df00f564a11c1713dbcabd72ba811021faee1ac8d79bebdc3fe43f43c66e89dd70c176a25738767a6a417a9ef94cf1b85c3d2", 0x7a}, {&(0x7f0000000500)="06bab072b09e636fc7e486e1c1f30ed7b8376c131e7753d31930827e07d44a4c06c3a6a3630fbb1ed4b84bb6e674968e67310078013dc9f2503bf09b4c93ba0f48a556bae048a362dd2f", 0x4a}, {&(0x7f0000000c40)="ec32075af1322e1c7e56eb9fcbba3252033944c118ac35c5373bec014f4bdb6c4de024a1b6565077626daaac314db078b7568221bd5e8259c1e32a3af2c680a86a67ff0df9", 0x45}, {&(0x7f0000000600)="a9ef4d07e893054155829967a251655a0f074e8c92d77db90c391c6fc8e119ad2021b5aa814e26805a1de486be6a34e7d46dfe23ed511e7c803b84272cbef991ce0b0b6600e9c680beae8e6bf430ebfdfd9c807862ef45320caf34c60f7b2083256d2d5e91ca2ceb9d2492c2f507bbf77adbfffda6b088582edb495fb2526892750995e30868b8c897cc972329a6ddef3ba1922141981efdd51c2a495a181d1de8a9d0b3", 0xa4}, {&(0x7f00000006c0)="057fd08656a165bd0dccb631c436c81971cae814c374abb2401493d87b7ecdf51e98b91c95c1d78878911c02c326cec93b8bfa168428fce1e9eeed0444eacbe8a3c5992f844221b9651a50fbe693675fcdbabc590979027e059bf227e65108bbb0a9f337a3f110fd12cb4141d126d600cd4b5aeed5019bb1d589523b61ef61cde70d51f84d9d719b300084552c3ba2d9c799de1c75e1049889dc118828b7764e30291077aefb1535d1a1d51dd8beb2435713b5eff84397a4a4c03db093dfc74840835bb91d4dffea1051fdc62f6b81da8336aee50300b2b2922323ed021d", 0xde}, {&(0x7f00000007c0)="a854f23e82daddef695070a2506f0bfc18f4a49b377f160b7037122633343c67302980e5bb01c03eb16e705487c7399acc513292", 0x34}, {&(0x7f0000000b80)="5e87b031fe712e8de6bb10501abd040060cf15164380fca4eec08f765031d040208cf6f3b5cc", 0x26}], 0x7, &(0x7f0000000f00)=ANY=[@ANYBLOB="dbe3702e4275c91474df4698ed223f2fce557a", @ANYRESOCT, @ANYRESOCT, @ANYRES32, @ANYRES32, @ANYBLOB="9ac0318a06861d16cb6ba9d6b3547243cee654195db4c67797175eb9ea3f0949a020a569a7855efcae81ca70c5762995e58cfc7d94d32bcd0dd7948bd66c81ecb00437476649690dcbe96b81878533e145e7cd7353872bd10dd8dea7b203e2c491f64344e196131dbf233db51e7bac967a4eb80fb81d4ae954131c7f4c246565cc07798781bc4667f63e7dd7f3998eb6e4803b12d3c704b2e35b8c2d7b65fe0a59396177e764b9af6f52509b739f550eff9aeb2b47ad60c9e5df5b57ddba42e350b652cf47535b6d37f769c6f5c38fe4b70ecc90c1d208c8c0f5aaa9ddbaf5d414dbcf1afe615276ca73de45adb4fc4eb53b", @ANYRES64, @ANYRES32, @ANYRES32=0x0, @ANYRESHEX=r1, @ANYRESOCT=r4, @ANYRES32=0x0, @ANYRES8=r3, @ANYRESDEC, @ANYRESOCT=r5], 0xffffffa1}, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600000f500140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00000000", @ANYRES32=r6, @ANYRES32=0x41424344, @ANYBLOB="6c0000ff80780040"], 0x0) syz_emit_ethernet(0x52, &(0x7f0000000a80)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000088a827008100260086dd600a843500140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=r6, @ANYRES32=0x41424344, @ANYBLOB="5004000090780000fc59a864786aa27f5130815ef9b746d200000000060000006b6ce713bfa775f662b425f245b44d932a4003da3c51ed9ae52c23cd42a962979c95eb3d03000000000000f24db302ad9e845f5fde71407af3ba09f36f27c0e06f40cb8e057d40005ba7225e554c8ea4b48dcef6b408b10842c280d00fd0606b82c60d0062c0a46b0545127bda3d870a6f50e430"], 0x0) syz_emit_ethernet(0x96, &(0x7f0000000080)={@random="37a454c624f7", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x15, 0x88, 0x65, 0x0, 0x7f, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@generic={0x82, 0x9, "aae3561a2abe68"}]}}, {{0x4e21, 0x4e21, r6, 0x41424344, 0x0, 0x0, 0x6, 0x1, 0x81, 0x0, 0x5, {[@mss={0x2, 0x4}]}}, {"bb76d8b30a8f4ed5fe48a5f138c2abfcab54c79033c9bf3cc3c18dc186ad089c1ec4a94455a0164ea75b9de64d2d3f07eb83e31eaa6ac4f940dc0ed23e08e4d12ee686a479eba7a755233a26bfaebb40"}}}}}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000440)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x38, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @local, {[], {{0x0, 0x4e22, r6, 0x41424344, 0x0, 0x0, 0xe, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x1, 0x1, 0x4, 0xfffffff8, 0x8}, @fastopen={0x22, 0x4, "58da"}, @exp_fastopen={0xfe, 0x13, 0xf989, "5937cae93a5e2678967658b7ee03c7"}]}}}}}}}}, 0x0) syz_emit_ethernet(0x141, &(0x7f00000005c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @multicast, @val={@void, {0x8100, 0x1, 0x0, 0x2}}, {@ipv4={0x800, @tcp={{0x18, 0x4, 0x2, 0x3, 0x12f, 0x64, 0x0, 0x3, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@timestamp={0x44, 0x24, 0xea, 0x0, 0x0, [0x0, 0x101, 0x40, 0x8, 0xa17, 0x8551, 0x7, 0xfffffffd]}, @end, @ssrr={0x89, 0x17, 0x86, [@multicast2, @dev={0xac, 0x14, 0x14, 0x40}, @remote, @broadcast, @remote]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @ra={0x94, 0x4}, @noop]}}, {{0x4e20, 0x4e24, r1, r6, 0x0, 0x0, 0x10, 0x4, 0xed8e, 0x0, 0x8, {[@md5sig={0x13, 0x12, "9ee3a333fe1fd0b565e9822ae42b6ff7"}, @sack={0x5, 0xe, [0x3, 0x5, 0x2]}, @timestamp={0x8, 0xa, 0x80000001, 0x7}, @nop]}}, {"9e3e0b6174ed64ff8b67ef356798b71d4613b44827ad0881014dfbe0a2069fbc2d3b80daa23c378ca734a4814d563112052fa6de485b60119a7746f245501af0fa1ee432eb22cdeb02868b87e97f6a2b1ce5488da0c8139e1f3ce24ee97d16b42e339af37ea9fb82322e5558202e42fa9681b72c57a17d3ecdc420980bd937eec9b8944347e21e7899ef6271831911"}}}}}}, &(0x7f0000000180)={0x0, 0x1, [0x838, 0x9fb, 0x5e7, 0xe42]}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000140)={@mcast1, 0x8000, 0x2, 0x3, 0x6, 0x1f, 0x8eb}, 0x20) connect$inet6(r0, &(0x7f0000000580)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000340)="14002600f7ffffffffffffff810800b86d1a9c85a75b872871ffe47877f1cebf6b29713ded6b3fcfe49f918de300e93a7e7336f1efed8a5045f805623c3242aef0ec2a54e0be400e44dd8169ec2e63a4a78acf5c2bb954159422b8946d5bfb67d6f76123c284569ba9126cffbe0313cf20083871ff5a423d8796f1a19c6b792f3ad5f096e916a0adc1d394c7df4000000000000000b84f37a4ed3f57949a57e46523d8", 0xa3) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0xbb}}, {}, [], {{0x4, 0x1, 0xb, 0x8}, {0x4, 0x0, 0xa, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x80000, 0x0, 0x0, 0x2c01}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r8, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x15, &(0x7f00000002c0)=@bloom_filter, 0x48) syz_emit_ethernet(0x7a, &(0x7f0000000080)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd60000b28000c2f00fe800000000000000000000000100002fe8000000000000000000000000000aa242088be39028f836f"], 0x0) 904.617424ms ago: executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x50, 0x3, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8}, @CTA_TIMEOUT_SCTP_CLOSED={0x8}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8}]}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x50}}, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$kcm(0x29, 0x1, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000002c0)={'team_slave_1\x00', 0x400}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100000000000000002eeed88696", @ANYRES32], 0x20}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xd, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) 861.682645ms ago: executing program 0: socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x1, @default}, 0x1c) 776.553944ms ago: executing program 2: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r0, 0x8b27, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x75, 0x75, 0x2, [@func, @union, @func={0x0, 0x0, 0x0, 0xc, 0x1}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @datasec={0x0, 0x4, 0x0, 0xf, 0x1, [{0x9, 0x0, 0x1f10}, {0x0, 0x5}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x10001}], "f5"}]}}, 0x0, 0x92, 0x0, 0x0, 0xfffffff7}, 0x20) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001900)=@base={0x1e, 0x1255, 0x4, 0x0, 0x21, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x2}, 0x48) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000000012000000", &(0x7f0000000300)=""/8, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000600)=0x18, 0x4) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000012000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140ffffff1f0800084000000001080003000000"], 0xa0}}, 0x8000) 719.461755ms ago: executing program 3: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet_dccp(0x2, 0x6, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) epoll_create1(0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x40030000000000}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000000400)=0x9) connect$inet(r0, &(0x7f0000e5c000)={0x2, 0x0, @local}, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x24}}, 0x0) 674.564531ms ago: executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0x9, 0x359, 0x104}, 0x48) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x33, &(0x7f0000000000)="89", 0x1) socket$pptp(0x18, 0x1, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000300)={@local, 0x0}, &(0x7f0000000740)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000880)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)=@getchain={0x5c, 0x66, 0x100, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xffe0}, {0x0, 0xfff1}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0x8ed}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0xffffe615}, {0x8, 0xb, 0x20}, {0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000000c0), &(0x7f0000000180)=0x14) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000700200100000000000000000100000000001c00090008000000", @ANYRES32=r5], 0x4c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_timeval(r3, 0x1, 0x1e91aae05ffb4174, &(0x7f0000000240), &(0x7f0000000280)=0x10) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r6, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="28000000111400042bbd7000ffdbdf2508004f000100000008ce77d0c6ea9c75463763058e04970e"], 0x28}, 0x1, 0x0, 0x0, 0x400c0}, 0x20040401) socket$packet(0x11, 0xa, 0x300) sendmsg$nl_generic(r4, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x42402000}, 0xc, &(0x7f00000001c0)={&(0x7f00000019c0)={0x12d0, 0x2e, 0x400, 0x70bd28, 0x25dfdbfe, {0x11}, [@generic="2350665fb4e8527f9f9cfe977086af48", @generic="f49be9b0f2d3b425c430b53c5d5a80b86bf235caa5428b408bc7a6c90063f5395820e6b8385546b4a4fd6ba66e6ee4e50c680ed3bc5a19173cdcefe34553ace7e7c02c9357cde80d57646ab15fb1211d137d9f056ddf185d68ebd39947c0b8fbb7c062f166c9ea71bd0fd58a1881608f3f8d5db2c6d758052995a8922fa408c258adb940b1f240308cd73eb755cf6dad2bade902fee0d280414e881420be97145d8616fa737e97a3a48c1bd6beb7303793cc1d405f4ef81627c61aeb9574952badeaecc72a93d3f5a1674877", @typed={0xa, 0xad, 0x0, 0x0, @str='l@^:\\\x00'}, @nested={0xd0, 0xf5, 0x0, 0x1, [@typed={0x8, 0x93, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="1a159eabd3943c4d435f3de8291d695cd4df3f2ebfc83866ed32450aece187594cea9b8515f371ab0236b9a7cf6f2ca844b108998be995cca43fb79360ae5df7cb7d4222a5771b008302fe36748731e665036fda9e2864a676f22fcfb0b4b06ccfe5468a21336e2b6876d4d4b3d3f2d89e41b3ff2c756f737a01a97420801c80a768792763c7d107451d36f824fa788ef7bafe95b632e0691f8d19de7341ba48543496c9de4eba3589098ba2a6895bc1d60db048e395c34473588124f085f10b87f201a7"]}, @nested={0x14, 0xc3, 0x0, 0x1, [@typed={0x8, 0x8a, 0x0, 0x0, @u32=0x9}, @typed={0x8, 0xd4, 0x0, 0x0, @uid=0xee01}]}, @generic="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", @nested={0xbd, 0x114, 0x0, 0x1, [@generic="a2c8f5598f", @generic="c0fd9259339ac740144a55ef686d81122fdc14c5fbeb62fd8b2d62652b513933e08259a9d1cac8f390649c57151fed27bd001b88366bd4f0f4dd283a52a7eece92a8f075e665217d6967baa4df7cdaaa48dfeb6a1ad9d6fc2a6a90f10f21141a951146784a03114c7fb8b6c9865838481fc0c7c023e1657751c7e049fbb6ce18b3582d6573901b3eec707884247608cdc55b1286f3f3139ad817c837aa1118f6b341110c1a234aa7", @typed={0x4, 0x25, 0x0, 0x0, @binary}, @typed={0x8, 0x36, 0x0, 0x0, @u32=0x9}]}, @typed={0x14, 0x79, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x40}}, @typed={0x1a, 0xc2, 0x0, 0x0, @str='cpuset.effective_cpus\x00'}]}, 0x12d0}}, 0x4040004) socket$inet6_sctp(0xa, 0x1, 0x84) 493.881679ms ago: executing program 0: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r0, 0x8b27, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x75, 0x75, 0x2, [@func, @union, @func={0x0, 0x0, 0x0, 0xc, 0x1}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @datasec={0x0, 0x4, 0x0, 0xf, 0x1, [{0x9, 0x0, 0x1f10}, {0x0, 0x5}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x10001}], "f5"}]}}, 0x0, 0x92, 0x0, 0x0, 0xfffffff7}, 0x20) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001900)=@base={0x1e, 0x1255, 0x4, 0x0, 0x21, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x2}, 0x48) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000000012000000", &(0x7f0000000300)=""/8, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000600)=0x18, 0x4) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000012000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140ffffff1f0800084000000001080003000000"], 0xa0}}, 0x8000) 476.656871ms ago: executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x1f, 0x0, 0x0, 0x0, 0x57, '\x00', 0x0, 0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="8aa5e444a1eafa78f5fd8531d45d34e1e357325fd347775ee5db15b2238c4b90c92366eaa8488fb2157174988a6dcbe59db7cbd0bfcb9d7c1762f7c83fe6f5a9204cd2e14d1bcdd6e50841a83ebb8054564d90be7a8b8e8d3cec4ab656e40b3828388c11b2c5018dee3ab1f9549d13425671eea55054a4aadcb07279a39e4cb4c3552afa34e8065f2676f8f3b56bc9e248d3ad262b", @ANYBLOB="ceac19a402d1a41b096d26476c308e4d080fa4adbaeabb67354937d22d1936de0d7a2370fd5e9f9f07a62da72d6030c051a59aa44e53da9dad2b3b76b696741610d54874bd", @ANYRES64=r2, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3b, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="180008f700000000000000181100000000000000", @ANYRESOCT=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008212ea234c29ead90a1eea9819846dfe5e117939febdeedb0314416e98920d067bf4ca631a478c957611a5ff5baa0a20970befa1b6af712f0786ede172cbe53f9d452404c1d955e4b70f2cf0ed347c03600c6278569d0a28fb15f1a51ffd395d15b8669e8e1aacf804ca6dfb5ca632c9d91d6ab14af07e1f949c2b0a4039ed1ceb"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x90) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x7, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000640)={'vlan0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="02030500d3fc030000004788031c09101128", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$l2tp(0x2, 0x2, 0x73) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000006c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)={0x24, r8, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0xfd}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}]}, 0x24}}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffed4, 0x0, 0x0, 0x0}, 0x90) r12 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='sched_kthread_stop_ret\x00', r11}, 0x10) sendmsg$nl_route(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r13}, 0x10) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r14, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r15, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) close(r14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES8=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, '\x00', r5, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff6eb}, 0x90) 260.807863ms ago: executing program 0: r0 = socket$inet6(0xa, 0x80803, 0x87) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000000)=0x9, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, &(0x7f0000000000)=0x5, 0x4) r3 = socket$inet_sctp(0x2, 0x5, 0x84) socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x100000, 0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}}}]}, 0x78}}, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @local}}}, &(0x7f0000000280)=0x90) setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000040)=0x1, 0x4) ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) 149.997297ms ago: executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x19, 0x4, 0x4, 0x20001, 0x0, 0x1}, 0x1d) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r1, 0x0, 0x0}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800004e9d00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000180)={@empty}, 0x14) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000000100)=0x2, 0x4) r6 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000200)=0x60) getsockopt$nfc_llcp(r6, 0x118, 0x1, &(0x7f0000000500)=""/212, 0xd4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10, 0x0}, 0x0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r4, &(0x7f00000003c0)={0x0, 0x371, &(0x7f0000000380)={&(0x7f0000000040)={0x20, r5, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x3000000}, 0x0) 87.29722ms ago: executing program 2: openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000880)={0x18, 0x42, 0x601, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @pid}]}, 0x18}], 0x1}, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x336) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x10c}, {&(0x7f00000007c0)=""/154, 0xe5}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 17.067936ms ago: executing program 1: r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffcf, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$binfmt_script(r1, &(0x7f0000000000), 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) 0s ago: executing program 0: sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=@deltaction={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="4000000010003904000000000400000000000000", @ANYRES32=r3, @ANYBLOB="030000007f0000002000128008000100736974001400028008000100", @ANYRES32], 0x40}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8108a0d0000000080000000000000000000ca0000cc3ddc9e81b13004baefea1622f7e4a86cf33f8fd98d27e314077a5d4b7385d004ea98d43d163dc9", @ANYRES32=r2, @ANYBLOB="00000000000000001800128008000100736974000c00028008000300e0000001"], 0x38}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e0000000400028008000a00", @ANYRES32], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x220, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000500], 0x7, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/544]}, 0x298) accept4(r6, 0x0, 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000580)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f0000000180)=0x10) unshare(0x20000400) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000240)={r3, 0x1, 0x6, @local}, 0x10) poll(&(0x7f0000000040), 0x55, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x3, 0x4, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x17, 0x4, &(0x7f00000003c0)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0xf, &(0x7f00000007c0)=ANY=[@ANYBLOB="1802000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="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"], &(0x7f0000000780)='GPL\x00'}, 0x90) socket(0x23, 0x800, 0x401) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000530000001801000020786c2500000000002020207b1af8ff00100000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000009500000000000000"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r11 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r11, &(0x7f00000000c0), 0x492492492492627, 0x0) kernel console output (not intermixed with test programs): [ T7514] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 167.163727][ T7293] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 167.345093][ T7514] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 167.356030][ T7514] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.4'. [ 167.658115][ T7378] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.740036][ T5122] Bluetooth: hci5: command tx timeout [ 167.740758][ T7530] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 167.764023][ T7532] netlink: 484 bytes leftover after parsing attributes in process `syz-executor.4'. [ 167.839107][ T7378] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.974044][ T7293] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.103716][ T7378] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.134246][ T7539] netlink: 16126 bytes leftover after parsing attributes in process `syz-executor.4'. [ 168.166336][ T7293] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.175671][ T7539] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.4'. [ 168.279875][ T7378] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.342750][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.350050][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.408011][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.415278][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.682857][ T7552] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 168.699900][ T5122] Bluetooth: hci6: command tx timeout [ 168.742708][ T7378] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 168.795011][ T7560] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 168.819330][ T7560] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. [ 168.831521][ T7378] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 168.862523][ T7564] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 168.896216][ T7378] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 168.931616][ T7378] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 168.988773][ T7567] netlink: 484 bytes leftover after parsing attributes in process `syz-executor.4'. [ 169.001678][ T7293] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.293167][ T7293] veth0_vlan: entered promiscuous mode [ 169.370971][ T7293] veth1_vlan: entered promiscuous mode [ 169.481814][ T7378] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.593577][ T7579] syzkaller0: entered promiscuous mode [ 169.599222][ T7579] syzkaller0: entered allmulticast mode [ 169.742087][ T7591] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 170.780035][ T53] Bluetooth: hci6: command tx timeout [ 171.389764][ T7378] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.414473][ T5162] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.421818][ T5162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.508938][ T7293] veth0_macvtap: entered promiscuous mode [ 171.543120][ T5162] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.550384][ T5162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.609393][ T7601] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 171.632337][ T7293] veth1_macvtap: entered promiscuous mode [ 171.716225][ T7293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.750592][ T7293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.789949][ T7293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.819849][ T7293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.840095][ T7293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.856706][ T7293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.879631][ T7293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.905771][ T7293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.950000][ T7293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.993620][ T7293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.022535][ T7293] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.112987][ T7293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.133465][ T7293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.149565][ T7293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.161936][ T7293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.180221][ T7293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.207642][ T7293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.218028][ T7293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.229784][ T7293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.240478][ T7293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.256146][ T7293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.278409][ T7293] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.293343][ T7293] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.319611][ T7293] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.332394][ T7293] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.341467][ T7293] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.369798][ T7641] xt_CT: You must specify a L4 protocol and not use inversions on it [ 172.376970][ T7639] __nla_validate_parse: 5 callbacks suppressed [ 172.376993][ T7639] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 172.397767][ T7639] netlink: 'syz-executor.4': attribute type 20 has an invalid length. [ 172.613356][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.630760][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.717951][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.736571][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.788074][ T7649] netlink: 16126 bytes leftover after parsing attributes in process `syz-executor.1'. [ 172.826245][ T7649] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.1'. [ 172.845216][ T7378] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.861030][ T53] Bluetooth: hci6: command 0x0405 tx timeout [ 172.935196][ T7657] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 173.067012][ T7657] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 173.172179][ T7664] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 173.206195][ T7664] bridge0: port 3(team0) entered disabled state [ 173.223464][ T7664] team0: left allmulticast mode [ 173.230194][ T7664] team_slave_0: left allmulticast mode [ 173.236122][ T7664] team_slave_1: left allmulticast mode [ 173.242814][ T7664] team0: left promiscuous mode [ 173.247728][ T7664] team_slave_0: left promiscuous mode [ 173.259895][ T7664] team_slave_1: left promiscuous mode [ 173.277620][ T7664] bridge0: port 3(team0) entered disabled state [ 173.306576][ T7664] batman_adv: batadv0: Adding interface: team0 [ 173.316074][ T7664] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.375416][ T7664] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 173.424666][ T7670] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 173.436234][ T7670] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'. [ 173.445952][ T7670] team0: entered promiscuous mode [ 173.454236][ T7670] team_slave_0: entered promiscuous mode [ 173.460582][ T7670] team_slave_1: entered promiscuous mode [ 173.482913][ T7670] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.500362][ T7670] batman_adv: batadv0: Interface activated: team0 [ 173.512511][ T7670] batman_adv: batadv0: Interface deactivated: team0 [ 173.519392][ T7670] batman_adv: batadv0: Removing interface: team0 [ 173.539116][ T7670] bridge0: port 3(team0) entered blocking state [ 173.556697][ T7670] bridge0: port 3(team0) entered disabled state [ 173.573882][ T7670] team0: entered allmulticast mode [ 173.579225][ T7670] team_slave_0: entered allmulticast mode [ 173.609792][ T7670] team_slave_1: entered allmulticast mode [ 173.630118][ T7670] bridge0: port 3(team0) entered blocking state [ 173.636568][ T7670] bridge0: port 3(team0) entered forwarding state [ 173.701504][ T7378] veth0_vlan: entered promiscuous mode [ 173.722759][ T7681] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 173.781196][ T7378] veth1_vlan: entered promiscuous mode [ 173.909171][ T7378] veth0_macvtap: entered promiscuous mode [ 173.935068][ T7378] veth1_macvtap: entered promiscuous mode [ 173.990029][ T7696] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 174.002305][ T7696] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 174.014785][ T7378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.027269][ T7378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.052288][ T7378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.075168][ T7378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.089984][ T7378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.101562][ T7378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.113140][ T7378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.124438][ T7378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.135247][ T7378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.154473][ T7378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.166515][ T7378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.177590][ T7378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.190716][ T7378] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.198364][ T7697] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 174.221313][ T7697] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 174.283837][ T7378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.298694][ T7378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.310654][ T7378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.322097][ T7378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.332951][ T7378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.343724][ T7378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.356262][ T7378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.397454][ T7378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.418517][ T7378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.438163][ T7378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.454725][ T7378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.466028][ T7378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.478539][ T7378] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.504781][ T7378] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.522707][ T7378] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.537385][ T7378] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.552692][ T7378] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.706335][ T955] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.721999][ T955] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.771756][ T955] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.801342][ T955] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.033232][ T7724] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 175.073368][ T7724] bridge0: port 3(team0) entered disabled state [ 175.095613][ T7724] team0: left allmulticast mode [ 175.104374][ T7724] team_slave_0: left allmulticast mode [ 175.128299][ T7724] team_slave_1: left allmulticast mode [ 175.161983][ T7724] team0: left promiscuous mode [ 175.166830][ T7724] team_slave_0: left promiscuous mode [ 175.227717][ T7724] team_slave_1: left promiscuous mode [ 175.268553][ T7724] bridge0: port 3(team0) entered disabled state [ 175.302074][ T7724] batman_adv: batadv0: Adding interface: team0 [ 175.319712][ T7724] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.369984][ T7724] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 175.403477][ T7725] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 175.417796][ T7725] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'. [ 175.448647][ T7725] team0: entered promiscuous mode [ 175.461266][ T7725] team_slave_0: entered promiscuous mode [ 175.479891][ T7725] team_slave_1: entered promiscuous mode [ 175.503023][ T7725] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.510141][ T7725] batman_adv: batadv0: Interface activated: team0 [ 175.516645][ T7725] batman_adv: batadv0: Interface deactivated: team0 [ 175.523803][ T7725] batman_adv: batadv0: Removing interface: team0 [ 175.531754][ T7725] bridge0: port 3(team0) entered blocking state [ 175.538165][ T7725] bridge0: port 3(team0) entered disabled state [ 175.570174][ T7725] team0: entered allmulticast mode [ 175.575464][ T7725] team_slave_0: entered allmulticast mode [ 175.601913][ T7725] team_slave_1: entered allmulticast mode [ 175.619936][ T7725] bridge0: port 3(team0) entered blocking state [ 175.626409][ T7725] bridge0: port 3(team0) entered forwarding state [ 176.094175][ T7755] netlink: 'syz-executor.3': attribute type 20 has an invalid length. [ 176.422936][ T5162] IPVS: starting estimator thread 0... [ 176.549973][ T7771] IPVS: using max 15 ests per chain, 36000 per kthread [ 176.943695][ T7794] sctp: [Deprecated]: syz-executor.3 (pid 7794) Use of int in max_burst socket option deprecated. [ 176.943695][ T7794] Use struct sctp_assoc_value instead [ 177.678371][ T7824] tipc: Failed to remove unknown binding: 66,1,1/0:3648577395/3648577397 [ 177.735997][ T7824] tipc: Failed to remove unknown binding: 66,1,1/0:3648577395/3648577397 [ 177.970158][ T7847] __nla_validate_parse: 5 callbacks suppressed [ 177.970181][ T7847] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 178.039334][ T7847] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 178.070117][ T7847] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.093767][ T7847] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.142817][ T7847] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.145313][ T29] audit: type=1800 audit(1718670855.361:15): pid=7860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1963 res=0 errno=0 [ 178.169813][ T7847] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.285205][ T7863] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 178.415949][ T7866] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 178.455351][ T7866] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. [ 178.886682][ T29] audit: type=1800 audit(1718670856.101:16): pid=7891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1973 res=0 errno=0 [ 178.919379][ T7884] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 179.255947][ T7899] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 179.720947][ T7917] vlan2: entered promiscuous mode [ 179.734241][ T7917] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 179.771073][ T7919] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. [ 179.794254][ T7917] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 179.987705][ T29] audit: type=1800 audit(1718670857.211:17): pid=7929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1971 res=0 errno=0 [ 179.991979][ T7930] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 180.148498][ T7937] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 180.291016][ T7942] netlink: 644 bytes leftover after parsing attributes in process `syz-executor.3'. [ 180.622712][ T29] audit: type=1800 audit(1718670857.851:18): pid=7959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1972 res=0 errno=0 [ 180.650623][ T7961] tipc: Started in network mode [ 180.655760][ T7961] tipc: Node identity 1, cluster identity 4711 [ 180.662197][ T7961] tipc: Node number set to 1 [ 180.668959][ T7961] tipc: Cannot configure node identity twice [ 181.833035][ T29] audit: type=1800 audit(1718670859.051:19): pid=7998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1961 res=0 errno=0 [ 183.146132][ T29] audit: type=1800 audit(1718670860.371:20): pid=8034 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1957 res=0 errno=0 [ 183.176774][ T8036] __nla_validate_parse: 7 callbacks suppressed [ 183.176797][ T8036] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 183.223111][ T8036] netlink: 5056 bytes leftover after parsing attributes in process `syz-executor.3'. [ 183.241675][ T8036] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 183.262189][ T8036] netlink: 5056 bytes leftover after parsing attributes in process `syz-executor.3'. [ 183.311701][ T8039] netlink: 16126 bytes leftover after parsing attributes in process `syz-executor.1'. [ 183.323656][ T8039] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.1'. [ 183.451375][ T8047] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 183.768082][ T8059] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.3'. [ 183.840645][ T29] audit: type=1800 audit(1718670861.061:21): pid=8067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1973 res=0 errno=0 [ 184.031820][ T8075] netlink: 16126 bytes leftover after parsing attributes in process `syz-executor.3'. [ 184.062164][ T8075] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.3'. [ 184.272567][ T8089] netlink: 644 bytes leftover after parsing attributes in process `syz-executor.1'. [ 184.486089][ T29] audit: type=1800 audit(1718670861.711:22): pid=8098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1963 res=0 errno=0 [ 184.722500][ T8112] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 184.776272][ T8112] batman_adv: batadv0: Adding interface: team0 [ 184.803989][ T8096] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 184.811410][ T8112] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.857468][ T8112] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 184.872255][ T8116] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 184.893085][ T8116] team0: entered promiscuous mode [ 184.901969][ T8116] team_slave_0: entered promiscuous mode [ 184.908543][ T8116] team_slave_1: entered promiscuous mode [ 184.927949][ T8116] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.947180][ T8116] batman_adv: batadv0: Interface activated: team0 [ 184.958382][ T8116] batman_adv: batadv0: Interface deactivated: team0 [ 184.965695][ T8116] batman_adv: batadv0: Removing interface: team0 [ 184.975665][ T8116] bridge0: port 3(team0) entered blocking state [ 184.982343][ T8116] bridge0: port 3(team0) entered disabled state [ 184.989027][ T8116] team0: entered allmulticast mode [ 184.994310][ T8116] team_slave_0: entered allmulticast mode [ 185.002001][ T8116] team_slave_1: entered allmulticast mode [ 185.012444][ T8116] bridge0: port 3(team0) entered blocking state [ 185.018855][ T8116] bridge0: port 3(team0) entered forwarding state [ 185.670924][ T8155] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 185.691854][ T8155] bridge0: port 3(team0) entered disabled state [ 185.698932][ T8155] team0: left allmulticast mode [ 185.710082][ T8155] team_slave_0: left allmulticast mode [ 185.719197][ T8155] team_slave_1: left allmulticast mode [ 185.724890][ T8155] team0: left promiscuous mode [ 185.731189][ T8155] team_slave_0: left promiscuous mode [ 185.736901][ T8155] team_slave_1: left promiscuous mode [ 185.751485][ T8155] bridge0: port 3(team0) entered disabled state [ 185.763497][ T8155] batman_adv: batadv0: Adding interface: team0 [ 185.769994][ T8155] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.795502][ T8155] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 185.825643][ T8156] bond0: entered promiscuous mode [ 185.835956][ T8156] bond_slave_0: entered promiscuous mode [ 185.852626][ T8156] bond_slave_1: entered promiscuous mode [ 185.868284][ T8156] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 185.888592][ T8158] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 185.912031][ T8158] team0: entered promiscuous mode [ 185.923080][ T8158] team_slave_0: entered promiscuous mode [ 185.929167][ T8158] team_slave_1: entered promiscuous mode [ 185.937711][ T8158] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.945035][ T8158] batman_adv: batadv0: Interface activated: team0 [ 185.951834][ T8158] batman_adv: batadv0: Interface deactivated: team0 [ 185.958633][ T8158] batman_adv: batadv0: Removing interface: team0 [ 185.973854][ T8158] bridge0: port 3(team0) entered blocking state [ 185.980857][ T8158] bridge0: port 3(team0) entered disabled state [ 185.987602][ T8158] team0: entered allmulticast mode [ 185.993117][ T8158] team_slave_0: entered allmulticast mode [ 185.999027][ T8158] team_slave_1: entered allmulticast mode [ 186.007626][ T8158] bridge0: port 3(team0) entered blocking state [ 186.014141][ T8158] bridge0: port 3(team0) entered forwarding state [ 186.175385][ T8168] pim6reg1: entered promiscuous mode [ 186.196488][ T8168] pim6reg1: entered allmulticast mode [ 186.711108][ T8191] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 187.301557][ T8208] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 187.462210][ T8228] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 187.664759][ T8236] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 188.401438][ T8250] dccp_invalid_packet: P.Data Offset(0) too small [ 188.512272][ T8253] __nla_validate_parse: 13 callbacks suppressed [ 188.512299][ T8253] netlink: 16126 bytes leftover after parsing attributes in process `syz-executor.1'. [ 188.544462][ T8253] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.1'. [ 188.626068][ T8259] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 188.650105][ T8259] team0: left allmulticast mode [ 188.655044][ T8259] team_slave_0: left allmulticast mode [ 188.670229][ T8259] team_slave_1: left allmulticast mode [ 188.677413][ T8259] bridge0: port 3(team0) entered disabled state [ 188.694634][ T8259] bridge_slave_1: left allmulticast mode [ 188.709804][ T8259] bridge_slave_1: left promiscuous mode [ 188.731776][ T8259] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.744258][ T8259] bridge_slave_0: left allmulticast mode [ 188.769820][ T8259] bridge_slave_0: left promiscuous mode [ 188.775737][ T8259] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.947105][ T8260] smc: net device ip6tnl0 applied user defined pnetid SYZ0 [ 188.965173][ T8264] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 189.274721][ T8283] team0: entered promiscuous mode [ 189.296753][ T8283] team_slave_0: entered promiscuous mode [ 189.331077][ T8283] team_slave_1: entered promiscuous mode [ 189.352848][ T8283] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 189.372746][ T8289] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.575387][ T8294] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 189.609538][ T8294] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 189.638107][ T8294] netlink: 192 bytes leftover after parsing attributes in process `syz-executor.2'. [ 189.676325][ T8296] netlink: 16126 bytes leftover after parsing attributes in process `syz-executor.1'. [ 189.709395][ T8296] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.1'. [ 189.811613][ T8300] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 189.826540][ T8300] netlink: 512 bytes leftover after parsing attributes in process `syz-executor.4'. [ 189.836925][ T8298] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 189.857720][ T8303] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 0, id = 0 [ 189.870087][ T8298] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 189.962780][ T8306] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 189.994435][ T8306] team0: Port device netdevsim0 removed [ 190.088676][ T8310] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 190.114033][ T8310] Cannot find del_set index 2048 as target [ 190.466692][ T8317] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 190.740709][ T8326] dccp_invalid_packet: P.Data Offset(0) too small [ 190.779230][ T8330] delete_channel: no stack [ 190.839435][ T8327] bond_slave_0: entered promiscuous mode [ 190.845585][ T8327] bond_slave_1: entered promiscuous mode [ 190.888478][ T8327] bond_slave_0: left promiscuous mode [ 190.901650][ T8327] bond_slave_1: left promiscuous mode [ 190.973577][ T8336] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 191.208955][ T8327] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 191.239860][ T8327] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 191.260819][ T8327] bond0 (unregistering): Released all slaves [ 191.811326][ T8374] dccp_invalid_packet: P.Data Offset(0) too small [ 191.931434][ T8380] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 192.000238][ T8380] batman_adv: batadv0: Adding interface: team0 [ 192.021631][ T8380] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.081703][ T8380] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 192.131793][ T8386] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 192.172880][ T8386] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.180401][ T8386] batman_adv: batadv0: Interface activated: team0 [ 192.187034][ T8386] batman_adv: batadv0: Interface deactivated: team0 [ 192.195071][ T8386] batman_adv: batadv0: Removing interface: team0 [ 192.204991][ T8386] bridge0: port 3(team0) entered blocking state [ 192.222187][ T8386] bridge0: port 3(team0) entered disabled state [ 192.229842][ T8386] team0: entered allmulticast mode [ 192.235105][ T8386] team_slave_0: entered allmulticast mode [ 192.249644][ T8386] team_slave_1: entered allmulticast mode [ 192.272999][ T8386] team0: left allmulticast mode [ 192.277937][ T8386] team_slave_0: left allmulticast mode [ 192.294043][ T8386] team_slave_1: left allmulticast mode [ 192.634947][ T8401] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.083797][ T8421] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_team, syncid = 0, id = 0 [ 193.450687][ T8430] pim6reg1: entered promiscuous mode [ 193.456076][ T8430] pim6reg1: entered allmulticast mode [ 193.803254][ T8441] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 193.964915][ T8451] bond0: entered promiscuous mode [ 193.978710][ T8451] bond_slave_0: entered promiscuous mode [ 193.986434][ T8451] bond_slave_1: entered promiscuous mode [ 194.003652][ T8451] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 194.038823][ T29] audit: type=1800 audit(1718670871.261:23): pid=8454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=1959 res=0 errno=0 [ 194.068429][ T29] audit: type=1804 audit(1718670871.261:24): pid=8454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir77289519/syzkaller.WeRUl1/56/memory.events" dev="sda1" ino=1959 res=1 errno=0 [ 194.108523][ T29] audit: type=1804 audit(1718670871.271:25): pid=8454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir77289519/syzkaller.WeRUl1/56/memory.events" dev="sda1" ino=1959 res=1 errno=0 [ 194.255775][ T8462] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 194.658949][ T8480] __nla_validate_parse: 12 callbacks suppressed [ 194.658971][ T8480] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 194.711150][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.719062][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.786882][ T8485] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 194.817452][ T8485] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 195.543792][ T8507] xt_CT: You must specify a L4 protocol and not use inversions on it [ 195.670903][ T8484] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 195.714536][ T29] audit: type=1804 audit(1718670872.931:26): pid=8512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir466379469/syzkaller.Vmu6nm/75/cgroup.controllers" dev="sda1" ino=1945 res=1 errno=0 [ 195.792766][ T8514] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 195.882482][ T8518] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.2'. [ 196.233849][ T8531] netlink: 'syz-executor.2': attribute type 13 has an invalid length. [ 196.443270][ T29] audit: type=1804 audit(1718670873.671:27): pid=8541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1145639610/syzkaller.sDhbue/268/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 196.507713][ T29] audit: type=1804 audit(1718670873.731:28): pid=8543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir792543594/syzkaller.knxo0q/232/cgroup.controllers" dev="sda1" ino=1973 res=1 errno=0 [ 196.605716][ T8545] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 196.647433][ T8545] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 196.718213][ T8552] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 196.782570][ T5120] Bluetooth: hci3: command 0x0406 tx timeout [ 196.788692][ T5125] Bluetooth: hci1: command 0x0406 tx timeout [ 196.789597][ T5118] Bluetooth: hci4: command 0x0405 tx timeout [ 197.336629][ T8561] dccp_invalid_packet: P.Data Offset(0) too small [ 197.743622][ T8566] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 198.009152][ T4490] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 198.024275][ T4490] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 198.051450][ T4490] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 198.061322][ T4490] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 198.077080][ T4490] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 198.085589][ T4490] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 198.427957][ T8587] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 198.498345][ T8587] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 198.818009][ T8570] chnl_net:caif_netlink_parms(): no params data found [ 198.876971][ T8606] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 198.895077][ T8606] nbd: illegal input index -1708589048 [ 198.973684][ T955] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.106011][ T8615] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.192869][ T955] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.334066][ T955] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.402555][ T8570] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.432197][ T8570] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.449925][ T8570] bridge_slave_0: entered allmulticast mode [ 199.467858][ T8570] bridge_slave_0: entered promiscuous mode [ 199.521459][ T955] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.553482][ T8570] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.563737][ T8570] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.571563][ T8570] bridge_slave_1: entered allmulticast mode [ 199.580372][ T8570] bridge_slave_1: entered promiscuous mode [ 199.682101][ T8570] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.722465][ T8570] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.878340][ T8570] team0: Port device team_slave_0 added [ 199.917714][ T8570] team0: Port device team_slave_1 added [ 199.990337][ T8645] team_slave_0: entered allmulticast mode [ 200.050102][ T8570] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.070924][ T8570] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.131650][ T8570] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.151155][ T4490] Bluetooth: hci6: command tx timeout [ 200.169699][ T8570] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.193260][ T8570] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.228834][ T8570] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.813526][ T955] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 200.826495][ T955] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 200.838484][ T955] bond0 (unregistering): Released all slaves [ 201.025503][ T8570] hsr_slave_0: entered promiscuous mode [ 201.040217][ T8570] hsr_slave_1: entered promiscuous mode [ 201.047155][ T8570] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 201.058857][ T8570] Cannot create hsr debugfs directory [ 201.129628][ T8676] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.487528][ T955] hsr_slave_0: left promiscuous mode [ 201.498817][ T955] hsr_slave_1: left promiscuous mode [ 201.510837][ T955] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.518378][ T955] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.555182][ T955] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.569613][ T955] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.616928][ T955] veth1_macvtap: left promiscuous mode [ 201.622813][ T955] veth0_macvtap: left promiscuous mode [ 201.632066][ T955] veth1_vlan: left promiscuous mode [ 201.637638][ T955] veth0_vlan: left promiscuous mode [ 202.221555][ T4490] Bluetooth: hci6: command tx timeout [ 202.332918][ T29] audit: type=1800 audit(1718670879.561:29): pid=8702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1963 res=0 errno=0 [ 202.822813][ T53] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 202.832942][ T53] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 202.850252][ T53] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 202.868789][ T53] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 202.877025][ T53] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 202.887399][ T53] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 203.017599][ T955] team_slave_1 (unregistering): left promiscuous mode [ 203.033198][ T955] team0 (unregistering): Port device team_slave_1 removed [ 203.083382][ T955] team_slave_0 (unregistering): left promiscuous mode [ 203.092100][ T955] team0 (unregistering): Port device team_slave_0 removed [ 204.260253][ T8730] xt_CT: You must specify a L4 protocol and not use inversions on it [ 204.287105][ T29] audit: type=1800 audit(1718670881.511:30): pid=8735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1965 res=0 errno=0 [ 204.309241][ T53] Bluetooth: hci6: command tx timeout [ 204.468431][ T8737] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.1'. [ 204.602283][ T8737] IPv6: Can't replace route, no match found [ 204.705453][ T8715] chnl_net:caif_netlink_parms(): no params data found [ 204.948256][ T53] Bluetooth: hci7: command tx timeout [ 204.964956][ T8570] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 204.994594][ T8570] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 205.105569][ T8570] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 205.125687][ T8715] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.144993][ T8715] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.163447][ T8715] bridge_slave_0: entered allmulticast mode [ 205.181718][ T8715] bridge_slave_0: entered promiscuous mode [ 205.210456][ T8570] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 205.235063][ T8715] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.262350][ T8715] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.286458][ T8715] bridge_slave_1: entered allmulticast mode [ 205.311286][ T8715] bridge_slave_1: entered promiscuous mode [ 205.511903][ T8715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.560505][ T29] audit: type=1800 audit(1718670882.781:31): pid=8765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1958 res=0 errno=0 [ 205.591441][ T8715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.674120][ T29] audit: type=1804 audit(1718670882.901:32): pid=8767 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir792543594/syzkaller.knxo0q/258/cgroup.controllers" dev="sda1" ino=1958 res=1 errno=0 [ 205.732657][ T8715] team0: Port device team_slave_0 added [ 205.821527][ T8715] team0: Port device team_slave_1 added [ 205.963482][ T8715] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.985515][ T8715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.049617][ T8715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.088166][ T8715] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.098594][ T8715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.143131][ T8715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.302740][ T8715] hsr_slave_0: entered promiscuous mode [ 206.322535][ T8715] hsr_slave_1: entered promiscuous mode [ 206.348953][ T8780] delete_channel: no stack [ 206.353760][ T8715] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 206.364896][ T8715] Cannot create hsr debugfs directory [ 206.379836][ T53] Bluetooth: hci6: command tx timeout [ 206.395108][ T8780] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. [ 206.588422][ T8570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.740618][ T8570] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.761557][ T29] audit: type=1800 audit(1718670883.991:33): pid=8791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1958 res=0 errno=0 [ 206.799790][ T8715] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.831159][ T8715] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 52831 - 0 [ 206.845932][ T8715] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 50218 - 0 [ 206.922651][ T5129] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.929981][ T5129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.949108][ T5162] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.956338][ T5162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.020058][ T53] Bluetooth: hci7: command tx timeout [ 207.040875][ T8715] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.059321][ T8715] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 52831 - 0 [ 207.085085][ T8715] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 50218 - 0 [ 207.233651][ T8715] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.253539][ T8715] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 52831 - 0 [ 207.266324][ T8715] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 50218 - 0 [ 207.437220][ T8715] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.453718][ T8715] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 52831 - 0 [ 207.464436][ T8715] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 50218 - 0 [ 208.059175][ T8715] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 208.072863][ T8715] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 208.115230][ T8570] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.141379][ T29] audit: type=1800 audit(1718670885.371:34): pid=8823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1958 res=0 errno=0 [ 208.148047][ T8715] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 208.212315][ T8715] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 208.333155][ T8827] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 208.419409][ T8830] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 208.428850][ T8830] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.1'. [ 208.472807][ T8830] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.480304][ T8830] bridge0: port 3(team0) entered blocking state [ 208.486794][ T8830] bridge0: port 3(team0) entered disabled state [ 208.493851][ T8830] team0: entered allmulticast mode [ 208.499010][ T8830] team_slave_0: entered allmulticast mode [ 208.505121][ T8830] team_slave_1: entered allmulticast mode [ 208.512896][ T8830] team0: left allmulticast mode [ 208.517810][ T8830] team_slave_0: left allmulticast mode [ 208.523579][ T8830] team_slave_1: left allmulticast mode [ 208.543215][ T8570] veth0_vlan: entered promiscuous mode [ 208.630889][ T8570] veth1_vlan: entered promiscuous mode [ 208.647214][ T8835] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 208.773158][ T8715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.834077][ T8570] veth0_macvtap: entered promiscuous mode [ 208.858459][ T8715] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.875707][ T8570] veth1_macvtap: entered promiscuous mode [ 208.888553][ T5161] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.896005][ T5161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.934937][ T5129] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.942268][ T5129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.977556][ T8570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.001934][ T8570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.029773][ T8570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.049521][ T8570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.080706][ T8570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.100256][ T8570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.100277][ T53] Bluetooth: hci7: command tx timeout [ 209.120078][ T8570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.131304][ T8570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.141587][ T8570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.152412][ T8570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.165257][ T8570] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.207395][ T8570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.241222][ T8570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.260407][ T8570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.279530][ T8570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.289410][ T8570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.329791][ T8570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.350581][ T8570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.377308][ T8570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.397080][ T8570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.423967][ T8570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.441592][ T8570] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.480357][ T8570] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.493052][ T8570] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.509583][ T8570] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.518352][ T8570] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.847404][ T8851] netlink: 16126 bytes leftover after parsing attributes in process `syz-executor.2'. [ 209.858223][ T8851] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.2'. [ 209.871999][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.892184][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.960308][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.968182][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.255833][ T8715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.361911][ T8871] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 210.418954][ T8871] batman_adv: batadv0: Adding interface: team0 [ 210.437007][ T8871] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.469883][ T8871] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 210.506412][ T8875] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 210.544294][ T8876] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 210.576969][ T8876] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.2'. [ 210.604125][ T8876] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.611462][ T8876] batman_adv: batadv0: Interface activated: team0 [ 210.617977][ T8876] batman_adv: batadv0: Interface deactivated: team0 [ 210.627465][ T8876] batman_adv: batadv0: Removing interface: team0 [ 210.638730][ T8876] bridge0: port 3(team0) entered blocking state [ 210.669666][ T8876] bridge0: port 3(team0) entered disabled state [ 210.676220][ T8876] team0: entered allmulticast mode [ 210.719657][ T8876] team_slave_1: entered allmulticast mode [ 210.727514][ T8876] team0: left allmulticast mode [ 210.749725][ T8876] team_slave_1: left allmulticast mode [ 210.844012][ T8715] veth0_vlan: entered promiscuous mode [ 211.180811][ T53] Bluetooth: hci7: command tx timeout [ 212.480287][ T8888] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 212.584030][ T8715] veth1_vlan: entered promiscuous mode [ 212.590847][ T8892] TCP: request_sock_TCP: Possible SYN flooding on port 172.20.20.170:20002. Sending cookies. [ 212.740343][ T8715] veth0_macvtap: entered promiscuous mode [ 212.788207][ T8715] veth1_macvtap: entered promiscuous mode [ 212.891032][ T8715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.935769][ T8715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.970978][ T8715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.992814][ T8715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.020229][ T8715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.043822][ T8715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.054583][ T8715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.068410][ T8715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.083439][ T8715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.109729][ T8715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.129546][ T8715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.149735][ T8715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.182096][ T8715] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.220627][ T8715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.258697][ T8715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.278756][ T8715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.289891][ T8715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.300043][ T8715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.319597][ T8715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.349733][ T8715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.377423][ T8715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.399049][ T8715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.418399][ T8715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.449699][ T8715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.474175][ T8715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.491695][ T8715] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.517341][ T8910] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 213.543723][ T8910] batman_adv: batadv0: Adding interface: team0 [ 213.550851][ T8908] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 213.577814][ T8910] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.629651][ T8910] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 213.640636][ T8912] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 213.664066][ T8912] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.3'. [ 213.689890][ T8912] team0: entered promiscuous mode [ 213.706378][ T8912] team_slave_0: entered promiscuous mode [ 213.719798][ T8912] team_slave_1: entered promiscuous mode [ 213.728816][ T8912] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.737661][ T8912] batman_adv: batadv0: Interface activated: team0 [ 213.767538][ T8912] batman_adv: batadv0: Interface deactivated: team0 [ 213.776396][ T8912] batman_adv: batadv0: Removing interface: team0 [ 213.790613][ T8912] bridge0: port 3(team0) entered blocking state [ 213.799789][ T8912] bridge0: port 3(team0) entered disabled state [ 213.806331][ T8912] team0: entered allmulticast mode [ 213.821820][ T8912] team_slave_0: entered allmulticast mode [ 213.827613][ T8912] team_slave_1: entered allmulticast mode [ 213.854759][ T8912] bridge0: port 3(team0) entered blocking state [ 213.861537][ T8912] bridge0: port 3(team0) entered forwarding state [ 213.910381][ T8715] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.919160][ T8715] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.948939][ T8715] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.978561][ T8715] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.292911][ T8921] netlink: 16126 bytes leftover after parsing attributes in process `syz-executor.1'. [ 214.327961][ T1097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.336263][ T8921] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.1'. [ 214.359623][ T1097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.462421][ T1097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.490829][ T1097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.997928][ T8948] netlink: 'syz-executor.2': attribute type 6 has an invalid length. [ 215.138257][ T8955] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 215.220197][ T8955] batman_adv: batadv0: Adding interface: team0 [ 215.232380][ T8955] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.258343][ T8955] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 215.296705][ T8960] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 215.325766][ T8960] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.0'. [ 215.344082][ T8960] team0: entered promiscuous mode [ 215.349189][ T8960] team_slave_0: entered promiscuous mode [ 215.361868][ T8965] x_tables: unsorted entry at hook 1 [ 215.367656][ T8960] team_slave_1: entered promiscuous mode [ 215.382681][ T8960] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.398851][ T8960] batman_adv: batadv0: Interface activated: team0 [ 215.412071][ T8965] Unsupported ieee802154 address type: 0 [ 215.421090][ T8960] batman_adv: batadv0: Interface deactivated: team0 [ 215.427801][ T8960] batman_adv: batadv0: Removing interface: team0 [ 215.435941][ T8965] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 215.445643][ T8960] bridge0: port 3(team0) entered blocking state [ 215.454750][ T8965] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 215.465880][ T8960] bridge0: port 3(team0) entered disabled state [ 215.479944][ T8960] team0: entered allmulticast mode [ 215.485312][ T8960] team_slave_0: entered allmulticast mode [ 215.500329][ T8960] team_slave_1: entered allmulticast mode [ 215.509361][ T8960] bridge0: port 3(team0) entered blocking state [ 215.515887][ T8960] bridge0: port 3(team0) entered forwarding state [ 215.529749][ T8963] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 216.183515][ T9000] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 216.218045][ T9002] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 216.253197][ T9002] bridge0: port 3(team0) entered disabled state [ 216.293830][ T9002] team0: left allmulticast mode [ 216.298983][ T9002] team_slave_0: left allmulticast mode [ 216.312792][ T9002] team_slave_1: left allmulticast mode [ 216.329425][ T9002] team0: left promiscuous mode [ 216.335650][ T9002] team_slave_0: left promiscuous mode [ 216.370226][ T9002] team_slave_1: left promiscuous mode [ 216.376294][ T9002] bridge0: port 3(team0) entered disabled state [ 216.403158][ T9002] batman_adv: batadv0: Adding interface: team0 [ 216.419737][ T9002] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.479891][ T9002] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 216.510709][ T9003] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 216.531367][ T9003] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.3'. [ 216.569743][ T9003] team0: entered promiscuous mode [ 216.575056][ T9003] team_slave_0: entered promiscuous mode [ 216.581465][ T9003] team_slave_1: entered promiscuous mode [ 216.589372][ T9003] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.603690][ T9017] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.614104][ T9003] batman_adv: batadv0: Interface activated: team0 [ 216.621932][ T9003] batman_adv: batadv0: Interface deactivated: team0 [ 216.623770][ T9017] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.628758][ T9003] batman_adv: batadv0: Removing interface: team0 [ 216.648012][ T9003] bridge0: port 3(team0) entered blocking state [ 216.654853][ T9003] bridge0: port 3(team0) entered disabled state [ 216.661958][ T9003] team0: entered allmulticast mode [ 216.667211][ T9003] team_slave_0: entered allmulticast mode [ 216.679032][ T9003] team_slave_1: entered allmulticast mode [ 216.697251][ T9003] bridge0: port 3(team0) entered blocking state [ 216.703784][ T9003] bridge0: port 3(team0) entered forwarding state [ 216.748256][ T9016] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.936201][ T29] audit: type=1800 audit(1718670894.161:35): pid=9026 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1961 res=0 errno=0 [ 217.230915][ T9044] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 217.271056][ T9045] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.1'. [ 217.301995][ T9045] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.340516][ T9045] bridge0: port 3(team0) entered blocking state [ 217.346955][ T9045] bridge0: port 3(team0) entered disabled state [ 217.379143][ T9045] team0: entered allmulticast mode [ 217.409582][ T9045] team_slave_0: entered allmulticast mode [ 217.437665][ T9045] team_slave_1: entered allmulticast mode [ 217.456294][ T9045] team0: left allmulticast mode [ 217.485639][ T9045] team_slave_0: left allmulticast mode [ 217.509698][ T9045] team_slave_1: left allmulticast mode [ 217.760225][ T9058] xt_connbytes: Forcing CT accounting to be enabled [ 217.766917][ T29] audit: type=1800 audit(1718670894.991:36): pid=9060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1961 res=0 errno=0 [ 218.469941][ T29] audit: type=1800 audit(1718670895.691:37): pid=9100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1976 res=0 errno=0 [ 218.641131][ T9106] sch_tbf: burst 3 is lower than device lo mtu (65550) ! [ 218.750556][ T9108] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 218.954924][ T9120] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 218.963625][ T9116] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 218.987481][ T9121] tap0: tun_chr_ioctl cmd 1074025678 [ 218.998513][ T9121] tap0: group set to 0 [ 219.005152][ T9121] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 219.014818][ T9121] netlink: 896 bytes leftover after parsing attributes in process `syz-executor.0'. [ 219.029412][ T9121] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 219.232034][ T29] audit: type=1800 audit(1718670896.461:38): pid=9132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=1975 res=0 errno=0 [ 219.548598][ T9151] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 220.099707][ T29] audit: type=1800 audit(1718670897.321:39): pid=9169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1961 res=0 errno=0 [ 220.287027][ T9179] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 220.743423][ T9198] __nla_validate_parse: 9 callbacks suppressed [ 220.743456][ T9198] netlink: 16126 bytes leftover after parsing attributes in process `syz-executor.1'. [ 220.780928][ T9198] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.1'. [ 221.013254][ T29] audit: type=1800 audit(1718670898.231:40): pid=9206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=1974 res=0 errno=0 [ 221.818387][ T9220] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 222.117377][ T9220] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 222.272569][ T9236] netlink: 16126 bytes leftover after parsing attributes in process `syz-executor.1'. [ 222.296962][ T9236] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.1'. [ 222.721080][ T9259] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 222.961266][ T29] audit: type=1800 audit(1718670900.191:41): pid=9268 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1970 res=0 errno=0 [ 223.228824][ T9271] netlink: 16126 bytes leftover after parsing attributes in process `syz-executor.2'. [ 223.279631][ T9271] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.2'. [ 223.725493][ T29] audit: type=1804 audit(1718670900.951:42): pid=9286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir466379469/syzkaller.Vmu6nm/156/cgroup.controllers" dev="sda1" ino=1970 res=1 errno=0 [ 224.002819][ T29] audit: type=1800 audit(1718670901.231:43): pid=9301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=1963 res=0 errno=0 [ 224.176328][ T9307] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 224.748128][ T9334] validate_nla: 12 callbacks suppressed [ 224.748151][ T9334] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 224.751779][ T29] audit: type=1800 audit(1718670901.971:44): pid=9333 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1976 res=0 errno=0 [ 227.187794][ T9346] __nla_validate_parse: 4 callbacks suppressed [ 227.187829][ T9346] netlink: 16126 bytes leftover after parsing attributes in process `syz-executor.0'. [ 227.209618][ T9346] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.0'. [ 227.693410][ T9359] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.703587][ T9359] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.713055][ T9359] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.722025][ T9359] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.744027][ T9359] vxlan0: entered promiscuous mode [ 227.749392][ T9359] vxlan0: entered allmulticast mode [ 227.963310][ T29] audit: type=1800 audit(1718670905.191:45): pid=9371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1974 res=0 errno=0 [ 228.015691][ T9372] pim6reg1: entered promiscuous mode [ 228.033715][ T9372] pim6reg1: entered allmulticast mode [ 228.132323][ T9374] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 228.161493][ T9374] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 228.198569][ T9378] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 228.223667][ T9378] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.239885][ T9378] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.262385][ T9378] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 228.284082][ T9378] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 228.334369][ T9382] netlink: 16126 bytes leftover after parsing attributes in process `syz-executor.3'. [ 228.370010][ T9382] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.3'. [ 228.549662][ T9392] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 228.775718][ T9406] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 228.901732][ T9410] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 228.965081][ T9412] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 228.980216][ T9412] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 228.993083][ T9412] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 229.049628][ T9415] pim6reg1: entered promiscuous mode [ 229.063349][ T9415] pim6reg1: entered allmulticast mode [ 229.411740][ T9435] xt_TPROXY: Can be used only with -p tcp or -p udp [ 229.457944][ T9435] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 229.487230][ T9440] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 229.508468][ T9440] nbd: illegal input index -1708589048 [ 229.527771][ T9435] bond1: entered promiscuous mode [ 229.637738][ T9448] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 229.677006][ T9450] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.704386][ T9450] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 229.723244][ T9450] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 229.739767][ T9453] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 229.986441][ T9463] pim6reg1: entered promiscuous mode [ 229.992456][ T9463] pim6reg1: entered allmulticast mode [ 230.356550][ T9475] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 230.429936][ T9478] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 230.461695][ T9478] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.480509][ T9478] bridge0: port 3(team0) entered blocking state [ 230.498155][ T9478] bridge0: port 3(team0) entered disabled state [ 230.509147][ T9481] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 230.529605][ T9478] team0: entered allmulticast mode [ 230.534795][ T9478] team_slave_0: entered allmulticast mode [ 230.548772][ T9481] nbd: illegal input index -1708589048 [ 230.595218][ T9478] team_slave_1: entered allmulticast mode [ 230.614539][ T9478] team0: left allmulticast mode [ 230.626643][ T9478] team_slave_0: left allmulticast mode [ 230.634281][ T9478] team_slave_1: left allmulticast mode [ 230.997135][ T9502] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 231.014518][ T9500] pim6reg1: entered promiscuous mode [ 231.032982][ T9500] pim6reg1: entered allmulticast mode [ 231.187139][ T9507] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 231.522414][ T29] audit: type=1804 audit(1718670908.751:46): pid=9519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2336274647/syzkaller.93b5ia/58/cgroup.controllers" dev="sda1" ino=1963 res=1 errno=0 [ 232.316695][ T9540] pim6reg1: entered promiscuous mode [ 232.330012][ T9540] pim6reg1: entered allmulticast mode [ 233.003941][ T9558] __nla_validate_parse: 10 callbacks suppressed [ 233.003966][ T9558] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. [ 233.093807][ T9558] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 233.271822][ T9567] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 233.334859][ T9575] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.3'. [ 233.408465][ T9578] pim6reg1: entered promiscuous mode [ 233.430123][ T9578] pim6reg1: entered allmulticast mode [ 235.146055][ T9619] pim6reg1: entered promiscuous mode [ 235.192902][ T9619] pim6reg1: entered allmulticast mode [ 235.367382][ T9636] siw: device registration error -23 [ 235.564020][ T4490] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 235.574888][ T4490] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 235.583963][ T4490] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 235.595383][ T4490] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 235.604975][ T4490] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 235.612810][ T4490] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 235.623182][ T9641] xt_CT: You must specify a L4 protocol and not use inversions on it [ 235.644623][ T9643] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 236.038061][ T9658] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 236.382660][ T9670] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 236.433703][ T9638] chnl_net:caif_netlink_parms(): no params data found [ 236.600788][ T9677] IPv6: sit2: Disabled Multicast RS [ 236.862556][ T9691] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 236.895682][ T9638] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.917578][ T9638] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.943117][ T9638] bridge_slave_0: entered allmulticast mode [ 236.973653][ T9638] bridge_slave_0: entered promiscuous mode [ 236.996237][ T9638] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.027025][ T9638] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.045508][ T9638] bridge_slave_1: entered allmulticast mode [ 237.061458][ T9638] bridge_slave_1: entered promiscuous mode [ 237.160521][ T9702] netlink: 16126 bytes leftover after parsing attributes in process `syz-executor.2'. [ 237.178943][ T9702] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.2'. [ 237.199087][ T9638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.211018][ T9704] x_tables: ip_tables: ah match: only valid for protocol 51 [ 237.229037][ T9638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.308488][ T9638] team0: Port device team_slave_0 added [ 237.331224][ T9706] syzkaller1: entered promiscuous mode [ 237.341983][ T9706] syzkaller1: entered allmulticast mode [ 237.355655][ T9638] team0: Port device team_slave_1 added [ 237.475845][ T9713] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 237.545843][ T9638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.560192][ T9638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.613528][ T9638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.654818][ T9638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.662007][ T4490] Bluetooth: hci8: command tx timeout [ 237.671059][ T9638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.721328][ T9638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.888392][ T9638] hsr_slave_0: entered promiscuous mode [ 237.909894][ T9638] hsr_slave_1: entered promiscuous mode [ 237.932735][ T9638] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 237.957842][ T9638] Cannot create hsr debugfs directory [ 238.108117][ T9733] netlink: 16126 bytes leftover after parsing attributes in process `syz-executor.2'. [ 238.125274][ T9733] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.2'. [ 238.243448][ T9736] dccp_invalid_packet: P.type (SYNC) not Data || [Data]Ack, while P.X == 0 [ 238.524475][ T9638] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.723492][ T9638] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.893191][ T9638] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.954120][ T9769] netlink: 16126 bytes leftover after parsing attributes in process `syz-executor.2'. [ 238.969112][ T9769] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.2'. [ 239.050338][ T9638] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.193753][ T9774] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 239.222447][ T9774] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 239.240700][ T9774] team0: Port device netdevsim0 added [ 239.478934][ T9638] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 239.496574][ T9638] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 239.541971][ T9638] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 239.590297][ T9783] netlink: 'syz-executor.2': attribute type 15 has an invalid length. [ 239.599236][ T9638] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 239.662626][ T9785] bond0: entered promiscuous mode [ 239.667738][ T9785] bond_slave_0: entered promiscuous mode [ 239.697078][ T9785] bond_slave_1: entered promiscuous mode [ 239.719763][ T9785] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 239.740410][ T4490] Bluetooth: hci8: command tx timeout [ 240.041874][ T9638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.122340][ T9638] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.161210][ T5162] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.168496][ T5162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.206986][ T932] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.214311][ T932] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.673286][ T9638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.925824][ T9806] netlink: 16126 bytes leftover after parsing attributes in process `syz-executor.0'. [ 240.970428][ T9806] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.0'. [ 241.342189][ T9638] veth0_vlan: entered promiscuous mode [ 241.387746][ T9638] veth1_vlan: entered promiscuous mode [ 241.490140][ T9638] veth0_macvtap: entered promiscuous mode [ 241.522794][ T9638] veth1_macvtap: entered promiscuous mode [ 241.576294][ T9638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.608954][ T9638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.633818][ T9638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.660479][ T9638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.677496][ T9638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.691915][ T9638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.710150][ T9638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.731377][ T9638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.745506][ T9638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.757642][ T9838] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 241.766020][ T9838] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 241.774367][ T9838] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 241.787493][ T9638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.797811][ T9838] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 241.808731][ T9638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 241.824417][ T4490] Bluetooth: hci8: command tx timeout [ 241.852393][ T9638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.896418][ T9638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.929677][ T9638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 241.960200][ T9638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.982490][ T9638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.006056][ T9638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.031240][ T9638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.053267][ T9638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.075719][ T9638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.096670][ T9638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.121780][ T9638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.141254][ T9638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.159490][ T9638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.178987][ T9638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.202482][ T9638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 242.233761][ T9638] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.251034][ T9638] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.259852][ T9638] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.268647][ T9638] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.459143][ T955] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.481799][ T955] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.538315][ T9851] netlink: 16126 bytes leftover after parsing attributes in process `syz-executor.1'. [ 242.558312][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.569560][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.570236][ T9851] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.1'. [ 243.064891][ T9878] bond0: entered promiscuous mode [ 243.074722][ T9878] bond_slave_0: entered promiscuous mode [ 243.089890][ T9878] bond_slave_1: entered promiscuous mode [ 243.100925][ T9878] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 243.432166][ T29] audit: type=1800 audit(1718670920.661:47): pid=9893 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1979 res=0 errno=0 [ 243.563808][ T9895] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 243.606696][ T9895] batman_adv: batadv0: Adding interface: team0 [ 243.633508][ T9895] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.698738][ T9895] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 243.748582][ T9896] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 243.774786][ T9896] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.2'. [ 243.811871][ T9896] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.831281][ T9896] batman_adv: batadv0: Interface activated: team0 [ 243.837847][ T9896] batman_adv: batadv0: Interface deactivated: team0 [ 243.845152][ T9896] batman_adv: batadv0: Removing interface: team0 [ 243.857803][ T9896] bridge0: port 3(team0) entered blocking state [ 243.869856][ T9896] bridge0: port 3(team0) entered disabled state [ 243.886680][ T9896] team0: entered allmulticast mode [ 243.900172][ T4490] Bluetooth: hci8: command tx timeout [ 243.900878][ T9896] team_slave_1: entered allmulticast mode [ 243.931162][ T9896] team0: left allmulticast mode [ 243.958658][ T9896] team_slave_1: left allmulticast mode [ 244.133268][ T29] audit: type=1804 audit(1718670921.361:48): pid=9914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1876818635/syzkaller.Nalzpl/83/cgroup.controllers" dev="sda1" ino=1966 res=1 errno=0 [ 244.170085][ T29] audit: type=1804 audit(1718670921.391:49): pid=9914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir1876818635/syzkaller.Nalzpl/83/cgroup.controllers" dev="sda1" ino=1966 res=1 errno=0 [ 244.239770][ T29] audit: type=1804 audit(1718670921.401:50): pid=9914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir1876818635/syzkaller.Nalzpl/83/cgroup.controllers" dev="sda1" ino=1966 res=1 errno=0 [ 245.681343][ T9950] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 245.830653][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.886945][ T9952] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 245.931746][ T9952] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 246.011478][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.072603][ T9960] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 246.120001][ T9956] netlink: 'syz-executor.0': attribute type 13 has an invalid length. [ 246.212902][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.411332][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.671507][ T53] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 246.682146][ T9977] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 246.689381][ T53] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 246.703079][ T53] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 246.732266][ T53] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 246.750320][ T53] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 246.752032][ T9977] syz_tun: entered promiscuous mode [ 246.780546][ T53] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 248.582008][ T12] bridge_slave_1: left allmulticast mode [ 248.587728][ T12] bridge_slave_1: left promiscuous mode [ 248.611903][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.660660][ T12] bridge_slave_0: left allmulticast mode [ 248.666374][ T12] bridge_slave_0: left promiscuous mode [ 248.688295][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.859920][ T4490] Bluetooth: hci8: command tx timeout [ 249.232071][ T12] bond0 (unregistering): left promiscuous mode [ 249.238431][ T12] bond_slave_0: left promiscuous mode [ 249.244513][ T12] bond_slave_1: left promiscuous mode [ 249.273673][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 249.287243][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 249.299995][ T12] bond0 (unregistering): Released all slaves [ 249.342389][T10005] netlink: 'syz-executor.0': attribute type 13 has an invalid length. [ 250.140035][ T12] hsr_slave_0: left promiscuous mode [ 250.173016][ T12] hsr_slave_1: left promiscuous mode [ 250.209610][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.231889][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.264402][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 250.292977][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.392169][ T12] veth1_macvtap: left promiscuous mode [ 250.397778][ T12] veth0_macvtap: left promiscuous mode [ 250.413110][ T12] veth1_vlan: left promiscuous mode [ 250.421379][ T12] veth0_vlan: left promiscuous mode [ 250.485631][T10044] xt_TPROXY: Can be used only with -p tcp or -p udp [ 250.939699][ T4490] Bluetooth: hci8: command tx timeout [ 251.245749][ T12] team0 (unregistering): Port device team_slave_1 removed [ 251.300468][ T12] team0 (unregistering): Port device team_slave_0 removed [ 251.888911][T10052] netlink: 'syz-executor.2': attribute type 13 has an invalid length. [ 252.018596][ T9978] chnl_net:caif_netlink_parms(): no params data found [ 252.291520][ T9978] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.320758][ T9978] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.348542][ T9978] bridge_slave_0: entered allmulticast mode [ 252.382241][ T9978] bridge_slave_0: entered promiscuous mode [ 252.395294][ T9978] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.428096][ T9978] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.448423][ T9978] bridge_slave_1: entered allmulticast mode [ 252.461674][ T9978] bridge_slave_1: entered promiscuous mode [ 252.840462][ T9978] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.876413][ T9978] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.981310][T10087] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.0'. [ 252.982524][ T9978] team0: Port device team_slave_0 added [ 253.020696][ T4490] Bluetooth: hci8: command tx timeout [ 253.043348][ T9978] team0: Port device team_slave_1 added [ 253.192712][ T9978] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.210805][ T9978] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.247880][ T9978] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.281753][ T9978] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 253.290667][T10099] sctp: [Deprecated]: syz-executor.0 (pid 10099) Use of struct sctp_assoc_value in delayed_ack socket option. [ 253.290667][T10099] Use struct sctp_sack_info instead [ 253.317691][ T9978] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.366086][ T9978] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.380376][T10102] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 253.404872][T10102] batman_adv: batadv0: Adding interface: team0 [ 253.412875][T10102] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.438631][T10102] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 253.451587][T10099] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. [ 253.469263][T10104] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 253.480025][T10104] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.2'. [ 253.495780][T10104] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.513604][T10104] batman_adv: batadv0: Interface activated: team0 [ 253.522309][T10104] batman_adv: batadv0: Interface deactivated: team0 [ 253.529553][T10104] batman_adv: batadv0: Removing interface: team0 [ 253.537675][T10104] bridge0: port 3(team0) entered blocking state [ 253.544753][T10104] bridge0: port 3(team0) entered disabled state [ 253.551520][T10104] team0: entered allmulticast mode [ 253.556920][T10104] team_slave_1: entered allmulticast mode [ 253.565453][T10104] team0: left allmulticast mode [ 253.570761][T10104] team_slave_1: left allmulticast mode [ 253.578301][T10099] bridge0: port 4(macvlan0) entered blocking state [ 253.590050][T10099] bridge0: port 4(macvlan0) entered disabled state [ 253.597326][T10099] macvlan0: entered allmulticast mode [ 253.613294][T10099] macvlan0: entered promiscuous mode [ 253.678656][ T29] audit: type=1800 audit(1718670930.901:51): pid=10106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1972 res=0 errno=0 [ 253.719015][ T29] audit: type=1804 audit(1718670930.931:52): pid=10106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir466379469/syzkaller.Vmu6nm/243/memory.events" dev="sda1" ino=1972 res=1 errno=0 [ 253.730937][ T9978] hsr_slave_0: entered promiscuous mode [ 253.755470][ T29] audit: type=1804 audit(1718670930.931:53): pid=10106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir466379469/syzkaller.Vmu6nm/243/memory.events" dev="sda1" ino=1972 res=1 errno=0 [ 253.785112][ T9978] hsr_slave_1: entered promiscuous mode [ 253.793231][ T9978] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 253.801370][ T9978] Cannot create hsr debugfs directory [ 254.518114][T10115] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 254.642767][T10115] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 254.690109][T10115] netlink: 4320 bytes leftover after parsing attributes in process `syz-executor.0'. [ 254.910838][T10126] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 254.942079][ T9978] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 254.960327][T10126] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. [ 254.976685][ T9978] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 255.004158][ T9978] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 255.004535][T10126] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 255.032832][T10130] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 255.062365][T10130] bridge0: port 3(team0) entered disabled state [ 255.082401][T10130] team0: left allmulticast mode [ 255.101144][ T4490] Bluetooth: hci8: command tx timeout [ 255.106651][T10130] team_slave_0: left allmulticast mode [ 255.115230][T10130] team_slave_1: left allmulticast mode [ 255.124051][T10130] team0: left promiscuous mode [ 255.129399][T10130] team_slave_0: left promiscuous mode [ 255.136617][T10130] team_slave_1: left promiscuous mode [ 255.142986][T10130] bridge0: port 3(team0) entered disabled state [ 255.163849][T10130] batman_adv: batadv0: Adding interface: team0 [ 255.171578][T10130] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.197906][T10130] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 255.219788][ T9978] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 255.221750][T10134] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 255.249846][T10131] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 255.269763][T10131] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.0'. [ 255.289745][T10131] team0: entered promiscuous mode [ 255.294851][T10131] team_slave_0: entered promiscuous mode [ 255.306673][T10131] team_slave_1: entered promiscuous mode [ 255.315202][T10131] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.323561][T10131] batman_adv: batadv0: Interface activated: team0 [ 255.336719][T10131] batman_adv: batadv0: Interface deactivated: team0 [ 255.345523][T10131] batman_adv: batadv0: Removing interface: team0 [ 255.360548][T10131] bridge0: port 3(team0) entered blocking state [ 255.366983][T10131] bridge0: port 3(team0) entered disabled state [ 255.375274][T10131] team0: entered allmulticast mode [ 255.380606][T10131] team_slave_0: entered allmulticast mode [ 255.386451][T10131] team_slave_1: entered allmulticast mode [ 255.394890][T10131] bridge0: port 3(team0) entered blocking state [ 255.401357][T10131] bridge0: port 3(team0) entered forwarding state [ 255.413436][T10137] netlink: 'syz-executor.2': attribute type 6 has an invalid length. [ 255.554910][T10140] bond0: option use_carrier: invalid value (164) [ 255.662607][ T9978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.690329][ T9978] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.705755][ T5166] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.713039][ T5166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.754490][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.761728][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.150211][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.157695][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.262132][ T9978] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 256.664591][T10183] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 256.728794][T10183] batman_adv: batadv0: Adding interface: team0 [ 256.751454][T10183] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 256.781128][T10186] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 256.802011][T10186] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.808861][T10186] batman_adv: batadv0: Interface activated: team0 [ 256.851985][T10186] batman_adv: batadv0: Interface deactivated: team0 [ 256.882969][T10186] batman_adv: batadv0: Removing interface: team0 [ 256.910570][T10186] bridge0: port 3(team0) entered blocking state [ 256.927620][T10186] bridge0: port 3(team0) entered disabled state [ 256.946048][T10186] team0: entered allmulticast mode [ 256.959643][T10186] team_slave_1: entered allmulticast mode [ 257.004700][T10186] team0: left allmulticast mode [ 257.016303][T10186] team_slave_1: left allmulticast mode [ 257.176047][T10194] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 257.179107][ T9978] veth0_vlan: entered promiscuous mode [ 257.244968][ T9978] veth1_vlan: entered promiscuous mode [ 257.346327][ T9978] veth0_macvtap: entered promiscuous mode [ 257.376984][ T9978] veth1_macvtap: entered promiscuous mode [ 257.445867][ T9978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.489844][ T9978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.530830][ T9978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.549565][ T9978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.569513][ T9978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.599702][ T9978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.629534][ T9978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.662840][ T9978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.689824][ T9978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.709544][ T9978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.734278][ T9978] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 257.779090][ T9978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.807437][ T9978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.829677][ T9978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.849508][ T9978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.869746][ T9978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.900732][ T9978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.919493][ T9978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.939538][ T9978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.959527][ T9978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.989682][ T9978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.009769][ T9978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.029521][ T9978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.049515][ T9978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.070586][ T9978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.097102][ T9978] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.164033][ T9978] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.180150][ T9978] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.188932][ T9978] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.210837][ T9978] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.250486][ T29] audit: type=1804 audit(1718670935.471:54): pid=10206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1876818635/syzkaller.Nalzpl/105/cgroup.controllers" dev="sda1" ino=1972 res=1 errno=0 [ 258.314369][ T29] audit: type=1804 audit(1718670935.511:55): pid=10203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir1876818635/syzkaller.Nalzpl/105/cgroup.controllers" dev="sda1" ino=1972 res=1 errno=0 [ 258.511931][ T2439] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.561329][ T2439] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.656823][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.679653][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.140965][T10229] __nla_validate_parse: 5 callbacks suppressed [ 259.140989][T10229] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 259.401996][T10238] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 259.476449][T10238] batman_adv: batadv0: Adding interface: team0 [ 259.509978][T10238] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 259.578334][T10240] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 259.630325][T10240] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.2'. [ 259.687773][T10240] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.719820][T10240] batman_adv: batadv0: Interface activated: team0 [ 259.736697][T10240] batman_adv: batadv0: Interface deactivated: team0 [ 259.753608][T10240] batman_adv: batadv0: Removing interface: team0 [ 259.776314][T10248] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.1'. [ 259.787800][T10240] bridge0: port 3(team0) entered blocking state [ 259.811126][T10240] bridge0: port 3(team0) entered disabled state [ 259.817792][T10240] team0: entered allmulticast mode [ 259.835119][T10240] team_slave_1: entered allmulticast mode [ 259.851844][T10240] team0: left allmulticast mode [ 259.867787][T10240] team_slave_1: left allmulticast mode [ 260.058985][ T29] audit: type=1804 audit(1718670937.281:56): pid=10248 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir792543594/syzkaller.knxo0q/405/cgroup.controllers" dev="sda1" ino=1978 res=1 errno=0 [ 260.509826][T10258] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 262.287095][T10315] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 262.692740][T10329] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 263.351909][ T4490] Bluetooth: hci2: command 0x0405 tx timeout [ 263.711982][T10361] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 263.856862][T10366] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 263.980887][T10369] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 264.049943][T10373] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.0'. [ 264.312995][T10380] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 264.366432][T10376] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 264.388002][T10376] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 264.500323][T10388] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 264.551984][T10388] bridge0: port 3(team0) entered disabled state [ 264.580632][T10388] team0: left allmulticast mode [ 264.598871][T10388] team_slave_0: left allmulticast mode [ 264.627726][T10388] team_slave_1: left allmulticast mode [ 264.660002][T10388] team0: left promiscuous mode [ 264.670785][T10388] team_slave_0: left promiscuous mode [ 264.701574][T10388] team_slave_1: left promiscuous mode [ 264.709127][T10388] bridge0: port 3(team0) entered disabled state [ 264.744619][T10388] batman_adv: batadv0: Adding interface: team0 [ 264.759625][T10388] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.807161][T10388] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 264.835273][T10390] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 264.861546][T10390] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.0'. [ 264.900207][T10390] team0: entered promiscuous mode [ 264.905328][T10390] team_slave_0: entered promiscuous mode [ 264.953992][T10390] team_slave_1: entered promiscuous mode [ 264.981166][T10390] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.997292][T10390] batman_adv: batadv0: Interface activated: team0 [ 265.009019][T10390] batman_adv: batadv0: Interface deactivated: team0 [ 265.026618][T10390] batman_adv: batadv0: Removing interface: team0 [ 265.041001][T10390] bridge0: port 3(team0) entered blocking state [ 265.058968][T10390] bridge0: port 3(team0) entered disabled state [ 265.090014][T10390] team0: entered allmulticast mode [ 265.095221][T10390] team_slave_0: entered allmulticast mode [ 265.103579][T10390] team_slave_1: entered allmulticast mode [ 265.111799][T10390] bridge0: port 3(team0) entered blocking state [ 265.119810][T10390] bridge0: port 3(team0) entered forwarding state [ 265.129246][T10408] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 265.159890][T10403] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 265.239298][T10410] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 265.853206][T10422] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 265.879688][T10422] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.2'. [ 265.899956][T10422] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 265.909875][T10422] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 265.917991][T10422] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. [ 266.073880][T10433] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 266.198500][T10422] sctp: [Deprecated]: syz-executor.2 (pid 10422) Use of int in max_burst socket option deprecated. [ 266.198500][T10422] Use struct sctp_assoc_value instead [ 266.435932][ T4490] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 266.447373][ T4490] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 266.459925][ T4490] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 266.471733][ T4490] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 266.480244][ T4490] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 266.488817][ T4490] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 266.761758][T10445] bridge0: port 2(bridge_slave_1) entered listening state [ 266.838074][T10450] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 266.944705][T10450] batman_adv: batadv0: Adding interface: team0 [ 266.999980][T10450] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 267.089493][ T29] audit: type=1800 audit(1718670944.311:57): pid=10456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1975 res=0 errno=0 [ 267.251939][T10452] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 267.297486][T10452] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.2'. [ 267.332810][T10452] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.362611][T10452] batman_adv: batadv0: Interface activated: team0 [ 267.402235][T10452] batman_adv: batadv0: Interface deactivated: team0 [ 267.421835][T10452] batman_adv: batadv0: Removing interface: team0 [ 267.442057][T10452] bridge0: port 3(team0) entered blocking state [ 267.459000][T10452] bridge0: port 3(team0) entered disabled state [ 267.481891][T10452] team0: entered allmulticast mode [ 267.493763][T10452] team_slave_1: entered allmulticast mode [ 267.513203][T10452] team0: left allmulticast mode [ 267.536152][T10452] team_slave_1: left allmulticast mode [ 267.546299][T10470] xt_CT: You must specify a L4 protocol and not use inversions on it [ 268.065389][T10441] chnl_net:caif_netlink_parms(): no params data found [ 268.361165][T10498] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 268.394842][T10441] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.425698][T10441] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.443693][T10441] bridge_slave_0: entered allmulticast mode [ 268.463379][T10441] bridge_slave_0: entered promiscuous mode [ 268.483500][T10441] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.500504][T10441] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.510281][T10441] bridge_slave_1: entered allmulticast mode [ 268.518417][T10441] bridge_slave_1: entered promiscuous mode [ 268.540029][ T4490] Bluetooth: hci9: command tx timeout [ 268.647055][T10441] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.659256][T10505] pim6reg1: entered promiscuous mode [ 268.666752][T10505] pim6reg1: entered allmulticast mode [ 268.711515][T10441] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.864403][ T29] audit: type=1800 audit(1718670946.091:58): pid=10511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1975 res=0 errno=0 [ 268.953127][T10441] team0: Port device team_slave_0 added [ 268.973877][T10441] team0: Port device team_slave_1 added [ 268.987949][T10516] tipc: Started in network mode [ 268.994335][T10516] tipc: Node identity 1, cluster identity 4711 [ 269.004469][T10516] tipc: Node number set to 1 [ 269.009713][T10516] tipc: Cannot configure node identity twice [ 269.095144][T10514] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 269.116488][T10441] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 269.145242][T10441] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.206552][T10441] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.227091][T10441] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.240027][T10441] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.271615][T10441] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.421846][T10441] hsr_slave_0: entered promiscuous mode [ 269.439326][T10441] hsr_slave_1: entered promiscuous mode [ 269.451103][T10441] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 269.472563][T10441] Cannot create hsr debugfs directory [ 269.790596][T10541] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 270.035939][T10441] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 270.077585][T10441] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.125760][T10544] netlink: 'syz-executor.2': attribute type 6 has an invalid length. [ 270.356419][ T29] audit: type=1800 audit(1718670947.581:59): pid=10556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1961 res=0 errno=0 [ 270.359379][T10441] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 270.409741][T10441] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.501426][T10562] tipc: Enabling of bearer rejected, failed to enable media [ 270.629731][ T4490] Bluetooth: hci9: command tx timeout [ 270.643681][T10441] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 270.667487][T10441] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.714640][T10564] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 270.855278][T10441] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 270.893516][T10441] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.060091][T10584] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 271.141631][T10591] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 271.304080][T10441] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 271.339365][T10441] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 271.393764][T10441] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 271.437240][T10441] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 271.465567][ T29] audit: type=1800 audit(1718670948.691:60): pid=10600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1975 res=0 errno=0 [ 271.491558][T10598] team_slave_0: left promiscuous mode [ 271.497198][T10598] team_slave_0: left allmulticast mode [ 271.590032][T10598] team0: Port device team_slave_0 removed [ 271.596491][T10598] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 271.854333][T10608] netlink: 'syz-executor.0': attribute type 13 has an invalid length. [ 271.959045][T10441] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.980889][T10612] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 272.065779][T10441] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.097779][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.105026][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.144601][ T5162] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.151854][ T5162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.481549][T10628] netlink: 'syz-executor.0': attribute type 16 has an invalid length. [ 272.607509][T10639] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 272.616878][ T29] audit: type=1800 audit(1718670949.831:61): pid=10638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1965 res=0 errno=0 [ 272.700354][ T4490] Bluetooth: hci9: command tx timeout [ 272.826690][T10441] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.009277][T10441] veth0_vlan: entered promiscuous mode [ 273.077747][T10441] veth1_vlan: entered promiscuous mode [ 273.175938][T10441] veth0_macvtap: entered promiscuous mode [ 273.193715][T10441] veth1_macvtap: entered promiscuous mode [ 273.242974][T10648] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 273.306051][T10441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.339717][T10441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.366165][T10441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.389611][T10441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.403436][T10441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.423008][T10441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.437266][T10441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.459509][T10441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.469402][T10441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.513239][T10441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.523333][T10441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.534379][T10441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.555872][T10441] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.616465][T10441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.661199][T10441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.685715][T10441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.697197][T10441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.717638][T10441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.740678][T10661] sctp: [Deprecated]: syz-executor.1 (pid 10661) Use of int in max_burst socket option deprecated. [ 273.740678][T10661] Use struct sctp_assoc_value instead [ 273.748861][T10441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.793633][T10441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.808663][T10441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.828916][T10441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.844221][T10663] xt_NFQUEUE: number of total queues is 0 [ 273.850236][T10441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.871185][T10441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.904649][T10441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.941225][T10441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.966682][T10441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.995607][T10441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.017963][T10441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.037185][T10441] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 274.080493][T10660] netlink: 'syz-executor.2': attribute type 6 has an invalid length. [ 274.106946][T10441] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.149605][T10441] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.158453][T10441] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.199557][T10441] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.457191][T10680] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 274.481630][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.491031][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.581337][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.594879][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.766599][T10688] vlan3: entered allmulticast mode [ 274.780827][ T4490] Bluetooth: hci9: command tx timeout [ 274.894343][T10692] ip6gretap0: entered promiscuous mode [ 274.902245][T10692] batadv_slave_0: entered promiscuous mode [ 274.914977][T10694] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.2'. [ 274.970638][T10694] Êüä^q: entered promiscuous mode [ 275.122857][T10701] netlink: 'syz-executor.2': attribute type 13 has an invalid length. [ 275.632208][T10716] pim6reg1: entered promiscuous mode [ 275.637828][T10716] pim6reg1: entered allmulticast mode [ 275.981578][ T30] INFO: task syz-executor.3:6510 blocked for more than 143 seconds. [ 275.991197][ T30] Not tainted 6.10.0-rc2-syzkaller-00761-g3ec8d7572a69 #0 [ 276.004875][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 276.016508][ T30] task:syz-executor.3 state:D stack:24152 pid:6510 tgid:6509 ppid:5128 flags:0x00000006 [ 276.027153][ T30] Call Trace: 2024/06/18 00:35:53 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 276.030671][ T30] [ 276.089556][ T30] __schedule+0x17e8/0x4a20 [ 276.094203][ T30] ? __pfx___schedule+0x10/0x10 [ 276.099107][ T30] ? __pfx_lock_release+0x10/0x10 [ 276.129626][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 276.138468][ T30] ? schedule+0x90/0x320 [ 276.149521][ T30] schedule+0x14b/0x320 [ 276.153789][ T30] schedule_preempt_disabled+0x13/0x30 [ 276.159300][ T30] __mutex_lock+0x6a4/0xd70 [ 276.189844][ T30] ? __mutex_lock+0x527/0xd70 [ 276.194619][ T30] ? nfsd_nl_rpc_status_get_start+0x8d/0xe0 [ 276.201006][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 276.206104][ T30] ? net_generic+0x1f/0x240 [ 276.210750][ T30] nfsd_nl_rpc_status_get_start+0x8d/0xe0 [ 276.216605][ T30] genl_start+0x4d6/0x6d0 [ 276.221350][ T30] __netlink_dump_start+0x45c/0x780 [ 276.226625][ T30] genl_rcv_msg+0x88c/0xec0 [ 276.234485][ T30] ? mark_lock+0x9a/0x350 [ 276.241195][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 276.246285][ T30] ? __pfx_genl_start+0x10/0x10 [ 276.252893][ T30] ? __pfx_genl_dumpit+0x10/0x10 [ 276.257982][ T30] ? __pfx_genl_done+0x10/0x10 [ 276.263120][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 276.268183][ T30] ? __pfx_nfsd_nl_rpc_status_get_start+0x10/0x10 [ 276.274674][ T30] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 276.289897][ T30] ? __pfx_nfsd_nl_rpc_status_get_done+0x10/0x10 [ 276.296302][ T30] ? __pfx___might_resched+0x10/0x10 [ 276.319490][ T30] netlink_rcv_skb+0x1e3/0x430 [ 276.324350][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 276.346056][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 276.351714][ T30] ? __netlink_deliver_tap+0x77e/0x7c0 [ 276.357245][ T30] genl_rcv+0x28/0x40 [ 276.369598][ T30] netlink_unicast+0x7ea/0x980 [ 276.374453][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 276.387994][ T30] ? __virt_addr_valid+0x183/0x520 [ 276.399820][ T30] ? __check_object_size+0x49c/0x900 [ 276.405185][ T30] ? bpf_lsm_netlink_send+0x9/0x10 [ 276.420975][ T30] netlink_sendmsg+0x8db/0xcb0 [ 276.425840][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 276.445302][ T30] ? __import_iovec+0x536/0x820