last executing test programs: 34.779177928s ago: executing program 4: bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x401}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x3}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0xa8}}, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x1000)=nil, 0xb00, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0}, &(0x7f0000000180)=0x40) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r3, &(0x7f0000000000), 0x2a979d) ioctl$SIOCSIFHWADDR(r2, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x88}}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.current\x00', 0x7a05, 0x1700) 34.215494859s ago: executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @local}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000440)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r3}, 0x10) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000180)={r1, 0x1, 0x6}, 0x10) 33.647241802s ago: executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x63, 0x11, 0x18}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x16}, 0x70) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x270}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000010010c"], 0x270}}, 0x0) r3 = socket(0x15, 0x5, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r4, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$xdp(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) getsockopt(r3, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001a80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e74657200500000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002400038020000080080003400000000214000b"], 0xe4}}, 0x0) write$binfmt_script(r6, &(0x7f0000000200), 0xfffffd9d) close(r7) r8 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x41, 0x3, 0x200, 0x0, 0x0, 0x0, 0x168, 0x0, 0x168, 0x1f0, 0x1f0, 0x168, 0x1f0, 0x3, 0x0, {[{{@ip={@dev, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'wlan1\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0xffffffffa0028000}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'vlan0\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x260) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='htcp\x00', 0x5) unshare(0x0) sendfile(r5, r6, 0x0, 0x8000002b) 33.379253491s ago: executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0xc000000, &(0x7f0000000200)={&(0x7f0000000240)={0x5c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x5c}}, 0x0) 32.893572312s ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x2, 0x2, 0x204}, 0x48) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) (async) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000580)="a2", 0x1}], 0x1, 0x0, 0x0, 0x2003}, 0x60000010) getsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f00000001c0), &(0x7f0000000300)=0x4) write$cgroup_pid(r2, &(0x7f00000002c0), 0x12) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000080)='jbd2_handle_stats\x00', r5}, 0x10) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000880)='cpuacct.usage_sys\x00', 0x26e1, 0x0) (async) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) unshare(0x2040400) r7 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r7, &(0x7f0000003540)=[{{&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000080)="93", 0x1}, {&(0x7f0000002400)="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", 0x4e4}], 0x2}}, {{&(0x7f0000000740)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001a40)=[{&(0x7f0000000780)="e4", 0x1}], 0x1}}], 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0x7, &(0x7f0000000000), 0x4) (async) ppoll(&(0x7f00000008c0)=[{r6}, {r7}], 0x2, 0x0, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000000080000000000000000000850000005300000085000000230000009500000000000000a94be0c51261be6a99e5e06bb0a232d5e1f59f18f845f82e9a7cde9e8f1b547edf612a03f1737d951d7a617558b674e1c4fdfd771ebe7c33af3e4917be59ac67f0bbabcb8f41c23ba8d91633a8b9c70e804744dc081ac69cfea08e4e5a06f70c6792f2888d6fd95f202028070000003771bc3f325a6386a9d49e3c13b32461acf0be4b31638c29187d748841f439547bcdac15e52a4b6a2981eb4afadbbdf9157fa588f475c4cd2e44e2129dc6b93993909613e8d95f5610c067d9b97c524c210af077707d71e8512e"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc0, &(0x7f0000000140)=""/192}, 0x80) (async, rerun: 32) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 32) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) setsockopt$SO_J1939_SEND_PRIO(r13, 0x6b, 0x3, &(0x7f0000000200)=0x4, 0x4) (async, rerun: 32) sendmsg$NL80211_CMD_SET_QOS_MAP(r12, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000006800000008000300", @ANYRES32=r11, @ANYRESHEX=r8], 0x34}}, 0x0) (rerun: 32) 3.693320007s ago: executing program 1: socket$alg(0x26, 0x5, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x46, &(0x7f00000000c0)={@link_local={0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x12, 0x0, 0x2803, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @dev}, "0000b50800000000"}}}}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'vxcan0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x18}, 0x48) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200052f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa"], 0xcfa4) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000006ec0)=ANY=[@ANYBLOB="611534000000000061134c0000000000bfa000000000000007000000080013002d0301000000000095000000000000006916000000000000bf67000000000000350607000fff07206706000002000000160300000ee60060bf500000000000000f650000000000006507f9ff01000000070700004ddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f674629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6106f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0453b65586f65c7943d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a57ff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61dc18402cde8bf777b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe(&(0x7f0000000100)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 3.212499498s ago: executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$l2tp(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, 0x2a, 0x9, 0x0, 0x0, {0x4, 0x0, 0x2c00}}, 0x14}, 0x1, 0x3000000}, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r2, &(0x7f0000000280)="c5", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x15}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x23, 0x0, &(0x7f0000000100)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'dummy0\x00', 0x0}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f00000002c0)={'syztnl1\x00', r3, 0x2f, 0xd8, 0x0, 0x3, 0x20, @loopback, @dev={0xfe, 0x80, '\x00', 0x29}, 0x700, 0x40, 0x800, 0x6}}) sendmsg$ETHTOOL_MSG_RINGS_GET(r1, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="6c010000", @ANYRES16=r4, @ANYBLOB="200027bd7000fbdbdf250f0000002800018008000100", @ANYRES32=r5, @ANYBLOB='\b\x00', @ANYRES32=r3, @ANYBLOB="14000200636169663000000000000000000000002000018008000100", @ANYRES32=r3, @ANYBLOB="14000200767863616e31000000000000000000002800018008000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="1400020076657468305f746f5f627269646765001c0001800800030001000000080003000300000008000100", @ANYRES32=r3, @ANYBLOB="5000018008000300010000001400020076657468315f746f5f68737200000000140002007767310000000000000000000000000008000100", @ANYRES32=r3, @ANYBLOB="1400020070696d726567310000000000000000007c0001801400020076657468315f6d61637674617000000008000100", @ANYRES32=r3, @ANYBLOB="0818030000ea1ebb1f98b889ea28c9f30709a1fe80cc256d04a946ef943aaa403492c8fe635e3b00000000000000098e0fd672082f14611d3b9610de82f4f7cbf6e12bb9896df736eef59160563d6bb927a15a7f2ee1bee060ed63c70d86ef347dbd987b9d3f0a9911179f85eb69c669266b4b77deb882845304619cc83ebccaaa29a679eadc64534b8b1aa94dfaf7bd8a033b89e0b944d7cf47ba88de9bc1ebc9bdd71b", @ANYRES32=r3, @ANYBLOB="1400020076657468305f766c616e000000000000140002006261746164763000000000000000000014000200626f6e645f736c6176655f31000000000800030004000000"], 0x16c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000880) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) recvmmsg(r2, &(0x7f00000006c0), 0x3fffffffffffe79, 0x40000021, &(0x7f0000000700)={0x0, 0x989680}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000002a00)=[{{&(0x7f0000000980)={0x2, 0x0, @multicast2}, 0x10, 0x0}}], 0x1, 0x0) 2.856208984s ago: executing program 4: socket$alg(0x26, 0x5, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x46, &(0x7f00000000c0)={@link_local={0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x12, 0x0, 0x2803, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @dev}, "0000b50800000000"}}}}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'vxcan0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffdef}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000006ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe(&(0x7f0000000100)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 2.724273999s ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x24, 0x2a, 0x9, 0x0, 0x0, {0x4, 0x0, 0x2c00}, [@nested={0x10, 0x1a, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}]}]}, 0x24}, 0x1, 0x3000000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) listen(r2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) clock_gettime(0x0, &(0x7f0000000040)={0x0}) ppoll(&(0x7f0000000180)=[{r3}, {r2}], 0x2, &(0x7f0000000100)={r5}, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r6, 0x0, 0x0}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)={@ifindex, 0xffffffffffffffff, 0x2f, 0x56f6ef0e34f5666a, 0x0, @prog_id}, 0x20) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000580)=ANY=[@ANYBLOB='6@\x00\x00'], 0xfe33) recvmsg$kcm(r7, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000015c0)=""/188, 0xbc}, {&(0x7f00000004c0)=""/39, 0x27}, {&(0x7f0000000340)=""/226, 0xe2}, {&(0x7f00000005c0)=""/4085, 0xff5}], 0x4}, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1c000000000000", @ANYRES32=0x0, @ANYBLOB="ac14140000000000000000001000000000000000100100000a000000"], 0x30}, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_BINDTODEVICE_wg(r8, 0x1, 0x19, &(0x7f0000000080)='wg2\x00', 0x4) connect$inet(r8, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) 2.593778203s ago: executing program 3: bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x1000)=nil, 0xb00, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0}, &(0x7f0000000180)=0x40) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r3, &(0x7f0000000000), 0x2a979d) ioctl$SIOCSIFHWADDR(r2, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x88}}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.current\x00', 0x7a05, 0x1700) 2.187864968s ago: executing program 3: sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000680)=ANY=[@ANYBLOB="d4000000100039040400"/20, @ANYRES32=r3, @ANYBLOB="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"], 0xd4}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) sendto$packet(r0, &(0x7f0000000580)="2638277b3305f7edac3b411a5ecad12dd478c541b7d37270c7dc6b5e9e232ec16a5541df4dbc9fff7c55d9716811e132ec441eb5b225aaf90836acc398a5a9728ab6e672cd8c55961b10bdb3a34780c84a6bf868075155ab3462e527478ef97cba47509cb31b48ba9ec3d9d9c6ad9d110d5be049f7666f198ab1500c8cf9259a4ac6a3d6fbc6b80819ecfeb8055600b1ae32304a44d2b8094346e5b55e02a6aad96824f0b82ee652e1820fa183b24b0b18a34f3adf9245fe53", 0xb9, 0x55, &(0x7f0000000280)={0x11, 0x18, 0x0, 0x1, 0x80, 0x6, @remote}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2a00000026000506"], 0x2c}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x0, 0x0, 0x80000001, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x48) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f0000000440)=@req3={0x401, 0x92, 0x8d0e, 0x6, 0x7, 0x60, 0x400}, 0x1c) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000240)={'pimreg\x00', 0x4000}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "00000100ebffffff", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', "006e34e400"}, 0x28) sendto$inet6(r7, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) setsockopt$inet6_tcp_int(r7, 0x6, 0x16, &(0x7f0000000040), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) pread64(r5, &(0x7f00000002c0)=""/225, 0xe1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007700), 0x300, 0x0, 0x0) 1.743922414s ago: executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$l2tp(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, 0x2a, 0x9, 0x0, 0x0, {0x4, 0x0, 0x2c00}}, 0x14}, 0x1, 0x3000000}, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r2, &(0x7f0000000280)="c5", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x15}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x23, 0x0, &(0x7f0000000100)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'dummy0\x00', 0x0}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f00000002c0)={'syztnl1\x00', r3, 0x2f, 0xd8, 0x0, 0x3, 0x20, @loopback, @dev={0xfe, 0x80, '\x00', 0x29}, 0x700, 0x40, 0x800, 0x6}}) sendmsg$ETHTOOL_MSG_RINGS_GET(r1, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="6c010000", @ANYRES16=r4, @ANYBLOB="200027bd7000fbdbdf250f0000002800018008000100", @ANYRES32=r5, @ANYBLOB='\b\x00', @ANYRES32=r3, @ANYBLOB="14000200636169663000000000000000000000002000018008000100", @ANYRES32=r3, @ANYBLOB="14000200767863616e31000000000000000000002800018008000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="1400020076657468305f746f5f627269646765001c0001800800030001000000080003000300000008000100", @ANYRES32=r3, @ANYBLOB="5000018008000300010000001400020076657468315f746f5f68737200000000140002007767310000000000000000000000000008000100", @ANYRES32=r3, @ANYBLOB="1400020070696d726567310000000000000000007c0001801400020076657468315f6d61637674617000000008000100", @ANYRES32=r3, @ANYBLOB="0818030000ea1ebb1f98b889ea28c9f30709a1fe80cc256d04a946ef943aaa403492c8fe635e3b00000000000000098e0fd672082f14611d3b9610de82f4f7cbf6e12bb9896df736eef59160563d6bb927a15a7f2ee1bee060ed63c70d86ef347dbd987b9d3f0a9911179f85eb69c669266b4b77deb882845304619cc83ebccaaa29a679eadc64534b8b1aa94dfaf7bd8a033b89e0b944d7cf47ba88de9bc1ebc9bdd71b", @ANYRES32=r3, @ANYBLOB="1400020076657468305f766c616e000000000000140002006261746164763000000000000000000014000200626f6e645f736c6176655f31000000000800030004000000"], 0x16c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000880) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) recvmmsg(r2, &(0x7f00000006c0), 0x3fffffffffffe79, 0x40000021, &(0x7f0000000700)={0x0, 0x989680}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000002a00)=[{{&(0x7f0000000980)={0x2, 0x0, @multicast2}, 0x10, 0x0}}], 0x1, 0x0) 1.635161097s ago: executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e45f2024d2f1c9fb47000011b0fed8", 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r3}, 0xc) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000080)={@remote, r1}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b405000000000000611098000000000020000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r1, 0x2e, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000140), 0x10}, 0x90) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) recvmmsg(r0, &(0x7f0000005c80), 0x1b, 0x10122, 0x0) 1.487008732s ago: executing program 2: socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f00000000c0)={'ipvlan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x5c, 0x0, 0x0, 0x0, 0x0, {}, [@NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x5c}}, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000180)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000008000"/329], 0x310) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000180)=ANY=[], 0x310) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xa}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000100000002"], 0x110) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a3000000000080002"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f0000003180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01080000e0030000000e02000000090001007300803000000000080002400000000214000000110001"], 0x50}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='cpuacct.usage_percpu\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a80)={r3, 0x0, 0xa8, 0xa0, &(0x7f0000000740)="9c506d0c98800fc6e852c5979c56ee08abb9e2cfe3fd4c55e8f9707d8b38eeb890a7558b4870e1b4088c49b0a743cca3267c7e6d202b47dac5d75f0729b72441545835e1c59ac600bb3123ce590935062554c255639ce340ceb969fd1190a813d7886233eb3cee124af9ca8ced779c3a8f0d3904574697428e16139dbf74c2e6fea03e2651206775fe7ffbef7da11f732c6af6d8d6ff3a579bd773ba5dbedd5ed7066b34abe895c1", &(0x7f0000000800)=""/160, 0xff, 0x0, 0x78, 0x10, &(0x7f00000008c0)="c4839e2de9f51be4c16a5191d403f88bb6297248dda773332d84bd530e755b9d3812398f70cce243856a373adb6da1ee032709022866970329b553af6772d11e854a3bdf222add212db4f6b1dba59f51ba7cf94f2bb8b62ef4c7d896cf7c137fa626e4da6495c7c65a189eb64564300165eaf5177e9b0c6b", &(0x7f0000000940)="c19217a05ddd455414dec899fcfd9ebf", 0x6, 0x0, 0x5a161a1b}, 0x50) openat$cgroup_ro(r3, &(0x7f0000000700)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmsg$NFT_MSG_GETSET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000000a0a010200007e51937b0000000000000500010073797a300000000c"], 0x20}}, 0x0) r4 = accept$netrom(0xffffffffffffffff, &(0x7f0000000540)={{0x3, @rose}, [@default, @default, @remote, @remote, @null, @netrom, @bcast, @netrom]}, &(0x7f00000005c0)=0x48) accept4$netrom(r4, &(0x7f0000000600)={{0x3, @default}, [@bcast, @null, @remote, @remote, @bcast, @remote, @default]}, &(0x7f0000000680)=0x48, 0xc00) r5 = socket$packet(0x11, 0x3, 0x300) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)=@generic={&(0x7f00000004c0)='./file0\x00', 0x0, 0x10}, 0x18) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) syz_emit_ethernet(0xe80, &(0x7f0000001a40)=ANY=[], 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$l2tp6(0xa, 0x2, 0x73) 1.410068734s ago: executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) close(r2) 1.213716251s ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x24, 0x2a, 0x9, 0x0, 0x0, {0x4, 0x0, 0x2c00}, [@nested={0x10, 0x1a, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}]}]}, 0x24}, 0x1, 0x3000000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) listen(r2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0}) ppoll(&(0x7f0000000180)=[{r3}, {r2}], 0x2, &(0x7f0000000100)={r4}, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r5, 0x0, 0x0}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)={@ifindex, 0xffffffffffffffff, 0x2f, 0x56f6ef0e34f5666a, 0x0, @prog_id}, 0x20) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000580)=ANY=[@ANYBLOB='6@\x00\x00'], 0xfe33) recvmsg$kcm(r6, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000015c0)=""/188, 0xbc}, {&(0x7f00000004c0)=""/39, 0x27}, {&(0x7f0000000340)=""/226, 0xe2}, {&(0x7f00000005c0)=""/4085, 0xff5}], 0x4}, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1c000000000000", @ANYRES32=0x0, @ANYBLOB="ac14140000000000000000001000000000000000100100000a000000"], 0x30}, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_BINDTODEVICE_wg(r7, 0x1, 0x19, &(0x7f0000000080)='wg2\x00', 0x4) connect$inet(r7, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) 1.173563127s ago: executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={r0}) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000180), 0x10) 1.144975521s ago: executing program 0: syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = socket(0x0, 0x0, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000022c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797ad00000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={0x0, 0x4c, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a30000000030a01080000000000000000020000000900010073797a30000000000c0002400000000000000001"], 0x58}}, 0x0) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x20}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) socket(0x0, 0x3, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8983, &(0x7f0000000780)={0x7, 'bridge_slave_1\x00', {0x5}, 0x2}) 1.043168823s ago: executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x9, @private=0xa010100}]}}}]}, 0x38}}, 0x0) socket$packet(0x11, 0x0, 0x300) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001814010000000000000000000800010000000000080003"], 0x20}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000001000000000000000000000061121000000000009500000000000000e089bc0ef6c4c6ea92c89c35a1dc5aafda6c39aa0001000000000000da2c969ce6ef44c41c7cab5bac026bb5a9f60754ef23899d45277af8a12f1b76c2d6c0819d3637c6883b2e14deb9d2a749c59f821909fc571a7c4242e8d1097530aed5c5201033b5dd75d57f4c334af6e9ae504af2c06bf7fb05526aad5e5c728e4bcff8965d22e7ffa35b14910330da0642a030886cb34fb125ff4feda3bfc25611cf9cdb83ce2e758fe94cae1476d45756bdf558409d50330fec2cbe40e51777"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x39, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$inet(0x2, 0x4, 0x3) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x3c, &(0x7f0000000640)={&(0x7f00000003c0)=ANY=[], 0x3}}, 0xc40) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) 857.967963ms ago: executing program 0: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) unshare(0xc040400) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0xffffff5c, {0x10, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x24) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000500)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020200700000000000000bfa100000000000007010000f8ffffffb702000008000000b702000000000020850000000600000095000000000000008ce1cfc4019c7127270587536c68b0d426f4d9361e36a8928cdae6e7b499a86ae05251b445c4b4d3c376ad23bc445b1e2d21709be002eb3fbeeb59f68b8165e453cd3c5cbcf85ff2138990cc4d5edb81afa5d617cd2162de0a4b6b3b49cd8d756dfc8446519785d306879479c749c2e4828c754f9343cc4c0a33965bfb2d59f328d6188dcef6aa5ac339fb76c5bacdba80212d9cce92f2cff1be639ba954fe54b953fd43f294679b37e4382ae951b3a2320d357f73c0eeb2b37d592ad716e8e0a4ee10c698a19d378dbedfc037da2d9b5cc2c13ef4989e53872da0e8d13d1095baacdd70e5a10fb4224efab6c6e9b1182989ff70d614998b62f3bac7b1646e12e560cdfd74497f87213b20f261f25d0048baad36afe16a66ae9d8ff035f4e0c83f4336523ad50221cba6f8"], &(0x7f0000000000)='GPL\x00', 0x4, 0xe4, &(0x7f0000000700)=""/228}, 0x90) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x0, 0x8e}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x4, 0x2}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000007d0000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x46) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0xe, 0x0, &(0x7f0000000280)="8c33d1e4e02742e8680d85ff9782", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r3, &(0x7f0000000100), 0x0}, 0x20) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x12, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0xbb}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xb, 0x1, 0x8, 0x1, 0x6, r0, 0x4, '\x00', 0x0, r2, 0x4, 0x5, 0x5}, 0x48) r7 = socket(0x10, 0x803, 0x0) sendmsg$FOU_CMD_ADD(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0xfffffffffffffe0e}, 0x1, 0x0, 0x0, 0x50}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000a00)={'ip6_vti0\x00', &(0x7f0000000980)={'ip6gre0\x00', r8, 0x4, 0x3f, 0x6, 0x5, 0x9, @local, @mcast2, 0x8, 0x7800, 0x9, 0x7}}) sendmsg$nl_route(r7, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r9}, 0x10) syz_emit_ethernet(0x36, 0x0, 0x0) 766.835702ms ago: executing program 0: unshare(0x0) socket$nl_route(0x10, 0x3, 0x0) unshare(0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x10, &(0x7f0000000440), 0x4) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x2}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000001000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) 761.697069ms ago: executing program 2: sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000680)=ANY=[@ANYBLOB="d4000000100039040400"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000ac001680a8000180a4000c801400010001000000340d00000001000088a8000014100100d2000000ec0a00000900000088a8000014000100ff0000008f0b000002000000810000001400010008000000970f000003000100810000001400010005000000351da272f56c38e63e00000014000100630600002c0a00000800000088a8000014000100ffff0000330100000500000088a8000014000100000200001b080000070000008100000008001adf6025040000000000fb6254363cd8d7c9ab2a9a0cfce0cf7ff0978462114e1faa96d10962f3118ecc21c886f232f5b01458dd000c0e1fea8289da98732b95037d0b57b6d9cb701c3186917fb903406e16f1552535de89e2674a99e24b23d276fe9fb3ed0a892f3075afe75503f42cb9c645758e2d3decf70e6d1cdeeba9975784e87b713ce615faaa789ebc07506a059cd77e0eab9cbd11c67b36f19988e5cc0436ec05d3d4a72414c10c5abb27d46bc309daee80988168047d84660ed925008efa67969ca88412e13edba527a7f0"], 0xd4}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) sendto$packet(r0, &(0x7f0000000580)="2638277b3305f7edac3b411a5ecad12dd478c541b7d37270c7dc6b5e9e232ec16a5541df4dbc9fff7c55d9716811e132ec441eb5b225aaf90836acc398a5a9728ab6e672cd8c55961b10bdb3a34780c84a6bf868075155ab3462e527478ef97cba47509cb31b48ba9ec3d9d9c6ad9d110d5be049f7666f198ab1500c8cf9259a4ac6a3d6fbc6b80819ecfeb8055600b1ae32304a44d2b8094346e5b55e02a6aad96824f0b82ee652e1820fa183b24b0b18a34f3adf9245fe53", 0xb9, 0x55, &(0x7f0000000280)={0x11, 0x18, 0x0, 0x1, 0x80, 0x6, @remote}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2a00000026000506"], 0x2c}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x0, 0x0, 0x80000001, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x48) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f0000000440)=@req3={0x401, 0x92, 0x8d0e, 0x6, 0x7, 0x60, 0x400}, 0x1c) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000240)={'pimreg\x00', 0x4000}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "00000100ebffffff", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', "006e34e400"}, 0x28) sendto$inet6(r7, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) setsockopt$inet6_tcp_int(r7, 0x6, 0x16, &(0x7f0000000040), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) pread64(r5, &(0x7f00000002c0)=""/225, 0xe1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000007700), 0x300, 0x0, 0x0) 610.726771ms ago: executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x0) socket$nl_route(0x10, 0x3, 0x0) unshare(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1100000015000100000000000000000002bf0c00000000000000000005001a0000000000"], 0x24}}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x10, &(0x7f0000000440), 0x4) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x2}, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000001000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r3}, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x25c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x240, 0x33, @reassoc_resp={{{0x0, 0x0, 0x8}, {}, @broadcast, @device_a, @random="f7ab87594b3f"}, 0x0, 0x0, @random, @val, @void, [{0xdd, 0x97, "8b7668a21729e4ad77e366ae9e66d671f8bb54784e373e2223fde04977365429048047ad806c438142ae7889f37bbd41e50a26612ce77fcf71400d7c1e0a34b043fbb4ca6b6e5ecb7c8169982fe3f1261537a3b4467e0db0ca915ec1964c56db466602eed1b321bfab5c5b2ab6d6e1ffff58b596e2cfca04801aae25adb2b4b53aa135a66ae836452cff03af5ed4b78b2f98cb570d7c4f"}, {0xdd, 0xa5, "d8a062cc132f8c370fffcfbf6c255947985b88cb9f22e02d96f87d9c0a6796487053adb1a2d1f8ed33d6ef7faf4ba99f81c72edefbc742d2d897c0fb6eb2289c22b03871ec6ddb7398d4b5509078903c634145233d8a7a9a2fc09946ff1a847d43452a17ee7a24318e4ed910599f7ebc8291d4dd528566752ef4090016895d45162f023cde71dbd618a52517986b705c5e653ee0e7edda93407e44be1c203b816d0181c08d"}, {0xdd, 0xc0, "95e79490e4be3bd5f39a64947fd4f137cfd9c5eca413775fff8b403d1c6824961df673862737c366f53984496ea72bc7f78d843ce303b67336957356a02e1c5bdcbd4acf120d5d44f07910bdee6eabe82f6c76ecc7c98d5a107f6eab471672d7179671906048fe7622486b35f02bac5c2f9f0c923711e82767b10da5a68b7e74d5ed8477aa43553caa8a6a5244b329c5ea5d533697643fd5f3fa33ac9b1eac2c7f88c0d5c6c9594a701e79960dd7d5ab4df31389e8ac5150470ceda144758f23"}, {0xdd, 0x6, "85251095238f"}, {0xdd, 0x10, "a83d63f0d27aa001676fcb9ee526e68b"}]}}]}, 0x25c}}, 0x0) syz_open_procfs$namespace(0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) unshare(0x20020000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) 456.900118ms ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000b887334b000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000020850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r3, 0x400454c9, 0x1) ioctl$TUNGETVNETLE(r3, 0x801054db, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='ext4_allocate_inode\x00', r2}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='net_prio.prioidx\x00', 0x275a, 0x0) r5 = epoll_create1(0x0) r6 = socket$packet(0x11, 0x3, 0x300) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000300)) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f0000000640)=0x7) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x20}, 0x20}}, 0x0) socket$kcm(0x29, 0x0, 0x0) write$cgroup_devices(r4, &(0x7f0000000000)={'a', ' *:* ', 'w\x00'}, 0x8) setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f0000000040)={0x0, 0x1, 0x6, @multicast}, 0x10) 436.736325ms ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xb, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000001b00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00'}, 0x48) 353.714888ms ago: executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$l2tp(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, 0x2a, 0x9, 0x0, 0x0, {0x4, 0x0, 0x2c00}}, 0x14}, 0x1, 0x3000000}, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r2, &(0x7f0000000280)="c5", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x15}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x23, 0x0, &(0x7f0000000100)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'dummy0\x00', 0x0}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f00000002c0)={'syztnl1\x00', r3, 0x2f, 0xd8, 0x0, 0x3, 0x20, @loopback, @dev={0xfe, 0x80, '\x00', 0x29}, 0x700, 0x40, 0x800, 0x6}}) sendmsg$ETHTOOL_MSG_RINGS_GET(r1, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="6c010000", @ANYRES16=r4, @ANYBLOB="200027bd7000fbdbdf250f0000002800018008000100", @ANYRES32=r5, @ANYBLOB="080001", @ANYRES32=r3, @ANYBLOB="14000200636169663000000000000000000000002000018008000100", @ANYRES32=r3, @ANYBLOB="14000200767863616e31000000000000000000002800018008000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="1400020076657468305f746f5f627269646765001c0001800800030001000000080003000300000008000100", @ANYRES32=r3, @ANYBLOB="5000018008000300010000001400020076657468315f746f5f68737200000000140002007767310000000000000000000000000008000100", @ANYRES32=r3, @ANYBLOB="1400020070696d726567310000000000000000007c0001801400020076657468315f6d61637674617000000008000100", @ANYRES32=r3, @ANYBLOB="0818030000ea1ebb1f98b889ea28c9f30709a1fe80cc256d04a946ef943aaa403492c8fe635e3b00000000000000098e0fd672082f14611d3b9610de82f4f7cbf6e12bb9896df736eef59160563d6bb927a15a7f2ee1bee060ed63c70d86ef347dbd987b9d3f0a9911179f85eb69c669266b4b77deb882845304619cc83ebccaaa29a679eadc64534b8b1aa94dfaf7bd8a033b89e0b944d7cf47ba88de9bc1ebc9bdd71b", @ANYRES32=r3, @ANYBLOB="1400020076657468305f766c616e000000000000140002006261746164763000000000000000000014000200626f6e645f736c6176655f31000000000800030004000000"], 0x16c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000880) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) recvmmsg(r2, &(0x7f00000006c0), 0x3fffffffffffe79, 0x40000021, &(0x7f0000000700)={0x0, 0x989680}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000002a00)=[{{&(0x7f0000000980)={0x2, 0x0, @multicast2}, 0x10, 0x0}}], 0x1, 0x0) 307.261433ms ago: executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x38, 0x3, 0x8, 0x5, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8}]}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x38}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x0, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61128c000000000061138c0000000000bf2000000000000015000300081400002d0301000000000095"], 0x0}, 0x90) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000001300000008000300", @ANYRES32=0x0, @ANYBLOB="3c801a01000000f3050012"], 0x2c}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=@newlink={0x4c, 0x10, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_ISOLATED={0x5}, @IFLA_BRPORT_NEIGH_SUPPRESS={0x5}]}}}]}, 0x4c}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000100), 0xfecc) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r7, 0x89eb, &(0x7f0000000040)={0x0, 0x0, 0xfffffffd}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @dev, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "014100", 0x10, 0x11, 0x0, @remote, @local, {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x210, 0x180, 0x0, 0x148, 0x0, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, @empty=0xac1414aa, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) 238.513045ms ago: executing program 3: socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f00000000c0)={'ipvlan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x5c, 0x0, 0x0, 0x0, 0x0, {}, [@NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x5c}}, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000180)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000008000"/329], 0x310) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000180)=ANY=[], 0x310) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xa}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x50}, 0x1, 0x7}, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000100000002"], 0x110) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200a814090001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f0000003180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01080000e0030000000e02000000090001007300803000000000080002400000000214000000110001"], 0x50}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000006c0)='cpuacct.usage_percpu\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a80)={r3, 0x0, 0xa8, 0xa0, &(0x7f0000000740)="9c506d0c98800fc6e852c5979c56ee08abb9e2cfe3fd4c55e8f9707d8b38eeb890a7558b4870e1b4088c49b0a743cca3267c7e6d202b47dac5d75f0729b72441545835e1c59ac600bb3123ce590935062554c255639ce340ceb969fd1190a813d7886233eb3cee124af9ca8ced779c3a8f0d3904574697428e16139dbf74c2e6fea03e2651206775fe7ffbef7da11f732c6af6d8d6ff3a579bd773ba5dbedd5ed7066b34abe895c1", &(0x7f0000000800)=""/160, 0xff, 0x0, 0x78, 0x10, &(0x7f00000008c0)="c4839e2de9f51be4c16a5191d403f88bb6297248dda773332d84bd530e755b9d3812398f70cce243856a373adb6da1ee032709022866970329b553af6772d11e854a3bdf222add212db4f6b1dba59f51ba7cf94f2bb8b62ef4c7d896cf7c137fa626e4da6495c7c65a189eb64564300165eaf5177e9b0c6b", &(0x7f0000000940)="c19217a05ddd455414dec899fcfd9ebf", 0x6, 0x0, 0x5a161a1b}, 0x50) openat$cgroup_ro(r3, &(0x7f0000000700)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmsg$NFT_MSG_GETSET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000000a0a010200007e51937b0000000000000500010073797a300000000c"], 0x20}}, 0x0) r4 = accept$netrom(0xffffffffffffffff, &(0x7f0000000540)={{0x3, @rose}, [@default, @default, @remote, @remote, @null, @netrom, @bcast, @netrom]}, &(0x7f00000005c0)=0x48) accept4$netrom(r4, &(0x7f0000000600)={{0x3, @default}, [@bcast, @null, @remote, @remote, @bcast, @remote, @default]}, &(0x7f0000000680)=0x48, 0xc00) r5 = socket$packet(0x11, 0x3, 0x300) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)=@generic={&(0x7f00000004c0)='./file0\x00', 0x0, 0x10}, 0x18) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) syz_emit_ethernet(0xe80, &(0x7f0000001a40)=ANY=[], 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$l2tp6(0xa, 0x2, 0x73) 233.623665ms ago: executing program 1: bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x1000)=nil, 0xb00, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0}, &(0x7f0000000180)=0x40) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r3, &(0x7f0000000000), 0x2a979d) ioctl$SIOCSIFHWADDR(r2, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x88}}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.current\x00', 0x7a05, 0x1700) 0s ago: executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f0000000180)=0x3ff, 0x4) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000000)={0xa0000001}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="feffffff0000000000000b7c0000"], 0x14}}, 0x0) ppoll(&(0x7f0000000200)=[{r5, 0x1}], 0x8, 0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000340)=@framed={{}, [@printk={@s, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0x10, 0x38, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r7, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000001c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x9d, &(0x7f00000002c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x46, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000062012c000a0000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x90) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000040)={0x1d, 0x0, 0x1}, 0x18) sendmmsg(0xffffffffffffffff, &(0x7f0000003c40)=[{{&(0x7f0000000080)=@un=@abs={0x1}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000100)='w', 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) kernel console output (not intermixed with test programs): : Directory 'hsr0' with parent 'hsr' already present! [ 236.141905][T11218] Cannot create hsr debugfs directory [ 236.264689][T11267] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 236.504766][T11218] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 236.524999][T11218] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.783970][ T4494] Bluetooth: hci5: command tx timeout [ 238.136653][T11218] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.147775][T11218] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.261978][T11218] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.273925][T11218] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.290643][T11294] IPv6: NLM_F_CREATE should be specified when creating new route [ 238.319282][T11297] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.397383][T11299] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 238.406443][T11218] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 238.419501][T11218] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.544472][T11304] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.644907][T11309] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 238.755349][T11218] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 238.776452][T11218] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 238.815194][T11218] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 238.850550][T11218] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 238.882189][T11314] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 239.056834][T11218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.108155][T11218] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.139977][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.147195][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.180217][ T5161] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.187420][ T5161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.865580][ T4494] Bluetooth: hci5: command tx timeout [ 240.857976][T11330] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 241.007206][T11339] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.104764][T11342] nbd: socks must be embedded in a SOCK_ITEM attr [ 241.119793][T11347] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 241.284754][T11354] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.310811][T11218] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.406619][T11361] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 241.738124][T11218] veth0_vlan: entered promiscuous mode [ 241.769874][T11218] veth1_vlan: entered promiscuous mode [ 241.827352][T11218] veth0_macvtap: entered promiscuous mode [ 241.842077][T11218] veth1_macvtap: entered promiscuous mode [ 241.866628][T11218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.880478][T11218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.899045][T11218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.910615][T11218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.929949][T11218] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 241.944502][ T4494] Bluetooth: hci5: command tx timeout [ 241.972596][T11218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.021897][T11218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.059323][T11218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.084042][T11218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.104602][T11218] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 242.200939][T11218] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.224859][T11218] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.238713][T11218] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.248076][T11218] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.383406][T11392] nbd: socks must be embedded in a SOCK_ITEM attr [ 242.457545][T11218] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 242.500780][T11218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.531004][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.539070][T11394] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.547426][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.561293][T11394] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 242.634862][T11397] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 242.835429][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.854197][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.074580][T11404] syzkaller0: entered promiscuous mode [ 243.080369][T11404] syzkaller0: entered allmulticast mode [ 243.136283][ T9] IPVS: starting estimator thread 0... [ 243.243565][T11420] IPVS: using max 19 ests per chain, 45600 per kthread [ 243.577704][T11439] vxcan0: tx drop: invalid da for name 0x0000000000000002 [ 244.747588][T11429] syzkaller0: entered promiscuous mode [ 244.755092][T11429] syzkaller0: entered allmulticast mode [ 245.802168][T11453] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 245.888304][T11454] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 246.674096][T11452] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.848851][T11460] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 247.147846][T11473] syzkaller1: entered promiscuous mode [ 247.163170][T11473] syzkaller1: entered allmulticast mode [ 247.177196][T11477] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 247.199411][T11474] xt_CT: You must specify a L4 protocol and not use inversions on it [ 247.222509][T11477] bond1: entered promiscuous mode [ 247.230553][T11477] 8021q: adding VLAN 0 to HW filter on device bond1 [ 247.310679][T11483] bridge1: entered promiscuous mode [ 247.321527][T11483] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 247.428479][T11492] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.440912][T11492] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 247.508502][T11498] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 248.011886][T11533] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 248.070999][T11533] bond4: entered promiscuous mode [ 248.077661][T11533] 8021q: adding VLAN 0 to HW filter on device bond4 [ 248.147785][T11540] bridge2: entered promiscuous mode [ 248.187653][T11540] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 248.200515][T11542] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.231812][T11542] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. [ 248.275164][T11553] netlink: 240 bytes leftover after parsing attributes in process `syz-executor.1'. [ 248.365254][T11559] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 248.387770][T11558] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 248.398880][ T29] audit: type=1804 audit(1719091697.288:16): pid=11558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1526433232/syzkaller.774icM/277/cgroup.controllers" dev="sda1" ino=1967 res=1 errno=0 [ 248.848869][T11553] infiniband syz1: set active [ 248.856201][T11553] infiniband syz1: added bridge_slave_0 [ 248.987058][T11553] RDS/IB: syz1: added [ 249.013646][T11553] smc: adding ib device syz1 with port count 1 [ 249.040660][T11553] smc: ib device syz1 port 1 has pnetid [ 249.165878][T11588] netlink: 203452 bytes leftover after parsing attributes in process `syz-executor.2'. [ 249.204229][T11588] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 249.953846][T11601] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 250.208198][T11611] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.219393][T11607] netlink: 160 bytes leftover after parsing attributes in process `syz-executor.3'. [ 250.240820][T11611] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. [ 250.330284][T11613] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 250.760845][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 250.862995][T11627] __nla_validate_parse: 1 callbacks suppressed [ 250.863014][T11627] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 251.201051][T11643] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 251.225406][T11643] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 251.236007][T11643] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.3'. [ 251.305755][T11648] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.338830][T11648] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. [ 251.406729][T11649] netlink: 160 bytes leftover after parsing attributes in process `syz-executor.3'. [ 251.422223][T11653] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 251.559889][T11655] vlan0: entered promiscuous mode [ 251.565549][T11655] vlan0: entered allmulticast mode [ 251.621400][T11657] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 251.645578][T11657] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 251.659318][T11657] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.4'. [ 251.745096][T11666] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 251.828553][T11664] netlink: 160 bytes leftover after parsing attributes in process `syz-executor.2'. [ 251.917839][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 252.221327][T11686] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 252.243410][T11686] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 252.562488][T11711] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.635729][T11715] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 252.655224][T11715] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 252.740973][T11721] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 253.001533][T11730] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 253.009992][T11730] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 253.624127][T11753] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 253.643589][T11753] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 253.844568][T11759] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.948974][T11762] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 254.127809][T11770] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.295485][T11782] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 254.469090][ T5123] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 254.479100][ T5123] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 254.500827][ T5123] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 254.515129][ T5123] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 254.518879][T11795] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 254.543412][ T5123] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 254.550743][ T5123] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 254.560293][T11795] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 254.719731][T11805] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.808674][T11810] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 254.969387][T11817] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 254.978839][T11817] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 255.292221][T11790] chnl_net:caif_netlink_parms(): no params data found [ 255.459710][T11841] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 255.471510][T11841] netlink: 'syz-executor.3': attribute type 17 has an invalid length. [ 255.610672][T11790] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.639815][T11790] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.658043][T11790] bridge_slave_0: entered allmulticast mode [ 255.681633][T11790] bridge_slave_0: entered promiscuous mode [ 255.696892][T11790] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.717493][T11790] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.733390][T11790] bridge_slave_1: entered allmulticast mode [ 255.740737][T11790] bridge_slave_1: entered promiscuous mode [ 255.852349][T11790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 255.899613][T11790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.936075][T11858] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.948644][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.955093][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.010044][T11858] __nla_validate_parse: 15 callbacks suppressed [ 256.010063][T11858] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 256.029189][T11858] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 256.101223][T11864] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 256.121457][T11790] team0: Port device team_slave_0 added [ 256.139423][T11790] team0: Port device team_slave_1 added [ 256.161398][T11869] batadv_slave_1: entered promiscuous mode [ 256.242149][T11790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.268002][T11790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.301389][T11790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.321896][T11863] batadv_slave_1: left promiscuous mode [ 256.378593][T11790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.401656][T11790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.460263][T11790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 256.551405][T11886] netlink: 160 bytes leftover after parsing attributes in process `syz-executor.3'. [ 256.630771][T11895] netlink: 'syz-executor.1': attribute type 12 has an invalid length. [ 256.640545][T11899] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 256.649860][T11899] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 256.656059][T11895] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 256.666370][ T4494] Bluetooth: hci6: command tx timeout [ 256.689151][T11895] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.717063][T11790] hsr_slave_0: entered promiscuous mode [ 256.732359][T11790] hsr_slave_1: entered promiscuous mode [ 256.753567][T11790] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 256.771821][T11790] Cannot create hsr debugfs directory [ 256.902326][T11909] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 256.923047][T11911] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.996954][T11913] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 257.043975][T11913] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 257.059024][T11790] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.138092][T11916] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 257.178740][T11790] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.326934][T11790] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.408842][T11923] ɶƣ0GCTw: entered promiscuous mode [ 257.422522][T11924] batadv_slave_1: entered promiscuous mode [ 257.436818][T11790] batman_adv: batadv1: Interface deactivated: netdevsim0 [ 257.527437][T11790] batman_adv: batadv1: Removing interface: netdevsim0 [ 257.555600][T11790] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.598688][T11919] batadv_slave_1: left promiscuous mode [ 257.741551][T11930] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 257.822130][T11932] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 257.842290][T11790] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 257.874852][T11790] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 257.930991][T11790] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 257.992419][T11790] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 258.045895][T11934] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 258.364838][T11790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.429088][T11790] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.439216][T11968] netlink: 160 bytes leftover after parsing attributes in process `syz-executor.1'. [ 258.476963][ T5165] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.484185][ T5165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.570582][ T5165] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.577774][ T5165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.639967][T11979] ɶƣ0GCTw: entered promiscuous mode [ 258.743473][ T4494] Bluetooth: hci6: command tx timeout [ 259.103605][T11790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.220941][T11790] veth0_vlan: entered promiscuous mode [ 259.296814][T11790] veth1_vlan: entered promiscuous mode [ 259.425692][T11790] veth0_macvtap: entered promiscuous mode [ 259.445012][T11790] veth1_macvtap: entered promiscuous mode [ 259.506334][T11790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.545481][T11790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.579107][T11790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.623020][T11790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.653326][T11790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.672640][T11790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.695556][T11790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 259.728259][T11790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.749460][T11790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.770012][T11790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.781073][T11790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.801982][T11790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.823308][T11790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.841862][T11790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 259.901431][T12014] validate_nla: 5 callbacks suppressed [ 259.901450][T12014] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 259.937138][T11790] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.966098][T11790] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.000551][T11790] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.014073][T11790] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.226040][T12029] vlan0: entered promiscuous mode [ 260.248177][T12029] vlan0: entered allmulticast mode [ 260.344918][T11790] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 260.367450][T11790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.473755][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.496772][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.557483][T12040] openvswitch: netlink: VXLAN extension 1 has unexpected len 6 expected 4 [ 260.569110][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.593391][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.768179][T12054] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 260.833592][ T4494] Bluetooth: hci6: command tx timeout [ 260.850405][T12056] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 260.860429][T12056] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 261.123520][T12072] __nla_validate_parse: 9 callbacks suppressed [ 261.123539][T12072] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 261.779854][T12088] batadv_slave_1: entered promiscuous mode [ 261.834519][T12087] batadv_slave_1: left promiscuous mode [ 262.035940][T12099] ɶƣ0GCTw: entered promiscuous mode [ 262.053799][T12096] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 262.636025][T12122] batadv_slave_1: entered promiscuous mode [ 262.657628][T12124] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 262.690867][T12124] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 262.710540][T12121] batadv_slave_1: left promiscuous mode [ 262.826856][T12132] x_tables: duplicate underflow at hook 1 [ 262.841473][T12130] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 262.874399][T12134] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 262.912898][ T4494] Bluetooth: hci6: command tx timeout [ 262.924029][T12134] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 263.014485][T12140] sctp: [Deprecated]: syz-executor.2 (pid 12140) Use of int in max_burst socket option deprecated. [ 263.014485][T12140] Use struct sctp_assoc_value instead [ 263.297476][T12156] batadv_slave_1: entered promiscuous mode [ 263.306719][T12154] batadv_slave_1: left promiscuous mode [ 263.391336][T12163] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 263.400529][T12163] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 263.486617][T12165] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 263.585002][T12172] syzkaller1: entered allmulticast mode [ 263.645922][T12175] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 263.693673][T12175] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 263.728529][T12175] ipvlan1: entered promiscuous mode [ 263.748818][T12175] ipvlan1: entered allmulticast mode [ 263.755868][T12175] veth0_vlan: entered allmulticast mode [ 263.764323][T12175] bridge0: port 3(ipvlan1) entered blocking state [ 263.779707][T12175] bridge0: port 3(ipvlan1) entered disabled state [ 263.789594][T12175] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 263.829667][T12185] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 263.851777][T12185] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 263.870506][T12185] bridge0: port 3(batadv0) entered blocking state [ 263.878862][T12185] bridge0: port 3(batadv0) entered disabled state [ 263.892337][T12185] batadv0: entered allmulticast mode [ 263.901065][T12185] batadv0: entered promiscuous mode [ 263.930918][ T2871] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 263.940957][ T2871] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 263.963451][T12186] batadv_slave_1: entered promiscuous mode [ 263.973702][T12183] batadv_slave_1: left promiscuous mode [ 264.098621][T12197] netlink: 160 bytes leftover after parsing attributes in process `syz-executor.2'. [ 264.404073][T12211] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 264.602329][T12225] batadv_slave_1: entered promiscuous mode [ 264.626213][T12222] batadv_slave_1: left promiscuous mode [ 264.914808][T12242] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.062243][T12248] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 265.337374][T12257] netdevsim netdevsim1: Direct firmware load for /tun failed with error -2 [ 265.371202][T12257] netdevsim netdevsim1: Falling back to sysfs fallback for: /tun [ 265.481250][T12265] batadv_slave_1: entered promiscuous mode [ 265.503813][T12264] batadv_slave_1: left promiscuous mode [ 265.606625][T12269] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 266.053118][T12282] validate_nla: 3 callbacks suppressed [ 266.053136][T12282] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 266.283090][T12297] batadv_slave_1: entered promiscuous mode [ 266.297083][T12292] __nla_validate_parse: 6 callbacks suppressed [ 266.297100][T12292] netlink: 160 bytes leftover after parsing attributes in process `syz-executor.4'. [ 266.298541][T12295] batadv_slave_1: left promiscuous mode [ 266.478686][T12306] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.510527][T12306] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 266.530600][T12310] IPVS: set_ctl: invalid protocol: 60 172.20.20.187:20000 [ 266.544009][T12306] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 266.651096][T12306] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 266.684272][T12316] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 266.904836][T12328] batadv_slave_1: entered promiscuous mode [ 266.941350][T12332] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 266.963589][T12332] netlink: 666 bytes leftover after parsing attributes in process `syz-executor.2'. [ 266.984451][T12326] batadv_slave_1: left promiscuous mode [ 267.332355][T12347] netlink: 160 bytes leftover after parsing attributes in process `syz-executor.0'. [ 267.452530][T12364] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.584569][T12372] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 267.642584][T12374] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 267.660775][T12374] netlink: 666 bytes leftover after parsing attributes in process `syz-executor.2'. [ 267.807965][T12382] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 267.826268][T12382] netlink: 666 bytes leftover after parsing attributes in process `syz-executor.3'. [ 268.418270][T12412] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 268.437784][T12412] netlink: 666 bytes leftover after parsing attributes in process `syz-executor.1'. [ 268.569121][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 268.660232][T12432] netlink: 160 bytes leftover after parsing attributes in process `syz-executor.3'. [ 269.083563][T12457] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 269.092354][T12457] netlink: 666 bytes leftover after parsing attributes in process `syz-executor.2'. [ 269.104704][T12456] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 269.124224][T12456] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 269.541026][T12480] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 269.929034][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 270.964041][ T5123] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 270.993568][ T5123] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 271.001492][ T5123] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 271.010584][ T5123] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 271.018795][ T5123] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 271.032533][ T5123] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 271.111970][ T2904] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.247136][ T2904] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.393263][ T2904] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.399510][T12556] validate_nla: 1 callbacks suppressed [ 271.399528][T12556] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 271.585218][ T2904] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.984684][T12579] __nla_validate_parse: 2 callbacks suppressed [ 271.984703][T12579] netlink: 160 bytes leftover after parsing attributes in process `syz-executor.4'. [ 272.100167][ T2904] bridge_slave_1: left allmulticast mode [ 272.130712][ T2904] bridge_slave_1: left promiscuous mode [ 272.144465][ T2904] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.171250][ T2904] bridge_slave_0: left allmulticast mode [ 272.196108][ T2904] bridge_slave_0: left promiscuous mode [ 272.210410][ T2904] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.406410][T12596] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 272.783458][T12607] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 272.929768][ T2904] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 272.939490][ T2904] bond_slave_0: left allmulticast mode [ 272.950794][ T2904] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 272.960762][ T2904] bond_slave_1: left allmulticast mode [ 272.969317][ T2904] bond0 (unregistering): Released all slaves [ 273.001803][T12588] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 273.012075][T12588] netlink: 666 bytes leftover after parsing attributes in process `syz-executor.3'. [ 273.064023][ T4494] Bluetooth: hci4: command tx timeout [ 273.070498][T12608] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 273.171814][T12618] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 273.206338][T12618] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 273.263875][T12543] chnl_net:caif_netlink_parms(): no params data found [ 273.685048][T12543] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.692286][T12543] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.717620][T12543] bridge_slave_0: entered allmulticast mode [ 273.734716][T12543] bridge_slave_0: entered promiscuous mode [ 273.756138][T12543] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.775620][T12543] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.784858][T12543] bridge_slave_1: entered allmulticast mode [ 273.794254][T12543] bridge_slave_1: entered promiscuous mode [ 274.017820][T12543] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.060128][T12543] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.090761][T12645] syzkaller1: entered promiscuous mode [ 274.113318][T12645] syzkaller1: entered allmulticast mode [ 274.192057][T12659] netlink: 160 bytes leftover after parsing attributes in process `syz-executor.1'. [ 274.356888][T12543] team0: Port device team_slave_0 added [ 274.446739][T12543] team0: Port device team_slave_1 added [ 274.587854][T12664] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 274.612914][T12664] netlink: 666 bytes leftover after parsing attributes in process `syz-executor.0'. [ 274.640206][T12543] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 274.660034][T12543] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.697766][T12543] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.769372][T12543] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.780861][T12543] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.818753][T12543] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.069527][T12543] hsr_slave_0: entered promiscuous mode [ 275.104336][T12543] hsr_slave_1: entered promiscuous mode [ 275.136633][T12543] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 275.154352][ T4494] Bluetooth: hci4: command tx timeout [ 275.173454][T12543] Cannot create hsr debugfs directory [ 275.610424][T12689] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 275.638430][T12689] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 275.648900][ T5123] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 275.663612][ T5123] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 275.671780][ T5123] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 275.680396][ T5123] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 275.691134][ T5123] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 275.698602][ T5123] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 276.067667][T12702] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 276.079323][T12702] netlink: 666 bytes leftover after parsing attributes in process `syz-executor.0'. [ 276.354253][T12709] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 276.414236][T12709] bridge0: port 3(bond1) entered blocking state [ 276.432011][T12716] netlink: 160 bytes leftover after parsing attributes in process `syz-executor.1'. [ 276.453352][T12709] bridge0: port 3(bond1) entered disabled state [ 276.459788][T12709] bond1: entered allmulticast mode [ 276.481168][T12709] bond1: entered promiscuous mode [ 276.504837][T12710] bridge1: entered promiscuous mode [ 276.510193][T12710] bridge1: entered allmulticast mode [ 276.517442][T12710] bond1: (slave bridge1): Enslaving as a backup interface with an up link [ 276.639767][T12719] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.778895][T12721] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 276.951929][ T2904] hsr_slave_0: left promiscuous mode [ 276.958479][ T2904] hsr_slave_1: left promiscuous mode [ 276.974603][ T2904] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 276.982067][ T2904] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 276.995633][ T2904] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 277.016498][ T2904] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.055625][ T2904] veth0_macvtap: left promiscuous mode [ 277.069804][ T2904] veth1_vlan: left promiscuous mode [ 277.223526][ T5123] Bluetooth: hci4: command tx timeout [ 277.784982][ T5123] Bluetooth: hci3: command tx timeout [ 277.830769][ T2904] team0 (unregistering): Port device team_slave_1 removed [ 277.906780][ T2904] team0 (unregistering): Port device team_slave_0 removed [ 278.306044][T12736] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 278.316303][T12736] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 278.324633][T12543] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 278.395537][T12543] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 278.426211][T12543] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 278.460072][T12543] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 278.485752][T12743] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 278.498081][T12743] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 278.509313][ T5123] Bluetooth: hci1: command 0x0405 tx timeout [ 278.513391][T12743] bridge0: port 2(bridge_slave_1) entered listening state [ 278.539948][T12690] chnl_net:caif_netlink_parms(): no params data found [ 278.673665][T12747] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 278.686079][T12747] netlink: 666 bytes leftover after parsing attributes in process `syz-executor.1'. [ 278.836812][T12690] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.871019][T12690] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.903916][T12690] bridge_slave_0: entered allmulticast mode [ 278.915722][T12690] bridge_slave_0: entered promiscuous mode [ 278.925027][T12690] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.932166][T12690] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.939665][T12690] bridge_slave_1: entered allmulticast mode [ 278.948364][T12690] bridge_slave_1: entered promiscuous mode [ 279.098704][ T2904] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 65023 - 0 [ 279.123944][ T2904] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.185924][T12690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.191339][T12765] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 279.216049][T12690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.256931][T12767] TCP: request_sock_TCP: Possible SYN flooding on port 0.0.0.0:20002. Sending cookies. [ 279.280044][T12760] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.306445][ T4494] Bluetooth: hci4: command tx timeout [ 279.315979][ T2904] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 65023 - 0 [ 279.327181][ T2904] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.422097][ T2904] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 65023 - 0 [ 279.436072][ T2904] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.472291][T12690] team0: Port device team_slave_0 added [ 279.481512][T12690] team0: Port device team_slave_1 added [ 279.515687][T12543] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.576701][ T2904] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 65023 - 0 [ 279.588051][ T2904] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.678266][T12690] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.700005][T12690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.704013][T12779] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 279.727438][T12690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.772476][T12690] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.787393][T12690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.815151][T12690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.851922][T12543] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.863459][ T4494] Bluetooth: hci3: command tx timeout [ 279.958188][ T5164] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.966448][ T5164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.999135][T12690] hsr_slave_0: entered promiscuous mode [ 280.022395][T12690] hsr_slave_1: entered promiscuous mode [ 280.028263][T12793] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 280.028306][T12793] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 280.046387][T12690] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 280.054364][T12690] Cannot create hsr debugfs directory [ 280.077173][ T5164] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.084296][ T5164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.107122][T12791] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 280.184453][T12794] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 280.242351][T12798] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.291912][T12798] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 280.352413][ T2904] bond3: left allmulticast mode [ 280.358529][ T2904] bond3: left promiscuous mode [ 280.366570][ T2904] bridge0: port 5(bond3) entered disabled state [ 280.376374][ T2904] bond2: left allmulticast mode [ 280.381289][ T2904] bond2: left promiscuous mode [ 280.386952][ T2904] bridge0: port 4(bond2) entered disabled state [ 280.398590][ T2904] bond1: left allmulticast mode [ 280.403863][ T2904] bond1: left promiscuous mode [ 280.408929][ T2904] bridge0: port 3(bond1) entered disabled state [ 280.418076][ T2904] bridge_slave_1: left allmulticast mode [ 280.425720][ T2904] bridge_slave_1: left promiscuous mode [ 280.431496][ T2904] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.449592][ T2904] bridge_slave_0: left allmulticast mode [ 280.455407][ T2904] bridge_slave_0: left promiscuous mode [ 280.461132][ T2904] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.975982][T12807] TCP: MD5 Hash failed for 172.20.20.187.0->172.20.20.170.20002 [R] L3 index 0 [ 280.986266][ T2904] bond4 (unregistering): (slave bridge2): Releasing backup interface [ 281.008168][ T2904] bridge2 (unregistering): left promiscuous mode [ 281.177564][ T2904] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 281.188664][ T2904] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 281.199332][ T2904] bond0 (unregistering): Released all slaves [ 281.215954][ T2904] bond1 (unregistering): Released all slaves [ 281.241302][ T2904] bond2 (unregistering): Released all slaves [ 281.257874][ T2904] bond3 (unregistering): Released all slaves [ 281.373104][ T2904] bond4 (unregistering): Released all slaves [ 281.530176][ T2904] ɶƣ0GCTw: left promiscuous mode [ 281.677149][ T2904] tipc: Left network mode [ 281.865878][T12839] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 281.942930][ T4494] Bluetooth: hci3: command tx timeout [ 281.966636][T12543] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 282.044126][T12844] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.103417][T12844] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 282.106231][T12851] tipc: Started in network mode [ 282.121817][T12851] tipc: Node identity ac141427, cluster identity 4711 [ 282.137698][T12851] tipc: Enabled bearer , priority 10 [ 282.358871][T12543] veth0_vlan: entered promiscuous mode [ 282.442773][T12543] veth1_vlan: entered promiscuous mode [ 282.459170][T12690] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 282.474672][T12690] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 282.503889][T12690] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 282.543877][T12690] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 282.577990][T12861] mac80211_hwsim hwsim23 wlan0: entered promiscuous mode [ 282.586277][T12861] macvlan2: entered allmulticast mode [ 282.591681][T12861] mac80211_hwsim hwsim23 wlan0: entered allmulticast mode [ 282.600889][T12861] mac80211_hwsim hwsim23 wlan0: left promiscuous mode [ 282.871076][T12543] veth0_macvtap: entered promiscuous mode [ 282.939262][T12543] veth1_macvtap: entered promiscuous mode [ 282.951370][T12868] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 282.968652][T12866] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 283.072637][T12543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.100137][T12543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.112317][T12543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.126748][T12543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.136971][T12543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.147778][T12543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.162081][T12543] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 283.252348][T12543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.253048][ T5164] tipc: Node number set to 2886997031 [ 283.279730][T12543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.294430][T12543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.334008][T12543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.351885][T12543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.383815][T12885] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 283.384028][T12543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.411763][T12885] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 283.413735][T12543] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 283.487318][T12880] tipc: Enabling of bearer rejected, failed to enable media [ 283.577337][T12543] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.598260][T12543] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.608576][T12543] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.617593][T12543] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.799933][T12690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.951212][T12690] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.022891][ T4494] Bluetooth: hci3: command tx timeout [ 284.039629][T12543] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 284.051238][T12543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 284.073435][ T5161] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.080662][ T5161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.117111][ T2904] hsr_slave_0: left promiscuous mode [ 284.130469][ T2904] hsr_slave_1: left promiscuous mode [ 284.176214][ T2904] veth0_macvtap: left promiscuous mode [ 284.186872][ T2904] veth1_vlan: left promiscuous mode [ 284.406897][ T2904] pimreg (unregistering): left allmulticast mode [ 284.760105][ T2904] team0 (unregistering): Port device team_slave_1 removed [ 284.801550][ T2904] team0 (unregistering): Port device team_slave_0 removed [ 285.191636][T12904] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.234529][ T2832] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.242365][ T2832] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.264008][ T5161] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.271173][ T5161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.460509][T12916] netlink: 'syz-executor.4': attribute type 6 has an invalid length. [ 285.524052][ T2871] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.532140][ T2871] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.533885][T12916] syz_tun: entered allmulticast mode [ 285.637778][T12915] syz_tun: left allmulticast mode [ 285.800080][T12936] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 285.822819][T12936] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 285.892281][T12690] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.893499][T12943] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 285.916028][ T29] audit: type=1804 audit(1719091734.818:17): pid=12940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3772551724/syzkaller.8ZBZ5W/0/cgroup.controllers" dev="sda1" ino=1966 res=1 errno=0 [ 285.948587][T12943] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 285.977335][ T45] IPVS: starting estimator thread 0... [ 286.050954][T12690] veth0_vlan: entered promiscuous mode [ 286.078315][T12945] IPVS: using max 19 ests per chain, 45600 per kthread [ 286.147978][T12690] veth1_vlan: entered promiscuous mode [ 286.303553][T12690] veth0_macvtap: entered promiscuous mode [ 286.364131][T12690] veth1_macvtap: entered promiscuous mode [ 286.393699][T12962] netlink: 160 bytes leftover after parsing attributes in process `syz-executor.2'. [ 286.489766][T12690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.515088][T12690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.536661][T12690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.556592][T12690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.579976][T12690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.609882][T12690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.626919][T12690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.681004][T12690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.711116][T12690] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.733290][T12690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.763007][T12690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.788007][T12690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.812920][T12690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.833281][T12690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.847005][T12690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.856974][T12690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.868700][T12690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.880818][T12690] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.906888][T12690] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.919818][T12690] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.953850][T12690] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.962878][T12690] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.009070][ T29] audit: type=1804 audit(1719091735.908:18): pid=12967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3772551724/syzkaller.8ZBZ5W/3/cgroup.controllers" dev="sda1" ino=1966 res=1 errno=0 [ 287.174111][T12971] dccp_invalid_packet: P.Data Offset(4) too small [ 287.210488][T12690] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 287.223618][T12690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.391741][ T2832] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.422792][ T2832] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.514686][ T2904] IPVS: stop unused estimator thread 0... [ 287.529278][ T2871] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.572902][ T2871] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.749086][ T29] audit: type=1804 audit(1719091736.648:19): pid=12987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2024000238/syzkaller.Y6Ka2o/107/cgroup.controllers" dev="sda1" ino=1966 res=1 errno=0 [ 287.807427][T13002] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 287.811306][T13003] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 287.833307][ T45] IPVS: starting estimator thread 0... [ 287.837504][T13005] netlink: 160 bytes leftover after parsing attributes in process `syz-executor.1'. [ 287.841067][T13003] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 287.923049][T13004] IPVS: using max 22 ests per chain, 52800 per kthread [ 288.210783][T13026] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 288.235873][T13025] netlink: 160 bytes leftover after parsing attributes in process `syz-executor.3'. [ 288.331731][T13022] netlink: 160 bytes leftover after parsing attributes in process `syz-executor.4'. [ 288.696998][T13034] netlink: 160 bytes leftover after parsing attributes in process `syz-executor.1'. [ 289.069387][T13060] dccp_v4_rcv: dropped packet with invalid checksum [ 289.082045][T13062] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.0'. [ 289.221993][T13070] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 289.414117][T13067] netlink: 160 bytes leftover after parsing attributes in process `syz-executor.4'. [ 289.497258][T13088] netlink: 160 bytes leftover after parsing attributes in process `syz-executor.2'. [ 289.530401][T13090] netlink: 160 bytes leftover after parsing attributes in process `syz-executor.1'. [ 289.530737][T13089] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 289.573838][T13089] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 289.611691][T13085] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 289.638884][T13085] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 290.433209][T13123] bridge0: port 3(geneve1) entered blocking state [ 290.467479][T13123] bridge0: port 3(geneve1) entered disabled state [ 290.487825][T13123] geneve1: entered allmulticast mode [ 290.552983][T13123] geneve1: entered promiscuous mode [ 290.580219][T13123] bridge0: port 3(geneve1) entered blocking state [ 290.588566][T13123] bridge0: port 3(geneve1) entered forwarding state [ 290.654586][T13134] geneve2: entered allmulticast mode [ 290.975140][T13151] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 291.435081][T13167] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 291.443337][T13167] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 291.507642][ T51] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.641199][T13170] __nla_validate_parse: 5 callbacks suppressed [ 291.641218][T13170] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 291.745574][ T51] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.779551][T13181] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 291.907992][ T51] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.060629][ T51] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.231238][T13187] netlink: 160 bytes leftover after parsing attributes in process `syz-executor.2'. [ 292.363025][ T51] bond1: left allmulticast mode [ 292.378124][ T51] bridge1: left allmulticast mode [ 292.384062][ T5123] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 292.392904][ T51] bond1: left promiscuous mode [ 292.397855][ T51] bridge1: left promiscuous mode [ 292.397944][ T5123] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 292.404661][ T51] bridge0: port 3(bond1) entered disabled state [ 292.422494][ T5123] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 292.435661][ T5123] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 292.466514][ T51] bridge_slave_1: left allmulticast mode [ 292.472208][ T51] bridge_slave_1: left promiscuous mode [ 292.484503][ T5123] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 292.499074][ T5123] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 292.515226][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.563832][ T51] bridge_slave_0: left allmulticast mode [ 292.569537][ T51] bridge_slave_0: left promiscuous mode [ 292.603060][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.768367][T13209] netlink: 160 bytes leftover after parsing attributes in process `syz-executor.1'. [ 293.210709][T13217] netlink: 160 bytes leftover after parsing attributes in process `syz-executor.2'. [ 293.568515][T13223] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 293.572029][T13228] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 293.652480][ T51] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 293.858941][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.877833][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 293.888734][ T51] bond0 (unregistering): Released all slaves [ 293.903400][ T51] bond1 (unregistering): Released all slaves [ 294.024818][ T51] ɶƣ0GCTw: left promiscuous mode [ 294.102158][T13235] netlink: 864 bytes leftover after parsing attributes in process `syz-executor.4'. [ 294.143693][T13237] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 294.162855][T13237] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 294.185731][T13239] nlmon0: entered promiscuous mode [ 294.201740][T13239] vlan2: entered promiscuous mode [ 294.242956][T13239] nlmon0: left promiscuous mode [ 294.292566][T13243] netlink: 160 bytes leftover after parsing attributes in process `syz-executor.2'. [ 294.439211][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 294.584751][ T5123] Bluetooth: hci6: command tx timeout [ 294.602405][T13253] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 294.657730][T13253] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 295.248262][ T51] hsr_slave_0: left promiscuous mode [ 295.284738][ T51] hsr_slave_1: left promiscuous mode [ 295.305554][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 295.320228][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 295.330277][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 295.340620][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 295.391519][ T51] veth1_macvtap: left promiscuous mode [ 295.402640][ T51] veth0_macvtap: left promiscuous mode [ 295.417078][ T51] veth1_vlan: left promiscuous mode [ 295.427354][ T51] veth0_vlan: left promiscuous mode [ 295.860237][T13279] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 296.198439][ T51] team0 (unregistering): Port device team_slave_1 removed [ 296.238009][ T51] team0 (unregistering): Port device team_slave_0 removed [ 296.663395][ T5123] Bluetooth: hci6: command tx timeout [ 296.720718][T13291] __nla_validate_parse: 1 callbacks suppressed [ 296.720736][T13291] netlink: 864 bytes leftover after parsing attributes in process `syz-executor.3'. [ 296.755658][T13195] chnl_net:caif_netlink_parms(): no params data found [ 296.926017][T13304] netlink: 160 bytes leftover after parsing attributes in process `syz-executor.1'. [ 296.965444][T13303] netlink: 160 bytes leftover after parsing attributes in process `syz-executor.2'. [ 296.987494][T13295] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 297.003199][T13295] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 297.019156][T13295] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 297.031010][T13295] (unnamed net_device) (uninitialized): option arp_validate: invalid value (6648423) [ 297.163562][T13195] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.192106][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 297.208432][T13195] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.226284][T13195] bridge_slave_0: entered allmulticast mode [ 297.233927][T13195] bridge_slave_0: entered promiscuous mode [ 297.243592][T13313] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 297.253241][T13195] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.262270][T13195] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.270923][T13195] bridge_slave_1: entered allmulticast mode [ 297.294032][T13195] bridge_slave_1: entered promiscuous mode [ 297.395310][T13195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.410373][T13195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 297.525843][T13195] team0: Port device team_slave_0 added [ 297.547880][T13195] team0: Port device team_slave_1 added [ 297.636653][T13195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 297.649478][T13195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.714809][T13195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 297.825873][T13195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 297.840664][T13195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.879262][T13195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 297.927355][T13334] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 298.167166][T13195] hsr_slave_0: entered promiscuous mode [ 298.190410][T13195] hsr_slave_1: entered promiscuous mode [ 298.211952][T13195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 298.227168][T13195] Cannot create hsr debugfs directory [ 298.743540][ T5123] Bluetooth: hci6: command tx timeout [ 298.820301][T13359] netlink: 160 bytes leftover after parsing attributes in process `syz-executor.2'. [ 298.934872][T13380] netlink: 160 bytes leftover after parsing attributes in process `syz-executor.1'. [ 299.084840][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 299.324309][T13195] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 299.349167][T13195] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 299.360711][T13393] EXT4-fs warning (device sda1): ext4_group_extend:1861: can't shrink FS - resize aborted [ 299.374889][T13195] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 299.393710][T13195] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 299.693829][T13195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.729213][T13403] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 299.742472][T13195] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.760113][T13403] x_tables: unsorted underflow at hook 4 [ 299.779854][ T5165] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.787042][ T5165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.838900][ T5165] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.846089][ T5165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.034411][T13417] netlink: 'syz-executor.3': attribute type 39 has an invalid length. [ 300.391054][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 300.621218][T13195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.758892][T13195] veth0_vlan: entered promiscuous mode [ 300.786612][T13195] veth1_vlan: entered promiscuous mode [ 300.823826][ T5123] Bluetooth: hci6: command tx timeout [ 300.886107][T13195] veth0_macvtap: entered promiscuous mode [ 300.929959][T13195] veth1_macvtap: entered promiscuous mode [ 300.966604][T13195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.996529][T13195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.007131][T13195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.017919][T13195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.029515][T13195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.040261][T13195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.050221][T13195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.060836][T13195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.078026][T13195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 301.201581][T13195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.212599][T13195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.232003][T13195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.242615][T13195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.253846][T13195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.264399][T13195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.274462][T13195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.285200][T13195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.297405][T13195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 301.335922][T13195] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.360308][T13195] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.369062][T13195] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.377985][T13195] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.536729][T13195] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 301.560791][T13195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.620826][ T2871] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.649840][ T2871] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.739443][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 301.754276][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.762116][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.011247][T13497] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 302.020785][T13497] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 302.074066][T13499] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.080838][T13496] __nla_validate_parse: 8 callbacks suppressed [ 302.080852][T13496] netlink: 864 bytes leftover after parsing attributes in process `syz-executor.4'. [ 302.081164][T13499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.236628][T13507] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 302.419813][T13513] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 302.529808][T13519] netlink: 160 bytes leftover after parsing attributes in process `syz-executor.1'. [ 302.785105][T13526] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 302.943493][T13536] netlink: 160 bytes leftover after parsing attributes in process `syz-executor.2'. [ 302.991563][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 303.092547][T13543] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 303.250578][T13551] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 303.350163][T13554] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.470047][T13556] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 304.210804][T13580] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 304.701487][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 304.840033][ T2918] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.330843][ T2918] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.370338][T13614] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 305.387979][T13613] batadv_slave_1: entered promiscuous mode [ 305.404210][T13614] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 305.412617][T13611] batadv_slave_1: left promiscuous mode [ 305.514236][ T2918] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.537781][T13618] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.544936][T13618] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.557883][T13620] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.568525][ T4494] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 305.587450][ T4494] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 305.603521][ T4494] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 305.619637][ T4494] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 305.629136][ T4494] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 305.636837][ T4494] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 305.769701][ T2918] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.077612][ T2918] bridge_slave_1: left allmulticast mode [ 306.097417][ T2918] bridge_slave_1: left promiscuous mode [ 306.123020][ T2918] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.184114][ T2918] bridge_slave_0: left allmulticast mode [ 306.189841][ T2918] bridge_slave_0: left promiscuous mode [ 306.219644][ T2918] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.779069][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 307.146842][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 307.181093][ T2918] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 307.202217][ T2918] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 307.219922][ T2918] bond0 (unregistering): Released all slaves [ 307.272790][T13654] batadv_slave_1: entered promiscuous mode [ 307.299050][T13653] batadv_slave_1: left promiscuous mode [ 307.453613][T13664] __nla_validate_parse: 3 callbacks suppressed [ 307.453633][T13664] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 307.704340][ T5123] Bluetooth: hci6: command tx timeout [ 307.864480][T13680] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 307.874944][T13680] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 307.911609][T13678] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.938022][T13621] chnl_net:caif_netlink_parms(): no params data found [ 308.459822][ T2918] hsr_slave_0: left promiscuous mode [ 308.485570][ T2918] hsr_slave_1: left promiscuous mode [ 308.515940][ T2918] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 308.533032][ T2918] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 308.566864][ T2918] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 308.589817][ T2918] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 308.639022][ T2918] veth1_macvtap: left promiscuous mode [ 308.648055][ T2918] veth0_macvtap: left promiscuous mode [ 308.659047][ T2918] veth1_vlan: left promiscuous mode [ 308.671359][ T2918] veth0_vlan: left promiscuous mode [ 309.388421][ T2918] team0 (unregistering): Port device team_slave_1 removed [ 309.444459][ T2918] team0 (unregistering): Port device team_slave_0 removed [ 309.787362][ T5123] Bluetooth: hci6: command tx timeout [ 309.897359][T13621] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.906069][T13621] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.921146][T13621] bridge_slave_0: entered allmulticast mode [ 309.932523][T13621] bridge_slave_0: entered promiscuous mode [ 309.952825][T13707] batadv_slave_1: entered promiscuous mode [ 309.963858][T13710] batadv_slave_1: left promiscuous mode [ 309.982095][T13621] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.013590][T13621] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.037520][T13621] bridge_slave_1: entered allmulticast mode [ 310.059052][T13621] bridge_slave_1: entered promiscuous mode [ 310.192011][T13621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.248363][T13621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.343725][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.388489][T13621] team0: Port device team_slave_0 added [ 310.425711][T13621] team0: Port device team_slave_1 added [ 310.435085][T13730] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 310.447703][T13730] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 310.522456][T13621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.537144][T13621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.575037][T13621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 310.598962][T13621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 310.607145][T13621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.638793][T13621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.783183][T13621] hsr_slave_0: entered promiscuous mode [ 310.790574][T13621] hsr_slave_1: entered promiscuous mode [ 310.797496][T13621] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 310.812794][T13621] Cannot create hsr debugfs directory [ 310.821544][T13739] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 310.992403][T13741] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 311.000944][T13741] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 311.327468][T13746] batadv_slave_1: entered promiscuous mode [ 311.346425][T13745] batadv_slave_1: left promiscuous mode [ 311.421543][T13748] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 311.532046][T13749] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 311.575364][T13749] bond1: (slave gre1): Error -95 calling set_mac_address [ 311.630479][T13753] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 311.667932][T13753] bond1: (slave gre1): Error -95 calling set_mac_address [ 311.873021][ T5123] Bluetooth: hci6: command tx timeout [ 311.925258][T13770] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 311.957947][T13771] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.979701][T13621] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 312.000074][T13621] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 312.046664][T13621] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 312.118214][T13621] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 312.958501][T13786] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 312.987178][T13786] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 313.000777][T13621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.068729][T13788] netlink: 160 bytes leftover after parsing attributes in process `syz-executor.4'. [ 313.091947][T13621] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.102279][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 313.117602][T13793] batadv_slave_1: entered promiscuous mode [ 313.135819][ T5166] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.143007][ T5166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.167413][ T5166] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.174594][ T5166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.192431][T13791] batadv_slave_1: left promiscuous mode [ 313.519126][T13802] netlink: 160 bytes leftover after parsing attributes in process `syz-executor.3'. [ 313.565290][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 313.748617][T13817] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 313.773695][T13621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.919497][T13621] veth0_vlan: entered promiscuous mode [ 313.928598][T13820] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 313.943015][ T5123] Bluetooth: hci6: command tx timeout [ 313.950600][T13621] veth1_vlan: entered promiscuous mode [ 313.957616][T13820] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 313.999440][T13621] veth0_macvtap: entered promiscuous mode [ 314.011107][T13621] veth1_macvtap: entered promiscuous mode [ 314.035015][T13621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.051983][T13621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.070254][T13621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.091411][T13621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.102277][T13621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.121393][T13621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.142573][T13621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.163061][T13621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.178272][T13621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 314.232539][T13621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.269660][T13621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.290115][T13621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.309603][T13621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.319613][T13621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.330333][T13621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.347579][T13621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.368515][T13621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.385242][T13621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 314.395167][T13831] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.430027][T13621] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.440142][T13621] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.451482][T13621] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.468924][T13621] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.481544][T13835] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.629384][T13621] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 314.664025][T13621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.700464][ T2871] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.733249][ T2871] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.795500][ T2871] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.819462][ T2871] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.165212][T13851] netlink: 160 bytes leftover after parsing attributes in process `syz-executor.1'. [ 315.495529][T13860] batadv_slave_1: entered promiscuous mode [ 315.508744][T13857] batadv_slave_1: left promiscuous mode [ 315.790272][T13872] netlink: 160 bytes leftover after parsing attributes in process `syz-executor.4'. [ 315.934466][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 315.961865][T13882] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 315.974622][T13882] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 316.000226][T13885] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.135060][T13891] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 316.408002][T13896] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.793204][T13905] batadv_slave_1: entered promiscuous mode [ 316.816132][T13903] batadv_slave_1: left promiscuous mode [ 317.135137][T13910] netlink: 160 bytes leftover after parsing attributes in process `syz-executor.3'. [ 317.194396][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 317.294996][T13925] netlink: 160 bytes leftover after parsing attributes in process `syz-executor.1'. [ 317.391493][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.398440][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.561641][T13936] batadv_slave_1: entered promiscuous mode [ 317.572091][T13934] batadv_slave_1: left promiscuous mode [ 317.740362][T13941] batadv_slave_1: entered promiscuous mode [ 317.755471][T13940] batadv_slave_1: left promiscuous mode [ 317.855452][T13947] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 317.873107][T13947] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 317.892046][T13949] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.027020][T13956] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 318.276586][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 318.475100][T13972] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.554929][T13977] batadv_slave_1: entered promiscuous mode [ 318.567870][T13976] batadv_slave_1: left promiscuous mode [ 318.903435][T13988] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 319.272149][T14005] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 319.378771][T14011] batadv_slave_1: entered promiscuous mode [ 319.389348][T14010] batadv_slave_1: left promiscuous mode [ 319.591219][T14015] netlink: 160 bytes leftover after parsing attributes in process `syz-executor.0'. [ 319.661238][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 319.701525][T14020] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.764070][T14022] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 319.804240][T14026] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 319.806163][T14022] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 319.851464][T14028] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 321.025763][T14070] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 321.036611][T14072] batadv_slave_1: entered promiscuous mode [ 321.053142][T14071] batadv_slave_1: left promiscuous mode [ 321.087533][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 321.179340][T14055] netlink: 160 bytes leftover after parsing attributes in process `syz-executor.3'. [ 321.330699][T14078] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 323.475259][T14109] batadv_slave_1: entered promiscuous mode [ 323.496079][T14107] batadv_slave_1: left promiscuous mode [ 323.893147][T14121] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 324.222762][T14127] netlink: 160 bytes leftover after parsing attributes in process `syz-executor.1'. [ 324.485102][T14137] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 324.502627][T14137] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 324.991391][T14153] batadv_slave_1: entered promiscuous mode [ 325.029188][T14152] batadv_slave_1: left promiscuous mode [ 325.616720][T14140] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 325.733045][T14140] tipc: Started in network mode [ 325.737964][T14140] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 325.804003][T14140] tipc: Enabled bearer , priority 10 [ 325.906599][T14178] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 326.282955][T14182] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.332333][T14191] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 326.507696][T14195] batadv_slave_1: entered promiscuous mode [ 326.523705][ T4494] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 326.526222][T14182] xt_TCPMSS: Only works on TCP SYN packets [ 326.538153][T14193] batadv_slave_1: left promiscuous mode [ 326.551566][ T4494] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 326.570515][ T4494] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 326.587838][ T4494] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 326.604504][ T4494] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 326.612978][ T4494] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 326.921940][T14205] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 326.927762][ T5164] tipc: Node number set to 4269801488 [ 326.937288][T14205] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 327.028749][ T2918] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.510806][ T2918] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.653744][T14219] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 327.697450][ T2918] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.874960][ T2918] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.939735][T14229] batadv_slave_1: entered promiscuous mode [ 328.040809][T14228] batadv_slave_1: left promiscuous mode [ 328.362857][T14194] chnl_net:caif_netlink_parms(): no params data found [ 328.662956][ T5123] Bluetooth: hci1: command tx timeout [ 328.676207][T14261] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 328.688343][T14253] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.711307][T14261] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 328.771889][T14253] xt_TCPMSS: Only works on TCP SYN packets [ 329.125947][T14194] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.146058][T14194] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.164756][T14194] bridge_slave_0: entered allmulticast mode [ 329.185212][T14194] bridge_slave_0: entered promiscuous mode [ 329.290608][T14194] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.313152][T14194] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.336624][T14194] bridge_slave_1: entered allmulticast mode [ 329.355973][T14194] bridge_slave_1: entered promiscuous mode [ 329.496690][T14194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 329.538493][T14194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 329.636713][T14279] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 329.717892][ T2918] batadv0: left allmulticast mode [ 329.723104][ T2918] batadv0: left promiscuous mode [ 329.737250][ T2918] bridge0: port 3(batadv0) entered disabled state [ 329.773147][ T2918] bridge_slave_1: left allmulticast mode [ 329.778831][ T2918] bridge_slave_1: left promiscuous mode [ 329.803420][ T2918] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.817027][ T2918] bridge_slave_0: left allmulticast mode [ 329.829332][ T2918] bridge_slave_0: left promiscuous mode [ 329.839978][ T2918] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.486345][ T2918] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 330.502169][ T2918] bridge1 (unregistering): left promiscuous mode [ 330.746092][ T5123] Bluetooth: hci1: command tx timeout [ 330.772328][ T2918] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 330.789293][ T2918] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 330.799837][ T2918] bond0 (unregistering): Released all slaves [ 330.904863][ T2918] bond1 (unregistering): Released all slaves [ 330.920057][T14194] team0: Port device team_slave_0 added [ 330.926255][T14293] batadv_slave_1: entered promiscuous mode [ 330.933713][T14294] batadv_slave_1: left promiscuous mode [ 330.954352][T14194] team0: Port device team_slave_1 added [ 331.070356][ T2918] ɶƣ0GCTw: left promiscuous mode [ 331.099501][T14194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 331.122921][T14194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.123110][T14306] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 331.207102][T14194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 331.226368][T14194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 331.242494][T14194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.291756][T14194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 331.311464][ T2918] tipc: Disabling bearer [ 331.320591][ T2918] tipc: Left network mode [ 331.508782][T14320] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 331.521979][T14320] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 331.644442][T14194] hsr_slave_0: entered promiscuous mode [ 331.698894][T14194] hsr_slave_1: entered promiscuous mode [ 331.748653][T14194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 331.763164][T14194] Cannot create hsr debugfs directory [ 331.780186][T14330] batadv_slave_1: entered promiscuous mode [ 331.788274][T14328] batadv_slave_1: left promiscuous mode [ 331.892185][T14335] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 331.909168][T14332] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 332.132658][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 332.427005][T14350] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 332.437345][T14350] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 332.814312][T14368] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 332.825229][ T5123] Bluetooth: hci1: command tx timeout [ 332.831115][T14368] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 333.519723][T14379] batadv_slave_1: entered promiscuous mode [ 333.555366][T14378] batadv_slave_1: left promiscuous mode [ 333.631961][T14380] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.715474][T14194] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 333.753613][T14194] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 333.797710][T14386] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 333.817223][T14383] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 333.883813][T14194] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 333.908192][T14194] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 334.121047][T14395] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 334.142382][T14395] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 334.164630][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 334.434256][T14194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.588066][T14194] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.710356][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.717559][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.797292][ T5161] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.804477][ T5161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.902865][ T5123] Bluetooth: hci1: command tx timeout [ 335.148106][T14414] batadv_slave_1: entered promiscuous mode [ 335.173234][T14413] batadv_slave_1: left promiscuous mode [ 335.310121][T14425] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 335.548414][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 335.664281][T14443] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.668788][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 335.748955][ T2918] hsr_slave_0: left promiscuous mode [ 335.761878][ T2918] hsr_slave_1: left promiscuous mode [ 335.795059][ T2918] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 335.809492][ T2918] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 335.840739][ T2918] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 335.865488][ T2918] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 335.876265][T14452] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 335.936222][ T2918] veth1_macvtap: left promiscuous mode [ 335.956409][ T2918] veth0_macvtap: left promiscuous mode [ 335.966907][ T2918] veth1_vlan: left promiscuous mode [ 336.141894][ T2918] infiniband syz1: set down [ 336.903597][T14463] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 336.915401][T14463] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 337.085107][ T2918] team0 (unregistering): Port device team_slave_1 removed [ 337.645876][ T2918] team0 (unregistering): Port device team_slave_0 removed [ 338.048192][ T2871] smc: removing ib device syz1 [ 338.515129][T14469] batadv_slave_1: entered promiscuous mode [ 338.523165][T14469] batadv_slave_1: left promiscuous mode [ 338.617765][T14194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 338.707518][T14480] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 338.873843][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 338.884974][T14194] veth0_vlan: entered promiscuous mode [ 338.957294][T14194] veth1_vlan: entered promiscuous mode [ 339.111500][T14194] veth0_macvtap: entered promiscuous mode [ 339.248022][T14194] veth1_macvtap: entered promiscuous mode [ 339.323692][T14194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.358658][T14194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.398723][T14194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.426549][T14194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.446820][T14506] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 339.466360][T14194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.480277][T14506] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 339.505673][T14194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.529708][T14194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 339.552810][T14194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 339.634974][T14194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 339.882648][T14514] batadv_slave_1: entered promiscuous mode [ 339.958397][T14194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.011315][T14194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.038412][T14194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.085322][T14194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.122807][T14194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.142996][T14194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.172779][T14194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.197661][T14194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.221127][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 340.224383][T14194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 340.335266][T14512] batadv_slave_1: left promiscuous mode [ 340.365726][T14194] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.404521][T14194] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.431554][T14194] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.467298][T14194] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.510256][T14525] batadv_slave_1: entered promiscuous mode [ 340.586729][T14524] batadv_slave_1: left promiscuous mode [ 340.593116][T14527] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 340.844324][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 341.106155][T14538] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 341.176435][T14538] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 341.578894][T14194] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 341.616783][T14194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.682025][ T2918] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.706273][ T2918] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.754902][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 341.825803][T14556] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 341.858132][ T2871] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.869550][ T2871] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.002129][T14562] batadv_slave_1: entered promiscuous mode [ 342.032604][T14561] batadv_slave_1: left promiscuous mode [ 342.270887][T14582] xt_NFQUEUE: number of total queues is 0 [ 342.298795][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 342.313044][T14582] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 342.343928][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.622770][T14595] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 342.642652][T14595] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 342.838790][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 342.879114][T14613] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 342.912786][T14613] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 343.146022][T14619] batadv_slave_1: entered promiscuous mode [ 343.182347][T14618] batadv_slave_1: left promiscuous mode [ 343.548741][T14631] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 343.576327][T14631] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 343.923148][T14643] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 343.972796][T14643] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 344.028150][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 344.231078][T14657] batadv_slave_1: entered promiscuous mode [ 344.244014][T14656] batadv_slave_1: left promiscuous mode [ 344.435344][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 344.961242][T14695] batadv_slave_1: entered promiscuous mode [ 345.023469][T14693] batadv_slave_1: left promiscuous mode [ 345.218478][T14702] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 345.227423][T14702] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 345.335579][T14705] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 345.362223][T14705] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 345.576483][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 346.229087][T14736] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.312868][T14740] batadv_slave_1: entered promiscuous mode [ 346.361728][T14739] batadv_slave_1: left promiscuous mode [ 346.374423][T14744] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 346.907767][T14763] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 346.947577][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 347.894963][T14791] nlmon0: entered promiscuous mode [ 347.911729][T14791] vlan1: entered promiscuous mode [ 348.144488][T14791] nlmon0: left promiscuous mode [ 348.242792][T14793] batadv_slave_1: entered promiscuous mode [ 348.261597][T14792] batadv_slave_1: left promiscuous mode [ 348.527054][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 348.553539][T14808] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 348.684574][T14811] nlmon0: entered promiscuous mode [ 348.689813][T14811] vlan2: entered promiscuous mode [ 348.926305][T14811] nlmon0: left promiscuous mode [ 348.945810][T14817] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 349.243800][T14833] validate_nla: 6 callbacks suppressed [ 349.243819][T14833] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 349.289348][T14833] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 349.336650][T14836] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 349.350824][T14836] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 349.607446][T14848] batadv_slave_1: entered promiscuous mode [ 349.665144][T14847] vlan2: entered promiscuous mode [ 349.675257][T14847] caif0: entered promiscuous mode [ 349.900929][T14847] caif0: left promiscuous mode [ 349.954530][T14846] batadv_slave_1: left promiscuous mode [ 350.099131][T14852] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.274906][T14853] vlan1: entered promiscuous mode [ 350.280047][T14853] caif0: entered promiscuous mode [ 350.297145][T14860] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 350.416767][T14853] caif0: left promiscuous mode [ 350.559167][T14863] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 351.357966][T14888] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 351.575462][T14898] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 351.586245][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 351.605349][T14898] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 351.728547][T14903] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 351.753217][T14903] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 351.886954][T14909] vlan1: entered promiscuous mode [ 351.910844][T14909] caif0: entered promiscuous mode [ 352.101759][T14909] caif0: left promiscuous mode [ 352.361802][T14915] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 352.377865][T14919] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 352.575664][T14925] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.768577][T14936] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 353.027667][T14946] batadv_slave_1: entered promiscuous mode [ 353.037503][T14943] batadv_slave_1: left promiscuous mode [ 353.269361][T14949] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 353.279257][T14953] nlmon0: entered promiscuous mode [ 353.339202][T14953] vlan2: entered promiscuous mode [ 353.516516][T14953] nlmon0: left promiscuous mode [ 353.753266][T14957] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 353.771831][T14957] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 353.850494][T14962] IPVS: set_ctl: invalid protocol: 0 172.20.20.0:0 [ 354.416377][T14983] batadv_slave_1: entered promiscuous mode [ 354.433359][T14982] batadv_slave_1: left promiscuous mode [ 354.547267][T14988] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.743900][T14996] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 354.774632][T14998] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 355.450877][T15027] batadv_slave_1: entered promiscuous mode [ 355.481962][T15029] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 355.490444][T15029] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 355.500205][T15026] batadv_slave_1: left promiscuous mode [ 355.634265][T15036] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 356.068471][T15053] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 356.077287][T15053] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 356.331726][T15062] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.462467][T15066] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 357.186036][T15074] batadv_slave_1: entered promiscuous mode [ 357.207488][T15073] batadv_slave_1: left promiscuous mode [ 357.455756][T15078] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 357.654247][T15087] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 357.758728][T15093] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 357.782873][T15093] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 357.949485][T15103] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.080855][T15107] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 358.286953][T15110] nlmon0: entered promiscuous mode [ 358.311755][T15110] vlan3: entered promiscuous mode [ 358.504800][T15110] nlmon0: left promiscuous mode [ 358.574588][T15112] batadv_slave_1: entered promiscuous mode [ 358.586709][T15111] batadv_slave_1: left promiscuous mode [ 358.758259][T15120] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 359.418738][T15136] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 359.943264][T15148] batadv_slave_1: entered promiscuous mode [ 359.964403][T15147] batadv_slave_1: left promiscuous mode [ 360.319903][T15154] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 360.414970][T15160] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.426642][ T5123] Bluetooth: hci5: command 0x0406 tx timeout [ 360.604476][T15161] vlan3: entered promiscuous mode [ 360.609724][T15161] caif0: entered promiscuous mode [ 360.617296][T15161] caif0: left promiscuous mode [ 360.621388][T15162] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 360.978662][T15174] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 361.440451][T15193] nlmon0: entered promiscuous mode [ 361.460377][T15193] vlan1: entered promiscuous mode [ 361.476235][T15193] nlmon0: left promiscuous mode [ 361.899852][T15200] vlan1: entered promiscuous mode [ 361.925933][T15200] caif0: entered promiscuous mode [ 362.221350][T15200] caif0: left promiscuous mode [ 362.810625][T15204] vlan1: entered promiscuous mode [ 362.891254][T15204] caif0: entered promiscuous mode [ 363.023879][T15204] caif0: left promiscuous mode [ 363.074594][T15215] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 363.305992][ T51] tipc: Subscription rejected, illegal request [ 363.307170][T15223] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 363.582006][T15234] batadv0: entered promiscuous mode [ 363.589193][T15234] vlan1: entered promiscuous mode [ 363.600237][T15234] batadv0: left promiscuous mode [ 363.868512][T15247] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 363.971667][T15251] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.111552][T15255] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 364.452146][T15261] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 364.633234][T15262] vlan2: entered promiscuous mode [ 364.642831][T15262] caif0: entered promiscuous mode [ 364.921781][T15262] caif0: left promiscuous mode [ 365.127584][T15265] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 365.147627][T15265] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 365.521339][T15284] batadv0: entered promiscuous mode [ 365.527362][T15284] vlan1: entered promiscuous mode [ 365.540101][T15284] batadv0: left promiscuous mode [ 365.639908][T15286] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 365.744311][T15288] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.888253][T15297] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 366.219820][T15304] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 366.924564][T15322] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 367.052236][T15326] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 367.071387][T15326] hsr0: entered promiscuous mode [ 367.099591][T15326] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 367.135138][T15326] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 367.164319][T15326] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 367.192750][T15326] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 367.417881][T15334] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 367.432879][T15334] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 367.609584][T15337] batadv0: entered promiscuous mode [ 367.620308][T15337] vlan3: entered promiscuous mode [ 367.645471][T15337] batadv0: left promiscuous mode [ 367.700724][T15340] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 367.833519][T15345] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 367.851428][T15345] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 369.036591][T15386] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 369.052406][T15386] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 369.299728][T15392] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.3'. [ 369.311718][T15391] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.3'. [ 369.425856][T15394] vlan2: entered promiscuous mode [ 369.433607][T15394] caif0: entered promiscuous mode [ 369.451216][T15394] caif0: left promiscuous mode [ 369.712049][T15398] vlan3: entered promiscuous mode [ 369.723055][T15398] caif0: entered promiscuous mode [ 369.740022][T15398] caif0: left promiscuous mode [ 370.097044][T15408] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.3'. [ 370.304613][T15420] batadv_slave_1: entered promiscuous mode [ 370.318156][T15418] batadv_slave_1: left promiscuous mode [ 370.354278][T15416] batadv0: entered promiscuous mode [ 370.359726][T15416] vlan2: entered promiscuous mode [ 370.375392][T15416] batadv0: left promiscuous mode [ 370.539381][T15425] vlan1: entered promiscuous mode [ 370.544763][T15425] caif0: entered promiscuous mode [ 370.554551][T15427] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 370.563793][T15425] caif0: left promiscuous mode [ 370.581064][T15427] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 370.705613][T15434] syzkaller1: entered promiscuous mode [ 370.717797][T15434] syzkaller1: entered allmulticast mode [ 371.180286][T15453] batadv_slave_1: entered promiscuous mode [ 371.190087][T15452] batadv_slave_1: left promiscuous mode [ 371.904815][T15478] Bluetooth: MGMT ver 1.22 [ 372.044518][T15481] vlan1: entered promiscuous mode [ 372.049609][T15481] caif0: entered promiscuous mode [ 372.091900][T15481] caif0: left promiscuous mode [ 372.152810][T15491] batadv_slave_1: entered promiscuous mode [ 372.169354][T15490] batadv_slave_1: left promiscuous mode [ 372.442212][T15504] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 372.453561][T15504] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 372.921715][T15524] batadv_slave_1: entered promiscuous mode [ 372.939256][T15523] batadv_slave_1: left promiscuous mode [ 373.133809][T15532] syzkaller1: entered promiscuous mode [ 373.139732][T15532] syzkaller1: entered allmulticast mode [ 373.189739][T15528] vlan3: entered promiscuous mode [ 373.196735][T15528] caif0: entered promiscuous mode [ 373.203931][T15528] caif0: left promiscuous mode [ 373.551769][T15539] vlan2: entered promiscuous mode [ 373.568263][T15539] caif0: entered promiscuous mode [ 373.590972][T15539] caif0: left promiscuous mode [ 373.660621][T15552] netlink: 'syz-executor.2': attribute type 39 has an invalid length. [ 373.902386][T15565] syzkaller1: entered promiscuous mode [ 373.907787][T15567] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 373.916807][T15567] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 373.923270][T15565] syzkaller1: entered allmulticast mode [ 374.183338][T15572] vlan1: entered promiscuous mode [ 374.188532][T15572] caif0: entered promiscuous mode [ 374.197994][T15572] caif0: left promiscuous mode [ 374.584906][T15591] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 375.107211][T15605] nlmon0: entered promiscuous mode [ 375.120548][T15605] vlan2: entered promiscuous mode [ 375.151612][T15605] nlmon0: left promiscuous mode [ 375.398364][T15613] vlan1: entered promiscuous mode [ 375.410277][T15613] caif0: entered promiscuous mode [ 375.422489][T15613] caif0: left promiscuous mode [ 375.652065][T15624] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 375.671411][T15624] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 375.697117][T15621] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 375.820331][T15628] x_tables: duplicate underflow at hook 3 [ 376.153585][T15648] vlan3: entered promiscuous mode [ 376.158657][T15648] caif0: entered promiscuous mode [ 376.190988][T15648] caif0: left promiscuous mode [ 376.601746][T15673] netlink: 'syz-executor.2': attribute type 13 has an invalid length. [ 376.711788][T15678] batadv_slave_1: entered promiscuous mode [ 376.734485][T15677] batadv_slave_1: left promiscuous mode [ 376.939016][T15684] dccp_invalid_packet: P.Data Offset(0) too small [ 377.155050][T15693] nlmon0: entered promiscuous mode [ 377.159151][T15702] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 377.174783][T15702] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 377.186571][T15693] vlan1: entered promiscuous mode [ 377.199681][T15693] nlmon0: left promiscuous mode [ 377.495233][T15728] batadv_slave_1: entered promiscuous mode [ 377.503253][T15729] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 377.511953][T15729] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 377.539338][T15726] batadv_slave_1: left promiscuous mode [ 377.884570][T15741] vlan1: entered promiscuous mode [ 377.889992][T15741] caif0: entered promiscuous mode [ 377.897096][T15741] caif0: left promiscuous mode [ 378.127618][T15748] vlan2: entered promiscuous mode [ 378.132843][T15748] caif0: entered promiscuous mode [ 378.166390][T15748] caif0: left promiscuous mode [ 378.334115][T15757] syzkaller1: entered promiscuous mode [ 378.339779][T15757] syzkaller1: entered allmulticast mode [ 378.438425][T15762] batadv_slave_1: entered promiscuous mode [ 378.447162][T15761] batadv_slave_1: left promiscuous mode [ 378.571634][T15760] vlan2: entered promiscuous mode [ 378.587149][T15760] caif0: entered promiscuous mode [ 378.611935][T15760] caif0: left promiscuous mode [ 378.665966][T15766] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 378.831475][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.838598][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.205761][T15792] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 379.242135][T15792] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 379.353359][T15798] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 379.691670][T15814] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 379.704232][ T5123] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 379.715034][ T5123] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 379.723978][ T5123] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 379.735087][ T5123] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 379.745924][ T5123] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 379.753934][ T5123] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 379.971411][T15820] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.3'. [ 380.067670][T15813] chnl_net:caif_netlink_parms(): no params data found [ 380.203283][T15831] bridge0: port 3(geneve1) entered disabled state [ 380.209975][T15831] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.386194][T15813] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.412019][T15813] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.420124][T15813] bridge_slave_0: entered allmulticast mode [ 380.436543][T15813] bridge_slave_0: entered promiscuous mode [ 380.491846][T15813] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.515061][T15813] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.531837][T15813] bridge_slave_1: entered allmulticast mode [ 380.544593][T15813] bridge_slave_1: entered promiscuous mode [ 380.714223][T15856] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 380.718964][T15813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.781506][T15813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 380.880102][T15813] team0: Port device team_slave_0 added [ 380.895958][T15813] team0: Port device team_slave_1 added [ 380.901072][T15866] validate_nla: 3 callbacks suppressed [ 380.901087][T15866] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 380.930732][T15866] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 380.971228][T15813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.979296][T15813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.020060][T15870] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 381.026652][T15813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 381.058500][T15874] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 381.082043][T15813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 381.091244][T15813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.117532][T15813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.266575][T15813] hsr_slave_0: entered promiscuous mode [ 381.273614][T15813] hsr_slave_1: entered promiscuous mode [ 381.282381][T15813] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 381.301842][T15813] Cannot create hsr debugfs directory [ 381.342351][T15886] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.2'. [ 381.614550][T15813] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.647777][T15892] tun0: tun_chr_ioctl cmd 2148553947 [ 381.750373][T15813] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.783303][ T4494] Bluetooth: hci7: command tx timeout [ 381.987995][T15813] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.023259][ T30] INFO: task syz-executor.0:11041 blocked for more than 143 seconds. 2024/06/22 21:30:30 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 382.031364][ T30] Not tainted 6.10.0-rc4-syzkaller-00168-g49bbeb5719c2 #0 [ 382.043384][T15907] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 382.105412][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 382.133080][ T30] task:syz-executor.0 state:D stack:24152 pid:11041 tgid:11039 ppid:5120 flags:0x00004006 [ 382.164345][ T30] Call Trace: [ 382.167658][ T30] [ 382.170598][ T30] __schedule+0x17e8/0x4a20 [ 382.193157][ T30] ? __pfx___schedule+0x10/0x10 [ 382.198250][ T30] ? __pfx_lock_release+0x10/0x10 [ 382.204903][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 382.210399][ T30] ? schedule+0x90/0x320 [ 382.218365][ T30] schedule+0x14b/0x320 [ 382.222546][ T30] schedule_preempt_disabled+0x13/0x30 [ 382.237701][ T30] __mutex_lock+0x6a4/0xd70 [ 382.242236][ T30] ? __mutex_lock+0x527/0xd70 [ 382.250800][ T30] ? nfsd_nl_rpc_status_get_start+0x8d/0xe0 [ 382.264167][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 382.269229][ T30] ? net_generic+0x1f/0x240 [ 382.284254][ T30] nfsd_nl_rpc_status_get_start+0x8d/0xe0 [ 382.290001][ T30] genl_start+0x4d6/0x6d0 [ 382.302419][ T30] __netlink_dump_start+0x45c/0x780 [ 382.308426][ T30] genl_rcv_msg+0x88c/0xec0 [ 382.313556][ T30] ? mark_lock+0x9a/0x350 [ 382.317908][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 382.332002][ T30] ? __pfx_genl_start+0x10/0x10 [ 382.337388][ T30] ? __pfx_genl_dumpit+0x10/0x10 [ 382.342334][ T30] ? __pfx_genl_done+0x10/0x10 [ 382.348467][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 382.353998][ T30] ? __pfx_nfsd_nl_rpc_status_get_start+0x10/0x10 [ 382.360427][ T30] ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10 [ 382.367472][ T30] ? __pfx_nfsd_nl_rpc_status_get_done+0x10/0x10 [ 382.375396][ T30] ? __pfx___might_resched+0x10/0x10 [ 382.380715][ T30] netlink_rcv_skb+0x1e3/0x430 [ 382.387290][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 382.392339][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 382.397733][ T30] ? __netlink_deliver_tap+0x77e/0x7c0 [ 382.403392][ T30] genl_rcv+0x28/0x40 [ 382.407387][ T30] netlink_unicast+0x7ea/0x980 [ 382.412171][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 382.417971][