last executing test programs: 55.997002637s ago: executing program 3: syz_emit_ethernet(0xce, &(0x7f0000000240)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x27, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x2a, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}, @cipso={0x86, 0x3d, 0x0, [{0x0, 0x7, "4b6cefc500"}, {0x0, 0xa, "2189ea43a2149b84"}, {0x0, 0x12, "ffd11634eea26b0faffa0dea2e903528"}, {0x0, 0x9, "02a20948fd7406"}, {0x0, 0xb, "ccf0294e2a3bdb4aa4"}]}, @ssrr={0x89, 0xb, 0x0, [@private, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}, "a811a23da43974ff"}}}}}, 0x0) 55.873773494s ago: executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x1b, &(0x7f0000000640)=@ringbuf={{}, {}, {}, [@ldst, @btf_id, @ringbuf_query, @kfunc, @initr0, @func, @func]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) (async) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000380)={0x10, 0x7, {0x80000000, @struct={0x2}, 0x0, 0xfffffffffffffffe, 0x8000000000000001, 0x5, 0x100, 0x7ff, 0xa, @usage=0x5, 0x7fffffff, 0x3, [0x20, 0x7fffffffffffffff, 0x7fffffffffffffff, 0x3, 0xf62, 0x9]}, {0x800, @struct={0x7, 0x21}, 0x0, 0x7fffffff, 0x7fff, 0x6, 0x6, 0x1f, 0x80, @usage=0x561000, 0x1000, 0xf0000000, [0x3f, 0x200, 0x0, 0xfffffffffffeffff, 0x8e9, 0x9]}, {0x3f, @struct, 0x0, 0xffff, 0x6, 0x80000000, 0xfffffffffffffffb, 0x0, 0x20, @struct={0xe1, 0x86}, 0x8, 0x0, [0x100000000, 0x5, 0x8000000000000001, 0xfffffffffffffffd, 0x200000000002]}, {0xeca, 0x80000000, 0x8}}) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpu.stat\x00', 0x0, 0x0) openat$cgroup_ro(r4, &(0x7f00000001c0)='memory.swap.current\x00', 0x0, 0x0) (async) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r3) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000600)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}]}, 0x24}}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) (async) write$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0), 0x9) (async) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f0000000780)={0x1, 0x15f7, @start={r2, 0x1, "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", "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"}, [0xd1f, 0x7fffffff80000000, 0x40, 0xffffffff80000001, 0x8, 0x8000, 0x5, 0x1, 0x1, 0x2, 0x4, 0x7, 0x80000000, 0x4, 0xfff, 0x7f, 0x0, 0x0, 0x6, 0x8000000000000000, 0x8000000000000001, 0x9, 0x7e, 0x6, 0x7f, 0xfffffffffffffff8, 0x7fff, 0x5, 0x4, 0x7, 0x8000, 0x0, 0x7fffffffffffffff, 0x575, 0x100000000, 0x3c5, 0xfffffffffffffffe, 0x8, 0x4, 0x7, 0x1017, 0x1, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6, 0x40000000000, 0x10, 0x9e3, 0x4000, 0x5, 0xffffffffffffff01, 0x6b44e6a7, 0x0, 0x9, 0xfffffffffffff001, 0x7b, 0x0, 0x7fffffff, 0x5, 0x12, 0x20, 0xff, 0x1, 0x6]}) (async) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r8, &(0x7f0000001c40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000480)="dc", 0x1}], 0x1}}], 0x1, 0x0) (async) r9 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0xc}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) (async) sendmsg$RDMA_NLDEV_CMD_RES_GET(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001580)=ANY=[@ANYBLOB="1000000009148307"], 0x10}, 0x1, 0xffffff7f00000000}, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r9) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000000)=[@in], 0x10) (async) r10 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r8, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={r11, 0x4}, 0x8) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r12, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) 55.686621976s ago: executing program 3: bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) 55.581217623s ago: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x1f}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x4}, @NFTA_EXTHDR_LEN={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r1, 0x400000001ffffffd) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}}, 0x0) 55.438912933s ago: executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x400) (async) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x3}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x2}, {}, {0x4}}}, &(0x7f0000000200)='syzkaller\x00', 0x6, 0x1003, &(0x7f0000001e40)=""/4099}, 0x90) (async) r3 = socket$inet_dccp(0x2, 0x6, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x4d, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x11}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) close(r4) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) (async) accept$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x0) 54.356512288s ago: executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002100)=@newlink={0x268, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x7, 0x0, 0x66e99}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x48, 0x2, 0x0, 0x1, [@IFLA_HSR_MULTICAST_SPEC={0x5, 0x3, 0x8}, @IFLA_HSR_MULTICAST_SPEC={0x5, 0x3, 0x3}, @IFLA_HSR_MULTICAST_SPEC={0x5, 0x3, 0xfd}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_SEQ_NR={0x6, 0x5, 0x8}, @IFLA_HSR_SUPERVISION_ADDR={0xa, 0x4, @broadcast}, @IFLA_HSR_SEQ_NR={0x6, 0x5, 0x1}]}}}, @IFLA_IFALIAS={0x14, 0x14, 'veth1_vlan\x00'}, @IFLA_VFINFO_LIST={0x1e0, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x4, 0x9}}]}, {0x8c, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x2, 0x5, 0x9}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x6, 0xb9}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x8, 0x2a}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x1, 0x6}}, @IFLA_VF_RATE={0x10, 0x6, {0x5, 0xeca, 0x2}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x8, 0x8001}}, @IFLA_VF_MAC={0x28, 0x1, {0x0, @multicast}}]}, {0x28, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x4, 0x2}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0xffff, 0x1000}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x5, 0x8}}]}, {0x44, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x6, 0x302}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x10000, 0x1}}, @IFLA_VF_MAC={0x28, 0x1, {0x7ff}}]}, {0x28, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x800, 0xba18, 0x800}}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x80000001, 0x100000001}}]}, {0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x7, @link_local}}]}, {0x80, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x7, 0x2}}, @IFLA_VF_MAC={0x28, 0x1, {0x20d9, @remote}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0xff, 0x3}}, @IFLA_VF_RATE={0x10, 0x6, {0x7, 0x2, 0x1}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x2, 0x3}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x0, 0x4}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x3, 0xe3f}}]}]}]}, 0x268}}, 0x20000800) 53.950261902s ago: executing program 0: r0 = socket$qrtr(0x2a, 0x2, 0x0) getsockopt$sock_int(r0, 0x1, 0x20, &(0x7f00000002c0), &(0x7f0000000300)=0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000300)=@framed={{}, [@printk={@lu}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x5}, 0x8}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600200000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0x44115}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x1a0, 0x10, 0x713, 0x0, 0x0, {{@in=@local, @in6=@loopback, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xee00}, {@in=@broadcast, 0x0, 0x32}, @in=@dev, {}, {}, {0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x96}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x1c}, @algo_auth_trunc={0x4c, 0x14, {{'digest_null\x00'}}}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x24004040}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f0000000940)=ANY=[@ANYBLOB="ea5ed0182d89439922a48d38939f643fd672d7fc8b77778537330c9ef96d747b68e200a3d9bb0f57dba5215fd10e2981172cad4ed26243e2ecc23bdbe9494e41a0002850c545798a617564", @ANYRESHEX, @ANYBLOB="000026bd7000ffdbdf25020000000500050002000000080003000100c91e63695af4d2230000090000008a830000ffffffff0800020001f0ffff0500050005000000080002000200000005000600810000000800040005000000040004000800020004000000"], 0x6c}, 0x1, 0x0, 0x0, 0x800c045}, 0x4000004) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="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"], 0x1d8}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x25, 0x1, 0x0) setsockopt$TIPC_IMPORTANCE(r6, 0x10f, 0x7f, &(0x7f00000000c0), 0x4) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x400000001ffffffd) r7 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) r8 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r8) sendmmsg$inet6(r7, &(0x7f0000000f80)=[{{&(0x7f0000000800)={0xa, 0x4e21, 0x401, @mcast2, 0xfffff000}, 0x1c, &(0x7f0000000dc0)=[{&(0x7f0000000840)="5d6a6f07360fd268ae3901e88b35030c9c772c19cb7450a070aca842abb472eaaccc0646d026f37df5c7e7", 0x2b}, {0x0}, {0x0}, {0x0}], 0x4}}], 0x1, 0x0) 53.740064373s ago: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x978}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000810}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000000100)={'security\x00', 0xa5, "6b7f55d5811b2f0b4c7a6b3b18403f81690c92ad90bcd9bddf3576d51300559bd8a88d82f7cceea00a42971c2896a39931e06663670a20b844202393ef90848777a166380b47f4e3c44261c9f3193763c361b65c58d8080e6697f9ce97a8d625ec8be5d17f7812df5a55a334432e661710920b352f1fe43fdfbdcc385a852a938a4bf98ee89ea7664a2795d7d94271bb2dc252e9237991a0ca8565a596073ad066b0c4fa6a"}, &(0x7f0000000200)=0xc9) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000f80)=@nat={'nat\x00', 0x19, 0x4, 0xce8, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200004ec], 0x0, &(0x7f0000000240), &(0x7f0000000280)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x2, [{0x9, 0x5c, 0x9000, 'pimreg1\x00', 'veth0_to_team\x00', 'veth1_macvtap\x00', 'veth1_virt_wifi\x00', @random="d919b617856c", [0xff, 0x0, 0xff], @remote, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 0xbe, 0xf6, 0x12e, [@nfacct={{'nfacct\x00', 0x0, 0x28}, {{'syz1\x00', 0x144}}}], [@snat={'snat\x00', 0x10, {{@empty, 0x969b850f8285f57a}}}], @arpreply={'arpreply\x00', 0x10, {{@broadcast, 0xfffffffffffffffd}}}}, {0x11, 0x48, 0x809b, 'syzkaller0\x00', 'virt_wifi0\x00', '\x00', 'pim6reg1\x00', @link_local, [0xff, 0xff, 0xff, 0x0, 0x0, 0xff], @empty, [0x0, 0x0, 0x0, 0xff, 0xff], 0x6e, 0xa6, 0xde, [], [@arpreply={'arpreply\x00', 0x10, {{@dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, 0xfffffffffffffffc}}}], @arpreply={'arpreply\x00', 0x10, {{@link_local, 0xfffffffffffffffc}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{0x11, 0x9, 0xf5, 'lo\x00', 'pim6reg0\x00', 'bridge_slave_1\x00', 'veth1_macvtap\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0x1a39f388a25be800, 0x0, 0xff, 0x0, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], 0xe6, 0x156, 0x18e, [@quota={{'quota\x00', 0x0, 0x18}, {{0x0, 0x0, 0x6, {0x7fffffffffffffff}}}}, @realm={{'realm\x00', 0x0, 0x10}, {{0x6, 0x8}}}], [@snat={'snat\x00', 0x10, {{@remote}}}, @arpreply={'arpreply\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}, 0x1db05674f625f2aa}}}], @snat={'snat\x00', 0x10, {{@empty, 0xffffffffffffffed}}}}]}, {0x0, '\x00', 0x3, 0xffffffffffffffff, 0x1, [{0x3, 0x49, 0xf7, 'veth0\x00', 'pimreg1\x00', 'lo\x00', 'netdevsim0\x00', @random="226c02d958bb", [0xff, 0x0, 0xff, 0xff, 0xff, 0xff], @local, [0xff, 0xff, 0x0, 0xff], 0x856, 0x856, 0x88e, [@u32={{'u32\x00', 0x0, 0x7c0}, {{[{[{0x0, 0x3}, {0x6, 0x2}, {0x3, 0x1}, {0x200, 0x3}, {0xad50, 0x3}, {0x1, 0x3}, {0x3b, 0x1}, {0xba, 0x3}, {0x2, 0x1}, {0x0, 0x2}, {0x3f, 0x3}], [{0x3, 0x2}, {0x7, 0x4}, {0x6, 0x1f}, {0x6, 0xfffffff8}, {0x7, 0x4}, {0x8, 0x123}, {0x0, 0x9}, {0x4, 0x7}, {0x1, 0x6}, {0x2, 0xfffffffe}, {0x4, 0x9}], 0x1, 0x8}, {[{0xabe, 0x3}, {0xffffffff, 0x2}, {0x0, 0x1}, {0x9, 0x3}, {0x200}, {0x422e}, {0xffff8001, 0x2}, {0x4}, {0x2, 0x1}, {0x8}, {0x59, 0x2}], [{0x3, 0xc38}, {0x40, 0x1}, {0x1f, 0x1000}, {0xb9, 0x5}, {0xd4466bb, 0x55e2}, {0x1ff, 0x2b}, {0x6}, {0x3, 0x4f97}, {0x6, 0x1ff}, {0x80000001}, {0x4, 0x8000}], 0xa, 0x8}, {[{0x4, 0x1}, {0x42ca}, {0x1, 0x3}, {0x7}, {0x1, 0x3}, {0x23}, {0x2, 0x3}, {0x3, 0x2}, {0x98, 0x3}, {0x40, 0x3}, {0x0, 0x3}], [{0xfff, 0x8}, {0x172, 0x3}, {0x0, 0x1ff}, {0x7, 0x8}, {0xdf0c, 0x4}, {0x80000001, 0x9}, {0xe01b, 0xffff5ad0}, {0x0, 0x1}, {}, {0x9, 0x2}, {0x8, 0x7}], 0x5, 0x3}, {[{0xffffffff, 0x1}, {0x7}, {0x1}, {0x1}, {0x1, 0x2}, {0x6}, {0xfffff000}, {0xc43f}, {0xfffffff8, 0x1}, {}, {0x0, 0x2}], [{0x3167}, {0x1000, 0x1}, {0x0, 0x2}, {0x6, 0x7fffffff}, {0x0, 0x80000001}, {0x3, 0x8}, {0xffff0b07, 0x7f}, {0x4, 0x8}, {0x8000, 0x3ff}, {0x8a0, 0x8001}, {0x3ff, 0x400}], 0x7, 0x3}, {[{0x9}, {0x8}, {0x100, 0x2}, {0x401}, {0x3ff, 0x2}, {0x1, 0x1}, {0xffffffff, 0x1}, {}, {0xd57c, 0x2}, {0x1, 0x1}, {0x2743, 0x1}], [{0x5, 0x4}, {0x0, 0xe3}, {0x1, 0x1}, {0x7fffffff, 0x7ff}, {0x7fffffff, 0xffff}, {0x20, 0x7f}, {0x401, 0x100}, {0xfffffa8c, 0x8}, {0x9}, {0x401, 0x2}, {0x8, 0x1}], 0x6, 0x3}, {[{0xfffffffe, 0x3}, {0x3, 0x1}, {0x8}, {0x800000, 0x3}, {0xbd}, {0x1, 0x2}, {0x4, 0x3}, {0x200, 0x3}, {0x81, 0x3}, {0x7f, 0x2}, {0x5, 0x3}], [{0x2, 0x6f}, {0xe8, 0x7}, {0x10000, 0x7fffffff}, {0x8001, 0xffffffff}, {0x0, 0x90c0}, {0x80000001, 0x7}, {0xffff, 0x3ff}, {0x4, 0x5}, {0x3, 0x39}, {0x96b3, 0x8000}, {0x6, 0x3}], 0x6, 0x2}, {[{0x69}, {0x20, 0x2}, {0x4}, {0x3, 0x2}, {0x20}, {0x80, 0x2}, {0xffffffff, 0x2}, {0x6, 0x3}, {0x59d9cf0c, 0x1}, {0xea}, {0x2, 0x2}], [{0x6, 0x9}, {0x0, 0x7}, {0xff, 0x5}, {0x2, 0x3}, {0x569f, 0x7}, {0x200, 0x3c}, {0x0, 0x20000000}, {0x3, 0x40}, {0x8, 0x4}, {0x2, 0x62a}, {0x9, 0x2}], 0x8, 0x3}, {[{0x62c4, 0x3}, {0x9, 0x1}, {0xa207, 0x2}, {0x9, 0x2}, {0x80}, {0x4, 0x1}, {0x80000000, 0x3}, {0x0, 0x3}, {0xb31, 0x1}, {0xad73, 0x2}, {0x10001, 0x2}], [{0x6, 0x2}, {0x7, 0x8}, {0x80, 0x2}, {0x5, 0x3ff}, {0x1, 0x8}, {0x5, 0x71}, {0x1000, 0xfe8}, {0x7, 0x4}, {0x1, 0x81}, {0x9f3, 0x2}, {0x7, 0x9}], 0x6, 0x3}, {[{0xfffffffb, 0x1}, {0xfff, 0x2}, {0x4, 0x2}, {0x5, 0x2}, {0x2, 0x3}, {0x1}, {0x0, 0x3}, {0x1, 0x2}, {0x1, 0x3}, {0x7fffffff, 0x1}, {0xfffffffd, 0x2}], [{0x38, 0x2}, {0x9, 0x4}, {0x6, 0x7}, {}, {0x8001, 0x1}, {0x7, 0xf58}, {0x401, 0x632}, {0x3, 0x4}, {0x4, 0x1db2}, {0x8, 0xac}, {0x401, 0x7}], 0x0, 0x6}, {[{0x579, 0x3}, {0x2, 0x2}, {0x8}, {0x1a, 0x2}, {0xfff}, {0x7}, {0x8}, {0x6, 0x3}, {0x4, 0x1}, {0x4f, 0x2}, {0x401}], [{0x1f, 0x6}, {0x40, 0x3}, {0xffffd2d2, 0x7}, {0x1, 0x8000}, {0x80000000, 0x2}, {0x9, 0x4}, {0x7, 0x8000}, {0x9f, 0x7}, {0x5, 0x8}, {0x96, 0xfff}, {0x5, 0x3}], 0x2, 0x7}, {[{0x8000, 0x1}, {0x1, 0x2}, {0x6, 0x3}, {0x400}, {0x40}, {0x2, 0x1}, {0x7}, {0x3}, {0x43f2}, {0xf6ca, 0x2}, {0x9, 0x1}], [{0x401, 0x800}, {0xfffffffe, 0x40}, {0x81, 0x200}, {0xffffffc0, 0x4}, {0x99, 0x101}, {0x6, 0x2}, {0x80000001, 0x1}, {0x27c9, 0x5}, {0x2, 0x9}, {0x800, 0xa}, {0x7, 0x2794}], 0x5, 0x6}], 0x4}}}], [], @snat={'snat\x00', 0x10, {{@dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, 0xfffffffffffffffc}}}}]}]}, 0xd60) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_RESET_LINK_STATS(r4, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x28, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4011}, 0x11) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000001100)={0x7, [0x6, 0x401, 0x2, 0x3ff, 0x8a6a, 0x49, 0x2]}, 0x12) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001180), r0) r6 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000011c0)={'wlan1\x00', 0x0}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000001200)=0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001240)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001280)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000012c0)={'wlan1\x00', 0x0}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000001300)=0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000001400)={&(0x7f0000001140), 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x68, r5, 0x800, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void, @void}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r6}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_PID={0x8, 0x52, r8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r10}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r11}, @NL80211_ATTR_NETNS_FD={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x101, 0x1}}, @NL80211_ATTR_PID={0x8, 0x52, r12}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000014}, 0x20004800) connect$inet(r3, &(0x7f0000001440)={0x2, 0x4e23, @local}, 0x10) r13 = accept4(r4, &(0x7f0000001480)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, &(0x7f0000001500)=0x80, 0x0) getsockopt$SO_J1939_ERRQUEUE(r13, 0x6b, 0x4, &(0x7f0000001540), &(0x7f0000001580)=0x4) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r13, 0x84, 0x66, &(0x7f00000015c0)={0x0, 0x9}, &(0x7f0000001600)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000001640)={r14, @in6={{0xa, 0x4e23, 0x4964, @remote, 0x81}}, 0x6, 0x5}, &(0x7f0000001700)=0x90) r15 = socket$nl_netfilter(0x10, 0x3, 0xc) listen(r15, 0x719) socket$inet_smc(0x2b, 0x1, 0x0) r16 = socket$inet6(0xa, 0x3, 0x4) sendmmsg$inet6(r16, &(0x7f0000003b80)=[{{&(0x7f0000001740)={0xa, 0x4e22, 0xfffffffe, @mcast1, 0x5}, 0x1c, &(0x7f00000039c0)=[{&(0x7f0000001780)="c700e62a40d1ca95c21a46842fb6069a8ea161fc46ac2902c8b74192bbfcfa4331ad29834ba52e411afe3a22edf1e4baaa6a4b305e822d0cb1512105ba3c322af20842ef6a97a298797ab162bcab00432b1c95ca6ca9b3cea519fa99cb20b4df3b164bc13a3d84a2684e8820f6d800d28c538024a425f620a99c4fc58662dd86444f759ad953f24d0d962330b7247a92", 0x90}, {&(0x7f0000001840)="24f1ecc74472c872fc410dd2547c96b5a724f0c9633bbd04dfb26b841e8a55cffbdbb421ec7c9036e06b05f1b11bc3be1f115c24eedba4585942f6ca5ccaea46df63e23fe6d93e2e58fa6283b1a61756e6d8cade8a85c33ed00f53f05439ad10bf98298cd22e1ed3daf274b0e7e1445b92a4f05131cd21ca067f0b9ec448b87ee4fc21cc4fb10b4126a5a9b83891f1d25ede23b282a60f8a8039f2e4d717a9cf4b7dbf8d54892aee3f634582dfbe296847303de324261b3f44453b2f3e7f0a33bbfb260c0f13c9dbfb55d0566e0d0567268c996a3ac6b8fcb19de400d4774cd5c9f5839ec244c3d1d55c9096db0c437154aea43e94c9f4e1f98c02b466e00d1d7f6c0a8653f2099d6db4955580d41c87d01a2c77ad855c91bae03245fba9d09a7245cbc7ac9e7911d57bf3057371733667f2ce2d5ddeb9e68291580e143178bb01a6090f30aba4abe9dccf8aae6cb0a205bbd3ae1488b8cc1b5cf0738ae009f1537808c482ff4c5d80e5afaa6aa40898d753f2629365f0a759944c04e0adbf967ce8efa0f5a5644f184018ca0a0ed3c15a822db4d78b26ee962cae074f90510bfd10720d9edac70055b7d2b3c8a80bea32865b376fdee67e4edf93efbde5e7005c07d89b3299cb1a23544acbf73e6634748cc6bcce2a5a4e0ab15b6ae5106f01add2b59c33f1074ab7ae97283281a1d0206f23c5b9c17fe5bec6404a41465874d0d6dbb1efe5ebfa9c35be2ca66e23fc87160ea200cda36c5a18b4d8809d69e6f379cefa1dc680f55dda94128011f591d4afc96d2ffa269a07ae7bc691c6f197db8de8efd6fa2e7e6de46fde5364a713945498571cc6ced5630e56612a9d2ad494f1821821ddfbb40e292f45ef2095b11544416b0040042c10eb69cd34c07303748b75dfdf239cd0135f86fe20a36bdea7d90cde7c99febe910f0b7494f454b2253cc1148d16ba7fe9f8af60ad67e738e4c8effd9262189710a9a726ec76b8ca825c122d668db1c070c3907ad102407aa44c5809685364d2992ef20e14afbc4b319659166ed96c80f3b46993fcd6e3cde0d1843843437c8883aa926f40dc51ec4de0fc784ee4b0be49034920086aaea0a50eba00d70b252f40d765fcabb1a2def8ae221eb6caa89ec22a6f23e685048f738de408c1d5c3319341db6889cce7be86584d8bb2f3ccfbf6974557d2d53746457fcc7db8cbdc270a6f99d6bf6081267f9edaeb4926643b8af863d6354625faefc0692f9e7d6eb595406e2befc0ba07f7e10bee097951daa703f0dd3fa8f7dbf643b9d3bd980a1e626b6d9b30995f6c85b1e93c892144e79a6099bae044965a6ef8ebd69c46e2d5dcd96c3940b7593ab0ec8c71fcdfbf997cbf5412cbf50f8f1e75bfa69256350b55bdc871279098bd6294ed4eafcda27c12b1f8fc1ce77017cd5f4b31a195c802aca2bbb9244ee2e1de52de23120b44d13f555d5a174bc68473a8186b573562fe9dddf30605ef6b0aa77da9ed9aa22648838aa35c3a12e6166bbf6af0491019b3501d9554345687b162282917fac81f7ae02b6a0eea2b9c082daa1e074d31d88ac237e1869d2b4a081d2131bc63a3c6785dc89b3f44e25d093c8e41dbb9ed93be543ed1e4739e2c1873bebb86f61e73cb902953ee3de4518fb6c04f3be92f13598823c982a33140d269de328fceeb167802d249c0ffd8acf3c11e08050357f6a8f6f0c2c3580a192b4bf1110db397faf0fe0c1e5b5ad6696f7ff2578db2010bcf85e68d89d23ef9841b94549ec92f26486adbbce815936f40966f7269e7ad8b348b1e268df0719a96548f73d8475b15b1fa5c0268210c86c6a9cd4f71852ba2547be67c4ad1d01649e085d67ef909f6d3c22e57c5094569105700871240fe75bf777698b80cf75d17adc4d5d9cab5910d67b9b1912b18246882e6616d5b7650a325729aaaea3c17eae92a226cebfdef228e0b58e9f14bcbef16d72208c788d20650c3c447f1e7c156b75fadf7a5618b55e9c362b86a782e9fa558c67c5cb950070d6b92dcbb25a2d8e8044c022eb52b0af0ce7a9c57db778552355ceb5baa1321e79ba8092181ff2c929b0a512c679280a15ac7f7097d0509ecb420af8b224d8f316d370e1b14de60508ae0610704dbb3d375c4cc31c91aefc7d4671236d44d88b3d876ed817400f5f17facfb8a2c95269525d806d287cb088e4065101e2931f18b6695431f7a4737b2363f4c5045c41f13cff8473fe06035be9f2c69d42e144b918a9f7f56a203cca4444e36dfe37a87717073b49f7d0e2b77f8f5766e93b73eaf2273d6e00df902ba610a73789f488ff883cdb2f6b0c08a93019679a24dfc8dff82125dd95c56736dc0c4bcabedd15690f320ff5ad7fe2c152250f607be14db737e18970ef22a90c8cf70c1457b34303278797d08582dd082060b99340740ee42d15517c7a2e394a783f1c08e222371e983dbedeb7e8b3cbbd377c33ec026e6bf723e3b96369679c7a73b17cefeeeddb9855c74f26da39520a0c6ca911b5d64d69df867fd719c83cefa6435fe4c4c505afd9976c52e67c113fa85b05280d48b1757e83111ebb316f9a04d19a8191a30fdaac2ef1989e9c6290ac3f14d5c144906a059cb8638647bc9133df598fa777f264e73b413c6e2993c16ad35e46b1806a697fd64263a1363bbead13cd28345b29ab28b94e266d4a3cf0ad2909f1af4c47675ce9e820dfaa010697f8f829921bebc56481ca3436cae73f4d205ba20ad49cd29ab2cf6b7efabf0eafb1bac99cb7c95251044af325aad772a3ccb38961f59a2cd2263b91f4316fba573f6972329cef99abb46639391fa6cca8cb94961287334aecbcdd4add4429b68ca1d24ca150faa222ba8b3c4d63bd18e2497d01e05fc484c62189995458c996ca2f57fbc254d3251394f4274f7eeb92ae5c0e0116d34ec0306baf8c55afa5d1d4bb218e50175e5de4ef2ae16f59fcb1a50d83cf5a94c9d35b8de04f8e93a510a6ccaf62910e8bfca6d8a95a0282c50312573cae6832a589d3bf42914bbd419e91138627991ad2b7f9dd0ecf143a2a421faf0660375d01830f5aa0f299d87d90f5723d5643a08936fbc0d7fe242b9403cd254be97e4b3495cd69ebea60f11f3c12bb2e935a81eb940de4ba905e366a4e5616aae63d77b9e09fcf052a834150e829db46b802617dd707f191479aad618911e154493b129510cf794a3ba06feba318638a71ab8b96754ae25a4d2d9ea64eb5fd2dc39a6898ec3ba399bdd559f0b414f6913044e3874c2c96a71c766c892a506d7fcbfaa671f876901f126099f72abeb74e2038357b7c8f0f239830116cdd5e18a723ecbc1e8241ae4294490bc4707321ed72bd362d1faa9ab4ca88d09db17d4fde6538de785b7326afc3124f626b46723c01736de28f113012391d5cfce9e9a64b93604a80414b0afbc9f083d42f13aa3098134737bdb200f33f8f0c7919d01a480eaae41a8ec3a4246e45e0ccd7e326a4f35160b01bc10e964a0404c27a1f70f1d023c4eb5b7a40485bc699e51752134eef315712d299dde57264b041fe1123dcf5f449c8dab0f02260f1abb3f9821a1af66516e8099289bd7106879f38d364059546486e21380a4dd947ec9d460060b6ba8b53cae9e07696bf58acdc9480d87ff325ef1059726838ab4de616d059c9dfa268ea401dbcecc9483207569ff6434d60a76b7068395c49f0ec59c7e98f20655884e76e313cdcea9ff80614a6c9e023cdd271caf33124340913427767d0c53ba0ba1c038be0774dff420dd210b7447352e4b22e12fac0bc67d8b33ed1a50b249baacea8753075fc6b13fd35892ca7798b2cdd1a834ba24071d3241d1fd68f7ce91d26d0c1677cfe36e10af3ef2f1fd50d2606ea93cb139fd2075593639d95988afaf67cd538891f5c95f0dbf4c65873763c42ea222d4ac08f5ad25137605e8a10a67d80b4ab98ee569c85bf812ece03894199aca5637e642e7215b3b1e3f207602721dc6c05e2aaac0fa22af36cab46e43235445aa8f59129f0a995067fc7808264a3c6284b03afd348af7f38c1be130ac4fdfb1f96f71879a82dba6ef380b4e8ec4dd0cb5a83a9679f82a88de6ace3ffc11dc399d4c68abff9f8ca39ad5b2078b169cde799d830ba65ac6cd7d5409136573c048a2c0f99be89493880c80574bb88603ebd121e68fc7945909cea5c3f1157b950ea13830a3566d86db8ab1a2a26c159fcb52df06cd95270d59a5fb4e4a5c7857253e81740108653763a616b21487b08960bd3dd4cad3ef44f7d09e92908d58b47c7e024430fd06a1fefaef6f086cd74009c23208a5f8bc3fc2141b85d24f4c10c5468dff73437595d92b7c3b164f9f1a57db3f9c87823449fc322d5c22b25128d56bc4e4e7135f4b97d16ab9a884b4517de389e67f5ea4297a62a4ccd84dc2d7e77186d74918f0ca8f142dca47821acf79da954782ef147568dd309260b315a6f08d5a86ce1443cd8b8eead677f538c07b4107b85d36cd68d4b022d5e4667d1b3404fc2837e907c7cb691a4f30a10a759b166f557dbc5dfd92ed405662c1708d868096c1f4546412f1fcd4fa4b3f8c5fa9db6fe23024b7b8f2798ded7fca88c4d3de961f9801bc9e8b65f8b55aeb1cb1162db3606821e68643d8ed4ce060aa92b80dc904525607dc5e4883e74d3c78df0884ddc9f56fd15e34c9728821d63d7f74c4e73a25d83a8d3d2a0be917a4bd58263d15706e84f2b488cb29cd0e76be495608143dbcfddb6a82d68bb60cd21a1f7b5dfcbaad46211f97fd59a21c6db25674529092dc2d84b7a0804a45d63f26cd21a1006c401273e9dc7cf5655e611de526b1c0d72fa34b4f93a7fda794d3d0db674fb70446c837f203564359199a497e6a0a9a195868d01dd0d1282afb2fa2dfa0e53ff95cc2e0fa53e74b4bfc7f81bb6f0b88f6efff9703edcaf98fe5269f7c422fba2c3aec7fecf15bcb14f65c1cc5fcf6431be1cfb15a53c82c94789667663d7161a1c6f2c8891be06f0c1acdac6453d7264e48fdb46f92c330390467639563daf358cce6af10ab030b74fdc8d2868140b4811f63f6ace9e56b15f4377609d253cab4cf4ce69332387956468ffce297a7b11778d3bb565a9f7d3d55bf001e0694dddf10ab41d33a20681c446487979d7ea22db8b4e8201a876c620ef4adbc19a65a368b986c46ccbb061c942350eb14aea173afb6a84c1559b70bb5fe7b74c0664d485a63ec4881c1042059e5fba6472b349e18a614cfc46e0febddceebc762f4f11a78fc924b80749d0078be078a5027bc89124d8c700f80b193ce174ffb9504530ae6047400e01e5d5942facc90099cb588417dba0a7bdb3242092f1c970604aea152af38850b759e10fbf6b19b6b3a99988bceb994f336309fad2443487bc22ca40ba6fa475cd21a92fa74f4ea15f99ce8ad30f9a00c7ffd56b489287b62f122e5a6d71ce92676d3ebdf7dfb49e7687362b68bea72f92bedd3416241130f4b081a385f5aff2f48eb5e9eff51b82ccf992f3618889f1bbd08b559bc438f1b7a47979d89131de98c0f8e394c73218000e0800ec525a971d8a51dc1517b76282a1f0ff7a26a31173e27c6817347d27dd5a3094535cd6f1e0d7710f37304770444e5e2e439c5accc1d112c5990255f1af286cd47fcb432cbcaba74409e8c282b5193fd9b853669ec04e60ff4ebfc76ac56dc82ad315307a8dec5f12c13d633e0c0a1fc517970be60be344bdd53ae87a2a11d070a23cc0957349f9a409ed55180aa34f65b6bc80d7b3f812d1f2fe0b25303b81ca3a2aae8", 0x1000}, {&(0x7f0000002840)="ffb89af1361ad026d6d52c1deafcd793f4b3d04f2571a60d04b557326fb2520a4c8146e339bb49093a557e150652683708a0eec794ea369a5117edceecc35f81f0c60295b59320286515e52833a22732067e2b43c4d0d0fb67fb9336fc0255a104", 0x61}, {&(0x7f00000028c0)="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", 0x1000}, {&(0x7f00000038c0)="45f9a9716b3275457b5ef85d63bcfe6da1c4755c255874782c3ac522d0be7245d772e94794618afda808d779c180bfc3f52792b77b1d187fa4e794f653f68d0945cf1007bd399007eca3c5df69161748340dd8826c65c66e5dcd", 0x5a}, {&(0x7f0000003940)="a28c59690429c6fff34506631bd510698ce6507a5b52d75b1f708803b8b2f17cf03b88f98b422c60f743e2587bb4d59a8cfe82974445848bfb83da24f79ecb4041a9711bdf75a20530c53f2feb1228745b4556f5f0ec1e8e51147d927fb98807bab5ad01016de380550c242e749c19", 0x6f}], 0x6}}, {{0x0, 0x0, &(0x7f0000003a80)=[{&(0x7f0000003a40)="eae5a44d645be73661c543b5f65eccb0c24ef233e6c6a402bd7d948563a287bc95ece6e0f30027796492ef5cb43a250a738259fd08", 0x35}], 0x1, &(0x7f0000003ac0)=[@hopopts={{0x68, 0x29, 0x36, {0x87, 0x9, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @calipso={0x7, 0x38, {0x0, 0xc, 0x6, 0x3, [0x0, 0x3, 0x3, 0x4, 0x3, 0x1c9]}}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x2, [0x0, 0x0]}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x6}}, @tclass={{0x14, 0x29, 0x43, 0x40}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1ff}}], 0xb0}}], 0x2, 0x800) socket$inet_tcp(0x2, 0x1, 0x0) 53.684814703s ago: executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x23, 0x0, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000)='g', 0x1, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000001580)=ANY=[], 0x40e2) 53.587610619s ago: executing program 0: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000020240), 0x10010) close(0xffffffffffffffff) socket$inet6_sctp(0xa, 0x0, 0x84) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r1, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000002"]) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) 53.518032498s ago: executing program 2: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet6_group_source_req(r0, 0x29, 0x35, &(0x7f0000000700)={0x0, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) 53.386788688s ago: executing program 2: bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x1c}}, 0x0) 53.294294164s ago: executing program 2: r0 = socket(0x10, 0x80002, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$caif_stream(0x25, 0x1, 0x0) getsockopt$bt_BT_VOICE(r1, 0x112, 0x10, &(0x7f00000001c0), &(0x7f0000000200)=0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b40)=ANY=[@ANYRES8=r1, @ANYBLOB="9516a348340d668c7dfa2927396cd41000643555c409aa296f06ad58e8065b289073aa9c62cea86c12f5a8054a33bd7d2d8edc346be048be0589a68f0580c738fc71e7f1b04a1350aeac5c464e8e048f994ab9b62de9ad17d46bb2a3ef939f2b78490bdb561224318993b38e936c8bcf276b61c4af30473151f56149b4b3d7c4753502298f1f3fda236b530480d15f5d4161540ad1bb005910b9d0d1f2edf63cc1a5d04b8b83451398f3fd1b60bc500e98e11ee78e2b21874665f1a0b97c4e", @ANYRES32=0x0, @ANYRES16=r1, @ANYRESOCT=r1], 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x4040010) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000070000100010000000000000007160000", @ANYRES32=r5, @ANYBLOB="0c00018008000100000004000c0001"], 0x30}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x30}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000b00)={'vxcan1\x00'}) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r7, 0x29, 0x46, &(0x7f0000000000)=0x10001, 0x4) sendmmsg$inet6(r7, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x5, 0xfffc, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, r2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000010000000000000100000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/1752], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000080)={0xfff}) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) sendmsg$inet(r9, &(0x7f0000000ac0)={&(0x7f0000000940)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000000a80)=[{&(0x7f0000000980)="462bdc693833d02b144dc4015e", 0xd}, {&(0x7f0000000a40)="3711", 0x2}], 0x2}, 0x40000d0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) 33.435365825s ago: executing program 4: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000020240), 0x10010) close(0xffffffffffffffff) socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000002"]) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) 33.241094437s ago: executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0x19, &(0x7f00000011c0)={r0, 0x18000000000002a0, 0xeff, 0x0, &(0x7f0000001240)="b9ff03076804268c989e14f088a8657986dd", 0x0, 0x5f, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 33.087434366s ago: executing program 0: syz_emit_ethernet(0xd6, &(0x7f0000000240)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x29, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x2a, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}, @cipso={0x86, 0x48, 0x0, [{0x0, 0x7, "4b6cefc500"}, {0x0, 0xb, "df61168c24ac88ad07"}, {0x0, 0xa, "2189ea43a2149b84"}, {0x0, 0x12, "ffd11634eea26b0faffa0dea2e903528"}, {0x0, 0x9, "02a20948fd7406"}, {0x0, 0xb, "ccf0294e2a3bdb4aa4"}]}, @ssrr={0x89, 0xb, 0x0, [@private, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}, "a811a23da43974ff"}}}}}, 0x0) 32.523210644s ago: executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x400) (async) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x3}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x2}, {}, {0x4}}}, &(0x7f0000000200)='syzkaller\x00', 0x6, 0x1003, &(0x7f0000001e40)=""/4099}, 0x90) (async) r3 = socket$inet_dccp(0x2, 0x6, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x4d, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x11}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) close(r4) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) (async) accept$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x0) 32.455374409s ago: executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x0, 0x4}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500"], 0x0}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x54}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e14000200080007004a9a0000080027"], 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170000014000280080004000104000005000a000100000008000a00", @ANYRES32=r5], 0x4c}}, 0x0) 32.005555743s ago: executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000020240), 0x10010) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3800003, 0x11, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0x40305839, 0x0) read(r2, &(0x7f0000009180)=""/91, 0x5b) write$binfmt_elf64(r0, &(0x7f00000006c0)=ANY=[], 0x440) 31.954536714s ago: executing program 1: socket$kcm(0x29, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000d8ffffffb703000008000000b70400000000925e850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x371, &(0x7f0000000380)={&(0x7f0000000040)={0x20, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x3000000}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r0) socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'geneve0\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r2, &(0x7f00000000c0)="3f050e007028120006001e0089e9aaa921d7c2290f0086dd1327c9167c643c4a1b7880610cc9", 0x26, 0x0, &(0x7f0000000540)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@mcast2, @in=@empty}}]}, 0x80}}, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x4c, r5, 0x200, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0xffffffffffffffa9, 0x6, @mcast1}]}]}, 0x4c}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="8b3300000000000000001500000008000300305ce2b807eca1d6027a031f20243060a7f41e0403da2f4a9952d88e41616d4b0b31538f61ea32a2fa7d26e9bb7b5b965cede7066f5b5b2321c3a18a8df96f8155ac4510547ab61a9c13c102f583fccdcab0ee712f1f6651a25ac1e554c0c52cbf8bc75ba2dea07ddfd8268bea", @ANYRES32=0x0, @ANYBLOB="0800178004000280"], 0x24}}, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000340)="0322f1fde6d843090a306c5b4d986037", 0x10}], 0x1, &(0x7f0000002200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000051c0)=[{{0x0, 0x5, &(0x7f0000001c00)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000005200)=ANY=[@ANYBLOB="0001000000000000000000000000000000000000a90000004c29ef4f7a96f263b46c720abe53d401cbc43a36f31a4354d5a9924f4360deec07340942c7dea7e10076d90019c18708463ab4442355a6955ffa816cc6c314fa8d3cf4e5661397df386d83ba4b1ab4b9876ccd6826e7e700029f0e907360f799e83d9786f0e65e0ce1ba8cb79f906e375b5079320e149b43ae44d0315ede375b75b11c8a4210c3a00c24f330385c19aade2d43aeb2f63f18b46746c9b857b8f382a8c2b29a000000040000800c000000000000000000000083f8088620aa2016d69d043b43a8d6af68df48c7e10e349291a8b8c45f7d191174c9c7137cc2f86a0d84b558a9000000"], 0x100}, 0x1, 0x0, 0x0, 0x8005}, 0x0) 31.735453104s ago: executing program 4: bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x460, 0x210, 0x98, 0x178, 0x300, 0x98, 0x3c8, 0x3c8, 0x3c8, 0x3c8, 0x3c8, 0x6, 0x0, {[{{@ip={@multicast2, @private, 0x0, 0x0, 'bond_slave_0\x00', 'veth0_to_bond\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xb8, 0xe0, 0x0, {}, [@common=@socket0={{0x20}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@empty, @empty, 0x0, 0x0, 'pimreg1\x00', 'rose0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@rand_addr, @multicast1, 0x0, 0x0, 'pim6reg0\x00', 'dummy0\x00'}, 0x0, 0xc8, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@ah={{0x30}}]}, @TTL={0x28}}, {{@ip={@remote, @local, 0x0, 0x0, 'veth1_to_hsr\x00', 'veth0_to_hsr\x00'}, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x74, 0x30, 0xb, 0x0, 0x0, {}, [{0x60, 0x1, [@m_ct={0x5c, 0x1, 0x0, 0x0, {{0x7}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @remote}, @TCA_CT_MARK={0x8}, @TCA_CT_LABELS={0x14, 0x7, "4614c334e344ae535af2f0a70ddeb37f"}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x3) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) bind$inet6(r2, 0x0, 0x0) listen(r0, 0x400) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) sendto$inet(r3, &(0x7f0000000080)='!', 0xffc3, 0x0, 0x0, 0x0) accept$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001a00010900000000000000008000000000000002"], 0x1c}}, 0x0) 31.597319744s ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x2, 0x4, 0x2}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000f4000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x18, 0x4, 0xfff, 0x89, 0x4e9}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_compaction_try_to_compact_pages\x00'}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b07d25a806c8c6f94f90b24fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x80, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, r1, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000000)='bridge0\x00') 31.243156765s ago: executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003580)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000021c0)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000002080)=""/167, 0x44, 0x0, &(0x7f0000002140)=""/99, 0x63}, &(0x7f0000002240)=0x88) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0xfee4, 0x80fe, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x7c, &(0x7f0000000a00)=ANY=[@ANYBLOB="aaaaaaaaaa50ab7bb127f1adbb0180c200050086dd6028010000a55d00fc00000000000000000000000000b500ff02000000000000000000000000000124208100000000000000000800000086dd080088be00000000100000000100000000000000080022eb0000000020000000020000319560ce7ed773450008"], 0x0) r5 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000040)=0x1c) ioctl$BTRFS_IOC_QUOTA_RESCAN(r5, 0x4040942c, &(0x7f00000002c0)={0x0, 0x1f, [0x3, 0x80000000, 0x7, 0x7fffffffffffffff, 0x7fff, 0x5]}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(r6, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r7, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, '.[-\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_DOMAIN={0x6, 0x1, ')\x00'}, @NLBL_MGMT_A_DOMAIN={0xf, 0x1, '^-\\\'^\xbb.!(]\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x20000080) setsockopt$inet6_int(r5, 0x29, 0x34, &(0x7f0000000080)=0x3, 0x4) r8 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0xc0000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r9, &(0x7f0000003a80)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000a00)="f5", 0x1}], 0x1}}], 0x1, 0x4001) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000009c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x1, &(0x7f0000001a40)=""/4096, &(0x7f0000000300)=0x1000) syz_emit_ethernet(0x5e, &(0x7f0000003680)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd6000000800283afffe80000000610320489e15c4150000bbff020000000000018900907800000000ff010000000000000000000000000001fc0100"/94], 0x0) recvfrom(r10, &(0x7f0000000a40)=""/4096, 0x1000, 0x40002123, 0x0, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x80010, r8, 0xd993000) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES8=r0, @ANYRES32=r11, @ANYBLOB="0000000000000000b70500000800000085000000690000009500000000000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000600)='ext4_es_lookup_extent_exit\x00', r12}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 31.103906059s ago: executing program 1: sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4001, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000488c) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x24) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x400000000000003, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_sa2={0x2, 0x13, 0x1}]}, 0x60}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x100}, 0x0) close(r0) 31.053462706s ago: executing program 2: r0 = socket(0x10, 0x80002, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$caif_stream(0x25, 0x1, 0x0) getsockopt$bt_BT_VOICE(r1, 0x112, 0x10, &(0x7f00000001c0), &(0x7f0000000200)=0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b40)=ANY=[@ANYRES8=r1, @ANYBLOB="9516a348340d668c7dfa2927396cd41000643555c409aa296f06ad58e8065b289073aa9c62cea86c12f5a8054a33bd7d2d8edc346be048be0589a68f0580c738fc71e7f1b04a1350aeac5c464e8e048f994ab9b62de9ad17d46bb2a3ef939f2b78490bdb561224318993b38e936c8bcf276b61c4af30473151f56149b4b3d7c4753502298f1f3fda236b530480d15f5d4161540ad1bb005910b9d0d1f2edf63cc1a5d04b8b83451398f3fd1b60bc500e98e11ee78e2b21874665f1a0b97c4e", @ANYRES32=0x0, @ANYRES16=r1, @ANYRESOCT=r1], 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x4040010) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000070000100010000000000000007160000", @ANYRES32=r5, @ANYBLOB="0c00018008000100000004000c0001"], 0x30}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x30}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000b00)={'vxcan1\x00'}) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r7, 0x29, 0x46, &(0x7f0000000000)=0x10001, 0x4) sendmmsg$inet6(r7, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x5, 0xfffc, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, r2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000010000000000000100000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/1752], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000080)={0xfff}) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) sendmsg$inet(r9, &(0x7f0000000ac0)={&(0x7f0000000940)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000000a80)=[{&(0x7f0000000980)="462bdc693833d02b144dc4015e", 0xd}, {&(0x7f0000000a40)="3711", 0x2}], 0x2}, 0x40000d0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) 30.155115015s ago: executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002c40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a09040000000000000000020000000900020073797a32000000000900010073797a30000000002c00048028000180080001006e6174001c000280080002400008000208000340000000160800014000"], 0x80}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket(0x1000000010, 0x80002, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) getsockname(r2, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth0_to_team\x00'}) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0x13) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@deltfilter={0x4c, 0x2c, 0x1, 0x2, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x10}, {0x0, 0xffe0}, {0x0, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x5}, @TCA_FLOWER_KEY_IP_TTL={0x5, 0x4b, 0x4}, @TCA_FLOWER_KEY_UDP_DST_MASK={0x6}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r5, 0x1, 0x0, 0x0, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}}, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x9}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}}, 0x0) 30.026360052s ago: executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000006c0)={'ip6tnl0\x00', &(0x7f0000000680)=@ethtool_pauseparam={0x13}}) socket$alg(0x26, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000002000000000000000100000400000000000000000300000000000000000000000000000d00000000000000000000000402000000000089628629a3f5a223081240aeaa2d0394d6ce0b89868118ea66e24c5d5ee9823f39658ebfbbc42ef3aaaf0333f4c1ccbdcd777aaf9445135b078f353d24b7c07595e471430243875b46dce3fb28e0a81927e4d4346b8246a0069f2b4d12518f48ad33012171827b22c6aa971ff41e310e8a1032611bef1c78bc6f3a70e9d2bc486407465483a7f8eae73e8e45e0b6d667977ad9a404485a95a79ae833c40897dafb112fc23b0d69b6a8f0f182dbe7409e803040b18e84f11b2aecb52ad38708d40199808ac7d12f47e1817edb16fbaa7a6185ad300aa0a924a78c2e87e07ed1e7aba976938ae53bd966e597313fb0352a5f2bc8e7c9b5fccf9a270dce98384973b23f33b7f4de0d80d01c49e3d59a1791ebb78d591078d61b677e55f1978316a09df5f2997e591f678cfb5d83ee8f7fb03fb414cefd7c8369786c6cb1956f22f0b110b627b03ed4d2d9c2c9330e7624b30a90dc7647c17cb8edafd97e15b7f70415062ece8603b08b"], 0x0, 0x4a}, 0x20) bind$alg(0xffffffffffffffff, &(0x7f00000023c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="dcd782262a53e4f73e9c76716082eab41500000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000000)={r1}, 0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000540)={{{@in, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@mcast2}}, 0xe8) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r7, 0x325, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) sendmsg$can_raw(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x20008000) read$alg(r3, &(0x7f0000000080)=""/16, 0x10) recvmmsg(r3, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x6c, 0x2, 0x6, 0x201, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0xfffffffffffffe1c, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x20}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0) 1.174777423s ago: executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r2 = socket(0x0, 0x0, 0x4) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newqdisc={0x70, 0x14, 0xf0b, 0x0, 0x0, {0x2}, [@TCA_STAB={0x4c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0xc, 0x40, 0x10}}, {0x4}}]}]}, 0x70}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f00000000c0), &(0x7f0000000240)=r1}, 0x20) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000380)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000900)={'wlan1\x00'}) socket$inet6(0xa, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) pipe(0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2f, 0xffffffd4, 0x2, 0x0, 0x20}}, &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x0, 0x300) 1.005781921s ago: executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socket(0x0, 0x3, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r8, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500040000001400040073"], 0x58}}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params, @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x24}}, 0x0) sendfile(r2, r1, 0x0, 0x100004002) 0s ago: executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x0, 0x4}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], 0x0}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x54}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e14000200080007004a9a0000080027"], 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100677265746170000014000280080004000104000005000a000100000008000a00", @ANYRES32=r5], 0x4c}}, 0x0) kernel console output (not intermixed with test programs): T62] tipc: Subscription rejected, illegal request [ 113.520504][ T6394] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 113.531536][ T6394] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 113.539994][ T6394] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 113.548449][ T6394] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 113.560391][ T6394] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.670312][ T6395] batadv_slave_1: entered promiscuous mode [ 113.845700][ T6390] batadv_slave_1: left promiscuous mode [ 114.185330][ T6414] __nla_validate_parse: 3 callbacks suppressed [ 114.185351][ T6414] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.1'. [ 114.669388][ T6439] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 114.867459][ T6451] netlink: 288 bytes leftover after parsing attributes in process `syz-executor.3'. [ 114.893845][ T6448] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 114.910114][ T6448] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 114.955409][ T6453] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 115.012487][ T6453] netlink: 'syz-executor.1': attribute type 39 has an invalid length. [ 115.040875][ T6457] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 115.106167][ T6460] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 115.146926][ T6460] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 115.175041][ T6454] lo speed is unknown, defaulting to 1000 [ 115.201888][ T6466] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 115.242904][ T6466] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.0'. [ 115.729081][ T6487] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 115.806425][ T6489] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 115.957998][ T6496] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.980134][ T6496] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.021624][ T6496] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.053096][ T6496] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.176466][ T6496] team0: Port device batadv0 removed [ 116.191229][ T6508] IPVS: set_ctl: invalid protocol: 47 10.1.1.0:20000 [ 116.230645][ T6511] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 116.248138][ T6511] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 116.276621][ T6511] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 116.293463][ T6511] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 116.306635][ T6511] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.416825][ T6511] batadv_slave_1: entered promiscuous mode [ 116.418433][ T6517] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 116.799640][ T6509] batadv_slave_1: left promiscuous mode [ 117.137531][ T6541] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 117.959319][ T6586] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 118.454559][ T6611] lo speed is unknown, defaulting to 1000 [ 118.722934][ T6629] Bluetooth: MGMT ver 1.22 [ 118.742393][ T6629] Bluetooth: hci3: invalid length 0, exp 2 for type 10 [ 118.950278][ T6637] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.976641][ T6637] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.016955][ T6637] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 119.037049][ T6637] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 119.235358][ T6648] __nla_validate_parse: 11 callbacks suppressed [ 119.235384][ T6648] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 119.265617][ T6652] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2 [ 119.330013][ T6648] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 119.425050][ T29] audit: type=1800 audit(1718326728.481:6): pid=6661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="blkio.throttle.io_service_bytes_recursive" dev="sda1" ino=1957 res=0 errno=0 [ 120.166961][ T6698] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 120.229400][ T6701] netlink: 'syz-executor.3': attribute type 8 has an invalid length. [ 120.648944][ T6723] IPv6: sit1: Disabled Multicast RS [ 120.695544][ T6727] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 121.385476][ T6773] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 121.398233][ T6773] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 121.629401][ T6784] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 121.804805][ T6792] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 122.117179][ T6813] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 122.207380][ T6802] 8021q: adding VLAN 0 to HW filter on device bond1 [ 122.219308][ T6802] bond0: (slave bond1): Enslaving as an active interface with an up link [ 122.308121][ T6824] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 122.386026][ T6828] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 122.404211][ T6828] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 122.520151][ T6834] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 122.557672][ T6841] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.749083][ T6851] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 0, id = 0 [ 122.756971][ T6850] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.2'. [ 122.773475][ T6850] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 123.094098][ T6872] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 123.506321][ T6897] netlink: 'syz-executor.3': attribute type 39 has an invalid length. [ 123.634665][ T6902] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 123.898608][ T29] audit: type=1804 audit(1718326732.961:7): pid=6909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2579540603/syzkaller.HjUNfi/121/cgroup.controllers" dev="sda1" ino=1963 res=1 errno=0 [ 124.068445][ T29] audit: type=1804 audit(1718326733.131:8): pid=6919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir245540754/syzkaller.NOeWt7/107/cgroup.controllers" dev="sda1" ino=1965 res=1 errno=0 [ 124.187336][ T6924] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 124.253904][ T6928] __nla_validate_parse: 29 callbacks suppressed [ 124.253928][ T6928] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 124.275791][ T6928] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 124.364087][ T6933] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 124.384048][ T6933] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 124.533593][ T6938] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 124.542352][ T6938] netlink: 113592 bytes leftover after parsing attributes in process `syz-executor.3'. [ 124.651171][ T6947] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 124.738266][ T29] audit: type=1800 audit(1718326733.801:9): pid=6952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1953 res=0 errno=0 [ 124.815964][ T29] audit: type=1804 audit(1718326733.801:10): pid=6952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir2934187465/syzkaller.2tAGVN/116/memory.events" dev="sda1" ino=1953 res=1 errno=0 [ 124.884231][ T29] audit: type=1804 audit(1718326733.801:11): pid=6952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir2934187465/syzkaller.2tAGVN/116/memory.events" dev="sda1" ino=1953 res=1 errno=0 [ 124.913858][ T29] audit: type=1804 audit(1718326733.801:12): pid=6952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir2934187465/syzkaller.2tAGVN/116/memory.events" dev="sda1" ino=1953 res=1 errno=0 [ 124.978294][ T29] audit: type=1804 audit(1718326733.871:13): pid=6956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir2934187465/syzkaller.2tAGVN/116/memory.events" dev="sda1" ino=1953 res=1 errno=0 [ 125.059469][ T29] audit: type=1804 audit(1718326733.871:14): pid=6956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir2934187465/syzkaller.2tAGVN/116/memory.events" dev="sda1" ino=1953 res=1 errno=0 [ 125.155885][ T6970] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 125.176510][ T6970] netlink: 113592 bytes leftover after parsing attributes in process `syz-executor.1'. [ 125.620244][ T6993] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 125.697783][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 125.704862][ C1] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 125.711675][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 125.718254][ C1] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 125.725026][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 125.731631][ C1] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 125.738442][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 125.745060][ C1] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 125.751850][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 125.758420][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 125.766567][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 125.774557][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 125.782743][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 125.790919][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 125.799610][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 125.807613][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 125.817337][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 125.825429][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 125.833686][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 125.841765][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 125.849936][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 125.858257][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 125.866606][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 125.874597][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 125.882747][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 125.890743][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 125.900730][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 125.908966][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 125.917158][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 125.925151][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 125.933260][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 125.941248][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 125.949350][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 125.957428][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 125.965654][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 125.973722][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 125.981820][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 125.989833][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 125.997915][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 126.005911][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 126.014011][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 126.022001][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 126.030185][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 126.038245][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 126.046378][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 126.054381][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 126.062597][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 126.070583][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 126.078658][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 126.086644][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 126.095168][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 126.103231][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 126.111689][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 126.119754][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 126.127977][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 126.135994][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 126.144120][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 126.152096][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 126.160219][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 126.168168][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 126.176879][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 126.184896][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 126.193000][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 126.201171][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 126.209301][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 126.217299][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 126.225404][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 126.233418][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 126.242052][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 126.250473][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 126.258541][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 126.266551][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 126.274661][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 126.282729][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 126.292169][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 126.300954][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 126.310656][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 126.318860][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 126.327443][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 126.335534][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 126.343658][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 126.351649][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 126.359854][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 126.368251][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 126.376377][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 126.384381][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 126.392528][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 126.400831][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 126.900630][ T7028] vlan2: entered promiscuous mode [ 126.978553][ T7034] delete_channel: no stack [ 127.049428][ T7032] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 127.152559][ T7045] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 127.224286][ T7045] batadv_slave_0: entered allmulticast mode [ 127.451027][ T7050] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 127.458075][ T7050] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 127.628044][ T7069] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 127.660534][ T7071] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 127.735304][ T7069] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 127.931745][ T7084] bond2: entered promiscuous mode [ 127.968698][ T7093] bridge1: entered promiscuous mode [ 127.975704][ T7093] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 127.985045][ T7094] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 128.048680][ T7084] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 128.093238][ T7084] bridge1: left promiscuous mode [ 128.110788][ T29] audit: type=1804 audit(1718326737.181:15): pid=7096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2934187465/syzkaller.2tAGVN/129/cgroup.controllers" dev="sda1" ino=1965 res=1 errno=0 [ 128.125774][ T7084] bond2 (unregistering): Released all slaves [ 128.428908][ T7104] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 128.435801][ T7104] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 129.299669][ T7159] __nla_validate_parse: 4 callbacks suppressed [ 129.299691][ T7159] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.2'. [ 129.372705][ T7159] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.2'. [ 129.387005][ T7165] team_slave_0: entered promiscuous mode [ 129.393001][ T7165] team_slave_1: entered promiscuous mode [ 129.415852][ T7165] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 129.442093][ T7165] team_slave_0: left promiscuous mode [ 129.447717][ T7165] team_slave_1: left promiscuous mode [ 129.517929][ T7175] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.3'. [ 129.543145][ T7175] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'. [ 129.554759][ T7178] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 129.658939][ T7178] bond2: entered promiscuous mode [ 129.704109][ T7187] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.2'. [ 129.777193][ T7178] bridge2: entered promiscuous mode [ 129.805433][ T7178] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 129.847827][ T7184] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 129.886087][ T7184] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 129.912592][ T7184] bridge2: left promiscuous mode [ 129.931062][ T7184] bond2 (unregistering): Released all slaves [ 129.992701][ T7204] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 130.091845][ T7207] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 130.126437][ T7208] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 130.163741][ T7208] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 130.543822][ T7239] IPVS: sync thread started: state = MASTER, mcast_ifn = bond_slave_1, syncid = 0, id = 0 [ 130.766587][ T7250] x_tables: duplicate underflow at hook 2 [ 131.130348][ T7271] pimreg12: entered allmulticast mode [ 131.205599][ T7281] No such timeout policy "syz0" [ 131.793347][ T7261] pimreg12: left allmulticast mode [ 132.177756][ T7332] trusted_key: syz-executor.4 sent an empty control message without MSG_MORE. [ 132.246018][ T7332] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 132.305324][ T7332] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 132.422398][ T7348] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 133.154043][ T7392] netlink: set zone limit has 8 unknown bytes [ 133.234842][ T7398] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 133.296380][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.405953][ T7404] xt_NFQUEUE: number of total queues is 0 [ 133.620336][ T7421] TCP: request_sock_TCP: Possible SYN flooding on port 172.20.20.170:20002. Sending cookies. [ 133.780758][ T7432] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 134.343116][ T7461] Cannot find del_set index 2048 as target [ 134.676890][ T7475] __nla_validate_parse: 11 callbacks suppressed [ 134.676913][ T7475] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 134.729295][ T7475] block nbd0: not configured, cannot reconfigure [ 134.839749][ T29] audit: type=1804 audit(1718326743.901:16): pid=7469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2579540603/syzkaller.HjUNfi/151/cgroup.controllers" dev="sda1" ino=1957 res=1 errno=0 [ 135.470676][ T7515] syz-executor.0[7515] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 135.470947][ T7515] syz-executor.0[7515] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 135.703944][ T7530] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 135.745018][ T7531] raw_sendmsg: syz-executor.0 forgot to set AF_INET. Fix it! [ 136.073531][ T7551] siw: device registration error -23 [ 136.099427][ T7551] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 136.129207][ T7551] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.1'. [ 136.372584][ T7573] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. acpid: malformed netlink msg, length -185768320 [ 136.701416][ T7592] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 137.176525][ T7625] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 137.226123][ T7629] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 137.373718][ T7633] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 137.398158][ T7633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.419381][ T7633] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 137.441327][ T7637] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 137.474434][ T7637] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 137.497250][ T7633] netem: change failed [ 137.546784][ T7645] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 137.576876][ T7645] netlink: 'syz-executor.0': attribute type 13 has an invalid length. [ 137.615355][ T7645] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.624710][ T7645] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.633908][ T7645] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.643163][ T7645] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.657581][ T7645] vxlan0: entered promiscuous mode [ 137.718014][ T7645] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 138.289530][ T7685] netlink: 'syz-executor.4': attribute type 9 has an invalid length. [ 138.299595][ T7685] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 138.308401][ T7685] netlink: 'syz-executor.4': attribute type 8 has an invalid length. [ 138.631576][ T7707] xt_l2tp: missing protocol rule (udp|l2tpip) [ 138.921577][ T7724] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 138.996828][ T29] audit: type=1804 audit(1718326748.051:17): pid=7722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir234868946/syzkaller.KKKbnw/144/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 139.036501][ T7722] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 139.734649][ T7762] __nla_validate_parse: 13 callbacks suppressed [ 139.734669][ T7762] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 139.889063][ T7767] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 140.101684][ T7776] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 140.344482][ T7780] netlink: 'syz-executor.2': attribute type 16 has an invalid length. [ 140.614573][ T7790] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 140.867407][ T7799] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 141.019372][ T7804] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 141.154032][ T7806] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 141.201128][ T5124] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 141.212083][ T5124] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 141.223620][ T5124] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 141.234678][ T5124] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 141.250745][ T5124] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 141.263164][ T5124] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 141.376192][ T7809] lo speed is unknown, defaulting to 1000 [ 141.460618][ T5128] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 141.472795][ T5128] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 141.481647][ T5128] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 141.492114][ T5128] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 141.500183][ T5128] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 141.511365][ T5128] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 141.635483][ T7819] lo speed is unknown, defaulting to 1000 [ 141.937071][ T7809] chnl_net:caif_netlink_parms(): no params data found [ 142.098395][ T7832] netlink: 'syz-executor.2': attribute type 16 has an invalid length. [ 142.211468][ T7809] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.222920][ T7809] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.230829][ T7809] bridge_slave_0: entered allmulticast mode [ 142.248978][ T7809] bridge_slave_0: entered promiscuous mode [ 142.285395][ T7809] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.321976][ T7809] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.341197][ T7809] bridge_slave_1: entered allmulticast mode [ 142.360414][ T7844] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 142.363414][ T7809] bridge_slave_1: entered promiscuous mode [ 142.463074][ T7809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.498799][ T7809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.547871][ T7819] chnl_net:caif_netlink_parms(): no params data found [ 142.554812][ T7851] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 142.614227][ T7809] team0: Port device team_slave_0 added [ 142.635208][ T7809] team0: Port device team_slave_1 added [ 142.652791][ T7857] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 142.697300][ T7858] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 142.767410][ T7809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 142.778616][ T7809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.807620][ T7809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.838694][ T7809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.854824][ T7809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.919959][ T7809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.021690][ T7819] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.033597][ T7819] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.041739][ T7819] bridge_slave_0: entered allmulticast mode [ 143.049032][ T7819] bridge_slave_0: entered promiscuous mode [ 143.059550][ T7819] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.066986][ T7819] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.074428][ T7819] bridge_slave_1: entered allmulticast mode [ 143.084328][ T7819] bridge_slave_1: entered promiscuous mode [ 143.162769][ T7819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.177967][ T7809] hsr_slave_0: entered promiscuous mode [ 143.190528][ T7809] hsr_slave_1: entered promiscuous mode [ 143.196808][ T7809] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 143.204913][ T7809] Cannot create hsr debugfs directory [ 143.219735][ T7819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.308562][ T7819] team0: Port device team_slave_0 added [ 143.331578][ T7819] team0: Port device team_slave_1 added [ 143.370575][ T5124] Bluetooth: hci1: command tx timeout [ 143.428544][ T7819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.435900][ T7819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.463217][ T7819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.475460][ T7872] netlink: 'syz-executor.4': attribute type 16 has an invalid length. [ 143.517470][ T7819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.536376][ T5124] Bluetooth: hci4: command tx timeout [ 143.543449][ T7819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.580682][ T7819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.712252][ T7819] hsr_slave_0: entered promiscuous mode [ 143.719517][ T7819] hsr_slave_1: entered promiscuous mode [ 143.731686][ T7819] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 143.749585][ T7819] Cannot create hsr debugfs directory [ 143.801594][ T7874] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.4'. [ 143.959310][ T7883] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 144.040613][ T7809] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 144.087638][ T7809] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.387154][ T7809] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 144.398232][ T7809] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.509718][ T7809] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 144.534141][ T7809] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.651298][ T7809] bond0: (slave netdevsim0): Releasing backup interface [ 144.666519][ T7809] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 144.685911][ T7809] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.753189][ T7901] __nla_validate_parse: 4 callbacks suppressed [ 144.753210][ T7901] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 144.999532][ T7819] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 145.053200][ T7819] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.158821][ T7919] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 145.173171][ T7819] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 145.183625][ T7819] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.334911][ T7819] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 145.371696][ T7819] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.429013][ T7924] sctp: [Deprecated]: syz-executor.4 (pid 7924) Use of struct sctp_assoc_value in delayed_ack socket option. [ 145.429013][ T7924] Use struct sctp_sack_info instead [ 145.460978][ T5124] Bluetooth: hci1: command tx timeout [ 145.506203][ T7819] bond0: (slave netdevsim0): Releasing backup interface [ 145.547171][ T7819] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 145.587063][ T7819] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.616002][ T5128] Bluetooth: hci4: command tx timeout [ 145.618614][ T7932] veth0_to_team: entered promiscuous mode [ 145.637356][ T7932] batadv_slave_0: entered promiscuous mode [ 145.657886][ T7935] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 145.722761][ T7938] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 145.832309][ T7809] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 145.861642][ T7809] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 145.881678][ T7809] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 145.902473][ T7809] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 146.088046][ T7819] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 146.137826][ T7819] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 146.177187][ T7819] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 146.205121][ T7819] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 146.233652][ T7957] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 146.453168][ T7809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.560474][ T7809] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.613263][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.620539][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.676246][ T7968] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 146.696784][ T7819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.738183][ T7671] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.745462][ T7671] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.819557][ T7819] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.849015][ T7973] syz-executor.4 (7973) used greatest stack depth: 18352 bytes left [ 146.902719][ T7671] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.910015][ T7671] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.929188][ T7671] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.936801][ T7671] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.183094][ T7988] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 147.384583][ T7996] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 147.532642][ T5128] Bluetooth: hci1: command tx timeout [ 147.597998][ T7809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.692978][ T5128] Bluetooth: hci4: command tx timeout [ 147.735251][ T7809] veth0_vlan: entered promiscuous mode [ 147.772794][ T7819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.856107][ T7809] veth1_vlan: entered promiscuous mode [ 147.906628][ T8016] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 148.128017][ T7819] veth0_vlan: entered promiscuous mode [ 148.158303][ T7809] veth0_macvtap: entered promiscuous mode [ 148.207667][ T7809] veth1_macvtap: entered promiscuous mode [ 148.253089][ T7819] veth1_vlan: entered promiscuous mode [ 148.372654][ T8034] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 148.387602][ T7809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.412425][ T7809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.429695][ T7809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.437300][ T8036] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 148.440672][ T7809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.464836][ T7809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.475662][ T7809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.495337][ T7809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.542615][ T7809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.563688][ T7809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.590064][ T7809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.625708][ T7809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.646978][ T7809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.665317][ T8041] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 148.677544][ T7809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.693324][ T7809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.704354][ T7809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.718951][ T7809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.756529][ T7819] veth0_macvtap: entered promiscuous mode [ 148.795982][ T7809] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.807537][ T7809] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.829530][ T7809] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.848647][ T7809] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.864423][ T7819] veth1_macvtap: entered promiscuous mode [ 148.999264][ T7819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.017697][ T7819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.030900][ T7819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.042372][ T7819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.055226][ T7819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.069907][ T7819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.090299][ T7819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.101460][ T7819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.114777][ T7819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.195390][ T7819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.208083][ T7819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.231034][ T7819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.246538][ T7819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.257112][ T7819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.268343][ T7819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.279690][ T7819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.302770][ T7819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.313208][ T7819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.330471][ T7819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.344107][ T7819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.366114][ T7819] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.404629][ T7819] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.413799][ T7819] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.432189][ T7819] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.460498][ T5526] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.490046][ T5526] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.607024][ T5506] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.611627][ T5128] Bluetooth: hci1: command tx timeout [ 149.640110][ T5506] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.770272][ T5128] Bluetooth: hci4: command tx timeout [ 149.782964][ T1099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.793689][ T8070] __nla_validate_parse: 1 callbacks suppressed [ 149.793708][ T8070] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 149.827892][ T1099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.879370][ T29] audit: type=1804 audit(1718326758.941:18): pid=8073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir4004220394/syzkaller.9a4FJF/0/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 149.967817][ T8073] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 149.987084][ T5530] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.011411][ T5530] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.082506][ T8082] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 150.559023][ T8100] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 150.710280][ T8103] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 151.026947][ T8122] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 151.223021][ T8132] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 151.343005][ T8137] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 151.363279][ T29] audit: type=1804 audit(1718326760.421:19): pid=8134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir4004220394/syzkaller.9a4FJF/4/cgroup.controllers" dev="sda1" ino=1946 res=1 errno=0 [ 151.369412][ T8134] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 151.422164][ T8141] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 151.856310][ T8161] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 152.029567][ T8169] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 152.193342][ T29] audit: type=1804 audit(1718326761.261:20): pid=8175 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir245540754/syzkaller.NOeWt7/200/cgroup.controllers" dev="sda1" ino=1943 res=1 errno=0 [ 152.212289][ T8175] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 152.594326][ T8199] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 153.382882][ T8227] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 153.620250][ T8235] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 153.691701][ T8240] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 153.815614][ T29] audit: type=1804 audit(1718326762.881:21): pid=8243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir4004220394/syzkaller.9a4FJF/15/cgroup.controllers" dev="sda1" ino=1958 res=1 errno=0 [ 153.888974][ T8239] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 154.232194][ T8259] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 154.861714][ T29] audit: type=1804 audit(1718326763.931:22): pid=8283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1220442332/syzkaller.Sc8nY5/12/cgroup.controllers" dev="sda1" ino=1961 res=1 errno=0 [ 154.952975][ T8279] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 155.048310][ T8295] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 155.633217][ T29] audit: type=1804 audit(1718326764.701:23): pid=8324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2579540603/syzkaller.HjUNfi/223/cgroup.controllers" dev="sda1" ino=1962 res=1 errno=0 [ 155.692516][ T8332] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 155.699431][ T8324] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 156.030481][ T8345] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 156.488549][ T29] audit: type=1804 audit(1718326765.551:24): pid=8371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1220442332/syzkaller.Sc8nY5/20/cgroup.controllers" dev="sda1" ino=1965 res=1 errno=0 [ 156.530416][ T8371] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 156.614145][ T8377] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.0'. [ 156.715314][ T29] audit: type=1804 audit(1718326765.781:25): pid=8377 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir4004220394/syzkaller.9a4FJF/27/cgroup.controllers" dev="sda1" ino=1952 res=1 errno=0 [ 157.081811][ T8391] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 157.302387][ T8396] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 157.319650][ T8399] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 157.718184][ T5124] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 157.732971][ T5124] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 157.741962][ T5124] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 157.753499][ T5124] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 157.764897][ T5124] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 157.776381][ T5124] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 157.830941][ T29] audit: type=1804 audit(1718326766.901:26): pid=8410 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2696304503/syzkaller.LWo58a/221/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 157.853341][ T8410] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 157.942223][ T2410] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.987004][ T8419] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 158.101204][ T2410] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.114339][ T8426] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 158.131196][ T8408] lo speed is unknown, defaulting to 1000 [ 158.204578][ T2410] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.290385][ T8428] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 158.356943][ T2410] bond0: (slave netdevsim0): Releasing backup interface [ 158.379553][ T2410] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.555293][ T8437] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 158.635070][ T2410] bridge_slave_1: left allmulticast mode [ 158.651024][ T2410] bridge_slave_1: left promiscuous mode [ 158.658710][ T2410] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.674624][ T2410] bridge_slave_0: left allmulticast mode [ 158.681513][ T2410] bridge_slave_0: left promiscuous mode [ 158.687327][ T2410] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.280965][ T29] audit: type=1804 audit(1718326768.331:27): pid=8454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2579540603/syzkaller.HjUNfi/232/cgroup.controllers" dev="sda1" ino=1961 res=1 errno=0 [ 159.282584][ T8453] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 159.593400][ T2410] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 159.609125][ T2410] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 159.624843][ T2410] bond0 (unregistering): (slave bond1): Releasing backup interface [ 159.634525][ T2410] bond0 (unregistering): Released all slaves [ 159.756973][ T2410] bond1 (unregistering): Released all slaves [ 159.776920][ T2410] bond2 (unregistering): Released all slaves [ 159.850154][ T5124] Bluetooth: hci0: command tx timeout [ 160.005166][ T8462] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 160.019681][ T8465] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 160.029102][ T2410] tipc: Left network mode [ 160.141070][ T2410] IPVS: stopping backup sync thread 6293 ... [ 160.382795][ T8408] chnl_net:caif_netlink_parms(): no params data found [ 160.644526][ T8492] openvswitch: netlink: nsh attr 2048 is out of range max 3 [ 160.729372][ T8499] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 160.781980][ T8499] 8021q: adding VLAN 0 to HW filter on device bond1 [ 160.942014][ T8502] bond1: (slave bridge1): Enslaving as a backup interface with an up link [ 160.956443][ T8504] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 160.976811][ T8408] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.997064][ T8408] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.011573][ T1099] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 161.017932][ T8408] bridge_slave_0: entered allmulticast mode [ 161.111704][ T8408] bridge_slave_0: entered promiscuous mode [ 161.160557][ T5511] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 161.233485][ T8408] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.249208][ T8408] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.290418][ T8408] bridge_slave_1: entered allmulticast mode [ 161.329671][ T8408] bridge_slave_1: entered promiscuous mode [ 161.345699][ T8509] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 161.514918][ T8518] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 161.549254][ T2410] hsr_slave_0: left promiscuous mode [ 161.570559][ T2410] hsr_slave_1: left promiscuous mode [ 161.603144][ T2410] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.618561][ T2410] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.645014][ T2410] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.661133][ T2410] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.729390][ T2410] veth1_macvtap: left promiscuous mode [ 161.743122][ T2410] veth0_macvtap: left promiscuous mode [ 161.753217][ T2410] veth1_vlan: left promiscuous mode [ 161.930070][ T5124] Bluetooth: hci0: command tx timeout [ 162.396701][ T2410] team0 (unregistering): Port device team_slave_1 removed [ 162.460824][ T8538] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 162.499450][ T2410] team0 (unregistering): Port device team_slave_0 removed [ 163.039277][ T8408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.059208][ T8408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.222354][ T8408] team0: Port device team_slave_0 added [ 163.237560][ T8548] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 163.274656][ T8408] team0: Port device team_slave_1 added [ 163.414420][ T8408] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.430049][ T8408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.484347][ T8408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.525096][ T8408] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.549866][ T8408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.638617][ T8408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.776891][ T8561] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.1'. [ 163.804530][ T8408] hsr_slave_0: entered promiscuous mode [ 163.818958][ T8408] hsr_slave_1: entered promiscuous mode [ 163.826560][ T8408] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 163.840085][ T8408] Cannot create hsr debugfs directory [ 163.941270][ T8577] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 164.010526][ T5124] Bluetooth: hci0: command tx timeout [ 164.161823][ T8583] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 164.489464][ T8596] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 164.538901][ T8596] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 164.550182][ T8596] netlink: 'syz-executor.1': attribute type 17 has an invalid length. [ 164.746948][ T8408] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 164.776591][ T8607] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 164.787005][ T8408] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 164.806765][ T8408] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 164.823666][ T8408] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 164.945598][ T8614] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 165.079436][ T8408] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.136986][ T8408] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.156550][ T7671] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.163820][ T7671] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.213574][ T7672] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.221092][ T7672] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.645213][ T8408] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.091487][ T5124] Bluetooth: hci0: command tx timeout [ 166.355044][ T8678] __nla_validate_parse: 2 callbacks suppressed [ 166.355067][ T8678] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.3'. [ 166.436348][ T8408] veth0_vlan: entered promiscuous mode [ 166.495297][ T8683] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 166.526829][ T8408] veth1_vlan: entered promiscuous mode [ 166.694564][ T8408] veth0_macvtap: entered promiscuous mode [ 166.706401][ T8688] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 166.724084][ T8408] veth1_macvtap: entered promiscuous mode [ 166.751005][ T8690] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 166.807458][ T8408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.832682][ T8408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.858254][ T8408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.879090][ T8408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.894890][ T8408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.910942][ T8408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.931295][ T8408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.959867][ T8408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.988999][ T8408] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.019561][ T8408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.071418][ T8408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.096719][ T8408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.119951][ T8408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.138660][ T8408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.159075][ T8408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.194723][ T8408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.206366][ T8408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.225887][ T8408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.261236][ T8408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.320768][ T8408] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.363380][ T8408] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.382879][ T8408] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.395431][ T8714] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 167.406504][ T8408] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.421357][ T8408] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.661924][ T1099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.682251][ T1099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.708203][ T8726] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 167.797468][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.815745][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.144270][ T8752] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 168.334414][ T8765] dccp_xmit_packet: Payload too large (65475) for featneg. [ 168.353835][ T8767] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 168.366598][ T8765] dccp_close: ABORT with 65475 bytes unread [ 168.851096][ T8786] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 168.983690][ T8791] FAULT_INJECTION: forcing a failure. [ 168.983690][ T8791] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 169.030092][ T8791] CPU: 1 PID: 8791 Comm: syz-executor.0 Not tainted 6.10.0-rc2-syzkaller-00761-g3ec8d7572a69 #0 [ 169.040597][ T8791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 169.050793][ T8791] Call Trace: [ 169.054132][ T8791] [ 169.057103][ T8791] dump_stack_lvl+0x241/0x360 [ 169.061854][ T8791] ? __pfx_dump_stack_lvl+0x10/0x10 [ 169.067094][ T8791] ? __pfx__printk+0x10/0x10 [ 169.071743][ T8791] ? __pfx_lock_release+0x10/0x10 [ 169.076837][ T8791] should_fail_ex+0x3b0/0x4e0 [ 169.081580][ T8791] _copy_from_iter+0x1f6/0x1960 [ 169.086482][ T8791] ? __virt_addr_valid+0x183/0x520 [ 169.091650][ T8791] ? __pfx_lock_release+0x10/0x10 [ 169.096730][ T8791] ? __alloc_skb+0x28f/0x440 [ 169.101371][ T8791] ? __pfx__copy_from_iter+0x10/0x10 [ 169.106697][ T8791] ? __virt_addr_valid+0x183/0x520 [ 169.111848][ T8791] ? __virt_addr_valid+0x183/0x520 [ 169.117009][ T8791] ? __virt_addr_valid+0x44e/0x520 [ 169.122173][ T8791] ? __check_object_size+0x49c/0x900 [ 169.127496][ T8791] netlink_sendmsg+0x743/0xcb0 [ 169.132324][ T8791] ? __pfx_netlink_sendmsg+0x10/0x10 [ 169.137671][ T8791] ? aa_sock_msg_perm+0x91/0x160 [ 169.142660][ T8791] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 169.148000][ T8791] ? security_socket_sendmsg+0x87/0xb0 [ 169.153513][ T8791] ? __pfx_netlink_sendmsg+0x10/0x10 [ 169.158820][ T8791] __sock_sendmsg+0x221/0x270 [ 169.163518][ T8791] sock_write_iter+0x2dd/0x400 [ 169.168388][ T8791] ? __pfx_sock_write_iter+0x10/0x10 [ 169.173790][ T8791] ? bpf_lsm_file_permission+0x9/0x10 [ 169.179346][ T8791] ? security_file_permission+0x7f/0xa0 [ 169.184911][ T8791] vfs_write+0xa72/0xc90 [ 169.189172][ T8791] ? __pfx_sock_write_iter+0x10/0x10 [ 169.194485][ T8791] ? __pfx_vfs_write+0x10/0x10 [ 169.199553][ T8791] ksys_write+0x1a0/0x2c0 [ 169.203929][ T8791] ? __pfx_ksys_write+0x10/0x10 [ 169.208818][ T8791] ? do_syscall_64+0x100/0x230 [ 169.213595][ T8791] ? do_syscall_64+0xb6/0x230 [ 169.218282][ T8791] do_syscall_64+0xf3/0x230 [ 169.222801][ T8791] ? clear_bhb_loop+0x35/0x90 [ 169.227495][ T8791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.233415][ T8791] RIP: 0033:0x7f0bb6e7cea9 [ 169.237847][ T8791] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 169.257729][ T8791] RSP: 002b:00007f0bb7c1a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 169.266172][ T8791] RAX: ffffffffffffffda RBX: 00007f0bb6fb3f80 RCX: 00007f0bb6e7cea9 [ 169.274172][ T8791] RDX: 0000000000000024 RSI: 0000000020000000 RDI: 0000000000000003 [ 169.282185][ T8791] RBP: 00007f0bb7c1a120 R08: 0000000000000000 R09: 0000000000000000 [ 169.290172][ T8791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.298195][ T8791] R13: 000000000000000b R14: 00007f0bb6fb3f80 R15: 00007ffc66b393d8 [ 169.306461][ T8791] [ 169.351434][ T8800] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 169.424303][ T8805] delete_channel: no stack [ 169.492390][ T8808] TCP: TCP_TX_DELAY enabled [ 170.145359][ T5128] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 170.155508][ T5128] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 170.164554][ T5128] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 170.174200][ T5128] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 170.184217][ T5128] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 170.195770][ T5128] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 170.367667][ T8829] lo speed is unknown, defaulting to 1000 [ 170.688154][ T8848] netem: incorrect gi model size [ 170.701179][ T8848] netem: change failed [ 170.965964][ T8861] veth0_to_team: entered promiscuous mode [ 170.975968][ T8861] batadv_slave_0: entered promiscuous mode [ 170.983714][ T8861] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 170.993998][ T8861] Cannot create hsr debugfs directory [ 171.181948][ T8829] chnl_net:caif_netlink_parms(): no params data found [ 171.392149][ T8829] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.408009][ T8829] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.428497][ T8829] bridge_slave_0: entered allmulticast mode [ 171.437934][ T8829] bridge_slave_0: entered promiscuous mode [ 171.472984][ T8829] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.497516][ T8829] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.514054][ T8829] bridge_slave_1: entered allmulticast mode [ 171.527921][ T8829] bridge_slave_1: entered promiscuous mode [ 171.614951][ T8829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.639586][ T8829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.766617][ T8829] team0: Port device team_slave_0 added [ 171.799108][ T8829] team0: Port device team_slave_1 added [ 171.830157][ T8897] __nla_validate_parse: 2 callbacks suppressed [ 171.830178][ T8897] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 171.906186][ T8829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.927494][ T8829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.002425][ T8829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.034144][ T8829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.041860][ T8829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.090692][ T8829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.127663][ T8901] veth0_to_team: entered promiscuous mode [ 172.142931][ T8901] batadv_slave_0: entered promiscuous mode [ 172.159939][ T8901] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 172.180270][ T8901] Cannot create hsr debugfs directory [ 172.251813][ T5124] Bluetooth: hci3: command tx timeout [ 172.302651][ T8907] dccp_close: ABORT with 60 bytes unread [ 172.399972][ T8829] hsr_slave_0: entered promiscuous mode [ 172.407028][ T8829] hsr_slave_1: entered promiscuous mode [ 172.414279][ T8829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 172.422504][ T8829] Cannot create hsr debugfs directory [ 172.873801][ T8829] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.942167][ T8940] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 173.049293][ T8829] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.144664][ T8829] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.273189][ T8829] bond0: (slave netdevsim0): Releasing backup interface [ 173.296344][ T8829] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.569153][ T8829] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 173.624352][ T8829] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 173.671125][ T8829] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 173.736679][ T8829] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 173.777402][ T8972] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 173.784412][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 173.789954][ T8969] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 173.962336][ T8976] lo speed is unknown, defaulting to 1000 [ 174.200345][ T8829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.208850][ T8987] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.1'. [ 174.278579][ T8829] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.330701][ T7671] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.337924][ T7671] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.340686][ T5124] Bluetooth: hci3: command tx timeout [ 174.384791][ T7671] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.392062][ T7671] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.568816][ T8829] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 175.186227][ T8829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.523668][ T8829] veth0_vlan: entered promiscuous mode [ 175.549929][ T9013] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 175.572885][ T9013] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 175.598942][ T8829] veth1_vlan: entered promiscuous mode [ 175.611854][ T9013] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 175.650568][ T9013] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 175.666984][ T9016] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 175.677818][ T9013] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 175.736084][ T8829] veth0_macvtap: entered promiscuous mode [ 175.783902][ T8829] veth1_macvtap: entered promiscuous mode [ 175.936128][ T8829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.996867][ T8829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.015642][ T8829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.031370][ T8829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.042134][ T8829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.057925][ T8829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.076338][ T8829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.108407][ T8829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.129697][ T8829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.149828][ T8829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.166409][ T8829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.203823][ T9025] veth0_to_team: entered promiscuous mode [ 176.222305][ T9025] batadv_slave_0: entered promiscuous mode [ 176.239469][ T9025] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 176.247939][ T9025] Cannot create hsr debugfs directory [ 176.254632][ T9025] hsr1: entered allmulticast mode [ 176.262087][ T9025] veth0_to_team: entered allmulticast mode [ 176.268295][ T9025] batadv_slave_0: entered allmulticast mode [ 176.280036][ T9027] dccp_close: ABORT with 32 bytes unread [ 176.303793][ T8829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.326160][ T8829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.350115][ T8829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.374394][ T8829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.394217][ T8829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.412005][ T5124] Bluetooth: hci3: command tx timeout [ 176.429738][ T8829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.460051][ T8829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.478680][ T8829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.489166][ T8829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.501932][ T8829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.512435][ T8829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.523379][ T8829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.535932][ T8829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.596043][ T8829] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.614777][ T8829] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.632423][ T8829] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.648075][ T8829] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.884644][ T1099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.913891][ T1099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.974050][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.008962][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.098316][ T9064] __nla_validate_parse: 30 callbacks suppressed [ 177.098338][ T9064] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 177.726197][ T9098] hsr0: entered promiscuous mode [ 177.845140][ T9106] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 177.895661][ T9107] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 177.917914][ T9098] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. [ 178.187217][ T9119] dccp_invalid_packet: invalid packet type [ 178.194512][ T9120] veth0_to_team: entered promiscuous mode [ 178.217369][ T9120] batadv_slave_0: entered promiscuous mode [ 178.223926][ T29] audit: type=1800 audit(1718326787.281:28): pid=9119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1964 res=0 errno=0 [ 178.246188][ T9120] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 178.262732][ T9120] Cannot create hsr debugfs directory [ 178.275339][ T9120] hsr1: entered allmulticast mode [ 178.286196][ T9120] veth0_to_team: entered allmulticast mode [ 178.288347][ T29] audit: type=1800 audit(1718326787.331:29): pid=9119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1964 res=0 errno=0 [ 178.296657][ T9120] batadv_slave_0: entered allmulticast mode [ 178.343115][ T9122] bond_slave_0: entered promiscuous mode [ 178.349260][ T9122] bond_slave_1: entered promiscuous mode [ 178.382656][ T9121] bond_slave_0: left promiscuous mode [ 178.388571][ T9121] bond_slave_1: left promiscuous mode [ 178.491328][ T5124] Bluetooth: hci3: command tx timeout [ 178.557802][ T9136] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 178.935100][ T9153] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 179.202872][ T9163] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 179.460354][ T9168] hsr0: entered promiscuous mode [ 179.603762][ T9179] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 179.674437][ T9182] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.1'. [ 179.731162][ T9184] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 180.311309][ T9208] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 180.511457][ T9218] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 180.727631][ T9226] veth0_to_team: entered promiscuous mode [ 180.736034][ T9226] batadv_slave_0: entered promiscuous mode [ 180.743662][ T9226] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 180.765706][ T9226] Cannot create hsr debugfs directory [ 180.781654][ T9226] hsr1: entered allmulticast mode [ 180.794033][ T9226] veth0_to_team: entered allmulticast mode [ 180.810981][ T9226] batadv_slave_0: entered allmulticast mode [ 181.091462][ T9247] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 182.408590][ T9308] hsr0: entered promiscuous mode [ 182.527095][ T9310] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 182.621886][ T9308] __nla_validate_parse: 3 callbacks suppressed [ 182.621907][ T9308] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.3'. [ 182.812195][ T9320] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 183.411814][ T9352] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 183.488711][ T9355] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 183.503276][ T9355] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 183.515493][ T9355] netlink: 112860 bytes leftover after parsing attributes in process `syz-executor.2'. [ 183.579025][ T9355] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.2'. [ 184.232530][ T9387] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 184.283061][ T9389] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.3'. [ 184.309914][ T9389] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 184.324809][ T9389] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 184.850779][ T9420] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 185.008202][ T9425] lo speed is unknown, defaulting to 1000 [ 185.759489][ T9456] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 185.811229][ T9454] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 185.950171][ T9453] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.141422][ T9453] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.183243][ T9471] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 186.256960][ T9453] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.487668][ T9453] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.815122][ T9453] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.848568][ T9453] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.907755][ T9453] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.935289][ T9453] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.970530][ T9495] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 187.730832][ T9530] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 187.771978][ T9534] __nla_validate_parse: 1 callbacks suppressed [ 187.771999][ T9534] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 188.086030][ T9549] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 188.133875][ T9549] vlan2: entered promiscuous mode [ 188.154304][ T9549] ip6gretap0: entered promiscuous mode [ 188.382454][ T9562] netlink: 'syz-executor.2': attribute type 6 has an invalid length. [ 188.390997][ T9562] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 188.518994][ T9567] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 188.560744][ T9564] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 188.871782][ T9581] netlink: 207496 bytes leftover after parsing attributes in process `syz-executor.4'. [ 189.197749][ T9596] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 189.361707][ T9601] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 189.604855][ T9621] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 189.687690][ T9627] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 189.788099][ T9629] bond2: (slave vcan0): The slave device specified does not support setting the MAC address [ 189.812696][ T9629] bond2: (slave vcan0): Setting fail_over_mac to active for active-backup mode [ 189.848566][ T9629] bond2: (slave vcan0): making interface the new active one [ 189.883778][ T9629] bond2: (slave vcan0): Enslaving as an active interface with an up link [ 189.958518][ T9642] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 190.146474][ T9650] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 190.370783][ T9668] set match dimension is over the limit! [ 190.423702][ T9669] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 190.712310][ T9695] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 190.938260][ T9710] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 190.958603][ T9710] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.0'. [ 191.492850][ T51] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.513396][ T9737] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 191.574600][ T9736] pimreg: entered allmulticast mode [ 191.765687][ T51] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.019077][ T51] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.192859][ T51] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.411992][ T5128] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 192.421868][ T5128] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 192.435275][ T5128] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 192.447135][ T5128] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 192.510347][ T5128] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 192.517989][ T5128] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 192.613045][ T51] bridge_slave_1: left allmulticast mode [ 192.618761][ T51] bridge_slave_1: left promiscuous mode [ 192.632829][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.660950][ T51] bridge_slave_0: left allmulticast mode [ 192.677162][ T51] bridge_slave_0: left promiscuous mode [ 192.690909][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.754850][ T5124] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 193.755421][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.773748][ T5124] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 193.783560][ T5124] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 193.795859][ T5124] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 193.804154][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.813878][ T5124] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 193.821474][ T5124] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 193.840780][ T51] bond0 (unregistering): Released all slaves [ 194.027251][ T9769] lo speed is unknown, defaulting to 1000 [ 194.250648][ T9820] __nla_validate_parse: 1 callbacks suppressed [ 194.250670][ T9820] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 194.526520][ T9813] lo speed is unknown, defaulting to 1000 [ 194.572174][ T5124] Bluetooth: hci3: command tx timeout [ 194.736493][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.278712][ T9769] chnl_net:caif_netlink_parms(): no params data found [ 195.371732][ T51] veth0_to_team: left promiscuous mode [ 195.398960][ T5128] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 195.413718][ T5128] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 195.421008][ T51] batadv_slave_0: left promiscuous mode [ 195.426938][ T5128] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 195.436264][ T5128] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 195.444435][ T5128] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 195.452351][ T5128] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 195.459597][ T51] hsr_slave_0: left promiscuous mode [ 195.472635][ T51] hsr_slave_1: left promiscuous mode [ 195.488620][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.497256][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.507248][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.516697][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.544640][ T51] veth1_macvtap: left promiscuous mode [ 195.550798][ T51] veth0_macvtap: left promiscuous mode [ 195.556575][ T51] veth1_vlan: left promiscuous mode [ 195.562515][ T51] veth0_vlan: left promiscuous mode [ 195.856483][ T5128] Bluetooth: hci1: command tx timeout [ 195.984543][ T9860] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 195.993444][ T9860] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.4'. [ 196.287970][ T51] team0 (unregistering): Port device team_slave_1 removed [ 196.346422][ T51] team0 (unregistering): Port device team_slave_0 removed [ 196.651358][ T5128] Bluetooth: hci3: command tx timeout [ 196.996003][ T9866] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 197.056831][ T9852] lo speed is unknown, defaulting to 1000 [ 197.201950][ T9769] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.209257][ T9769] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.242405][ T9769] bridge_slave_0: entered allmulticast mode [ 197.257360][ T9769] bridge_slave_0: entered promiscuous mode [ 197.352033][ T9769] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.380365][ T9769] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.387723][ T9769] bridge_slave_1: entered allmulticast mode [ 197.413315][ T9769] bridge_slave_1: entered promiscuous mode [ 197.533988][ T9769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.543634][ T5128] Bluetooth: hci2: command tx timeout [ 197.575027][ T9769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.648125][ T9813] chnl_net:caif_netlink_parms(): no params data found [ 197.695950][ T9769] team0: Port device team_slave_0 added [ 197.733538][ T9769] team0: Port device team_slave_1 added [ 197.928141][ T9769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.936158][ T5128] Bluetooth: hci1: command tx timeout [ 197.948951][ T9769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.978355][ T9769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.032220][ T9769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.039365][ T9769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.066416][ T9769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.160780][ T9813] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.179688][ T9813] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.195626][ T9813] bridge_slave_0: entered allmulticast mode [ 198.209711][ T9813] bridge_slave_0: entered promiscuous mode [ 198.286780][ T9813] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.297903][ T9813] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.300500][ T9908] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 198.315020][ T9813] bridge_slave_1: entered allmulticast mode [ 198.322798][ T9813] bridge_slave_1: entered promiscuous mode [ 198.403166][ T9769] hsr_slave_0: entered promiscuous mode [ 198.418280][ T9769] hsr_slave_1: entered promiscuous mode [ 198.426746][ T9769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 198.449913][ T9769] Cannot create hsr debugfs directory [ 198.560869][ T51] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.622752][ T9919] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 198.634186][ T9813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.647642][ T9813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.661445][ T9919] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.4'. [ 198.671816][ T9919] NCSI netlink: No device for ifindex 0 [ 198.730421][ T5124] Bluetooth: hci3: command tx timeout [ 198.773489][ T51] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.882493][ T9813] team0: Port device team_slave_0 added [ 198.906374][ T9813] team0: Port device team_slave_1 added [ 198.934369][ T51] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.093417][ T9813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.119149][ T9813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.124172][ T9940] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 199.158629][ T9813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.175801][ T9852] chnl_net:caif_netlink_parms(): no params data found [ 199.214937][ T51] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.267529][ T9813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.276260][ T9813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.349886][ T9813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.610224][ T5124] Bluetooth: hci2: command tx timeout [ 199.623959][ T9813] hsr_slave_0: entered promiscuous mode [ 199.634055][ T9813] hsr_slave_1: entered promiscuous mode [ 199.641955][ T9813] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 199.649577][ T9813] Cannot create hsr debugfs directory [ 199.684457][ T9852] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.693587][ T9852] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.702262][ T9852] bridge_slave_0: entered allmulticast mode [ 199.719199][ T9852] bridge_slave_0: entered promiscuous mode [ 199.775305][ T9852] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.790497][ T9852] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.797907][ T9852] bridge_slave_1: entered allmulticast mode [ 199.814473][ T9852] bridge_slave_1: entered promiscuous mode [ 199.974531][ T9852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.010023][ T5124] Bluetooth: hci1: command tx timeout [ 200.021584][ T9852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.092299][ T51] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.213933][ T51] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.237674][ T9852] team0: Port device team_slave_0 added [ 200.319284][ T9852] team0: Port device team_slave_1 added [ 200.413889][ T51] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.512779][ T51] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.545796][ T9852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.562438][ T9852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.594408][ T9852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.668972][ T9852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.687198][ T9852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.725600][ T9852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.811922][ T5124] Bluetooth: hci3: command tx timeout [ 200.851230][ T9975] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 200.881563][ T9852] hsr_slave_0: entered promiscuous mode [ 200.888696][ T9852] hsr_slave_1: entered promiscuous mode [ 200.895829][ T9852] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 200.903699][ T9852] Cannot create hsr debugfs directory [ 201.137683][ T51] bridge_slave_1: left allmulticast mode [ 201.145358][ T51] bridge_slave_1: left promiscuous mode [ 201.174400][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.195403][ T51] bridge_slave_0: left allmulticast mode [ 201.201399][ T51] bridge_slave_0: left promiscuous mode [ 201.207221][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.225697][ T51] bridge_slave_1: left allmulticast mode [ 201.234279][ T51] bridge_slave_1: left promiscuous mode [ 201.240444][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.254495][ T51] bridge_slave_0: left allmulticast mode [ 201.266758][ T51] bridge_slave_0: left promiscuous mode [ 201.272755][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.505285][ T51] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 201.514008][ T51] ip6gretap1 (unregistering): left promiscuous mode [ 201.526412][ T51] ip6gretap1 (unregistering): left allmulticast mode [ 201.690136][ T5124] Bluetooth: hci2: command tx timeout [ 201.819382][ T51] dvmrp0 (unregistering): left allmulticast mode [ 201.981577][ T51] bond1 (unregistering): (slave bridge1): Removing an active aggregator [ 201.991223][ T51] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 202.090280][ T5124] Bluetooth: hci1: command tx timeout [ 202.208352][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 202.227570][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 202.238825][ T51] bond0 (unregistering): Released all slaves [ 202.369337][ T51] bond1 (unregistering): Released all slaves [ 202.389649][ T51] bond2 (unregistering): Released all slaves [ 202.531698][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 202.552521][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 202.567759][ T51] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 202.581554][ T51] bond0 (unregistering): Released all slaves [ 202.698582][ T51] bond1 (unregistering): Released all slaves [ 202.717166][ T51] bond2 (unregistering): (slave vcan0): Releasing backup interface [ 202.727515][ T51] bond2 (unregistering): Released all slaves [ 203.102769][ T51] IPVS: stopping master sync thread 7239 ... [ 203.198773][ T9813] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 203.210016][ T9813] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 203.224554][ T9813] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 203.281067][ T9813] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 203.485573][T10009] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 203.567790][ T9769] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 203.594911][ T9769] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 203.634835][ T9769] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 203.716972][ T9769] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 203.770188][ T5124] Bluetooth: hci2: command tx timeout [ 204.123212][ T9813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.362368][ T9852] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 204.384919][ T51] veth0_to_team: left promiscuous mode [ 204.403439][ T51] batadv_slave_0: left promiscuous mode [ 204.441040][ T51] hsr_slave_0: left promiscuous mode [ 204.447352][ T51] hsr_slave_1: left promiscuous mode [ 204.456695][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.464792][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.475918][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.484124][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.503234][ T51] veth0_to_team: left promiscuous mode [ 204.514619][ T51] batadv_slave_0: left promiscuous mode [ 204.527533][ T51] hsr_slave_0: left promiscuous mode [ 204.535145][ T51] hsr_slave_1: left promiscuous mode [ 204.541700][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.549223][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.557449][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.565048][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.611592][ T51] veth1_macvtap: left promiscuous mode [ 204.617196][ T51] veth0_macvtap: left promiscuous mode [ 204.624894][ T51] veth1_vlan: left promiscuous mode [ 204.631521][ T51] veth0_vlan: left promiscuous mode [ 204.638119][ T51] veth1_macvtap: left promiscuous mode [ 204.644772][ T51] veth0_macvtap: left promiscuous mode [ 204.659598][ T51] veth1_vlan: left promiscuous mode [ 204.665100][ T51] veth0_vlan: left promiscuous mode [ 205.031085][ T51] pimreg (unregistering): left allmulticast mode [ 205.761792][ T51] team0 (unregistering): Port device team_slave_1 removed [ 205.815421][ T51] team0 (unregistering): Port device team_slave_0 removed [ 206.717731][ T51] batadv_slave_0 (unregistering): left allmulticast mode [ 206.768041][ T51] team0 (unregistering): Port device team_slave_1 removed [ 206.830579][ T51] team0 (unregistering): Port device team_slave_0 removed [ 207.379594][ T9852] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 207.424715][ T9813] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.451087][ T9852] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 207.467284][T10034] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 207.534751][ T5169] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.542078][ T5169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.568183][ T9852] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 207.631665][ T5169] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.638867][ T5169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.690546][ T9769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.855479][T10040] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 207.877351][ T9813] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 207.897042][ T9813] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 207.952012][ T9769] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.087897][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.096156][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.217132][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.224398][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.375914][ T9813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.404233][ T9852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.522293][ T9852] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.586235][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.593561][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.664678][ T7672] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.672057][ T7672] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.725073][ T9813] veth0_vlan: entered promiscuous mode [ 208.804711][ T9813] veth1_vlan: entered promiscuous mode [ 208.884795][ T9769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.903779][ T51] bridge_slave_1: left allmulticast mode [ 208.909600][ T51] bridge_slave_1: left promiscuous mode [ 208.919617][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.944060][ T51] bridge_slave_0: left allmulticast mode [ 208.957202][ T51] bridge_slave_0: left promiscuous mode [ 208.963086][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.457840][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 209.470680][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 209.485161][ T51] bond0 (unregistering): Released all slaves [ 209.611412][ T51] tipc: Disabling bearer [ 209.618560][ T51] tipc: Left network mode [ 209.692485][ T9813] veth0_macvtap: entered promiscuous mode [ 209.755937][ T9813] veth1_macvtap: entered promiscuous mode [ 209.883783][ T9769] veth0_vlan: entered promiscuous mode [ 209.912230][ T9769] veth1_vlan: entered promiscuous mode [ 209.981736][ T9813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.001168][ T9813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.020279][ T9813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.044976][ T9813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.066450][ T9813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.078254][ T9813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.101880][ T9813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.219106][ T9813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.232164][ T9813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.242443][ T9813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.254274][ T9813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.280078][ T9813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.297479][ T9813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.307507][ T9813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.319508][ T9813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.333740][ T9813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.344727][T10080] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 210.393733][ T9813] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.412659][ T9813] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.421890][ T9813] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.438807][ T9813] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.593054][ T9852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.635891][ T9769] veth0_macvtap: entered promiscuous mode [ 210.653292][ T9769] veth1_macvtap: entered promiscuous mode [ 211.067484][ T51] veth0_to_team: left promiscuous mode [ 211.083945][ T51] batadv_slave_0: left promiscuous mode [ 211.104711][ T51] hsr_slave_0: left promiscuous mode [ 211.114398][ T51] hsr_slave_1: left promiscuous mode [ 211.122545][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.132473][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.165673][ T51] veth1_macvtap: left promiscuous mode [ 211.172355][ T51] veth0_macvtap: left promiscuous mode [ 211.179370][ T51] veth1_vlan: left promiscuous mode [ 211.185286][ T51] veth0_vlan: left promiscuous mode [ 211.825759][ T51] team0 (unregistering): Port device team_slave_1 removed [ 211.883577][ T51] team0 (unregistering): Port device team_slave_0 removed [ 212.484420][ T2410] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.502861][ T2410] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.530620][ T9769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.549941][ T9769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.569581][ T9769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.593597][ T9769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.603789][ T9769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.617280][ T9769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.627481][ T9769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.643954][ T9769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.656268][ T9769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.687333][ T9852] veth0_vlan: entered promiscuous mode [ 212.753811][ T9769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.764988][ T9769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.775182][T10115] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 212.784658][ T9769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.795298][ T9769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.805173][ T9769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.818689][ T9769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.829603][ T9769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.840209][ T9769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.857955][ T9769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.871182][ T9852] veth1_vlan: entered promiscuous mode [ 212.915186][ T9769] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.927682][ T9769] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.938525][ T9769] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.947681][ T9769] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.013922][ T5511] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.026849][ T5511] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.102920][ T9852] veth0_macvtap: entered promiscuous mode [ 213.153607][ T9852] veth1_macvtap: entered promiscuous mode [ 213.287356][ T9852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.311787][ T9852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.329643][ T9852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.340919][ T9852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.354525][ T9852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.365822][ T9852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.377338][ T9852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.388602][ T9852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.398772][ T9852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.409364][ T9852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.422339][ T9852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.447374][ T2410] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.489976][ T2410] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.526982][ T9852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.547455][ T9852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.558084][ T9852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.568880][ T9852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.579243][ T9852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.592121][ T9852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.603022][ T9852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.614705][ T9852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.625114][ T9852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.636586][ T9852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.648829][ T9852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.736146][ T9852] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.748374][ T9852] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.763108][ T9852] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.775970][ T9852] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.801355][ T2410] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.810616][ T2410] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.157541][ T51] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.217208][T10133] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 214.251100][T10133] netlink: 'syz-executor.4': attribute type 39 has an invalid length. [ 214.424083][ T51] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.639558][ T51] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.751890][ T5526] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.772840][T10145] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 214.799944][ T5526] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.843463][T10145] dccp_xmit_packet: Payload too large (65475) for featneg. [ 214.869585][ T5128] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 214.886937][ T5128] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 214.887910][T10145] dccp_close: ABORT with 65475 bytes unread [ 214.902623][ T5128] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 214.917851][ T5128] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 214.929106][ T5128] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 214.936763][ T5128] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 214.942145][ T51] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.008522][T10149] bridge0: port 3(team0) entered blocking state [ 215.015558][T10149] bridge0: port 3(team0) entered disabled state [ 215.022622][T10149] team0: entered allmulticast mode [ 215.027803][T10149] team_slave_0: entered allmulticast mode [ 215.035438][T10149] team_slave_1: entered allmulticast mode [ 215.046972][T10149] team0: entered promiscuous mode [ 215.054052][T10149] team_slave_0: entered promiscuous mode [ 215.061532][T10149] team_slave_1: entered promiscuous mode [ 215.070609][T10149] bridge0: port 3(team0) entered blocking state [ 215.079178][T10149] bridge0: port 3(team0) entered forwarding state [ 215.176772][ T1099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.198136][ T1099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.269952][T10146] lo speed is unknown, defaulting to 1000 [ 215.461709][ T5124] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 215.478728][ T5124] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 215.490571][ T5124] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 215.526270][ T5124] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 215.561505][ T5124] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 215.571966][ T5124] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 215.630464][T10163] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 4095 (only 8 groups) [ 216.611567][T10172] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.1'. [ 217.050279][ T5128] Bluetooth: hci1: command tx timeout [ 217.610143][ T5128] Bluetooth: hci3: command tx timeout [ 219.130896][ T5128] Bluetooth: hci1: command tx timeout [ 219.693851][ T5128] Bluetooth: hci3: command tx timeout [ 221.209980][ T5128] Bluetooth: hci1: command tx timeout [ 221.770107][ T5128] Bluetooth: hci3: command tx timeout [ 223.292465][ T5128] Bluetooth: hci1: command tx timeout [ 223.850113][ T5128] Bluetooth: hci3: command tx timeout [ 246.020644][ T5124] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 246.046291][ T5124] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 246.062324][ T5124] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 246.062720][ T53] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 246.080160][ T5124] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 246.087457][ T5124] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 246.099214][ T53] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 246.106776][ T5124] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 246.110758][ T53] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 246.123917][ T53] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 246.133648][ T5128] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 246.149972][ T53] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 246.774597][ T4490] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 246.788855][ T4490] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 246.803234][ T4490] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 246.815015][ T4490] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 246.824504][ T4490] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 246.840375][ T4490] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 248.172255][ T53] Bluetooth: hci5: command tx timeout [ 248.258210][ T53] Bluetooth: hci6: command tx timeout [ 248.891488][ T53] Bluetooth: hci7: command tx timeout [ 250.259976][ T53] Bluetooth: hci5: command tx timeout [ 250.330093][ T53] Bluetooth: hci6: command tx timeout [ 250.970120][ T53] Bluetooth: hci7: command tx timeout [ 252.330593][ T4490] Bluetooth: hci5: command tx timeout [ 252.418160][ T4490] Bluetooth: hci6: command tx timeout [ 253.050371][ T4490] Bluetooth: hci7: command tx timeout [ 254.410037][ T4490] Bluetooth: hci5: command tx timeout [ 254.499892][ T4490] Bluetooth: hci6: command tx timeout [ 255.129974][ T4490] Bluetooth: hci7: command tx timeout [ 256.174017][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 273.610033][ T53] Bluetooth: hci4: command 0x0406 tx timeout [ 280.146076][ T53] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 280.160041][ T53] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 280.173514][ T53] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 280.182232][ T53] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 280.190286][ T53] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 280.201834][ T53] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 280.275895][ T4490] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 280.286142][ T4490] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 280.294807][ T4490] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 280.315572][ T4490] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 280.326460][ T4490] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 280.334220][ T4490] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 282.250318][ T4490] Bluetooth: hci8: command tx timeout [ 282.420064][ T4490] Bluetooth: hci9: command tx timeout [ 283.854946][ T4490] Bluetooth: hci0: command 0x0406 tx timeout [ 284.330375][ T53] Bluetooth: hci8: command tx timeout [ 284.489901][ T53] Bluetooth: hci9: command tx timeout [ 286.410201][ T53] Bluetooth: hci8: command tx timeout [ 286.570010][ T53] Bluetooth: hci9: command tx timeout [ 288.490499][ T53] Bluetooth: hci8: command tx timeout [ 288.649869][ T53] Bluetooth: hci9: command tx timeout [ 311.264645][ T4490] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 311.278112][ T5128] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 311.286506][ T5128] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 311.296607][ T5128] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 311.307656][ T5128] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 311.315442][ T5128] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 311.333252][ T5128] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 311.348920][ T5128] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 311.365072][ T5128] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 311.379398][ T5128] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 311.390067][ T5128] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 311.397714][ T5128] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 311.772779][ T5128] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 311.792106][ T5128] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 311.802462][ T5128] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 311.817916][ T5128] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 311.826031][ T5128] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 311.840410][ T5128] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 313.380038][ T4490] Bluetooth: hci10: command tx timeout [ 313.450429][ T4490] Bluetooth: hci11: command tx timeout [ 313.929984][ T4490] Bluetooth: hci12: command tx timeout [ 315.460027][ T4490] Bluetooth: hci10: command tx timeout [ 315.539918][ T4490] Bluetooth: hci11: command tx timeout [ 316.010115][ T4490] Bluetooth: hci12: command tx timeout [ 317.529991][ T4490] Bluetooth: hci10: command tx timeout [ 317.615580][ T5128] Bluetooth: hci11: command tx timeout [ 317.622270][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.090099][ T5128] Bluetooth: hci12: command tx timeout [ 319.609988][ T5128] Bluetooth: hci10: command tx timeout [ 319.696586][ T5128] Bluetooth: hci11: command tx timeout [ 319.696600][ T53] Bluetooth: hci2: command 0x0406 tx timeout [ 320.170098][ T4490] Bluetooth: hci12: command tx timeout [ 340.175398][ T5124] Bluetooth: hci1: command 0x0406 tx timeout [ 340.175718][ T5128] Bluetooth: hci3: command 0x0406 tx timeout [ 345.421647][ T5124] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 345.428515][ T5128] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 345.438746][ T5124] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 345.447920][ T5124] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 345.448374][ T5128] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 345.465617][ T5124] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 345.473793][ T5128] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 345.480859][ T5124] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 345.481680][ T5124] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 345.496036][ T5124] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 345.505435][ T5124] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 345.520412][ T53] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 347.610282][ T5124] Bluetooth: hci14: command tx timeout [ 347.616740][ T5124] Bluetooth: hci13: command tx timeout [ 349.690155][ T5124] Bluetooth: hci13: command tx timeout [ 349.690196][ T53] Bluetooth: hci14: command tx timeout [ 351.769899][ T5124] Bluetooth: hci14: command tx timeout [ 351.779189][ T53] Bluetooth: hci13: command tx timeout [ 353.850067][ T5124] Bluetooth: hci14: command tx timeout [ 353.855661][ T53] Bluetooth: hci13: command tx timeout [ 370.890300][ T53] Bluetooth: hci7: command 0x0406 tx timeout [ 370.896592][ T53] Bluetooth: hci6: command 0x0406 tx timeout [ 370.900270][ T5125] Bluetooth: hci5: command 0x0406 tx timeout [ 376.427509][ T4490] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 376.438002][ T4490] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 376.449951][ T4490] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 376.460813][ T4490] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 376.474722][ T4490] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 376.484021][ T4490] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 376.532002][ T4490] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 376.542253][ T4490] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 376.551092][ T4490] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 376.571718][ T4490] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 376.589002][ T4490] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 376.600184][ T4490] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 376.989475][ T4490] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 376.999805][ T4490] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 377.008215][ T4490] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 377.019415][ T4490] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 377.030270][ T4490] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 377.037843][ T4490] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 378.570246][ T5124] Bluetooth: hci15: command tx timeout [ 378.650005][ T5124] Bluetooth: hci16: command tx timeout [ 379.055733][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.060003][ T30] INFO: task kworker/u8:3:51 blocked for more than 143 seconds. [ 379.076712][ T30] Not tainted 6.10.0-rc2-syzkaller-00761-g3ec8d7572a69 #0 [ 379.084527][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 379.101509][ T30] task:kworker/u8:3 state:D stack:22960 pid:51 tgid:51 ppid:2 flags:0x00004000 2024/06/14 01:03:08 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 379.149733][ T30] Workqueue: netns cleanup_net [ 379.154611][ T30] Call Trace: [ 379.157912][ T30] [ 379.161489][ T5124] Bluetooth: hci17: command tx timeout [ 379.170673][ T30] __schedule+0x17e8/0x4a20 [ 379.175269][ T30] ? __pfx___schedule+0x10/0x10 [ 379.180303][ T30] ? __pfx_lock_release+0x10/0x10 [ 379.189763][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 379.195304][ T30] ? kthread_data+0x52/0xd0 [ 379.201016][ T30] ? schedule+0x90/0x320 [ 379.205336][ T30] ? wq_worker_sleeping+0x66/0x240 [ 379.210720][ T30] ? schedule+0x90/0x320 [ 379.215098][ T30] schedule+0x14b/0x320 [ 379.220124][ T30] schedule_preempt_disabled+0x13/0x30 [ 379.225640][ T30] __mutex_lock+0x6a4/0xd70 [ 379.231395][ T30] ? __mutex_lock+0x527/0xd70 [ 379.236128][ T30] ? nsim_create+0x408/0x890 [ 379.240795][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 379.245862][ T30] ? kmemdup_noprof+0x45/0x60 [ 379.250661][ T30] ? nsim_udp_tunnels_info_create+0x592/0x7c0 [ 379.256774][ T30] nsim_create+0x408/0x890 [ 379.261353][ T30] ? debugfs_create_symlink+0x191/0x1f0 [ 379.266943][ T30] __nsim_dev_port_add+0x6c0/0xae0 [ 379.272173][ T30] ? queue_delayed_work_on+0x1eb/0x390 [ 379.277692][ T30] ? __pfx___nsim_dev_port_add+0x10/0x10 [ 379.283431][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 379.289285][ T30] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 379.295337][ T30] ? nsim_dev_hwstats_init+0x3c2/0x3d0 [ 379.300925][ T30] nsim_dev_reload_up+0x69b/0x8e0 [ 379.306007][ T30] ? __pfx_nsim_dev_reload_up+0x10/0x10 [ 379.312861][ T30] devlink_reload+0x478/0x870 [ 379.317588][ T30] ? __pfx_devlink_reload+0x10/0x10 [ 379.323682][ T30] devlink_pernet_pre_exit+0x1f3/0x440 [ 379.329216][ T30] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 379.335470][ T30] ? class_remove_file_ns+0x121/0x160 [ 379.342081][ T30] cleanup_net+0x615/0xcc0 [ 379.346568][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 379.351863][ T30] ? process_scheduled_works+0x945/0x1830 [ 379.357623][ T30] process_scheduled_works+0xa2c/0x1830 [ 379.363371][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 379.369394][ T30] ? assign_work+0x364/0x3d0 [ 379.379774][ T30] worker_thread+0x86d/0xd70 [ 379.384447][ T30] ? __kthread_parkme+0x169/0x1d0 [ 379.389532][ T30] ? __pfx_worker_thread+0x10/0x10 [ 379.398569][ T30] kthread+0x2f0/0x390 [ 379.405062][ T30] ? __pfx_worker_thread+0x10/0x10 [ 379.410385][ T30] ? __pfx_kthread+0x10/0x10 [ 379.415021][ T30] ret_from_fork+0x4b/0x80 [ 379.419475][ T30] ? __pfx_kthread+0x10/0x10 [ 379.426010][ T30] ret_from_fork_asm+0x1a/0x30 [ 379.431471][ T30] [ 379.434727][ T30] INFO: task kworker/u8:7:2410 blocked for more than 143 seconds. [ 379.442963][ T30] Not tainted 6.10.0-rc2-syzkaller-00761-g3ec8d7572a69 #0 [ 379.452348][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 379.462615][ T30] task:kworker/u8:7 state:D stack:21328 pid:2410 tgid:2410 ppid:2 flags:0x00004000 [ 379.479761][ T30] Workqueue: ipv6_addrconf addrconf_dad_work [ 379.485839][ T30] Call Trace: [ 379.489141][ T30] [ 379.509886][ T30] __schedule+0x17e8/0x4a20 [ 379.514514][ T30] ? __pfx___schedule+0x10/0x10 [ 379.519496][ T30] ? __pfx_lock_release+0x10/0x10 [ 379.549913][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 379.555459][ T30] ? kthread_data+0x52/0xd0 [ 379.569807][ T30] ? schedule+0x90/0x320 [ 379.574130][ T30] ? wq_worker_sleeping+0x66/0x240 [ 379.579268][ T30] ? schedule+0x90/0x320 [ 379.599785][ T30] schedule+0x14b/0x320 [ 379.604026][ T30] schedule_preempt_disabled+0x13/0x30 [ 379.609525][ T30] __mutex_lock+0x6a4/0xd70 [ 379.629749][ T30] ? mark_lock+0x9a/0x350 [ 379.634185][ T30] ? __mutex_lock+0x527/0xd70 [ 379.638907][ T30] ? addrconf_dad_work+0xd0/0x16f0 [ 379.659764][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 379.664898][ T30] addrconf_dad_work+0xd0/0x16f0 [ 379.679774][ T30] ? __pfx_addrconf_dad_work+0x10/0x10 [ 379.685315][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 379.709829][ T30] ? process_scheduled_works+0x945/0x1830 [ 379.715798][ T30] process_scheduled_works+0xa2c/0x1830 [ 379.729759][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 379.735826][ T30] ? assign_work+0x364/0x3d0 [ 379.750929][ T30] worker_thread+0x86d/0xd70 [ 379.755626][ T30] ? __kthread_parkme+0x169/0x1d0 [ 379.780900][ T30] ? __pfx_worker_thread+0x10/0x10 [ 379.786105][ T30] kthread+0x2f0/0x390 [ 379.790275][ T30] ? __pfx_worker_thread+0x10/0x10 [ 379.795429][ T30] ? __pfx_kthread+0x10/0x10 [ 379.809760][ T30] ret_from_fork+0x4b/0x80 [ 379.814301][ T30] ? __pfx_kthread+0x10/0x10 [ 379.818926][ T30] ret_from_fork_asm+0x1a/0x30 [ 379.839794][ T30] [ 379.850019][ T30] INFO: task syz-executor.0:10146 blocked for more than 144 seconds. [ 379.858183][ T30] Not tainted 6.10.0-rc2-syzkaller-00761-g3ec8d7572a69 #0 [ 379.879763][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 379.888506][ T30] task:syz-executor.0 state:D stack:23952 pid:10146 tgid:10146 ppid:1 flags:0x00004006 [ 379.919753][ T30] Call Trace: [ 379.923115][ T30] [ 379.926090][ T30] __schedule+0x17e8/0x4a20 [ 379.937309][ T30] ? __pfx___s